last executing test programs: 7m41.716515412s ago: executing program 1 (id=1916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/20, 0x14}], 0x1, 0x81000001, 0x410000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 7m41.63638s ago: executing program 1 (id=1917): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000a, 0x72, 0xffffffffffffffff, 0x2bebc000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 7m41.496433699s ago: executing program 1 (id=1918): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x5000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, "ed906b", 0x38, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c811ee12e"}}}}}}}, 0x0) 7m41.496119723s ago: executing program 1 (id=1919): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) llistxattr(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x0, 0x0) 7m41.406661175s ago: executing program 1 (id=1920): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYRES16=r0, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r2, @ANYBLOB="28005080140001004abee33957edf8aaae14574df40000000500020007000000080003000bac0f"], 0x44}}, 0x0) 7m41.265985086s ago: executing program 1 (id=1921): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 7m41.249829915s ago: executing program 32 (id=1921): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 4.28207006s ago: executing program 3 (id=4718): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x78bd22, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r3, &(0x7f00000002c0)='\n', 0x1) 4.136555008s ago: executing program 3 (id=4721): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f00000001c0)='fuseblk\x00', 0x2001000, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000140)={0x7, 0x80000, r1}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000000)=""/215, &(0x7f0000000100)=0x10) openat(r6, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x2, 0x0) lsetxattr$security_evm(&(0x7f0000000200)='./sys/block/md0/md/level\x00', &(0x7f0000000080), &(0x7f00000000c0)=@ng={0x4, 0x9}, 0x2, 0x2) 3.962566088s ago: executing program 3 (id=4722): epoll_create1(0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000200)={0x1, @vbi={0x7, 0x1, 0x1, 0x3a324152, [0xfffffffb, 0xdeee], [0x4, 0x4], 0x13a}}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000680)={0x24184000, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) futex(0x0, 0x5, 0x4, 0x0, 0x0, 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="144216abcf624c4a0000001d0021002000000000e8436713bebe86683f6c8c5b83b54ea6f0ebab73506486ea96c72656ea06723446b6ca45343d489841c7612c4ea160a311ae27d0d2c09dd8f0f4b8bca90ea7c7b7d1f87174f9cdc2bab5e406147c0fa63649988996ed792e22c23c0598cb3f4fb485d72dddf47ed5a709bb7bb03d5bd2401110f69c8da6c12ae1488b8804ebd508a892aa199b5eedfbd11c608b99de"], 0x14}, 0x1, 0x0, 0x0, 0x80800}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x4, @remote, 'wg1\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x200000007}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2, 0xffffffffffffffff, 0x2000000000d, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) 2.770249432s ago: executing program 3 (id=4724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r4, &(0x7f0000000600)="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", 0x4c7) write$UHID_INPUT(r4, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r7, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0xf0ffff}, 0x24044080) 2.66872249s ago: executing program 0 (id=4725): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x814) mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r4 = open(&(0x7f00000000c0)='./file0\x00', 0x149442, 0x0) ftruncate(r4, 0x200002) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x400e) ioctl$TCFLSH(r6, 0x400455c8, 0x4) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000500)={{{@in=@broadcast, @in6=@private1}}, {{@in6=@private0}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe4) getsockopt$inet_buf(r7, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f0000000000)=0x3) r9 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x1, 'syz1\x00'}, 0x6, 0x2, 0x4, r9, 0x0, 0x0, 'syz1\x00', 0x0}) pipe(&(0x7f0000000240)={0xffffffffffffffff}) pipe(0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) splice(r10, 0x0, 0xffffffffffffffff, 0x0, 0x80000000, 0x0) 2.591000799s ago: executing program 3 (id=4726): epoll_create1(0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000200)={0x1, @vbi={0x7, 0x1, 0x1, 0x3a324152, [0xfffffffb, 0xdeee], [0x4, 0x4], 0x13a}}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="144216abcf624c4a0000001d0021002000000000e8436713bebe86683f6c8c5b83b54ea6f0ebab73506486ea96c72656ea06723446b6ca45343d489841c7612c4ea160a311ae27d0d2c09dd8f0f4b8bca90ea7c7b7d1f87174f9cdc2bab5e406147c0fa63649988996ed792e22c23c0598cb3f4fb485d72dddf47ed5a709bb7bb03d5bd2401110f69c8da6c12ae1488b8804ebd508a892aa199b5eedfbd11c608b99de"], 0x14}, 0x1, 0x0, 0x0, 0x80800}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x4, @remote, 'wg1\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x1000000000000000, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) 2.394192342s ago: executing program 0 (id=4727): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x9}, 0x1, 0x2, 0x3, 0x3, 0x2, 0x3}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) pipe(0x0) close(0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x480, 0x0) r1 = getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r1, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0xffffffff, 0x5, 0xfa11, 0xffffffff}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="effdffff1a009b8a140000003b9b301f00"/28, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)=@deltaction={0x138, 0x31, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe19}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xde}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbb88}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x185}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2d}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8bdc6132b197f0b6}, 0x40040) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0xfffffffd, 0x4000, 0x7, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1ff, 0x2, 0x0, 0x10000008, 0x927, 0xeb96, 0x8401, 0x40f, 0xe69, 0x4, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000340)={0x0, 0x0, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x77dde4e1}) openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb5ed2c9e98fa70100180000000000000024000000240000000b000000000000000100008400000000000000000200000000000000090000000000008508000000006f002e30"], &(0x7f0000000080)=""/227, 0x47, 0xe3, 0x1}, 0x28) 2.158654017s ago: executing program 0 (id=4728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f3f01f7d04a37f60a74b51f629a0332b0854d78ec1123e57c7ff57f1c8b1141977fb5ac0d93db53353a9f1776ef87199e5752827c1ddf2708ce41dd41fd679ecf82470cb8063f90e041b6c1d68c036918033f210aba1baa733be085"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x45) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000001ff0), 0x10) syz_open_dev$ndb(0x0, 0x0, 0x8180) openat$sequencer2(0xffffff9c, 0x0, 0x89980, 0x0) 1.646098797s ago: executing program 3 (id=4731): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) landlock_restrict_self(0xffffffffffffffff, 0x9) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b000101fbb00c0904000001e7ff01000905010220"], 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_ep_read(r1, 0x1, 0xa1, &(0x7f0000000000)=""/161) 1.573146899s ago: executing program 2 (id=4733): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x9}, 0x1, 0x2, 0x3, 0x3, 0x2, 0x3}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) pipe(0x0) close(0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x480, 0x0) r1 = getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r1, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0xffffffff, 0x5, 0xfa11, 0xffffffff}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (fail_nth: 5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)=@deltaction={0x138, 0x31, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe19}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xde}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbb88}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x185}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2d}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8bdc6132b197f0b6}, 0x40040) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0xfffffffd, 0x4000, 0x7, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1ff, 0x2, 0x0, 0x10000008, 0x927, 0xeb96, 0x8401, 0x40f, 0xe69, 0x4, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000340)={0x0, 0x0, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x77dde4e1}) openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb5ed2c9e98fa70100180000000000000024000000240000000b000000000000000100008400000000000000000200000000000000090000000000008508000000006f002e30"], &(0x7f0000000080)=""/227, 0x47, 0xe3, 0x1}, 0x28) 1.403505656s ago: executing program 2 (id=4735): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x12, 0x0, 0x0, {{0x9}, {0x4}, {0xfffffffffffffcd4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r0 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r0, 0x40086f52, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x14, '\x00', @st={0x4, [{0x2, @uvalue=0x400000000011}, {0x2, @uvalue=0x8}, {0x3, @svalue=0x4}, {0x1, @uvalue=0x9}]}, 0x6}, {0x8}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB='\b\x00'], 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1.244218385s ago: executing program 2 (id=4736): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200"], 0x1b) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0, 0x93d4}], 0x1, 0x8) mknod(&(0x7f0000000040)='./config\x00', 0x40, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/mm/ksm/sleep_millisecs\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="10", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xc, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000004000070100000000fddbdf25047c00000c00c580080008"], 0x20}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) 1.241634562s ago: executing program 0 (id=4737): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c0000001000010400"/20, @ANYRES32=r4], 0x8c}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') lseek(r7, 0xfffffffffffffffd, 0x1) fcntl$lock(r7, 0x5, &(0x7f0000003980)={0x0, 0x1, 0x9, 0x4}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={r1, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f00000004c0)={{&(0x7f00000000c0), 0x0, 0x40, 0x8, 0x5f0}, {&(0x7f0000000100)=[{0x800, 0x8}, {0x8, 0x89}, {0xa357, 0x200000000000000}, {0xc5, 0x8000}, {0x95, 0x10}, {0x3, 0x8b}, {0x6, 0xffff}], 0x7, 0x10, 0xc, 0xfffffffffffffff9}, {&(0x7f00000001c0)=[0x4, 0x7, 0x80000001, 0xcef, 0x1, 0x7], 0x6, 0x8, 0x1, 0x6}, {&(0x7f0000000280)=[{0x8, 0x6, 0x0, 0x4, 0x4}, {0xce, 0xffffffff, 0x4, 0x2, 0x2}, {0x8000, 0x1, 0x6, 0x52e00000000, 0x6}, {0x3, 0x43, 0x0, 0x1, 0x3d3}, {0x3, 0xc, 0x6, 0xff, 0x66}, {0x1, 0x6, 0x5, 0x8, 0x100}, {0xfffffffffffffd67, 0xb71c00, 0x3, 0x6, 0x6}, {0x2, 0x7, 0x693e60a6, 0x2, 0x80000000}, {0x3, 0x1, 0x6, 0x38000000000, 0xd4}, {0x9, 0x4, 0x1, 0x9, 0x1}], 0xa, 0x28, 0xf7cf, 0x3}, {&(0x7f0000000440)=[0x9, 0x0, 0x68d8, 0x9], 0x4, 0x8, 0x8, 0x9}}) close(0x3) 1.054436675s ago: executing program 4 (id=4739): mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x39, 0x40) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000300)={{0x8, 0x5}, 0x100, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc010) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x0) 971.172514ms ago: executing program 0 (id=4740): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020}, 0x2020) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x34}}, 0x0) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0xffffffffffffff7e) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e23, 0x7, @remote, 0x63}, 0x1c) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="080001000300"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x140, 0x1f, 0x9, 0x2, 0x10000007, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x400008, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x4, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0xa, 0x0, 0x383, 0x8001, 0x4]}) writev(r5, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000180)}, {&(0x7f0000000300)="ac3d900278bc4f673648008b3fd9dafb", 0x10}, {&(0x7f0000000340)="79baf7c80af72c6d074d7aa55d18c2b3f92fb55d09041ffa4b66a0ed18f71e54cc0a5bc1461a6d07e6d4f31058721987ab90040f06c98df9afdd7c6614915beee9a0bea8187c6315a4be760ebc06c000bbe9a766f3752ff9ed8b304d3378bfd1a88dfc510d611a8c13259173a7c957bdd73f4bc320391f6d862cfdd58f6c09abefc7302f22bf6795474455a958f56a17d1551e", 0x93}, {0x0}, {&(0x7f00000004c0)="a407d58cecfb1369d434cee2363e2e667262a9fda651de7eb280ec8ff5087e0036af2fef7939cac0a06e6169aa6caa951a4a9b35e608532fafaa74692296b26bf7525aefeadde445128254deda33cb8622aad1f5aa0ab3ba8a81949805c4de7209102f463431fb613efae16477340300ad74baf9e9dcf19667797369fdeb42", 0x7f}, {&(0x7f00000005c0)}], 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r6, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 922.155059ms ago: executing program 4 (id=4741): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='hfsplus\x00', 0x410, &(0x7f0000000100)='barrier') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0xff}, {}, @raw32={[0x0, 0x100]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000c00)) listen(r1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x9) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x7c2) setresuid(0x0, 0xee01, 0x0) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) sched_setattr(r12, &(0x7f0000000100)={0x38, 0x6, 0x61, 0x5, 0x293, 0x4, 0x3a7, 0x5, 0x4, 0x8001}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r10) 864.294827ms ago: executing program 2 (id=4742): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1028, 0x21, 0x80012, r0, 0x80000000) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) (async) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x80000) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdb0026030000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0xe256610c62001369}, 0x600000c0) (async) r3 = syz_usbip_server_init(0x3) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x90800, 0x0) r4 = fsopen(&(0x7f0000000300)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='4', 0x1) ioctl$KVM_GET_SREGS2(r5, 0x8140aecc, &(0x7f0000000240)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x8}}, 0x20) 784.468992ms ago: executing program 2 (id=4743): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/250, 0xfa}], 0x1, 0x0, 0xa00, 0x4c880}, 0x48800) 693.258931ms ago: executing program 2 (id=4744): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=@newtaction={0x7618, 0x30, 0x1, 0x0, 0x0, {}, [{0xe4, 0x1, [@m_gact={0xe0, 0x13, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xee6, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x7, 0x10000000, 0x3, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x242d, 0x6}}]}, {0x82, 0x6, "9735eecc5691d987511e94bd0823a35c743b4b91bd9a22e3d1ca4774ccebe9229b6af15e30230e92283e9e49d664beef44857b0c2bbb110867e2465162c89ad309fa69d0ba2a669b2e3ee46276f6889951d1a5c12e169a663e6c4a3316db44649a88de9c682f08287b25610bc165dd207883e525d8ccfa8800d44ae9086d"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x7290, 0x1, [@m_mirred={0x9c, 0x6, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff0001, 0x6, 0x1, 0x0, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x7, 0x2, 0xffff, 0xd}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb, 0x6, 0x4, 0x20000000, 0x7ff}, 0x4}}]}, {0xe, 0x6, "d2e0364f6874cdf1b82e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0xf10, 0x7, 0x0, 0x0, {{0xa}, {0xe84, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x7, 0x4, 0x1, 0x7f, 0x1}, 0x7, 0x7, [{0x6, 0xfff, 0x4, 0x7, 0x2, 0xfffffff9}, {0xffff7fff, 0x1e56, 0xdd3, 0xb4, 0x1, 0x6}, {0xfff, 0x7, 0x9, 0xb, 0x5, 0xffffffff}, {0x6, 0x8, 0x401, 0x10001, 0x8, 0x6}]}, [{0x4, 0x40, 0x9, 0x1000, 0x1, 0x8}, {0x10000, 0x4, 0x1ff, 0x400, 0x9, 0x13fb}, {0x3, 0x2, 0x4, 0x2, 0x5da9, 0x200}, {0x0, 0x1, 0x9, 0x7, 0x8, 0x1}, {0xfffffffa, 0x5, 0x258, 0x1ff, 0x4, 0x5}, {0x29, 0x9, 0x96a9, 0xf1, 0x0, 0x3}, {0x9, 0x4, 0x5, 0xa859, 0x1, 0xe}, {0xb44, 0xfffffffc, 0x6, 0x9, 0x9, 0x2}, {0xb, 0x6, 0x2, 0xc000000, 0xff, 0x8}, {0xfffeffff, 0x400, 0xfffffeff, 0x8, 0x7, 0x2}, {0x7, 0x0, 0x385f, 0x4, 0x2, 0x8001}, {0x0, 0x2, 0x4, 0x3, 0x100}, {0x3, 0x1, 0x0, 0xffffffff, 0x8, 0x9}, {0x2, 0x1, 0x0, 0x0, 0x759, 0x9}, {0xc, 0x3, 0xe, 0x4, 0x3, 0x9}, {0x7, 0x3, 0x64f5, 0x8, 0x5, 0xace}, {0x0, 0x6, 0x7ff, 0x100, 0x2, 0x6}, {0x1, 0x2, 0xfffffff1, 0xe, 0x6, 0x2}, {0x630, 0x1, 0x7ff, 0xa, 0x157, 0x80000001}, {0x8, 0x6, 0x9, 0x2, 0x7, 0xfff}, {0x3, 0x400, 0x7, 0x0, 0xffff, 0x8}, {0x6, 0x1200000, 0x6, 0x40, 0x1, 0x5}, {0x380, 0x10000, 0x6, 0x4, 0x0, 0xde}, {0xc, 0x46527f71, 0x8001, 0x3, 0x4, 0x4}, {0x535, 0x4, 0x7, 0x4, 0x6, 0x3}, {0x7, 0x8, 0x3, 0x7, 0x0, 0xc}, {0x6, 0x5, 0x80, 0x2, 0xffffffff, 0x3}, {0x3018, 0x4, 0x5, 0x3, 0xffffd3aa, 0x80}, {0x1ff, 0xd8e, 0x4, 0x695834d4, 0x9, 0x1}, {0x4d37, 0xff, 0x3, 0x5, 0x38}, {0x4, 0x4, 0xfffffff9, 0x7ff, 0xfffffff8, 0x4}, {0x8, 0x0, 0x7, 0x2, 0x65, 0x2}, {0x1, 0xffffffff, 0x1, 0x3, 0x3, 0xd}, {0x0, 0x5, 0xfffffc01, 0xfffffffe, 0x7, 0x39}, {0xffffffff, 0x8, 0x0, 0x0, 0xffffff7f, 0xfffffff9}, {0x8e4d, 0x1ff, 0x2, 0x5, 0x2, 0x80000000}, {0x5, 0x4, 0x7, 0xfff, 0xfffffffc, 0xfffffff7}, {0x2, 0x1ff, 0x800, 0x9, 0x7, 0x5}, {0x7f, 0x10000, 0x1, 0x7, 0x6, 0x40}, {0x2, 0x4, 0x3, 0x9, 0xd, 0x7}, {0x2ff6, 0x6, 0x8, 0x7fffffff, 0x0, 0x200}, {0x6, 0x8, 0x3, 0x8001, 0x6, 0x6}, {0x1, 0x1993, 0xc96, 0x100, 0x20000, 0x9}, {0x800, 0x5, 0x1, 0x3, 0x9, 0x10001}, {0x4, 0x6, 0x4, 0x79, 0x1, 0x1000f}, {0x1, 0x8, 0x6, 0x3ff, 0x0, 0x5}, {0x2, 0xfffffff7, 0x57, 0x8, 0x958, 0x8}, {0x8000, 0xd, 0x8, 0x8, 0x7, 0x5}, {0x3, 0x0, 0x101, 0xec000000, 0xe415, 0x30}, {0x3, 0x8, 0x8, 0x3, 0x8, 0xffffffff}, {0x1, 0x1, 0x10, 0x0, 0x6, 0xace}, {0x6, 0x9, 0x9, 0x3ff, 0x3, 0x1be6e454}, {0x6, 0x27, 0x461, 0x0, 0x81}, {0x4, 0x6, 0x2, 0xffff417a, 0x10001, 0xac7}, {0xa, 0x6fc16b3, 0x2, 0x2, 0x1, 0x6}, {0x1, 0x3, 0x7, 0x7, 0x8000, 0x93}, {0x7e, 0x3, 0x8, 0x3ff, 0x7d, 0x8478}, {0x3ab, 0x1, 0x8, 0x0, 0x80000000, 0x7}, {0xff, 0x4, 0x4, 0xfe, 0x8000, 0x7ff}, {0x80, 0x200, 0x5, 0x3, 0x4, 0xa9d8}, {0xffffffff, 0x1, 0x426, 0x0, 0x4, 0x7fffffff}, {0x5, 0xf25, 0x5, 0x4, 0xcbd, 0xd}, {0x0, 0x2, 0x400, 0xffff4789, 0x80000001, 0x2}, {0xa, 0x3, 0x5, 0x6, 0x7}, {0x0, 0x1, 0x0, 0x3, 0x5ffb}, {0x9a, 0x8000, 0x4, 0xfffffffa, 0xffffff92, 0x44cfdc57}, {0x0, 0x8001, 0x5, 0xc, 0x6, 0xe2}, {0x9, 0xc2, 0x4, 0x3, 0x6}, {0x6, 0x7, 0x5b5d5cca, 0x5e, 0x200, 0x7}, {0x401, 0x10, 0x7, 0x6, 0x0, 0x1000}, {0xe116, 0x1000, 0x10001, 0x401, 0x3, 0xfffffffe}, {0x63, 0x8, 0x4000, 0x1ff, 0x8, 0x97}, {0xfffff25b, 0xfffffffb, 0x0, 0xc4c, 0x6, 0x4}, {0xca97c000, 0x4, 0x606, 0x6, 0x9, 0x5}, {0x2, 0x7ff, 0x10000, 0x1, 0x5, 0xa}, {0x4, 0xd0a, 0x3, 0x10001, 0x8, 0xffffffff}, {0xfffffff9, 0x3, 0x8, 0x7d9dfbc5, 0x80000000, 0xf61}, {0x3, 0x0, 0x0, 0xfffffffa, 0x7, 0xe72b}, {0x5, 0x9, 0x9, 0x6, 0x9, 0x9}, {0x80000001, 0x6, 0x0, 0x4, 0x66, 0x3}, {0x8, 0x40, 0x8, 0x24fb, 0x7f, 0x6}, {0x6, 0x9, 0xfffffe3e, 0x5, 0x3}, {0xab, 0x7, 0x1800, 0x8000, 0x9, 0x8}, {0x6, 0x45b7, 0x10001, 0x6, 0x6, 0x9}, {0x4, 0x401, 0x3c0ea4df, 0x1ff, 0x5, 0x9}, {0xe6, 0x0, 0x3a0, 0x81, 0xcf, 0x9908}, {0x0, 0x4, 0x10, 0xa49, 0x8, 0x1}, {0xd, 0x1, 0x2, 0xf3d, 0x48bc, 0x8}, {0x0, 0x1, 0x6, 0x7, 0x8, 0x6}, {0x7fffffff, 0x6, 0x9, 0x1000, 0x5, 0x7}, {0x7, 0xec, 0xffff7fff, 0x6, 0xb130, 0x7ff}, {0xdf9e, 0x1, 0x4, 0xc407, 0x1, 0x6}, {0x49d, 0x3, 0x5, 0xff, 0x5, 0x4}, {0x7fff, 0x0, 0x2, 0x7f, 0xb35, 0x2}, {0x858, 0x3, 0x0, 0x5, 0x5, 0x9}, {0x1, 0x3, 0x401, 0x1000, 0x0, 0xd}, {0x10000, 0x5, 0xffffff8a, 0x80, 0x4, 0x1}, {0x6, 0x7, 0x80000001, 0x6, 0x10000, 0x976}, {0x5, 0xdcd1, 0xffff, 0x8, 0x6, 0x5}, {0x7, 0xffffffff, 0xd0, 0x2, 0xe24e, 0x4ca9}, {0xd98, 0xffffffff, 0x9, 0x9, 0xf142, 0xb}, {0x2, 0x6, 0x4, 0x2, 0x3, 0x7}, {0x6, 0x6e4d3b77, 0x798a, 0x0, 0xf, 0x7fff}, {0x1, 0x1, 0x10001, 0x4, 0x10001, 0x800}, {0xff, 0x76, 0x9, 0x3, 0xf, 0xffffffc0}, {0x9, 0xff, 0x98e, 0x6f63, 0x19, 0xe}, {0x4, 0xc, 0x7, 0x2, 0xffffffff, 0xc}, {0x5, 0x535ba4c, 0x100, 0x1ef, 0x5, 0x7}, {0xfffffffb, 0x1, 0x200, 0x3, 0x4, 0x8}, {0xd809, 0x1, 0x7ff, 0x5, 0xc9, 0xe}, {0x7fffffff, 0x2, 0x4, 0xe09, 0x4, 0x9}, {0x5, 0xf0, 0x9, 0x101, 0x8, 0xa}, {0x5, 0x619, 0xb, 0x2, 0x7352, 0xd57}, {0xfffffff9, 0x1, 0x8, 0x8, 0xa04, 0x1}, {0xd, 0xc22, 0x7, 0x10, 0x5, 0x93f}, {0x3, 0x1, 0x1ff, 0x1, 0xb575, 0xffffffff}, {0x7, 0x2, 0x7, 0x9, 0x10000, 0x97}, {0xc813, 0x4, 0x40, 0xffffffff, 0xfa7, 0x9}, {0x0, 0x1547, 0x3, 0x8, 0x80000000, 0xd}, {0x9, 0xff, 0x0, 0x3, 0x1, 0x9b5a}, {0x8000, 0x80000001, 0x2, 0x2, 0xf55d, 0x6}, {0xd, 0x1020, 0x87, 0x0, 0xa31, 0x2}, {0x6, 0xb5ab, 0x1, 0x0, 0x8c2, 0xa51}, {0x9, 0x7f, 0xdb1, 0x7ff, 0x7baa, 0x8}, {0x0, 0xfffffffa, 0xfff, 0x800, 0x2, 0x1000}, {0x0, 0x8, 0xfffffffb, 0x2, 0xff, 0x101}, {0xd84, 0x4, 0x2, 0x3ff, 0x61, 0x9776}, {0xfffffff8, 0x5, 0x9, 0x9, 0x1000, 0x2e}], [{0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x2}, {0x1}, {}, {0x3}, {0x3, 0x1}, {0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x3}, {0x4, 0x1}, {0x3}, {0x4}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x4}, {0x0, 0x1}, {0x3, 0x232f13f44a48c636}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x6, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x1}, {0x1}, {0x3}, {0x3}, {0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x7}, {0x1, 0x1}, {0x5, 0x1}]}}]}, {0x63, 0x6, "3a7d86629a3b8c7267714d98e1433bfedb55023718f580047e10ca5acebc35cc4a341c5fcb43124c8b235d5bfa761a6a8dc5eaa9a96f5f704eafb2952f346caa2b31f842f442e86341c868551ad0481b8ee8f7a6e180434de8d814a32018df"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x1d0, 0x19, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3, 0xffffffffffffffff, 0xfffffff7, 0x38000}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1000, 0x8, 0x4, 0x5, 0x8}, @multicast2, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xc0, 0x20000000, 0x8, 0x4}, @multicast1, @multicast2, 0xffffffff, 0xba}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3a, 0x5, 0x3, 0xc, 0xceb}, @rand_addr=0x64010102, @loopback, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x25e, 0x27a, 0x5, 0x3, 0x49}, @private=0xa010100, @rand_addr=0x64010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0xe9e, 0x6, 0x8d25, 0xfffffffd}, @dev={0xac, 0x14, 0x14, 0x1e}, @private=0xa010102, 0xff000000}}]}, {0xb8, 0x6, "caf85c7c6be1bb87d9fca06e3c7b9d2e6625dc3018dbfead1ebaf8f4096caefa6e58ce90c0a8ff27db2c31fb408cd1bbec477c86234b513a9657e1a2719435ecce4c1c71f70c6a42c9fc3a1a13f27282f5c1588aca4b7e20aa177339b2d12923ca22e882a2b0bfc26b27e98e0c257373302e04231a256eef3d2274c6937e7b371fbbda87d4b0a568d71772dea658807f8c390b26a749115d3074f31333ac515eaeccf6b4e662c5e84dccfb53751f80fe57d0da28"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}, @m_pedit={0x3eb4, 0x1e, 0x0, 0x0, {{0xa}, {0x3dc8, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x5ce8, 0xfffffffd, 0x0, 0x9, 0x5}, 0x6, 0x7, [{0x8001, 0x0, 0x6, 0x3, 0x5fb, 0x3ad1}, {0x1, 0xf, 0x5, 0x3f52, 0x0, 0x81}, {0xe, 0x9, 0x3, 0x7fffffff, 0x3, 0x4}, {0x0, 0x7f, 0x13c, 0x57, 0x1ff, 0x2}, {0x7, 0x5, 0x6, 0x10001, 0xa59, 0x1}, {0x5, 0x7fffffff, 0xfffffffe, 0x2, 0x4, 0x401}]}, [{0x2, 0x8000, 0xffff, 0xc, 0xffd, 0x2}, {0x3000, 0x6, 0x8001, 0xccdf, 0x8, 0x4}, {0x81, 0x94, 0x7f, 0x9, 0x2, 0x80000000}, {0xfff, 0xb, 0xf, 0x0, 0x1c00000, 0xa99e}, {0x81, 0x3, 0xb, 0x5, 0x8, 0x4}, {0x0, 0x7, 0x9, 0x4, 0xffffffef, 0x6}, {0x80, 0x1ff8000, 0xaab, 0x40, 0x0, 0x1}, {0xd, 0xe0a6, 0x0, 0x1, 0xc, 0x7}, {0x3, 0x0, 0x4, 0x9, 0x7, 0x2}, {0x5, 0x0, 0x4, 0x80000001, 0x1, 0x6}, {0x7, 0x9, 0x1db, 0x3, 0x11, 0x4}, {0xd7, 0x0, 0x2, 0x3, 0xfffffee4, 0x96de}, {0x8, 0x9, 0xaf, 0x3, 0x3, 0x7}, {0x713, 0x8001, 0x5, 0x6, 0xc1e3, 0xfff}, {0x93, 0x1, 0x3, 0x0, 0x8563}, {0x8, 0xe981, 0x7, 0x3, 0x8, 0x10000}, {0x3, 0x6, 0xffffffff, 0x7fff, 0x6, 0xfffffffe}, {0x7, 0x2, 0x8001, 0x101, 0xdb, 0x2574}, {0x3, 0x8, 0x6, 0x9, 0x6, 0xa}, {0xff, 0x8001, 0x5, 0xffffff80, 0x3, 0x4}, {0x0, 0x5, 0xffffff9f, 0x8000, 0x4302aae5, 0x3}, {0x9f0, 0xf4, 0x6, 0x80000000, 0x6, 0x2}, {0x10001, 0x10001, 0x40, 0x80000001, 0x0, 0x3}, {0x8, 0x4, 0x9, 0xd, 0x8001, 0x1}, {0x4, 0x0, 0xfffff801, 0x3, 0xba, 0xf}, {0x3, 0x10, 0x3, 0x9, 0x5, 0x10}, {0x9, 0x6, 0x6, 0xe, 0x0, 0x6}, {0x7b8, 0x989f, 0xfff, 0xfff, 0x365, 0xfff}, {0x3, 0x2, 0x2, 0x6a2, 0x9, 0x38de}, {0x5, 0x1, 0x10000, 0xfff, 0x3, 0xfffffffd}, {0x0, 0xa, 0x7, 0x9, 0xc31, 0xc98}, {0x100, 0xea, 0x8, 0x0, 0xffffffff, 0x3}, {0xffffef15, 0x7, 0x4, 0x0, 0xd, 0x1}, {0x9, 0x2d1f2180, 0xffff, 0x0, 0x0, 0x1}, {0x6, 0x76, 0x471, 0x2, 0x2, 0x8000}, {0x400, 0x0, 0x161fd7f4, 0x80000000, 0x400, 0x3}, {0x12, 0xffffff81, 0x0, 0xac, 0x60, 0x6}, {0x6, 0x6ff4, 0x6, 0x4, 0x5, 0x7af0}, {0x6, 0x7, 0x80000001, 0x0, 0x5}, {0x5, 0xaa, 0x9, 0xb, 0x5, 0x8}, {0x5, 0x7f, 0xffffffff, 0x10, 0x1, 0x9}, {0x3, 0x2, 0x6, 0x9, 0x71, 0x5}, {0x9a, 0x9, 0x81, 0x34b0, 0xd, 0x6}, {0x10, 0x800, 0x1, 0x7, 0x1, 0x80}, {0x4, 0x400, 0xfff, 0x6, 0x296, 0x100}, {0x9, 0x0, 0x10000, 0x4, 0x6}, {0x4, 0x7, 0x8, 0x4, 0x3, 0x80000000}, {0x200, 0x5, 0x3, 0x2, 0xe, 0x1}, {0x5, 0x5, 0x53f, 0xbf8f, 0x4, 0x2}, {0x1, 0x9, 0x1, 0xf1, 0x1, 0x8}, {0x9a5e, 0x1, 0x2, 0x8d, 0x8}, {0x9, 0x3, 0x4, 0x40, 0x4, 0x9}, {0xd, 0x1, 0x7, 0x80000000, 0x4, 0xf}, {0x4, 0x8, 0xffffffff, 0x5, 0xfffffffd, 0x3}, {0x0, 0x4, 0x1, 0xffffffff, 0x6, 0x1}, {0xbb04, 0xffff, 0xe8c, 0xffffffa0, 0x101, 0x1ff}, {0x1, 0x8b, 0xfffffffb, 0xf2d8, 0xffffffff, 0x8}, {0xfffffffd, 0x83, 0x6, 0x7fffffff, 0x7, 0xfffffff8}, {0x2, 0x10000, 0x5, 0x2, 0x7, 0x68}, {0x4, 0x0, 0x2, 0x7d2, 0x132, 0x80000001}, {0x0, 0x6, 0x3, 0x0, 0x5, 0x3}, {0x3, 0x6, 0x7, 0x119, 0x4, 0x3}, {0x1, 0x1, 0xff, 0x9, 0x10000, 0x965c}, {0x7fff, 0xc37, 0x8, 0x1000, 0xffffffff, 0x10001}, {0x1, 0x401, 0x80, 0x5, 0x1ff, 0x96}, {0x4cee, 0x5, 0x10, 0x4, 0xe, 0x5000000}, {0x2, 0x7, 0x1, 0x18, 0x0, 0x4}, {0x4, 0x8, 0x9, 0x6, 0x701, 0x6}, {0x9, 0x4, 0x80, 0x0, 0x6, 0xffffffff}, {0x5, 0xc, 0x157, 0x1, 0xe44d, 0xd4f}, {0x3, 0x2, 0x8, 0xb7f, 0x5, 0xacd39fc}, {0x27, 0x8, 0x0, 0x83e, 0x6, 0x5}, {0xc, 0x3d0, 0x2, 0xfffff800, 0x7ae6, 0x9}, {0x8, 0x8000, 0x81, 0x1, 0x829, 0xf}, {0xffff, 0x7fffffff, 0x415, 0x44d, 0x8000, 0x2}, {0x63e, 0x2, 0x1377, 0x3, 0x4, 0x80000000}, {0x2, 0x1, 0xd6a, 0x8, 0x2, 0x2}, {0x5, 0x0, 0xbdc5, 0x398, 0x6, 0x1000}, {0x3ff, 0xd984, 0x6, 0x7, 0x4, 0xf}, {0x7, 0x4, 0x0, 0x8, 0x70, 0x7}, {0x200, 0x80000001, 0x4, 0xfffff6be, 0xac881d7, 0x8000}, {0x6, 0x12, 0x5, 0xffffff00, 0x5, 0xb}, {0x9, 0x7, 0x5cdb, 0x5, 0x80000000, 0x5}, {0x101, 0xfffffff2, 0x7fffffff, 0x800, 0x1, 0x8}, {0x4, 0x8001, 0xa, 0x7, 0x75800000}, {0x1, 0xfffffffc, 0xf, 0x8, 0x4}, {0x7, 0xfffffffa, 0xa03a, 0x4, 0x7, 0xb}, {0x400, 0x3bb, 0x81, 0x8, 0x8}, {0xb, 0x1000, 0xfffffffa, 0x4, 0xfffffff8, 0x7ff}, {0x1, 0x2, 0x1, 0x0, 0x3, 0x4b}, {0x5, 0x80000000, 0xa, 0x8, 0x9dca, 0xfffffffc}, {0xb346, 0x8, 0x53, 0x0, 0x4}, {0x6, 0x7, 0xe9, 0xec, 0xf, 0x9}, {0x7, 0x3, 0x81, 0x5, 0xf48c, 0x101}, {0x0, 0x0, 0x45db, 0x49ae, 0x100}, {0x10000, 0x2, 0x7ff, 0x1000, 0xd223, 0xe5}, {0xfffffffe, 0x7, 0x0, 0x2, 0x7, 0x8}, {0x26c5, 0x5, 0x8001, 0x6, 0x3, 0x3f}, {0x0, 0xffff0001, 0x6, 0x9, 0x5, 0x80000001}, {0xf, 0x7ff, 0x67, 0x5, 0x3161, 0x3}, {0x42, 0x1, 0xfffffffb, 0x4, 0x8, 0x9}, {0x2d, 0x80, 0x4, 0x2, 0x4, 0x3}, {0x4000, 0xa78800, 0xc000, 0x10, 0x2, 0x3}, {0xc8, 0x10000, 0x6, 0x1, 0x1, 0x1}, {0x2e0, 0x1, 0x8, 0x4, 0x5, 0x1}, {0x2, 0x400, 0x10001, 0x4, 0x9, 0xffff}, {0x0, 0x5, 0x81, 0xd8d, 0x0, 0xd}, {0x7fff, 0x800, 0x3, 0xff, 0x4, 0x1}, {0x5, 0x81, 0x0, 0x4, 0xe, 0x9}, {0x0, 0x84, 0xf6b, 0xa9, 0xaec9, 0x6}, {0x2, 0x7, 0x1ff, 0x0, 0x5, 0x2}, {0x3, 0xc0000000, 0x800, 0x715, 0xffff, 0x4}, {0x4, 0x5, 0xe61, 0x6, 0x0, 0x2}, {0x20000000, 0x8, 0x6, 0x5, 0x800, 0x80000001}, {0x0, 0x3ff, 0x81, 0x9, 0x800, 0xfffffffe}, {0x9, 0x0, 0x6, 0x465b, 0x2, 0x10000}, {0x6, 0x20e9, 0x4, 0x81, 0x6}, {0xfc, 0x5, 0x4, 0x2, 0x6bd, 0x5}, {0x9, 0xe, 0x0, 0x8, 0x1ffe, 0xa}, {0x6, 0x2, 0x3, 0x4, 0xf9, 0x3}, {0x2, 0x7, 0x6, 0x1, 0x40, 0x3}, {0x80000000, 0xfffffe01, 0x82, 0x100, 0x5, 0x62}, {0x36, 0x1, 0x5, 0x8, 0x8, 0x5}, {0x5, 0x7, 0x6, 0xffffffff, 0x60000000, 0x3ff}, {0x7fffffff, 0xe1, 0x7, 0x4, 0xe4, 0x2}, {0x5, 0x100, 0xedf, 0x6, 0x0, 0xffffffff}, {0xff, 0x9, 0xd, 0x400, 0x3, 0x9}, {0x80000001, 0x2, 0x80000001, 0xfffffffa, 0x4, 0xb}], [{0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x3}, {0x6}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x4}, {}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {}, {0x4}, {0x1, 0x1}, {0x2}, {0x2}, {0x3}, {0x2}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x5, 0x2}, {0x2}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {}, {0x0, 0x1}, {0xd97d6ff10d4f84bb, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x6, 0x1}, {0x1, 0x1}, {}, {}, {0x3}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {}, {0xe185e4561fa9fa93}, {0x1}]}}, @TCA_PEDIT_KEYS_EX={0xd0, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x9282a7bdff16abe3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x58, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x2}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_KEYS_EX={0xb4, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0xb2e9e9d7d76abf30}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x9, 0xffffff75, 0x3, 0x49, 0x9}, 0x7, 0x8, [{0xb, 0x3ff, 0x7fffffff, 0x6, 0xfffffffb, 0x1ff}]}, [{0x4, 0x10, 0x654, 0xc, 0x0, 0x3ff}, {0xff, 0x26c, 0xffffff27, 0x1, 0x3, 0x4a97}, {0x8000, 0x8, 0xfff, 0x3, 0x2, 0xf}, {0x6, 0x4, 0x8, 0x7, 0x80000001, 0xe}, {0x9, 0x4, 0x1, 0x1, 0x7, 0x40}, {0x7ff, 0xae02, 0x1, 0x6, 0xffffffff, 0x5}, {0x0, 0x9, 0xdcd, 0x10, 0xbf, 0x3}, {0x3, 0xfffffffe, 0x1, 0x101, 0xfffffff3, 0xa}, {0x8, 0x76e, 0x5, 0x38, 0xe98f, 0x3}, {0x8, 0x5, 0x1, 0x9, 0x0, 0x6}, {0x4a, 0x80000001, 0x3, 0x0, 0x8, 0x4}, {0x6, 0x2, 0x6, 0x7fff, 0x0, 0x200}, {0x7, 0x401, 0xe5, 0x5, 0x3, 0x2}, {0x1000, 0x0, 0x401, 0xfff, 0xc6da, 0x1b}, {0xff, 0xfffffff7, 0x81, 0x0, 0x3, 0x6}, {0x0, 0x8, 0x4, 0x9, 0x6, 0xffffffff}, {0x3, 0x2, 0xfffffff2, 0x6, 0x6, 0x4}, {0x9, 0x101, 0x6, 0x2, 0x0, 0x3}, {0x2, 0x1, 0x4, 0x4, 0x0, 0x4}, {0x7, 0x4, 0xfffffffa, 0x30e000, 0x80000000, 0x4}, {0x40, 0x5, 0x1, 0xbc, 0x1, 0xa517}, {0x5, 0x3, 0x3, 0x40, 0x7e39, 0x4}, {0x3, 0x9, 0x5, 0x2, 0xd, 0x3}, {0xb, 0x6, 0x8, 0x7, 0x8, 0x10001}, {0xcd1f, 0x9, 0x40, 0x6, 0x7fffffff, 0xffff}, {0x4, 0xc5b7, 0x0, 0x1, 0x8, 0x6}, {0x1, 0xfffff000, 0x7, 0x6, 0x401, 0x9}, {0x3ff, 0x9, 0x0, 0x7, 0x6, 0x1}, {0x200, 0x3, 0x2000, 0xb1e, 0x2, 0x4}, {0x8, 0x7, 0xc3, 0x9, 0x2, 0x1c}, {0x1ff, 0x712, 0x7, 0x7ff, 0x574, 0x8001}, {0xfffffff9, 0x100, 0xfffffff7, 0x2, 0x49c, 0xff}, {0x7ff, 0x6, 0x3ff, 0x1, 0x6, 0x7}, {0x81, 0x976, 0x304, 0x9, 0x2, 0x81}, {0x62, 0x5, 0x2, 0x1, 0x7fff, 0x39}, {0x18d3, 0x0, 0x6, 0xfffff000, 0x4, 0x5}, {0x3, 0xb0eb, 0x6, 0x8001, 0x4, 0x3}, {0xfffffffb, 0x5, 0x9, 0x6, 0xca6}, {0x7, 0x7, 0x4, 0x78, 0xddc1c9c, 0x80000000}, {0x87, 0x80000001, 0x80000001, 0xb5f3, 0x6, 0x7}, {0x3, 0x7fff, 0x5, 0x7b, 0xa81b, 0x7}, {0x0, 0x7, 0x2, 0x6, 0x1ff}, {0x5ae00000, 0x4, 0x8, 0x9, 0x0, 0x3b59}, {0x27, 0x39a3, 0x9, 0x5, 0x7f, 0xc}, {0x9, 0x80000001, 0x58, 0x8001, 0x80000000, 0xd}, {0x800, 0x9, 0x0, 0x5, 0x5, 0xff}, {0x5ea66680, 0x3096, 0x0, 0x678, 0xa, 0x3ff}, {0x0, 0x7, 0xcf72, 0x5df, 0x8, 0x5}, {0x4, 0x5, 0x81, 0x0, 0x39, 0x4}, {0x7fffffff, 0x1, 0xa83c, 0x0, 0xa, 0x702}, {0xc, 0x2, 0x429368bd, 0x1000, 0x14c7, 0x83}, {0xa7af, 0x10001, 0x4, 0x5, 0x1ff, 0x10000}, {0xffffffff, 0x6, 0x4, 0x2, 0x3, 0x7}, {0x6, 0x0, 0x2, 0x4c27, 0xffff, 0xfff}, {0x3, 0x6, 0x0, 0xff, 0x8, 0x5}, {0x8, 0x14e1c724, 0x6, 0xfffffff7, 0x0, 0x6}, {0x7ff, 0x5, 0x3, 0x8, 0x38c, 0x1}, {0x4, 0x8, 0x9, 0x6, 0xffffff81, 0xf}, {0x42, 0xe5e0, 0xa41b, 0x2, 0x4, 0x9}, {0x1, 0x5, 0x7fffffff, 0xfd, 0xd, 0x22e2}, {0xf5e, 0x10001, 0x8001, 0x7, 0xffffff02, 0x9}, {0x2, 0x7b1, 0x3ff, 0x4, 0x4, 0x101}, {0x8, 0xfffffd1e, 0xff, 0x7, 0x4, 0x1}, {0x40, 0xffff0001, 0x9, 0x800, 0x6, 0xfff}, {0xfffffffc, 0x9, 0xc, 0xb, 0x2, 0x800}, {0x7fffffff, 0x1, 0x4, 0x2b1, 0x4, 0x9}, {0x2, 0x5, 0xcb7ca6ba, 0xb, 0x20000000, 0x8001}, {0xd, 0x5, 0xfffffe00, 0x7, 0x7}, {0x2, 0x8, 0x5, 0x100, 0x8, 0x2}, {0x6, 0x5, 0x2, 0x0, 0x8, 0xb}, {0xe685, 0x5, 0x81, 0x0, 0x5, 0x1}, {0xfffffffa, 0xfffeffff, 0xf0, 0x7, 0xc, 0x5}, {0x2, 0x7, 0x0, 0x31, 0xfffffffa, 0x6}, {0x3e4, 0x8, 0x5c, 0x1, 0x0, 0x6}, {0x0, 0x9, 0x3, 0x7fff, 0x8d, 0x72c}, {0x0, 0x5, 0x4, 0x3, 0x6, 0x8}, {0x5, 0x7, 0xffffff00, 0x51b, 0x4, 0xcb80}, {0xfffffffd, 0x5, 0x9, 0x0, 0x599, 0x81f}, {0x7, 0x6, 0x9, 0x1, 0x3, 0xd}, {0x10001, 0x7, 0xd36a, 0x78, 0x10, 0x9}, {0x1, 0x5, 0x800, 0xb, 0x3, 0x9ea}, {0x8, 0xfffffff7, 0xfc0, 0xf, 0x6, 0x7}, {0x7, 0x5, 0x6, 0x9, 0x401, 0x82d}, {0x2, 0x5, 0x7, 0x9, 0x8, 0xe8f}, {0x81, 0x4, 0x0, 0x3, 0x8, 0x4}, {0x2, 0x9, 0x67, 0x6, 0x7, 0x1}, {0x0, 0xcc, 0x1, 0x8, 0x78839552, 0x1}, {0xe36, 0x9, 0xfffffff9, 0x8, 0x7, 0x81}, {0x4, 0x1, 0x8, 0xffffff00, 0x7ff, 0x2}, {0x5b8, 0x9, 0x7, 0xfffffffa, 0x81, 0x7}, {0xfffffffa, 0x6, 0x80000000, 0xb1e2, 0x7, 0x9}, {0x2, 0x40, 0xffffffff, 0x9, 0xfffffff9, 0x7fffffff}, {0x7fff, 0xfffffffd, 0x7a, 0xda, 0x8, 0xbed0}, {0x930, 0x9, 0x8000, 0xbc, 0x8, 0x3717}, {0x8000, 0x4, 0x2, 0x2, 0x10000, 0x5}, {0xffffffff, 0x0, 0x3, 0xf, 0x1, 0x7}, {0xf, 0x0, 0x3, 0x3, 0x50, 0xf819c7d}, {0x7, 0x9, 0x1, 0x5, 0x4, 0xfffff001}, {0xffff0e89, 0x3ff, 0x4, 0x9, 0x62, 0x6}, {0x2, 0x7fff, 0x8000, 0x5, 0x8, 0x9}, {0x6, 0x5, 0xfff, 0x9}, {0x9, 0xffffffff, 0x1bcb, 0x3, 0x3ff, 0x2}, {0x1, 0x88, 0x8000, 0x7fff, 0x8, 0x5}, {0x0, 0x5, 0x3ff, 0x8000, 0x4, 0xfffffffb}, {0x9, 0x0, 0x39f368c5, 0x5, 0x5, 0x9}, {0x103, 0x80000000, 0x8, 0x7, 0x3, 0x3}, {0x6, 0x6, 0x8, 0x400, 0x5}, {0xa61, 0x667e, 0x1, 0x800, 0x0, 0x11}, {0x8, 0x8, 0x7ff, 0xd844, 0x5, 0x8b14}, {0x100, 0x469, 0x1, 0xffff4941, 0x1, 0xfffffffe}, {0xa700, 0xb5, 0x9, 0x8, 0x3, 0x2000}, {0x6, 0x9, 0x400, 0x3, 0x1, 0x8001}, {0x4, 0x4, 0x3, 0x10000, 0x401, 0x7}, {0x9, 0x5, 0x6, 0x102, 0x2, 0x5}, {0x6c5, 0x3, 0x3ff, 0x10000, 0x1, 0x101}, {0x6, 0x718b, 0xfffff801, 0x8, 0x80, 0x8}, {0x7, 0x7, 0x7, 0x8, 0x7, 0xbd}, {0x4, 0x7ff, 0x7, 0xffffffff, 0xa000, 0x800}, {0x7, 0x7f, 0x8, 0x8a4, 0x9, 0xfff}, {0x1, 0x8, 0x2, 0x400, 0xca15, 0x4}, {0x9, 0x0, 0x263, 0x4, 0x2, 0x94}, {0x795, 0x2, 0x3, 0x800, 0x6, 0x6}, {0x400, 0xf, 0x4, 0x8001, 0x4, 0x83}, {0x1, 0x8, 0x5, 0x4, 0x0, 0x676a}, {0x8, 0x4, 0x1, 0xffffffff, 0x1, 0x74d}, {0xc7d2, 0x2, 0xfffffffb, 0x3, 0x8a, 0x2}, {0x6, 0x8, 0x564, 0x7f, 0x8, 0x80000000}, {0x401, 0x0, 0x8, 0x6, 0x80000000, 0xec6b}], [{0x5, 0x1}, {0x3, 0x3}, {0x0, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x2}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x1, 0xfb4c60901745e54a}, {0x3, 0x1}, {0xff8a799f317a9a06, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x2ad6934260a5d301}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x5, 0x234ce106f43a7fac}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x6}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x4}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x3}, {0x6}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xb93fd3a236f604af}, {}, {0x3, 0xe91bf9fd1a0ac04b}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x138, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x71ea2acdab2e529b}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0xe0, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x20d374b2879d3ef0}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x3, 0xffff, 0x10000000, 0x5, 0x3}, 0xd, 0x3, [{0xcd5, 0x2, 0x0, 0x7, 0xff, 0x1}]}, [{0x5, 0x1, 0x4, 0x3, 0xfffffff9, 0xc}, {0x7, 0x8, 0x9, 0x1ff, 0x3, 0x7}, {0x3, 0xffffffff, 0x2, 0x0, 0xc, 0x7}, {0x1, 0x0, 0x50000000, 0x1, 0x3, 0xddf}, {0xbfa5, 0x8, 0x8, 0x8, 0xffffffab}, {0x9, 0xffffff9b, 0x9, 0x2, 0x0, 0x7}, {0x10000, 0x549, 0x8001, 0x72, 0x7a6, 0x1}, {0x4c77, 0x1, 0x100, 0x1ff, 0x877a, 0x4}, {0x8, 0x1, 0x1, 0x9, 0x7}, {0x6, 0x80, 0x3, 0x72ef, 0x4, 0x26}, {0xfffffffa, 0x7, 0xffffffff, 0x5, 0x5, 0x80000001}, {0x4, 0x3, 0x55b6, 0xe, 0xe, 0x81}, {0x7fffffff, 0xfffffff8, 0xffff8001, 0x7, 0xfffffff7, 0x5334}, {0x0, 0xc, 0x8, 0xa5dc, 0x9, 0x7}, {0x6ba, 0x1ff, 0x9, 0xfffff801, 0x30, 0x800}, {0x10000, 0x0, 0x4, 0xfffff0ea, 0x68, 0xffffff28}, {0x6, 0x7, 0x6, 0x9, 0x7, 0x10000}, {0x1, 0x6, 0x382, 0x7, 0x7, 0x2}, {0xc, 0x1, 0x80, 0x1, 0xfffffffe, 0x1}, {0x8, 0x7, 0xc04, 0x101, 0x6, 0x2}, {0x1, 0xc0000, 0x8, 0x4, 0x5, 0x6}, {0x2, 0xfffffffa, 0x7, 0x4, 0x9, 0x7}, {0xb9, 0xb0, 0x8, 0x8, 0xfff, 0x10001}, {0xdf3, 0x2, 0x7, 0x80000001, 0x4, 0x8}, {0x100, 0x32, 0x0, 0x200, 0x7, 0x10}, {0x6, 0xfffffffd, 0xa39, 0x76a04f68, 0x793, 0x5}, {0x6d, 0x200, 0xf1, 0x0, 0x6, 0x80000000}, {0x2, 0x1000, 0x3, 0x4533, 0x8, 0x6}, {0x9, 0x5, 0x0, 0x1, 0x0, 0x9}, {0x7ff, 0x48, 0x8, 0x80, 0x5, 0x2}, {0x8, 0x2, 0x2, 0x5, 0xfff, 0xf4f163a}, {0xf, 0x100, 0x4be8935d, 0x10001, 0xfffffffc, 0x7d8d33b5}, {0xd67a, 0x3b, 0x3, 0x3688, 0x401, 0xf0e}, {0x8, 0xffffff49, 0x7, 0x8001, 0x44, 0x7}, {0x9, 0x0, 0x80000001, 0x7fff, 0x7fff, 0x8}, {0x69b, 0x0, 0x1, 0x9, 0x3, 0x7}, {0x2, 0x25, 0x5, 0x8, 0x9, 0x7fff}, {0x7a, 0x7, 0x1, 0x4, 0x8, 0x5e49}, {0x3, 0xa7ceecac, 0x2, 0x0, 0x0, 0x3}, {0x7, 0x3, 0x3a079bfe, 0x7, 0x9, 0x8}, {0x9d, 0x3, 0x6, 0x8, 0xfffffff8, 0x6}, {0x8, 0x8, 0x5, 0x0, 0x6, 0x9}, {0x4, 0x81, 0x6, 0x7, 0x6, 0x10001}, {0x9, 0x3, 0x800, 0xb5, 0x6, 0x6}, {0x101, 0xc, 0x1a, 0x6, 0x80000000, 0x5}, {0x200, 0x8, 0x9, 0x4, 0x9, 0x6}, {0x101, 0x2, 0x3, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x7, 0xffff, 0xffffffff, 0x80}, {0x800, 0x10000, 0x10000, 0x5, 0x8, 0xcdc6}, {0xe51, 0x0, 0x6, 0xef78, 0x4, 0x3}, {0xb, 0x800, 0x8, 0x51, 0x8, 0x1}, {0x9, 0x3, 0x417d, 0x0, 0x8, 0x401}, {0x3, 0x6, 0x0, 0x3ff, 0x6, 0x4}, {0x10000, 0x8, 0xfffffffa, 0x3, 0x0, 0x6}, {0x8000, 0x7ff0000, 0x1, 0x7fffffff, 0x7, 0xff}, {0x7, 0x5eb6, 0x40, 0xb, 0xffffffff, 0x1}, {0x4, 0x7, 0x9, 0x1, 0x1, 0x3}, {0x5, 0x7, 0xf73, 0xff, 0x10000000, 0x1}, {0x9, 0xfffff000, 0x2, 0x1, 0x2, 0xa10b}, {0x4, 0x2, 0x9, 0x8, 0x800, 0x5}, {0x2, 0x6, 0x4, 0x85c, 0x1, 0x7}, {0x10000, 0x2, 0x1, 0x7, 0x4, 0x9}, {0xf8f, 0xb, 0x5073491e, 0x6, 0x80000001, 0xbae}, {0xffffffff, 0x4, 0x2000000, 0x0, 0x1, 0x6}, {0x9, 0x9, 0x80, 0x8, 0xd, 0x1}, {0xf2, 0x91c, 0x8, 0x0, 0x80000001, 0xfffffff7}, {0x8000000, 0x0, 0x7, 0x7, 0x9b1, 0x8}, {0xffffffff, 0x7, 0x5, 0x4, 0xc14, 0x8001}, {0x9, 0xce, 0x0, 0x4, 0x99, 0xfffffff7}, {0x800, 0xfffff800, 0x7c5, 0x8001, 0x2, 0x6}, {0x100, 0x4, 0x0, 0x401, 0xa7, 0xe6}, {0x4, 0x6, 0x6, 0x93, 0x7, 0x7f}, {0x6, 0xea8, 0xe, 0x1, 0x4, 0x4}, {0x2, 0x500, 0x1, 0x1, 0xbd39b4d, 0x5}, {0x8001, 0x6, 0x4, 0xe06, 0xffffffff, 0xffffff00}, {0x5, 0x4, 0x2, 0x401, 0x9, 0x5}, {0x142, 0x7, 0x8001, 0x8, 0xe7d, 0x80000}, {0xf95b, 0x6, 0x2, 0xf32a, 0x78f, 0x4}, {0x8, 0x4, 0x10000, 0x3, 0x10, 0x4e}, {0x7189, 0x101, 0x0, 0xe4, 0xfffffff8, 0x216}, {0x5, 0x1000, 0x250, 0x10001, 0x6, 0x9}, {0x2e6, 0x400, 0x0, 0x4, 0x9, 0x3}, {0x6, 0xcb, 0x40, 0x8, 0x2, 0xe}, {0xd5ea, 0x5, 0x0, 0x100, 0x3, 0x99d}, {0x0, 0x8, 0x9, 0x2, 0xfffffffa, 0x5}, {0x7, 0x4, 0x6, 0xffff, 0x7f, 0x81}, {0x0, 0x80000001, 0x7fffffff, 0x6744, 0xb, 0x3}, {0x9, 0x9, 0xfffffff1, 0x10001, 0xedde, 0x32d}, {0x6, 0x1, 0x401, 0x264, 0x1, 0x1000}, {0x6, 0x3, 0x8, 0xffff79ca, 0x101, 0x9}, {0x0, 0x5, 0x9, 0x9, 0x7, 0x352e5add}, {0x5, 0x1000, 0x7, 0x8, 0x80}, {0x4, 0x5, 0x80, 0x8, 0xffffff4f, 0x862e}, {0x4, 0xf4f0, 0x0, 0xffff76fa, 0x309e7c40, 0x2}, {0x3, 0x1, 0x0, 0x1c00, 0x7, 0x2}, {0x8, 0x7, 0x10001, 0x9, 0x8, 0xc}, {0x5, 0x1, 0x4, 0x4, 0x0, 0xffff0560}, {0x2, 0x3, 0x4, 0x4, 0xf, 0x3}, {0x5, 0x0, 0x0, 0x9, 0x3, 0x1}, {0x40000009, 0x2fec, 0x1, 0x1000, 0xbc}, {0xa, 0x800, 0x9, 0xff, 0x6, 0x6}, {0x9, 0xfffffffb, 0x4, 0x0, 0x5, 0x120}, {0x7fff, 0x9, 0x9bc4, 0x6, 0x2, 0x4}, {0x1f, 0x9, 0x80, 0x4, 0x381a, 0x33d}, {0xf45, 0x8e, 0x2, 0x5, 0xfff, 0x9}, {0xffffffff, 0x8001, 0xac8, 0x2, 0x0, 0x7}, {0x3, 0x5, 0x1, 0xd, 0x6, 0x6}, {0x3, 0xcc, 0x3, 0x5, 0x8, 0x2}, {0x2cb, 0x4, 0x20e930a6, 0x6, 0x1dadc47e, 0x200}, {0x8, 0x3, 0xab, 0x1, 0x6, 0xfffffffd}, {0x1, 0x1, 0x6c8a0fdd, 0x80000000, 0x91da, 0x5}, {0x3d, 0xffff0000, 0xfffffffa, 0x7, 0xffffff80, 0x9}, {0xfffff800, 0xa30d, 0x9, 0x6, 0x0, 0xa0ae}, {0x6, 0xdc, 0x7ff, 0xfffffff9, 0x8, 0x1}, {0x8, 0x9, 0x7, 0x5, 0x407, 0x8}, {0x7, 0x8, 0x4, 0x6, 0x16c3, 0x2}, {0x0, 0x6, 0x401, 0x8000, 0x0, 0x5}, {0x4, 0x0, 0x4, 0xfff, 0x9, 0x10001}, {0x3ff, 0x4, 0x1, 0x8, 0x4c9, 0x9}, {0x2, 0x99, 0x7, 0x3ff, 0xffff}, {0x5, 0x4, 0x3, 0x8, 0x5354c46a}, {0x74, 0x3, 0xb, 0x6, 0xb0, 0x8}, {0x7, 0x5ed, 0x3, 0xffff, 0xfffffffd, 0x1}, {0x8001, 0x2a, 0x800, 0x6, 0x6, 0xa9a}, {0xa1b, 0x4, 0x3, 0x199c8fb, 0xfffffe00, 0x3}, {0x7, 0xfffffffe, 0xffff0001, 0x9, 0x8, 0x1000}, {0xfffffff9, 0x2, 0xfd1a, 0x8, 0x6, 0x1a}, {0xc01d, 0x5, 0xc407, 0x0, 0x8, 0x4}], [{0x2}, {0x4}, {0x4}, {0x4, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x5, 0xbd1f2685d579a93a}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x2}, {0x2}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x3}, {}, {0x3}, {0x5}, {0x3}, {0x2}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x5, 0xd235073d003fc1b9}, {0x2, 0x1}, {0x3}, {0x2}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x4}, {0x0, 0x1}, {0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {}, {}, {0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x2, 0x2d77d8dfc6080e34}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x2}, {0x4}, {0x2}, {0x5, 0x1}, {0x2}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x4, 0x8, 0x1, 0x475, 0xc}, 0x0, 0x8f, [{0x2, 0x4, 0x2, 0x4, 0x100, 0x6}, {0x5, 0xfffffff7, 0x6, 0x4, 0x4, 0x1000}, {0x101, 0x3, 0x1, 0x3, 0x4, 0x1}, {0x6, 0x0, 0x6, 0x81, 0x4, 0x6}, {0x6, 0x80000000, 0x7, 0x716, 0x9, 0x7}, {0x6, 0x3, 0x8, 0x5, 0x10001}]}, [{0xe7, 0xf, 0x6, 0x3, 0x4, 0x2}, {0x9, 0xa44, 0x1, 0x2, 0x1, 0xa0000000}, {0xfffffff7, 0x5, 0x3ff, 0x6b5, 0x5, 0x6}, {0x2c, 0x401, 0x1, 0x1, 0x3ff, 0x200}, {0x5, 0x1, 0x1, 0xfffffffa, 0x0, 0xfffffff9}, {0x9, 0x1, 0xb, 0x8001, 0x5, 0x81}, {0x2, 0x548e5072, 0x5, 0x7, 0x2, 0x3d64}, {0x1, 0x5, 0x2, 0x2, 0x9ad, 0xb73d}, {0xff, 0x1ff, 0x2, 0xeb, 0x7, 0x8}, {0xc8, 0x5, 0x6, 0x1, 0x7, 0x42}, {0x3, 0x7, 0xffff, 0x6, 0x8, 0xfffffff8}, {0x3, 0x5, 0x7, 0x80000001, 0x4, 0x6}, {0x8000, 0x7877, 0x3, 0x3, 0x3ff8000, 0xfffffe00}, {0xfffff9ff, 0x3, 0xb, 0x6, 0x2, 0x6}, {0x80000001, 0x2, 0x1, 0x5c7, 0x80000001, 0x9}, {0xf1, 0x7, 0x800, 0x9, 0x8, 0x50}, {0x1, 0xef9, 0x9, 0x1, 0x0, 0x8}, {0x7fffffff, 0x4, 0x0, 0x6, 0xdd, 0x6}, {0x2a, 0x4, 0x0, 0x167, 0x8}, {0x34f, 0xec3, 0x5, 0x7, 0x9, 0x2}, {0x2, 0x6, 0x4, 0x8, 0x2, 0xd}, {0x939, 0xf80, 0x7f, 0x8, 0x7fffffff, 0x3}, {0x4, 0x2, 0x3b7c, 0xfff, 0x6, 0x9}, {0x47a, 0xffffffff, 0xf, 0x0, 0x1, 0x7f}, {0xb62, 0xffffface, 0x0, 0x5, 0x8, 0x46}, {0x3, 0x4, 0x4, 0x1, 0x8000, 0xf00000}, {0x4, 0x9, 0x33, 0x2b7, 0x2, 0x9}, {0x8, 0xb883, 0x53, 0x6, 0x3, 0x5}, {0x7ff, 0x63, 0x0, 0x93, 0x2, 0x7}, {0xa29, 0x1000, 0x5855, 0x9, 0x4, 0x7}, {0x0, 0x23, 0x6413, 0x8, 0xd6, 0x2}, {0xff, 0x7, 0x8, 0x5, 0xfff, 0x8}, {0xfffff95d, 0xdc2, 0x3b, 0x74, 0x9, 0x1}, {0x400000, 0x9, 0x0, 0xa2f0, 0x7, 0x7ff}, {0x3, 0x10001, 0x3, 0x2, 0x4, 0x1000}, {0x5, 0x3, 0x9, 0x80000001, 0x9, 0x3acc7b66}, {0x3, 0x9, 0x43, 0x200, 0x1, 0x7}, {0x1, 0x2, 0x6, 0x1, 0x9}, {0x8, 0x3, 0x1, 0x7, 0x4, 0x1}, {0x8, 0x45, 0x6f, 0x0, 0x972, 0xfffffffe}, {0x8, 0x8, 0xde32, 0x2, 0x7, 0xb818}, {0x7ff, 0x1, 0x2b, 0x5, 0x5, 0xfffffff7}, {0x7, 0xd, 0x2, 0x0, 0x7, 0x800}, {0xb, 0x3, 0x2, 0x80000000, 0x9}, {0x7, 0x10001, 0xa, 0x3, 0x80000000, 0x4}, {0x8, 0x8, 0x10, 0x8, 0x8, 0x4}, {0x6, 0xfffffffb, 0x2, 0x0, 0x2db8, 0x2}, {0xeb, 0xbfa3, 0xd30, 0x2, 0x0, 0x7}, {0x10, 0x6, 0x1, 0x80000001, 0x3, 0xc65f}, {0x1, 0xe, 0x7, 0x10001, 0x80000001, 0xcf7}, {0x4, 0x9, 0x3, 0x2, 0x2, 0x74df}, {0x4, 0x2, 0xe, 0xa, 0x10, 0xffffffc0}, {0xd16, 0x4, 0x1, 0xe00000, 0x7, 0x3b}, {0x9, 0xffe00000, 0xffffa8d0, 0x1, 0x387, 0x3}, {0x2, 0x400, 0x0, 0x3, 0x0, 0x3dd}, {0x8, 0x9c0e, 0x10, 0x5, 0xee, 0x4}, {0xffffffff, 0xc71, 0x3, 0x4, 0xe000, 0x3bb}, {0x9, 0x9, 0xec3, 0xd4b, 0x6, 0x5}, {0x7, 0x4, 0x3, 0x5b676be8, 0x9, 0x5}, {0x3, 0xf, 0xffffff27, 0x7ff, 0x4, 0x7ff}, {0x3, 0xfff, 0x9, 0xddd, 0x3800000}, {0x9, 0x5, 0x0, 0x10001, 0x7, 0x10001}, {0x3, 0xe, 0x5, 0x1, 0xfffffffc, 0x1}, {0x9, 0xa, 0x7, 0xb83, 0xf, 0x4f55}, {0x3eb7, 0x2, 0x8, 0xb, 0x7f, 0x1}, {0x8, 0x4, 0x1ff, 0x2, 0x6cf, 0x3}, {0x4, 0x4, 0xf41, 0xc, 0x2, 0x2f}, {0x6, 0x1000, 0x8, 0x80000001, 0x7, 0x2}, {0x9581, 0xec1, 0x5, 0x0, 0x8, 0x6}, {0xfffff9fd, 0xf4, 0x1, 0x6dc, 0x6, 0xe}, {0x6, 0xa, 0x7ff, 0x7fff, 0x150, 0x9}, {0xaca4ea, 0x400, 0x1000, 0x34f, 0x1, 0xac6}, {0x3, 0x8, 0xb1, 0x9, 0xcd, 0x9f2e}, {0x2, 0x2, 0x200, 0x4, 0x6, 0x98}, {0x80000000, 0x3, 0x24c4, 0x7fff, 0xbac, 0x7fff}, {0x9, 0x6, 0x2b05, 0xbe, 0x4, 0x62}, {0x0, 0x800000, 0x100, 0x8, 0x1e2, 0xfffffff9}, {0x4, 0x80, 0x1, 0x4ab8, 0x80, 0x9}, {0x4, 0x2, 0x5, 0x5682, 0x3fc, 0x6f6e}, {0x7, 0x5, 0xff, 0xbb, 0x2, 0x6}, {0x4, 0xff, 0x8, 0x5, 0x5e6, 0x9}, {0x8, 0x2, 0x6, 0x8, 0xe5, 0x3}, {0x1ff, 0x10001, 0xd, 0x800, 0x7c, 0x5}, {0x0, 0x3d, 0x450, 0x7, 0x1, 0x1000}, {0x2, 0x40, 0xd, 0xc, 0xa6b2, 0x3}, {0xfffffff7, 0xfffffb51, 0x2, 0x5, 0x3, 0x3}, {0x101, 0x70, 0x0, 0xb2, 0xfff, 0x64}, {0x6, 0x4, 0x5, 0x9, 0x71, 0x5}, {0x6, 0x9b23, 0x8, 0x3, 0xfdf, 0x81}, {0x0, 0x6, 0x0, 0x101, 0x6, 0x8}, {0x8, 0x0, 0x7, 0x6, 0x3, 0x7}, {0x40, 0x2, 0x100, 0x5, 0x1, 0x3}, {0xa, 0x9, 0x4e, 0x6, 0x8, 0xffffffff}, {0x6, 0x10, 0x0, 0xc, 0x7fff, 0x9}, {0x0, 0x7f, 0x0, 0x4, 0xf, 0x80}, {0x3, 0x1, 0x8, 0x1, 0x2}, {0x748c, 0x9fcf, 0x1000, 0x3, 0x401, 0xfff}, {0x10000, 0x2, 0x8, 0x8, 0x5, 0x8da}, {0x6, 0x9, 0x7, 0x5, 0x401, 0x655}, {0xe5b3, 0x5, 0xcc1, 0x80000001, 0x9, 0x6}, {0x8, 0x3, 0x49, 0x7fff, 0xfffffff9, 0x4}, {0xa06, 0x113059d4, 0x8001, 0xffff, 0x5, 0x4}, {0xb, 0x0, 0xfffffffb, 0x3, 0x23}, {0x121, 0x7, 0x3, 0x8000, 0x52, 0x6}, {0x4, 0x6, 0x301, 0x4, 0x0, 0x1fc}, {0x200, 0x80000000, 0x1, 0x0, 0x3, 0x9}, {0x5, 0x1, 0x0, 0xc, 0xfff, 0x1ff}, {0xfffffff7, 0x7, 0x5490, 0x1, 0x8, 0x7fff}, {0xd95d, 0x5, 0x8, 0x8, 0x7, 0x88}, {0x0, 0xce700000, 0x4, 0xfffff23f, 0x7, 0x1}, {0x7, 0xe90, 0x2, 0x4, 0xd3ce, 0x90}, {0x5, 0x38a, 0x1, 0x800, 0xffffff32, 0x5}, {0x4, 0x2, 0x6, 0x75c, 0xffffffff, 0x6}, {0xfffffff8, 0x80000001, 0x8ff, 0x400, 0x3, 0xe}, {0x3, 0xf33, 0x800, 0x95, 0x3ff, 0x2}, {0x0, 0xfffffff7, 0x7, 0x9, 0x6d331824, 0xb}, {0xf, 0xffff, 0x2, 0x3, 0x5, 0x8}, {0x4, 0x3, 0x5, 0x2, 0x42e881e2, 0x8}, {0x2, 0xe707, 0x81, 0x3, 0x37b, 0x400}, {0x80, 0x10001, 0x0, 0x4, 0x200, 0x6}, {0x800, 0x5, 0x8, 0x5d, 0x81, 0x5}, {0x2, 0x1, 0x100, 0x3, 0xa6d, 0x6}, {0xd91, 0x6, 0x2f24, 0x7fff, 0x9}, {0x4, 0xcf, 0x9, 0xfffffffe, 0x0, 0x3}, {0x9, 0xcd55, 0x5, 0x3, 0x8, 0x64}, {0x14c, 0x8, 0x1, 0xffffffff, 0xf9c, 0x2}, {0x0, 0xff, 0x47e71e1b, 0xa1e, 0x6, 0x2}, {0x2, 0x2, 0x6, 0x9f, 0x5, 0x3}], [{}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5}, {0x6, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x7}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x0, 0x1}, {}, {0xf, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x2}, {}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {}, {0x2}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x8, 0x1}, {0x1}, {}, {0x2}, {0x1, 0xdce10af76fe9a4ce}, {}, {0x5}, {}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x3}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x8542bdcc35cc25ad}, {0x7e738ee6976d8e73, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x1}]}}]}, {0xc1, 0x6, "45dd95c616430bee8408821b538c173abcab5e717f394dcbd6b23ea113c357ae9992f5c999452125e230bbc53557dcab1c17d7c6421963e45a7335aaef82da064873f649ecb60e10c6e4cedd4e6ebcf0c4622baf76b56d7878672ce3bd327178510d27515130f4e3b5989f71aae165548a68beb4ffb7591957ca756fb0b0b96bf314eb6273a74896860b391f4cdc5189ae73e5bb56af316fd0bc5b345914d4dbcd78ecdff910ecd5b6b437c60d552d5655e8decfc2a95233631d9c08bf"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0xb8, 0x17, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xff, 0xea4b, 0x0, 0x7, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x9, 0x1, 0x85aa, 0x1}}, @TCA_DEF_DATA={0xa, 0x3, '\x01\x01\x01\x01\x01\x01'}, @TCA_DEF_DATA={0x6, 0x3, '.\x00'}]}, {0x46, 0x6, "6383954a1bc2dd2c999bee536c7a99fa62218ad62d01a95ac65ad823af12baf6e9134c434245f73203378e0fd66a5043869a4b9f1fce3a1dd7fb76a672bf28c8b036"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_xt={0x116c, 0x1e, 0x0, 0x0, {{0x7}, {0x10fc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x102a, 0x6, {0x8, 'raw\x00', 0x3, 0xfffe, "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"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x56, 0x6, {0x6, 'mangle\x00', 0x7c, 0x2, "66a9dadd800ebccfcb7317c556ccddf58d6b0257be8b3b95200bf981dfa795ba389f89c04c4b9664ac02e507"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TARG={0x2e, 0x6, {0x5, 'security\x00', 0x6, 0x8, "53af3a5f"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x4a, 0x6, "edd6662eaef1b97013cd8e3dcac0118e8fa86ba1166e214613fd41a769f01cf944339d84d0485deef9ddc3949c6fe33dbc4f7cc9af0c2e4e0676f85635eb0d88455a0a2e78e2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x1038, 0x18, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x201}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x290, 0x1, [@m_simple={0x128, 0x1c, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x13, 0x3, '/dev/dri/card#\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'wlan0\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x86, 0x3, 0x1000000e, 0x2, 0xfffffe01}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x8, 0x0, 0x1, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x800, 0xb9, 0x3, 0x9, 0xffffffff}}, @TCA_DEF_DATA={0xa, 0x3, '\x01\x01\x01\x01\x01\x01'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1, 0x8, 0xffffffff}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x7, 0x3, '@$\x00'}]}, {0x55, 0x6, "f38d08153620fcfcf3eb8ad27260ced6557b40860a402d419e1eb45112da909614b74736524b17a4041e049511a6604fa96a57c68fd91cd91590c6b4d9229846a77c4368afb23842a9f4efe9d1ca7415ba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x164, 0x6, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x6, 0x6, 0x6}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfff, 0x3ff, 0x5, 0x3b3c, 0x1}, 0x1ff}}]}, {0xf9, 0x6, "25030024c7c022253f059880a7171fa85cb9939e02631e6e2b4920cc8355c2ce38a99dd5e8df38d8a71856e394f5173a39c1ee1a32c677a0821b729ada63fcb7c721cbb84095883386696d7a5965dfd5bbbe8ad41812de5a8bd0844fb200b445ebec2ee57a3084901cc45002d378d2c5bcfdcf4699c43f678d58dc4e670ec961886c0b350bf4241afb9c2eec527a89391cc1e6cf7c80ac7ec588054d983f0df8c293cb649fb5aea4c400c5e588054a0651eb762d88d1373753203e79071ff78d090ebc36478dca074e0101ff61a87cf38589e1302a0e9f369cfded0dd9fc131287b5c5d33e461192346db532eca3d4ffea9e1d543e"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x7618}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05f1c918826b9f46c2112400000000008510000002000000850000000e00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfd3fe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x80000000}]) io_getevents(r5, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r5, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 414.477976ms ago: executing program 4 (id=4745): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="20010000410007012cbd7000fddbdf25037c00000400c28008010180040110801400080000000000000000000000000000000001ec000b"], 0x120}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 414.115513ms ago: executing program 4 (id=4746): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}, 0x4465}], 0x1, 0x40002141, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a3100000000140003"], 0x60}}, 0x200040c0) 273.817971ms ago: executing program 4 (id=4747): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x78bd22, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r3, &(0x7f00000002c0)='\n', 0x1) 161.118464ms ago: executing program 4 (id=4748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000380)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) setns(0xc9, 0x0) r5 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x55, 0x5, 0x1, {0x9, 0x1}, {0x2a, 0x2}, @cond=[{0x10, 0x92, 0x5, 0x1, 0x1, 0x83}, {0x271e, 0x4, 0x809, 0x7f, 0xfffe, 0x7ff}]}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x842b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) r7 = syz_open_dev$sg(0x0, 0x7d97, 0x800) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x30, r8, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x101, 0x0, 0xe, 0x1}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1f602261e4fb935}, 0x800) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x204001, 0x0) r9 = syz_genetlink_get_family_id$ipvs(0x0, r0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r9, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x28}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x40}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) 0s ago: executing program 0 (id=4749): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0xff, 0xfffff00c}, {0xb1, 0x20, 0x40, 0xffffefff}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9365fe5a", 0x33fe0}], 0x1}}], 0x80000af, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) r3 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x181000) ioctl$MON_IOCX_MFETCH(r3, 0xc00c9207, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r7, &(0x7f0000000140)="00000000090209f54ad2010100c001120100020000004000a98343bcfc0e3c", 0x1f) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x9, 0x4}) ioctl$VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f00000002c0)=@userptr={0x5, 0xa, 0x4, 0x2000, 0x8, {0x0, 0x2710}, {0x2, 0x0, 0xd5, 0x6, 0x74, 0x3, "fbebff7f"}, 0x4000ff, 0x2, {0x0}, 0x4}) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r11, 0x7}}, 0x48) r12 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r12, 0x6, 0x4, 0x0, &(0x7f0000000000)) setresuid(0x0, 0xee00, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) kernel console output (not intermixed with test programs): 576.818516][T17879] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 576.827755][T17879] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 576.900806][T17881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.028020][ T10] usb 7-1: new full-speed USB device number 113 using dummy_hcd [ 577.137520][ T5536] usb 8-1: new high-speed USB device number 112 using dummy_hcd [ 577.181784][ T10] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 577.184951][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.187843][ T10] usb 7-1: Product: syz [ 577.189269][ T10] usb 7-1: Manufacturer: syz [ 577.190859][ T10] usb 7-1: SerialNumber: syz [ 577.288672][ T5536] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.292314][ T5536] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 577.295276][ T5536] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.308092][ T5536] usb 8-1: config 0 descriptor?? [ 577.312014][ T5536] pwc: Askey VC010 type 2 USB webcam detected. [ 577.604241][ T10] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 113 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 577.691200][T17884] hfsplus: unable to find HFS+ superblock [ 577.714249][ T5536] pwc: recv_control_msg error -32 req 02 val 2b00 [ 577.717545][ T5536] pwc: recv_control_msg error -32 req 02 val 2700 [ 577.723217][ T5536] pwc: recv_control_msg error -71 req 02 val 2c00 [ 577.729018][ T5536] pwc: recv_control_msg error -71 req 04 val 1000 [ 577.731383][ T5536] pwc: recv_control_msg error -71 req 04 val 1300 [ 577.733673][ T5536] pwc: recv_control_msg error -71 req 04 val 1400 [ 577.735914][ T5536] pwc: recv_control_msg error -71 req 02 val 2000 [ 577.738299][ T5536] pwc: recv_control_msg error -71 req 02 val 2100 [ 577.740805][ T5536] pwc: recv_control_msg error -71 req 04 val 1500 [ 577.743089][ T5536] pwc: recv_control_msg error -71 req 02 val 2500 [ 577.745314][ T5536] pwc: recv_control_msg error -71 req 02 val 2400 [ 577.747682][ T5536] pwc: recv_control_msg error -71 req 02 val 2600 [ 577.750013][ T5536] pwc: recv_control_msg error -71 req 02 val 2900 [ 577.752302][ T5536] pwc: recv_control_msg error -71 req 02 val 2800 [ 577.754625][ T5536] pwc: recv_control_msg error -71 req 04 val 1100 [ 577.756879][ T5536] pwc: recv_control_msg error -71 req 04 val 1200 [ 577.760973][ T5536] pwc: Registered as video103. [ 577.770417][ T5536] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb8/8-1/input/input141 [ 577.783268][ T5536] usb 8-1: USB disconnect, device number 112 [ 578.273902][T17896] input input142: cannot allocate more than FF_MAX_EFFECTS effects [ 578.542166][T17901] ucma_write: process 1102 (syz.0.4347) changed security contexts after opening file descriptor, this is not allowed. [ 578.711314][T17907] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4350'. [ 578.925466][T17918] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 579.704626][T17934] Failed to get privilege flags for destination (handle=0x2:0xffffffff) [ 579.783534][ T9] usb 7-1: USB disconnect, device number 113 [ 579.797174][ T9] usblp0: removed [ 580.034292][ T5536] libceph: connect (1)[c::]:6789 error -101 [ 580.125567][T17958] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 580.159042][ T5536] libceph: mon0 (1)[c::]:6789 connect error [ 580.203683][ T5536] libceph: connect (1)[c::]:6789 error -101 [ 580.213005][ T5536] libceph: mon0 (1)[c::]:6789 connect error [ 580.216725][T17947] ceph: No mds server is up or the cluster is laggy [ 580.226996][T17960] input input143: cannot allocate more than FF_MAX_EFFECTS effects [ 580.503977][T17966] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4371'. [ 580.702652][T17294] usb 9-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 580.738238][ T5536] usb 7-1: new full-speed USB device number 114 using dummy_hcd [ 580.828696][T17983] netlink: 'syz.3.4378': attribute type 1 has an invalid length. [ 580.841243][T17983] 8021q: adding VLAN 0 to HW filter on device bond13 [ 580.852096][T17983] bond12: (slave syz_tun): Releasing active interface [ 580.862585][T17983] bond13: (slave syz_tun): making interface the new active one [ 580.875001][T17983] bond13: (slave syz_tun): Enslaving as an active interface with an up link [ 580.884883][T17983] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4378'. [ 580.922206][ T5536] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 580.928878][ T5536] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.935798][ T5536] usb 7-1: Product: syz [ 580.937151][ T5536] usb 7-1: Manufacturer: syz [ 580.940580][ T5536] usb 7-1: SerialNumber: syz [ 581.090467][T17991] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 581.097068][T17991] cramfs: wrong magic [ 581.107630][T17991] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4380'. [ 581.364062][ T5536] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 114 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 582.276104][T17998] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 582.279422][T17998] cramfs: wrong magic [ 582.285069][T17998] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4382'. [ 582.817625][ T5536] usb 9-1: USB disconnect, device number 69 [ 583.021072][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4384'. [ 583.050173][T18000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4384'. [ 583.199658][T18006] 9pnet_fd: Insufficient options for proto=fd [ 583.354486][T18016] binder: BINDER_SET_CONTEXT_MGR already set [ 583.362585][T18016] binder: 18015:18016 ioctl 4018620d 80000100 returned -16 [ 583.366624][T18016] binder: 18015:18016 ioctl 401870cb 800000c0 returned -22 [ 583.399336][T18019] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 583.473425][T18024] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 583.476917][T18024] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 583.539907][T17294] usb 7-1: USB disconnect, device number 114 [ 583.561062][T17294] usblp0: removed [ 583.896459][T18044] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 583.899334][T18044] cramfs: wrong magic [ 583.902005][T18044] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4401'. [ 584.037607][T17294] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 584.190910][T17294] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 584.197383][T17294] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 584.207137][T17294] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 584.217608][T17294] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 584.231672][T17294] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 584.244821][T17294] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 584.252380][T17294] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 584.259402][T17294] usb 7-1: Product: syz [ 584.263195][T17294] usb 7-1: Manufacturer: syz [ 584.265709][T18046] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 584.275392][T17294] cdc_wdm 7-1:1.0: skipping garbage [ 584.283344][T18046] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 584.286736][T17294] cdc_wdm 7-1:1.0: skipping garbage [ 584.292481][T17294] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 584.296089][T17294] cdc_wdm 7-1:1.0: Unknown control protocol [ 584.419312][T18048] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 584.430335][T18048] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 584.687371][T17294] usb 8-1: new full-speed USB device number 113 using dummy_hcd [ 584.713318][T18057] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4406'. [ 584.722479][T18057] FAULT_INJECTION: forcing a failure. [ 584.722479][T18057] name failslab, interval 1, probability 0, space 0, times 0 [ 584.729417][T18057] CPU: 2 UID: 0 PID: 18057 Comm: syz.4.4406 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.729437][T18057] Tainted: [L]=SOFTLOCKUP [ 584.729441][T18057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 584.729449][T18057] Call Trace: [ 584.729453][T18057] [ 584.729458][T18057] dump_stack_lvl+0x100/0x190 [ 584.729479][T18057] should_fail_ex.cold+0x5/0xa [ 584.729494][T18057] should_failslab+0xc2/0x120 [ 584.729511][T18057] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 584.729527][T18057] ? __alloc_skb+0x140/0x710 [ 584.729547][T18057] __alloc_skb+0x140/0x710 [ 584.729561][T18057] ? __alloc_skb+0x5b7/0x710 [ 584.729576][T18057] ? __pfx___alloc_skb+0x10/0x10 [ 584.729591][T18057] ? genl_rcv_msg+0x4be/0x800 [ 584.729624][T18057] netlink_ack+0x117/0xb80 [ 584.729642][T18057] netlink_rcv_skb+0x333/0x420 [ 584.729655][T18057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 584.729670][T18057] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 584.729689][T18057] ? netlink_deliver_tap+0x1ae/0xcc0 [ 584.729704][T18057] genl_rcv+0x28/0x40 [ 584.729717][T18057] netlink_unicast+0x585/0x850 [ 584.729738][T18057] ? __pfx_netlink_unicast+0x10/0x10 [ 584.729755][T18057] netlink_sendmsg+0x8b0/0xda0 [ 584.729771][T18057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.729786][T18057] ? apparmor_socket_sendmsg+0x15b/0x270 [ 584.729804][T18057] ____sys_sendmsg+0xa4d/0xbe0 [ 584.729816][T18057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.729831][T18057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 584.729849][T18057] ___sys_sendmsg+0x190/0x1e0 [ 584.729863][T18057] ? __pfx____sys_sendmsg+0x10/0x10 [ 584.729883][T18057] ? find_held_lock+0x2b/0x80 [ 584.729906][T18057] __sys_sendmsg+0x160/0x210 [ 584.729924][T18057] ? __pfx___sys_sendmsg+0x10/0x10 [ 584.729944][T18057] ? __pfx_ksys_write+0x10/0x10 [ 584.729958][T18057] __do_fast_syscall_32+0xe7/0x970 [ 584.729981][T18057] ? lockdep_hardirqs_on+0x78/0x100 [ 584.729997][T18057] do_fast_syscall_32+0x32/0x70 [ 584.730013][T18057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 584.730029][T18057] RIP: 0023:0xf6fdefec [ 584.730043][T18057] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 584.730049][T18057] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 584.730060][T18057] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 584.730068][T18057] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 584.730075][T18057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 584.730082][T18057] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 584.730089][T18057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 584.730103][T18057] [ 584.840979][T17294] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 584.845062][T17294] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.859909][T17294] usb 8-1: Product: syz [ 584.865279][T17294] usb 8-1: Manufacturer: syz [ 584.866998][T17294] usb 8-1: SerialNumber: syz [ 584.912840][T18065] JFS: discard option not supported on device [ 584.916855][T18065] Mount JFS Failure: -22 [ 584.919757][T18065] jfs_mount failed w/return code = -22 [ 584.988232][ T42] audit: type=1326 audit(1785910704.990:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18062 comm="syz.0.4409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 585.012378][ T42] audit: type=1326 audit(1785910705.010:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18062 comm="syz.0.4409" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 585.020222][ T42] audit: type=1326 audit(1785910705.010:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18062 comm="syz.0.4409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 585.032244][ T42] audit: type=1326 audit(1785910705.010:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18062 comm="syz.0.4409" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 585.044161][ T42] audit: type=1326 audit(1785910705.010:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18062 comm="syz.0.4409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 585.047978][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 6 bytes [ 585.055639][ T42] audit: type=1326 audit(1785910705.010:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18062 comm="syz.0.4409" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 585.066975][ T42] audit: type=1326 audit(1785910705.010:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18062 comm="syz.0.4409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 585.079420][ T42] audit: type=1326 audit(1785910705.020:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18062 comm="syz.0.4409" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 585.093590][ T42] audit: type=1326 audit(1785910705.020:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18062 comm="syz.0.4409" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 585.106404][ T42] audit: type=1326 audit(1785910705.030:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18062 comm="syz.0.4409" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 585.106421][T18072] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 585.131593][T18072] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 585.200896][T18074] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 585.207027][T18074] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 585.293467][T17294] usblp 8-1:1.0: usblp1: USB Unidirectional printer dev 113 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 585.655997][T18083] (NULL device *): [drm] The number of CRTCs must be between 1 and 31 [ 585.673204][T18083] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4416'. [ 585.744856][T18086] FAULT_INJECTION: forcing a failure. [ 585.744856][T18086] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 585.751534][T18086] CPU: 2 UID: 0 PID: 18086 Comm: syz.0.4417 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.751555][T18086] Tainted: [L]=SOFTLOCKUP [ 585.751560][T18086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 585.751568][T18086] Call Trace: [ 585.751572][T18086] [ 585.751577][T18086] dump_stack_lvl+0x100/0x190 [ 585.751597][T18086] should_fail_ex.cold+0x5/0xa [ 585.751611][T18086] _copy_from_iter+0x1f4/0x1690 [ 585.751649][T18086] ? __asan_memset+0x23/0x50 [ 585.751663][T18086] ? __pfx__copy_from_iter+0x10/0x10 [ 585.751682][T18086] ? __pfx___alloc_skb+0x10/0x10 [ 585.751705][T18086] netlink_sendmsg+0x808/0xda0 [ 585.751723][T18086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.751739][T18086] ? apparmor_socket_sendmsg+0x15b/0x270 [ 585.751755][T18086] ____sys_sendmsg+0xa4d/0xbe0 [ 585.751768][T18086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.751784][T18086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 585.751803][T18086] ___sys_sendmsg+0x190/0x1e0 [ 585.751818][T18086] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.751838][T18086] ? find_held_lock+0x2b/0x80 [ 585.751863][T18086] __sys_sendmsg+0x160/0x210 [ 585.751881][T18086] ? __pfx___sys_sendmsg+0x10/0x10 [ 585.751901][T18086] ? __pfx_ksys_write+0x10/0x10 [ 585.751915][T18086] __do_fast_syscall_32+0xe7/0x970 [ 585.751932][T18086] ? lockdep_hardirqs_on+0x78/0x100 [ 585.751949][T18086] do_fast_syscall_32+0x32/0x70 [ 585.751965][T18086] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 585.751981][T18086] RIP: 0023:0xf6feefec [ 585.751994][T18086] Code: Unable to access opcode bytes at 0xf6feefc2. [ 585.751999][T18086] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 585.752011][T18086] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 585.752019][T18086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.752105][T18086] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 585.752111][T18086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.752119][T18086] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 585.752133][T18086] [ 585.951340][T18090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4419'. [ 586.052237][T18094] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 586.055725][T18094] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 586.766136][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 586.768270][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 586.770443][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 586.772494][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 586.774694][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 586.776796][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 586.778945][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 586.781037][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 586.784133][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 586.786692][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 586.789317][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 586.791916][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 586.794524][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 586.797114][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 586.799735][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 586.802368][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 586.805714][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 586.808348][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 586.811084][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 586.815189][T17294] usb 7-1: USB disconnect, device number 115 [ 586.817661][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 586.851156][T18103] device-mapper: ioctl: populate_table: no targets specified [ 587.087336][ T5536] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 587.149158][T18116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.237329][ T5536] usb 9-1: Using ep0 maxpacket: 16 [ 587.240706][ T5536] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.243938][ T5536] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 587.249052][ T5536] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.258599][ T5536] usb 9-1: config 0 descriptor?? [ 587.397701][T17294] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 587.438510][T18138] device-mapper: ioctl: name not supplied when creating device [ 587.461691][ T41] usb 8-1: USB disconnect, device number 113 [ 587.471197][ T41] usblp1: removed [ 587.516442][T18141] syzkaller1: entered promiscuous mode [ 587.519852][T18141] syzkaller1: entered allmulticast mode [ 587.563615][T17294] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.567758][T17294] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 587.572621][T17294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.580286][T17294] usb 5-1: config 0 descriptor?? [ 587.589605][T17294] pwc: Askey VC010 type 2 USB webcam detected. [ 587.596304][ T5536] usb 9-1: USB disconnect, device number 70 [ 587.690753][T18149] device-mapper: ioctl: name not supplied when creating device [ 587.772401][T18151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4437'. [ 587.989332][T17294] pwc: recv_control_msg error -32 req 02 val 2b00 [ 587.993837][T17294] pwc: recv_control_msg error -32 req 02 val 2700 [ 588.000405][T17294] pwc: recv_control_msg error -71 req 02 val 2c00 [ 588.004383][T17294] pwc: recv_control_msg error -71 req 04 val 1000 [ 588.010248][T17294] pwc: recv_control_msg error -71 req 04 val 1300 [ 588.012595][T17294] pwc: recv_control_msg error -71 req 04 val 1400 [ 588.018027][T17294] pwc: recv_control_msg error -71 req 02 val 2000 [ 588.021955][T17294] pwc: recv_control_msg error -71 req 02 val 2100 [ 588.025715][T17294] pwc: recv_control_msg error -71 req 04 val 1500 [ 588.037663][T17294] pwc: recv_control_msg error -71 req 02 val 2500 [ 588.040167][T17294] pwc: recv_control_msg error -71 req 02 val 2400 [ 588.042550][T17294] pwc: recv_control_msg error -71 req 02 val 2600 [ 588.044975][T17294] pwc: recv_control_msg error -71 req 02 val 2900 [ 588.050460][T17294] pwc: recv_control_msg error -71 req 02 val 2800 [ 588.054224][T17294] pwc: recv_control_msg error -71 req 04 val 1100 [ 588.057738][T17294] pwc: recv_control_msg error -71 req 04 val 1200 [ 588.063718][T17294] pwc: Registered as video103. [ 588.069755][T17294] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb5/5-1/input/input144 [ 588.084214][T17294] usb 5-1: USB disconnect, device number 109 [ 588.215986][T18164] device-mapper: ioctl: name not supplied when creating device [ 588.549234][ T5536] usb 8-1: new full-speed USB device number 114 using dummy_hcd [ 588.614146][T18174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4446'. [ 588.710387][ T5536] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 588.715820][ T5536] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.722393][ T5536] usb 8-1: Product: syz [ 588.724893][ T5536] usb 8-1: Manufacturer: syz [ 588.729562][ T5536] usb 8-1: SerialNumber: syz [ 588.772558][T18176] netlink: 'syz.0.4447': attribute type 2 has an invalid length. [ 588.775716][T18176] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4447'. [ 588.780960][T18176] FAULT_INJECTION: forcing a failure. [ 588.780960][T18176] name failslab, interval 1, probability 0, space 0, times 0 [ 588.786784][T18176] CPU: 2 UID: 0 PID: 18176 Comm: syz.0.4447 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.786810][T18176] Tainted: [L]=SOFTLOCKUP [ 588.786816][T18176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 588.786840][T18176] Call Trace: [ 588.786849][T18176] [ 588.786857][T18176] dump_stack_lvl+0x100/0x190 [ 588.786883][T18176] should_fail_ex.cold+0x5/0xa [ 588.786898][T18176] should_failslab+0xc2/0x120 [ 588.786937][T18176] __kmalloc_noprof+0xfc/0x820 [ 588.786954][T18176] ? tomoyo_encode2+0xfb/0x3c0 [ 588.786976][T18176] tomoyo_encode2+0xfb/0x3c0 [ 588.786997][T18176] tomoyo_encode+0x29/0x50 [ 588.787014][T18176] tomoyo_realpath_from_path+0x18c/0x690 [ 588.787036][T18176] tomoyo_path_number_perm+0x23c/0x580 [ 588.787052][T18176] ? tomoyo_path_number_perm+0x22e/0x580 [ 588.787069][T18176] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 588.787085][T18176] ? get_pid_task+0x106/0x250 [ 588.787114][T18176] ? find_held_lock+0x2b/0x80 [ 588.787130][T18176] ? __fget_files+0x215/0x3d0 [ 588.787142][T18176] ? hook_file_ioctl_common+0x140/0x440 [ 588.787158][T18176] ? __fget_files+0x215/0x3d0 [ 588.787171][T18176] ? __fget_files+0x21f/0x3d0 [ 588.787185][T18176] security_file_ioctl_compat+0xd3/0x230 [ 588.787203][T18176] __ia32_compat_sys_ioctl+0xc2/0x360 [ 588.787223][T18176] __do_fast_syscall_32+0xe7/0x970 [ 588.787244][T18176] ? lockdep_hardirqs_on+0x78/0x100 [ 588.787267][T18176] do_fast_syscall_32+0x32/0x70 [ 588.787284][T18176] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 588.787314][T18176] RIP: 0023:0xf6feefec [ 588.787330][T18176] Code: Unable to access opcode bytes at 0xf6feefc2. [ 588.787335][T18176] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 588.787348][T18176] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c138fd01 [ 588.787356][T18176] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 588.787363][T18176] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 588.787370][T18176] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 588.787377][T18176] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 588.787392][T18176] [ 588.860597][T18176] ERROR: Out of memory at tomoyo_realpath_from_path. [ 589.145842][ T5536] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 114 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 589.224099][T18179] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4448'. [ 589.320289][T18185] device-mapper: ioctl: name not supplied when creating device [ 589.597320][ T5832] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 589.667411][T17294] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 589.758142][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 589.761441][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.765310][ T5832] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 589.769890][ T5832] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 589.772856][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.777020][ T5832] usb 5-1: config 0 descriptor?? [ 589.781247][ T5832] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 589.817393][T17294] usb 9-1: Using ep0 maxpacket: 16 [ 589.821576][T17294] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.825481][T17294] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 589.831075][T17294] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 589.834652][T17294] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.840642][T17294] usb 9-1: config 0 descriptor?? [ 589.849118][T17294] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 590.030894][ T5832] usb 5-1: USB disconnect, device number 110 [ 590.131880][ T41] usb 9-1: USB disconnect, device number 71 [ 590.297207][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4454'. [ 590.327968][T15920] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.330951][T15920] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.333779][T15920] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.336505][T15920] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.642220][T18204] syz.2.4458 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 590.703449][T18206] FAULT_INJECTION: forcing a failure. [ 590.703449][T18206] name failslab, interval 1, probability 0, space 0, times 0 [ 590.721848][T18206] CPU: 2 UID: 0 PID: 18206 Comm: syz.2.4459 Tainted: G L syzkaller #0 PREEMPT(full) [ 590.721879][T18206] Tainted: [L]=SOFTLOCKUP [ 590.721885][T18206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 590.721896][T18206] Call Trace: [ 590.721903][T18206] [ 590.721911][T18206] dump_stack_lvl+0x100/0x190 [ 590.721934][T18206] should_fail_ex.cold+0x5/0xa [ 590.721954][T18206] should_failslab+0xc2/0x120 [ 590.721978][T18206] __kmalloc_noprof+0xfc/0x820 [ 590.722001][T18206] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 590.722025][T18206] kernfs_fop_write_iter+0x26a/0x5f0 [ 590.722044][T18206] vfs_write+0x6ac/0x1050 [ 590.722061][T18206] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 590.722083][T18206] ? __pfx_vfs_write+0x10/0x10 [ 590.722098][T18206] ? find_held_lock+0x2b/0x80 [ 590.722134][T18206] ksys_write+0x12a/0x250 [ 590.722148][T18206] ? __pfx_ksys_write+0x10/0x10 [ 590.722161][T18206] ? ksys_write+0x1ac/0x250 [ 590.722176][T18206] ? __pfx_ksys_write+0x10/0x10 [ 590.722197][T18206] __do_fast_syscall_32+0xe7/0x970 [ 590.722222][T18206] ? lockdep_hardirqs_on+0x78/0x100 [ 590.722243][T18206] do_fast_syscall_32+0x32/0x70 [ 590.722264][T18206] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 590.722286][T18206] RIP: 0023:0xf707efec [ 590.722306][T18206] Code: Unable to access opcode bytes at 0xf707efc2. [ 590.722314][T18206] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 590.722331][T18206] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 590.722341][T18206] RDX: 000000000000002f RSI: 0000000000000000 RDI: 0000000000000000 [ 590.722347][T18206] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 590.722357][T18206] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 590.722368][T18206] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 590.722390][T18206] [ 590.988750][T18222] input input145: cannot allocate more than FF_MAX_EFFECTS effects [ 591.209525][T18235] device-mapper: ioctl: populate_table: no targets specified [ 591.297166][T16889] usb 8-1: USB disconnect, device number 114 [ 591.300383][ T41] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 591.310426][T16889] usblp0: removed [ 591.334234][T18244] 9pnet_virtio: no channels available for device syz [ 591.467602][ T41] usb 5-1: Using ep0 maxpacket: 16 [ 591.737313][ T5832] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 592.221091][ T41] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.225852][ T41] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 592.231022][ T41] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 592.234001][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.241132][ T41] usb 5-1: config 0 descriptor?? [ 592.245336][ T41] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 592.280645][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4479'. [ 592.397104][T18257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4478'. [ 592.401751][ T5832] usb 7-1: Using ep0 maxpacket: 16 [ 592.404866][ T5832] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.412528][ T5832] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 592.420595][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.429747][ T5832] usb 7-1: config 0 descriptor?? [ 592.755839][ T41] usb 7-1: USB disconnect, device number 116 [ 592.769576][T16889] usb 5-1: USB disconnect, device number 111 [ 592.861172][T18266] Invalid ELF header magic: != ELF [ 593.608070][T18286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4488'. [ 594.566194][T18307] netlink: 'syz.2.4496': attribute type 1 has an invalid length. [ 594.604427][T18310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4497'. [ 594.635655][T18307] 8021q: adding VLAN 0 to HW filter on device bond17 [ 594.687626][T18307] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4496'. [ 594.798705][T18311] bond16: (slave syz_tun): Releasing active interface [ 594.820780][T18311] bond17: (slave syz_tun): making interface the new active one [ 594.824039][T18311] bond17: (slave syz_tun): Enslaving as an active interface with an up link [ 595.257620][T17642] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 595.407330][T17642] usb 5-1: Using ep0 maxpacket: 16 [ 595.414608][T17642] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.425253][T17642] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 595.442144][T17642] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 595.457329][T17642] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.475447][T17642] usb 5-1: config 0 descriptor?? [ 595.496735][T17642] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 595.696841][T18333] netlink: 'syz.2.4504': attribute type 1 has an invalid length. [ 595.733392][T18333] 8021q: adding VLAN 0 to HW filter on device bond18 [ 595.776326][T18333] bond17: (slave syz_tun): Releasing active interface [ 595.802606][T18333] bond18: (slave syz_tun): making interface the new active one [ 595.811583][T18333] bond18: (slave syz_tun): Enslaving as an active interface with an up link [ 595.826939][T16889] usb 5-1: USB disconnect, device number 112 [ 595.897980][T18333] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4504'. [ 596.801444][T18356] FAULT_INJECTION: forcing a failure. [ 596.801444][T18356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.828177][T18356] CPU: 2 UID: 0 PID: 18356 Comm: syz.2.4510 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.828198][T18356] Tainted: [L]=SOFTLOCKUP [ 596.828203][T18356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 596.828210][T18356] Call Trace: [ 596.828215][T18356] [ 596.828220][T18356] dump_stack_lvl+0x100/0x190 [ 596.828239][T18356] should_fail_ex.cold+0x5/0xa [ 596.828253][T18356] _copy_from_user+0x2e/0xd0 [ 596.828274][T18356] __mfill_atomic_pte+0x53f/0xb50 [ 596.828294][T18356] ? _raw_spin_unlock+0x28/0x50 [ 596.828310][T18356] ? __pfx___mfill_atomic_pte+0x10/0x10 [ 596.828327][T18356] ? __pfx___pte_alloc+0x10/0x10 [ 596.828343][T18356] ? mm_alloc_pmd+0x2c2/0x470 [ 596.828363][T18356] mfill_atomic_copy+0x72c/0x16c0 [ 596.828387][T18356] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 596.828406][T18356] ? find_held_lock+0x2b/0x80 [ 596.828428][T18356] userfaultfd_ioctl+0x2dee/0x5990 [ 596.828439][T18356] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 596.828456][T18356] ? get_pid_task+0x106/0x250 [ 596.828475][T18356] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 596.828486][T18356] ? do_vfs_ioctl+0x226/0x13e0 [ 596.828504][T18356] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 596.828524][T18356] ? find_held_lock+0x2b/0x80 [ 596.828537][T18356] ? __fget_files+0x215/0x3d0 [ 596.828547][T18356] ? hook_file_ioctl_common+0x140/0x440 [ 596.828567][T18356] ? __fget_files+0x21f/0x3d0 [ 596.828578][T18356] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 596.828589][T18356] ? compat_ptr_ioctl+0x6e/0xa0 [ 596.828604][T18356] compat_ptr_ioctl+0x6e/0xa0 [ 596.828620][T18356] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 596.828635][T18356] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 596.828654][T18356] __do_fast_syscall_32+0xe7/0x970 [ 596.828671][T18356] ? lockdep_hardirqs_on+0x78/0x100 [ 596.828687][T18356] do_fast_syscall_32+0x32/0x70 [ 596.828703][T18356] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 596.828719][T18356] RIP: 0023:0xf707efec [ 596.828733][T18356] Code: Unable to access opcode bytes at 0xf707efc2. [ 596.828739][T18356] RSP: 002b:00000000f544c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 596.828751][T18356] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c028aa03 [ 596.828758][T18356] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 596.828765][T18356] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 596.828772][T18356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.828793][T18356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 596.828807][T18356] [ 597.066470][T18361] input: syz1 as /devices/virtual/input/input146 [ 597.208555][T18364] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4513'. [ 597.477995][ T41] usb 7-1: new full-speed USB device number 117 using dummy_hcd [ 597.633180][ T41] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 597.636178][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.639474][ T41] usb 7-1: Product: syz [ 597.640940][ T41] usb 7-1: Manufacturer: syz [ 597.642485][ T41] usb 7-1: SerialNumber: syz [ 598.137748][ T41] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 117 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 598.489436][T18381] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4516'. [ 598.780734][T18392] FAULT_INJECTION: forcing a failure. [ 598.780734][T18392] name failslab, interval 1, probability 0, space 0, times 0 [ 598.799299][T18392] CPU: 2 UID: 0 PID: 18392 Comm: syz.3.4518 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.799322][T18392] Tainted: [L]=SOFTLOCKUP [ 598.799326][T18392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 598.799334][T18392] Call Trace: [ 598.799338][T18392] [ 598.799344][T18392] dump_stack_lvl+0x100/0x190 [ 598.799362][T18392] should_fail_ex.cold+0x5/0xa [ 598.799377][T18392] should_failslab+0xc2/0x120 [ 598.799394][T18392] __kmalloc_noprof+0xfc/0x820 [ 598.799408][T18392] ? __pfx_dynamic_dname+0x10/0x10 [ 598.799426][T18392] ? tomoyo_encode2+0xfb/0x3c0 [ 598.799447][T18392] tomoyo_encode2+0xfb/0x3c0 [ 598.799465][T18392] tomoyo_encode+0x29/0x50 [ 598.799482][T18392] tomoyo_realpath_from_path+0x18c/0x690 [ 598.799503][T18392] tomoyo_path_number_perm+0x23c/0x580 [ 598.799518][T18392] ? tomoyo_path_number_perm+0x22e/0x580 [ 598.799534][T18392] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 598.799549][T18392] ? get_pid_task+0x106/0x250 [ 598.799576][T18392] ? find_held_lock+0x2b/0x80 [ 598.799591][T18392] ? __fget_files+0x215/0x3d0 [ 598.799601][T18392] ? hook_file_ioctl_common+0x140/0x440 [ 598.799617][T18392] ? __fget_files+0x215/0x3d0 [ 598.799630][T18392] ? __fget_files+0x21f/0x3d0 [ 598.799643][T18392] security_file_ioctl_compat+0xd3/0x230 [ 598.799667][T18392] __ia32_compat_sys_ioctl+0xc2/0x360 [ 598.799687][T18392] __do_fast_syscall_32+0xe7/0x970 [ 598.799705][T18392] ? lockdep_hardirqs_on+0x78/0x100 [ 598.799721][T18392] do_fast_syscall_32+0x32/0x70 [ 598.799738][T18392] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 598.799753][T18392] RIP: 0023:0xf7f45fec [ 598.799768][T18392] Code: Unable to access opcode bytes at 0xf7f45fc2. [ 598.799774][T18392] RSP: 002b:00000000f53e550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 598.799785][T18392] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000c020aa04 [ 598.799793][T18392] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 598.799800][T18392] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 598.799806][T18392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.799813][T18392] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 598.799827][T18392] [ 598.799842][T18392] ERROR: Out of memory at tomoyo_realpath_from_path. [ 599.651858][T18411] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 599.695585][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 599.695600][ T42] audit: type=1326 audit(1785910719.700:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18410 comm="syz.3.4524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 599.709305][ T42] audit: type=1326 audit(1785910719.700:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18410 comm="syz.3.4524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 599.718068][ T42] audit: type=1326 audit(1785910719.700:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18410 comm="syz.3.4524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 599.728441][ T42] audit: type=1326 audit(1785910719.700:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18410 comm="syz.3.4524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 599.738780][ T42] audit: type=1326 audit(1785910719.700:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18410 comm="syz.3.4524" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 599.745183][T18412] dvmrp0: entered allmulticast mode [ 599.756022][ T42] audit: type=1326 audit(1785910719.700:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18410 comm="syz.3.4524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 599.768419][ T42] audit: type=1326 audit(1785910719.710:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18410 comm="syz.3.4524" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 599.790823][ T42] audit: type=1326 audit(1785910719.710:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18410 comm="syz.3.4524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 599.805520][T18411] can: request_module (can-proto-0) failed. [ 599.807607][ T42] audit: type=1326 audit(1785910719.710:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18410 comm="syz.3.4524" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 599.823782][ T42] audit: type=1326 audit(1785910719.750:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18410 comm="syz.3.4524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 600.087960][T18421] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 600.090592][T18421] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 600.137064][T18421] vhci_hcd vhci_hcd.0: Device attached [ 600.230092][ T41] usb 7-1: USB disconnect, device number 117 [ 600.238007][ T41] usblp0: removed [ 600.407365][T17642] usb 46-1: SetAddress Request (2) to port 0 [ 600.409329][T17642] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 600.466693][T18434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4528'. [ 600.740391][T18422] vhci_hcd: connection reset by peer [ 600.744313][T15245] vhci_hcd vhci_hcd.4: stop threads [ 600.748890][T15245] vhci_hcd vhci_hcd.4: release socket [ 600.752623][T15245] vhci_hcd vhci_hcd.4: disconnect device [ 601.177400][ T10] usb 8-1: new high-speed USB device number 115 using dummy_hcd [ 601.207350][T17294] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 601.328649][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 601.336861][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.351095][ T10] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 601.361837][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.399903][ T10] usb 8-1: config 0 descriptor?? [ 601.741252][T18450] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 602.031317][ T9] usb 8-1: USB disconnect, device number 115 [ 602.179729][T18453] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 602.201133][T18453] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 602.236690][T18455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4534'. [ 602.249205][T18453] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 602.271856][T18453] overlayfs: d_ino too big (., ino=4611686018427387926, xinobits=3) [ 602.292638][T18453] overlayfs: d_ino too big (gadget, ino=4611686018427391513, xinobits=3) [ 602.313015][T18453] overlayfs: d_ino too big (snd_seq, ino=4611686018427391704, xinobits=3) [ 602.322924][T18453] overlayfs: d_ino too big (netdevsim, ino=4611686018427415268, xinobits=3) [ 602.340918][T18453] overlayfs: d_ino too big (serio, ino=4611686018427391530, xinobits=3) [ 602.346832][T18453] overlayfs: d_ino too big (ulpi, ino=4611686018427391467, xinobits=3) [ 602.357910][T18453] overlayfs: d_ino too big (coreboot, ino=4611686018427391616, xinobits=3) [ 602.366340][T18453] overlayfs: d_ino too big (hdaudio, ino=4611686018427391710, xinobits=3) [ 602.371885][T18453] overlayfs: d_ino too big (iio, ino=4611686018427391646, xinobits=3) [ 602.378805][T18453] overlayfs: d_ino too big (firewire, ino=4611686018427415282, xinobits=3) [ 604.174321][T18480] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 604.187808][T18480] cramfs: wrong magic [ 604.205046][T18480] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4539'. [ 604.705536][T18492] FAULT_INJECTION: forcing a failure. [ 604.705536][T18492] name failslab, interval 1, probability 0, space 0, times 0 [ 604.709745][T18484] FAULT_INJECTION: forcing a failure. [ 604.709745][T18484] name failslab, interval 1, probability 0, space 0, times 0 [ 604.709770][T18484] CPU: 2 UID: 0 PID: 18484 Comm: syz.0.4541 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.709786][T18484] Tainted: [L]=SOFTLOCKUP [ 604.709791][T18484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 604.709798][T18484] Call Trace: [ 604.709803][T18484] [ 604.709808][T18484] dump_stack_lvl+0x100/0x190 [ 604.709826][T18484] should_fail_ex.cold+0x5/0xa [ 604.709840][T18484] should_failslab+0xc2/0x120 [ 604.709857][T18484] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 604.709876][T18484] ? __get_vm_area_node+0x101/0x330 [ 604.709894][T18484] __get_vm_area_node+0x101/0x330 [ 604.709913][T18484] __vmalloc_node_range_noprof+0x228/0x1630 [ 604.709931][T18484] ? xt_copy_counters+0x31e/0x530 [ 604.709952][T18484] ? look_up_lock_class+0x64/0x120 [ 604.709971][T18484] ? xt_copy_counters+0x31e/0x530 [ 604.709989][T18484] ? __lock_acquire+0x49f/0x1a40 [ 604.710009][T18484] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 604.710035][T18484] ? __might_fault+0xc5/0x140 [ 604.710048][T18484] ? __might_fault+0xc5/0x140 [ 604.710061][T18484] ? xt_copy_counters+0x31e/0x530 [ 604.710077][T18484] __vmalloc_node_noprof+0xad/0xf0 [ 604.710094][T18484] ? xt_copy_counters+0x31e/0x530 [ 604.710113][T18484] xt_copy_counters+0x31e/0x530 [ 604.710131][T18484] ? __pfx_xt_copy_counters+0x10/0x10 [ 604.710148][T18484] ? lock_acquire+0x1b9/0x370 [ 604.710165][T18484] ? rcu_is_watching+0x12/0xc0 [ 604.710181][T18484] ? bpf_lsm_capable+0x9/0x10 [ 604.710204][T18484] ? security_capable+0x80/0x260 [ 604.710219][T18484] do_ip6t_set_ctl+0x340/0xbe0 [ 604.710236][T18484] ? nf_sockopt_find.isra.0+0x222/0x290 [ 604.710255][T18484] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 604.710270][T18484] ? __mutex_unlock_slowpath+0x35d/0x930 [ 604.710289][T18484] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 604.710324][T18484] ? nf_sockopt_find.isra.0+0x222/0x290 [ 604.710341][T18484] nf_setsockopt+0x8d/0xf0 [ 604.710358][T18484] ipv6_setsockopt+0x135/0x170 [ 604.710375][T18484] tcp_setsockopt+0xa7/0x100 [ 604.710387][T18484] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 604.710403][T18484] do_sock_setsockopt+0xf3/0x1d0 [ 604.710416][T18484] __sys_setsockopt+0x119/0x190 [ 604.710435][T18484] __ia32_sys_setsockopt+0xbc/0x160 [ 604.710450][T18484] ? __do_fast_syscall_32+0x98/0x970 [ 604.710466][T18484] ? lockdep_hardirqs_on+0x78/0x100 [ 604.710480][T18484] __do_fast_syscall_32+0xe7/0x970 [ 604.710496][T18484] ? lockdep_hardirqs_on+0x78/0x100 [ 604.710511][T18484] do_fast_syscall_32+0x32/0x70 [ 604.710527][T18484] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.710543][T18484] RIP: 0023:0xf6feefec [ 604.710557][T18484] Code: Unable to access opcode bytes at 0xf6feefc2. [ 604.710563][T18484] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 604.710574][T18484] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 604.710581][T18484] RDX: 0000000000000041 RSI: 0000000080000140 RDI: 0000000000000064 [ 604.710588][T18484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 604.710594][T18484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.710601][T18484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 604.710615][T18484] [ 604.710699][T18484] syz.0.4541: vmalloc error: size 64, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 604.728665][T18492] CPU: 0 UID: 0 PID: 18492 Comm: syz.3.4543 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.728687][T18492] Tainted: [L]=SOFTLOCKUP [ 604.728691][T18492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 604.728698][T18492] Call Trace: [ 604.728703][T18492] [ 604.728709][T18492] dump_stack_lvl+0x100/0x190 [ 604.728727][T18492] should_fail_ex.cold+0x5/0xa [ 604.728756][T18492] should_failslab+0xc2/0x120 [ 604.728774][T18492] __kmalloc_cache_noprof+0x91/0x6c0 [ 604.728785][T18492] ? get_device_parent+0x260/0x4c0 [ 604.728804][T18492] ? get_device_parent+0x260/0x4c0 [ 604.728820][T18492] ? get_device_parent+0x29a/0x4c0 [ 604.728839][T18492] get_device_parent+0x29a/0x4c0 [ 604.728857][T18492] device_add+0x1ad/0x1970 [ 604.728868][T18492] ? __pfx_dev_set_name+0x10/0x10 [ 604.728881][T18492] ? __pfx_device_add+0x10/0x10 [ 604.728893][T18492] ? lockdep_init_map_type+0x5c/0x250 [ 604.728909][T18492] usb_add_gadget+0x455/0x920 [ 604.728954][T18492] ? swiotlb_dev_init+0xd/0x50 [ 604.728973][T18492] usb_add_gadget_udc+0x26/0x70 [ 604.728988][T18492] dummy_udc_probe+0x69e/0x960 [ 604.729004][T18492] ? __pfx_dummy_udc_probe+0x10/0x10 [ 604.729016][T18492] platform_probe+0x106/0x1d0 [ 604.729031][T18492] ? __pfx_platform_probe+0x10/0x10 [ 604.729048][T18492] really_probe+0x241/0xa60 [ 604.729067][T18492] __driver_probe_device+0x20e/0x450 [ 604.729085][T18492] device_driver_attach+0xd1/0x220 [ 604.729103][T18492] bind_store+0xf4/0x190 [ 604.729115][T18492] ? __pfx_bind_store+0x10/0x10 [ 604.729129][T18492] drv_attr_store+0x74/0xb0 [ 604.729141][T18492] ? __pfx_drv_attr_store+0x10/0x10 [ 604.729153][T18492] sysfs_kf_write+0xf2/0x150 [ 604.729170][T18492] kernfs_fop_write_iter+0x3e0/0x5f0 [ 604.729186][T18492] ? __pfx_sysfs_kf_write+0x10/0x10 [ 604.729203][T18492] vfs_write+0x6ac/0x1050 [ 604.729216][T18492] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 604.729230][T18492] ? __pfx_vfs_write+0x10/0x10 [ 604.729242][T18492] ? do_sys_openat2+0x159/0x1e0 [ 604.729258][T18492] ? __pfx_do_sys_openat2+0x10/0x10 [ 604.729275][T18492] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 604.729302][T18492] ksys_write+0x12a/0x250 [ 604.729312][T18492] ? __pfx_ksys_write+0x10/0x10 [ 604.729322][T18492] ? ksys_write+0x1ac/0x250 [ 604.729333][T18492] ? __pfx_ksys_write+0x10/0x10 [ 604.729346][T18492] __do_fast_syscall_32+0xe7/0x970 [ 604.729365][T18492] ? lockdep_hardirqs_on+0x78/0x100 [ 604.729381][T18492] do_fast_syscall_32+0x32/0x70 [ 604.729397][T18492] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.729413][T18492] RIP: 0023:0xf7f45fec [ 604.729427][T18492] Code: Unable to access opcode bytes at 0xf7f45fc2. [ 604.729433][T18492] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 604.729445][T18492] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000400 [ 604.729452][T18492] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 604.729459][T18492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 604.729466][T18492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.729473][T18492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 604.729487][T18492] [ 604.729538][T18492] dummy_udc dummy_udc.0: probe with driver dummy_udc failed with error -12 [ 604.730530][T18484] ,cpuset=/,mems_allowed=0-1 [ 604.912692][T18484] CPU: 2 UID: 0 PID: 18484 Comm: syz.0.4541 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.912710][T18484] Tainted: [L]=SOFTLOCKUP [ 604.912714][T18484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 604.912721][T18484] Call Trace: [ 604.912726][T18484] [ 604.912731][T18484] dump_stack_lvl+0x100/0x190 [ 604.912748][T18484] warn_alloc.cold+0x94/0xa8 [ 604.912760][T18484] ? __pfx_warn_alloc+0x10/0x10 [ 604.912773][T18484] ? __kasan_kmalloc+0x8a/0xb0 [ 604.912793][T18484] ? __get_vm_area_node+0x208/0x330 [ 604.912812][T18484] __vmalloc_node_range_noprof+0xccd/0x1630 [ 604.912831][T18484] ? look_up_lock_class+0x64/0x120 [ 604.912851][T18484] ? xt_copy_counters+0x31e/0x530 [ 604.912870][T18484] ? __lock_acquire+0x49f/0x1a40 [ 604.912892][T18484] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 604.912912][T18484] ? __might_fault+0xc5/0x140 [ 604.912924][T18484] ? __might_fault+0xc5/0x140 [ 604.912948][T18484] ? xt_copy_counters+0x31e/0x530 [ 604.912964][T18484] __vmalloc_node_noprof+0xad/0xf0 [ 604.912981][T18484] ? xt_copy_counters+0x31e/0x530 [ 604.913000][T18484] xt_copy_counters+0x31e/0x530 [ 604.913018][T18484] ? __pfx_xt_copy_counters+0x10/0x10 [ 604.913039][T18484] ? lock_acquire+0x1b9/0x370 [ 604.913056][T18484] ? rcu_is_watching+0x12/0xc0 [ 604.913073][T18484] ? bpf_lsm_capable+0x9/0x10 [ 604.913086][T18484] ? security_capable+0x80/0x260 [ 604.913101][T18484] do_ip6t_set_ctl+0x340/0xbe0 [ 604.913117][T18484] ? nf_sockopt_find.isra.0+0x222/0x290 [ 604.913135][T18484] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 604.913150][T18484] ? __mutex_unlock_slowpath+0x35d/0x930 [ 604.913168][T18484] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 604.913188][T18484] ? nf_sockopt_find.isra.0+0x222/0x290 [ 604.913205][T18484] nf_setsockopt+0x8d/0xf0 [ 604.913223][T18484] ipv6_setsockopt+0x135/0x170 [ 604.913241][T18484] tcp_setsockopt+0xa7/0x100 [ 604.913253][T18484] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 604.913267][T18484] do_sock_setsockopt+0xf3/0x1d0 [ 604.913280][T18484] __sys_setsockopt+0x119/0x190 [ 604.913299][T18484] __ia32_sys_setsockopt+0xbc/0x160 [ 604.913315][T18484] ? __do_fast_syscall_32+0x98/0x970 [ 604.913331][T18484] ? lockdep_hardirqs_on+0x78/0x100 [ 604.913346][T18484] __do_fast_syscall_32+0xe7/0x970 [ 604.913362][T18484] ? lockdep_hardirqs_on+0x78/0x100 [ 604.913378][T18484] do_fast_syscall_32+0x32/0x70 [ 604.913394][T18484] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.913409][T18484] RIP: 0023:0xf6feefec [ 604.913424][T18484] Code: Unable to access opcode bytes at 0xf6feefc2. [ 604.913430][T18484] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 604.913441][T18484] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 604.913448][T18484] RDX: 0000000000000041 RSI: 0000000080000140 RDI: 0000000000000064 [ 604.913455][T18484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 604.913461][T18484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.913468][T18484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 604.913482][T18484] [ 604.913487][T18484] Mem-Info: [ 605.007198][T18484] active_anon:3810 inactive_anon:4075 isolated_anon:0 [ 605.007198][T18484] active_file:6275 inactive_file:20833 isolated_file:0 [ 605.007198][T18484] unevictable:2109 dirty:374 writeback:0 [ 605.007198][T18484] slab_reclaimable:7059 slab_unreclaimable:70604 [ 605.007198][T18484] mapped:32955 shmem:5682 pagetables:1426 [ 605.007198][T18484] sec_pagetables:318 bounce:0 [ 605.007198][T18484] kernel_misc_reclaimable:0 [ 605.007198][T18484] free:26921 free_pcp:13785 free_cma:0 [ 605.020997][T18484] Node 0 active_anon:1176kB inactive_anon:80kB active_file:0kB inactive_file:2304kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4368kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8384kB pagetables:1204kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 605.031876][T18484] Node 1 active_anon:14064kB inactive_anon:16220kB active_file:25100kB inactive_file:81028kB unevictable:3704kB isolated(anon):0kB isolated(file):0kB mapped:127452kB dirty:1496kB writeback:0kB shmem:21192kB shmem_thp:6144kB shmem_pmdmapped:6144kB anon_thp:0kB kernel_stack:7904kB pagetables:4500kB sec_pagetables:164kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 605.058297][T18484] Node 0 DMA free:2900kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 605.067899][T18484] lowmem_reserve[]: 0 280 280 280 280 [ 605.069730][T18484] Node 0 DMA32 free:17412kB boost:4096kB min:16864kB low:20056kB high:23248kB reserved_highatomic:2048KB free_highatomic:64KB active_anon:1176kB inactive_anon:80kB active_file:0kB inactive_file:2304kB unevictable:1536kB writepending:0kB zspages:1580kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:8168kB local_pcp:1904kB free_cma:0kB [ 605.080013][T18484] lowmem_reserve[]: 0 0 0 0 0 [ 605.081456][T18484] Node 1 DMA32 free:88936kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13996kB inactive_anon:16220kB active_file:25100kB inactive_file:81028kB unevictable:1596kB writepending:1496kB zspages:4836kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:51200kB local_pcp:28848kB free_cma:0kB [ 605.092646][T18484] lowmem_reserve[]: 0 0 0 0 0 [ 605.094249][T18484] Node 0 DMA: 159*4kB (U) 7*8kB (U) 4*16kB (U) 5*32kB (U) 3*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2900kB [ 605.098553][T18484] Node 0 DMA32: 635*4kB (UMEH) 185*8kB (UMEH) 35*16kB (UME) 173*32kB (UME) 42*64kB (UME) 12*128kB (UME) 4*256kB (UE) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17412kB [ 605.103667][T18484] Node 1 DMA32: 1733*4kB (UME) 1244*8kB (UME) 176*16kB (UME) 131*32kB (UME) 49*64kB (UME) 48*128kB (UME) 58*256kB (UME) 26*512kB (UM) 1*1024kB (M) 5*2048kB (UM) 4*4096kB (U) = 88980kB [ 605.109295][T18484] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 605.112215][T18484] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 605.115224][T18484] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 605.118149][T18484] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 605.120923][T18484] 34039 total pagecache pages [ 605.122381][T18484] 1219 pages in swap cache [ 605.123809][T18484] Free swap = 93700kB [ 605.125072][T18484] Total swap = 124996kB [ 605.126404][T18484] 524155 pages RAM [ 605.128030][T18484] 0 pages HighMem/MovableOnly [ 605.129532][T18484] 211532 pages reserved [ 605.130766][T18484] 0 pages cma reserved [ 605.264443][T18502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4547'. [ 605.638066][ T24] usb 8-1: new full-speed USB device number 116 using dummy_hcd [ 605.687404][T17642] usb 46-1: device descriptor read/8, error -110 [ 605.802815][ T24] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 605.814771][ T24] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 605.825107][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 605.836333][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 605.843804][ T24] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 605.852671][ T24] usb 8-1: Product: syz [ 605.858607][ T24] usb 8-1: Manufacturer: syz [ 605.868714][ T24] usb 8-1: SerialNumber: syz [ 605.939535][ T24] usb 8-1: config 0 descriptor?? [ 605.950046][ T24] hub 8-1:0.0: bad descriptor, ignoring hub [ 605.956494][ T24] hub 8-1:0.0: probe with driver hub failed with error -5 [ 605.965757][T18518] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 605.972486][ T24] usb 8-1: selecting invalid altsetting 0 [ 606.162199][T18524] FAULT_INJECTION: forcing a failure. [ 606.162199][T18524] name failslab, interval 1, probability 0, space 0, times 0 [ 606.192405][T18524] CPU: 2 UID: 0 PID: 18524 Comm: syz.2.4555 Tainted: G L syzkaller #0 PREEMPT(full) [ 606.192426][T18524] Tainted: [L]=SOFTLOCKUP [ 606.192430][T18524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 606.192438][T18524] Call Trace: [ 606.192443][T18524] [ 606.192448][T18524] dump_stack_lvl+0x100/0x190 [ 606.192467][T18524] should_fail_ex.cold+0x5/0xa [ 606.192481][T18524] should_failslab+0xc2/0x120 [ 606.192498][T18524] kmem_cache_alloc_noprof+0x91/0x6a0 [ 606.192513][T18524] ? find_held_lock+0x2b/0x80 [ 606.192529][T18524] ? fuse_request_alloc+0x22/0x200 [ 606.192571][T18524] fuse_request_alloc+0x22/0x200 [ 606.192585][T18524] fuse_get_req+0x20a/0x400 [ 606.192599][T18524] ? __pfx_fuse_get_req+0x10/0x10 [ 606.192614][T18524] ? __pfx_autoremove_wake_function+0x10/0x10 [ 606.192647][T18524] ? __pfx_from_kgid+0x10/0x10 [ 606.192672][T18524] fuse_chan_send+0x257/0x9a0 [ 606.192692][T18524] __fuse_simple_request+0x18e/0x1e0 [ 606.192711][T18524] fuse_lookup_name+0x2a6/0x780 [ 606.192725][T18524] ? __pfx_fuse_lookup_name+0x10/0x10 [ 606.192738][T18524] ? __pfx___mutex_lock+0x10/0x10 [ 606.192762][T18524] ? find_held_lock+0x2b/0x80 [ 606.192780][T18524] fuse_lookup+0x209/0x550 [ 606.192793][T18524] ? __pfx_fuse_lookup+0x10/0x10 [ 606.192813][T18524] ? down_read+0x13b/0x4c0 [ 606.192830][T18524] ? __pfx_down_read+0x10/0x10 [ 606.192848][T18524] __lookup_slow+0x155/0x320 [ 606.192865][T18524] lookup_slow+0x50/0x70 [ 606.192881][T18524] path_lookupat+0x5e8/0xc40 [ 606.192898][T18524] ? __do_fast_syscall_32+0xe7/0x970 [ 606.192913][T18524] ? do_fast_syscall_32+0x32/0x70 [ 606.192931][T18524] filename_lookup+0x202/0x590 [ 606.192951][T18524] ? __pfx_filename_lookup+0x10/0x10 [ 606.192985][T18524] ? find_held_lock+0x2b/0x80 [ 606.192999][T18524] ? __might_fault+0xc5/0x140 [ 606.193011][T18524] ? __might_fault+0xc5/0x140 [ 606.193025][T18524] vfs_statx+0xff/0x3f0 [ 606.193040][T18524] ? __pfx_vfs_statx+0x10/0x10 [ 606.193054][T18524] ? do_getname+0x191/0x390 [ 606.193070][T18524] __do_compat_sys_newstat+0xaa/0x130 [ 606.193085][T18524] ? __pfx___do_compat_sys_newstat+0x10/0x10 [ 606.193108][T18524] ? ksys_write+0x1ac/0x250 [ 606.193119][T18524] ? __pfx_ksys_write+0x10/0x10 [ 606.193132][T18524] __do_fast_syscall_32+0xe7/0x970 [ 606.193148][T18524] ? lockdep_hardirqs_on+0x78/0x100 [ 606.193165][T18524] do_fast_syscall_32+0x32/0x70 [ 606.193181][T18524] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 606.193197][T18524] RIP: 0023:0xf707efec [ 606.193211][T18524] Code: Unable to access opcode bytes at 0xf707efc2. [ 606.193217][T18524] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 000000000000006a [ 606.193228][T18524] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000000 [ 606.193235][T18524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 606.193241][T18524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 606.193248][T18524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.193255][T18524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 606.193269][T18524] [ 606.482638][T18531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4557'. [ 606.543302][T18521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.569963][T18521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.610947][T17642] usb usb46-port1: attempt power cycle [ 606.717366][T15245] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.720236][T15245] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.722990][T15245] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.728784][T15245] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.762303][ T24] usb 8-1: USB disconnect, device number 116 [ 606.790693][T18540] UDC core: g1: couldn't find an available UDC or it's busy [ 606.881009][T18546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.937457][ T24] usb 8-1: new high-speed USB device number 117 using dummy_hcd [ 607.108621][ T24] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 607.111269][ T24] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 607.114641][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 607.118917][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 607.121921][ T24] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 607.124952][ T24] usb 8-1: Product: syz [ 607.126633][ T24] usb 8-1: Manufacturer: syz [ 607.128252][ T5832] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 607.131801][ T24] usb 8-1: SerialNumber: syz [ 607.134669][ T24] usb 8-1: config 0 descriptor?? [ 607.140412][ T24] hub 8-1:0.0: bad descriptor, ignoring hub [ 607.142439][ T24] hub 8-1:0.0: probe with driver hub failed with error -5 [ 607.146181][ T24] usb 8-1: selecting invalid altsetting 0 [ 607.167927][T17642] usb usb46-port1: unable to enumerate USB device [ 607.280169][ T5832] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.289209][ T5832] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 607.302144][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.315565][ T5832] usb 7-1: config 0 descriptor?? [ 607.322187][ T5832] pwc: Askey VC010 type 2 USB webcam detected. [ 607.658439][T17294] usb 8-1: USB disconnect, device number 117 [ 607.724346][ T5832] pwc: recv_control_msg error -32 req 02 val 2b00 [ 607.730027][ T5832] pwc: recv_control_msg error -32 req 02 val 2700 [ 607.737637][ T5832] pwc: recv_control_msg error -71 req 02 val 2c00 [ 607.741056][ T5832] pwc: recv_control_msg error -71 req 04 val 1000 [ 607.743876][ T5832] pwc: recv_control_msg error -71 req 04 val 1300 [ 607.747679][ T5832] pwc: recv_control_msg error -71 req 04 val 1400 [ 607.750452][ T5832] pwc: recv_control_msg error -71 req 02 val 2000 [ 607.752855][ T5832] pwc: recv_control_msg error -71 req 02 val 2100 [ 607.755235][ T5832] pwc: recv_control_msg error -71 req 04 val 1500 [ 607.757827][ T5832] pwc: recv_control_msg error -71 req 02 val 2500 [ 607.761420][ T5832] pwc: recv_control_msg error -71 req 02 val 2400 [ 607.763833][ T5832] pwc: recv_control_msg error -71 req 02 val 2600 [ 607.766160][ T5832] pwc: recv_control_msg error -71 req 02 val 2900 [ 607.768684][ T5832] pwc: recv_control_msg error -71 req 02 val 2800 [ 607.771111][ T5832] pwc: recv_control_msg error -71 req 04 val 1100 [ 607.773491][ T5832] pwc: recv_control_msg error -71 req 04 val 1200 [ 607.776458][ T5832] pwc: Registered as video103. [ 607.781703][ T5832] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb7/7-1/input/input147 [ 607.798714][ T5832] usb 7-1: USB disconnect, device number 118 [ 608.351873][T18567] UDC core: g1: couldn't find an available UDC or it's busy [ 608.457680][T18575] 9p: Bad value for 'version' [ 608.534408][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 608.534423][ T42] audit: type=1800 audit(1785910728.540:96): pid=18578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4575" name="zoned" dev="configfs" ino=101322 res=0 errno=0 [ 608.543887][T18578] null_blk: nullb1: using native zone append [ 608.568245][ T42] audit: type=1800 audit(1785910728.540:97): pid=18578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4575" name="memory_backed" dev="configfs" ino=101323 res=0 errno=0 [ 608.586679][ T42] audit: type=1800 audit(1785910728.540:98): pid=18578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4575" name="zone_nr_conv" dev="configfs" ino=101324 res=0 errno=0 [ 608.602231][ T42] audit: type=1800 audit(1785910728.540:99): pid=18578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4575" name="power" dev="configfs" ino=101325 res=0 errno=0 [ 608.713181][T18589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.716458][T18581] block device autoloading is deprecated and will be removed. [ 608.819366][T18578] null_blk: disk nullb1 created [ 608.967909][ T41] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 609.110989][T18600] UDC core: g1: couldn't find an available UDC or it's busy [ 609.138529][ T41] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.138730][T15245] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 609.169292][T15245] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 609.178188][T15245] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 609.185615][T15245] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 609.230731][T18603] Bluetooth: MGMT ver 1.23 [ 609.649707][T18610] FAULT_INJECTION: forcing a failure. [ 609.649707][T18610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.659548][T18610] CPU: 0 UID: 0 PID: 18610 Comm: syz.0.4585 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.659580][T18610] Tainted: [L]=SOFTLOCKUP [ 609.659587][T18610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 609.659598][T18610] Call Trace: [ 609.659605][T18610] [ 609.659620][T18610] dump_stack_lvl+0x100/0x190 [ 609.659649][T18610] should_fail_ex.cold+0x5/0xa [ 609.659670][T18610] _copy_from_user+0x2e/0xd0 [ 609.659702][T18610] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 609.659725][T18610] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 609.659754][T18610] do_sock_getsockopt+0x2d0/0x6e0 [ 609.659779][T18610] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 609.659805][T18610] ? find_held_lock+0x2b/0x80 [ 609.659835][T18610] ? __fget_files+0x21f/0x3d0 [ 609.659860][T18610] __sys_getsockopt+0x133/0x1d0 [ 609.659892][T18610] ? __ia32_sys_getsockopt+0xbc/0x160 [ 609.659917][T18610] __ia32_sys_getsockopt+0xbc/0x160 [ 609.659942][T18610] ? __do_fast_syscall_32+0x98/0x970 [ 609.659985][T18610] ? lockdep_hardirqs_on+0x78/0x100 [ 609.660008][T18610] __do_fast_syscall_32+0xe7/0x970 [ 609.660031][T18610] ? lockdep_hardirqs_on+0x78/0x100 [ 609.660055][T18610] do_fast_syscall_32+0x32/0x70 [ 609.660080][T18610] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 609.660104][T18610] RIP: 0023:0xf6feefec [ 609.660126][T18610] Code: Unable to access opcode bytes at 0xf6feefc2. [ 609.660134][T18610] RSP: 002b:00000000f53bc50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 609.660153][T18610] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 609.660164][T18610] RDX: 0000000000000007 RSI: 00000000800003c0 RDI: 0000000080000440 [ 609.660175][T18610] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 609.660185][T18610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.660196][T18610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 609.660221][T18610] [ 609.744658][ T41] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 609.747652][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.751489][ T41] usb 9-1: config 0 descriptor?? [ 609.755500][ T41] pwc: Askey VC010 type 2 USB webcam detected. [ 610.162406][ T41] pwc: recv_control_msg error -32 req 02 val 2b00 [ 610.176067][ T41] pwc: recv_control_msg error -32 req 02 val 2700 [ 610.192106][ T41] pwc: recv_control_msg error -71 req 02 val 2c00 [ 610.199424][ T41] pwc: recv_control_msg error -71 req 04 val 1000 [ 610.212694][ T41] pwc: recv_control_msg error -71 req 04 val 1300 [ 610.220898][ T41] pwc: recv_control_msg error -71 req 04 val 1400 [ 610.228744][ T41] pwc: recv_control_msg error -71 req 02 val 2000 [ 610.242837][ T41] pwc: recv_control_msg error -71 req 02 val 2100 [ 610.256867][ T41] pwc: recv_control_msg error -71 req 04 val 1500 [ 610.264112][ T41] pwc: recv_control_msg error -71 req 02 val 2500 [ 610.271278][ T41] pwc: recv_control_msg error -71 req 02 val 2400 [ 610.282370][ T41] pwc: recv_control_msg error -71 req 02 val 2600 [ 610.286392][ T41] pwc: recv_control_msg error -71 req 02 val 2900 [ 610.309031][ T41] pwc: recv_control_msg error -71 req 02 val 2800 [ 610.312334][ T41] pwc: recv_control_msg error -71 req 04 val 1100 [ 610.315834][ T41] pwc: recv_control_msg error -71 req 04 val 1200 [ 610.321565][ T41] pwc: Registered as video103. [ 610.335132][ T41] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb9/9-1/input/input148 [ 610.359043][ T41] usb 9-1: USB disconnect, device number 72 [ 610.657982][T18621] input input149: cannot allocate more than FF_MAX_EFFECTS effects [ 611.157118][ T9] usb 7-1: new full-speed USB device number 119 using dummy_hcd [ 611.310515][ T9] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 611.316675][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.322242][ T9] usb 7-1: Product: syz [ 611.325922][ T9] usb 7-1: Manufacturer: syz [ 611.331317][ T9] usb 7-1: SerialNumber: syz [ 611.357110][T18638] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 611.364519][T18638] cramfs: wrong magic [ 611.373681][T18638] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4594'. [ 611.759648][ T9] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 119 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 611.786255][T18644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.810132][T18644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.817295][T18646] FAULT_INJECTION: forcing a failure. [ 611.817295][T18646] name failslab, interval 1, probability 0, space 0, times 0 [ 611.821229][T18646] CPU: 2 UID: 0 PID: 18646 Comm: syz.3.4598 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.821247][T18646] Tainted: [L]=SOFTLOCKUP [ 611.821252][T18646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 611.821259][T18646] Call Trace: [ 611.821263][T18646] [ 611.821268][T18646] dump_stack_lvl+0x100/0x190 [ 611.821287][T18646] should_fail_ex.cold+0x5/0xa [ 611.821298][T18646] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 611.821314][T18646] should_failslab+0xc2/0x120 [ 611.821330][T18646] kmem_cache_alloc_noprof+0x91/0x6a0 [ 611.821345][T18646] ? skb_clone+0x190/0x400 [ 611.821366][T18646] skb_clone+0x190/0x400 [ 611.821382][T18646] netlink_deliver_tap+0xaed/0xcc0 [ 611.821400][T18646] netlink_unicast+0x62b/0x850 [ 611.821415][T18646] ? __pfx_netlink_unicast+0x10/0x10 [ 611.821432][T18646] netlink_sendmsg+0x8b0/0xda0 [ 611.821448][T18646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.821463][T18646] ? apparmor_socket_sendmsg+0x15b/0x270 [ 611.821480][T18646] ____sys_sendmsg+0xa4d/0xbe0 [ 611.821492][T18646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.821506][T18646] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.821525][T18646] ___sys_sendmsg+0x190/0x1e0 [ 611.821539][T18646] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.821559][T18646] ? find_held_lock+0x2b/0x80 [ 611.821582][T18646] __sys_sendmsg+0x160/0x210 [ 611.821599][T18646] ? __pfx___sys_sendmsg+0x10/0x10 [ 611.821619][T18646] ? __pfx_ksys_write+0x10/0x10 [ 611.821633][T18646] __do_fast_syscall_32+0xe7/0x970 [ 611.821651][T18646] ? lockdep_hardirqs_on+0x78/0x100 [ 611.821667][T18646] do_fast_syscall_32+0x32/0x70 [ 611.821684][T18646] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 611.821699][T18646] RIP: 0023:0xf7f45fec [ 611.821712][T18646] Code: Unable to access opcode bytes at 0xf7f45fc2. [ 611.821718][T18646] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 611.821730][T18646] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 611.821737][T18646] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 611.821744][T18646] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 611.821750][T18646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.821757][T18646] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 611.821771][T18646] [ 611.925745][T18649] FAULT_INJECTION: forcing a failure. [ 611.925745][T18649] name failslab, interval 1, probability 0, space 0, times 0 [ 611.932409][T18649] CPU: 2 UID: 0 PID: 18649 Comm: syz.3.4599 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.932429][T18649] Tainted: [L]=SOFTLOCKUP [ 611.932433][T18649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 611.932440][T18649] Call Trace: [ 611.932444][T18649] [ 611.932462][T18649] dump_stack_lvl+0x100/0x190 [ 611.932483][T18649] should_fail_ex.cold+0x5/0xa [ 611.932496][T18649] should_failslab+0xc2/0x120 [ 611.932513][T18649] __kmalloc_noprof+0xfc/0x820 [ 611.932528][T18649] ? tomoyo_encode2+0xfb/0x3c0 [ 611.932549][T18649] tomoyo_encode2+0xfb/0x3c0 [ 611.932568][T18649] tomoyo_encode+0x29/0x50 [ 611.932584][T18649] tomoyo_realpath_from_path+0x18c/0x690 [ 611.932606][T18649] tomoyo_mount_acl+0x1b6/0x8b0 [ 611.932621][T18649] ? is_bpf_text_address+0x8a/0x1a0 [ 611.932638][T18649] ? is_bpf_text_address+0x8a/0x1a0 [ 611.932655][T18649] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 611.932674][T18649] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 611.932690][T18649] ? kernel_text_address+0x8d/0x100 [ 611.932709][T18649] ? unwind_get_return_address+0x59/0xa0 [ 611.932727][T18649] ? arch_stack_walk+0xa6/0xf0 [ 611.932755][T18649] ? tomoyo_domain+0xb2/0x150 [ 611.932766][T18649] ? tomoyo_profile+0x47/0x60 [ 611.932779][T18649] tomoyo_mount_permission+0x214/0x460 [ 611.932795][T18649] ? tomoyo_mount_permission+0x1f6/0x460 [ 611.932812][T18649] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 611.932837][T18649] security_sb_mount+0xdd/0x270 [ 611.932852][T18649] path_mount+0x158/0x23d0 [ 611.932869][T18649] ? __pfx_path_mount+0x10/0x10 [ 611.932882][T18649] ? lockdep_hardirqs_on+0x78/0x100 [ 611.932899][T18649] ? putname+0xb1/0x110 [ 611.932912][T18649] ? kmem_cache_free+0x127/0x6b0 [ 611.932928][T18649] ? __ia32_sys_mount+0x292/0x310 [ 611.932941][T18649] __ia32_sys_mount+0x292/0x310 [ 611.932955][T18649] ? __pfx___ia32_sys_mount+0x10/0x10 [ 611.932968][T18649] ? ksys_write+0x1ac/0x250 [ 611.932983][T18649] ? __pfx_ksys_write+0x10/0x10 [ 611.932997][T18649] __do_fast_syscall_32+0xe7/0x970 [ 611.933014][T18649] ? lockdep_hardirqs_on+0x78/0x100 [ 611.933029][T18649] do_fast_syscall_32+0x32/0x70 [ 611.933046][T18649] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 611.933062][T18649] RIP: 0023:0xf7f45fec [ 611.933076][T18649] Code: Unable to access opcode bytes at 0xf7f45fc2. [ 611.933082][T18649] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 611.933094][T18649] RAX: ffffffffffffffda RBX: 0000000080000200 RCX: 0000000080000100 [ 611.933101][T18649] RDX: 0000000080000300 RSI: 0000000000800000 RDI: 0000000000000000 [ 611.933108][T18649] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 611.933114][T18649] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 611.933121][T18649] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 611.933135][T18649] [ 611.933227][T18649] ERROR: Out of memory at tomoyo_realpath_from_path. [ 611.951243][T18642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4595'. [ 612.142081][T18658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.175287][T18660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4602'. [ 612.388602][ T41] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 612.557374][ T5832] usb 8-1: new high-speed USB device number 118 using dummy_hcd [ 612.562246][ T41] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.566341][ T41] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 612.570979][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.574598][T18672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4607'. [ 612.579301][ T41] usb 9-1: config 0 descriptor?? [ 612.581109][T18672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.584716][T18672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.589095][ T41] pwc: Askey VC010 type 2 USB webcam detected. [ 612.600600][T18672] team_slave_0: entered promiscuous mode [ 612.737279][ T5832] usb 8-1: Using ep0 maxpacket: 32 [ 612.740829][ T5832] usb 8-1: unable to get BOS descriptor or descriptor too short [ 612.744284][ T5832] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 612.747117][ T5832] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 612.749870][ T5832] usb 8-1: config 14 has no interface number 0 [ 612.751893][ T5832] usb 8-1: config 14 has no interface number 1 [ 612.753983][ T5832] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 612.757568][ T5832] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 612.761203][ T5832] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 612.764797][ T5832] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 612.768595][ T5832] usb 8-1: config 14 interface 57 has no altsetting 0 [ 612.770833][ T5832] usb 8-1: config 14 interface 228 has no altsetting 0 [ 612.775062][ T5832] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 612.778059][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.780781][ T5832] usb 8-1: Product: syz [ 612.782181][ T5832] usb 8-1: Manufacturer: syz [ 612.783767][ T5832] usb 8-1: SerialNumber: syz [ 612.988817][ T41] pwc: recv_control_msg error -32 req 02 val 2b00 [ 612.992429][ T41] pwc: recv_control_msg error -32 req 02 val 2700 [ 612.997786][ T41] pwc: recv_control_msg error -71 req 02 val 2c00 [ 613.000781][ T41] pwc: recv_control_msg error -71 req 04 val 1000 [ 613.003744][ T41] pwc: recv_control_msg error -71 req 04 val 1300 [ 613.006658][ T41] pwc: recv_control_msg error -71 req 04 val 1400 [ 613.009775][ T41] pwc: recv_control_msg error -71 req 02 val 2000 [ 613.012287][ T41] pwc: recv_control_msg error -71 req 02 val 2100 [ 613.014741][ T41] pwc: recv_control_msg error -71 req 04 val 1500 [ 613.017172][ T41] pwc: recv_control_msg error -71 req 02 val 2500 [ 613.019849][ T41] pwc: recv_control_msg error -71 req 02 val 2400 [ 613.022258][ T41] pwc: recv_control_msg error -71 req 02 val 2600 [ 613.024685][ T41] pwc: recv_control_msg error -71 req 02 val 2900 [ 613.027090][ T41] pwc: recv_control_msg error -71 req 02 val 2800 [ 613.031036][ T41] pwc: recv_control_msg error -71 req 04 val 1100 [ 613.033444][ T41] pwc: recv_control_msg error -71 req 04 val 1200 [ 613.036844][ T41] pwc: Registered as video103. [ 613.040391][ T41] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb9/9-1/input/input152 [ 613.049735][ T41] usb 9-1: USB disconnect, device number 73 [ 613.256134][ T24] IPVS: starting estimator thread 0... [ 613.347409][T18676] IPVS: using max 42 ests per chain, 100800 per kthread [ 613.764044][T17642] usb 7-1: USB disconnect, device number 119 [ 613.809668][T17642] usblp0: removed [ 614.087987][T18686] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4610'. [ 614.557182][T18694] input: syz0 as /devices/virtual/input/input153 [ 614.639921][T18688] netlink: 34 bytes leftover after parsing attributes in process `syz.2.4611'. [ 614.642946][T18688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4611'. [ 615.325089][ T5832] legousbtower 8-1:14.57: interrupt endpoints not found [ 615.334858][ T5832] legousbtower 8-1:14.228: interrupt endpoints not found [ 615.340867][ T5832] usb 8-1: USB disconnect, device number 118 [ 615.362734][T18705] kAFS: No cell specified [ 615.429703][T18708] netlink: 'syz.4.4617': attribute type 1 has an invalid length. [ 615.439430][T18708] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4617'. [ 615.553189][T18715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4618'. [ 615.562308][T18715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4618'. [ 615.617408][T18672] team_slave_0: left promiscuous mode [ 616.009861][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4622'. [ 616.029842][T18726] netlink: 'syz.2.4623': attribute type 4 has an invalid length. [ 616.812179][T18754] netlink: 'syz.2.4631': attribute type 1 has an invalid length. [ 616.830900][T18754] 8021q: adding VLAN 0 to HW filter on device bond19 [ 616.864979][T18754] bond19: (slave geneve3): making interface the new active one [ 616.869016][T18754] bond19: (slave geneve3): Enslaving as an active interface with an up link [ 616.890376][T15920] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 616.899604][T15920] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 616.912772][T15920] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 616.923209][T15920] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 617.347401][T15866] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.359154][T15866] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 617.362702][T15866] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 617.365562][T15866] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.370714][T15866] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 617.373734][T15866] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 617.376486][T15866] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.383578][T15866] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 617.386359][T15866] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 617.389920][T15866] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.392837][T15866] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 617.395577][T15866] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 617.984888][T18772] FAULT_INJECTION: forcing a failure. [ 617.984888][T18772] name failslab, interval 1, probability 0, space 0, times 0 [ 617.990254][T18772] CPU: 2 UID: 0 PID: 18772 Comm: syz.4.4637 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.990281][T18772] Tainted: [L]=SOFTLOCKUP [ 617.990287][T18772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 617.990297][T18772] Call Trace: [ 617.990305][T18772] [ 617.990313][T18772] dump_stack_lvl+0x100/0x190 [ 617.990338][T18772] should_fail_ex.cold+0x5/0xa [ 617.990359][T18772] should_failslab+0xc2/0x120 [ 617.990383][T18772] __kmalloc_noprof+0xfc/0x820 [ 617.990405][T18772] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 617.990429][T18772] kernfs_fop_write_iter+0x26a/0x5f0 [ 617.990452][T18772] vfs_write+0x6ac/0x1050 [ 617.990470][T18772] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 617.990491][T18772] ? __pfx_vfs_write+0x10/0x10 [ 617.990504][T18772] ? find_held_lock+0x2b/0x80 [ 617.990541][T18772] ksys_write+0x12a/0x250 [ 617.990557][T18772] ? __pfx_ksys_write+0x10/0x10 [ 617.990577][T18772] ? ksys_write+0x1ac/0x250 [ 617.990591][T18772] ? __pfx_ksys_write+0x10/0x10 [ 617.990611][T18772] __do_fast_syscall_32+0xe7/0x970 [ 617.990636][T18772] ? lockdep_hardirqs_on+0x78/0x100 [ 617.990660][T18772] do_fast_syscall_32+0x32/0x70 [ 617.990683][T18772] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 617.990704][T18772] RIP: 0023:0xf6fdefec [ 617.990723][T18772] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 617.990731][T18772] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 617.990748][T18772] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 617.990758][T18772] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 617.990767][T18772] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 617.990810][T18772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.990822][T18772] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 617.990844][T18772] [ 618.323497][T18775] __nla_validate_parse: 1 callbacks suppressed [ 618.323511][T18775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4638'. [ 618.886288][T18786] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4640'. [ 619.101128][T18794] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 619.103809][T18794] cramfs: wrong magic [ 619.106211][T18794] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4642'. [ 619.308306][ T5832] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 619.480100][ T5832] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 619.492769][ T5832] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 619.508028][ T5832] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 619.523672][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.567193][ T5832] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 619.588726][ T5832] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 620.033487][T18810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4646'. [ 620.152203][ T24] usb 7-1: USB disconnect, device number 120 [ 620.175406][ T24] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 620.190335][ T24] spcp8x5 7-1:1.0: device disconnected [ 620.213375][T18818] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4649'. [ 620.319141][T18824] FAULT_INJECTION: forcing a failure. [ 620.319141][T18824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.323393][T18824] CPU: 0 UID: 0 PID: 18824 Comm: syz.2.4652 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.323411][T18824] Tainted: [L]=SOFTLOCKUP [ 620.323416][T18824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 620.323423][T18824] Call Trace: [ 620.323428][T18824] [ 620.323432][T18824] dump_stack_lvl+0x100/0x190 [ 620.323450][T18824] should_fail_ex.cold+0x5/0xa [ 620.323464][T18824] _copy_from_user+0x2e/0xd0 [ 620.323484][T18824] compat_do_replace+0x46d/0x500 [ 620.323502][T18824] ? __pfx_compat_do_replace+0x10/0x10 [ 620.323517][T18824] ? sockopt_release_sock+0x57/0x70 [ 620.323543][T18824] ? bpf_lsm_capable+0x9/0x10 [ 620.323560][T18824] ? security_capable+0x80/0x260 [ 620.323576][T18824] do_ip6t_set_ctl+0x2cb/0xbe0 [ 620.323590][T18824] ? nf_sockopt_find.isra.0+0x222/0x290 [ 620.323609][T18824] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 620.323624][T18824] ? __mutex_unlock_slowpath+0x35d/0x930 [ 620.323643][T18824] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 620.323660][T18824] ? __pfx___might_resched+0x10/0x10 [ 620.323684][T18824] ? nf_sockopt_find.isra.0+0x222/0x290 [ 620.323701][T18824] nf_setsockopt+0x8d/0xf0 [ 620.323717][T18824] ipv6_setsockopt+0x135/0x170 [ 620.323734][T18824] udpv6_setsockopt+0x64/0xb0 [ 620.323752][T18824] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 620.323766][T18824] do_sock_setsockopt+0xf3/0x1d0 [ 620.323779][T18824] __sys_setsockopt+0x119/0x190 [ 620.323798][T18824] __ia32_sys_setsockopt+0xbc/0x160 [ 620.323815][T18824] __do_fast_syscall_32+0xe7/0x970 [ 620.323832][T18824] ? lockdep_hardirqs_on+0x78/0x100 [ 620.323849][T18824] do_fast_syscall_32+0x32/0x70 [ 620.323865][T18824] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 620.323881][T18824] RIP: 0023:0xf707efec [ 620.323894][T18824] Code: Unable to access opcode bytes at 0xf707efc2. [ 620.323900][T18824] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 620.323911][T18824] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000029 [ 620.323919][T18824] RDX: 0000000000000040 RSI: 0000000080000340 RDI: 0000000000000328 [ 620.323926][T18824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.323932][T18824] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 620.323939][T18824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.323953][T18824] [ 620.449670][T18826] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 620.478310][T18826] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 620.481945][T18826] overlayfs: failed to look up (tracing) for ino (-66) [ 620.890616][T18835] lo speed is unknown, defaulting to 1000 [ 620.892563][T18835] lo speed is unknown, defaulting to 1000 [ 620.895573][T18835] lo speed is unknown, defaulting to 1000 [ 620.898037][T18835] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 620.904228][T18835] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 620.911323][T18835] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 620.914862][T18837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4658'. [ 620.922171][T18835] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 620.932000][T18837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4658'. [ 620.946270][T18842] sysfs: Unknown parameter ' ' [ 620.953575][T18843] netlink: 'syz.3.4659': attribute type 1 has an invalid length. [ 621.069166][T18835] lo speed is unknown, defaulting to 1000 [ 621.073504][T18835] lo speed is unknown, defaulting to 1000 [ 621.084158][T18835] lo speed is unknown, defaulting to 1000 [ 621.108499][T18835] lo speed is unknown, defaulting to 1000 [ 621.121679][T18835] lo speed is unknown, defaulting to 1000 [ 621.140327][T18846] syz.0.4660: vmalloc error: size 4096, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 621.153183][T18846] CPU: 2 UID: 0 PID: 18846 Comm: syz.0.4660 Tainted: G L syzkaller #0 PREEMPT(full) [ 621.153218][T18846] Tainted: [L]=SOFTLOCKUP [ 621.153224][T18846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 621.153243][T18846] Call Trace: [ 621.153249][T18846] [ 621.153255][T18846] dump_stack_lvl+0x100/0x190 [ 621.153274][T18846] warn_alloc.cold+0x94/0xa8 [ 621.153288][T18846] ? __pfx_warn_alloc+0x10/0x10 [ 621.153301][T18846] ? policy_nodemask+0xed/0x4f0 [ 621.153321][T18846] ? alloc_pages_mpol+0x25a/0x540 [ 621.153338][T18846] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 621.153355][T18846] ? __kmalloc_node_noprof+0x357/0x830 [ 621.153369][T18846] ? __get_vm_area_node+0x1c0/0x330 [ 621.153386][T18846] ? __get_vm_area_node+0x208/0x330 [ 621.153405][T18846] __vmalloc_node_range_noprof+0x13f6/0x1630 [ 621.153424][T18846] ? stack_trace_save+0x8e/0xc0 [ 621.153441][T18846] ? __pfx_stack_trace_save+0x10/0x10 [ 621.153459][T18846] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 621.153479][T18846] ? do_seccomp+0x7ae/0x2740 [ 621.153492][T18846] ? __do_fast_syscall_32+0xe7/0x970 [ 621.153509][T18846] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 621.153533][T18846] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 621.153549][T18846] __vmalloc_node_noprof+0xad/0xf0 [ 621.153566][T18846] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 621.153588][T18846] __vmalloc_noprof+0xa3/0x120 [ 621.153606][T18846] ? __pfx___vmalloc_noprof+0x10/0x10 [ 621.153628][T18846] bpf_prog_alloc_no_stats+0x58/0x640 [ 621.153646][T18846] bpf_prog_alloc+0x3b/0x200 [ 621.153662][T18846] bpf_prog_create_from_user+0xb4/0x2f0 [ 621.153676][T18846] ? __pfx_seccomp_check_filter+0x10/0x10 [ 621.153689][T18846] do_seccomp+0x7f7/0x2740 [ 621.153702][T18846] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 621.153721][T18846] ? __pfx_do_seccomp+0x10/0x10 [ 621.153734][T18846] ? xfd_validate_state+0x129/0x190 [ 621.153755][T18846] __do_fast_syscall_32+0xe7/0x970 [ 621.153773][T18846] do_fast_syscall_32+0x32/0x70 [ 621.153794][T18846] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 621.153809][T18846] RIP: 0023:0xf6feefec [ 621.153824][T18846] Code: Unable to access opcode bytes at 0xf6feefc2. [ 621.153830][T18846] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000162 [ 621.153842][T18846] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000 [ 621.153850][T18846] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 621.153856][T18846] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 621.153863][T18846] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 621.153870][T18846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 621.153884][T18846] [ 621.153974][T18846] Mem-Info: [ 621.275346][T18846] active_anon:2657 inactive_anon:2934 isolated_anon:0 [ 621.275346][T18846] active_file:7122 inactive_file:13902 isolated_file:0 [ 621.275346][T18846] unevictable:768 dirty:308 writeback:0 [ 621.275346][T18846] slab_reclaimable:7102 slab_unreclaimable:70282 [ 621.275346][T18846] mapped:29033 shmem:3425 pagetables:1516 [ 621.275346][T18846] sec_pagetables:318 bounce:0 [ 621.275346][T18846] kernel_misc_reclaimable:0 [ 621.275346][T18846] free:33114 free_pcp:16236 free_cma:0 [ 621.295430][T18846] Node 0 active_anon:1176kB inactive_anon:80kB active_file:228kB inactive_file:1700kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4368kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8352kB pagetables:1204kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 621.308920][T18846] Node 1 active_anon:9452kB inactive_anon:11656kB active_file:28260kB inactive_file:53908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111764kB dirty:1232kB writeback:0kB shmem:12164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7992kB pagetables:4792kB sec_pagetables:164kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 621.320919][T18846] Node 0 DMA free:2772kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:0kB [ 621.331117][T18846] lowmem_reserve[]: 0 280 280 280 280 [ 621.332901][T18846] Node 0 DMA32 free:18624kB boost:20480kB min:33248kB low:36440kB high:39632kB reserved_highatomic:2048KB free_highatomic:64KB active_anon:1176kB inactive_anon:80kB active_file:228kB inactive_file:1700kB unevictable:1536kB writepending:0kB zspages:1720kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:7132kB local_pcp:176kB free_cma:0kB [ 621.347557][T18846] lowmem_reserve[]: 0 0 0 0 0 [ 621.349152][T18846] Node 1 DMA32 free:111060kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9408kB inactive_anon:11668kB active_file:28260kB inactive_file:53908kB unevictable:1536kB writepending:1232kB zspages:4836kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:57636kB local_pcp:29208kB free_cma:0kB [ 621.361032][T18846] lowmem_reserve[]: 0 0 0 0 0 [ 621.362560][T18846] Node 0 DMA: 159*4kB (U) 7*8kB (U) 4*16kB (U) 1*32kB (U) 3*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2772kB [ 621.366214][T18842] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.366955][T18846] Node 0 DMA32: 572*4kB (UMH) 188*8kB (UMEH) 47*16kB (UME) 192*32kB (UME) 38*64kB (UME) 15*128kB (UME) 8*256kB (ME) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18624kB [ 621.367050][T18846] Node 1 DMA32: 511*4kB (UME) 463*8kB (UME) 92*16kB (UE) 527*32kB (UME) 261*64kB (UME) 95*128kB (UME) 49*256kB (ME) 21*512kB (UM) 6*1024kB (UM) 10*2048kB (UM) 2*4096kB (U) = 111060kB [ 621.367145][T18846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 621.367155][T18846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 621.367164][T18846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 621.367173][T18846] Node 1 hugepages_total=7 hugepages_free=7 hugepages_surp=3 hugepages_size=2048kB [ 621.367182][T18846] 25590 total pagecache pages [ 621.367187][T18846] 1143 pages in swap cache [ 621.367192][T18846] Free swap = 91732kB [ 621.367196][T18846] Total swap = 124996kB [ 621.367201][T18846] 524155 pages RAM [ 621.367205][T18846] 0 pages HighMem/MovableOnly [ 621.367530][T18846] 211532 pages reserved [ 621.367536][T18846] 0 pages cma reserved [ 621.433195][T18835] lo speed is unknown, defaulting to 1000 [ 621.561527][T18842] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.705230][T18842] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.857100][T18842] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.921464][T18869] FAULT_INJECTION: forcing a failure. [ 621.921464][T18869] name failslab, interval 1, probability 0, space 0, times 0 [ 621.933513][T18869] CPU: 2 UID: 0 PID: 18869 Comm: syz.0.4666 Tainted: G L syzkaller #0 PREEMPT(full) [ 621.933534][T18869] Tainted: [L]=SOFTLOCKUP [ 621.933539][T18869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 621.933546][T18869] Call Trace: [ 621.933551][T18869] [ 621.933556][T18869] dump_stack_lvl+0x100/0x190 [ 621.933574][T18869] should_fail_ex.cold+0x5/0xa [ 621.933589][T18869] should_failslab+0xc2/0x120 [ 621.933606][T18869] __kmalloc_noprof+0xfc/0x820 [ 621.933622][T18869] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 621.933644][T18869] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 621.933664][T18869] genl_family_rcv_msg_doit+0xc7/0x300 [ 621.933681][T18869] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 621.933697][T18869] ? genl_get_cmd+0x3e7/0x760 [ 621.933715][T18869] ? bpf_lsm_capable+0x9/0x10 [ 621.933728][T18869] ? security_capable+0x80/0x260 [ 621.933745][T18869] genl_rcv_msg+0x560/0x800 [ 621.933763][T18869] ? __pfx_genl_rcv_msg+0x10/0x10 [ 621.933779][T18869] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 621.933802][T18869] ? __lock_acquire+0x49f/0x1a40 [ 621.933822][T18869] netlink_rcv_skb+0x159/0x420 [ 621.933836][T18869] ? __pfx_genl_rcv_msg+0x10/0x10 [ 621.933852][T18869] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 621.933871][T18869] ? netlink_deliver_tap+0x1ae/0xcc0 [ 621.933885][T18869] genl_rcv+0x28/0x40 [ 621.933898][T18869] netlink_unicast+0x585/0x850 [ 621.933913][T18869] ? __pfx_netlink_unicast+0x10/0x10 [ 621.933931][T18869] netlink_sendmsg+0x8b0/0xda0 [ 621.933946][T18869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.933962][T18869] ? apparmor_socket_sendmsg+0x15b/0x270 [ 621.933983][T18869] ____sys_sendmsg+0xa4d/0xbe0 [ 621.933996][T18869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.934010][T18869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 621.934029][T18869] ___sys_sendmsg+0x190/0x1e0 [ 621.934043][T18869] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.934063][T18869] ? find_held_lock+0x2b/0x80 [ 621.934086][T18869] __sys_sendmsg+0x160/0x210 [ 621.934103][T18869] ? __pfx___sys_sendmsg+0x10/0x10 [ 621.934123][T18869] ? __pfx_ksys_write+0x10/0x10 [ 621.934138][T18869] __do_fast_syscall_32+0xe7/0x970 [ 621.934155][T18869] ? lockdep_hardirqs_on+0x78/0x100 [ 621.934172][T18869] do_fast_syscall_32+0x32/0x70 [ 621.934188][T18869] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 621.934203][T18869] RIP: 0023:0xf6feefec [ 621.934218][T18869] Code: Unable to access opcode bytes at 0xf6feefc2. [ 621.934223][T18869] RSP: 002b:00000000f539b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 621.934235][T18869] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000200 [ 621.934242][T18869] RDX: 0000000024004080 RSI: 0000000000000000 RDI: 0000000000000000 [ 621.934249][T18869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 621.934255][T18869] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 621.934262][T18869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 621.934276][T18869] [ 622.341801][T18881] UDC core: g1: couldn't find an available UDC or it's busy [ 622.397664][T18887] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4673'. [ 622.412255][T18883] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4672'. [ 622.657375][ T41] usb 7-1: new full-speed USB device number 121 using dummy_hcd [ 622.812783][ T41] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 622.816798][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.820966][ T41] usb 7-1: Product: syz [ 622.822493][ T41] usb 7-1: Manufacturer: syz [ 622.824248][ T41] usb 7-1: SerialNumber: syz [ 623.354176][T18902] bond13: (slave syz_tun): Releasing active interface [ 623.410373][T18902] bridge_slave_0: left allmulticast mode [ 623.424708][T18902] bridge_slave_0: left promiscuous mode [ 623.437807][T18902] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.472536][T18902] bridge_slave_1: left allmulticast mode [ 623.487746][T18902] bridge_slave_1: left promiscuous mode [ 623.501430][T18902] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.620187][T18902] bond0: (slave bond_slave_0): Releasing backup interface [ 623.696653][ T41] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 121 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 623.729771][T18902] team0: Port device team_slave_0 removed [ 623.754671][T18902] team0: Port device team_slave_1 removed [ 623.768053][T18902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.773722][T18902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.782546][T18912] UDC core: g1: couldn't find an available UDC or it's busy [ 623.790475][T18902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.792883][T18902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.796474][T18902] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 623.868649][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.325268][T18918] bridge_slave_1: left allmulticast mode [ 624.327570][T18918] bridge_slave_1: left promiscuous mode [ 624.334358][T18918] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.342922][T18918] bridge_slave_0: left allmulticast mode [ 624.344885][T18918] bridge_slave_0: left promiscuous mode [ 624.346996][T18918] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.420661][T18922] netlink: 860 bytes leftover after parsing attributes in process `syz.4.4682'. [ 624.524125][T18924] netlink: 'syz.4.4684': attribute type 4 has an invalid length. [ 624.527371][T18924] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4684'. [ 624.602053][T18926] netlink: 'syz.4.4685': attribute type 4 has an invalid length. [ 624.604707][T18926] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4685'. [ 624.697173][T18928] FAULT_INJECTION: forcing a failure. [ 624.697173][T18928] name failslab, interval 1, probability 0, space 0, times 0 [ 624.702028][T18928] CPU: 2 UID: 0 PID: 18928 Comm: syz.4.4686 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.702053][T18928] Tainted: [L]=SOFTLOCKUP [ 624.702059][T18928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 624.702070][T18928] Call Trace: [ 624.702077][T18928] [ 624.702084][T18928] dump_stack_lvl+0x100/0x190 [ 624.702125][T18928] should_fail_ex.cold+0x5/0xa [ 624.702146][T18928] should_failslab+0xc2/0x120 [ 624.702166][T18928] __kmalloc_noprof+0xfc/0x820 [ 624.702189][T18928] ? tomoyo_encode2+0xfb/0x3c0 [ 624.702219][T18928] tomoyo_encode2+0xfb/0x3c0 [ 624.702247][T18928] tomoyo_encode+0x29/0x50 [ 624.702270][T18928] tomoyo_realpath_from_path+0x18c/0x690 [ 624.702297][T18928] tomoyo_check_open_permission+0x2af/0x3c0 [ 624.702321][T18928] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 624.702342][T18928] ? __lock_acquire+0x49f/0x1a40 [ 624.702385][T18928] ? hook_file_open+0x24f/0x8f0 [ 624.702418][T18928] ? lock_acquire+0x1b9/0x370 [ 624.702450][T18928] tomoyo_file_open+0x6b/0x90 [ 624.702468][T18928] security_file_open+0xb5/0x1e0 [ 624.702489][T18928] do_dentry_open+0x588/0x14d0 [ 624.702507][T18928] vfs_open+0x82/0x3f0 [ 624.702523][T18928] path_openat+0x2873/0x4280 [ 624.702541][T18928] ? __pfx_path_openat+0x10/0x10 [ 624.702557][T18928] do_file_open+0x20e/0x430 [ 624.702568][T18928] ? __lock_acquire+0x49f/0x1a40 [ 624.702590][T18928] ? __pfx_do_file_open+0x10/0x10 [ 624.702612][T18928] ? _raw_spin_unlock+0x28/0x50 [ 624.702626][T18928] ? alloc_fd+0x471/0x7a0 [ 624.702642][T18928] do_sys_openat2+0x10f/0x1e0 [ 624.702657][T18928] ? __pfx_do_sys_openat2+0x10/0x10 [ 624.702674][T18928] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 624.702693][T18928] __ia32_compat_sys_openat+0x12d/0x210 [ 624.702710][T18928] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 624.702726][T18928] ? fput+0x79/0x100 [ 624.702739][T18928] ? ksys_write+0x1ac/0x250 [ 624.702769][T18928] ? __pfx_ksys_write+0x10/0x10 [ 624.702783][T18928] __do_fast_syscall_32+0xe7/0x970 [ 624.702800][T18928] ? lockdep_hardirqs_on+0x78/0x100 [ 624.702816][T18928] do_fast_syscall_32+0x32/0x70 [ 624.702833][T18928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 624.702848][T18928] RIP: 0023:0xf6fdefec [ 624.702863][T18928] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 624.702869][T18928] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 624.702880][T18928] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000380 [ 624.702887][T18928] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 624.702894][T18928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 624.702901][T18928] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 624.702907][T18928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 624.702921][T18928] [ 624.702937][T18928] ERROR: Out of memory at tomoyo_realpath_from_path. [ 624.902875][T18932] overlayfs: upper fs does not support file handles, falling back to index=off. [ 624.908451][T18932] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 624.925942][T18934] UDC core: g1: couldn't find an available UDC or it's busy [ 625.072043][T18940] netfs: Duplicate cookie detected [ 625.073771][T18940] netfs: O-cookie c=0000000b [fl=4008 na=0 nA=0 s=-] [ 625.075831][T18940] netfs: O-cookie V=00000006 [9p,syz,] [ 625.077858][T18940] netfs: O-key=[8] 'eb6a900400000000' [ 625.079627][T18940] netfs: N-cookie c=0000000c [fl=8 na=0 nA=0 s=-] [ 625.081588][T18940] netfs: N-cookie V=00000006 [9p,syz,] [ 625.083396][T18940] netfs: N-key=[8] 'eb6a900400000000' [ 625.090342][T18942] netlink: 'syz.4.4693': attribute type 4 has an invalid length. [ 625.093177][T18942] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4693'. [ 625.174841][T18946] netlink: 'syz.4.4696': attribute type 1 has an invalid length. [ 625.217802][T18946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 625.235595][T18946] bond1: (slave syz_tun): making interface the new active one [ 625.239256][T18946] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 625.244914][T18946] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4696'. [ 625.290806][T18950] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4697'. [ 625.293817][T18950] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4697'. [ 625.296792][T18950] unsupported nlmsg_type 40 [ 625.447921][ T24] usb 7-1: USB disconnect, device number 121 [ 625.481057][ T24] usblp0: removed [ 625.495120][T18961] UDC core: g1: couldn't find an available UDC or it's busy [ 625.629218][T18967] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 625.632608][T18967] cramfs: wrong magic [ 625.635488][T18967] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4701'. [ 626.052700][T18973] random: crng reseeded on system resumption [ 626.173517][T18976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4706'. [ 626.180421][T18974] xt_CT: You must specify a L4 protocol and not use inversions on it [ 626.185523][T18976] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4706'. [ 626.620218][T18980] netlink: 'syz.3.4707': attribute type 10 has an invalid length. [ 626.626226][T18980] team0: Device dummy0 is up. Set it down before adding it as a team port [ 626.729125][T18984] lo speed is unknown, defaulting to 1000 [ 626.760160][T18982] UDC core: g1: couldn't find an available UDC or it's busy [ 626.840956][T18986] FAULT_INJECTION: forcing a failure. [ 626.840956][T18986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.884614][T18986] CPU: 2 UID: 0 PID: 18986 Comm: syz.2.4708 Tainted: G L syzkaller #0 PREEMPT(full) [ 626.884645][T18986] Tainted: [L]=SOFTLOCKUP [ 626.884652][T18986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 626.884663][T18986] Call Trace: [ 626.884670][T18986] [ 626.884678][T18986] dump_stack_lvl+0x100/0x190 [ 626.884707][T18986] should_fail_ex.cold+0x5/0xa [ 626.884729][T18986] _copy_from_user+0x2e/0xd0 [ 626.884759][T18986] get_old_timex32+0xa2/0x520 [ 626.884780][T18986] ? __pfx_get_old_timex32+0x10/0x10 [ 626.884797][T18986] ? get_pid_task+0x106/0x250 [ 626.884830][T18986] ? rcu_read_lock_any_held+0x6a/0xa0 [ 626.884855][T18986] ? find_held_lock+0x2b/0x80 [ 626.884881][T18986] __do_sys_clock_adjtime32+0x93/0x280 [ 626.884909][T18986] ? __pfx___do_sys_clock_adjtime32+0x10/0x10 [ 626.884930][T18986] ? __mutex_unlock_slowpath+0x35d/0x930 [ 626.884974][T18986] ? ksys_write+0x1ac/0x250 [ 626.884992][T18986] ? __pfx_ksys_write+0x10/0x10 [ 626.885013][T18986] __do_fast_syscall_32+0xe7/0x970 [ 626.885039][T18986] ? lockdep_hardirqs_on+0x78/0x100 [ 626.885063][T18986] do_fast_syscall_32+0x32/0x70 [ 626.885089][T18986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 626.885112][T18986] RIP: 0023:0xf707efec [ 626.885135][T18986] Code: Unable to access opcode bytes at 0xf707efc2. [ 626.885143][T18986] RSP: 002b:00000000f542b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000157 [ 626.885161][T18986] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 626.885172][T18986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 626.885182][T18986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 626.885192][T18986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.885203][T18986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 626.885225][T18986] [ 627.122375][T18995] netlink: 'syz.3.4713': attribute type 1 has an invalid length. [ 627.137743][T18995] 8021q: adding VLAN 0 to HW filter on device bond14 [ 627.150774][T18995] bond14: (slave syz_tun): making interface the new active one [ 627.153931][T18995] bond14: (slave syz_tun): Enslaving as an active interface with an up link [ 627.177963][T18998] netlink: 'syz.4.4714': attribute type 4 has an invalid length. [ 627.184253][T18998] netlink: 'syz.4.4714': attribute type 4 has an invalid length. [ 627.190402][ T24] lo speed is unknown, defaulting to 1000 [ 627.192317][ T24] syz0: Port: 1 Link ACTIVE [ 627.998460][T17642] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 628.099470][T19011] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 628.139647][T19005] lo speed is unknown, defaulting to 1000 [ 628.159700][T17642] usb 7-1: Using ep0 maxpacket: 32 [ 628.179212][T19015] UDC core: g1: couldn't find an available UDC or it's busy [ 628.182174][T17642] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 628.220235][T17642] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 628.226015][T17642] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.242799][T17642] usb 7-1: Product: ч [ 628.244083][T17642] usb 7-1: Manufacturer: 倊 [ 628.258790][T17642] usb 7-1: SerialNumber: ꃂ㧾䫄코썧⤯讑➯ⶳ鞦⃃ﭠ䉪寭ﲦ⣙ḟ괾嵸⸶봙泸〖䯥謤몜ᚓ뗒蓺캗竷骴張譂卑ࡀ㣬譕쯿￣뉘앷쉻舘䍾툫骀 [ 628.416983][T19022] kernel profiling enabled (shift: 7) [ 628.500983][T19007] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 629.304765][T19022] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 629.420675][T19031] netlink: 'syz.4.4723': attribute type 1 has an invalid length. [ 629.493783][T19031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 629.550836][T19031] __nla_validate_parse: 6 callbacks suppressed [ 629.550850][T19031] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4723'. [ 629.637641][T19033] bond1: (slave syz_tun): Releasing active interface [ 629.675290][T19033] bond2: (slave syz_tun): making interface the new active one [ 629.712308][T19033] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 629.755034][T19039] bridge1: entered promiscuous mode [ 629.756995][T19039] bridge1: entered allmulticast mode [ 629.846384][ T42] audit: type=1804 audit(1785910749.850:100): pid=19039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4725" name="/newroot/498/file0/file0" dev="9p" ino=76573421 res=1 errno=0 [ 630.177609][T19045] comedi comedi3: pcl818: I/O base address or length out of range [ 630.391798][T19049] UDC core: g1: couldn't find an available UDC or it's busy [ 630.533999][T19054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4728'. [ 630.537825][T19054] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4728'. [ 630.541529][T19054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4728'. [ 630.545233][T19054] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4728'. [ 630.549407][T19054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4728'. [ 630.761957][T17642] cdc_ncm 7-1:1.0: bind() failure [ 630.768828][T17642] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 630.771820][T17642] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 630.776116][T17642] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 630.784606][T17642] usb 7-1: USB disconnect, device number 122 [ 630.842138][T19057] netlink: 'syz.4.4732': attribute type 2 has an invalid length. [ 630.849199][T19057] FAULT_INJECTION: forcing a failure. [ 630.849199][T19057] name failslab, interval 1, probability 0, space 0, times 0 [ 630.856563][T19059] comedi comedi3: pcl818: I/O base address or length out of range [ 630.859665][T19057] CPU: 0 UID: 0 PID: 19057 Comm: syz.4.4732 Tainted: G L syzkaller #0 PREEMPT(full) [ 630.859684][T19057] Tainted: [L]=SOFTLOCKUP [ 630.859688][T19057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 630.859695][T19057] Call Trace: [ 630.859700][T19057] [ 630.859705][T19057] dump_stack_lvl+0x100/0x190 [ 630.859724][T19057] should_fail_ex.cold+0x5/0xa [ 630.859738][T19057] should_failslab+0xc2/0x120 [ 630.859754][T19057] __kmalloc_cache_noprof+0x91/0x6c0 [ 630.859768][T19057] ? tbl_mask_cache_alloc+0x123/0x230 [ 630.859784][T19057] tbl_mask_cache_alloc+0x123/0x230 [ 630.859798][T19057] ovs_flow_tbl_init+0x24/0x680 [ 630.859812][T19057] ovs_dp_cmd_new+0x251/0xdf0 [ 630.859829][T19057] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 630.859843][T19057] ? __nla_parse+0x40/0x60 [ 630.859859][T19057] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 630.859877][T19057] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 630.859897][T19057] genl_family_rcv_msg_doit+0x214/0x300 [ 630.859914][T19057] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 630.859929][T19057] ? genl_get_cmd+0x3e7/0x760 [ 630.859946][T19057] ? bpf_lsm_capable+0x9/0x10 [ 630.859964][T19057] ? security_capable+0x80/0x260 [ 630.859978][T19057] ? ns_capable+0xd2/0xf0 [ 630.859992][T19057] genl_rcv_msg+0x560/0x800 [ 630.860009][T19057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 630.860025][T19057] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 630.860040][T19057] ? __lock_acquire+0x49f/0x1a40 [ 630.860061][T19057] netlink_rcv_skb+0x159/0x420 [ 630.860074][T19057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 630.860090][T19057] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 630.860109][T19057] ? netlink_deliver_tap+0x1ae/0xcc0 [ 630.860124][T19057] genl_rcv+0x28/0x40 [ 630.860137][T19057] netlink_unicast+0x585/0x850 [ 630.860152][T19057] ? __pfx_netlink_unicast+0x10/0x10 [ 630.860169][T19057] netlink_sendmsg+0x8b0/0xda0 [ 630.860185][T19057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.860200][T19057] ? apparmor_socket_sendmsg+0x15b/0x270 [ 630.860216][T19057] ____sys_sendmsg+0xa4d/0xbe0 [ 630.860242][T19057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.860256][T19057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 630.860275][T19057] ___sys_sendmsg+0x190/0x1e0 [ 630.860289][T19057] ? __pfx____sys_sendmsg+0x10/0x10 [ 630.860309][T19057] ? find_held_lock+0x2b/0x80 [ 630.860332][T19057] __sys_sendmsg+0x160/0x210 [ 630.860349][T19057] ? __pfx___sys_sendmsg+0x10/0x10 [ 630.860370][T19057] ? __pfx_ksys_write+0x10/0x10 [ 630.860384][T19057] __do_fast_syscall_32+0xe7/0x970 [ 630.860400][T19057] ? lockdep_hardirqs_on+0x78/0x100 [ 630.860417][T19057] do_fast_syscall_32+0x32/0x70 [ 630.860433][T19057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 630.860448][T19057] RIP: 0023:0xf6fdefec [ 630.860463][T19057] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 630.860469][T19057] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 630.860480][T19057] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 630.860487][T19057] RDX: 0000000000004040 RSI: 0000000000000000 RDI: 0000000000000000 [ 630.860494][T19057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 630.860501][T19057] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 630.860507][T19057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 630.860522][T19057] [ 630.973136][T19061] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4731'. [ 631.048419][T19066] netlink: 'syz.2.4735': attribute type 12 has an invalid length. [ 631.054943][T19066] netlink: 'syz.2.4735': attribute type 29 has an invalid length. [ 631.065126][T19066] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4735'. [ 631.072219][T19066] netlink: 'syz.2.4735': attribute type 1 has an invalid length. [ 631.079202][T19066] netlink: 'syz.2.4735': attribute type 2 has an invalid length. [ 631.092639][T19066] netlink: 15 bytes leftover after parsing attributes in process `syz.2.4735'. [ 631.217350][ T9] usb 8-1: new full-speed USB device number 119 using dummy_hcd [ 631.282537][T19072] 8021q: adding VLAN 0 to HW filter on device bond17 [ 631.293845][T19075] UDC core: g1: couldn't find an available UDC or it's busy [ 631.303375][T19072] bond16: (slave syz_tun): Releasing active interface [ 631.314058][T19072] bond17: (slave syz_tun): making interface the new active one [ 631.329444][T19072] bond17: (slave syz_tun): Enslaving as an active interface with an up link [ 631.344948][T19072] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4737'. [ 631.371415][ T9] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 631.374418][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.379359][ T9] usb 8-1: Product: syz [ 631.382325][ T9] usb 8-1: Manufacturer: syz [ 631.384751][ T9] usb 8-1: SerialNumber: syz [ 631.409396][T19078] netfs: Duplicate cookie detected [ 631.411125][T19078] netfs: O-cookie c=0000000e [fl=4000 na=0 nA=0 s=-] [ 631.413294][T19078] netfs: O-cookie V=00000008 [9p,syz,] [ 631.415086][T19078] netfs: O-key=[8] 'eb6a900400000000' [ 631.416821][T19078] netfs: N-cookie c=0000000f [fl=0 na=0 nA=0 s=-] [ 631.419093][T19078] netfs: N-cookie V=00000008 [9p,syz,] [ 631.420909][T19078] netfs: N-key=[8] 'eb6a900400000000' [ 631.552832][T19081] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 631.562518][T19081] cramfs: wrong magic [ 631.873856][ T9] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 119 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 631.889494][T19092] hfsplus: unable to find HFS+ superblock [ 631.991696][T19094] openvswitch: netlink: Multiple metadata blocks provided [ 632.092385][T19099] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 632.094484][T19099] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 632.120834][T19099] vhci_hcd vhci_hcd.0: Device attached [ 632.168813][T19103] UDC core: g1: couldn't find an available UDC or it's busy [ 632.175329][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.178512][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.388669][ T9] usb 42-1: SetAddress Request (2) to port 0 [ 632.403367][ T9] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 632.635104][T19099] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 632.711411][T19100] vhci_hcd: connection reset by peer [ 632.718532][T15920] vhci_hcd vhci_hcd.2: stop threads [ 632.721125][T15920] vhci_hcd vhci_hcd.2: release socket [ 632.724894][T15920] vhci_hcd vhci_hcd.2: disconnect device [ 632.876283][ T5458] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 632.879754][ T5458] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 632.882069][ T5458] CPU: 0 UID: 0 PID: 5458 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 632.882168][T19111] MINIX-fs: blocksize too small for device [ 632.885344][ T5458] Tainted: [L]=SOFTLOCKUP [ 632.885352][ T5458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 632.885359][ T5458] RIP: 0010:strlen+0x1e/0xa0 [ 632.885381][ T5458] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 48 89 fa 48 89 fd 53 48 c1 ea 03 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 50 80 7d 00 00 [ 632.885393][ T5458] RSP: 0018:ffffc900039ef1c8 EFLAGS: 00010292 [ 632.885403][ T5458] RAX: dffffc0000000000 RBX: ffff888069a4bb80 RCX: ffffc900039ef1ac [ 632.885411][ T5458] RDX: 0000000000000000 RSI: ffffffff89930df9 RDI: 0000000000000000 [ 632.885418][ T5458] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 632.885425][ T5458] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880600c2800 [ 632.885433][ T5458] R13: 0000000000000000 R14: ffff88801daa8cd8 R15: 0000000000000000 [ 632.885440][ T5458] FS: 00007fd0326a5780(0000) GS:ffff888096bdf000(0000) knlGS:0000000000000000 [ 632.885464][ T5458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 632.885474][ T5458] CR2: 00005575ca783000 CR3: 000000004f986000 CR4: 0000000000352ef0 [ 632.885481][ T5458] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 632.885488][ T5458] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 632.885496][ T5458] Call Trace: [ 632.885500][ T5458] [ 632.885505][ T5458] rtnl_fill_ifinfo.isra.0+0x1d81/0x5560 [ 632.885522][ T5458] ? __pfx_rtnl_fill_ifinfo.isra.0+0x10/0x10 [ 632.885535][ T5458] ? xa_find+0x19f/0x3d0 [ 632.885552][ T5458] ? xa_find+0x1d6/0x3d0 [ 632.885570][ T5458] rtnl_dump_ifinfo+0xcd8/0x14b0 [ 632.885583][ T5458] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 632.885594][ T5458] ? stack_trace_save+0x8e/0xc0 [ 632.885611][ T5458] ? __pfx_stack_trace_save+0x10/0x10 [ 632.885626][ T5458] ? stack_depot_save_flags+0x27/0x9d0 [ 632.885645][ T5458] ? find_held_lock+0x2b/0x80 [ 632.885669][ T5458] ? __kmalloc_node_track_caller_noprof+0x34f/0x830 [ 632.885686][ T5458] ? trace_kmem_cache_alloc+0xdd/0x100 [ 632.885702][ T5458] ? __kasan_slab_alloc+0x89/0x90 [ 632.885717][ T5458] ? __alloc_skb+0x185/0x710 [ 632.885734][ T5458] ? kmalloc_reserve+0xf9/0x350 [ 632.885745][ T5458] ? __asan_memset+0x23/0x50 [ 632.885757][ T5458] ? __alloc_skb+0x4e9/0x710 [ 632.885771][ T5458] ? __alloc_skb+0x5b7/0x710 [ 632.885785][ T5458] ? __pfx___alloc_skb+0x10/0x10 [ 632.885801][ T5458] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 632.885811][ T5458] rtnl_dumpit+0x97/0x1f0 [ 632.885824][ T5458] netlink_dump+0x532/0xd00 [ 632.885838][ T5458] ? __pfx_netlink_dump+0x10/0x10 [ 632.885848][ T5458] ? kasan_quarantine_put+0x104/0x240 [ 632.885869][ T5458] ? kfree_skbmem+0x19f/0x210 [ 632.885882][ T5458] netlink_recvmsg+0x7dc/0xa90 [ 632.885893][ T5458] ? __pfx_netlink_recvmsg+0x10/0x10 [ 632.885905][ T5458] ? find_held_lock+0x2b/0x80 [ 632.885919][ T5458] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 632.885932][ T5458] ? __pfx_netlink_recvmsg+0x10/0x10 [ 632.885944][ T5458] sock_recvmsg+0x1d5/0x220 [ 632.885956][ T5458] ____sys_recvmsg+0x21e/0x670 [ 632.885969][ T5458] ? __pfx_____sys_recvmsg+0x10/0x10 [ 632.885985][ T5458] ___sys_recvmsg+0x16a/0x1a0 [ 632.918254][T19110] block device autoloading is deprecated and will be removed. [ 632.918493][ T5458] ? __pfx____sys_recvmsg+0x10/0x10 [ 632.921429][T19110] PM: Image not found (code -22) [ 632.923853][ T5458] ? __lock_acquire+0x49f/0x1a40 [ 632.923887][ T5458] ? __css_rstat_updated+0x1ce/0x5a0 [ 633.015737][ T5458] ? __pfx___handle_mm_fault+0x10/0x10 [ 633.017968][ T5458] ? find_held_lock+0x2b/0x80 [ 633.019944][ T5458] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 633.022599][ T5458] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 633.025233][ T5458] __x64_sys_recvmsg+0x19a/0x260 [ 633.027308][ T5458] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 633.029502][ T5458] ? find_held_lock+0x2b/0x80 [ 633.031466][ T5458] do_syscall_64+0x115/0x840 [ 633.033434][ T5458] ? clear_bhb_loop+0x40/0x90 [ 633.035344][ T5458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.037594][ T5458] RIP: 0033:0x7fd03272f407 [ 633.039464][ T5458] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 633.047296][ T5458] RSP: 002b:00007ffd1398f5f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 633.050738][ T5458] RAX: ffffffffffffffda RBX: 00007fd0326a5780 RCX: 00007fd03272f407 [ 633.053986][ T5458] RDX: 0000000000000000 RSI: 00007ffd1398f680 RDI: 0000000000000008 [ 633.057216][ T5458] RBP: 00007ffd1398f664 R08: 0000000000000000 R09: 0000000000000000 [ 633.060429][ T5458] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001fd8 [ 633.063550][ T5458] R13: 00007ffd1398f670 R14: 00007ffd1398f760 R15: 0000000000000000 [ 633.066809][ T5458] [ 633.068129][ T5458] Modules linked in: [ 633.071576][ T5458] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 633.121824][ T5458] RIP: 0010:strlen+0x1e/0xa0 [ 633.123868][ T5458] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 48 89 fa 48 89 fd 53 48 c1 ea 03 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 50 80 7d 00 00 [ 633.131786][ T5458] RSP: 0018:ffffc900039ef1c8 EFLAGS: 00010292 [ 633.137292][ T5458] RAX: dffffc0000000000 RBX: ffff888069a4bb80 RCX: ffffc900039ef1ac [ 633.141950][ T5458] RDX: 0000000000000000 RSI: ffffffff89930df9 RDI: 0000000000000000 [ 633.151934][ T5458] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 633.167330][ T5458] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880600c2800 [ 633.173660][ T5458] R13: 0000000000000000 R14: ffff88801daa8cd8 R15: 0000000000000000 [ 633.178472][ T5458] FS: 00007fd0326a5780(0000) GS:ffff888096bdf000(0000) knlGS:0000000000000000 [ 633.183687][ T5458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 633.189038][ T5458] CR2: 00005576407c71b0 CR3: 000000004f986000 CR4: 0000000000352ef0 [ 633.193907][ T5458] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 633.199837][ T5458] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 633.203234][ T5458] Kernel panic - not syncing: Fatal exception [ 633.206356][ T5458] Kernel Offset: disabled [ 633.208112][ T5458] Rebooting in 86400 seconds..