last executing test programs: 10m10.342449611s ago: executing program 2 (id=55): socket$inet6_dccp(0xa, 0x6, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket(0x2, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r6, 0x8008700b, 0xfffffffffffff788) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r7, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$tun(r0, &(0x7f0000000440)={@val={0x1f}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101, 0x0) 10m7.49383848s ago: executing program 2 (id=59): socket$nl_generic(0x10, 0x3, 0x10) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0x80000010) rmdir(&(0x7f0000000100)='./control\x00') 10m6.991917959s ago: executing program 2 (id=61): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) 10m4.825854276s ago: executing program 2 (id=67): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000100), &(0x7f0000000300)='./file0\x00', 0x8, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000400), &(0x7f0000000440)=0xe) sendmmsg(r3, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30b5", 0x95}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="d29f", 0x2}], 0x1}}], 0x2, 0x0) recvmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r6, 0x0, 0x3, &(0x7f0000000100)=""/2, &(0x7f0000000300)=0x2) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000380), &(0x7f00000003c0)=0x10) 10m1.119319124s ago: executing program 2 (id=75): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) 9m59.643036337s ago: executing program 2 (id=78): r0 = socket(0x1d, 0x2, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fanotify_init(0x200, 0x0) syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = dup(0xffffffffffffffff) accept$inet6(r8, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="66b9800000c00f326635010000000f3066b8000000000f23d80f21f80f20d86635080000000f22d80f23f80f06360f082e36f30f09f30f1ec466d3c770bc66b8020000000f23c80f21f866350c00a0000f23f8360fc76e80bad004ec", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_clone(0x10040100, &(0x7f00000000c0)="5ba4623fc9bffba7c959c30ad6cb22f361299a797aa7a4e102096773607d3d50b0bf062a2a48f6c91ea7ca12a51fa76dcc42b2049e9efef4b4be2aa2a9f98ce333b1067984f59633497f9a59eaf50066f24a95a4deb4b383666d420920472288d74d5455357bfdd72b7e286d6c66da96972bcf26f65f4cc1b63e6aa57396959f02ca200044dcd438db20453315352b7359657bf6514c22cd130aecf8b7367a35fc6606571bde3658a08e7b30ead9b49a8d0683a31fb13cb139b0bd363a8222f06a3c077f11e7ca08f3fa", 0xca, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="9214b06c2629d89f2165a81594ec5bfa41ab58510c339615e97ac36e1d5f87c9c4a934a15e50e8d4ce18e81eeac4bf87155112a8a227cad6dbf458ab2ecf92a183bd0757cf") ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x4938, 0x0, 0x0, 0x5, 0x0, 0x1}}) 9m43.640106427s ago: executing program 32 (id=78): r0 = socket(0x1d, 0x2, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fanotify_init(0x200, 0x0) syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = dup(0xffffffffffffffff) accept$inet6(r8, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="66b9800000c00f326635010000000f3066b8000000000f23d80f21f80f20d86635080000000f22d80f23f80f06360f082e36f30f09f30f1ec466d3c770bc66b8020000000f23c80f21f866350c00a0000f23f8360fc76e80bad004ec", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_clone(0x10040100, &(0x7f00000000c0)="5ba4623fc9bffba7c959c30ad6cb22f361299a797aa7a4e102096773607d3d50b0bf062a2a48f6c91ea7ca12a51fa76dcc42b2049e9efef4b4be2aa2a9f98ce333b1067984f59633497f9a59eaf50066f24a95a4deb4b383666d420920472288d74d5455357bfdd72b7e286d6c66da96972bcf26f65f4cc1b63e6aa57396959f02ca200044dcd438db20453315352b7359657bf6514c22cd130aecf8b7367a35fc6606571bde3658a08e7b30ead9b49a8d0683a31fb13cb139b0bd363a8222f06a3c077f11e7ca08f3fa", 0xca, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="9214b06c2629d89f2165a81594ec5bfa41ab58510c339615e97ac36e1d5f87c9c4a934a15e50e8d4ce18e81eeac4bf87155112a8a227cad6dbf458ab2ecf92a183bd0757cf") ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x4938, 0x0, 0x0, 0x5, 0x0, 0x1}}) 1m35.587441097s ago: executing program 5 (id=1355): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) syz_emit_ethernet(0x6c, &(0x7f00000002c0)={@broadcast, @random="9d6f61fa0500", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0, 0x0, 0x0]}, {}, {}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="f6c5cdd50b89338e6f0228b937225c21a87072407fe83d5fecd7bcca9b3fb6c714baa7d905bd76d4f38eba0ffafc067da9e5b2a863dbea1f11e32b455862ad205d1de267dbf9edb296fda48092e372fd3166c91d636b627f4ce223d2fff7db30abd245c174812a8ebfce720483d74f6658daaba3ea9e453d789d9d1d8b63c91f02b1282f122d5847241f305a5d791a7188c946ed5d5e5343c04968e62b064aeadeafd55ddb6a1b724a9adf29b15c4c55c9afd709d19cf29df117c69d1f855b647f2d6dc3ad9cc2e413cda65ca8d3fd777fdf88827428723d37b89a7330dddd234f39187db8e54905b8eb0dc851f51ff37b5deb69b64bbd27b72881267f94a88974a56b1d3178d49c209d6f4e974c00f25a87255c3804b1150f98d46437f5333b200651dfd1ae939125483cec1690ecb4d449ae4f2bdf88d50382440dbe1699017f21c0f1e0c85cd339a9f87046af063b54b923d4eaa04fc8dabb3bb3e3bc83f0657b5a3c4cdfce3c325abe45a39b794d13057e3a036ec20c4eb1c18a7501a8bf3899626fe01b2b9c18ab08eaa972ab9f8a786888162c7f77db751c1ab88db854ad8a99c7307a52571fd4d0a8ca5a6f4f5e46396bab29e4a5bb6f7c40404be7357b47028a1cd2b780abbba9e37d182866a9171ddea543a5684ff6445d4c3ba61b4300a1556e85518301862b398e43f61d461054469f693c42f995a000dc9b950b277bbc5a9bec872462a0938ef0e0ba4f4d2bff4d81804996a9f97893c02b2deff1abf1a6cb7987f446132f55a10aaf537d93422ed22fa659ceda5939cf18398f8632a257abbf68d4854e452ceb5acc02c7b65d67b582e159fb5039ecfe636dfd00218f2e5d1e2ebeca027472d63fdd2b61d7bbd9258a3fbb14ee2559845a638e07bbde84f87a42b59a09c1bc877b7e51a4ea42c64bcb3b3c8043f1604c569308bd6ddf438204df167580f5aefe2a8beabb77a8fd3392f99e3a43a7cfa0a68b1b21a307aeecd5b7a3742d74ff1790b13f1026ebec296210301d48d9354646382a18d247300bfd8aca878051a2d667ad2ee489edfeb3c1c912cc6a6c573fd92dd4cd1b6d2fb1bbdc86ddd8bf515c28f15ebafe858df78e8a783b293db3144c44397cbaeeadea44655c6350562166bda3accf7a2e65cf3eb7beace08760337e2dff8c9611fb131b345f44dba2aa2eee0bb4ec719c59a269e71ffc0775c5c193e341a833d38edf8a1f01f66b9fd039ff55c884257ec7330f333e579e66ac67097bfe31b2b78d88b81b640351da3bea710e38d8b50b0a63814f4638df1680d2217dfe7364dc228ea79f74e678b338105391e8c1e041cae3d2ccb9d1b034d96b811bf06515b3f4dd02cf2cf9f9884a6a1af39f219fde0b1caee2065536b8e900bf4fe9d87396cb0854ff28db253382a8f1e6c2a2805b5d5c8b756640a49a092f8fbc5ab87e511d790519e9e79c1336b2af288b1b07871858966197f65919009c435e6ca5bc89a15fae0e3534e50cbacb3cb2ee519a9894f08facb453a7ada35c0cd8e6ac71cf9ceb21c1b944d81a16a3299c730fe1ddb164505e2df5e4dc7f46c3fa3230a9cc3845298d4abf909565a67be3316ca881540f2920c8fb6ffe5ffc66ef477476cc4941ba03795287f408b6175df89274e189bc2e12e93f5d8aaa532400946a7a0cb6cacb55d4947d0c02da9e2345b4d0cc92a570019ac51f64b29b7e509109500f9fe8129196bc46230a1848ad7dc721efd97f1cbee41a1e520da4cda9fa5a0024d7865e637d0f17f240647f11f4d41a39e29643917f6ccd8680d83cfaa33081c3dd613ba2ebe736539834ba7977d2617b85b073a4532c8e6cb3dc3ecb492f23b573ee103ad6c56a5930904e836e9390a8b20470de2c7e0d1b52000366cbc198caa4917b593334a449840a093bbd709a6f835eb4338e23b12f59efd0fe6a8f7d108e6c40d63b06b43639a73822b431b636c3c6cfa2c973fd43aab1ebb560eb5b556b98758583195190651d9f12bec2a2db9c87f879af59d9e72786e416ea8fa36ff4a4f08d56c5e208b9995fd9ed0607d3af20b1eb51dc0943cd96bee0cc78875fac1dc471f80664ef9eb1f146d5b6871842ae1c51e83523f28a149346df307eae77929a81c235f5593d7eb30581b0650a8759d5a59b5c2697c461e17d8458b13dc88935b878f71f0597d46924bc84714ca7af2df5749b1b0fbe1950aade8d85555887809f9d4cb5d8d6cdd0ddede90e2fd122d1168f0c7e535aefe0385ce12a5cb1060498ba51b28fc344e6c6094b1cf6263007e299d7ceae7814c664f43bc2b8e989779e1a2a36e7e209175c197117966925ced8cd941fb4d37d05a5c771ba579671d505d6af7fb70fe764d906fa84f046fb4429d82bc7f4ed72f686bf2f923ec7bd48b1be8773ef8a51235825cb6c54d444021e823ba2614e7d93920a96d23f19d9adfcabe1716fea4979ef4d74fadc6fd53e8d6c6704c4eb04a039ba4c83d15afdb195a36f292ba9a2728cd85311076aa6a484c01fbf9fad617f4870fcbd1cd453aeaa391968287263852732552443e3388bd07d975cd2a11624fa2d0d931034b940c4b2babe262706c6cd72007c5fd5744564babc9fc37da476cb38ed0de6b530864e26a6febeb8d901d40c771a0cf2f498830487d83368ff3f8af68a0ffa5762d3f2c9cf2a66e2338d3e3655b647685c2dcacba997eac420d5618c3d268b85795fa49e37ee504521017439581a6c5c064f0184e4cad2b8134e2f9b9ec42981c155775d7d744bfff7adb3f7599f159c7cf1d7d56fb7cddf5b4f8ee8a3dcfbc1151b3d253771db09879f48c3c0cc9506e97c776fa8251c21d5fed9dba8ca6674e45ac2a6bef86ae18b175ffb5d281f58527661ef7d5651b28db85c1b7cc305ab5b34fb49a32778390d3b6d4e78d06d3d863eff86435d36be3043529fb9b4d061a7a983d6e287fa83925dfab1b526d6bf510a29f9d6ad493bbb4da5fdf0aef4f16ff50799b016dc4230aaf87b9ef8953f8ad522ab4c3ec3209a57852cbdb5e39628ad107b248d6f07d123fb0e68d7b7aa8558478de5dee88032de6ccbbcab0ecfe8fccb1681816db894fdc24a9b6cf8ad5690efb01c8b4840255a5d5563b4cb73609f0a5337738e179fd9577bb795eb5a89a4ee4e2b2bed5fc65ba1efb911889e131a0b010c5699d7f6b869ffff3945208feee8d245eb45590f2c67b97d186307dbee5327ef60340386ae04d45f981061b80d33ed6db2e5dcd711d68f8d9befdca10334e9636de1a2d6e6de2888d0984aae79b636eb0576f6cc9f450320b7e946eb82e9e1f8b3477f382090c79a9524a69f3416eadba673ff24cb1846358680d370e6ae98230256ebad4826f90ef8189b95f3b6275950c33ec2781bf438bbcce8ee350f3c1475b026a6c189db5101981b21f82ba8d8f62e852ccc5109a2780c70eb4a0b014c0c06ef46ff506c481b8082154db687b644ff122e5f35af5882212834a5b696afda432241f966d5706fa7c00be4a4912b6adb8e5629d0e18bb2ed4e2d7b6dbe79920d21ed0491f7a5017ae5ccdee5b498f61bb9ad5845a6268abebf80338c20c09530675a8366bfd4ea746957dd7337f1c1184751b649a399891ad2b6306bb062b9b2dc8a8b09302ea3386ccd78d9a3a0314c3df264ce81048391ae66ec9eeda8c70efe95146205d0b6bed2c362f2920615d41c7d12fc3991000a080061dad4e34587ff1684c6756f55dfd249d2d62bef74b5e4a40a63a2bc14a473cf913d5a4fd289d1792fc693c4a5f85326eebc52994a34e16af861438f22633fc5a4ce0d30d37ac0e2277e072f78375d7b1443e1af9647c23decfc411a3d0def781ce6679d92872fbc27dbd4a7edc2acfe565103d472fbde7ac626248a5305cf6e1c5fc81e9b71adb2523839b9425c72a67409539d611240ff5ad04ea2b3d063e197f5663606aeb0b76fa2e1121e3815506fe4a9ac09d555c1b8d8c9749f5dd5096130aaab80d9b721a831013885e3a376a57f97db4f1878372c7ac241b7424b86d97ae5fa3a0943f55c64cdbb4aa3209c4fbee3d9ed201e2bfccee01d33bd99c01689e1f23b185acb82e75cd2a161c316334f4887c8225f11ec1354105e3180d67ebb3a98d1178cca8332eb73555f53ed86c7285fc6c85570be32e7fabffbd9b4c80274db8faab4a4d29f8bfa6db38daf4ca8442aad66e40581f40a63e50b3a33d9a3e32f4440b761d149a8d71c138f74d5b0e10d9266788499a19f03a17726226e27c899c538bf4c219d7a035bdab2c5b347bcb176555fa451594050c6196a2236e5b0981eabab3519dd10ed1ffb6334476cbb06059384f02c164f278d49391c6069b9adf25c14870e2fe1f28abdb325d3101fe464f829e971067dc9231fc3bc9d0e2a6c8e13db15f4b69b3b028a587a092453296f7f790a547ba191bca2ca929d1477344d7ba30b826a10152580e5ed7418f481e4b10139a4acea1a1c42f748cafff8b0215c6be50e0af09905366f0403c53f8c746ff06ec45d69d3c4039d0980af45c8a2d6cadafe477ffe3451fce3bdc9644faf73ef3ca3e823526fdc086d82967b1a569cdb99ea26fe6d06a21fdfa7a8342089931240324b786f6be1b987c8fc9e9e602cb0ad66039a0147319a896134cc97a7f50b3a0c04c4f80b8a53ea222f5c009325eca6668e453d92e1577712af0297ffbc3e3365d504ebc1c7e825e045c30c0ad9067fcea6dd754c179c3febce85187611f78634c081192b430010987a852837015a3c2a70604e18c5d394207fa61fd3c51a8ac5ab263d1c15a9918f599338d21b894e6016337a5a31422867a775a7def8fb7cc3a41342175e05c891ebbd7318bf011ab2dcd865dc5efa3a9451d973951c96752803665567c08013259f14fd704d5d108cef5a38b4e2375aa241c5cfa99511e334cac9665a06f25da7d3fdb497363b119bb4d536a6803b3aed59143655ef6df225b5a9305979f77e32942ffb48e859da96a309ab57b68fa56a9e0d6e53650e7b1968fe5afc21e5638cd50f5c415c9addd998fe32ac983a9f9266590967782b6d9b70f22a48cc14301af5de46d7b71d0f7c0ead21ff503cbed5c2535672835ea0216eaa7fed72390b66b4684b51365d1923aec4dcf4dd08b357552cfb7e96a5ab956ac1276882e80a79d018c5ca7ffb3367d59846387f4af1fd4b6098cb560bb565af3ec0c3934da29120546804f3800aaba4969e00cb83d9d9b0cf216c42a8722030a6fc85a01b9748bebe688671318a2cc33f69e0bf3a8a3779c8847de958b28b2e8017da7f74d56f1a75134a4da0944e45dfefe63ff367759b55e1659870e0be86cef2789ec9063ae6093693c1d47cfc164eae67c97efa447120a36b39561d380077ceaff4bf0f55b066af441e400cc3996633abf905a32cf025becf31983dc6fceb6e0fb506bd350d81afa6421115939adef8cd68abbbd94f1567d9e9f7505af57e1802b8d704bb7460b3822330c4a4bb6ff2b187fb9a3f324b0f415c706a1de8a7cf6747c72be3b356c0206a3c0c39daa85309bff9faba7b68178108b261086cc15a0e21a52a37c1576a72d2d5da5c43248ad760d239711739cb79fc79b4ca2dbec2e100db1c535ed90623c67ed2e3817ebec259343b17efdd912ea0fbf73653015b7f8a51cae3cab19ba00638b8c8bfa8db481ca7dc7ce5c2540c46c963386188f74dec088552330e6ea067b222bd97ecab5073d95d5814599f522a36fc80636bb66ee8dca399586f90f1c849e30d92382bb0e64f62511a7f1044560175d68dffc03a9e56ac7629a4bcf50a4334f29b3391ef4bf0f3174a44d69e143437cb3dcb3871c4e7de50084b5e5033c48df364a1d5cf925d42a3c8e2b419909e4a2ca2156c1397eb87704e8f8d6cdb3a4a031c1b5468a1e75a923cbdbd384cd8d87c2c05f11f1df014ef98c13fcf9f182f6fb68dc0aa4adf7bec8a17caedd172f64806c311fc106b39edd9628a01d7159d638e09b39feab432718059589dc971143da4a8e640aa63ae0c2fb4a71129d362cdcf993adbc97b4f1543637cf1acbc9e67067f6c6f95be39fdd14dc6478c507507ceff88c2d1c5e13522547ab149dad2526393714c6c0a221c167ddf1084b563c0bfcc4c75a972131c62ddec7a497bd5118eaa12ab25bbbf7cc62eca5de5ea50bab67ce6ff2e05cc47cc0b0a5465eb01bbc08dac30b8522bd92180d8987390314e19eb3201f0be2b4f71abb697a751fd8d6a3251ca8ea1b2f20a7827d2599d62e392d6c065183a1778950d5ebe04180047ee8a2a096e5f1d6813ec63ff4a626c725b24d259cbd9ca6305009b29c6ef7225eecf9078824f9aef4d3e9aee1e9616b2b7f87499f8abab6c38e9a3e7714132850b5e71fa671697e6c8407ac3dad5abeee5f7b2a63aa51d29744736b0c38adccf8e29a85b81f3b3106daed64fc78618e18c9056cc41ce2f50379cc6c2c1411ba2c690e1899dee193f0f2877412f1cbd54d12255ca81a72211f9a8ab7f0b7bebb6c11b4bd6c77455decdfd7df2b2014395ba69f22e520138a43e1b3a11264822b143adcad307b35800563bab720687a898a76cde1f0a15aa3f32c0d302ce6f1094bacf5a1add935884be029c7fe18a5e90c696e3371af0f3cd721abd7dd4ce74efe353105ebcc4b1411d52026901380a9c7a807a76fa617667adea8b7734822da93d93969641a92ad2af6350ceee54e3d7c7c39e22d6c5f363d201572b8d68c2b9c7230b0b85801cfafbc5557f21bc444ea05fc612e2c2a8d4a38578c69bb252d8f4d617d0974f95b6ebb416d5c8f3fa925d4ed4f23bfce03e28389ca8c1bece1fa49e8d66387bbb09b3c29d9ed75ea5a9ac7930cb3ed05f999867c640b3435962fdb763002e2fb451c5a1b9d4536e49ba50fcf61451168a994249ef29af51694a1426d987ed8cfe09f10462c7629c4ff1b1cc709b99e9e87a54d1ecf54cd9da0c2c19b84b2a2c32c0bd12d158b73230cf610645048cf1afbb62aa7ce6fab79bec3ad84108f3d96cb9fb3d78a26724892a6bca533e64880c7d4c28a6685502f4cb2a27b132c8253b97e88583fe0766d04795709486556df99b7e65fbf71febe24e0a188e2dc489b8fddbf9d4b1c9ef4b558f888824469df9b2085a845998220332d9cb693472ff2abcc10784c2280825adfcc630e3a961b39ab786deddc53b18e862edc75742d6eb2d7cc227ba3ed770851718388612e4e7f4f257a90fdf09e3b0081d7498e2d5b628d9132aa0165f323f59af5e9ea54c582999fb527d5f2f3dd7e4f85877080526f8481899b6afc732f5da6af31b561ddc36a6b8c723087d3f168292550d89b228f7a3cc131c110a2dab2f81e339f24d3d2b696892dcd4a3e8f2eaaddc0d78e2d07cb9df9d2fe73e4c55562c0794092c7dabd4364f9fea89d6cdd8369d5bf1bc8863b8f89aacf0fd9b9b380947bb4872656e58bc87526e18fa8b17ef8a7219adf1b79d1be5dd827e7ba8e4ed50a81eb7562b179876a8803dde2ea99fe744e8f7df17040ac38592a3be7eb353416496e867d8a74c7eb94556b16241935d718dd43462fe0855cc31a812e0ac01109d1d3539bd2fd4eeb422009138a92324bd072edee2ba47d6cacc24588410ce30565a8aaa5aad52d9c55368372715717ff5ed3a0243ddafd11a7059c29a26b9ea9374e8434f31e4c15a747ee6d69368d12b96122690f843569e82ad27eb8fb25e94dde94cc15e690dc65f6a6c2a6393821168a79e03cd223ce54a1d5e38eee1c12e23027b12c6a8094c805088617c2fb4f52008366faf37fdb13b3a7a879949d13644da36dd35a4ede785ca0ac7b4f15472e77a33228129143f849ee75c915df31764c96954621a01e0941d6bb58125f544818b7152698f3addcd0a684af8fcdd4bcdf5752b3faa731988866ee8a664850989d2505d2a4b861f159d47d2d61ab3de866fb2c8f90075b713f61cf83a2ed426d53214b70385b7a46e5620c032486a5a00e0e73d3ea16eeccf5731507903a25685466b61311502ce781634ee46542957a0d5bacabb8d965689422588ee102d6a6016bf11589fff32e503feefccefe4107d0619e7a15336a8655e2f09034b4069941126d48909232592aac6d9c231285dc1d038ff1fa09c1588f543304659ca334afbc42b5f5fb813b34663cc6f4b0a12fc3edc28765b062e7a50fd19ef575be96cd1d9aa48c1fef1b2763949982a47bf25a69c8b1306e8e36c91d2096e6a6cf934452233ff49e91ee173c1e288b9ff70ff364689b82e2467a3d741809657ce0856582d24da5663162422a6f1ed1fce7cef40d90ce57cb99e19a0b4365d483361d03d0cceadd682f333bcdb0a49e24d8c7d004aad2dac06f4839cffc0a77730623917e5f101c33411ab4e0a8491de9a8bbd5dedb8dfeb5a5880da57c74bb8e1fd8b02d3c22087be3f686aee26988b2d62a41d4593ff0dc100c31dad221489f612ef60c160bd6c1f5a00ea6efd3a5aa5ca14efbf78ae4e5d8c5db9c03758b81e636005ade8d03a11f5d8231cfc1bdacdb276992ca8ecbad337fa89dacc9e9be11d398d37207e15ddb45566e0af78833545352d3043b70e20695ddddaccccaa93ee5e2874bfc7f9510541a57fb3cb9c8d6e75460cca3c4cca39a642eff1967dda07a66fe67d87696a5fe22a718a52cd9ba83e348ed211c1dc2e21ebd797455f0648af12c10321240058857632112a75adfdca249f26cf8d6ba05ee83d00ff8d64d8fed069dae70b79105ccd95fc9df34426d765578f651a4cba8094f46e0a9b676c0c0ebb1803660a70f5c7ad2de1ff96676c3ecacdc2953fd235856228556db20395b8d54819b7b12f56e4dddf6a7fe4f7f3d69dff022c59efb2313ae801dcb02b117f50f18eb11dd5a291a7068c820fbe381bd0697566909a38fdab0a0c48442dc935ab8447ebecb93af879a6bb82ab5f245274d873b5be4312856fe4fab8edc9575c02ba4cdb34b31323b69cfef40755bf96279460640ed9fb84d5c60d95cfd76a39726c29f5607d80090e5e3da18fd74682975dd98d98e4afdf4460e1aeb7087a18ded69310b28fa45b356fc28d1f2bef4c9dd50909076de9587fa07b966ee143ec589f70b8ac4d1320cac5bafefe640e445922090c721ce79e4e2c546cfb9b7f058932e6c83170dd2785e28ed81757ade61aa094bd042411aafe0b75156067a5790c78a44589728f1190ac0ba2f93004e06602f51fab34cc56a485569be11e0fd8c89ec3363e053dbdb6cbc69b686e89ff3730dce9099daff958f3be6e7f9ac00bddf0f133a6f904262443963aabe84b0ec9ab9209ebb0d6e81b8d30b2959bbfe5b332459310be2d8183a93ea08301b816d5b009a967916dd45b0f541c57685a6c7ef8cf715ae7fd1780f0a0da48467196e25e26fd2d5a075ad5acfa1ebec9647da21672b642ee4a908fbce416f4ed36ab5b96e5b47a0f6c7f280119567b7d54640c65ce5a0f4912690c4a3d0805e4284fb695eb3af2528f031261439506a4d3f4c2e18b736c55475828a0faf0153acf0dd89bf3c2f6525cb4bfcb419421c7696ee93bc595158a9a43bb288022122a8c45a0db060fe5e85bcc128f396f7af7006eba4e0d6e2f0802625342799bc1b98366682db90ff1be99322bc0672e07757c44173b96e659ff645d263af255d6ecd88bd9a0863006db7f674e79b0493d41a12057e36243394294b4c7850d14a988715de4b55e9f83c2f0676a8486efcc948109076361267f092315dae79164da8f832ad6f35f600b92e4a8228d39e507117c1c1b2a4a12b667538000912ea67de21bd85616cb30f95573ba748a75d2e04b493865a8711a688e33221b26f621ab3a137cf86cc9dd340bcee72f19e00de06f1e9abbe08b4cb8725c9e624f02d36c4c276a529b6e23581c348bb90a4fb1f89053aee36caca5529bad9124825860c011140744f245cd02ffe219e436bfef045517e4e41094b25cf9082692cd8e37d3893c5a90c35b808a17a6508fa7ae743740be0d984ef5ea80cee51e14b9997f86b45b97e5acf89a0a6aa962689c4f53bc7b65e5037de60fa395ed1013591caa79412108224c020d77069939391e20ee32b86139fca7eb9ca5c07fa733311fef5d5594b83ae34c6bc32f037b09995511ff9b9b611bc727055a10b808ebb8c8e5ce532046c7ad3336c38d506e0e3043c4413dc8ce0a9caadbef27d6f663b22bf8d399621ee86e52d9abd5628e3270424d8a06a79174c7de23c431224fd8d0f42853510600f9e2deb8a7bfcd324a5c6ec19cd0c9ca81c552b111a2acc4479e20439e2e3caf44c92026b5be1ad6933ed8d4de1575216c134d55171568ee64213fc4d32ca5cd7ad04b8705ecfd1b88d56294dca67efe3b1b37c7d5d170cef18997c4af074e97a98c11ec3cdc83a4ea564ebb47f02344d3ab410e25a4ad658be9bf627d49c106c1098dccf7ff62ff9f4dc997a279afdc5630ba32167a68ed7bb3bae2a8b61fca67b5b7dc5b3ef3ab679b602764da9aabf3d0caa56b278c2ab6fbee2cfdd7277402a1f82de1d97807829c0105277073772929f16d79584118f31b45ec4db29aad83693b2d9de08f417beaa2f78d55a36a824a94d1e3cfeb3d75c3d41ddd0e317e85d327e9b5a9da44dc12b6fc3acf6d222a44f59520fa3fcdc37903eca4b7a91fe14cf54b06855d204ebd71018fe767a158b5e389b5e8e136fc8960840ef1916d8e36f08260e5fc9808442e2034f2c761ae051d03fa618a5f6b8ba8cee00411d09aaa3f8fe30a5d29d9403a905403b5310355326387ea6ea72643b70fcc5bf767371878440d07be919c4ad8c4b8952ea61655bbeac50025f4cc2e859c20dfd440a0b1b14549bccaf7952a27f12266c3b7185d9f37ab405d0765011ae6dbc0717f58ec6bd4101589f5c6054faba863bd2af1e8b19cc2cee98c619e477a47497896c42c37697313917b37140a77a5afec97556f06e0ee1d87c3739bd9ff4c210ddd4eceb65701e64bf4d6cbd5d4b9786f4d45acd881fa6eb1c6fda5f8844f5a1635d05e7bb82270694efe063d44296d86b4bb8b28e573dd7cc0d379b5449af1064f10ab8e8f5f177713a63fd7ea8bb68305356c59b5b48334d568fc6d81713bf2c1438dbec4c2c793d5bcd94c459eaace9295ec5b51328fcea5c8f984d8bf90b2f9fb247ce722a1c001e6ff179524417d647b856d905976f623b2db0facf05d62a87662ddc0d6c31cadca2ec262439fdd0f5cd7788617b98bbb802ceed7f971fe6d432a49dc132fe5475db3bc61d6ff04442a9afa9078be7a15de8668cdf469697e337eb4a99b24cd89da2a36eaf4f725cfc77f5e4de3dc010c2ef1f6b22dc479544c0c4c611fe1c8ef5ed3c23ddae7cd01ae1874217f8d1001f0c5f8d2ace0ec72ef3ed9b95b72753462feaa1ff5c2d23f5ec1ccf41064895d6944f38bf7c41a091df7b8c5c5021ff7ab7571439a3d5c889aa57c715e4a55ecd77b5cb4f8bc3408d95d560f5e8ec711e81ef8a751df5d1d053822debf0295574ebfc5f1fc47caafdf8b3862d68fb01d6239fa13c026320aafdead31d003d8bd8b46842687b600", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006300)="c4acef607b9ddcfd235a03c6db2c1419c3332fd94e60bb741ab4a8750cdb46d41965ca8c176409eae88e4d142adc35d20aeb6cee87b470c46a623ffd2c7b92b7b2026c8a2d3a08f7c376bba66ea2fd6bd26a5903aab1fd5f08c5c80a017bd0a1f16e11ed288e1f71fd8f904cd60c2bad8ba59003a9216f171640535484f6706eda84c4a11c63565004ac33cb6040901b5f14b2406a1ddc7ca78fa91f3d575ec92c1c73d56c7d02de887a84a9b88c9b70f0bf2141e1f624e8222a9a63ba199362c8bff33780e6c79435460ada699e037ee7894aeecf7d3b089fa428a18edfe239134a244f69ecda10834e06e1466d95effc76211b61514522c429e80691780744f5e470e417559879fd7c7cdbde84361bb2491dc53a481b3bb5c071926f0c57af8745b52e6b07b053daad9e52a29869f3bee8c9ff43b2e9c20a26035ac89169b7058ee967b44365648f510555c701188079c745776f55748c32867df6e4e78890a32f126197f55113ce4e8c5397224ab6fb9124bdb0050fdb92a42237292668a7aa615216e39f78210b2774f0849a79fd446bdf2ec38d7c61e5384ca5ca6c040522d42102515d86c7743a8f384bf18efffb69d0ad0abb7c48fc8f770152226d05363ea26a7aabb3450905bf28dbc5fadbebe2ea45a4d82e2bcc574bcfd3e3164ee9ce2eb86cf356bd2822699a21dde91d2117e3647d926db9c7bece2484bd81a972c293226a1cbe15f233822fdfd042d6b6515b49f9f1d585b1f0fb596e50eea60ea3f4cc8808b576a1de2c7111df3cef7b090e5b5db7f616d5bc83428b4f55f97e87e43b3360c5099455193584fd94568890e87224bfc9b117d0172d85a176dd2c6828c0144b5398e7354d5923f8014bc3d30860c153696cc776c3982fdef7641bc61d3b21baf0f76adfb94d135ff87393174fd9ca5363e2834a24a06c16522bffb0f60d69cc8440d8a0dfbb47c7d8d6707cd7cbb34fbc8f8d3c4490b31b92806e0d56f83b2a2c7ad88ddb4d0e7dcff8aac6414b8be9c2c9855d5a441f4b34d55fb08306a8fa2832d70023ab0f63ff75629c0e98d64870fd4cd242a6f27fa6163994ec50e18071f5344c6786b01f2d7268930375188e04e0408c973d4872330b96aa88db2fc1860accbccb65f771ced5305891c44ac410541ac980ba50f419503aa058774737c77965db9ec9af213e516fa0a2468d788289337c5babad8c418a3af875ffc8bc39c62e94acf6b1bcbd28274a2e62092f87095958c8bc657ba788907902746872a6441966c9663198d1b54ce5c660ed0b7cfa1d6d3a81de7d16fd017d7f041c30b7f334889feca18596cbf344286563dd59b7c65697c4a3cf587c0682de6fc105628bdd1990dcb3fed18e1192ca07fe4a05be1efbc4057476257a59fcdd24eb040acef0f94ededf984978413ede4793255c0e6b24a5ee1713692149849e60f65c10e437db0a8e97807ea27f0a42f60b5ec86e85ab4eb9a81e2463b00afe7d20cbd30ee600b57202434e1fed80ef2cb45eec5362178b9e490dc0b8a45e10feb8a08138778364a2983a113b671e04d60ab4f18f383300228631cab01302c20c624c8e74bdb6ac3a7cf062f8db96416ff19e42ebb72aed1b46a063cbcb1b16b76abfa628e885cad99ca26b23929ed4602b5e897b019da855b58691503d3021f9c1b314105037a2be7e73d49f8ee9f0a3c3e6e2cec44cb6258d1862c3341b053db1b67640ec14afbbbca41b1b500ee3a0c22a712a02a1b2bfbaaa62ed542fceecc1ee426f9ed748d8656ceab891a9d5a8784ee78e18159abaf531c44829374b4814176534af4adfedb5efead99e214f52b0b2eb9e217c6bbda92a01edb0d5037e2038d8a0fb61f95c377817cf2af1568a66e395596c4045d4be3619adcf70879827dd90c45386c39b0248832254b2f7e646289ecd0aba2a56213e504bcf536ee6567baa25db9fbab142b4a333441778db9b672ccf0154f3f5adaffbf9a36472713077a90fa7828fe58c157593235de0617b7a13c0f269401bceb6f3a5c3eb151c97f3d8ef579f665777f4d801f0df77ae72433c488dabe2504ac0fd0e9703e9b960fcac1063704268e24a40890d627e0f6c38c0cf99b4d11436642dab9452834b13686e8b90cc07e4588c60aed21b90bcf73de85fddd85926557c6aec3510adf2d82f411b16b8013c408cfcb88d519daf256dce2c8a460e82bd0e6bf05c7d901157123dc9b8b1581fbb7bb8127f7adc01c926f6f79bbf666dd35df271cb0816418e71b18653bb1f246d07af5becaeb81abd83ebfce8f874daaf6b6acca7f313ed43570dd6a81548c2d7a0e1cf56124a7a441fe92fd12a5963cf6718543d429499a76f7613cfb7c7f638fbcee879929126cf1cca0c263320d8f34dcd1af2345b9801fcb38b44570bd855dff15ac3c7c11fd18982102258c1ec8941a4eb04b2ecdafa01b8f9fe39e65e40adb8d9a5d972da57a3e7643a518b890845160ca42419e8ce1261a855638e6db7a188c04a68b2afaa9de470283922bd6beadc9ddff314516f0c4e39977f97d79a291bf9d626b471d8bbfe0668cdde8f54a24f31d3928e4e659caebb403902cb27d829bbff401e533bc93d406b6a7113c91d680d424d679df00b9694cfe497cbdabd16841aa1b08e9076ffca9bed761455324fd89338f6cc3223b79a46c8e52aca9a4408edf745c3a02ff52e5314d2f2ecd88d91a45a906bb21dbfe490ca8691dce636424694cdfb7c3cc9e354148b852c52a99d59012bb80360e11d92e9ce2220776f21cce91ba2c1a0c9bd456fad2c17a62bc1ae32ae189b7baf5eafdd0903a02d74e8027c8e884127d0b94ef12e940e3ca65b3d174ba25201b28fe6ca36189e7ed93a6985859463e2d35411957e5c24aa474bac60844aa2828c3c0f8e9199b143ebcd7d56a28794ab54dce479cfe2989838b3fcbfdf146e85cc6176ab35c0da942b5d9351a2fb87266b4870124e38305583bd0e838b31bcaa54ce0c724fc99f2acc3b28d2095fdbd96b736d290bed4745a94b94c89489bed29116839d2ab6a152eadd2a30e71c3a014f41e1554ba238358ba1867e089dd6def8aee0ac338e6da5eb0d0c815c5991a9155ba3f73859eecf57024b5dd65c6d2ec31c9e7339f98ddbad954b121be83cef5cca1606c47e8e8a431615e0d75eface7772d28e3185cdf87581d3f8adf33784aa80880940d86ab881b22b971535f7b83a9f7015e86790dc2520eecf3d1abf1c0dd8c207a22a656b98cb6ec51d8791166d18ab1d6ed43c16050b136d7f55d42492af94d07b1adb562ef07f6a309d884ca55316cbd810905171dd8c6f9a36b855e907b302343d06f0a0d081ad3a710ee9cfc1abfe8005dab815cd26c13236cfa01a7c072e30bab37cc7ab2f3d23796c2a1202f30500a516633e8072483a6d44bdd8fae4622c7e58f083bd70b97f4dbb4fbd907be321737b61f18ae1a4d14366131e641851bffdabd5b22e5b731f4c65283ee5403bc31317045372a4fbec67d26df95e0a14888f2bdcb440cd42de4e0bf389a393fc318e18d393310d5aa3778df0fdca87a5801e5e5b891adb64646011f7693b4b0e9b1cbfa1fbc847f9939271c19b8fb4fc9b15b9397a7e221987417ba13a9fc2902ac3a1d58d65b58968df285ad3b3875949857a67d7b33dc1861bd18383428c9ed41c474f3f316c0df272c55806f4454460e64c37adaff5d712ec376ae5d0d1e91bd3bbdf2a0a5507429d53e13de0562a5ba4b02103c12dab0bd4b85bdd290b98c7e1fd9f494501d2c4b824c007f67bc2e8993d4f163b40515da8f2111f4fa519230713844d170f12b4077324312da2ca1c51c8fe1fff0d6dd68eeebae22ad6681a5f277711db0064d3fa25d09cac0e4b280b58c150e73b3885ab3964837cfc34cb29e215bade71b45e19505b356bf8de9f69c4a3741ab016f77a55869edd76bb33edc34a68959c37bdf60926530d3284688aeb17a347251d5501c034dd3902eef528f167cfc5913d02c430d76b50a6860eb84ee5eca2458ce862ad9fcda642b8df177defe8abacebb4bda07c040b4ccd773fd5c9026ac98243ea2a00f8760a2dacf1c371589b7e32f2d2094543a7d87414813f54ab98cf738ed3b3c1f9e9fdc4fe97bab52d172fad00dff94b0b72fa87b2a3372c8fc9af326f4d05ca131dc254d378eaaf2da3aada8815fedc18d252d95629f7b455cfc54983c2f042e5dd2c22d0f70addcc45c03fa3a52e0937e9590722cedcef23401824dd3f2537d28fb10ff13f6e9641c23075a5ca68125e67df28b3231a65d32a97f00117020debb14e19511acbb52e56be81595d8e74eab72e36b8dfc37678c309bb84221e480c9348f6977f8e3f8a47421184276eba93e84e8b7e2105a5a89c08708c0eb8ba7bfe4dd715278be217fafde8047652ab69544bc2d63d72060ac40f104bc5b509b7501ae7ea36e0d19149645d15b5abc68fad73a542662b3df07ab506746d7343e405370238b657cdb960223752b62e86758143474a78ff92696ad8b5c9d2637c8d9810cfa4faf2765efcd7a1a435a60bbf5962223b1fb0975e227abdc7bf80e3adeabc6ead120922beabd707e6d7a42e233c0788c680190e9ffaf0cc145c010c33438121e8206e25342413dddd02ff2c2e4e5299a82e8e85d181148e1e98db886103810230c6a8687de33c4cf7753c333b8d7b6b6b1a18eab53cc395104818709fc11f4995e057d4517828dcb5a9f3baf41ade7101ef40df27c680c8bcbe8bf2368f1d19b46036bf8419516789dc69ee2573ddec41d9ca00fcc710f5635afcf088e0107fb09a87db9ca6fccd0655ec0816ead48371d64e8318b767b95ed6ea89ff919c68cd33cdfa0381b8b7caa545de948b8c46bb879c4470feed0a990056fb2db739225fc768e83d15568d73694e6888da65870e79c4f5e1287f1a8cce359f82c9860e13ff900833dc556d8fd005c38a855ed1efec66b4ba8d1e65db9a999e172101062081354625cea8f1ac0da70d7f2dca34c4204dfdefe456822ae2cd1349f1a2251292ddbb287c5b9ca41c75f45bb4ddd82c277afd37422cc00fe8b7221168b04b6275f8e530757c673b3f515059f8c8421872d07a156a9d061bdbe0c549a52acfb0708682a2573c259225d0e95a16b8d13dcec60ae91c09537e8bea549f748d2e060d8e3ad49ec9ec1ff3a4e7a7b716c95e7310ff9fa56180f0259df99b5fe06c030015d9cb5bc9ece0cd907d724e1d1a89d3d875970bf144c58260c0dde163a26d4769b33f6de7f181ecabc050797a105fd1ce73ac4d26a153297305b8a3c150beee4b563f468694cf3895c44df56fc8753e3c8182e8e3c9da0314eac9c288978847b92015ddc5711c09210e1f5a684b7f1f149fb0fe8471c30f8a35a58ffc6e2fb797acf9c686fbb8d1ee8d6dac14de44c22a3cdda239235c24ff23de17228aeb354939a80e4a1397b316da5e18f077cc7b8497df214290c33c4b8593db1ab1638698059f29477a091b070f139b3fd2fe3ff55803b6e65abe6dae32eddb18e898e63743ed256801c8bbbf26e21bdff9491ef743341a5159b36b616ea9c700aca9b6486278c7811729e3df91147ad0e25c44e03c9f4b2385aa6cbfc70d8f68d17ac0925d8fe8737b212f708633bacda57b3848667a4f624a4c7edd33a060f82aabe6ac6a19a81a2cf6403189f08d2632260d72630da6ffe46ab9c19456e95e3cfc423940023ba0ad6f1fe2a8755509441e248b291e02e85f7173054ec6597cc712e80751b4078bf8db1177130f0b170be8f3ac79d579e012caed707156f3ba28ddd5ca5d18320fc9f361e88aa93de9127752ea04c7c77425ad30522dfb5f1f10f802c1a9668812ee9e6b4acab25e10dfd2b18387e9f6ac725cd72f5100b6c15265dcfa1dd45f538b76346209e6cab4441013e36e861ae677e980ddd08e9366426f410428b9b0828c9805bcbb667209191e79305ecc15ce9cf30aa829373e4a8152e2c68294dc71b6ab7b551addc661a5a040ca7b79993cf1060c8410fac1e9d3b209319f22c4bab53b1a6585ebb72a579dbce64b107b280b529439cde9d1fa29333ce63dbfd693e0b2fb3633e37304e70fd5b8d04bf47f6630cfdfbf8ad9f7778c88d7ca9705f4694b1d3355c8406adc99e15bb39fdaa8df214e1730b6d05bd5f93349ecbf5b0db04a5fb1bd66c5bc30671a564d46fbfceacc074bb14c31d471593172ffe28c39912ece3f718864ab9e300ca172a7ebfad6fe28a0ef5aafcd3f966a5d7d4d6ff164434b649cfe149505159018d8c00e82afaf7657402109549f7a5a4c8c7dd02d7d2b005a3be97f0a32bdf3d8e449fb4146c9e38a509781246d9fb67ed087148fd8b8fa1abcc5771148c0483aca397b36302459ae43f6f5aff98bd784b8a1e19a05acc632672bdabb32f2aa4d66ba731d6e219d880f4ceb63d30ee61e5e13919352ee32254d48bab3566e13788689e35c3e4c71c244c34b457fa8a23248b9be6fa195a055137a587e73afd4ee521af95040e72851d3b6c06a15c3464c755cba079f1f53d807bedd0382e36c975793bf3f78690cf408a7c502b872a05a5988e6a96b0aaeb0c0075576f295e55a9002caecab04331d06cb042cbe87375e557933e3d5e8763baffb71bab63343e432f62e82bc51b4bcbb8fb93c72dbe0ee310bd0d776109700007d0a1bcbf1655e1354f2f5dbae7d2d569b099003347f9c3f6c5ceadfb113ae3daea860f61e233e68c63386ecafe74c1a7386c97725bb650f298c06ad648662940daa3abf0c6f460bd2875984858a97c1fa921d2a73f6d207163cffb573dd59ef815605824d3e44eb74e22e865c975b5d8b923b063934960d62fa9907baa28c9f0a24f1e5bf731eabe1f6b076ae19b150d5632b307de0741116d5af8c5b4dae3c8ae01808d1a9925cf185c55a335820c1d8b80736bec9a9562d269ff273a040d77babad128d2b71a64d084dd93be96e3b99ffcc037a6db0f296f63438c83789e54635e0c69fe3ebfd3022130523ffa6f2805747b4e97c2fa38e04decd1b037123814be9a38d322d342d07baa37d5b484c32517b74fc636441a08d8424aaeeefb6bb47a8c010d6f1442a6632e808520308ec7ce7f7607ba18cd8b897ca3814834b2f088cde073d93261dac3bb624bcc6839d6249b51a58fcc4db00058484e0c5814004c5da1d4cda1c025883c999fd2ef171a5c3a438cc0fccff03bae681775421d49ddbfb4f74ffcf88992abd6168e58295b91e7cbd442bbf8d7cfb5d3ce080dc2b90961edbca462e843343d129e45cfa28eeb426eeef08a5ee84d7b48c59a6687b8c0f7549375033398a65eb6336e40423c12a55b5bf732a65bcaae27a91fde89318727cd769c0cbece6371b611a0b40a6b14aa40ceb5848b738c13258fb0765cf83d92a2081d3c363cd7d48da0f0b19e884045c44e78bb61bd673c4522e1c50a2a944115a57f4670b8c388858c7f4babae8052ff86f2b6b780e3b1b5e4302fe7aa7321b3a45ae98ba5a74e87ef4cf13046c7b67bff56f9ff6f4224c4d24bd438eb92e3a1a786c50b6d1dbb302b237618ad008fa5aba8c4778ec3735dc483adc99d19ce1c87634d5ff86f06acece91c7a79e1400b6b483285c8e478f43c3fdf22ccf792aec034ffd47e60080e7d4a27b6e48bb0a15aed15d6b84e9b6af83d4de502d70026533db7c881d0b344ce7b732fbb69348aadf44b22dd3921f8eefd5ef2914a7eac8d36b5420163258fc2be1d34bbf49ef5c4c7ad6a09c7292690f569621bfba1c4d9e484acd7d92f58b79bde01dd6ba98f4cad801e902bff0e81ae787c595969187b58ed9bf68b0aeaec069b64f6facbf7f0a4a8a5d3fc401c0e1ac3bef9bafa512e36d5c8d8b135f1a05368255c15b1c976ae93c9c99288fecf018505eed0f089aec2a9ca7b198a0a89671f095092d2a9e7fb90dde3bf586a2f168f2a8329118d04bffb6adabd53f87df50275981c9fd5d69020c8e9750287e5119c1cf347d1c3e4adba1d598446b4c0a479a5475859383e8c82bfe4c6b8560ad55e27f3323d857efcad4b5ee4d83b4dd74458414d2a9ce74ffda8042038caba0098bcfd6b2e2bda9afcc4c5890f38773726aa94791642ff492f8d11c736f397c080d63e2dd24baa37aff0ae46d9c77c5097f84d6e5a90c554436cfa5311e4f31e2386c2c4b04cf44fd118b4eee2326cd1f0a48efeb4c51fbe0f395694b2b40aca9fccfc1eb84283fd53671955b251bcc2253ed3a3fbb906b2b25944fbe6c5b226b05052fec7c9e6b2d4c0a1ae1029ff70900d4634954f025a345731a76ebcfc4e61499d91b888292e6c59a16c34e4d96ac23dbad628988fcb777c4e9c6348389decbce8c9c03420c01bd670280ce1d4d641d2d4b9c3c11ade9d196f8e49290094ed55382b09f0cf0397ffcd9006e38980ee0b3882e7d93e33643c1ed2429cbefba0e1720f69a20024aff6070acd25a3d68b129e3d7699641d20c5b93e8d4b784669e3a22727d687ff1dadfd19c5b44dcf776561eecf2d28c01e683f49b1c204ba45aadf5d84bdde7d2cd53dad97d060664ddefff75f5e413f72be41d6e7c13fcbc481eefdab31fbc500109c8c24756227ff5bb18b148d0a31576d2e427c43472624312a7568d5ad9b5f9a2274549e5180288dbc0c7e046766c174fca0aca1d867fce966bf4d1097efe62ae23c925ac387b368345999a92cd1d44055e178430fad19cbf8b53756df5584503d848e13ab90c338c2aa8346e2b499e5790926cbe359dc30a3d5336293c4990832e998c2901fae3df81ad4f1ec6fd17baf25fa25fa08bb71345a1fec99299e4ee962dab091c16138fe01d5403230fd896b0992a2474fe38e5a7ff15b372e2a7a4a0ff34defe1fba14bfb6f56630aaef274b57fd0999bf77aa79f743e29c60b7d5d1774ffa9591286f809ea6c0dcc1520f5766851e0f9233b4a2e1329e93e043837510f5ef85676590b0540aa7b2b5211d7d38fbc45e2fe3d7993c6bec4ba2205a40819f8a3ef2e71af85162e39f0f859ed446947bc8516eb527c496244488f8663dee31973d91c7be81b746cde97294cbf94e09d155354af76ecac1d968038ed961843350524dbfd6ff46e4e0991aed94c144a403a5be126279a6469f9b7854b839933163c83672275491445ccc81bcabf91a6851101593bdfa0930e1058c972e7e41ad390cc4666575ce29fa80095eceb4cbb035e7e7e5a02be4606004e176db167fb67889912b8381e311c39d4378a088328f3e2cd4733dc55fc2e5a0afa7c928b98f95187a7200d8f78a2619df22a4f9fb433fb4a3a848651abfa90adc22c3bc29c1c386c0bc168c0c7873719f3cd76c49c77a5624a288022ebc89998c94f3bad87cd8bcd58502c38b0ff7ed312614f65ca1ea2f999fdcf2432e49b56c635f78514d9be0a5416e2b1ca8aa1b6f6c15d4ba022e5486afb79935d7021eea7b5d8e41a52b514af162a8b79a65efded6720126b9a5b3965f672d8da1bd9692bc14da0b29bc052e9ad22a59edbd0cb3c71fc304b0b8e296cdde1b259ac35a2e30e0741ec6a1cc4699d956959cfdfe4a91f6460271a70ba883f1b8eb3c1f52c60c361696056a411b74104960528caaa338066d823eec164c9c69d7b80c4d0c2ec7a739155c913810b3f5eb147e89e3b8699a29ca192f20cf8db8a1d7c01cbffdceb9d1a5045f55c8328966b91ee2b8e373d35ce74d35c1bea66316a2c0ea561844dcd6a027c6991038623ef894ed3489b4e04ab7e116973380fff9066eac58a406f78c4656367b57081f7b99030b0b087cbac6fd705d2d135ae4505ebb3c8b5ff3e226c9aa8896ba16600ba3dc89b73f07f9968a05045b34218a9f14a3e507103916f3a0b1f8989ab057b8907041cc1c31905b6e87f10e74e4c196c17e31450419040df59bee49aa554f9661f38435effa292f7ef01cd6173e08a3186f04018c23f37b7953c3f5ca7f83389ccbd539405ace7abb99aa29537eedb79000ee04fe5b72999ee606238874f0fa1b14d8cfc9d9c0c1a1666ca7ccceaefe1cf583157ae6e7dbd70425f487340386cbd141261ecc838482daec473b685e6ec71a23c42fbe89521360d6c6ed42284627655d2eceb9cd0f65df549b0c4efec101dd359ddb53dc99d94df991093459f7842c878b7b49fff2cf850bd924a06d3a3a420ee82dcb39e487c0f61de92ae6f0c8d12cdcc7365f2bee4300ac3842188ec82c76164c33c1d11362c1d9e136e516ae0b91172e252f73958be0913777a29be7da26ae2f7ba9e2a80a67974fe30fde3f6b9aa0b21aedbe0f23f074f962ee846d64116eb14d886ad4aa4166c779e6bf3e7d5ee3d7ff2519351f07595531ac10da596268f65434d9a4779fd8c326a847a44d0ca1cb1d1e764a56c99df167901695de6f07ffa94edf874233b340a524449b19f4cda7712cea4c7e0fcd7879edeec3ea24073354e31989ed1c08bb4bb1bec053c4c6fd352b0c91007623635619e05375728bf575f2e26bf617644f0239123f8ac1ed06767ca7b3096ec91ec1d530b7a0ec855a341ba4f72fdbd40cae0727581dfaf25b00282131bc82b5c44d4089b0b3274520a40c0053b5dd10e59a811023b660ffcb2d7e79b32af9f55ae030eb845a64361d25b175cacb07389957f23c9ff3e52e2bea41a75305377af233336d9a7bf7f9939441b76898b9aa8a596e9261f71c5176aae31270d80576885119fa6324856f1ceef3c6cb2db8a10aadea3c801c267e9987afa360958514bc85bc69c6d59211bbcf2b1312399f74f340fdf10a19145f0129d9cccfa4194bf148493db3a01b81f19aeca63e1074d94cfbb289ba9823646201ce9eb234167086a90241bfaf57c3216fcfcaf39824ff97545135f42c443b65b6369349d89d06000000000000003cd3ee5253abd8fef6fe2248a002f9c70a51ddb89e7fe476163c6b1cce417be229b0e5533b81088370f7ec9468ee0de1f6feedb371dfa850ea5fe35c83ee58533c52a7c758c7adbb0329b3d7b4180be6df7f1d1881fad5a52cd807922d7eaddb13fa65cec8684a2321a4d923fc3fc657bf2ff3c02ffa6845f2eda3e736bed70e6984387cf77531b2e6ac6d67c706f43bb3944b618851abbff019ad48d116a7ca56fa436a58adc82dd5f8cc63fcd56076442ca88e3b3702ad99d6e2c46a561b87c5ac8a94ad77100be0c5d80887ba1283f38017b421c6456ac90bf90c8ce31d011ab997db7215520dda972ff1a78fcc5122e140e51a20bd361566276ae614643344e5b395bed67d8bde8957429c6ffb9147ad00d99ed2baa6766feb100c8b2601fa5f34f6428b9cec3262ee29dd220642df5fdcf2e43cf72ce7c710cce7de6099d76bf0d01f68f60d9fec99f69c0db0465ab3cf4e7a623676dac5fee48f55059140139bc210b1d5a9b2dae02eea4b799f36142286ff85ebffe76ee562d3af670c78633cf314e4d8792a8c6eb40bed1fd7d99603b22f216e260cc7dd59eb226b2a59d946c02b5458e358470be9e8c4fcd5f6403bebbd5de5421f082b39fd77cd590ad96d5ff7d3f1ac38f244742662726cfe70909d04867c869332ded36bac3f819fe173dd7f", 0x2000, &(0x7f0000000b00)={&(0x7f0000000080)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000e00)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x23072d}}, 0x50) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x7, 0x4, 0x418, 0x220, 0x0, 0x110, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000100), {[{{@arp={@loopback, @empty, 0xffffff00, 0xffffffff, 0x8, 0x6, {@empty, {[0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, {[0x0, 0xff]}}, 0x5eff, 0x9, 0x8, 0x378, 0x5b55, 0x9, 'veth0_vlan\x00', 'ip6tnl0\x00', {}, {0xff}, 0x0, 0x3e2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @remote, @loopback, 0x8, 0xffffffff}}}, {{@arp={@rand_addr=0x64010100, @rand_addr=0x64010102, 0xff, 0xff000000, 0xd, 0x7, {@empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff]}}, 0x2, 0xfffd, 0x9, 0x100, 0x9, 0x9, 'bridge0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x0, 0x42}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @rand_addr=0x64010102, @multicast1, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @remote, @rand_addr=0x64010102, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x29, 0x2, 0x800000, 0x5, 0x1, 0x2, 0x5ff, 0x0, 0x0, 0x80, 0x380}}, 0x50) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='-'], 0x28) 1m35.489211774s ago: executing program 3 (id=1357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r0 = getpid() (rerun: 32) sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) signalfd(r2, &(0x7f00000002c0)={[0x28000000]}, 0x8) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRESHEX=r2], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x13, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0b00003d000701000000000000eaff047c000004000000143a36d8c7d80600800a000008000900e0000001"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x388, 0xffffffff, 0x1a0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010106}, [0xffffff00, 0x0, 0xff000000, 0xffffff00], [], 'ip6gretap0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0xa, 0x1}}}, {{@ipv6={@mcast1, @mcast1, [], [0x0, 0xff000000], 'geneve1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x0, 0x1, 0xa}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x5}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xd1a}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000d3f000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x21) (async) unlink(&(0x7f0000000180)='./file1\x00') (async) ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='schedstat\x00') (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)={0x20, r10, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000044}, 0x8800) (async, rerun: 64) preadv(r7, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x0, 0x0) 1m35.199518932s ago: executing program 3 (id=1359): getpriority(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810540010000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000004e40)={0x6, 0x7f, 0x4, {0xa, @pix_mp={0x9, 0x8, 0x32315559, 0x5, 0x6, [{0x4, 0x3}, {0xb, 0x1}, {0x641, 0x7fff}, {0x5, 0xff}, {0x3, 0x6}, {0xfffffff7, 0x80000000}, {0xcf}, {0x9, 0x25b}], 0xff, 0x0, 0x8, 0x0, 0x7}}, 0x8}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x3c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1m35.198800526s ago: executing program 5 (id=1360): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6ea1893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb951368a970c58fb4f3f403fdaf68902874"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @func={0x2, 0x0, 0x0, 0xc, 0xfffffffd}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1m34.911848533s ago: executing program 3 (id=1363): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 1m34.856614356s ago: executing program 3 (id=1364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x80108907, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) write$selinux_user(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1m33.835666953s ago: executing program 5 (id=1366): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x1, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_WRITE={0x17, 0x41, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000180)={"b645563c45bcc7e181fad43c40fc603ebaf6ab65a29e23546aad0281b3aff5eb", r10}) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000280)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000000300)=ANY=[@ANYRES32=0x41424344, @ANYRES64=r3, @ANYRESDEC, @ANYBLOB="3a2f080001030300010000000000450a0fce0068000005069078ac1e0101ffffffff4e204e21"], 0xfdc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m32.981323963s ago: executing program 3 (id=1370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r2, 0x0, 0x0, 0x8) sched_setscheduler(0x0, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@gettclass={0x23, 0x2a, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xffff, 0xffff}, {0xffe0, 0x9}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x14) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'ip6_vti0\x00', 0x600}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="89a7fb41984208222f8df9babae7", 0xe}], 0x1) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=local']) 1m30.621787499s ago: executing program 5 (id=1373): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1m29.210007066s ago: executing program 5 (id=1377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) r6 = socket(0x2, 0x80805, 0x0) epoll_create1(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000000)={r8, 0xa001}, 0x8) 1m24.493852078s ago: executing program 3 (id=1386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) r6 = socket(0x2, 0x80805, 0x0) epoll_create1(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000000)={0x0, 0xa001}, 0x8) 1m13.609992291s ago: executing program 33 (id=1377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) r6 = socket(0x2, 0x80805, 0x0) epoll_create1(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000000)={r8, 0xa001}, 0x8) 1m8.019142611s ago: executing program 34 (id=1386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) r6 = socket(0x2, 0x80805, 0x0) epoll_create1(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000000)={0x0, 0xa001}, 0x8) 50.796633422s ago: executing program 4 (id=1451): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) getitimer(0xe, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000680)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000280)={@val={0x0, 0xf6}, @val={0x1, 0x3, 0x0, 0x3, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x4, 0x28, 0x65, 0x0, 0x4, 0x6, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0xf1, 0x0, 0x8}}}}, 0x36) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000300)={0xffffff2f, 0x1, 0x1, {0xd, @pix_mp={0x0, 0x15, 0x3631564e, 0x0, 0x0, [{0x0, 0xffffffff}, {0x0, 0x8001}, {0x0, 0x10000}, {0x5, 0x2}, {0x4000, 0x1df}, {}, {0x0, 0x5}, {0x400000, 0x3}], 0x10, 0x4, 0x4}}, 0x9}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 49.448218751s ago: executing program 4 (id=1454): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40010010, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r2, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xffffff83, @local, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x1}], 0x1}}], 0x1, 0x4c040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe2$9p(&(0x7f00000001c0), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r4, &(0x7f00000001c0), 0x0}, 0x20) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x98, 0x98, 0x98, 0x3a8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x4, 0x3}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:depmod_exec_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x2}, {0x5}}]}, 0x4c}, 0x1, 0x300}, 0x0) preadv(r6, &(0x7f0000001640)=[{&(0x7f0000000200)=""/51, 0x33}, {0x0}], 0x2, 0x0, 0x8) 47.710782405s ago: executing program 4 (id=1456): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) r2 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x4880) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) epoll_create1(0x0) syz_emit_ethernet(0x6a, &(0x7f0000000700)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x33, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0xb, 0x2, [@empty, @dev={0xac, 0x14, 0x14, 0x2f}]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@private=0xa010184}, {@private}, {@local}]}]}}}}}}}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) pipe(0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="020000ffffffba000040000086dd", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="6d6eb1f60783"}, 0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000002c0)={"fbffffff", 0x2, 0x6, 0x2, 0xfffffffe, 0x0, "000000ff00070000000900", "9941b242", "05030400", "e859ad33", ["80000300", "00000008000906000000da00", "0c001004dd4f2a9000", "00e7ffffff00"]}) r9 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r10, 0xe7) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0xfcff, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000001000030000000000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2, 0x0, 0x4000}, 0x0) 44.402871022s ago: executing program 4 (id=1461): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x80, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 43.767385806s ago: executing program 4 (id=1463): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000280)) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) socket$inet6(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x7, [@var={0xf, 0x0, 0x0, 0xe, 0x4, 0x1}, @struct={0xf, 0x3, 0x0, 0x4, 0x1, 0x7ff, [{0x10, 0x3, 0x7}, {0xa, 0x1, 0x3}, {0x3, 0x2, 0x5}]}, @func={0xe, 0x0, 0x0, 0xc, 0x5}, @func={0xf, 0x0, 0x0, 0xc, 0x2}, @restrict={0xd, 0x0, 0x0, 0xb, 0x4}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x7e, 0x0, 0x2c, 0x7}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0xd, 0x6}, {0xf, 0x40}]}]}, {0x0, [0x5f, 0x0, 0x61, 0x2e, 0x61]}}, &(0x7f0000000540)=""/202, 0xaf, 0xca, 0x1, 0x1, 0x8e10bb0008270f02, @value}, 0x28) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x80000d70, 0xeeee0000, 0x0, r2}) close_range(r1, r2, 0x0) 41.528492552s ago: executing program 4 (id=1466): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) r6 = socket(0x2, 0x80805, 0x0) epoll_create1(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r8, &(0x7f0000000080), 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000000)={0x0, 0xa001}, 0x8) 27.468555183s ago: executing program 6 (id=1489): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x6}}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x8000, 0x1) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x185) getdents(r5, &(0x7f0000001fc0)=""/182, 0xb6) 26.262446126s ago: executing program 6 (id=1490): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='ufshcd_command\x00', r1, 0x0, 0x8}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/timers\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0xa, {0x2, 0x0, @multicast2}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @remote}, 0x4a, {}, 'veth1_to_bridge\x00'}) setfsuid(0x0) pread64(r2, &(0x7f00000002c0)=""/109, 0x6d, 0x0) accept4$unix(r2, 0x0, &(0x7f0000000040), 0x100000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000000408000240000000030c0004800600019e31a700000c00038005000100430000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x44}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r7, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1004000}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000580)={0x20, r7, 0xa, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086552108cd0c69005500000000010902120001000000000904"], 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001d80), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000002380)={0x1, @sliced={0xfffa, [0x4, 0x4, 0xc0e9, 0x100, 0xffff, 0x4, 0x2, 0x4, 0x5, 0x9, 0x2, 0x4, 0x0, 0x1, 0x81, 0x5, 0xe, 0xa, 0x9, 0x7, 0x8, 0x1000, 0x1, 0x1, 0x4, 0x1, 0x0, 0x8, 0x101, 0x1d, 0xe, 0x1, 0x9, 0x87c2, 0x7, 0xd1b4, 0x4, 0x6, 0x9, 0x64, 0x1, 0xffff, 0x7, 0x3, 0x2, 0x1, 0x0, 0x401], 0x3}}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r9}) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000ff0000000080000030800100", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000e3614476b981a08f58579780fcfa8fcc5675e5fdcd1952fc60f2c2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r10, 0x40605346, &(0x7f0000000100)={0x401, 0x2, {0x1, 0x3, 0xd6, 0x2, 0x4}, 0x6}) 26.244810417s ago: executing program 35 (id=1466): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) r6 = socket(0x2, 0x80805, 0x0) epoll_create1(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r8, &(0x7f0000000080), 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000000)={0x0, 0xa001}, 0x8) 25.467017278s ago: executing program 7 (id=1492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0, 0x0, 0xa002a0}, 0x38) 25.32034375s ago: executing program 7 (id=1493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @func={0x2, 0x0, 0x0, 0xc, 0xfffffffd}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 24.954387709s ago: executing program 0 (id=1494): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0xfffffff7, '\x00', @p_u8=&(0x7f00000000c0)}}) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{0xffff}, 'syz0\x00', 0x40}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) socket$inet6(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r2, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xadee}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) close(r1) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_open_dev$MSR(0x0, 0x4, 0x0) socket$kcm(0xa, 0x7, 0x73) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x81c00) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b1552e89d6b8d0f7190d35bee5c2500e61dfb79b6905159f2515d4cd4dc307db38f27e73af2692d04111e2a6c11cf57117bea6e80849bd840b7a8a5045c18efcc7d7c952aa5944692168b878a6894db2e25301ee4a1b323c03c58c6d3995bb3ae7bdfd676edb20", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000050000000000000000000000000064d6fc5ca0e81519096427640b03691124c1273ee2a2b6bd72c9196377546cb114729a8ce0bd6e611ca21e2a7ed5530b8cd5a662df62c31fefc1560d77383b021f203f4da18214d8c70a09e293fe4d87a7545e252d99d1a69f7d4fc89a8cd774ba5d1b8aa53d9f73732527deb295052f0c63d39a022193ec71c849f5b7ffc36966c91abab3c64b3ed932d7"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 24.553275478s ago: executing program 6 (id=1496): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x480202, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) sendmsg$NFC_CMD_GET_DEVICE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000950) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800080000000000002000004b64ffec850000008d58e54a51be2b8f0e000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) capget(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0x3, 0xaf, 0x1, 0x5, 0x2, 0xa}) unshare(0x6a040000) r6 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000240)={'mangle\x00', 0x0, [0x1fe, 0x1c14, 0xffffffff, 0x42, 0x2]}, &(0x7f00000002c0)=0x54) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$TCXONC(r0, 0x5608, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) fchmod(r7, 0x20049549e2a2d659) fchown(r7, 0x0, 0x0) r8 = syz_io_uring_setup(0x7be1, &(0x7f0000000080)={0x0, 0xf420, 0x13100, 0xfffffffa, 0x45, 0x0, r7}, &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_NAPI(r8, 0x1b, 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', 0x40000, 0x1) 22.231101189s ago: executing program 1 (id=1498): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x1e) sendmmsg$inet(r0, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000900)="029993440c7a0c95d3bb8cf253fd63c588ff06000ff0fced840da0b08cb6e72082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c06045346588e2620d36a3ed8e8f2aa891268a9b33d2d55cb92f17bc9e8aaf62f94fb1143a79e72dcd910f5f45125df1bb3dc406cadfaa693beb85c9bf8daf45ad0d332b59be2550079eff7ac51dbfd801482dc1eb8e6f36990dc6e78940d2a3d0c16c023569ec2303690b40379bea72128dc680a09963beb9733c72cf749fd940999", 0xc3}, {&(0x7f0000000e00)="ec75d0", 0x3}], 0x2}}, {{0x0, 0x240, 0x0}}, {{&(0x7f0000000640)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000007c0)="0ba62b0e209a0721d07f1ebc8a9b", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000002840)="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", 0xb91}], 0x2}}], 0x4, 0xc0) 22.003965431s ago: executing program 7 (id=1499): syz_open_pts(0xffffffffffffffff, 0x428000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}]}]}, 0x54}}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x3, 0x59, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x2, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0xa, 0x3, 0x2, 0x6, 0x0, 0xb1, {{0xb, 0x24, 0x6, 0x0, 0x0, "c7f28d21e6cb"}, {0x5, 0x24, 0x0, 0xc57}, {0xd, 0x24, 0xf, 0x1, 0x98cd, 0x8, 0x4, 0x80}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x13}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x6, 0x4c}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x80, 0xc}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x8, 0x2, 0x29, 0x20, 0x2}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x4, [{0x0, 0x0}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x83e}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000c80)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x1a, 0x40, 0x1, 0x7, 0x2, 0x7}}}, &(0x7f00000010c0)={0x84, &(0x7f00000002c0)={0x40, 0x16, 0x7e, "5d3b6a0f18ad57683e2318a9fc2dcbc8258686d72de369cece758cafc71d7c243e73f4c87a2376f15d4ebe6f3ff6d6fc3d73d6918238d709de7430a92ba1b7cc252292e22b434f4ac4d40481791a1752baf026e8511d0baf15cb6f3c0cd4e54f55b16a6d2bacb78823d2f13887fe71e0763f8f6fc45f7e88f93e6b3412f7"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000e40)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000000)={0x40, 0xb, 0x2, "e720"}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x1}, 0x0, &(0x7f0000000f40)={0x40, 0x17, 0x6, @broadcast}, 0x0, 0x0, &(0x7f0000001000)={0x40, 0x1c, 0x1}, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'veth0_vlan\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xff14) bind$rxrpc(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) connect$l2tp6(r3, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) 21.795856504s ago: executing program 1 (id=1500): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500000000000061101400000000006201eaffffff0000950009000000000010d448b3ecf04a830c8a53adde639503f943350e7913291a97210de2328fdd8cc21a2d6fe62c99f3d0848b720768dda1565e46fcf8a93a33f5e91e3611b3f3889f360c41b6344c8f246f120c254d3f4658a6265f00c48530b2f489f17218c4f8d149d9f830042bc97ee76ca12adfcea022d7f0e0f0e473c06147d59add001d3cabf56d14fa9001d850b1fd2c6df1f4caeb96a0c17697b1b78151f35017759719e03a812e9f1e"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1, 0x800}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.787270943s ago: executing program 1 (id=1501): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a2"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x80, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 21.625276399s ago: executing program 1 (id=1502): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) getitimer(0xe, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000680)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r5, &(0x7f0000000280)={@val={0x0, 0xf6}, @val={0x1, 0x3, 0x0, 0x3, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x4, 0x28, 0x65, 0x0, 0x4, 0x6, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0xf1, 0x0, 0x8}}}}, 0x36) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000300)={0xffffff2f, 0x1, 0x1, {0xd, @pix_mp={0x0, 0x15, 0x3631564e, 0x0, 0x0, [{0x0, 0xffffffff}, {0x0, 0x8001}, {0x0, 0x10000}, {0x5, 0x2}, {0x4000, 0x1df}, {}, {0x0, 0x5}, {0x400000, 0x3}], 0x10, 0x4, 0x4}}, 0x9}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 21.557556327s ago: executing program 6 (id=1503): r0 = socket(0x1d, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r1, 0x0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/l2cap\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x20, 0x16}, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x28, r5, 0xc4fc9e906872378b, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r7}, @val={0xc}}}}, 0x28}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x28, r10, 0xc4fc9e906872378b, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r11}, @val={0xc}}}}, 0x28}}, 0x0) recvmmsg(r8, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000280)={0x8, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @rand_addr=0x64010100}}}, 0x108) syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) 20.592514786s ago: executing program 1 (id=1504): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x75, 0xb2, 0x1f, 0x40, 0x8086, 0xb63, 0xcaf3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x3, 0xcc, 0xc8, 0xac, 0x0, [], [{{0x9, 0x5, 0x4, 0x4, 0x618, 0xd8, 0x3, 0x4, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x83, 0x62, 0x82}}, {{0x9, 0x5, 0x12, 0x0, 0x20, 0x0, 0xa, 0xc, [@generic={0x7, 0x5, "e6ea3588e4"}]}}]}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, {0x0, 0x0, 0x0, 0xfffffff800000003, 0x0, 0x0, 0xffffffffffffffd}, {0x0, 0x4}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100f4ff000000000000110000000c00"], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) clock_gettime(0x0, &(0x7f0000001a80)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000001a40)=[{{&(0x7f0000000580)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000001e00)=""/4096, 0x1000}}], 0x1, 0x40002121, &(0x7f0000001ac0)={r8, r9+10000000}) write$tcp_congestion(r7, &(0x7f0000000500)='bic\x00', 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r7) 20.303189494s ago: executing program 0 (id=1505): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 20.103716662s ago: executing program 0 (id=1506): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) socket(0x10, 0x3, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000400)=""/108, 0x6c) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}}) 19.091950016s ago: executing program 7 (id=1507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000180c20000000800450c0020"], 0x0) 19.028654272s ago: executing program 0 (id=1508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @func={0x2, 0x0, 0x0, 0xc, 0xfffffffd}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 18.753216121s ago: executing program 7 (id=1509): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_ENTRY(r2, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x100000000000, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x80002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) readlinkat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=""/45, 0x2d) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6b) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 18.082400769s ago: executing program 0 (id=1510): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 17.599410055s ago: executing program 0 (id=1511): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000002c0)={0x1, r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x294800, 0x0) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000200)={'macvlan1\x00'}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000600)={0x80000000000029f, 0x0, [{0x6000, 0x79, &(0x7f0000000400)=""/121}, {0x4, 0x2a, &(0x7f0000000500)=""/42}, {0x1, 0x76, &(0x7f0000000580)=""/118}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000680)) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r0, @ANYRESDEC=r5, @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4004850}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x0, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000030c0)=@newtclass={0x1aa0, 0x28, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x2}, {0x0, 0x2}, {0x2, 0xa}}, [@c_cbq={{0x8}, {0x82c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xc, 0xffffff72, 0xfffffffa, 0x6, 0x7c, 0x4, 0x7, 0x7, 0x8, 0x4, 0x5, 0xc, 0x80, 0x0, 0xf, 0x10001, 0x5, 0x2, 0x4, 0x8, 0x4, 0x3ff, 0x9, 0x9, 0xffffffff, 0x2, 0x4, 0x7, 0x40e5, 0x8, 0x4, 0x9, 0x2, 0x7, 0x50, 0x6, 0x4, 0xa, 0x8000, 0x6, 0x0, 0x101, 0x3, 0xfff, 0x9, 0x49, 0xfffffffe, 0x4, 0x9, 0xc547, 0x9, 0x149a, 0xffffb5e5, 0x94, 0x40, 0x5, 0x101, 0x7, 0x5, 0x9, 0x4d52ed1, 0x8001, 0x3ce, 0x3, 0x6, 0x7fffffff, 0x3, 0x7ff, 0x10000, 0x4, 0x21e, 0x5, 0x7c63, 0x8, 0xffffbee5, 0x1, 0x5a4, 0xfffffff6, 0x9, 0x8, 0x5, 0xfffffff3, 0x40, 0xfcb1, 0x7ff, 0x0, 0x8, 0x5, 0xfffffffb, 0x7, 0x7, 0xe, 0x1000, 0x401, 0x57, 0x2, 0x4, 0x3, 0x1, 0x8, 0x1, 0x0, 0x3ffc, 0x6, 0x97e, 0xf4b, 0x4, 0x0, 0xa890, 0x1, 0x7525, 0x4, 0x9, 0x6, 0x5, 0xfffffffe, 0x3, 0x5359, 0x0, 0x6, 0x81, 0x77, 0x8, 0x10000, 0x4, 0x6, 0x5, 0x10001, 0xbc, 0x4, 0x7, 0x1ff, 0xff, 0x80000000, 0x9, 0x3ff, 0x7, 0xffffffff, 0x80000001, 0x0, 0x7, 0x5, 0x200, 0xfffffffe, 0x9, 0x2, 0x4, 0x0, 0x1000, 0x3, 0x5a250b12, 0x8000, 0x8, 0xf1e, 0x3, 0x4, 0x1, 0x4, 0x4, 0x4, 0x6, 0xffffffff, 0x3, 0x1, 0x4, 0xe8c, 0x1, 0x9448, 0x8, 0x8000, 0x40, 0x80, 0x401, 0x8, 0x1, 0x4, 0x9, 0x6, 0x1, 0x7, 0x0, 0x8, 0x8, 0x7, 0x3, 0x2, 0x0, 0x0, 0xff, 0x4, 0xb, 0xf, 0x5, 0xea, 0x6, 0x7, 0x4, 0x1, 0x3, 0x2, 0x8, 0xe, 0x7, 0xfffff801, 0x40, 0x9, 0x7fff, 0x3b400000, 0x4, 0x89ac, 0x800, 0x200, 0xffffffff, 0x0, 0xff, 0xd, 0x1, 0x3, 0x2, 0xfffffffd, 0x2, 0x7fff, 0x2, 0x529, 0x81, 0x7, 0xffff0001, 0x4, 0x7, 0x6, 0x4ff1, 0x800, 0x9c, 0x1, 0x0, 0x2, 0x3, 0x6, 0x0, 0xfffffffe, 0x3, 0x7, 0x5, 0x6, 0xffffff01, 0x1ff, 0x3, 0xd, 0x0, 0x7, 0x8, 0x0, 0x1, 0x33, 0xa207, 0xfffffffa]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x4, 0x5d3c827f, 0x1, 0x3, 0x6, 0x6, 0x7, 0x3, 0x4, 0x1, 0x7, 0x0, 0xfffffff8, 0x5, 0xf40, 0x80, 0x7, 0x0, 0xba, 0x8, 0x8, 0x5, 0x7, 0x3, 0x2, 0x4, 0x9, 0x6, 0x8, 0x1, 0xff, 0x1, 0x82, 0x298, 0x6, 0xb, 0x2, 0x0, 0x9a, 0x8000000, 0x8, 0x5, 0x7ff, 0x6, 0x0, 0x5, 0x373, 0x9, 0x8001, 0x2, 0x9, 0x2, 0x18000, 0x8, 0x7, 0x7, 0x9, 0x10, 0xf, 0x7, 0x8, 0x7, 0x3, 0xfff, 0x0, 0x0, 0xa, 0xc, 0xe, 0xfffffffb, 0x7, 0x7, 0x60be, 0xffff3608, 0x4, 0x10000, 0x80000001, 0x5, 0x9, 0x0, 0xac, 0x9, 0xb5, 0x2, 0x0, 0x1, 0x8000, 0x7ff, 0x200, 0x200, 0x9, 0x1, 0x80000000, 0x8096, 0x3, 0x1, 0x8bbb, 0x93a, 0x3, 0x0, 0x2, 0xe, 0x8, 0x0, 0x9, 0x2, 0xf, 0xffff, 0xe, 0x9, 0x1, 0x3, 0x80000000, 0x7, 0x7fffffff, 0x221d232e, 0x0, 0xfffffff6, 0x7, 0x7fff, 0x0, 0x4, 0x269, 0x6, 0x5, 0x6, 0x0, 0x0, 0x60, 0x80, 0x321, 0x7, 0x6, 0x7, 0x7, 0x2, 0x4, 0x6, 0x5, 0xcae, 0x0, 0xfff, 0x9, 0x8, 0x5, 0x80000001, 0x0, 0x5, 0xc3, 0x8000, 0x8, 0x3, 0x3, 0x953b, 0x1, 0x7, 0x10, 0x8, 0x9, 0x6, 0x2, 0xd96, 0xfffff2d3, 0x9, 0x9, 0x80000001, 0x300, 0x80000001, 0x6, 0x7fffffff, 0x2, 0xfffffffc, 0x57, 0x1, 0x3384, 0x0, 0x4, 0x5, 0x9, 0x1, 0xffffff9f, 0x80000000, 0x7, 0x2, 0xc, 0x0, 0x5, 0x5, 0xf66, 0x7, 0x0, 0xfff, 0x0, 0xffff, 0x5, 0x5, 0x9, 0x0, 0x5, 0x8, 0x5, 0x2, 0xffffffff, 0x6, 0x5a13adbd, 0x9, 0x9, 0xfffffffe, 0x0, 0x10001, 0x7, 0xffffffff, 0xeb25, 0x3, 0x1, 0x1, 0x7, 0x72, 0xffa, 0x5, 0x19, 0x3, 0x5, 0x2, 0x2, 0x5, 0x8000, 0xfffffffe, 0x0, 0xfffffa01, 0x4, 0x742def88, 0x9, 0x2, 0x7, 0x702, 0x9, 0xe7, 0xf, 0xfe000000, 0x5, 0x2000004, 0x5, 0x1, 0x95a, 0x1e, 0x9, 0x9, 0x0, 0x800, 0x0, 0x7, 0x9, 0x86, 0x2, 0xfff]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xd, 0xb}, 0x5}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x0, 0x6, 0x8, 0x8, 0xf}}]}}, @c_atm={{0x8}, {0xa8, 0x2, [@TCA_ATM_HDR={0xe, 0x3, "ce43cdd74102e480b867"}, @TCA_ATM_FD={0x8}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffe0}}, @TCA_ATM_HDR={0x26, 0x3, "71b1875f69ee4d6ca0e3ac5cd0a18451f5523e65d030fce714f4de4028d444c8d8fc"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xb}}, @TCA_ATM_HDR={0x1b, 0x3, "b776d206796ee84af4828aeb4dc8c51fb275b50f594c8c"}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8}, @TCA_ATM_HDR={0x25, 0x3, "355861f45feb2c67cf7b85d8878c0219bcb4a82abec8f0ebe2fe4baeee7f427a71"}]}}, @c_cbq={{0x8}, {0x460, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x2, 0x0, 0xb, 0xfff, 0x8}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x80, 0x5, 0x5, 0x9, 0x1, 0xa}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x28, 0x2, 0x3, 0x1, 0x57, 0x4, 0x6, 0x5}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xb1ba, 0xc, 0xc, 0x4, 0x3, 0x80, 0x8, 0x5, 0xfffffff8, 0x7, 0x40, 0x8, 0x1, 0x7ff, 0x4, 0x302, 0x5, 0x8091, 0x8, 0x3, 0x8, 0x40, 0x1, 0x9, 0x9, 0x61, 0x4, 0x1, 0x7f, 0x1, 0x5, 0x4, 0x8, 0x8, 0x5, 0x7, 0x7, 0x4, 0x10000, 0x7, 0x8, 0x4, 0x467, 0x9, 0x0, 0x0, 0x0, 0xc, 0x5172, 0x1, 0x8001, 0x1, 0x7fff, 0x5, 0x100, 0x2, 0xac, 0x4, 0x12000, 0x9, 0x7ff, 0x40, 0x1, 0x8000, 0x4, 0x92e, 0x1ff, 0xe5000, 0x5, 0x1, 0x0, 0x4, 0x80000000, 0x7f, 0xff, 0x7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x1, 0x5, 0x7, 0xfffffffb, 0xd342, 0x7, 0x2, 0x9, 0xffff7fff, 0x9, 0x10001, 0x5, 0x1, 0x5, 0x7, 0x1, 0x7, 0xff, 0x0, 0x9, 0x24a, 0x7, 0x5, 0xd, 0x2, 0x6, 0x4, 0xffffffff, 0x4, 0x7, 0x9, 0x7, 0x7, 0x2, 0x1, 0x1, 0x5, 0x7fffffff, 0x0, 0x7, 0x1, 0xf9, 0x3ff, 0xc8, 0x0, 0x10, 0x2, 0x9, 0x1c0000, 0xef, 0xf47, 0x7, 0x8000, 0xcb, 0x6, 0xfffffff7, 0x2000000, 0x5, 0x6, 0x100, 0x7, 0x2, 0x6, 0xb, 0x0, 0xa0b7, 0x3, 0x3800, 0x8, 0x9, 0x2, 0x6, 0x27af, 0x0, 0xd15b, 0x1, 0x3, 0x4, 0x8, 0x1, 0x9f0a, 0x101, 0x2, 0xc01b, 0x3, 0x3, 0x40, 0x6, 0xfffffff6, 0x9, 0x0, 0x6, 0x1, 0x9, 0x6, 0x6, 0x3, 0x8000, 0x7, 0x7b60d8d5, 0x386, 0x7, 0x200, 0x1, 0x6, 0x0, 0x9, 0xffffff7f, 0x2000000, 0x6, 0x6, 0xffffffff, 0x0, 0x2, 0x2, 0x401, 0xffff, 0x2, 0x0, 0x2, 0x1, 0x33b, 0x5, 0x7fffffff, 0x2, 0x0, 0x4, 0x99, 0x7, 0x2, 0x5, 0x0, 0x4, 0x3, 0x6, 0x2, 0x4, 0x80000000, 0x1, 0x52db, 0x9, 0x10, 0x2, 0x0, 0x7, 0x3, 0x8, 0x7, 0x7, 0x9, 0x5, 0x1, 0x0, 0xffffffff, 0x1, 0x6d, 0xffffffff, 0x1, 0xeb8, 0x0, 0x6, 0x0, 0x8, 0x6, 0xfffffffd, 0x7fff, 0x80, 0x802000, 0x2, 0xff, 0x1, 0x0, 0x1ff, 0xffffffff, 0x1ff]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1, 0x1, 0x3, 0xe, 0x2, 0x101}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x4}, 0x0, 0x5b5}}]}}, @c_cbq={{0x8}, {0x87c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0x1, 0x3, 0x5, 0xfe0000, 0x0, 0x1, 0xffffffff, 0xc, 0x1, 0x5, 0x3, 0x2, 0x3, 0x800, 0x6, 0x1, 0x100, 0xfffffffa, 0x3, 0x510, 0x7fff, 0x5, 0xa93, 0x6, 0x80000001, 0x46ce, 0xffff, 0x8, 0x5, 0x5, 0x7fe, 0x10001, 0xffffff35, 0xef, 0x8, 0x8, 0x3, 0x22, 0xfffff041, 0x9b3, 0x6, 0xffffffff, 0x527872f2, 0x0, 0x8000, 0x2, 0x31, 0x7, 0x3, 0x5, 0x7, 0x0, 0x6, 0x6, 0x9, 0x8, 0x3, 0x0, 0x77fe, 0x3, 0x5, 0x8, 0xd11, 0x1, 0x4, 0x294fb90, 0x1, 0x10001, 0xfba, 0x8000, 0x0, 0x7, 0x80000001, 0x3, 0x0, 0x100, 0x2, 0xb, 0x5, 0x4, 0x2, 0x528, 0x1, 0x4, 0xffffff7a, 0x8, 0x3, 0x2, 0x6, 0x7, 0x8, 0x7ff, 0xfa3, 0x5, 0x3, 0x7a, 0x6, 0x8001, 0x80000, 0xfffeffff, 0x80000000, 0x7, 0x0, 0x3, 0x5, 0x5, 0x7, 0x9, 0x1, 0xd70, 0x800, 0xfffffff8, 0x7, 0x5, 0x48000000, 0x8, 0x7, 0x40, 0x3, 0x2, 0x9, 0x0, 0x8, 0x9, 0xffffffff, 0x4, 0x23b, 0xfffffffa, 0x7, 0x4, 0x6, 0x325b, 0x8, 0x1, 0x7fff, 0x7, 0xffffffff, 0x4, 0x4, 0x6, 0x3ff, 0x40, 0x200, 0xbfcd, 0x3, 0x400, 0x94, 0x4, 0x200, 0x9, 0x3b5, 0xfffffff7, 0x5, 0xb, 0x9, 0xc13, 0x10000, 0x2, 0xf025, 0x1, 0x7, 0x75b2, 0x7, 0x7, 0xc, 0xf, 0xfffffffa, 0x5, 0x5, 0x7ff, 0x6, 0x42, 0x6, 0x27098238, 0x9, 0x5, 0xfc7, 0x5, 0x2, 0x80000001, 0x8, 0x8, 0xfffff000, 0x20, 0x8000, 0x1, 0x3, 0x9d, 0x4, 0x2, 0x5, 0x7, 0x8000, 0x7, 0x304, 0xfff, 0x9, 0x80000001, 0x100, 0x1, 0x48b, 0x4, 0x8, 0x5, 0xb, 0x2, 0x8d, 0x3, 0x2, 0xf, 0x6, 0x401, 0x1, 0x7, 0x7ff, 0x2, 0x3, 0x7, 0xff, 0xb3, 0x4, 0x61b, 0x8, 0xfff, 0xfffffe01, 0xeac1, 0x3, 0x400, 0x3, 0x6, 0xfffffffd, 0x2, 0x81, 0x5, 0x3, 0x80006, 0xff, 0x4, 0x4, 0xab8f, 0x5, 0x19, 0xffff0001, 0x1, 0x9, 0xf2, 0x23e53247, 0x9, 0x3, 0x8, 0x8, 0x3, 0x7, 0x1, 0x9b]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x8, 0x7, 0x5, 0x9}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0xfffffffe, 0xffffffff, 0x200, 0xf2, 0x6, 0x22f1, 0x4, 0x7, 0x8, 0x1000, 0x3, 0x5dfe, 0x6, 0x3, 0x1, 0x9, 0x5a, 0x5, 0xff, 0x2d59, 0x2, 0xc, 0x8, 0x7, 0x13a, 0x7, 0x3ff, 0x2, 0xfffffff9, 0x8, 0x778465f2, 0x7, 0x7, 0x7, 0xbc, 0x40, 0x18000000, 0x0, 0x8, 0x7, 0xecd, 0x7, 0x3f42, 0x682490d, 0xfda, 0x4, 0x7, 0x4, 0x9, 0x8, 0x8001, 0xe, 0x6, 0x40, 0x1, 0xd1, 0xfe0c, 0x0, 0x400, 0x0, 0x2, 0xffffffff, 0x634, 0x3, 0x7b, 0x7d0, 0x200, 0x40, 0x10000, 0x6, 0x7, 0x4, 0x0, 0x20a, 0x2, 0x8, 0x5, 0x6, 0x4ed, 0x9, 0x0, 0x1, 0x8, 0xc, 0x1, 0x20, 0x1, 0x7fffffff, 0xfffff801, 0x4b1, 0xffffffff, 0x6, 0x0, 0xf, 0x2, 0x9, 0x2, 0x5, 0x7, 0x1, 0xfaec, 0x1, 0x3, 0xffffffff, 0xb, 0x3, 0x4, 0x0, 0x100, 0x5, 0xffffff01, 0x40, 0x1, 0x4, 0x100, 0x2, 0xfffffffc, 0xd, 0x2, 0xb6ce, 0xfffffff9, 0x0, 0xfffffffc, 0x4c646119, 0x2, 0x0, 0x1, 0xf5, 0x1, 0x4, 0x5, 0x40, 0x8, 0x8, 0x7fffffff, 0x8001, 0xff, 0x1, 0x9, 0x5, 0xc, 0x4, 0x100, 0x0, 0x7, 0x4fdc, 0x2, 0x5, 0x2, 0x8, 0x0, 0x8, 0x6, 0x4, 0x80000000, 0xffffff80, 0x4, 0x6, 0x7, 0x6, 0x8a4, 0x5, 0xffff, 0xc72b, 0x2, 0xd, 0x7, 0x5, 0x200, 0x7, 0x0, 0x5, 0x4, 0xffff, 0xd, 0x24, 0x326, 0x1, 0x2, 0x100, 0x8, 0x2, 0x5, 0x5, 0x4, 0x0, 0x4, 0x9, 0x7, 0x5, 0x2c, 0x7fffffff, 0x6, 0x6, 0x100, 0xffcd, 0x8, 0x0, 0x8, 0x7f, 0x0, 0x7f, 0x9, 0x7, 0x5, 0x8, 0x2, 0x80000001, 0x10000, 0x3, 0x7, 0xe6a, 0x4, 0xffffffa1, 0x2, 0xbf, 0x401, 0x55, 0xd2, 0x5, 0xffff, 0xbc7, 0x3, 0x7465f5a6, 0x5, 0x0, 0x4, 0x7f, 0x8, 0x6, 0x3, 0x3, 0x3, 0x80000000, 0x65, 0x9, 0xa, 0x6, 0xfffffff8, 0x6, 0x9000, 0x802, 0x8, 0x2, 0x8, 0x2, 0x3, 0x5, 0xbcb4, 0xfffffffa, 0x1, 0x8, 0x668, 0x7, 0x1]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x24, 0x3, 0x1b, 0x9, 0x8, 0x35e, 0x3, 0x83ea}}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x0, 0x6, 0x401, 0xb1e, 0x3}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x15, 0x2, 0xa, 0xf9, 0x1f5, 0x7ff, 0x7, 0x7fff}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0xfff2}, 0x9, 0x80000000}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0x2}, 0xc42, 0x6}}]}}, @c_atm={{0x8}, {0x4c, 0x2, [@TCA_ATM_FD={0x8, 0x1, r8}, @TCA_ATM_FD={0x8, 0x1, r9}, @TCA_ATM_HDR={0x2e, 0x3, "f8812e2b5ebfead8c4501f2e427ea0852b8d56d596473347265f629eb35cb0a47bb90febbe6f8da81355"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x7, 0xffe0}}]}}, @c_cbq={{0x8}, {0x438, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x1, 0x5}, 0xfffff7b4, 0xb231}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x1, 0xfff0, 0x8, 0x8, 0x8}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x800, 0x9, 0x6, 0xd, 0x7, 0x7, 0x3, 0x4, 0x0, 0x401, 0x200, 0x400, 0x1, 0xfffffffb, 0x9, 0x1ff, 0x9, 0x6, 0x2, 0x9, 0x9, 0xfff, 0x8, 0xffff, 0x7, 0x2, 0x7fd, 0x7, 0x69, 0x67b3, 0x7, 0xfffffff9, 0x7ff, 0x269, 0x40, 0x7d0, 0x2, 0x2, 0x5, 0x80000000, 0x24949c2f, 0x3, 0x9, 0x81, 0x8001, 0x6, 0x3, 0x7fff, 0xf4f, 0x2, 0x4, 0x2, 0x0, 0x6, 0x3, 0x6, 0x4, 0x9, 0x1, 0xfff, 0x1, 0x10000, 0x5, 0x1, 0x2, 0x9, 0x1ccb, 0x1, 0x3, 0x7fffffff, 0x80000000, 0xffff, 0x3, 0x5, 0x0, 0x200, 0x9, 0x2, 0x1, 0xaa, 0x0, 0xfcd, 0x9, 0x7, 0x8, 0xfffffffb, 0xf, 0x4, 0x4, 0x40000, 0x7, 0xfff, 0x8a, 0x2, 0x2, 0x1, 0xc4, 0xb, 0xe, 0x7ff, 0x4, 0xffff5450, 0x9, 0x60c7, 0x80000000, 0x8, 0x4, 0x1, 0x1, 0xfffffff9, 0x629, 0x0, 0x8, 0x3, 0x2, 0x6, 0x3, 0x8000, 0x80000001, 0x3ff, 0xfffffffe, 0x4, 0xb, 0x4, 0xffffff01, 0x3, 0x1, 0x5, 0x6, 0x3, 0x0, 0x559de991, 0xff, 0x2, 0x5, 0x7, 0x1, 0x2, 0x61, 0x81, 0x10000, 0x9, 0x2, 0x35e4, 0x8, 0xfffffff1, 0xa3, 0x1, 0x101, 0x5, 0x7f76b02d, 0x600b6a2b, 0x2, 0xe2cf, 0x7, 0x8, 0x1, 0xf, 0x7, 0x9, 0xffff7fff, 0x5, 0x2, 0x1, 0x6, 0x3, 0x5, 0x9, 0x533, 0x9, 0x1, 0x2, 0x2, 0x8, 0x2, 0x0, 0xffffffff, 0x2, 0x4, 0x377f00, 0x4, 0x81, 0xbb92, 0x0, 0x200, 0x9, 0x40, 0x1, 0x40b5, 0x8001, 0x0, 0x1000, 0x8, 0x5, 0x7, 0x0, 0x20000, 0x24, 0x2, 0xe2, 0xfffffffe, 0x7, 0xf3b, 0x1bc5, 0x2, 0x4, 0x401, 0xff, 0x5, 0x2a6d, 0xe2, 0x8, 0xfffffffd, 0xe0000000, 0x3, 0x5, 0x9, 0xdaf, 0x80000000, 0x4, 0x973, 0x8, 0x4eb9, 0x5, 0x0, 0x6, 0x2, 0x3, 0x1, 0x6, 0x1, 0x8000, 0x6, 0x9, 0xf, 0x8, 0x2, 0x2, 0x3, 0x3, 0x7, 0x2, 0x26, 0x9, 0x5, 0xb, 0x1, 0x42ce, 0xdc, 0x4, 0x5, 0x7f, 0x8, 0x200, 0x7, 0x3]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x7f, 0x3, 0x4, 0x5, 0x8e, 0xef1d}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x98}}}]}, 0x1aa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000810) write$nci(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="7103020b1702800502095401"], 0xc) mmap(&(0x7f0000335000/0x1000)=nil, 0x1000, 0x1000007, 0xc3072, r5, 0xdcf49000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) 17.559799671s ago: executing program 7 (id=1512): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x21400}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}]}, 0x44}}, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x20, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022040000000370908015"], 0x0}, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 17.443667475s ago: executing program 6 (id=1513): openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x10) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8000, 0x22) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x69c780}) io_uring_enter(r0, 0x3516, 0x4, 0x0, 0x0, 0x0) unshare(0x28020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0x1}, 0x1c) socket$caif_stream(0x25, 0x1, 0x2) socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 16.412620385s ago: executing program 6 (id=1514): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc8}]}}}, 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$sock(r2, &(0x7f00000006c0), 0x0, 0x20000800) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x40, 0x0, 0x9, 0x5, 0xb, 0x3, 0x49, 0x5, 0x7, 0x2, 0xf6, 0xc, 0x5, 0x7, 0x2}}) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f0000000040)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x4}, {{&(0x7f0000000200)=@qipcrtr, 0x80, &(0x7f0000002540)=[{&(0x7f0000001300)=""/158, 0x9e}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)}, {&(0x7f0000002400)=""/119, 0x77}, {&(0x7f0000002480)=""/136, 0x88}], 0x6, &(0x7f00000025c0)=""/17, 0x11}, 0x4}, {{&(0x7f0000002600)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002740)=[{&(0x7f0000002680)=""/191, 0xbf}], 0x1}, 0x60000}, {{&(0x7f0000002780)=@nfc, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002800)=""/12, 0xc}, {&(0x7f0000002840)=""/77, 0x4d}, {&(0x7f00000028c0)=""/238, 0xee}, {&(0x7f00000029c0)=""/197, 0xc5}, {&(0x7f0000002ac0)=""/144, 0x90}, {&(0x7f0000002b80)=""/206, 0xce}, {&(0x7f0000002c80)=""/214, 0xd6}], 0x7, &(0x7f0000002e00)=""/82, 0x52}, 0x6}, {{&(0x7f0000002e80)=@nfc, 0x80, &(0x7f00000041c0)=[{&(0x7f0000002f00)=""/61, 0x3d}, {&(0x7f0000002f40)=""/114, 0x72}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/215, 0xd7}, {&(0x7f00000040c0)=""/195, 0xc3}], 0x5, &(0x7f0000004240)=""/240, 0xf0}, 0x9}, {{&(0x7f0000004340), 0x80, &(0x7f0000004700)=[{&(0x7f00000043c0)=""/175, 0xaf}, {&(0x7f0000004480)=""/141, 0x8d}, {&(0x7f0000004540)=""/230, 0xe6}, {&(0x7f0000004640)=""/191, 0xbf}], 0x4, &(0x7f0000004740)=""/16, 0x10}, 0xfffffff9}], 0x6, 0x40012021, &(0x7f0000004900)={0x0, 0x3938700}) sendfile(r6, r5, 0x0, 0x100000002) 15.196847111s ago: executing program 1 (id=1515): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x480202, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) sendmsg$NFC_CMD_GET_DEVICE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000950) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800080000000000002000004b64ffec850000008d58e54a51be2b8f0e000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) capget(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0x3, 0xaf, 0x1, 0x5, 0x2, 0xa}) unshare(0x6a040000) r6 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000240)={'mangle\x00', 0x0, [0x1fe, 0x1c14, 0xffffffff, 0x42, 0x2]}, &(0x7f00000002c0)=0x54) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$TCXONC(r0, 0x5608, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) fchmod(r7, 0x20049549e2a2d659) fchown(r7, 0x0, 0x0) r8 = syz_io_uring_setup(0x7be1, &(0x7f0000000080)={0x0, 0xf420, 0x13100, 0xfffffffa, 0x45, 0x0, r7}, &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_NAPI(r8, 0x1b, 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', 0x40000, 0x1) 2.023539836s ago: executing program 36 (id=1511): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000002c0)={0x1, r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x294800, 0x0) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000200)={'macvlan1\x00'}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000600)={0x80000000000029f, 0x0, [{0x6000, 0x79, &(0x7f0000000400)=""/121}, {0x4, 0x2a, &(0x7f0000000500)=""/42}, {0x1, 0x76, &(0x7f0000000580)=""/118}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000680)) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r0, @ANYRESDEC=r5, @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4004850}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x0, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000030c0)=@newtclass={0x1aa0, 0x28, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x2}, {0x0, 0x2}, {0x2, 0xa}}, [@c_cbq={{0x8}, {0x82c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xc, 0xffffff72, 0xfffffffa, 0x6, 0x7c, 0x4, 0x7, 0x7, 0x8, 0x4, 0x5, 0xc, 0x80, 0x0, 0xf, 0x10001, 0x5, 0x2, 0x4, 0x8, 0x4, 0x3ff, 0x9, 0x9, 0xffffffff, 0x2, 0x4, 0x7, 0x40e5, 0x8, 0x4, 0x9, 0x2, 0x7, 0x50, 0x6, 0x4, 0xa, 0x8000, 0x6, 0x0, 0x101, 0x3, 0xfff, 0x9, 0x49, 0xfffffffe, 0x4, 0x9, 0xc547, 0x9, 0x149a, 0xffffb5e5, 0x94, 0x40, 0x5, 0x101, 0x7, 0x5, 0x9, 0x4d52ed1, 0x8001, 0x3ce, 0x3, 0x6, 0x7fffffff, 0x3, 0x7ff, 0x10000, 0x4, 0x21e, 0x5, 0x7c63, 0x8, 0xffffbee5, 0x1, 0x5a4, 0xfffffff6, 0x9, 0x8, 0x5, 0xfffffff3, 0x40, 0xfcb1, 0x7ff, 0x0, 0x8, 0x5, 0xfffffffb, 0x7, 0x7, 0xe, 0x1000, 0x401, 0x57, 0x2, 0x4, 0x3, 0x1, 0x8, 0x1, 0x0, 0x3ffc, 0x6, 0x97e, 0xf4b, 0x4, 0x0, 0xa890, 0x1, 0x7525, 0x4, 0x9, 0x6, 0x5, 0xfffffffe, 0x3, 0x5359, 0x0, 0x6, 0x81, 0x77, 0x8, 0x10000, 0x4, 0x6, 0x5, 0x10001, 0xbc, 0x4, 0x7, 0x1ff, 0xff, 0x80000000, 0x9, 0x3ff, 0x7, 0xffffffff, 0x80000001, 0x0, 0x7, 0x5, 0x200, 0xfffffffe, 0x9, 0x2, 0x4, 0x0, 0x1000, 0x3, 0x5a250b12, 0x8000, 0x8, 0xf1e, 0x3, 0x4, 0x1, 0x4, 0x4, 0x4, 0x6, 0xffffffff, 0x3, 0x1, 0x4, 0xe8c, 0x1, 0x9448, 0x8, 0x8000, 0x40, 0x80, 0x401, 0x8, 0x1, 0x4, 0x9, 0x6, 0x1, 0x7, 0x0, 0x8, 0x8, 0x7, 0x3, 0x2, 0x0, 0x0, 0xff, 0x4, 0xb, 0xf, 0x5, 0xea, 0x6, 0x7, 0x4, 0x1, 0x3, 0x2, 0x8, 0xe, 0x7, 0xfffff801, 0x40, 0x9, 0x7fff, 0x3b400000, 0x4, 0x89ac, 0x800, 0x200, 0xffffffff, 0x0, 0xff, 0xd, 0x1, 0x3, 0x2, 0xfffffffd, 0x2, 0x7fff, 0x2, 0x529, 0x81, 0x7, 0xffff0001, 0x4, 0x7, 0x6, 0x4ff1, 0x800, 0x9c, 0x1, 0x0, 0x2, 0x3, 0x6, 0x0, 0xfffffffe, 0x3, 0x7, 0x5, 0x6, 0xffffff01, 0x1ff, 0x3, 0xd, 0x0, 0x7, 0x8, 0x0, 0x1, 0x33, 0xa207, 0xfffffffa]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x4, 0x5d3c827f, 0x1, 0x3, 0x6, 0x6, 0x7, 0x3, 0x4, 0x1, 0x7, 0x0, 0xfffffff8, 0x5, 0xf40, 0x80, 0x7, 0x0, 0xba, 0x8, 0x8, 0x5, 0x7, 0x3, 0x2, 0x4, 0x9, 0x6, 0x8, 0x1, 0xff, 0x1, 0x82, 0x298, 0x6, 0xb, 0x2, 0x0, 0x9a, 0x8000000, 0x8, 0x5, 0x7ff, 0x6, 0x0, 0x5, 0x373, 0x9, 0x8001, 0x2, 0x9, 0x2, 0x18000, 0x8, 0x7, 0x7, 0x9, 0x10, 0xf, 0x7, 0x8, 0x7, 0x3, 0xfff, 0x0, 0x0, 0xa, 0xc, 0xe, 0xfffffffb, 0x7, 0x7, 0x60be, 0xffff3608, 0x4, 0x10000, 0x80000001, 0x5, 0x9, 0x0, 0xac, 0x9, 0xb5, 0x2, 0x0, 0x1, 0x8000, 0x7ff, 0x200, 0x200, 0x9, 0x1, 0x80000000, 0x8096, 0x3, 0x1, 0x8bbb, 0x93a, 0x3, 0x0, 0x2, 0xe, 0x8, 0x0, 0x9, 0x2, 0xf, 0xffff, 0xe, 0x9, 0x1, 0x3, 0x80000000, 0x7, 0x7fffffff, 0x221d232e, 0x0, 0xfffffff6, 0x7, 0x7fff, 0x0, 0x4, 0x269, 0x6, 0x5, 0x6, 0x0, 0x0, 0x60, 0x80, 0x321, 0x7, 0x6, 0x7, 0x7, 0x2, 0x4, 0x6, 0x5, 0xcae, 0x0, 0xfff, 0x9, 0x8, 0x5, 0x80000001, 0x0, 0x5, 0xc3, 0x8000, 0x8, 0x3, 0x3, 0x953b, 0x1, 0x7, 0x10, 0x8, 0x9, 0x6, 0x2, 0xd96, 0xfffff2d3, 0x9, 0x9, 0x80000001, 0x300, 0x80000001, 0x6, 0x7fffffff, 0x2, 0xfffffffc, 0x57, 0x1, 0x3384, 0x0, 0x4, 0x5, 0x9, 0x1, 0xffffff9f, 0x80000000, 0x7, 0x2, 0xc, 0x0, 0x5, 0x5, 0xf66, 0x7, 0x0, 0xfff, 0x0, 0xffff, 0x5, 0x5, 0x9, 0x0, 0x5, 0x8, 0x5, 0x2, 0xffffffff, 0x6, 0x5a13adbd, 0x9, 0x9, 0xfffffffe, 0x0, 0x10001, 0x7, 0xffffffff, 0xeb25, 0x3, 0x1, 0x1, 0x7, 0x72, 0xffa, 0x5, 0x19, 0x3, 0x5, 0x2, 0x2, 0x5, 0x8000, 0xfffffffe, 0x0, 0xfffffa01, 0x4, 0x742def88, 0x9, 0x2, 0x7, 0x702, 0x9, 0xe7, 0xf, 0xfe000000, 0x5, 0x2000004, 0x5, 0x1, 0x95a, 0x1e, 0x9, 0x9, 0x0, 0x800, 0x0, 0x7, 0x9, 0x86, 0x2, 0xfff]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xd, 0xb}, 0x5}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x0, 0x6, 0x8, 0x8, 0xf}}]}}, @c_atm={{0x8}, {0xa8, 0x2, [@TCA_ATM_HDR={0xe, 0x3, "ce43cdd74102e480b867"}, @TCA_ATM_FD={0x8}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffe0}}, @TCA_ATM_HDR={0x26, 0x3, "71b1875f69ee4d6ca0e3ac5cd0a18451f5523e65d030fce714f4de4028d444c8d8fc"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xb}}, @TCA_ATM_HDR={0x1b, 0x3, "b776d206796ee84af4828aeb4dc8c51fb275b50f594c8c"}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8}, @TCA_ATM_HDR={0x25, 0x3, "355861f45feb2c67cf7b85d8878c0219bcb4a82abec8f0ebe2fe4baeee7f427a71"}]}}, @c_cbq={{0x8}, {0x460, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x2, 0x0, 0xb, 0xfff, 0x8}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x80, 0x5, 0x5, 0x9, 0x1, 0xa}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x28, 0x2, 0x3, 0x1, 0x57, 0x4, 0x6, 0x5}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xb1ba, 0xc, 0xc, 0x4, 0x3, 0x80, 0x8, 0x5, 0xfffffff8, 0x7, 0x40, 0x8, 0x1, 0x7ff, 0x4, 0x302, 0x5, 0x8091, 0x8, 0x3, 0x8, 0x40, 0x1, 0x9, 0x9, 0x61, 0x4, 0x1, 0x7f, 0x1, 0x5, 0x4, 0x8, 0x8, 0x5, 0x7, 0x7, 0x4, 0x10000, 0x7, 0x8, 0x4, 0x467, 0x9, 0x0, 0x0, 0x0, 0xc, 0x5172, 0x1, 0x8001, 0x1, 0x7fff, 0x5, 0x100, 0x2, 0xac, 0x4, 0x12000, 0x9, 0x7ff, 0x40, 0x1, 0x8000, 0x4, 0x92e, 0x1ff, 0xe5000, 0x5, 0x1, 0x0, 0x4, 0x80000000, 0x7f, 0xff, 0x7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x1, 0x5, 0x7, 0xfffffffb, 0xd342, 0x7, 0x2, 0x9, 0xffff7fff, 0x9, 0x10001, 0x5, 0x1, 0x5, 0x7, 0x1, 0x7, 0xff, 0x0, 0x9, 0x24a, 0x7, 0x5, 0xd, 0x2, 0x6, 0x4, 0xffffffff, 0x4, 0x7, 0x9, 0x7, 0x7, 0x2, 0x1, 0x1, 0x5, 0x7fffffff, 0x0, 0x7, 0x1, 0xf9, 0x3ff, 0xc8, 0x0, 0x10, 0x2, 0x9, 0x1c0000, 0xef, 0xf47, 0x7, 0x8000, 0xcb, 0x6, 0xfffffff7, 0x2000000, 0x5, 0x6, 0x100, 0x7, 0x2, 0x6, 0xb, 0x0, 0xa0b7, 0x3, 0x3800, 0x8, 0x9, 0x2, 0x6, 0x27af, 0x0, 0xd15b, 0x1, 0x3, 0x4, 0x8, 0x1, 0x9f0a, 0x101, 0x2, 0xc01b, 0x3, 0x3, 0x40, 0x6, 0xfffffff6, 0x9, 0x0, 0x6, 0x1, 0x9, 0x6, 0x6, 0x3, 0x8000, 0x7, 0x7b60d8d5, 0x386, 0x7, 0x200, 0x1, 0x6, 0x0, 0x9, 0xffffff7f, 0x2000000, 0x6, 0x6, 0xffffffff, 0x0, 0x2, 0x2, 0x401, 0xffff, 0x2, 0x0, 0x2, 0x1, 0x33b, 0x5, 0x7fffffff, 0x2, 0x0, 0x4, 0x99, 0x7, 0x2, 0x5, 0x0, 0x4, 0x3, 0x6, 0x2, 0x4, 0x80000000, 0x1, 0x52db, 0x9, 0x10, 0x2, 0x0, 0x7, 0x3, 0x8, 0x7, 0x7, 0x9, 0x5, 0x1, 0x0, 0xffffffff, 0x1, 0x6d, 0xffffffff, 0x1, 0xeb8, 0x0, 0x6, 0x0, 0x8, 0x6, 0xfffffffd, 0x7fff, 0x80, 0x802000, 0x2, 0xff, 0x1, 0x0, 0x1ff, 0xffffffff, 0x1ff]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1, 0x1, 0x3, 0xe, 0x2, 0x101}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x4}, 0x0, 0x5b5}}]}}, @c_cbq={{0x8}, {0x87c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0x1, 0x3, 0x5, 0xfe0000, 0x0, 0x1, 0xffffffff, 0xc, 0x1, 0x5, 0x3, 0x2, 0x3, 0x800, 0x6, 0x1, 0x100, 0xfffffffa, 0x3, 0x510, 0x7fff, 0x5, 0xa93, 0x6, 0x80000001, 0x46ce, 0xffff, 0x8, 0x5, 0x5, 0x7fe, 0x10001, 0xffffff35, 0xef, 0x8, 0x8, 0x3, 0x22, 0xfffff041, 0x9b3, 0x6, 0xffffffff, 0x527872f2, 0x0, 0x8000, 0x2, 0x31, 0x7, 0x3, 0x5, 0x7, 0x0, 0x6, 0x6, 0x9, 0x8, 0x3, 0x0, 0x77fe, 0x3, 0x5, 0x8, 0xd11, 0x1, 0x4, 0x294fb90, 0x1, 0x10001, 0xfba, 0x8000, 0x0, 0x7, 0x80000001, 0x3, 0x0, 0x100, 0x2, 0xb, 0x5, 0x4, 0x2, 0x528, 0x1, 0x4, 0xffffff7a, 0x8, 0x3, 0x2, 0x6, 0x7, 0x8, 0x7ff, 0xfa3, 0x5, 0x3, 0x7a, 0x6, 0x8001, 0x80000, 0xfffeffff, 0x80000000, 0x7, 0x0, 0x3, 0x5, 0x5, 0x7, 0x9, 0x1, 0xd70, 0x800, 0xfffffff8, 0x7, 0x5, 0x48000000, 0x8, 0x7, 0x40, 0x3, 0x2, 0x9, 0x0, 0x8, 0x9, 0xffffffff, 0x4, 0x23b, 0xfffffffa, 0x7, 0x4, 0x6, 0x325b, 0x8, 0x1, 0x7fff, 0x7, 0xffffffff, 0x4, 0x4, 0x6, 0x3ff, 0x40, 0x200, 0xbfcd, 0x3, 0x400, 0x94, 0x4, 0x200, 0x9, 0x3b5, 0xfffffff7, 0x5, 0xb, 0x9, 0xc13, 0x10000, 0x2, 0xf025, 0x1, 0x7, 0x75b2, 0x7, 0x7, 0xc, 0xf, 0xfffffffa, 0x5, 0x5, 0x7ff, 0x6, 0x42, 0x6, 0x27098238, 0x9, 0x5, 0xfc7, 0x5, 0x2, 0x80000001, 0x8, 0x8, 0xfffff000, 0x20, 0x8000, 0x1, 0x3, 0x9d, 0x4, 0x2, 0x5, 0x7, 0x8000, 0x7, 0x304, 0xfff, 0x9, 0x80000001, 0x100, 0x1, 0x48b, 0x4, 0x8, 0x5, 0xb, 0x2, 0x8d, 0x3, 0x2, 0xf, 0x6, 0x401, 0x1, 0x7, 0x7ff, 0x2, 0x3, 0x7, 0xff, 0xb3, 0x4, 0x61b, 0x8, 0xfff, 0xfffffe01, 0xeac1, 0x3, 0x400, 0x3, 0x6, 0xfffffffd, 0x2, 0x81, 0x5, 0x3, 0x80006, 0xff, 0x4, 0x4, 0xab8f, 0x5, 0x19, 0xffff0001, 0x1, 0x9, 0xf2, 0x23e53247, 0x9, 0x3, 0x8, 0x8, 0x3, 0x7, 0x1, 0x9b]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x8, 0x7, 0x5, 0x9}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0xfffffffe, 0xffffffff, 0x200, 0xf2, 0x6, 0x22f1, 0x4, 0x7, 0x8, 0x1000, 0x3, 0x5dfe, 0x6, 0x3, 0x1, 0x9, 0x5a, 0x5, 0xff, 0x2d59, 0x2, 0xc, 0x8, 0x7, 0x13a, 0x7, 0x3ff, 0x2, 0xfffffff9, 0x8, 0x778465f2, 0x7, 0x7, 0x7, 0xbc, 0x40, 0x18000000, 0x0, 0x8, 0x7, 0xecd, 0x7, 0x3f42, 0x682490d, 0xfda, 0x4, 0x7, 0x4, 0x9, 0x8, 0x8001, 0xe, 0x6, 0x40, 0x1, 0xd1, 0xfe0c, 0x0, 0x400, 0x0, 0x2, 0xffffffff, 0x634, 0x3, 0x7b, 0x7d0, 0x200, 0x40, 0x10000, 0x6, 0x7, 0x4, 0x0, 0x20a, 0x2, 0x8, 0x5, 0x6, 0x4ed, 0x9, 0x0, 0x1, 0x8, 0xc, 0x1, 0x20, 0x1, 0x7fffffff, 0xfffff801, 0x4b1, 0xffffffff, 0x6, 0x0, 0xf, 0x2, 0x9, 0x2, 0x5, 0x7, 0x1, 0xfaec, 0x1, 0x3, 0xffffffff, 0xb, 0x3, 0x4, 0x0, 0x100, 0x5, 0xffffff01, 0x40, 0x1, 0x4, 0x100, 0x2, 0xfffffffc, 0xd, 0x2, 0xb6ce, 0xfffffff9, 0x0, 0xfffffffc, 0x4c646119, 0x2, 0x0, 0x1, 0xf5, 0x1, 0x4, 0x5, 0x40, 0x8, 0x8, 0x7fffffff, 0x8001, 0xff, 0x1, 0x9, 0x5, 0xc, 0x4, 0x100, 0x0, 0x7, 0x4fdc, 0x2, 0x5, 0x2, 0x8, 0x0, 0x8, 0x6, 0x4, 0x80000000, 0xffffff80, 0x4, 0x6, 0x7, 0x6, 0x8a4, 0x5, 0xffff, 0xc72b, 0x2, 0xd, 0x7, 0x5, 0x200, 0x7, 0x0, 0x5, 0x4, 0xffff, 0xd, 0x24, 0x326, 0x1, 0x2, 0x100, 0x8, 0x2, 0x5, 0x5, 0x4, 0x0, 0x4, 0x9, 0x7, 0x5, 0x2c, 0x7fffffff, 0x6, 0x6, 0x100, 0xffcd, 0x8, 0x0, 0x8, 0x7f, 0x0, 0x7f, 0x9, 0x7, 0x5, 0x8, 0x2, 0x80000001, 0x10000, 0x3, 0x7, 0xe6a, 0x4, 0xffffffa1, 0x2, 0xbf, 0x401, 0x55, 0xd2, 0x5, 0xffff, 0xbc7, 0x3, 0x7465f5a6, 0x5, 0x0, 0x4, 0x7f, 0x8, 0x6, 0x3, 0x3, 0x3, 0x80000000, 0x65, 0x9, 0xa, 0x6, 0xfffffff8, 0x6, 0x9000, 0x802, 0x8, 0x2, 0x8, 0x2, 0x3, 0x5, 0xbcb4, 0xfffffffa, 0x1, 0x8, 0x668, 0x7, 0x1]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x24, 0x3, 0x1b, 0x9, 0x8, 0x35e, 0x3, 0x83ea}}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x0, 0x6, 0x401, 0xb1e, 0x3}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x15, 0x2, 0xa, 0xf9, 0x1f5, 0x7ff, 0x7, 0x7fff}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0xfff2}, 0x9, 0x80000000}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0x2}, 0xc42, 0x6}}]}}, @c_atm={{0x8}, {0x4c, 0x2, [@TCA_ATM_FD={0x8, 0x1, r8}, @TCA_ATM_FD={0x8, 0x1, r9}, @TCA_ATM_HDR={0x2e, 0x3, "f8812e2b5ebfead8c4501f2e427ea0852b8d56d596473347265f629eb35cb0a47bb90febbe6f8da81355"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x7, 0xffe0}}]}}, @c_cbq={{0x8}, {0x438, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x1, 0x5}, 0xfffff7b4, 0xb231}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x1, 0xfff0, 0x8, 0x8, 0x8}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x800, 0x9, 0x6, 0xd, 0x7, 0x7, 0x3, 0x4, 0x0, 0x401, 0x200, 0x400, 0x1, 0xfffffffb, 0x9, 0x1ff, 0x9, 0x6, 0x2, 0x9, 0x9, 0xfff, 0x8, 0xffff, 0x7, 0x2, 0x7fd, 0x7, 0x69, 0x67b3, 0x7, 0xfffffff9, 0x7ff, 0x269, 0x40, 0x7d0, 0x2, 0x2, 0x5, 0x80000000, 0x24949c2f, 0x3, 0x9, 0x81, 0x8001, 0x6, 0x3, 0x7fff, 0xf4f, 0x2, 0x4, 0x2, 0x0, 0x6, 0x3, 0x6, 0x4, 0x9, 0x1, 0xfff, 0x1, 0x10000, 0x5, 0x1, 0x2, 0x9, 0x1ccb, 0x1, 0x3, 0x7fffffff, 0x80000000, 0xffff, 0x3, 0x5, 0x0, 0x200, 0x9, 0x2, 0x1, 0xaa, 0x0, 0xfcd, 0x9, 0x7, 0x8, 0xfffffffb, 0xf, 0x4, 0x4, 0x40000, 0x7, 0xfff, 0x8a, 0x2, 0x2, 0x1, 0xc4, 0xb, 0xe, 0x7ff, 0x4, 0xffff5450, 0x9, 0x60c7, 0x80000000, 0x8, 0x4, 0x1, 0x1, 0xfffffff9, 0x629, 0x0, 0x8, 0x3, 0x2, 0x6, 0x3, 0x8000, 0x80000001, 0x3ff, 0xfffffffe, 0x4, 0xb, 0x4, 0xffffff01, 0x3, 0x1, 0x5, 0x6, 0x3, 0x0, 0x559de991, 0xff, 0x2, 0x5, 0x7, 0x1, 0x2, 0x61, 0x81, 0x10000, 0x9, 0x2, 0x35e4, 0x8, 0xfffffff1, 0xa3, 0x1, 0x101, 0x5, 0x7f76b02d, 0x600b6a2b, 0x2, 0xe2cf, 0x7, 0x8, 0x1, 0xf, 0x7, 0x9, 0xffff7fff, 0x5, 0x2, 0x1, 0x6, 0x3, 0x5, 0x9, 0x533, 0x9, 0x1, 0x2, 0x2, 0x8, 0x2, 0x0, 0xffffffff, 0x2, 0x4, 0x377f00, 0x4, 0x81, 0xbb92, 0x0, 0x200, 0x9, 0x40, 0x1, 0x40b5, 0x8001, 0x0, 0x1000, 0x8, 0x5, 0x7, 0x0, 0x20000, 0x24, 0x2, 0xe2, 0xfffffffe, 0x7, 0xf3b, 0x1bc5, 0x2, 0x4, 0x401, 0xff, 0x5, 0x2a6d, 0xe2, 0x8, 0xfffffffd, 0xe0000000, 0x3, 0x5, 0x9, 0xdaf, 0x80000000, 0x4, 0x973, 0x8, 0x4eb9, 0x5, 0x0, 0x6, 0x2, 0x3, 0x1, 0x6, 0x1, 0x8000, 0x6, 0x9, 0xf, 0x8, 0x2, 0x2, 0x3, 0x3, 0x7, 0x2, 0x26, 0x9, 0x5, 0xb, 0x1, 0x42ce, 0xdc, 0x4, 0x5, 0x7f, 0x8, 0x200, 0x7, 0x3]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x7f, 0x3, 0x4, 0x5, 0x8e, 0xef1d}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x98}}}]}, 0x1aa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000810) write$nci(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="7103020b1702800502095401"], 0xc) mmap(&(0x7f0000335000/0x1000)=nil, 0x1000, 0x1000007, 0xc3072, r5, 0xdcf49000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.971081934s ago: executing program 37 (id=1512): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x21400}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}]}, 0x44}}, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x20, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022040000000370908015"], 0x0}, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.020002457s ago: executing program 38 (id=1514): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc8}]}}}, 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$sock(r2, &(0x7f00000006c0), 0x0, 0x20000800) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x40, 0x0, 0x9, 0x5, 0xb, 0x3, 0x49, 0x5, 0x7, 0x2, 0xf6, 0xc, 0x5, 0x7, 0x2}}) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f0000000040)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x4}, {{&(0x7f0000000200)=@qipcrtr, 0x80, &(0x7f0000002540)=[{&(0x7f0000001300)=""/158, 0x9e}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)}, {&(0x7f0000002400)=""/119, 0x77}, {&(0x7f0000002480)=""/136, 0x88}], 0x6, &(0x7f00000025c0)=""/17, 0x11}, 0x4}, {{&(0x7f0000002600)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002740)=[{&(0x7f0000002680)=""/191, 0xbf}], 0x1}, 0x60000}, {{&(0x7f0000002780)=@nfc, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002800)=""/12, 0xc}, {&(0x7f0000002840)=""/77, 0x4d}, {&(0x7f00000028c0)=""/238, 0xee}, {&(0x7f00000029c0)=""/197, 0xc5}, {&(0x7f0000002ac0)=""/144, 0x90}, {&(0x7f0000002b80)=""/206, 0xce}, {&(0x7f0000002c80)=""/214, 0xd6}], 0x7, &(0x7f0000002e00)=""/82, 0x52}, 0x6}, {{&(0x7f0000002e80)=@nfc, 0x80, &(0x7f00000041c0)=[{&(0x7f0000002f00)=""/61, 0x3d}, {&(0x7f0000002f40)=""/114, 0x72}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/215, 0xd7}, {&(0x7f00000040c0)=""/195, 0xc3}], 0x5, &(0x7f0000004240)=""/240, 0xf0}, 0x9}, {{&(0x7f0000004340), 0x80, &(0x7f0000004700)=[{&(0x7f00000043c0)=""/175, 0xaf}, {&(0x7f0000004480)=""/141, 0x8d}, {&(0x7f0000004540)=""/230, 0xe6}, {&(0x7f0000004640)=""/191, 0xbf}], 0x4, &(0x7f0000004740)=""/16, 0x10}, 0xfffffff9}], 0x6, 0x40012021, &(0x7f0000004900)={0x0, 0x3938700}) sendfile(r6, r5, 0x0, 0x100000002) 0s ago: executing program 39 (id=1515): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x480202, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) sendmsg$NFC_CMD_GET_DEVICE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000950) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800080000000000002000004b64ffec850000008d58e54a51be2b8f0e000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) capget(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0x3, 0xaf, 0x1, 0x5, 0x2, 0xa}) unshare(0x6a040000) r6 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000240)={'mangle\x00', 0x0, [0x1fe, 0x1c14, 0xffffffff, 0x42, 0x2]}, &(0x7f00000002c0)=0x54) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$TCXONC(r0, 0x5608, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) fchmod(r7, 0x20049549e2a2d659) fchown(r7, 0x0, 0x0) r8 = syz_io_uring_setup(0x7be1, &(0x7f0000000080)={0x0, 0xf420, 0x13100, 0xfffffffa, 0x45, 0x0, r7}, &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_NAPI(r8, 0x1b, 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', 0x40000, 0x1) kernel console output (not intermixed with test programs): nt descriptor for endpoint 83 [ 398.961070][ T46] keyspan 5-1:162.60: found no endpoint descriptor for endpoint 3 [ 399.026621][ T46] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 399.036801][ T46] usb 5-1: USB disconnect, device number 14 [ 399.062378][ T46] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 399.271851][ T46] keyspan 5-1:162.60: device disconnected [ 400.706153][ T29] audit: type=1326 audit(1736650841.300:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7802585d29 code=0x7ffc0000 [ 401.175417][ T29] audit: type=1326 audit(1736650841.300:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7802585d29 code=0x7ffc0000 [ 401.216280][ T29] audit: type=1326 audit(1736650841.300:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7802585d29 code=0x7ffc0000 [ 401.252233][ T9355] fuse: Bad value for 'rootmode' [ 401.466362][ T29] audit: type=1326 audit(1736650841.310:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7802585d29 code=0x7ffc0000 [ 401.489800][ T29] audit: type=1326 audit(1736650841.310:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7802585d29 code=0x7ffc0000 [ 401.944230][ T9360] netlink: 192 bytes leftover after parsing attributes in process `syz.3.801'. [ 402.582701][ T9372] syz.1.806: attempt to access beyond end of device [ 402.582701][ T9372] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 402.816015][ T9376] warning: `syz.3.807' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 402.855127][ T29] audit: type=1400 audit(1736650843.420:526): avc: denied { ioctl } for pid=9374 comm="syz.3.807" path="socket:[20534]" dev="sockfs" ino=20534 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 403.411199][ T969] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 403.946678][ T969] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 403.957885][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 403.969211][ T969] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 404.072244][ T969] usb 4-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 404.081346][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.089405][ T969] usb 4-1: Product: syz [ 404.092349][ T9394] tmpfs: Unknown parameter 'grpqulqÏF.ótë[ï oêÿ' [ 404.093619][ T969] usb 4-1: Manufacturer: syz [ 404.111477][ T969] usb 4-1: SerialNumber: syz [ 404.132330][ T969] usb 4-1: config 0 descriptor?? [ 404.140701][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout [ 404.141305][ T969] em28xx 4-1:0.0: New device syz syz @ 12 Mbps (2304:021a, interface 0, class 0) [ 404.155997][ T969] em28xx 4-1:0.0: Device initialization failed. [ 404.162587][ T969] em28xx 4-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 404.367380][ T969] usb 4-1: USB disconnect, device number 7 [ 405.639908][ T9406] netlink: 112 bytes leftover after parsing attributes in process `syz.3.817'. [ 405.658301][ T29] audit: type=1400 audit(1736650846.010:527): avc: denied { getopt } for pid=9403 comm="syz.3.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 406.059383][ T9409] fuse: Bad value for 'rootmode' [ 406.493892][ T9412] netlink: 192 bytes leftover after parsing attributes in process `syz.4.818'. [ 407.200914][ T9411] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 407.299977][ T9411] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 407.306697][ T9411] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 407.318759][ T9411] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 407.330590][ T9411] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 407.692511][ T9443] tmpfs: Bad value for 'mpol' [ 407.734126][ T9436] XFS (nullb0): Invalid superblock magic number [ 408.206174][ T9443] ======================================================= [ 408.206174][ T9443] WARNING: The mand mount option has been deprecated and [ 408.206174][ T9443] and is ignored by this kernel. Remove the mand [ 408.206174][ T9443] option from the mount to silence this warning. [ 408.206174][ T9443] ======================================================= [ 408.265063][ T9443] tmpfs: Bad value for 'nr_inodes' [ 408.270732][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout [ 408.866802][ T29] audit: type=1400 audit(1736650849.470:528): avc: denied { listen } for pid=9435 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 409.391532][ T5818] Bluetooth: hci5: command 0x0c1a tx timeout [ 409.402510][ T5818] Bluetooth: hci4: command 0x0c1a tx timeout [ 409.408766][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout [ 409.424462][ T5818] Bluetooth: hci1: command 0x0c1a tx timeout [ 410.757392][ T29] audit: type=1400 audit(1736650851.360:529): avc: denied { read write } for pid=9473 comm="syz.1.835" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 410.801075][ T29] audit: type=1400 audit(1736650851.360:530): avc: denied { open } for pid=9473 comm="syz.1.835" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 411.153745][ T9481] 9p: Unknown access argument 18446744073709551615: -34 [ 411.193970][ T9477] netlink: 'syz.4.836': attribute type 1 has an invalid length. [ 411.211074][ T29] audit: type=1400 audit(1736650851.490:531): avc: denied { setopt } for pid=9476 comm="syz.4.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 411.292523][ T29] audit: type=1400 audit(1736650851.530:532): avc: denied { listen } for pid=9476 comm="syz.4.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 411.324533][ T9478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.335047][ T29] audit: type=1400 audit(1736650851.810:533): avc: denied { connect } for pid=9476 comm="syz.4.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 411.335172][ T29] audit: type=1400 audit(1736650851.880:534): avc: denied { module_request } for pid=9473 comm="syz.1.835" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 411.382256][ T9478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.452706][ T9488] fuse: Bad value for 'rootmode' [ 411.916999][ T9492] netlink: 192 bytes leftover after parsing attributes in process `syz.5.840'. [ 412.959804][ T8] IPVS: starting estimator thread 0... [ 413.092060][ T9509] IPVS: using max 34 ests per chain, 81600 per kthread [ 413.964258][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 414.741591][ T29] audit: type=1400 audit(1736650855.270:535): avc: denied { read write } for pid=9525 comm="syz.5.850" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 414.873084][ T29] audit: type=1400 audit(1736650855.270:536): avc: denied { open } for pid=9525 comm="syz.5.850" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 415.069287][ T29] audit: type=1400 audit(1736650855.270:537): avc: denied { read } for pid=9525 comm="syz.5.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 415.264526][ T9538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.742998][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.854'. [ 416.093221][ T9542] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 416.102264][ T9542] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 416.117068][ T9542] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 418.171588][ T29] audit: type=1400 audit(1736650858.700:538): avc: denied { write } for pid=9558 comm="syz.4.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 418.288129][ T29] audit: type=1400 audit(1736650858.750:539): avc: denied { mounton } for pid=9558 comm="syz.4.860" path="/165/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 418.375173][ T9563] FAULT_INJECTION: forcing a failure. [ 418.375173][ T9563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.394284][ T9563] CPU: 0 UID: 0 PID: 9563 Comm: syz.4.860 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 418.404896][ T9563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 418.414944][ T9563] Call Trace: [ 418.418212][ T9563] [ 418.421144][ T9563] dump_stack_lvl+0x16c/0x1f0 [ 418.425821][ T9563] should_fail_ex+0x497/0x5b0 [ 418.430499][ T9563] _copy_from_user+0x2e/0xd0 [ 418.435077][ T9563] blkpg_do_ioctl+0xe2/0x440 [ 418.439668][ T9563] ? __pfx_blkpg_do_ioctl+0x10/0x10 [ 418.444872][ T9563] ? lock_acquire+0x2f/0xb0 [ 418.449361][ T9563] ? __might_fault+0xe3/0x190 [ 418.454035][ T9563] ? __might_fault+0xe3/0x190 [ 418.458725][ T9563] blkdev_ioctl+0x5a0/0x6d0 [ 418.463223][ T9563] ? __pfx_blkdev_ioctl+0x10/0x10 [ 418.468237][ T9563] ? selinux_file_ioctl+0x180/0x270 [ 418.473426][ T9563] ? selinux_file_ioctl+0xb4/0x270 [ 418.478527][ T9563] ? __pfx_blkdev_ioctl+0x10/0x10 [ 418.483548][ T9563] __x64_sys_ioctl+0x190/0x200 [ 418.488314][ T9563] do_syscall_64+0xcd/0x250 [ 418.492814][ T9563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.498717][ T9563] RIP: 0033:0x7efecdb85d29 [ 418.503136][ T9563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.522733][ T9563] RSP: 002b:00007efecb9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.531133][ T9563] RAX: ffffffffffffffda RBX: 00007efecdd76080 RCX: 00007efecdb85d29 [ 418.539095][ T9563] RDX: 0000000020000000 RSI: 0000000000001269 RDI: 0000000000000009 [ 418.547050][ T9563] RBP: 00007efecb9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 418.555006][ T9563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.562960][ T9563] R13: 0000000000000000 R14: 00007efecdd76080 R15: 00007ffcd80e6ef8 [ 418.570932][ T9563] [ 418.574052][ T5823] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 418.575821][ T29] audit: type=1400 audit(1736650858.750:540): avc: denied { getattr } for pid=9558 comm="syz.4.860" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 418.647329][ T29] audit: type=1400 audit(1736650859.250:541): avc: denied { write } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.677580][ T29] audit: type=1400 audit(1736650859.250:542): avc: denied { remove_name } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.706186][ T29] audit: type=1400 audit(1736650859.250:543): avc: denied { add_name } for pid=5171 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.751543][ T5823] usb 6-1: Using ep0 maxpacket: 8 [ 418.760382][ T5823] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 418.770952][ T5823] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 418.785500][ T5823] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 418.795648][ T5823] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.815064][ T5823] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 418.825467][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.875655][ T29] audit: type=1400 audit(1736650859.480:544): avc: denied { setopt } for pid=9558 comm="syz.4.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 419.048086][ T5823] usb 6-1: GET_CAPABILITIES returned 0 [ 419.057750][ T5823] usbtmc 6-1:16.0: can't read capabilities [ 419.254235][ T9561] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 419.265876][ T969] usb 6-1: USB disconnect, device number 13 [ 419.511596][ T5823] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 420.249782][ T5823] usb 4-1: unable to get BOS descriptor or descriptor too short [ 420.355793][ T9583] netlink: 1268 bytes leftover after parsing attributes in process `syz.5.867'. [ 420.371798][ T9583] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 420.474311][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.869'. [ 420.629624][ T5823] usb 4-1: config 8 has an invalid interface number: 234 but max is 0 [ 420.661527][ T5823] usb 4-1: config 8 has no interface number 0 [ 420.668472][ T5823] usb 4-1: config 8 interface 234 has no altsetting 0 [ 421.034000][ T9588] overlayfs: disabling nfs_export due to verity=on [ 421.312850][ T9594] netlink: 48 bytes leftover after parsing attributes in process `syz.0.863'. [ 421.545102][ T9588] overlayfs: missing 'lowerdir' [ 421.768997][ T5823] usb 4-1: New USB device found, idVendor=04cb, idProduct=0121, bcdDevice=89.fc [ 421.778852][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.787541][ T5823] usb 4-1: Product: syz [ 421.801587][ T29] audit: type=1400 audit(1736650862.360:545): avc: denied { connect } for pid=9598 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 421.821280][ T29] audit: type=1400 audit(1736650862.360:546): avc: denied { write } for pid=9598 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 421.840525][ T5823] usb 4-1: Manufacturer: syz [ 421.845188][ T5823] usb 4-1: SerialNumber: syz [ 423.580513][ T5823] gspca_main: finepix-2.14.0 probing 04cb:0121 [ 423.728230][ T5823] usb 4-1: USB disconnect, device number 8 [ 423.807800][ T9614] libceph: resolve 'c' (ret=-3): failed [ 423.881526][ T29] audit: type=1400 audit(1736650864.480:547): avc: denied { map } for pid=9617 comm="syz.4.878" path="/proc/621/net/snmp6" dev="proc" ino=4026533415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 423.925166][ T9623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.874'. [ 424.190856][ T29] audit: type=1400 audit(1736650864.480:548): avc: denied { execute } for pid=9617 comm="syz.4.878" path="/proc/621/net/snmp6" dev="proc" ino=4026533415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 425.976771][ T9643] netlink: 48 bytes leftover after parsing attributes in process `syz.4.882'. [ 426.522692][ T9644] random: crng reseeded on system resumption [ 426.921464][ T29] audit: type=1400 audit(1736650867.130:549): avc: denied { append } for pid=9633 comm="syz.5.881" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 430.019758][ T9683] fuse: Bad value for 'rootmode' [ 430.571622][ T9688] overlayfs: disabling nfs_export due to verity=on [ 430.580948][ T9688] overlayfs: missing 'lowerdir' [ 430.728780][ T9687] netlink: 192 bytes leftover after parsing attributes in process `syz.3.894'. [ 432.221529][ T5823] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 432.316531][ T29] audit: type=1400 audit(1736650872.920:550): avc: denied { map } for pid=9702 comm="syz.3.900" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 432.474782][ T5823] usb 1-1: New USB device found, idVendor=5032, idProduct=0bc7, bcdDevice=9c.bb [ 432.978289][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 432.987369][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.336186][ T5823] usb 1-1: config 0 descriptor?? [ 433.530245][ T5823] dvb-usb: found a 'GRAND - USB2.0 DVB-T adapter' in warm state. [ 433.539256][ T5823] dvb-usb: bulk message failed: -22 (3/0) [ 433.559618][ T5823] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 433.571167][ T5823] dvbdev: DVB: registering new adapter (GRAND - USB2.0 DVB-T adapter) [ 433.581997][ T5823] usb 1-1: media controller created [ 433.600235][ T5823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 433.619670][ T5823] dvb-usb: bulk message failed: -22 (6/0) [ 433.626781][ T5823] dvb-usb: bulk message failed: -22 (6/0) [ 433.695503][ T5823] dvb-usb: no frontend was attached by 'GRAND - USB2.0 DVB-T adapter' [ 433.715633][ T5823] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 433.735166][ T5823] dvb-usb: schedule remote query interval to 150 msecs. [ 433.746005][ T5823] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully initialized and connected. [ 433.905842][ T5823] dvb-usb: bulk message failed: -22 (1/0) [ 433.937209][ T5823] dvb-usb: error while querying for an remote control event. [ 434.252345][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 434.518806][ T9741] netlink: 132 bytes leftover after parsing attributes in process `syz.3.907'. [ 434.952761][ T5869] dvb-usb: bulk message failed: -22 (1/0) [ 434.958802][ T5869] dvb-usb: error while querying for an remote control event. [ 434.979261][ T5823] usb 1-1: USB disconnect, device number 23 [ 435.056341][ T9746] netlink: 80 bytes leftover after parsing attributes in process `syz.1.908'. [ 435.065724][ T9746] netlink: 80 bytes leftover after parsing attributes in process `syz.1.908'. [ 435.510126][ T9751] netlink: 40 bytes leftover after parsing attributes in process `syz.4.912'. [ 436.877074][ T5823] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully deinitialized and disconnected. [ 436.941284][ T29] audit: type=1400 audit(1736650877.540:551): avc: denied { mount } for pid=9750 comm="syz.4.912" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 439.030720][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 439.210508][ T9798] overlayfs: disabling nfs_export due to verity=on [ 439.217901][ T9798] overlayfs: missing 'workdir' [ 439.698114][ T29] audit: type=1400 audit(1736650880.300:552): avc: denied { create } for pid=9783 comm="syz.5.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 440.041944][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.048619][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.073213][ T9824] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 441.079302][ T9824] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 441.091753][ T9824] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 441.109711][ T9824] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 441.125132][ T9824] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 441.150740][ T9832] netlink: 68 bytes leftover after parsing attributes in process `syz.0.930'. [ 442.336039][ T9844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.361869][ T9844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.370914][ T9844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.569930][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 443.351561][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 443.357640][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 443.363726][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 443.369765][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 443.401842][ T9844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.565909][ T9862] overlayfs: disabling nfs_export due to verity=on [ 446.975790][ T9889] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = -1, id = 0 [ 448.017080][ T9885] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 448.024615][ T9885] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 449.021722][ T9885] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 450.021732][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout [ 450.027943][ T9885] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 450.041917][ T9885] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 450.731347][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 451.306293][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout [ 451.997293][ T46] hid-generic 0005:0009:0006.0003: unknown main item tag 0x6 [ 452.005321][ T46] hid-generic 0005:0009:0006.0003: unknown main item tag 0x5 [ 452.013209][ T46] hid-generic 0005:0009:0006.0003: unknown main item tag 0x6 [ 452.023448][ T46] hid-generic 0005:0009:0006.0003: unknown main item tag 0xe [ 452.036969][ T46] hid-generic 0005:0009:0006.0003: unknown main item tag 0x1 [ 452.044912][ T46] hid-generic 0005:0009:0006.0003: unknown main item tag 0xe [ 452.053087][ T46] hid-generic 0005:0009:0006.0003: unknown main item tag 0x5 [ 452.060726][ T46] hid-generic 0005:0009:0006.0003: unknown main item tag 0x6 [ 452.068267][ T46] hid-generic 0005:0009:0006.0003: item fetching failed at offset 47/49 [ 452.079329][ T46] hid-generic 0005:0009:0006.0003: probe with driver hid-generic failed with error -22 [ 452.121689][ T5818] Bluetooth: hci5: command 0x0c1a tx timeout [ 452.127727][ T5818] Bluetooth: hci4: command 0x0c1a tx timeout [ 452.309543][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.956'. [ 452.631851][ T29] audit: type=1400 audit(1736650893.240:553): avc: denied { connect } for pid=9929 comm="syz.3.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 452.803819][ T9934] overlayfs: disabling nfs_export due to verity=on [ 453.006585][ T29] audit: type=1400 audit(1736650893.430:554): avc: denied { ioctl } for pid=9929 comm="syz.3.957" path="socket:[21330]" dev="sockfs" ino=21330 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 453.337527][ T9944] SELinux: syz.4.958 (9944) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 454.901641][ T5868] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 455.013127][ T9968] fuse: Bad value for 'rootmode' [ 455.054847][ T5868] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 455.072409][ T5868] usb 1-1: config 0 has an invalid interface descriptor of length 2, skipping [ 455.087140][ T5868] usb 1-1: config 0 has no interface number 0 [ 455.093697][ T5868] usb 1-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 455.111572][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.971'. [ 455.125806][ T5868] usb 1-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 455.459045][ T9978] overlayfs: disabling nfs_export due to verity=on [ 455.464245][ T5868] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 455.484583][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.501594][ T5868] usb 1-1: Product: syz [ 455.506617][ T5868] usb 1-1: Manufacturer: syz [ 455.511302][ T5868] usb 1-1: SerialNumber: syz [ 455.542745][ T5868] usb 1-1: config 0 descriptor?? [ 455.564826][ T5868] ljca 1-1:0.84: bulk endpoints not found [ 455.924162][ T9976] netlink: 192 bytes leftover after parsing attributes in process `syz.4.968'. [ 456.665116][ T9987] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 457.321541][ T5868] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 458.421540][ T5868] usb 6-1: Using ep0 maxpacket: 8 [ 458.898657][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 458.934354][ T9] usb 1-1: USB disconnect, device number 24 [ 458.955144][ T5868] usb 6-1: config 0 has an invalid interface number: 7 but max is 0 [ 458.996061][ T5868] usb 6-1: config 0 has no interface number 0 [ 459.052449][ T5868] usb 6-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=14.f8 [ 459.088089][ T29] audit: type=1400 audit(1736650899.690:555): avc: denied { read } for pid=10004 comm="syz.1.981" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 459.105454][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.111287][ C1] vkms_vblank_simulate: vblank timer overrun [ 459.141533][ T5868] usb 6-1: Product: syz [ 459.145758][ T5868] usb 6-1: Manufacturer: syz [ 459.150885][ T5868] usb 6-1: SerialNumber: syz [ 459.171492][ T29] audit: type=1400 audit(1736650899.730:556): avc: denied { open } for pid=10004 comm="syz.1.981" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 459.173424][ T5868] usb 6-1: config 0 descriptor?? [ 459.195116][ C1] vkms_vblank_simulate: vblank timer overrun [ 459.221640][ T29] audit: type=1400 audit(1736650899.750:557): avc: denied { ioctl } for pid=10004 comm="syz.1.981" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 459.246747][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.005017][ T5868] usb 6-1: Expected 3 endpoints, found: 0 [ 461.041726][ T5868] usb 6-1: USB disconnect, device number 14 [ 461.069075][T10019] 9pnet_fd: Insufficient options for proto=fd [ 462.678506][T10040] FAULT_INJECTION: forcing a failure. [ 462.678506][T10040] name failslab, interval 1, probability 0, space 0, times 0 [ 462.691318][T10040] CPU: 0 UID: 0 PID: 10040 Comm: syz.1.983 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 462.702008][T10040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 462.712071][T10040] Call Trace: [ 462.715350][T10040] [ 462.718281][T10040] dump_stack_lvl+0x16c/0x1f0 [ 462.722977][T10040] should_fail_ex+0x497/0x5b0 [ 462.727663][T10040] ? fs_reclaim_acquire+0xae/0x150 [ 462.732785][T10040] should_failslab+0xc2/0x120 [ 462.737473][T10040] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 462.743206][T10040] ? __d_alloc+0x31/0xaa0 [ 462.747549][T10040] __d_alloc+0x31/0xaa0 [ 462.751719][T10040] d_alloc_pseudo+0x1c/0xc0 [ 462.756231][T10040] alloc_file_pseudo+0xdc/0x210 [ 462.761088][T10040] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 462.766568][T10040] sock_alloc_file+0x50/0x1d0 [ 462.771256][T10040] do_accept+0x23e/0x530 [ 462.775510][T10040] ? do_raw_spin_lock+0x12d/0x2c0 [ 462.780545][T10040] ? __pfx_do_accept+0x10/0x10 [ 462.785338][T10040] __sys_accept4+0xfe/0x1b0 [ 462.789853][T10040] ? __pfx___sys_accept4+0x10/0x10 [ 462.794971][T10040] ? ksys_write+0x1ba/0x250 [ 462.799475][T10040] ? __pfx_ksys_write+0x10/0x10 [ 462.804336][T10040] __x64_sys_accept+0x74/0xb0 [ 462.809022][T10040] ? lockdep_hardirqs_on+0x7c/0x110 [ 462.814227][T10040] do_syscall_64+0xcd/0x250 [ 462.818734][T10040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.824609][T10040] RIP: 0033:0x7f7802585d29 [ 462.828998][T10040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.848588][T10040] RSP: 002b:00007f78032e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 462.856977][T10040] RAX: ffffffffffffffda RBX: 00007f7802775fa0 RCX: 00007f7802585d29 [ 462.864925][T10040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 462.872871][T10040] RBP: 00007f78032e7090 R08: 0000000000000000 R09: 0000000000000000 [ 462.880818][T10040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.888762][T10040] R13: 0000000000000000 R14: 00007f7802775fa0 R15: 00007ffd460980d8 [ 462.896718][T10040] [ 466.091872][ T5823] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 466.501778][ T5823] usb 5-1: Using ep0 maxpacket: 8 [ 466.539832][ T5823] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 466.561524][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.645719][ T5823] usb 5-1: Product: syz [ 466.649887][ T5823] usb 5-1: Manufacturer: syz [ 466.656100][ T5823] usb 5-1: SerialNumber: syz [ 466.692243][ T5823] usb 5-1: config 0 descriptor?? [ 469.107144][ T5868] usb 5-1: USB disconnect, device number 15 [ 469.251850][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 469.481473][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 469.501676][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 469.517141][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 469.542192][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 469.557025][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.576947][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 469.587662][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.717698][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 470.731453][ T9] usbtmc 4-1:16.0: can't read capabilities [ 471.696929][T10104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1006'. [ 471.714421][T10104] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 471.724060][ T5865] usb 4-1: USB disconnect, device number 9 [ 472.191589][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 472.342947][ T9] usb 5-1: config 0 has an invalid interface number: 84 but max is 0 [ 472.360105][ T9] usb 5-1: config 0 has an invalid interface descriptor of length 2, skipping [ 472.369654][ T9] usb 5-1: config 0 has no interface number 0 [ 472.379769][ T9] usb 5-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 472.395538][ T9] usb 5-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 472.422811][T10139] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1013'. [ 472.456970][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 472.480366][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.504354][ T9] usb 5-1: Product: syz [ 472.517448][ T9] usb 5-1: Manufacturer: syz [ 472.528524][ T9] usb 5-1: SerialNumber: syz [ 472.561012][ T9] usb 5-1: config 0 descriptor?? [ 472.800388][ T9] ljca 5-1:0.84: bulk endpoints not found [ 473.385601][T10150] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 474.031631][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 475.794920][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 475.811502][ T29] audit: type=1400 audit(1736650916.110:558): avc: denied { connect } for pid=10155 comm="syz.5.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 475.831521][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.841878][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 475.855497][ T9] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 475.864910][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.886495][ T969] usb 5-1: USB disconnect, device number 16 [ 475.898991][ T9] usb 1-1: config 0 descriptor?? [ 477.027970][ T29] audit: type=1400 audit(1736650916.610:559): avc: denied { map } for pid=10159 comm="syz.3.1022" path="socket:[22030]" dev="sockfs" ino=22030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 477.180800][ T29] audit: type=1400 audit(1736650917.340:560): avc: denied { setattr } for pid=10159 comm="syz.3.1022" path="/dev/snd/controlC0" dev="devtmpfs" ino=1285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 477.431835][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 477.440710][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 477.517686][T10182] 9pnet_virtio: no channels available for device syz [ 477.537900][ T29] audit: type=1400 audit(1736650918.130:561): avc: denied { ioctl } for pid=10172 comm="syz.0.1025" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 478.081960][ T9] usb 1-1: USB disconnect, device number 25 [ 479.676898][ T29] audit: type=1400 audit(1736650920.280:562): avc: denied { mount } for pid=10204 comm="syz.4.1031" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 479.999874][T10210] SELinux: syz.0.1032 (10210) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 481.077647][ T29] audit: type=1400 audit(1736650921.680:563): avc: denied { create } for pid=10216 comm="syz.0.1035" name="#71" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 481.787552][ T29] audit: type=1400 audit(1736650921.680:564): avc: denied { link } for pid=10216 comm="syz.0.1035" name="#71" dev="tmpfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 481.842568][ T29] audit: type=1400 audit(1736650921.680:565): avc: denied { rename } for pid=10216 comm="syz.0.1035" name="#72" dev="tmpfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 482.020318][ T29] audit: type=1400 audit(1736650922.620:566): avc: denied { sqpoll } for pid=10230 comm="syz.1.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 483.181750][T10249] netlink: 'syz.3.1039': attribute type 10 has an invalid length. [ 483.189608][T10249] hsr0: entered promiscuous mode [ 483.399385][T10251] fuse: Bad value for 'rootmode' [ 483.866956][T10251] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1040'. [ 483.955685][ T29] audit: type=1400 audit(1736650924.560:567): avc: denied { read } for pid=10263 comm="syz.3.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 484.054882][T10269] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.1041'. [ 484.072294][T10269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1041'. [ 484.265035][ T969] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 484.403581][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1044'. [ 484.426589][T10288] fuse: Bad value for 'fd' [ 484.435760][ T969] usb 1-1: device descriptor read/64, error -71 [ 484.693202][ T969] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 484.871882][ T969] usb 1-1: device descriptor read/64, error -71 [ 484.886818][T10291] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=10291 comm=syz.4.1045 [ 484.906272][ T29] audit: type=1400 audit(1736650925.470:568): avc: denied { write } for pid=10282 comm="syz.4.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 485.239361][ T969] usb usb1-port1: attempt power cycle [ 486.031608][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 486.042168][T10293] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 487.640974][T10318] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.1051'. [ 489.888392][ T5865] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 490.801948][ T29] audit: type=1400 audit(1736650931.100:569): avc: denied { listen } for pid=10353 comm="syz.1.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 490.946211][ T5865] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 490.955416][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.059889][ T5865] usb 6-1: config 0 descriptor?? [ 491.112676][ T5865] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 491.120816][ T5865] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 491.266920][T10363] FAULT_INJECTION: forcing a failure. [ 491.266920][T10363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.280300][T10363] CPU: 0 UID: 0 PID: 10363 Comm: syz.4.1062 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 491.291082][T10363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 491.301118][T10363] Call Trace: [ 491.304383][T10363] [ 491.307296][T10363] dump_stack_lvl+0x16c/0x1f0 [ 491.311982][T10363] should_fail_ex+0x497/0x5b0 [ 491.317170][T10363] _copy_from_user+0x2e/0xd0 [ 491.321742][T10363] memdup_user+0x71/0xd0 [ 491.325964][T10363] __x64_sys_kexec_load+0x18e/0x230 [ 491.331144][T10363] do_syscall_64+0xcd/0x250 [ 491.335635][T10363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.341512][T10363] RIP: 0033:0x7efecdb85d29 [ 491.345907][T10363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.365507][T10363] RSP: 002b:00007efecb9f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 491.373902][T10363] RAX: ffffffffffffffda RBX: 00007efecdd76080 RCX: 00007efecdb85d29 [ 491.381858][T10363] RDX: 00000000200000c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 491.389812][T10363] RBP: 00007efecb9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 491.397762][T10363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.405803][T10363] R13: 0000000000000001 R14: 00007efecdd76080 R15: 00007ffcd80e6ef8 [ 491.413773][T10363] [ 492.443853][ T46] usb 6-1: USB disconnect, device number 15 [ 494.282069][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1072'. [ 494.296993][ T29] audit: type=1400 audit(1736650934.900:570): avc: denied { getopt } for pid=10396 comm="syz.5.1072" lport=42536 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 496.205842][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1075'. [ 496.220788][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1075'. [ 496.226341][ T29] audit: type=1400 audit(1736650936.820:571): avc: denied { getopt } for pid=10408 comm="syz.4.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 496.229752][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1075'. [ 498.218777][T10435] FAULT_INJECTION: forcing a failure. [ 498.218777][T10435] name failslab, interval 1, probability 0, space 0, times 0 [ 498.302390][T10435] CPU: 0 UID: 0 PID: 10435 Comm: syz.0.1084 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 498.313200][T10435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 498.323241][T10435] Call Trace: [ 498.326506][T10435] [ 498.329416][T10435] dump_stack_lvl+0x16c/0x1f0 [ 498.334085][T10435] should_fail_ex+0x497/0x5b0 [ 498.338743][T10435] ? fs_reclaim_acquire+0xae/0x150 [ 498.343848][T10435] should_failslab+0xc2/0x120 [ 498.348522][T10435] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 498.353896][T10435] ? key_alloc+0x3e3/0x13a0 [ 498.358427][T10435] key_alloc+0x3e3/0x13a0 [ 498.362778][T10435] ? __pfx_key_alloc+0x10/0x10 [ 498.367556][T10435] ? bpf_lsm_key_permission+0x9/0x10 [ 498.372857][T10435] ? security_key_permission+0x79/0x240 [ 498.378425][T10435] __key_create_or_update+0x71f/0xe10 [ 498.383822][T10435] ? __pfx___key_create_or_update+0x10/0x10 [ 498.389732][T10435] ? lookup_user_key+0x2ca/0x12f0 [ 498.394786][T10435] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 498.400963][T10435] key_create_or_update+0x42/0x60 [ 498.406010][T10435] __do_sys_add_key+0x29c/0x460 [ 498.410873][T10435] ? __pfx___do_sys_add_key+0x10/0x10 [ 498.416253][T10435] ? ksys_write+0x1ba/0x250 [ 498.420780][T10435] do_syscall_64+0xcd/0x250 [ 498.425310][T10435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.431223][T10435] RIP: 0033:0x7f682a585d29 [ 498.435651][T10435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.455277][T10435] RSP: 002b:00007f682b3f3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 498.463715][T10435] RAX: ffffffffffffffda RBX: 00007f682a775fa0 RCX: 00007f682a585d29 [ 498.471696][T10435] RDX: 0000000020000100 RSI: 0000000020000180 RDI: 0000000020000140 [ 498.479678][T10435] RBP: 00007f682b3f3090 R08: fffffffffffffffe R09: 0000000000000000 [ 498.487649][T10435] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000002 [ 498.495631][T10435] R13: 0000000000000000 R14: 00007f682a775fa0 R15: 00007ffccde46b88 [ 498.503628][T10435] [ 500.261651][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 500.731462][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 500.738436][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 500.748744][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 500.758865][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 500.797034][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.961469][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 500.995965][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.562449][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 501.568240][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.576556][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.582971][ T9] usbtmc 5-1:16.0: can't read capabilities [ 502.123566][T10455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1089'. [ 502.141154][T10455] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 502.152333][ T5868] usb 5-1: USB disconnect, device number 17 [ 502.232719][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 503.001501][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 503.008338][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 503.018313][ T9] usb 6-1: config 2 has an invalid interface number: 242 but max is 0 [ 503.026580][ T9] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 503.037324][ T9] usb 6-1: config 2 has no interface number 0 [ 503.043517][ T9] usb 6-1: config 2 interface 242 altsetting 250 has an invalid endpoint descriptor of length 2, skipping [ 503.054888][ T9] usb 6-1: config 2 interface 242 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 503.068175][ T9] usb 6-1: config 2 interface 242 has no altsetting 0 [ 503.199582][T10488] fuse: Bad value for 'rootmode' [ 503.211233][ T9] usb 6-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=62.62 [ 503.220814][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.239434][ T9] usb 6-1: Product: syz [ 503.248810][ T9] usb 6-1: Manufacturer: syz [ 503.256338][T10489] fuse: Bad value for 'rootmode' [ 503.257742][ T9] usb 6-1: SerialNumber: syz [ 503.484917][ T5868] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 503.501223][ T9] usb 6-1: selecting invalid altsetting 1 [ 503.508049][ T9] catc 6-1:2.242: Can't set altsetting 1. [ 503.515947][ T9] catc 6-1:2.242: probe with driver catc failed with error -5 [ 503.528490][T10493] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1100'. [ 503.548201][ T9] usb 6-1: USB disconnect, device number 16 [ 503.696489][ T5868] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 503.710484][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 503.726972][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 503.737997][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 503.745914][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 503.755402][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 503.767060][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 503.775050][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 503.780767][T10494] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1101'. [ 503.784483][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 503.809718][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 503.817717][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 503.827132][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 503.838234][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 503.845931][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 503.854889][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 503.866016][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 503.874102][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 503.883175][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 503.894188][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 503.905626][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 503.916147][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 503.927361][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 503.934892][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 503.944071][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 503.955121][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 503.963668][ T5868] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 503.973076][ T5868] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 503.981450][ T5868] usb 1-1: Product: syz [ 503.987730][ T5868] usb 1-1: Manufacturer: syz [ 503.993131][ T5868] usb 1-1: SerialNumber: syz [ 504.000347][ T5868] usb 1-1: config 0 descriptor?? [ 504.010739][ T5868] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 504.359531][ T969] usb 1-1: USB disconnect, device number 29 [ 504.371086][ T969] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 505.558607][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 506.624391][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 507.428676][T10529] fuse: Bad value for 'rootmode' [ 507.511832][T10532] xt_connbytes: Forcing CT accounting to be enabled [ 507.518500][T10532] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 507.540502][T10532] xt_bpf: check failed: parse error [ 507.692605][T10529] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1114'. [ 507.711533][ T5823] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 507.891600][ T5823] usb 5-1: Using ep0 maxpacket: 8 [ 508.044708][ T5823] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 508.122454][ T5823] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 508.187741][ T5823] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 508.249938][ T5823] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.303378][ T9] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 508.331579][ T5823] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 508.340666][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.477339][ T9] usb 6-1: config 201 has an invalid interface number: 249 but max is 0 [ 508.491114][ T9] usb 6-1: config 201 has no interface number 0 [ 508.497524][ T9] usb 6-1: config 201 interface 249 has no altsetting 0 [ 508.515745][ T9] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 508.528271][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.538947][ T9] usb 6-1: Product: syz [ 508.543304][ T9] usb 6-1: Manufacturer: syz [ 508.547924][ T9] usb 6-1: SerialNumber: syz [ 508.567809][T10524] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1111'. [ 508.578541][ T5823] usb 5-1: usb_control_msg returned -71 [ 508.590339][ T5823] usbtmc 5-1:16.0: can't read capabilities [ 508.602743][ T29] audit: type=1400 audit(1736650949.210:572): avc: denied { checkpoint_restore } for pid=10541 comm="syz.0.1118" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 508.646097][ T5823] usb 5-1: USB disconnect, device number 18 [ 508.766563][ T9] ath6kl: Failed to submit usb control message: -71 [ 508.773357][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 508.780406][ T9] ath6kl: Unable to send get target info: -71 [ 508.787996][ T9] ath6kl: Failed to init ath6kl core: -71 [ 508.797313][ T9] ath6kl_usb 6-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 508.812759][ T9] usb 6-1: USB disconnect, device number 17 [ 509.146273][ T29] audit: type=1400 audit(1736650949.750:573): avc: denied { ioctl } for pid=10545 comm="syz.4.1119" path="socket:[24593]" dev="sockfs" ino=24593 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 509.373307][ T29] audit: type=1326 audit(1736650949.980:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.5.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7774785d29 code=0x7ffc0000 [ 509.600222][ T29] audit: type=1326 audit(1736650949.980:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.5.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7774785d29 code=0x7ffc0000 [ 509.841645][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 509.848367][ T29] audit: type=1326 audit(1736650949.980:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.5.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7774785d29 code=0x7ffc0000 [ 509.925430][ T29] audit: type=1326 audit(1736650949.980:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.5.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7774785d29 code=0x7ffc0000 [ 509.994885][ T29] audit: type=1326 audit(1736650949.980:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.5.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7774785d29 code=0x7ffc0000 [ 510.205873][ T29] audit: type=1326 audit(1736650950.010:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.5.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7774785d29 code=0x7ffc0000 [ 510.321473][ T29] audit: type=1326 audit(1736650950.010:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.5.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7774785d29 code=0x7ffc0000 [ 510.842117][ T29] audit: type=1326 audit(1736650950.010:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.5.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7774785d29 code=0x7ffc0000 [ 511.821653][ T8] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 512.201503][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 512.208091][ T8] usb 6-1: config 0 has an invalid interface number: 226 but max is 0 [ 512.216896][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.241435][ T8] usb 6-1: config 0 has no interface number 0 [ 512.247604][ T8] usb 6-1: config 0 interface 226 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 512.283332][ T8] usb 6-1: New USB device found, idVendor=0bfd, idProduct=000f, bcdDevice=8c.8a [ 512.295271][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.311669][ T8] usb 6-1: Product: syz [ 512.321507][ T8] usb 6-1: Manufacturer: syz [ 512.328781][ T8] usb 6-1: SerialNumber: syz [ 512.354195][ T8] usb 6-1: config 0 descriptor?? [ 512.382999][ T8] kvaser_usb 6-1:0.226: error -ENODEV: Cannot get usb endpoint(s) [ 513.116736][T10592] SELinux: syz.4.1129 (10592) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 514.607054][ T969] usb 6-1: USB disconnect, device number 18 [ 515.873691][T10616] syzkaller1: entered promiscuous mode [ 515.879816][T10616] syzkaller1: entered allmulticast mode [ 523.009488][T10695] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = -1, id = 0 [ 523.024428][T10692] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1153'. [ 524.146199][T10717] SELinux: syz.5.1157 (10717) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 524.464782][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 524.464820][ T29] audit: type=1400 audit(1736650965.070:607): avc: denied { nlmsg_read } for pid=10715 comm="syz.0.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 526.908726][T10728] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 526.994642][T10728] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 527.012286][T10728] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 527.018504][T10728] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 527.050004][T10728] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 527.321475][ T8] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 527.593245][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.611681][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 527.636460][ T8] usb 1-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 527.646205][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.655609][ T8] usb 1-1: Product: syz [ 527.660074][ T8] usb 1-1: Manufacturer: syz [ 527.665195][ T8] usb 1-1: SerialNumber: syz [ 527.682174][ T8] usb 1-1: config 0 descriptor?? [ 527.933168][ T8] usb 1-1: USB disconnect, device number 30 [ 528.104308][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 528.372451][T10775] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1170'. [ 528.941491][ T29] audit: type=1400 audit(1736650969.530:608): avc: denied { write } for pid=10772 comm="syz.5.1171" path="socket:[24878]" dev="sockfs" ino=24878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 529.061754][ T5818] Bluetooth: hci4: command 0x0c1a tx timeout [ 529.067905][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout [ 529.074102][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 529.083880][ T5818] Bluetooth: hci1: command 0x0c1a tx timeout [ 534.667379][T10814] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 534.693268][T10814] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 534.700367][T10814] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 534.714607][T10814] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 534.739556][T10814] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 535.861463][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 536.161737][ T9] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 537.169576][ T5825] Bluetooth: hci5: command 0x0c1a tx timeout [ 537.175730][ T5825] Bluetooth: hci4: command 0x0c1a tx timeout [ 537.182402][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 537.188412][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 537.604179][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.615868][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.631720][ T9] usb 1-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 537.640766][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.651509][ T9] usb 1-1: Product: syz [ 537.655691][ T9] usb 1-1: Manufacturer: syz [ 537.660301][ T9] usb 1-1: SerialNumber: syz [ 537.802426][ T9] usb 1-1: config 0 descriptor?? [ 538.017613][ T9] usb 1-1: USB disconnect, device number 31 [ 539.865897][T10871] @: renamed from vlan0 [ 540.228141][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 542.113729][T10882] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 549.429542][ T29] audit: type=1400 audit(1736650990.030:609): avc: denied { write } for pid=11014 comm="syz.3.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 549.457556][ T29] audit: type=1400 audit(1736650990.030:610): avc: denied { setopt } for pid=11014 comm="syz.3.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 551.541746][T11049] SELinux: syz.3.1239 (11049) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 554.412336][ T29] audit: type=1400 audit(1736650995.020:611): avc: denied { setopt } for pid=11095 comm="syz.5.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 554.608383][T11099] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1249'. [ 555.140380][T11097] tty tty31: ldisc open failed (-12), clearing slot 30 [ 555.959546][ T29] audit: type=1400 audit(1736650996.560:612): avc: denied { create } for pid=11103 comm="syz.0.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 556.168104][T11104] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 556.192089][T11104] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 556.345530][T11104] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 556.384396][ T29] audit: type=1400 audit(1736650996.980:613): avc: denied { bind } for pid=11115 comm="syz.1.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 556.561962][T11104] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 556.985789][T11104] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 557.091430][ T29] audit: type=1400 audit(1736650997.690:614): avc: denied { node_bind } for pid=11115 comm="syz.1.1254" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 558.308734][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout [ 558.314838][ T5818] Bluetooth: hci1: command 0x0c1a tx timeout [ 558.702313][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout [ 558.708369][ T5825] Bluetooth: hci4: command 0x0c1a tx timeout [ 559.123946][ T5825] Bluetooth: hci5: command 0x0c1a tx timeout [ 559.547184][T11174] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1264'. [ 560.918108][ T29] audit: type=1400 audit(1736651001.520:615): avc: denied { connect } for pid=11196 comm="syz.5.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 561.052718][T11206] SELinux: Context system_u:object_r:gpg_agent_exec_t:s0 is not valid (left unmapped). [ 561.362841][ T29] audit: type=1400 audit(1736651001.670:616): avc: denied { relabelto } for pid=11204 comm="syz.4.1271" name="sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 561.390264][ T29] audit: type=1400 audit(1736651001.670:617): avc: denied { associate } for pid=11204 comm="syz.4.1271" name="sg0" dev="devtmpfs" ino=741 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 561.418087][ T29] audit: type=1400 audit(1736651001.930:618): avc: denied { listen } for pid=11196 comm="syz.5.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 561.961572][ T969] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 562.864614][ T969] usb 5-1: device descriptor read/64, error -71 [ 562.904394][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.910885][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.144920][ T969] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 563.231531][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 563.395762][ T8] usb 4-1: New USB device found, idVendor=5032, idProduct=0bc7, bcdDevice=9c.bb [ 563.409432][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.424488][ T8] usb 4-1: config 0 descriptor?? [ 563.445526][ T8] dvb-usb: found a 'GRAND - USB2.0 DVB-T adapter' in warm state. [ 563.456604][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 563.466589][ T969] usb 5-1: device descriptor read/64, error -71 [ 563.469556][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 563.527609][ T8] dvbdev: DVB: registering new adapter (GRAND - USB2.0 DVB-T adapter) [ 563.563435][ T8] usb 4-1: media controller created [ 563.588392][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 563.625104][ T969] usb usb5-port1: attempt power cycle [ 563.627073][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 563.636990][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 563.642948][ T8] dvb-usb: no frontend was attached by 'GRAND - USB2.0 DVB-T adapter' [ 563.668829][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 563.695276][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 563.703675][ T8] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully initialized and connected. [ 563.768714][ T29] audit: type=1400 audit(1736651004.370:619): avc: denied { map } for pid=11226 comm="syz.3.1277" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 563.787514][T11227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.852613][T11227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.966654][ T5933] usb 4-1: USB disconnect, device number 10 [ 564.476679][ T969] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 565.036623][ T5933] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully deinitialized and disconnected. [ 565.228772][ T29] audit: type=1400 audit(1736651005.470:620): avc: denied { create } for pid=11238 comm="syz.5.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 565.245826][ T969] usb 5-1: device descriptor read/8, error -71 [ 565.464767][ T29] audit: type=1400 audit(1736651006.060:621): avc: denied { write } for pid=11249 comm="syz.4.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 566.916717][ T29] audit: type=1400 audit(1736651007.520:622): avc: denied { accept } for pid=11257 comm="syz.5.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 566.952603][T11258] CIFS: iocharset name too long [ 567.132558][T11252] fuse: Bad value for 'fd' [ 567.561490][ T29] audit: type=1400 audit(1736651007.620:623): avc: denied { connect } for pid=11257 comm="syz.5.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 567.668220][ T29] audit: type=1400 audit(1736651007.640:624): avc: denied { accept } for pid=11257 comm="syz.5.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 571.663629][T11294] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1293'. [ 572.586469][ T29] audit: type=1400 audit(1736651012.290:625): avc: denied { read } for pid=11282 comm="syz.5.1293" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 572.692737][ T29] audit: type=1400 audit(1736651012.290:626): avc: denied { open } for pid=11282 comm="syz.5.1293" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 572.763063][ T29] audit: type=1400 audit(1736651013.320:627): avc: denied { read } for pid=11291 comm="syz.3.1295" name="sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 572.790862][ T29] audit: type=1400 audit(1736651013.320:628): avc: denied { open } for pid=11291 comm="syz.3.1295" path="/dev/sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 572.818793][ T29] audit: type=1400 audit(1736651013.320:629): avc: denied { ioctl } for pid=11291 comm="syz.3.1295" path="/dev/sg0" dev="devtmpfs" ino=741 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 575.274536][T11320] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 575.284148][T11320] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 575.391580][T11320] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 575.400788][T11320] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 575.416421][T11320] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 577.148820][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 577.321578][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 578.222293][ T5825] Bluetooth: hci4: command 0x0c1a tx timeout [ 578.228315][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 578.234374][ T5825] Bluetooth: hci5: command 0x0c1a tx timeout [ 578.708812][T11345] syzkaller1: entered promiscuous mode [ 578.714404][T11345] syzkaller1: entered allmulticast mode [ 579.069728][T11358] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1314'. [ 579.391454][ T8] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 579.544674][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 579.573506][ T8] usb 5-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 579.587442][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.596684][ T8] usb 5-1: Product: syz [ 579.601237][ T8] usb 5-1: Manufacturer: syz [ 579.608976][ T8] usb 5-1: SerialNumber: syz [ 579.626847][ T8] usb 5-1: config 0 descriptor?? [ 580.170738][ T5933] usb 5-1: USB disconnect, device number 23 [ 580.211262][T11366] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 580.219262][T11366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 580.227530][T11366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 580.244019][T11366] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 580.258078][T11366] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 581.491467][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout [ 582.459757][T11388] syzkaller1: entered promiscuous mode [ 582.465397][T11388] syzkaller1: entered allmulticast mode [ 582.505757][ T5818] Bluetooth: hci5: command 0x0c1a tx timeout [ 582.511875][ T5818] Bluetooth: hci4: command 0x0c1a tx timeout [ 582.517897][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout [ 582.524077][ T5818] Bluetooth: hci1: command 0x0c1a tx timeout [ 585.604163][ T29] audit: type=1400 audit(1736651026.210:630): avc: denied { bind } for pid=11425 comm="syz.5.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 585.706368][T11429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1335'. [ 586.528686][T11430] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 586.549597][T11430] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 586.576178][T11430] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 586.584275][T11430] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 586.590350][T11430] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 586.807335][T11443] evm: overlay not supported [ 586.820119][ T29] audit: type=1400 audit(1736651027.420:631): avc: denied { connect } for pid=11440 comm="syz.3.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 588.073569][T11455] syzkaller1: entered promiscuous mode [ 588.079141][T11455] syzkaller1: entered allmulticast mode [ 588.576913][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout [ 588.584111][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout [ 588.590102][ T5818] Bluetooth: hci1: command 0x0c1a tx timeout [ 588.701469][T10779] Bluetooth: hci5: command 0x0c1a tx timeout [ 588.701871][ T5818] Bluetooth: hci4: command 0x0c1a tx timeout [ 589.119218][T11461] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 589.790053][ T192] Bluetooth: hci0: Frame reassembly failed (-84) [ 591.068152][T11492] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1352'. [ 592.279538][ T5818] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 592.811527][ T29] audit: type=1326 audit(1736651033.400:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7802585d29 code=0x7ffc0000 [ 592.834952][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.912422][ T29] audit: type=1326 audit(1736651033.400:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7802585d29 code=0x7ffc0000 [ 592.935844][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.044891][ T29] audit: type=1326 audit(1736651033.400:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7802585d29 code=0x7ffc0000 [ 593.068396][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.180422][ T29] audit: type=1326 audit(1736651033.400:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7802585d29 code=0x7ffc0000 [ 593.215172][ T29] audit: type=1326 audit(1736651033.400:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7802585d29 code=0x7ffc0000 [ 593.276168][T11502] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 593.800147][T11515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1359'. [ 593.902813][T11520] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11520 comm=syz.1.1361 [ 594.589885][T11528] SELinux: syz.3.1364 (11528) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 595.980156][T11541] syzkaller1: entered promiscuous mode [ 595.985737][T11541] syzkaller1: entered allmulticast mode [ 597.641487][ T29] audit: type=1400 audit(1736651038.240:637): avc: denied { setopt } for pid=11543 comm="syz.3.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 597.941607][ T29] audit: type=1326 audit(1736651038.480:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7802585d29 code=0x7ffc0000 [ 597.965057][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.216174][ T29] audit: type=1326 audit(1736651038.480:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7802585d29 code=0x7ffc0000 [ 598.367298][ T29] audit: type=1326 audit(1736651038.480:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7802585d29 code=0x7ffc0000 [ 598.424741][T11563] tmpfs: Bad value for 'mpol' [ 598.430664][ T29] audit: type=1326 audit(1736651038.480:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7802585d29 code=0x7ffc0000 [ 598.587574][ T29] audit: type=1326 audit(1736651038.480:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7802585d29 code=0x7ffc0000 [ 601.300010][ T29] audit: type=1326 audit(1736651041.110:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.0.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682a585d29 code=0x7ffc0000 [ 601.329105][ T29] audit: type=1326 audit(1736651041.110:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.0.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682a585d29 code=0x7ffc0000 [ 601.352445][ C0] vkms_vblank_simulate: vblank timer overrun [ 601.716715][ T29] audit: type=1326 audit(1736651041.110:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.0.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f682a585d29 code=0x7ffc0000 [ 601.796298][ T29] audit: type=1326 audit(1736651041.120:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.0.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682a585d29 code=0x7ffc0000 [ 601.911033][ T29] audit: type=1326 audit(1736651041.120:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.0.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682a585d29 code=0x7ffc0000 [ 601.934452][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.086828][ T5933] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 602.264293][ T5933] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 602.277156][ T5933] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 602.287089][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.821511][ T5933] ath6kl: Failed to read usb control message: -71 [ 603.876096][ T5933] ath6kl: Unable to read the bmi data from the device: -71 [ 604.245747][ T5933] ath6kl: Unable to recv target info: -71 [ 604.297122][ T5933] ath6kl: Failed to init ath6kl core: -71 [ 604.307622][ T5933] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 604.382586][ T5933] usb 1-1: USB disconnect, device number 32 [ 605.481434][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 605.633127][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 605.639898][ T9] usb 1-1: config 128 has an invalid interface number: 251 but max is 0 [ 605.650529][ T9] usb 1-1: config 128 has no interface number 0 [ 605.668615][ T9] usb 1-1: config 128 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 605.686444][T11643] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1390'. [ 605.699534][ T9] usb 1-1: config 128 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 605.714920][T11643] unsupported nlmsg_type 40 [ 605.723217][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 605.737079][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.757025][ T9] usb 1-1: Product: syz [ 605.764996][ T9] usb 1-1: Manufacturer: syz [ 605.769736][ T9] usb 1-1: SerialNumber: syz [ 605.803965][T11631] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 605.822898][T11631] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 606.068182][T11631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.100775][T11631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.414014][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 606.414109][ T29] audit: type=1400 audit(1736651047.020:650): avc: denied { read } for pid=11630 comm="syz.0.1387" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 606.456282][T11631] fuse: Bad value for 'fd' [ 606.474572][ T9] asix 1-1:128.251: probe with driver asix failed with error -71 [ 606.497548][ T9] usb 1-1: USB disconnect, device number 33 [ 606.518041][ T29] audit: type=1400 audit(1736651047.020:651): avc: denied { open } for pid=11630 comm="syz.0.1387" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 607.915018][T11666] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1395'. [ 608.258838][T11673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 608.760636][ T29] audit: type=1400 audit(1736651048.880:652): avc: denied { bind } for pid=11669 comm="syz.0.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 609.839712][T11688] Bluetooth: Error in BCSP hdr checksum [ 610.002288][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 610.642014][ T12] Bluetooth: Error in BCSP hdr checksum [ 610.681531][ T9] usb 1-1: device descriptor read/64, error -71 [ 610.778562][T11696] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1403'. [ 610.974523][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 611.056643][ T6418] Bluetooth: Error in BCSP hdr checksum [ 611.132717][T11702] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 611.152186][T11702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1404'. [ 611.168296][ T9] usb 1-1: device descriptor read/64, error -71 [ 611.620913][T11703] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1404'. [ 611.655379][ T57] Bluetooth: Error in BCSP hdr checksum [ 611.755926][ T9] usb usb1-port1: attempt power cycle [ 611.861423][T11707] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1406'. [ 611.861757][T10779] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 611.912708][ T57] Bluetooth: Error in BCSP hdr checksum [ 612.183462][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 612.199571][ T6418] Bluetooth: Error in BCSP hdr checksum [ 612.227781][ T9] usb 1-1: device descriptor read/8, error -71 [ 612.848015][ T192] Bluetooth: Error in BCSP hdr checksum [ 613.140088][ T5983] Bluetooth: Error in BCSP hdr checksum [ 613.820570][ T5983] Bluetooth: Error in BCSP hdr checksum [ 614.034381][ T192] Bluetooth: Error in BCSP hdr checksum [ 615.175778][ T192] Bluetooth: Error in BCSP hdr checksum [ 616.368878][ T5818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 616.403845][ T5818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 616.445085][ T5818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 616.457298][ T5818] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 616.464960][ T5818] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 616.472400][ T5818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 617.542837][T11757] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 617.549487][T11757] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 617.555562][T11757] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 617.562242][T11757] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 617.568184][T11757] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 617.574182][T11757] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 617.580065][T11757] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 617.607122][T11757] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 619.770234][ T5818] Bluetooth: hci5: command 0x0c1a tx timeout [ 619.776407][ T5818] Bluetooth: hci4: command 0x0c1a tx timeout [ 619.785783][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout [ 619.793250][T10779] Bluetooth: hci6: command 0x041b tx timeout [ 619.799822][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 619.805978][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout [ 621.563314][T11749] chnl_net:caif_netlink_parms(): no params data found [ 621.871642][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 621.905663][T11777] Bluetooth: hci6: command 0x041b tx timeout [ 622.074598][ T9] usb 5-1: config 0 has an invalid interface number: 84 but max is 0 [ 622.130399][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 622.147690][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 622.159317][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 622.190880][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 622.220773][ T5825] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 622.234540][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 622.267964][ T9] usb 5-1: config 0 has an invalid interface descriptor of length 2, skipping [ 623.097458][ T9] usb 5-1: config 0 has no interface number 0 [ 623.106497][ T9] usb 5-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 623.117598][ T9] usb 5-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 623.167969][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 623.187293][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.208347][ T9] usb 5-1: Product: syz [ 623.218583][ T9] usb 5-1: Manufacturer: syz [ 623.285542][ T9] usb 5-1: SerialNumber: syz [ 623.300755][ T9] usb 5-1: config 0 descriptor?? [ 623.309128][ T9] ljca 5-1:0.84: bulk endpoints not found [ 623.422378][T11808] netlink: 'syz.0.1426': attribute type 9 has an invalid length. [ 623.430602][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1426'. [ 623.531951][T11808] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1426'. [ 623.598385][T11749] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.610705][T11749] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.627948][T11749] bridge_slave_0: entered allmulticast mode [ 623.650466][T11749] bridge_slave_0: entered promiscuous mode [ 623.736869][T11749] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.855761][T11812] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 624.353287][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.359604][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.367565][T11777] Bluetooth: hci0: command tx timeout [ 624.375941][ T5825] Bluetooth: hci6: command 0x041b tx timeout [ 624.389453][T11749] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.396727][T11749] bridge_slave_1: entered allmulticast mode [ 624.492690][T11749] bridge_slave_1: entered promiscuous mode [ 624.554742][T11749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.605472][T11749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.721812][T11818] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1428'. [ 625.249034][T11791] chnl_net:caif_netlink_parms(): no params data found [ 625.359290][T11749] team0: Port device team_slave_0 added [ 625.471513][ T5933] usb 5-1: USB disconnect, device number 24 [ 625.606853][ T29] audit: type=1400 audit(1736651066.190:653): avc: denied { ioctl } for pid=11821 comm="syz.4.1430" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 625.642343][T11749] team0: Port device team_slave_1 added [ 625.686769][T11749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.697961][T11749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.739681][T11749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.427992][ T5825] Bluetooth: hci6: command 0x041b tx timeout [ 626.434276][ T5825] Bluetooth: hci0: command tx timeout [ 626.445599][T11749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.453956][T11749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.481532][T11749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.511640][T11791] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.568751][T11791] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.584519][T11791] bridge_slave_0: entered allmulticast mode [ 626.602004][T11791] bridge_slave_0: entered promiscuous mode [ 626.755720][ T5983] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.806303][T11791] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.815732][T11791] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.825945][T11791] bridge_slave_1: entered allmulticast mode [ 626.839125][T11791] bridge_slave_1: entered promiscuous mode [ 627.602680][ T5983] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.239054][ T5983] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.400329][T11853] pim6reg: entered allmulticast mode [ 628.511617][T11777] Bluetooth: hci0: command tx timeout [ 628.518950][T11777] Bluetooth: hci6: command 0x041b tx timeout [ 629.005258][ T5983] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.085144][T11791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.133922][T11749] hsr_slave_0: entered promiscuous mode [ 629.142389][T11749] hsr_slave_1: entered promiscuous mode [ 629.148410][T11749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 629.156402][T11749] Cannot create hsr debugfs directory [ 629.613497][T11791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.712466][T11791] team0: Port device team_slave_0 added [ 629.775532][T11791] team0: Port device team_slave_1 added [ 629.872782][T11791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.879775][T11791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.421790][T11791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.443489][T11864] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 630.476804][T11865] fuse: Bad value for 'fd' [ 630.571706][T11791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.590389][T11791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.635753][ T5825] Bluetooth: hci6: command 0x041b tx timeout [ 630.661181][ T5825] Bluetooth: hci0: command tx timeout [ 630.675612][T11791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.847233][ T5983] bridge_slave_1: left allmulticast mode [ 630.881716][ T5983] bridge_slave_1: left promiscuous mode [ 630.915073][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.076037][ T5983] bridge_slave_0: left allmulticast mode [ 631.088528][ T5983] bridge_slave_0: left promiscuous mode [ 631.098059][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.223385][ T29] audit: type=1400 audit(1736651072.800:654): avc: denied { read } for pid=11870 comm="syz.0.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 633.964881][ T5983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.991913][ T5983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.002213][ T5983] bond0 (unregistering): Released all slaves [ 634.058185][T11791] hsr_slave_0: entered promiscuous mode [ 634.081961][T11791] hsr_slave_1: entered promiscuous mode [ 634.128913][T11791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 634.137701][ T5983] IPVS: stopping backup sync thread 8423 ... [ 634.145988][T11791] Cannot create hsr debugfs directory [ 634.868562][T11892] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 634.875403][T11892] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 634.912782][ T5983] hsr_slave_0: left promiscuous mode [ 634.940698][T11892] vhci_hcd vhci_hcd.0: Device attached [ 634.980609][ T5983] hsr_slave_1: left promiscuous mode [ 634.987185][T11895] vhci_hcd: connection closed [ 635.001731][ T57] vhci_hcd: stop threads [ 635.654461][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.663793][ T57] vhci_hcd: release socket [ 635.678140][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.678502][ T57] vhci_hcd: disconnect device [ 635.696751][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.720310][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.779727][ T5983] veth1_macvtap: left promiscuous mode [ 635.795183][ T5983] veth0_macvtap: left promiscuous mode [ 635.819480][ T5983] veth1_vlan: left promiscuous mode [ 637.283740][ T5983] team0 (unregistering): Port device team_slave_1 removed [ 637.327117][ T5983] team0 (unregistering): Port device team_slave_0 removed [ 639.197404][T11749] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 639.228458][T11749] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 639.272379][T11749] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 639.316141][T11749] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 639.900650][T11791] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 639.950918][T11791] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 639.996181][T11791] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 640.042933][T11791] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 640.253018][T11749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.441883][T11969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1454'. [ 640.549002][ T5983] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.635518][T11749] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.688381][ T5983] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.716380][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.723678][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.776150][ T5983] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.815666][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.822797][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.869368][ T5983] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.919825][T11791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.976384][T11791] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.059528][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.066651][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.221733][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.228832][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.299902][T11981] batman_adv: batadv0: Adding interface: dummy0 [ 641.327934][T11981] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.428078][T11981] batman_adv: batadv0: Interface activated: dummy0 [ 641.587115][ T5983] bridge_slave_1: left allmulticast mode [ 641.611935][ T5983] bridge_slave_1: left promiscuous mode [ 642.325589][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.437484][ T5983] bridge_slave_0: left allmulticast mode [ 642.450053][ T5983] bridge_slave_0: left promiscuous mode [ 642.465442][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.412570][ T5983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.439120][ T5983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.459528][ T5983] bond0 (unregistering): Released all slaves [ 643.476033][T11984] batadv0: mtu less than device minimum [ 643.484163][T11984] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 643.496883][T11984] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 643.509038][T11984] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 643.521172][T11984] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 643.533288][T11984] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 643.545418][T11984] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 643.557571][T11984] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 643.569735][T11984] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 643.582218][T11984] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 643.659123][T11791] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 644.302646][T11791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 644.476854][ T5983] IPVS: stopping backup sync thread 10695 ... [ 644.493102][T11749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.989143][T11791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.052904][ T5983] hsr_slave_0: left promiscuous mode [ 646.253554][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.260989][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.302990][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.310434][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.373037][ T5983] veth1_macvtap: left promiscuous mode [ 647.378588][ T5983] veth0_macvtap: left promiscuous mode [ 647.385732][ T5983] veth1_vlan: left promiscuous mode [ 647.912729][ T5983] team0 (unregistering): Port device team_slave_1 removed [ 647.971677][ T5983] team0 (unregistering): Port device team_slave_0 removed [ 648.549252][T11749] veth0_vlan: entered promiscuous mode [ 648.569229][T11749] veth1_vlan: entered promiscuous mode [ 648.645128][T11749] veth0_macvtap: entered promiscuous mode [ 648.829423][T12077] overlayfs: failed to resolve './file1': -2 [ 649.347256][T11749] veth1_macvtap: entered promiscuous mode [ 649.472405][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.503096][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.520984][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.531900][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.542116][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.571300][T12083] netlink: 'syz.0.1469': attribute type 16 has an invalid length. [ 649.585339][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.595606][T12083] netlink: 'syz.0.1469': attribute type 17 has an invalid length. [ 649.674030][T11749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.496866][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.546442][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.574048][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.656603][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.669963][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.680880][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.037381][T11749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.097780][T11749] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.133439][T11749] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.273962][T11749] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.289694][T11749] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.655348][T11791] veth0_vlan: entered promiscuous mode [ 651.768368][T12103] SELinux: syz.1.1472 (12103) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 652.412593][T11791] veth1_vlan: entered promiscuous mode [ 652.459231][ T5960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.476260][T11791] veth0_macvtap: entered promiscuous mode [ 652.528896][ T5960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.655482][T11791] veth1_macvtap: entered promiscuous mode [ 652.939181][ T5983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.953547][ T5983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.961522][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.973883][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.983883][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.994720][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.005039][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.015623][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.025745][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.036310][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.047241][T11791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.057222][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.067817][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.077813][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.088371][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.098625][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.109766][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.120303][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.130856][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.141930][T11791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.151502][T11791] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.160223][T11791] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.169013][T11791] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.177750][T11791] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.366488][ T29] audit: type=1400 audit(1736651093.960:655): avc: denied { sys_chroot } for pid=12128 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 654.076965][ T29] audit: type=1400 audit(1736651093.960:656): avc: denied { setgid } for pid=12128 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 654.140961][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.189071][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.208015][ T29] audit: type=1400 audit(1736651093.960:657): avc: denied { setrlimit } for pid=12128 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 654.222904][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.228105][ T29] audit: type=1400 audit(1736651093.960:658): avc: denied { mounton } for pid=11749 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 654.267952][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.182587][T12140] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 655.233574][T12140] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 655.239557][T12140] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 655.251288][T12140] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 655.392422][T12140] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 655.398676][T12140] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 655.409459][T12140] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 655.565278][T12164] overlayfs: failed to resolve './file1': -2 [ 656.022430][ T29] audit: type=1400 audit(1736651096.630:659): avc: denied { ioctl } for pid=12156 comm="syz.7.1421" path="socket:[31002]" dev="sockfs" ino=31002 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 656.096045][T12160] 9pnet_fd: Insufficient options for proto=fd [ 656.930550][T11777] Bluetooth: hci2: command 0x0c1a tx timeout [ 657.134004][ T29] audit: type=1400 audit(1736651097.740:660): avc: denied { shutdown } for pid=12176 comm="syz.6.1479" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 657.192471][ T29] audit: type=1400 audit(1736651097.760:661): avc: denied { write } for pid=12176 comm="syz.6.1479" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 657.304074][ T5825] Bluetooth: hci4: command 0x0c1a tx timeout [ 657.310117][T11777] Bluetooth: hci1: command 0x0c1a tx timeout [ 657.381483][ T5825] Bluetooth: hci6: command 0x041b tx timeout [ 657.461453][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 658.781141][ T29] audit: type=1400 audit(1736651099.380:662): avc: denied { read } for pid=12200 comm="syz.1.1483" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 658.943806][ T29] audit: type=1400 audit(1736651099.380:663): avc: denied { open } for pid=12200 comm="syz.1.1483" path="/318/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 660.150904][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 661.249005][T12231] Illegal XDP return value 4294967294 on prog (id 430) dev N/A, expect packet loss! [ 661.796418][T12242] overlayfs: failed to resolve './file1': -2 [ 662.535140][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 662.733076][T12252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 662.978897][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 662.991020][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 663.001068][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 663.011916][T11975] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 663.025846][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 663.034846][ T5825] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 663.043137][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 663.183075][T11975] usb 7-1: Using ep0 maxpacket: 8 [ 663.209725][T11975] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice= 0.55 [ 663.230664][T11975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.287867][T12261] chnl_net:caif_netlink_parms(): no params data found [ 663.297473][T11975] usb 7-1: config 0 descriptor?? [ 663.339157][T11975] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 663.395918][T11975] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 663.560458][T12261] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.575502][T12252] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 663.593194][T12261] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.616359][ T5868] usb 7-1: USB disconnect, device number 2 [ 663.647508][T12261] bridge_slave_0: entered allmulticast mode [ 663.679290][T12261] bridge_slave_0: entered promiscuous mode [ 663.713085][T12261] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.740597][T12261] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.763962][T12261] bridge_slave_1: entered allmulticast mode [ 663.790392][T12261] bridge_slave_1: entered promiscuous mode [ 663.990285][T12261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.063006][T12261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.208134][T12261] team0: Port device team_slave_0 added [ 664.234690][T12261] team0: Port device team_slave_1 added [ 664.241642][ T5865] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 664.341994][T12294] 9pnet_fd: Insufficient options for proto=fd [ 664.506280][T12261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.511435][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 664.518641][T12261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.533061][ T5865] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 664.558798][ T5865] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 664.885647][ T5865] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 664.964289][T12261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.036632][ T5865] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.072486][ T5825] Bluetooth: hci3: command tx timeout [ 665.110410][ T5865] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 665.135340][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.311635][T12294] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 665.321167][T12294] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 665.403683][T12261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.410689][T12261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.651456][T12261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.221115][T12306] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 666.516367][T12304] fuse: Bad value for 'fd' [ 666.533315][T12288] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 666.813829][T12261] hsr_slave_0: entered promiscuous mode [ 666.931818][T12261] hsr_slave_1: entered promiscuous mode [ 666.952380][ T5865] usb 1-1: usb_control_msg returned -71 [ 666.957976][ T5865] usbtmc 1-1:16.0: can't read capabilities [ 666.974148][T12261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 666.997515][ T5865] usb 1-1: USB disconnect, device number 38 [ 667.029235][T12261] Cannot create hsr debugfs directory [ 667.143006][ T5825] Bluetooth: hci3: command tx timeout [ 667.420366][ T5823] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 668.159077][T12338] can: request_module (can-proto-0) failed. [ 668.272580][T12261] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 668.282071][ T5823] usb 8-1: Using ep0 maxpacket: 8 [ 668.284126][T12261] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 668.296118][ T5823] usb 8-1: config 1 interface 0 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 64 [ 668.309195][T12261] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 668.312804][ T5823] usb 8-1: config 1 interface 0 altsetting 10 bulk endpoint 0x3 has invalid maxpacket 16 [ 668.325933][ T5823] usb 8-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 668.339220][ T5823] usb 8-1: config 1 interface 0 has no altsetting 0 [ 668.360918][T12261] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 668.365167][ T5823] usb 8-1: string descriptor 0 read error: -22 [ 668.374147][ T5823] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 668.383430][ T5823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.397149][T12327] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 668.404825][T12327] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 668.491541][ T5933] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 668.528446][T12261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.588989][T12261] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.616666][ T6418] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.623807][ T6418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.654482][T10067] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.661625][T10067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.669701][ T5933] usb 7-1: Using ep0 maxpacket: 8 [ 668.704371][ T5823] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 668.734390][ T5933] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 668.761611][ T5823] usb 8-1: USB disconnect, device number 2 [ 668.771434][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 668.799921][ T5933] usb 7-1: Product: syz [ 668.816557][T12261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 668.819691][ T5933] usb 7-1: Manufacturer: syz [ 669.028175][ T5933] usb 7-1: SerialNumber: syz [ 669.059671][ T5933] usb 7-1: config 0 descriptor?? [ 669.074547][ T5933] gspca_main: sq905-2.14.0 probing 2770:9120 [ 669.338725][ T5825] Bluetooth: hci3: command tx timeout [ 670.054299][T12261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.498071][ T5933] gspca_sq905: bulk read fail (-22) len 0/4 [ 670.505929][ T5933] sq905 7-1:0.0: probe with driver sq905 failed with error -5 [ 671.274083][T12261] veth0_vlan: entered promiscuous mode [ 671.295112][ T969] usb 7-1: USB disconnect, device number 3 [ 671.297428][T12261] veth1_vlan: entered promiscuous mode [ 671.391615][ T5825] Bluetooth: hci3: command tx timeout [ 671.416992][T12261] veth0_macvtap: entered promiscuous mode [ 671.448389][T12261] veth1_macvtap: entered promiscuous mode [ 671.472864][T12261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.488032][T12261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.499483][T12100] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 671.520301][T12261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.541378][T12261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.551297][T12261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.566453][T12261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.576748][T12261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.587641][T12261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.597542][T12261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.608391][T12261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.620454][T12261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.644366][T12261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.657028][T12261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.668969][T12261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.672055][ T5823] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 671.679752][T12261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.697185][T12100] usb 1-1: Using ep0 maxpacket: 16 [ 671.710368][T12261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.727426][T12261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.739383][T12100] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.750450][T12100] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.760243][T12100] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 671.773246][T12261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.784206][T12100] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 671.793909][T12261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.807450][T12100] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.815591][T12261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.826744][T12261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.838501][T12100] usb 1-1: config 0 descriptor?? [ 671.842317][ T5823] usb 8-1: Using ep0 maxpacket: 16 [ 671.844710][T12261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.860207][ T5823] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.873255][T12261] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.886074][ T5823] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 671.901439][T12261] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.901857][ T5823] usb 8-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 671.910209][T12261] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.928567][ T5823] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.940113][ T5823] usb 8-1: config 0 descriptor?? [ 671.948822][T12261] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.223141][ T29] audit: type=1400 audit(1736651112.820:664): avc: denied { execute } for pid=12400 comm="syz.0.1511" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=31793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 672.269230][T12408] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 672.285710][T12408] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 672.306902][T12408] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 672.313406][T12408] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 672.319646][T12408] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 672.329994][T12408] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 672.350470][T12408] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 672.474381][T12100] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 672.512970][ T6418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.526622][T12100] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 672.535467][T12100] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 672.545589][ T6418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.556782][T12100] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 672.571027][T12100] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 672.589885][T12100] input: HID 0955:7214 Haptics as /devices/virtual/input/input11 [ 672.649908][T12100] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 672.696210][T12100] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 673.551540][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 673.563114][T12406] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 673.581622][T12406] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 673.830503][T12100] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 673.854131][T12100] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 673.874790][T12100] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 673.924271][T12100] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 673.983828][T11977] usb 1-1: reset high-speed USB device number 39 using dummy_hcd [ 674.132269][T11977] usb 1-1: device descriptor read/64, error -32 [ 674.351446][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 674.357893][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 674.364607][ T5818] Bluetooth: hci6: command 0x041b tx timeout [ 674.375392][T12406] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 674.384895][T11777] Bluetooth: hci0: command 0x0c1a tx timeout [ 674.413179][T12406] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 674.501625][T11977] usb 1-1: reset high-speed USB device number 39 using dummy_hcd [ 674.566585][T12406] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 674.578855][T12406] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 674.599581][T12406] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 674.615419][T12406] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 674.635560][T11977] usb 1-1: device descriptor read/64, error -32 [ 674.677704][T12406] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 674.684078][T12406] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 674.881597][T11977] usb 1-1: reset high-speed USB device number 39 using dummy_hcd [ 674.911749][T11977] usb 1-1: device descriptor read/8, error -32 [ 675.151456][T11977] usb 1-1: reset high-speed USB device number 39 using dummy_hcd [ 675.171744][T11977] usb 1-1: device descriptor read/8, error -32 [ 675.282208][T11977] raw-gadget.2 gadget.0: failed to queue suspend event [ 675.293967][T11975] usb 1-1: USB disconnect, device number 39 [ 675.327728][T11975] raw-gadget.2 gadget.0: failed to queue reset event [ 675.402192][T11975] raw-gadget.2 gadget.0: failed to queue resume event [ 675.461715][T11975] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 675.470241][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 675.477738][T11975] raw-gadget.2 gadget.0: failed to queue reset event [ 675.552333][T11975] raw-gadget.2 gadget.0: failed to queue resume event [ 675.611545][T11975] usb 1-1: device descriptor read/64, error -32 [ 675.726437][T11975] raw-gadget.2 gadget.0: failed to queue suspend event [ 675.733685][T11975] raw-gadget.2 gadget.0: failed to queue reset event [ 675.805574][T11975] raw-gadget.2 gadget.0: failed to queue resume event [ 675.871435][T11975] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 675.880115][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 675.887583][T11975] raw-gadget.2 gadget.0: failed to queue reset event [ 675.961859][T11975] raw-gadget.2 gadget.0: failed to queue resume event [ 676.021475][T11975] usb 1-1: device descriptor read/64, error -32 [ 676.131459][T11975] raw-gadget.2 gadget.0: failed to queue suspend event [ 676.140492][T11975] usb usb1-port1: attempt power cycle [ 676.146102][T11975] raw-gadget.2 gadget.0: failed to queue disconnect event [ 676.153633][T11975] raw-gadget.2 gadget.0: failed to queue reset event [ 676.226042][T11975] raw-gadget.2 gadget.0: failed to queue resume event [ 676.233317][T11975] raw-gadget.2 gadget.0: failed to queue reset event [ 676.443009][T11975] raw-gadget.2 gadget.0: failed to queue resume event [ 676.501910][T11975] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 676.521697][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 676.532164][T11975] usb 1-1: device descriptor read/8, error -32 [ 676.645922][T11975] raw-gadget.2 gadget.0: failed to queue suspend event [ 676.653396][T11975] raw-gadget.2 gadget.0: failed to queue reset event [ 676.725008][T11975] raw-gadget.2 gadget.0: failed to queue resume event [ 676.792136][T11975] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 676.811668][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 676.819522][T11975] usb 1-1: device descriptor read/8, error -32 [ 676.942015][T11975] raw-gadget.2 gadget.0: failed to queue suspend event [ 676.949025][T11975] usb usb1-port1: unable to enumerate USB device [ 677.385947][ T5823] usbhid 8-1:0.0: can't add hid device: -32 [ 677.392036][ T5823] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 685.783579][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.790315][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.232697][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.239000][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.663224][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.669545][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 831.701535][ T30] INFO: task dhcpcd:5482 blocked for more than 143 seconds. [ 831.708862][ T30] Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 831.721100][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 831.730907][ T30] task:dhcpcd state:D stack:25008 pid:5482 tgid:5482 ppid:1 flags:0x00000002 [ 831.745708][ T30] Call Trace: [ 831.749013][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 831.752039][ T30] __schedule+0xe58/0x5ad0 [ 831.756627][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 831.762324][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 831.767759][ T30] ? __pfx___schedule+0x10/0x10 [ 831.772750][ T30] ? schedule+0x298/0x350 [ 831.777095][ T30] ? __pfx_lock_release+0x10/0x10 [ 831.782326][ T30] ? __mutex_trylock_common+0x78/0x250 [ 831.787801][ T30] ? lock_acquire+0x2f/0xb0 [ 831.792399][ T30] ? schedule+0x1fd/0x350 [ 831.796862][ T30] schedule+0xe7/0x350 [ 831.801084][ T30] schedule_preempt_disabled+0x13/0x30 [ 831.807311][ T30] __mutex_lock+0x62b/0xa60 [ 831.876920][ T30] ? __pfx_mark_lock+0x10/0x10 [ 831.900795][ T30] ? genl_rcv_msg+0x580/0x800 [ 831.910852][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 831.919240][ T30] ? stack_depot_save_flags+0x28/0x9c0 [ 831.925026][ T30] ? mark_lock+0xb5/0xc60 [ 831.929380][ T30] ? kasan_save_stack+0x42/0x60 [ 831.934325][ T30] ? __radix_tree_lookup+0x21f/0x2c0 [ 831.939628][ T30] ? genl_rcv_msg+0x580/0x800 [ 831.944718][ T30] genl_rcv_msg+0x580/0x800 [ 831.949237][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 831.954335][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 831.959539][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 831.965084][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 831.970300][ T30] netlink_rcv_skb+0x16b/0x440 [ 831.975196][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 831.980254][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 831.985660][ T30] ? down_read+0xc9/0x330 [ 831.990039][ T30] ? __pfx_down_read+0x10/0x10 [ 831.994932][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 832.000225][ T30] genl_rcv+0x28/0x40 [ 832.004259][ T30] netlink_unicast+0x53c/0x7f0 [ 832.009034][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 832.014491][ T30] netlink_sendmsg+0x8b8/0xd70 [ 832.019289][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.024627][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 832.029394][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 832.034941][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 832.040234][ T30] ? group_send_sig_info+0xf2/0x300 [ 832.045502][ T30] ? __pfx_lock_release+0x10/0x10 [ 832.050541][ T30] ___sys_sendmsg+0x135/0x1e0 [ 832.055296][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 832.060494][ T30] ? group_send_sig_info+0x124/0x300 [ 832.065861][ T30] ? strncpy_from_kernel_nofault+0x18b/0x260 [ 832.072137][ T30] __sys_sendmsg+0x16e/0x220 [ 832.076754][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 832.081944][ T30] ? rcu_is_watching+0x12/0xc0 [ 832.086757][ T30] do_syscall_64+0xcd/0x250 [ 832.091372][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.097284][ T30] RIP: 0033:0x7ff6157d2a4b [ 832.101856][ T30] RSP: 002b:00007ffe5e2a2328 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.110284][ T30] RAX: ffffffffffffffda RBX: 000055695ce8094f RCX: 00007ff6157d2a4b [ 832.118315][ T30] RDX: 0000000000000000 RSI: 00007ffe5e2a2370 RDI: 0000000000000010 [ 832.126317][ T30] RBP: 00007ffe5e2b6838 R08: 0000000000000000 R09: 0000000000000000 [ 832.134339][ T30] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000010 [ 832.142365][ T30] R13: 00007ffe5e2a63d0 R14: 0000000000000000 R15: 000055699c4c7110 [ 832.150343][ T30] [ 832.153437][ T30] INFO: task kworker/1:5:5933 blocked for more than 143 seconds. [ 832.161147][ T30] Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 832.168851][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 832.177569][ T30] task:kworker/1:5 state:D stack:24800 pid:5933 tgid:5933 ppid:2 flags:0x00004000 [ 832.187976][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 832.194754][ T30] Call Trace: [ 832.198031][ T30] [ 832.201035][ T30] __schedule+0xe58/0x5ad0 [ 832.205531][ T30] ? __pfx_mark_lock+0x10/0x10 [ 832.210303][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 832.215640][ T30] ? find_held_lock+0x2d/0x110 [ 832.220432][ T30] ? __pfx___schedule+0x10/0x10 [ 832.225335][ T30] ? schedule+0x298/0x350 [ 832.229667][ T30] ? __pfx_lock_release+0x10/0x10 [ 832.235091][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 832.240302][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 832.245557][ T30] schedule+0xe7/0x350 [ 832.249636][ T30] schedule_preempt_disabled+0x13/0x30 [ 832.255138][ T30] __mutex_lock+0x62b/0xa60 [ 832.259628][ T30] ? lock_acquire+0x2f/0xb0 [ 832.264195][ T30] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 832.270527][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 832.275608][ T30] ? rcu_is_watching+0x12/0xc0 [ 832.280378][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 832.285628][ T30] ? process_one_work+0x921/0x1ba0 [ 832.290743][ T30] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 832.297305][ T30] rfkill_global_led_trigger_worker+0x1b/0x160 [ 832.303527][ T30] process_one_work+0x9c5/0x1ba0 [ 832.308471][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 832.314175][ T30] ? __pfx_process_one_work+0x10/0x10 [ 832.319551][ T30] ? rcu_is_watching+0x12/0xc0 [ 832.324453][ T30] ? assign_work+0x1a0/0x250 [ 832.329056][ T30] worker_thread+0x6c8/0xf00 [ 832.333709][ T30] ? __kthread_parkme+0x148/0x220 [ 832.338741][ T30] ? __pfx_worker_thread+0x10/0x10 [ 832.343923][ T30] kthread+0x2c1/0x3a0 [ 832.347994][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 832.353255][ T30] ? __pfx_kthread+0x10/0x10 [ 832.357851][ T30] ret_from_fork+0x45/0x80 [ 832.362394][ T30] ? __pfx_kthread+0x10/0x10 [ 832.366998][ T30] ret_from_fork_asm+0x1a/0x30 [ 832.371846][ T30] [ 832.374905][ T30] INFO: task syz-executor:12261 blocked for more than 144 seconds. [ 832.382858][ T30] Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 832.390487][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 832.399222][ T30] task:syz-executor state:D stack:24272 pid:12261 tgid:12261 ppid:1 flags:0x00004004 [ 832.409638][ T30] Call Trace: [ 832.413280][ T30] [ 832.416231][ T30] __schedule+0xe58/0x5ad0 [ 832.420690][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 832.426106][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 832.431407][ T30] ? __pfx___schedule+0x10/0x10 [ 832.436276][ T30] ? schedule+0x298/0x350 [ 832.440604][ T30] ? __pfx_lock_release+0x10/0x10 [ 832.445661][ T30] ? __mutex_trylock_common+0x78/0x250 [ 832.451123][ T30] ? lock_acquire+0x2f/0xb0 [ 832.455691][ T30] ? schedule+0x1fd/0x350 [ 832.460026][ T30] schedule+0xe7/0x350 [ 832.464146][ T30] schedule_preempt_disabled+0x13/0x30 [ 832.469607][ T30] __mutex_lock+0x62b/0xa60 [ 832.474157][ T30] ? rfkill_register+0x3a/0xb40 [ 832.479018][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 832.484078][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 832.489365][ T30] ? mod_delayed_work_on+0x1a9/0x1d0 [ 832.494763][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 832.499984][ T30] ? mod_delayed_work_on+0x14d/0x1d0 [ 832.505333][ T30] ? rfkill_register+0x3a/0xb40 [ 832.510198][ T30] rfkill_register+0x3a/0xb40 [ 832.514930][ T30] wiphy_register+0x224f/0x2860 [ 832.519795][ T30] ? __pfx__dev_printk+0x10/0x10 [ 832.524791][ T30] ? __pfx_wiphy_register+0x10/0x10 [ 832.530000][ T30] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 832.536171][ T30] ieee80211_register_hw+0x2aa2/0x41a0 [ 832.541695][ T30] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 832.547503][ T30] ? net_generic+0xea/0x2a0 [ 832.552058][ T30] ? lockdep_init_map_type+0x16d/0x7d0 [ 832.557523][ T30] ? __asan_memset+0x23/0x50 [ 832.562146][ T30] ? __hrtimer_init+0x106/0x2c0 [ 832.567000][ T30] mac80211_hwsim_new_radio+0x304e/0x54d0 [ 832.572813][ T30] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 832.578892][ T30] hwsim_new_radio_nl+0xb42/0x12b0 [ 832.584045][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 832.589594][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 832.596989][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 832.604394][ T30] genl_family_rcv_msg_doit+0x202/0x2f0 [ 832.609921][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 832.616052][ T30] ? bpf_lsm_capable+0x9/0x10 [ 832.620726][ T30] ? security_capable+0x7e/0x260 [ 832.625721][ T30] ? ns_capable+0xd7/0x110 [ 832.630155][ T30] genl_rcv_msg+0x565/0x800 [ 832.635767][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 832.640843][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 832.646482][ T30] netlink_rcv_skb+0x16b/0x440 [ 832.651257][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 832.656316][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 832.661716][ T30] ? down_read+0xc9/0x330 [ 832.666077][ T30] ? __pfx_down_read+0x10/0x10 [ 832.670864][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 832.676202][ T30] genl_rcv+0x28/0x40 [ 832.680188][ T30] netlink_unicast+0x53c/0x7f0 [ 832.685005][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 832.690306][ T30] netlink_sendmsg+0x8b8/0xd70 [ 832.695139][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.700440][ T30] __sys_sendto+0x488/0x4f0 [ 832.705006][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 832.710038][ T30] ? bpf_trace_run2+0x266/0x590 [ 832.714937][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 832.719708][ T30] ? syscall_trace_enter+0xf0/0x260 [ 832.724965][ T30] do_syscall_64+0xcd/0x250 [ 832.729516][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.735498][ T30] RIP: 0033:0x7fe399b87bbc [ 832.739912][ T30] RSP: 002b:00007ffec6844480 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 832.748516][ T30] RAX: ffffffffffffffda RBX: 00007fe39a8a4620 RCX: 00007fe399b87bbc [ 832.756521][ T30] RDX: 0000000000000024 RSI: 00007fe39a8a4670 RDI: 0000000000000003 [ 832.764510][ T30] RBP: 0000000000000000 R08: 00007ffec68444d4 R09: 000000000000000c [ 832.772563][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 832.780545][ T30] R13: 0000000000000000 R14: 00007fe39a8a4670 R15: 0000000000000000 [ 832.788847][ T30] [ 832.792085][ T30] INFO: task syz.0.1511:12400 blocked for more than 144 seconds. [ 832.799810][ T30] Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 832.807488][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 832.816201][ T30] task:syz.0.1511 state:D stack:26048 pid:12400 tgid:12400 ppid:5813 flags:0x00004006 [ 832.826577][ T30] Call Trace: [ 832.829862][ T30] [ 832.832850][ T30] __schedule+0xe58/0x5ad0 [ 832.837277][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 832.842530][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 832.847737][ T30] ? __pfx___schedule+0x10/0x10 [ 832.852642][ T30] ? schedule+0x298/0x350 [ 832.857247][ T30] ? __pfx_lock_release+0x10/0x10 [ 832.862339][ T30] ? __mutex_trylock_common+0x78/0x250 [ 832.867801][ T30] ? lock_acquire+0x2f/0xb0 [ 832.872342][ T30] ? schedule+0x1fd/0x350 [ 832.876681][ T30] schedule+0xe7/0x350 [ 832.880733][ T30] schedule_preempt_disabled+0x13/0x30 [ 832.886286][ T30] __mutex_lock+0x62b/0xa60 [ 832.890815][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 832.896078][ T30] ? rfkill_unregister+0xde/0x2c0 [ 832.901125][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 832.906219][ T30] ? device_del+0x6b6/0x9f0 [ 832.910743][ T30] ? __pfx_device_del+0x10/0x10 [ 832.915689][ T30] ? rfkill_unregister+0xde/0x2c0 [ 832.920733][ T30] rfkill_unregister+0xde/0x2c0 [ 832.925633][ T30] nfc_unregister_device+0x94/0x330 [ 832.930842][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 832.936610][ T30] virtual_ncidev_close+0x4b/0xa0 [ 832.941657][ T30] __fput+0x3f8/0xb60 [ 832.945717][ T30] task_work_run+0x14e/0x250 [ 832.950296][ T30] ? __pfx_task_work_run+0x10/0x10 [ 832.955460][ T30] ? __might_fault+0xe3/0x190 [ 832.960147][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 832.965833][ T30] do_syscall_64+0xda/0x250 [ 832.970343][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.976284][ T30] RIP: 0033:0x7f682a585d29 [ 832.980696][ T30] RSP: 002b:00007ffccde46ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 832.989534][ T30] RAX: 0000000000000000 RBX: 00000000000a3df2 RCX: 00007f682a585d29 [ 832.997582][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 833.005609][ T30] RBP: 00007f682a777ba0 R08: 0000000000000001 R09: 00007ffccde46fdf [ 833.013641][ T30] R10: 00007f682a400000 R11: 0000000000000246 R12: 00000000000a4415 [ 833.021668][ T30] R13: 00007f682a775fa0 R14: 000000000000015e R15: ffffffffffffffff [ 833.029654][ T30] [ 833.032731][ T30] INFO: task syz.7.1512:12406 blocked for more than 144 seconds. [ 833.040448][ T30] Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 833.048161][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 833.056874][ T30] task:syz.7.1512 state:D stack:23744 pid:12406 tgid:12405 ppid:11791 flags:0x00004006 [ 833.067141][ T30] Call Trace: [ 833.070419][ T30] [ 833.073409][ T30] __schedule+0xe58/0x5ad0 [ 833.077850][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 833.083134][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 833.088339][ T30] ? __pfx___schedule+0x10/0x10 [ 833.093265][ T30] ? schedule+0x298/0x350 [ 833.097610][ T30] ? __pfx_lock_release+0x10/0x10 [ 833.102756][ T30] ? __mutex_trylock_common+0x78/0x250 [ 833.108223][ T30] ? lock_acquire+0x2f/0xb0 [ 833.112773][ T30] ? schedule+0x1fd/0x350 [ 833.117116][ T30] schedule+0xe7/0x350 [ 833.121175][ T30] schedule_preempt_disabled+0x13/0x30 [ 833.126678][ T30] __mutex_lock+0x62b/0xa60 [ 833.131394][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 833.136605][ T30] ? nfc_dev_down+0x2d/0x2e0 [ 833.141211][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 833.146314][ T30] ? find_held_lock+0x2d/0x110 [ 833.151081][ T30] ? rfkill_set_block+0x198/0x560 [ 833.156186][ T30] ? __pfx_lock_release+0x10/0x10 [ 833.161215][ T30] ? nfc_dev_down+0x2d/0x2e0 [ 833.165865][ T30] nfc_dev_down+0x2d/0x2e0 [ 833.170305][ T30] nfc_rfkill_set_block+0x39/0xe0 [ 833.175385][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 833.181115][ T30] rfkill_set_block+0x203/0x560 [ 833.186019][ T30] rfkill_fop_write+0x2ce/0x570 [ 833.190972][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 833.196476][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 833.201910][ T30] ? security_file_permission+0x71/0x210 [ 833.207562][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 833.212983][ T30] vfs_write+0x24c/0x1150 [ 833.217324][ T30] ? __fget_files+0x1fc/0x3a0 [ 833.222177][ T30] ? __pfx_lock_release+0x10/0x10 [ 833.227190][ T30] ? __pfx_vfs_write+0x10/0x10 [ 833.231985][ T30] ? lock_acquire+0x2f/0xb0 [ 833.236499][ T30] ? __fget_files+0x40/0x3a0 [ 833.241093][ T30] ? __fget_files+0x206/0x3a0 [ 833.245812][ T30] ksys_write+0x207/0x250 [ 833.250146][ T30] ? __pfx_ksys_write+0x10/0x10 [ 833.255047][ T30] ? rcu_is_watching+0x12/0xc0 [ 833.259840][ T30] do_syscall_64+0xcd/0x250 [ 833.264421][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.270329][ T30] RIP: 0033:0x7fb5e8785d29 [ 833.274805][ T30] RSP: 002b:00007fb5e94de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 833.283248][ T30] RAX: ffffffffffffffda RBX: 00007fb5e8975fa0 RCX: 00007fb5e8785d29 [ 833.291200][ T30] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000004 [ 833.299215][ T30] RBP: 00007fb5e8801b08 R08: 0000000000000000 R09: 0000000000000000 [ 833.307238][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.315253][ T30] R13: 0000000000000000 R14: 00007fb5e8975fa0 R15: 00007ffeee874438 [ 833.323249][ T30] [ 833.326262][ T30] INFO: task syz.6.1514:12434 blocked for more than 144 seconds. [ 833.334050][ T30] Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 833.341707][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 833.350372][ T30] task:syz.6.1514 state:D stack:26736 pid:12434 tgid:12433 ppid:11749 flags:0x00000004 [ 833.360579][ T30] Call Trace: [ 833.363878][ T30] [ 833.366791][ T30] __schedule+0xe58/0x5ad0 [ 833.371191][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 833.376445][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 833.381763][ T30] ? __pfx___schedule+0x10/0x10 [ 833.386637][ T30] ? schedule+0x298/0x350 [ 833.390974][ T30] ? __pfx_lock_release+0x10/0x10 [ 833.396062][ T30] ? __mutex_trylock_common+0x78/0x250 [ 833.402745][ T30] ? lock_acquire+0x2f/0xb0 [ 833.407260][ T30] ? schedule+0x1fd/0x350 [ 833.411731][ T30] schedule+0xe7/0x350 [ 833.415809][ T30] schedule_preempt_disabled+0x13/0x30 [ 833.421316][ T30] __mutex_lock+0x62b/0xa60 [ 833.425825][ T30] ? genl_rcv_msg+0x580/0x800 [ 833.430485][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 833.435627][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 833.440832][ T30] ? __radix_tree_lookup+0x21f/0x2c0 [ 833.446158][ T30] ? genl_rcv_msg+0x580/0x800 [ 833.450834][ T30] genl_rcv_msg+0x580/0x800 [ 833.455409][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 833.460434][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 833.465786][ T30] netlink_rcv_skb+0x16b/0x440 [ 833.470627][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 833.475732][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 833.481034][ T30] ? down_read+0xc9/0x330 [ 833.485397][ T30] ? __pfx_down_read+0x10/0x10 [ 833.490175][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 833.495546][ T30] genl_rcv+0x28/0x40 [ 833.499537][ T30] netlink_unicast+0x53c/0x7f0 [ 833.504328][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 833.509628][ T30] netlink_sendmsg+0x8b8/0xd70 [ 833.515632][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 833.520954][ T30] __sys_sendto+0x488/0x4f0 [ 833.525505][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 833.530545][ T30] ? bpf_trace_run2+0x266/0x590 [ 833.535520][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 833.540308][ T30] ? syscall_trace_enter+0xf0/0x260 [ 833.545584][ T30] do_syscall_64+0xcd/0x250 [ 833.550097][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.556060][ T30] RIP: 0033:0x7f0dadb87bbc [ 833.560475][ T30] RSP: 002b:00007f0dae92cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 833.568936][ T30] RAX: ffffffffffffffda RBX: 00007f0dae92cfc0 RCX: 00007f0dadb87bbc [ 833.576951][ T30] RDX: 0000000000000020 RSI: 00007f0dae92d010 RDI: 000000000000000a [ 833.584996][ T30] RBP: 0000000000000000 R08: 00007f0dae92cf14 R09: 000000000000000c [ 833.593010][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 833.600966][ T30] R13: 00007f0dae92cf68 R14: 00007f0dae92d010 R15: 0000000000000000 [ 833.608986][ T30] [ 833.612035][ T30] INFO: task syz.1.1515:12441 blocked for more than 145 seconds. [ 833.619768][ T30] Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 833.627498][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 833.636175][ T30] task:syz.1.1515 state:D stack:27456 pid:12441 tgid:12440 ppid:5824 flags:0x00000004 [ 833.646392][ T30] Call Trace: [ 833.649672][ T30] [ 833.652661][ T30] __schedule+0xe58/0x5ad0 [ 833.657100][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 833.662335][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 833.667539][ T30] ? __pfx___schedule+0x10/0x10 [ 833.672459][ T30] ? schedule+0x298/0x350 [ 833.676799][ T30] ? __pfx_lock_release+0x10/0x10 [ 833.681880][ T30] ? __mutex_trylock_common+0x78/0x250 [ 833.687346][ T30] ? lock_acquire+0x2f/0xb0 [ 833.691894][ T30] ? schedule+0x1fd/0x350 [ 833.696229][ T30] schedule+0xe7/0x350 [ 833.700284][ T30] schedule_preempt_disabled+0x13/0x30 [ 833.705786][ T30] __mutex_lock+0x62b/0xa60 [ 833.710301][ T30] ? __pfx_mark_lock+0x10/0x10 [ 833.715089][ T30] ? genl_rcv_msg+0x580/0x800 [ 833.719784][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 833.724846][ T30] ? stack_depot_save_flags+0x28/0x9c0 [ 833.730317][ T30] ? mark_lock+0xb5/0xc60 [ 833.734701][ T30] ? kasan_save_stack+0x42/0x60 [ 833.739561][ T30] ? __radix_tree_lookup+0x21f/0x2c0 [ 833.744898][ T30] ? genl_rcv_msg+0x580/0x800 [ 833.749578][ T30] genl_rcv_msg+0x580/0x800 [ 833.754124][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 833.759151][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 833.764391][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 833.769615][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 833.774949][ T30] netlink_rcv_skb+0x16b/0x440 [ 833.779744][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 833.784845][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 833.790127][ T30] ? down_read+0xc9/0x330 [ 833.794500][ T30] ? __pfx_down_read+0x10/0x10 [ 833.799273][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 833.804618][ T30] genl_rcv+0x28/0x40 [ 833.808611][ T30] netlink_unicast+0x53c/0x7f0 [ 833.813428][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 833.818727][ T30] netlink_sendmsg+0x8b8/0xd70 [ 833.823552][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 833.828861][ T30] __sys_sendto+0x488/0x4f0 [ 833.833433][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 833.838468][ T30] ? bpf_trace_run2+0x266/0x590 [ 833.843404][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 833.848181][ T30] ? syscall_trace_enter+0xf0/0x260 [ 833.853424][ T30] do_syscall_64+0xcd/0x250 [ 833.857938][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.863955][ T30] RIP: 0033:0x7f7802587bbc [ 833.868414][ T30] RSP: 002b:00007f78032e5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 833.876898][ T30] RAX: ffffffffffffffda RBX: 00007f78032e5fc0 RCX: 00007f7802587bbc [ 833.884940][ T30] RDX: 000000000000001c RSI: 00007f78032e6010 RDI: 0000000000000005 [ 833.892975][ T30] RBP: 0000000000000000 R08: 00007f78032e5f14 R09: 000000000000000c [ 833.900954][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 833.908984][ T30] R13: 00007f78032e5f68 R14: 00007f78032e6010 R15: 0000000000000000 [ 833.917003][ T30] [ 833.920009][ T30] INFO: task syz-executor:12449 blocked for more than 145 seconds. [ 833.927920][ T30] Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 833.935928][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 833.944648][ T30] task:syz-executor state:D stack:28416 pid:12449 tgid:12449 ppid:1 flags:0x00000000 [ 833.954886][ T30] Call Trace: [ 833.958170][ T30] [ 833.961103][ T30] __schedule+0xe58/0x5ad0 [ 833.965571][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 833.970780][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 833.976046][ T30] ? __pfx___schedule+0x10/0x10 [ 833.980908][ T30] ? schedule+0x298/0x350 [ 833.985282][ T30] ? __pfx_lock_release+0x10/0x10 [ 833.990339][ T30] ? __mutex_trylock_common+0x78/0x250 [ 833.995841][ T30] ? lock_acquire+0x2f/0xb0 [ 834.000350][ T30] ? schedule+0x1fd/0x350 [ 834.004734][ T30] schedule+0xe7/0x350 [ 834.008821][ T30] schedule_preempt_disabled+0x13/0x30 [ 834.014330][ T30] __mutex_lock+0x62b/0xa60 [ 834.018854][ T30] ? __pfx___debug_object_init+0x10/0x10 [ 834.024636][ T30] ? rfkill_register+0x3a/0xb40 [ 834.029513][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 834.034570][ T30] ? __init_waitqueue_head+0xca/0x150 [ 834.039954][ T30] ? rfkill_register+0x3a/0xb40 [ 834.044843][ T30] ? rfkill_alloc+0x25b/0x330 [ 834.049614][ T30] rfkill_register+0x3a/0xb40 [ 834.054408][ T30] hci_register_dev+0x3cc/0xc60 [ 834.059263][ T30] __vhci_create_device+0x344/0x7d0 [ 834.064533][ T30] vhci_write+0x2c3/0x470 [ 834.068867][ T30] vfs_write+0x5ae/0x1150 [ 834.073251][ T30] ? __pfx_vhci_write+0x10/0x10 [ 834.078106][ T30] ? __pfx_vfs_write+0x10/0x10 [ 834.082904][ T30] ? __asan_memset+0x23/0x50 [ 834.087505][ T30] ? syscall_trace_enter+0x1cd/0x260 [ 834.092851][ T30] ksys_write+0x12b/0x250 [ 834.097182][ T30] ? __pfx_ksys_write+0x10/0x10 [ 834.102073][ T30] ? rcu_is_watching+0x12/0xc0 [ 834.106842][ T30] do_syscall_64+0xcd/0x250 [ 834.111385][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.117284][ T30] RIP: 0033:0x7f7262b847a0 [ 834.121760][ T30] RSP: 002b:00007fffa09bac48 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 834.130187][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7262b847a0 [ 834.138222][ T30] RDX: 0000000000000002 RSI: 00007fffa09bac5a RDI: 00000000000000ca [ 834.146233][ T30] RBP: 00007f7262d76738 R08: 0000000000000000 R09: 00007f72638ad6c0 [ 834.154238][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 834.162254][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 834.170231][ T30] [ 834.173314][ T30] INFO: task syz-executor:12451 blocked for more than 145 seconds. [ 834.181201][ T30] Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 834.188888][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 834.197579][ T30] task:syz-executor state:D stack:28416 pid:12451 tgid:12451 ppid:1 flags:0x00000000 [ 834.207796][ T30] Call Trace: [ 834.211075][ T30] [ 834.214047][ T30] __schedule+0xe58/0x5ad0 [ 834.218476][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 834.223717][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 834.228923][ T30] ? __pfx___schedule+0x10/0x10 [ 834.233807][ T30] ? schedule+0x298/0x350 [ 834.238138][ T30] ? __pfx_lock_release+0x10/0x10 [ 834.243247][ T30] ? __mutex_trylock_common+0x78/0x250 [ 834.248723][ T30] ? lock_acquire+0x2f/0xb0 [ 834.253255][ T30] ? schedule+0x1fd/0x350 [ 834.257600][ T30] schedule+0xe7/0x350 [ 834.262000][ T30] schedule_preempt_disabled+0x13/0x30 [ 834.267465][ T30] __mutex_lock+0x62b/0xa60 [ 834.272032][ T30] ? __pfx___debug_object_init+0x10/0x10 [ 834.277671][ T30] ? rfkill_register+0x3a/0xb40 [ 834.282567][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 834.287608][ T30] ? __init_waitqueue_head+0xca/0x150 [ 834.293025][ T30] ? rfkill_register+0x3a/0xb40 [ 834.297881][ T30] ? rfkill_alloc+0x25b/0x330 [ 834.302625][ T30] rfkill_register+0x3a/0xb40 [ 834.307321][ T30] hci_register_dev+0x3cc/0xc60 [ 834.312210][ T30] __vhci_create_device+0x344/0x7d0 [ 834.317419][ T30] vhci_write+0x2c3/0x470 [ 834.321774][ T30] vfs_write+0x5ae/0x1150 [ 834.326103][ T30] ? __pfx_vhci_write+0x10/0x10 [ 834.330947][ T30] ? __pfx_vfs_write+0x10/0x10 [ 834.335743][ T30] ? __asan_memset+0x23/0x50 [ 834.340338][ T30] ? syscall_trace_enter+0x1cd/0x260 [ 834.345676][ T30] ksys_write+0x12b/0x250 [ 834.350003][ T30] ? __pfx_ksys_write+0x10/0x10 [ 834.354911][ T30] ? rcu_is_watching+0x12/0xc0 [ 834.359680][ T30] do_syscall_64+0xcd/0x250 [ 834.364227][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.370130][ T30] RIP: 0033:0x7f26c0b847a0 [ 834.374604][ T30] RSP: 002b:00007ffe4d1b4248 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 834.383050][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f26c0b847a0 [ 834.391014][ T30] RDX: 0000000000000002 RSI: 00007ffe4d1b425a RDI: 00000000000000ca [ 834.399015][ T30] RBP: 00007f26c0d76738 R08: 0000000000000000 R09: 00007f26c18ad6c0 [ 834.407016][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 834.415021][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 834.423075][ T30] [ 834.426078][ T30] INFO: task syz-executor:12453 blocked for more than 146 seconds. [ 834.434011][ T30] Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 834.441700][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 834.450357][ T30] task:syz-executor state:D stack:28416 pid:12453 tgid:12453 ppid:1 flags:0x00000000 [ 834.460549][ T30] Call Trace: [ 834.463862][ T30] [ 834.466785][ T30] __schedule+0xe58/0x5ad0 [ 834.471186][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 834.476432][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 834.481668][ T30] ? __pfx___schedule+0x10/0x10 [ 834.486502][ T30] ? schedule+0x298/0x350 [ 834.490812][ T30] ? __pfx_lock_release+0x10/0x10 [ 834.495893][ T30] ? __mutex_trylock_common+0x78/0x250 [ 834.501454][ T30] ? lock_acquire+0x2f/0xb0 [ 834.506039][ T30] ? schedule+0x1fd/0x350 [ 834.510385][ T30] schedule+0xe7/0x350 [ 834.514521][ T30] schedule_preempt_disabled+0x13/0x30 [ 834.519991][ T30] __mutex_lock+0x62b/0xa60 [ 834.524549][ T30] ? __pfx___debug_object_init+0x10/0x10 [ 834.530190][ T30] ? rfkill_register+0x3a/0xb40 [ 834.535083][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 834.540118][ T30] ? __init_waitqueue_head+0xca/0x150 [ 834.545540][ T30] ? rfkill_register+0x3a/0xb40 [ 834.550395][ T30] ? rfkill_alloc+0x25b/0x330 [ 834.555095][ T30] rfkill_register+0x3a/0xb40 [ 834.559780][ T30] hci_register_dev+0x3cc/0xc60 [ 834.564686][ T30] __vhci_create_device+0x344/0x7d0 [ 834.569894][ T30] vhci_write+0x2c3/0x470 [ 834.574257][ T30] vfs_write+0x5ae/0x1150 [ 834.578586][ T30] ? __pfx_vhci_write+0x10/0x10 [ 834.583465][ T30] ? __pfx_vfs_write+0x10/0x10 [ 834.588227][ T30] ? __asan_memset+0x23/0x50 [ 834.592843][ T30] ? syscall_trace_enter+0x1cd/0x260 [ 834.598134][ T30] ksys_write+0x12b/0x250 [ 834.602495][ T30] ? __pfx_ksys_write+0x10/0x10 [ 834.607344][ T30] ? rcu_is_watching+0x12/0xc0 [ 834.612181][ T30] do_syscall_64+0xcd/0x250 [ 834.616699][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.622662][ T30] RIP: 0033:0x7f7e895847a0 [ 834.627067][ T30] RSP: 002b:00007ffc151158d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 834.635545][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7e895847a0 [ 834.643580][ T30] RDX: 0000000000000002 RSI: 00007ffc151158ea RDI: 00000000000000ca [ 834.651634][ T30] RBP: 00007f7e89776738 R08: 0000000000000000 R09: 00007f7e8a2ad6c0 [ 834.659627][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 834.667686][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 834.675762][ T30] [ 834.678785][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 834.687891][ T30] [ 834.687891][ T30] Showing all locks held in the system: [ 834.695679][ T30] 1 lock held by khungtaskd/30: [ 834.700509][ T30] #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 834.710416][ T30] 2 locks held by dhcpcd/5482: [ 834.715197][ T30] #0: ffffffff8ff7c6d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 834.723427][ T30] #1: ffffffff8ff7c788 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x580/0x800 [ 834.732426][ T30] 2 locks held by getty/5565: [ 834.737075][ T30] #0: ffff8880319040a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 834.747140][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 834.757301][ T30] 3 locks held by kworker/1:5/5933: [ 834.762548][ T30] #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 834.773069][ T30] #1: ffffc90003307d80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 834.786032][ T30] #2: ffffffff9036cc08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 834.797539][ T30] 3 locks held by syz-executor/12261: [ 834.802956][ T30] #0: ffffffff8ff7c6d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 834.811165][ T30] #1: ffffffff8ff7c788 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x580/0x800 [ 834.820170][ T30] #2: ffffffff9036cc08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 834.830291][ T30] 2 locks held by syz.0.1511/12400: [ 834.835552][ T30] #0: ffff888033a06100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 834.845357][ T30] #1: ffffffff9036cc08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xde/0x2c0 [ 834.855516][ T30] 2 locks held by syz.7.1512/12406: [ 834.860726][ T30] #0: ffffffff9036cc08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x168/0x570 [ 834.870850][ T30] #1: ffff888033a06100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 834.879915][ T30] 2 locks held by syz.6.1514/12434: [ 834.885153][ T30] #0: ffffffff8ff7c6d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 834.893390][ T30] #1: ffffffff8ff7c788 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x580/0x800 [ 834.902761][ T30] 2 locks held by syz.1.1515/12441: [ 834.907959][ T30] #0: ffffffff8ff7c6d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 834.916353][ T30] #1: ffffffff8ff7c788 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x580/0x800 [ 834.925527][ T30] 2 locks held by syz-executor/12449: [ 834.930995][ T30] #0: ffff888062502118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b7/0x470 [ 834.940566][ T30] #1: ffffffff9036cc08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 834.950643][ T30] 2 locks held by syz-executor/12451: [ 834.956223][ T30] #0: ffff88807d47d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b7/0x470 [ 834.965685][ T30] #1: ffffffff9036cc08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 834.975885][ T30] 2 locks held by syz-executor/12453: [ 834.981461][ T30] #0: ffff8880131a4118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b7/0x470 [ 834.990897][ T30] #1: ffffffff9036cc08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 835.001350][ T30] 2 locks held by syz-executor/12455: [ 835.006730][ T30] #0: ffff888061554118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b7/0x470 [ 835.019359][ T30] #1: ffffffff9036cc08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 835.030150][ T30] 2 locks held by syz-executor/12457: [ 835.035888][ T30] #0: ffff88807bbd5118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b7/0x470 [ 835.045374][ T30] #1: ffffffff9036cc08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 835.055401][ T30] 2 locks held by syz-executor/12460: [ 835.060878][ T30] #0: ffff88805e923918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b7/0x470 [ 835.070745][ T30] #1: ffffffff9036cc08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 835.081041][ T30] 2 locks held by syz-executor/12463: [ 835.086482][ T30] #0: ffff88805e920118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b7/0x470 [ 835.096110][ T30] #1: ffffffff9036cc08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 835.106250][ T30] 2 locks held by syz-executor/12465: [ 835.111676][ T30] #0: ffff888050002118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b7/0x470 [ 835.121232][ T30] #1: ffffffff9036cc08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 835.131307][ T30] 2 locks held by syz-executor/12467: [ 835.136859][ T30] #0: ffff88805ea01918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b7/0x470 [ 835.146421][ T30] #1: ffffffff9036cc08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 835.156571][ T30] 2 locks held by syz-executor/12469: [ 835.162269][ T30] #0: ffff88806043e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b7/0x470 [ 835.171743][ T30] #1: ffffffff9036cc08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 835.181728][ T30] 2 locks held by syz-executor/12472: [ 835.187117][ T30] #0: ffff888062507918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b7/0x470 [ 835.196594][ T30] #1: ffffffff9036cc08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 835.206575][ T30] 2 locks held by syz-executor/12475: [ 835.211984][ T30] #0: ffff888032fe9118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b7/0x470 [ 835.221492][ T30] #1: ffffffff9036cc08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 835.231514][ T30] 2 locks held by syz-executor/12477: [ 835.236881][ T30] #0: ffff88802ea27918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b7/0x470 [ 835.246310][ T30] #1: ffffffff9036cc08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 835.256309][ T30] 2 locks held by syz-executor/12479: [ 835.261729][ T30] #0: ffff888061c1c918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b7/0x470 [ 835.271177][ T30] #1: ffffffff9036cc08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 835.281179][ T30] [ 835.283612][ T30] ============================================= [ 835.283612][ T30] [ 835.292077][ T30] NMI backtrace for cpu 1 [ 835.296405][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 835.306902][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 835.316940][ T30] Call Trace: [ 835.320202][ T30] [ 835.323115][ T30] dump_stack_lvl+0x116/0x1f0 [ 835.327779][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 835.333053][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 835.339015][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 835.344976][ T30] watchdog+0xf14/0x1240 [ 835.349201][ T30] ? __pfx_watchdog+0x10/0x10 [ 835.353872][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 835.359085][ T30] ? __kthread_parkme+0x148/0x220 [ 835.364120][ T30] ? __pfx_watchdog+0x10/0x10 [ 835.368777][ T30] kthread+0x2c1/0x3a0 [ 835.372827][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 835.378003][ T30] ? __pfx_kthread+0x10/0x10 [ 835.382573][ T30] ret_from_fork+0x45/0x80 [ 835.386964][ T30] ? __pfx_kthread+0x10/0x10 [ 835.391550][ T30] ret_from_fork_asm+0x1a/0x30 [ 835.396322][ T30] [ 835.399615][ T30] Sending NMI from CPU 1 to CPUs 0: [ 835.404889][ C0] NMI backtrace for cpu 0 [ 835.404901][ C0] CPU: 0 UID: 0 PID: 6418 Comm: kworker/u8:12 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 835.404929][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 835.404942][ C0] Workqueue: events_unbound toggle_allocation_gate [ 835.404968][ C0] RIP: 0010:__lock_acquire+0x10a9/0x3c40 [ 835.404992][ C0] Code: ff ff 48 ba 00 00 00 00 00 fc ff df 48 8b 7c 24 40 48 89 fe 83 e7 07 48 c1 ee 03 0f b6 34 16 48 89 fa 83 c2 03 40 38 f2 7c 09 <40> 84 f6 0f 85 af 2a 00 00 45 8b a5 c4 0a 00 00 45 85 e4 0f 85 48 [ 835.405010][ C0] RSP: 0018:ffffc9000426f5d8 EFLAGS: 00000002 [ 835.405025][ C0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffff888032ba5360 [ 835.405038][ C0] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000004 [ 835.405049][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: fffffbfff2dca799 [ 835.405062][ C0] R10: ffffffff96e53ccf R11: 0000000000000002 R12: ffff888032ba5359 [ 835.405075][ C0] R13: ffff888032ba4880 R14: 0000000000000000 R15: ffff888032ba53d8 [ 835.405088][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 835.405107][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 835.405121][ C0] CR2: 00007f3c879a628a CR3: 000000000df7e000 CR4: 00000000003526f0 [ 835.405134][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 835.405145][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 835.405158][ C0] Call Trace: [ 835.405163][ C0] [ 835.405170][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 835.405193][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 835.405212][ C0] ? nmi_handle+0x1ac/0x5d0 [ 835.405234][ C0] ? __lock_acquire+0x10a9/0x3c40 [ 835.405255][ C0] ? default_do_nmi+0x6a/0x160 [ 835.405275][ C0] ? exc_nmi+0x170/0x1e0 [ 835.405293][ C0] ? end_repeat_nmi+0xf/0x53 [ 835.405325][ C0] ? __lock_acquire+0x10a9/0x3c40 [ 835.405346][ C0] ? __lock_acquire+0x10a9/0x3c40 [ 835.405367][ C0] ? __lock_acquire+0x10a9/0x3c40 [ 835.405388][ C0] [ 835.405394][ C0] [ 835.405403][ C0] ? hlock_class+0x4e/0x130 [ 835.405430][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 835.405452][ C0] ? __pfx_mark_lock+0x10/0x10 [ 835.405473][ C0] lock_acquire.part.0+0x11b/0x380 [ 835.405495][ C0] ? hrtimer_try_to_cancel+0xa9/0x2f0 [ 835.405522][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 835.405544][ C0] ? rcu_is_watching+0x12/0xc0 [ 835.405571][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 835.405599][ C0] ? hrtimer_try_to_cancel+0xa9/0x2f0 [ 835.405625][ C0] ? lock_acquire+0x2f/0xb0 [ 835.405645][ C0] ? hrtimer_try_to_cancel+0xa9/0x2f0 [ 835.405671][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 835.405694][ C0] ? hrtimer_try_to_cancel+0xa9/0x2f0 [ 835.405719][ C0] hrtimer_try_to_cancel+0xa9/0x2f0 [ 835.405747][ C0] update_curr_dl_se+0x3df/0x610 [ 835.405775][ C0] update_curr+0x59e/0x800 [ 835.405795][ C0] dequeue_entity+0x25/0x1920 [ 835.405813][ C0] ? sched_clock+0x38/0x60 [ 835.405829][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 835.405851][ C0] dequeue_entities+0x342/0x1390 [ 835.405876][ C0] dequeue_task_fair+0x185/0x480 [ 835.405897][ C0] __schedule+0x3ead/0x5ad0 [ 835.405924][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 835.405949][ C0] ? __print_lock_name+0x260/0x260 [ 835.405976][ C0] ? __pfx___schedule+0x10/0x10 [ 835.405998][ C0] ? schedule+0x298/0x350 [ 835.406019][ C0] ? __pfx_lock_release+0x10/0x10 [ 835.406040][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 835.406068][ C0] ? lock_acquire+0x2f/0xb0 [ 835.406088][ C0] ? schedule+0x1fd/0x350 [ 835.406110][ C0] schedule+0xe7/0x350 [ 835.406132][ C0] toggle_allocation_gate+0x1db/0x260 [ 835.406155][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 835.406177][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 835.406205][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 835.406227][ C0] ? lock_acquire+0x2f/0xb0 [ 835.406246][ C0] ? process_one_work+0x921/0x1ba0 [ 835.406269][ C0] process_one_work+0x9c5/0x1ba0 [ 835.406294][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 835.406322][ C0] ? __pfx_process_one_work+0x10/0x10 [ 835.406343][ C0] ? rcu_is_watching+0x12/0xc0 [ 835.406371][ C0] ? assign_work+0x1a0/0x250 [ 835.406391][ C0] worker_thread+0x6c8/0xf00 [ 835.406415][ C0] ? __kthread_parkme+0x148/0x220 [ 835.406442][ C0] ? __pfx_worker_thread+0x10/0x10 [ 835.406463][ C0] kthread+0x2c1/0x3a0 [ 835.406486][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 835.406508][ C0] ? __pfx_kthread+0x10/0x10 [ 835.406533][ C0] ret_from_fork+0x45/0x80 [ 835.406552][ C0] ? __pfx_kthread+0x10/0x10 [ 835.406582][ C0] ret_from_fork_asm+0x1a/0x30 [ 835.406616][ C0] [ 835.406996][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 835.869381][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 835.879875][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 835.889918][ T30] Call Trace: [ 835.893189][ T30] [ 835.896107][ T30] dump_stack_lvl+0x3d/0x1f0 [ 835.900693][ T30] panic+0x71d/0x800 [ 835.904575][ T30] ? __pfx_panic+0x10/0x10 [ 835.908987][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 835.914366][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 835.920339][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 835.925704][ T30] ? watchdog+0xd7e/0x1240 [ 835.930118][ T30] ? watchdog+0xd71/0x1240 [ 835.934530][ T30] watchdog+0xd8f/0x1240 [ 835.938774][ T30] ? __pfx_watchdog+0x10/0x10 [ 835.943445][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 835.948642][ T30] ? __kthread_parkme+0x148/0x220 [ 835.953664][ T30] ? __pfx_watchdog+0x10/0x10 [ 835.958349][ T30] kthread+0x2c1/0x3a0 [ 835.962442][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 835.967644][ T30] ? __pfx_kthread+0x10/0x10 [ 835.972232][ T30] ret_from_fork+0x45/0x80 [ 835.976646][ T30] ? __pfx_kthread+0x10/0x10 [ 835.981237][ T30] ret_from_fork_asm+0x1a/0x30 [ 835.986005][ T30] [ 835.989222][ T30] Kernel Offset: disabled [ 835.993526][ T30] Rebooting in 86400 seconds..