last executing test programs: 2m40.840178818s ago: executing program 1 (id=1111): socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000240)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5) syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) 2m39.839301884s ago: executing program 1 (id=1113): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='udf\x00', 0x1000000, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000440)) fstat(0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000) setxattr$security_evm(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=@md5={0x1, "7e9d0a134c44aee66374ebaaafca7d87"}, 0x11, 0x7) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'dvmrp1\x00', &(0x7f0000000100)=@ethtool_eee={0x44, 0xff, 0x400, 0x9, 0xa4, 0x40, 0x4, 0x6, [0x7, 0x7fffffff]}}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d}, 0x24}}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) socket$key(0xf, 0x3, 0x2) r4 = memfd_secret(0x0) getsockopt$inet_mreqn(r4, 0x0, 0x1c, &(0x7f0000000200)={@rand_addr, @multicast1}, 0x0) 2m37.634246768s ago: executing program 1 (id=1120): syz_open_dev$vim2m(0x0, 0x7, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x4008031, 0xffffffffffffffff, 0x9ec5b000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000002740)='net/igmp\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) openat$sw_sync(0xffffff9c, 0x0, 0x40001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x100, 0x100, 0x89, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs(0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, r2, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)={@cgroup=r2, r2, 0x2f, 0x10, 0x4, @void, @value=r2}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60efc70000042f0000000000000700f1ffffff0000000000ff02"], 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001780)={'syz1\x00', {0x2, 0x2, 0xf, 0x9}, 0x23, [0x23cc0000, 0x8, 0xd, 0x8, 0x51, 0xffff, 0x7, 0x40, 0x9, 0xe3, 0xffffffff, 0x7, 0x800, 0x81, 0x10000, 0x1, 0x8, 0xb, 0xf, 0x8, 0x8, 0x3, 0x7, 0xfffffff8, 0x5, 0x10, 0x2, 0x2, 0x9, 0xfffeffff, 0x3b4e, 0xc6, 0x6, 0x800, 0x8, 0x2, 0x2, 0x0, 0x0, 0x6, 0x8, 0x3, 0x10000, 0x0, 0x1, 0xfffffff8, 0x1, 0xa53, 0x0, 0x3, 0x7, 0x10000, 0x80000000, 0x1, 0x8, 0x3, 0xfffffffe, 0x8001, 0x9, 0x30, 0xa, 0x81], [0x6, 0xe27, 0x5, 0x9, 0x80000001, 0x6, 0x4, 0x9, 0xfffffffe, 0x4c0e, 0xb, 0x10000, 0x2, 0x4, 0x7, 0x1, 0x7, 0x1, 0x7b, 0x5, 0x80000001, 0x2, 0xf61, 0x6, 0x5, 0x9, 0x9, 0xffffffff, 0x35e6, 0x3, 0x3, 0x80, 0xfffffffe, 0x5, 0x5, 0x2, 0x6, 0x4, 0x5, 0x80000001, 0x5, 0x8, 0x8, 0x7, 0x9, 0x9, 0x4, 0x8, 0x5, 0x716d8768, 0x7fff, 0x4, 0x8, 0x1, 0x3, 0x25, 0x4, 0x5, 0x401, 0xee1, 0x3, 0xfff, 0x8, 0x5], [0x6, 0x1, 0x8, 0x61, 0xf, 0x18f7, 0x3, 0x2, 0x8, 0x9, 0x5, 0x1, 0x1, 0x0, 0x8, 0xfffffffb, 0x80, 0x7ec0, 0x1, 0x9, 0xca8, 0x0, 0xb0e, 0xb, 0x6, 0x5, 0xe000000, 0x0, 0x4, 0x5, 0xc, 0x8, 0x7, 0x9f, 0x6, 0x4, 0x5, 0xffffff01, 0x2, 0xfffffffa, 0x7473, 0x6, 0x80000001, 0x7, 0x5, 0x3, 0x2, 0xa49, 0x101, 0x0, 0x9, 0x0, 0x80, 0x1, 0x8, 0x4, 0x4, 0x6, 0x4, 0x3, 0x3, 0x8f, 0x6, 0x8], [0x6, 0x10000, 0x77, 0x5, 0xd, 0x1, 0x4, 0x0, 0x100, 0x6, 0x6, 0x8, 0x1000, 0x9, 0x5, 0x9, 0x9, 0x8a, 0x739, 0x903, 0xffffffff, 0x9, 0xd, 0x47, 0x5012, 0x8, 0x7ff, 0x9, 0x3c, 0x9, 0x1, 0x7, 0x800, 0x80000000, 0x6, 0xe, 0x7, 0x3, 0x8001, 0x3, 0x7, 0xab, 0xdce, 0x400, 0x1, 0x3, 0x0, 0x7, 0x0, 0xa, 0x2, 0xffffffff, 0xfff, 0x694, 0x3, 0x8, 0xea, 0x8, 0xfffffffb, 0x0, 0xff, 0xd7, 0x3, 0x5]}, 0x45c) getgroups(0x0, 0x0) fsopen(0x0, 0x0) 2m35.993995106s ago: executing program 1 (id=1128): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x4aec, 0x2}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f00000000c0)={0x3}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x1, 0x3, 0xfffffffd, {{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x0, 0x3b}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffd}, {0x0, 0x1}, 0x2, 0x800000}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x808) syz_usb_connect(0x1, 0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902440001000000000904000003ff016900052406"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'vlan0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x47, 0x57, 0x2, 0x4a56, 0x6, "f18ebf", 0xffff, [0x9, 0xffffffff, 0x0, 0x0, 0x6, 0x80]}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newlink={0x24, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, 0x4100}, [@IFLA_XDP={0x4}]}, 0x24}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0000000100000000000000000100000d0000000004000000040000000000000000000004040000000000000000000009030000000000000061"], 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x400000000010000}], 0x0) setsockopt$inet_int(r6, 0x0, 0x12, &(0x7f0000000140)=0x30, 0x4) truncate(&(0x7f0000000000)='./file0\x00', 0x9) 2m35.162043622s ago: executing program 1 (id=1132): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000022000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) (async) socket(0x1e, 0x4, 0x0) (async) unshare(0x28000400) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace(0x8, r3) (async) r4 = socket$inet(0x2, 0x80001, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040890}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01050000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, {0x8000, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x0, 0x100}}}}}}}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newneigh={0x28, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r7, 0x10}, [@NDA_DST_MAC={0xa, 0x1, @link_local}]}, 0x28}}, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r2, 0x20, &(0x7f0000000580)={&(0x7f0000000480)=""/19, 0x13, 0x0, &(0x7f00000004c0)=""/154, 0x9a}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4f}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x3ff, 0x9d, &(0x7f0000000380)=""/157, 0x40f00, 0x0, '\x00', r7, @fallback=0x5, r2, 0x8, &(0x7f00000001c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xd, 0x5, 0xe}, 0x10, r8, r2, 0x2, &(0x7f00000006c0)=[r2, r9], &(0x7f0000000700)=[{0x3, 0x1, 0x4, 0xa}, {0x0, 0x3, 0x10}], 0x10, 0x2, @void, @value}, 0x94) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000180)={0x9, 0x0, 0x800000}, 0xc) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) 2m34.517266887s ago: executing program 1 (id=1133): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xe, 0x1094c2) accept$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = socket(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0xea60}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) flock(0xffffffffffffffff, 0x5) r5 = dup3(0xffffffffffffffff, r4, 0x80000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(r5, 0x0, 0x2c) geteuid() poll(&(0x7f00000015c0)=[{0xffffffffffffffff, 0x4024}], 0x20000000000000e3, 0x10a) 2m19.204296559s ago: executing program 32 (id=1133): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xe, 0x1094c2) accept$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = socket(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0xea60}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) flock(0xffffffffffffffff, 0x5) r5 = dup3(0xffffffffffffffff, r4, 0x80000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(r5, 0x0, 0x2c) geteuid() poll(&(0x7f00000015c0)=[{0xffffffffffffffff, 0x4024}], 0x20000000000000e3, 0x10a) 9.893071111s ago: executing program 4 (id=1689): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e7522"], 0x24) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000380)=0x16) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1300000007"], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpgrp(r1) r7 = epoll_create1(0x0) fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x5, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 8.951006865s ago: executing program 4 (id=1692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x2a020400) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x4]}, 0x8, 0x0) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x20000003) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYRESOCT], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e90000000000000000000000000000080000000000000000000000c7c49f9bbd76b633d264ac6f75933de5bedec7807d31a9df07f4f041ffbd23c7201bc4815a09da00000000000000008790f91852aba9d541bf310eb3c2a9f653a1100ed79f63a3ba2035a831a4129950d20f5a2cdaf64cfd30807078027c4703bce624cfe764bdf2176b614100"/146], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f00000004c0)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x1, r4}, 0x38) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x5, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r8], 0x1}) 8.019477817s ago: executing program 4 (id=1693): syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x408002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() setpriority(0x0, r0, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x3, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'vxcan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1}, 0x24}}, 0x40044) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, 0x8) 6.103502212s ago: executing program 0 (id=1702): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc091, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x000W'], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) 5.891843928s ago: executing program 5 (id=1703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x21, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2085396d0102030109021b00010001000b0904c80201030102030905fb"], 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@func={0xb, 0x0, 0x0, 0xc, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x2}, {0x2, 0x1}, {0x5, 0x1}]}]}, {0x0, [0x0]}}, &(0x7f0000000240)=""/2, 0x4b, 0x2, 0x1, 0x7, 0x10000, @value}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) getpriority(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000031c0)=[{{&(0x7f00000003c0)=@hci, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000001d40)=""/147, 0x93}, {&(0x7f0000000580)=""/113, 0x71}, {&(0x7f0000000700)=""/101, 0x65}], 0x4, &(0x7f0000003380)=""/4104, 0x1008}, 0x7}, {{&(0x7f0000000800)=@caif, 0x80, &(0x7f0000001b40)=[{&(0x7f00000009c0)=""/101, 0x65}, {&(0x7f0000000940)=""/16, 0x10}, {&(0x7f0000001a80)=""/129, 0x81}], 0x3, &(0x7f0000001b80)=""/213, 0xd5}, 0x1ff}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001c80)=""/169, 0xa9}, {&(0x7f00000032c0)=""/181, 0xb5}, {&(0x7f0000001e00)=""/240, 0xf0}, {&(0x7f0000001f00)=""/176, 0xb0}], 0x4, &(0x7f0000002000)=""/199, 0xc7}}, {{&(0x7f0000002100)=@hci, 0x80, &(0x7f0000002180), 0x0, &(0x7f00000021c0)=""/4096, 0x1000}, 0x86}], 0x4, 0x10002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0xffffffff, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000640)='rxrpc_s\x00', 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x0, 0x8111) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES16=r10, @ANYBLOB="010b00000000000100000c00000008000300b112c48e80647eed7e1da7b1fda93c9e7b3817dbe2", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 5.715260836s ago: executing program 4 (id=1704): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0xebc}, 0x18) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ppoll(&(0x7f0000000000)=[{r1, 0x2003}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000480)={0x68000005}) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x400003, 0x4, 0x3) unshare(0x2c020400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x1d) lseek(0xffffffffffffffff, 0xe, 0x3) 5.608768651s ago: executing program 4 (id=1708): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10}}, './file0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000202020005000300000000000900010073797a3100000000050004"], 0x30}, 0x1, 0x40030000000000}, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x54, r2, 0x401, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x44001}, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r4, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) io_uring_setup(0x4d57, &(0x7f0000000200)={0x0, 0xcb9c, 0x8, 0x1, 0x143}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05", @ANYRES16=r5], 0x0) 4.818995513s ago: executing program 3 (id=1718): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22a42, 0x0) preadv(r0, &(0x7f0000000b00)=[{0x0}, {0x0}], 0x2, 0x1000, 0x3) 4.74299348s ago: executing program 3 (id=1719): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x10532, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='sched_switch\x00'}, 0x18) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/80, 0x50}], 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f00000002c0)={"6998b34b6dfc3aa9f5ca8bee5aa85d6ad9226161c27cdc904943e18cf2ca", 0x2, 0x80, 0x7f, [0x6, 0x7f, 0x5, 0x200000, 0x4, 0xe, 0x469e, 0xa, 0x94eb, 0x9, 0x7, 0xf, 0x1ff, 0x8, 0x8, 0xffff6288, 0x9, 0xfffffffe]}) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="020114600129184ad4a08058195c60140000002f0600ac141414e0ecff02808a8972bd0b72e41082b1a3d2061fd7fdfe4b88"], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c81, 0xffffffffffffffbb) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000040)="05000000010001", 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000980), 0xfdef) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x13, 0xd, "89753015418ab0df6afb245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b13ecab66c7d257a037d0f08e8ad896ba67a07696defa", "8b609009aaa722687f3f2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1b97448abe996b48956570128218a0d22915216fddb100", [0x9, 0x7]}) landlock_create_ruleset(&(0x7f0000000040)={0xc1, 0x0, 0x3}, 0x18, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 4.331550441s ago: executing program 0 (id=1720): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x13f}}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90043000}, 0xc, &(0x7f0000000080)={&(0x7f0000000940)=@newchain={0x5d98, 0x64, 0x9504cbd926f688f7, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff2, 0xfff1}, {0x2, 0x97a0ea595977d55a}, {0x1, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x3330, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_ACT={0x331c, 0x2, [@m_ct={0x18c, 0x8, 0x0, 0x0, {{0x7}, {0x88, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000000, 0x5, 0x3, 0x3, 0x3}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "a3885c8b7ccd6d75d76555e668d31e85"}, @TCA_CT_ACTION={0x6, 0x3, 0x22}, @TCA_CT_LABELS_MASK={0x14, 0x8, "2846455495165245d767bcce6c1d3a93"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_PARMS={0x18, 0x1, {0x9, 0x5, 0x4, 0x1, 0x9}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010102}]}, {0xdd, 0x6, "f276c8faaac320b76236ff6e5c1c467c03c28e994755354a8aac51116d7590360f79de890f0016c1dd09afb87d3b1197ff8ae74e0e8a0eae4bcbab8347a189255e19d72c3663d55f8cea8f78632281c8d919aca88864f9c7b95c5aafacac252b86c9487c849b37a3e55be4de0c88c6879088e2afa4dda1990223256f3bd594b00e69be5146dcfc53a6851ad7461d49e54f58631d6275ff4ea6ee7f11a3444589c48ae9b75a46891c350659717f5ba50f6266e89206aeca3c22134093df5fc907f900523c335ad28d3bf9a2d01c1a9a45704a2abed9b5536b76"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x138, 0x1a, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8000, 0xffffffffffffffff, 0x81, 0x9}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6d61, 0x3, 0x200, 0x1000}, 0x56}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xe, 0x10000000, 0x7, 0xffffff8e}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x5, 0x2, 0xfffff329}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x8, 0x6, 0x40, 0x7}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xffffffff, 0x1, 0x4d7a, 0x2}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x122, 0xffffffffffffffff, 0x5, 0x40}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x10000000, 0x9, 0x2}, 0x8}}]}, {0x2a, 0x6, "5da3dc5ed897dfd20ee57db050d13eae4c40bd2d36743bc97f29e141f3fce28317450fb75b4e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x3054, 0x1a, 0x0, 0x0, {{0xa}, {0x2028, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xc8, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x52f3288e4036fb3e}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_KEYS_EX={0x170, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_KEYS_EX={0x13c, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x21869bfad8b69832}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xd26bab409c2e9df8}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0xacd, 0x85a, 0x3, 0x3ff, 0x8}, 0x40, 0x5, [{0x7, 0x9, 0x7, 0x8, 0x80000000, 0x5ac3}, {0x81, 0x5, 0x0, 0xfff, 0x8, 0xfffffffb}]}, [{0x0, 0x1, 0x6dd5, 0x1, 0x8000, 0xffff7fff}, {0x2e863e4a, 0x2, 0x1, 0x5, 0x0, 0x7}, {0x6, 0x5, 0x544, 0x8, 0x4, 0x1}, {0x401, 0x80000001, 0x81, 0x4, 0xce6, 0xc}, {0x10000, 0xfffffff8, 0x0, 0x5, 0xc8f, 0x101}, {0x10, 0x0, 0x8, 0x6, 0x63b, 0xb}, {0x2, 0x1, 0x9, 0x9, 0x2000000, 0x3}, {0xfffffff7, 0x18d2, 0x40, 0x7, 0x1c42, 0xffff}, {0xf, 0xa, 0x1, 0x40, 0x40, 0xfffffff7}, {0x3, 0x7, 0x2, 0x0, 0x4, 0x7}, {0x40, 0x4, 0x6, 0x4, 0x5, 0x80000001}, {0x8, 0x5bb, 0x100, 0x1, 0xffff, 0x3}, {0x7, 0x8, 0x8, 0x6, 0x985b9882, 0x40}, {0xffff0637, 0x4, 0xae, 0x5, 0x8, 0xb4}, {0x7, 0xfffff5dd, 0x101, 0xfffffff8, 0x4, 0x4}, {0x4, 0x1, 0x46, 0x1, 0x6, 0x3}, {0x7, 0x80000001, 0x5ec5, 0xfffffffa, 0x7fff, 0x1}, {0x49, 0x1c02a, 0x3, 0x3ff, 0x8, 0x8}, {0x6, 0xff, 0x3800, 0x4, 0xfffffffa, 0xfffffffa}, {0x2, 0x6, 0x311db49, 0x9, 0x9, 0x4}, {0x5, 0x100, 0x8000, 0x6, 0x10000, 0x5e}, {0x1000, 0x0, 0x5, 0x6, 0x2a, 0x8}, {0x745, 0x8, 0x9, 0xff, 0x0, 0xd}, {0x2, 0x3532, 0xbf, 0x6, 0xd6, 0x8000}, {0x101, 0x0, 0x1e6, 0x2, 0x2, 0x7fff}, {0x3, 0x1ff, 0x0, 0x8, 0x90ea, 0x5}, {0x9, 0x100, 0xffffffff, 0x5, 0x200}, {0xb, 0x7fffffff, 0x7fff, 0xe91, 0x80000001, 0xc79}, {0x8, 0x3, 0x35f, 0x3dc1, 0x8, 0x1}, {0x3, 0x401, 0x7, 0x2, 0xd, 0x7}, {0x5, 0x5, 0x4, 0x6, 0x5, 0xf0}, {0x6, 0x8, 0xc98, 0x7, 0x6, 0x1}, {0x5, 0x200, 0x8000, 0x4, 0x6, 0x6}, {0x8, 0x100, 0x4, 0x3, 0x9, 0x80000001}, {0x18, 0x400, 0x1, 0x3, 0x7fff, 0xfffffff0}, {0x0, 0x4, 0x5, 0xfffffc00, 0x1, 0x2}, {0x3, 0x5, 0x89, 0xfffffff8, 0xa2f, 0x7}, {0x3, 0x59, 0x7, 0x8, 0x0, 0x3}, {0x8001, 0x966d, 0xfff, 0x9, 0xc0}, {0x0, 0x49d, 0xffffffff, 0xffffff81, 0xca}, {0x8000, 0x4, 0x3, 0x81, 0x1, 0x1}, {0x9, 0x4, 0x6, 0x8, 0x4}, {0xc, 0x3, 0x1, 0xfffffffd, 0x401, 0x101}, {0x2, 0x5, 0x7fffffff, 0x2000000, 0x101, 0x400}, {0xc, 0x9, 0x6, 0x9, 0x5, 0x6}, {0xfffffff0, 0x200, 0x80000001, 0xc, 0x1, 0x7}, {0x9, 0x3, 0x0, 0x2, 0x7, 0x2}, {0x8000, 0x1c, 0x6, 0xd6, 0xf7, 0x1}, {0x3, 0x10001, 0x6, 0x9, 0x7fffffff}, {0x6, 0x1, 0xb, 0x8, 0x9, 0x54}, {0x5, 0xfffffffa, 0x1, 0x8d3b, 0x0, 0x5}, {0x1ff, 0x7fff, 0x7fffffff, 0x1, 0x1ff}, {0x3, 0x0, 0x0, 0x3ff, 0x16b, 0x8001}, {0x6bd101cc, 0x6f, 0x8abd, 0x0, 0x0, 0x3}, {0x7, 0x3a7, 0x4, 0x6, 0x80000000, 0x2}, {0x2, 0x2, 0x80, 0x7fff, 0x81, 0x8001}, {0x9, 0x16eb, 0x9, 0xffffffff, 0x7, 0x43}, {0x8, 0xf2, 0x7f, 0x200, 0x6, 0x2000000}, {0x43, 0x0, 0x1ff, 0x7, 0x10000, 0x67}, {0x9, 0x5, 0x1, 0xfff, 0xe44e, 0x27ed}, {0x8, 0x1, 0x800, 0x7, 0x955, 0x5}, {0xc, 0x8, 0x3, 0x4, 0x0, 0x4}, {0x5, 0x4, 0xcad5, 0xffffffff, 0x3, 0xfffffff8}, {0x1, 0x9, 0x2, 0xf, 0x1, 0x80000000}, {0x1, 0x6, 0x7fffffff, 0x1000, 0x9a91, 0x5}, {0x9, 0x4, 0x81, 0x8000, 0x4e358623, 0x1000}, {0x4, 0x0, 0xa, 0x9, 0x6, 0xb9}, {0x64000000, 0x1, 0x5d, 0x10, 0x4, 0x8}, {0xa0000000, 0x7fffffff, 0x2, 0x40, 0x7}, {0x80000, 0x6, 0x6, 0x2, 0x40, 0x7}, {0x2, 0x4ea, 0x5, 0x1206, 0x6, 0x88d}, {0x8, 0xd3bf, 0x6, 0x4, 0xa}, {0x0, 0x0, 0x2, 0x3ff, 0x8, 0x7}, {0x400, 0x10, 0x3, 0xffffffff, 0xfffffffd, 0x80}, {0x5, 0xcd5c, 0x7, 0x275, 0x8d19, 0x100}, {0x2, 0xc, 0x5, 0x1, 0x1000}, {0x6, 0x7, 0x9, 0x2, 0xfffffffc}, {0x296, 0x7fff, 0x6, 0x8, 0x3, 0x7}, {0x9, 0x8, 0x958, 0x10, 0x6, 0xff}, {0x8, 0x0, 0x5, 0xf, 0x1, 0x8}, {0x3, 0x0, 0x9, 0x0, 0x5, 0x40}, {0x7ff, 0x401, 0x80, 0x9, 0x7, 0xb}, {0x4, 0x9, 0x4, 0x1, 0x68, 0x7ff}, {0x6, 0xfff, 0x6, 0xf5c, 0x800, 0x6}, {0x492, 0x0, 0x400, 0x9, 0x7, 0xcce7}, {0x1, 0x5, 0x9, 0x2, 0xd9e, 0x10000}, {0x3379a377, 0xd, 0x8, 0x2, 0x6, 0x4}, {0x2, 0x4, 0x9d99099, 0xf, 0x2b, 0x5}, {0x7, 0x307d, 0x5a740e88, 0x2, 0x3, 0xfffffffb}, {0x4, 0x5, 0x6, 0x944, 0x9}, {0x800, 0x5, 0x1, 0x9, 0x9, 0x6}, {0x1, 0x7ff, 0x9, 0x2, 0x8}, {0x1ff, 0x7ff, 0x400, 0x101, 0xb9cc0000, 0x4}, {0x101, 0x7, 0x18, 0xf27, 0x4, 0x2}, {0x607, 0x1, 0x7, 0x0, 0x7f, 0x4}, {0xfffffff7, 0x800, 0xd8fb, 0x1ff, 0x0, 0x8}, {0xa92c, 0x9, 0x0, 0x0, 0xc, 0x31d9}, {0xfffffffa, 0x8000, 0xb, 0x7ff, 0x1, 0xd9}, {0x2, 0x4, 0x80, 0x2, 0xef8e, 0x28000000}, {0x401, 0xfffffff9, 0x0, 0x10000, 0xffffffff, 0x3}, {0x5, 0x8, 0x0, 0x8, 0xc, 0x83400000}, {0x80, 0xffffff81, 0x2, 0x9, 0x1, 0x400}, {0xfb, 0x10001, 0x7c, 0x7fff, 0x3, 0x9}, {0xa, 0x5, 0x6, 0x81, 0x664, 0x7fff}, {0x1, 0x32, 0xe, 0x5, 0x10000}, {0xec7, 0xc, 0x3ff, 0x1, 0x3b0e8b65, 0x8001}, {0x4f, 0xff, 0x7ff, 0x3, 0x4, 0x7}, {0x3, 0x40000000, 0x4, 0x80000000, 0x4, 0x7}, {0x3, 0x9, 0x800, 0x9, 0x3, 0x9}, {0x8, 0x1000, 0x7, 0xffff, 0x8, 0x2}, {0x4f3, 0xff, 0x3, 0x1, 0x6, 0x8}, {0x1, 0x3ff, 0x2, 0x3, 0x7, 0x1a000}, {0x4, 0xfffffc00, 0x6, 0x10, 0x7, 0xf}, {0x2, 0x6, 0x3, 0x1, 0x2, 0xfffffffc}, {0x3, 0x2, 0x8001, 0x0, 0x6, 0x5}, {0x1, 0x6, 0x1, 0x4f, 0x0, 0x7a56}, {0x8, 0x8, 0x2, 0x5, 0x8, 0x9}, {0xffff, 0x80, 0x1, 0x2, 0x2, 0x3380}, {0x892e, 0x8, 0x8, 0xffff, 0xf7, 0x9}, {0xd, 0xf, 0x1570, 0xda, 0x6, 0xaa1}, {0x71, 0x5a9f, 0x100, 0x1, 0x7, 0x3}, {0x5, 0x4, 0x8, 0x6, 0x0, 0x3}, {0x7fff, 0x2, 0x4, 0x4, 0x3, 0x5}, {0x1, 0xca, 0x1ff, 0xf, 0x12d, 0x7}, {0x0, 0x7ff, 0x5, 0x6, 0x18000000, 0xf}, {0x4e, 0x1, 0xffffb829, 0x0, 0xfffffffc, 0x6}, {0x9ad0, 0x7, 0x4, 0x6, 0x222b, 0x9}, {0x0, 0xa, 0x6, 0x9, 0xf, 0x80000000}], [{0x2}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x2}, {0x5}, {0x4, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x2}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x4}, {0x1}, {0x5, 0x1}, {0x2}, {0x1e4a5b516b314d0d}, {0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x6, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x8}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x6, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x2}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x800, 0x9, 0x1, 0x8000, 0x2}, 0x5, 0xb, [{0xe, 0x9, 0xf, 0x59, 0x0, 0x105c}]}, [{0x9, 0x4, 0x2, 0x3, 0x4, 0x2}, {0x3, 0x9, 0x6, 0xfff, 0x81, 0x7}, {0x7, 0x80000001, 0x6, 0x876, 0x9, 0x8}, {0x83a, 0xee2, 0x0, 0x1, 0x9, 0xfffff3a2}, {0x1c0000, 0x3, 0x19, 0x89, 0xffffffff, 0x1000}, {0x800, 0x7fff, 0x6, 0x3, 0x800, 0x3}, {0x1, 0x4, 0x2, 0x4, 0x5, 0x9}, {0x496a, 0x8000, 0x3, 0x3, 0x0, 0xa}, {0xd59, 0x2a, 0x9, 0x8, 0x0, 0x173}, {0x80000001, 0x1, 0x7, 0x9, 0xffffffff, 0x2}, {0x80000001, 0x3, 0x1, 0xff, 0x2, 0xfffffffb}, {0x2, 0x1, 0x5d14, 0xe6, 0x4b, 0x3}, {0x1ff, 0x3, 0xd, 0xfffffff8, 0x6, 0x1}, {0x6, 0x8, 0x6, 0xa, 0x40, 0xeb0}, {0x2, 0x5, 0x5, 0x400, 0xffffff8c, 0x2}, {0x3, 0x5, 0xc, 0x0, 0x5, 0x2}, {0x80000001, 0x0, 0x5, 0x9, 0x9, 0x7}, {0x1, 0x8, 0x81, 0x2, 0x800, 0x2}, {0x0, 0x8, 0xfffffffd, 0x0, 0x585, 0xb5}, {0x10001, 0x5, 0x3, 0x0, 0x7, 0x2}, {0x4, 0x4, 0x100, 0x1ff, 0x4, 0x2}, {0x1, 0x0, 0xfffffff0, 0x23ff, 0x0, 0x8}, {0x23, 0x0, 0x100, 0x101, 0x400, 0x9}, {0x0, 0x9, 0x40000, 0x1, 0x81, 0x1}, {0x800f, 0x2, 0x0, 0x80, 0x8, 0x401}, {0x63fa39a2, 0xb, 0x7ff, 0x5, 0x8, 0x6}, {0x100, 0x4, 0xff, 0x40, 0x1, 0xfffffff1}, {0x0, 0xffffff9b, 0x6, 0x9, 0x3, 0x7}, {0x9c, 0x81, 0x9, 0x1, 0xf389, 0xffffffff}, {0x10001, 0x9, 0x55a2, 0x1, 0x8424, 0x3}, {0x3, 0x6, 0xffffffff, 0xcde1, 0x4, 0x6a6}, {0x0, 0x2, 0x4, 0x7f, 0x0, 0x7}, {0x6, 0x9, 0x401, 0x4, 0x8000, 0xe13}, {0xb5, 0x2b, 0x8558, 0xd, 0x7, 0x6e}, {0x3, 0x263c99ea, 0x6, 0x8cbe, 0x3, 0x8}, {0x1, 0x1, 0x8, 0x5, 0x7fff, 0xfffff68e}, {0xffffffff, 0x101, 0x3ff, 0x2, 0x2, 0x800}, {0x7, 0xffffffff, 0x4, 0x0, 0x10000, 0xe}, {0x0, 0x80000001, 0xff, 0x557, 0x2, 0x80000000}, {0x9, 0x5, 0x1, 0x6, 0x7, 0xa}, {0x5, 0x7, 0xffffffff, 0xd5, 0xffff, 0x284000}, {0x3ee, 0x9, 0x8, 0xff, 0xffffffff, 0xfffffff8}, {0x50ebfe1a, 0x80, 0x9, 0xae77, 0x9, 0x2}, {0x9, 0x0, 0x2, 0x1, 0x3, 0x5}, {0x0, 0x0, 0x200, 0xffffff01, 0x9, 0x1}, {0x10001, 0x4, 0x7, 0x10000, 0x1, 0x6}, {0x7fff, 0x3, 0x3ff, 0x7, 0xa, 0x3}, {0x2, 0x0, 0x2, 0x5, 0x6, 0x7}, {0x4, 0x54, 0x2, 0x2, 0x0, 0x3}, {0x4, 0xfa, 0x33, 0x1, 0x1, 0x2}, {0x1f1f, 0x401, 0x1000, 0x8, 0x9, 0x9}, {0x2, 0x7, 0x8ec, 0x9, 0xffff, 0x7}, {0x2, 0xa3600000, 0x9, 0xa, 0xf73, 0x80}, {0xfc6, 0x6, 0x9, 0xc5bb, 0x34, 0xa}, {0x0, 0xb1b, 0x8, 0x0, 0x4, 0x1ff}, {0x4, 0xd, 0x1, 0x4, 0x2, 0x5}, {0x78, 0x8001, 0x5, 0x101, 0x0, 0x40000000}, {0x6, 0x4, 0x800, 0xc3, 0x1, 0xf6}, {0x763b13de, 0xf048, 0x1, 0x9, 0xfffffe01, 0x3}, {0x3ff, 0x4, 0x8001, 0x1ff, 0x4, 0x675a}, {0xe2, 0x1, 0x7, 0x200, 0x4, 0x2}, {0x401, 0x6, 0xfffffff7, 0x2, 0xfffffff7, 0x2}, {0x8, 0x8, 0x7ff, 0x16e7, 0x7, 0xff}, {0x4dcf, 0x100, 0x6, 0x3, 0x7ae, 0x81}, {0x7f, 0x9, 0x2, 0x10001, 0x5, 0x7}, {0x2, 0x5, 0xde5d, 0x7, 0x4, 0x6}, {0xa, 0x1, 0x4, 0xa51, 0x8, 0x9}, {0x34, 0x1, 0x5, 0x7, 0x3, 0x8}, {0x9, 0x5, 0x9, 0x7, 0x10000, 0xfffffff1}, {0xb68, 0x9, 0x2, 0xbef, 0x6, 0x3}, {0x6, 0x3, 0xff, 0xfffffffe, 0x9875}, {0xa, 0x9, 0x2, 0xfc0, 0xd, 0x5}, {0x0, 0x6, 0x6, 0x3a4, 0x91b2, 0x6}, {0x7, 0x9, 0xa5, 0x800, 0x3, 0xec}, {0x7, 0x4, 0xfffffffb, 0x3ff, 0x2, 0x29}, {0x3, 0x0, 0x24bf, 0x4, 0x9, 0x5}, {0x7fb, 0x74b083f0, 0xb, 0x8e4, 0x2}, {0x4, 0x3, 0xfff, 0xffff, 0x7f, 0x9}, {0x0, 0x89, 0x4, 0x7, 0xf, 0x10}, {0xfffffff7, 0xffffff2b, 0x8, 0xfffffff8, 0x7, 0xffff8000}, {0x6, 0x8001, 0x9, 0x4, 0x4, 0x5}, {0x8000, 0x0, 0x9, 0xfffffff8, 0x5, 0x2}, {0xa04, 0xfff, 0xfffffff8, 0x3, 0xa, 0x1}, {0xf14, 0x7, 0x6b2, 0xc2, 0x3, 0x8}, {0xb, 0x4, 0x0, 0xfffffffa, 0x177bb4e0, 0x7}, {0x9, 0x9fe, 0x8, 0xc71, 0x5, 0x7}, {0xa187, 0x30, 0x6, 0x1, 0x6, 0xfffffff8}, {0x9, 0x8, 0xfffffffb, 0x7fff, 0x7, 0x3}, {0xfad, 0x6, 0x40, 0x101, 0x1ff, 0x7}, {0x6795, 0xa9000000, 0x7f0fef59, 0x5, 0x1, 0x1}, {0x9, 0x6, 0xfffffffe, 0x7, 0xfffff8df, 0x9}, {0x7, 0x3, 0xf92f, 0x5, 0xfff, 0x6}, {0x5, 0x2, 0x84, 0x3, 0x4, 0x3}, {0x2, 0x8, 0x1d78, 0xd55, 0x6, 0xffffffff}, {0x0, 0xfffffffa, 0x6, 0x900, 0x5, 0x5b9}, {0x7, 0x401, 0x0, 0x8, 0xfffff4d1, 0x1c56}, {0x9, 0x481, 0xfffffff8, 0xfffeffff, 0xf8, 0x9}, {0x4, 0x80000, 0x77d, 0x8, 0x2, 0xb6f}, {0x0, 0x4, 0x7, 0x1, 0x2, 0x7}, {0x9, 0x80, 0xec55, 0x7888, 0xc, 0xb}, {0x9, 0x40, 0x3, 0x3, 0x6d44}, {0x0, 0x3af6, 0x2, 0xb4, 0x800}, {0x0, 0x0, 0x2, 0x80000000, 0x9, 0x6}, {0x6, 0x2, 0xec0, 0x7, 0x5, 0x1}, {0xf22, 0x4, 0x6f6da604, 0x0, 0x9, 0x9}, {0x0, 0x7ff, 0xfb, 0x4, 0x5, 0x200}, {0x6, 0xba46, 0x2, 0x9, 0x9, 0x5}, {0x5, 0xfff, 0x8, 0x6, 0x5, 0x7}, {0x1, 0x3791e700, 0x5, 0x200, 0xfff}, {0x8, 0x3, 0xc, 0xc046, 0xffff, 0x5}, {0xfffffff2, 0x5, 0x7, 0x5, 0x0, 0x9}, {0x1, 0x3, 0x3, 0xff, 0x5, 0x7fffffff}, {0xa6c, 0x200, 0x6995, 0x400, 0x7fffffff, 0x80000000}, {0x3ff, 0x0, 0xd, 0x7, 0x8, 0x9}, {0xfffffffe, 0xffff, 0x6, 0x8, 0x0, 0x5b7}, {0xb7, 0x10001, 0x7f, 0xfffffffd, 0x7fffffff, 0x5}, {0x69, 0x4, 0xbcca, 0x3e, 0x0, 0xe}, {0x3, 0x7, 0x4, 0x9, 0x1ff, 0xd}, {0x41d5, 0x1, 0x40, 0x1, 0x5, 0x5}, {0x1ff, 0x10001, 0x10000, 0x200, 0x8, 0x65}, {0x5, 0x67, 0x6, 0x3ff, 0x8, 0x5}, {0x0, 0x0, 0xff, 0x7, 0x8}, {0x5, 0x0, 0x5, 0x7, 0x1, 0x5}, {0x6, 0xffff4346, 0x1, 0x8850, 0x2, 0x1}, {0x9, 0x6, 0x7, 0xc0000000, 0x3, 0x6}, {0x5, 0x7ff, 0xffffffff, 0xffff, 0x4, 0x5}, {0x6, 0xfffffff7, 0x7, 0xe13, 0x8a3c, 0x81c}, {0x5, 0x7fff, 0xffff, 0x101, 0x5, 0xb}], [{0x0, 0x1}, {}, {0x1}, {0x5}, {0x2, 0x25e0cc7ecd612f98}, {}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x4, 0x2}, {0x1, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {}, {}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x16297e0acfa2d2d1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x3, 0xed56a621b37a24ba}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x5, 0x1ed4e5997b8e6dc3}, {0x3, 0xb7895b2e58ac7700}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x3}, {0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {}, {0x3}, {0x4}], 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0xb5edcadfcf0e5a36}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x430, 0x2, [@TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe0000000, 0x6, 0x9, 0xffffffd0, 0x4, 0x4a23, 0x122, 0x4, 0x80, 0x0, 0x4, 0x7f, 0x3ff, 0x4, 0x5, 0x1, 0x9, 0xb70, 0x116b, 0x4, 0x7, 0x4, 0x7, 0x35, 0x8f8, 0xd12, 0x34, 0x63c0, 0x9, 0xffff, 0x3, 0x1, 0x4, 0x23d, 0x2, 0x9, 0x4, 0x3, 0x0, 0x80000001, 0xd134, 0x3, 0x1, 0xe51, 0x7, 0x8000, 0x9, 0x7f, 0x81, 0x6, 0x8, 0x3, 0x1, 0x3, 0x497, 0x1000, 0x3, 0x9, 0x6, 0xe234, 0x6ea, 0xfffffffa, 0x1, 0x2, 0x20000, 0x10000, 0x7ff, 0xfff, 0x7, 0xe744, 0x2, 0x7ff, 0xde9, 0x7, 0x3, 0xa, 0x9, 0x42, 0x0, 0x2, 0x8496, 0x5, 0x400, 0xc, 0x7, 0xdb, 0x6, 0x3ff, 0x5, 0x9, 0x8732, 0x89, 0x2a41, 0x3, 0x7, 0x3, 0x5, 0x10, 0x6, 0x7fff, 0x9, 0x80000001, 0x2, 0x9, 0x6, 0x7ff, 0x1, 0x8, 0x3, 0x3, 0x8, 0x1, 0x401, 0xfffffffe, 0xfffffff7, 0x7ff9, 0x7f, 0x6, 0x7fff, 0xa8, 0x4, 0x606a62e0, 0x10000, 0x7, 0x0, 0x8, 0xd34, 0x8, 0x240000, 0x5, 0x5, 0x8, 0x2, 0x6, 0x6, 0x9, 0x5, 0xfffffff0, 0x62d4, 0x4, 0x1, 0xd11, 0x6a007366, 0x8, 0xfffffffb, 0x2, 0x2, 0x8, 0x4, 0x3ff, 0x7, 0x6d2, 0x3, 0x9, 0x1, 0x3, 0x4, 0x7, 0x7, 0x4, 0x7f, 0x9, 0x3, 0x8, 0xea4, 0x9, 0x76a, 0x3, 0x2, 0xffffffff, 0xb, 0x41c13869, 0x5, 0x1f3, 0xffffffff, 0x80000000, 0x3ff, 0x1, 0x8000, 0x1ead, 0x401, 0xc24b, 0x8, 0x3, 0x6, 0x3, 0x8, 0x9, 0x8, 0xa, 0xfffffff9, 0xdd, 0xfffffff8, 0x1000, 0x8, 0xc, 0x3, 0x9, 0x1, 0x7, 0x3, 0x0, 0x7, 0x2, 0x2, 0x7, 0x6, 0x2, 0x5, 0x571, 0xfffffffb, 0x6, 0x9, 0x5, 0x0, 0x2, 0x10000, 0x92, 0x0, 0x7, 0x80f, 0x81, 0x5, 0x9, 0x4, 0x7fff, 0x9b, 0x7, 0x1, 0x1, 0x1, 0x7d4, 0xa, 0x6, 0x9, 0x3, 0xc4, 0x9, 0x3, 0x5, 0x1, 0x8, 0xb7e9, 0x3, 0x7, 0x80000001, 0x2, 0x2, 0x9, 0x7fffffff, 0xae, 0x401, 0x2, 0x1, 0xffffff3b, 0x7fff]}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x6, 0x8}}, @TCA_U32_INDEV={0x14, 0x8, 'wg1\x00'}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010102}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xff}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x1}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @rand_addr=0x64010100}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x3}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @remote}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x0, 0x67}}, @filter_kind_options=@f_basic={{0xa}, {0x258c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x839179e4819c190, 0xfff2}}, @TCA_BASIC_ACT={0x238, 0x3, [@m_xt={0xc8, 0x1d, 0x0, 0x0, {{0x7}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5a}, @TCA_IPT_HOOK={0x8, 0x2, 0x6}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x27ee0770}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x7fffffff}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x26, 0x6, "c54f4c7222355ff0158792bf06b938845e778296bdd1d9e5f17085a3486de85613ca"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x16c, 0x2, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="f88a41d7e65e"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1000, 0xffffffff, 0x20000000, 0xffffffff, 0xd98}, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0xfffffff8, 0x20000000, 0x80, 0x5}, 0x4}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x90e, 0xd, 0x1, 0x7fff, 0x8}, 0x2}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xff, 0x2, 0x8, 0x9, 0x5}, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x100, 0x8, 0x0, 0x8, 0x8}, 0xf}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x81}]}, {0x5f, 0x6, "dc2ddbf0bc04d03973c3314695f844292715bd066f6a41d2c8f011f484ea3d95f1980045485c16a35c223dc9777d4ef2af02f40c9f60bf9c0e9ac5490ea1e230a180cdea7e37dec6562aa77e1639e4151aef423134ca5a864c79cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BASIC_POLICE={0x424, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x370c}, @TCA_POLICE_RATE={0x404, 0x2, [0xc87, 0x1000, 0x1c0000, 0x8, 0x0, 0x7, 0x5, 0xffff658e, 0x5, 0x25, 0x9, 0xff, 0x6, 0x1, 0x380000, 0x4a, 0x2, 0xd, 0x0, 0x9, 0x5, 0x2, 0xfff, 0x1000, 0x4, 0x6, 0x7, 0x2, 0x2a, 0x272, 0x5, 0x8, 0xa8, 0xffff51fc, 0x0, 0xfffffffc, 0x4, 0x6, 0x0, 0x9, 0xbd4, 0x7, 0x1, 0x9, 0x9, 0x2, 0x5, 0x6, 0xfffffeff, 0x9, 0x2, 0x7, 0x5, 0x4, 0x7ff, 0x7, 0x79f, 0x20000, 0xc1, 0x5, 0x6, 0x13d, 0x3, 0x101, 0x5, 0x80, 0xd59a, 0x7, 0x1, 0x6, 0x7, 0x7, 0x1, 0x6, 0x6, 0x9, 0x0, 0xf8, 0x1, 0xffffffff, 0xffffffa8, 0x4, 0xd, 0x8, 0x1, 0x3, 0x5e, 0x41ee21c4, 0x1, 0x1ffc000, 0x9754, 0x0, 0x7f4b5411, 0x4, 0x8, 0x9, 0x7fffffff, 0x7ff, 0x4, 0x57a, 0x2, 0xfffffffc, 0x5, 0x125d48f, 0x4, 0x63d, 0x2cd8, 0xffff, 0x3b35b7e5, 0x80, 0x5, 0x10, 0x51d, 0xa, 0x7fffffff, 0x9, 0x8, 0x7, 0x3, 0xb2, 0x2, 0x4c98, 0x6, 0x77d, 0x1, 0x100, 0x2, 0x8, 0x3, 0x1, 0xd09, 0x1, 0x4, 0x9, 0x8054, 0x7, 0x4, 0x448, 0x2, 0xb0a, 0x84b7, 0x10001, 0x200, 0x100, 0x6, 0x6, 0x9, 0x3, 0x3, 0x22d3, 0x2, 0x4, 0x8cb5, 0x40, 0x58, 0xe, 0x8001, 0x80, 0xe339, 0x0, 0x7, 0x8, 0x7, 0x8, 0x3, 0x4, 0x7fffffff, 0xfffffc00, 0xa, 0x2, 0x4, 0xff, 0x0, 0x3ff, 0x3, 0x2, 0x4, 0x7, 0x53d5, 0x5618b023, 0xed5, 0x2, 0xc2b, 0xf, 0x9, 0x80000001, 0x4, 0x80, 0x80, 0x4, 0x4, 0x255, 0xfffff47d, 0x2, 0x7, 0xd37, 0x2, 0xe, 0x7fffffff, 0xffff1679, 0x7, 0x56b, 0x500, 0x7ff, 0x3ff, 0x400, 0x3, 0x400, 0x2, 0x400, 0xffffa9a5, 0x100, 0xc2, 0x8, 0x3, 0xffffffff, 0xd08, 0x10000000, 0x2, 0x9, 0x2, 0x9, 0x8000, 0x5, 0x5, 0x80000001, 0x1, 0x531, 0x8, 0x8, 0xfffffffa, 0x81, 0x1, 0x80000001, 0x3, 0x1ff, 0x0, 0x3ff, 0x0, 0x9, 0x6, 0x9c, 0x16, 0x6, 0x9, 0x2, 0x7, 0x2, 0x4, 0x0, 0x64, 0x3, 0x608, 0x5, 0x10000, 0x43]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_BASIC_EMATCHES={0x1a8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7fff}}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1000}, {0x8001, 0x7, 0x7fff, 0x6, 0x3, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x6, 0x3, 0xe2f}, {0x6e, 0x729, 0xd}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2, 0x8, 0x9}, {0x2, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x5}, {0x0, 0x6, 0x2, "cc9446e71553"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x134, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x9c, 0x2, 0x0, 0x0, {{0x81, 0x0, 0x9}, "cd546b830799f1bab7fd277321fe69842ab693149d659c2d941c83f9657b6c46252c330663df81f42579a75649af015bb35c944571b4556a94892f72f65c0c52bcd3b0be89619c7ee0675ea8f1f6a550aa3110d0a49994c217174bc65058ad620b37719d7c58380d612f7fffa9b5c3799a8925886bd5f1aeef31b3f882aecb9242399df8597a12a61da4cce3fdf3e3ce"}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x3a, 0x2, 0x9}, {0x2, 0x4, 0x2, "91a68cb2"}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x9}, {{0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0x87c}, {0x4, 0x8, 0x3, 0x4, 0x9, 0x1, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x10, 0x7, 0x3}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x3b6, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="30153b05d21e9b591a22"]}]}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x5, 0x2, 0x9}, {0x5, 0x3, 0x2, "d77816"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x2}, {0x1, 0x5, 0x5}}}]}]}, @TCA_BASIC_ACT={0x17f4, 0x3, [@m_ife={0x90, 0x5, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x5b, 0x6, "6e888c48620d1df2d67c8db0097cdd01bc0d11b47ec1342a6297f1bbffef6399ff427815c8ad8fba19083c5799a1ae11b2e864d1ef2afd374713c68731cfa5ba46ab9cb1ab191f32c5ec118c7c218cf4c81259943e7610"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x64, 0x1b, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x0, 0x6, 0x3, 0xfffff9f6}, {0x2, 0x7, 0x4, 0x7}, {0x0, 0xc, 0x6, 0x9}, {0x7, 0x0, 0x3, 0xffff1f55}, {0x4, 0xf9, 0x6, 0x1136}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x98, 0xb, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xc9}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4b49, 0xfffff253, 0x10000000, 0x6, 0x3}, 0x4}}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x40}]}, {0x12, 0x6, "c92af4e518d7d76d45c72f72ecf6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0x140, 0x1c, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0xfffff801, 0x1, 0x4}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x80}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8000, 0x1, 0xffffffffffffffff, 0x0, 0x4}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}]}, {0xc2, 0x6, "7954dfcd839a7c4cab349c18026b3816fe779a5c69f73f5a6cc35f69466b1866881a0e2f69b5abc9f2988bbe95cbc8b7b58f75b03ad98ccaacd77f1961f2a349d6f02d11c1fa23682d22a25141e9ab7bd50e044b9dc37ed14451fee0bf6b9fb78cde2e0aa60c87f2e6bfde621e778526eee7098c911852540c853bbb4a9c60aee9d80d02b9bc514c3832ddfa5af18e73d539878317cb777f3e61fdb1d516c367320e4027fca80b1bc2936513d436615f0d09ec70860f17561c1f38c50fbd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x93a418e9316cb0ed, 0x2}}}}, @m_skbedit={0x1040, 0x9, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0x9}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x400}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_gact={0x134, 0xe, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9a, 0x4, 0x5db, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0xffffd75d, 0x7, 0x1, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x7d5, 0x2000000a}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xdb4d, 0x1, 0x5, 0xffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xdd, 0x6, 0x7, 0x2, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x5c5, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2b7, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x1, 0xffffffffffffffff, 0x5ed, 0x53b62a1}}]}, {0x69, 0x6, "0149bdaa345f06c9931e2d59c1295dc55b098a74e50bdac4b755f853cd39e70af298fd9ffb511f9cf1a3bedb3bdb36006ec4f70ab006a49357d0d7bd52622f6ee6b6ff30964a9c5d777a6972fe48fafea42611dcabb5d682d8ba8c4553749777232b5b86df"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x1b4, 0x7, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x5, 0x6, 0x6}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x3, 0x0, 0x3}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff9, 0x2, 0x0, 0x5, 0xfffffff8}, 0x548f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x5, 0x8, 0x3}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x7, 0x20000000, 0x1000, 0x6}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x10000, 0x2, 0x8, 0xf2d}, 0x2}}]}, {0xdb, 0x6, "9fd71ee91590998cc3068e29daa3bc417434b43fd471c57b2c18edbe1f20e3daea9dd1b86fcf283706d4b3d9290516d1bdcd2b0ec6009bdb2705c89e9412b08d4919f7d5ea43b3ee7281f4ef66af11657354330e495b896fc54f943dfaafb41e288245723334ede546862f8cfa3b9332241c39736415d9671fb2e86ea13ebb99b9d00f54201ab86ca828fe8cedb8a904f9815b7b4c1f11686a3a86ecfe204b1f6a88a6d6f18422312dc0ed6414d6070b0e8a31b22ccfac9ea4f75067a73a01be59d3b3d25e9bd50214d25307299204b7a33916822b97cf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_xt={0x150, 0x20, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xdf, 0x6, "c6b7a345d8e995c91d7597631fe134e8ea0400829d7ebf2825e04c8a338111408b5908edcc839a71b4c0eec428a9938e15043c164081c436bfcda52e32f8dd85f0f7411f730019276c35df1066edeb66edaea90f0999660fb9fe320b487fdcda906e472c4154decb51d346cc2fc94f44247b47e778cafd2284dae11cf78e0caf5e81f3c036b7071c346006879923603b518cf6c0c6c72aac407cef9a428e541d62c298ee54509135211b838d7df2ad618e7e742e2e91da6155b141ffb1e5334fedccecafd5de365573cb518572cf7c5f9b842ddcfb53e562df44c5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x4}}}}, @m_ctinfo={0xac, 0x17, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7f}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4a0}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x4e70, 0x10000000, 0x7, 0x2}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x1, 0x2, 0x7, 0x3}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x28, 0x6, "353dfbfb734931c9130d4d9a7a0a4ca1e2a379493a4d04b5a3d8c4221fb50922bf2ca1c2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BASIC_POLICE={0x18, 0x4, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2c66}]}, @TCA_BASIC_EMATCHES={0x164, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee}}, @TCA_EMATCH_TREE_LIST={0x140, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x128, 0x1, 0x0, 0x0, {{0xa, 0x9, 0x7f}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x99, 0x5, "66ead8aa1d462bbdb64c20b1da5fd36a7dcfcff80fdfcfa845b8dab63a8754576f077202a66b68177966093fe1247b97d621174d7b818017438636725d16a7ca8c5b08a34f69e1844bdc01ca0a2c8d9c03e6fe1ace09ade03576c955036116b46484c10e883e33f63470b87e85508d857ada9791c74de70100451d98032e813df255f9273ff8b566f4f5ff759573fb037b098e723a"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x2e, 0x5, "6348898918594c10efbf49b25681689b5c870167b776b2d21d0eadaef60f0650ef880310ae728befbedd"}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0x7, 0x5, "663cfb"}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9}, {{0x3, 0x0, 0x1}, {0x3, 0x1}}}}]}]}, @TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x58, 0x7fffffff, 0xff, 0x10001, 0x8, 0xb, 0x80000000, 0x1, 0xc21, 0x9, 0xc69, 0x94, 0x5, 0x7ff, 0x6, 0x5, 0x4, 0x400, 0x7, 0x200, 0x6, 0x9ce, 0x3360, 0x9, 0x4, 0x5, 0x51e, 0xad, 0x9, 0x6f5e2d1f, 0xeca4, 0xa16, 0xffff, 0x6, 0x3, 0x8, 0x3ff, 0x2, 0x44e, 0xe, 0x2, 0x5, 0x5, 0x4c9035c7, 0x401, 0x2, 0x0, 0x8, 0x0, 0x9, 0xffffffff, 0xc, 0x7, 0x7, 0x0, 0x1, 0x10001, 0xe, 0x11, 0xd68, 0x8, 0x80, 0x7, 0xffb, 0x100, 0x4, 0x23, 0xfffffffc, 0x4bd, 0x7fff, 0x5, 0x0, 0x6c, 0x9, 0x7baf, 0x7, 0x6, 0x3ff, 0x9, 0x0, 0x7, 0x7, 0xd, 0x800, 0x9, 0x96, 0x5, 0x0, 0x7, 0x2, 0x8, 0x6, 0x1, 0x2e, 0x7, 0x0, 0x7fff, 0x9, 0x4, 0x8, 0x3, 0x6, 0x9460, 0x8045, 0x3, 0x8001, 0x5, 0x7, 0x200, 0x9, 0x2, 0x9, 0x10000, 0x2, 0xa335, 0xffff087a, 0x10001, 0x3, 0x30e, 0x0, 0x5, 0x9, 0x10001, 0x3116, 0xb22a47a, 0x5, 0xff, 0x3, 0x8001, 0x3, 0x83, 0x10000, 0x8000, 0x7, 0x8f6a510, 0x1, 0xffff8001, 0xb8, 0xc, 0x5, 0x1, 0x2, 0x1, 0x8, 0x4, 0x80000000, 0x2, 0x9, 0xd, 0x3, 0xfffffff7, 0x5, 0xfffffffb, 0x6, 0x6, 0x3, 0x9, 0x1e, 0x9, 0xa, 0x4, 0x7, 0x58, 0x8, 0x10d, 0x9, 0x8, 0x6, 0x1, 0x27e2, 0xf, 0x9, 0x401, 0x3, 0x400, 0x1ff, 0x6, 0xba4, 0xd, 0x8, 0x1, 0x3, 0x9, 0x9, 0x644, 0x7fffffff, 0xfff, 0xfff, 0x2, 0x7, 0x4a9, 0xd8a4, 0x285b0607, 0x2, 0x0, 0x3, 0x3, 0x1, 0xffff09d2, 0xfff, 0x2, 0x2, 0x7fffffff, 0x2a59, 0x80000001, 0x45e, 0x5, 0x5, 0xfffffff9, 0xca60, 0x80, 0x3, 0x2, 0x9, 0x8, 0xeb5f, 0x10001, 0x13f3, 0x200, 0x80, 0x10001, 0x1, 0x5, 0x7, 0x400, 0x4, 0x100, 0x5, 0x56f9b5e4, 0x2, 0x4, 0x7, 0x5, 0x8, 0x4, 0x0, 0x2, 0x5, 0x7fffffff, 0xa2, 0x0, 0x1, 0x8, 0x7, 0x2, 0xd2f, 0x1000, 0xfffffff7, 0x3, 0x2, 0x72f1, 0x3, 0x7, 0x7, 0x7]}]}, @TCA_BASIC_ACT={0x4}]}}]}, 0x5d98}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) close(0x3) 4.256018464s ago: executing program 0 (id=1721): r0 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x4080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = gettid() io_setup(0x9, &(0x7f0000000000)=0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) io_submit(r3, 0x2, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x400, r1, &(0x7f00000000c0)="86f9be93dfa28501eabfdac2582d35f7e82c41402023aa41debf53c20823ed4949600e736370425bfa8cfcf35743b387dd31145d3a96e20af5443a278702828d3036f3637b38f4566ec621678e89cfa391e28cf96171173b93a1381a4616d450", 0x60, 0x7, 0x0, 0x0, r4}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xf, r1, &(0x7f0000000140)="b04698c3d33613f8a93b5cff104d76a5bdca75e49e63df9eee3725cca324844f5e6a9c8b49d7415b9e22285eb62f09bed683773d22", 0x35, 0x1}]) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = dup(r5) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 4.255547984s ago: executing program 3 (id=1722): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x874}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xc0080, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000080)={0x1d}) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000300)=ANY=[], 0xa) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r3}, &(0x7f0000000400)) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) r6 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0x533c) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) ioctl$NBD_DO_IT(r4, 0xab03) 3.791200155s ago: executing program 2 (id=1724): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x874}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xc0080, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000080)={0x1d}) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000300)=ANY=[], 0xa) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) gettid() r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x533c) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) ioctl$NBD_DO_IT(r3, 0xab03) 3.764062055s ago: executing program 2 (id=1725): io_uring_setup(0x2d58, &(0x7f0000000380)={0x0, 0x62cc, 0x80, 0x8000002, 0x3f7}) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) shmat(0x0, &(0x7f0000ff8000/0x5000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$mixer_OSS_GETVERSION(r1, 0x80086303, &(0x7f0000000000)) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000040)=0x13) ioctl$SNDCTL_DSP_GETFMTS(r5, 0x8004500b, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.594006755s ago: executing program 0 (id=1726): syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket(0x25, 0x5, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat6\x00') pread64(r1, &(0x7f0000000000)=""/15, 0xf, 0x7fff) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)='\x00', 0xf000}, {0x0, 0x2}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x0, 0x6, 0x2, 0x0, 0x2}) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000fedb03252e000000923e9577", @ANYRES32=r4, @ANYBLOB="05002e00040000000c0005000203aaaaaaaaaaaa05002b000200000008002c0006000000"], 0x40}, 0x1, 0x0, 0x0, 0x20048010}, 0x840) r5 = socket$inet(0xa, 0x801, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c00", @ANYRES32=r5], 0x90}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r7, 0x2, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000200)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x0, 0x0) 2.546911263s ago: executing program 2 (id=1727): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xa0, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0xc, 0x60, 0x16, 0x18, 0x3, 0x4, 0x24, 0x5, 0x4, 0x6c, 0x60, 0x16, 0x5, 0x16, 0x16, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1b, 0x18, 0x4, 0x30, 0x12]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r2, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0), 0x2, 0x0, 0x4f}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x400}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x8) r7 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fanotify_init(0xf00, 0x0) fanotify_mark(0xffffffffffffffff, 0x4, 0x40009975, r7, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001000000010000000a00000000000000fe8000000000006ef001a400000000bb00"/246], 0x110) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000000408010100000000000000000300000706000240884c0000050003002f"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x20000040) 2.247848771s ago: executing program 5 (id=1728): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="00000000000000000000000000789e", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xa000000}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x14b6deac033214c2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) syz_io_uring_setup(0x39, 0x0, 0x0, &(0x7f0000001880)) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x3, 0x7f, 0xa, 0x3, 0x0, 0x2}) r4 = add_key$user(&(0x7f0000000400), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000480)="ba", 0x1, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="ba305a4550bba8977d59d29e8ae45898ed4b3cba97cea2007d716178d189b78f2078e58bcb1cfe09487fd16787fcbc77b5529ce5c68e9ad5a4d599fc40a069498778f6f0c9ad8c3913bed7cad6caae708f3c0326180b069dee6ef7a4c2ef9bb640fae9c28a07948e891ebe98f9a7a51f8307fee83af8a8f2f71752471a192ff4d3aa9cb96cd90f4c42b8ecf326e4c9d204361b42b3906eb8519bcd25915dc9378522f102eeeec1f2281088b99f216b8ab0aa271bea1a3bc7f32c57b4404db397", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r5, r5}, &(0x7f000001f600)=""/105, 0x69, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="83d2782be928427b537100656c510bc7820247ec2f679ab4f46f852407eaa0be151c4481aa9cbcfb582e03f87109b5c898b4ac47575cadc5a3fd3b7452e00e8b6d8cccf0f0823e7761514029c84479c718d33ad1d09fe390c012d238b0fd21f9008593d1591459cb3f3cc733dd6a45a4c452dc6cef549a71edc7ac104b936bec887dc5c21d9ef68ce2d1e6f498b5120e733a9ef3f880987b334f4408", 0x9c, 0xfffffffffffffff8) 2.085063306s ago: executing program 3 (id=1729): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22a42, 0x0) preadv(r0, &(0x7f0000000b00)=[{0x0}, {0x0}], 0x2, 0x1000, 0x3) 2.030550647s ago: executing program 4 (id=1730): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc091, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x000W'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.834656281s ago: executing program 0 (id=1731): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x288, 0x1b8, 0x1b8, 0x1b8, 0xd0, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x73}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[], 0x24}}, 0x0) socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x10000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.079745473s ago: executing program 3 (id=1732): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002140)=""/131, 0x83}, {&(0x7f0000002200)=""/223, 0xdf}, {0x0}], 0x3}, 0x3}], 0x1, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x300) 966.666265ms ago: executing program 5 (id=1733): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000140)={0xa, 0x0, 0x1, 0x0, 'syz0\x00'}) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, 0x0, 0x0, 0xc0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)='\x00', 0x1}, {&(0x7f0000000040)="5a3bd1", 0x3}], 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x2, 0x1, 0x3}) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 929.033785ms ago: executing program 2 (id=1734): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x3b0, 0x98, 0x218, 0x3b0, 0x0, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @local, 0x0, 0xff, 'batadv_slave_1\x00', 'veth0_vlan\x00', {}, {}, 0x11}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x7f}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x3, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@private=0xa010102, @empty, 0xff000000, 0xff000000, 'nr0\x00', '\x00', {}, {0xff}, 0x11, 0x1, 0x11}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0xa5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) 530.802577ms ago: executing program 5 (id=1735): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 330.820775ms ago: executing program 5 (id=1736): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)={0x54, r3, 0x111, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x20094) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[0x0, r1], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x100000000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESHEX=r6], 0x64}}, 0x40014) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000100)={r6}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r9, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b14fea7a1316b81525ccf0f8b91fd2eddb851ba62b00d87337407214ea270251"}}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r10, 0xffffffffffffffff, 0x0) 330.561164ms ago: executing program 2 (id=1737): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x1, 0x66c, 0x0, 'queue1\x00'}) write$sndseq(r0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x1f00]}}], 0xffc8) 229.101966ms ago: executing program 2 (id=1738): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x1a5040, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a010100000000000000000700000009"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x3) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xb}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002740)='net/igmp\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() r3 = openat$sw_sync(0xffffff9c, 0x0, 0x40001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000000440)={{r1}, "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"}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8, 0x20, 0x101, 0x0, {{0xd, 0x4, 0x1, 0x2b, 0x34, 0x67, 0x0, 0xd, 0x2f, 0x0, @loopback, @local, {[@ssrr={0x89, 0xb, 0x92, [@dev={0xac, 0x14, 0x14, 0x41}, @loopback]}, @generic={0x83, 0x2}, @generic={0x94, 0x11, "b393e1d622e3fbd90f6e8f3f38f654"}]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r4, @ANYBLOB="0300000000000000000000000000006c00000000", @ANYRES32=r5, @ANYRES32, @ANYBLOB="01000000040000000500"/28], 0x50) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}}) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ef"], 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001780)={'syz1\x00', {0x2, 0x2, 0xf, 0x9}, 0x23, [0x23cc0000, 0x8, 0xd, 0x8, 0x51, 0xffff, 0x7, 0x40, 0x9, 0xe3, 0xffffffff, 0x7, 0x800, 0x81, 0x10000, 0x1, 0x8, 0xb, 0xf, 0x8, 0x8, 0x3, 0x7, 0xfffffff8, 0x5, 0x10, 0x2, 0x2, 0x9, 0xfffeffff, 0x3b4e, 0xc6, 0x6, 0x800, 0x8, 0x2, 0x2, 0x0, 0x0, 0x6, 0x8, 0x3, 0x10000, 0x0, 0x1, 0xfffffff8, 0x1, 0xa53, 0x0, 0x3, 0x7, 0x10000, 0x80000000, 0x1, 0x8, 0x3, 0xfffffffe, 0x8001, 0x9, 0x30, 0xa, 0x81], [0x6, 0xe27, 0x5, 0x9, 0x80000001, 0x6, 0x4, 0x9, 0xfffffffe, 0x4c0e, 0xb, 0x10000, 0x2, 0x4, 0x7, 0x1, 0x7, 0x1, 0x7b, 0x5, 0x80000001, 0x2, 0xf61, 0x6, 0x5, 0x9, 0x9, 0xffffffff, 0x35e6, 0x3, 0x3, 0x80, 0xfffffffe, 0x5, 0x5, 0x2, 0x6, 0x4, 0x5, 0x80000001, 0x5, 0x8, 0x8, 0x7, 0x9, 0x9, 0x4, 0x8, 0x5, 0x716d8768, 0x7fff, 0x4, 0x8, 0x1, 0x3, 0x25, 0x4, 0x5, 0x401, 0xee1, 0x3, 0xfff, 0x8, 0x5], [0x6, 0x1, 0x8, 0x61, 0xf, 0x18f7, 0x3, 0x2, 0x8, 0x9, 0x5, 0x1, 0x1, 0x0, 0x8, 0xfffffffb, 0x80, 0x7ec0, 0x1, 0x9, 0xca8, 0x0, 0xb0e, 0xb, 0x6, 0x5, 0xe000000, 0x0, 0x4, 0x5, 0xc, 0x8, 0x7, 0x9f, 0x6, 0x4, 0x5, 0xffffff01, 0x2, 0xfffffffa, 0x7473, 0x6, 0x80000001, 0x7, 0x5, 0x3, 0x2, 0xa49, 0x101, 0x0, 0x9, 0x0, 0x80, 0x1, 0x8, 0x4, 0x4, 0x6, 0x4, 0x3, 0x3, 0x8f, 0x6, 0x8], [0x6, 0x10000, 0x77, 0x5, 0xd, 0x1, 0x4, 0x0, 0x100, 0x6, 0x6, 0x8, 0x1000, 0x9, 0x5, 0x9, 0x9, 0x8a, 0x739, 0x903, 0xffffffff, 0x9, 0xd, 0x47, 0x5012, 0x8, 0x7ff, 0x9, 0x3c, 0x9, 0x1, 0x7, 0x800, 0x80000000, 0x6, 0xe, 0x7, 0x3, 0x8001, 0x3, 0x7, 0xab, 0xdce, 0x400, 0x1, 0x3, 0x0, 0x7, 0x200, 0xa, 0x2, 0xffffffff, 0xfff, 0x694, 0x3, 0x8, 0xea, 0x8, 0xfffffffb, 0x0, 0xff, 0xd7, 0x3, 0x5]}, 0x45c) 183.966478ms ago: executing program 5 (id=1739): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x24, &(0x7f00000002c0)={0x0, 0x1, 0x3, 0x455, 0xffffffffffffffff}) r2 = getpgrp(0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x20004f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000000)=""/42, 0x2a, 0x0, &(0x7f00000002c0)=""/120, 0x78}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c250000000000206ea37b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002"], 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04ff01"], 0x4) unshare(0x2020400) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 119.087619ms ago: executing program 0 (id=1740): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) setns(0xffffffffffffffff, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x108, 0x4a, 0xe3, 0xb, 0x24, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/30, 0x1e}], 0x1, 0x10000000, 0x8) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) socket$nl_audit(0x10, 0x3, 0x9) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r5, 0xc038563c, &(0x7f00000003c0)={0x0, 0x0, {0xfffffff9, 0xfbfffffd, 0x1}}) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4010744d, &(0x7f0000000080)=0xc) 0s ago: executing program 3 (id=1741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000004c0)={0xffffffffffffffff, 0x7, {0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0xa, 0x7, 0xc, "c7d11fd82f504dc0a13c7fd7b0359c06b69b4a8cd9167a442850f0e32a77b53ee9c254181d707b8ffea7dd5929b5c9c391f35f9c36e2a1322a5efb5de6a4bae9", "b2330c68ec3d7a00997acaa246fce06e8b5c108ce455b4cbdd1c75141d0b675b9ce640ba436227ac003e836b570da708860b0f3e846b1cc52d3b2a380bcd925c", "34ff00fbac068322cd0ca3ecca33d87a2320b0ed89ad694c6acf504b52ac5e53", [0x93a1]}}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) unshare(0x4000400) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}}, 0x8000) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x800) kernel console output (not intermixed with test programs): s in process `syz.2.1163'. [ 356.418905][ T30] audit: type=1400 audit(1742818565.391:1059): avc: denied { unlink } for pid=10032 comm="syz.4.1166" name="#17" dev="tmpfs" ino=1210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 356.449157][ T30] audit: type=1400 audit(1742818565.391:1060): avc: denied { mount } for pid=10032 comm="syz.4.1166" name="/" dev="overlay" ino=1205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 356.793237][ T8239] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 357.180859][ T8239] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 357.189208][ T8239] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.199429][ T8239] usb 4-1: config 0 has no interface number 0 [ 357.300845][ T30] audit: type=1400 audit(1742818566.271:1061): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 357.339540][T10054] ubi31: attaching mtd0 [ 358.119764][T10054] ubi31: scanning is finished [ 358.122848][T10055] netlink: 'syz.0.1171': attribute type 2 has an invalid length. [ 358.124514][T10054] ubi31: empty MTD device detected [ 358.133722][ T5820] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 358.146361][ T5820] Bluetooth: hci0: Injecting HCI hardware error event [ 358.155982][ T5820] Bluetooth: hci0: hardware error 0x00 [ 358.160481][ T8239] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 358.190663][ T8239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.203329][ T8239] usb 4-1: Product: syz [ 358.207531][ T8239] usb 4-1: Manufacturer: syz [ 358.212139][ T8239] usb 4-1: SerialNumber: syz [ 358.317003][ T30] audit: type=1400 audit(1742818567.291:1062): avc: denied { accept } for pid=10053 comm="syz.0.1171" lport=45969 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 359.049800][ T8239] usb 4-1: config 0 descriptor?? [ 359.056488][ T8239] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 359.173109][T10054] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 359.275404][ T5868] usb 4-1: USB disconnect, device number 30 [ 359.317751][T10091] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 359.807610][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 359.807624][ T30] audit: type=1400 audit(1742818568.781:1066): avc: denied { append } for pid=10079 comm="syz.0.1177" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 359.938360][ T30] audit: type=1400 audit(1742818568.911:1067): avc: denied { write } for pid=10079 comm="syz.0.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 360.033452][ T30] audit: type=1400 audit(1742818568.991:1068): avc: denied { shutdown } for pid=10102 comm="syz.3.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 360.037731][T10101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1181'. [ 360.062961][ T30] audit: type=1400 audit(1742818569.031:1069): avc: denied { write } for pid=10102 comm="syz.3.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 360.180740][ T5820] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 360.321745][T10105] team0: Port device team_slave_1 removed [ 360.524200][ T30] audit: type=1400 audit(1742818569.431:1070): avc: denied { create } for pid=10104 comm="syz.3.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 360.730749][ T30] audit: type=1400 audit(1742818569.701:1071): avc: denied { create } for pid=10119 comm="syz.2.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 361.896004][ T30] audit: type=1400 audit(1742818570.871:1072): avc: denied { bind } for pid=10135 comm="syz.4.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 361.947325][T10141] serio: Serial port ttyS3 [ 363.016211][ T30] audit: type=1400 audit(1742818571.991:1073): avc: denied { bind } for pid=10159 comm="syz.3.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 363.183350][ T8231] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 363.343384][ T8231] usb 1-1: Using ep0 maxpacket: 8 [ 363.349826][ T8231] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 363.373403][ T8231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.383752][ T8231] usb 1-1: config 0 has no interface number 0 [ 363.403368][ T8231] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 363.414469][ T8231] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.453358][ T8231] usb 1-1: config 0 interface 52 has no altsetting 0 [ 363.479412][ T8231] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 363.627748][ T8231] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 363.636272][ T8231] usb 1-1: Manufacturer: syz [ 363.642274][ T8231] usb 1-1: config 0 descriptor?? [ 363.879077][ T8231] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input19 [ 364.131966][ T8231] usb 1-1: USB disconnect, device number 22 [ 364.138041][ C1] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 364.423300][ T8239] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 364.604554][ T8239] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 364.613505][ T8239] usb 5-1: config 0 has no interface number 0 [ 364.620135][ T8239] usb 5-1: config 0 interface 113 has no altsetting 0 [ 364.760859][ T30] audit: type=1400 audit(1742818573.731:1074): avc: denied { read } for pid=10206 comm="syz.3.1203" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 364.786166][ T8239] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 365.082794][ T8239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.095581][ T8239] usb 5-1: Product: syz [ 365.100231][ T8239] usb 5-1: Manufacturer: syz [ 365.151455][ T8239] usb 5-1: SerialNumber: syz [ 365.179848][ T8239] usb 5-1: config 0 descriptor?? [ 365.424218][ C0] usb 5-1: NFC: Urb failure (status -71) [ 365.431589][ C0] usb 5-1: NFC: Urb failure (status -71) [ 365.439406][ T8239] usb 5-1: NFC: Unable to get FW version [ 365.448870][ T8239] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -71 [ 365.496649][ T8239] usb 5-1: USB disconnect, device number 29 [ 365.749271][ T30] audit: type=1400 audit(1742818574.721:1075): avc: denied { read } for pid=10242 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 365.752537][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.793411][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.804653][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.816979][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.831011][ T5822] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 365.839995][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.861474][T10244] overlayfs: failed to clone upperpath [ 366.368046][ T30] audit: type=1400 audit(1742818574.721:1076): avc: denied { open } for pid=10242 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 366.391950][ T30] audit: type=1400 audit(1742818575.281:1077): avc: denied { mounton } for pid=10242 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 367.897894][T10242] chnl_net:caif_netlink_parms(): no params data found [ 368.333623][ T5831] Bluetooth: hci5: command tx timeout [ 368.484269][T10242] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.492490][T10242] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.503807][T10242] bridge_slave_0: entered allmulticast mode [ 368.510747][T10242] bridge_slave_0: entered promiscuous mode [ 368.521078][T10242] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.529199][T10242] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.556642][ T30] audit: type=1400 audit(1742818577.521:1078): avc: denied { read write } for pid=10431 comm="syz.4.1224" name="mouse0" dev="devtmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 368.583862][T10242] bridge_slave_1: entered allmulticast mode [ 368.586799][ T30] audit: type=1400 audit(1742818577.521:1079): avc: denied { ioctl open } for pid=10431 comm="syz.4.1224" path="/dev/input/mouse0" dev="devtmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 369.226273][T10242] bridge_slave_1: entered promiscuous mode [ 369.366308][T10470] fuse: Unknown parameter '0x0000000000000003' [ 369.394321][ T8228] Process accounting resumed [ 369.410587][T10242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.447719][T10242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.538118][T10496] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 369.616820][T10242] team0: Port device team_slave_0 added [ 369.628482][T10242] team0: Port device team_slave_1 added [ 369.851994][T10528] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 370.284103][T10242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.291078][T10242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.419341][ T5822] Bluetooth: hci5: command tx timeout [ 370.466179][T10242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.572147][T10242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.579725][T10242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.616604][T10242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.240617][T10242] hsr_slave_0: entered promiscuous mode [ 371.258381][T10242] hsr_slave_1: entered promiscuous mode [ 371.275727][T10242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.310712][T10242] Cannot create hsr debugfs directory [ 371.439847][ T30] audit: type=1400 audit(1742818580.401:1080): avc: denied { setopt } for pid=10601 comm="syz.2.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 371.616882][ T5867] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 371.786665][ T5867] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 371.807463][ T5867] usb 1-1: config 0 has no interface number 0 [ 371.840904][ T5867] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 371.877500][ T5867] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 371.915388][ T5867] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 371.945670][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.951692][T10242] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 372.004544][ T5867] usb 1-1: config 0 descriptor?? [ 372.004603][T10242] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 372.011681][T10602] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 372.056178][T10242] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 372.076538][ T5867] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 372.097295][ T30] audit: type=1400 audit(1742818581.061:1081): avc: denied { getopt } for pid=10490 comm="syz.3.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 372.119933][T10242] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 372.166141][T10242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.212204][T10242] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.228829][ T7049] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.235949][ T7049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.277544][T10602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.287416][T10602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.296264][ T5831] block nbd3: Receive control failed (result -32) [ 372.296371][ T5820] block nbd3: Receive control failed (result -32) [ 372.310338][T10520] block nbd3: shutting down sockets [ 372.320016][ T5820] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 372.339679][ T7049] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.346780][ T7049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.358222][ T8239] usb 1-1: USB disconnect, device number 23 [ 372.468555][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1238'. [ 372.493553][ T5820] Bluetooth: hci5: command tx timeout [ 372.613315][T10700] overlayfs: failed to clone upperpath [ 372.921855][T10242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.415192][T10242] veth0_vlan: entered promiscuous mode [ 374.440991][T10242] veth1_vlan: entered promiscuous mode [ 374.579119][ T5820] Bluetooth: hci5: command tx timeout [ 374.879300][T10242] veth0_macvtap: entered promiscuous mode [ 374.889150][T10242] veth1_macvtap: entered promiscuous mode [ 374.923513][T10736] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1246'. [ 374.939421][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.951464][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.975144][T10242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.991787][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.007887][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.021903][T10242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.039677][T10736] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.063095][T10242] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.371198][T10242] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.380562][T10242] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.389607][T10242] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.439657][T10736] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.572677][T10736] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.636078][T10736] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.729924][ T9222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.749328][ T9222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.073499][ T30] audit: type=1400 audit(1742818585.031:1082): avc: denied { ioctl } for pid=10762 comm="syz.4.1252" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 376.145607][T10736] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.174649][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.182482][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.187372][T10736] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.234660][ T30] audit: type=1400 audit(1742818585.201:1083): avc: denied { mount } for pid=10772 comm="syz.0.1254" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 376.268862][T10736] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.298034][T10736] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.331276][T10787] team0: No ports can be present during mode change [ 376.339856][ T5820] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 376.348668][ T5820] Bluetooth: hci2: Injecting HCI hardware error event [ 376.357776][ T5820] Bluetooth: hci2: hardware error 0x00 [ 376.368973][T10787] vlan0: entered promiscuous mode [ 376.384425][T10787] team0: Port device vlan0 added [ 376.391843][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1255'. [ 376.427695][ T30] audit: type=1400 audit(1742818585.201:1084): avc: denied { mounton } for pid=10242 comm="syz-executor" path="/root/syzkaller.oLHmOX/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 376.459264][ T30] audit: type=1400 audit(1742818585.201:1085): avc: denied { mount } for pid=10242 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 376.484005][ T30] audit: type=1400 audit(1742818585.201:1086): avc: denied { mount } for pid=10242 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 377.040225][ T30] audit: type=1400 audit(1742818585.201:1087): avc: denied { mounton } for pid=10242 comm="syz-executor" path="/root/syzkaller.oLHmOX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 377.145905][ T30] audit: type=1400 audit(1742818585.201:1088): avc: denied { mounton } for pid=10242 comm="syz-executor" path="/root/syzkaller.oLHmOX/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 377.203672][ T30] audit: type=1400 audit(1742818585.241:1089): avc: denied { read write } for pid=10772 comm="syz.0.1254" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 377.257344][ T30] audit: type=1400 audit(1742818585.241:1090): avc: denied { open } for pid=10772 comm="syz.0.1254" path="/269/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 377.279949][ T30] audit: type=1400 audit(1742818585.291:1091): avc: denied { mounton } for pid=10242 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 377.431572][ T30] audit: type=1400 audit(1742818585.291:1092): avc: denied { mount } for pid=10242 comm="syz-executor" name="/" dev="gadgetfs" ino=6759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 378.006981][ T30] audit: type=1400 audit(1742818585.291:1093): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 378.030213][ T30] audit: type=1400 audit(1742818585.431:1094): avc: denied { map } for pid=10779 comm="syz.4.1255" path="socket:[26611]" dev="sockfs" ino=26611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 378.413656][ T5820] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 378.555736][T10787] team0 (unregistering): Port device team_slave_0 removed [ 378.616513][T10787] team0 (unregistering): Port device team_slave_1 removed [ 378.647073][T10787] team0 (unregistering): Port device vlan0 removed [ 378.661919][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.668412][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.703115][T10797] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10797 comm=syz.3.1258 [ 378.840764][T10824] infiniband syz1: set active [ 378.843372][ T8228] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 378.845770][T10824] infiniband syz1: added team_slave_0 [ 378.890365][T10824] RDS/IB: syz1: added [ 378.894847][T10824] smc: adding ib device syz1 with port count 1 [ 378.901079][T10824] smc: ib device syz1 port 1 has pnetid [ 379.233317][ T8228] usb 1-1: Using ep0 maxpacket: 8 [ 379.242269][ T8228] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 379.270492][ T8228] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 379.566793][ T8228] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 379.589205][ T8228] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.609347][ T8228] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 379.619283][ T8228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.642484][T10877] 9pnet_virtio: no channels available for device 127.0.0.1 [ 380.327864][ T8228] usb 1-1: GET_CAPABILITIES returned 0 [ 380.337608][ T8228] usbtmc 1-1:16.0: can't read capabilities [ 380.396455][T10885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1263'. [ 380.527559][ T8231] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 380.567094][ T8228] usb 1-1: USB disconnect, device number 24 [ 380.753546][ T8231] usb 6-1: Using ep0 maxpacket: 8 [ 381.199775][ T8231] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 381.224805][ T8231] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.239390][ T8231] usb 6-1: config 0 has no interface number 0 [ 381.245625][ T8231] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 381.257091][ T8231] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.379525][ T8231] usb 6-1: config 0 interface 52 has no altsetting 0 [ 381.394262][ T8231] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 381.410234][ T8231] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 381.443276][ T8231] usb 6-1: Manufacturer: syz [ 381.470020][ T8231] usb 6-1: config 0 descriptor?? [ 382.068352][ T8231] usb 6-1: Can not set alternate setting to 1, error: -71 [ 382.091533][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 382.091551][ T30] audit: type=1400 audit(1742818591.061:1103): avc: denied { ioctl } for pid=10928 comm="syz.3.1275" path="socket:[27257]" dev="sockfs" ino=27257 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 382.123532][ T8231] synaptics_usb 6-1:0.52: probe with driver synaptics_usb failed with error -71 [ 382.135655][ T8231] usb 6-1: USB disconnect, device number 2 [ 382.142760][ T30] audit: type=1400 audit(1742818591.081:1104): avc: denied { getopt } for pid=10934 comm="syz.0.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 382.363398][ T5867] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 382.744867][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 382.936469][ T30] audit: type=1400 audit(1742818591.761:1105): avc: denied { setattr } for pid=10949 comm="syz.4.1279" name="statm" dev="proc" ino=27762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 382.977110][ T5867] usb 1-1: config 0 has an invalid interface number: 182 but max is 0 [ 382.991324][ T5867] usb 1-1: config 0 has no interface number 0 [ 383.013266][ T5867] usb 1-1: config 0 interface 182 has no altsetting 0 [ 383.042704][ T5867] usb 1-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=e2.d2 [ 383.059781][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.068455][ T5867] usb 1-1: Product: syz [ 383.073072][ T5867] usb 1-1: Manufacturer: syz [ 383.077734][ T5867] usb 1-1: SerialNumber: syz [ 383.091936][ T5867] usb 1-1: config 0 descriptor?? [ 383.118796][T10962] fuse: Unknown parameter 'fd0x0000000000000003' [ 383.126805][ T8239] Process accounting resumed [ 383.309427][T10935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.353705][T10935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.374419][ T5867] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 383.382634][ T5867] usb 1-1: selecting invalid altsetting 0 [ 383.395661][ T2327] pvrusb2: Invalid write control endpoint [ 383.396409][ T5867] usb 1-1: USB disconnect, device number 25 [ 383.671122][T10982] random: crng reseeded on system resumption [ 384.496330][ T2327] pvrusb2: Invalid write control endpoint [ 384.502622][ T2327] pvrusb2: Invalid write control endpoint [ 384.512779][ T2327] pvrusb2: Invalid write control endpoint [ 384.539208][ T2327] pvrusb2: Invalid write control endpoint [ 384.546444][ T2327] pvrusb2: Invalid write control endpoint [ 384.559335][ T2327] pvrusb2: Invalid write control endpoint [ 384.649129][ T2327] pvrusb2: Invalid write control endpoint [ 385.278826][ T30] audit: type=1400 audit(1742818594.251:1106): avc: denied { bind } for pid=10998 comm="syz.3.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 385.305705][ T2327] pvrusb2: Invalid write control endpoint [ 385.355473][ T2327] pvrusb2: Invalid write control endpoint [ 385.384517][ T2327] pvrusb2: Invalid write control endpoint [ 385.447648][ T2327] pvrusb2: Invalid write control endpoint [ 385.472060][ T2327] pvrusb2: Invalid write control endpoint [ 385.495930][ T2327] pvrusb2: Invalid write control endpoint [ 385.513378][ T2327] pvrusb2: Invalid write control endpoint [ 385.536462][ T2327] pvrusb2: Invalid write control endpoint [ 385.557084][ T2327] pvrusb2: Invalid write control endpoint [ 385.580270][ T2327] pvrusb2: Invalid write control endpoint [ 385.601628][ T2327] pvrusb2: Invalid write control endpoint [ 385.632605][ T2327] pvrusb2: Invalid write control endpoint [ 385.670838][ T2327] pvrusb2: Invalid write control endpoint [ 385.861923][ T2327] pvrusb2: Invalid write control endpoint [ 385.880440][ T2327] pvrusb2: Invalid write control endpoint [ 385.898726][ T2327] pvrusb2: Invalid write control endpoint [ 385.917436][ T2327] pvrusb2: Invalid write control endpoint [ 385.937756][ T2327] pvrusb2: Invalid write control endpoint [ 385.952778][ T2327] pvrusb2: Invalid write control endpoint [ 386.259920][T11021] fuse: Unknown parameter 'fd0x0000000000000003' [ 386.278078][ T2327] pvrusb2: Invalid write control endpoint [ 386.284460][ T8239] Process accounting resumed [ 386.303507][ T5868] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 386.314393][ T2327] pvrusb2: Invalid write control endpoint [ 386.320128][ T2327] pvrusb2: Invalid write control endpoint [ 386.336047][ T2327] pvrusb2: Invalid write control endpoint [ 386.359626][ T2327] pvrusb2: Invalid write control endpoint [ 386.483451][T11023] overlayfs: missing 'lowerdir' [ 386.489714][ T2327] pvrusb2: Invalid write control endpoint [ 386.494690][ T5868] usb 6-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 386.504594][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.513787][ T5868] usb 6-1: config 0 descriptor?? [ 386.521496][ T5868] usb 6-1: selecting invalid altsetting 1 [ 386.528444][ T5868] flexcop_usb: set interface failed. [ 386.655954][ T5868] b2c2_flexcop_usb 6-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 386.692412][ T2327] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 386.863847][ T2327] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 386.899441][ T2327] pvrusb2: Invalid write control endpoint [ 386.969508][ T2327] pvrusb2: Invalid write control endpoint [ 387.424869][ T2327] pvrusb2: Invalid write control endpoint [ 387.432894][ T2327] pvrusb2: Invalid write control endpoint [ 387.440759][ T2327] pvrusb2: Invalid write control endpoint [ 387.447872][ T2327] pvrusb2: Invalid write control endpoint [ 387.454233][ T2327] pvrusb2: Invalid write control endpoint [ 387.463342][ T2327] pvrusb2: Invalid write control endpoint [ 387.469828][ T2327] pvrusb2: Invalid write control endpoint [ 387.477317][ T2327] pvrusb2: Invalid write control endpoint [ 387.485513][ T2327] pvrusb2: Invalid write control endpoint [ 387.491603][ T2327] pvrusb2: Invalid write control endpoint [ 387.499181][ T2327] pvrusb2: Invalid write control endpoint [ 387.509663][ T2327] pvrusb2: Invalid write control endpoint [ 387.516676][ T2327] pvrusb2: Invalid write control endpoint [ 387.525144][ T2327] pvrusb2: Invalid write control endpoint [ 387.531579][ T2327] pvrusb2: Invalid write control endpoint [ 387.540896][ T2327] pvrusb2: Invalid write control endpoint [ 387.550689][ T2327] pvrusb2: Invalid write control endpoint [ 387.557736][ T2327] pvrusb2: Invalid write control endpoint [ 387.566426][ T2327] pvrusb2: Invalid write control endpoint [ 387.578649][ T2327] pvrusb2: Attached sub-driver cs53l32a [ 387.619063][ T2327] pvrusb2: Invalid write control endpoint [ 387.630183][ T2327] pvrusb2: Invalid write control endpoint [ 387.637703][ T2327] pvrusb2: Invalid write control endpoint [ 387.647379][ T2327] pvrusb2: Invalid write control endpoint [ 387.661239][ T2327] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 387.718865][ T2327] pvrusb2: Device being rendered inoperable [ 387.728263][ T2327] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 387.815407][ T2327] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 388.101969][ T30] audit: type=1400 audit(1742818597.071:1107): avc: denied { append } for pid=11056 comm="syz.0.1299" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 388.136810][ T30] audit: type=1400 audit(1742818597.111:1108): avc: denied { map } for pid=11056 comm="syz.0.1299" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 388.163995][ T30] audit: type=1400 audit(1742818597.111:1109): avc: denied { execute } for pid=11056 comm="syz.0.1299" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 388.664169][ T26] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 388.853302][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 388.871007][ T5867] usb 6-1: USB disconnect, device number 3 [ 388.884408][ T26] usb 5-1: config 0 has an invalid interface number: 108 but max is 0 [ 388.894597][ T26] usb 5-1: config 0 has no interface number 0 [ 388.902196][ T26] usb 5-1: config 0 interface 108 has no altsetting 0 [ 388.911130][ T26] usb 5-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=64.cd [ 388.924729][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.953217][ T26] usb 5-1: Product: syz [ 388.957523][ T26] usb 5-1: Manufacturer: syz [ 388.962348][ T26] usb 5-1: SerialNumber: syz [ 388.969463][ T26] usb 5-1: config 0 descriptor?? [ 388.992772][ T26] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 389.178924][T11090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1305'. [ 389.257184][ T5820] block nbd0: Receive control failed (result -32) [ 389.265716][ T5831] block nbd0: Receive control failed (result -32) [ 389.279630][T11066] block nbd0: shutting down sockets [ 389.329818][T11067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.484521][T11067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.583874][ T8228] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 389.633091][ T26] usb 5-1: USB disconnect, device number 30 [ 389.732379][T11105] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1307'. [ 389.753571][ T8228] usb 6-1: Using ep0 maxpacket: 8 [ 389.760568][ T8228] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 389.768863][ T8228] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.800561][T11118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1308'. [ 389.907953][ T8228] usb 6-1: config 0 has no interface number 0 [ 389.914419][ T8228] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 389.925533][ T8228] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.942093][ T8228] usb 6-1: config 0 interface 52 has no altsetting 0 [ 390.022876][ T8228] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 390.062906][ T8228] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 390.075894][ T8228] usb 6-1: Manufacturer: syz [ 390.088248][ T8228] usb 6-1: config 0 descriptor?? [ 390.554047][ T30] audit: type=1400 audit(1742818599.471:1110): avc: denied { connect } for pid=11128 comm="syz.4.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 390.596254][T11133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1311'. [ 390.606551][T11133] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1311'. [ 390.953668][ T8228] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input20 [ 391.623404][ T5866] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 391.765540][ T5866] usb 5-1: device descriptor read/64, error -71 [ 391.986443][ T8228] usb 6-1: USB disconnect, device number 4 [ 391.992287][ C1] synaptics_usb 6-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 392.027797][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1315'. [ 392.063488][ T5866] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 392.187878][T11173] FAULT_INJECTION: forcing a failure. [ 392.187878][T11173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.201326][ T5866] usb 5-1: device descriptor read/64, error -71 [ 392.207807][T11173] CPU: 0 UID: 0 PID: 11173 Comm: syz.0.1318 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 392.207830][T11173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 392.207840][T11173] Call Trace: [ 392.207845][T11173] [ 392.207852][T11173] dump_stack_lvl+0x16c/0x1f0 [ 392.207880][T11173] should_fail_ex+0x50a/0x650 [ 392.207910][T11173] _copy_to_user+0x32/0xd0 [ 392.207930][T11173] simple_read_from_buffer+0xd0/0x160 [ 392.207958][T11173] proc_fail_nth_read+0x198/0x270 [ 392.207988][T11173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 392.208013][T11173] ? rw_verify_area+0xcf/0x680 [ 392.208036][T11173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 392.208059][T11173] vfs_read+0x1df/0xbf0 [ 392.208085][T11173] ? __fget_files+0x1fc/0x3a0 [ 392.208102][T11173] ? __pfx___mutex_lock+0x10/0x10 [ 392.208125][T11173] ? __pfx_vfs_read+0x10/0x10 [ 392.208157][T11173] ? __fget_files+0x206/0x3a0 [ 392.208180][T11173] ksys_read+0x12b/0x250 [ 392.208205][T11173] ? __pfx_ksys_read+0x10/0x10 [ 392.208237][T11173] do_syscall_64+0xcd/0x250 [ 392.208263][T11173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.208286][T11173] RIP: 0033:0x7f2a6818bb7c [ 392.208300][T11173] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 392.208316][T11173] RSP: 002b:00007f2a67ff9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 392.208332][T11173] RAX: ffffffffffffffda RBX: 00007f2a683a5fa0 RCX: 00007f2a6818bb7c [ 392.208343][T11173] RDX: 000000000000000f RSI: 00007f2a67ff90a0 RDI: 0000000000000003 [ 392.208353][T11173] RBP: 00007f2a67ff9090 R08: 0000000000000000 R09: 0000000000000000 [ 392.208363][T11173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.208373][T11173] R13: 0000000000000001 R14: 00007f2a683a5fa0 R15: 00007ffce296ba28 [ 392.208396][T11173] [ 392.404428][ T5866] usb usb5-port1: attempt power cycle [ 392.533314][ T5868] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 392.583646][T11178] Bluetooth: hci5: command 0x0405 tx timeout [ 392.683517][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 392.690301][ T5868] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 392.699596][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.708769][ T5868] usb 4-1: config 0 descriptor?? [ 392.715518][ T5868] gspca_main: sunplus-2.14.0 probing 041e:400b [ 392.743335][ T5866] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 392.763804][ T5866] usb 5-1: device descriptor read/8, error -71 [ 393.063688][ T5866] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 393.452624][ T5868] gspca_sunplus: reg_w_riv err -110 [ 393.465421][ T5868] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 393.533421][T11175] block nbd0: shutting down sockets [ 393.949921][T11186] syz.3.1317 (11186): drop_caches: 2 [ 393.957776][T11186] syz.3.1317 (11186): drop_caches: 2 [ 393.996747][ T5867] usb 4-1: USB disconnect, device number 31 [ 394.075269][ T5866] usb 5-1: device descriptor read/8, error -71 [ 394.188780][ T5866] usb usb5-port1: unable to enumerate USB device [ 394.264060][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1321'. [ 395.783345][ T5822] block nbd5: Receive control failed (result -32) [ 395.792958][ T5820] block nbd5: Receive control failed (result -32) [ 395.828869][T11236] block nbd5: shutting down sockets [ 395.906715][ T30] audit: type=1400 audit(1742818604.881:1111): avc: denied { write } for pid=11242 comm="syz.4.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 396.005771][ T30] audit: type=1400 audit(1742818604.881:1112): avc: denied { bind } for pid=11242 comm="syz.4.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 396.737509][T11258] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 396.744550][T11258] VFS: Can't find a romfs filesystem on dev nullb0. [ 396.744550][T11258] [ 396.755400][T11258] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1339'. [ 397.009963][ T5822] block nbd5: Receive control failed (result -32) [ 397.033764][T11250] block nbd5: shutting down sockets [ 397.156708][ T5820] block nbd4: Receive control failed (result -32) [ 397.165646][T11259] block nbd4: shutting down sockets [ 397.250197][ T30] audit: type=1400 audit(1742818606.221:1113): avc: denied { write } for pid=11265 comm="syz.4.1341" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 397.400748][ T30] audit: type=1400 audit(1742818606.221:1114): avc: denied { ioctl } for pid=11265 comm="syz.4.1341" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 398.083311][ T5866] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 398.581235][ T5866] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 398.592557][ T5866] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 398.622386][ T5866] usb 5-1: config 1 interface 0 has no altsetting 0 [ 398.644385][ T5866] usb 5-1: string descriptor 0 read error: -22 [ 398.652724][ T5866] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 398.672840][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.692854][T11272] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 398.701291][T11272] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 398.710496][ T5866] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 398.930159][ T8231] usb 5-1: USB disconnect, device number 35 [ 399.533454][ T5820] block nbd5: Receive control failed (result -32) [ 399.543550][ T5822] block nbd5: Receive control failed (result -32) [ 399.565199][T11292] block nbd5: shutting down sockets [ 400.473115][T11319] block nbd0: shutting down sockets [ 400.846473][ T5822] block nbd3: Receive control failed (result -32) [ 400.854025][T11316] block nbd3: shutting down sockets [ 401.098565][T11345] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 401.105584][T11345] VFS: Can't find a romfs filesystem on dev nullb0. [ 401.105584][T11345] [ 401.117250][T11345] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1360'. [ 401.627023][T11356] syz.0.1361 (11356): drop_caches: 2 [ 402.213617][T11363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1364'. [ 402.755966][ T5868] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 402.773407][T11366] netlink: 'syz.0.1365': attribute type 4 has an invalid length. [ 402.916336][ T5868] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 402.928275][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.939592][T11333] block nbd5: shutting down sockets [ 402.945802][ T5868] usb 5-1: Product: syz [ 402.950094][ T5868] usb 5-1: Manufacturer: syz [ 402.954842][ T5868] usb 5-1: SerialNumber: syz [ 402.972923][ T5868] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 402.996104][ T5866] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 404.179144][ T5866] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 404.233541][ T30] audit: type=1400 audit(1742818613.201:1115): avc: denied { shutdown } for pid=11360 comm="syz.4.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 404.274081][ T5866] ath9k_htc: Failed to initialize the device [ 404.336848][ T5866] usb 5-1: ath9k_htc: USB layer deinitialized [ 404.376983][ T26] usb 5-1: USB disconnect, device number 36 [ 404.399328][ T30] audit: type=1400 audit(1742818613.371:1116): avc: denied { accept } for pid=11400 comm="syz.3.1372" path="socket:[29039]" dev="sockfs" ino=29039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 404.533415][T11402] syzkaller1: entered allmulticast mode [ 406.223086][ T30] audit: type=1326 audit(1742818615.191:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.5.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93078d169 code=0x7fc00000 [ 406.261325][T11483] fuse: Bad value for 'fd' [ 406.304947][ T30] audit: type=1400 audit(1742818615.221:1118): avc: denied { accept } for pid=11473 comm="syz.0.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 406.381839][ T30] audit: type=1400 audit(1742818615.231:1119): avc: denied { getopt } for pid=11473 comm="syz.0.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 406.746514][T11496] random: crng reseeded on system resumption [ 407.587626][ T30] audit: type=1326 audit(1742818616.561:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.5.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff93078d169 code=0x7fc00000 [ 407.628654][ T30] audit: type=1326 audit(1742818616.561:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.5.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93078d169 code=0x7fc00000 [ 407.661460][ T30] audit: type=1326 audit(1742818616.561:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.5.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93078d169 code=0x7fc00000 [ 407.823362][ T30] audit: type=1326 audit(1742818616.561:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.5.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93078d169 code=0x7fc00000 [ 407.852298][T11509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1387'. [ 407.852947][ T30] audit: type=1326 audit(1742818616.561:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.5.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93078d169 code=0x7fc00000 [ 407.885554][T11509] tipc: Started in network mode [ 407.890576][T11509] tipc: Node identity 61616161, cluster identity 5 [ 407.898357][T11509] tipc: Node number set to 1633771873 [ 408.281303][T11517] tmpfs: Bad value for 'mpol' [ 409.021605][T11516] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 409.145593][T11532] 9pnet_fd: p9_fd_create_tcp (11532): problem connecting socket to 127.0.0.1 [ 409.256353][T11536] fuse: Bad value for 'fd' [ 409.417837][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 409.417854][ T30] audit: type=1400 audit(1742818618.391:1187): avc: denied { wake_alarm } for pid=11545 comm="syz.2.1400" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 409.497490][ T30] audit: type=1400 audit(1742818618.451:1188): avc: denied { listen } for pid=11539 comm="syz.5.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 409.517852][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.823815][ T30] audit: type=1400 audit(1742818618.451:1189): avc: denied { setopt } for pid=11539 comm="syz.5.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 409.927405][T11558] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 409.935541][T11558] VFS: Can't find a romfs filesystem on dev nullb0. [ 409.935541][T11558] [ 409.946684][T11558] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1402'. [ 410.323596][ T30] audit: type=1400 audit(1742818619.131:1190): avc: denied { ioctl } for pid=11555 comm="syz.3.1403" path="socket:[28586]" dev="sockfs" ino=28586 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 410.599214][T11566] 9pnet_fd: Insufficient options for proto=fd [ 410.648748][T11556] syz.3.1403: attempt to access beyond end of device [ 410.648748][T11556] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 412.483970][T11583] 9pnet_fd: p9_fd_create_tcp (11583): problem connecting socket to 127.0.0.1 [ 413.298743][ T30] audit: type=1400 audit(1742818622.271:1191): avc: denied { ioctl } for pid=11601 comm="syz.2.1415" path="socket:[29360]" dev="sockfs" ino=29360 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 413.710446][T11608] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 413.715855][ T30] audit: type=1400 audit(1742818622.681:1192): avc: denied { append } for pid=11607 comm="syz.0.1417" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 413.719141][T11608] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 413.917282][T11613] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 413.945974][ T5831] block nbd3: Receive control failed (result -32) [ 413.946119][ T5820] block nbd3: Receive control failed (result -32) [ 414.557493][T11572] block nbd3: shutting down sockets [ 416.029891][T11629] overlayfs: failed to clone upperpath [ 417.249677][T11631] block nbd4: shutting down sockets [ 419.513345][ T8231] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 419.777391][ T8231] usb 5-1: Using ep0 maxpacket: 16 [ 419.789275][ T8231] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 419.809332][ T8231] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.835721][ T8231] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 420.067031][ T8231] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 420.080049][ T8231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.089586][ T8231] usb 5-1: Product: syz [ 420.095767][ T8231] usb 5-1: Manufacturer: syz [ 420.100556][ T8231] usb 5-1: SerialNumber: syz [ 420.136765][T11686] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 420.541111][T11675] 9pnet_fd: p9_fd_create_tcp (11675): problem connecting socket to 127.0.0.1 [ 421.289814][T11694] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.471285][T11694] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.554891][T11694] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.588023][ T8231] usb 5-1: 0:2 : does not exist [ 421.601781][T11694] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.621389][ T8231] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 421.648547][ T8231] usb 5-1: USB disconnect, device number 37 [ 421.797654][T11694] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.812571][T11694] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.826344][T11694] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.840223][T11694] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.443395][ T5867] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 422.760996][ T8231] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 422.923300][ T8231] usb 5-1: Using ep0 maxpacket: 8 [ 422.976869][ T8231] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 422.979969][ T5867] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 422.998220][ T8231] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.008646][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.021787][ T5867] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 196 [ 423.034972][ T5867] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 423.044057][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.054160][ T5867] usb 6-1: config 0 descriptor?? [ 423.072404][ T8231] usb 5-1: config 0 has no interface number 0 [ 423.128577][ T8231] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 423.167657][ T8231] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.517599][ T8231] usb 5-1: config 0 interface 52 has no altsetting 0 [ 423.525577][ T8231] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 423.535149][ T8231] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 423.543379][ T8231] usb 5-1: Manufacturer: syz [ 423.550741][ T8231] usb 5-1: config 0 descriptor?? [ 423.752981][T11762] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1448'. [ 423.951235][ T5867] corsair 0003:1B1C:1B09.000E: unknown main item tag 0x0 [ 423.976285][ T5867] corsair 0003:1B1C:1B09.000E: unknown main item tag 0x0 [ 423.997103][ T5867] corsair 0003:1B1C:1B09.000E: unknown main item tag 0x0 [ 424.012370][ T8231] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input22 [ 424.038355][ T5867] corsair 0003:1B1C:1B09.000E: unknown main item tag 0x0 [ 424.069719][ T5867] corsair 0003:1B1C:1B09.000E: unknown main item tag 0x0 [ 424.117383][ T5867] corsair 0003:1B1C:1B09.000E: unknown main item tag 0x0 [ 424.132969][ T5867] corsair 0003:1B1C:1B09.000E: unknown main item tag 0x0 [ 424.167326][ T30] audit: type=1400 audit(1742818633.121:1193): avc: denied { block_suspend } for pid=11738 comm="syz.5.1444" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 424.328457][ T5867] corsair 0003:1B1C:1B09.000E: hidraw0: USB HID v10.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.5-1/input0 [ 424.791556][ T5867] usb 5-1: USB disconnect, device number 38 [ 424.791586][ C1] synaptics_usb 5-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 425.295756][ T5868] usb 6-1: USB disconnect, device number 5 [ 426.375586][T11816] netlink: 'syz.4.1454': attribute type 10 has an invalid length. [ 426.383507][T11816] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1454'. [ 426.393793][T11816] bridge0: port 3(batadv0) entered blocking state [ 426.400267][T11816] bridge0: port 3(batadv0) entered forwarding state [ 426.407196][T11816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.715343][ T30] audit: type=1400 audit(1742818635.691:1194): avc: denied { write } for pid=11820 comm="syz.4.1455" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 426.760665][ T30] audit: type=1400 audit(1742818635.731:1195): avc: denied { setopt } for pid=11823 comm="syz.3.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 427.596191][ T8228] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 427.654779][T11846] SELinux: Context Z; is not valid (left unmapped). [ 428.373666][ T8228] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 429.033724][ T8228] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 429.043959][ T8228] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 429.052989][ T8228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.077449][T11836] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 429.572082][T11858] random: crng reseeded on system resumption [ 429.951911][ T8228] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 430.407979][ T8228] usb 4-1: USB disconnect, device number 32 [ 430.447969][T11878] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1466'. [ 430.693558][ T8231] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 431.199581][ T30] audit: type=1400 audit(1742818640.171:1196): avc: denied { read } for pid=11904 comm="syz.0.1469" path="socket:[29689]" dev="sockfs" ino=29689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 431.223336][ T30] audit: type=1400 audit(1742818640.171:1197): avc: denied { create } for pid=11904 comm="syz.0.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 431.278345][ T8231] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.289033][ T8231] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 431.325484][ T8231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.354830][ T8231] usb 5-1: config 0 descriptor?? [ 431.721377][ T8231] pwc: Askey VC010 type 2 USB webcam detected. [ 431.774078][ T8228] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 431.795784][ T8239] libceph: connect (1)[c::]:6789 error -101 [ 431.801807][ T8239] libceph: mon0 (1)[c::]:6789 connect error [ 432.007105][ T8228] usb 4-1: config 77 has an invalid interface number: 144 but max is 0 [ 432.021361][ T8228] usb 4-1: config 77 has no interface number 0 [ 432.030533][ T8228] usb 4-1: config 77 interface 144 altsetting 5 endpoint 0xC has invalid maxpacket 512, setting to 0 [ 432.043324][ T8228] usb 4-1: config 77 interface 144 altsetting 5 endpoint 0x6 is Bulk; changing to Interrupt [ 432.054496][ T8228] usb 4-1: config 77 interface 144 altsetting 5 has an endpoint descriptor with address 0x38, changing to 0x8 [ 432.080168][ T8239] libceph: connect (1)[c::]:6789 error -101 [ 432.086512][ T8239] libceph: mon0 (1)[c::]:6789 connect error [ 432.110789][ T8228] usb 4-1: config 77 interface 144 altsetting 5 endpoint 0x9 has invalid maxpacket 64, setting to 8 [ 432.142243][ T8228] usb 4-1: config 77 interface 144 altsetting 5 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 432.183700][ T8231] pwc: recv_control_msg error -71 req 02 val 2b00 [ 432.251354][ T8231] pwc: recv_control_msg error -71 req 02 val 2700 [ 432.268486][ T8228] usb 4-1: config 77 interface 144 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 432.308686][ T8231] pwc: recv_control_msg error -71 req 02 val 2c00 [ 432.402790][ T8228] usb 4-1: config 77 interface 144 has no altsetting 0 [ 432.433668][ T8231] pwc: recv_control_msg error -71 req 04 val 1000 [ 432.502020][ T8231] pwc: recv_control_msg error -71 req 04 val 1300 [ 432.522257][ T8228] usb 4-1: string descriptor 0 read error: -71 [ 432.542862][ T8231] pwc: recv_control_msg error -71 req 04 val 1400 [ 432.613592][ T8228] usb 4-1: Dual-Role OTG device on HNP port [ 432.748137][ T8231] pwc: recv_control_msg error -71 req 02 val 2000 [ 432.952320][ T8239] libceph: connect (1)[c::]:6789 error -101 [ 432.958387][ T8239] libceph: mon0 (1)[c::]:6789 connect error [ 433.022477][ T8228] usb 4-1: can't set HNP mode: -71 [ 433.033009][ T8231] pwc: recv_control_msg error -71 req 02 val 2100 [ 433.041020][ T8231] pwc: recv_control_msg error -71 req 04 val 1500 [ 433.051105][ T8231] pwc: recv_control_msg error -71 req 02 val 2500 [ 433.060857][ T8231] pwc: recv_control_msg error -71 req 02 val 2400 [ 433.072482][ T8231] pwc: recv_control_msg error -71 req 02 val 2600 [ 433.082435][ T8231] pwc: recv_control_msg error -71 req 02 val 2900 [ 433.091290][ T8231] pwc: recv_control_msg error -71 req 02 val 2800 [ 433.101544][ T8231] pwc: recv_control_msg error -71 req 04 val 1100 [ 433.110048][ T8231] pwc: recv_control_msg error -71 req 04 val 1200 [ 433.154872][ T8231] pwc: Registered as video103. [ 433.176312][ T8231] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 433.209739][ T8231] usb 5-1: USB disconnect, device number 39 [ 433.422569][T11968] sch_tbf: burst 661 is lower than device lo mtu (65550) ! [ 433.653298][ T8233] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 433.693688][ T8231] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 433.864375][ T8228] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 434.128838][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 434.141835][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 434.172169][ T8233] usb 1-1: Using ep0 maxpacket: 8 [ 434.177405][ T8231] usb 5-1: Using ep0 maxpacket: 8 [ 434.240377][ T8231] usb 5-1: config 162 has an invalid interface number: 253 but max is 0 [ 434.255458][ T8233] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 434.276528][ T8231] usb 5-1: config 162 has no interface number 0 [ 434.289151][ T8233] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.304762][ T8231] usb 5-1: config 162 interface 253 has no altsetting 0 [ 434.313712][ T8228] usb 4-1: unable to get BOS descriptor or descriptor too short [ 434.327539][ T8233] usb 1-1: config 0 has no interface number 0 [ 434.336907][ T8231] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 434.346430][ T8233] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 434.346803][ T8228] usb 4-1: not running at top speed; connect to a high speed hub [ 434.366118][ T8233] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 434.588768][T11917] ceph: No mds server is up or the cluster is laggy [ 434.603346][ T8231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.616816][ T8231] usb 5-1: Product: syz [ 434.621197][ T8233] usb 1-1: config 0 interface 52 has no altsetting 0 [ 434.673906][ T8228] usb 4-1: config 3 has an invalid interface number: 106 but max is 0 [ 434.693854][ T8231] usb 5-1: Manufacturer: syz [ 434.698485][ T8231] usb 5-1: SerialNumber: syz [ 434.703415][ T8228] usb 4-1: config 3 has no interface number 0 [ 434.710649][ T8228] usb 4-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 434.711022][ T8233] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 434.731217][ T8228] usb 4-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 434.754731][ T8228] usb 4-1: config 3 interface 106 has no altsetting 0 [ 434.774313][ T8233] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 434.782571][ T8233] usb 1-1: Manufacturer: syz [ 434.794692][ T8228] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 434.805643][T11994] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1484'. [ 434.841306][ T30] audit: type=1400 audit(1742818643.801:1198): avc: denied { getopt } for pid=11991 comm="syz.2.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 434.864978][ T8233] usb 1-1: config 0 descriptor?? [ 434.870873][ T8228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.887669][T11994] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1484'. [ 434.898203][ T8228] usb 4-1: Product: syz [ 434.902564][ T8228] usb 4-1: Manufacturer: syz [ 434.907320][ T8228] usb 4-1: SerialNumber: syz [ 434.920792][T11994] netlink: 'syz.5.1484': attribute type 6 has an invalid length. [ 434.921202][T11979] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 434.924043][ T30] audit: type=1400 audit(1742818643.801:1199): avc: denied { watch_mount } for pid=11991 comm="syz.2.1485" path="/402" dev="tmpfs" ino=2167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 434.929238][T11979] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 434.956410][ T30] audit: type=1400 audit(1742818643.801:1200): avc: denied { watch_reads } for pid=11991 comm="syz.2.1485" path="/402" dev="tmpfs" ino=2167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 436.690939][ T8233] usb 1-1: Can not set alternate setting to 1, error: -71 [ 436.698240][ T8233] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 436.748563][ T5868] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 436.762993][ T8233] usb 1-1: USB disconnect, device number 26 [ 436.828238][ T8231] go7007 5-1:162.253: probe with driver go7007 failed with error -12 [ 436.841338][ T8231] usb 5-1: USB disconnect, device number 40 [ 436.883474][ T5868] usb 6-1: device descriptor read/64, error -71 [ 437.704677][ T5868] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 437.853367][ T5868] usb 6-1: device descriptor read/64, error -71 [ 437.958803][ T8228] kobil_sct 4-1:3.106: KOBIL USB smart card terminal converter detected [ 437.988992][ T5868] usb usb6-port1: attempt power cycle [ 438.013805][ T8228] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 438.060740][ T30] audit: type=1326 audit(1742818647.034:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6818d169 code=0x7ffc0000 [ 438.108647][ T8228] usb 4-1: USB disconnect, device number 34 [ 438.135743][ T8228] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 438.164405][ T8228] kobil_sct 4-1:3.106: device disconnected [ 438.187353][ T30] audit: type=1326 audit(1742818647.064:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6818d169 code=0x7ffc0000 [ 438.272068][ T30] audit: type=1326 audit(1742818647.064:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a6818d169 code=0x7ffc0000 [ 438.309254][T12075] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 438.309254][T12075] The task syz.5.1493 (12075) triggered the difference, watch for misbehavior. [ 438.340829][ T30] audit: type=1326 audit(1742818647.064:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6818d169 code=0x7ffc0000 [ 438.423305][ T30] audit: type=1326 audit(1742818647.064:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6818d169 code=0x7ffc0000 [ 438.481122][T12075] syzkaller0: entered promiscuous mode [ 438.499135][ T30] audit: type=1326 audit(1742818647.074:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a6818bad0 code=0x7ffc0000 [ 438.539416][T12075] syzkaller0: entered allmulticast mode [ 438.560765][ T30] audit: type=1326 audit(1742818647.074:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a6818bad0 code=0x7ffc0000 [ 438.597857][ T30] audit: type=1326 audit(1742818647.074:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6818d169 code=0x7ffc0000 [ 438.632943][ T30] audit: type=1326 audit(1742818647.074:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6818d169 code=0x7ffc0000 [ 438.670086][ T30] audit: type=1326 audit(1742818647.084:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2a6818d169 code=0x7ffc0000 [ 438.744850][ T8228] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 438.893449][ T8228] usb 5-1: device descriptor read/64, error -71 [ 439.014383][ T8231] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 439.143305][ T8228] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 439.236027][ T8231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 439.280285][ T8231] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 439.323447][ T8228] usb 5-1: device descriptor read/64, error -71 [ 439.335340][ T8231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 439.386049][ T8231] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 439.395694][ T8231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.420978][ T8231] usb 4-1: Product: syz [ 439.440346][ T8231] usb 4-1: Manufacturer: syz [ 439.456110][ T8228] usb usb5-port1: attempt power cycle [ 439.472151][ T8231] usb 4-1: SerialNumber: syz [ 439.530804][ T8231] usb 4-1: config 0 descriptor?? [ 439.563484][T12068] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 439.582841][T12068] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 439.622496][ T8231] usb 4-1: ucan: probing device on interface #0 [ 439.823379][ T8228] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 439.868689][ T8228] usb 5-1: device descriptor read/8, error -71 [ 439.944077][ T5820] block nbd0: Receive control failed (result -32) [ 439.953015][T12096] block nbd0: shutting down sockets [ 440.078636][T12042] Set syz1 is full, maxelem 65536 reached [ 440.102554][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.109129][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.113324][ T8228] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 440.153976][ T8228] usb 5-1: device descriptor read/8, error -71 [ 440.272335][ T8228] usb usb5-port1: unable to enumerate USB device [ 440.704498][T12114] random: crng reseeded on system resumption [ 441.055594][ T8231] ucan 4-1:0.0: probe with driver ucan failed with error -110 [ 441.952014][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1501'. [ 442.334287][ T5868] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 442.436991][T12140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1505'. [ 442.504785][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 442.511096][ T5868] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 442.519348][ T5868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.530308][ T5868] usb 5-1: config 0 has no interface number 0 [ 442.536462][ T5868] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 442.547535][ T5868] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.560821][ T5868] usb 5-1: config 0 interface 52 has no altsetting 0 [ 442.568474][ T5868] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 442.587416][ T5868] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 442.598587][ T5868] usb 5-1: Manufacturer: syz [ 442.618302][ T5868] usb 5-1: config 0 descriptor?? [ 442.790526][ T8233] usb 4-1: USB disconnect, device number 35 [ 442.833530][ T5868] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input24 [ 443.078034][ T5868] usb 5-1: USB disconnect, device number 45 [ 443.084073][ C0] synaptics_usb 5-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 443.514261][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 443.514277][ T30] audit: type=1400 audit(1742818652.484:1286): avc: denied { setopt } for pid=12187 comm="syz.2.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 443.606260][ T30] audit: type=1400 audit(1742818652.574:1287): avc: denied { setopt } for pid=12163 comm="syz.0.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 444.370516][T12198] fuse: Unknown parameter 'dont_hash' [ 444.370522][T12197] fuse: Unknown parameter 'dont_hash' [ 444.406484][ T30] audit: type=1400 audit(1742818653.384:1288): avc: denied { connect } for pid=12187 comm="syz.2.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 444.439004][ T8231] libceph: connect (1)[c::]:6789 error -101 [ 444.476652][ T8231] libceph: mon0 (1)[c::]:6789 connect error [ 444.499252][ T30] audit: type=1400 audit(1742818653.474:1289): avc: denied { append } for pid=12205 comm="syz.4.1513" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 444.577303][T12188] ceph: No mds server is up or the cluster is laggy [ 444.626983][T12210] lo speed is unknown, defaulting to 1000 [ 444.633415][T12210] lo speed is unknown, defaulting to 1000 [ 444.641868][T12210] lo speed is unknown, defaulting to 1000 [ 444.687484][T12210] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 444.750405][T12210] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 444.753666][ T8231] libceph: connect (1)[c::]:6789 error -101 [ 444.826173][ T8231] libceph: mon0 (1)[c::]:6789 connect error [ 444.842393][ T30] audit: type=1400 audit(1742818653.474:1290): avc: denied { open } for pid=12205 comm="syz.4.1513" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 445.058750][ T30] audit: type=1400 audit(1742818654.014:1291): avc: denied { read } for pid=12213 comm="syz.3.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 445.208673][T12210] lo speed is unknown, defaulting to 1000 [ 445.814452][T12210] lo speed is unknown, defaulting to 1000 [ 445.835998][T12210] lo speed is unknown, defaulting to 1000 [ 445.842117][T12210] lo speed is unknown, defaulting to 1000 [ 445.853963][T12210] lo speed is unknown, defaulting to 1000 [ 445.863821][T12210] lo speed is unknown, defaulting to 1000 [ 445.921916][ T30] audit: type=1400 audit(1742818654.254:1292): avc: denied { getopt } for pid=12213 comm="syz.3.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 446.011037][ T30] audit: type=1400 audit(1742818654.944:1293): avc: denied { write } for pid=12219 comm="syz.3.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 447.560726][ T8231] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 447.725156][ T8231] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 447.732954][ T8231] usb 1-1: can't read configurations, error -61 [ 447.817557][ T5820] block nbd3: Receive control failed (result -32) [ 447.825393][ T5831] block nbd3: Receive control failed (result -32) [ 447.832708][T12226] block nbd3: shutting down sockets [ 447.873615][ T8231] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 448.134434][ T8231] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 448.177520][ T8231] usb 1-1: can't read configurations, error -61 [ 448.185046][ T8231] usb usb1-port1: attempt power cycle [ 448.543395][ T8231] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 449.095573][ T8231] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 449.107263][ T8231] usb 1-1: can't read configurations, error -61 [ 449.127960][T12179] Set syz1 is full, maxelem 65536 reached [ 449.254011][ T8231] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 449.384019][T12270] overlayfs: failed to clone upperpath [ 449.385240][ T8231] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 449.407934][ T8231] usb 1-1: can't read configurations, error -61 [ 449.423592][ T8231] usb usb1-port1: unable to enumerate USB device [ 450.110699][ T30] audit: type=1400 audit(1742818658.684:1294): avc: denied { mount } for pid=12272 comm="syz.4.1528" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 450.155378][T12279] efs: device does not support 512 byte blocks [ 450.184465][T12279] device does not support 512 byte blocks [ 450.184465][T12279] [ 450.300261][T12284] SELinux: ebitmap: start bit 0 comes after start bit 768 [ 450.308723][ T30] audit: type=1400 audit(1742818659.244:1295): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 450.342853][T12284] SELinux: failed to load policy [ 450.353264][ T30] audit: type=1400 audit(1742818659.274:1296): avc: denied { load_policy } for pid=12283 comm="syz.0.1529" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 451.179648][ T30] audit: type=1326 audit(1742818660.154:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12296 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6818d169 code=0x7ffc0000 [ 451.302123][T12299] bond0: entered promiscuous mode [ 451.312996][T12299] bond_slave_0: entered promiscuous mode [ 451.339189][T12299] bond_slave_1: entered promiscuous mode [ 451.364959][ T30] audit: type=1326 audit(1742818660.184:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12296 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a6818d169 code=0x7ffc0000 [ 451.383535][T12299] bridge0: entered promiscuous mode [ 451.631950][ T30] audit: type=1326 audit(1742818660.184:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12296 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6818d169 code=0x7ffc0000 [ 451.788290][ T30] audit: type=1326 audit(1742818660.184:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12296 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2a6818d169 code=0x7ffc0000 [ 451.788393][T12299] batadv0: entered promiscuous mode [ 451.811586][ C0] vkms_vblank_simulate: vblank timer overrun [ 451.840277][T12299] bond1: entered promiscuous mode [ 451.852315][T12299] bond0: left promiscuous mode [ 451.858709][T12299] bond_slave_0: left promiscuous mode [ 451.865959][T12299] bond_slave_1: left promiscuous mode [ 451.871592][T12299] bridge0: left promiscuous mode [ 451.878620][ T30] audit: type=1326 audit(1742818660.184:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12296 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6818d169 code=0x7ffc0000 [ 451.904955][T12299] batadv0: left promiscuous mode [ 451.911152][T12299] bond1: left promiscuous mode [ 451.919766][ T30] audit: type=1326 audit(1742818660.184:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12296 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f2a6818d169 code=0x7ffc0000 [ 451.943226][ C0] vkms_vblank_simulate: vblank timer overrun [ 452.045615][ T30] audit: type=1326 audit(1742818660.184:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12296 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6818d169 code=0x7ffc0000 [ 452.083230][T12304] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1532'. [ 452.176485][T12311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1533'. [ 453.516085][T12317] dlm: non-version read from control device 36 [ 455.302011][T12346] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 455.309059][T12346] VFS: Can't find a romfs filesystem on dev nullb0. [ 455.309059][T12346] [ 455.319396][T12346] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1541'. [ 456.444811][T12337] syz.3.1540 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 456.455931][T12337] CPU: 1 UID: 0 PID: 12337 Comm: syz.3.1540 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 456.455950][T12337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 456.455958][T12337] Call Trace: [ 456.455963][T12337] [ 456.455968][T12337] dump_stack_lvl+0x16c/0x1f0 [ 456.455991][T12337] dump_header+0x101/0x930 [ 456.456014][T12337] oom_kill_process+0x270/0xa60 [ 456.456032][T12337] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 456.456055][T12337] out_of_memory+0x351/0x1700 [ 456.456078][T12337] ? __pfx_out_of_memory+0x10/0x10 [ 456.456096][T12337] ? rcu_read_unlock+0x17/0x60 [ 456.456111][T12337] ? find_held_lock+0x2d/0x110 [ 456.456131][T12337] mem_cgroup_out_of_memory+0x207/0x270 [ 456.456149][T12337] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 456.456172][T12337] ? do_raw_spin_unlock+0x172/0x230 [ 456.456189][T12337] try_charge_memcg+0x54c/0xaf0 [ 456.456207][T12337] ? __pfx_try_charge_memcg+0x10/0x10 [ 456.456222][T12337] ? rcu_read_unlock+0x17/0x60 [ 456.456237][T12337] ? __pfx_lock_release+0x10/0x10 [ 456.456255][T12337] ? trace_lock_acquire+0x14e/0x1f0 [ 456.456271][T12337] ? mem_cgroup_swapin_charge_folio+0x200/0x460 [ 456.456291][T12337] charge_memcg+0x8a/0x310 [ 456.456306][T12337] mem_cgroup_swapin_charge_folio+0xbb/0x460 [ 456.456325][T12337] __read_swap_cache_async+0x436/0x660 [ 456.456350][T12337] ? __pfx___read_swap_cache_async+0x10/0x10 [ 456.456371][T12337] ? swp_swap_info+0x30/0x130 [ 456.456387][T12337] ? __pfx_swp_swap_info+0x10/0x10 [ 456.456402][T12337] ? mark_lock+0xb5/0xc60 [ 456.456418][T12337] ? __lock_acquire+0xcc5/0x3c40 [ 456.456440][T12337] swap_cluster_readahead+0x3ec/0x740 [ 456.456465][T12337] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 456.456488][T12337] ? filemap_get_entry+0x1a8/0x3c0 [ 456.456518][T12337] ? get_vma_policy+0x248/0x3c0 [ 456.456537][T12337] swapin_readahead+0x12c/0xd60 [ 456.456561][T12337] ? __pfx_lock_release+0x10/0x10 [ 456.456580][T12337] ? __pfx_swapin_readahead+0x10/0x10 [ 456.456600][T12337] ? __filemap_get_folio+0x333/0xc10 [ 456.456625][T12337] ? swap_cache_get_folio+0x1e0/0x460 [ 456.456646][T12337] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 456.456665][T12337] ? __pfx_get_swap_device+0x10/0x10 [ 456.456680][T12337] ? __pfx___lock_acquire+0x10/0x10 [ 456.456702][T12337] do_swap_page+0x680/0x5a60 [ 456.456732][T12337] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 456.456752][T12337] ? rcu_is_watching+0x12/0xc0 [ 456.456767][T12337] ? trace_lock_acquire+0x14e/0x1f0 [ 456.456782][T12337] ? __pfx_do_swap_page+0x10/0x10 [ 456.456802][T12337] ? lock_acquire+0x2f/0xb0 [ 456.456819][T12337] ? ___pte_offset_map+0x42/0x540 [ 456.456837][T12337] ? __pfx_default_wake_function+0x10/0x10 [ 456.456858][T12337] ? ___pte_offset_map+0x1b9/0x540 [ 456.456880][T12337] __handle_mm_fault+0x1055/0x2a40 [ 456.456898][T12337] ? lock_vma_under_rcu+0x6b9/0x980 [ 456.456919][T12337] ? __pfx___handle_mm_fault+0x10/0x10 [ 456.456951][T12337] handle_mm_fault+0x3fa/0xaa0 [ 456.456968][T12337] do_user_addr_fault+0x60d/0x13f0 [ 456.456992][T12337] exc_page_fault+0x5c/0xc0 [ 456.457011][T12337] asm_exc_page_fault+0x26/0x30 [ 456.457029][T12337] RIP: 0033:0x7fc822063bcc [ 456.457041][T12337] Code: 66 0f 1f 44 00 00 69 3d e6 1a e7 00 e8 03 00 00 48 8d 1d e7 23 34 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 456.457054][T12337] RSP: 002b:00007ffd527f9200 EFLAGS: 00010283 [ 456.457065][T12337] RAX: 0000000000000000 RBX: 00007fc8223a6080 RCX: 0000000000000000 [ 456.457074][T12337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555782d8808 [ 456.457081][T12337] RBP: 00007fc8223a7ba0 R08: 0000000000000000 R09: 00007fc823092000 [ 456.457090][T12337] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000006f7fb [ 456.457098][T12337] R13: 00007ffd527f92f0 R14: ffffffffffffffff R15: 00007ffd527f9310 [ 456.457117][T12337] [ 456.457122][T12337] memory: usage 307200kB, limit 307200kB, failcnt 418 [ 457.002716][T12337] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 457.015018][T12337] kmem: usage 306896kB, limit 9007199254740988kB, failcnt 0 [ 457.028858][T12337] Memory cgroup stats for /syz3: [ 457.028975][T12337] cache 303104 [ 457.153947][T12354] Invalid ELF header magic: != ELF [ 457.285140][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 457.316931][ T30] audit: type=1400 audit(1742818666.124:1313): avc: denied { module_load } for pid=12349 comm="syz.5.1544" path="/sys/kernel/notes" dev="sysfs" ino=1401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 457.429111][T12337] rss 0 [ 457.476165][T12337] rss_huge 0 [ 457.479709][T12337] shmem 0 [ 457.482707][T12337] mapped_file 303104 [ 457.486771][T12337] dirty 0 [ 457.491847][T12337] writeback 0 [ 457.497341][T12337] workingset_refault_anon 2323 [ 457.506551][T12337] workingset_refault_file 241 [ 457.560599][T12337] swap 229376 [ 457.570111][T12337] swapcached 0 [ 457.585053][T12337] pgpgin 264940 [ 457.662405][T12337] pgpgout 264866 [ 457.670916][T12337] pgfault 276551 [ 457.683816][T12337] pgmajfault 381 [ 457.687376][T12337] inactive_anon 0 [ 457.690980][T12337] active_anon 0 [ 457.712907][T12337] inactive_file 303104 [ 457.727868][ T30] audit: type=1400 audit(1742818666.704:1314): avc: denied { connect } for pid=12356 comm="syz.0.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 457.731182][T12337] active_file 0 [ 457.763812][T12337] unevictable 0 [ 457.787260][ T30] audit: type=1400 audit(1742818666.754:1315): avc: denied { accept } for pid=12356 comm="syz.0.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 457.815550][T12337] hierarchical_memory_limit 314572800 [ 457.846459][T12337] hierarchical_memsw_limit 9223372036854771712 [ 457.914840][T12337] total_cache 303104 [ 458.041446][T12337] total_rss 0 [ 458.082473][T12337] total_rss_huge 0 [ 458.167262][T12337] total_shmem 0 [ 458.178477][T12337] total_mapped_file 303104 [ 458.182905][T12337] total_dirty 0 [ 458.203824][T12337] total_writeback 0 [ 458.207632][T12337] total_workingset_refault_anon 2323 [ 458.230155][T12337] total_workingset_refault_file 241 [ 458.248939][T12337] total_swap 229376 [ 458.252789][T12337] total_swapcached 0 [ 458.290802][T12337] total_pgpgin 264940 [ 458.295100][T12337] total_pgpgout 264866 [ 458.309357][T12337] total_pgfault 276570 [ 458.315328][T12337] total_pgmajfault 381 [ 458.327280][T12337] total_inactive_anon 0 [ 458.342350][T12337] total_active_anon 0 [ 458.352488][ T30] audit: type=1400 audit(1742818667.314:1316): avc: denied { setopt } for pid=12368 comm="syz.5.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 458.374602][T12369] 9pnet_fd: Insufficient options for proto=fd [ 458.380790][T12337] total_inactive_file 303104 [ 458.394579][T12337] total_active_file 0 [ 458.398559][T12337] total_unevictable 0 [ 458.402530][T12337] anon_cost 0 [ 458.417634][T12337] file_cost 0 [ 458.420952][T12337] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1540,pid=12337,uid=0 [ 458.449476][T12337] Memory cgroup out of memory: Killed process 12337 (syz.3.1540) total-vm:101908kB, anon-rss:928kB, file-rss:23084kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 459.213263][ T30] audit: type=1400 audit(1742818668.174:1317): avc: denied { bind } for pid=12371 comm="syz.4.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 459.689099][T12381] : entered promiscuous mode [ 460.777381][T12394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.808957][ T30] audit: type=1400 audit(1742818669.784:1318): avc: denied { read } for pid=12398 comm="syz.5.1558" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 460.813743][T12399] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 80044dfc, magic 4d != 6b] [ 460.869110][ T30] audit: type=1400 audit(1742818669.784:1319): avc: denied { open } for pid=12398 comm="syz.5.1558" path="/44/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 460.900028][ T30] audit: type=1400 audit(1742818669.794:1320): avc: denied { ioctl } for pid=12398 comm="syz.5.1558" path="/44/file0/file0" dev="fuse" ino=0 ioctlcmd=0x4dfc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 461.629829][ T5867] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 461.789013][ T30] audit: type=1400 audit(1742818670.764:1321): avc: denied { ioctl } for pid=12420 comm="syz.5.1562" path="socket:[31340]" dev="sockfs" ino=31340 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 461.860043][ T30] audit: type=1400 audit(1742818670.794:1322): avc: denied { write } for pid=12420 comm="syz.5.1562" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 461.904548][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 461.914033][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.006914][ T5867] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 1.00 [ 462.247521][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.257602][ T5867] usb 5-1: config 0 descriptor?? [ 462.363671][ T8233] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 462.523295][ T8233] usb 6-1: Using ep0 maxpacket: 16 [ 462.529553][ T8233] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.540595][ T8233] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.550338][ T8233] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 462.563114][ T8233] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 462.575994][ T8233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.590503][ T8233] usb 6-1: config 0 descriptor?? [ 462.993848][ T5867] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 463.004749][ T8233] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 463.012523][ T8233] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 463.019750][ T8233] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 463.027474][ T8233] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 463.034793][ T8233] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 463.042163][ T8233] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 463.049538][ T8233] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 463.056971][ T8233] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 463.064240][ T8233] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 463.071502][ T8233] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 463.078770][ T8233] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 463.086106][ T8233] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 463.093457][ T8233] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 463.100688][ T8233] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 463.108107][ T8233] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 463.115895][ T8233] microsoft 0003:045E:07DA.000F: No inputs registered, leaving [ 463.124220][ T8233] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 463.136040][ T8233] microsoft 0003:045E:07DA.000F: no inputs found [ 463.142371][ T8233] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway [ 463.163579][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 463.170039][ T5867] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 463.182445][ T5867] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 463.195691][ T5867] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 463.207933][ T5867] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.237813][ T8239] usb 6-1: USB disconnect, device number 9 [ 463.254564][ T5867] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 463.264069][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.412040][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 463.412057][ T30] audit: type=1400 audit(1742818672.384:1328): avc: denied { name_bind } for pid=12486 comm="syz.2.1570" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 463.439327][ C0] vkms_vblank_simulate: vblank timer overrun [ 463.480805][ T5867] usb 1-1: GET_CAPABILITIES returned 0 [ 463.486364][ T5867] usbtmc 1-1:16.0: can't read capabilities [ 463.776353][ T5867] usb 1-1: USB disconnect, device number 31 [ 463.891206][T12497] dccp_v6_rcv: dropped packet with invalid checksum [ 464.222223][ T8233] usb 5-1: USB disconnect, device number 46 [ 464.231801][ T30] audit: type=1400 audit(1742818673.214:1329): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 464.251798][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.312567][T12516] overlayfs: missing 'lowerdir' [ 464.772932][T12536] Driver unsupported XDP return value 0 on prog (id 239) dev N/A, expect packet loss! [ 465.208749][ T8233] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 465.570823][ T30] audit: type=1400 audit(1742818674.534:1330): avc: denied { setopt } for pid=12540 comm="syz.0.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 465.661088][ T8228] IPVS: starting estimator thread 0... [ 465.754730][T12550] IPVS: using max 25 ests per chain, 60000 per kthread [ 465.771042][ T8233] usb 5-1: no configurations [ 465.825949][ T8233] usb 5-1: can't read configurations, error -22 [ 466.023367][ T8233] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 466.034195][ T30] audit: type=1400 audit(1742818675.004:1331): avc: denied { ioctl } for pid=12554 comm="syz.3.1583" path="socket:[31992]" dev="sockfs" ino=31992 ioctlcmd=0x64a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 466.304647][ T30] audit: type=1400 audit(1742818675.274:1332): avc: denied { bind } for pid=12558 comm="syz.0.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 466.346456][ T8233] usb 5-1: no configurations [ 466.351182][ T8233] usb 5-1: can't read configurations, error -22 [ 466.380279][ T8233] usb usb5-port1: attempt power cycle [ 466.445770][ T30] audit: type=1400 audit(1742818675.424:1333): avc: denied { connect } for pid=12558 comm="syz.0.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 466.753472][ T8233] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 466.867890][ T8233] usb 5-1: no configurations [ 466.891621][ T8233] usb 5-1: can't read configurations, error -22 [ 467.093626][ T8233] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 467.186892][ T8233] usb 5-1: no configurations [ 467.192859][ T8233] usb 5-1: can't read configurations, error -22 [ 467.228605][ T8233] usb usb5-port1: unable to enumerate USB device [ 467.423744][ T5867] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 467.431573][ T5868] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 467.588313][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 467.597886][ T5868] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 467.664803][ T5867] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 467.734114][ T5868] usb 4-1: config 0 has no interface number 0 [ 467.773373][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.827749][ T5868] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 467.927056][ T5867] usb 1-1: config 0 has no interface number 0 [ 467.939324][ T30] audit: type=1400 audit(1742818676.914:1334): avc: denied { search } for pid=12591 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.946868][ T5868] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 467.974010][ T5867] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 467.985865][ T30] audit: type=1400 audit(1742818676.954:1335): avc: denied { read } for pid=12596 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.997541][ T5867] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 468.046576][ T30] audit: type=1400 audit(1742818676.954:1336): avc: denied { open } for pid=12596 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.047712][ T5868] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 468.071698][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.097097][ T5867] usb 1-1: config 0 interface 52 has no altsetting 0 [ 468.104505][ T5868] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 468.116297][ T5867] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 468.128374][ T30] audit: type=1400 audit(1742818676.954:1337): avc: denied { getattr } for pid=12596 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.129666][ T5867] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 468.153795][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.259798][ T5868] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 468.449744][T12609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.468771][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 468.468788][ T30] audit: type=1400 audit(1742818677.424:1341): avc: denied { write } for pid=12603 comm="syz.5.1595" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 468.498862][ T5868] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 468.511979][ T5867] usb 1-1: Manufacturer: syz [ 468.517274][ T5868] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 468.531107][ T5867] usb 1-1: config 0 descriptor?? [ 468.537440][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.558928][ T5868] usb 4-1: config 0 descriptor?? [ 468.563306][ T30] audit: type=1400 audit(1742818677.534:1342): avc: denied { write } for pid=12591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.568501][T12569] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 468.587093][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.594272][T12569] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 468.611002][ T30] audit: type=1400 audit(1742818677.534:1343): avc: denied { add_name } for pid=12591 comm="dhcpcd-run-hook" name="resolv.conf.lapb2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.634826][ T30] audit: type=1400 audit(1742818677.534:1344): avc: denied { create } for pid=12591 comm="dhcpcd-run-hook" name="resolv.conf.lapb2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 468.657328][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.668409][ T30] audit: type=1400 audit(1742818677.534:1345): avc: denied { write } for pid=12591 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb2.link" dev="tmpfs" ino=1894 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 468.694634][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.705267][ T30] audit: type=1400 audit(1742818677.534:1346): avc: denied { append } for pid=12591 comm="dhcpcd-run-hook" name="resolv.conf.lapb2.link" dev="tmpfs" ino=1894 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 468.770331][ T5868] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 468.780482][ T5867] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input25 [ 468.829804][ T30] audit: type=1400 audit(1742818677.804:1347): avc: denied { remove_name } for pid=12630 comm="rm" name="resolv.conf.lapb2.link" dev="tmpfs" ino=1894 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.105940][ T8231] usb 4-1: USB disconnect, device number 36 [ 469.279397][ T8231] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 469.483113][ T8230] usb 1-1: USB disconnect, device number 32 [ 469.483160][ C0] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 469.513374][ T30] audit: type=1400 audit(1742818677.804:1348): avc: denied { unlink } for pid=12630 comm="rm" name="resolv.conf.lapb2.link" dev="tmpfs" ino=1894 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 469.539139][ T30] audit: type=1400 audit(1742818677.914:1349): avc: denied { shutdown } for pid=12616 comm="syz.4.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 469.641015][ T8231] hid-generic 0000:0003:0000.0010: unknown main item tag 0x0 [ 469.656367][ T8231] hid-generic 0000:0003:0000.0010: unknown main item tag 0x0 [ 469.732026][ T8231] hid-generic 0000:0003:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz1 [ 469.969379][T12681] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 470.577273][ T8228] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 471.248787][ T8228] usb 6-1: config index 0 descriptor too short (expected 62378, got 36) [ 471.267634][ T8228] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.307091][ T8228] usb 6-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 471.349919][ T8228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.386326][ T8228] usb 6-1: config 0 descriptor?? [ 472.084634][ T30] audit: type=1400 audit(1742818680.934:1350): avc: denied { cmd } for pid=12660 comm="syz.5.1598" path="socket:[31587]" dev="sockfs" ino=31587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 472.618511][ T5868] usb 6-1: USB disconnect, device number 10 [ 476.726692][ T5868] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 476.772417][T12801] random: crng reseeded on system resumption [ 477.837633][ T30] audit: type=1400 audit(1742818686.814:1351): avc: denied { write } for pid=12813 comm="syz.0.1621" name="/" dev="configfs" ino=1131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 478.154356][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.166723][ T30] audit: type=1400 audit(1742818686.814:1352): avc: denied { add_name } for pid=12813 comm="syz.0.1621" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 478.213577][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.233325][ T5868] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 478.243452][ T30] audit: type=1400 audit(1742818686.814:1353): avc: denied { create } for pid=12813 comm="syz.0.1621" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 478.270692][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.304493][ T5868] usb 6-1: config 0 descriptor?? [ 478.352935][T12831] 9p: Unknown uid 00000000004294967295 [ 478.403306][ T5867] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 479.068584][ T5868] usbhid 6-1:0.0: can't add hid device: -71 [ 479.078646][T12839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=12839 comm=syz.4.1624 [ 479.094451][ T5868] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 479.108900][ T5867] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 479.158432][ T5867] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 479.176681][ T30] audit: type=1400 audit(1742818688.144:1354): avc: denied { map } for pid=12846 comm="syz.5.1626" path="socket:[32831]" dev="sockfs" ino=32831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 479.201777][T12839] tipc: Enabling of bearer rejected, failed to enable media [ 479.210556][ T5868] usb 6-1: USB disconnect, device number 11 [ 479.224184][ T5867] usb 1-1: config 135 has no interface number 0 [ 479.242395][ T5867] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.262825][ T5867] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 479.272957][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.286179][ T5867] usb 1-1: Product: syz [ 479.290370][ T5867] usb 1-1: Manufacturer: syz [ 479.298108][ T5867] usb 1-1: SerialNumber: syz [ 479.309780][ T5867] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 479.317237][ T5867] usb 1-1: No valid video chain found. [ 479.473343][ T5866] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 479.518846][ T8231] usb 1-1: USB disconnect, device number 33 [ 479.645914][ T5866] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 479.658868][ T5866] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 479.684836][ T5868] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 479.693384][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.717533][ T5866] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 479.844980][T12901] 9pnet_fd: Insufficient options for proto=fd [ 479.867210][ T5868] usb 6-1: not running at top speed; connect to a high speed hub [ 479.886317][T12901] syz.2.1633 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 480.026801][ T5868] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.042238][ T5868] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.057550][ T5868] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 480.071692][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.663621][ T5868] usb 6-1: Product: с [ 480.667744][ T5868] usb 6-1: Manufacturer: ц [ 480.672266][ T5868] usb 6-1: SerialNumber: ࠝ [ 480.753042][ T5866] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 480.794271][ T5866] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 480.807595][ T5866] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 481.011347][ T30] audit: type=1400 audit(1742818689.984:1355): avc: denied { listen } for pid=12851 comm="syz.3.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 481.515854][ T5868] usb 6-1: 0:2 : does not exist [ 481.572996][ T8231] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 481.592201][ T5868] usb 6-1: USB disconnect, device number 12 [ 481.753312][ T8231] usb 5-1: Using ep0 maxpacket: 8 [ 481.769383][ T8231] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 481.780083][ T8231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.788404][ T8231] usb 5-1: Product: syz [ 481.792750][ T8231] usb 5-1: Manufacturer: syz [ 481.797423][ T8231] usb 5-1: SerialNumber: syz [ 481.814318][ T8231] usb 5-1: config 0 descriptor?? [ 481.826625][ T8231] gspca_main: se401-2.14.0 probing 047d:5003 [ 482.273357][ T8231] gspca_se401: Bayer format not supported! [ 483.103427][ T5868] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 483.255055][ T5868] usb 6-1: Using ep0 maxpacket: 16 [ 483.275423][ T5868] usb 6-1: config 1 interface 0 has no altsetting 0 [ 483.288683][ T5868] usb 6-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.40 [ 483.312473][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.329720][ T5868] usb 6-1: Product: Д [ 483.338905][ T5868] usb 6-1: Manufacturer: 휪꨸薚Ь橽迄킀䨇㝲ٍ雄爦꿱७멭蚻䯿˒ﵺ온≲怰텦眓엔햰끔ニﲾ둂벶 [ 483.366959][ T5868] usb 6-1: SerialNumber: 㠊 [ 483.410600][ T5866] usb 4-1: USB disconnect, device number 37 [ 483.617561][T12979] random: crng reseeded on system resumption [ 484.594283][ T5867] usb 5-1: USB disconnect, device number 51 [ 484.645237][ T5868] usbhid 6-1:1.0: can't add hid device: -71 [ 484.710052][ T5868] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 484.738634][ T5868] usb 6-1: USB disconnect, device number 13 [ 484.757876][T12995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1646'. [ 484.767567][ T30] audit: type=1400 audit(1742818693.724:1356): avc: denied { setopt } for pid=12994 comm="syz.4.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 484.983977][ T30] audit: type=1400 audit(1742818693.964:1357): avc: denied { create } for pid=13009 comm="syz.4.1648" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 485.091373][ T30] audit: type=1400 audit(1742818693.964:1358): avc: denied { write } for pid=13009 comm="syz.4.1648" name="file0" dev="tmpfs" ino=1713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 485.206121][ T30] audit: type=1400 audit(1742818693.964:1359): avc: denied { open } for pid=13009 comm="syz.4.1648" path="/311/file0" dev="tmpfs" ino=1713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 485.477204][ T30] audit: type=1400 audit(1742818693.964:1360): avc: denied { ioctl } for pid=13009 comm="syz.4.1648" path="/311/file0" dev="tmpfs" ino=1713 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 485.503692][ T30] audit: type=1400 audit(1742818694.294:1361): avc: denied { listen } for pid=12998 comm="syz.0.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 485.576657][ T30] audit: type=1326 audit(1742818694.544:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.3.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82218d169 code=0x7ffc0000 [ 485.635450][ T30] audit: type=1326 audit(1742818694.544:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.3.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82218d169 code=0x7ffc0000 [ 485.658911][ C0] vkms_vblank_simulate: vblank timer overrun [ 485.674598][ T30] audit: type=1326 audit(1742818694.544:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.3.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fc82218d169 code=0x7ffc0000 [ 485.729317][ T30] audit: type=1326 audit(1742818694.544:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.3.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82218d169 code=0x7ffc0000 [ 485.752884][ C0] vkms_vblank_simulate: vblank timer overrun [ 485.853430][ T5868] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 486.613567][ T5867] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 486.635490][ T5868] usb 6-1: config 0 interface 0 has no altsetting 0 [ 486.697037][ T5868] usb 6-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 486.706337][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.716043][ T5868] usb 6-1: config 0 descriptor?? [ 486.765579][T13051] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 486.775971][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 486.785489][ T5867] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 486.797743][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.808256][ T5867] usb 1-1: config 0 has no interface number 0 [ 486.814688][ T5867] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 486.833860][ T5867] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 486.854692][ T5867] usb 1-1: config 0 interface 52 has no altsetting 0 [ 486.872991][ T5867] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 487.058174][T13060] random: crng reseeded on system resumption [ 487.787836][ T5867] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 487.802298][ T5867] usb 1-1: Manufacturer: syz [ 487.820244][ T5867] usb 1-1: config 0 descriptor?? [ 488.013275][ T5868] logitech-hidpp-device 0003:046D:C091.0011: unknown main item tag 0x0 [ 488.021763][ T5868] logitech-hidpp-device 0003:046D:C091.0011: unknown main item tag 0x0 [ 488.113657][ T5868] logitech-hidpp-device 0003:046D:C091.0011: item fetching failed at offset 2/5 [ 488.129360][ T5868] logitech-hidpp-device 0003:046D:C091.0011: hidpp_probe:parse failed [ 488.157495][ T5868] logitech-hidpp-device 0003:046D:C091.0011: probe with driver logitech-hidpp-device failed with error -22 [ 488.531364][ T5867] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input27 [ 488.789777][ T8228] usb 6-1: USB disconnect, device number 14 [ 488.875462][ T5831] block nbd3: Receive control failed (result -32) [ 488.882368][T13072] block nbd3: shutting down sockets [ 488.902920][ T8231] usb 1-1: USB disconnect, device number 34 [ 488.903024][ C0] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 489.501792][T13123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1667'. [ 491.955273][T13142] ceph: No mds server is up or the cluster is laggy [ 491.962198][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 491.972932][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 492.718093][T13157] hfs: unable to load iocharset "io#harset" [ 493.000908][T13155] block nbd4: shutting down sockets [ 493.373554][ T5820] Bluetooth: hci5: command 0x0405 tx timeout [ 493.505866][T13179] block nbd3: Device being setup by another task [ 493.821992][T13201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1685'. [ 493.838499][T13201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1685'. [ 493.903399][ T8231] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 494.115330][ T8231] usb 1-1: Using ep0 maxpacket: 8 [ 494.213512][T13207] block nbd5: Device being setup by another task [ 494.255231][ T8231] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 494.266131][ T8231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.289256][ T8231] usb 1-1: config 0 descriptor?? [ 494.370942][T13172] block nbd3: shutting down sockets [ 494.378350][T13211] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 494.563283][ T8231] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 494.702289][T13223] pimreg: entered allmulticast mode [ 494.932191][ T5820] block nbd5: Receive control failed (result -32) [ 494.940586][T13205] block nbd5: shutting down sockets [ 495.183296][ T8228] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 495.333434][ T8228] usb 4-1: Using ep0 maxpacket: 8 [ 495.342098][ T8228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.357547][ T8228] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.372063][ T8228] usb 4-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00 [ 495.383211][ T8228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.418578][ T8228] usb 4-1: config 0 descriptor?? [ 496.294647][ T5820] block nbd5: Receive control failed (result -32) [ 496.301654][T13232] block nbd5: shutting down sockets [ 496.500370][ T8228] usbhid 4-1:0.0: can't add hid device: -71 [ 496.508991][ T8228] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 496.522525][ T8228] usb 4-1: USB disconnect, device number 38 [ 497.220095][ T8231] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 497.284143][ T8231] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 497.413519][ T8231] asix 1-1:0.0: probe with driver asix failed with error -71 [ 497.483722][ T8231] usb 1-1: USB disconnect, device number 35 [ 497.850374][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 497.850391][ T30] audit: type=1400 audit(1742818706.824:1376): avc: denied { execmod } for pid=13266 comm="syz.5.1699" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=33303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 497.927002][T13273] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1698'. [ 498.168024][ T30] audit: type=1400 audit(1742818706.824:1377): avc: denied { execute } for pid=13266 comm="syz.5.1699" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=33303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 498.233920][ T30] audit: type=1400 audit(1742818706.834:1378): avc: denied { map } for pid=13266 comm="syz.5.1699" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 498.294651][T13287] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 498.543316][ T8231] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 498.694615][ T8231] usb 1-1: config 0 interface 0 has no altsetting 0 [ 498.704586][ T8231] usb 1-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 498.722104][ T8231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.746565][ T8231] usb 1-1: config 0 descriptor?? [ 498.751582][ T30] audit: type=1400 audit(1742818707.724:1379): avc: denied { map } for pid=13309 comm="syz.4.1708" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 498.783867][ T5868] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 498.814931][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1709'. [ 498.964746][ T5868] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 498.973576][ T5868] usb 6-1: config 0 has no interface number 0 [ 498.979752][ T5868] usb 6-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 498.992086][ T5868] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x8B has invalid wMaxPacketSize 0 [ 499.002552][ T5868] usb 6-1: config 0 interface 200 has no altsetting 0 [ 499.011707][ T5868] usb 6-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39 [ 499.021014][ T5867] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 499.042840][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.051811][ T5868] usb 6-1: Product: syz [ 499.063351][ T5868] usb 6-1: Manufacturer: syz [ 499.073088][ T5868] usb 6-1: SerialNumber: syz [ 499.079544][ T5868] usb 6-1: config 0 descriptor?? [ 499.183281][ T5867] usb 5-1: device descriptor read/64, error -71 [ 499.187395][ T8231] logitech-hidpp-device 0003:046D:C091.0012: unknown main item tag 0x0 [ 499.200942][ T8231] logitech-hidpp-device 0003:046D:C091.0012: unknown main item tag 0x0 [ 499.210389][ T8231] logitech-hidpp-device 0003:046D:C091.0012: item fetching failed at offset 2/5 [ 499.222448][ T8231] logitech-hidpp-device 0003:046D:C091.0012: hidpp_probe:parse failed [ 499.263295][ T8231] logitech-hidpp-device 0003:046D:C091.0012: probe with driver logitech-hidpp-device failed with error -22 [ 499.406105][ T8239] usb 1-1: USB disconnect, device number 36 [ 499.433493][ T5867] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 499.563327][ T5867] usb 5-1: device descriptor read/64, error -71 [ 499.674375][ T5867] usb usb5-port1: attempt power cycle [ 499.754916][T13356] loop6: detected capacity change from 0 to 524287999 [ 499.766955][ C1] blk_print_req_error: 54 callbacks suppressed [ 499.766973][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 499.782316][ C1] buffer_io_error: 54 callbacks suppressed [ 499.782326][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 499.800370][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 499.809561][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 499.819844][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 499.828997][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 499.841367][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 499.850597][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 499.883334][T13357] loop6: detected capacity change from 524287999 to 0 [ 499.895832][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 499.905035][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 499.912933][T13356] ldm_validate_partition_table(): Disk read failed. [ 499.919848][T13356] Dev loop6: unable to read RDB block 0 [ 499.925639][T13356] loop6: unable to read partition table [ 499.931506][T13356] loop6: partition table beyond EOD, truncated [ 499.937973][T13356] loop_reread_partitions: partition scan of loop6 (u0Aj$UX ȿ`LA89>iDK#U[fW7ؖgv) failed (rc=-5) [ 500.013809][ T5867] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 500.044078][ T5867] usb 5-1: device descriptor read/8, error -71 [ 500.472109][T13366] block nbd0: shutting down sockets [ 500.533621][ T5867] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 500.564942][ T5867] usb 5-1: device descriptor read/8, error -71 [ 501.059400][T13381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1726'. [ 501.116354][T13383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1726'. [ 501.582331][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.588710][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.795185][ T5822] block nbd3: Receive control failed (result -32) [ 501.801727][ T5831] block nbd3: Receive control failed (result -32) [ 501.818746][ T5868] usbhid 6-1:0.200: couldn't find an input interrupt endpoint [ 502.073455][T13368] block nbd3: shutting down sockets [ 502.165634][ T5867] usb usb5-port1: unable to enumerate USB device [ 502.175042][ T5868] usb 6-1: USB disconnect, device number 15 [ 502.325033][T13399] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 502.596994][T13403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1727'. [ 503.643842][ T5867] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 503.810634][T13422] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1735'. [ 503.823340][T13422] netlink: 'syz.5.1735': attribute type 7 has an invalid length. [ 503.832654][T13420] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 503.849080][T13422] netlink: 'syz.5.1735': attribute type 8 has an invalid length. [ 503.857446][T13420] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 503.870239][T13422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1735'. [ 503.904687][ T5867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 503.911460][ T5867] usb 5-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 503.929994][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.963502][ T5867] usb 5-1: config 0 descriptor?? [ 504.405080][ T5867] logitech-hidpp-device 0003:046D:C091.0013: unknown main item tag 0x0 [ 504.414837][ T5867] logitech-hidpp-device 0003:046D:C091.0013: unknown main item tag 0x0 [ 504.424687][ T5867] logitech-hidpp-device 0003:046D:C091.0013: item fetching failed at offset 2/5 [ 504.734732][ T31] INFO: task syz.1.1133:9923 blocked for more than 143 seconds. [ 505.032782][ T5867] logitech-hidpp-device 0003:046D:C091.0013: hidpp_probe:parse failed [ 505.041110][ T5867] logitech-hidpp-device 0003:046D:C091.0013: probe with driver logitech-hidpp-device failed with error -22 [ 505.054368][ T5867] usb 5-1: USB disconnect, device number 56 [ 505.144309][ T31] Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 505.152050][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 505.218339][ T31] task:syz.1.1133 state:D stack:26928 pid:9923 tgid:9922 ppid:5825 task_flags:0x400740 flags:0x00000006 [ 505.355046][ T31] Call Trace: [ 505.427333][ T31] [ 505.430317][ T31] __schedule+0xf43/0x5890 [ 505.443285][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 505.458694][ T31] ? __pfx___schedule+0x10/0x10 [ 505.458728][ T31] ? schedule+0x298/0x350 [ 505.458749][ T31] ? __pfx_lock_release+0x10/0x10 [ 505.458781][ T31] ? lock_acquire+0x2f/0xb0 [ 505.458804][ T31] ? schedule+0x1fd/0x350 [ 505.458828][ T31] schedule+0xe7/0x350 [ 505.458850][ T31] schedule_timeout+0x244/0x280 [ 505.458870][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 505.458899][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 505.458924][ T31] __wait_for_common+0x3e1/0x600 [ 505.458947][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 505.458971][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 505.458993][ T31] ? __pfx_try_to_wake_up+0x10/0x10 [ 505.459028][ T31] wait_for_completion_state+0x1c/0x40 [ 505.459051][ T31] do_coredump+0x86f/0x4410 [ 505.459074][ T31] ? unwind_get_return_address+0x59/0xa0 [ 505.459110][ T31] ? __pfx_do_coredump+0x10/0x10 [ 505.459136][ T31] ? stack_trace_save+0x95/0xd0 [ 505.459157][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 505.459177][ T31] ? hlock_class+0x4e/0x130 [ 505.459195][ T31] ? stack_depot_save_flags+0x28/0x9c0 [ 505.459228][ T31] ? kasan_save_stack+0x42/0x60 [ 505.459247][ T31] ? kasan_save_stack+0x33/0x60 [ 505.459263][ T31] ? kasan_save_track+0x14/0x30 [ 505.459285][ T31] ? kasan_save_free_info+0x3b/0x60 [ 505.459308][ T31] ? __kasan_slab_free+0x51/0x70 [ 505.459326][ T31] ? kmem_cache_free+0x2e2/0x4d0 [ 505.459342][ T31] ? __sigqueue_free+0xba/0x2a0 [ 505.459361][ T31] ? get_signal+0xcbc/0x26c0 [ 505.459387][ T31] ? arch_do_signal_or_restart+0x90/0x7e0 [ 505.459407][ T31] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 505.459460][ T31] ? find_held_lock+0x2d/0x110 [ 505.459483][ T31] ? proc_coredump_connector+0x2d2/0x4f0 [ 505.459511][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 505.459550][ T31] get_signal+0x230b/0x26c0 [ 505.459586][ T31] ? __pfx_get_signal+0x10/0x10 [ 505.459611][ T31] ? rcu_is_watching+0x12/0xc0 [ 505.459633][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 505.459663][ T31] arch_do_signal_or_restart+0x90/0x7e0 [ 505.459685][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 505.459715][ T31] ? rcu_is_watching+0x12/0xc0 [ 505.459739][ T31] syscall_exit_to_user_mode+0x150/0x2a0 [ 505.459766][ T31] do_syscall_64+0xda/0x250 [ 505.459790][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.459814][ T31] RIP: 0033:0x7fdaa644e750 [ 505.459829][ T31] RSP: 002b:00007fdaa732a3f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 505.459850][ T31] RAX: 0000000000000000 RBX: 00007fdaa67a5fa8 RCX: 00007fdaa658d169 [ 505.459862][ T31] RDX: 00007fdaa732a400 RSI: 00007fdaa732a530 RDI: 000000000000000b [ 505.459874][ T31] RBP: 00007fdaa67a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 505.459886][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa67a5fac [ 505.459897][ T31] R13: 0000000000000000 R14: 00007fff0f223350 R15: 00007fff0f223438 [ 505.459922][ T31] [ 505.460039][ T31] [ 505.460039][ T31] Showing all locks held in the system: [ 505.460050][ T31] 1 lock held by khungtaskd/31: [ 505.460061][ T31] #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 505.460144][ T31] 2 locks held by getty/5582: [ 505.460154][ T31] #0: ffff88803224b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 505.460199][ T31] #1: ffffc90002fe62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 505.460255][ T31] 3 locks held by kworker/u9:7/5831: [ 505.460265][ T31] #0: ffff88807e468948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 505.460323][ T31] #1: ffffc9000303fd18 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 505.460374][ T31] #2: ffff88807bb24d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x22/0x90 [ 505.460426][ T31] 6 locks held by kworker/u8:8/6280: [ 505.460440][ T31] 4 locks held by kworker/u8:12/9222: [ 505.460452][ T31] 1 lock held by syz.2.1738/13432: [ 505.460461][ T31] #0: ffff888077b7a9e0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1d5/0x440 [ 505.460503][ T31] 2 locks held by syz.2.1738/13436: [ 505.460514][ T31] 2 locks held by syz.5.1739/13435: [ 505.460524][ T31] #0: ffff888031db51c0 (&tty->legacy_mutex){+.+.}-{4:4}, at: __tty_hangup.part.0+0xb8/0x890 [ 505.460569][ T31] #1: ffff888031db50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock+0x65/0xb0 [ 505.460612][ T31] 5 locks held by syz.5.1739/13441: [ 505.460622][ T31] #0: ffff88801ee8e1c0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_release+0x86/0x1410 [ 505.460669][ T31] #1: ffff88807c5761c0 (&tty->legacy_mutex/1){+.+.}-{4:4}, at: __tty_hangup.part.0+0xb8/0x890 [ 505.460723][ T31] #2: ffff88807c5760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_hangup+0x30/0x6a0 [ 505.460770][ T31] #3: ffff88807c5762e8 (&tty->termios_rwsem/1){++++}-{4:4}, at: n_tty_flush_buffer+0x25/0x1b0 [ 505.460831][ T31] #4: ffff8880b863ec18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 505.460885][ T31] 2 locks held by syz.3.1741/13443: [ 505.460896][ T31] 1 lock held by syz.3.1741/13448: [ 505.460907][ T31] [ 505.460912][ T31] ============================================= [ 505.460912][ T31] [ 505.460921][ T31] NMI backtrace for cpu 1 [ 505.460929][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 505.460947][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 505.460957][ T31] Call Trace: [ 505.460962][ T31] [ 505.460969][ T31] dump_stack_lvl+0x116/0x1f0 [ 505.460994][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 505.461014][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 505.461037][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 505.461058][ T31] watchdog+0xf62/0x12b0 [ 505.461089][ T31] ? __pfx_watchdog+0x10/0x10 [ 505.461113][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 505.461136][ T31] ? __kthread_parkme+0x148/0x220 [ 505.461154][ T31] ? __pfx_watchdog+0x10/0x10 [ 505.461180][ T31] kthread+0x3af/0x750 [ 505.461201][ T31] ? __pfx_kthread+0x10/0x10 [ 505.461226][ T31] ? __pfx_kthread+0x10/0x10 [ 505.461246][ T31] ret_from_fork+0x45/0x80 [ 505.461268][ T31] ? __pfx_kthread+0x10/0x10 [ 505.461293][ T31] ret_from_fork_asm+0x1a/0x30 [ 505.461323][ T31] [ 505.461329][ T31] Sending NMI from CPU 1 to CPUs 0: [ 505.461351][ C0] NMI backtrace for cpu 0 [ 505.461360][ C0] CPU: 0 UID: 0 PID: 13436 Comm: syz.2.1738 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 505.461374][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 505.461381][ C0] RIP: 0010:debug_smp_processor_id+0x0/0x20 [ 505.461404][ C0] Code: e8 75 a7 41 f6 e8 c0 74 f4 ff 90 65 ff 0d 80 3c ac 74 e9 40 ff ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 c7 c6 a0 69 d3 8b 48 c7 c7 e0 69 d3 8b e9 f9 fe ff [ 505.461416][ C0] RSP: 0018:ffffc90003b375c0 EFLAGS: 00000282 [ 505.461427][ C0] RAX: 0000000000000001 RBX: ffffc90003b37780 RCX: ffffc9000e0d9000 [ 505.461436][ C0] RDX: 0000000000000001 RSI: ffffffff81ef92d5 RDI: 0000000000000005 [ 505.461444][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 505.461451][ C0] R10: 0000000000000000 R11: 0000000000000005 R12: ffffea0002089d00 [ 505.461459][ C0] R13: 0000000000000aef R14: ffff88805958db80 R15: dffffc0000000000 [ 505.461467][ C0] FS: 00007f55d9fd56c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 505.461481][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 505.461490][ C0] CR2: 00007efe39b78ab8 CR3: 0000000035ea8000 CR4: 00000000003526f0 [ 505.461498][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 505.461506][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 505.461514][ C0] Call Trace: [ 505.461518][ C0] [ 505.461523][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 505.461542][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 505.461557][ C0] ? nmi_handle+0x1ac/0x5d0 [ 505.461575][ C0] ? __pfx_debug_smp_processor_id+0x10/0x10 [ 505.461593][ C0] ? default_do_nmi+0x6a/0x160 [ 505.461606][ C0] ? exc_nmi+0x170/0x1e0 [ 505.461618][ C0] ? end_repeat_nmi+0xf/0x53 [ 505.461638][ C0] ? xas_next_entry+0x2b5/0x3c0 [ 505.461653][ C0] ? __pfx_debug_smp_processor_id+0x10/0x10 [ 505.461671][ C0] ? __pfx_debug_smp_processor_id+0x10/0x10 [ 505.461690][ C0] ? __pfx_debug_smp_processor_id+0x10/0x10 [ 505.461708][ C0] [ 505.461712][ C0] [ 505.461716][ C0] rcu_is_watching+0x12/0xc0 [ 505.461730][ C0] rcu_read_lock_held+0x1e/0x50 [ 505.461745][ C0] xas_next_entry+0x2ba/0x3c0 [ 505.461762][ C0] next_uptodate_folio+0x29/0x4a0 [ 505.461779][ C0] filemap_map_pages+0x648/0x16b0 [ 505.461797][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 505.461817][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 505.461835][ C0] ? do_pte_missing+0xcf9/0x3e10 [ 505.461848][ C0] ? lock_acquire+0x2f/0xb0 [ 505.461864][ C0] ? do_pte_missing+0xcf9/0x3e10 [ 505.461877][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 505.461893][ C0] do_pte_missing+0xdb8/0x3e10 [ 505.461908][ C0] __handle_mm_fault+0x103c/0x2a40 [ 505.461923][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 505.461935][ C0] ? follow_page_pte+0x3ac/0x1490 [ 505.461947][ C0] ? __pfx_lock_release+0x10/0x10 [ 505.461970][ C0] handle_mm_fault+0x3fa/0xaa0 [ 505.461984][ C0] __get_user_pages+0x773/0x36f0 [ 505.462001][ C0] ? __pfx_mt_find+0x10/0x10 [ 505.462018][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 505.462034][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 505.462047][ C0] ? __mm_populate+0x21d/0x380 [ 505.462061][ C0] populate_vma_page_range+0x27f/0x3a0 [ 505.462074][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 505.462086][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 505.462104][ C0] ? vm_mmap_pgoff+0x31a/0x440 [ 505.462117][ C0] __mm_populate+0x1d6/0x380 [ 505.462129][ C0] ? __pfx___mm_populate+0x10/0x10 [ 505.462142][ C0] ? up_write+0x1b2/0x520 [ 505.462161][ C0] vm_mmap_pgoff+0x352/0x440 [ 505.462173][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 505.462191][ C0] ? sched_setaffinity+0xdd/0x430 [ 505.462210][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 505.462224][ C0] ? __x64_sys_futex+0x1ea/0x4c0 [ 505.462240][ C0] ksys_mmap_pgoff+0x7d/0x5c0 [ 505.462257][ C0] ? rcu_is_watching+0x12/0xc0 [ 505.462272][ C0] __x64_sys_mmap+0x125/0x190 [ 505.462290][ C0] do_syscall_64+0xcd/0x250 [ 505.462307][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.462323][ C0] RIP: 0033:0x7f55dc18d169 [ 505.462333][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.462344][ C0] RSP: 002b:00007f55d9fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 505.462355][ C0] RAX: ffffffffffffffda RBX: 00007f55dc3a6080 RCX: 00007f55dc18d169 [ 505.462364][ C0] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 505.462372][ C0] RBP: 00007f55dc20e2a0 R08: ffffffffffffffff R09: 0000000000000000 [ 505.462380][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 505.462388][ C0] R13: 0000000000000000 R14: 00007f55dc3a6080 R15: 00007ffdf8de5358 [ 505.462401][ C0] [ 505.463389][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 505.463399][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 505.463417][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 505.463426][ T31] Call Trace: [ 505.463431][ T31] [ 505.463437][ T31] dump_stack_lvl+0x3d/0x1f0 [ 505.463462][ T31] panic+0x71d/0x800 [ 505.463481][ T31] ? __pfx_panic+0x10/0x10 [ 505.463498][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 505.463523][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 505.463544][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 505.463566][ T31] ? watchdog+0xdcc/0x12b0 [ 505.463591][ T31] ? watchdog+0xdbf/0x12b0 [ 505.463618][ T31] watchdog+0xddd/0x12b0 [ 505.463646][ T31] ? __pfx_watchdog+0x10/0x10 [ 505.463669][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 505.463692][ T31] ? __kthread_parkme+0x148/0x220 [ 505.463710][ T31] ? __pfx_watchdog+0x10/0x10 [ 505.463733][ T31] kthread+0x3af/0x750 [ 505.463753][ T31] ? __pfx_kthread+0x10/0x10 [ 505.463776][ T31] ? __pfx_kthread+0x10/0x10 [ 505.463797][ T31] ret_from_fork+0x45/0x80 [ 505.463818][ T31] ? __pfx_kthread+0x10/0x10 [ 505.463839][ T31] ret_from_fork_asm+0x1a/0x30 [ 505.463866][ T31] [ 505.464063][ T31] Kernel Offset: disabled