last executing test programs: 1m20.05671453s ago: executing program 2 (id=1075): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0xc6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x0, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x4cbe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x4, &(0x7f0000000740)=ANY=[@ANYRES8=r1, @ANYRES8, @ANYRESOCT, @ANYRES16, @ANYRES16=r2, @ANYBLOB="7ba41d0fc68b06d07585f8d14b79efd8ba36a06cf004c79d5c6deb94a8e8f5d34814cae3e62d982fc3a0284e29c60cb7a56ec7f27f766677e48d45a7762ddfb7df73e1615fef8de2f25f72a61f169bc0a6c4a75785c2037987421cb84101905d76c2c47b8d800eb8f5f38e46aaf1410c08c7b618ce13ff73788b89be5ca2065a0f3406589e14446a83af0fad098ba23ed4a33337d54f6c069e5adfa476bb77ad4cf4c76b27a6dc7e825d9c99c97264082acd27093d625cc486faf5601d9f19252122d8aa62194a983bf4c1a5b5e16014a5d1516da90daf0b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0902, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff5) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) 1m19.705897903s ago: executing program 2 (id=1077): syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYBLOB="de1dc31aec57ced1e742a2e6aaaaaaaaaaaa00006162bc2286dd6003000000142f00fe800000000000000000000000003d5500bbfe80000000000000539c41e9ac764dc5b88c5189cc0d3762be0d08474b2e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x400, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x1}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={0xffffffffffffffff}, 0x4) r8 = geteuid() fchown(r7, r8, 0xee01) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0xfffffffe, 0x0, 0x7d, 0x1, 0x5, 0x6, 0x3, 0x13, 0x4, [0x55f, 0x7ff2, 0x800, 0x7, 0x9, 0x4, 0x7, 0x40000000]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000feffffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000040000000850000007b00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'multiq3\x00', [0x0, 0x3, 0x2fd, 0xfffffffc, 0x6, 0x179, 0x8, 0xa82, 0xff46, 0xe2, 0x2000002, 0x4, 0x0, 0x40000003, 0x1, 0x111, 0x5, 0x3, 0x3, 0x4000000, 0x2000002, 0x180002, 0xf23, 0x8686, 0x200000d, 0x4, 0x3c, 0x14, 0x10, 0x8, 0x8]}) syz_open_dev$video(&(0x7f0000000100), 0x2000000, 0x58a01) mount(&(0x7f0000000300)=@sr0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='vfat\x00', 0x81, &(0x7f0000000340)='\x00\x00\x00\x00') 1m17.698628204s ago: executing program 2 (id=1080): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x54840) listen(0xffffffffffffffff, 0xffff7ffc) timer_create(0x0, &(0x7f0000000400)={0x0, 0x23, 0x4}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000a40)={0x5, &(0x7f00000006c0)=[{@none}, {@fixed}, {@fixed}, {@fixed}, {@none}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000000)=0xe, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000006800010003001000fdffff7f004d000000000000000c000200020000001500000004"], 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) getsockopt$inet6_buf(r3, 0x29, 0x6, 0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffec4) 1m16.013211015s ago: executing program 1 (id=1085): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r3, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20000}], 0x1, 0x5, 0xa, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) request_key(&(0x7f0000000480)='cifs.spnego\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='key_or_keyring:', 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x0, 0x100, 0x100, 0x7, 0x0, 0x1}, 0x1c) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x3, 0x0, 0xe32}]}, 0xc0}}, 0x0) 1m15.519589917s ago: executing program 2 (id=1087): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa1010000, 0x0, 0x0, 0x0, 0x832]}}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x3f, @ib={0x1b, 0x8, 0x6, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) fsmount(r4, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r6 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000602, 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) move_mount(r7, 0x0, r7, &(0x7f00000000c0)='./file0\x00', 0x22) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0x9362, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000640)={[&(0x7f0000000480)='=3-\x00']}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xfff0}, {0x85, 0x0, 0x0, 0xb4}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m15.242252422s ago: executing program 2 (id=1089): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = accept4$packet(r1, 0x0, &(0x7f0000000040), 0x80000) getsockopt$packet_buf(r2, 0x107, 0x2, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000001bbbbbbbbbbbb0800451000380080000000019078ac1efc01ac1414aa030490781206183f2500000000670000008908017f0000017f00000100186371ae9b1c03"], 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20000044}, 0x10000000) unshare(0x26020480) 1m14.545664563s ago: executing program 1 (id=1091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = dup2(r1, r1) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xe}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg1\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x40040) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x3, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x68, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @broadcast}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x2, 0x141a, 0x0, 0x15f1, {[@mptcp=@syn={0x1e, 0xc, 0x2, 0x1, 0x9, 0x401}]}}, {"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"}}}}, 0xfce) 1m14.015390479s ago: executing program 2 (id=1092): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = accept4$packet(r0, 0x0, &(0x7f0000000040), 0x80000) getsockopt$packet_buf(r1, 0x107, 0x2, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000001bbbbbbbbbbbb0800451000380080000000019078ac1efc01ac1414aa030490781206183f2500000000670000008908017f0000017f00000100186371ae9b1c03"], 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m13.948411724s ago: executing program 32 (id=1092): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = accept4$packet(r0, 0x0, &(0x7f0000000040), 0x80000) getsockopt$packet_buf(r1, 0x107, 0x2, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000001bbbbbbbbbbbb0800451000380080000000019078ac1efc01ac1414aa030490781206183f2500000000670000008908017f0000017f00000100186371ae9b1c03"], 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m13.815753942s ago: executing program 1 (id=1095): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x54840) listen(0xffffffffffffffff, 0xffff7ffc) timer_create(0x0, &(0x7f0000000400)={0x0, 0x23, 0x4}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000a40)={0x5, &(0x7f00000006c0)=[{@none}, {@fixed}, {@fixed}, {@fixed}, {@none}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000000)=0xe, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000006800010003001000fdffff7f004d000000000000000c000200020000001500000004"], 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) getsockopt$inet6_buf(r3, 0x29, 0x6, 0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffec4) 1m12.79554375s ago: executing program 1 (id=1097): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa1010000, 0x0, 0x0, 0x0, 0x832]}}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x3f, @ib={0x1b, 0x8, 0x6, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r6 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000602, 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) move_mount(r7, 0x0, r7, &(0x7f00000000c0)='./file0\x00', 0x22) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0x9362, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000640)={[&(0x7f0000000480)='=3-\x00']}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xfff0}, {0x85, 0x0, 0x0, 0xb4}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m12.673101905s ago: executing program 1 (id=1100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x7, 0x8, 0x0, 0x21, 0x10000000000000d, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x7, 0x7fffffffffffe, 0x5, 0x4, 0x9, 0x7f, 0x800000000f4a, 0x100000000, 0xbdb], 0xc000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, &(0x7f00000000c0)={0x8, 0x1}) 1m11.242260869s ago: executing program 1 (id=1101): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x5, r2, 'id0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00', @ANYRES32, @ANYBLOB="0000000000000000000094b4f562defb5f7756b4cbf5a6d7563c5ac743a2ccb509f77b40dee5bad90c6573030da19ef59bae484332d88c609d30248a44a69cc56623a061439a1dc47a295d5a43429071b408dba7cc7061b052d1a2f3d10824d6fb361906efef7904a738902f10f4662b1849de", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1f0000000600000004", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB="00000000010000000000000000"], 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r9], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r3, 0x4004af77, &(0x7f0000000140)=0x8001) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x1a, 0x4, 0x198, 0x0}) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r10, 0x1, 0x70bd26, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) 1m11.178030408s ago: executing program 33 (id=1101): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x5, r2, 'id0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00', @ANYRES32, @ANYBLOB="0000000000000000000094b4f562defb5f7756b4cbf5a6d7563c5ac743a2ccb509f77b40dee5bad90c6573030da19ef59bae484332d88c609d30248a44a69cc56623a061439a1dc47a295d5a43429071b408dba7cc7061b052d1a2f3d10824d6fb361906efef7904a738902f10f4662b1849de", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1f0000000600000004", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB="00000000010000000000000000"], 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r9], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r3, 0x4004af77, &(0x7f0000000140)=0x8001) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x1a, 0x4, 0x198, 0x0}) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r10, 0x1, 0x70bd26, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) 45.185164889s ago: executing program 3 (id=1164): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r3, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20000}], 0x1, 0x5, 0xa, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) request_key(&(0x7f0000000480)='cifs.spnego\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='key_or_keyring:', 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x0, 0x100, 0x100, 0x7, 0x0, 0x1}, 0x1c) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x3, 0x0, 0xe32}]}, 0xc0}}, 0x0) 43.511134665s ago: executing program 3 (id=1167): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0xc6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x0, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x4cbe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x4, &(0x7f0000000740)=ANY=[@ANYRES8=r1, @ANYRES8, @ANYRESOCT=r4, @ANYRES16, @ANYRES16=r2, @ANYBLOB="7ba41d0fc68b06d07585f8d14b79efd8ba36a06cf004c79d5c6deb94a8e8f5d34814cae3e62d982fc3a0284e29c60cb7a56ec7f27f766677e48d45a7762ddfb7df73e1615fef8de2f25f72a61f169bc0a6c4a75785c2037987421cb84101905d76c2c47b8d800eb8f5f38e46aaf1410c08c7b618ce13ff73788b89be5ca2065a0f3406589e14446a83af0fad098ba23ed4a33337d54f6c069e5adfa476bb77ad4cf4c76b27a6dc7e825d9c99c97264082acd27093d625cc486faf5601d9f19252122d8aa62194a983bf4c1a5b5e16014a5d1516da90daf0b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0902, 0x0) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff5) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) 42.547085348s ago: executing program 3 (id=1172): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = accept4$packet(r1, 0x0, &(0x7f0000000040), 0x80000) getsockopt$packet_buf(r2, 0x107, 0x2, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000001bbbbbbbbbbbb0800451000380080000000019078ac1efc01ac1414aa030490781206183f2500000000670000008908017f0000017f00000100186371ae9b1c03"], 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20000044}, 0x10000000) unshare(0x26020480) 41.285171682s ago: executing program 3 (id=1175): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa1010000, 0x0, 0x0, 0x0, 0x832]}}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x3f, @ib={0x1b, 0x8, 0x6, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) r6 = fsmount(r4, 0x0, 0x2) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r7 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r7, 0xffffffff80000602, 0x0, 0x0) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) setpgid(0x0, r9) move_mount(r8, 0x0, r8, &(0x7f00000000c0)='./file0\x00', 0x22) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0x9362, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000640)={[&(0x7f0000000480)='=3-\x00']}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xfff0}, {0x85, 0x0, 0x0, 0xb4}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 41.174956814s ago: executing program 3 (id=1176): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r3, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20000}], 0x1, 0x5, 0xa, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) request_key(&(0x7f0000000480)='cifs.spnego\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='key_or_keyring:', 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x0, 0x100, 0x100, 0x7, 0x0, 0x1}, 0x1c) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x3, 0x0, 0xe32}]}, 0xc0}}, 0x0) 40.72532448s ago: executing program 3 (id=1178): r0 = syz_open_pts(0xffffffffffffffff, 0x42c1) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000000)={0x0, "c36a2e9895309da87f09184ff12fd550"}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001000)={r1, 0x8, 0x80000000}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x8, 0x8000000004, 0x4, 0x0, 0x4, 0x6, 0x6, 0x3, 0x100fff}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_misc(r3, &(0x7f0000000180)='5', 0x1) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x80000006, &(0x7f0000006680)) landlock_create_ruleset(0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000003c0)=0x2, 0x12) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r5, @ANYRES64=r6, @ANYRESDEC=r7, @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) connect$inet(r8, &(0x7f0000001480)={0x2, 0x4e24, @loopback}, 0x10) pivot_root(0x0, 0x0) 40.597498669s ago: executing program 34 (id=1178): r0 = syz_open_pts(0xffffffffffffffff, 0x42c1) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000000)={0x0, "c36a2e9895309da87f09184ff12fd550"}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001000)={r1, 0x8, 0x80000000}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x8, 0x8000000004, 0x4, 0x0, 0x4, 0x6, 0x6, 0x3, 0x100fff}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_misc(r3, &(0x7f0000000180)='5', 0x1) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x80000006, &(0x7f0000006680)) landlock_create_ruleset(0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000003c0)=0x2, 0x12) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r5, @ANYRES64=r6, @ANYRESDEC=r7, @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) connect$inet(r8, &(0x7f0000001480)={0x2, 0x4e24, @loopback}, 0x10) pivot_root(0x0, 0x0) 38.564933654s ago: executing program 0 (id=1183): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = accept4$packet(r1, 0x0, &(0x7f0000000040), 0x80000) getsockopt$packet_buf(r2, 0x107, 0x2, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000001bbbbbbbbbbbb0800451000380080000000019078ac1efc01ac1414aa030490781206183f2500000000670000008908017f0000017f00000100186371ae9b1c03"], 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20000044}, 0x10000000) unshare(0x26020480) 37.102021042s ago: executing program 0 (id=1187): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='geneve1\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x20, 0x66, 0x700, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x100, @void}}}}}}}, 0x0) 36.954493275s ago: executing program 0 (id=1188): syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000068e04d206f0e2c58683101020301090224000100", @ANYBLOB="b70795"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0xf) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @local, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000500)="8fe8", 0x2}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0xfffffff8, @remote, 0x3}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000180)="c8", 0x1}], 0x1}}], 0x2, 0x40854) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000200)=0x8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000004c0)=[{0x6, 0x4, 0xa4, 0x7fff0003}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) close_range(r2, 0xffffffffffffffff, 0x0) 35.265020385s ago: executing program 0 (id=1192): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) pipe(&(0x7f0000002680)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa1010000, 0x0, 0x0, 0x0, 0x832]}}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x3f, @ib={0x1b, 0x8, 0x6, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) r5 = fsmount(r3, 0x0, 0x2) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r6 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000602, 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) move_mount(r7, 0x0, r7, &(0x7f00000000c0)='./file0\x00', 0x22) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0x9362, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000640)={[&(0x7f0000000480)='=3-\x00']}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xfff0}, {0x85, 0x0, 0x0, 0xb4}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 35.154011934s ago: executing program 0 (id=1194): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x20000003}) close_range(r3, r1, 0x0) 34.057348977s ago: executing program 0 (id=1196): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0xff000000, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) 33.921228187s ago: executing program 35 (id=1196): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0xff000000, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) 8.453366695s ago: executing program 5 (id=1262): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 8.334794076s ago: executing program 4 (id=1263): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x60000, 0x9}, 0x40010000, 0x0, 0x1000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) socket$rxrpc(0x21, 0x2, 0xa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000, 0x500000000000000}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) prctl$PR_SET_MM(0x23, 0x1cee7696426a4fe8, &(0x7f0000ffe000/0x2000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 7.392257331s ago: executing program 5 (id=1265): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/121, 0x79}], 0x1, 0x8, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat(r2, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x47, 0x0, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001480)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0xc00) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f0000000500)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x80, 0x0}, 0x4000011) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 7.37287885s ago: executing program 7 (id=1266): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) creat(0x0, 0x40) fcntl$notify(r3, 0x402, 0x25) mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) openat$nvram(0xffffff9c, &(0x7f0000000240), 0x900, 0x0) fchdir(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r8) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000300)={0x24, r9, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) pread64(r7, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r10 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r10, &(0x7f00000000c0), 0x2) 6.948603109s ago: executing program 5 (id=1267): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000640)='./cgroup\x00', &(0x7f0000000000)='proc\x00', 0x100c458, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$getregs(0xc, r1, 0x4, &(0x7f0000000480)=""/210) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x344, r4, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x314, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x294, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x24c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x344}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x24008880) sendfile(r5, r5, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) 6.386686388s ago: executing program 7 (id=1268): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = accept4$packet(r1, 0x0, &(0x7f0000000040), 0x80000) getsockopt$packet_buf(r2, 0x107, 0x2, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000001bbbbbbbbbbbb0800451000380080000000019078ac1efc01ac1414aa030490781206183f2500000000670000008908017f0000017f00000100186371ae9b1c03"], 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20000044}, 0x10000000) unshare(0x26020480) 6.202242731s ago: executing program 4 (id=1269): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = accept4$packet(r1, 0x0, &(0x7f0000000040), 0x80000) getsockopt$packet_buf(r2, 0x107, 0x2, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000001bbbbbbbbbbbb0800451000380080000000019078ac1efc01ac1414aa030490781206183f2500000000670000008908017f0000017f00000100186371ae9b1c03"], 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20000044}, 0x10000000) unshare(0x26020480) 5.364721073s ago: executing program 5 (id=1270): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = accept4$packet(r1, 0x0, &(0x7f0000000040), 0x80000) getsockopt$packet_buf(r2, 0x107, 0x2, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000001bbbbbbbbbbbb0800451000380080000000019078ac1efc01ac1414aa030490781206183f2500000000670000008908017f0000017f00000100186371ae9b1c03"], 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20000044}, 0x10000000) unshare(0x26020480) 4.025030596s ago: executing program 7 (id=1272): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) unshare(0x6a040000) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12) 4.023796467s ago: executing program 4 (id=1273): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xef8, 0x30, 0x25, 0x0, 0x0, {}, [{0xee4, 0x1, [@m_pedit={0xee0, 0x1, 0x0, 0x0, {{0xa}, {0xeb4, 0xb, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x6, 0x6, 0x7, 0x9d1d, 0x1000}, 0x1, 0x2, [{0x3, 0x0, 0xff, 0x4, 0x401, 0xbe9}, {0x0, 0xb, 0x9f944712, 0x0, 0x1, 0x7}, {0x0, 0x80000000, 0xfffffff8, 0x6, 0x969, 0xd}, {0xa, 0x3, 0x6, 0x1000, 0xd, 0x7d}, {0x3, 0x9, 0x7, 0x1, 0x400, 0x63}, {0x1, 0x6, 0x3, 0x81, 0x1, 0x7ff}]}, [{0x26, 0x4, 0x8000, 0x7, 0xc0be, 0x200}, {0x0, 0x5, 0x7fff, 0x7, 0x80000001, 0xc276}, {0x6, 0x0, 0xa, 0x8ea3, 0x6, 0x2}, {0x5, 0xd, 0x1, 0x7, 0x4, 0x7}, {0x1, 0x6, 0x9, 0x8, 0x4, 0xff}, {0x0, 0x2, 0xba, 0x5, 0x3, 0x6}, {0xc, 0x3, 0xa, 0x10001, 0x7fffffff, 0x4}, {0x7, 0x5, 0x1, 0x1, 0xa, 0x3}, {0xc00000, 0x48, 0x7f, 0x30378584, 0x47e3, 0x1}, {0xfffffff9, 0x5, 0x8000, 0x2, 0xc, 0x1}, {0x1, 0x8, 0x3, 0x1, 0xff, 0x2}, {0x4, 0x5, 0xfffff001, 0x4, 0x7ff}, {0x8, 0x47ca, 0xb4d, 0x7, 0xffffff00, 0xffff}, {0xfffffffb, 0xfe33, 0x0, 0x9, 0x6, 0x49}, {0x10, 0x574b2ee2, 0x0, 0x9, 0x40, 0x3ff}, {0x0, 0x7278, 0x8, 0x80000000, 0x8001, 0x1}, {0x7, 0x7ff, 0xc38, 0x9, 0x3, 0x1}, {0x48bd, 0x400, 0x83d9, 0xba, 0xe, 0x6}, {0x2, 0x4, 0xfffffff7, 0x18, 0x8, 0x2}, {0x8, 0x3, 0x1, 0xfff, 0x9, 0xffffff60}, {0x10, 0xfffffff7, 0xb, 0x2, 0x7fffffff, 0x6}, {0x80, 0x80000, 0x3, 0x5a0, 0x80, 0x9}, {0x7468, 0x7, 0x3, 0x6, 0x71ab, 0x8}, {0x401, 0x0, 0xfffffffd, 0x4c8, 0x9, 0x1}, {0x7fff, 0x6, 0x5, 0x3, 0x5, 0xf}, {0x8, 0x5, 0x0, 0x5, 0x2, 0x7}, {0x1, 0x5, 0x4, 0x6, 0x20000}, {0x8000, 0x0, 0x1, 0x2, 0xcd, 0xe4}, {0x80, 0x3ff, 0x7, 0x7, 0x3ff, 0x800}, {0x13faa3c2, 0x6, 0x80000000, 0xff, 0x7fff, 0x81}, {0x7, 0x2, 0x7fff, 0xffff, 0x6, 0x4}, {0x8, 0x3, 0x3, 0x23e1, 0x80, 0x7f}, {0x8001, 0xe, 0xaad, 0xd9ed, 0x6, 0x2}, {0x3, 0x7f, 0x6, 0x2, 0xf0, 0x9}, {0xfffffffb, 0x3, 0x8, 0x2, 0x2, 0x1}, {0x5, 0x4, 0x6, 0x180, 0x40, 0x1}, {0x6, 0x40f1a6dd, 0x5, 0x7f, 0xc0000000, 0x94}, {0x9e, 0x0, 0xe, 0x5, 0x7ff}, {0x3ff, 0x5, 0xe0a9, 0x5, 0x7fff, 0xa0d}, {0x8, 0xeed0, 0x4, 0x2, 0x5, 0x6}, {0xfffffffb, 0x2, 0x0, 0x10000, 0x5, 0xaa6}, {0xfffffffd, 0x7, 0x9, 0x5, 0xe}, {0x200, 0x7, 0x4, 0x8000, 0x1, 0x1}, {0x1, 0x4, 0x10, 0x7, 0x7}, {0x400, 0x0, 0x7, 0x1ffc0000, 0x5, 0x9}, {0x3, 0x1, 0x3, 0x5fa4, 0x5, 0x95d}, {0x7, 0x7, 0x7, 0x6, 0x7f, 0x8}, {0x3, 0x82e, 0x0, 0x80000001, 0x10000, 0xffffff6c}, {0x5, 0xc, 0x2, 0x0, 0x7, 0x3ff}, {0x1, 0x6, 0x6, 0x8, 0x9}, {0xd654, 0x6, 0x2, 0x10000, 0x6, 0x3}, {0x0, 0x8, 0x9a1, 0x9, 0x2, 0x100}, {0x4, 0x7a, 0x7, 0x2, 0x7, 0x80}, {0x1, 0x0, 0x7fff, 0x101, 0xff}, {0x6, 0x93e, 0x4, 0x5, 0x7fff, 0xc9e}, {0x8000, 0x2, 0x8, 0x8, 0x80000001, 0x7}, {0x5, 0x7ff, 0x9, 0x100, 0x64}, {0xe, 0x6, 0x81, 0xf, 0x5, 0x8}, {0x0, 0x505, 0xffff, 0x5, 0x3, 0x8}, {0x8, 0x9, 0x8, 0x8e02, 0x9, 0x8}, {0x7fff, 0x7fffffff, 0x80000001, 0x10001, 0x8000, 0x9}, {0x3, 0x80000000, 0x10000, 0x58, 0x9, 0x9e2}, {0x10, 0x65b0, 0x7be1, 0x7ff, 0x7ff, 0xfffffffb}, {0x1ff, 0x8, 0x9, 0x800, 0x5, 0x840}, {0x4, 0xdd, 0xb, 0x6, 0x80, 0x27}, {0x8, 0x7, 0x4000003, 0xffff2d59, 0xf4f, 0x9}, {0x7, 0xe9b, 0x7, 0x9, 0x6, 0x239d}, {0x5, 0x5, 0x7, 0x7, 0xfffffff9, 0x10001}, {0xffff, 0xfffffff8, 0xf0f, 0x80000, 0x3, 0x50}, {0x0, 0x2, 0xffffffff, 0x8, 0x4, 0xfffffeff}, {0xff, 0xffffffff, 0x8f8, 0x3, 0x6ed4062a, 0x80}, {0x5, 0x4, 0x6915, 0x401, 0x2, 0x8}, {0x0, 0x7, 0x9, 0x1, 0x9, 0x5}, {0x7fffffff, 0x3, 0xfff, 0x6, 0x401, 0xfff}, {0x101, 0x5, 0xe2, 0x4, 0x6, 0xfff}, {0x4, 0x6, 0x5, 0x2, 0x1000, 0x56}, {0x1, 0xc, 0x2, 0x1, 0x9}, {0x6, 0x8, 0x8, 0x8001, 0x1, 0x8}, {0x5, 0x7fffffff, 0x3, 0x6, 0x9, 0x3ff}, {0x6, 0x100, 0x1, 0x2400000, 0x7a2, 0x7}, {0x4c6e, 0xf5f, 0xa, 0x9, 0x1, 0x8}, {0x9, 0x1, 0x29a, 0x6, 0x40, 0x6}, {0x80, 0x1b, 0x1000, 0xffff, 0x81, 0x80000001}, {0x3, 0x1, 0x5, 0x9, 0xfa, 0xf15a}, {0x0, 0x5, 0x9, 0x8, 0x3ff, 0x4}, {0x3, 0x7, 0x9, 0x3, 0x200, 0x96}, {0x7, 0x1ff, 0x8000, 0x8001, 0x9, 0x6}, {0xfffffff7, 0xa60e, 0x6, 0x0, 0x2, 0x4}, {0x10001, 0x2, 0x72, 0x1a, 0x4, 0x2}, {0x3430000, 0x1, 0x8, 0x4, 0x5, 0x80000001}, {0x2, 0x4, 0xfffffff9, 0x3, 0xa, 0x6}, {0xfff, 0x4f, 0x200, 0x3022, 0x6, 0x2}, {0x6, 0xb2, 0x3, 0x4, 0x65, 0x5}, {0xdca, 0x5, 0x7, 0x7f0, 0x7, 0xffffffff}, {0x0, 0x8, 0xffffffff, 0x2, 0x81, 0xff4}, {0x6, 0x9, 0x8, 0xfffffffb, 0x4, 0x7}, {0x2, 0x6, 0x13, 0x4, 0x0, 0xffff}, {0xffff741f, 0x1, 0x4, 0x0, 0x3, 0x2}, {0x6, 0x0, 0x3, 0x6, 0x0, 0x7}, {0x7, 0x3, 0x0, 0x3, 0x7fff, 0x1}, {0x7, 0x10001, 0x6, 0x9, 0xfffffffd, 0x7}, {0x80, 0x3, 0x1000, 0x0, 0x7, 0x1}, {0x6, 0x2, 0x7, 0x7ff, 0x7, 0x5}, {0xc0, 0xfffffff7, 0xffff, 0x2, 0x80000001, 0x5}, {0x400, 0x10, 0x7, 0x4, 0x70075933, 0x6}, {0x4, 0x3, 0x5924, 0x5, 0x1, 0xc}, {0x8, 0x8, 0x0, 0x8, 0x6, 0x100}, {0xb, 0x8, 0xfffffff8, 0x7f, 0x6, 0x2}, {0xa8ad, 0x6, 0xa, 0x7, 0x7, 0xfff}, {0xd0a, 0x7, 0x6, 0x6, 0x4, 0xfe65}, {0x2, 0x1f1, 0xffff, 0x4, 0x8, 0xb}, {0x200, 0x1b, 0x81, 0xb, 0x9, 0x7}, {0x7, 0x9, 0x7ba2, 0xfffffffa, 0x9, 0x3}, {0x4, 0xa83, 0x1, 0x0, 0x3ff, 0x9}, {0x6, 0xffffffff, 0x4, 0x2, 0x3, 0x2}, {0xd, 0x1, 0x80, 0x7, 0x6, 0x3}, {0x2, 0x2, 0x0, 0x91, 0x81, 0x8}, {0x4cf, 0x8, 0xa2, 0x8, 0x5, 0x1}, {0x1ff, 0x7bc, 0x8, 0x0, 0x37, 0x8}, {0x8, 0x0, 0x3, 0x5, 0x6, 0x400}, {0x7b93, 0x3d3b, 0x1, 0x4, 0x2, 0x144}, {0xe8, 0x7f, 0xb, 0x1, 0x101, 0x2}, {0xd60, 0x6, 0x6, 0x7, 0x60, 0x30000000}, {0x7c, 0x1ff, 0x7fffffff, 0x7ff, 0xe0, 0x97}, {0x419, 0x1, 0x8, 0x3, 0x4, 0x3}, {0x7, 0x7, 0x5, 0x8, 0x9, 0xe}, {0x100, 0x87, 0x7fffffff, 0xc, 0x81, 0x1f53}, {0x6, 0x800, 0x7fffffff, 0x7, 0x2, 0x4}], [{0x4, 0x1}, {}, {0x4}, {0x1}, {0x5}, {0x2}, {0x2}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x73ecd8373d91c7ca}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x51572e8a137cfb9a, 0x1}, {0x1}, {0x5}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x1}, {0x3}, {0x3}, {0x5}, {0x4}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x7}, {}, {0x2, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x2}, {0x1, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xef8}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x7, 0x8, 0x0, 0x21, 0x10000000000000d, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x2, 0x2, 0x6, 0x40007}) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r3 = openat$fb0(0xffffff9c, &(0x7f0000000180), 0x48000, 0x0) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000001c0)=[0x5, 0x6, 0xaa], &(0x7f0000000200), &(0x7f00000002c0), 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x7, 0x7fffffffffffe, 0x5, 0x4, 0x9, 0x7f, 0x800000000f4a, 0x100000000, 0xbdb], 0xc000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.322966789s ago: executing program 6 (id=1274): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) openat$iommufd(0xffffff9c, &(0x7f00000000c0), 0x2500, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4, 0x700000000000000}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x100}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) 2.574541675s ago: executing program 6 (id=1275): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0xc6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x4cbe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x4, &(0x7f0000000740)=ANY=[@ANYRES8=r1, @ANYRES8, @ANYRESOCT=r4, @ANYRES16, @ANYRES16=r2, @ANYBLOB="7ba41d0fc68b06d07585f8d14b79efd8ba36a06cf004c79d5c6deb94a8e8f5d34814cae3e62d982fc3a0284e29c60cb7a56ec7f27f766677e48d45a7762ddfb7df73e1615fef8de2f25f72a61f169bc0a6c4a75785c2037987421cb84101905d76c2c47b8d800eb8f5f38e46aaf1410c08c7b618ce13ff73788b89be5ca2065a0f3406589e14446a83af0fad098ba23ed4a33337d54f6c069e5adfa476bb77ad4cf4c76b27a6dc7e825d9c99c97264082acd27093d625cc486faf5601d9f19252122d8aa62194a983bf4c1a5b5e16014a5d1516da90daf0b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0902, 0x0) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff5) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) 2.167939853s ago: executing program 4 (id=1276): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0xa, 0xffff}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.88873286s ago: executing program 7 (id=1277): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.64384613s ago: executing program 4 (id=1278): r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x40b, 0xff, 0x6, 0x80000000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.549895377s ago: executing program 7 (id=1279): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0xffffffff, 0x55, 0x400000, 0x35, "3eccd8000000000000000010000000040100"}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 1.451629636s ago: executing program 7 (id=1280): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r3, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20000}], 0x1, 0x5, 0xa, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) request_key(&(0x7f0000000480)='cifs.spnego\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='key_or_keyring:', 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x0, 0x100, 0x100, 0x7, 0x0, 0x1}, 0x1c) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x3, 0x0, 0xe32}]}, 0xc0}}, 0x0) 1.449931472s ago: executing program 4 (id=1281): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8]}) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000000000ac52ce9eb56847ea000000000000", @ANYRES32=0x0, @ANYBLOB="c0010400000000001c00128009000100626f6e64000000000c0002800800030000000000"], 0x3c}}, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) r8 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) r9 = dup(0xffffffffffffffff) setsockopt$PNPIPE_ENCAP(r9, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/crash_elfcorehdr_size', 0x0, 0x0) pread64(r10, &(0x7f0000000040)=""/41, 0x29, 0x0) write$uinput_user_dev(r9, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xffff4d1d, 0x10, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x80, 0x8, 0x4, 0x1}}) setsockopt$MRT6_DEL_MIF(r9, 0x29, 0xcb, &(0x7f0000000440)={0x1, 0x2, 0x80, r11, 0xc37d}, 0xc) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000000000)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", '\x00', "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x1}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xfffffff7}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x7}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x800}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0xa}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=@newtaction={0x4b24, 0x30, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{0x98, 0x1, [@m_skbmod={0x94, 0xe, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x3, 0x4, 0x2, 0x0, 0x9}, 0x4}}]}, {0x48, 0x6, "936e8bb97f9faf8204ac1e91cc17c061320432d8f7102908e33e4acb7068addb3fc58862ab87467520ec6de3c1d67cf12bd5f2b56dfdb6805a138c038cfdfb6942e0c6e4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x47c, 0x1, [@m_skbedit={0x104, 0x2, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0x4}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfac2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0x2}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7f}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfcd4, 0x4, 0x0, 0x2, 0x1}}]}, {0x98, 0x6, "197e41a58e0370a51ab6140a94334d97ead2c3c731e3579a2fd8a9848934eac3dff47b2811e3eb842a2369fae416a9e1ce2f5c8c89195c2ddf5b5f9834a6f4b85807d6b71d50e8bf785b06338c3ef5901368c82415ab5ceaa12c7e6ecc664df5c67f2a040fc37ea573c050d45403bd9ee3c5300c6ab5ff56eae0b7e7eda25e6a8c7ec52562b2fefaf28acc5dcc1e242f9dbe94f6"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x74, 0x1e, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0x7}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0x2f, 0x6, "ed5549dd5aac5248d3b470230f9feb60d1ce802ac4912d6a20e53c6fb7be4d1a7d5dc07a5c2ec082f10128"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xc8, 0x1f, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x5, 0x5, 0x81, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x80000000, 0x1, 0x5, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x50, 0x4, 0x8, 0x6b, 0x8000}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xfffffffe, 0x1, 0x80000001, 0x1}}]}, {0x3a, 0x6, "50116d19b631c550aa494ad0f40987be0f2c5a06f58572008e2711b5507dee57fa779a8e0bbf57472a2c646543e00fef9bcc93cc6253"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x134, 0x17, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x85aba}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xa0, 0x17, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6aa, 0x1000, 0x5, 0x0, 0x80000000}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}]}, {0x4b, 0x6, "db5fb2b2b6b5868727189d42c832a1359c7ba0300f769594dd7f66d64b429ee3f7962d9aac957901810861875a2bae209d7b3a37806f686ef311d43229016061e57ee9fd7a3d31"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x64, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xe0000000, 0x2, 0x81, 0xfffffff9}}}]}, {0x18, 0x6, "b6dc461d000ab4987bba4cca520c12dee377f6e2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x2c8, 0x1, [@m_ctinfo={0xa4, 0xb, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}]}, {0x65, 0x6, "75ba715e7649668bb1e369f411459b850f170fe6eb546666c2bada59049fc5246d14fb9f1d82d145dc2f97d2834be9894e2816b1264bfb25d01589126b3e96b13a5e9a1d9ecb53c372e9f1015a5e74041546d4fee1f729f81aeb3a5191a0a96e7f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_connmark={0x104, 0x4, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xafb1, 0x905, 0x1, 0x7e9, 0xf}, 0x14}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x4f, 0x111d544b031eaed5, 0xff, 0x100}, 0xd31}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x6, 0x1f6, 0x3ff}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0xffffffff, 0xb, 0x7f, 0x400}, 0xbef6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x6f5c, 0x7, 0xfff, 0x6f77}, 0xe5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x100, 0x8, 0x8000000, 0x2fec, 0x2}, 0xe26e}}]}, {0x2c, 0x6, "5ba79e4cadfd6173b474280ba5dfa68d59ac41f4feb82feabb35dba8a597edfc4d799d20a84e3812"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x11c, 0x17, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x3b, 0x8, 0x472c, 0x2}, 0x73}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x0, 0xb3, 0x5}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xa, 0xffffffffffffffff, 0x44, 0x101}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x4, 0xffffffffffffffff, 0x0, 0x4208}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x7, 0x700, 0x1}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x7f, 0x8, 0x7fff, 0x3}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd83, 0x9, 0x0, 0x0, 0x7}, 0x45}}]}, {0x2b, 0x6, "bc405911c16c484d2b80fc9affd9b2936156f941da64164a038de471244d32596cd7303876458f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x326c, 0x1, [@m_skbedit={0x90, 0x4, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x90000, 0x6ad, 0xffffffffffffffff, 0x3, 0x1ff}}]}, {0x32, 0x6, "679ccc2fd37cb13c532b960839a4bf1e3492003a92dc662c72ae8d9973835970ab5631cedf41434f19f663bf7bd5"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x2b38, 0x0, 0x0, 0x0, {{0xa}, {0x2af4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x1, 0x2, 0x8, 0x7, 0x5}, 0x0, 0x0, [{0x7, 0x1607, 0x3ff, 0x2, 0x5, 0xfff}, {0x9, 0x929, 0x200, 0x5, 0x4, 0x8}]}, [{0x80, 0x101, 0x9416, 0x1000, 0xd76, 0x2}, {0x8, 0xa, 0x40, 0x0, 0x3, 0x7}, {0x100, 0x5, 0x3ff, 0x1ff, 0x8, 0xe4bc}, {0x8000, 0x0, 0x5, 0x1, 0x2, 0x5}, {0x0, 0x0, 0x1, 0x6, 0x1000, 0x7}, {0x0, 0x7, 0x6, 0x2, 0x5, 0xd}, {0x100, 0x1, 0x5, 0x4, 0x81, 0x1}, {0xffff, 0x4, 0xfff, 0x9, 0x9, 0x1}, {0x0, 0xfffffff9, 0x7, 0x5, 0x73}, {0xfffffff8, 0x1ff, 0x2, 0x5, 0x5, 0x35ce}, {0x5, 0x0, 0x8, 0xfff, 0x9, 0x8}, {0x3, 0x8, 0x1, 0x6, 0x57f0, 0x2}, {0x2c0, 0x5fc5, 0x6, 0x91, 0x9, 0x4}, {0x736fa057, 0x14b, 0x4, 0x325f58ec, 0x8, 0x3}, {0x7fff, 0x7, 0x2, 0x6, 0x3, 0x8}, {0x0, 0x7, 0x4326, 0x900000, 0x2, 0x7}, {0x401, 0x1, 0x9, 0xfd2, 0x3, 0x3}, {0xfffffffd, 0x3b, 0x3, 0x4, 0x0, 0x1}, {0x3, 0x8, 0x2, 0x5, 0x6, 0x992}, {0x10001, 0x7, 0x4, 0x3ff, 0xd, 0x100}, {0x6, 0x200, 0x5, 0x0, 0x5, 0x3}, {0x1, 0x8, 0x5, 0x1, 0x40, 0x4}, {0x0, 0x1000, 0x8, 0x2, 0x101, 0xac3}, {0x0, 0x8, 0x7, 0x5, 0x1, 0x5}, {0xf7a, 0x3, 0x3, 0xff, 0x7a9, 0xa9c}, {0x5, 0x86, 0x2be2c4a6, 0x81, 0x80000000, 0x81b}, {0x80, 0x8001, 0x0, 0x4, 0x200, 0xfffeffff}, {0xbf0, 0x2800, 0x0, 0x4667fafe, 0x7, 0xfeb}, {0x80000000, 0xe2, 0x9, 0xf, 0x2, 0x1}, {0x8cf, 0xffffffff, 0x8, 0xd, 0x10, 0x6}, {0xffffffff, 0x101, 0x9, 0x1000, 0x819, 0x918}, {0x0, 0x1000, 0x10000, 0x99, 0x1, 0x2}, {0x9f, 0x8, 0x0, 0x9, 0x9, 0xdf}, {0x5, 0x5, 0x3ff, 0x0, 0x6, 0x4}, {0x400, 0x9, 0x6, 0x0, 0x2, 0x400}, {0x0, 0xa, 0xe, 0x8, 0x7, 0x8000}, {0x2edeb910, 0x2, 0x9, 0x1, 0x0, 0x5}, {0x5, 0x1, 0x7, 0x7, 0x2, 0xfffffff7}, {0x1, 0x1, 0x80000001, 0x101, 0x6, 0xffffffff}, {0x4, 0x8, 0x1000, 0x6, 0x7, 0x2}, {0x65c, 0x6, 0x1, 0x913, 0x8, 0x9}, {0x3fc173e0, 0x1000, 0xcd, 0x6, 0x3}, {0x1, 0x1, 0x78, 0x5b34, 0x2, 0x5}, {0x6, 0x0, 0x0, 0xfffffffe, 0x4}, {0x7ff, 0xff, 0x11b, 0xff, 0x7fff, 0xc2}, {0xfffffff5, 0x4, 0x3ff, 0x8, 0x401, 0xb65f}, {0xfffffffc, 0x1, 0x80000000, 0x35a, 0x1, 0x6}, {0x800, 0x1000, 0x11, 0x2, 0x5, 0x10001}, {0x1, 0x200, 0x80000001, 0x2, 0x4e69}, {0xfffff336, 0x1, 0x7, 0x1, 0xe44, 0x3}, {0x7e, 0x10001, 0x3, 0x80, 0xfffffffe, 0x9}, {0x8, 0x5, 0x5, 0x1ffb0526, 0x3, 0x2}, {0x3, 0x2, 0x6, 0x6, 0xffffff79, 0xb3a0}, {0x1, 0x9, 0x9, 0x7, 0x4, 0x7f}, {0x0, 0x1, 0x7fff, 0x3, 0xfffffe00, 0x6}, {0x2, 0xfff, 0x401, 0x6, 0xffff, 0x6}, {0x401, 0x2, 0xd16f, 0xffff, 0x1, 0x80000001}, {0x1, 0xda, 0x2, 0x7b}, {0x7ff, 0x3d4, 0x8, 0x2, 0xeb4e, 0x8}, {0x1, 0x9, 0xfffffffb, 0x3, 0x9, 0x9cd}, {0x85e, 0x81, 0x4, 0x200, 0x6, 0x3}, {0x2, 0x1, 0x4, 0x7ff, 0x101, 0x2}, {0xffffff0f, 0x8001, 0x75, 0x1, 0x0, 0xffffffff}, {0x6, 0x9, 0x2, 0xffffffff, 0x9, 0x1}, {0xfff, 0x4761, 0xffffffff, 0x5, 0x27, 0x1}, {0x80000000, 0x5, 0x5, 0x4, 0x9, 0xff}, {0x100000, 0x1, 0x947, 0x81, 0x5, 0xa6}, {0x9, 0x8, 0x4, 0xc37, 0x7, 0x200}, {0xb, 0x6, 0x4, 0x3, 0x3, 0x8}, {0x79, 0x4, 0xf, 0xc, 0x6, 0x7}, {0x1, 0x22325fde, 0x7, 0x81, 0x200, 0x10000}, {0x5, 0x0, 0x6, 0x7759, 0x40, 0x80000001}, {0x7, 0x0, 0xb24, 0x0, 0x7ecc, 0xb}, {0xff, 0x80, 0x5, 0x9, 0x400, 0xffff1dfe}, {0x4, 0x5, 0xd, 0x80000000, 0x6, 0x1000}, {0x5, 0x7fffffff, 0x8001, 0x4, 0x8, 0x7}, {0x30, 0x5, 0x1, 0x4, 0x0, 0x367}, {0x53, 0x8000000, 0xa00b, 0x64ea, 0x0, 0x2}, {0x7fff, 0x6, 0xffffffc0, 0x0, 0x8000}, {0x2, 0xda, 0x5, 0x3, 0x2a0, 0xc797}, {0xfffffff2, 0xa, 0xff, 0xfffffffb, 0x3, 0xaa}, {0x7, 0x3, 0xe, 0x80000001, 0x6, 0x8}, {0x8, 0x4, 0x0, 0x0, 0x515cb668, 0x27}, {0x100, 0x6, 0x5, 0x879, 0x5, 0x5}, {0x933c, 0x3, 0x0, 0x1, 0x6, 0xfffffffe}, {0x1, 0x2, 0x1, 0x4, 0x9, 0x1}, {0x2, 0x0, 0x2d800000, 0x6, 0xe, 0x9}, {0x9, 0x7, 0x2, 0x8001, 0x1, 0xfff}, {0x10001, 0x2, 0x8001, 0x6, 0x2, 0x26}, {0x0, 0x8, 0x1, 0x8, 0x81, 0xff}, {0x0, 0x36, 0x14f5, 0x80, 0x7, 0x4}, {0x58, 0x1, 0x2, 0x0, 0x101, 0xf}, {0x800, 0x80000001, 0x7, 0x200, 0x9, 0x3ff}, {0x7fff, 0x9b2, 0x1, 0x2, 0x10000, 0x2}, {0x9, 0x0, 0xd, 0x0, 0x0, 0x101}, {0x1, 0x7fff, 0x7, 0x0, 0x5, 0xa09}, {0x81, 0xb6be, 0x7, 0x3, 0x7, 0x72e0}, {0xd02f, 0x0, 0xfffffffc, 0x2, 0xe, 0x1a}, {0x0, 0x8, 0x2, 0x6f41, 0x4, 0x17a4}, {0x81, 0xfffffffc, 0xfffffff7, 0x1ff, 0x7, 0x8}, {0x3f1, 0xbf31, 0x60000, 0xffff, 0x8, 0x5}, {0x1, 0x1, 0xffff, 0x8, 0x4}, {0x8, 0x200, 0x80000001, 0x8001, 0x5160, 0x2}, {0x0, 0x3, 0xfffffffd, 0x1, 0x1, 0x3}, {0x0, 0xba43, 0x7, 0x101, 0x4, 0x9}, {0xfff, 0x2, 0xb3c, 0x5, 0x9, 0x96}, {0xfffffffb, 0x6, 0x6, 0x3, 0x759, 0x5}, {0x9, 0x3, 0x5a, 0x400, 0x18, 0x10001}, {0x99d, 0xffffffff, 0x5, 0x5b02, 0x67, 0x1}, {0x7fffffff, 0xc5, 0x8, 0x8, 0x8, 0xe}, {0x1, 0x80, 0x5, 0x0, 0xafbd, 0x620}, {0x7fffffff, 0x2, 0x1, 0x100, 0x3, 0x6}, {0x1, 0x7fff, 0x8, 0xb, 0x1b8, 0x5}, {0xfffff800, 0x0, 0x6, 0x7, 0x3, 0x10000}, {0x9, 0x9, 0x6, 0x7fff, 0x8, 0xfffffffd}, {0xffffffca, 0xf2, 0x7, 0x6, 0x33d, 0x7}, {0x0, 0x4, 0xffffffff, 0x5, 0x0, 0x4}, {0x4, 0x18b8, 0x80000001, 0xe, 0x2, 0x7}, {0x96, 0x7f, 0x2ad, 0x80000000, 0x2, 0x2}, {0x7fffffff, 0x2, 0x8, 0x0, 0x10, 0x8}, {0x8, 0x8, 0x1, 0xfffffffa, 0x7, 0x8001}, {0x5, 0x9, 0x9, 0x8000, 0x401, 0x6}, {0x1b, 0x6, 0x3, 0x4, 0x1, 0x7e}, {0xd, 0x6, 0x7, 0x10000, 0x0, 0xffffff81}, {0x6, 0x80000001, 0x9, 0xc000000, 0x7, 0x6449}, {0x316f, 0x6, 0x1b54cd7b, 0xcd, 0x9, 0x42}, {0x9, 0x2b6, 0x3, 0x7, 0x2, 0x87d9}, {0xd, 0x7, 0x1ff, 0x2, 0x1000}], [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0xb4ad1f44487acc19}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x2}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x5}, {0x2}, {0x6, 0x1}, {0x1}, {0x5}, {}, {0x2}, {0x3}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x3, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x1}, {0x5, 0x2}, {0x5}, {0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x3, 0x954b2a9c19c5b3fd}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0xa7df321b50ac6680}, {0x5, 0xe3acfc450e0a30e}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x3}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x1}, {}, {0x2}, {}, {0x4}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x8, 0x1, 0x2, 0xa, 0x544}, 0x7, 0x7, [{0x401, 0x3, 0x2, 0x88ec, 0xffffff75, 0x2}]}, [{0xadd, 0x7, 0x2, 0x9, 0x4}, {0x5d8d, 0x4, 0x2, 0x2, 0x7fff, 0x98c}, {0x2, 0x7, 0x318, 0x5, 0x5, 0x400}, {0x2, 0x0, 0x1, 0x10, 0x4, 0x5}, {0xa83b, 0x7, 0x5, 0x1e5, 0x7ff}, {0x9, 0x1, 0x4, 0xfffffffc, 0xfffffffa, 0xd}, {0xb, 0xb, 0x5, 0x445e7a6c, 0x7, 0x5f}, {0xf, 0x2, 0x3, 0x9, 0xfffffff7, 0x2}, {0x3, 0x7c82, 0x1, 0x5, 0xa176, 0x2}, {0xffff, 0xff, 0xe52, 0xd7, 0x2, 0x1ff}, {0xffffe91d, 0x1, 0x8, 0x20e, 0x3, 0xe0000}, {0x0, 0x800, 0x7, 0x8, 0x8fd3, 0x1}, {0x3, 0x4, 0x10, 0x2}, {0x5, 0x4, 0x3, 0xf427, 0x2, 0x8}, {0x4, 0x22a844a4, 0x8, 0xab0, 0x10001, 0x7}, {0x1, 0x9, 0x6, 0x80000001, 0x7, 0x1}, {0x1, 0xcdb, 0x2, 0x2, 0x0, 0x3}, {0x400, 0x70a3, 0xff, 0xa, 0x80000000, 0x6}, {0x5, 0x2, 0x92f, 0x3, 0x3, 0x24}, {0x932a, 0x200, 0x2, 0x3, 0xfd9, 0x2}, {0x4, 0x1000, 0x3, 0x2, 0x10001, 0x9}, {0x7, 0x5000, 0x0, 0x3, 0x4, 0x7f}, {0x80, 0x1, 0x4e3, 0x5, 0x9, 0x3e3}, {0x8971, 0x7, 0x6, 0x6a47, 0x80, 0x1}, {0x1, 0x2, 0x0, 0x4, 0x9, 0xc}, {0x10, 0x4, 0x1, 0x3, 0x9, 0x370}, {0x600, 0x7, 0x3, 0x9eb, 0xc82, 0x4}, {0x9ff, 0x74, 0x0, 0x5, 0x0, 0x1}, {0x0, 0x7, 0x4, 0x36, 0xd, 0x1000}, {0x8, 0x6, 0x5, 0x4, 0x8, 0x1}, {0x1, 0x8, 0x6, 0x8, 0xa0000, 0xa137}, {0x2, 0xb7f, 0x1, 0x6, 0x101, 0x2}, {0x200, 0xc38, 0x533d, 0x9, 0x5, 0x6000}, {0x7, 0x10001, 0x2, 0x80000001, 0x921, 0x6}, {0x48a, 0x7, 0x4, 0x1, 0x80000001, 0x400}, {0x6, 0x6, 0x37, 0x3ff, 0x2, 0x5}, {0x6, 0x200, 0x0, 0x3, 0x91, 0x7}, {0x6e, 0x9, 0x1, 0x544b, 0x2}, {0x7, 0x1ff, 0xe3, 0x6, 0x7, 0xe8d}, {0x1, 0x800, 0x9, 0x9d9, 0x58e82c0d, 0x200}, {0x3, 0x5, 0x0, 0x7, 0x7, 0xe8}, {0x400, 0x9, 0x5, 0x4, 0x40, 0x4000000}, {0x7, 0x4, 0x200, 0x6, 0xb5f1, 0xdaa4}, {0x1, 0x401, 0x1, 0x0, 0xca, 0x3ce512fe}, {0x80, 0x6, 0x7fffffff, 0x30000, 0x8, 0x4}, {0x3ff, 0x9ad0, 0x3, 0xe7, 0x8, 0x9}, {0x7fffffff, 0x7c, 0x9, 0x401, 0x1ff, 0x30c}, {0x6ebf, 0x7, 0x8, 0x6, 0x5, 0x1}, {0x6, 0x0, 0x4, 0x6, 0x8, 0x9}, {0x9, 0x56e, 0x9, 0xd, 0xfffffff8, 0x7d}, {0xffff7fff, 0x7, 0x8, 0x0, 0x1, 0x7f}, {0x101, 0x1, 0xffff, 0x5, 0x2a, 0x8}, {0x439, 0x1, 0x4, 0xb, 0xc96c, 0x4}, {0xffff6fd4, 0xff, 0x4, 0x1, 0x906, 0x4}, {0x54f4, 0xc, 0xa, 0x6, 0x1, 0x25b}, {0x88, 0x7, 0x10001, 0x3, 0xad2, 0x4}, {0x522, 0x633b, 0x7, 0x3, 0x7, 0xe67}, {0x7, 0x4, 0x2, 0x4, 0x6, 0x14d}, {0x9, 0x2, 0x10, 0x503, 0xffffffff, 0x181f}, {0x3c6, 0x4, 0xa9e8, 0x8, 0x2, 0x2}, {0x86d, 0x1, 0x8, 0xe5f8, 0x8e, 0x739}, {0x6, 0x6, 0x40, 0x7, 0x60ab, 0x10000}, {0x10, 0x4, 0x1, 0x5, 0x9, 0x7f}, {0xfffffffb, 0x101, 0x7, 0x7fff, 0x7, 0xe00}, {0x9d54, 0xcb8, 0x7, 0x1, 0x5, 0x79fae69d}, {0x0, 0x10001, 0xe, 0x4, 0x401, 0xfffffff6}, {0xac4, 0x1, 0x0, 0x95c6, 0x7, 0x6}, {0x5, 0x55, 0x3, 0x1, 0x6, 0x6}, {0x1, 0xfff, 0x1000000, 0x80000000, 0xfffffffb, 0x6}, {0x2, 0xf11, 0x3, 0xf, 0x1ff, 0x7}, {0x26d, 0x401, 0x4, 0x3, 0x101, 0x3}, {0x1f55, 0x10000, 0x4, 0x6, 0x1, 0x80000001}, {0x8, 0xfffffeff, 0x3, 0x1, 0x6, 0x401}, {0x7, 0x8, 0x4, 0xf78, 0x100, 0x6}, {0x3, 0x9, 0xc, 0x5, 0x80000000, 0x3}, {0x9, 0x1, 0xff, 0x8000, 0x7, 0xef}, {0x800, 0xac78, 0x0, 0x6, 0x1, 0x8}, {0x5, 0x6eb, 0x400, 0x2, 0x3, 0x2}, {0xffffffff, 0x80, 0x4, 0x3, 0x4010000, 0x3}, {0x401, 0x2, 0x7fff, 0x5, 0x2, 0x6}, {0x4, 0x6, 0x34d, 0x37, 0x0, 0xffff}, {0x3, 0x8001, 0xc5, 0x9, 0x9, 0x5}, {0x81, 0x7, 0x3d70, 0x8, 0x400, 0x7}, {0xfffffffd, 0x0, 0xffff0000, 0x24000, 0x0, 0x2}, {0xfdf8, 0x800, 0x1, 0x2, 0x8, 0x8}, {0x6, 0x5, 0x2, 0x2, 0x4, 0x3}, {0x6, 0x1, 0x8, 0x7, 0x8, 0xec}, {0x6, 0x4, 0x4, 0xe, 0xfffffffd, 0x1}, {0x9, 0xa4fd, 0x0, 0x90, 0x89, 0x1}, {0x5, 0x7fff, 0x800, 0x9, 0x6}, {0xfffff7fa, 0xffff, 0x3, 0xfffffffd, 0xc84d}, {0x400, 0x3, 0xfffffff8, 0xfffffffa, 0x69}, {0x100, 0x2, 0x9ca, 0x9b8f, 0x9, 0x6}, {0x5, 0x40, 0x80, 0x6, 0x101, 0x4}, {0x6, 0x5, 0x2, 0x5, 0x5e, 0x127}, {0x776, 0x2, 0x1d, 0x0, 0x54, 0x10000}, {0xd077, 0x2, 0x59b, 0xfffffffc, 0x1800, 0xffffffff}, {0x2, 0x2, 0xf8, 0x6, 0xfffffffc, 0xc}, {0x10000, 0x9, 0x7f, 0x7, 0x8, 0x1}, {0x0, 0x0, 0x2, 0x9, 0xb, 0x8c}, {0x9, 0xf, 0x8, 0x7, 0x5}, {0x6, 0x8, 0x3ff, 0x0, 0x1, 0xce73}, {0xd3f6, 0x3, 0x5, 0x1, 0xff, 0xd431}, {0x9, 0xffff, 0x7, 0xabb8, 0x1, 0x95fb}, {0x9, 0x77a, 0xd6, 0xb, 0x4, 0xfffffff7}, {0x4, 0x80000000, 0x3, 0x9, 0x8, 0xa92}, {0x6, 0x10000000, 0xb, 0x8, 0x5}, {0x1357, 0x9, 0x1, 0x6, 0x2, 0x3ff}, {0x6, 0x3, 0x8, 0x80000000, 0x6, 0xfffffff8}, {0x7, 0x6, 0x401, 0x2, 0x7fff, 0xe}, {0x7, 0xd, 0x1, 0x1, 0x1000, 0x4}, {0x800000, 0x4, 0xe, 0x80000001, 0x2, 0x3}, {0x8, 0x5, 0xcf, 0xf, 0x2, 0xbe9}, {0x82, 0x81, 0x10000, 0x0, 0x9, 0x9}, {0x2, 0x8, 0x9, 0x9, 0x3, 0x6}, {0x24, 0x379, 0x8, 0x0, 0x6, 0x8000}, {0x4, 0xfffffffb, 0xa1, 0x8334, 0x4, 0x9}, {0xffffff81, 0xda, 0x4, 0x16c, 0x30a9, 0x3fff8000}, {0x6, 0x7, 0x6, 0x4, 0xa, 0x1}, {0x9, 0xc, 0x9, 0x8, 0x5, 0x3}, {0x7f, 0x6, 0x3, 0x6, 0x47, 0x1}, {0xff, 0x4, 0x2, 0x6c8eb55c, 0xd, 0x1}, {0x7, 0xfffffffa, 0xfff, 0x38, 0x8, 0x1}, {0x2, 0x200, 0x7, 0x2, 0x800, 0x77}, {0x2, 0x0, 0x2, 0x5, 0x5, 0x1}, {0x80, 0x8001, 0x4, 0x8, 0x6, 0x40}, {0x3, 0xb7, 0x101, 0xffffffff, 0x8, 0x4}, {0x2, 0x80000001, 0x100, 0x4, 0x401, 0x9}], [{0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {}, {}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0xdd1e16e4f9c12f93, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x32b7954da940b42e}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x5}, {}, {0x5}, {0x3}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x536c671938b74fd9}, {0x2, 0x1}, {0x7}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x3}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x6, 0x1}, {}, {0x5, 0x1}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x3000, 0xdaa, 0x3, 0x4d5, 0x7}, 0x9, 0x6, [{0x2, 0x9, 0x9, 0x10, 0x3, 0x7}, {0x16f, 0x3, 0x7fffffff, 0x9, 0x8, 0x9}, {0x3, 0xbfd1, 0x2, 0x7, 0xfffffffe, 0x80}]}, [{0x8, 0x6, 0x0, 0x7fff, 0xd5, 0x2}, {0xfffffffd, 0xea, 0x1, 0x9, 0x513d, 0x72}, {0x5, 0xa0a8, 0x5, 0x5, 0x2, 0x5}, {0x4, 0x8, 0xa6, 0x80, 0x7, 0x8}, {0x9, 0x2, 0x6647, 0x1, 0xc, 0x5aab}, {0x8, 0x100, 0xe4, 0x6, 0x5, 0x12de854a}, {0x2, 0x4, 0x0, 0x3, 0x4, 0x8f8c}, {0x37f, 0x6, 0x40, 0xfffffff2, 0x1, 0x7}, {0x4, 0x3ac, 0x12000, 0x10001, 0x7, 0x10001}, {0xe336, 0x1, 0xfffffffb, 0x4, 0x124, 0x3}, {0x5, 0xffffffff, 0x7, 0x1, 0x6, 0x8}, {0x4, 0x2, 0x6, 0x8, 0xd, 0x81}, {0x6, 0x8512, 0x5, 0xb466, 0x7, 0x7}, {0x7, 0x4, 0x4, 0x83, 0x26c03f68, 0xe67}, {0x1, 0x0, 0x953, 0x1, 0xf, 0x8b1a}, {0x54, 0x7, 0x9, 0xffffe5e4, 0x6, 0x141b}, {0x5, 0x401, 0x1, 0x0, 0x6, 0x7}, {0x6, 0x200, 0x0, 0x7, 0x80000000, 0x49d}, {0x7, 0x9, 0x48f600, 0x100, 0x3b, 0x10001}, {0x7, 0x1, 0x9, 0x2, 0x6, 0x2}, {0x5, 0x23, 0x0, 0x1, 0x80000000, 0x1}, {0x1, 0x31, 0x8, 0x7, 0x4, 0xfff}, {0xc, 0x2, 0x4a8, 0x8, 0x8, 0x4ab}, {0x1, 0x3, 0x5, 0xa8, 0x101, 0x2}, {0x3, 0xffff, 0xfffffffc, 0x0, 0x3, 0xd3ed}, {0x7, 0x1, 0x8, 0x5, 0xd0, 0x101}, {0x0, 0x9, 0x6, 0x6, 0x2, 0x4}, {0x6, 0x6, 0xc32, 0xd, 0x9, 0x4}, {0x1, 0x75, 0x8, 0x8, 0x4, 0x2}, {0xd, 0x3, 0x3, 0xd, 0xc8, 0x4}, {0x7f, 0x4, 0x3, 0xc8, 0x2, 0x7f}, {0x7fffffff, 0x15, 0x3, 0x200, 0xffffff00, 0x7}, {0x8, 0x7fffffff, 0x8, 0x7, 0x3, 0x58}, {0x5, 0x7976, 0xb, 0x8, 0xfffffff7, 0x95a}, {0x3ff, 0x8001, 0xa1b, 0x0, 0x101, 0x1}, {0x67d, 0x90, 0x6, 0x4, 0xe4a3, 0xd}, {0x8, 0xfff, 0xfd9, 0x7ff, 0x401, 0x4}, {0x0, 0x4cf, 0x80000000, 0x7, 0x68, 0x2}, {0x992, 0xeb, 0x400, 0x0, 0x4}, {0x10001, 0x8, 0xc, 0x6, 0x400, 0x7}, {0x8, 0x3, 0x80, 0x400, 0x4}, {0xe, 0x2, 0x1f, 0x5e, 0x5, 0x6}, {0x10, 0x7, 0x0, 0x1ee7, 0x5, 0xff}, {0xc4d, 0x2, 0x58e2, 0x3, 0x1e32, 0x4}, {0xfffffff5, 0x1, 0x6, 0x8, 0x7f, 0x1}, {0x8, 0x0, 0x882, 0xfffffff8, 0x0, 0xd}, {0x5, 0x8, 0x5, 0x9e4, 0x1, 0xff}, {0xffff0556, 0x40, 0x8, 0x4332d9f8, 0x7, 0x2}, {0xffff2823, 0xfffffffe, 0x5, 0x7, 0x5, 0x6}, {0x10000, 0x7, 0x6, 0x54000, 0x0, 0xfffffff8}, {0x3, 0x2, 0x0, 0x4, 0x8, 0xc}, {0xc87b, 0x7ff, 0x7, 0xfffffff8, 0xffff0210, 0x7}, {0x0, 0x7, 0x10000, 0x3, 0xff, 0x5}, {0x2, 0x5, 0x4, 0x4b3, 0x8, 0x80}, {0x5, 0x50b9, 0x5938, 0x4, 0xf8000000, 0x2}, {0x0, 0x6845, 0x0, 0xfffffff0, 0x1, 0x8d}, {0x101, 0x9, 0x8, 0x56, 0x1, 0xb}, {0x8, 0xd0d, 0x400, 0x7fff, 0x20000, 0x7ff}, {0x8, 0x2, 0x5ae4, 0x9, 0x2, 0x1}, {0x3, 0xf, 0xc0e, 0x8, 0x7fffffff, 0x5}, {0x0, 0x9, 0x7f, 0x5, 0xfffffffb, 0x1}, {0x4, 0xc03, 0x4d55, 0x101, 0x68, 0x4}, {0x4a, 0x80000000, 0x5, 0xfffffff9, 0x10000000, 0x1ff}, {0x5, 0x7, 0xc9ec, 0x40, 0x8, 0xfffffff8}, {0xe, 0xe3d, 0xa, 0x3, 0x3, 0x2}, {0x10000, 0x5, 0x7, 0x7, 0x0, 0x80000001}, {0x7, 0x0, 0x80000001, 0x7, 0x3, 0x7}, {0x3, 0x1626, 0xfffffffc, 0x9, 0x7, 0x5}, {0x7, 0x4, 0xf, 0x8, 0x8, 0x5}, {0x8, 0x40, 0x8001, 0x3, 0x0, 0x1}, {0x5, 0x1, 0x6, 0x5, 0x8, 0x5}, {0x10000, 0x0, 0x9, 0x2, 0x0, 0x9}, {0x5, 0xffff, 0x3, 0xffffffff, 0x0, 0x1}, {0x8, 0x1b, 0x80000001, 0x9, 0x7, 0x2}, {0x6, 0x4, 0x1cc1, 0x6f78, 0x2}, {0x9e5, 0x9, 0x100, 0xa, 0xe9d9e16, 0x3}, {0x80000000, 0xc5, 0x4, 0x4, 0x9, 0x2}, {0x2, 0x4, 0x1, 0x8, 0x62, 0x1}, {0x0, 0x6, 0xfff, 0x4, 0x6e, 0x3ff}, {0xe09, 0x1c00, 0x0, 0x0, 0x5}, {0x7f, 0x7, 0x2, 0x2000000, 0x5, 0x6}, {0x4, 0x756, 0xff, 0x8, 0x12000000, 0x9}, {0x3f, 0x0, 0x7fff, 0x2, 0x1, 0xbfb}, {0x8, 0x0, 0x1f, 0x4, 0xc, 0x1}, {0x8, 0x4, 0x10, 0xfffffe79, 0x6, 0xffffff48}, {0x101, 0x68c, 0xea, 0x0, 0x6, 0x1}, {0xffffffff, 0x80000000, 0x4, 0x2, 0xc, 0x7}, {0xfffffffd, 0x10000, 0x7, 0x70a, 0x10000, 0xe}, {0x1, 0x4db, 0x4, 0x10000000, 0x1, 0x81}, {0x2, 0x7, 0x8, 0xa4, 0x3, 0x6}, {0x4, 0x0, 0xc1, 0x0, 0x52, 0x2}, {0x101, 0x1, 0x2bbe, 0x201e, 0x10000, 0x80}, {0x7, 0x0, 0x2, 0x6a, 0x7fff, 0x2}, {0x8001, 0xfffff801, 0x3, 0x7, 0x800}, {0x8, 0xf8000000, 0x4, 0xd03f, 0x6, 0x8}, {0xffffffff, 0x400, 0xffffffff, 0x8000, 0xd, 0x9}, {0x1, 0x718f2548, 0x0, 0x5, 0x3d, 0x6}, {0x400, 0xdf34, 0x100, 0x7, 0x8, 0x4}, {0xd16f, 0x58e2, 0x7f, 0x6, 0x6, 0x200}, {0x40, 0x8000, 0x73f7, 0x9, 0x8001, 0xdda8}, {0x7fff, 0x0, 0x2, 0x5, 0x3, 0x1c}, {0x80000000, 0x4, 0x10001, 0x8, 0x5, 0xa}, {0x3, 0x0, 0x1, 0x0, 0x3, 0xf1}, {0x487, 0x80000000, 0x7, 0x400, 0x1, 0x5}, {0xfffffffd, 0x7ff, 0x9, 0x0, 0x7fffffff, 0x401}, {0x2, 0x8001, 0x3, 0x2, 0x9d2, 0x5}, {0xae34, 0x7, 0x80000001, 0x8, 0x9, 0x7}, {0x200, 0x3, 0x165c3bb3, 0x2, 0x8, 0x9}, {0x678, 0xda4, 0x5f5dfd0d, 0x7, 0x8, 0xab}, {0x7000, 0x9, 0x1, 0x3, 0x0, 0xa}, {0xf, 0xfff, 0x9, 0x100, 0x1, 0x2}, {0x2, 0x6, 0x0, 0x2, 0x2, 0xf}, {0x0, 0x9, 0x1000, 0x1, 0x6}, {0xd233, 0x5, 0x3, 0x9, 0x4, 0x58e}, {0x5, 0xfff, 0x1, 0x8, 0xb12, 0x6}, {0x401, 0x2, 0x4, 0x80000000, 0x106, 0x7}, {0x26ab, 0xfff, 0x1, 0x98, 0xffff4fa1, 0x101}, {0x6, 0x2, 0x4, 0x400, 0x6, 0x4}, {0x2, 0x3, 0x1c000000, 0x2, 0x61a3, 0x8}, {0x0, 0x7ff, 0x4, 0xb97, 0x8, 0x401}, {0x9, 0x5e27eaeb, 0x6, 0xc, 0x0, 0x9}, {0x8, 0x8, 0x8, 0x440, 0x3, 0x7}, {0xe2, 0x0, 0x2b, 0x2, 0x6bc, 0x7}, {0x5, 0x7, 0xf, 0xfff, 0x9, 0x5}, {0x0, 0x5, 0x800, 0x200, 0x7ff, 0xffffffff}, {0x1, 0x7, 0x5, 0x8, 0x93, 0x3}, {0x4, 0x400000, 0x51b0, 0x1b8, 0x14e, 0x8}, {0x80000000, 0x1ff, 0xcab, 0x1, 0x4, 0x3}], [{0x5, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x4}, {}, {0x5}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {}, {0x5}, {0x7e523626347606ce}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x5}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {}, {0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0xf7d057bb95b901e6}, {0x3}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x2}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x1}, {0x5}, {0x1, 0x1}], 0x9}}]}, {0x1c, 0x6, "692983342db8890d014739106bdf6d7a57249ef96a3a99f2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_xt={0x1e0, 0x9, 0x0, 0x0, {{0x7}, {0x168, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x75, 0x6, {0x8000, 'filter\x00', 0x5, 0x2, "e18ec6319919430670165e01f0e1a20b78cdea15fca3fea4f9a1b97af11055c6561f05c775ea95b4021545130ec9e8142afd000aac0071fe8e3b30c94b21dd36802a26dd39a52557994911"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x93, 0x6, {0xfffc, 'raw\x00', 0x5, 0xfffc, "3f5a271e93bf4421cd044e0f6b969385b62ea0b7ba6f8aa9afbb701f75bf2b41dbd741f389a9e55b1879b701e85635fe3ff20c47b33a67beb4a082eccf45e3c3122483e906326819b25591940ff5e3427d1cf9e43f070f37e5406bbbdc64c2d5e0fa982cc1882fe692"}}]}, {0x51, 0x6, "901bddb65c8ad690eae293a9473ee38afb6a21185a05a82df34db716c9bbaf2809571a4a1db48b9cd2081f5228ed7a6a03610ac48fb90aee6941c9e82c25585a75b392e289e1c051c0ccda9649"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x140, 0x7, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xe, 0x2, 0x3, 0xffff, 0x4}, 0x1}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x1, 0x8, 0xef, 0xa19}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0xe}]}, {0xd4, 0x6, "1ff41cbfcb1a57376636e8f682bafc016ad42579210ee43ca81451a6fbe5fb54a76b2449bb36d7b18e0939aed62b9ac36d6495e4d8a18fe8927b3a6ef1aacb12251465529127d69e1d24f06df6b6fe6439b74840a91d24eecab84a7ae0c0aea7fdbdec5035bb6937116f59dbabe31efa676aaaeb723fccec6f18e6da18e575df67133b9e11ca59808401acb87d672bbb7d5417aa216f594403fd594b176e409b54d00ce2eb70d98305a7e06e0cba1087bb61fe044eefaa07b10305216d77cd9c937307c977af41f365fbaf03d599a63e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0xf0, 0x12, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_NAME={0x6, 0x6, '.\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x1, 0x7, 0x2a7, 0x3c249b7a}}]}, {0xa0, 0x6, "b9392c8fd6c0b0e283713c6196876b61ccfa7c4a639184341e51578cae219639eb337f9b0b52cea10df5fc21632d355142b7f2a02fcd51b44d77187e91c1eb4fdad6cb2c80cc6dd7f8adf747cd6d11a160c08577abeba2e63636e08c8349674abf64c593fa351dd97b5c5e0202790abcf7b21e8cbc0bf4c8f4cd225c6c0adec32fd9e44e786f5251b5cc41bc1010d6b99784c0986024ed63d4d6eedd"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x98, 0xa, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xe4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4b, 0x6, "85eb6dd87adc549d95440855547790746961a195c9e44f542fed2ef3c83666a7447ceb747db6f6a62d61056ca5f4a2e7463b80c1173b157de9bb9a543a4d0f681d98a3bf59f8bd"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x190, 0x17, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "3d175a0ba334a6d9e3c227b2b9b49e6e"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x2}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_LABELS={0x14, 0x7, "1c2f97e916f773a385c6d976b12774c1"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8001}, @TCA_CT_ZONE={0x6, 0x4, 0x7}]}, {0xfa, 0x6, "e7d7f90053603700f02a005aad2b78b208d02befe21123c5949ca5bf6bd8f5f45746e7b5f693e9112803aca4af06e865b81b9cdf3e4524ef11586bc95b1462af913f3fb97515a5615a7b8d0236f2c2bfc5c003855dce3ecd420a7f614e0682a47de7b1394f3adab17bba161c7c344b37ac853b463c346e40eb9424e75916e8e9ce4371b505dec7a7d67feda4d9051e43bf89698c07e0925ae8d56f197333ff0213b8580bb96700a055090719146969ac55cd3c132cc2a3f2e2b9bff29e03aff6c5049c2d8f34ecb8158089e697e677a5216b4a4d10b4a4c76107f1c32140b6a969e68029678cd17b329a6320b36b55a3539682a6ef69"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x68, 0xb, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1f}]}, {0x33, 0x6, "5e1ac9287a7e21e8af3291b998c0def47031e350ab8c7956cc8c1b837a245ccbe252357f8c5b26f64e389451054dbc"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0xc48, 0x1, [@m_csum={0x1c0, 0x14, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff, 0x400, 0x5, 0xffff, 0x2}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x1000, 0x3, 0x3, 0x5}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x100, 0x10000000, 0x10001, 0x9}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x53, 0xf2b, 0x20000000, 0x80000001, 0x7}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x1ff, 0xffffffffffffffff, 0x0, 0x8001}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x7, 0x7, 0x9e9}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x28, 0x7, 0x80, 0xa}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x79, 0x80, 0x3, 0x2, 0x7}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffe, 0x10000000, 0x96, 0x401}, 0x1b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x3, 0x8, 0x8}, 0x52}}]}, {0x7a, 0x6, "baae70b0b2372bc2fcc68c9931e75b80cc4fe6385d4629b5769279f587832df8125ec2bffd58409e4f6ed2e4d41c23a4a076810ffac9aea6197a15821124bf7642c1b660f476c87ca57df7c4741c4c1361a84a196c3aaeaf986423431248cb42ea57a67723375fa5b4abfb3adb2d77ec41afa9ba8b44"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x920, 0x1b, 0x0, 0x0, {{0xb}, {0x884, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x4, 0x2, 0xcf, {0x8, 0x1, 0x4, 0x200, 0x2219, 0xf}, {0x4, 0x0, 0x3, 0x0, 0x8, 0x8}, 0xfffffff8, 0x9, 0x764a9125}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x1, 0x2, 0x9, 0x1, 0x8, 0x0, 0x5, 0x8, 0x101, 0x80000000, 0xe, 0x5, 0x2, 0x7ff, 0x9, 0x40, 0x4, 0x9, 0x6, 0xfe82, 0xa, 0x2, 0x4, 0x6de, 0x200, 0xf67, 0x2, 0x1, 0x5, 0x9, 0xe81a, 0x9, 0xd622db5c, 0x10001, 0x0, 0x5acb, 0x9e, 0x4, 0x6, 0x8, 0x6, 0x6, 0x8, 0x2, 0xcb, 0x4, 0xd3, 0x401, 0x6, 0x3, 0x6, 0xf9, 0x7, 0x1, 0x4, 0x187, 0x3, 0x8, 0x3, 0x5d, 0x1a, 0x5, 0xf, 0xfffffffd, 0xb, 0x5, 0xfffff89c, 0x1000, 0xffffffff, 0x3, 0x1ce9, 0x5, 0x7, 0x4, 0x3, 0x200, 0x1, 0x8, 0x3, 0xffffffff, 0x2, 0x7fff, 0xffff, 0x9, 0x8, 0x8, 0xd, 0x5, 0x7, 0x3, 0x5, 0x9b, 0x5, 0x3, 0x9, 0x9, 0x6, 0xf, 0xdb5, 0x5, 0x1000, 0x80000001, 0x956a, 0xc, 0x0, 0xf, 0x916, 0x5, 0x2, 0xaad9, 0x5, 0x7, 0x7, 0x3, 0x0, 0x1, 0x7, 0x5, 0x6, 0x5, 0x9, 0x2, 0x2, 0x5, 0x0, 0x253, 0x9, 0x9, 0x2, 0x3, 0x6, 0x10, 0xfffffffa, 0x10, 0x0, 0x7, 0x1, 0x81, 0x7f, 0x6, 0xc2c3, 0x81, 0xfffffff1, 0x10, 0x80000000, 0x7, 0x81, 0x2, 0x1000, 0x8e, 0x4, 0x1, 0xffff, 0xfffffff8, 0x9, 0x0, 0x5, 0x5, 0x7fffffff, 0xfffffff7, 0xb8e7, 0xf, 0x9, 0x1000, 0xfffffe00, 0x1, 0x4, 0x6b00, 0x1, 0x0, 0x4, 0xc, 0xa55, 0x3, 0x1, 0x800, 0x8, 0xb, 0xd, 0x9, 0x6, 0x8000, 0x2, 0x9, 0x3, 0xc, 0x21, 0x2, 0x7, 0xff, 0xa00, 0x0, 0x6, 0x5, 0x1, 0x1, 0x42a, 0x6, 0x523, 0xfff, 0x1, 0xe, 0x200, 0x8, 0x0, 0x8, 0xffffffff, 0xffffe2a7, 0x6, 0x9, 0x3, 0x4, 0xffff, 0x80000000, 0x2, 0xe, 0x9, 0x0, 0x7, 0xfffffffa, 0x10, 0x0, 0x5, 0x3, 0x0, 0xf, 0x6, 0x1, 0x1ff, 0x4, 0x51bec055, 0x3ff, 0x3, 0x9, 0x4, 0x3, 0x2, 0xfcf, 0xfffffd1c, 0xc, 0xfffffe6d, 0x6, 0x8, 0x7f, 0x936, 0x9, 0x7fffffff, 0xf396, 0xffffffff, 0x0, 0x1, 0xc5, 0x4, 0x1cf]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfbbf, 0x5, 0x10000, 0x8, 0x3, 0x2, 0x401, 0xd79, 0xffffffff, 0x5, 0x7, 0x8, 0x8, 0xa8, 0xe, 0xb8a, 0x23, 0x4, 0x7fff, 0x8000, 0x101, 0xf, 0x9, 0x100, 0x4138, 0x7, 0x0, 0x9, 0x7fff, 0x4, 0x4, 0x9, 0x115, 0x6, 0xfffffffb, 0x7, 0x5, 0x1, 0x4, 0x74, 0x8310, 0x1000, 0x8, 0x1, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x3, 0x10001, 0x5c, 0x8a8, 0x4, 0x3, 0x5, 0x7f, 0x10000, 0x85800000, 0x10, 0x8, 0x1, 0x5, 0x1, 0xf, 0xd, 0x0, 0x8, 0x1, 0x80000001, 0x200, 0x8000, 0x1, 0x3, 0x3, 0x8, 0x3, 0x2, 0x1, 0x11c, 0xe, 0x8, 0x9, 0x6, 0xea9f, 0x1, 0xfffffffc, 0x1, 0x6, 0x40, 0x518da1d7, 0x280, 0xfffff9b4, 0xb, 0x0, 0x4, 0x2, 0x5ac, 0x4, 0x1200000, 0x1, 0x9b, 0x4, 0x2, 0x1, 0xf6fd091, 0x5dd0, 0x0, 0x0, 0x8, 0x7, 0x7, 0x80000000, 0x1000, 0x4, 0x4, 0x80, 0xc000, 0xffff, 0x1, 0xb, 0x4, 0xe, 0x4, 0x6, 0x0, 0x5, 0x82, 0xd, 0x6, 0x0, 0x6, 0x7, 0x0, 0x80000001, 0x0, 0xffffffff, 0x3, 0x6, 0x1ff, 0x9, 0x6, 0x800, 0x10000, 0x0, 0xe, 0x1, 0x5, 0x5, 0x3, 0x6, 0x1800000, 0x7fffffff, 0x3, 0xf, 0x50, 0x5, 0x5, 0x0, 0x2, 0x4, 0x1, 0x5, 0x9fb, 0xfffffffb, 0x2, 0x2e000000, 0xa3aa, 0x3800, 0xf100, 0x158, 0x12, 0x5, 0x9, 0x3b6, 0x9, 0x80, 0x5, 0x8, 0x9, 0x8001, 0x7ff, 0xe33, 0x739a, 0x10000, 0x7, 0x5, 0x0, 0x5, 0x8000, 0xe63d, 0x4, 0x761, 0x1, 0xfffffffa, 0xfff, 0x4, 0x200, 0x8001, 0xac21, 0x9, 0x451, 0x7ff, 0x2, 0x0, 0x0, 0x3, 0x1, 0x7, 0x9, 0x7ff, 0x0, 0x7ecf, 0x52d5, 0x0, 0x80000001, 0x8f80, 0x0, 0xfffffff4, 0xa6, 0x7ff, 0x100, 0x1ffe, 0xd949, 0xeb, 0xc0000000, 0x9f, 0x9, 0xfff00, 0x2, 0x6f, 0x2, 0xf0, 0x1f4, 0x9, 0xc, 0x7fffffff, 0x1923, 0x5a, 0x3ff, 0xfff, 0x3b9, 0x1, 0x0, 0x1, 0x7, 0xd40c, 0x4, 0x5, 0x800, 0x8, 0x7fff, 0xe, 0x1, 0x0, 0xe]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]]}, {0x72, 0x6, "302f20042221175b58a90f6b075321c04b2b1ce040fbdc71e31a03f0bd8102074faa35a368706759cda2d21c6f020c0cd98225859edfd84905d6f44ada6403ba421d3a97266e07f00ede6643bacac61fb0622be1385aa7cd6880111dafb05ea8f0d9af3addaa9deb3352b0b305cb"}, {0xc}, {0xc, 0x8, {0x7, 0x1}}}}, @m_mirred={0x164, 0x1d, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x3, 0xffffffffffffffff, 0x5, 0x7fff}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x8000, 0x3, 0x3, 0xfffffffb}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xf, 0x7, 0x3, 0x20000000}, 0x3, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2ff23736, 0x0, 0x8, 0x8}, 0x2, r12}}]}, {0xb8, 0x6, "9988a400652fef4eb36f125696bedeb2b7bb0729d34fbaf6e1b6eb0a095c84ecee3f5ab269f2758262ab94666e16e908f76b9dcecbce5582fc5d308702ade0a9de5612af79fb07559fe04f7d08622ac63b45b3ca9aabecfa126df4eac6a76c867815de0b1d3797df89e1f86f02f501fb8ca8e8f616bf7d9329646af4f1390e65898c80be9f6ccf8c0f22b17e56911878f0aa199fbef8df65d7f3f476c625bf4b6e2b9f400a9e32966e64ada99a508a71ab417bf6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x480, 0x1, [@m_simple={0xa8, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0x7c, 0x6, "d54afb3c1cca56f6e4719027ae9e02d4566ba41302723cc8d1d9f5b0356e07e488ac05e28ed60afc131c4e1179104d93cb5483157c2f1125e48e8cccc115e4528808884c7f2976455bab970d319f9913fc8e0a177adc1b6f994fee8269fa1a6d543bc58068b9e030a9c78b33488095420805fa85a2804aa9"}, {0xc, 0x7, {0x1, 0x4b1d55df90b9ece5}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x11c, 0x7, 0x0, 0x0, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x10, 0x0, 0x7c, 0xfff}, {0x3ff, 0x3, 0x9}, {0xc7a8, 0x59, 0x7f, 0x8}, {0x89, 0x6, 0xf, 0x69}, {0x4, 0x3, 0x1d, 0xffffffff}, {0x9, 0xce, 0xf, 0xb1e}, {0x7, 0x4, 0x7f, 0x4}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfffffff3, 0x80000000, 0x20000000, 0x81, 0x9}}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0xffff, 0x54, 0x81, 0x6}, {0x10, 0x8, 0xff, 0x3}, {0x3, 0x4, 0x5, 0x6b3}, {0xff, 0x9, 0x1, 0x3}, {0x6, 0x7, 0x7, 0x5}, {0x7, 0x9, 0x8, 0x3}, {0x4, 0x2, 0x5, 0x7fffffff}, {0x0, 0x7, 0x0, 0xfff}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x1, 0xffffffffffffffff, 0x7, 0x1000}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x8, 0xf8, 0x0, 0x4}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}]}, {0x20, 0x6, "4724c441976dba0caa9e40b492e28433fda8d45ddaf2482b357e2e3e"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x108, 0x3, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x10, 0x1, 0x8, 0x5, 0xfffffff8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x10}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xf96}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7fffffff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}]}, {0x91, 0x6, "c0f64982ba2da44caabebe77751e806cbf02201221a3f82d65a2a7c9369536fe3170cc2ed1f4503e4cdd92f1e451b5984fb45f4c462053e93093ec1e502131d88477981f6f459211ebf34c5db8ccb9a2ec94fc36b6973d01dc8b1c31dc8d70e30cf0c62faa0fe43007cfaff05633f84f73eb14ec3d952caf9d3e6900a3cf1a06e19eafc8d0895f3832c13b425a"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x1b0, 0x6, 0x0, 0x0, {{0xf}, {0x84, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfff, 0x9, 0x6, 0x1, 0xf}, 0x8}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00'}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}]}, {0x100, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x4b24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 794.417714ms ago: executing program 6 (id=1282): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x3f, @ib={0x1b, 0x8, 0x6, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) r5 = fsmount(r3, 0x0, 0x2) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r6 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000602, 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) move_mount(r7, 0x0, r7, &(0x7f00000000c0)='./file0\x00', 0x22) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0x9362, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000640)={[&(0x7f0000000480)='=3-\x00']}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xfff0}, {0x85, 0x0, 0x0, 0xb4}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 743.158276ms ago: executing program 5 (id=1283): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 576.778616ms ago: executing program 6 (id=1284): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000190001090000000000000000021800000000fd0100000000a90f2d86ac14140010000fff080005000a010102000000000000ca1800000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @sk_skb}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c00044000000000000000011400000011"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0xac}}, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a01090000000000000000eab0000900010073797a3100"/40], 0x40}}, 0x40008c0) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) unshare(0x6a040000) (async) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000180)={0x5, 0x40000009, 0x10040007}) 525.06362ms ago: executing program 6 (id=1285): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r3, r2, 0x80000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000001e00), 0x1, 0x80) ioctl$EVIOCGVERSION(r5, 0x80044501, 0x0) read(r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0xfc) r6 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r6, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) r7 = socket(0x1e, 0x3, 0x0) connect$tipc(r7, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) close(r7) syz_open_procfs(0xffffffffffffffff, &(0x7f0000007e40)='net/if_inet6\x00') ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'veth0_to_hsr\x00', {}, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x2000000000000013, &(0x7f0000001900)=ANY=[@ANYBLOB="ee24b860801b0d59d3216cdafaf227ad070605971d", @ANYRES64, @ANYRES8], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 20.311018ms ago: executing program 6 (id=1286): syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000", @ANYBLOB="b70795"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0xf) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @local, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000500)="8fe8", 0x2}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0xfffffff8, @remote, 0x3}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000180)="c8", 0x1}], 0x1}}], 0x2, 0x40854) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000200)=0x8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000004c0)=[{0x6, 0x4, 0xa4, 0x7fff0003}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=1287): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 16) kernel console output (not intermixed with test programs): c-su3000 not found [ 225.200729][ T5842] Registered IR keymap rc-empty [ 225.203885][ T5842] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 225.215510][ T5842] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input14 [ 225.233106][ T5842] dvb-usb: schedule remote query interval to 150 msecs. [ 225.240931][ T5842] dw2102: su3000_power_ctrl: 0, initialized 1 [ 225.244936][ T5842] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 225.406965][ T5842] dvb-usb: bulk message failed: -22 (1/0) [ 225.417626][ T5842] dw2102: i2c transfer failed. [ 225.588158][ T5842] dvb-usb: bulk message failed: -22 (1/0) [ 225.596012][ T5842] dw2102: i2c transfer failed. [ 225.617032][ T7994] trusted_key: syz.1.535 sent an empty control message without MSG_MORE. [ 225.620057][ T7997] FAULT_INJECTION: forcing a failure. [ 225.620057][ T7997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.627405][ T7997] CPU: 0 UID: 0 PID: 7997 Comm: syz.3.538 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.627430][ T7997] Tainted: [L]=SOFTLOCKUP [ 225.627437][ T7997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.627447][ T7997] Call Trace: [ 225.627453][ T7997] [ 225.627460][ T7997] dump_stack_lvl+0x100/0x190 [ 225.627487][ T7997] should_fail_ex.cold+0x5/0xa [ 225.627510][ T7997] ? __pfx_binder_ioctl+0x10/0x10 [ 225.627534][ T7997] _copy_to_user+0x32/0xd0 [ 225.627564][ T7997] ? __pfx_binder_ioctl+0x10/0x10 [ 225.627585][ T7997] binder_ioctl+0x299a/0x7550 [ 225.627612][ T7997] ? find_held_lock+0x2b/0x80 [ 225.627635][ T7997] ? tomoyo_path_number_perm+0x28f/0x580 [ 225.627654][ T7997] ? tomoyo_path_number_perm+0x28f/0x580 [ 225.627677][ T7997] ? tomoyo_path_number_perm+0x188/0x580 [ 225.627697][ T7997] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 225.627716][ T7997] ? __pfx_binder_ioctl+0x10/0x10 [ 225.627743][ T7997] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 225.627771][ T7997] ? do_vfs_ioctl+0x226/0x13e0 [ 225.627790][ T7997] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 225.627813][ T7997] ? find_held_lock+0x2b/0x80 [ 225.627835][ T7997] ? __fget_files+0x215/0x3d0 [ 225.627855][ T7997] ? hook_file_ioctl_common+0x149/0x410 [ 225.627886][ T7997] ? __fget_files+0x21f/0x3d0 [ 225.627908][ T7997] ? __pfx_binder_ioctl+0x10/0x10 [ 225.627930][ T7997] compat_ptr_ioctl+0x6e/0xa0 [ 225.627957][ T7997] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 225.628118][ T7997] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 225.628141][ T7997] __do_fast_syscall_32+0xe7/0x950 [ 225.628166][ T7997] ? lockdep_hardirqs_on+0x78/0x100 [ 225.628203][ T7997] do_fast_syscall_32+0x32/0x70 [ 225.628229][ T7997] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.628251][ T7997] RIP: 0023:0xf6fdefcc [ 225.628265][ T7997] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 225.628282][ T7997] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 225.628300][ T7997] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 225.628312][ T7997] RDX: 0000000080000640 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.628322][ T7997] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.628331][ T7997] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 225.628342][ T7997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.628364][ T7997] [ 225.736776][ T7997] binder: 7996:7997 ioctl c0306201 80000640 returned -14 [ 225.759445][ T5842] dvb-usb: bulk message failed: -22 (1/0) [ 225.764409][ T5842] dw2102: i2c transfer failed. [ 225.928208][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 225.930814][ T24] dw2102: i2c transfer failed. [ 226.048171][ T5842] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 226.088129][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 226.090109][ T24] dw2102: i2c transfer failed. [ 226.218448][ T5842] usb 8-1: Using ep0 maxpacket: 32 [ 226.225387][ T5842] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 226.230704][ T5842] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 226.233613][ T5842] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 226.236605][ T5842] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 226.240192][ T5842] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 226.243581][ T5842] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 226.247995][ T5842] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 226.251212][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 226.252004][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 226.255957][ T5842] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.259647][ T24] dw2102: i2c transfer failed. [ 226.265500][ T5842] usb 8-1: config 0 descriptor?? [ 226.418357][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 226.420951][ T24] dw2102: i2c transfer failed. [ 226.424131][ T8004] syz.1.541 uses obsolete (PF_INET,SOCK_PACKET) [ 226.480483][ T5842] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 226.578181][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 226.581740][ T24] dw2102: i2c transfer failed. [ 226.677776][ T7999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.682054][ T7999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.685897][ C3] usblp0: nonzero read bulk status received: -71 [ 226.689148][ T6334] usb 8-1: USB disconnect, device number 7 [ 226.748269][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 226.751384][ T24] dw2102: i2c transfer failed. [ 226.904898][ T7998] usblp0: removed [ 226.918588][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 226.921264][ T24] dw2102: i2c transfer failed. [ 227.078194][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 227.080976][ T24] dw2102: i2c transfer failed. [ 227.234079][ T24] usb 5-1: USB disconnect, device number 4 [ 227.242009][ T2313] dvb-usb: bulk message failed: -22 (1/0) [ 227.250201][ T2313] dw2102: i2c transfer failed. [ 227.287211][ T24] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 227.567843][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.547'. [ 227.700444][ T8022] comedi comedi3: pcl818: I/O base address or length out of range [ 228.383423][ T8030] netlink: 144 bytes leftover after parsing attributes in process `syz.1.551'. [ 228.416578][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 228.550860][ T5921] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 228.758315][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 228.765731][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 228.770403][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 228.856347][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 228.864812][ T5921] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 228.868029][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.871052][ T5921] usb 5-1: Product: syz [ 228.872545][ T5921] usb 5-1: Manufacturer: syz [ 228.874452][ T5921] usb 5-1: SerialNumber: syz [ 228.881632][ T5921] usb 5-1: config 0 descriptor?? [ 228.895129][ T5921] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input15 [ 228.957052][ C0] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 228.981381][ T8041] comedi comedi1: multiq3: a I/O base address must be specified [ 228.985747][ T8041] /dev/sr0: Can't open blockdev [ 229.088516][ T6334] usb 5-1: USB disconnect, device number 5 [ 229.088611][ C0] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 231.089664][ T8082] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.283050][ T8082] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.364509][ T5742] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 231.392850][ T8082] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.466737][ T8082] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.556283][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.565172][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.575195][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.584315][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.805632][ T8144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.588'. [ 236.099139][ T8154] befs: (loop1): No write support. Marking filesystem read-only [ 236.102650][ T8154] befs: (loop1): unable to read superblock [ 236.148162][ T5736] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 236.302274][ T5736] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 236.308894][ T5736] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 236.317022][ T5736] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 236.325730][ T5736] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.335477][ T5736] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 236.345186][ T5736] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 236.357301][ T5736] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 236.361729][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 236.365205][ T5736] usb 5-1: Product: syz [ 236.367116][ T5736] usb 5-1: Manufacturer: syz [ 236.374641][ T8148] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 236.382753][ T5736] cdc_wdm 5-1:1.0: skipping garbage [ 236.385605][ T5736] cdc_wdm 5-1:1.0: skipping garbage [ 236.393748][ T5736] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 236.396516][ T5736] cdc_wdm 5-1:1.0: Unknown control protocol [ 236.584378][ C0] wdm_int_callback: 613 callbacks suppressed [ 236.584401][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 236.590016][ C0] wdm_int_callback: 613 callbacks suppressed [ 236.590035][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 236.595623][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 236.598536][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 236.601611][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 236.604519][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 236.607431][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 236.610360][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 236.613259][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 236.616196][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 236.619131][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 236.622034][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 236.624898][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 236.627806][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 236.630698][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 236.633579][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 236.636583][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 236.639492][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 236.642400][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 236.645302][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 237.494114][ T8174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.599'. [ 238.751898][ T8185] netlink: 16 bytes leftover after parsing attributes in process `syz.1.603'. [ 238.950806][ T5736] usb 5-1: USB disconnect, device number 6 [ 242.518166][ T6334] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 242.778338][ T6334] usb 6-1: Using ep0 maxpacket: 32 [ 243.545470][ T6334] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 243.549958][ T6334] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 243.554340][ T6334] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 243.680411][ T6334] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 243.683815][ T6334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.687076][ T6334] usb 6-1: Product: syz [ 243.688979][ T6334] usb 6-1: Manufacturer: syz [ 243.690702][ T6334] usb 6-1: SerialNumber: syz [ 243.693526][ T6334] usb 6-1: config 0 descriptor?? [ 243.699223][ T6334] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input16 [ 243.866456][ C3] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 243.908845][ C3] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 243.922962][ T2313] usb 6-1: USB disconnect, device number 7 [ 243.923118][ C3] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 244.711976][ T8253] wg2 speed is unknown, defaulting to 1000 [ 244.803807][ T8252] wg2 speed is unknown, defaulting to 1000 [ 244.919857][ T5742] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 244.928693][ T2313] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 245.110726][ T2313] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 245.115560][ T2313] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 245.125692][ T2313] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 245.129492][ T2313] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.135284][ T2313] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 245.145978][ T2313] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 245.151433][ T2313] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 245.155239][ T2313] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 245.160653][ T2313] usb 6-1: Product: syz [ 245.162195][ T2313] usb 6-1: Manufacturer: syz [ 245.166686][ T8247] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 245.170008][ T2313] cdc_wdm 6-1:1.0: skipping garbage [ 245.173683][ T2313] cdc_wdm 6-1:1.0: skipping garbage [ 245.177612][ T2313] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 245.180764][ T2313] cdc_wdm 6-1:1.0: Unknown control protocol [ 245.375210][ C3] wdm_int_callback: 9370 callbacks suppressed [ 245.375230][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 245.379699][ C3] wdm_int_callback: 9370 callbacks suppressed [ 245.379710][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 245.383998][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 245.386285][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 245.388543][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 245.391429][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 245.394275][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 245.397080][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 245.399983][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 245.402879][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 245.405727][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 245.408246][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 245.410412][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 245.412548][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 245.414722][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 245.416748][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 245.418950][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 245.421075][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 245.423232][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 245.425406][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 245.634386][ T8264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.643708][ T8264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.651832][ T8264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.655947][ T8264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.693087][ T841] usb 6-1: USB disconnect, device number 8 [ 248.063934][ T8295] bridge0: port 3(vlan3) entered blocking state [ 248.083705][ T8295] bridge0: port 3(vlan3) entered disabled state [ 248.088377][ T8295] vlan3: entered allmulticast mode [ 248.090197][ T8295] geneve0: entered allmulticast mode [ 248.095178][ T8295] vlan3: entered promiscuous mode [ 248.096968][ T8295] geneve0: entered promiscuous mode [ 254.202136][ T8351] netlink: 'syz.2.647': attribute type 4 has an invalid length. [ 254.204719][ T8351] netlink: 17 bytes leftover after parsing attributes in process `syz.2.647'. [ 255.369086][ T8357] netlink: 'syz.3.649': attribute type 4 has an invalid length. [ 255.372311][ T8357] netlink: 17 bytes leftover after parsing attributes in process `syz.3.649'. [ 260.429879][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.432557][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.452165][ T8412] comedi comedi1: multiq3: a I/O base address must be specified [ 262.458472][ T8412] /dev/sr0: Can't open blockdev [ 262.968400][ T5750] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 263.224358][ T8416] fuse: Bad value for 'fd' [ 263.288208][ T5750] usb 8-1: Using ep0 maxpacket: 32 [ 263.293707][ T5750] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 263.303928][ T5750] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 263.325458][ T5750] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 263.329629][ T5750] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.337112][ T5750] usb 8-1: Product: syz [ 263.347639][ T5750] usb 8-1: Manufacturer: syz [ 263.351229][ T5750] usb 8-1: SerialNumber: syz [ 263.358623][ T5750] usb 8-1: config 0 descriptor?? [ 263.572345][ T5750] usb 8-1: USB disconnect, device number 8 [ 265.311154][ T8432] fuse: Bad value for 'fd' [ 266.263167][ T8441] netlink: 'syz.2.670': attribute type 4 has an invalid length. [ 266.265783][ T8441] netlink: 17 bytes leftover after parsing attributes in process `syz.2.670'. [ 267.954836][ T8448] fuse: Bad value for 'rootmode' [ 268.801897][ T8446] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 269.102114][ T8473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 269.127220][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 269.127236][ T40] audit: type=1326 audit(1777745895.124:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8468 comm="syz.0.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fcc code=0x7ffc0000 [ 269.162855][ T40] audit: type=1326 audit(1777745895.124:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8468 comm="syz.0.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fcc code=0x7ffc0000 [ 269.189860][ T40] audit: type=1326 audit(1777745895.154:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8468 comm="syz.0.679" exe="/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf7f22fcc code=0x7ffc0000 [ 269.219655][ T40] audit: type=1326 audit(1777745895.154:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8468 comm="syz.0.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fcc code=0x7ffc0000 [ 269.230565][ T40] audit: type=1326 audit(1777745895.154:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8468 comm="syz.0.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fcc code=0x7ffc0000 [ 269.240760][ T40] audit: type=1326 audit(1777745895.154:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8468 comm="syz.0.679" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f22fcc code=0x7ffc0000 [ 269.250540][ T40] audit: type=1326 audit(1777745895.154:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8468 comm="syz.0.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fcc code=0x7ffc0000 [ 269.259858][ T40] audit: type=1326 audit(1777745895.154:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8468 comm="syz.0.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fcc code=0x7ffc0000 [ 269.268386][ T40] audit: type=1326 audit(1777745895.164:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8468 comm="syz.0.679" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f22fcc code=0x7ffc0000 [ 269.276340][ T40] audit: type=1326 audit(1777745895.164:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8468 comm="syz.0.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fcc code=0x7ffc0000 [ 269.606398][ T8477] fuse: Bad value for 'fd' [ 271.429239][ T8495] 9pnet_virtio: no channels available for device syz [ 271.454723][ T8498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.684'. [ 273.840860][ T8511] comedi comedi1: multiq3: a I/O base address must be specified [ 274.104920][ T8511] /dev/sr0: Can't open blockdev [ 274.108132][ T39] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 274.184099][ T8512] comedi comedi1: multiq3: a I/O base address must be specified [ 274.201916][ T8512] /dev/sr0: Can't open blockdev [ 274.278137][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 274.281395][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 274.285171][ T39] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 274.290603][ T39] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 274.293766][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.296438][ T39] usb 5-1: Product: syz [ 274.297853][ T39] usb 5-1: Manufacturer: syz [ 274.299488][ T39] usb 5-1: SerialNumber: syz [ 274.303192][ T39] usb 5-1: config 0 descriptor?? [ 274.958831][ T1035] usb 5-1: USB disconnect, device number 7 [ 275.208201][ T8523] netlink: 'syz.3.692': attribute type 4 has an invalid length. [ 275.210781][ T8523] netlink: 17 bytes leftover after parsing attributes in process `syz.3.692'. [ 276.574600][ T8544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.698'. [ 276.734140][ T8538] fuse: Bad value for 'fd' [ 278.033034][ T5751] Bluetooth: hci3: command 0x0406 tx timeout [ 281.203663][ T8575] netlink: 36 bytes leftover after parsing attributes in process `syz.0.707'. [ 281.215435][ T8579] netlink: 16 bytes leftover after parsing attributes in process `syz.3.708'. [ 284.410038][ T8626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.722'. [ 285.124949][ T8636] netlink: 'syz.2.724': attribute type 4 has an invalid length. [ 285.127716][ T8636] netlink: 17 bytes leftover after parsing attributes in process `syz.2.724'. [ 289.887305][ T8669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.733'. [ 290.255247][ T8686] wg2 speed is unknown, defaulting to 1000 [ 290.552481][ T8696] netlink: 'syz.2.737': attribute type 4 has an invalid length. [ 290.555668][ T8696] netlink: 17 bytes leftover after parsing attributes in process `syz.2.737'. [ 292.613815][ T8714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.744'. [ 293.302054][ T8718] fuse: Bad value for 'fd' [ 293.831585][ T8742] fuse: Bad value for 'fd' [ 294.155933][ T8743] comedi comedi1: multiq3: a I/O base address must be specified [ 294.165300][ T8743] /dev/sr0: Can't open blockdev [ 296.572608][ T8765] fuse: Bad value for 'fd' [ 297.527940][ T8774] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 297.541162][ T8774] CIFS: Unable to determine destination address [ 297.695632][ T8773] wg2 speed is unknown, defaulting to 1000 [ 298.232258][ T8782] netlink: 'syz.1.759': attribute type 4 has an invalid length. [ 298.234895][ T8782] netlink: 17 bytes leftover after parsing attributes in process `syz.1.759'. [ 301.253728][ T8806] fuse: Bad value for 'fd' [ 301.370246][ T8819] FAULT_INJECTION: forcing a failure. [ 301.370246][ T8819] name failslab, interval 1, probability 0, space 0, times 0 [ 301.375987][ T8819] CPU: 2 UID: 0 PID: 8819 Comm: syz.0.770 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.376005][ T8819] Tainted: [L]=SOFTLOCKUP [ 301.376008][ T8819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.376015][ T8819] Call Trace: [ 301.376045][ T8819] [ 301.376050][ T8819] dump_stack_lvl+0x100/0x190 [ 301.376098][ T8819] should_fail_ex.cold+0x5/0xa [ 301.376142][ T8819] should_failslab+0xc2/0x120 [ 301.376183][ T8819] __kmalloc_cache_noprof+0x7a/0x6f0 [ 301.376200][ T8819] ? virtio_transport_do_socket_init+0x4a/0x350 [ 301.376322][ T8819] ? do_raw_spin_lock+0x128/0x260 [ 301.376339][ T8819] virtio_transport_do_socket_init+0x4a/0x350 [ 301.376351][ T8819] vsock_assign_transport+0x7ca/0xb00 [ 301.376366][ T8819] vsock_connect+0x77c/0xe90 [ 301.376402][ T8819] ? __pfx_vsock_connect+0x10/0x10 [ 301.376417][ T8819] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 301.376476][ T8819] ? __pfx_aa_sk_perm+0x10/0x10 [ 301.376487][ T8819] ? __pfx_autoremove_wake_function+0x10/0x10 [ 301.376506][ T8819] ? __might_fault+0xc5/0x140 [ 301.376525][ T8819] ? apparmor_socket_connect+0x100/0x1b0 [ 301.376549][ T8819] ? __pfx_vsock_connect+0x10/0x10 [ 301.376565][ T8819] __sys_connect_file+0x141/0x1a0 [ 301.376609][ T8819] __sys_connect+0x141/0x170 [ 301.376626][ T8819] ? __pfx___sys_connect+0x10/0x10 [ 301.376648][ T8819] ? ksys_write+0x1ac/0x250 [ 301.376664][ T8819] __ia32_sys_connect+0x71/0xb0 [ 301.376680][ T8819] ? lockdep_hardirqs_on+0x78/0x100 [ 301.376695][ T8819] __do_fast_syscall_32+0xe7/0x950 [ 301.376710][ T8819] ? lockdep_hardirqs_on+0x78/0x100 [ 301.376725][ T8819] do_fast_syscall_32+0x32/0x70 [ 301.376741][ T8819] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 301.376756][ T8819] RIP: 0023:0xf7f22fcc [ 301.376765][ T8819] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 301.376776][ T8819] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 301.376787][ T8819] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 301.376794][ T8819] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 301.376801][ T8819] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.376807][ T8819] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 301.376813][ T8819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.376827][ T8819] [ 302.298183][ T2313] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 302.430036][ T2313] usb 6-1: device descriptor read/64, error -71 [ 302.668499][ T2313] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 302.798214][ T2313] usb 6-1: device descriptor read/64, error -71 [ 302.910376][ T2313] usb usb6-port1: attempt power cycle [ 303.248276][ T2313] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 303.278910][ T2313] usb 6-1: device descriptor read/8, error -71 [ 303.658986][ T8842] FAULT_INJECTION: forcing a failure. [ 303.658986][ T8842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.663949][ T8842] CPU: 0 UID: 0 PID: 8842 Comm: syz.3.777 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.663974][ T8842] Tainted: [L]=SOFTLOCKUP [ 303.663980][ T8842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 303.663990][ T8842] Call Trace: [ 303.663997][ T8842] [ 303.664004][ T8842] dump_stack_lvl+0x100/0x190 [ 303.664028][ T8842] should_fail_ex.cold+0x5/0xa [ 303.664051][ T8842] _copy_from_iter+0x1f4/0x1690 [ 303.664096][ T8842] ? __pfx__copy_from_iter+0x10/0x10 [ 303.664113][ T8842] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 303.664142][ T8842] copy_page_from_iter+0x238/0x300 [ 303.664163][ T8842] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 303.664201][ T8842] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 303.664224][ T8842] ? unwind_get_return_address+0x59/0xa0 [ 303.664244][ T8842] ? arch_stack_walk+0xa6/0xf0 [ 303.664266][ T8842] ? __lock_acquire+0x4a5/0x2630 [ 303.664292][ T8842] tun_get_user+0x16d6/0x3c20 [ 303.664321][ T8842] ? __pfx_tun_get_user+0x10/0x10 [ 303.664343][ T8842] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 303.664389][ T8842] ? find_held_lock+0x2b/0x80 [ 303.664407][ T8842] ? tun_get+0x191/0x370 [ 303.664424][ T8842] ? tun_get+0x191/0x370 [ 303.664452][ T8842] tun_chr_write_iter+0xdc/0x200 [ 303.664474][ T8842] vfs_write+0x6ac/0x1070 [ 303.664491][ T8842] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 303.664514][ T8842] ? __pfx_vfs_write+0x10/0x10 [ 303.664528][ T8842] ? find_held_lock+0x2b/0x80 [ 303.664558][ T8842] ksys_write+0x12a/0x250 [ 303.664574][ T8842] ? __pfx_ksys_write+0x10/0x10 [ 303.664591][ T8842] ? rcu_is_watching+0x12/0xc0 [ 303.664611][ T8842] do_int80_emulation+0x141/0x700 [ 303.664634][ T8842] asm_int80_emulation+0x1a/0x20 [ 303.664648][ T8842] RIP: 0023:0xf711616b [ 303.664661][ T8842] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 303.664675][ T8842] RSP: 002b:00000000f53cd44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 303.664690][ T8842] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000040 [ 303.664699][ T8842] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 303.664707][ T8842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.664716][ T8842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.664725][ T8842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.664743][ T8842] [ 304.429387][ T2313] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 304.448606][ T2313] usb 6-1: device descriptor read/8, error -71 [ 304.560457][ T2313] usb usb6-port1: unable to enumerate USB device [ 305.208675][ T8867] bridge_slave_0 (unregistering): left allmulticast mode [ 305.212273][ T8867] bridge_slave_0 (unregistering): left promiscuous mode [ 305.216102][ T8867] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.670669][ T2313] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 306.828173][ T2313] usb 6-1: Using ep0 maxpacket: 32 [ 306.832442][ T2313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 306.836136][ T2313] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 306.840207][ T2313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 306.846117][ T2313] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 306.849418][ T2313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.852059][ T2313] usb 6-1: Product: syz [ 306.853491][ T2313] usb 6-1: Manufacturer: syz [ 306.855157][ T2313] usb 6-1: SerialNumber: syz [ 306.859053][ T2313] usb 6-1: config 0 descriptor?? [ 306.866396][ T2313] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input17 [ 307.074683][ T841] usb 6-1: USB disconnect, device number 13 [ 307.074711][ C1] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 307.545900][ T8898] 9pnet_virtio: no channels available for device syz [ 307.868166][ T2313] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 307.998299][ T2313] usb 6-1: device descriptor read/64, error -71 [ 308.248165][ T2313] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 308.388137][ T2313] usb 6-1: device descriptor read/64, error -71 [ 308.508302][ T2313] usb usb6-port1: attempt power cycle [ 308.848218][ T2313] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 308.868553][ T2313] usb 6-1: device descriptor read/8, error -71 [ 309.118151][ T2313] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 309.140266][ T2313] usb 6-1: device descriptor read/8, error -71 [ 309.248860][ T2313] usb usb6-port1: unable to enumerate USB device [ 309.596118][ T8917] netlink: 'syz.3.796': attribute type 4 has an invalid length. [ 309.598949][ T8917] netlink: 17 bytes leftover after parsing attributes in process `syz.3.796'. [ 310.408163][ T841] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 310.578206][ T841] usb 5-1: Using ep0 maxpacket: 32 [ 310.584623][ T841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 310.588935][ T841] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 310.592932][ T841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 310.598736][ T841] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 310.602246][ T841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.607197][ T841] usb 5-1: Product: syz [ 310.609256][ T841] usb 5-1: Manufacturer: syz [ 310.611315][ T841] usb 5-1: SerialNumber: syz [ 310.621681][ T841] usb 5-1: config 0 descriptor?? [ 310.806865][ T841] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input18 [ 311.635270][ T39] usb 5-1: USB disconnect, device number 8 [ 311.635353][ C3] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 313.258795][ T5921] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 314.578209][ T5921] usb 6-1: device descriptor read/64, error -71 [ 314.811379][ T8982] fuse: Bad value for 'fd' [ 314.818182][ T5921] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 314.948202][ T5921] usb 6-1: device descriptor read/64, error -71 [ 315.028157][ T6334] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 315.068508][ T5921] usb usb6-port1: attempt power cycle [ 315.178169][ T6334] usb 8-1: Using ep0 maxpacket: 16 [ 315.183338][ T6334] usb 8-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 1024 [ 315.188204][ T6334] usb 8-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 8 [ 315.192291][ T6334] usb 8-1: config 1 interface 0 has no altsetting 0 [ 315.197315][ T6334] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.201246][ T6334] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.204683][ T6334] usb 8-1: Product: 憵罔等틳甤逯Ἲ᫃ç’ï„â똔å¸ç¨™èƒç„Ά뾀఩ç˜é…â’šï·á ¶ã®¬ï¤‚ [ 315.209505][ T6334] usb 8-1: Manufacturer: 빛㵱懀㸭ꡙ㩵跸ោ쮞Ｅ褴匲ê¡â­­çœ–쥮䴎엂î’ïªã«¾íŸ¯ã„¿è‰´ç¨¥è¨½êº­è’½Ä¼ëœä§¡ï›§×徉⤓撘숶藞ã´á˜–妈㷢ฯ [ 315.216335][ T6334] usb 8-1: SerialNumber: 糠舅ꋬ王뷧ᔩ횗懾籑滸鎹𧻓踓绛雫⾷铘숩祄瑕೬䫴畎㥬玔㳠â’絬뿈簸㚼鸒໵࿌ë•ê€´î½—㉺뉓섅䟓ឭ膓爚í™ê·Œá²„ê„´ëšë‘¨â©­ê–¨ïº‡ïˆ ï‰šï¥¢å¾©å¬‡ìŠ™â«¿ì«œç˜›éˆ• [ 315.229729][ T8981] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 315.232907][ T8981] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 315.408143][ T5921] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 315.428839][ T5921] usb 6-1: device descriptor read/8, error -71 [ 315.662786][ T8981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.667785][ T8981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.671416][ T5921] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 315.705678][ T5921] usb 6-1: device descriptor read/8, error -71 [ 315.828856][ T5921] usb usb6-port1: unable to enumerate USB device [ 316.523566][ T6334] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 316.535803][ T6334] usb 8-1: USB disconnect, device number 9 [ 317.338144][ T2313] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 317.488259][ T2313] usb 8-1: Using ep0 maxpacket: 32 [ 317.492141][ T2313] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 317.496693][ T2313] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 317.501433][ T2313] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 317.507842][ T2313] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 317.512169][ T2313] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.515024][ T2313] usb 8-1: Product: syz [ 317.516749][ T2313] usb 8-1: Manufacturer: syz [ 317.519165][ T2313] usb 8-1: SerialNumber: syz [ 317.524136][ T2313] usb 8-1: config 0 descriptor?? [ 317.536851][ T2313] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input19 [ 317.602274][ C2] xpad 8-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 317.742048][ C2] xpad 8-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 317.745554][ T2313] usb 8-1: USB disconnect, device number 10 [ 318.079091][ T9025] fuse: Bad value for 'fd' [ 318.821375][ T9035] /dev/sr0: Can't open blockdev [ 320.765935][ T9054] tipc: Started in network mode [ 320.767995][ T9054] tipc: Node identity 1aab185973b, cluster identity 4711 [ 320.772083][ T9054] tipc: Enabled bearer , priority 0 [ 320.796890][ T9054] syzkaller0: entered promiscuous mode [ 320.798872][ T9054] syzkaller0: entered allmulticast mode [ 321.088223][ T5842] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 321.245343][ T9061] netlink: 180 bytes leftover after parsing attributes in process `syz.3.835'. [ 321.248783][ T5842] usb 5-1: Using ep0 maxpacket: 32 [ 321.249820][ T9061] netlink: 180 bytes leftover after parsing attributes in process `syz.3.835'. [ 321.256125][ T9061] netlink: 180 bytes leftover after parsing attributes in process `syz.3.835'. [ 321.261040][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 321.269106][ T5842] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 321.277809][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 321.285366][ T5842] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 321.289724][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.293493][ T5842] usb 5-1: Product: syz [ 321.295418][ T5842] usb 5-1: Manufacturer: syz [ 321.303649][ T5842] usb 5-1: SerialNumber: syz [ 321.313357][ T5842] usb 5-1: config 0 descriptor?? [ 321.340730][ T5842] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input20 [ 321.375394][ C2] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 321.388427][ C2] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 321.430442][ C2] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 321.481646][ T9051] tipc: Resetting bearer [ 321.566662][ T5921] usb 5-1: USB disconnect, device number 9 [ 321.567006][ C2] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 321.889600][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.892596][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.913669][ T9051] tipc: Disabling bearer [ 323.958329][ T54] tipc: Node number set to 1763383385 [ 326.706932][ T9116] netlink: 76 bytes leftover after parsing attributes in process `syz.1.850'. [ 327.218184][ T9120] netlink: 76 bytes leftover after parsing attributes in process `syz.2.851'. [ 327.647802][ T9122] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 327.651934][ T9122] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 328.018207][ T5750] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 328.178249][ T5750] usb 5-1: Using ep0 maxpacket: 32 [ 328.181488][ T5750] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 328.185225][ T5750] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 328.189177][ T5750] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 328.194899][ T5750] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 328.198102][ T5750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.200764][ T5750] usb 5-1: Product: syz [ 328.202154][ T5750] usb 5-1: Manufacturer: syz [ 328.203700][ T5750] usb 5-1: SerialNumber: syz [ 328.206732][ T5750] usb 5-1: config 0 descriptor?? [ 328.213794][ T5750] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input21 [ 328.259078][ C2] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 328.270964][ C2] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 328.429639][ T2313] usb 5-1: USB disconnect, device number 10 [ 328.429697][ C2] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 329.822813][ T9147] netlink: 'syz.3.858': attribute type 4 has an invalid length. [ 329.826259][ T9147] netlink: 17 bytes leftover after parsing attributes in process `syz.3.858'. [ 329.833350][ T9149] FAULT_INJECTION: forcing a failure. [ 329.833350][ T9149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.837633][ T9149] CPU: 3 UID: 0 PID: 9149 Comm: syz.0.859 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.837657][ T9149] Tainted: [L]=SOFTLOCKUP [ 329.837663][ T9149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 329.837672][ T9149] Call Trace: [ 329.837678][ T9149] [ 329.837684][ T9149] dump_stack_lvl+0x100/0x190 [ 329.837706][ T9149] should_fail_ex.cold+0x5/0xa [ 329.837728][ T9149] _copy_from_iter+0x1f4/0x1690 [ 329.837749][ T9149] ? _copy_from_iter+0x270/0x1690 [ 329.837764][ T9149] ? __pfx__copy_from_iter+0x10/0x10 [ 329.837783][ T9149] ? __pfx__copy_from_iter+0x10/0x10 [ 329.837798][ T9149] ? _copy_from_iter+0x270/0x1690 [ 329.837817][ T9149] copy_page_from_iter+0x238/0x300 [ 329.837835][ T9149] skb_copy_datagram_from_iter+0x399/0x720 [ 329.837867][ T9149] tun_get_user+0x1889/0x3c20 [ 329.837902][ T9149] ? __pfx_tun_get_user+0x10/0x10 [ 329.837925][ T9149] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 329.837948][ T9149] ? find_held_lock+0x2b/0x80 [ 329.837963][ T9149] ? tun_get+0x191/0x370 [ 329.837977][ T9149] ? tun_get+0x191/0x370 [ 329.837995][ T9149] tun_chr_write_iter+0xdc/0x200 [ 329.838012][ T9149] vfs_write+0x6ac/0x1070 [ 329.838025][ T9149] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 329.838043][ T9149] ? __pfx_vfs_write+0x10/0x10 [ 329.838068][ T9149] ? find_held_lock+0x2b/0x80 [ 329.838092][ T9149] ksys_write+0x12a/0x250 [ 329.838104][ T9149] ? __pfx_ksys_write+0x10/0x10 [ 329.838116][ T9149] ? ksys_write+0x1ac/0x250 [ 329.838130][ T9149] ? rcu_is_watching+0x12/0xc0 [ 329.838146][ T9149] __do_fast_syscall_32+0xe7/0x950 [ 329.838161][ T9149] ? lockdep_hardirqs_on+0x78/0x100 [ 329.838176][ T9149] do_fast_syscall_32+0x32/0x70 [ 329.838191][ T9149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.838206][ T9149] RIP: 0023:0xf7f22fcc [ 329.838216][ T9149] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 329.838227][ T9149] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 329.838238][ T9149] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000cc0 [ 329.838245][ T9149] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 329.838251][ T9149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 329.838257][ T9149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.838264][ T9149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.838277][ T9149] [ 333.031657][ T9167] netlink: 'syz.3.862': attribute type 4 has an invalid length. [ 333.034318][ T9167] netlink: 17 bytes leftover after parsing attributes in process `syz.3.862'. [ 333.152811][ T9172] netlink: 'syz.2.865': attribute type 4 has an invalid length. [ 333.155494][ T9172] netlink: 17 bytes leftover after parsing attributes in process `syz.2.865'. [ 334.892330][ T9184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.868'. [ 334.896525][ T9184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.868'. [ 334.935847][ T9187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.869'. [ 335.193305][ T9193] netlink: 'syz.1.870': attribute type 4 has an invalid length. [ 335.196419][ T9193] netlink: 17 bytes leftover after parsing attributes in process `syz.1.870'. [ 336.547996][ T9200] input: syz0 as /devices/virtual/input/input22 [ 336.558229][ T9200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.873'. [ 336.826832][ T9206] fuse: Bad value for 'fd' [ 337.199571][ T9225] /dev/sr0: Can't open blockdev [ 339.070907][ T9234] netlink: 'syz.2.883': attribute type 4 has an invalid length. [ 339.074275][ T9234] netlink: 17 bytes leftover after parsing attributes in process `syz.2.883'. [ 340.226244][ T9241] tipc: Enabled bearer , priority 0 [ 340.228828][ T9241] syzkaller0: entered promiscuous mode [ 340.230515][ T9241] syzkaller0: entered allmulticast mode [ 340.439262][ T9246] tipc: Resetting bearer [ 340.446030][ T9240] tipc: Resetting bearer [ 340.460176][ T9240] tipc: Disabling bearer [ 341.239291][ T9256] FAULT_INJECTION: forcing a failure. [ 341.239291][ T9256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.245208][ T9256] CPU: 2 UID: 0 PID: 9256 Comm: syz.1.888 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.245239][ T9256] Tainted: [L]=SOFTLOCKUP [ 341.245245][ T9256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 341.245254][ T9256] Call Trace: [ 341.245260][ T9256] [ 341.245267][ T9256] dump_stack_lvl+0x100/0x190 [ 341.245291][ T9256] should_fail_ex.cold+0x5/0xa [ 341.245316][ T9256] _copy_from_iter+0x1f4/0x1690 [ 341.245340][ T9256] ? __asan_memset+0x23/0x50 [ 341.245367][ T9256] ? __pfx__copy_from_iter+0x10/0x10 [ 341.245386][ T9256] ? __pfx___alloc_skb+0x10/0x10 [ 341.245415][ T9256] netlink_sendmsg+0x808/0xda0 [ 341.245446][ T9256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.245473][ T9256] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 341.245505][ T9256] ____sys_sendmsg+0x9e1/0xb70 [ 341.245528][ T9256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.245555][ T9256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.245591][ T9256] ___sys_sendmsg+0x190/0x1e0 [ 341.245617][ T9256] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.245654][ T9256] ? find_held_lock+0x2b/0x80 [ 341.245693][ T9256] __sys_sendmsg+0x170/0x220 [ 341.245715][ T9256] ? __pfx___sys_sendmsg+0x10/0x10 [ 341.245733][ T9256] ? __fget_files+0x21f/0x3d0 [ 341.245760][ T9256] ? ksys_write+0x1ac/0x250 [ 341.245780][ T9256] ? rcu_is_watching+0x12/0xc0 [ 341.245803][ T9256] __do_fast_syscall_32+0xe7/0x950 [ 341.245828][ T9256] ? lockdep_hardirqs_on+0x78/0x100 [ 341.245854][ T9256] do_fast_syscall_32+0x32/0x70 [ 341.245880][ T9256] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.245904][ T9256] RIP: 0023:0xf7ff6fcc [ 341.245919][ T9256] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 341.245937][ T9256] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 341.245955][ T9256] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 341.245968][ T9256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 341.245977][ T9256] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.245988][ T9256] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 341.245999][ T9256] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 341.246022][ T9256] [ 341.560644][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'. [ 341.566112][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'. [ 342.111605][ T9268] comedi comedi1: multiq3: a I/O base address must be specified [ 342.577861][ T9274] fuse: Bad value for 'fd' [ 343.050357][ T9281] wg2 speed is unknown, defaulting to 1000 [ 344.072967][ T9299] FAULT_INJECTION: forcing a failure. [ 344.072967][ T9299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.078574][ T9299] CPU: 2 UID: 0 PID: 9299 Comm: syz.3.899 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.078600][ T9299] Tainted: [L]=SOFTLOCKUP [ 344.078607][ T9299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 344.078617][ T9299] Call Trace: [ 344.078624][ T9299] [ 344.078630][ T9299] dump_stack_lvl+0x100/0x190 [ 344.078658][ T9299] should_fail_ex.cold+0x5/0xa [ 344.078681][ T9299] _copy_to_user+0x32/0xd0 [ 344.078713][ T9299] simple_read_from_buffer+0xcb/0x170 [ 344.078736][ T9299] proc_fail_nth_read+0x1af/0x230 [ 344.078767][ T9299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.078793][ T9299] ? rw_verify_area+0xce/0x6d0 [ 344.078812][ T9299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.078839][ T9299] vfs_read+0x1e4/0xb30 [ 344.078861][ T9299] ? __pfx_vfs_read+0x10/0x10 [ 344.078885][ T9299] ? find_held_lock+0x2b/0x80 [ 344.078908][ T9299] ? __fget_files+0x215/0x3d0 [ 344.078933][ T9299] ? __fget_files+0x21f/0x3d0 [ 344.078959][ T9299] ksys_read+0x12a/0x250 [ 344.078979][ T9299] ? __pfx_ksys_read+0x10/0x10 [ 344.078996][ T9299] ? rcu_is_watching+0x12/0xc0 [ 344.079015][ T9299] ? rcu_is_watching+0x12/0xc0 [ 344.079038][ T9299] do_int80_emulation+0x141/0x700 [ 344.079066][ T9299] asm_int80_emulation+0x1a/0x20 [ 344.079085][ T9299] RIP: 0023:0xf711616b [ 344.079099][ T9299] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 344.079115][ T9299] RSP: 002b:00000000f53cd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 344.079132][ T9299] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53cd5d0 [ 344.079142][ T9299] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 344.079151][ T9299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 344.079162][ T9299] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 344.079172][ T9299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 344.079195][ T9299] [ 345.531332][ T9321] comedi comedi1: multiq3: a I/O base address must be specified [ 345.541088][ T9321] /dev/sr0: Can't open blockdev [ 347.330113][ T9337] fuse: Bad value for 'fd' [ 348.798472][ T5822] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 348.980235][ T5822] usb 8-1: Using ep0 maxpacket: 32 [ 349.012621][ T5822] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 349.077525][ T5822] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 349.085202][ T5822] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 349.100694][ T5822] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 349.105690][ T5822] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.109698][ T5822] usb 8-1: Product: syz [ 349.118390][ T5822] usb 8-1: Manufacturer: syz [ 349.120573][ T5822] usb 8-1: SerialNumber: syz [ 349.183949][ T5822] usb 8-1: config 0 descriptor?? [ 349.332607][ T9363] netlink: 48 bytes leftover after parsing attributes in process `syz.1.918'. [ 349.340648][ T5822] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input23 [ 349.566685][ T5822] usb 8-1: USB disconnect, device number 11 [ 349.566720][ C2] xpad 8-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 349.870453][ T9369] comedi comedi1: multiq3: a I/O base address must be specified [ 349.876113][ T9369] /dev/sr0: Can't open blockdev [ 353.270298][ T9402] netlink: 'syz.1.929': attribute type 4 has an invalid length. [ 353.273511][ T9402] netlink: 17 bytes leftover after parsing attributes in process `syz.1.929'. [ 354.639916][ T9418] comedi comedi1: multiq3: a I/O base address must be specified [ 354.646217][ T9418] /dev/sr0: Can't open blockdev [ 354.681034][ T9413] netlink: 48 bytes leftover after parsing attributes in process `syz.3.931'. [ 355.639164][ T9421] FAULT_INJECTION: forcing a failure. [ 355.639164][ T9421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.643450][ T9421] CPU: 1 UID: 0 PID: 9421 Comm: syz.1.933 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.643467][ T9421] Tainted: [L]=SOFTLOCKUP [ 355.643471][ T9421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 355.643477][ T9421] Call Trace: [ 355.643482][ T9421] [ 355.643487][ T9421] dump_stack_lvl+0x100/0x190 [ 355.643504][ T9421] should_fail_ex.cold+0x5/0xa [ 355.643519][ T9421] _copy_from_user+0x2e/0xd0 [ 355.643542][ T9421] sched_copy_attr+0xa2/0x1d0 [ 355.643564][ T9421] __ia32_sys_sched_setattr+0x104/0x4b0 [ 355.643582][ T9421] ? __pfx___ia32_sys_sched_setattr+0x10/0x10 [ 355.643619][ T9421] ? rcu_is_watching+0x12/0xc0 [ 355.643636][ T9421] __do_fast_syscall_32+0xe7/0x950 [ 355.643655][ T9421] ? lockdep_hardirqs_on+0x78/0x100 [ 355.643672][ T9421] do_fast_syscall_32+0x32/0x70 [ 355.643690][ T9421] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 355.643706][ T9421] RIP: 0023:0xf7ff6fcc [ 355.643716][ T9421] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 355.643727][ T9421] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 000000000000015f [ 355.643738][ T9421] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000100 [ 355.643745][ T9421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 355.643751][ T9421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 355.643757][ T9421] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 355.643763][ T9421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.643777][ T9421] [ 359.317064][ T9457] netlink: 'syz.3.941': attribute type 4 has an invalid length. [ 359.319788][ T9457] netlink: 17 bytes leftover after parsing attributes in process `syz.3.941'. [ 360.354313][ T9473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.946'. [ 360.674620][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 360.674633][ T40] audit: type=1326 audit(1777745986.674:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.2.949" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x0 [ 360.736612][ T9489] tmpfs: Unknown parameter 'md' [ 361.834424][ T5753] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 362.549404][ T9508] wg2 speed is unknown, defaulting to 1000 [ 362.617244][ T9509] bridge_slave_1: left allmulticast mode [ 362.655546][ T9509] 8021q: adding VLAN 0 to HW filter on device eth0 [ 362.661097][ T9509] 8021q: adding VLAN 0 to HW filter on device eth1 [ 362.666505][ T9509] 8021q: adding VLAN 0 to HW filter on device eth2 [ 362.683729][ T9509] 8021q: adding VLAN 0 to HW filter on device eth3 [ 363.374677][ T9512] netlink: 48 bytes leftover after parsing attributes in process `syz.2.957'. [ 363.624438][ T192] Bluetooth: (null): Invalid header checksum [ 363.750322][ T9523] fuse: Unknown parameter 'grou00000000000000000000' [ 363.861339][ T9527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.959'. [ 366.780417][ T9532] fuse: Bad value for 'fd' [ 367.267051][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 367.715745][ T9564] program syz.2.974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.618212][ T2313] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 368.768221][ T2313] usb 5-1: Using ep0 maxpacket: 32 [ 368.772872][ T2313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 368.777963][ T2313] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 368.785579][ T2313] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 368.790019][ T2313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.793586][ T2313] usb 5-1: Product: syz [ 368.795447][ T2313] usb 5-1: Manufacturer: syz [ 368.797511][ T2313] usb 5-1: SerialNumber: syz [ 368.805126][ T2313] usb 5-1: config 0 descriptor?? [ 369.022058][ T9577] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 369.066987][ T2313] usb 5-1: USB disconnect, device number 11 [ 369.126283][ T9580] syzkaller0: entered promiscuous mode [ 369.130543][ T9580] syzkaller0: entered allmulticast mode [ 369.480841][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'. [ 369.591428][ T2313] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 369.599718][ T2313] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 369.603113][ T2313] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 369.606386][ T2313] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 369.609422][ T2313] rtc rtc0: __rtc_set_alarm: err=-22 [ 369.631919][ T9590] fuse: Bad value for 'fd' [ 370.382081][ T9600] comedi comedi1: multiq3: a I/O base address must be specified [ 370.387202][ T9600] /dev/sr0: Can't open blockdev [ 370.923491][ T9601] netlink: 'syz.1.986': attribute type 4 has an invalid length. [ 370.928109][ T9601] netlink: 17 bytes leftover after parsing attributes in process `syz.1.986'. [ 372.625988][ T9605] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 372.733565][ T9611] fuse: Unknown parameter 'group_i00000000000000000000' [ 372.938199][ T5744] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 373.088166][ T5744] usb 8-1: Using ep0 maxpacket: 32 [ 373.092130][ T5744] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 373.095987][ T5744] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 373.102804][ T5744] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 373.106903][ T5744] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.110603][ T5744] usb 8-1: Product: syz [ 373.112660][ T5744] usb 8-1: Manufacturer: syz [ 373.114706][ T5744] usb 8-1: SerialNumber: syz [ 373.118877][ T5744] usb 8-1: config 0 descriptor?? [ 373.337614][ T5744] usb 8-1: USB disconnect, device number 12 [ 374.288252][ T9634] netlink: 'syz.0.995': attribute type 4 has an invalid length. [ 374.291107][ T9634] netlink: 17 bytes leftover after parsing attributes in process `syz.0.995'. [ 377.334880][ T9641] comedi comedi1: multiq3: a I/O base address must be specified [ 377.340962][ T9641] /dev/sr0: Can't open blockdev [ 377.899662][ T9655] fuse: Unknown parameter 'group_i00000000000000000000' [ 378.026748][ T9653] Trying to write to read-only block-device nullb0 [ 378.036868][ T9653] fuse: Bad value for 'fd' [ 378.057694][ T9664] usb usb1: check_ctrlrecip: process 9664 (syz.3.1002) requesting ep 01 but needs 81 [ 378.065051][ T9664] usb usb1: usbfs: process 9664 (syz.3.1002) did not claim interface 0 before use [ 379.278644][ T9693] netlink: 'syz.0.1008': attribute type 4 has an invalid length. [ 379.281257][ T9693] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1008'. [ 380.130170][ T9698] fuse: Unknown parameter 'group_i00000000000000000000' [ 381.073277][ T9710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1015'. [ 382.708305][ T9730] syzkaller0: entered promiscuous mode [ 382.710789][ T9730] syzkaller0: entered allmulticast mode [ 382.836215][ T9734] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 383.388521][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.390773][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.160880][ T9755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1028'. [ 387.030040][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1040'. [ 389.074340][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1049'. [ 389.369640][ T9830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1052'. [ 389.585733][ T9834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1053'. [ 389.622458][ T9835] netlink: 'syz.0.1051': attribute type 4 has an invalid length. [ 389.625079][ T9835] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1051'. [ 390.442073][ T9841] cgroup: Unknown subsys name 'cpuset' [ 390.737556][ T9843] fuse: Bad value for 'user_id' [ 390.739282][ T9843] fuse: Bad value for 'user_id' [ 390.884743][ T9854] FAULT_INJECTION: forcing a failure. [ 390.884743][ T9854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.889344][ T9854] CPU: 2 UID: 0 PID: 9854 Comm: syz.1.1060 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.889362][ T9854] Tainted: [L]=SOFTLOCKUP [ 390.889365][ T9854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 390.889372][ T9854] Call Trace: [ 390.889377][ T9854] [ 390.889382][ T9854] dump_stack_lvl+0x100/0x190 [ 390.889399][ T9854] should_fail_ex.cold+0x5/0xa [ 390.889415][ T9854] _copy_to_user+0x32/0xd0 [ 390.889438][ T9854] simple_read_from_buffer+0xcb/0x170 [ 390.889453][ T9854] proc_fail_nth_read+0x1af/0x230 [ 390.889472][ T9854] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 390.889490][ T9854] ? rw_verify_area+0xce/0x6d0 [ 390.889515][ T9854] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 390.889532][ T9854] vfs_read+0x1e4/0xb30 [ 390.889546][ T9854] ? __pfx_vfs_read+0x10/0x10 [ 390.889557][ T9854] ? find_held_lock+0x2b/0x80 [ 390.889573][ T9854] ? __fget_files+0x215/0x3d0 [ 390.889588][ T9854] ? __fget_files+0x21f/0x3d0 [ 390.889605][ T9854] ksys_read+0x12a/0x250 [ 390.889617][ T9854] ? __pfx_ksys_read+0x10/0x10 [ 390.889629][ T9854] ? rcu_is_watching+0x12/0xc0 [ 390.889642][ T9854] ? rcu_is_watching+0x12/0xc0 [ 390.889657][ T9854] do_int80_emulation+0x141/0x700 [ 390.889677][ T9854] asm_int80_emulation+0x1a/0x20 [ 390.889688][ T9854] RIP: 0023:0xf71f616b [ 390.889697][ T9854] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 390.889708][ T9854] RSP: 002b:00000000f54b64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 390.889719][ T9854] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54b65d0 [ 390.889726][ T9854] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 390.889732][ T9854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 390.889738][ T9854] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 390.889745][ T9854] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 390.889758][ T9854] [ 391.357689][ T9867] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 391.486406][ T9866] overlayfs: workdir and upperdir must be separate subtrees [ 391.523671][ T9867] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 391.528895][ T9867] overlayfs: failed to look up (tracing) for ino (-66) [ 391.934641][ T9874] overlayfs: conflicting options: userxattr,redirect_dir=on [ 392.077866][ T9865] fuse: fd is not a fuse device [ 393.191511][ T9887] netlink: 'syz.3.1065': attribute type 4 has an invalid length. [ 393.194126][ T9887] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1065'. [ 393.634624][ T9880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1064'. [ 394.585381][ T9902] netlink: 'syz.0.1069': attribute type 4 has an invalid length. [ 394.588805][ T9902] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1069'. [ 398.731065][ T9937] netlink: 'syz.0.1076': attribute type 4 has an invalid length. [ 398.734688][ T9937] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1076'. [ 398.831148][ T9938] comedi comedi1: multiq3: a I/O base address must be specified [ 398.888259][ T9938] /dev/sr0: Can't open blockdev [ 399.723921][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1078'. [ 399.728304][ T9949] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1078'. [ 399.807662][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1082'. [ 401.110641][ T9945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1080'. [ 401.650494][ T9972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1086'. [ 401.659901][ T9972] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.663291][ T9972] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.681594][ T9972] comedi comedi0: mpc624: I/O base address not correctly aligned [ 403.092482][ T9985] syzkaller1: entered promiscuous mode [ 403.095021][ T9985] syzkaller1: entered allmulticast mode [ 403.195896][ T1156] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.277775][ T9991] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 403.283708][ T9991] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 403.287974][ T9991] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 403.292799][ T9991] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 403.295709][ T9991] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 403.428192][ T1156] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.536032][ T1156] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.633617][ T1156] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.655147][T10002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1095'. [ 403.677573][ T9989] wg2 speed is unknown, defaulting to 1000 [ 404.286559][ T1156] bond0 (unregistering): Released all slaves [ 404.688899][T10027] comedi comedi1: multiq3: a I/O base address must be specified [ 404.702083][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 404.706000][T10026] /dev/sr0: Can't open blockdev [ 404.781207][ T9989] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.784530][ T9989] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.787897][ T9989] bridge_slave_0: entered allmulticast mode [ 404.792319][ T9989] bridge_slave_0: entered promiscuous mode [ 404.797180][ T9989] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.802588][ T9989] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.805985][ T9989] bridge_slave_1: entered allmulticast mode [ 404.810125][ T9989] bridge_slave_1: entered promiscuous mode [ 404.836923][ T9989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.843508][ T9989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.868351][ T9989] team0: Port device team_slave_0 added [ 404.873040][ T9989] team0: Port device team_slave_1 added [ 404.896623][ T9989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.899824][ T9989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.911258][ T9989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.917513][ T9989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.920755][ T9989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.932069][ T9989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.972142][ T9989] hsr_slave_0: entered promiscuous mode [ 404.975677][ T9989] hsr_slave_1: entered promiscuous mode [ 404.979245][ T9989] debugfs: 'hsr0' already exists in 'hsr' [ 404.981910][ T9989] Cannot create hsr debugfs directory [ 405.010626][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 405.182448][ T9989] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 405.318266][ T9991] Bluetooth: hci0: command tx timeout [ 405.503696][ T9989] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 405.507185][ T9989] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 405.523430][ T9989] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.648879][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 405.704643][ T9989] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 405.711770][ T9989] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.715808][ T9989] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 405.722557][ T9989] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.904628][ T9989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.920712][ T9989] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.934354][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.937588][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.951259][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.954452][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.112393][ T5753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 406.119519][ T5753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.123865][ T5753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.172855][ T5447] 8021q: adding VLAN 0 to HW filter on device eth5 [ 406.181293][ T5753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.190209][ T5753] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.023081][ T1156] hsr_slave_0: left promiscuous mode [ 407.026291][ T1156] hsr_slave_1: left promiscuous mode [ 407.034327][ T1156] veth1_macvtap: left promiscuous mode [ 407.037097][ T1156] veth0_macvtap: left promiscuous mode [ 407.039772][ T1156] veth1_vlan: left promiscuous mode [ 407.041577][ T1156] veth0_vlan: left promiscuous mode [ 407.332688][ T1156] smc: removing net device vcan0 with user defined pnetid SYZ1 [ 407.383968][ T9989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.388490][ T5753] Bluetooth: hci0: command tx timeout [ 407.429176][T10056] wg2 speed is unknown, defaulting to 1000 [ 407.785288][ T9989] veth0_vlan: entered promiscuous mode [ 407.794225][ T9989] veth1_vlan: entered promiscuous mode [ 407.815567][ T9989] veth0_macvtap: entered promiscuous mode [ 407.822242][ T9989] veth1_macvtap: entered promiscuous mode [ 407.864698][ T9989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.884151][ T9989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.907486][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.936855][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.943061][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.953375][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.047320][T10056] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.055505][T10056] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.060629][T10056] bridge_slave_0: entered allmulticast mode [ 408.063390][T10056] bridge_slave_0: entered promiscuous mode [ 408.073245][T10056] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.077280][T10056] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.082178][T10056] bridge_slave_1: entered allmulticast mode [ 408.085157][T10056] bridge_slave_1: entered promiscuous mode [ 408.126930][T10056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.134305][T10056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.164669][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.165682][T10056] team0: Port device team_slave_0 added [ 408.167668][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.183824][T10056] team0: Port device team_slave_1 added [ 408.208307][T10056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.212145][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.212377][T10056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.215657][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.227788][T10056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.237574][T10056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.240061][T10056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.248626][T10056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.279406][ T5753] Bluetooth: hci2: command tx timeout [ 408.285341][T10056] hsr_slave_0: entered promiscuous mode [ 408.290514][T10056] hsr_slave_1: entered promiscuous mode [ 408.293772][T10056] debugfs: 'hsr0' already exists in 'hsr' [ 408.296408][T10056] Cannot create hsr debugfs directory [ 408.623334][T10056] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 408.640157][T10056] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 408.643909][T10056] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 408.666633][T10056] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 408.672352][T10056] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 408.767862][T10056] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 408.774957][T10056] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 408.785257][T10056] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 408.817129][T10135] xt_socket: unknown flags 0x50 [ 408.848042][T10122] kvm: kvm [10121]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x2ac00000239 [ 408.852366][T10056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.871317][T10056] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.882386][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.884817][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.892111][T10139] random: crng reseeded on system resumption [ 408.899521][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.901890][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.108225][ T6334] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 409.147698][T10139] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 409.276867][T10056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.352619][T10154] netlink: 'syz.0.1112': attribute type 4 has an invalid length. [ 409.355403][T10154] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1112'. [ 409.468353][ T5753] Bluetooth: hci0: command tx timeout [ 409.626932][T10056] veth0_vlan: entered promiscuous mode [ 409.639695][T10056] veth1_vlan: entered promiscuous mode [ 409.658748][T10056] veth0_macvtap: entered promiscuous mode [ 409.665920][T10056] veth1_macvtap: entered promiscuous mode [ 409.677647][T10056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.688130][T10056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.693601][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.696597][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.700874][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.704117][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.790537][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.793624][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.818658][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.821448][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.198172][ T6334] usb 8-1: Using ep0 maxpacket: 32 [ 410.202157][ T6334] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 410.206263][ T6334] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.212513][ T6334] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 410.215669][ T6334] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.218754][ T6334] usb 8-1: Product: syz [ 410.220205][ T6334] usb 8-1: Manufacturer: syz [ 410.221909][ T6334] usb 8-1: SerialNumber: syz [ 410.231192][ T6334] usb 8-1: config 0 descriptor?? [ 410.348228][ T5753] Bluetooth: hci2: command tx timeout [ 410.441276][ T24] usb 8-1: USB disconnect, device number 13 [ 410.528951][ T5750] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 411.162355][T10173] netlink: 'syz.0.1114': attribute type 4 has an invalid length. [ 411.165886][T10173] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1114'. [ 411.548697][ T5753] Bluetooth: hci0: command tx timeout [ 412.114759][ T5750] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 412.118099][ T5750] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.124804][ T5750] usb 10-1: config 0 descriptor?? [ 412.428220][ T5753] Bluetooth: hci2: command tx timeout [ 412.582817][T10186] comedi comedi1: multiq3: a I/O base address must be specified [ 412.592810][T10186] FAT-fs (sr0): bogus number of reserved sectors [ 412.595612][T10186] FAT-fs (sr0): Can't find a valid FAT filesystem [ 413.113063][ T5750] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 413.115802][ T5750] [drm:udl_init] *ERROR* Selecting channel failed [ 413.439894][ T5750] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 3 [ 413.446415][ T5750] [drm] Initialized udl on minor 3 [ 413.453157][ T5750] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 413.456707][ T5750] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 413.461253][ T1035] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 413.477603][ T5750] usb 10-1: USB disconnect, device number 2 [ 413.481099][ T1035] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 413.486452][ T1035] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 413.583406][T10194] FAULT_INJECTION: forcing a failure. [ 413.583406][T10194] name failslab, interval 1, probability 0, space 0, times 0 [ 413.600144][T10194] CPU: 0 UID: 0 PID: 10194 Comm: syz.0.1119 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.600170][T10194] Tainted: [L]=SOFTLOCKUP [ 413.600176][T10194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 413.600184][T10194] Call Trace: [ 413.600210][T10194] [ 413.600215][T10194] dump_stack_lvl+0x100/0x190 [ 413.600302][T10194] should_fail_ex.cold+0x5/0xa [ 413.600351][T10194] should_failslab+0xc2/0x120 [ 413.600407][T10194] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 413.600429][T10194] ? alloc_empty_file+0x5b/0x1c0 [ 413.600450][T10194] ? __pfx_stack_trace_save+0x10/0x10 [ 413.600486][T10194] alloc_empty_file+0x5b/0x1c0 [ 413.600507][T10194] path_openat+0xe8/0x31a0 [ 413.600523][T10194] ? kasan_save_stack+0x3f/0x50 [ 413.600536][T10194] ? kasan_save_stack+0x30/0x50 [ 413.600548][T10194] ? kasan_save_track+0x14/0x30 [ 413.600560][T10194] ? __kasan_slab_alloc+0x89/0x90 [ 413.600574][T10194] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 413.600595][T10194] ? do_getname+0x35/0x390 [ 413.600614][T10194] ? do_sys_openat2+0xc5/0x1e0 [ 413.600634][T10194] ? do_fast_syscall_32+0x32/0x70 [ 413.600725][T10194] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 413.600746][T10194] ? __pfx_path_openat+0x10/0x10 [ 413.600770][T10194] do_file_open+0x20e/0x430 [ 413.600788][T10194] ? __pfx_do_file_open+0x10/0x10 [ 413.600819][T10194] ? alloc_fd+0x476/0x790 [ 413.600837][T10194] ? do_getname+0x191/0x390 [ 413.600859][T10194] do_sys_openat2+0x10d/0x1e0 [ 413.600880][T10194] ? __pfx_do_sys_openat2+0x10/0x10 [ 413.600905][T10194] ? __fget_files+0x215/0x3d0 [ 413.600924][T10194] ? __fget_files+0x21f/0x3d0 [ 413.600942][T10194] __ia32_compat_sys_open+0xfe/0x1c0 [ 413.600964][T10194] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 413.600986][T10194] ? fput+0x79/0x100 [ 413.601004][T10194] ? ksys_write+0x1ac/0x250 [ 413.601021][T10194] ? rcu_is_watching+0x12/0xc0 [ 413.601041][T10194] __do_fast_syscall_32+0xe7/0x950 [ 413.601059][T10194] ? lockdep_hardirqs_on+0x78/0x100 [ 413.601079][T10194] do_fast_syscall_32+0x32/0x70 [ 413.601098][T10194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 413.601115][T10194] RIP: 0023:0xf7f22fcc [ 413.601128][T10194] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 413.601142][T10194] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000005 [ 413.601157][T10194] RAX: ffffffffffffffda RBX: 0000000080000540 RCX: 0000000000040000 [ 413.601166][T10194] RDX: 000000000000006f RSI: 0000000000000000 RDI: 0000000000000000 [ 413.601174][T10194] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 413.601182][T10194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.601190][T10194] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 413.601208][T10194] [ 414.358169][ T6334] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 414.508674][ T5753] Bluetooth: hci2: command tx timeout [ 414.511179][ T6334] usb 9-1: Using ep0 maxpacket: 32 [ 414.516652][ T6334] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 414.524638][ T6334] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 414.529317][ T6334] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 414.537346][ T6334] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 414.542235][ T6334] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.545964][ T6334] usb 9-1: Product: syz [ 414.547832][ T6334] usb 9-1: Manufacturer: syz [ 414.550326][ T6334] usb 9-1: SerialNumber: syz [ 414.557370][ T6334] usb 9-1: config 0 descriptor?? [ 414.567041][ T6334] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input24 [ 414.737092][T10205] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input25 [ 414.853015][ T6334] usb 9-1: USB disconnect, device number 2 [ 414.855612][ C3] xpad 9-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 414.922043][T10217] can0: slcan on ttyS3. [ 414.989939][T10217] can0 (unregistered): slcan off ttyS3. [ 414.990911][ T5925] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 415.148212][ T5925] usb 10-1: Using ep0 maxpacket: 32 [ 415.154287][ T5925] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 415.159495][ T5925] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 415.163740][ T5925] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 415.174415][ T5925] usb 10-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 415.178135][ T5925] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.181227][ T5925] usb 10-1: Product: syz [ 415.182843][ T5925] usb 10-1: Manufacturer: syz [ 415.184764][ T5925] usb 10-1: SerialNumber: syz [ 415.199482][ T5925] usb 10-1: config 0 descriptor?? [ 415.265415][ T5925] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input26 [ 415.496112][ T2313] usb 10-1: USB disconnect, device number 3 [ 415.498918][ C2] xpad 10-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 415.778172][T10229] netlink: 'syz.4.1125': attribute type 4 has an invalid length. [ 415.781527][T10229] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1125'. [ 417.615295][T10251] comedi comedi1: multiq3: a I/O base address must be specified [ 417.625832][T10251] FAT-fs (sr0): bogus number of reserved sectors [ 417.628144][T10251] FAT-fs (sr0): Can't find a valid FAT filesystem [ 419.166861][ T40] audit: type=1804 audit(1777746045.164:586): pid=10267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1134" name="/newroot/8/file0/file0" dev="9p" ino=77081759 res=1 errno=0 [ 419.994419][T10289] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 420.103079][T10295] netlink: 'syz.5.1138': attribute type 4 has an invalid length. [ 420.105741][T10295] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1138'. [ 420.679013][ T5744] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 420.771767][T10308] bridge0: port 4(syz_tun) entered blocking state [ 420.776399][T10308] bridge0: port 4(syz_tun) entered disabled state [ 420.779974][T10308] syz_tun: entered allmulticast mode [ 420.783340][T10308] syz_tun: entered promiscuous mode [ 420.818172][ T5744] usb 9-1: device descriptor read/64, error -71 [ 421.650511][T10317] comedi comedi1: multiq3: a I/O base address must be specified [ 422.005037][T10317] FAT-fs (sr0): bogus number of reserved sectors [ 422.007372][T10317] FAT-fs (sr0): Can't find a valid FAT filesystem [ 422.009980][ T5744] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 422.168204][ T5744] usb 9-1: device descriptor read/64, error -71 [ 422.539398][ T5753] Bluetooth: hci1: hardware error 0x00 [ 422.598545][ T5744] usb usb9-port1: attempt power cycle [ 422.732530][T10324] fuse: Bad value for 'fd' [ 422.948301][ T5744] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 422.971900][ T5744] usb 9-1: device descriptor read/8, error -71 [ 423.179782][ T6334] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 423.228312][ T5744] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 423.250832][ T5744] usb 9-1: device descriptor read/8, error -71 [ 423.358542][ T5744] usb usb9-port1: unable to enumerate USB device [ 423.369754][ T6334] usb 5-1: config 0 has an invalid descriptor of length 250, skipping remainder of the config [ 423.374380][ T6334] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 423.380995][ T6334] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 423.387293][ T6334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.391311][ T6334] usb 5-1: Product: syz [ 423.393270][ T6334] usb 5-1: Manufacturer: syz [ 423.395801][ T6334] usb 5-1: SerialNumber: syz [ 423.400921][ T6334] usb 5-1: config 0 descriptor?? [ 423.612768][ T6334] usb 5-1: USB disconnect, device number 12 [ 424.672679][ T5753] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 426.573880][T10356] netlink: 'syz.0.1151': attribute type 4 has an invalid length. [ 426.576496][T10356] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1151'. [ 428.278798][T10365] fuse: Bad value for 'fd' [ 428.528239][ T841] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 428.658205][ T841] usb 5-1: device descriptor read/64, error -71 [ 428.898295][ T841] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 429.028180][ T2313] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 429.028215][ T841] usb 5-1: device descriptor read/64, error -71 [ 429.138458][ T841] usb usb5-port1: attempt power cycle [ 429.188136][ T2313] usb 9-1: Using ep0 maxpacket: 32 [ 429.191284][ T2313] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 429.195107][ T2313] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 429.200699][ T2313] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 429.208389][ T2313] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 429.212434][ T2313] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.216097][ T2313] usb 9-1: Product: syz [ 429.217981][ T2313] usb 9-1: Manufacturer: syz [ 429.220122][ T2313] usb 9-1: SerialNumber: syz [ 429.225801][ T2313] usb 9-1: config 0 descriptor?? [ 429.236516][ T2313] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input27 [ 429.247907][ C2] xpad 9-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 429.252027][ C2] xpad 9-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 429.305884][ C2] xpad 9-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 429.466073][ T2313] usb 9-1: USB disconnect, device number 7 [ 429.468073][ C2] xpad 9-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 429.488214][ T841] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 429.510156][ T841] usb 5-1: device descriptor read/8, error -71 [ 429.758276][ T841] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 429.778745][ T841] usb 5-1: device descriptor read/8, error -71 [ 429.889526][ T841] usb usb5-port1: unable to enumerate USB device [ 430.254079][T10381] wg2 speed is unknown, defaulting to 1000 [ 431.290585][T10391] netlink: 'syz.4.1161': attribute type 4 has an invalid length. [ 431.293274][T10391] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1161'. [ 432.605520][T10405] bridge0: port 3(syz_tun) entered blocking state [ 432.609890][T10405] bridge0: port 3(syz_tun) entered disabled state [ 432.612113][T10405] syz_tun: entered allmulticast mode [ 432.616771][T10405] syz_tun: entered promiscuous mode [ 432.619985][T10405] bridge0: port 3(syz_tun) entered blocking state [ 432.622794][T10405] bridge0: port 3(syz_tun) entered forwarding state [ 433.575575][T10411] fuse: Bad value for 'fd' [ 434.278863][ T5821] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 434.291899][T10431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1171'. [ 434.418154][ T5821] usb 10-1: device descriptor read/64, error -71 [ 434.678537][ T5821] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 434.818225][ T5821] usb 10-1: device descriptor read/64, error -71 [ 434.938387][ T5821] usb usb10-port1: attempt power cycle [ 435.264730][T10442] netlink: 'syz.4.1174': attribute type 4 has an invalid length. [ 435.268028][T10442] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1174'. [ 435.308353][ T5821] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 435.468616][ T5821] usb 10-1: device descriptor read/8, error -71 [ 435.789455][ T5821] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 435.818562][ T5821] usb 10-1: device descriptor read/8, error -71 [ 435.938668][ T5821] usb usb10-port1: unable to enumerate USB device [ 436.375506][ T192] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.506155][ T192] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.617145][ T192] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.630991][ T9991] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 436.664577][ T9991] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 436.671995][ T9991] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 436.683685][ T9991] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 436.689518][ T9991] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 436.842041][ T192] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.096620][T10449] wg2 speed is unknown, defaulting to 1000 [ 437.250292][ T192] bridge_slave_1: left allmulticast mode [ 437.254915][ T192] bridge_slave_1: left promiscuous mode [ 437.261754][ T192] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.275561][ T192] bridge_slave_0: left allmulticast mode [ 437.280366][ T192] bridge_slave_0: left promiscuous mode [ 437.285325][ T192] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.548759][ T192] bond1 (unregistering): (slave geneve2): Releasing active interface [ 437.702536][ T192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.760800][ T192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.771579][ T192] bond0 (unregistering): Released all slaves [ 437.783312][ T192] bond1 (unregistering): Released all slaves [ 438.074365][ T5447] 8021q: adding VLAN 0 to HW filter on device eth6 [ 438.392840][ T5447] 8021q: adding VLAN 0 to HW filter on device eth7 [ 438.748668][ T5753] Bluetooth: hci3: command tx timeout [ 439.335791][ T54] wg2 speed is unknown, defaulting to 1000 [ 439.354809][ T54] syz2: Port: 1 Link DOWN [ 439.490528][ T192] tipc: Disabling bearer [ 439.511946][ T192] tipc: Left network mode [ 439.518146][ T54] wg2 speed is unknown, defaulting to 1000 [ 439.602577][ T5447] 8021q: adding VLAN 0 to HW filter on device eth8 [ 440.675502][ T5447] 8021q: adding VLAN 0 to HW filter on device eth9 [ 440.708259][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 440.737485][T10449] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.741407][T10449] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.746537][T10449] bridge_slave_0: entered allmulticast mode [ 440.765021][T10449] bridge_slave_0: entered promiscuous mode [ 440.828236][ T5753] Bluetooth: hci3: command tx timeout [ 440.841206][T10449] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.853926][T10449] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.863154][T10449] bridge_slave_1: entered allmulticast mode [ 440.868223][T10449] bridge_slave_1: entered promiscuous mode [ 440.888973][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 440.896139][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.904463][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 440.912536][ T24] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 440.915716][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.941886][ T192] hsr_slave_0: left promiscuous mode [ 440.944040][ T24] usb 5-1: Product: syz [ 440.945664][ T24] usb 5-1: Manufacturer: syz [ 440.947237][ T192] hsr_slave_1: left promiscuous mode [ 440.956350][ T24] usb 5-1: SerialNumber: syz [ 440.968239][ T192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.973255][ T24] usb 5-1: config 0 descriptor?? [ 440.979490][ T192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.983326][ T192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.985801][ T192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.997773][ T192] veth1_macvtap: left promiscuous mode [ 441.000261][ T192] veth0_macvtap: left promiscuous mode [ 441.002163][ T192] veth1_vlan: left promiscuous mode [ 441.004039][ T192] veth0_vlan: left promiscuous mode [ 441.197411][ T192] team0 (unregistering): Port device team_slave_1 removed [ 441.207047][ T192] team0 (unregistering): Port device team_slave_0 removed [ 441.261404][ T12] smc: removing ib device syz2 [ 441.296866][ T24] usb 5-1: USB disconnect, device number 17 [ 441.401326][ T12] smbdirect: ib_dev[syz2] removed [ 441.424557][T10449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.437813][T10449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.525229][T10449] team0: Port device team_slave_0 added [ 441.560930][T10449] team0: Port device team_slave_1 added [ 441.656244][T10449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.679036][T10449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.688646][T10449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.702016][T10449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.718700][T10449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.742489][T10449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.844003][T10542] Failed to get privilege flags for destination (handle=0x0:0x0) [ 441.879648][T10449] hsr_slave_0: entered promiscuous mode [ 441.886906][T10449] hsr_slave_1: entered promiscuous mode [ 441.897099][T10449] debugfs: 'hsr0' already exists in 'hsr' [ 441.900826][T10449] Cannot create hsr debugfs directory [ 442.214734][T10546] syz_tun (unregistering): left allmulticast mode [ 442.224693][T10546] syz_tun (unregistering): left promiscuous mode [ 442.232753][T10546] bridge0: port 4(syz_tun) entered disabled state [ 442.609887][T10449] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 442.618705][T10449] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.622818][T10449] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 442.629001][T10449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.633103][T10449] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 442.641561][T10449] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.645655][T10449] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 442.652356][T10449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.754474][T10449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.774288][T10449] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.784435][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.787657][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.801669][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.804900][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.908203][ T5753] Bluetooth: hci3: command tx timeout [ 443.131140][T10449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.297769][ T9991] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 443.305168][ T9991] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 443.310153][ T9991] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 443.317027][ T9991] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 443.323335][ T9991] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 443.540960][T10449] veth0_vlan: entered promiscuous mode [ 443.552671][T10449] veth1_vlan: entered promiscuous mode [ 443.578570][T10449] veth0_macvtap: entered promiscuous mode [ 443.584399][T10449] veth1_macvtap: entered promiscuous mode [ 443.597541][T10449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.608947][T10449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.616921][ T1161] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.624276][ T1161] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.647709][ T1161] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.665001][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.727585][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.736162][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.774717][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.780026][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.025874][T10580] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.028974][T10580] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.031865][T10580] bridge_slave_0: entered allmulticast mode [ 444.035117][T10580] bridge_slave_0: entered promiscuous mode [ 444.041355][T10580] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.044265][T10580] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.046803][T10580] bridge_slave_1: entered allmulticast mode [ 444.050152][T10580] bridge_slave_1: entered promiscuous mode [ 444.110691][T10580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.118020][T10580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.143823][T10580] team0: Port device team_slave_0 added [ 444.147245][T10580] team0: Port device team_slave_1 added [ 444.175318][T10580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.177739][T10580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.195918][T10580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.202813][T10580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.205142][T10580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.216122][T10580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.240221][T10580] hsr_slave_0: entered promiscuous mode [ 444.242700][T10580] hsr_slave_1: entered promiscuous mode [ 444.245321][T10580] debugfs: 'hsr0' already exists in 'hsr' [ 444.247288][T10580] Cannot create hsr debugfs directory [ 444.315832][T10605] comedi comedi1: multiq3: a I/O base address must be specified [ 444.334457][T10605] FAT-fs (sr0): bogus number of reserved sectors [ 444.337252][T10605] FAT-fs (sr0): Can't find a valid FAT filesystem [ 444.487053][T10580] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 444.492442][T10580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 444.495617][T10580] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 444.506713][T10580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.510256][T10580] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 444.519875][T10580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 444.522959][T10580] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 444.526903][T10580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 444.554793][T10580] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.558036][T10580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.561517][T10580] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.564773][T10580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.618821][T10580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.634422][T10580] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.750483][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.753386][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.977754][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.998994][ T9991] Bluetooth: hci3: command tx timeout [ 445.124112][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.187019][ T5750] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 445.254662][ T13] team0: Port device netdevsim1 removed [ 445.262854][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.348673][ T5750] usb 10-1: Using ep0 maxpacket: 32 [ 445.355732][ T5750] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.357830][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.362729][ T5750] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 445.389410][ T9991] Bluetooth: hci1: command tx timeout [ 445.418673][ T5750] usb 10-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 445.429008][ T5750] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.448961][ T5750] usb 10-1: Product: syz [ 445.455069][ T5750] usb 10-1: Manufacturer: syz [ 445.457624][ T5750] usb 10-1: SerialNumber: syz [ 445.562038][ T5750] usb 10-1: config 0 descriptor?? [ 445.815755][ T13] vlan3: left allmulticast mode [ 445.817526][ T13] geneve0: left allmulticast mode [ 445.822073][ T13] vlan3: left promiscuous mode [ 445.823775][ T13] geneve0: left promiscuous mode [ 445.829905][ T5750] usb 10-1: USB disconnect, device number 8 [ 445.832252][ T13] bridge0: port 3(vlan3) entered disabled state [ 445.840473][ T13] bridge_slave_1: left allmulticast mode [ 445.843679][ T13] bridge_slave_1: left promiscuous mode [ 445.846384][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.870017][ T13] bridge_slave_0: left allmulticast mode [ 445.874469][ T13] bridge_slave_0: left promiscuous mode [ 445.879112][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.894624][ T13] dvmrp8: left allmulticast mode [ 446.044091][ T13] bond1 (unregistering): (slave gretap1): Releasing active interface [ 446.942598][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.949734][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.953662][ T13] bond0 (unregistering): Released all slaves [ 446.958758][ T13] bond1 (unregistering): Released all slaves [ 447.366386][T10580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.375030][ T5447] 8021q: adding VLAN 0 to HW filter on device eth10 [ 447.468228][ T9991] Bluetooth: hci1: command tx timeout [ 447.752666][ T5447] 8021q: adding VLAN 0 to HW filter on device eth11 [ 447.812563][T10580] veth0_vlan: entered promiscuous mode [ 447.839047][T10580] veth1_vlan: entered promiscuous mode [ 447.872788][ T13] hsr_slave_0: left promiscuous mode [ 447.879529][ T13] hsr_slave_1: left promiscuous mode [ 447.884919][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.889381][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.893731][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.897665][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.906919][T10687] netlink: 'syz.4.1206': attribute type 1 has an invalid length. [ 447.947309][ T13] veth1_macvtap: left promiscuous mode [ 447.952860][ T13] veth0_macvtap: left promiscuous mode [ 447.957850][ T13] veth1_vlan: left promiscuous mode [ 447.963542][ T13] veth0_vlan: left promiscuous mode [ 448.030809][T10693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1206'. [ 448.509892][ T13] team0 (unregistering): Port device team_slave_1 removed [ 448.521195][ T13] team0 (unregistering): Port device team_slave_0 removed [ 448.655261][T10687] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 448.698556][ T5447] 8021q: adding VLAN 0 to HW filter on device eth12 [ 448.770736][T10580] veth0_macvtap: entered promiscuous mode [ 448.784190][T10580] veth1_macvtap: entered promiscuous mode [ 448.800168][T10580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.816849][T10580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.832012][ T1156] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.835215][ T1156] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.851150][ T1156] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.854302][ T1156] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.941134][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.949146][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.001594][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.009537][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.336632][ T5447] 8021q: adding VLAN 0 to HW filter on device eth13 [ 449.468371][ T841] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 449.559303][ T5842] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 449.588196][ T9991] Bluetooth: hci1: command tx timeout [ 449.679449][ T841] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 449.683185][ T841] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 449.689804][ T841] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 449.692809][ T841] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.701885][T10720] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 449.720766][ T841] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 449.740163][ T5842] usb 10-1: Using ep0 maxpacket: 32 [ 449.747545][ T5842] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.752091][ T5842] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.758596][ T5842] usb 10-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 449.762777][ T5842] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.767075][ T5842] usb 10-1: Product: syz [ 449.769102][ T5842] usb 10-1: Manufacturer: syz [ 449.773841][ T5842] usb 10-1: SerialNumber: syz [ 449.792407][ T5842] usb 10-1: config 0 descriptor?? [ 449.916657][T10720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.920919][T10720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.926644][ T841] usb 11-1: USB disconnect, device number 2 [ 450.105400][T10734] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 450.112801][T10734] dlm: no locking on control device [ 450.170759][T10720] block nbd6: not configured, cannot reconfigure [ 450.200387][T10720] Bluetooth: MGMT ver 1.23 [ 450.601753][T10740] netlink: 'syz.5.1216': attribute type 2 has an invalid length. [ 450.942828][ T5842] usb 10-1: USB disconnect, device number 9 [ 451.340904][T10750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1215'. [ 451.360609][T10750] bond1: entered promiscuous mode [ 451.363281][T10750] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.519245][T10755] can0: slcan on ttyprintk. [ 451.628582][ T9991] Bluetooth: hci1: command tx timeout [ 452.349661][T10749] can0 (unregistered): slcan off ttyprintk. [ 454.328402][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 454.488213][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 454.492355][ T24] usb 9-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 454.495846][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 454.502028][ T24] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 454.505943][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.510581][ T24] usb 9-1: Product: syz [ 454.513817][ T24] usb 9-1: Manufacturer: syz [ 454.515983][ T24] usb 9-1: SerialNumber: syz [ 454.532486][ T24] usb 9-1: config 0 descriptor?? [ 454.762962][ T1035] usb 9-1: USB disconnect, device number 8 [ 455.035005][T10826] comedi comedi1: multiq3: a I/O base address must be specified [ 455.046507][T10826] FAT-fs (sr0): bogus number of reserved sectors [ 455.048725][T10826] FAT-fs (sr0): Can't find a valid FAT filesystem [ 456.581388][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1229'. [ 456.585555][T10844] netlink: 'syz.6.1229': attribute type 5 has an invalid length. [ 456.589235][T10844] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1229'. [ 458.463638][T10860] "syz.7.1233" (10860) uses obsolete ecb(arc4) skcipher [ 458.748224][ T5821] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 458.815785][T10874] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1236'. [ 458.823163][T10874] netlink: 6 bytes leftover after parsing attributes in process `syz.6.1236'. [ 458.826859][T10874] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 458.900414][ T5821] usb 12-1: Using ep0 maxpacket: 32 [ 458.918407][ T5821] usb 12-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 458.922078][ T5821] usb 12-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 458.934000][ T5821] usb 12-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 458.937345][ T5821] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.940095][ T5821] usb 12-1: Product: syz [ 458.941518][ T5821] usb 12-1: Manufacturer: syz [ 458.943129][ T5821] usb 12-1: SerialNumber: syz [ 458.947886][ T5821] usb 12-1: config 0 descriptor?? [ 459.125749][T10880] netlink: 'syz.6.1237': attribute type 1 has an invalid length. [ 459.182249][ T5821] usb 12-1: USB disconnect, device number 2 [ 460.197440][T10896] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1242'. [ 460.533988][T10901] autofs: Unknown parameter '' [ 460.799178][T10909] fuse: Bad value for 'fd' [ 461.058256][ T24] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 461.220029][ T24] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.223644][ T24] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 461.226748][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.232530][ T24] usb 11-1: config 0 descriptor?? [ 461.457141][ T24] usbhid 11-1:0.0: can't add hid device: -71 [ 461.460813][ T24] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 461.464841][ T24] usb 11-1: USB disconnect, device number 3 [ 461.846180][T10937] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 461.849140][T10937] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 461.888763][T10937] vhci_hcd vhci_hcd.0: Device attached [ 462.158772][ T24] usb 46-1: SetAddress Request (2) to port 0 [ 462.160831][ T24] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 462.727424][ T5744] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 462.908191][ T5744] usb 11-1: Using ep0 maxpacket: 32 [ 462.911580][ T5744] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.922895][ T5744] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 462.930533][ T5744] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.954372][ T5744] usb 11-1: config 0 descriptor?? [ 462.959080][ T5744] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 462.967960][ T5744] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 462.980335][T10945] vhci_hcd: connection reset by peer [ 462.984685][ T1159] vhci_hcd vhci_hcd.4: stop threads [ 462.986431][ T1159] vhci_hcd vhci_hcd.4: release socket [ 462.988939][ T1159] vhci_hcd vhci_hcd.4: disconnect device [ 463.205764][T10961] batman_adv: batadv0: Adding interface: gretap1 [ 463.208021][T10961] batman_adv: batadv0: Interface activated: gretap1 [ 463.572564][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.578886][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.587648][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.593563][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.557964][T10965] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1255'. [ 464.576310][T10965] syzkaller0: entered promiscuous mode [ 464.578245][T10965] syzkaller0: entered allmulticast mode [ 464.992118][ T54] usb 11-1: USB disconnect, device number 4 [ 465.013240][ T54] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 465.659081][T10976] comedi comedi1: multiq3: a I/O base address must be specified [ 465.681957][T10976] FAT-fs (sr0): bogus number of reserved sectors [ 465.684811][T10976] FAT-fs (sr0): Can't find a valid FAT filesystem [ 467.238241][ T24] usb 46-1: device descriptor read/8, error -110 [ 467.322707][ T9991] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 467.326549][ T9991] Bluetooth: hci1: Injecting HCI hardware error event [ 467.359990][ T5753] Bluetooth: hci1: hardware error 0x00 [ 467.687366][ T24] usb usb46-port1: attempt power cycle [ 467.855023][T10989] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 467.857868][T10989] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 467.861564][T10989] vhci_hcd vhci_hcd.0: Device attached [ 468.269178][ T24] usb usb46-port1: unable to enumerate USB device [ 468.483249][ T54] usb 50-1: SetAddress Request (2) to port 0 [ 468.486863][ T54] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 468.571661][T10994] vhci_hcd: connection reset by peer [ 468.574524][ T46] vhci_hcd vhci_hcd.6: stop threads [ 468.577792][ T46] vhci_hcd vhci_hcd.6: release socket [ 468.580439][ T46] vhci_hcd vhci_hcd.6: disconnect device [ 469.470492][ T5753] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 469.838395][T11013] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 469.944804][T11012] lo speed is unknown, defaulting to 1000 [ 469.950233][T11012] lo speed is unknown, defaulting to 1000 [ 469.957276][T11012] lo speed is unknown, defaulting to 1000 [ 469.962679][T11012] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 469.967377][T11012] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 469.974150][T11012] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 469.981544][T11012] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 470.016684][T11012] lo speed is unknown, defaulting to 1000 [ 470.026546][T11012] lo speed is unknown, defaulting to 1000 [ 470.033081][T11012] lo speed is unknown, defaulting to 1000 [ 470.039696][T11012] lo speed is unknown, defaulting to 1000 [ 470.042432][T11012] lo speed is unknown, defaulting to 1000 [ 470.079549][T11015] kernel read not supported for file /Ÿë (pid: 11015 comm: syz.7.1266) [ 470.086677][ T40] audit: type=1800 audit(1777746096.084:587): pid=11015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1266" name=9FEB01 dev="mqueue" ino=36425 res=0 errno=0 [ 470.577788][T11025] fuse: Bad value for 'fd' [ 472.341514][T11043] comedi comedi1: multiq3: a I/O base address must be specified [ 472.355194][T11043] FAT-fs (sr0): bogus number of reserved sectors [ 472.358044][T11043] FAT-fs (sr0): Can't find a valid FAT filesystem [ 473.558669][T11051] lo speed is unknown, defaulting to 1000 [ 474.748437][ T54] usb 50-1: device descriptor read/8, error -110 [ 475.369071][ T54] usb usb50-port1: attempt power cycle [ 475.516266][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1278'. [ 475.528399][T11073] veth0_macvtap: left promiscuous mode [ 475.697372][ T40] audit: type=1326 audit(1777746101.694:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.4.1281" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x0 [ 475.990761][ T54] usb usb50-port1: unable to enumerate USB device [ 476.627659][T11099] input: syz0 as /devices/virtual/input/input29 [ 476.948215][T10562] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 477.128174][T10562] usb 9-1: Using ep0 maxpacket: 32 [ 477.137504][T10562] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 477.142194][T10562] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.147815][T10562] usb 9-1: config 0 descriptor?? [ 477.172703][T10562] as10x_usb: device has been detected [ 477.175656][T10562] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 477.239425][T11105] FAULT_INJECTION: forcing a failure. [ 477.239425][T11105] name failslab, interval 1, probability 0, space 0, times 0 [ 477.244004][T11105] CPU: 2 UID: 0 PID: 11105 Comm: syz.5.1287 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.244022][T11105] Tainted: [L]=SOFTLOCKUP [ 477.244026][T11105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 477.244033][T11105] Call Trace: [ 477.244059][T11105] [ 477.244064][T11105] dump_stack_lvl+0x100/0x190 [ 477.244171][T11105] should_fail_ex.cold+0x5/0xa [ 477.244209][T11105] should_failslab+0xc2/0x120 [ 477.244254][T11105] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 477.244267][T11105] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 477.244285][T11105] ? vfs_parse_fs_qstr+0x120/0x1c0 [ 477.244302][T11105] kmemdup_nul+0x49/0xd0 [ 477.244316][T11105] vfs_parse_fs_qstr+0x112/0x1c0 [ 477.244332][T11105] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 477.244348][T11105] ? rcu_is_watching+0x12/0xc0 [ 477.244376][T11105] ? __kmalloc_node_track_caller_noprof+0x321/0x850 [ 477.244389][T11105] ? v9fs_init_fs_context+0x17f/0x590 [ 477.244459][T11105] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 477.244474][T11105] vfs_parse_monolithic_sep+0x195/0x210 [ 477.244492][T11105] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 477.244507][T11105] ? v9fs_init_fs_context+0x439/0x590 [ 477.244526][T11105] ? alloc_fs_context+0x65a/0xf40 [ 477.244551][T11105] path_mount+0x77f/0x23d0 [ 477.244569][T11105] ? __pfx_path_mount+0x10/0x10 [ 477.244583][T11105] ? lockdep_hardirqs_on+0x78/0x100 [ 477.244654][T11105] ? putname+0xb1/0x110 [ 477.244668][T11105] ? kmem_cache_free+0x127/0x6c0 [ 477.244688][T11105] ? __ia32_sys_mount+0x292/0x310 [ 477.244703][T11105] __ia32_sys_mount+0x292/0x310 [ 477.244718][T11105] ? __pfx___ia32_sys_mount+0x10/0x10 [ 477.244733][T11105] ? ksys_write+0x1ac/0x250 [ 477.244746][T11105] ? rcu_is_watching+0x12/0xc0 [ 477.244761][T11105] __do_fast_syscall_32+0xe7/0x950 [ 477.244776][T11105] ? lockdep_hardirqs_on+0x78/0x100 [ 477.244790][T11105] do_fast_syscall_32+0x32/0x70 [ 477.244805][T11105] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 477.244820][T11105] RIP: 0023:0xf7fd4fcc [ 477.244830][T11105] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 477.244845][T11105] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 477.244858][T11105] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 477.244865][T11105] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000500 [ 477.244871][T11105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 477.244877][T11105] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 477.244883][T11105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 477.244897][T11105] [ 477.367016][T11082] ------------[ cut here ]------------ [ 477.369425][T11082] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 477.369438][T11082] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x94f/0x1b10, CPU#1: syz.4.1281/11082 [ 477.376289][T11082] Modules linked in: [ 477.377867][T11082] CPU: 1 UID: 0 PID: 11082 Comm: syz.4.1281 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.382461][T11082] Tainted: [L]=SOFTLOCKUP [ 477.384334][T11082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 477.388766][T11082] RIP: 0010:__mutex_lock+0x956/0x1b10 [ 477.391401][T11082] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 a8 10 00 00 44 8b 35 1d ea 4e 05 45 85 f6 75 13 48 8d 3d 21 08 52 05 48 c7 c6 c0 aa af 8b <67> 48 0f b9 3a 90 e9 10 f8 ff ff 4d 8d a7 e0 0a 00 00 4c 89 e7 e8 [ 477.399745][T11082] RSP: 0018:ffffc900064b7a30 EFLAGS: 00010246 [ 477.402478][T11082] RAX: 0000000000000003 RBX: ffff888075460b30 RCX: 1ffffffff21aff58 [ 477.405893][T11082] RDX: 0000000000000000 RSI: ffffffff8bafaac0 RDI: ffffffff90db18d0 [ 477.409397][T11082] RBP: ffffc900064b7ba0 R08: 0000000000000001 R09: 0000000000000000 [ 477.412767][T11082] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 477.416191][T11082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 477.418196][ T5744] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 477.419653][T11082] FS: 0000000000000000(0000) GS:ffff88809727d000(0063) knlGS:00000000f540cb40 [ 477.426661][T11082] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 477.429003][T11108] netlink: 'syz.5.1288': attribute type 4 has an invalid length. [ 477.429597][T11082] CR2: 000000002d407ff8 CR3: 0000000052292000 CR4: 0000000000352ef0 [ 477.435673][T11082] Call Trace: [ 477.436907][T11082] [ 477.438315][T11082] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 477.440751][T11082] ? __mutex_lock+0x26d/0x1b10 [ 477.442816][T11082] ? dmx_section_feed_start_filtering+0x56/0x660 [ 477.445458][T11082] ? find_held_lock+0x2b/0x80 [ 477.447527][T11082] ? __pfx___mutex_lock+0x10/0x10 [ 477.449795][T11082] ? __pfx___mutex_lock+0x10/0x10 [ 477.452006][T11082] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 477.454457][T11082] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 477.456911][T11082] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 477.459407][T11082] dmx_section_feed_start_filtering+0x3a8/0x660 [ 477.462026][T11082] dvb_dmxdev_filter_start+0x767/0xdd0 [ 477.464386][T11082] dvb_demux_do_ioctl+0xe64/0x1200 [ 477.466607][T11082] dvb_usercopy+0x167/0x340 [ 477.468702][T11082] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 477.471049][T11082] ? __pfx_dvb_usercopy+0x10/0x10 [ 477.473215][T11082] ? __fget_files+0x21f/0x3d0 [ 477.475251][T11082] dvb_demux_ioctl+0x29/0x40 [ 477.477294][T11082] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 477.479695][T11082] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 477.482060][T11082] __do_fast_syscall_32+0xe7/0x950 [ 477.484331][T11082] ? lockdep_hardirqs_on+0x78/0x100 [ 477.486625][T11082] do_fast_syscall_32+0x32/0x70 [ 477.488823][T11082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 477.491553][T11082] RIP: 0023:0xf703efcc [ 477.492954][T11082] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 477.501170][T11082] RSP: 002b:00000000f540c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 477.504780][T11082] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000403c6f2b [ 477.508260][T11082] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 477.511639][T11082] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 477.515079][T11082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.518591][T11082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 477.521994][T11082] [ 477.523347][T11082] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 477.526427][T11082] CPU: 1 UID: 0 PID: 11082 Comm: syz.4.1281 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.531116][T11082] Tainted: [L]=SOFTLOCKUP [ 477.532974][T11082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 477.537349][T11082] Call Trace: [ 477.538823][T11082] [ 477.540119][T11082] dump_stack_lvl+0x100/0x190 [ 477.542188][T11082] vpanic+0x552/0x970 [ 477.543945][T11082] ? __pfx_vpanic+0x10/0x10 [ 477.545938][T11082] ? lock_release+0x245/0x310 [ 477.548011][T11082] panic+0xd1/0xe0 [ 477.549628][T11082] ? __pfx_panic+0x10/0x10 [ 477.551590][T11082] check_panic_on_warn.cold+0x19/0x34 [ 477.553944][T11082] ? __mutex_lock+0x94f/0x1b10 [ 477.556043][T11082] __warn.cold+0x191/0x328 [ 477.558009][T11082] __report_bug+0x296/0x3d0 [ 477.559987][T11082] ? __mutex_lock+0x94f/0x1b10 [ 477.562097][T11082] ? __pfx___report_bug+0x10/0x10 [ 477.564242][T11082] ? rcu_is_watching+0x12/0xc0 [ 477.566343][T11082] ? is_bpf_text_address+0x8a/0x1a0 [ 477.568612][T11082] ? is_bpf_text_address+0x94/0x1a0 [ 477.570926][T11082] ? kernel_text_address+0x8d/0x100 [ 477.573202][T11082] ? __kernel_text_address+0xd/0x30 [ 477.575506][T11082] report_bug_entry+0xe1/0x290 [ 477.577584][T11082] ? __mutex_lock+0x956/0x1b10 [ 477.579720][T11082] handle_bug+0x1cd/0x2a0 [ 477.581637][T11082] exc_invalid_op+0x17/0x50 [ 477.583653][T11082] asm_exc_invalid_op+0x1a/0x20 [ 477.585801][T11082] RIP: 0010:__mutex_lock+0x956/0x1b10 [ 477.588127][T11082] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 a8 10 00 00 44 8b 35 1d ea 4e 05 45 85 f6 75 13 48 8d 3d 21 08 52 05 48 c7 c6 c0 aa af 8b <67> 48 0f b9 3a 90 e9 10 f8 ff ff 4d 8d a7 e0 0a 00 00 4c 89 e7 e8 [ 477.596310][T11082] RSP: 0018:ffffc900064b7a30 EFLAGS: 00010246 [ 477.598917][T11082] RAX: 0000000000000003 RBX: ffff888075460b30 RCX: 1ffffffff21aff58 [ 477.602188][T11082] RDX: 0000000000000000 RSI: ffffffff8bafaac0 RDI: ffffffff90db18d0 [ 477.604763][T11082] RBP: ffffc900064b7ba0 R08: 0000000000000001 R09: 0000000000000000 [ 477.607279][T11082] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 477.609818][T11082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 477.612395][T11082] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 477.614246][T11082] ? __mutex_lock+0x26d/0x1b10 [ 477.615809][T11082] ? dmx_section_feed_start_filtering+0x56/0x660 [ 477.617861][T11082] ? find_held_lock+0x2b/0x80 [ 477.619409][T11082] ? __pfx___mutex_lock+0x10/0x10 [ 477.621041][T11082] ? __pfx___mutex_lock+0x10/0x10 [ 477.622710][T11082] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 477.624530][T11082] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 477.626339][T11082] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 477.628123][T11082] dmx_section_feed_start_filtering+0x3a8/0x660 [ 477.630134][T11082] dvb_dmxdev_filter_start+0x767/0xdd0 [ 477.631905][T11082] dvb_demux_do_ioctl+0xe64/0x1200 [ 477.633554][T11082] dvb_usercopy+0x167/0x340 [ 477.635641][T11082] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 477.638240][T11082] ? __pfx_dvb_usercopy+0x10/0x10 [ 477.640467][T11082] ? __fget_files+0x21f/0x3d0 [ 477.642513][T11082] dvb_demux_ioctl+0x29/0x40 [ 477.644532][T11082] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 477.646812][T11082] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 477.649230][T11082] __do_fast_syscall_32+0xe7/0x950 [ 477.651510][T11082] ? lockdep_hardirqs_on+0x78/0x100 [ 477.653770][T11082] do_fast_syscall_32+0x32/0x70 [ 477.655932][T11082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 477.658642][T11082] RIP: 0023:0xf703efcc [ 477.660401][T11082] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 477.668615][T11082] RSP: 002b:00000000f540c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 477.672233][T11082] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000403c6f2b [ 477.675685][T11082] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 477.679092][T11082] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 477.682446][T11082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.685805][T11082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 477.689167][T11082] [ 477.691314][T11082] Kernel Offset: disabled [ 477.693179][T11082] Rebooting in 86400 seconds..