last executing test programs: 6m34.104100644s ago: executing program 1 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$unix(0x1, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a010200ffffff9e000000020000090900010073797a300000000080000000160a030000000000000000000200000a540003800800014000000000400003801400010073797a6b616c6c6572310000000000001400010069703667726574617030000000000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a3000000000140000001100010000000000000000000300000a6926fc481278e39eaae7779f97b5ef8a3bba0da1a66697d06717964bf4850a69f41c27db4834febf6804dd9616db"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) 6m32.426212413s ago: executing program 1 (id=557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000100001000000004800000000000b000a48000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f040009800800034000000080"], 0x70}}, 0x20050800) 6m32.313587719s ago: executing program 1 (id=560): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x8510}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 6m32.056189718s ago: executing program 1 (id=561): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r2) pipe2$watch_queue(&(0x7f0000000580), 0x80) chdir(&(0x7f0000000280)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) msync(&(0x7f000002d000/0x4000)=nil, 0x4000, 0x6) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x7283, r3, &(0x7f00000000c0)="c8fad49ee02bd5f6d3e1a8f4acfdb101677651e2328afab0376a50a33fc13dba2f7fe19fd297c43323432213", 0x2c, 0x2, 0x0, 0x3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xace3, r0, &(0x7f0000000340)="0d87d3d57f0f18402dc76ec4015291990f9c7d11f283fde88052b1e6a3d33736f8e18184f9ecad281ce2921625c4df9398f70ce1976c66817192ba7cb4eaffea5e1945ebc2c996265bf23060fa06985a352b82265870890a5def8810f41ec25fea0fde1a111bac58d2cf6d01", 0x6c, 0x8000000000000001}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x8, r1, &(0x7f0000000440)="31fb94c75aa8c5c1427343f60ce564d9a7d1be0f6678ee8de07a98901332045b66c9b33b3d157ea5399606cddda001873a71d50786f5c59fd1ee069598c13385a86d452e572786f1cb91f559c287998811a060f997a74c14aa2fb1a7", 0x5c, 0x9b, 0x0, 0x2}]) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0xee01, &(0x7f00000003c0)={0x9, 0x5, 0x1000, 0x472, 0x8000000000000000, 0xfffffffffffffffc, 0x23, 0x2, 0xfeff}) syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6m30.872501681s ago: executing program 1 (id=566): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) fsopen(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x442, 0x1ff) mknod$loop(0x0, 0x0, 0x1) rename(0x0, 0x0) timerfd_create(0x9, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6m25.266623697s ago: executing program 1 (id=581): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="48010000100001000000000000000000ff0200000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x148}}, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000017c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x76, 0x0, 0x0) r2 = socket$inet6(0xa, 0xa, 0x108000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x1, "6705f8a090b30f40032abcd30cfaa74ed04eafba2a466ae693f6e48e9ae4bba7", 0x32314d54}) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x80) r6 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x0, 0x0, 0x0, 0x8, 0x36, &(0x7f0000000000)=""/54, 0x41000, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240), 0x10, 0x5}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000004d00)=@newqdisc={0x148, 0x24, 0xf0b, 0x1000000, 0x1, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xa}, {0x0, 0xc}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x29, 0x3, 0x488f, 0x14, 0x1e, 0x7, 0x2}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20008801}, 0x48044) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={0x0, r3, 0x4000, r4}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x404c054) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000040)={0xfb7f, 0x0, &(0x7f0000000000/0x3000)=nil}) r8 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x101100) ioctl$CEC_ADAP_G_PHYS_ADDR(r8, 0x80026101, &(0x7f0000000240)) 6m25.091710467s ago: executing program 32 (id=581): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="48010000100001000000000000000000ff0200000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x148}}, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000017c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x76, 0x0, 0x0) r2 = socket$inet6(0xa, 0xa, 0x108000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x1, "6705f8a090b30f40032abcd30cfaa74ed04eafba2a466ae693f6e48e9ae4bba7", 0x32314d54}) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x80) r6 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x0, 0x0, 0x0, 0x8, 0x36, &(0x7f0000000000)=""/54, 0x41000, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240), 0x10, 0x5}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000004d00)=@newqdisc={0x148, 0x24, 0xf0b, 0x1000000, 0x1, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xa}, {0x0, 0xc}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x29, 0x3, 0x488f, 0x14, 0x1e, 0x7, 0x2}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20008801}, 0x48044) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={0x0, r3, 0x4000, r4}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x404c054) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000040)={0xfb7f, 0x0, &(0x7f0000000000/0x3000)=nil}) r8 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x101100) ioctl$CEC_ADAP_G_PHYS_ADDR(r8, 0x80026101, &(0x7f0000000240)) 4m40.602053134s ago: executing program 3 (id=960): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) 4m40.4155231s ago: executing program 3 (id=962): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000009c0)={'dt2814\x00', [0xb000, 0x5, 0xb4, 0x2, 0x88d7, 0x8f, 0x1006, 0x8010, 0x1002, 0xffffffff, 0x200, 0x7, 0x1000000c, 0x4, 0x5, 0x1, 0x4, 0x3, 0x9, 0x8e, 0x108, 0x6, 0x7, 0xa, 0x5, 0x7fff, 0xb0c4, 0xa, 0x8, 0x400002]}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x6667b9fa4a4ed82, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000bc0)={0x964, 0x0, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0xff}, 0x1, 0x9, 0x100, 0x5, 0x1b, 'syz0\x00', "fe7b5528b7ab8b61e5dc9a266f3b345888ea97eb0a64da551f5875859abee132", "ec55ddcdd7c50647b6b453b9a77f7a76959c618303be227634233d98e8a77e78", [{0x3, 0x4, {0x2, 0x7ff}}, {0x5, 0x0, {0x0, 0xfffffff7}}, {0x1000, 0x76, {0x1, 0x3}}, {0x7c7, 0x9, {0x2, 0x83de}}, {0x7fff, 0x0, {0x2}}, {0x2a71, 0x4ce2, {0x2, 0x1}}, {0x7, 0x3, {0x0, 0xfffffff8}}, {0xfe12, 0xf}, {0x0, 0xfff9, {0x1, 0x4}}, {0x4, 0x0, {0x1, 0x100}}, {0x2, 0x1d4c, {0x1}}, {0x1000, 0xfff, {0x3, 0x62bdfda8}}, {0x8001, 0x3b7a, {0x1, 0x4}}, {0x9, 0x9, {0x0, 0x5}}, {0x4, 0x1, {0x0, 0x5}}, {0x8, 0x6, {0x0, 0x2}}, {0x4, 0x7, {0x0, 0x6}}, {0x4, 0x8, {0x0, 0x401}}, {0xffff, 0x3, {0x3, 0x9}}, {0x8, 0x7, {0x0, 0x7}}, {0x6a42, 0x6}, {0x0, 0x9, {0x0, 0x8}}, {0x1, 0x5, {0x3, 0x8000}}, {0x7, 0x5, {0x2, 0xfa1}}, {0xdb8, 0x6, {0x2, 0x7}}, {0x6, 0x0, {0x2, 0xfff}}, {0x3, 0xd54, {0x3, 0x401}}, {0x9, 0x6, {0x3, 0x6}}, {0xbde2, 0x8, {0x3, 0x5d46}}, {0x1, 0x6, {0x2, 0x5710}}, {0x6, 0x0, {0x2, 0x9}}, {0xb6c, 0x5, {0x3, 0x6}}, {0xd75b, 0x4, {0x2, 0x40}}, {0x3, 0x8, {0x2, 0x2}}, {0x0, 0x2, {0x0, 0x7}}, {0x0, 0xff, {0x0, 0x593}}, {0x5, 0x2, {0x0, 0xb652}}, {0x0, 0x9, {0x3, 0x9be5}}, {0x0, 0x7, {0x0, 0x8}}, {0x5, 0x8, {0x0, 0x728822b2}}]}}}, {{0x254, 0x1, {{0x1, 0x104}, 0x9, 0x1, 0xc, 0x2, 0x14, 'syz1\x00', "0ae8d9d6b468998ff4b23ef2bdbf422625ed82883a4018fa65ad9061a83a7db4", "cbc8a9870043e40452dd571df1464b39c5d4d9fd6cce1c3e21c59277abde4f9b", [{0x6, 0x1, {0x0, 0x3}}, {0x1, 0x2, {0x2, 0xff}}, {0x9, 0x8, {0x3, 0x8}}, {0x810, 0x3, {0x1, 0xfffffff5}}, {0x6, 0x1, {0x3, 0xffffffff}}, {0xf, 0xa7, {0x2, 0x4}}, {0x7f, 0x0, {0x0, 0x5}}, {0x3, 0x127}, {0x63a7, 0x8b, {0x0, 0xea7}}, {0x2d, 0x4, {0x0, 0xfffff6f7}}, {0x8, 0x22, {0x3}}, {0x8, 0xc}, {0x4b2, 0x6, {0x2}}, {0x1000, 0x401, {0x1, 0x2}}, {0x1, 0x0, {0x3, 0x4}}, {0x2, 0x0, {0x66cef903f40d0e52, 0x8}}, {0x8, 0x100, {0x3, 0x8}}, {0x6, 0x0, {0x2, 0x1}}, {0x7, 0x4, {0x3, 0x5}}, {0x0, 0x8, {0x1, 0x7}}, {0x4, 0x401, {0x3, 0xff}}, {0xfff, 0xe, {0x0, 0x1}}, {0x1ff, 0x2, {0x1, 0xfffffffa}}, {0x8, 0xb, {0x1, 0xa}}, {0x2, 0xa, {0x3, 0x80000000}}, {0x1, 0x3, {0x3, 0x7fff}}, {0x2, 0x8, {0x0, 0x80}}, {0x800, 0x9, {0x0, 0xfffffff7}}, {0xfff, 0x6, {0x1}}, {0x1000, 0xea2c, {0x1, 0xffff5d0d}}, {0x1000, 0x2, {0x3, 0xfffffffa}}, {0xc09, 0x9, {0x0, 0x3}}, {0x7ff, 0x2, {0x2}}, {0x8, 0x6, {0x1, 0x4}}, {0x2, 0x3ff, {0x1, 0x8}}, {0x7, 0x6, {0x0, 0x2}}, {0xffff, 0x0, {0x2, 0x2c}}, {0x4, 0x7, {0x3, 0x8}}, {0xf6, 0x40, {0x3, 0x608}}, {0x7, 0x6, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0x1, 0x6, 0x3, 0xf, 0x1d, 'syz1\x00', "c8f63ac1b0c45780acce9313f74decd724de8a19db201551695759c58804d543", "611f56ac4ca78d56935379b5328cd19c29c30c62ac196603a3f2d8575de32f17", [{0x3ff, 0x7, {0x1, 0xf}}, {0xfff, 0x6, {0x1, 0x3}}, {0x7f, 0x7f, {0x2, 0x8}}, {0x5, 0x3, {0x1, 0x7}}, {0x6af6, 0x4, {0x1, 0x3}}, {0x2, 0x8, {0x3, 0x1}}, {0x9, 0x8, {0x1, 0x100}}, {0x2, 0x9, {0x2, 0x22e5}}, {0x6, 0x493, {0x3}}, {0x40, 0x8, {0x0, 0x6}}, {0x1, 0x0, {0x0, 0x7}}, {0x1, 0x5, {0x3}}, {0x4, 0x9d84, {0x0, 0x9}}, {0x7, 0x5, {0x1, 0x4}}, {0x229, 0x101, {0x0, 0xfffffffd}}, {0x0, 0x7, {0x0, 0x3ff}}, {0x6df, 0x6f, {0x1, 0x95a}}, {0x0, 0x0, {0x1, 0x3}}, {0xcb56, 0x4, {0x2, 0xbe76}}, {0x9, 0x1, {0x0, 0x4}}, {0x1, 0x5, {0x2, 0xe39}}, {0x1, 0x8e3, {0x2, 0x1590}}, {0xfff8, 0x80, {0x1, 0x3dc}}, {0x1ff, 0x8, {0x2}}, {0x22e7, 0x200, {0x1, 0x3490}}, {0x3, 0x1, {0x1, 0x4}}, {0x9e3, 0x25, {0x2, 0x229d}}, {0x6, 0x7ff, {0x0, 0x3}}, {0x1, 0x7f, {0x2, 0x3}}, {0x2, 0xb, {0x2, 0xb1}}, {0x3ff, 0xc, {0x1, 0x3}}, {0x80, 0x7, {0x0, 0xef}}, {0x40, 0x3, {0x2, 0x80}}, {0x9, 0xa23, {0x3, 0x25d}}, {0xe9, 0x400, {0x2, 0x40}}, {0xb8, 0x1, {0x3, 0x396}}, {0x8, 0x4, {0x2, 0xffffffff}}, {0x8, 0xe, {0x1, 0xffffffff}}, {0xa26, 0x9, {0x0, 0x4}}, {0x7ff, 0x1, {0x2, 0xc1}}]}}}, {{0x254, 0x1, {{0x3, 0x3ff}, 0x3c, 0x4f, 0x350, 0x400, 0x16, 'syz0\x00', "7e4548ca16e31e6435827bac73b7552be29bdb75f344b163d53f73c728da9ac7", "821299cd7492260f07a33d3f9c72f8189e5080bcab46a8448adfeb3f9446eeac", [{0x4, 0x0, {0x2}}, {0x4, 0x6, {0x3, 0x3}}, {0x7, 0x7d, {0x1, 0xbc33}}, {0x23c, 0x3, {0x2, 0x80000000}}, {0xc87, 0x5f, {0x2, 0xffffff7f}}, {0x9, 0x5, {0x1, 0xe}}, {0x400, 0xc, {0x3, 0x4}}, {0xc, 0xf, {0x3, 0x1}}, {0x41, 0x9, {0x3, 0x100}}, {0x4, 0x3ff, {0x3, 0xff}}, {0xf33, 0x4, {0x3, 0xfffffe01}}, {0x4, 0x8, {0x1, 0x2}}, {0x89e, 0x6, {0x3, 0x89f}}, {0x100, 0x7, {0x1, 0xfffff6b2}}, {0x2, 0x9, {0x0, 0x4}}, {0x4, 0x3, {0x0, 0x42}}, {0x8, 0x6, {0x3, 0x97e3}}, {0x98, 0x1, {0x0, 0x78b}}, {0x5, 0x7, {0x3, 0x7}}, {0x0, 0x0, {0x2, 0x3c64}}, {0x7cd0, 0x4, {0x2, 0x7fff}}, {0x2, 0xff, {0x1, 0x1}}, {0x7, 0x8, {0x1, 0x3ff}}, {0x2, 0x3, {0x0, 0x9}}, {0x7, 0xf13, {0x3, 0xffffdd21}}, {0x1, 0x9, {0x0, 0x8}}, {0x6, 0x200, {0x1, 0x6}}, {0x0, 0x6, {0x0, 0x8}}, {0x9, 0x1000, {0x1, 0xb}}, {0x6, 0x4, {0x3, 0x9}}, {0x8, 0x5, {0x0, 0x5}}, {0x0, 0x2, {0x0, 0x1}}, {0xa, 0x1, {0x2, 0x1}}, {0x81, 0xffff, {0x2, 0x7}}, {0x3, 0x2, {0x1, 0x400}}, {0xff80, 0x3, {0x0, 0x1afa}}, {0x3, 0x7, {0x1}}, {0x5, 0x800, {0x1, 0x5}}, {0xe0, 0x88, {0x1, 0x5}}, {0x6, 0xe32, {0x1, 0x8001}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x1, 0xfffffffffffffffd, 0xfffffffffffffffc, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m38.896010134s ago: executing program 3 (id=966): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x18}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 4m38.860709277s ago: executing program 3 (id=968): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0xc, &(0x7f0000000000)) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x5) 4m36.236193343s ago: executing program 3 (id=980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a316000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000003400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m35.238778908s ago: executing program 3 (id=984): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xa5a1, 0x400, 0x7, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0xa}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2e, &(0x7f0000000000)=0x21ea, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000e2ff9400000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 4m35.083045802s ago: executing program 33 (id=984): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xa5a1, 0x400, 0x7, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0xa}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2e, &(0x7f0000000000)=0x21ea, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000e2ff9400000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 3m14.177142456s ago: executing program 2 (id=1236): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x9c00) setpriority(0x0, 0x1, 0xa7a8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x68, 0x1058, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xd2}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$SNDCTL_TMR_START(r2, 0x5402) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c000280050001"], 0x80}}, 0x0) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001"], 0x114}], 0x1}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = dup(r4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000011146d7700000000000000e40700"], 0x18}}, 0x8000) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026"], 0x80}}, 0x0) r7 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x800334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r7, 0x7277, 0x4000, 0x0, 0x0, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r10) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) r12 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) 3m11.813862282s ago: executing program 2 (id=1243): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000001a40), 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r5) sendmmsg$unix(r4, &(0x7f0000002d80)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0}}], 0x1, 0x40008004) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006ed708f9c44e88b1786dabcd4c4b174d90859335f868b67e938e31263f"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030004000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) syz_open_dev$sndmidi(&(0x7f0000000140), 0xfffffffffffffffa, 0x18000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) 3m9.040823652s ago: executing program 2 (id=1250): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m8.192044085s ago: executing program 2 (id=1253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c000000eacfbf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507faff15300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 3m7.841199807s ago: executing program 2 (id=1254): syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x7fffffffffffffff, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) recvfrom$inet6(r1, &(0x7f00000000c0)=""/14, 0xe, 0x10140, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e22, @broadcast}}, 0x8696, 0x10}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x33, 0x61, 0x33, 0x65, 0x33, 0x36, 0x32, 0xad, 0x33, 0x66, 0x6c, 0x66, 0x66, 0x62, 0x34, 0xe]}, &(0x7f0000000180)={0x0, "33fe6728ac6cbe0d38e38e48be4342949cdcdbbf6eab85b3f122610b00000000000000151bc98f1f559a560ede6bd98700", 0x33}, 0x48, 0xfffffffffffffffe) keyctl$unlink(0x9, r5, 0xfffffffffffffffb) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) 3m7.714716912s ago: executing program 34 (id=1254): syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x7fffffffffffffff, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) recvfrom$inet6(r1, &(0x7f00000000c0)=""/14, 0xe, 0x10140, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e22, @broadcast}}, 0x8696, 0x10}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x33, 0x61, 0x33, 0x65, 0x33, 0x36, 0x32, 0xad, 0x33, 0x66, 0x6c, 0x66, 0x66, 0x62, 0x34, 0xe]}, &(0x7f0000000180)={0x0, "33fe6728ac6cbe0d38e38e48be4342949cdcdbbf6eab85b3f122610b00000000000000151bc98f1f559a560ede6bd98700", 0x33}, 0x48, 0xfffffffffffffffe) keyctl$unlink(0x9, r5, 0xfffffffffffffffb) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) 34.9110676s ago: executing program 6 (id=1785): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000001140)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2, [@enum64={0x3, 0x0, 0x0, 0x13, 0x1, 0x1, [{0xe, 0x6, 0xfffffff7}]}, @func={0xe, 0x0, 0x0, 0xc, 0x4}, @float={0x2, 0x0, 0x0, 0x10, 0x12}, @func={0x6, 0x0, 0x0, 0xc, 0x1}, @ptr]}}, 0x0, 0x1a}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x23, "203c3e7ccfd95ae4570faaded6a7ac47eedb1ed255c9db1e12a4d15c4f19b49c39825d"}, &(0x7f0000000240)=0x1f) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000280)={r1, 0x3}, 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e21, 0xffffff1f, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe}}, 0x9, 0x8d4b, 0x1, 0x4, 0x4}, &(0x7f0000000400)=0x98) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100feffffff000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="eec99e"], 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001b700)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000000080)={0x0, 0x8012, 0x0, @thr={0x0, 0x0}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) pwrite64(r7, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) 34.536270065s ago: executing program 6 (id=1786): inotify_init() sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0xc090) openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) socket$kcm(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000004000000000000000600000018370000020000000000000000000000182300006efdc4d8ccf7b78e660c399a5651bbb337e73639e0753d77c4de112a959026265adecabb36378625c1d61cb96723d5fe48f44ab78176944b96c3d0c145a9d39fdf6cc9fdbeaccbb0e2beca33402a6f84aaadef2c88912dfdd93bd58c772f36251e61fcab954b27bcb8fd08fa6fbcc72aaf2c0f2c706c6f31b4f53b", @ANYRES32, @ANYBLOB="00000000030000008500000009000000850000009d0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000a00)=""/4096, 0x41000, 0x8, '\x00', 0x0, @fallback=0x52, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xd, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, 0x1, r3, 0x1, 0xffffffffffffffff], &(0x7f0000000480), 0x10, 0x3ff}, 0x94) r5 = syz_usbip_server_init(0x5) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000500)=@o_path={&(0x7f0000000080)='./file0\x00', r4, 0x4000, r5}, 0x18) 31.899724166s ago: executing program 6 (id=1795): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffff000}}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x48) 31.396204627s ago: executing program 6 (id=1799): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d004dd00000000000001090224000100000000090400000103000000092105000012220500090581030008"], 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b10b5103a092226"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="0c0000000000000081000040"]) 26.823922034s ago: executing program 6 (id=1816): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x288881, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0308004d6b71ef2885693d26f1ea0900000000007a6fb718141cf441f9190c7212313633a44b36532fa33a4efcb7c5ab080f94"], 0xffdd) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b0001000000000904"], 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0xfe, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) chdir(&(0x7f0000000100)='./file0\x00') readlink(&(0x7f0000000640)='./file0\x00', &(0x7f0000001740)=""/4075, 0xfeb) 24.72351628s ago: executing program 4 (id=1823): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edc0102030109022400010000100009040002020083ec0009050602000202000a09"], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000640)={0x1, 0x0, &(0x7f0000000500), &(0x7f0000000540)=[0x335, 0xffffff98, 0xd9d0, 0xfff, 0x8], &(0x7f0000000580), &(0x7f00000005c0)=[0xa, 0x9, 0x9, 0xffffffffffff0001, 0x5, 0x1, 0x8000, 0x8, 0x5], 0x0, 0x4a07}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000240)) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r7, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 23.733359956s ago: executing program 7 (id=1828): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='(#\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 21.655318652s ago: executing program 4 (id=1830): mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x4140045e}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xc2, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x26, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x77, 0x0, [{0x0, 0x12, "881681ba3162cfdfa8b34cc86e1be900"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xa, 0x0, [{0x0, 0x4, "7f36"}]}]}}}}}}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x151000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002580)=@newtfilter={0x1f88, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x9}, {0xb}, {0x2, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1f50, 0x2, [@TCA_CGROUP_POLICE={0x54, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x10000}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x4, 0x9, 0x9, 0xec, {0x2, 0x2, 0x6, 0x5, 0x7, 0x5}, {0x65, 0x2, 0x5, 0x85, 0x53b, 0x6}, 0x6874, 0x6, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}]}, @TCA_CGROUP_ACT={0x1ef8, 0x1, [@m_pedit={0x1e04, 0x9, 0x0, 0x0, {{0xa}, {0x1d1c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x3, 0x5b, 0x5157984e7fa5a41a, 0x1, 0xe}, 0x2, 0x8, [{0x100, 0x401, 0x18d0, 0xd3, 0x3, 0x4}, {0x755c3a64, 0x3, 0x9, 0x6, 0x3, 0x211}, {0xcd6, 0x869b, 0x2, 0x3ff, 0x0, 0x9}, {0x7, 0x5, 0x7, 0x0, 0x1, 0x8}, {0x1, 0x0, 0xbb, 0x9, 0x401, 0x8a9f}]}, [{0x2, 0x0, 0xfffffff6, 0x3ff, 0x7, 0x8}, {0x8, 0xfffffffb, 0xcb47, 0x2, 0x0, 0x1}, {0x7ff, 0x0, 0xffff, 0x5}, {0x9, 0xf53, 0x8, 0x7fffffff, 0x1, 0xc9}, {0x400, 0x9, 0x0, 0x6, 0x97e2, 0x6}, {0x8, 0x551, 0x1, 0x20b2, 0x8, 0x3}, {0x3, 0x6, 0xc, 0x6, 0x5, 0x7ff}, {0x7, 0xff, 0x1, 0x4, 0x3, 0x5}, {0x200, 0x7, 0x1, 0x2, 0x1000, 0x582}, {0x4, 0x800, 0x9, 0x0, 0x10, 0xfffffffb}, {0x4, 0x1, 0x6, 0x7, 0x3, 0x7fffffff}, {0x10, 0x9, 0x4, 0x8, 0x1c0, 0xfcd}, {0x2b9, 0x3, 0x7, 0x6, 0x0, 0x8}, {0x916, 0xdf, 0x4, 0x3, 0x4, 0x3}, {0x0, 0x8, 0x7, 0x709c, 0xff, 0xffffffff}, {0x87, 0x200, 0xc17, 0xd69, 0x7fff, 0xb4f}, {0x7, 0x0, 0x200, 0x2, 0x5, 0x1}, {0x1, 0x1, 0x7, 0xff, 0x7f, 0x1}, {0xfffff182, 0x5, 0x81, 0x48, 0x4, 0x10}, {0x0, 0xfff, 0x5, 0x1, 0x1}, {0x6, 0x8, 0xa, 0x5, 0x98b}, {0x1, 0xffffffff, 0x7a28, 0x8001, 0x3, 0x6}, {0x9, 0xffff6ccc, 0x4, 0x1, 0xb5d, 0x1}, {0x9, 0x0, 0x3, 0x7278, 0x159}, {0x2, 0x4, 0x7fffffff, 0xa, 0x9, 0x40}, {0x5438efa3, 0x10000008, 0x9, 0x5, 0x2, 0x2}, {0x96, 0x3ff, 0x1, 0x9, 0xffffffff, 0x8}, {0x90, 0x3, 0x688, 0x3, 0x81, 0xffff}, {0x2, 0x1, 0x7799, 0x3, 0xe14, 0x7f}, {0x7, 0x8, 0x100, 0x5, 0x200, 0x80}, {0x92b, 0x400, 0x8, 0x9, 0x8af, 0x6}, {0x0, 0x4, 0x5cc, 0x2, 0x7fe, 0xe}, {0x2, 0x9, 0x10001, 0x5, 0x2, 0x2}, {0x3bd7, 0xffff0000, 0x80000001, 0x10, 0x9, 0x7}, {0xffff, 0x2, 0x9, 0x4, 0xffffffff, 0x3}, {0x1, 0x0, 0x645, 0x5, 0x8, 0x1}, {0x800, 0xbed3, 0x4, 0x8, 0x7, 0x7}, {0x7fff, 0x200, 0x5, 0xfffffff3, 0x0, 0x3}, {0x6, 0x6, 0x4, 0x0, 0xadb, 0x386}, {0xfffffffc, 0x1000, 0x8f, 0xfffffffb, 0x9351, 0x100}, {0xffff, 0x4, 0x3, 0x5, 0x11, 0x3}, {0x81, 0x401, 0x8, 0x8bd, 0x3, 0x3}, {0x7fff, 0x8, 0x1, 0x0, 0x0, 0x802}, {0x8, 0x101, 0x8, 0xc03b, 0x3, 0x7}, {0x101, 0xffffffff, 0x1, 0x10, 0x4, 0x8}, {0x401, 0x5, 0x6, 0x8, 0x2, 0x5}, {0x81, 0xff800000, 0x9, 0x8, 0x2, 0x23fa}, {0xd11, 0x704d, 0x7, 0x8, 0xf}, {0x7, 0x0, 0x6, 0x7, 0x7ffe, 0x57d8}, {0x9, 0xfff, 0x1, 0xf, 0x80000000}, {0x2, 0x3, 0x7fffffff, 0x9, 0x4000, 0xfffffffd}, {0x7, 0x4, 0x7, 0x3, 0x40, 0x7ff}, {0x0, 0x7, 0x4, 0x6, 0x480, 0xfffff000}, {0xe, 0x43f, 0x3, 0xfffffff9, 0x401, 0x6}, {0x4, 0x7, 0x1, 0x9, 0x3, 0x2d}, {0x9, 0x7000000, 0x0, 0xc, 0x2764, 0x9}, {0x1, 0x3, 0x8, 0x7, 0x40, 0x200}, {0x4, 0x69e, 0xfffffffd, 0xe58, 0xff, 0x282}, {0xb, 0x100, 0x0, 0x40008000, 0x1, 0x8b94}, {0x6, 0x10, 0x4, 0x5, 0x0, 0xffff0000}, {0x10001, 0x3, 0x10001, 0x8, 0x3, 0x67}, {0x9, 0x4, 0x3, 0x6, 0x8, 0x6}, {0x8, 0x8, 0x9, 0x5ab0, 0xc89}, {0x9, 0x7fffffff, 0x7, 0x6, 0x5d8, 0x7f}, {0x9, 0x0, 0x8, 0x8, 0x40000000, 0xb9}, {0x80000001, 0x9, 0x80, 0x1, 0x1ff, 0x6}, {0xfffffff9, 0x3, 0x554, 0x2cf, 0x3, 0x7}, {0x0, 0x8, 0xb6, 0xffffffff, 0x7, 0x200}, {0x9, 0x9039, 0xffe00000, 0x4, 0x249, 0x3}, {0x0, 0xffffe893, 0x7, 0xf6a2, 0x1, 0x525f}, {0x0, 0x5, 0xf, 0x9, 0x8d9, 0x3ff}, {0x3, 0xaa00918b, 0x6, 0xd0, 0x8, 0x6}, {0x1, 0x77, 0x8, 0x5, 0xef23, 0x9}, {0x2, 0x0, 0x2, 0x0, 0xf, 0x5}, {0x5, 0x3, 0xffff, 0x8, 0x7, 0x5}, {0x9, 0x1000, 0x9, 0x9, 0x7fff, 0x1}, {0x6, 0x2, 0x7, 0x400, 0x3, 0x5}, {0x4, 0x6525, 0x4, 0xf7b1, 0x3, 0x1}, {0x5, 0x88e5, 0x2, 0x5, 0x1, 0x9}, {0x1, 0x4, 0x7, 0x8000, 0x48000, 0x2}, {0x2, 0x2, 0x3, 0x3, 0x1, 0x4}, {0x1, 0x9bf8, 0x80000001, 0xa3, 0x9, 0xe4bf}, {0x6, 0x1, 0x7, 0x9, 0x215c, 0x1000}, {0x6, 0x9, 0x17, 0x82f, 0x44, 0x40}, {0x80000000, 0x8, 0x9, 0x4, 0x5, 0x6541}, {0x42, 0x400, 0x401, 0x41bb3467, 0x6, 0x5}, {0x1, 0x5, 0x4, 0x3, 0x2, 0xfff}, {0x101, 0x6, 0x101, 0x3, 0x80000000, 0x6}, {0xfffffff7, 0x100, 0x5, 0x4, 0x1, 0x8}, {0xfffffeff, 0x7fffffff, 0x0, 0x8, 0x5, 0x4000}, {0x4, 0x2, 0xedc0, 0x14, 0x7d, 0x2}, {0xd, 0x4c000, 0xff, 0x2, 0x0, 0xffffffff}, {0x197f5831, 0x10001, 0xffff0000, 0x7, 0x3, 0x80}, {0xd1, 0x4, 0x1, 0x5, 0xfffffffd, 0x10000}, {0x5, 0x2, 0xe, 0x91ef, 0xfffffff8, 0x1000}, {0xfffffff0, 0x0, 0xe, 0x4, 0x4, 0x5}, {0x2800000, 0x7fff, 0x3, 0x6, 0x8, 0xa}, {0x6, 0x0, 0x5, 0x0, 0x8000, 0xfffff0c9}, {0x1, 0x0, 0x32, 0x4, 0x48, 0xfffffffb}, {0x3, 0x2, 0x401, 0x1, 0x8c7b, 0x4a3e}, {0xf8d8, 0x1, 0x4673, 0x6, 0x7f, 0x7}, {0x401, 0xf8d9, 0x9a44, 0x81, 0xe000000, 0x9}, {0x8000, 0x9, 0x3a, 0x6, 0x2, 0x7}, {0x4, 0x7ff, 0x7fffffff, 0x3ff, 0x200, 0x4}, {0x9, 0x80000000, 0x8, 0xe, 0xd, 0xf66}, {0xb, 0xf373, 0x8001, 0x0, 0x2, 0xef}, {0xf, 0xe50e, 0x2000000, 0x4, 0x333, 0x3}, {0x9, 0x2, 0x26af, 0xfc, 0x0, 0xfffffffb}, {0x2, 0x0, 0x1, 0x4102, 0x7, 0x80000000}, {0x80000000, 0x7, 0x1, 0x9, 0x30000000, 0x261}, {0x4, 0x9, 0xbe, 0xfffff880, 0x401, 0x1000}, {0x9, 0x4c, 0x4, 0x5, 0x4, 0x7}, {0x1, 0x0, 0x9, 0xdc11, 0x8cd0, 0x7}, {0x81, 0x1ef08a2b, 0x4, 0x8, 0x80000000, 0x1}, {0x9, 0x2, 0xd, 0x982e, 0x4, 0x2}, {0x72d100, 0x401, 0xf114, 0x1, 0x9, 0x7f}, {0x9, 0x6, 0x4, 0x3, 0x6, 0xf}, {0x62221544, 0xa, 0x5, 0x0, 0xb, 0x1}, {0x3, 0x3, 0x200, 0x9c, 0x2}, {0x5, 0x1, 0x48, 0x5, 0x5, 0x5}, {0x4, 0x1, 0xfffffffc, 0x7, 0x8bb4, 0x401}, {0xf3a8, 0x1ff, 0x0, 0x8, 0x294b, 0x3}, {0x4, 0x8, 0x4, 0x2af4, 0x4, 0x5}, {0x0, 0x8, 0x3, 0xf2, 0x1, 0x5}, {0x2, 0xfffffc00, 0xe, 0x5, 0x2, 0x1}, {0xffffffff, 0x100, 0x1000, 0x3ff, 0x4, 0x9}, {0x80000001, 0xfffff800, 0x4, 0x2, 0x9, 0x6}, {0x10001, 0x2, 0xd35b, 0x5, 0x7, 0x9}], [{0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x5}, {}, {0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x4}, {0x4, 0xfea433da6769dbba}, {}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x3}, {0x4}, {0x2, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {}, {0x3}, {0x3}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x3}, {0x4}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x9, 0x4, 0x0, 0x6, 0x1}, 0xe, 0x7f, [{0x5a1d, 0x9, 0x10, 0x480, 0x8, 0x570}, {0x7, 0x8, 0x10000, 0x6, 0x7, 0x8}]}, [{0x1ff, 0x4, 0x4, 0x4, 0x4, 0x98}, {0x4c, 0x7fffffff, 0x2, 0x426cddd9, 0x3, 0x8000}, {0x1, 0xf, 0xe439, 0x100, 0x8, 0x8c3}, {0x0, 0x5, 0x4, 0x10, 0x1, 0x5}, {0xfffffc01, 0x5, 0x6, 0x1, 0x8ca0, 0x9}, {0x40, 0xc, 0x1, 0x6, 0x9, 0xfd}, {0x8, 0x101, 0x4, 0x9, 0x0, 0x2}, {0x0, 0x1, 0x2, 0x5, 0x82a4dfc6, 0x8000}, {0xd, 0x2, 0x8, 0x6, 0x7, 0x5}, {0x9, 0xb, 0xf, 0xff, 0x8001, 0x4}, {0x8, 0xffffffff, 0x1, 0xc1, 0x1, 0x1}, {0x0, 0x5, 0x9, 0x5, 0x4, 0x7}, {0x5, 0x1, 0xfffff001, 0x6418, 0x9, 0xff}, {0x6, 0xf71, 0x3, 0x4, 0x9, 0x4}, {0x1000, 0x4, 0x9, 0x100, 0x3, 0x7ff}, {0x6, 0x1, 0xe, 0x4, 0xe, 0x53}, {0x7fff, 0x9, 0x11, 0x7, 0xc, 0x1}, {0x7, 0x0, 0x6, 0xfffffff2, 0x3, 0xfffffffc}, {0x1, 0x2, 0x800, 0x9, 0x0, 0x5d33}, {0x0, 0x6, 0x82, 0x3, 0xe, 0x9}, {0x0, 0x10000, 0x1, 0x5, 0x215, 0x4}, {0x8, 0xf139, 0x9, 0x0, 0x7, 0xffff}, {0x2, 0x1, 0xd, 0xd, 0x9, 0x81}, {0x6, 0xb, 0x1, 0x7, 0x7, 0x6}, {0x101, 0x10, 0x70c, 0x7, 0x9, 0x3465}, {0x9, 0x9, 0xffff00, 0x2, 0x2, 0x8}, {0xe, 0x7, 0x54d, 0x3ff, 0x6, 0x3}, {0x3, 0x8f, 0x4, 0x13, 0x6, 0x1}, {0x2, 0x80000000, 0x1, 0xf3a, 0x8}, {0x4, 0x4, 0x5ec, 0x3, 0x8, 0x1}, {0xfffffbe4, 0x3, 0xffffffff, 0x7, 0x6f, 0x7}, {0x81b, 0x4, 0x6, 0x8000, 0x7, 0x5}, {0x8a0, 0xd951, 0x3, 0x3, 0xdc, 0x10000}, {0x3, 0x4, 0xffffffff, 0x9, 0x5b70, 0x200}, {0x7, 0x1, 0x9, 0x8, 0xbc35, 0x1}, {0x9, 0x6, 0x8, 0x5, 0x101}, {0xa, 0xd02, 0x81, 0x1, 0x67a, 0x2}, {0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x8}, {0x9, 0x3, 0x6, 0x6, 0x3, 0x53}, {0x3cc, 0x7, 0x5, 0x100, 0x8, 0x1}, {0x4, 0x1, 0x7, 0x7, 0x0, 0x1ff}, {0x80000001, 0x80, 0x8, 0x10001, 0x10001, 0x7ff}, {0x8, 0x3, 0x9, 0x0, 0xb0d, 0xfffffff8}, {0xffffffa3, 0x1635, 0x28, 0xffff, 0xe068, 0x7ffeffff}, {0x3, 0x1, 0xffff, 0x6, 0x3, 0x1}, {0xa, 0x1000, 0x2, 0x5, 0x6, 0x8}, {0x3, 0xc6f, 0x6, 0x6, 0x6, 0x9}, {0x7d, 0x5, 0x800, 0x1, 0x4, 0x80000001}, {0xf3d3, 0x1, 0x7, 0x3e7e, 0xd, 0x3}, {0x1, 0x3, 0x4, 0x7, 0x8, 0x2}, {0x2be6, 0x3, 0x3, 0x2, 0xc0e8}, {0x2, 0x2, 0x2, 0x77b, 0x88eb, 0x2}, {0x6, 0x6ac8, 0x5c6f, 0xfffff800, 0x2c40, 0xfff}, {0x1, 0x3ff, 0xaa, 0x80, 0x81, 0x4}, {0x7, 0x200, 0xf, 0x40, 0x3, 0x4}, {0x8, 0xfff, 0x800, 0x40, 0x2, 0x8}, {0x13e8, 0x376ed76c, 0xb44e, 0x200, 0x3, 0x4}, {0x7, 0xfffffffd, 0x2, 0x2, 0x6a5, 0x8}, {0x7, 0x1, 0x76254b73, 0x4, 0x3ff, 0xcc9}, {0x7, 0x6, 0x8, 0x81, 0x7}, {0x401, 0x6, 0x9, 0x4, 0x8000, 0x1}, {0x4, 0x7434, 0x3, 0x3, 0x4ec2, 0x54}, {0xb, 0x6, 0x2, 0x6, 0x7, 0x7}, {0xffffffff, 0x6, 0x6, 0x8, 0x9, 0xb2}, {0xb, 0x6, 0x7, 0x7, 0x7, 0x6d51}, {0x4, 0xb, 0x100, 0x7, 0x401, 0x80}, {0xff, 0x9, 0x0, 0xfff, 0xfff, 0x9}, {0x9443, 0x4, 0x3, 0x9, 0x9, 0x80000000}, {0x1ff, 0x1f, 0x4, 0x7, 0xa06, 0x800}, {0x4, 0x7fffffff, 0xff, 0xac13, 0x4, 0x9}, {0x9, 0x1, 0x1, 0x7f, 0xffff657a, 0xd}, {0x2, 0x7, 0x0, 0x401, 0x7, 0xf9c4}, {0x5c9, 0x6, 0x2, 0x5, 0x2, 0x20000000}, {0x7fffffff, 0x43f, 0x4, 0x3000, 0x6, 0x3}, {0x9, 0x0, 0x1, 0x800, 0x7, 0x7ff}, {0xbe1, 0x9, 0xc, 0x0, 0x800, 0x7}, {0x7fffffff, 0x5c7, 0x860, 0x81, 0x5, 0x7}, {0x1, 0x0, 0x7, 0x0, 0x5, 0x101}, {0x8000, 0x1, 0x6, 0x7, 0x4, 0xd}, {0x0, 0x0, 0x7, 0x2, 0x41c, 0x9}, {0xe, 0x3e, 0x7, 0x4, 0x8, 0x2}, {0x5, 0x40, 0x4, 0x5419, 0x984}, {0x7, 0xbc0, 0x7, 0x6, 0x4, 0x8001}, {0x1, 0x8000, 0x10, 0x200, 0x7, 0xd7}, {0x6, 0x10001, 0x8, 0x9, 0x4, 0x4}, {0x1000, 0xb, 0x0, 0x1000000, 0xf, 0x2}, {0x8, 0x800, 0x6, 0x9, 0x921, 0x26e0}, {0x6, 0x6, 0x2, 0x1, 0x2}, {0x3f548e8e, 0x1, 0x5, 0x9, 0x9, 0x10001}, {0x1ff, 0x40, 0x3, 0x4, 0x2, 0x5}, {0x6, 0xb00, 0x0, 0x7, 0x7, 0x6}, {0x4, 0xa, 0x9ccd, 0xe, 0x2, 0xfffffabd}, {0x4, 0x4, 0x4, 0x101, 0x0, 0x80}, {0x2, 0x3, 0x0, 0x1, 0x5, 0x864}, {0x200, 0xd, 0x9, 0x3, 0x2, 0x4}, {0x2, 0x5, 0x40, 0xb7, 0x1, 0x2}, {0x7ff, 0x1, 0x3, 0x10003, 0x7, 0x2}, {0x3, 0x101, 0x2, 0x2, 0x8, 0x6}, {0x2, 0x2ecd2ee, 0x2, 0x3ff, 0x9, 0x8}, {0x8a86, 0x8, 0x3, 0x6, 0x800, 0x3}, {0x8, 0x86, 0xc, 0x81, 0x5, 0x2}, {0x5, 0xfe, 0x1000, 0x7, 0xf775, 0x6}, {0x4, 0x4, 0x3, 0x91eb, 0x1, 0x7}, {0x6fc, 0xbaf0, 0xf, 0x1, 0x4, 0x1000}, {0x5, 0x6, 0x8, 0xd, 0x7fffffff, 0x54}, {0x458, 0x5c9, 0xab, 0xe, 0x80, 0x9}, {0x2b63, 0x9, 0x0, 0xfffffff8, 0x2, 0x9}, {0x4, 0x3, 0x1, 0x6, 0x2, 0x6}, {0xa, 0xfffffff4, 0x0, 0x1, 0x9, 0xffffb94c}, {0x7, 0x0, 0x5, 0xfff, 0x2313, 0x6}, {0x8973, 0xfffffffa, 0x8, 0xf7, 0x81, 0xfc}, {0x0, 0x400, 0x0, 0x6, 0x10001, 0xc}, {0x4, 0x5, 0x6cc0, 0x7, 0x9, 0x7}, {0x24, 0xfffffffe, 0xfffffffb, 0x1, 0x7ce6, 0x8}, {0x5, 0x5, 0x3c3, 0x1, 0x7, 0x60000000}, {0x5, 0x524, 0x2, 0x35, 0xfffffffd, 0x4}, {0xffffff7f, 0x611, 0x1, 0x0, 0x400, 0x1ff}, {0x0, 0x79e4, 0x6, 0x3, 0x5, 0x101}, {0x9, 0x2163, 0x0, 0x800, 0x10001, 0x6}, {0x22, 0x6, 0x0, 0x80000001, 0x1, 0x8ce}, {0x6, 0x0, 0x2c, 0x7fff, 0xe, 0x7}, {0x9, 0x81, 0xfff, 0x9, 0xfff, 0x8}, {0x148ee473, 0x80000000, 0x3, 0xe71, 0x5, 0x1}, {0x200, 0x9, 0x80, 0x6, 0x5, 0x5}, {0x7f, 0x4, 0x800, 0x4, 0xc590, 0x5}, {0x7, 0x0, 0x9, 0x1, 0x7, 0x51a}, {0x0, 0x3, 0x3ff, 0x7, 0x5, 0x8}, {0x4, 0x1, 0x6, 0xe2, 0x10000, 0x8}], [{0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x8fac9f3ed86ce49a}, {0x3}, {0x99bd51e2d5c01b7, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x2}, {0x2}, {0x6}, {}, {0x4, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x4}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x5}, {0x6, 0x1}, {0x4, 0x1}, {}, {0x6}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x2}, {0x5}, {0x2, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0xbf, 0x6, "1558bba12403a94d203aaac92b80dbbcee432a0a03e587d74218b01d7b074c9eed8ecacc56dbe68b8faeb1aaf2b54fb1c4ba18b5dfe9f930c55476fd66bfb5ce44f5adc3e3300427ccc22e5ebe160294a39cf17585a471048813051772c1cad41f3aad85c93f66851292117169ca15ba8cd58b2db366964d7c6f5087ed0897ec2eed7bb398981b2e8014b253bdfd821c3be8a1b6f161589bf435cda962e9954f9e6650e21cb914fe06c6e44fd31407bf5bdd7f11fd74ecc22ee841"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0xa8, 0x7, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'hfsc\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x7, 0x7, 0x6, 0xe40}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10, 0x7, 0xffffffffffffffff, 0x1, 0x2}}]}, {0x3f, 0x6, "7ce79a29ed90e599f90790675c7d5a06fc52dbec6e7feddaca22ee4fc308c4cec3cb7f02e921d8aec8f24e1f4d48508136a5c4da41375210735737"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_sample={0x48, 0xd, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x3, 0x20000000, 0x8, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x1f88}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) 21.021925573s ago: executing program 0 (id=1831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000100001000000000000000000000b000a48000000090a010400004800000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f040009800800034000000080"], 0x70}}, 0x20050800) 20.964162685s ago: executing program 7 (id=1832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 20.962073142s ago: executing program 4 (id=1833): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001e000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00`'], 0x1c}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xf, 0x2) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffe01}]}]}]}}]}, 0xb0}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) fchdir(r8) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x12480, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r9, 0x560f, &(0x7f0000000100)={0x1, 0x1, 0x19, 0x1f, 0xbb, 0x0}) ptrace$peeksig(0x4209, r7, &(0x7f0000000180)={0x9d, 0x1}, &(0x7f00000001c0)) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000001240)) 20.844475639s ago: executing program 0 (id=1834): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = syz_open_dev$media(&(0x7f00000004c0), 0x3a6380000000, 0x8800) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}, {0x80000000}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f000000a300)={{r5, r6, 0x2, [0x1, 0x8]}, {r5, 0x0, 0x1, [0xc19, 0x4]}, 0x10000000, [0x7e, 0x8]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) (async) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, 0x0) (async) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000e7000000000000000000000015c1c0b887920b1bfd67e8e25cae9ef8000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001bc0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYRES64=r8, @ANYRES16=r7, @ANYRES32=r11, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r3], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0xfffffffffffffdce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r13 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000007800000078000000020000000d0000000000000700000000000000000600000d000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000902000000000000000000"], 0x0, 0x92}, 0x28) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r14, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003280)={r15, 0xe0, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x1, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003280)={r15, 0xe0, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x1, 0x10, 0x8, 0x0, 0x0}}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x79, 0x4) read$msr(r13, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001b40)="846f5518faa267f84b4fc2f25f5c814d366bf16c592f38971b5ce1b5f65aed0a3c9c8c61524c9ebef957666815b286decb21a9fcb23bef3895aa381a753106ecaedb76bc4944d8158603a2", 0x4b}, {&(0x7f0000000780)="9aad4aeefbf4d1de2377833703429de4e8f9fc58dad542fec714bb6bc669ac93f49aaa9dc7a988f82abba5a68c960df6e9d4d791ac090675264297e16943f825fb42a89ed18df76fa0e47a607bc1aa6dd1f8ea20d2d9a51ff29b2ca612accd3bcf239c0fae134a7b09", 0x69}, {&(0x7f0000000800)="3c82b173eeb425979244d6400207a4df7453164e8e61c9135777b92c9e48b68dbf4997116e65a1609b3f6a0c3eb60f59eb1bde18e498ef3a4e933c64fdcc371ec38e8f7d409f38139f3f844f5721204c768a77a8ebeaa5e4b85607f4944f64b577d8f72445a2a2e9328b764d030fb45da1b603827754c22c63e04060804dcaf97e21e28ef8b43d4fc5be3f52be775919d58a9746305f25edbbc6185a1ba3a33d23aeed53bb5c528bf19da84e27bfc68dcec69ce6a8fdfa616ffc9f758d7195827ae1dda19f69a9bb1f1c19984ef0c303eb83ca3ce955fb322d8fdbf8d3fbedb1ef067fa02bf22e6b2984d9cda1a14e50bc5e04ec8b1b", 0xf6}, {&(0x7f0000000900)="0c88644a8384ca16f05bcd87cbba77412cd1fdfa4f6017d8c5a0e64ca4d162bf5412c83cf74835cbca1aaacc70ea3ead697dd876b8246e4a7f289f6c0adaf31ae82689665b5ea8d1838b31af4f3ec60232e89f10caa4fbd655709194c102ef699fa3cb21e19772522bd089784944f41e716b223a2aa68884e445ae0351e03d960ccfbb9c9c0e47746e030b2fd146415adbe979fd6c266d3fbad2c415c761850c548b22a3", 0xa4}, {&(0x7f00000009c0)="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", 0x1000}], 0x5, &(0x7f0000001a40)=[{0xf8, 0x3a, 0x4, "45046f21fffb3fcbc8edf9e926a9c47ab1d394b308e5d13aae37ee551928387596232f83042ca09599b8d1a67f2350baa3d96a532ab11467c0446b1fdb13876da611d750497d34ae5eee5442b9acd6e07f65786141a50196a863474103099ea762ce3649435eda5a78b53ecae3b46aa88a6ed255d116d97aa5e33c5decb3251e1b154ea78d70103f2be30e8ae3d108397d9a53bc4550a002ece3237e94b3b4600268a81b4e44a7bed5cfa6725fafab851e60477bd47d007a40d603e5ad03804499a77405f9436608aa137ba70442106cb2f47faac757d8bf68cc02daa3e37cfd8fa87d8778e0"}], 0xf8}}], 0x1, 0x0) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 20.831924745s ago: executing program 6 (id=1835): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x400004008, 0x4146c2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000001c0)={0x1, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x19, 0x70bd2c, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40da7, 0x79269}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8040) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) syz_emit_ethernet(0x48, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x12, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}]}}}}}}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi5\x00', 0x218000, 0x0) ioctl$COMEDI_POLL(r7, 0x640f) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x5, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004040}, 0x50040) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601010000000000000000000000001c0007800500140007000400080012400005000008000840000000000900020073797a300000002005000100070000000c000300686173683a697000050005000a000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}, 0xcd}], 0x1, 0x1, 0x0) 19.93272884s ago: executing program 7 (id=1836): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001b00)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 19.932315725s ago: executing program 5 (id=1837): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x110}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x20}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 19.348256805s ago: executing program 7 (id=1838): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r6, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000012c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) ioctl$sock_proto_private(r5, 0x89e1, &(0x7f0000001080)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) 18.997717518s ago: executing program 5 (id=1839): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 64) dup3(r1, r0, 0x0) (rerun: 64) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="180200000002000000000000000000008500000028000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7453c02000008000000b11da657b8230e4fd26466f53db70300000400000085000000060000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$kvm(0xffffffffffffff9c, 0x0, 0x100480, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000600)={0x0, @sdr={0x3032344d, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) removexattr(0x0, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0xfffffffd, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4774], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) (async, rerun: 64) write$uinput_user_dev(r4, &(0x7f0000000500)={'syz1\x00', {0xb710, 0xe, 0x3}, 0x34, [0xe, 0x1ff, 0x8, 0x3, 0x2, 0x8, 0x69, 0x2, 0x0, 0x874, 0x9, 0xd4a1, 0x3, 0x3, 0x3, 0x5b8, 0x2, 0x6, 0xc, 0x7, 0x51, 0xbe4, 0x100, 0x1, 0xa, 0x8, 0xfff, 0x8, 0xb, 0x80, 0x9ad, 0x29, 0x1, 0x5, 0x1, 0x1, 0x905e, 0xf87, 0xe2ee, 0x0, 0x6, 0x5, 0x1, 0x80000000, 0x1000, 0x1d7, 0x2, 0x6, 0xff, 0x8001, 0x10, 0x2, 0xc3bb, 0x1, 0x1, 0x5, 0x1, 0x4, 0x2, 0x339, 0xbbf, 0xfffff000, 0x800, 0x8], [0x2, 0x100, 0x7af, 0x6, 0x5, 0x0, 0x5, 0x80000, 0x2, 0x6, 0xa, 0x10000, 0x2, 0x17, 0x20, 0x2, 0x5, 0x5, 0xa, 0x65, 0x9, 0x9, 0x8, 0x4, 0x7fff, 0x3ff, 0xffffff01, 0x8, 0x3, 0xdec3, 0xb6, 0x7cb4cb2c, 0x0, 0x2, 0x81, 0xfffe, 0x9, 0xc5d3, 0xa, 0xc2e, 0x7, 0x9, 0x9, 0x8, 0x2, 0xfffffffe, 0x7c, 0x9, 0x5, 0x5, 0xa, 0x5, 0xc98, 0x9, 0xffffcbb6, 0xd0, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0x6], [0x4, 0x5, 0xffffffff, 0x200, 0x5e4, 0x6, 0x6, 0x3, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0x10000, 0x9, 0x3, 0x2, 0x89a, 0x100, 0x5, 0x2, 0x1, 0x3, 0xfffffffb, 0x7, 0x6, 0x20000007, 0x9, 0x4, 0x0, 0x3, 0x9, 0x0, 0x2, 0x80000000, 0x0, 0xfffffff8, 0x5, 0x0, 0x40a, 0x6, 0x0, 0x5, 0x7, 0x9bd, 0xa, 0x0, 0x4, 0x7, 0x3ff, 0x0, 0xe5c, 0x1, 0x5, 0x4000009, 0x7, 0x80000000, 0x8, 0x1, 0xffff6139, 0x42c0, 0x76, 0xe339], [0x248, 0x1, 0x9, 0xb, 0x4, 0x7f, 0x6, 0x2, 0x0, 0x7ff, 0x2, 0x10000, 0x8, 0x8001, 0x80, 0xfb, 0xe68f, 0xdaba, 0xfffffffe, 0x52f, 0x8000, 0x9, 0xff, 0x80000000, 0x8, 0x8, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0xd2c7, 0x8001, 0x94, 0x80000000, 0x8, 0x0, 0x5, 0x0, 0x8, 0x6, 0x9, 0x7, 0x0, 0x7, 0x961a, 0x0, 0x5, 0x49, 0x7, 0x255d, 0x1, 0x0, 0x9, 0x5, 0x10, 0x7, 0x0, 0xff, 0x66, 0x90000000, 0x7, 0x81]}, 0x45c) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000015000103000000000000000001000000a2c9892992ed4705fff934809d40eb29bf28dabe15c871946212dfea2e2fc7b17d54964cab29cb064f40d97a31e6529ac7b5feebe0e1d230bbf827977c37f11ab2d714ee6ced11673333891c3978a9b83b356bbf612102d90ec0d3aa7b2685b0bdeda9a679ec804b70a1ae3b240e4069da90c71f768fb7f2edbf51d69822a5ad6131233fb2336a4271036b297b2fa3da"], 0x14}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000540)=""/186, 0xba) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) r6 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 18.97033648s ago: executing program 4 (id=1840): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edc0102030109022400010000100009040002020083ec0009050602000202000a09"], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000240)) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r8, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 18.744135866s ago: executing program 0 (id=1841): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0xc000, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x0, 0x0) 18.743627717s ago: executing program 5 (id=1842): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000003c0)={0x1c2, {{0x2, 0x4e24, @multicast1}}, 0x1, 0x1, [{{0x2, 0x4e22, @broadcast}}]}, 0x110) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xfffffffffffffc70}) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xfffffffffffffc70, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x1, r2, 0x0, 0xc5, 0xfffffffffffffffc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x1, r2, 0x0, 0xc5, 0xfffffffffffffffc}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x7, 0x10003}, 0x0) fanotify_init(0x81, 0x40000) (async) r5 = fanotify_init(0x81, 0x40000) fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0) (async) fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0) read$FUSE(r5, &(0x7f0000002300)={0x2020}, 0x2020) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) io_uring_setup(0x2c4d, &(0x7f0000000200)) close_range(r3, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x3f3f, 0x2, 0x0, 0xffbfbffd}, &(0x7f0000000140)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r6, 0x31d7, 0xf728, 0xd, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd45}, @in6={0xa, 0x4e23, 0x7ff, @mcast2, 0x341}, @in6={0xa, 0x4e24, 0x200, @rand_addr=' \x01\x00', 0x7}, @in={0x2, 0x4e21, @private=0x7}, @in={0x2, 0x4e20, @private=0xa010101}], 0x74) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r8, &(0x7f0000000280)=ANY=[@ANYBLOB='target PCI:18:#'], 0x16) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) 18.694523985s ago: executing program 0 (id=1843): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x5d, 0x0, &(0x7f0000000140)="60902b83861d9300fb74ea16d19cfa6d843e8b8386cec79a8c61f38cfbf247c630eb801cc134c5cd78b431534844d746bf40c0e4fe8c0a10f33f3a9bc6cf5e90135289f0d718ca0cfd0ee264ac7973d46613de8a5b170ee6059103cfb1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000001000370401000000f8dbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c040031810000300012800900010069706970000000002000028008000200ac1414bb06000f0006"], 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x6, 0xd00) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000003c0)=""/81) (async, rerun: 32) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r1, 0x3, {}, 0x2}, 0x18) (rerun: 32) 18.654303348s ago: executing program 5 (id=1844): mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x4140045e}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xc2, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x26, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x77, 0x0, [{0x0, 0x12, "881681ba3162cfdfa8b34cc86e1be900"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xa, 0x0, [{0x0, 0x4, "7f36"}]}]}}}}}}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x151000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002580)=@newtfilter={0x1f88, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x9}, {0xb}, {0x2, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1f50, 0x2, [@TCA_CGROUP_POLICE={0x54, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x10000}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x4, 0x9, 0x9, 0xec, {0x2, 0x2, 0x6, 0x5, 0x7, 0x5}, {0x65, 0x2, 0x5, 0x85, 0x53b, 0x6}, 0x6874, 0x6, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}]}, @TCA_CGROUP_ACT={0x1ef8, 0x1, [@m_pedit={0x1e04, 0x9, 0x0, 0x0, {{0xa}, {0x1d1c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x3, 0x5b, 0x5157984e7fa5a41a, 0x1, 0xe}, 0x2, 0x8, [{0x100, 0x401, 0x18d0, 0xd3, 0x3, 0x4}, {0x755c3a64, 0x3, 0x9, 0x6, 0x3, 0x211}, {0xcd6, 0x869b, 0x2, 0x3ff, 0x0, 0x9}, {0x7, 0x5, 0x7, 0x0, 0x1, 0x8}, {0x1, 0x0, 0xbb, 0x9, 0x401, 0x8a9f}]}, [{0x2, 0x0, 0xfffffff6, 0x3ff, 0x7, 0x8}, {0x8, 0xfffffffb, 0xcb47, 0x2, 0x0, 0x1}, {0x7ff, 0x0, 0xffff, 0x5}, {0x9, 0xf53, 0x8, 0x7fffffff, 0x1, 0xc9}, {0x400, 0x9, 0x0, 0x6, 0x97e2, 0x6}, {0x8, 0x551, 0x1, 0x20b2, 0x8, 0x3}, {0x3, 0x6, 0xc, 0x6, 0x5, 0x7ff}, {0x7, 0xff, 0x1, 0x4, 0x3, 0x5}, {0x200, 0x7, 0x1, 0x2, 0x1000, 0x582}, {0x4, 0x800, 0x9, 0x0, 0x10, 0xfffffffb}, {0x4, 0x1, 0x6, 0x7, 0x3, 0x7fffffff}, {0x10, 0x9, 0x4, 0x8, 0x1c0, 0xfcd}, {0x2b9, 0x3, 0x7, 0x6, 0x0, 0x8}, {0x916, 0xdf, 0x4, 0x3, 0x4, 0x3}, {0x0, 0x8, 0x7, 0x709c, 0xff, 0xffffffff}, {0x87, 0x200, 0xc17, 0xd69, 0x7fff, 0xb4f}, {0x7, 0x0, 0x200, 0x2, 0x5, 0x1}, {0x1, 0x1, 0x7, 0xff, 0x7f, 0x1}, {0xfffff182, 0x5, 0x81, 0x48, 0x4, 0x10}, {0x0, 0xfff, 0x5, 0x1, 0x1}, {0x6, 0x8, 0xa, 0x5, 0x98b}, {0x1, 0xffffffff, 0x7a28, 0x8001, 0x3, 0x6}, {0x9, 0xffff6ccc, 0x4, 0x1, 0xb5d, 0x1}, {0x9, 0x0, 0x3, 0x7278, 0x159}, {0x2, 0x4, 0x7fffffff, 0xa, 0x9, 0x40}, {0x5438efa3, 0x10000008, 0x9, 0x5, 0x2, 0x2}, {0x96, 0x3ff, 0x1, 0x9, 0xffffffff, 0x8}, {0x90, 0x3, 0x688, 0x3, 0x81, 0xffff}, {0x2, 0x1, 0x7799, 0x3, 0xe14, 0x7f}, {0x7, 0x8, 0x100, 0x5, 0x200, 0x80}, {0x92b, 0x400, 0x8, 0x9, 0x8af, 0x6}, {0x0, 0x4, 0x5cc, 0x2, 0x7fe, 0xe}, {0x2, 0x9, 0x10001, 0x5, 0x2, 0x2}, {0x3bd7, 0xffff0000, 0x80000001, 0x10, 0x9, 0x7}, {0xffff, 0x2, 0x9, 0x4, 0xffffffff, 0x3}, {0x1, 0x0, 0x645, 0x5, 0x8, 0x1}, {0x800, 0xbed3, 0x4, 0x8, 0x7, 0x7}, {0x7fff, 0x200, 0x5, 0xfffffff3, 0x0, 0x3}, {0x6, 0x6, 0x4, 0x0, 0xadb, 0x386}, {0xfffffffc, 0x1000, 0x8f, 0xfffffffb, 0x9351, 0x100}, {0xffff, 0x4, 0x3, 0x5, 0x11, 0x3}, {0x81, 0x401, 0x8, 0x8bd, 0x3, 0x3}, {0x7fff, 0x8, 0x1, 0x0, 0x0, 0x802}, {0x8, 0x101, 0x8, 0xc03b, 0x3, 0x7}, {0x101, 0xffffffff, 0x1, 0x10, 0x4, 0x8}, {0x401, 0x5, 0x6, 0x8, 0x2, 0x5}, {0x81, 0xff800000, 0x9, 0x8, 0x2, 0x23fa}, {0xd11, 0x704d, 0x7, 0x8, 0xf}, {0x7, 0x0, 0x6, 0x7, 0x7ffe, 0x57d8}, {0x9, 0xfff, 0x1, 0xf, 0x80000000}, {0x2, 0x3, 0x7fffffff, 0x9, 0x4000, 0xfffffffd}, {0x7, 0x4, 0x7, 0x3, 0x40, 0x7ff}, {0x0, 0x7, 0x4, 0x6, 0x480, 0xfffff000}, {0xe, 0x43f, 0x3, 0xfffffff9, 0x401, 0x6}, {0x4, 0x7, 0x1, 0x9, 0x3, 0x2d}, {0x9, 0x7000000, 0x0, 0xc, 0x2764, 0x9}, {0x1, 0x3, 0x8, 0x7, 0x40, 0x200}, {0x4, 0x69e, 0xfffffffd, 0xe58, 0xff, 0x282}, {0xb, 0x100, 0x0, 0x40008000, 0x1, 0x8b94}, {0x6, 0x10, 0x4, 0x5, 0x0, 0xffff0000}, {0x10001, 0x3, 0x10001, 0x8, 0x3, 0x67}, {0x9, 0x4, 0x3, 0x6, 0x8, 0x6}, {0x8, 0x8, 0x9, 0x5ab0, 0xc89}, {0x9, 0x7fffffff, 0x7, 0x6, 0x5d8, 0x7f}, {0x9, 0x0, 0x8, 0x8, 0x40000000, 0xb9}, {0x80000001, 0x9, 0x80, 0x1, 0x1ff, 0x6}, {0xfffffff9, 0x3, 0x554, 0x2cf, 0x3, 0x7}, {0x0, 0x8, 0xb6, 0xffffffff, 0x7, 0x200}, {0x9, 0x9039, 0xffe00000, 0x4, 0x249, 0x3}, {0x0, 0xffffe893, 0x7, 0xf6a2, 0x1, 0x525f}, {0x0, 0x5, 0xf, 0x9, 0x8d9, 0x3ff}, {0x3, 0xaa00918b, 0x6, 0xd0, 0x8, 0x6}, {0x1, 0x77, 0x8, 0x5, 0xef23, 0x9}, {0x2, 0x0, 0x2, 0x0, 0xf, 0x5}, {0x5, 0x3, 0xffff, 0x8, 0x7, 0x5}, {0x9, 0x1000, 0x9, 0x9, 0x7fff, 0x1}, {0x6, 0x2, 0x7, 0x400, 0x3, 0x5}, {0x4, 0x6525, 0x4, 0xf7b1, 0x3, 0x1}, {0x5, 0x88e5, 0x2, 0x5, 0x1, 0x9}, {0x1, 0x4, 0x7, 0x8000, 0x48000, 0x2}, {0x2, 0x2, 0x3, 0x3, 0x1, 0x4}, {0x1, 0x9bf8, 0x80000001, 0xa3, 0x9, 0xe4bf}, {0x6, 0x1, 0x7, 0x9, 0x215c, 0x1000}, {0x6, 0x9, 0x17, 0x82f, 0x44, 0x40}, {0x80000000, 0x8, 0x9, 0x4, 0x5, 0x6541}, {0x42, 0x400, 0x401, 0x41bb3467, 0x6, 0x5}, {0x1, 0x5, 0x4, 0x3, 0x2, 0xfff}, {0x101, 0x6, 0x101, 0x3, 0x80000000, 0x6}, {0xfffffff7, 0x100, 0x5, 0x4, 0x1, 0x8}, {0xfffffeff, 0x7fffffff, 0x0, 0x8, 0x5, 0x4000}, {0x4, 0x2, 0xedc0, 0x14, 0x7d, 0x2}, {0xd, 0x4c000, 0xff, 0x2, 0x0, 0xffffffff}, {0x197f5831, 0x10001, 0xffff0000, 0x7, 0x3, 0x80}, {0xd1, 0x4, 0x1, 0x5, 0xfffffffd, 0x10000}, {0x5, 0x2, 0xe, 0x91ef, 0xfffffff8, 0x1000}, {0xfffffff0, 0x0, 0xe, 0x4, 0x4, 0x5}, {0x2800000, 0x7fff, 0x3, 0x6, 0x8, 0xa}, {0x6, 0x0, 0x5, 0x0, 0x8000, 0xfffff0c9}, {0x1, 0x0, 0x32, 0x4, 0x48, 0xfffffffb}, {0x3, 0x2, 0x401, 0x1, 0x8c7b, 0x4a3e}, {0xf8d8, 0x1, 0x4673, 0x6, 0x7f, 0x7}, {0x401, 0xf8d9, 0x9a44, 0x81, 0xe000000, 0x9}, {0x8000, 0x9, 0x3a, 0x6, 0x2, 0x7}, {0x4, 0x7ff, 0x7fffffff, 0x3ff, 0x200, 0x4}, {0x9, 0x80000000, 0x8, 0xe, 0xd, 0xf66}, {0xb, 0xf373, 0x8001, 0x0, 0x2, 0xef}, {0xf, 0xe50e, 0x2000000, 0x4, 0x333, 0x3}, {0x9, 0x2, 0x26af, 0xfc, 0x0, 0xfffffffb}, {0x2, 0x0, 0x1, 0x4102, 0x7, 0x80000000}, {0x80000000, 0x7, 0x1, 0x9, 0x30000000, 0x261}, {0x4, 0x9, 0xbe, 0xfffff880, 0x401, 0x1000}, {0x9, 0x4c, 0x4, 0x5, 0x4, 0x7}, {0x1, 0x0, 0x9, 0xdc11, 0x8cd0, 0x7}, {0x81, 0x1ef08a2b, 0x4, 0x8, 0x80000000, 0x1}, {0x9, 0x2, 0xd, 0x982e, 0x4, 0x2}, {0x72d100, 0x401, 0xf114, 0x1, 0x9, 0x7f}, {0x9, 0x6, 0x4, 0x3, 0x6, 0xf}, {0x62221544, 0xa, 0x5, 0x0, 0xb, 0x1}, {0x3, 0x3, 0x200, 0x9c, 0x2}, {0x5, 0x1, 0x48, 0x5, 0x5, 0x5}, {0x4, 0x1, 0xfffffffc, 0x7, 0x8bb4, 0x401}, {0xf3a8, 0x1ff, 0x0, 0x8, 0x294b, 0x3}, {0x4, 0x8, 0x4, 0x2af4, 0x4, 0x5}, {0x0, 0x8, 0x3, 0xf2, 0x1, 0x5}, {0x2, 0xfffffc00, 0xe, 0x5, 0x2, 0x1}, {0xffffffff, 0x100, 0x1000, 0x3ff, 0x4, 0x9}, {0x80000001, 0xfffff800, 0x4, 0x2, 0x9, 0x6}, {0x10001, 0x2, 0xd35b, 0x5, 0x7, 0x9}], [{0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x5}, {}, {0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x4}, {0x4, 0xfea433da6769dbba}, {}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x3}, {0x4}, {0x2, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {}, {0x3}, {0x3}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x3}, {0x4}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x9, 0x4, 0x0, 0x6, 0x1}, 0xe, 0x7f, [{0x5a1d, 0x9, 0x10, 0x480, 0x8, 0x570}, {0x7, 0x8, 0x10000, 0x6, 0x7, 0x8}]}, [{0x1ff, 0x4, 0x4, 0x4, 0x4, 0x98}, {0x4c, 0x7fffffff, 0x2, 0x426cddd9, 0x3, 0x8000}, {0x1, 0xf, 0xe439, 0x100, 0x8, 0x8c3}, {0x0, 0x5, 0x4, 0x10, 0x1, 0x5}, {0xfffffc01, 0x5, 0x6, 0x1, 0x8ca0, 0x9}, {0x40, 0xc, 0x1, 0x6, 0x9, 0xfd}, {0x8, 0x101, 0x4, 0x9, 0x0, 0x2}, {0x0, 0x1, 0x2, 0x5, 0x82a4dfc6, 0x8000}, {0xd, 0x2, 0x8, 0x6, 0x7, 0x5}, {0x9, 0xb, 0xf, 0xff, 0x8001, 0x4}, {0x8, 0xffffffff, 0x1, 0xc1, 0x1, 0x1}, {0x0, 0x5, 0x9, 0x5, 0x4, 0x7}, {0x5, 0x1, 0xfffff001, 0x6418, 0x9, 0xff}, {0x6, 0xf71, 0x3, 0x4, 0x9, 0x4}, {0x1000, 0x4, 0x9, 0x100, 0x3, 0x7ff}, {0x6, 0x1, 0xe, 0x4, 0xe, 0x53}, {0x7fff, 0x9, 0x11, 0x7, 0xc, 0x1}, {0x7, 0x0, 0x6, 0xfffffff2, 0x3, 0xfffffffc}, {0x1, 0x2, 0x800, 0x9, 0x0, 0x5d33}, {0x0, 0x6, 0x82, 0x3, 0xe, 0x9}, {0x0, 0x10000, 0x1, 0x5, 0x215, 0x4}, {0x8, 0xf139, 0x9, 0x0, 0x7, 0xffff}, {0x2, 0x1, 0xd, 0xd, 0x9, 0x81}, {0x6, 0xb, 0x1, 0x7, 0x7, 0x6}, {0x101, 0x10, 0x70c, 0x7, 0x9, 0x3465}, {0x9, 0x9, 0xffff00, 0x2, 0x2, 0x8}, {0xe, 0x7, 0x54d, 0x3ff, 0x6, 0x3}, {0x3, 0x8f, 0x4, 0x13, 0x6, 0x1}, {0x2, 0x80000000, 0x1, 0xf3a, 0x8}, {0x4, 0x4, 0x5ec, 0x3, 0x8, 0x1}, {0xfffffbe4, 0x3, 0xffffffff, 0x7, 0x6f, 0x7}, {0x81b, 0x4, 0x6, 0x8000, 0x7, 0x5}, {0x8a0, 0xd951, 0x3, 0x3, 0xdc, 0x10000}, {0x3, 0x4, 0xffffffff, 0x9, 0x5b70, 0x200}, {0x7, 0x1, 0x9, 0x8, 0xbc35, 0x1}, {0x9, 0x6, 0x8, 0x5, 0x101}, {0xa, 0xd02, 0x81, 0x1, 0x67a, 0x2}, {0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x8}, {0x9, 0x3, 0x6, 0x6, 0x3, 0x53}, {0x3cc, 0x7, 0x5, 0x100, 0x8, 0x1}, {0x4, 0x1, 0x7, 0x7, 0x0, 0x1ff}, {0x80000001, 0x80, 0x8, 0x10001, 0x10001, 0x7ff}, {0x8, 0x3, 0x9, 0x0, 0xb0d, 0xfffffff8}, {0xffffffa3, 0x1635, 0x28, 0xffff, 0xe068, 0x7ffeffff}, {0x3, 0x1, 0xffff, 0x6, 0x3, 0x1}, {0xa, 0x1000, 0x2, 0x5, 0x6, 0x8}, {0x3, 0xc6f, 0x6, 0x6, 0x6, 0x9}, {0x7d, 0x5, 0x800, 0x1, 0x4, 0x80000001}, {0xf3d3, 0x1, 0x7, 0x3e7e, 0xd, 0x3}, {0x1, 0x3, 0x4, 0x7, 0x8, 0x2}, {0x2be6, 0x3, 0x3, 0x2, 0xc0e8}, {0x2, 0x2, 0x2, 0x77b, 0x88eb, 0x2}, {0x6, 0x6ac8, 0x5c6f, 0xfffff800, 0x2c40, 0xfff}, {0x1, 0x3ff, 0xaa, 0x80, 0x81, 0x4}, {0x7, 0x200, 0xf, 0x40, 0x3, 0x4}, {0x8, 0xfff, 0x800, 0x40, 0x2, 0x8}, {0x13e8, 0x376ed76c, 0xb44e, 0x200, 0x3, 0x4}, {0x7, 0xfffffffd, 0x2, 0x2, 0x6a5, 0x8}, {0x7, 0x1, 0x76254b73, 0x4, 0x3ff, 0xcc9}, {0x7, 0x6, 0x8, 0x81, 0x7}, {0x401, 0x6, 0x9, 0x4, 0x8000, 0x1}, {0x4, 0x7434, 0x3, 0x3, 0x4ec2, 0x54}, {0xb, 0x6, 0x2, 0x6, 0x7, 0x7}, {0xffffffff, 0x6, 0x6, 0x8, 0x9, 0xb2}, {0xb, 0x6, 0x7, 0x7, 0x7, 0x6d51}, {0x4, 0xb, 0x100, 0x7, 0x401, 0x80}, {0xff, 0x9, 0x0, 0xfff, 0xfff, 0x9}, {0x9443, 0x4, 0x3, 0x9, 0x9, 0x80000000}, {0x1ff, 0x1f, 0x4, 0x7, 0xa06, 0x800}, {0x4, 0x7fffffff, 0xff, 0xac13, 0x4, 0x9}, {0x9, 0x1, 0x1, 0x7f, 0xffff657a, 0xd}, {0x2, 0x7, 0x0, 0x401, 0x7, 0xf9c4}, {0x5c9, 0x6, 0x2, 0x5, 0x2, 0x20000000}, {0x7fffffff, 0x43f, 0x4, 0x3000, 0x6, 0x3}, {0x9, 0x0, 0x1, 0x800, 0x7, 0x7ff}, {0xbe1, 0x9, 0xc, 0x0, 0x800, 0x7}, {0x7fffffff, 0x5c7, 0x860, 0x81, 0x5, 0x7}, {0x1, 0x0, 0x7, 0x0, 0x5, 0x101}, {0x8000, 0x1, 0x6, 0x7, 0x4, 0xd}, {0x0, 0x0, 0x7, 0x2, 0x41c, 0x9}, {0xe, 0x3e, 0x7, 0x4, 0x8, 0x2}, {0x5, 0x40, 0x4, 0x5419, 0x984}, {0x7, 0xbc0, 0x7, 0x6, 0x4, 0x8001}, {0x1, 0x8000, 0x10, 0x200, 0x7, 0xd7}, {0x6, 0x10001, 0x8, 0x9, 0x4, 0x4}, {0x1000, 0xb, 0x0, 0x1000000, 0xf, 0x2}, {0x8, 0x800, 0x6, 0x9, 0x921, 0x26e0}, {0x6, 0x6, 0x2, 0x1, 0x2}, {0x3f548e8e, 0x1, 0x5, 0x9, 0x9, 0x10001}, {0x1ff, 0x40, 0x3, 0x4, 0x2, 0x5}, {0x6, 0xb00, 0x0, 0x7, 0x7, 0x6}, {0x4, 0xa, 0x9ccd, 0xe, 0x2, 0xfffffabd}, {0x4, 0x4, 0x4, 0x101, 0x0, 0x80}, {0x2, 0x3, 0x0, 0x1, 0x5, 0x864}, {0x200, 0xd, 0x9, 0x3, 0x2, 0x4}, {0x2, 0x5, 0x40, 0xb7, 0x1, 0x2}, {0x7ff, 0x1, 0x3, 0x10003, 0x7, 0x2}, {0x3, 0x101, 0x2, 0x2, 0x8, 0x6}, {0x2, 0x2ecd2ee, 0x2, 0x3ff, 0x9, 0x8}, {0x8a86, 0x8, 0x3, 0x6, 0x800, 0x3}, {0x8, 0x86, 0xc, 0x81, 0x5, 0x2}, {0x5, 0xfe, 0x1000, 0x7, 0xf775, 0x6}, {0x4, 0x4, 0x3, 0x91eb, 0x1, 0x7}, {0x6fc, 0xbaf0, 0xf, 0x1, 0x4, 0x1000}, {0x5, 0x6, 0x8, 0xd, 0x7fffffff, 0x54}, {0x458, 0x5c9, 0xab, 0xe, 0x80, 0x9}, {0x2b63, 0x9, 0x0, 0xfffffff8, 0x2, 0x9}, {0x4, 0x3, 0x1, 0x6, 0x2, 0x6}, {0xa, 0xfffffff4, 0x0, 0x1, 0x9, 0xffffb94c}, {0x7, 0x0, 0x5, 0xfff, 0x2313, 0x6}, {0x8973, 0xfffffffa, 0x8, 0xf7, 0x81, 0xfc}, {0x0, 0x400, 0x0, 0x6, 0x10001, 0xc}, {0x4, 0x5, 0x6cc0, 0x7, 0x9, 0x7}, {0x24, 0xfffffffe, 0xfffffffb, 0x1, 0x7ce6, 0x8}, {0x5, 0x5, 0x3c3, 0x1, 0x7, 0x60000000}, {0x5, 0x524, 0x2, 0x35, 0xfffffffd, 0x4}, {0xffffff7f, 0x611, 0x1, 0x0, 0x400, 0x1ff}, {0x0, 0x79e4, 0x6, 0x3, 0x5, 0x101}, {0x9, 0x2163, 0x0, 0x800, 0x10001, 0x6}, {0x22, 0x6, 0x0, 0x80000001, 0x1, 0x8ce}, {0x6, 0x0, 0x2c, 0x7fff, 0xe, 0x7}, {0x9, 0x81, 0xfff, 0x9, 0xfff, 0x8}, {0x148ee473, 0x80000000, 0x3, 0xe71, 0x5, 0x1}, {0x200, 0x9, 0x80, 0x6, 0x5, 0x5}, {0x7f, 0x4, 0x800, 0x4, 0xc590, 0x5}, {0x7, 0x0, 0x9, 0x1, 0x7, 0x51a}, {0x0, 0x3, 0x3ff, 0x7, 0x5, 0x8}, {0x4, 0x1, 0x6, 0xe2, 0x10000, 0x8}], [{0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x8fac9f3ed86ce49a}, {0x3}, {0x99bd51e2d5c01b7, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x2}, {0x2}, {0x6}, {}, {0x4, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x4}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x5}, {0x6, 0x1}, {0x4, 0x1}, {}, {0x6}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x2}, {0x5}, {0x2, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0xbf, 0x6, "1558bba12403a94d203aaac92b80dbbcee432a0a03e587d74218b01d7b074c9eed8ecacc56dbe68b8faeb1aaf2b54fb1c4ba18b5dfe9f930c55476fd66bfb5ce44f5adc3e3300427ccc22e5ebe160294a39cf17585a471048813051772c1cad41f3aad85c93f66851292117169ca15ba8cd58b2db366964d7c6f5087ed0897ec2eed7bb398981b2e8014b253bdfd821c3be8a1b6f161589bf435cda962e9954f9e6650e21cb914fe06c6e44fd31407bf5bdd7f11fd74ecc22ee841"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0xa8, 0x7, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'hfsc\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x7, 0x7, 0x6, 0xe40}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10, 0x7, 0xffffffffffffffff, 0x1, 0x2}}]}, {0x3f, 0x6, "7ce79a29ed90e599f90790675c7d5a06fc52dbec6e7feddaca22ee4fc308c4cec3cb7f02e921d8aec8f24e1f4d48508136a5c4da41375210735737"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_sample={0x48, 0xd, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x3, 0x20000000, 0x8, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x1f88}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) 18.58828073s ago: executing program 0 (id=1845): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 18.243463958s ago: executing program 5 (id=1846): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000002aac41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) syz_open_dev$evdev(0x0, 0xc898, 0x101000) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000a40)={'#! ', './file1', [{0x20, '!\xd6^+)}&[-+\x14!'}, {0x20, 'matchall\x00'}, {}, {0x20, '\x0e\xb1d\xc2\x80\x1c\x14\xd4\xd4\xc1\xdd\xbfhGC\xd9\x0eFg\x13\r\x98}\xcc\xffl\xe7U:\xc3\xd0\a\x00G\xf8\x06q\xb7\x9d\xda\xb57\x97E\x1aZ)\xf8\x03g\xd9\x02\x10w\t\xafy\xda\xcboDG\x1c\x18t^y{\xbf#\x01\xe5\xd48\f\x83i\x8ama\xae\xa2\\\x00\x9d1\xf6\x96\x17\x16).\xb2\x8d.S\xb2\xa3\x13;\xbe\xb7\xfag0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) socket(0x1d, 0x2, 0x6) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340), 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3300000010001fff0000000001000000000000d7", @ANYRESOCT=r6, @ANYRESHEX=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x81) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x0) 16.770626169s ago: executing program 5 (id=1849): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x28040600) fallocate(0xffffffffffffffff, 0x3, 0x1ff, 0x4) r5 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f0000000000)={r6, 0x1000, &(0x7f0000002a80)=""/4096}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000240)={r6, 0x1000, &(0x7f0000000540)=""/4096}) ioctl$SIOCSIFHWADDR(r4, 0x89f6, &(0x7f0000000040)={'vxcan1\x00', @remote}) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f00000001c0), 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000070000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r9 = syz_io_uring_setup(0xf7d, &(0x7f0000000340)={0x0, 0xde6f, 0x20000, 0x3, 0xf8}, &(0x7f0000000000), &(0x7f0000000200)) syz_io_uring_setup(0x882, &(0x7f0000000480)={0x0, 0x7734, 0xc2, 0x0, 0x31c, 0x0, r9}, &(0x7f00000002c0), &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 16.376534367s ago: executing program 7 (id=1850): connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x35, 0x8004) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB="0000008afd2e5147560911000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x20400, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a00060000000800160002000000080010000004000008001b"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f0000000400)=0x1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) 15.652346263s ago: executing program 4 (id=1851): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_pidfd_open(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x28, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x458002, 0x55) 15.321701508s ago: executing program 4 (id=1852): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r3, @ANYRES16=r2, @ANYBLOB="380102803c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400010408020200000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040009000000080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000000000400001002400010071756575655f696400"/222, @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000f", @ANYRES64=r1, @ANYRES32=r4], 0x198}, 0x1, 0x0, 0x0, 0x890}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0xffffffff, 0x8, 0x2, "a0e0f452000000001f00000000000000000800", 0x30385056}) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x4000000000000190, &(0x7f0000000080)) r7 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x2000000000000087, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={0x0, 0x6f0c}, 0x1, 0x0, 0x0, 0x200400c1}, 0x2) write(r8, &(0x7f0000000140), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) close(r7) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120110037edff110e8048968dd93010203010902124fad426dd0060904080100ff036b93"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x810}}]}) 5.01227403s ago: executing program 35 (id=1835): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x400004008, 0x4146c2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000001c0)={0x1, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x19, 0x70bd2c, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40da7, 0x79269}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8040) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) syz_emit_ethernet(0x48, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x12, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}]}}}}}}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi5\x00', 0x218000, 0x0) ioctl$COMEDI_POLL(r7, 0x640f) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x5, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004040}, 0x50040) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601010000000000000000000000001c0007800500140007000400080012400005000008000840000000000900020073797a300000002005000100070000000c000300686173683a697000050005000a000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}, 0xcd}], 0x1, 0x1, 0x0) 2.010773274s ago: executing program 36 (id=1847): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002d00010026bd7000fcdbdf250400000005000b0000000000fa475c4e4055cb05736bbc82c9a17f31a0c0cc64c1c7ee99b4759d9e4e0c6bb37a736ef2e6132e78b342a01d9a7658f23d388e7c5142b0abb9fb"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002d00010026bd7000fcdbdf250400000005000b0000000000fa475c4e4055cb05736bbc82c9a17f31a0c0cc64c1c7ee99b4759d9e4e0c6bb37a736ef2e6132e78b342a01d9a7658f23d388e7c5142b0abb9fb"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socket(0x40000000015, 0x5, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002280)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x40}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x8, @local, 0x2}, 0x1c) connect$inet6(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r0}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r0}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) 1.497994152s ago: executing program 37 (id=1849): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x28040600) fallocate(0xffffffffffffffff, 0x3, 0x1ff, 0x4) r5 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f0000000000)={r6, 0x1000, &(0x7f0000002a80)=""/4096}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000240)={r6, 0x1000, &(0x7f0000000540)=""/4096}) ioctl$SIOCSIFHWADDR(r4, 0x89f6, &(0x7f0000000040)={'vxcan1\x00', @remote}) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f00000001c0), 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000070000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r9 = syz_io_uring_setup(0xf7d, &(0x7f0000000340)={0x0, 0xde6f, 0x20000, 0x3, 0xf8}, &(0x7f0000000000), &(0x7f0000000200)) syz_io_uring_setup(0x882, &(0x7f0000000480)={0x0, 0x7734, 0xc2, 0x0, 0x31c, 0x0, r9}, &(0x7f00000002c0), &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 993.726354ms ago: executing program 38 (id=1850): connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x35, 0x8004) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB="0000008afd2e5147560911000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x20400, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a00060000000800160002000000080010000004000008001b"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f0000000400)=0x1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) 0s ago: executing program 39 (id=1852): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r3, @ANYRES16=r2, @ANYBLOB="380102803c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400010408020200000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040009000000080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000000000400001002400010071756575655f696400"/222, @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000f", @ANYRES64=r1, @ANYRES32=r4], 0x198}, 0x1, 0x0, 0x0, 0x890}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0xffffffff, 0x8, 0x2, "a0e0f452000000001f00000000000000000800", 0x30385056}) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x4000000000000190, &(0x7f0000000080)) r7 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x2000000000000087, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={0x0, 0x6f0c}, 0x1, 0x0, 0x0, 0x200400c1}, 0x2) write(r8, &(0x7f0000000140), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) close(r7) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120110037edff110e8048968dd93010203010902124fad426dd0060904080100ff036b93"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x810}}]}) kernel console output (not intermixed with test programs): mode [ 439.927909][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.964590][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 440.129217][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.140547][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.153889][ T10] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 440.171410][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.187018][ T10] usb 6-1: config 0 descriptor?? [ 440.394333][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 440.402686][T11004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.417637][T11004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.430744][ T10] cypress 0003:04B4:DE61.000E: item fetching failed at offset 5/7 [ 440.441331][ T10] cypress 0003:04B4:DE61.000E: parse failed [ 440.448195][ T10] cypress 0003:04B4:DE61.000E: probe with driver cypress failed with error -22 [ 440.559604][ T9] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 440.570115][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 440.585905][ T9] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 440.595852][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.606264][ T9] usb 1-1: config 0 descriptor?? [ 440.612820][T10878] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 440.639410][ T24] usb 6-1: USB disconnect, device number 20 [ 440.741337][ T12] lo (unregistering): left allmulticast mode [ 440.928430][T11001] team0 (unregistering): Port device team_slave_0 removed [ 440.941398][T11001] team0 (unregistering): Port device team_slave_1 removed [ 441.018094][ T9] usb 1-1: string descriptor 0 read error: -71 [ 441.123696][ T9] usb 1-1: USB disconnect, device number 24 [ 441.606077][ T5821] Bluetooth: hci3: command tx timeout [ 441.692524][ T30] audit: type=1400 audit(1759512638.687:471): avc: denied { mount } for pid=11031 comm="syz.0.1274" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 441.780786][T10954] chnl_net:caif_netlink_parms(): no params data found [ 442.046110][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 442.235078][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 442.247817][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 442.293833][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.445595][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 443.027171][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.288893][ T9] usb 1-1: config 0 descriptor?? [ 443.295645][T10954] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.456790][T10954] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.463983][T10954] bridge_slave_0: entered allmulticast mode [ 443.511540][T10954] bridge_slave_0: entered promiscuous mode [ 443.532207][T10954] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.572082][T10954] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.610527][T10954] bridge_slave_1: entered allmulticast mode [ 443.626102][T10954] bridge_slave_1: entered promiscuous mode [ 443.687902][ T5821] Bluetooth: hci3: command tx timeout [ 443.738540][T10954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.753311][T10954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.055235][T11038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.077634][T11038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.079283][ T9] logitech-djreceiver 0003:046D:C517.000F: unknown main item tag 0x5 [ 444.180313][T10954] team0: Port device team_slave_0 added [ 444.189987][T10954] team0: Port device team_slave_1 added [ 444.197496][ T9] logitech-djreceiver 0003:046D:C517.000F: item fetching failed at offset 2/5 [ 444.232822][ T9] logitech-djreceiver 0003:046D:C517.000F: logi_dj_probe: parse failed [ 444.253571][ T9] logitech-djreceiver 0003:046D:C517.000F: probe with driver logitech-djreceiver failed with error -22 [ 444.286638][ T9] usb 1-1: USB disconnect, device number 25 [ 444.309776][T10954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.333197][T10954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.363238][T10954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.379714][T10954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.389331][T10954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.516358][ T30] audit: type=1400 audit(1759512641.517:472): avc: denied { bind } for pid=11104 comm="syz.5.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 444.548105][T10954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.736372][T11119] FAULT_INJECTION: forcing a failure. [ 444.736372][T11119] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 444.750190][T11119] CPU: 0 UID: 0 PID: 11119 Comm: syz.6.1284 Not tainted syzkaller #0 PREEMPT(full) [ 444.750212][T11119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 444.750222][T11119] Call Trace: [ 444.750228][T11119] [ 444.750235][T11119] dump_stack_lvl+0x16c/0x1f0 [ 444.750272][T11119] should_fail_ex+0x512/0x640 [ 444.750299][T11119] should_fail_alloc_page+0xe7/0x130 [ 444.750322][T11119] prepare_alloc_pages+0x3c2/0x610 [ 444.750347][T11119] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 444.750372][T11119] ? __lock_acquire+0xb97/0x1ce0 [ 444.750397][T11119] ? lock_acquire+0x179/0x350 [ 444.750416][T11119] ? find_held_lock+0x2b/0x80 [ 444.750442][T11119] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 444.750472][T11119] ? page_table_check_set+0x631/0x750 [ 444.750493][T11119] ? __page_table_check_ptes_set+0x1ae/0x420 [ 444.750510][T11119] ? find_held_lock+0x2b/0x80 [ 444.750532][T11119] ? find_held_lock+0x2b/0x80 [ 444.750557][T11119] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 444.750584][T11119] ? policy_nodemask+0xea/0x4e0 [ 444.750608][T11119] alloc_pages_mpol+0x1fb/0x550 [ 444.750631][T11119] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 444.750656][T11119] ? __lock_acquire+0x62e/0x1ce0 [ 444.750676][T11119] folio_alloc_mpol_noprof+0x36/0x2f0 [ 444.750704][T11119] vma_alloc_folio_noprof+0xed/0x1e0 [ 444.750730][T11119] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 444.750763][T11119] do_pte_missing+0x2202/0x3ba0 [ 444.750789][T11119] ? find_held_lock+0x2b/0x80 [ 444.750819][T11119] __handle_mm_fault+0x1556/0x2aa0 [ 444.750848][T11119] ? mt_find+0x3e2/0xa20 [ 444.750877][T11119] ? __pfx___handle_mm_fault+0x10/0x10 [ 444.750900][T11119] ? __pfx_mt_find+0x10/0x10 [ 444.750941][T11119] ? find_vma+0xbf/0x140 [ 444.750960][T11119] ? __pfx_find_vma+0x10/0x10 [ 444.750981][T11119] handle_mm_fault+0x589/0xd10 [ 444.751008][T11119] ? __pkru_allows_pkey+0x31/0xb0 [ 444.751031][T11119] do_user_addr_fault+0x7a6/0x1370 [ 444.751055][T11119] ? rcu_is_watching+0x12/0xc0 [ 444.751084][T11119] exc_page_fault+0x5c/0xb0 [ 444.751108][T11119] asm_exc_page_fault+0x26/0x30 [ 444.751126][T11119] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 444.751147][T11119] Code: 24 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 444.751163][T11119] RSP: 0018:ffffc90005a67bd0 EFLAGS: 00050206 [ 444.751178][T11119] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000040 [ 444.751188][T11119] RDX: 0000000000000000 RSI: ffff88806afd6fc0 RDI: 000020000000d000 [ 444.751199][T11119] RBP: 000020000000c040 R08: 0000000000000000 R09: ffffed100d5fadff [ 444.751210][T11119] R10: ffff88806afd6fff R11: 0000000000000000 R12: ffff88806afd6000 [ 444.751220][T11119] R13: 000020000000d040 R14: 00007ffffffff000 R15: 0000000000000000 [ 444.751250][T11119] _copy_to_user+0xbb/0xd0 [ 444.751280][T11119] environ_read+0x287/0x450 [ 444.751305][T11119] ? __pfx_environ_read+0x10/0x10 [ 444.751322][T11119] vfs_readv+0x5be/0x8b0 [ 444.751345][T11119] ? __pfx_vfs_readv+0x10/0x10 [ 444.751363][T11119] ? find_held_lock+0x2b/0x80 [ 444.751402][T11119] ? __fget_files+0x20e/0x3c0 [ 444.751429][T11119] ? do_preadv+0x1a6/0x270 [ 444.751443][T11119] do_preadv+0x1a6/0x270 [ 444.751461][T11119] ? __pfx_do_preadv+0x10/0x10 [ 444.751485][T11119] do_syscall_64+0xcd/0x4e0 [ 444.751511][T11119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.751526][T11119] RIP: 0033:0x7ff2a518eec9 [ 444.751540][T11119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.751556][T11119] RSP: 002b:00007ff2a5ffb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 444.751572][T11119] RAX: ffffffffffffffda RBX: 00007ff2a53e6090 RCX: 00007ff2a518eec9 [ 444.751583][T11119] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000005 [ 444.751593][T11119] RBP: 00007ff2a5ffb090 R08: 0000000000000000 R09: 0000000000000000 [ 444.751603][T11119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 444.751613][T11119] R13: 00007ff2a53e6128 R14: 00007ff2a53e6090 R15: 00007ffe29be0258 [ 444.751638][T11119] [ 445.686794][T11130] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1286'. [ 445.703506][T10954] hsr_slave_0: entered promiscuous mode [ 445.717574][T10954] hsr_slave_1: entered promiscuous mode [ 445.725143][T10954] debugfs: 'hsr0' already exists in 'hsr' [ 445.730925][T10954] Cannot create hsr debugfs directory [ 445.769342][ T5821] Bluetooth: hci3: command tx timeout [ 446.849800][ T30] audit: type=1326 audit(1759512643.857:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11149 comm="syz.6.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2a518eec9 code=0x7ffc0000 [ 446.936317][ T30] audit: type=1326 audit(1759512643.887:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11149 comm="syz.6.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2a518eec9 code=0x7ffc0000 [ 446.962035][T10954] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 447.031887][ T30] audit: type=1326 audit(1759512643.887:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11149 comm="syz.6.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2a518eec9 code=0x7ffc0000 [ 447.070368][T10954] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 447.103708][T10954] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 447.183429][ T30] audit: type=1326 audit(1759512643.887:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11149 comm="syz.6.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2a518eec9 code=0x7ffc0000 [ 447.191368][T10954] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 447.337778][ T30] audit: type=1326 audit(1759512643.887:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11149 comm="syz.6.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2a518eec9 code=0x7ffc0000 [ 447.374958][ T30] audit: type=1326 audit(1759512643.887:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11149 comm="syz.6.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2a518eec9 code=0x7ffc0000 [ 447.438971][T11165] fuse: Unknown parameter '¢N‡4ñTÈ;O®ä(ià' [ 447.456486][ T30] audit: type=1326 audit(1759512643.887:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11149 comm="syz.6.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2a518eec9 code=0x7ffc0000 [ 447.592101][ T30] audit: type=1326 audit(1759512643.887:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11149 comm="syz.6.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2a518eec9 code=0x7ffc0000 [ 447.752666][ T30] audit: type=1326 audit(1759512643.887:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11149 comm="syz.6.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2a518eec9 code=0x7ffc0000 [ 447.787163][ T30] audit: type=1326 audit(1759512643.887:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11149 comm="syz.6.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2a518eec9 code=0x7ffc0000 [ 448.109324][T10954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.150859][T10954] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.231991][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.239199][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.294578][ T6191] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.301807][ T6191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.843372][T11204] FAULT_INJECTION: forcing a failure. [ 448.843372][T11204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.885579][T11204] CPU: 0 UID: 0 PID: 11204 Comm: syz.6.1296 Not tainted syzkaller #0 PREEMPT(full) [ 448.885604][T11204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 448.885614][T11204] Call Trace: [ 448.885620][T11204] [ 448.885627][T11204] dump_stack_lvl+0x16c/0x1f0 [ 448.885654][T11204] should_fail_ex+0x512/0x640 [ 448.885677][T11204] _copy_to_user+0x32/0xd0 [ 448.885699][T11204] environ_read+0x287/0x450 [ 448.885714][T11204] ? __pfx_environ_read+0x10/0x10 [ 448.885725][T11204] vfs_readv+0x5be/0x8b0 [ 448.885738][T11204] ? __pfx_vfs_readv+0x10/0x10 [ 448.885749][T11204] ? find_held_lock+0x2b/0x80 [ 448.885773][T11204] ? __fget_files+0x20e/0x3c0 [ 448.885789][T11204] ? do_preadv+0x1a6/0x270 [ 448.885798][T11204] do_preadv+0x1a6/0x270 [ 448.885808][T11204] ? __pfx_do_preadv+0x10/0x10 [ 448.885821][T11204] do_syscall_64+0xcd/0x4e0 [ 448.885839][T11204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.885851][T11204] RIP: 0033:0x7ff2a518eec9 [ 448.885859][T11204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.885870][T11204] RSP: 002b:00007ff2a5ffb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 448.885881][T11204] RAX: ffffffffffffffda RBX: 00007ff2a53e6090 RCX: 00007ff2a518eec9 [ 448.885888][T11204] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000005 [ 448.885894][T11204] RBP: 00007ff2a5ffb090 R08: 0000000000000000 R09: 0000000000000000 [ 448.885900][T11204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 448.885906][T11204] R13: 00007ff2a53e6128 R14: 00007ff2a53e6090 R15: 00007ffe29be0258 [ 448.885919][T11204] [ 449.237007][T10954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.489761][T11229] ptrace attach of "./syz-executor exec"[5816] was attempted by ""[11229] [ 449.540568][T11231] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1302'. [ 449.549998][T11231] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1302'. [ 449.723061][T11236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1303'. [ 449.821079][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1303'. [ 450.927689][T10954] veth0_vlan: entered promiscuous mode [ 450.953533][T10954] veth1_vlan: entered promiscuous mode [ 451.217853][T10954] veth0_macvtap: entered promiscuous mode [ 451.665479][T10954] veth1_macvtap: entered promiscuous mode [ 451.776310][T11267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.818866][T10954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.885811][T10954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.998479][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.094776][T11275] FAULT_INJECTION: forcing a failure. [ 452.094776][T11275] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 452.108240][T11275] CPU: 0 UID: 0 PID: 11275 Comm: syz.6.1310 Not tainted syzkaller #0 PREEMPT(full) [ 452.108264][T11275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 452.108273][T11275] Call Trace: [ 452.108279][T11275] [ 452.108284][T11275] dump_stack_lvl+0x16c/0x1f0 [ 452.108306][T11275] should_fail_ex+0x512/0x640 [ 452.108325][T11275] should_fail_alloc_page+0xe7/0x130 [ 452.108341][T11275] prepare_alloc_pages+0x3c2/0x610 [ 452.108359][T11275] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 452.108381][T11275] ? __pfx_sched_clock_cpu+0x10/0x10 [ 452.108393][T11275] ? __pick_eevdf+0x127/0x670 [ 452.108405][T11275] ? find_held_lock+0x2b/0x80 [ 452.108422][T11275] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 452.108439][T11275] ? rcu_is_watching+0x12/0xc0 [ 452.108457][T11275] ? __schedule+0x11a3/0x5de0 [ 452.108478][T11275] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 452.108495][T11275] ? policy_nodemask+0xea/0x4e0 [ 452.108514][T11275] alloc_pages_mpol+0x1fb/0x550 [ 452.108529][T11275] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 452.108546][T11275] folio_alloc_mpol_noprof+0x36/0x2f0 [ 452.108563][T11275] vma_alloc_folio_noprof+0xed/0x1e0 [ 452.108579][T11275] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 452.108596][T11275] ? do_pte_missing+0x10e6/0x3ba0 [ 452.108615][T11275] do_pte_missing+0x2202/0x3ba0 [ 452.108641][T11275] __handle_mm_fault+0x1556/0x2aa0 [ 452.108659][T11275] ? mt_find+0x3e2/0xa20 [ 452.108678][T11275] ? __pfx___handle_mm_fault+0x10/0x10 [ 452.108692][T11275] ? __pfx_mt_find+0x10/0x10 [ 452.108716][T11275] ? find_vma+0xbf/0x140 [ 452.108728][T11275] ? __pfx_find_vma+0x10/0x10 [ 452.108741][T11275] handle_mm_fault+0x589/0xd10 [ 452.108758][T11275] ? __pkru_allows_pkey+0x31/0xb0 [ 452.108773][T11275] do_user_addr_fault+0x7a6/0x1370 [ 452.108787][T11275] ? rcu_is_watching+0x12/0xc0 [ 452.108804][T11275] exc_page_fault+0x5c/0xb0 [ 452.108820][T11275] asm_exc_page_fault+0x26/0x30 [ 452.108831][T11275] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 452.108844][T11275] Code: 24 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 452.108854][T11275] RSP: 0018:ffffc90004fb7bd0 EFLAGS: 00050206 [ 452.108864][T11275] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000040 [ 452.108871][T11275] RDX: 0000000000000000 RSI: ffff88804dca0fc0 RDI: 000020000000f000 [ 452.108877][T11275] RBP: 000020000000e040 R08: 0000000000000000 R09: ffffed1009b941ff [ 452.108884][T11275] R10: ffff88804dca0fff R11: 0000000000000000 R12: ffff88804dca0000 [ 452.108890][T11275] R13: 000020000000f040 R14: 00007ffffffff000 R15: 0000000000000000 [ 452.108903][T11275] _copy_to_user+0xbb/0xd0 [ 452.108923][T11275] environ_read+0x287/0x450 [ 452.108938][T11275] ? __pfx_environ_read+0x10/0x10 [ 452.108948][T11275] vfs_readv+0x5be/0x8b0 [ 452.108962][T11275] ? __pfx_vfs_readv+0x10/0x10 [ 452.108973][T11275] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 452.108990][T11275] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 452.109010][T11275] ? __fget_files+0x20e/0x3c0 [ 452.109021][T11275] ? trace_irq_enable.constprop.0+0x10/0x120 [ 452.109041][T11275] ? do_preadv+0x1a6/0x270 [ 452.109050][T11275] do_preadv+0x1a6/0x270 [ 452.109060][T11275] ? __pfx_do_preadv+0x10/0x10 [ 452.109071][T11275] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 452.109089][T11275] do_syscall_64+0xcd/0x4e0 [ 452.109106][T11275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.109117][T11275] RIP: 0033:0x7ff2a518eec9 [ 452.109127][T11275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.109137][T11275] RSP: 002b:00007ff2a5ffb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 452.109207][T11275] RAX: ffffffffffffffda RBX: 00007ff2a53e6090 RCX: 00007ff2a518eec9 [ 452.109216][T11275] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000005 [ 452.109222][T11275] RBP: 00007ff2a5ffb090 R08: 0000000000000000 R09: 0000000000000000 [ 452.109228][T11275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 452.109235][T11275] R13: 00007ff2a53e6128 R14: 00007ff2a53e6090 R15: 00007ffe29be0258 [ 452.109251][T11275] [ 452.564041][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.602428][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.628148][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.262959][ T6191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.347990][ T6191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.414886][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.487666][T11306] syz.4.1316 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 453.771588][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.547918][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 455.547936][ T30] audit: type=1400 audit(1759512652.407:514): avc: denied { ioctl } for pid=11312 comm="syz.6.1317" path="/58/file0" dev="tmpfs" ino=326 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 455.735556][T11334] overlay: filesystem on ./file0 not supported as upperdir [ 457.439461][ T30] audit: type=1804 audit(1759512654.447:515): pid=11356 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1321" name="file0" dev="ramfs" ino=30522 res=1 errno=0 [ 457.556885][T11357] FAULT_INJECTION: forcing a failure. [ 457.556885][T11357] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 457.570323][T11357] CPU: 0 UID: 0 PID: 11357 Comm: syz.7.1323 Not tainted syzkaller #0 PREEMPT(full) [ 457.570348][T11357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 457.570356][T11357] Call Trace: [ 457.570360][T11357] [ 457.570365][T11357] dump_stack_lvl+0x16c/0x1f0 [ 457.570388][T11357] should_fail_ex+0x512/0x640 [ 457.570408][T11357] should_fail_alloc_page+0xe7/0x130 [ 457.570424][T11357] prepare_alloc_pages+0x3c2/0x610 [ 457.570441][T11357] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 457.570461][T11357] ? __schedule+0x11a3/0x5de0 [ 457.570485][T11357] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 457.570506][T11357] ? __pfx___schedule+0x10/0x10 [ 457.570525][T11357] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 457.570542][T11357] ? policy_nodemask+0xea/0x4e0 [ 457.570557][T11357] alloc_pages_mpol+0x1fb/0x550 [ 457.570572][T11357] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 457.570586][T11357] ? get_vma_policy+0x18d/0x3c0 [ 457.570600][T11357] ? get_vma_policy+0x337/0x3c0 [ 457.570617][T11357] folio_alloc_mpol_noprof+0x36/0x2f0 [ 457.570633][T11357] vma_alloc_folio_noprof+0xed/0x1e0 [ 457.570649][T11357] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 457.570665][T11357] ? mark_held_locks+0x49/0x80 [ 457.570677][T11357] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 457.570694][T11357] do_pte_missing+0x2202/0x3ba0 [ 457.570716][T11357] __handle_mm_fault+0x1556/0x2aa0 [ 457.570736][T11357] ? __pfx___handle_mm_fault+0x10/0x10 [ 457.570751][T11357] ? lockdep_hardirqs_on+0x7c/0x110 [ 457.570773][T11357] ? lockdep_hardirqs_on+0x7c/0x110 [ 457.570791][T11357] handle_mm_fault+0x589/0xd10 [ 457.570808][T11357] ? __pkru_allows_pkey+0x31/0xb0 [ 457.570822][T11357] do_user_addr_fault+0x7a6/0x1370 [ 457.570836][T11357] ? rcu_is_watching+0x12/0xc0 [ 457.570854][T11357] exc_page_fault+0x5c/0xb0 [ 457.570869][T11357] asm_exc_page_fault+0x26/0x30 [ 457.570880][T11357] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 457.570894][T11357] Code: 24 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 457.570904][T11357] RSP: 0018:ffffc9000488fbd0 EFLAGS: 00050206 [ 457.570914][T11357] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000040 [ 457.570920][T11357] RDX: 0000000000000000 RSI: ffff88806aacffc0 RDI: 0000200000010000 [ 457.570927][T11357] RBP: 000020000000f040 R08: 0000000000000000 R09: ffffed100d559fff [ 457.570933][T11357] R10: ffff88806aacffff R11: 0000000000000000 R12: ffff88806aacf000 [ 457.570940][T11357] R13: 0000200000010040 R14: 00007ffffffff000 R15: 0000000000000000 [ 457.570953][T11357] _copy_to_user+0xbb/0xd0 [ 457.570972][T11357] environ_read+0x287/0x450 [ 457.570987][T11357] ? __pfx_environ_read+0x10/0x10 [ 457.570997][T11357] vfs_readv+0x5be/0x8b0 [ 457.571011][T11357] ? __pfx_vfs_readv+0x10/0x10 [ 457.571032][T11357] ? __fget_files+0x20e/0x3c0 [ 457.571044][T11357] ? fget_raw+0x40/0x50 [ 457.571058][T11357] ? do_preadv+0x1a6/0x270 [ 457.571067][T11357] do_preadv+0x1a6/0x270 [ 457.571077][T11357] ? __pfx_do_preadv+0x10/0x10 [ 457.571088][T11357] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 457.571107][T11357] do_syscall_64+0xcd/0x4e0 [ 457.571125][T11357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.571135][T11357] RIP: 0033:0x7f5817d8eec9 [ 457.571144][T11357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.571154][T11357] RSP: 002b:00007f5815ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 457.571164][T11357] RAX: ffffffffffffffda RBX: 00007f5817fe6090 RCX: 00007f5817d8eec9 [ 457.571170][T11357] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000005 [ 457.571176][T11357] RBP: 00007f5815ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 457.571183][T11357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 457.571189][T11357] R13: 00007f5817fe6128 R14: 00007f5817fe6090 R15: 00007ffd8a15d708 [ 457.571202][T11357] [ 459.348032][T11370] ceph: No mds server is up or the cluster is laggy [ 459.359981][ T24] libceph: connect (1)[c::]:6789 error -101 [ 459.393058][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 459.693547][T11366] ceph: No mds server is up or the cluster is laggy [ 459.711762][T11389] overlay: Unknown parameter 'smackfshat' [ 459.912864][T11396] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 459.919429][T11396] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 459.928171][T11396] vhci_hcd vhci_hcd.0: Device attached [ 460.013190][T11402] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 460.019751][T11402] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 460.034020][T11402] vhci_hcd vhci_hcd.0: Device attached [ 460.050831][T11405] vhci_hcd: connection closed [ 460.064596][T11062] vhci_hcd: stop threads [ 460.068940][T11062] vhci_hcd: release socket [ 460.096384][T11409] fuse: Bad value for 'fd' [ 460.204468][ T10] vhci_hcd: vhci_device speed not set [ 460.225098][ T9] usb 46-1: SetAddress Request (2) to port 0 [ 460.231753][ T9] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 460.264345][ T10] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 460.527930][T11398] vhci_hcd: connection reset by peer [ 460.834526][T11062] vhci_hcd: disconnect device [ 460.866712][T11062] vhci_hcd: stop threads [ 460.932434][T11062] vhci_hcd: release socket [ 461.096504][T11062] vhci_hcd: disconnect device [ 461.749543][T11425] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1337'. [ 461.844831][ T30] audit: type=1804 audit(1759512658.847:516): pid=11426 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1338" name="file0" dev="ramfs" ino=30580 res=1 errno=0 [ 461.950609][T11429] fuse: Unknown parameter '“´ed¢ŒšGFKÃ(kh¶Š!§ïfÁKþôzÒáj%Ô' [ 462.392340][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1340'. [ 463.205495][ T5883] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 463.270760][T11465] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1347'. [ 463.366700][ T5883] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 463.378584][ T5936] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 463.389610][ T5883] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 463.403144][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 12409, setting to 1024 [ 463.463802][T11471] fuse: Bad value for 'fd' [ 463.546201][ T5936] usb 1-1: config 186 has an invalid interface number: 72 but max is 0 [ 464.229238][ T5936] usb 1-1: config 186 has an invalid descriptor of length 36, skipping remainder of the config [ 464.240331][ T5883] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 464.251785][ T5936] usb 1-1: config 186 has no interface number 0 [ 464.258427][ T5936] usb 1-1: config 186 interface 72 has no altsetting 0 [ 464.276768][ T5936] usb 1-1: New USB device found, idVendor=b9ea, idProduct=926f, bcdDevice=f1.b1 [ 464.286637][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.295083][ T5936] usb 1-1: Product: syz [ 464.299392][ T5883] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 464.308635][ T5936] usb 1-1: Manufacturer: syz [ 464.313257][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.321510][ T5936] usb 1-1: SerialNumber: syz [ 464.326835][ T5883] usb 6-1: Product: syz [ 464.331008][ T5883] usb 6-1: Manufacturer: syz [ 464.336365][ T5883] usb 6-1: SerialNumber: syz [ 464.365497][ T5883] usb 6-1: config 0 descriptor?? [ 464.371005][T11452] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 464.381416][T11452] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 464.391013][ T5883] usb 6-1: ucan: probing device on interface #0 [ 464.485830][T11480] loop6: detected capacity change from 0 to 524287487 [ 464.525584][T11480] buffer_io_error: 7 callbacks suppressed [ 464.525599][T11480] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.670612][ T5883] usb 6-1: ucan: could not read protocol version, ret=28 [ 464.705786][ T5883] usb 6-1: ucan: probe failed; try to update the device firmware [ 464.717387][T11485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.729427][ T5883] usb 6-1: USB disconnect, device number 21 [ 464.750396][T11480] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.764602][T11480] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.797560][T11480] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.807178][T11480] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.815811][T11480] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.823802][T11480] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.952294][T11482] pim6reg: entered allmulticast mode [ 464.969023][T11485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.997436][T11480] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.005677][T11480] ldm_validate_partition_table(): Disk read failed. [ 465.013453][T11480] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.021534][T11480] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.059164][T11480] Dev loop6: unable to read RDB block 0 [ 465.065184][T11480] loop6: unable to read partition table [ 465.074755][T11480] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 465.285375][ T9] usb 46-1: device descriptor read/8, error -110 [ 465.434682][ T10] vhci_hcd: vhci_device speed not set [ 465.464291][ T5883] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 465.464291][ T5906] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 465.615603][ T5883] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 465.624878][ T5883] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 465.635303][ T5883] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 465.644299][ T5906] usb 7-1: Using ep0 maxpacket: 32 [ 465.649933][ T5883] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 465.651636][ T5906] usb 7-1: config 9 has an invalid interface number: 37 but max is 0 [ 465.661126][ T5883] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 465.662561][ T5883] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 465.689507][ T5906] usb 7-1: config 9 has no interface number 0 [ 465.689577][ T5906] usb 7-1: config 9 interface 37 has no altsetting 0 [ 465.705379][ T9] usb usb46-port1: attempt power cycle [ 465.711408][ T5906] usb 7-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 465.711493][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 465.729625][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.729925][ T5883] usb 6-1: Product: syz [ 465.738022][ T5906] usb 7-1: Product: syz [ 465.742267][ T5883] usb 6-1: Manufacturer: syz [ 465.746291][ T5906] usb 7-1: Manufacturer: syz [ 465.758357][ T5906] usb 7-1: SerialNumber: syz [ 465.763094][ T5883] cdc_wdm 6-1:1.0: skipping garbage [ 465.768902][ T5883] cdc_wdm 6-1:1.0: skipping garbage [ 465.784145][ T5883] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 465.790500][ T5883] cdc_wdm 6-1:1.0: Unknown control protocol [ 465.991999][ T5906] gspca_main: spca506-2.14.0 probing 0734:043b [ 466.020150][ T30] audit: type=1400 audit(1759512663.027:517): avc: denied { read write } for pid=11489 comm="syz.5.1352" name="cdc-wdm0" dev="devtmpfs" ino=3207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 466.048651][ T30] audit: type=1400 audit(1759512663.027:518): avc: denied { open } for pid=11489 comm="syz.5.1352" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 466.112606][ T5906] usb 7-1: USB disconnect, device number 7 [ 466.156206][ T24] usb 1-1: USB disconnect, device number 26 [ 466.264870][ C1] cdc_wdm 6-1:1.0: Unexpected error -71 [ 466.265213][ T5936] usb 6-1: USB disconnect, device number 22 [ 466.272655][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 466.277906][ T9] usb usb46-port1: unable to enumerate USB device [ 466.283815][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 466.296024][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 466.305049][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.329932][ T30] audit: type=1400 audit(1759512663.337:519): avc: denied { execmem } for pid=11498 comm="syz.7.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 466.688126][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1356'. [ 467.527987][T11488] pim6reg: left allmulticast mode [ 467.610340][T11513] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1358'. [ 467.619618][T11513] 0ªX¹¦À: renamed from caif0 [ 467.639787][T11513] 0ªX¹¦À: entered allmulticast mode [ 467.795199][T11513] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 467.814087][ T30] audit: type=1400 audit(1759512664.767:520): avc: denied { connect } for pid=11508 comm="syz.6.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 467.872144][ T30] audit: type=1400 audit(1759512664.777:521): avc: denied { write } for pid=11508 comm="syz.6.1357" path="socket:[32807]" dev="sockfs" ino=32807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 468.041968][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1359'. [ 468.051124][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1359'. [ 468.274833][T11530] FAULT_INJECTION: forcing a failure. [ 468.274833][T11530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.289168][T11530] CPU: 0 UID: 0 PID: 11530 Comm: syz.0.1360 Not tainted syzkaller #0 PREEMPT(full) [ 468.289194][T11530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 468.289203][T11530] Call Trace: [ 468.289209][T11530] [ 468.289215][T11530] dump_stack_lvl+0x16c/0x1f0 [ 468.289245][T11530] should_fail_ex+0x512/0x640 [ 468.289273][T11530] _copy_to_user+0x32/0xd0 [ 468.289300][T11530] environ_read+0x287/0x450 [ 468.289322][T11530] ? __pfx_environ_read+0x10/0x10 [ 468.289338][T11530] vfs_readv+0x5be/0x8b0 [ 468.289359][T11530] ? __pfx_vfs_readv+0x10/0x10 [ 468.289374][T11530] ? find_held_lock+0x2b/0x80 [ 468.289416][T11530] ? __fget_files+0x20e/0x3c0 [ 468.289433][T11530] ? fdget_pos+0x1c0/0x370 [ 468.289457][T11530] ? do_preadv+0x1a6/0x270 [ 468.289470][T11530] do_preadv+0x1a6/0x270 [ 468.289485][T11530] ? __pfx_do_preadv+0x10/0x10 [ 468.289506][T11530] do_syscall_64+0xcd/0x4e0 [ 468.289532][T11530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.289548][T11530] RIP: 0033:0x7fde5e98eec9 [ 468.289562][T11530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.289578][T11530] RSP: 002b:00007fde5f769038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 468.289593][T11530] RAX: ffffffffffffffda RBX: 00007fde5ebe6090 RCX: 00007fde5e98eec9 [ 468.289603][T11530] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000005 [ 468.289613][T11530] RBP: 00007fde5f769090 R08: 0000000000000000 R09: 0000000000000000 [ 468.289622][T11530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.289630][T11530] R13: 00007fde5ebe6128 R14: 00007fde5ebe6090 R15: 00007ffeda3c9e98 [ 468.289652][T11530] [ 469.417518][T11555] loop6: detected capacity change from 0 to 524287487 [ 469.460456][ T9731] ldm_validate_partition_table(): Disk read failed. [ 469.472548][ T9731] Dev loop6: unable to read RDB block 0 [ 469.481360][ T9731] loop6: unable to read partition table [ 469.489280][T11555] ldm_validate_partition_table(): Disk read failed. [ 469.496620][T11555] Dev loop6: unable to read RDB block 0 [ 469.502647][T11555] loop6: unable to read partition table [ 469.512036][T11555] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 469.677997][ T30] audit: type=1400 audit(1759512666.687:522): avc: denied { create } for pid=11562 comm="syz.4.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 469.998379][ T9] libceph: connect (1)[c::]:6789 error -101 [ 470.007990][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 470.097861][ T9] libceph: connect (1)[c::]:6789 error -101 [ 470.117407][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 470.456898][ T9] libceph: connect (1)[c::]:6789 error -101 [ 470.539839][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 470.546707][T11565] ceph: No mds server is up or the cluster is laggy [ 470.553592][ T10] libceph: connect (1)[c::]:6789 error -101 [ 470.568580][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 470.901138][T11577] ceph: No mds server is up or the cluster is laggy [ 470.947860][ T5906] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 471.127273][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 471.147772][ T5906] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 471.161777][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 471.162585][T11591] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 471.171807][ T5906] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 471.171857][ T5906] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 471.171879][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.217545][ T5906] usb 7-1: config 0 descriptor?? [ 471.503558][T11601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.512351][T11601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.575222][T11584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.592213][T11584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.649919][ T5906] hdpvr 7-1:0.0: unexpected answer of status request, len -71 [ 471.665665][ T5906] hdpvr 7-1:0.0: device init failed [ 471.671340][T11605] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1376'. [ 471.687989][ T5906] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 471.710946][ T5906] usb 7-1: USB disconnect, device number 8 [ 471.935293][ T30] audit: type=1400 audit(1759512668.937:523): avc: denied { ioctl } for pid=11606 comm="syz.6.1378" path="socket:[32099]" dev="sockfs" ino=32099 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 472.284894][ T30] audit: type=1400 audit(1759512668.937:524): avc: denied { connect } for pid=11606 comm="syz.6.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 472.708075][ T30] audit: type=1400 audit(1759512669.707:525): avc: denied { module_load } for pid=11620 comm="syz.6.1382" path="/sys/power/wakeup_count" dev="sysfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 472.765900][T11624] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1382'. [ 472.775828][T11624] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1382'. [ 472.955966][ T5936] libceph: connect (1)[c::]:6789 error -101 [ 472.999827][ T5936] libceph: mon0 (1)[c::]:6789 connect error [ 473.123911][T11626] ceph: No mds server is up or the cluster is laggy [ 473.694026][T11638] overlayfs: overlapping lowerdir path [ 473.897838][T11646] FAULT_INJECTION: forcing a failure. [ 473.897838][T11646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.911157][T11646] CPU: 0 UID: 0 PID: 11646 Comm: syz.6.1388 Not tainted syzkaller #0 PREEMPT(full) [ 473.911173][T11646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 473.911180][T11646] Call Trace: [ 473.911184][T11646] [ 473.911187][T11646] dump_stack_lvl+0x16c/0x1f0 [ 473.911208][T11646] should_fail_ex+0x512/0x640 [ 473.911227][T11646] _copy_from_user+0x2e/0xd0 [ 473.911245][T11646] memdup_user+0x6b/0xe0 [ 473.911257][T11646] strndup_user+0x78/0xe0 [ 473.911269][T11646] __x64_sys_mount+0x137/0x310 [ 473.911284][T11646] ? __pfx___x64_sys_mount+0x10/0x10 [ 473.911301][T11646] do_syscall_64+0xcd/0x4e0 [ 473.911319][T11646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.911330][T11646] RIP: 0033:0x7ff2a518eec9 [ 473.911339][T11646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.911356][T11646] RSP: 002b:00007ff2a601c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 473.911367][T11646] RAX: ffffffffffffffda RBX: 00007ff2a53e5fa0 RCX: 00007ff2a518eec9 [ 473.911374][T11646] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000000000000000 [ 473.911381][T11646] RBP: 00007ff2a601c090 R08: 0000200000000400 R09: 0000000000000000 [ 473.911387][T11646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.911393][T11646] R13: 00007ff2a53e6038 R14: 00007ff2a53e5fa0 R15: 00007ffe29be0258 [ 473.911406][T11646] [ 474.341908][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1389'. [ 474.983736][ T5906] IPVS: starting estimator thread 0... [ 475.053585][T11673] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1393'. [ 475.062750][ T30] audit: type=1400 audit(1759512672.057:526): avc: denied { create } for pid=11666 comm="syz.5.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 475.121238][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1393'. [ 475.214298][T11672] IPVS: using max 46 ests per chain, 110400 per kthread [ 475.273857][ T30] audit: type=1400 audit(1759512672.057:527): avc: denied { write } for pid=11666 comm="syz.5.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 475.322754][T11675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1395'. [ 475.565967][ T30] audit: type=1400 audit(1759512672.057:528): avc: denied { nlmsg_write } for pid=11666 comm="syz.5.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 476.620856][T11691] pim6reg: entered allmulticast mode [ 476.650217][T11689] pim6reg: left allmulticast mode [ 476.910751][T11696] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1400'. [ 477.288961][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1399'. [ 480.159357][ T30] audit: type=1400 audit(1759512677.167:529): avc: denied { getopt } for pid=11737 comm="syz.0.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 481.233946][T11768] hub 8-0:1.0: USB hub found [ 481.265723][T11768] hub 8-0:1.0: 1 port detected [ 481.554547][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 481.587295][ T30] audit: type=1400 audit(1759512678.597:530): avc: denied { setopt } for pid=11772 comm="syz.6.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 481.704279][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 481.710792][ T10] usb 8-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.723776][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 481.732214][ T10] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e [ 481.741381][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.749414][ T10] usb 8-1: Product: syz [ 481.753561][ T10] usb 8-1: Manufacturer: syz [ 481.758229][ T10] usb 8-1: SerialNumber: syz [ 481.764139][ T10] usb 8-1: config 0 descriptor?? [ 481.770625][ T10] gs_usb 8-1:0.0: Required endpoints not found [ 481.824301][ T5936] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 481.849290][T11775] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 481.986547][T11763] binder: 11762:11763 ioctl c0306201 200000000000 returned -22 [ 482.029255][ T5936] usb 7-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 482.039079][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.499935][ T5936] usb 7-1: config 0 descriptor?? [ 482.516218][ T5936] usb 7-1: selecting invalid altsetting 1 [ 482.522124][ T5936] flexcop_usb: set interface failed. [ 482.529992][ T5936] b2c2_flexcop_usb 7-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 482.758254][ T5936] usb 7-1: USB disconnect, device number 9 [ 483.182511][T11786] block nbd0: NBD_DISCONNECT [ 483.458852][T11789] block nbd0: Disconnected due to user request. [ 483.474609][T11789] block nbd0: shutting down sockets [ 483.525619][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1423'. [ 484.564358][ T5936] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 484.574039][T11794] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1425'. [ 484.975499][ T5936] usb 1-1: Using ep0 maxpacket: 32 [ 485.001433][ T5936] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 485.029930][ T5906] usb 8-1: USB disconnect, device number 2 [ 485.031302][ T5936] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 485.066650][ T5936] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 485.094342][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 485.112939][ T5936] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 485.240836][ T5936] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 485.719355][ T5936] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 485.729671][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.741662][ T5936] usb 1-1: config 0 descriptor?? [ 485.815490][T11801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.920996][T11814] loop6: detected capacity change from 0 to 524287487 [ 485.946203][T11814] buffer_io_error: 40 callbacks suppressed [ 485.946220][T11814] Buffer I/O error on dev loop6, logical block 0, async page read [ 486.028688][T11814] Buffer I/O error on dev loop6, logical block 0, async page read [ 486.036719][T11814] Buffer I/O error on dev loop6, logical block 0, async page read [ 486.046979][T11814] Buffer I/O error on dev loop6, logical block 0, async page read [ 486.055030][T11814] Buffer I/O error on dev loop6, logical block 0, async page read [ 486.062976][T11814] Buffer I/O error on dev loop6, logical block 0, async page read [ 486.071106][ T5936] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 486.071229][T11814] Buffer I/O error on dev loop6, logical block 0, async page read [ 486.093348][T11814] Buffer I/O error on dev loop6, logical block 0, async page read [ 486.103843][T11814] ldm_validate_partition_table(): Disk read failed. [ 486.111497][T11814] Buffer I/O error on dev loop6, logical block 0, async page read [ 486.119661][T11814] Buffer I/O error on dev loop6, logical block 0, async page read [ 486.127856][T11814] Dev loop6: unable to read RDB block 0 [ 486.133887][T11814] loop6: unable to read partition table [ 486.149429][T11814] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 486.236634][ T5936] usb 1-1: USB disconnect, device number 27 [ 487.105884][ T5936] usblp0: removed [ 487.620183][T11834] netlink: 'syz.4.1435': attribute type 1 has an invalid length. [ 487.628048][T11834] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1435'. [ 489.472117][T11857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.648104][T11862] FAULT_INJECTION: forcing a failure. [ 489.648104][T11862] name failslab, interval 1, probability 0, space 0, times 0 [ 489.661092][T11862] CPU: 0 UID: 0 PID: 11862 Comm: syz.7.1441 Not tainted syzkaller #0 PREEMPT(full) [ 489.661118][T11862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 489.661129][T11862] Call Trace: [ 489.661135][T11862] [ 489.661141][T11862] dump_stack_lvl+0x16c/0x1f0 [ 489.661174][T11862] should_fail_ex+0x512/0x640 [ 489.661205][T11862] should_failslab+0xc2/0x120 [ 489.661229][T11862] __kmalloc_noprof+0xdd/0x880 [ 489.661253][T11862] ? tomoyo_encode2+0x100/0x3e0 [ 489.661279][T11862] ? tomoyo_encode2+0x100/0x3e0 [ 489.661298][T11862] tomoyo_encode2+0x100/0x3e0 [ 489.661330][T11862] tomoyo_encode+0x29/0x50 [ 489.661350][T11862] tomoyo_mount_acl+0x144/0x850 [ 489.661376][T11862] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 489.661395][T11862] ? __pfx___schedule+0x10/0x10 [ 489.661436][T11862] ? tomoyo_mount_acl+0x10/0x850 [ 489.661458][T11862] tomoyo_mount_permission+0x16d/0x420 [ 489.661477][T11862] ? tomoyo_mount_permission+0x14f/0x420 [ 489.661498][T11862] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 489.661519][T11862] ? hook_sb_mount+0x6d/0x320 [ 489.661541][T11862] ? rcu_is_watching+0x12/0xc0 [ 489.661561][T11862] ? irqentry_exit+0x3b/0x90 [ 489.661583][T11862] security_sb_mount+0x9b/0x260 [ 489.661605][T11862] path_mount+0x15f/0x2060 [ 489.661623][T11862] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 489.661647][T11862] ? __pfx_path_mount+0x10/0x10 [ 489.661666][T11862] ? kmem_cache_free+0x2d4/0x6c0 [ 489.661680][T11862] ? putname+0x154/0x1a0 [ 489.661702][T11862] ? putname+0x154/0x1a0 [ 489.661719][T11862] ? putname+0x154/0x1a0 [ 489.661739][T11862] ? __x64_sys_mount+0x28d/0x310 [ 489.661756][T11862] __x64_sys_mount+0x28d/0x310 [ 489.661774][T11862] ? __pfx___x64_sys_mount+0x10/0x10 [ 489.661799][T11862] do_syscall_64+0xcd/0x4e0 [ 489.661822][T11862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.661836][T11862] RIP: 0033:0x7f5817d8eec9 [ 489.661848][T11862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.661862][T11862] RSP: 002b:00007f5815ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 489.661876][T11862] RAX: ffffffffffffffda RBX: 00007f5817fe6090 RCX: 00007f5817d8eec9 [ 489.661886][T11862] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000000000000000 [ 489.661894][T11862] RBP: 00007f5815ff6090 R08: 0000200000000400 R09: 0000000000000000 [ 489.661903][T11862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.661911][T11862] R13: 00007f5817fe6128 R14: 00007f5817fe6090 R15: 00007ffd8a15d708 [ 489.661930][T11862] [ 490.365628][T11864] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1443'. [ 493.566536][T11903] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 494.036954][T11910] macvlan2: entered promiscuous mode [ 494.049935][T11910] macvlan2: entered allmulticast mode [ 494.536334][T11920] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1455'. [ 494.724738][T11919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1454'. [ 494.740832][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1455'. [ 495.443223][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1459'. [ 497.995942][T11955] netlink: 'syz.7.1463': attribute type 1 has an invalid length. [ 498.003713][T11955] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1463'. [ 499.513404][ T5906] libceph: connect (1)[c::]:6789 error -13 [ 499.520502][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 500.028041][T11968] ceph: No mds server is up or the cluster is laggy [ 500.136034][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1471'. [ 500.552165][ T30] audit: type=1400 audit(1759512697.557:531): avc: denied { write } for pid=11987 comm="syz.4.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 500.804522][ T5936] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 500.966157][ T5936] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 501.030129][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.055456][ T5936] usb 6-1: config 0 descriptor?? [ 501.166779][T12003] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 501.370692][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.569431][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1472'. [ 502.617298][ T30] audit: type=1400 audit(1759512699.517:532): avc: denied { ioctl } for pid=11983 comm="syz.5.1472" path="socket:[34042]" dev="sockfs" ino=34042 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 502.646341][T12016] macvtap1: entered promiscuous mode [ 502.651804][T12016] macvtap1: entered allmulticast mode [ 502.684840][T12016] veth1_vlan: entered allmulticast mode [ 502.687732][ T30] audit: type=1400 audit(1759512699.517:533): avc: denied { bind } for pid=11983 comm="syz.5.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 502.745799][ T5906] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 502.887601][ T30] audit: type=1400 audit(1759512699.897:534): avc: denied { map } for pid=11983 comm="syz.5.1472" path="socket:[34881]" dev="sockfs" ino=34881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 502.930435][ T30] audit: type=1400 audit(1759512699.897:535): avc: denied { accept } for pid=11983 comm="syz.5.1472" path="socket:[34881]" dev="sockfs" ino=34881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 502.947503][ T5906] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.383893][ T5906] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.421340][ T5906] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.547152][ T5906] usb 8-1: Product: syz [ 503.556950][ T5906] usb 8-1: Manufacturer: syz [ 503.570384][ T5906] usb 8-1: SerialNumber: syz [ 504.229696][ T5936] usb 6-1: Cannot set MAC address [ 504.243187][ T5936] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 504.467271][ T5821] Bluetooth: hci1: unexpected event for opcode 0x0c24 [ 504.475017][ T5821] Bluetooth: hci1: unexpected event for opcode 0x0c24 [ 504.724493][ T5936] usb 6-1: USB disconnect, device number 23 [ 504.981581][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1484'. [ 505.416309][T12052] fuse: Bad value for 'fd' [ 505.972587][ T30] audit: type=1804 audit(1759512702.967:536): pid=12057 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1487" name="file0" dev="ramfs" ino=34099 res=1 errno=0 [ 506.423219][T12064] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 508.116549][T12081] ptrace attach of "./syz-executor exec"[5816] was attempted by "./syz-executor exec"[12081] [ 508.262298][T12081] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1495'. [ 508.399192][T12086] befs: (nbd0): No write support. Marking filesystem read-only [ 508.500437][T12086] befs: (nbd0): unable to read superblock [ 509.263950][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1499'. [ 509.296405][ T5906] cdc_ncm 8-1:1.0: failed to get mac address [ 509.300023][T12100] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 509.304749][ T5906] cdc_ncm 8-1:1.0: bind() failure [ 509.319372][ T30] audit: type=1400 audit(1759512706.307:537): avc: denied { map } for pid=12091 comm="syz.4.1499" path="socket:[34150]" dev="sockfs" ino=34150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 509.321499][ T5906] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 509.364981][ T5906] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 510.252279][ T5906] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 510.268676][ T5906] usb 8-1: USB disconnect, device number 3 [ 510.466226][ T30] audit: type=1400 audit(1759512706.307:538): avc: denied { read } for pid=12091 comm="syz.4.1499" path="socket:[34150]" dev="sockfs" ino=34150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 511.174312][ T5906] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 512.224324][ T5906] usb 7-1: Using ep0 maxpacket: 16 [ 512.429481][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.440601][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.492150][ T5906] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 512.512651][ T5906] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 512.532426][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.583572][ T5906] usb 7-1: config 0 descriptor?? [ 513.135010][ T5906] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 513.143654][ T5906] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 513.311072][T12137] cgroup: Unknown subsys name 'rlimit' [ 513.594338][T12138] FAULT_INJECTION: forcing a failure. [ 513.594338][T12138] name failslab, interval 1, probability 0, space 0, times 0 [ 513.613172][ T30] audit: type=1400 audit(1759512710.187:539): avc: denied { setopt } for pid=12132 comm="syz.5.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 513.645968][ T5906] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 513.650230][T12109] netlink: 'syz.6.1504': attribute type 2 has an invalid length. [ 513.660953][T12109] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1504'. [ 513.670528][T12138] CPU: 0 UID: 0 PID: 12138 Comm: syz.0.1514 Not tainted syzkaller #0 PREEMPT(full) [ 513.670551][T12138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 513.670560][T12138] Call Trace: [ 513.670567][T12138] [ 513.670571][T12138] dump_stack_lvl+0x16c/0x1f0 [ 513.670593][T12138] should_fail_ex+0x512/0x640 [ 513.670611][T12138] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 513.670626][T12138] should_failslab+0xc2/0x120 [ 513.670640][T12138] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 513.670653][T12138] ? vfs_parse_fs_string+0xc3/0x150 [ 513.670670][T12138] ? kmemdup_nul+0x49/0xf0 [ 513.670681][T12138] kmemdup_nul+0x49/0xf0 [ 513.670692][T12138] vfs_parse_fs_string+0xc3/0x150 [ 513.670706][T12138] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 513.670724][T12138] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 513.670738][T12138] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 513.670751][T12138] vfs_parse_monolithic_sep+0x16f/0x1f0 [ 513.670766][T12138] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 513.670781][T12138] ? alloc_fs_context+0x59b/0x9c0 [ 513.670797][T12138] path_mount+0x14cc/0x2060 [ 513.670814][T12138] ? __pfx_path_mount+0x10/0x10 [ 513.670828][T12138] ? kmem_cache_free+0x2d4/0x6c0 [ 513.670838][T12138] ? putname+0x154/0x1a0 [ 513.670854][T12138] ? putname+0x154/0x1a0 [ 513.670867][T12138] ? putname+0x154/0x1a0 [ 513.670882][T12138] ? __x64_sys_mount+0x28d/0x310 [ 513.670894][T12138] __x64_sys_mount+0x28d/0x310 [ 513.670909][T12138] ? __pfx___x64_sys_mount+0x10/0x10 [ 513.670926][T12138] do_syscall_64+0xcd/0x4e0 [ 513.670944][T12138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.670956][T12138] RIP: 0033:0x7fde5e98eec9 [ 513.670966][T12138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.670980][T12138] RSP: 002b:00007fde5f769038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 513.670994][T12138] RAX: ffffffffffffffda RBX: 00007fde5ebe6090 RCX: 00007fde5e98eec9 [ 513.671004][T12138] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000000000000000 [ 513.671013][T12138] RBP: 00007fde5f769090 R08: 0000200000000400 R09: 0000000000000000 [ 513.671022][T12138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 513.671037][T12138] R13: 00007fde5ebe6128 R14: 00007fde5ebe6090 R15: 00007ffeda3c9e98 [ 513.671056][T12138] [ 513.671321][ T5906] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 513.971024][ T5906] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 513.981765][ T5906] input: HID 0955:7214 Haptics as /devices/virtual/input/input21 [ 514.013658][ T5906] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 514.045403][T12142] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 514.055308][T12109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.064858][T12109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.075864][ T5906] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 514.258156][ T5906] usb 7-1: USB disconnect, device number 10 [ 515.225445][ T42] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 515.251955][ T42] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 515.284515][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 515.784910][ T42] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 515.812293][ T42] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 515.954326][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 515.961687][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.041781][T12159] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 516.049644][T12159] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1519'. [ 516.084134][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.524913][ T10] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 516.526343][T12161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1521'. [ 516.557832][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.576363][ T10] usb 6-1: config 0 descriptor?? [ 516.949503][T12170] Bluetooth: MGMT ver 1.23 [ 517.081629][ T5827] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 517.170079][ T10] ft260 0003:0403:6030.0011: unknown main item tag 0x7 [ 517.219188][T12173] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1525'. [ 517.594807][ T10] ft260 0003:0403:6030.0011: chip code: 6424 8183 [ 517.610130][ T10] ft260 0003:0403:6030.0011: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 517.822133][ T10] ft260 0003:0403:6030.0011: failed to retrieve status: -32, no wakeup [ 517.840088][ T10] ft260 0003:0403:6030.0011: failed to retrieve status: -5 [ 517.969895][T12182] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 518.889099][T12140] ft260 0003:0403:6030.0011: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 518.915079][T12140] ft260 0003:0403:6030.0011: failed to reset I2C controller: -71 [ 518.925206][ T5936] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 518.994318][ T5883] usb 6-1: reset high-speed USB device number 24 using dummy_hcd [ 519.124326][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 519.131993][ T5821] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 519.647466][ T5936] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 519.764896][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.821349][ T5936] usb 1-1: config 0 descriptor?? [ 520.082529][ T5936] usb 1-1: selecting invalid altsetting 1 [ 520.093474][ T10] usb 6-1: USB disconnect, device number 24 [ 520.118785][T12198] XFS (nbd6): SB validate failed with error -5. [ 520.282518][ T5936] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 520.333765][T12215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.333927][T12215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.514730][ T30] audit: type=1400 audit(1759512718.037:540): avc: denied { setopt } for pid=12217 comm="syz.5.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 521.701200][ T30] audit: type=1400 audit(1759512718.357:541): avc: denied { setattr } for pid=12217 comm="syz.5.1537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 521.824304][ T5936] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 521.997227][ T5936] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 522.012361][ T5936] usb 6-1: config 0 has no interface number 0 [ 522.030596][ T5936] usb 6-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 522.055946][ T5936] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 522.127525][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.230029][ T5936] usb 6-1: config 0 descriptor?? [ 522.253794][ T5936] ttusbir 6-1:0.83: cannot find expected altsetting [ 522.947213][ T30] audit: type=1400 audit(1759512719.957:542): avc: denied { append } for pid=12234 comm="syz.6.1541" name="fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 523.079279][ T30] audit: type=1400 audit(1759512720.007:543): avc: denied { write } for pid=12232 comm="syz.4.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 523.106956][T12235] fuse: Bad value for 'group_id' [ 523.118273][T12235] fuse: Bad value for 'group_id' [ 523.232446][ T42] usb 1-1: USB disconnect, device number 28 [ 523.459067][T12240] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 523.885151][T12241] autofs: Unknown parameter 'ÿ(΀' [ 523.910182][ T9] usb 6-1: USB disconnect, device number 25 [ 525.008201][T12258] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12258 comm=syz.0.1548 [ 525.405361][T12265] netlink: 'syz.6.1549': attribute type 1 has an invalid length. [ 525.413173][T12265] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1549'. [ 526.904294][ T42] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 527.504552][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 527.538323][T12281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1554'. [ 527.727692][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1554'. [ 527.790886][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.810011][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.821021][ T42] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 527.907215][ T42] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 527.955490][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.975849][ T42] usb 7-1: config 0 descriptor?? [ 529.189041][ T42] usbhid 7-1:0.0: can't add hid device: -71 [ 529.195200][ T42] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 529.324369][ T30] audit: type=1400 audit(1759512726.327:544): avc: denied { ioctl } for pid=12306 comm="syz.5.1561" path="socket:[35434]" dev="sockfs" ino=35434 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 529.332655][ T42] usb 7-1: USB disconnect, device number 11 [ 529.657843][T12320] netlink: 'syz.0.1562': attribute type 1 has an invalid length. [ 529.665831][T12320] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1562'. [ 530.386456][T12325] fuse: Bad value for 'fd' [ 530.564274][ T5936] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 531.350647][ T5936] usb 8-1: Using ep0 maxpacket: 32 [ 531.822079][ T5936] usb 8-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 531.849178][ T5936] usb 8-1: config 0 interface 0 has no altsetting 0 [ 531.889991][ T5936] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e [ 531.911662][ T5936] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.936543][ T5936] usb 8-1: Product: syz [ 531.948051][ T5936] usb 8-1: Manufacturer: syz [ 531.960833][ T5936] usb 8-1: SerialNumber: syz [ 531.984082][ T5936] usb 8-1: config 0 descriptor?? [ 531.999392][ T5936] gs_usb 8-1:0.0: Required endpoints not found [ 532.630956][T12323] binder: 12321:12323 ioctl c0306201 200000000000 returned -22 [ 532.759703][T12344] FAULT_INJECTION: forcing a failure. [ 532.759703][T12344] name failslab, interval 1, probability 0, space 0, times 0 [ 532.789877][T12344] CPU: 1 UID: 0 PID: 12344 Comm: syz.4.1570 Not tainted syzkaller #0 PREEMPT(full) [ 532.789904][T12344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 532.789913][T12344] Call Trace: [ 532.789918][T12344] [ 532.789924][T12344] dump_stack_lvl+0x16c/0x1f0 [ 532.789953][T12344] should_fail_ex+0x512/0x640 [ 532.789982][T12344] ? __kmalloc_cache_noprof+0x5f/0x780 [ 532.790010][T12344] ? __pfx_autofs_fill_super+0x10/0x10 [ 532.790032][T12344] should_failslab+0xc2/0x120 [ 532.790053][T12344] ? __pfx_autofs_fill_super+0x10/0x10 [ 532.790073][T12344] __kmalloc_cache_noprof+0x72/0x780 [ 532.790099][T12344] ? autofs_new_ino+0x45/0x240 [ 532.790121][T12344] ? __pfx_autofs_fill_super+0x10/0x10 [ 532.790142][T12344] ? autofs_new_ino+0x45/0x240 [ 532.790161][T12344] autofs_new_ino+0x45/0x240 [ 532.790181][T12344] autofs_fill_super+0x18b/0x890 [ 532.790201][T12344] ? __pfx_set_anon_super_fc+0x10/0x10 [ 532.790227][T12344] ? __pfx_autofs_fill_super+0x10/0x10 [ 532.790248][T12344] get_tree_nodev+0xdd/0x190 [ 532.790266][T12344] autofs_get_tree+0x1e4/0x290 [ 532.790288][T12344] vfs_get_tree+0x8b/0x340 [ 532.790312][T12344] path_mount+0x1516/0x2060 [ 532.790337][T12344] ? __pfx_path_mount+0x10/0x10 [ 532.790359][T12344] ? kmem_cache_free+0x2d4/0x6c0 [ 532.790375][T12344] ? putname+0x154/0x1a0 [ 532.790400][T12344] ? putname+0x154/0x1a0 [ 532.790419][T12344] ? putname+0x154/0x1a0 [ 532.790442][T12344] ? __x64_sys_mount+0x28d/0x310 [ 532.790461][T12344] __x64_sys_mount+0x28d/0x310 [ 532.790482][T12344] ? __pfx___x64_sys_mount+0x10/0x10 [ 532.790510][T12344] do_syscall_64+0xcd/0x4e0 [ 532.790536][T12344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.790553][T12344] RIP: 0033:0x7f941318eec9 [ 532.790566][T12344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.790582][T12344] RSP: 002b:00007f9413fce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 532.790598][T12344] RAX: ffffffffffffffda RBX: 00007f94133e6090 RCX: 00007f941318eec9 [ 532.790609][T12344] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000000000000000 [ 532.790619][T12344] RBP: 00007f9413fce090 R08: 0000200000000400 R09: 0000000000000000 [ 532.790629][T12344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 532.790641][T12344] R13: 00007f94133e6128 R14: 00007f94133e6090 R15: 00007ffe4fe92828 [ 532.790663][T12344] [ 533.565233][ T30] audit: type=1400 audit(1759512730.567:545): avc: denied { mounton } for pid=12347 comm="syz.5.1571" path=2F70726F632F3633362F6E65742F70666B6579202864656C6574656429 dev="proc" ino=4026533994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 533.629143][ T5821] Bluetooth: hci2: unexpected event for opcode 0x2012 [ 534.810031][ T9] usb 8-1: USB disconnect, device number 4 [ 535.062974][T12369] vlan2: entered promiscuous mode [ 535.084654][T12369] bridge0: entered promiscuous mode [ 535.090191][T12369] vlan2: entered allmulticast mode [ 535.105792][T12369] bridge0: entered allmulticast mode [ 538.124266][ T5936] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 538.315127][ T5936] usb 7-1: Using ep0 maxpacket: 32 [ 538.340682][ T5936] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 538.353762][ T30] audit: type=1400 audit(1759512735.347:546): avc: denied { create } for pid=12412 comm="syz.7.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 538.395530][ T5936] usb 7-1: config 0 interface 0 has no altsetting 0 [ 538.416053][ T5936] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e [ 538.433980][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.452998][ T5936] usb 7-1: Product: syz [ 538.464305][ T5936] usb 7-1: Manufacturer: syz [ 538.483567][ T5936] usb 7-1: SerialNumber: syz [ 538.489972][ T5936] usb 7-1: config 0 descriptor?? [ 538.513287][ T5936] gs_usb 7-1:0.0: Required endpoints not found [ 538.781085][T12406] binder: 12402:12406 ioctl c0306201 200000000000 returned -22 [ 539.547121][T12430] netlink: 'syz.0.1593': attribute type 6 has an invalid length. [ 539.961550][T12435] random: crng reseeded on system resumption [ 539.984248][ T30] audit: type=1400 audit(1759512736.967:547): avc: denied { create } for pid=12434 comm="syz.7.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 540.057160][ T30] audit: type=1400 audit(1759512736.967:548): avc: denied { bind } for pid=12434 comm="syz.7.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 540.134559][ T30] audit: type=1400 audit(1759512736.967:549): avc: denied { append } for pid=12434 comm="syz.7.1594" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 541.708611][ T42] usb 7-1: USB disconnect, device number 12 [ 542.171678][T12484] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1605'. [ 542.459628][T12488] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 543.455763][T12496] fuse: Bad value for 'fd' [ 545.234749][ T5936] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 545.515147][ T5936] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.527291][T12515] macvlan3: entered promiscuous mode [ 545.536243][T12515] macvlan3: entered allmulticast mode [ 545.553542][T12515] bond4: entered promiscuous mode [ 545.855688][T12515] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 545.875613][T12515] bond4: left promiscuous mode [ 546.024426][ T5936] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 546.099124][T12447] syz.5.1596 (12447): drop_caches: 1 [ 546.132256][ T5936] usb 7-1: New USB device strings: Mfr=180, Product=92, SerialNumber=0 [ 546.170897][ T5936] usb 7-1: Product: syz [ 546.191977][ T5936] usb 7-1: Manufacturer: syz [ 546.224485][ T5936] usb 7-1: config 0 descriptor?? [ 546.604265][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 546.693277][T12537] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1624'. [ 546.894258][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 546.900785][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.940041][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.951198][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 546.964964][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 546.974052][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.991072][ T24] usb 6-1: config 0 descriptor?? [ 547.204395][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 547.367090][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 547.374803][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.386142][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.396042][ T10] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 547.405272][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.409906][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0012/input/input23 [ 547.427132][ T10] usb 1-1: config 0 descriptor?? [ 547.436610][ T24] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 547.637383][ T24] usb 6-1: USB disconnect, device number 26 [ 548.115068][ T10] ft260 0003:0403:6030.0013: unknown main item tag 0x7 [ 548.146421][ T5936] usb 7-1: USB disconnect, device number 13 [ 548.185898][ T10] ft260 0003:0403:6030.0013: chip code: 6424 8183 [ 548.292320][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1628'. [ 548.349482][ T30] audit: type=1400 audit(1759512745.357:550): avc: denied { audit_write } for pid=12551 comm="syz.5.1629" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 548.397889][ T10] ft260 0003:0403:6030.0013: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 548.604281][ T10] ft260 0003:0403:6030.0013: failed to retrieve status: -32, no wakeup [ 548.619729][ T10] ft260 0003:0403:6030.0013: failed to retrieve status: -5 [ 548.644485][ T5936] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 548.684289][ T42] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 548.805725][ T5936] usb 7-1: config 160 has an invalid interface number: 200 but max is 0 [ 548.814128][ T5936] usb 7-1: config 160 has no interface number 0 [ 548.814339][ T42] usb 8-1: device descriptor read/64, error -71 [ 548.824258][ T5936] usb 7-1: config 160 interface 200 has no altsetting 0 [ 548.837041][ T5936] usb 7-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 548.846142][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.854134][ T5936] usb 7-1: Product: syz [ 548.858386][ T5936] usb 7-1: Manufacturer: syz [ 548.862988][ T5936] usb 7-1: SerialNumber: syz [ 548.884378][ T5827] Bluetooth: hci3: command 0x0405 tx timeout [ 549.026204][T12544] ft260 0003:0403:6030.0013: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 549.075500][ T42] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 549.078387][ T5936] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 549.090327][ T5936] usb 7-1: MIDIStreaming interface descriptor not found [ 549.113976][ T5936] usb 7-1: USB disconnect, device number 14 [ 549.139987][T12544] ft260 0003:0403:6030.0013: failed to reset I2C controller: -108 [ 549.204506][ T42] usb 8-1: device descriptor read/64, error -71 [ 549.324539][ T42] usb usb8-port1: attempt power cycle [ 549.440346][ T30] audit: type=1400 audit(1759512746.447:551): avc: denied { getopt } for pid=12566 comm="syz.5.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 549.674303][ T42] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 549.705016][ T42] usb 8-1: device descriptor read/8, error -71 [ 549.742676][T12579] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 550.221599][ T24] usb 1-1: USB disconnect, device number 29 [ 550.314980][ T42] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 550.455576][ T42] usb 8-1: device descriptor read/8, error -71 [ 550.669540][ T42] usb usb8-port1: unable to enumerate USB device [ 551.594461][T12594] binder: 12592:12594 ioctl c0306201 200000000280 returned -14 [ 551.765079][T12599] loop9: detected capacity change from 0 to 7 [ 551.771761][T12599] buffer_io_error: 6 callbacks suppressed [ 551.771779][T12599] Buffer I/O error on dev loop9, logical block 0, async page read [ 552.349227][T12599] Buffer I/O error on dev loop9, logical block 0, async page read [ 552.374632][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1644'. [ 552.403430][T12599] Buffer I/O error on dev loop9, logical block 0, async page read [ 552.434244][T12599] Buffer I/O error on dev loop9, logical block 0, async page read [ 552.555589][T12599] Buffer I/O error on dev loop9, logical block 0, async page read [ 552.574844][T12599] Buffer I/O error on dev loop9, logical block 0, async page read [ 552.604075][T12599] Buffer I/O error on dev loop9, logical block 0, async page read [ 552.616030][T12599] ldm_validate_partition_table(): Disk read failed. [ 552.634291][T12599] Buffer I/O error on dev loop9, logical block 0, async page read [ 552.662615][T12599] Buffer I/O error on dev loop9, logical block 0, async page read [ 552.694382][T12599] Buffer I/O error on dev loop9, logical block 0, async page read [ 552.718506][T12599] Dev loop9: unable to read RDB block 0 [ 552.734780][T12599] loop9: unable to read partition table [ 552.764837][T12599] loop9: partition table beyond EOD, truncated [ 552.779218][T12599] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 552.779218][T12599] ) failed (rc=-5) [ 552.804587][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 553.014252][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 553.037306][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.060388][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.073279][ T24] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 553.085801][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.103529][ T24] usb 6-1: config 0 descriptor?? [ 553.154445][ T42] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 553.283132][T12625] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 553.463969][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 554.013245][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.052745][ T24] ft260 0003:0403:6030.0014: unknown main item tag 0x7 [ 554.059850][ T42] usb 7-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 554.070397][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.081395][ T42] usb 7-1: config 0 descriptor?? [ 554.118012][T12630] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 554.336923][ T24] ft260 0003:0403:6030.0014: chip code: 6424 8183 [ 555.552777][ T24] ft260 0003:0403:6030.0014: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 555.568468][ T42] mcp2200 0003:04D8:00DF.0015: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.6-1/input0 [ 556.214965][ T24] ft260 0003:0403:6030.0014: failed to retrieve status: -32, no wakeup [ 556.238048][ T24] ft260 0003:0403:6030.0014: failed to retrieve status: -5 [ 556.252716][ T42] usb 7-1: USB disconnect, device number 15 [ 556.443079][T12651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.639963][T12653] macvlan2: entered promiscuous mode [ 556.645587][T12653] macvlan2: entered allmulticast mode [ 556.651973][T12653] bond4: entered promiscuous mode [ 556.657984][T12653] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 556.684314][T12611] ft260 0003:0403:6030.0014: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 556.700945][T12653] bond4: left promiscuous mode [ 556.752465][T12651] : renamed from bridge_slave_0 (while UP) [ 558.034613][T12661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56318 sclass=netlink_route_socket pid=12661 comm=syz.6.1660 [ 559.761836][ T30] audit: type=1400 audit(1759512756.767:552): avc: denied { firmware_load } for pid=12689 comm="syz.4.1666" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 561.030087][T12714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.757454][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1675'. [ 561.769073][T12611] ft260 0003:0403:6030.0014: failed to reset I2C controller: -110 [ 561.804642][ T24] usb 6-1: USB disconnect, device number 27 [ 562.002047][T12731] netlink: 'syz.5.1676': attribute type 1 has an invalid length. [ 562.011712][T12731] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1676'. [ 563.062622][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.486615][T12751] No source specified [ 563.834315][ T5936] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 563.994709][ T5936] usb 7-1: Using ep0 maxpacket: 32 [ 564.012300][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.026049][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.065026][ T5936] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 564.096818][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.107551][ T5936] usb 7-1: config 0 descriptor?? [ 564.318764][T12758] loop6: detected capacity change from 0 to 524287487 [ 564.459596][T12758] buffer_io_error: 4 callbacks suppressed [ 564.459607][T12758] Buffer I/O error on dev loop6, logical block 0, async page read [ 564.504415][T12758] Buffer I/O error on dev loop6, logical block 0, async page read [ 564.556253][ T5936] ft260 0003:0403:6030.0016: unknown main item tag 0x7 [ 565.002108][T12758] Buffer I/O error on dev loop6, logical block 0, async page read [ 565.017759][T12758] Buffer I/O error on dev loop6, logical block 0, async page read [ 565.027109][T12758] Buffer I/O error on dev loop6, logical block 0, async page read [ 565.035243][T12758] Buffer I/O error on dev loop6, logical block 0, async page read [ 565.043999][T12758] Buffer I/O error on dev loop6, logical block 0, async page read [ 565.060353][T12758] Buffer I/O error on dev loop6, logical block 0, async page read [ 565.068940][T12758] ldm_validate_partition_table(): Disk read failed. [ 565.075717][T12758] Buffer I/O error on dev loop6, logical block 0, async page read [ 565.084040][T12758] Buffer I/O error on dev loop6, logical block 0, async page read [ 565.084074][ T5936] ft260 0003:0403:6030.0016: chip code: 6424 8183 [ 565.092250][T12758] Dev loop6: unable to read RDB block 0 [ 565.115600][T12758] loop6: unable to read partition table [ 565.121472][T12758] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 565.126001][ T5936] ft260 0003:0403:6030.0016: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 565.368786][T12772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1690'. [ 565.412890][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1690'. [ 565.429153][ T5936] ft260 0003:0403:6030.0016: failed to retrieve status: -32, no wakeup [ 565.492590][T12773] fuse: Bad value for 'fd' [ 566.201622][ T5936] ft260 0003:0403:6030.0016: failed to retrieve status: -5 [ 566.364285][ T771] usb 7-1: reset high-speed USB device number 16 using dummy_hcd [ 566.874470][ T42] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 567.016232][ T24] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 567.036789][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.050240][ T42] usb 6-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 567.060507][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.070611][ T42] usb 6-1: config 0 descriptor?? [ 567.140937][ T30] audit: type=1400 audit(1759512764.145:553): avc: denied { link } for pid=12799 comm="syz.0.1699" name="#49" dev="tmpfs" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 567.163125][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.175673][T12800] netlink: 892 bytes leftover after parsing attributes in process `syz.0.1699'. [ 567.185542][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 567.199976][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.232883][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 567.243343][ T30] audit: type=1400 audit(1759512764.145:554): avc: denied { rename } for pid=12799 comm="syz.0.1699" name="#4a" dev="tmpfs" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 567.268717][ T24] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 567.284921][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.295295][ T24] usb 8-1: Product: syz [ 567.299584][ T24] usb 8-1: Manufacturer: syz [ 567.300154][T12791] sp0: Synchronizing with TNC [ 567.304616][ T24] usb 8-1: SerialNumber: syz [ 567.316832][ T5936] usb 7-1: USB disconnect, device number 16 [ 567.691550][ T30] audit: type=1400 audit(1759512764.695:555): avc: denied { mount } for pid=12807 comm="syz.6.1702" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 567.715044][ T30] audit: type=1400 audit(1759512764.705:556): avc: denied { search } for pid=12807 comm="syz.6.1702" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 567.738373][ T30] audit: type=1400 audit(1759512764.705:557): avc: denied { search } for pid=12807 comm="syz.6.1702" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 567.760887][ T30] audit: type=1400 audit(1759512764.705:558): avc: denied { search } for pid=12807 comm="syz.6.1702" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 567.901375][ T30] audit: type=1400 audit(1759512764.905:559): avc: denied { read write } for pid=12793 comm="syz.7.1697" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 568.800553][ T30] audit: type=1400 audit(1759512764.905:560): avc: denied { open } for pid=12793 comm="syz.7.1697" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 569.008390][ T42] usbhid 6-1:0.0: can't add hid device: -71 [ 569.022488][ T42] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 569.101203][ T42] usb 6-1: USB disconnect, device number 28 [ 569.582217][T12830] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 570.214426][ T42] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 570.374541][ T24] usb 8-1: 0:2 : does not exist [ 570.384341][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 570.392000][ T24] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 570.521229][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.532925][ T24] usb 8-1: USB disconnect, device number 9 [ 570.565984][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.629035][ T42] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 570.738482][T12844] SELinux: failed to load policy [ 570.747670][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.770534][ T30] audit: type=1400 audit(1759512767.695:561): avc: denied { load_policy } for pid=12839 comm="syz.6.1711" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 570.774504][ T42] usb 6-1: config 0 descriptor?? [ 570.850974][ T30] audit: type=1400 audit(1759512767.855:562): avc: denied { connect } for pid=12845 comm="syz.7.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 571.073119][ T5936] libceph: connect (1)[c::]:6789 error -101 [ 571.079361][ T5936] libceph: mon0 (1)[c::]:6789 connect error [ 571.391185][ T771] libceph: connect (1)[c::]:6789 error -101 [ 571.667346][ T771] libceph: mon0 (1)[c::]:6789 connect error [ 571.692024][ T42] ft260 0003:0403:6030.0017: unknown main item tag 0x7 [ 571.796976][T12853] ceph: No mds server is up or the cluster is laggy [ 571.919378][ T42] ft260 0003:0403:6030.0017: chip code: 6424 8183 [ 572.126963][ T42] ft260 0003:0403:6030.0017: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 572.653170][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 572.653189][ T30] audit: type=1400 audit(1759512769.415:564): avc: denied { getopt } for pid=12869 comm="syz.4.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 572.977697][ T42] ft260 0003:0403:6030.0017: failed to retrieve status: -32, no wakeup [ 573.061002][T12876] fuse: Bad value for 'fd' [ 573.415810][ T42] ft260 0003:0403:6030.0017: failed to retrieve status: -5 [ 573.614393][T12875] ft260 0003:0403:6030.0017: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 573.678311][ T5906] usb 6-1: reset high-speed USB device number 29 using dummy_hcd [ 574.632131][T12893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.714120][T12891] geneve2: entered promiscuous mode [ 574.719422][T12891] geneve2: entered allmulticast mode [ 575.292527][ T30] audit: type=1400 audit(1759512772.295:565): avc: denied { ioctl } for pid=12902 comm="syz.0.1725" path="socket:[37538]" dev="sockfs" ino=37538 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 576.215457][ T30] audit: type=1400 audit(1759512773.225:566): avc: denied { read } for pid=12914 comm="syz.6.1728" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 576.243673][ T30] audit: type=1400 audit(1759512773.225:567): avc: denied { open } for pid=12914 comm="syz.6.1728" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 576.270670][ T30] audit: type=1400 audit(1759512773.245:568): avc: denied { ioctl } for pid=12914 comm="syz.6.1728" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 576.485467][ T24] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 577.490394][ T24] usb 7-1: device descriptor read/64, error -71 [ 578.020461][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 578.105736][ T5936] libceph: connect (1)[c::]:6789 error -101 [ 578.130174][ T5936] libceph: mon0 (1)[c::]:6789 connect error [ 578.214396][ T24] usb 7-1: device descriptor read/64, error -71 [ 578.239219][ T5936] libceph: connect (1)[c::]:6789 error -101 [ 578.274060][ T5936] libceph: mon0 (1)[c::]:6789 connect error [ 578.346925][ T24] usb usb7-port1: attempt power cycle [ 578.641732][ T771] libceph: connect (1)[c::]:6789 error -101 [ 578.651414][T12875] ft260 0003:0403:6030.0017: failed to reset I2C controller: -110 [ 578.660289][T12933] ceph: No mds server is up or the cluster is laggy [ 578.687736][ T771] libceph: mon0 (1)[c::]:6789 connect error [ 578.774430][ T5906] usb 6-1: device descriptor read/64, error -32 [ 578.836749][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 578.916980][ T24] usb 7-1: device descriptor read/8, error -71 [ 579.014375][ T5906] usb 6-1: reset high-speed USB device number 29 using dummy_hcd [ 579.070795][T12951] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1740'. [ 579.080424][T12951] netlink: zone id is out of range [ 579.085892][T12951] netlink: zone id is out of range [ 579.091138][T12951] netlink: zone id is out of range [ 579.097612][T12951] netlink: zone id is out of range [ 579.102899][T12951] netlink: zone id is out of range [ 579.129098][T12951] netlink: zone id is out of range [ 579.145559][T12951] netlink: get zone limit has 8 unknown bytes [ 579.174262][ T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 579.195371][ T24] usb 7-1: device descriptor read/8, error -71 [ 579.328952][ T24] usb usb7-port1: unable to enumerate USB device [ 579.332470][T12958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.374638][ T5936] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 579.443668][ T30] audit: type=1400 audit(1759512776.435:569): avc: denied { read append } for pid=12956 comm="syz.7.1741" name="nvram" dev="devtmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 579.485938][T12963] netlink: 'syz.7.1741': attribute type 8 has an invalid length. [ 579.514944][ T30] audit: type=1400 audit(1759512776.435:570): avc: denied { open } for pid=12956 comm="syz.7.1741" path="/dev/nvram" dev="devtmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 579.561789][ T5936] usb 1-1: Using ep0 maxpacket: 32 [ 579.568561][ T5936] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.580889][ T5936] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 579.590643][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.634328][ T24] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 579.642400][ T5936] usb 1-1: Product: syz [ 579.652824][ T5936] usb 1-1: Manufacturer: syz [ 579.659061][ T5936] usb 1-1: SerialNumber: syz [ 579.669682][ T5936] usb 1-1: config 0 descriptor?? [ 579.676684][ T5936] etas_es58x 1-1:0.0: Starting syz syz (Serial Number syz) [ 579.794241][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 579.802560][ T24] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 579.811953][ T24] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 579.820464][ T24] usb 7-1: Product: syz [ 579.825553][ T42] usb 6-1: USB disconnect, device number 29 [ 579.837577][ T24] usb 7-1: Manufacturer: syz [ 579.843385][ T24] usb 7-1: SerialNumber: syz [ 579.850795][ T24] usb 7-1: config 0 descriptor?? [ 579.883195][ T5936] usb 1-1: USB disconnect, device number 30 [ 580.683467][ T24] usb 7-1: USB disconnect, device number 21 [ 580.755548][ T30] audit: type=1400 audit(1759512777.755:571): avc: denied { setattr } for pid=12974 comm="syz.0.1746" path="/dev/mixer" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 581.072483][T12980] loop6: detected capacity change from 0 to 524287487 [ 581.094383][T12980] buffer_io_error: 6 callbacks suppressed [ 581.094402][T12980] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.118499][T12980] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.134398][T12980] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.144377][T12980] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.166634][T12980] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.176456][T12980] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.184431][ T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 581.192819][T12980] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.220166][T12980] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.235706][T12980] ldm_validate_partition_table(): Disk read failed. [ 581.243039][T12980] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.251927][T12980] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.265255][T12980] Dev loop6: unable to read RDB block 0 [ 581.271352][T12980] loop6: unable to read partition table [ 581.284225][T12980] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 581.322856][ T30] audit: type=1400 audit(1759512778.325:572): avc: denied { map } for pid=12986 comm="syz.7.1751" path="socket:[38231]" dev="sockfs" ino=38231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 581.370034][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.380658][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 581.403640][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.443039][ T9] usb 6-1: config 0 descriptor?? [ 581.734696][ T5936] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 581.976794][ T9] logitech-djreceiver 0003:046D:C71F.0018: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0 [ 582.096455][ T5936] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 582.108354][ T5936] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.118707][ T5936] usb 8-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 582.127967][ T5936] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.139973][ T5936] usb 8-1: config 0 descriptor?? [ 582.198302][ T24] usb 6-1: USB disconnect, device number 30 [ 582.238511][T13003] netlink: 'syz.6.1756': attribute type 1 has an invalid length. [ 582.326802][T13005] macvlan2: entered promiscuous mode [ 582.332214][T13005] macvlan2: entered allmulticast mode [ 582.338818][T13005] bond1: entered promiscuous mode [ 582.344655][T13005] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 582.401733][T13005] bond1: left promiscuous mode [ 582.484926][ T30] audit: type=1400 audit(1759512779.485:573): avc: denied { execute } for pid=12992 comm="syz.7.1753" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 583.615613][T13022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.421808][T13033] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1762'. [ 584.447163][ T30] audit: type=1400 audit(1759512781.455:574): avc: denied { ioctl } for pid=13032 comm="syz.4.1762" path="/dev/usbmon0" dev="devtmpfs" ino=715 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 584.565243][ T5936] usbhid 8-1:0.0: can't add hid device: -71 [ 584.573349][ T5936] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 584.642360][ T5936] usb 8-1: USB disconnect, device number 10 [ 585.429455][T13043] loop6: detected capacity change from 0 to 524287487 [ 585.467797][ T9731] ldm_validate_partition_table(): Disk read failed. [ 585.714676][ T9731] Dev loop6: unable to read RDB block 0 [ 585.723236][ T9731] loop6: unable to read partition table [ 585.731146][T13043] ldm_validate_partition_table(): Disk read failed. [ 585.738879][T13043] Dev loop6: unable to read RDB block 0 [ 585.748634][T13043] loop6: unable to read partition table [ 585.754551][T13043] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 586.303576][T13081] netlink: 'syz.7.1773': attribute type 1 has an invalid length. [ 586.311466][T13081] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1773'. [ 586.855316][T13059] ceph: No mds server is up or the cluster is laggy [ 586.867335][T13082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1772'. [ 587.246018][T13082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1772'. [ 587.601223][T13087] ip6gretap0: mtu less than device minimum [ 587.652130][ T30] audit: type=1400 audit(1759512784.645:575): avc: denied { setopt } for pid=13086 comm="syz.4.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 587.717585][ T30] audit: type=1400 audit(1759512784.645:576): avc: denied { ioctl } for pid=13086 comm="syz.4.1775" path="/dev/nullb0" dev="devtmpfs" ino=695 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 587.742125][ C1] vkms_vblank_simulate: vblank timer overrun [ 588.136360][T13104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.300126][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 590.034297][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 590.060203][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.082464][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.102649][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 590.137614][ T9] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 590.184225][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.233450][ T9] usb 8-1: config 0 descriptor?? [ 590.284439][T13130] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 590.290982][T13130] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 590.314817][T13130] vhci_hcd vhci_hcd.0: Device attached [ 590.754359][ T771] usb 46-1: SetAddress Request (6) to port 0 [ 590.760576][ T771] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 590.857759][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input24 [ 591.043680][ T9] shield 0003:0955:7214.0019: Registered Thunderstrike controller [ 591.090167][T13131] vhci_hcd: connection reset by peer [ 591.103578][ T9] shield 0003:0955:7214.0019: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 591.124618][ T6675] vhci_hcd: stop threads [ 591.128924][ T6675] vhci_hcd: release socket [ 591.142979][ T6675] vhci_hcd: disconnect device [ 591.424964][T13112] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 591.462060][T13112] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 591.505803][T13112] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 591.549056][T13112] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 591.718237][T13112] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 591.735209][T13112] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 591.806384][T13112] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 591.884316][ T30] audit: type=1400 audit(1759512788.885:577): avc: denied { append } for pid=13153 comm="syz.0.1791" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 592.010115][T13155] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 592.389030][ T10] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 592.400636][ T5936] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 592.410978][ T10] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 592.472992][ T5883] usb 8-1: reset high-speed USB device number 11 using dummy_hcd [ 592.486953][ T10] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 592.529229][ T10] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 592.556241][ T5936] usb 6-1: config 0 has an invalid interface number: 63 but max is 0 [ 592.565594][ T5936] usb 6-1: config 0 has no interface number 0 [ 592.571680][ T5936] usb 6-1: config 0 interface 63 has no altsetting 0 [ 592.580383][ T5936] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0313, bcdDevice=e4.10 [ 592.591901][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.599998][ T5936] usb 6-1: Product: syz [ 592.604306][ T5936] usb 6-1: Manufacturer: syz [ 592.608897][ T5936] usb 6-1: SerialNumber: syz [ 592.625668][ T5936] usb 6-1: config 0 descriptor?? [ 592.638798][ T5936] option 6-1:0.63: GSM modem (1-port) converter detected [ 593.064385][ T10] usb 6-1: USB disconnect, device number 31 [ 593.071983][ T10] option 6-1:0.63: device disconnected [ 593.670548][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 593.671278][ T9] usb 8-1: USB disconnect, device number 11 [ 593.684216][ T5821] Bluetooth: hci2: command 0x0c1a tx timeout [ 593.690354][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 593.764455][ T5821] Bluetooth: hci3: command 0x0405 tx timeout [ 594.394857][T13191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1803'. [ 594.404776][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 594.755545][ T9] usb 7-1: config 0 has no interfaces? [ 594.762035][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 594.836834][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.847163][ T9] usb 7-1: config 0 descriptor?? [ 595.073306][T13179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.107533][T13179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.147327][T13179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.174680][T13179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.208852][ T24] usb 7-1: USB disconnect, device number 22 [ 595.844368][ T5821] Bluetooth: hci3: command 0x0405 tx timeout [ 595.845993][ T771] usb 46-1: device descriptor read/8, error -110 [ 595.941073][T13216] loop6: detected capacity change from 0 to 524287487 [ 595.999284][T13216] buffer_io_error: 38 callbacks suppressed [ 595.999297][T13216] Buffer I/O error on dev loop6, logical block 0, async page read [ 596.093139][T13216] Buffer I/O error on dev loop6, logical block 0, async page read [ 596.107797][T13216] Buffer I/O error on dev loop6, logical block 0, async page read [ 596.126420][ T24] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 596.136302][T13216] Buffer I/O error on dev loop6, logical block 0, async page read [ 596.237564][T13216] Buffer I/O error on dev loop6, logical block 0, async page read [ 596.260189][T13216] Buffer I/O error on dev loop6, logical block 0, async page read [ 596.265738][ T771] usb usb46-port1: attempt power cycle [ 596.268758][T13216] Buffer I/O error on dev loop6, logical block 0, async page read [ 596.517557][T13228] lo: entered promiscuous mode [ 596.522414][T13228] lo: entered allmulticast mode [ 596.537492][T13228] tunl0: entered promiscuous mode [ 596.542617][T13228] tunl0: entered allmulticast mode [ 596.550659][T13228] gre0: entered promiscuous mode [ 596.555696][T13228] gre0: entered allmulticast mode [ 596.563669][T13228] gretap0: entered promiscuous mode [ 596.569043][T13228] gretap0: entered allmulticast mode [ 596.576900][T13228] erspan0: entered promiscuous mode [ 596.582155][T13228] erspan0: entered allmulticast mode [ 596.591509][T13228] ip_vti0: entered promiscuous mode [ 596.596885][T13228] ip_vti0: entered allmulticast mode [ 596.604955][T13228] ip6_vti0: entered promiscuous mode [ 596.610294][T13228] ip6_vti0: entered allmulticast mode [ 596.617809][T13228] sit0: entered promiscuous mode [ 596.622804][T13228] sit0: entered allmulticast mode [ 596.643807][T13228] ip6tnl0: entered promiscuous mode [ 596.649142][T13228] ip6tnl0: entered allmulticast mode [ 596.655006][T13228] ip6gre0: entered promiscuous mode [ 596.660212][T13228] ip6gre0: entered allmulticast mode [ 596.665943][T13228] syz_tun: entered promiscuous mode [ 596.671143][T13228] syz_tun: entered allmulticast mode [ 596.676831][T13228] ip6gretap0: entered promiscuous mode [ 596.682287][T13228] ip6gretap0: entered allmulticast mode [ 596.688223][T13228] bridge0: entered promiscuous mode [ 596.693418][T13228] bridge0: entered allmulticast mode [ 596.699146][T13228] vcan0: entered promiscuous mode [ 596.704222][T13228] vcan0: entered allmulticast mode [ 596.709744][T13228] bond0: entered promiscuous mode [ 596.714815][T13228] bond_slave_0: entered promiscuous mode [ 596.720546][T13228] bond_slave_1: entered promiscuous mode [ 596.726408][T13228] batadv0: entered promiscuous mode [ 596.731763][T13228] bond0: entered allmulticast mode [ 596.736954][T13228] bond_slave_0: entered allmulticast mode [ 596.742666][T13228] bond_slave_1: entered allmulticast mode [ 596.748404][T13228] batadv0: entered allmulticast mode [ 596.754368][T13228] team0: entered promiscuous mode [ 596.759400][T13228] team_slave_0: entered promiscuous mode [ 596.765247][T13228] team_slave_1: entered promiscuous mode [ 596.770945][T13228] geneve0: entered promiscuous mode [ 596.776265][T13228] team0: entered allmulticast mode [ 596.781364][T13228] team_slave_0: entered allmulticast mode [ 596.787086][T13228] team_slave_1: entered allmulticast mode [ 596.792780][T13228] geneve0: entered allmulticast mode [ 596.798620][T13228] nlmon0: entered promiscuous mode [ 596.803731][T13228] nlmon0: entered allmulticast mode [ 596.809797][ T30] audit: type=1400 audit(1759512793.505:578): avc: denied { create } for pid=13219 comm="syz.5.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 596.830402][T13228] caif0: entered promiscuous mode [ 596.835504][T13228] caif0: entered allmulticast mode [ 596.840600][T13228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 596.866083][T13227] comedi comedi3: comedi_config --init_data is deprecated [ 596.875921][T13216] Buffer I/O error on dev loop6, logical block 0, async page read [ 596.881523][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 596.890064][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 596.899528][ T30] audit: type=1400 audit(1759512793.515:579): avc: denied { bind } for pid=13219 comm="syz.5.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 596.919885][ T30] audit: type=1400 audit(1759512793.515:580): avc: denied { write } for pid=13219 comm="syz.5.1812" path="socket:[39061]" dev="sockfs" ino=39061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 597.047793][T13216] ldm_validate_partition_table(): Disk read failed. [ 597.084628][T13216] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.100985][T13216] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.117914][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 597.156038][T13216] Dev loop6: unable to read RDB block 0 [ 597.221626][ T42] libceph: connect (1)[c::]:6789 error -101 [ 597.236072][ T24] usb 7-1: device descriptor read/all, error -71 [ 597.244438][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 597.245127][T13216] loop6: unable to read partition table [ 597.726031][ T771] usb usb46-port1: unable to enumerate USB device [ 597.778132][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 597.779645][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 597.791056][T13216] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 597.924599][ T5827] Bluetooth: hci3: command 0x0405 tx timeout [ 598.140171][T13223] ceph: No mds server is up or the cluster is laggy [ 598.233642][T13236] SELinux: failed to load policy [ 598.261111][T13249] netlink: 'syz.5.1817': attribute type 1 has an invalid length. [ 598.330134][T13252] macvlan2: entered promiscuous mode [ 598.335951][T13252] macvlan2: entered allmulticast mode [ 598.347584][T13252] bond3: entered promiscuous mode [ 598.353234][T13252] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 598.429633][T13252] bond3: left promiscuous mode [ 598.574415][ T24] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 598.722945][ T30] audit: type=1400 audit(1759512795.725:581): avc: denied { write } for pid=13261 comm="syz.0.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 598.824322][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 598.846589][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.862636][ T24] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 599.158309][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.166874][ T24] usb 7-1: Product: syz [ 599.174431][ T24] usb 7-1: Manufacturer: syz [ 599.179594][ T24] usb 7-1: SerialNumber: syz [ 599.514018][ T24] usb 7-1: config 0 descriptor?? [ 599.543172][ T24] usb 7-1: no audio or video endpoints found [ 599.855878][ T24] usb 7-1: USB disconnect, device number 24 [ 600.004285][ T5827] Bluetooth: hci3: command 0x0405 tx timeout [ 601.124676][ T24] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 601.334609][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 601.342218][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 601.356278][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 601.366317][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 601.378489][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 601.391306][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 601.405529][ T24] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 601.418513][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.426786][ T24] usb 6-1: Product: syz [ 601.431037][ T24] usb 6-1: Manufacturer: syz [ 601.435776][ T24] usb 6-1: SerialNumber: syz [ 601.456215][ T24] usb 6-1: config 0 descriptor?? [ 601.466491][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input26 [ 601.995391][ T24] usb 6-1: USB disconnect, device number 32 [ 602.824330][ T24] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 602.975840][ T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 602.985413][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.995839][ T24] usb 6-1: config 0 descriptor?? [ 603.283528][ T24] ryos 0003:1E7D:3138.001A: unknown main item tag 0x2 [ 603.317444][ T24] ryos 0003:1E7D:3138.001A: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.5-1/input0 [ 603.488161][ T24] usb 6-1: USB disconnect, device number 33 [ 603.789696][ T30] audit: type=1400 audit(1759512800.795:582): avc: denied { unmount } for pid=9731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 605.546021][ T30] audit: type=1400 audit(1759512802.545:583): avc: denied { mounton } for pid=13293 comm="syz.4.1833" path="/proc/1252/cgroup" dev="proc" ino=39286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 605.597977][ T30] audit: type=1400 audit(1759512802.605:584): avc: denied { read } for pid=13310 comm="syz.6.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 605.648574][T13319] binder: 13318:13319 ioctl 4018620d 0 returned -22 [ 605.721566][T13319] input: syz1 as /devices/virtual/input/input27 [ 605.887418][T13329] overlayfs: missing 'lowerdir' [ 605.945602][T13331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 607.426318][T13356] netlink: 'syz.7.1848': attribute type 1 has an invalid length. [ 607.487737][T13356] macvlan2: entered promiscuous mode [ 607.493069][T13356] macvlan2: entered allmulticast mode [ 607.500945][T13356] bond1: entered promiscuous mode [ 607.507049][T13356] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 607.533603][T13356] bond1: left promiscuous mode [ 607.764241][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 607.770448][ T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 607.776820][ T24] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 608.049240][ T30] audit: type=1400 audit(1759512805.055:585): avc: denied { getopt } for pid=13358 comm="syz.5.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 609.844321][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 609.844554][ T24] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 609.856479][ T24] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 611.924340][ T24] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 611.930445][ T24] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 611.935143][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 614.007317][ T24] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 614.013443][ T24] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 616.084375][ T5827] Bluetooth: hci3: command 0x0405 tx timeout [ 616.084409][ T24] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 616.096715][ T24] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 624.248226][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.686783][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.126878][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.564251][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 760.571838][ T31] Not tainted syzkaller #0 [ 760.576901][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 760.585612][ T31] task:kworker/1:0 state:D stack:21752 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 760.597664][ T31] Workqueue: events rfkill_op_handler [ 760.603048][ T31] Call Trace: [ 760.606341][ T31] [ 760.609249][ T31] __schedule+0x1190/0x5de0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 760.613736][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 760.618779][ T31] ? __pfx___schedule+0x10/0x10 [ 760.623682][ T31] ? find_held_lock+0x2b/0x80 [ 760.630438][ T31] ? schedule+0x2d7/0x3a0 [ 760.634860][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 760.639465][ T31] schedule+0xe7/0x3a0 [ 760.684107][ T31] schedule_preempt_disabled+0x13/0x30 [ 760.689633][ T31] __mutex_lock+0x818/0x1060 [ 760.709972][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 760.714665][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 760.719745][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 760.725092][ T31] ? netif_close+0xa2/0x230 [ 760.729629][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 760.734832][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 760.739513][ T31] nfc_dev_down+0x2d/0x2e0 [ 760.743966][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 760.763474][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 760.769298][ T31] rfkill_set_block+0x1fe/0x550 [ 760.774185][ T31] rfkill_epo+0x8e/0x1d0 [ 760.778491][ T31] rfkill_op_handler+0x262/0x280 [ 760.783452][ T31] process_one_work+0x9cf/0x1b70 [ 760.788458][ T31] ? __pfx_process_one_work+0x10/0x10 [ 760.793850][ T31] ? assign_work+0x1a0/0x250 [ 760.798481][ T31] worker_thread+0x6c8/0xf10 [ 760.803078][ T31] ? __pfx_worker_thread+0x10/0x10 [ 760.808736][ T31] kthread+0x3c2/0x780 [ 760.812839][ T31] ? __pfx_kthread+0x10/0x10 [ 760.817454][ T31] ? rcu_is_watching+0x12/0xc0 [ 760.822206][ T31] ? __pfx_kthread+0x10/0x10 [ 760.826795][ T31] ret_from_fork+0x56a/0x730 [ 760.831362][ T31] ? __pfx_kthread+0x10/0x10 [ 760.836002][ T31] ret_from_fork_asm+0x1a/0x30 [ 760.840774][ T31] [ 760.843799][ T31] INFO: task kworker/1:1:42 blocked for more than 143 seconds. [ 760.851425][ T31] Not tainted syzkaller #0 [ 760.856383][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 760.865042][ T31] task:kworker/1:1 state:D stack:21432 pid:42 tgid:42 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 760.877036][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 760.883699][ T31] Call Trace: [ 760.887172][ T31] [ 760.890099][ T31] __schedule+0x1190/0x5de0 [ 760.894662][ T31] ? __pfx___schedule+0x10/0x10 [ 760.899527][ T31] ? find_held_lock+0x2b/0x80 [ 760.904231][ T31] ? schedule+0x2d7/0x3a0 [ 760.908563][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 760.914915][ T31] schedule+0xe7/0x3a0 [ 760.918981][ T31] schedule_preempt_disabled+0x13/0x30 [ 760.924462][ T31] __mutex_lock+0x818/0x1060 [ 760.929052][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 760.935391][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 760.940309][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 760.945348][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 760.951140][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 760.957489][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 760.963642][ T31] process_one_work+0x9cf/0x1b70 [ 760.968737][ T31] ? __pfx_process_one_work+0x10/0x10 [ 760.974166][ T31] ? assign_work+0x1a0/0x250 [ 760.978769][ T31] worker_thread+0x6c8/0xf10 [ 760.983356][ T31] ? __pfx_worker_thread+0x10/0x10 [ 760.988491][ T31] kthread+0x3c2/0x780 [ 760.992544][ T31] ? __pfx_kthread+0x10/0x10 [ 760.997142][ T31] ? rcu_is_watching+0x12/0xc0 [ 761.001893][ T31] ? __pfx_kthread+0x10/0x10 [ 761.006492][ T31] ret_from_fork+0x56a/0x730 [ 761.011059][ T31] ? __pfx_kthread+0x10/0x10 [ 761.015662][ T31] ret_from_fork_asm+0x1a/0x30 [ 761.020463][ T31] [ 761.023576][ T31] INFO: task syz.6.1835:13310 blocked for more than 143 seconds. [ 761.031323][ T31] Not tainted syzkaller #0 [ 761.036304][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 761.045018][ T31] task:syz.6.1835 state:D stack:26712 pid:13310 tgid:13310 ppid:9731 task_flags:0x400040 flags:0x00080003 [ 761.056953][ T31] Call Trace: [ 761.060211][ T31] [ 761.063118][ T31] __schedule+0x1190/0x5de0 [ 761.067631][ T31] ? __pfx___schedule+0x10/0x10 [ 761.072471][ T31] ? find_held_lock+0x2b/0x80 [ 761.077151][ T31] ? schedule+0x2d7/0x3a0 [ 761.081468][ T31] ? rfkill_unregister+0xec/0x2c0 [ 761.086489][ T31] schedule+0xe7/0x3a0 [ 761.090547][ T31] schedule_preempt_disabled+0x13/0x30 [ 761.096023][ T31] __mutex_lock+0x818/0x1060 [ 761.100607][ T31] ? class_to_subsys+0x10f/0x160 [ 761.105561][ T31] ? rfkill_unregister+0xec/0x2c0 [ 761.110564][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 761.115608][ T31] ? device_del+0x6b6/0x9f0 [ 761.120105][ T31] ? __pfx_device_del+0x10/0x10 [ 761.124966][ T31] ? rfkill_unregister+0xec/0x2c0 [ 761.129984][ T31] rfkill_unregister+0xec/0x2c0 [ 761.134846][ T31] nfc_unregister_device+0x94/0x330 [ 761.140041][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 761.145789][ T31] virtual_ncidev_close+0x4b/0xa0 [ 761.150811][ T31] __fput+0x402/0xb70 [ 761.154835][ T31] task_work_run+0x150/0x240 [ 761.159418][ T31] ? __pfx_task_work_run+0x10/0x10 [ 761.164544][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 761.170249][ T31] exit_to_user_mode_loop+0xec/0x130 [ 761.175539][ T31] do_syscall_64+0x419/0x4e0 [ 761.180115][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.186008][ T31] RIP: 0033:0x7ff2a518eec9 [ 761.190399][ T31] RSP: 002b:00007ffe29be03b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 761.198843][ T31] RAX: 0000000000000000 RBX: 00007ff2a53e7da0 RCX: 00007ff2a518eec9 [ 761.207190][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 761.215197][ T31] RBP: 00007ff2a53e7da0 R08: 0000000000000204 R09: 0000001e29be06af [ 761.223166][ T31] R10: 00007ff2a53e7cb0 R11: 0000000000000246 R12: 0000000000093f3c [ 761.231189][ T31] R13: 00007ffe29be04b0 R14: ffffffffffffffff R15: 00007ffe29be04d0 [ 761.239198][ T31] [ 761.242213][ T31] INFO: task syz.0.1847:13349 blocked for more than 144 seconds. [ 761.252868][ T31] Not tainted syzkaller #0 [ 761.257815][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 761.266492][ T31] task:syz.0.1847 state:D stack:25704 pid:13349 tgid:13348 ppid:5816 task_flags:0x400140 flags:0x00080002 [ 761.278444][ T31] Call Trace: [ 761.281703][ T31] [ 761.284652][ T31] __schedule+0x1190/0x5de0 [ 761.289167][ T31] ? __pfx___schedule+0x10/0x10 [ 761.294004][ T31] ? find_held_lock+0x2b/0x80 [ 761.298712][ T31] ? schedule+0x2d7/0x3a0 [ 761.303028][ T31] ? rfkill_register+0x3a/0xb40 [ 761.307888][ T31] schedule+0xe7/0x3a0 [ 761.311934][ T31] schedule_preempt_disabled+0x13/0x30 [ 761.317425][ T31] __mutex_lock+0x818/0x1060 [ 761.322003][ T31] ? __pfx___mod_timer+0x10/0x10 [ 761.326933][ T31] ? rfkill_register+0x3a/0xb40 [ 761.331760][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 761.336807][ T31] ? clear_pending_if_disabled+0xa8/0x210 [ 761.342515][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 761.347818][ T31] ? mod_delayed_work_on+0x1a7/0x1c0 [ 761.353086][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 761.358307][ T31] ? mod_delayed_work_on+0x14c/0x1c0 [ 761.363587][ T31] ? rfkill_register+0x3a/0xb40 [ 761.368481][ T31] rfkill_register+0x3a/0xb40 [ 761.373141][ T31] wiphy_register+0x244d/0x2b20 [ 761.377999][ T31] ? netdev_run_todo+0x864/0x1320 [ 761.383012][ T31] ? __dev_printk+0x250/0x270 [ 761.387689][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 761.392866][ T31] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 761.398955][ T31] ieee80211_register_hw+0x253d/0x4120 [ 761.404456][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 761.410266][ T31] ? __pfx___debug_object_init+0x10/0x10 [ 761.415917][ T31] ? find_held_lock+0x2b/0x80 [ 761.420579][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 761.426511][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 761.432330][ T31] ? __hrtimer_setup+0x176/0x280 [ 761.437288][ T31] mac80211_hwsim_new_radio+0x32c7/0x5650 [ 761.443004][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 761.449073][ T31] hwsim_new_radio_nl+0xba2/0x1330 [ 761.454216][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 761.459772][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 761.467174][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 761.474603][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 761.480160][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 761.486234][ T31] ? bpf_lsm_capable+0x9/0x10 [ 761.490890][ T31] ? security_capable+0x7e/0x260 [ 761.495839][ T31] ? ns_capable+0xd7/0x110 [ 761.500253][ T31] genl_rcv_msg+0x55c/0x800 [ 761.504770][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 761.509788][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 761.515353][ T31] netlink_rcv_skb+0x155/0x420 [ 761.520101][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 761.525141][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 761.530413][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 761.535734][ T31] genl_rcv+0x28/0x40 [ 761.539721][ T31] netlink_unicast+0x5aa/0x870 [ 761.544542][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 761.549838][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 761.555864][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 761.560631][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 761.565957][ T31] ____sys_sendmsg+0xa98/0xc70 [ 761.570718][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 761.576199][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 761.581480][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 761.586792][ T31] ___sys_sendmsg+0x134/0x1d0 [ 761.591465][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 761.596692][ T31] __sys_sendmsg+0x16d/0x220 [ 761.601268][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 761.606401][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 761.611322][ T31] do_syscall_64+0xcd/0x4e0 [ 761.615835][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.621716][ T31] RIP: 0033:0x7fde5e98eec9 [ 761.626143][ T31] RSP: 002b:00007fde5f78a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.634587][ T31] RAX: ffffffffffffffda RBX: 00007fde5ebe5fa0 RCX: 00007fde5e98eec9 [ 761.642569][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 761.650551][ T31] RBP: 00007fde5ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 761.658561][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.666596][ T31] R13: 00007fde5ebe6038 R14: 00007fde5ebe5fa0 R15: 00007ffeda3c9e98 [ 761.674613][ T31] [ 761.677638][ T31] INFO: task syz.0.1847:13350 blocked for more than 144 seconds. [ 761.685454][ T31] Not tainted syzkaller #0 [ 761.690376][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 761.699068][ T31] task:syz.0.1847 state:D stack:28040 pid:13350 tgid:13348 ppid:5816 task_flags:0x400040 flags:0x00080002 [ 761.710980][ T31] Call Trace: [ 761.714361][ T31] [ 761.717289][ T31] __schedule+0x1190/0x5de0 [ 761.721803][ T31] ? __pfx___schedule+0x10/0x10 [ 761.726686][ T31] ? find_held_lock+0x2b/0x80 [ 761.731346][ T31] ? schedule+0x2d7/0x3a0 [ 761.735695][ T31] ? genl_rcv_msg+0x577/0x800 [ 761.740350][ T31] schedule+0xe7/0x3a0 [ 761.744431][ T31] schedule_preempt_disabled+0x13/0x30 [ 761.749879][ T31] __mutex_lock+0x818/0x1060 [ 761.754495][ T31] ? kfree_skbmem+0x1a4/0x1f0 [ 761.759167][ T31] ? genl_rcv_msg+0x577/0x800 [ 761.763845][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 761.768946][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 761.774161][ T31] ? __radix_tree_lookup+0x21f/0x2c0 [ 761.779459][ T31] ? genl_rcv_msg+0x577/0x800 [ 761.784168][ T31] genl_rcv_msg+0x577/0x800 [ 761.788687][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 761.794093][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 761.799114][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 761.804079][ T31] netlink_rcv_skb+0x155/0x420 [ 761.808834][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 761.813836][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 761.819126][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 761.824434][ T31] genl_rcv+0x28/0x40 [ 761.828392][ T31] netlink_unicast+0x5aa/0x870 [ 761.833139][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 761.838490][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 761.843261][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 761.848808][ T31] ____sys_sendmsg+0xa98/0xc70 [ 761.853701][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 761.859223][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 761.864522][ T31] ? __page_table_check_ptes_set+0x1ae/0x420 [ 761.870500][ T31] ? do_pte_missing+0x8a3/0x3ba0 [ 761.875455][ T31] ___sys_sendmsg+0x134/0x1d0 [ 761.880123][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 761.885350][ T31] __sys_sendmsg+0x16d/0x220 [ 761.889923][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 761.895058][ T31] ? find_held_lock+0x2b/0x80 [ 761.899747][ T31] ? do_user_addr_fault+0x843/0x1370 [ 761.905067][ T31] do_syscall_64+0xcd/0x4e0 [ 761.909571][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.915479][ T31] RIP: 0033:0x7fde5e98eec9 [ 761.919891][ T31] RSP: 002b:00007fde5f769038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.928322][ T31] RAX: ffffffffffffffda RBX: 00007fde5ebe6090 RCX: 00007fde5e98eec9 [ 761.936300][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 761.944281][ T31] RBP: 00007fde5ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 761.952241][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.960236][ T31] R13: 00007fde5ebe6128 R14: 00007fde5ebe6090 R15: 00007ffeda3c9e98 [ 761.968223][ T31] [ 761.971228][ T31] INFO: task syz.5.1849:13361 blocked for more than 144 seconds. [ 761.979006][ T31] Not tainted syzkaller #0 [ 761.983919][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 761.992580][ T31] task:syz.5.1849 state:D stack:26536 pid:13361 tgid:13358 ppid:8186 task_flags:0x400140 flags:0x00080002 [ 762.004507][ T31] Call Trace: [ 762.007793][ T31] [ 762.010721][ T31] __schedule+0x1190/0x5de0 [ 762.015277][ T31] ? __pfx___schedule+0x10/0x10 [ 762.020115][ T31] ? find_held_lock+0x2b/0x80 [ 762.024813][ T31] ? schedule+0x2d7/0x3a0 [ 762.029145][ T31] ? genl_rcv_msg+0x577/0x800 [ 762.033819][ T31] schedule+0xe7/0x3a0 [ 762.037926][ T31] schedule_preempt_disabled+0x13/0x30 [ 762.043373][ T31] __mutex_lock+0x818/0x1060 [ 762.047969][ T31] ? genl_rcv_msg+0x577/0x800 [ 762.052626][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 762.057670][ T31] ? irqentry_exit+0x3b/0x90 [ 762.062252][ T31] ? genl_rcv_msg+0x577/0x800 [ 762.067027][ T31] ? genl_rcv_msg+0x577/0x800 [ 762.071680][ T31] genl_rcv_msg+0x577/0x800 [ 762.076194][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 762.081546][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 762.086573][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 762.091494][ T31] netlink_rcv_skb+0x155/0x420 [ 762.096282][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 762.101288][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 762.106578][ T31] genl_rcv+0x28/0x40 [ 762.110535][ T31] netlink_unicast+0x5aa/0x870 [ 762.115338][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 762.120644][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 762.126696][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 762.131463][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.136790][ T31] __sys_sendto+0x4a3/0x520 [ 762.141311][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 762.146431][ T31] ? __pfx___sys_socket+0x10/0x10 [ 762.151449][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 762.156237][ T31] ? do_syscall_64+0x91/0x4e0 [ 762.160901][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 762.166107][ T31] do_syscall_64+0xcd/0x4e0 [ 762.170609][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.176504][ T31] RIP: 0033:0x7feb27590d5c [ 762.180898][ T31] RSP: 002b:00007feb283b9ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 762.189358][ T31] RAX: ffffffffffffffda RBX: 00007feb283b9fc0 RCX: 00007feb27590d5c [ 762.197375][ T31] RDX: 0000000000000020 RSI: 00007feb283ba010 RDI: 000000000000000b [ 762.205361][ T31] RBP: 0000000000000000 R08: 00007feb283b9f14 R09: 000000000000000c [ 762.213307][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 762.221297][ T31] R13: 00007feb283b9f68 R14: 00007feb283ba010 R15: 0000000000000000 [ 762.229313][ T31] [ 762.232418][ T31] INFO: task syz.5.1849:13362 blocked for more than 145 seconds. [ 762.240202][ T31] Not tainted syzkaller #0 [ 762.245168][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 762.253809][ T31] task:syz.5.1849 state:D stack:28248 pid:13362 tgid:13358 ppid:8186 task_flags:0x400040 flags:0x00080002 [ 762.265753][ T31] Call Trace: [ 762.269034][ T31] [ 762.271971][ T31] __schedule+0x1190/0x5de0 [ 762.276536][ T31] ? __pfx___schedule+0x10/0x10 [ 762.281380][ T31] ? find_held_lock+0x2b/0x80 [ 762.286085][ T31] ? schedule+0x2d7/0x3a0 [ 762.290409][ T31] ? genl_rcv_msg+0x577/0x800 [ 762.295100][ T31] schedule+0xe7/0x3a0 [ 762.299146][ T31] schedule_preempt_disabled+0x13/0x30 [ 762.305027][ T31] __mutex_lock+0x818/0x1060 [ 762.309647][ T31] ? kfree_skbmem+0x1a4/0x1f0 [ 762.314353][ T31] ? genl_rcv_msg+0x577/0x800 [ 762.319007][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 762.324382][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 762.329688][ T31] ? __dev_queue_xmit+0xaf1/0x4490 [ 762.334838][ T31] ? __radix_tree_lookup+0x21f/0x2c0 [ 762.340103][ T31] ? genl_rcv_msg+0x577/0x800 [ 762.345077][ T31] genl_rcv_msg+0x577/0x800 [ 762.349590][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 762.354986][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 762.359986][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 762.365161][ T31] netlink_rcv_skb+0x155/0x420 [ 762.369910][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 762.374954][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 762.380219][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 762.385689][ T31] genl_rcv+0x28/0x40 [ 762.389652][ T31] netlink_unicast+0x5aa/0x870 [ 762.394446][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 762.399741][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 762.406106][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 762.410884][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.416222][ T31] __sys_sendto+0x4a3/0x520 [ 762.420705][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 762.425924][ T31] ? fd_install+0x225/0x750 [ 762.430420][ T31] ? __pfx___sys_socket+0x10/0x10 [ 762.435455][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 762.440198][ T31] ? do_syscall_64+0x91/0x4e0 [ 762.445059][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 762.450244][ T31] do_syscall_64+0xcd/0x4e0 [ 762.454765][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.460643][ T31] RIP: 0033:0x7feb27590d5c [ 762.465351][ T31] RSP: 002b:00007feb28398ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 762.473777][ T31] RAX: ffffffffffffffda RBX: 00007feb28398fc0 RCX: 00007feb27590d5c [ 762.481783][ T31] RDX: 0000000000000020 RSI: 00007feb28399010 RDI: 0000000000000009 [ 762.490350][ T31] RBP: 0000000000000000 R08: 00007feb28398f14 R09: 000000000000000c [ 762.498377][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 762.506564][ T31] R13: 00007feb28398f68 R14: 00007feb28399010 R15: 0000000000000000 [ 762.514582][ T31] [ 762.517606][ T31] INFO: task syz.7.1850:13368 blocked for more than 145 seconds. [ 762.525623][ T31] Not tainted syzkaller #0 [ 762.530543][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 762.539255][ T31] task:syz.7.1850 state:D stack:24392 pid:13368 tgid:13365 ppid:10954 task_flags:0x400140 flags:0x00080002 [ 762.551368][ T31] Call Trace: [ 762.554684][ T31] [ 762.557620][ T31] __schedule+0x1190/0x5de0 [ 762.562109][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 762.567241][ T31] ? __pfx___schedule+0x10/0x10 [ 762.572081][ T31] ? find_held_lock+0x2b/0x80 [ 762.576769][ T31] ? schedule+0x2d7/0x3a0 [ 762.581083][ T31] ? genl_rcv_msg+0x577/0x800 [ 762.586087][ T31] schedule+0xe7/0x3a0 [ 762.590170][ T31] schedule_preempt_disabled+0x13/0x30 [ 762.595643][ T31] __mutex_lock+0x818/0x1060 [ 762.600227][ T31] ? genl_rcv_msg+0x577/0x800 [ 762.604936][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 762.609951][ T31] ? irqentry_exit+0x3b/0x90 [ 762.614707][ T31] ? __radix_tree_lookup+0x21f/0x2c0 [ 762.619993][ T31] ? genl_rcv_msg+0x577/0x800 [ 762.624764][ T31] genl_rcv_msg+0x577/0x800 [ 762.629253][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 762.634948][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 762.639977][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 762.644933][ T31] netlink_rcv_skb+0x155/0x420 [ 762.649685][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 762.654817][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 762.660120][ T31] genl_rcv+0x28/0x40 [ 762.664313][ T31] netlink_unicast+0x5aa/0x870 [ 762.669124][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 762.674519][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 762.680506][ T31] ? security_socket_getpeersec_dgram+0xac/0x290 [ 762.686937][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 762.691731][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.697088][ T31] ? security_socket_sendmsg+0x33/0x240 [ 762.702656][ T31] ? __sanitizer_cov_trace_pc+0x17/0x70 [ 762.708286][ T31] __sys_sendto+0x4a3/0x520 [ 762.712786][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 762.717886][ T31] ? find_held_lock+0x2b/0x80 [ 762.722564][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 762.727487][ T31] ? do_syscall_64+0x91/0x4e0 [ 762.732185][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 762.737455][ T31] do_syscall_64+0xcd/0x4e0 [ 762.742000][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.747988][ T31] RIP: 0033:0x7f5817d90d5c [ 762.752405][ T31] RSP: 002b:00007f5815fd3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 762.760854][ T31] RAX: ffffffffffffffda RBX: 00007f5815fd3fc0 RCX: 00007f5817d90d5c [ 762.768851][ T31] RDX: 0000000000000020 RSI: 00007f5815fd4010 RDI: 0000000000000008 [ 762.776831][ T31] RBP: 0000000000000000 R08: 00007f5815fd3f14 R09: 000000000000000c [ 762.784823][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 762.792810][ T31] R13: 00007f5815fd3f68 R14: 00007f5815fd4010 R15: 0000000000000000 [ 762.800934][ T31] [ 762.803986][ T31] INFO: task syz.4.1852:13374 blocked for more than 145 seconds. [ 762.811785][ T31] Not tainted syzkaller #0 [ 762.816744][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 762.825681][ T31] task:syz.4.1852 state:D stack:28088 pid:13374 tgid:13373 ppid:5823 task_flags:0x400040 flags:0x00080002 [ 762.837626][ T31] Call Trace: [ 762.840891][ T31] [ 762.843804][ T31] __schedule+0x1190/0x5de0 [ 762.848332][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 762.853276][ T31] ? __pfx___schedule+0x10/0x10 [ 762.858175][ T31] ? find_held_lock+0x2b/0x80 [ 762.862864][ T31] ? schedule+0x2d7/0x3a0 [ 762.867210][ T31] ? genl_rcv_msg+0x577/0x800 [ 762.871880][ T31] schedule+0xe7/0x3a0 [ 762.875969][ T31] schedule_preempt_disabled+0x13/0x30 [ 762.881430][ T31] __mutex_lock+0x818/0x1060 [ 762.887250][ T31] ? kfree_skbmem+0x1a4/0x1f0 [ 762.891966][ T31] ? genl_rcv_msg+0x577/0x800 [ 762.896825][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 762.901858][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 762.907530][ T31] ? __dev_queue_xmit+0xaf1/0x4490 [ 762.912663][ T31] ? __radix_tree_lookup+0x21f/0x2c0 [ 762.918058][ T31] ? genl_rcv_msg+0x577/0x800 [ 762.922736][ T31] genl_rcv_msg+0x577/0x800 [ 762.927549][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 762.932947][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 762.938027][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 762.942981][ T31] netlink_rcv_skb+0x155/0x420 [ 762.947997][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 762.953049][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 762.958472][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 762.963772][ T31] genl_rcv+0x28/0x40 [ 762.968013][ T31] netlink_unicast+0x5aa/0x870 [ 762.972806][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 762.978142][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 762.984166][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 762.988941][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.994316][ T31] __sys_sendto+0x4a3/0x520 [ 762.998842][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 763.003856][ T31] ? fd_install+0x225/0x750 [ 763.008466][ T31] ? __pfx___sys_socket+0x10/0x10 [ 763.013502][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 763.018333][ T31] ? do_syscall_64+0x91/0x4e0 [ 763.023015][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 763.028259][ T31] do_syscall_64+0xcd/0x4e0 [ 763.032774][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.038747][ T31] RIP: 0033:0x7f9413190d5c [ 763.043154][ T31] RSP: 002b:00007f9413fedec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 763.051891][ T31] RAX: ffffffffffffffda RBX: 00007f9413fedfc0 RCX: 00007f9413190d5c [ 763.059961][ T31] RDX: 0000000000000020 RSI: 00007f9413fee010 RDI: 0000000000000004 [ 763.067950][ T31] RBP: 0000000000000000 R08: 00007f9413fedf14 R09: 000000000000000c [ 763.075950][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 763.083925][ T31] R13: 00007f9413fedf68 R14: 00007f9413fee010 R15: 0000000000000000 [ 763.091929][ T31] [ 763.095103][ T31] [ 763.095103][ T31] Showing all locks held in the system: [ 763.102816][ T31] 4 locks held by kworker/1:0/24: [ 763.107844][ T31] #0: ffff88801b051948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 763.118337][ T31] #1: ffffc900001e7d10 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 763.128849][ T31] #2: ffffffff903636c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x55/0x1d0 [ 763.138403][ T31] #3: ffff888024c95100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 763.147406][ T31] 1 lock held by khungtaskd/31: [ 763.152233][ T31] #0: ffffffff8e1c4120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 763.162143][ T31] 3 locks held by kworker/1:1/42: [ 763.167326][ T31] #0: ffff88801b051948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 763.177809][ T31] #1: ffffc90000b27d10 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 763.190712][ T31] #2: ffffffff903636c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 763.202191][ T31] 2 locks held by kworker/u8:6/3515: [ 763.207574][ T31] #0: ffff88801b069148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 763.218767][ T31] #1: ffffc9000cbe7d10 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 763.230987][ T31] 2 locks held by getty/5581: [ 763.235709][ T31] #0: ffff88814db4d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 763.245487][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 763.255615][ T31] 2 locks held by syz.6.1835/13310: [ 763.260789][ T31] #0: ffff888024c95100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 763.270559][ T31] #1: ffffffff903636c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 763.280783][ T31] 3 locks held by syz.0.1847/13349: [ 763.285980][ T31] #0: ffffffff8ff80870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 763.294171][ T31] #1: ffffffff8ff80928 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 763.303132][ T31] #2: ffffffff903636c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 763.313073][ T31] 2 locks held by syz.0.1847/13350: [ 763.318274][ T31] #0: ffffffff8ff80870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 763.326473][ T31] #1: ffffffff8ff80928 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 763.335476][ T31] 2 locks held by syz.5.1849/13361: [ 763.340646][ T31] #0: ffffffff8ff80870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 763.348850][ T31] #1: ffffffff8ff80928 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 763.357880][ T31] 2 locks held by syz.5.1849/13362: [ 763.363067][ T31] #0: ffffffff8ff80870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 763.371321][ T31] #1: ffffffff8ff80928 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 763.380314][ T31] 2 locks held by syz.7.1850/13368: [ 763.385643][ T31] #0: ffffffff8ff80870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 763.393821][ T31] #1: ffffffff8ff80928 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 763.402824][ T31] 2 locks held by syz.4.1852/13374: [ 763.408027][ T31] #0: ffffffff8ff80870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 763.416236][ T31] #1: ffffffff8ff80928 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 763.425218][ T31] 2 locks held by syz-executor/13378: [ 763.430589][ T31] #0: ffff888058344118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 763.440031][ T31] #1: ffffffff903636c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 763.449971][ T31] 2 locks held by syz-executor/13380: [ 763.455365][ T31] #0: ffff88805564e118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 763.464792][ T31] #1: ffffffff903636c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 763.474752][ T31] 2 locks held by syz-executor/13382: [ 763.480115][ T31] #0: ffff888051d47918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 763.489573][ T31] #1: ffffffff903636c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 763.499642][ T31] 2 locks held by syz-executor/13384: [ 763.505052][ T31] #0: ffff88807c310918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 763.514470][ T31] #1: ffffffff903636c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 763.524407][ T31] 2 locks held by syz-executor/13386: [ 763.529773][ T31] #0: ffff88804e16a118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 763.539192][ T31] #1: ffffffff903636c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 763.549113][ T31] 2 locks held by syz-executor/13389: [ 763.554505][ T31] #0: ffff888032af9118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 763.563909][ T31] #1: ffffffff903636c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 763.573838][ T31] 2 locks held by syz-executor/13391: [ 763.579204][ T31] #0: ffff888059b9e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 763.588609][ T31] #1: ffffffff903636c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 763.598554][ T31] 2 locks held by syz-executor/13393: [ 763.603903][ T31] #0: ffff888059eda918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 763.613538][ T31] #1: ffffffff903636c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 763.623549][ T31] 2 locks held by syz-executor/13395: [ 763.628950][ T31] #0: ffff88807c197918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 763.638383][ T31] #1: ffffffff903636c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 763.648325][ T31] 2 locks held by syz-executor/13397: [ 763.653668][ T31] #0: ffff88805784d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 763.663088][ T31] #1: ffffffff903636c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 763.673149][ T31] 2 locks held by syz-executor/13399: [ 763.678601][ T31] #0: ffff888022fc8118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 763.688010][ T31] #1: ffffffff903636c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 763.697966][ T31] 2 locks held by syz-executor/13402: [ 763.703316][ T31] #0: ffff888054087918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 763.712714][ T31] #1: ffffffff903636c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 763.723582][ T31] 2 locks held by syz-executor/13403: [ 763.728953][ T31] #0: ffff888028b76118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 763.738377][ T31] #1: ffffffff903636c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 763.748341][ T31] 2 locks held by syz-executor/13405: [ 763.753689][ T31] #0: ffff888031a75118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 763.763129][ T31] #1: ffffffff903636c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 763.773151][ T31] 2 locks held by syz-executor/13407: [ 763.778612][ T31] #0: ffff88801b761118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 763.788070][ T31] #1: ffffffff903636c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 763.798016][ T31] [ 763.800344][ T31] ============================================= [ 763.800344][ T31] [ 763.808796][ T31] NMI backtrace for cpu 1 [ 763.808809][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 763.808821][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 763.808828][ T31] Call Trace: [ 763.808833][ T31] [ 763.808838][ T31] dump_stack_lvl+0x116/0x1f0 [ 763.808860][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 763.808873][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 763.808885][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 763.808899][ T31] watchdog+0xf3f/0x1170 [ 763.808916][ T31] ? rcu_is_watching+0x12/0xc0 [ 763.808932][ T31] ? __pfx_watchdog+0x10/0x10 [ 763.808946][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 763.808962][ T31] ? __kthread_parkme+0x19e/0x250 [ 763.808973][ T31] ? __pfx_watchdog+0x10/0x10 [ 763.808988][ T31] kthread+0x3c2/0x780 [ 763.809000][ T31] ? __pfx_kthread+0x10/0x10 [ 763.809013][ T31] ? rcu_is_watching+0x12/0xc0 [ 763.809028][ T31] ? __pfx_kthread+0x10/0x10 [ 763.809040][ T31] ret_from_fork+0x56a/0x730 [ 763.809052][ T31] ? __pfx_kthread+0x10/0x10 [ 763.809064][ T31] ret_from_fork_asm+0x1a/0x30 [ 763.809084][ T31] [ 763.809088][ T31] Sending NMI from CPU 1 to CPUs 0: [ 763.929632][ C0] NMI backtrace for cpu 0 [ 763.929649][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 763.929665][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 763.929673][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 763.929696][ C0] Code: ae 60 02 e9 d3 09 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 2e 1e 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 763.929709][ C0] RSP: 0018:ffffffff8de07e08 EFLAGS: 000002c6 [ 763.929722][ C0] RAX: 00000000032a1d37 RBX: 0000000000000000 RCX: ffffffff8b4bda89 [ 763.929731][ C0] RDX: 0000000000000000 RSI: ffffffff8d820d97 RDI: ffffffff8bd011c0 [ 763.929740][ C0] RBP: fffffbfff1bd2f40 R08: 0000000000000001 R09: ffffed10170c6655 [ 763.929748][ C0] R10: ffff8880b86332ab R11: 0000000000000000 R12: 0000000000000000 [ 763.929757][ C0] R13: ffffffff8de97a00 R14: ffffffff905f3590 R15: 0000000000000000 [ 763.929766][ C0] FS: 0000000000000000(0000) GS:ffff888124e85000(0000) knlGS:0000000000000000 [ 763.929780][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 763.929789][ C0] CR2: 000055882726dad8 CR3: 000000000df82000 CR4: 00000000003526f0 [ 763.929798][ C0] Call Trace: [ 763.929803][ C0] [ 763.929807][ C0] default_idle+0x13/0x20 [ 763.929821][ C0] default_idle_call+0x6c/0xb0 [ 763.929832][ C0] do_idle+0x38d/0x500 [ 763.929854][ C0] ? __pfx_do_idle+0x10/0x10 [ 763.929872][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 763.929891][ C0] cpu_startup_entry+0x4f/0x60 [ 763.929909][ C0] rest_init+0x16b/0x2b0 [ 763.929923][ C0] ? acpi_subsystem_init+0x133/0x180 [ 763.929942][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 763.929956][ C0] start_kernel+0x3f3/0x4e0 [ 763.929976][ C0] x86_64_start_reservations+0x18/0x30 [ 763.929995][ C0] x86_64_start_kernel+0x130/0x190 [ 763.930014][ C0] common_startup_64+0x13e/0x148 [ 763.930036][ C0] [ 763.930652][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 764.126804][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 764.135905][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 764.145943][ T31] Call Trace: [ 764.149219][ T31] [ 764.152131][ T31] dump_stack_lvl+0x3d/0x1f0 [ 764.156718][ T31] vpanic+0x640/0x6f0 [ 764.160676][ T31] panic+0xca/0xd0 [ 764.164392][ T31] ? __pfx_panic+0x10/0x10 [ 764.168806][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 764.174164][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 764.180295][ T31] ? watchdog+0xe48/0x1170 [ 764.184689][ T31] ? watchdog+0xe3b/0x1170 [ 764.189084][ T31] watchdog+0xe59/0x1170 [ 764.193342][ T31] ? rcu_is_watching+0x12/0xc0 [ 764.198090][ T31] ? __pfx_watchdog+0x10/0x10 [ 764.202744][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 764.207921][ T31] ? __kthread_parkme+0x19e/0x250 [ 764.212919][ T31] ? __pfx_watchdog+0x10/0x10 [ 764.217575][ T31] kthread+0x3c2/0x780 [ 764.221622][ T31] ? __pfx_kthread+0x10/0x10 [ 764.226187][ T31] ? rcu_is_watching+0x12/0xc0 [ 764.230928][ T31] ? __pfx_kthread+0x10/0x10 [ 764.235493][ T31] ret_from_fork+0x56a/0x730 [ 764.240076][ T31] ? __pfx_kthread+0x10/0x10 [ 764.244656][ T31] ret_from_fork_asm+0x1a/0x30 [ 764.249403][ T31] [ 764.252662][ T31] Kernel Offset: disabled [ 764.256982][ T31] Rebooting in 86400 seconds..