last executing test programs: 19m56.853615797s ago: executing program 3 (id=454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_CREATE(0xf0ffff, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) 19m56.705143976s ago: executing program 3 (id=456): fsopen(0x0, 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000340)={{0x7}, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x100000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb8fd, 0x0, 0x0, 0x0, 0xfffffd80, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xff, 0x0, 0x2, 0x0, 0x2, 0xfffffffc]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x20}}], 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x51, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x1, 0x0, 0x8, 'n'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000e, 0x5d032, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)}], 0x1}}], 0x1, 0x0) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x73e9, 0xc000, 0xffffffff, 0x20002f7}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="17092bbd70000000000101000000080009000000000014001f00000000000000000000000000000000011400200000000000000000000000ffffac1414bb0500070002000000060002000100000008000a00"], 0x5c}}, 0x0) 19m52.827482293s ago: executing program 3 (id=466): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) 19m52.682218217s ago: executing program 3 (id=469): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x98d0d9, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) r1 = socket$inet6(0xa, 0x80002, 0xfbfffffe) setsockopt$inet6_udp_int(r1, 0x11, 0x1, 0x0, 0x0) 19m52.57376079s ago: executing program 3 (id=471): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x40000) r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="20010000100f21040000000000000000fe880000000000f3ffffffffffffff01e00efd1fe100000200"/68, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00fe8800000000000000000000000000011c001700002000"/216], 0x120}}, 0x0) r4 = msgget$private(0x0, 0x31) msgsnd(r4, &(0x7f00000035c0)=ANY=[@ANYBLOB="03"], 0x1b, 0x5f005e4c1fdd0237) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000"/51], 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7e, 0x0, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) listen(r5, 0x7f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000a80)=@tcp6=r5}, 0x20) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff3}, {}, {0x10, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3ff, 0x3, 0x401}, {0x7, 0x92, 0x9, 0x6}}}, @TCF_EM_META={0x58, 0x2, 0x0, 0x0, {{0x7f, 0x4, 0x8}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x3}) 19m51.046431965s ago: executing program 3 (id=475): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0xffffffff, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) setsockopt$inet6_udp_int(r0, 0xff84, 0x1, &(0x7f0000000080), 0x4) 19m50.570167474s ago: executing program 32 (id=475): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0xffffffff, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) setsockopt$inet6_udp_int(r0, 0xff84, 0x1, &(0x7f0000000080), 0x4) 14m35.92649667s ago: executing program 0 (id=1390): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x7}, [{0x2, 0x5}], {0x4, 0x7}, [{0x8, 0x6}], {0x10, 0x4}}, 0x34, 0x3) 14m32.190355026s ago: executing program 0 (id=1396): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2275, &(0x7f00000018c0)) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x4a, 0x0) read$FUSE(r2, &(0x7f0000008600)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x100) read$FUSE(r4, &(0x7f00000065c0)={0x2020}, 0x2020) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) r6 = dup3(r5, r0, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120110031a877008c41001161c07010203010902"], &(0x7f00000008c0)={0x0, 0x0, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="050f744ab7c552ee370f00010a100300000039000000", @ANYRESOCT=r5, @ANYRES64=0x0, @ANYRES16=r3], 0x1, [{0x0, 0x0}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) io_setup(0x8, &(0x7f0000004200)) syz_open_dev$sg(&(0x7f0000002300), 0x5, 0x8a42) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$inet(r7, 0x0, 0xb4b243efa32c49fe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x29) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x1, 0x0, 0x2, 0x1000, &(0x7f0000014000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 14m28.737572447s ago: executing program 0 (id=1408): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x48) socket$kcm(0xa, 0x3, 0x3a) syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x51c, &(0x7f0000000180)=[{0x682, 0x9, 0x1, 0x5}, {0xf7fd, 0x1, 0x7, 0x7fff}, {0xffff, 0x8, 0xff, 0x9b}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102384, 0x18ff0) r5 = socket$kcm(0x10, 0x2, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004880)={&(0x7f0000003b40)={0x50, 0x0, 0x7, {0x7, 0x2d, 0xfffff438, 0x0, 0x3, 0xbcf1, 0x2c6, 0x6, 0x0, 0x0, 0x100, 0x1c7}}, &(0x7f0000003bc0)={0x18, 0x0, 0x100, {0x6}}, &(0x7f0000003c00)={0x18, 0xfffffffffffffff5, 0xe, {0x6}}, &(0x7f00000004c0)={0x18, 0x0, 0x40, {0x1}}, &(0x7f0000003c80)={0x18, 0xfffffffffffffff5, 0x4, {0x5}}, &(0x7f0000003cc0)={0x28, 0x0, 0xc49, {{0xffffffffffffffff, 0xfd}}}, &(0x7f0000003d00)={0x60, 0x0, 0x9, {{0x5, 0x5, 0x7, 0x1, 0x4, 0x10, 0x9, 0x3}}}, &(0x7f0000003d80)={0x18, 0x0, 0x6, {0x800}}, 0x0, &(0x7f0000003e00)={0x20, 0x0, 0xffffffffffffffff, {0x0, 0x10}}, &(0x7f0000003f40)={0x78, 0xfffffffffffffffe, 0xd, {0x8620, 0xffffc9ee, 0x0, {0x2, 0x3, 0xd0fd, 0x3, 0x776fe945, 0x100, 0x269, 0xa, 0x4, 0xc000, 0x8, 0x0, 0x0, 0xff, 0x723}}}, &(0x7f0000004000)={0x90, 0x0, 0x4, {0x2, 0x2, 0x8, 0x9, 0x2983, 0xc00200, {0x1, 0x1000, 0xc, 0x82, 0x5, 0x8, 0x7ff, 0x5, 0x7b3, 0x2000, 0x8000, 0xffffffffffffffff, 0x0, 0x2, 0x8}}}, &(0x7f0000000300)=ANY=[@ANYBLOB="38000000feffffff05000000000000000000004000000000000000000000000500000000000000002f6465762f6b766d0000000000090089b22eda086acfbe410e580015b6b288b82ad291e7fb33c4c2c80fe24f62089122b75dc9c6da"], 0x0, &(0x7f0000004480)={0xa0, 0x0, 0x81, {{0x3, 0x0, 0x5, 0xe16, 0x6, 0xff, {0x3, 0x0, 0x8, 0x7, 0x6, 0x4, 0x8, 0x1, 0x7, 0x2000, 0x7, 0x0, 0xee01, 0x1, 0x8}}, {0x0, 0x12}}}, &(0x7f0000004540)={0x20, 0x24f266fea04a6b9, 0x0, {0x5, 0x0, 0xffff0000, 0x6}}, &(0x7f0000004740)={0x130, 0xfffffffffffffffe, 0x7fff0000000002, {0x2f1d, 0x500, 0x0, '\x00', {0x4, 0x2, 0x9a8, 0x6, 0x0, r6, 0x4000, '\x00', 0x5, 0x5, 0x401, 0xf74, {0x4, 0x8}, {0x4, 0x5940618a}, {0x5, 0x3}, {0x7, 0x7}, 0x81, 0xffff, 0x6, 0x1f5d}}}}) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0xf0ff, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x14, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x4d, 0xffffefff}, {0x6, 0x0, 0xff}]}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) recvmsg(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x100000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50307, 0x2a2e3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x14) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @isdn={0x22, 0x0, 0x1, 0x8, 0x9}, @vsock={0x28, 0x0, 0x0, @hyper}, @isdn={0x22, 0x60, 0x8, 0x9, 0x1}, 0xff, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000040)='bridge0\x00', 0x9, 0xe8f5, 0x4}) 14m26.995581236s ago: executing program 0 (id=1414): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x70}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, r0, &(0x7f0000000340)='./file0/../file0\x00', 0x114) 14m26.856006422s ago: executing program 0 (id=1416): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) 14m25.694463846s ago: executing program 0 (id=1422): gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) iopl(0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xe5}, 0x1c) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="30d064fc273d3a4b5dde14dcc5000001e7ffffffffffffff000000000000316f", @ANYRES32=0x0, @ANYBLOB="0000000008440000050021000800000008000a00", @ANYRES32=r4, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 14m24.506706814s ago: executing program 33 (id=1422): gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) iopl(0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xe5}, 0x1c) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="30d064fc273d3a4b5dde14dcc5000001e7ffffffffffffff000000000000316f", @ANYRES32=0x0, @ANYBLOB="0000000008440000050021000800000008000a00", @ANYRES32=r4, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 9m11.170016387s ago: executing program 1 (id=2311): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x68}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) 9m9.827893564s ago: executing program 1 (id=2315): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000003cc0)={0x28, 0x2, 0x0, {0x3, 0x100000000, 0x4}}, 0x28) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) 9m9.650941729s ago: executing program 1 (id=2316): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x37000000, 0x0, 0x400c0091}, 0x8000) 9m9.623042325s ago: executing program 1 (id=2317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x8, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000100)='./file0\x00', 0x1d3) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x10, 0x25, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x298c046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 9m8.19500949s ago: executing program 1 (id=2325): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x68}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) 9m7.707355908s ago: executing program 1 (id=2326): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 9m7.329376069s ago: executing program 34 (id=2326): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 5m36.556744046s ago: executing program 5 (id=3094): r0 = syz_open_dev$evdev(&(0x7f0000002000), 0x0, 0x20441) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000002040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x5509, 0x0) (fail_nth: 3) socket$inet_udp(0x2, 0x2, 0x0) 5m35.942222624s ago: executing program 5 (id=3096): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x38, r1, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) 5m35.821756195s ago: executing program 5 (id=3098): socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x68}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff00080002", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084) 5m35.26850057s ago: executing program 5 (id=3099): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000002e00090027bd700000000000040000002400118031f9e05e2f", @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x42890}, 0x4004004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x1c) write$binfmt_misc(r1, &(0x7f0000000100), 0xfef0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000140)={0x4, 0x15, 0x3, 0x7, 0x6e, 0x0, &(0x7f0000000080)="8f7403cb9c86f2686cffbd5df755f6a0d5a92e50ea92f789f815d36352d47ef64182cb6957b79e483ecb01028d7904dffba6b57b8dc911784be5cf4549eae20006d5de217047c919026ca1002eae497157c376a3e87e7532939013bf8a2daa9f3999b0326630e09f09b31d108174"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 5m34.582230585s ago: executing program 5 (id=3100): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0x7f, 0x5, 0xd3, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0x17}, 0x1, 0x7, 0xfffffffe, 0xbdb0}}) sendmsg$inet6(r1, &(0x7f00000009c0)={&(0x7f0000000180)={0xa, 0x4e21, 0xffff, @loopback, 0xa}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000001c0)="8d3160eac167a081df97e3f40e4f8ee8981ba623a8767c9ed535d2b63a3e5e9a5e8a13417d6870b4c09b52c8e2924edb94cdea9fda6eaeb5c3f50e9778ea9cdef5aae3fb964f2b97f4ca4531058facc951a3c1264119166c0d2c5f0860d80f9adbe47ece10b14f38c5b8eb09414c56ddd823d05e2ec216474a27a9fae64857", 0x7f}, {&(0x7f0000000240)="213b14a93669fe93214fc58052991d4919ad561a8cfed4c60b341d8c612ec33173b3008fc356eb37b3c2e142cccf9c509fda306206f6891a4bf82636e21e46fe3a2c60b1e0b039bfaf38a2b722cf050b7840cd98a60b81b6d177f7de15eba903e02b756e6553feeaaadc5f93eff2d816c373b2c824691cbb5c16c8794434200d0df941068cfa1785ab2f35bfd243f8ed2dbe893f7fd3494b634c040bffcf0ac80c7a4b148d46ea91c7aaa7cd4d0825460a8e5ff8d4783c04266f75eb7b07fd8befc4e691480d142107ff1dfdd720ca", 0xcf}], 0x2, &(0x7f0000000500)=[@rthdr={{0x38, 0x29, 0x39, {0x1d, 0x4, 0x3, 0x5, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @rthdr={{0x98, 0x29, 0x39, {0x84, 0x10, 0x2, 0x3, 0x0, [@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @empty]}}}, @rthdrdstopts={{0x150, 0x29, 0x37, {0x0, 0x27, '\x00', [@ra, @calipso={0x7, 0x38, {0x3, 0xc, 0x8, 0x400, [0x6, 0xfffffffffffffffb, 0x8001, 0x0, 0x1dcb, 0x95]}}, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x18, {0x3, 0x4, 0x1, 0x6, [0x7, 0x8000000000000000]}}, @generic={0x3, 0x88, "b7a18c85571006c540534b8200c8a5897cc1315599b3a720e48c92592934d6e895c0cd0bf67187fd20e2088c000823d5a6941ebd1ee4234d3f7c3a6c967d65512ba218604591fd69d6dee09abde5191ab54b6a442b4edc5f3ec9a935c7b4ad7093d9d8af54d307f27490f9c292b47dc7d474240ff5fd6a5351308a842fa80a20382d8c076e6f6c75"}, @enc_lim={0x4, 0x1, 0x9}, @generic={0xb, 0x45, "75649b69f6afcb76286ea6d02cbccd3856843a4fd8e49b8651c80333790c510fd99dbf3f5f002fdf3525eaa2e3483c92c8e97740b4abf5b4af9d3dda9e7512b3522d59f1cf"}, @ra={0x5, 0x2, 0xfffb}]}}}, @rthdrdstopts={{0x128, 0x29, 0x37, {0x2f, 0x21, '\x00', [@hao={0xc9, 0x10, @private1}, @pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0x8, 0x3cf, [0xf4806b5]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0xfffffffb}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x80, 0xbb, "ecb191cbc1ec25491b0cedab0972952f5f8e435936aa82d0352830e3a0d5254919fba8f96eb2fa3fd975537fea2b58df18db49cd22e2eb998defe12630977ed271386d26e8707682d0daf47b2139d184cc100b18e405e43d99b108b7985ab55702128c5a514d885c5073c27730d29c2640625546aa3bc6e214072529dacee5924fb088d391d210fdb2f6c1c9edb34b03245a1e9b6993b1cd96702511a57ac1b4af5272af5ad32a15a533671ba3e5bbc0e6aca3ad48aae356baffa8"}, @pad1, @enc_lim={0x4, 0x1, 0x8f}]}}}, @hopopts_2292={{0x100, 0x29, 0x36, {0x1, 0x1c, '\x00', [@generic={0x9, 0x71, "f5e6cdd246015e1565b5c4c56eca00826b43ad8922ce38f8dde8a77a6863c76baee58d06a7d47c3a155c7d22a394b04f6e0db9e8208b0cf4e7b2ea6de0e38876d9575148c812e6bbba2757654808a06be386ccfacce0439c21d0cc97664a24acf058cc3b0101622cf40b708368e5de1b9c"}, @generic={0x3, 0x6c, "a25886313279921cfab8429aaa59b870b4482c2f430bc930ed207006ec606f579dd55679997b50520895bde405c1a19e659091172d24a939332744f8abfb2ebd71931ff9346eafef517cc69ac4ab23899aa29d071e0a17cfae942b25654a5d449a35b46fbf1e02a3a339de03"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xb8a}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x33}, r2}}}], 0x4a8}, 0x4008004) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@map=0x1, r0, 0x2e, 0x10, 0xffffffffffffffff, @void, @value=r0}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) read$msr(r3, &(0x7f0000000100)=""/113, 0x71) 5m34.216431984s ago: executing program 5 (id=3104): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) io_uring_setup(0x516, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) 5m17.562797685s ago: executing program 35 (id=3104): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) io_uring_setup(0x516, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) 4m36.222467625s ago: executing program 7 (id=3275): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000002000)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000007c0)="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", 0x103}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080"], 0x24}}, 0x0) 4m35.990452785s ago: executing program 7 (id=3277): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4m35.634279781s ago: executing program 7 (id=3278): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8800) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000700)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6(0xa, 0x1, 0x0) mount(0x0, 0x0, 0x0, 0x800000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r3, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 4m33.880106925s ago: executing program 7 (id=3283): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x40, {{@in=@remote, @in=@multicast1, 0x4620, 0x7, 0x4e23, 0x4, 0xa, 0x20, 0x20, 0x67}, {@in=@multicast2, 0x4d4, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, {0x800, 0x17d, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f, 0x2}, {0x0, 0x21fd, 0x4, 0x4}, {0xf6, 0x4, 0x8}, 0x0, 0x34ff, 0xa, 0x1, 0xbe, 0x33}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x4000804) chdir(&(0x7f00000003c0)='./bus\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x8000000, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8018, 0x1f7) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x201, 0x4000003e, r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) 4m30.618812352s ago: executing program 7 (id=3290): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21043, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x400000009) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}], 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x280449d, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d31eea03ddc3caa801dd0569e3e261e9510d7b300b4a83e6b7e8c6c93750a6778986716d7b5d676d04331a198d374fb2ab25512a8407ee7a763372418fc0d3bc2", @ANYRESDEC=0x0, @ANYBLOB="d1f43ec65e576b9fb078fd41107de437f43c393f9490af950000000000000009477ab06e97069deeaa2b54c089c5cec63d27e801cf52cd19eba28446f4775a9eb55620ddd65370719f549a29515716ba85ef9f5eeddd78ee5178622b3a7b0e93df5e5dfccc8dfa8eccb50bf222c4b4fcb9f83f3e4dc8ec9d119cbe9011c4e547188c1f865b509a39b0477980c686dc70d62fdb25eb322c8ba3299f5fa61de092a86f3d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) read$FUSE(0xffffffffffffffff, &(0x7f00000093c0)={0x2020}, 0x2020) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@local, 0x0, r5}) 4m30.094470046s ago: executing program 7 (id=3294): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 4m29.791369616s ago: executing program 36 (id=3294): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 13.867376925s ago: executing program 4 (id=3998): setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), 0x4) 12.683138595s ago: executing program 4 (id=4001): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x407b01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x44, 0x7, 0x4, 0x2804, 0x1, 0x9, '\x00', 0x0, r0, 0x0, 0x4, 0x0, 0x2}, 0x50) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000000c0)={0x1, 0x3}) lseek(r2, 0x100000001, 0x3) recvfrom(r0, &(0x7f0000000100)=""/82, 0x52, 0x10000, &(0x7f0000000180)=@phonet={0x23, 0x1d, 0xe, 0xb}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@deltfilter={0x7c, 0x2d, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xb}, {0xa, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x80}}, @filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x3}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x7, 0xa}}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x81}}]}, 0x7c}}, 0x8001) syz_emit_ethernet(0x1e, &(0x7f0000000340)={@random="0446ad6bb571", @random="d49d5edb9be5", @void, {@can={0xc, {{0x4}, 0x6, 0x1, 0x0, 0x0, "3ee711773ad63557"}}}}, &(0x7f0000000380)={0x1, 0x1, [0x9c, 0x576, 0x8ac, 0x8a7]}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x4, 0x761, {{0x8, 0x4, 0x0, 0x2, 0x20, 0x66, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101, {[@end, @rr={0x7, 0x7, 0xb5, [@local]}, @end]}}}}}) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40000) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc1}, 0x4000001) sendmsg$NFT_BATCH(r0, &(0x7f00000026c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002680)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELCHAIN={0x104, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_USERDATA={0x64, 0xc, "7ee3aa80af36eef388626cb5f1fedee3ad124c73289583d6160e55da43f539f9e090b3e84b5eeb4ee4a1cd6f017a2acb42090b31e9be91e27144c133f4afc483de3696ef3ee0617e9f5c6b6fbe31f3703382313c4716b82fad074de1494b0db1"}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd695}]}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7567e13}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netpci0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5892498e}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1586556c}]}]}, @NFT_MSG_DELSET={0x398, 0xb, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1ca}, @NFTA_SET_DESC={0x320, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcd0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffc01}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3e24}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xae4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe808}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaf400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3800000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0xe4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x740}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x771eb5af}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}]}, @NFTA_SET_DESC_CONCAT={0x48, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2c6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_CONCAT={0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x30000}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0x40, 0xd, 0x1, 0x0, "8746c8c3f829caa35157a5a4f61860b1a5cac42f1d8891a6a99920a5d1eb5be7a0ee94321de1be8678cb50331c76fd26c1ab2b74664c9f90a39ca1ff"}]}, @NFT_MSG_NEWSETELEM={0x1a0c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x19d8, 0x3, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x12c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1d80c3bcbb5b0f88}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "f3bd423c9f226daa6b592596cd5ef19ca8169ed8e353f936f06c1f0b744d22738eb07f9ea65db2cb19ec9cccdcb2c0ea3b3377fcc41d1d0dadac01543bf8c21842b465231938db55d846eba578c71ed47709646618590f0e84e917dbe78755643afc91eff0861f5b5b94223c41b489d91e5e5ad84303951f0210db8bf179f61cfb7ae6da0bf452a0f8e5eb0b5babbad290a1a139d06a92bab8481fb4242e50108e6b1a86bb642ec7e244ce1cb0b64aee0502444dc07bdb8a8644e7229cb07c7688726f97a2290b0609e1a45bfa"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x14}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3e}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FLAGS={0x8}]}}}]}, {0x4}, {0x12a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_KEY_END={0xa8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_KEY_END={0x1124, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x3f, 0x1, "b24d3a36fb883b4281b693d4874ebd9ca38b467fa2014c53d3498952c95161dad4c12af674cb5c30dce18860048126ecfab1c52003afbc5937ba36"}, @NFTA_DATA_VALUE={0x5a, 0x1, "e96e815e06f33359a2744a7858bb54e5dfa869a37fc5ef8d3e892a5b37b3f6650a78451d06053eae7b653ade363aa1fcde33bbec09da194d3692e84eefa2a6868f0fdd88f3af8a9e49bc0beb22dbf70939bffaba5687"}, @NFTA_DATA_VALUE={0x8, 0x1, 'O\fjb'}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_DATA={0xc8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0xbc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xac, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "1d41d81505164c88b68f722496f0ad2a"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10}]}, {0xc0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xb0, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xf8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x4c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xed}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fff}]}, {0x2c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc3, 0x6, 0x1, 0x0, "b312ba3091bc31e3cd1035e8de283a2abc8c28ad85e57a9ba2b380f8fad01673ff937890b4ef513479dd3223bad8645dae8ae924857b415a4c1090d6599f9e2ea74265ab9d68755a904d5016102b0446ef6773d73b1423afad00e32a00a7e83fa49079bdfd57b152bf8135bf3f0792094ce24569979446990a8312dd88ad8c4ad7abc25466d600607f13142f80f4d6c0ca145279ab566ae1a3233db273b8e945e6c37d5198ddf9b15cb7564c20a7f6eb28472b5f9855061764e5ae2695b87b"}, @NFTA_SET_ELEM_USERDATA={0x16, 0x6, 0x1, 0x0, "9e4c9732437ea3b31c9cd148775d9db44153"}, @NFTA_SET_ELEM_KEY={0x1c8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa6, 0x1, "1c818acf9e7825d99da1f42cd04a261305a139795406b14b09fc45baf804617a2ef4322c5760ce9f9cbe914b571ad8137d19578ed1d85851e7d2bcd76d0b62f14835e0f682ee9860c792faa7211313b72d6d98e04ede845322fcb56941766b1f36a350a34b870d5c00967878f5627f4d28c3de1063ad469af6f54051cc249fe777b9a3dc1f0a4bde9a09f50d9bf882e577bb4a4a2df6239721a0ea2d4752d543a96a"}, @NFTA_DATA_VALUE={0xea, 0x1, "589f5cfccfbef9087abf1358c68e86a0f98d8841f345a473f135627d98a2220bc6cdf9d9308eb626edb6c421c7f8e448c8a6b31179e68f79d62e956f99a557a14735e942317f7f64202ae9678bc834b09244618a66c719c5afb1210df032598467ee5050f8f030e8e2e6bc547f01985c603a5da1596b49f9e7a4dbea9d0a868b6136a10d8b4cae42ab40336193c6cdee2203c6ae0be3cedfb2c5b0f5839def6c126e4ed01ee45630dea1be419f5571ae186458045da992155294efc4d04e28107fcde0b087d85246bcc661c30c395a3db008ab542e8b56335fe3f470cd949114ab2bde1f7a07"}, @NFTA_DATA_VALUE={0x2d, 0x1, "c299a6ee911a02f0ddb16c8179f04bfe397f2b9d7553c3a506acaf83ce928f2269c7a844f6e876b69b"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @range={{0xa}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0xe8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb2, 0x6, 0x1, 0x0, "03df3e62255a1271f0beca570fe27e503d8b29b4c4a774e17e3c87e4da022acc645a14fda8a4a1c309e13616ab6038553178b3f514b7877e495056714113047340a321ea710f5c37c506708e02a46a39713212642165826a622880a02729234ea9c4f0bc0f451862d5138672b268715db9c52f0f4f0d90284e84bc97b68b0d44ca819a320cc487d8b5e853813beef2b924dbd8f6fb4254026f069ed44cb671c64825e679e667034c2bddf9979254"}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @dynset={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, {0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x5a, 0x6, 0x1, 0x0, "f0ce5e07d6df0d2e9b70bd0cdf034d7e412ba8dc9aecd901b792f203fe461601b1a1b89c106c44b42cad45ef4f9846f9091d7bfbc596028256e230e9c64417223a45dec42b23414ce8672622b079193c7fc36e8766db"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fff}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @limit={{0xa}, @void}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}]}], {0x14}}, 0x1f3c}, 0x1, 0x0, 0x0, 0x40804}, 0x20004080) openat$audio1(0xffffffffffffff9c, &(0x7f0000002700), 0x60400, 0x0) chdir(&(0x7f0000002740)='./file0\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002780)={r0, r4, 0x25, 0x14, @void}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002840)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000002980)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002940)={&(0x7f0000002880)={0xa0, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x68, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaae}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040001) r9 = syz_usb_connect$midi(0x5, 0x69, &(0x7f00000029c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x582, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x5, 0x90, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x20, 0x3e, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x3c}], [{{0x9, 0x5, 0xb, 0x4, 0x200, 0xb7, 0x7f, 0xc6, {0x4}}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0xc, 0x0, 0xec, {0x13, 0x25, 0x1, 0xf, "30214d30fd9b0ca01dfde305cf4c95"}}}, {{0x9, 0x5, 0xb, 0x4, 0x3ff, 0x0, 0x7, 0xd, {0xd, 0x25, 0x1, 0x9, "07656f707ce6df977d"}}}]}}}}}]}}, &(0x7f0000002d80)={0xa, &(0x7f0000002a40)={0xa, 0x6, 0x200, 0x5, 0x2, 0x2, 0x8, 0x4}, 0xf, &(0x7f0000002a80)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xdede245288dd6a8, 0xd, 0x9, 0x21}]}, 0x5, [{0xab, &(0x7f0000002ac0)=@string={0xab, 0x3, "2b47d6d2b4201ed9b2d4951fcfb0cc915ab8b02315d2b846b30d64d399ed865f9e92c12803ccd210c40599d909f4447a18d03ac63aa2c0fe6b75250c6619b624ea366fa9fee4eac5bb82d98be53d48600f9fdfc2bf457946f78e2d7907987aba3a2b48460baabeb508e5b7f3dfe3842862e39ac15a734a009b8ea5a09e1d79ff9ae358f8a2d5c345861dd0bf8c16303ec8ad6c4d406259f2a9eb257404742ed8ebdff5ec041ee85344"}}, {0x63, &(0x7f0000002b80)=@string={0x63, 0x3, "8082e1e6aa537535e12daf8a656f7fcf0fe686d2de0c89e0564cd148739e5bedd64f8a609de3d318d70f178151cf2d6421efc38887fb8a6e48e1bef2f124288a59ba48af627600cc681a545beda21def1ad35122296624c1b1c64ff28429210571"}}, {0x1e, &(0x7f0000002c00)=@string={0x1e, 0x3, "66bab6fe8a20c2c00c0e124054c83796557081d48f03fe7a0e595947"}}, {0xe9, &(0x7f0000002c40)=@string={0xe9, 0x3, "8e9ed1f6fda6c241120f7d2ed0deb7798000b14270db294b59771a734ba560ff88a1ab558cd20cc3d97ded24f44d692ff063b0daf2abb935e3bb7befffab7b770e32de95afbcf5af94b6c43ccf7e46b53919429d6046edb4a3a1cdb1e22d9d486074074e236039bba25b516247aa437aedf16f15d4258424099cd3ff2318ef367107f12eadcb515488c09889992d78218870c5cab98888e9b70b5c543692a18100b6f27d8f4b3d99dafc2b636d7fe1116fb02c1a83ae185662ba3f95423df48622082b8b46c5c4c23eba9fab8824976d49e8f1fde7bbde43a21a12474986b5e9502a1ca898bcc1"}}, {0x4, &(0x7f0000002d40)=@lang_id={0x4, 0x3, 0x423}}]}) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000002f00)={0x14, &(0x7f0000002e00)={0x0, 0xb, 0x8d, {0x8d, 0xe, "16730830b9e7a61e264761dce5e5af0e4d474f73814a3b48f54f02fbf2dbdb5901d61d45cb501fef7b17ba3538779b77ec37d13dc2ca2e3ea7a2e2a92dbab54f051a5206366820a5b81d097da8024f9e3e3d9f11ffb0a673c28e899daa09b7e84f807c74bc039bcbbb13c10aba83d6cd640cf15e59f113dee3134688989ac2574a233cad37e95ccbb3b19d"}}, &(0x7f0000002ec0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003140)={0x44, &(0x7f0000002f40)={0x0, 0xf, 0x11, "084768a31db2fc1013e3e3e30fca55162d"}, &(0x7f0000002f80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000002fc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000003000)={0x20, 0x80, 0x1c, {0x8, 0xffff, 0x374a, 0xc, 0x1, 0x6, 0x5, 0x1, 0xff, 0x1, 0xfbff, 0x8001}}, &(0x7f0000003040)={0x20, 0x85, 0x4}, &(0x7f0000003080)={0x20, 0x83, 0x2}, &(0x7f00000030c0)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000003100)={0x20, 0x89, 0x2}}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000031c0)={r0, 0x5, 0x2, r0}) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000032c0)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40801) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000003300), 0x4) clock_gettime(0x0, &(0x7f0000004940)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000048c0)=[{{&(0x7f0000003340)=@alg, 0x80, &(0x7f00000044c0)=[{&(0x7f00000033c0)=""/219, 0xdb}, {&(0x7f00000034c0)=""/4096, 0x1000}], 0x2, &(0x7f0000004500)=""/142, 0x8e}, 0x7f}, {{&(0x7f00000045c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000004780)=[{&(0x7f0000004640)=""/90, 0x5a}, {&(0x7f00000046c0)=""/131, 0x83}], 0x2, &(0x7f00000047c0)=""/216, 0xd8}, 0xa}], 0x2, 0x100, &(0x7f0000004980)={r10, r11+10000000}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f00000049c0)={0x6}, &(0x7f0000004a00)) 10.520826441s ago: executing program 4 (id=4005): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x04\x00\x00\x00\xb2 b\x00O\x03\x00') r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x11, 0xc00, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9.40941733s ago: executing program 8 (id=4008): syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfffffffffffffffc, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$vhost_msg_v2(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xfa}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r1, 0x0) r6 = dup3(r5, r1, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x3fd4, &(0x7f0000000180)={0x0, 0x7b5f, 0x130c8, 0x6, 0x30e}, 0x0, &(0x7f0000000200), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x5, 0x165182) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000080)={0x2}) 8.70041704s ago: executing program 9 (id=4010): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x10000000, 0xfffffffc, 0x3ff}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010001fff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) r5 = accept4$llc(r3, 0x0, 0x0, 0x80000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x304}, "e40be2fddbe1b537", "9c7b9038977c1647bde65a96b1bb427c4753982091b213d412cc9dea452e4906", '\x00', "1238ccdce86cb818"}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x800000008, 0x201}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x304}, "aab650031c8eeec4", "8fc216270cd4d76a0a9e835ae1bda57be084a690760c4778affdac8c8e79271b", "8c07e39b", "ca242a86138804e0"}, 0x38) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYRES8=r5, @ANYRES32, @ANYBLOB="010f0000419a04002000128008000100736974001400028008000300ac1414"], 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762b53bcc00000000000000", 0x28, 0x40000, &(0x7f0000000340)={0x11, 0x7, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) 7.142598082s ago: executing program 6 (id=4012): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b", @ANYBLOB='\t', @ANYRESHEX=0x0], 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x106, 0x1}}, 0x20) 6.915627355s ago: executing program 8 (id=4013): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000000)=0xffffffa9) 6.822847681s ago: executing program 2 (id=4014): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mkdir(0x0, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000004c0)='./file0\x00', 0x80000000) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x44000004) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001e00210200000000fcdbdf2507000000cc0037e33bf4ad2b864500769009e5709f1ca743d59e8c9be71b3432aa554f0214480000"], 0x38}}, 0x4000080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x4040) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f000001aa40)=""/4077, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000340)={{0xffffffffffffffff, 0x0, 0x80, 0x0, 0xfffffc00, 0x0, 0x0}, {[0x8, 0xf, 0x6, 0x8]}, 0x122c, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000008f00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.701880111s ago: executing program 8 (id=4015): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x407b01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x44, 0x7, 0x4, 0x2804, 0x1, 0x9, '\x00', 0x0, r0, 0x0, 0x4, 0x0, 0x2}, 0x50) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000000c0)={0x1, 0x3}) lseek(r2, 0x100000001, 0x3) recvfrom(r0, &(0x7f0000000100)=""/82, 0x52, 0x10000, &(0x7f0000000180)=@phonet={0x23, 0x1d, 0xe, 0xb}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@deltfilter={0x7c, 0x2d, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xb}, {0xa, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x80}}, @filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x3}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x7, 0xa}}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x81}}]}, 0x7c}}, 0x8001) syz_emit_ethernet(0x1e, &(0x7f0000000340)={@random="0446ad6bb571", @random="d49d5edb9be5", @void, {@can={0xc, {{0x4}, 0x6, 0x1, 0x0, 0x0, "3ee711773ad63557"}}}}, &(0x7f0000000380)={0x1, 0x1, [0x9c, 0x576, 0x8ac, 0x8a7]}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x4, 0x761, {{0x8, 0x4, 0x0, 0x2, 0x20, 0x66, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101, {[@end, @rr={0x7, 0x7, 0xb5, [@local]}, @end]}}}}}) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40000) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc1}, 0x4000001) sendmsg$NFT_BATCH(r0, &(0x7f00000026c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002680)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELCHAIN={0x104, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_USERDATA={0x64, 0xc, "7ee3aa80af36eef388626cb5f1fedee3ad124c73289583d6160e55da43f539f9e090b3e84b5eeb4ee4a1cd6f017a2acb42090b31e9be91e27144c133f4afc483de3696ef3ee0617e9f5c6b6fbe31f3703382313c4716b82fad074de1494b0db1"}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd695}]}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7567e13}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netpci0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5892498e}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1586556c}]}]}, @NFT_MSG_DELSET={0x398, 0xb, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1ca}, @NFTA_SET_DESC={0x320, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcd0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffc01}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3e24}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xae4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe808}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaf400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3800000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0xe4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x740}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x771eb5af}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}]}, @NFTA_SET_DESC_CONCAT={0x48, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2c6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_CONCAT={0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x30000}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0x40, 0xd, 0x1, 0x0, "8746c8c3f829caa35157a5a4f61860b1a5cac42f1d8891a6a99920a5d1eb5be7a0ee94321de1be8678cb50331c76fd26c1ab2b74664c9f90a39ca1ff"}]}, @NFT_MSG_NEWSETELEM={0x1a0c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x19d8, 0x3, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x12c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1d80c3bcbb5b0f88}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "f3bd423c9f226daa6b592596cd5ef19ca8169ed8e353f936f06c1f0b744d22738eb07f9ea65db2cb19ec9cccdcb2c0ea3b3377fcc41d1d0dadac01543bf8c21842b465231938db55d846eba578c71ed47709646618590f0e84e917dbe78755643afc91eff0861f5b5b94223c41b489d91e5e5ad84303951f0210db8bf179f61cfb7ae6da0bf452a0f8e5eb0b5babbad290a1a139d06a92bab8481fb4242e50108e6b1a86bb642ec7e244ce1cb0b64aee0502444dc07bdb8a8644e7229cb07c7688726f97a2290b0609e1a45bfa"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x14}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3e}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FLAGS={0x8}]}}}]}, {0x4}, {0x12a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_KEY_END={0xa8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_KEY_END={0x1124, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x3f, 0x1, "b24d3a36fb883b4281b693d4874ebd9ca38b467fa2014c53d3498952c95161dad4c12af674cb5c30dce18860048126ecfab1c52003afbc5937ba36"}, @NFTA_DATA_VALUE={0x5a, 0x1, "e96e815e06f33359a2744a7858bb54e5dfa869a37fc5ef8d3e892a5b37b3f6650a78451d06053eae7b653ade363aa1fcde33bbec09da194d3692e84eefa2a6868f0fdd88f3af8a9e49bc0beb22dbf70939bffaba5687"}, @NFTA_DATA_VALUE={0x8, 0x1, 'O\fjb'}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_DATA={0xc8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0xbc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xac, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "1d41d81505164c88b68f722496f0ad2a"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10}]}, {0xc0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xb0, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xf8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x4c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xed}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fff}]}, {0x2c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc3, 0x6, 0x1, 0x0, "b312ba3091bc31e3cd1035e8de283a2abc8c28ad85e57a9ba2b380f8fad01673ff937890b4ef513479dd3223bad8645dae8ae924857b415a4c1090d6599f9e2ea74265ab9d68755a904d5016102b0446ef6773d73b1423afad00e32a00a7e83fa49079bdfd57b152bf8135bf3f0792094ce24569979446990a8312dd88ad8c4ad7abc25466d600607f13142f80f4d6c0ca145279ab566ae1a3233db273b8e945e6c37d5198ddf9b15cb7564c20a7f6eb28472b5f9855061764e5ae2695b87b"}, @NFTA_SET_ELEM_USERDATA={0x16, 0x6, 0x1, 0x0, "9e4c9732437ea3b31c9cd148775d9db44153"}, @NFTA_SET_ELEM_KEY={0x1c8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa6, 0x1, "1c818acf9e7825d99da1f42cd04a261305a139795406b14b09fc45baf804617a2ef4322c5760ce9f9cbe914b571ad8137d19578ed1d85851e7d2bcd76d0b62f14835e0f682ee9860c792faa7211313b72d6d98e04ede845322fcb56941766b1f36a350a34b870d5c00967878f5627f4d28c3de1063ad469af6f54051cc249fe777b9a3dc1f0a4bde9a09f50d9bf882e577bb4a4a2df6239721a0ea2d4752d543a96a"}, @NFTA_DATA_VALUE={0xea, 0x1, "589f5cfccfbef9087abf1358c68e86a0f98d8841f345a473f135627d98a2220bc6cdf9d9308eb626edb6c421c7f8e448c8a6b31179e68f79d62e956f99a557a14735e942317f7f64202ae9678bc834b09244618a66c719c5afb1210df032598467ee5050f8f030e8e2e6bc547f01985c603a5da1596b49f9e7a4dbea9d0a868b6136a10d8b4cae42ab40336193c6cdee2203c6ae0be3cedfb2c5b0f5839def6c126e4ed01ee45630dea1be419f5571ae186458045da992155294efc4d04e28107fcde0b087d85246bcc661c30c395a3db008ab542e8b56335fe3f470cd949114ab2bde1f7a07"}, @NFTA_DATA_VALUE={0x2d, 0x1, "c299a6ee911a02f0ddb16c8179f04bfe397f2b9d7553c3a506acaf83ce928f2269c7a844f6e876b69b"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @range={{0xa}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0xe8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb2, 0x6, 0x1, 0x0, "03df3e62255a1271f0beca570fe27e503d8b29b4c4a774e17e3c87e4da022acc645a14fda8a4a1c309e13616ab6038553178b3f514b7877e495056714113047340a321ea710f5c37c506708e02a46a39713212642165826a622880a02729234ea9c4f0bc0f451862d5138672b268715db9c52f0f4f0d90284e84bc97b68b0d44ca819a320cc487d8b5e853813beef2b924dbd8f6fb4254026f069ed44cb671c64825e679e667034c2bddf9979254"}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @dynset={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, {0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x5a, 0x6, 0x1, 0x0, "f0ce5e07d6df0d2e9b70bd0cdf034d7e412ba8dc9aecd901b792f203fe461601b1a1b89c106c44b42cad45ef4f9846f9091d7bfbc596028256e230e9c64417223a45dec42b23414ce8672622b079193c7fc36e8766db"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fff}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @limit={{0xa}, @void}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}]}], {0x14}}, 0x1f3c}, 0x1, 0x0, 0x0, 0x40804}, 0x20004080) openat$audio1(0xffffffffffffff9c, &(0x7f0000002700), 0x60400, 0x0) chdir(&(0x7f0000002740)='./file0\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002780)={r0, r4, 0x25, 0x14, @void}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002840)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000002980)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002940)={&(0x7f0000002880)={0xa0, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x68, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaae}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040001) r9 = syz_usb_connect$midi(0x5, 0x69, &(0x7f00000029c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x582, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x5, 0x90, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x20, 0x3e, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x3c}], [{{0x9, 0x5, 0xb, 0x4, 0x200, 0xb7, 0x7f, 0xc6, {0x4}}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0xc, 0x0, 0xec, {0x13, 0x25, 0x1, 0xf, "30214d30fd9b0ca01dfde305cf4c95"}}}, {{0x9, 0x5, 0xb, 0x4, 0x3ff, 0x0, 0x7, 0xd, {0xd, 0x25, 0x1, 0x9, "07656f707ce6df977d"}}}]}}}}}]}}, &(0x7f0000002d80)={0xa, &(0x7f0000002a40)={0xa, 0x6, 0x200, 0x5, 0x2, 0x2, 0x8, 0x4}, 0xf, &(0x7f0000002a80)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xdede245288dd6a8, 0xd, 0x9, 0x21}]}, 0x5, [{0xab, &(0x7f0000002ac0)=@string={0xab, 0x3, "2b47d6d2b4201ed9b2d4951fcfb0cc915ab8b02315d2b846b30d64d399ed865f9e92c12803ccd210c40599d909f4447a18d03ac63aa2c0fe6b75250c6619b624ea366fa9fee4eac5bb82d98be53d48600f9fdfc2bf457946f78e2d7907987aba3a2b48460baabeb508e5b7f3dfe3842862e39ac15a734a009b8ea5a09e1d79ff9ae358f8a2d5c345861dd0bf8c16303ec8ad6c4d406259f2a9eb257404742ed8ebdff5ec041ee85344"}}, {0x63, &(0x7f0000002b80)=@string={0x63, 0x3, "8082e1e6aa537535e12daf8a656f7fcf0fe686d2de0c89e0564cd148739e5bedd64f8a609de3d318d70f178151cf2d6421efc38887fb8a6e48e1bef2f124288a59ba48af627600cc681a545beda21def1ad35122296624c1b1c64ff28429210571"}}, {0x1e, &(0x7f0000002c00)=@string={0x1e, 0x3, "66bab6fe8a20c2c00c0e124054c83796557081d48f03fe7a0e595947"}}, {0xe9, &(0x7f0000002c40)=@string={0xe9, 0x3, "8e9ed1f6fda6c241120f7d2ed0deb7798000b14270db294b59771a734ba560ff88a1ab558cd20cc3d97ded24f44d692ff063b0daf2abb935e3bb7befffab7b770e32de95afbcf5af94b6c43ccf7e46b53919429d6046edb4a3a1cdb1e22d9d486074074e236039bba25b516247aa437aedf16f15d4258424099cd3ff2318ef367107f12eadcb515488c09889992d78218870c5cab98888e9b70b5c543692a18100b6f27d8f4b3d99dafc2b636d7fe1116fb02c1a83ae185662ba3f95423df48622082b8b46c5c4c23eba9fab8824976d49e8f1fde7bbde43a21a12474986b5e9502a1ca898bcc1"}}, {0x4, &(0x7f0000002d40)=@lang_id={0x4, 0x3, 0x423}}]}) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000002f00)={0x14, &(0x7f0000002e00)={0x0, 0xb, 0x8d, {0x8d, 0xe, "16730830b9e7a61e264761dce5e5af0e4d474f73814a3b48f54f02fbf2dbdb5901d61d45cb501fef7b17ba3538779b77ec37d13dc2ca2e3ea7a2e2a92dbab54f051a5206366820a5b81d097da8024f9e3e3d9f11ffb0a673c28e899daa09b7e84f807c74bc039bcbbb13c10aba83d6cd640cf15e59f113dee3134688989ac2574a233cad37e95ccbb3b19d"}}, &(0x7f0000002ec0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003140)={0x44, &(0x7f0000002f40)={0x0, 0xf, 0x11, "084768a31db2fc1013e3e3e30fca55162d"}, &(0x7f0000002f80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000002fc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000003000)={0x20, 0x80, 0x1c, {0x8, 0xffff, 0x374a, 0xc, 0x1, 0x6, 0x5, 0x1, 0xff, 0x1, 0xfbff, 0x8001}}, &(0x7f0000003040)={0x20, 0x85, 0x4}, &(0x7f0000003080)={0x20, 0x83, 0x2}, &(0x7f00000030c0)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000003100)={0x20, 0x89, 0x2}}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000031c0)={r0, 0x5, 0x2, r0}) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000032c0)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40801) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000003300), 0x4) clock_gettime(0x0, &(0x7f0000004940)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000048c0)=[{{&(0x7f0000003340)=@alg, 0x80, &(0x7f00000044c0)=[{&(0x7f00000033c0)=""/219, 0xdb}, {&(0x7f00000034c0)=""/4096, 0x1000}], 0x2, &(0x7f0000004500)=""/142, 0x8e}, 0x7f}, {{&(0x7f00000045c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000004780)=[{&(0x7f0000004640)=""/90, 0x5a}, {&(0x7f00000046c0)=""/131, 0x83}], 0x2, &(0x7f00000047c0)=""/216, 0xd8}, 0xa}], 0x2, 0x100, &(0x7f0000004980)={r10, r11+10000000}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f00000049c0)={0x6}, &(0x7f0000004a00)) 6.119824604s ago: executing program 9 (id=4016): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x356, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000180)={0x4, 0x5560}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x40) 6.064719526s ago: executing program 2 (id=4017): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d0009055c"], 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fb, &(0x7f0000000500)=0x0) io_submit(r3, 0x0, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r4, 0x0, 0x1, 0x4}}, 0x20) syz_usb_disconnect(r0) write$P9_RVERSION(r1, 0x0, 0xfffffcd9) 5.39094965s ago: executing program 9 (id=4018): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) listen(0xffffffffffffffff, 0x3) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0x2, 0x80802, 0x1fd) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) gettid() prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2}) 4.872634439s ago: executing program 4 (id=4019): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x300, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 4.650183541s ago: executing program 4 (id=4020): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendto$inet(r1, &(0x7f0000000240)="5fc00160f22f902a66cc6c52f5cc60a3e22df9c6bda987f9cce7e7bdb3e81e393197d0828b5ad14f51fabef5498c0129d4483eafdc32a3e25149e75b0bb537e2b26b4f", 0x43, 0x800, &(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000060b4000818110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7020000140000dab7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x72, '\x00', 0x0, @fallback=0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) r10 = socket$inet6(0xa, 0x3, 0x2) getsockopt$inet6_int(r10, 0x29, 0x24, 0x0, 0xfffffffffffffffe) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x2000040) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) io_uring_setup(0x196, &(0x7f00000001c0)={0x0, 0x8f9bb, 0x40, 0x2, 0x1d9, 0x0, r2}) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000000000904"], 0x0) 4.529772662s ago: executing program 8 (id=4021): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x881}, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050003000000fcdbdf254400000008000300", @ANYRES32=r1, @ANYBLOB="0a00180003030303030300000c007000050003003f00000004005a802c007000050006"], 0x64}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f00000012c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xb0, 0x29, 0x4, {0x4, 0x12, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x36, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @pad1, @generic={0x93}, @ra={0x5, 0x2, 0x6}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x6, 0x4, 0x1, 0x9, 0x0, [@empty, @private0]}}}, @hopopts={{0x160, 0x29, 0x36, {0x5e, 0x28, '\x00', [@generic={0xff, 0x43, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac4"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @generic={0x1, 0x2, "2bdb"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast2]}}}], 0x2f8}}], 0x1, 0x810) close(0xffffffffffffffff) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_usb_connect$uac1(0x0, 0x9b, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x414d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xc, 0x4, 0x6, 0x3, "8d5bfd46010048a1a2"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x0, 0x5, 0x4, 0x5}, @as_header={0x7, 0x24, 0x1, 0x1, 0x7, 0x1001}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3a, 0x1, 0x8, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x2, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 4.255400067s ago: executing program 2 (id=4022): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r2 = epoll_create(0x5) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xd, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) syz_open_pts(r1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchmod(r2, 0x50) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000380)={0x0, 0x2, @raw_data=[0x7ff, 0x0, 0x3, 0xf5088d3e, 0x3, 0xfffffffe, 0x4, 0x3, 0xffff, 0x4, 0x549, 0x8, 0x5, 0x9, 0x0, 0x7]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_IE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, 0x23, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0xb, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2.994355148s ago: executing program 9 (id=4023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r3, 0x400, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000280)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a8000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000001c080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fcntl$setlease(r3, 0x400, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 2.599143975s ago: executing program 2 (id=4024): syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfffffffffffffffc, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$vhost_msg_v2(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xfa}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r1, 0x0) r6 = dup3(r5, r1, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x3fd4, &(0x7f0000000180)={0x0, 0x7b5f, 0x130c8, 0x6, 0x30e}, 0x0, &(0x7f0000000200), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x5, 0x165182) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000080)={0x2}) 2.227576491s ago: executing program 6 (id=4025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, 0x0, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x9040}, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') openat(r1, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe2342, 0x16b) 1.964147818s ago: executing program 9 (id=4026): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xe, {"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", 0xfffffffffffffd6f}}, 0x1006) ioctl$VT_RELDISP(r2, 0x5605) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0xb, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_COMPAT_NAME={0x6, 0x1, '\\\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x8, 0x1, '[(]\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x9, 0x1, '*,/:\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000080) 1.734938921s ago: executing program 8 (id=4027): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x10000000, 0xfffffffc, 0x3ff}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010001fff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) r5 = accept4$llc(r3, 0x0, 0x0, 0x80000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x304}, "e40be2fddbe1b537", "9c7b9038977c1647bde65a96b1bb427c4753982091b213d412cc9dea452e4906", '\x00', "1238ccdce86cb818"}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x800000008, 0x201}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x304}, "aab650031c8eeec4", "8fc216270cd4d76a0a9e835ae1bda57be084a690760c4778affdac8c8e79271b", "8c07e39b", "ca242a86138804e0"}, 0x38) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYRES8=r5, @ANYRES32, @ANYBLOB="010f0000419a04002000128008000100736974001400028008000300ac1414"], 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762b53bcc00000000000000", 0x28, 0x40000, &(0x7f0000000340)={0x11, 0x7, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) 1.732575963s ago: executing program 6 (id=4028): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x800200, 0x0) preadv(r0, &(0x7f0000002600)=[{&(0x7f0000002240)=""/163, 0xa3}], 0x1, 0xfffff800, 0xfff) syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x32}]}], "fb36eeca6fad50b340972a584d16ca55"}}}}}}}, 0x0) 1.642203605s ago: executing program 9 (id=4029): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x48) socket$kcm(0xa, 0x3, 0x3a) syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x51c, &(0x7f0000000180)=[{0x682, 0x9, 0x1, 0x5}, {0xf7fd, 0x1, 0x7, 0x7fff}, {0xffff, 0x8, 0xff, 0x9b}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102384, 0x18ff0) r5 = socket$kcm(0x10, 0x2, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004880)={&(0x7f0000003b40)={0x50, 0x0, 0x7, {0x7, 0x2d, 0xfffff438, 0x0, 0x3, 0xbcf1, 0x2c6, 0x6, 0x0, 0x0, 0x100, 0x1c7}}, &(0x7f0000003bc0)={0x18, 0x0, 0x100, {0x6}}, &(0x7f0000003c00)={0x18, 0xfffffffffffffff5, 0xe, {0x6}}, &(0x7f00000004c0)={0x18, 0x0, 0x40, {0x1}}, &(0x7f0000003c80)={0x18, 0xfffffffffffffff5, 0x4, {0x5}}, &(0x7f0000003cc0)={0x28, 0x0, 0xc49, {{0xffffffffffffffff, 0xfd}}}, &(0x7f0000003d00)={0x60, 0x0, 0x9, {{0x5, 0x5, 0x7, 0x1, 0x4, 0x10, 0x9, 0x3}}}, &(0x7f0000003d80)={0x18, 0x0, 0x6, {0x800}}, 0x0, &(0x7f0000003e00)={0x20, 0x0, 0xffffffffffffffff, {0x0, 0x10}}, &(0x7f0000003f40)={0x78, 0xfffffffffffffffe, 0xd, {0x8620, 0xffffc9ee, 0x0, {0x2, 0x3, 0xd0fd, 0x3, 0x776fe945, 0x100, 0x269, 0xa, 0x4, 0xc000, 0x8, 0x0, 0x0, 0xff, 0x723}}}, &(0x7f0000004000)={0x90, 0x0, 0x4, {0x2, 0x2, 0x8, 0x9, 0x2983, 0xc00200, {0x1, 0x1000, 0xc, 0x82, 0x5, 0x8, 0x7ff, 0x5, 0x7b3, 0x2000, 0x8000, 0xffffffffffffffff, 0x0, 0x2, 0x8}}}, &(0x7f0000000300)=ANY=[@ANYBLOB="38000000feffffff05000000000000000000004000000000000000000000000500000000000000002f6465762f6b766d0000000000090089b22eda086acfbe410e580015b6b288b82ad291e7fb33c4c2c80fe24f62089122b75dc9c6da"], &(0x7f0000000500)=ANY=[@ANYBLOB="6001000000000000fefffffffffffffffdfa0000000000000400000000000000b600000007000000060000000000000001000000000000007f00000000000000a0840200000000000000000006000000000000000000000081000000000000007f000000004000000900"/124, @ANYRES32=0xee00, @ANYBLOB="f7a53c7ccd08e0a0fe1d295e687d63409473a24b5b4b5b5fc98ebff53b6de84e0093e86bd91324b376a7f84a6ecb11604ca5f516480e3a4e673897caee3b5e7aaa74e69979b7fa676da3af3e98481dc591c0e999ba9c0d1d8b226064de00ec249d76796e628713e78475884c2dcbec5786efcfc884ccf44591c6ae6b41b8471b19fc83b7526bf0d12ad563e2e958eca27aedf8adc67d0ab2d3fb8bbb2bded37849d2defd6ae15ce0c5ea17e9ef8ca94809b422ce37eb6cfff9d078224b2157c1882d31fab7ad492b99", @ANYBLOB="05000000ff00000000000000050000000000000007000000000000000f000000000000802f6465762f6370752f232f6d73720000020000000000000001000000000000000e0000000000000005000000000000000500000004000000030000000000000000000000000000000400000000000000010001000000000010000000000000000100000000000000390c00000c000000050000000080000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="09000000090000000000000003000000000000003e000000000000000f000000a70000002f6465762f6370752f232f6d73720000"], &(0x7f0000004480)={0xa0, 0x0, 0x81, {{0x3, 0x0, 0x5, 0xe16, 0x6, 0xff, {0x3, 0x0, 0x8, 0x7, 0x6, 0x4, 0x8, 0x1, 0x7, 0x2000, 0x7, 0x0, 0xee01, 0x1, 0x8}}, {0x0, 0x12}}}, &(0x7f0000004540)={0x20, 0x24f266fea04a6b9, 0x0, {0x5, 0x0, 0xffff0000, 0x6}}, &(0x7f0000004740)={0x130, 0xfffffffffffffffe, 0x7fff0000000002, {0x2f1d, 0x500, 0x0, '\x00', {0x4, 0x2, 0x9a8, 0x6, 0x0, r6, 0x4000, '\x00', 0x5, 0x5, 0x401, 0xf74, {0x4, 0x8}, {0x4, 0x5940618a}, {0x5, 0x3}, {0x7, 0x7}, 0x81, 0xffff, 0x6, 0x1f5d}}}}) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0", 0xbd}], 0x1}, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x14, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x4d, 0xffffefff}, {0x6, 0x0, 0xff}]}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) recvmsg(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x100000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50307, 0x2a2e3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x14) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @isdn={0x22, 0x0, 0x1, 0x8, 0x9}, @vsock={0x28, 0x0, 0x0, @hyper}, @isdn={0x22, 0x60, 0x8, 0x9, 0x1}, 0xff, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000040)='bridge0\x00', 0x9, 0xe8f5, 0x4}) 1.558030453s ago: executing program 6 (id=4030): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0x2c, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) unshare(0x2c020400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 1.336925899s ago: executing program 2 (id=4031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xf00, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000ad50120800014000000000140004"], 0xa4}}, 0x40810) 1.074041211s ago: executing program 4 (id=4032): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) msgget$private(0x0, 0x0) (async) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x2, 0x3800) syz_pidfd_open(0x0, 0x0) (async) syz_pidfd_open(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x40080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) (async) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r7, &(0x7f0000000280)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) (async) write$sndseq(r7, &(0x7f0000000280)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000002c0)=""/99) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000140)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e21, 0x8000, @mcast1, 0x1}, 0x1c) socket$kcm(0xa, 0x2, 0x0) (async) r8 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000206010200000000000000000000000605000100070000000900020073797a3000000000140007800500152a9900000008001344fffff8000500040c000000000500040001000000050005000a00"], 0x54}, 0x1, 0x0, 0x0, 0xc040}, 0x40800) r10 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2) ioctl$FIBMAP(r10, 0x5381, 0x0) 563.655189ms ago: executing program 8 (id=4033): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) listen(0xffffffffffffffff, 0x3) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0x2, 0x80802, 0x1fd) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) gettid() prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2}) 465.216203ms ago: executing program 6 (id=4034): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x5, 0x1c, 0x7, 0x1, 0x0, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0xffe, 0xfffff801, 0x5], [0x2, 0xfffff7fe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x3fc, 0x2, 0xfffffe00, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x8922, 0x6, 0x8000, 0xf45, 0x400003, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x4], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x100, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x4, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x4, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x2, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4000800) gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x1c, 0x2}, &(0x7f0000bbdffc)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101080) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) read(0xffffffffffffffff, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x100) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) getpid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 378.162146ms ago: executing program 2 (id=4035): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001feff0010450c1251000000000001090224000100000000090400071903000000092100020301222d0009058103000400ff03"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x20000110) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f00000001c0)={'dummy0\x00', {0x2, 0x4e23, @local}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="427069ae9e0fea31d7606ce0466a742fbcd62ea84dd22c0c1222cc2614db4663cca404f4015d40357c3d7be2f3381391d46d19c0", @ANYRES16=r4, @ANYBLOB="0100030000000000000015000000"], 0x14}}, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xc, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@local, 0x7f}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) open(0x0, 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, 0x0, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=4036): r0 = socket(0x1e, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x5000)=nil, &(0x7f0000bdc000/0x1000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000bd9000/0x4000)=nil, &(0x7f0000007000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000023c0)={@multicast1, @multicast2}, &(0x7f0000002400)=0xc) sendmsg$inet(r3, &(0x7f00000025c0)={&(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000002340)=[{&(0x7f0000000200)="7ef3f1897352b60875599b520e1105899735a4ca4290275b6bd4854097c01d78c23b30203e8095e6ae7dcbc03ad371c70a6ba0003eb747369dbe02f4255881a09004c231825e3187e490d7d0c1f0a84c4189b659f0eb0102a1d5beea6f23fda788fcbdba8284d0224d631086e2363db55394c3c9c30902d77ac6e2428411", 0x7e}, {0x0}, {&(0x7f0000000480)="23ff2b5b2a07f385e08623d6701acf6891e88523a4bbe3fb2f71118cc45842e59af07aebed645b2bb8b0bf6b0fc00e6c25bedf", 0x33}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="354fd9e7684584645b4cf8e5e2c353a9785acfefd5", 0x15}], 0x5, &(0x7f0000002440)}, 0x50880) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400103842, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x8044000}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r5, 0x43403d05, &(0x7f0000000880)={0x8}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x10000, 0x20000000) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) kernel console output (not intermixed with test programs): T991] usb 5-1: device descriptor read/64, error -71 [ 1236.816240][ T991] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1237.022040][ T991] usb 5-1: device descriptor read/64, error -71 [ 1237.190415][ T991] usb usb5-port1: attempt power cycle [ 1237.564414][ T991] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1237.618129][ T991] usb 5-1: device descriptor read/8, error -71 [ 1237.906413][ T991] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1237.950485][ T991] usb 5-1: device descriptor read/8, error -71 [ 1238.090973][ T991] usb usb5-port1: unable to enumerate USB device [ 1238.386886][T19553] netlink: 'syz.2.3531': attribute type 5 has an invalid length. [ 1238.631653][ T29] audit: type=1400 audit(1779785249.688:1745): avc: denied { read } for pid=19555 comm="syz.4.3530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1238.880135][T19562] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3532'. [ 1239.350439][T19565] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.3533'. [ 1241.725647][T19579] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1241.816158][ T29] audit: type=1400 audit(1779785252.663:1746): avc: denied { shutdown } for pid=19577 comm="syz.6.3539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1242.316932][ T24] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1243.233525][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1243.257439][T19592] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3545'. [ 1243.309066][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1243.321066][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1243.412323][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1243.422712][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.494765][ T24] usb 3-1: Product: syz [ 1243.517167][ T24] usb 3-1: Manufacturer: syz [ 1243.593556][ T24] usb 3-1: SerialNumber: syz [ 1243.689835][ T24] usb 3-1: config 0 descriptor?? [ 1243.697444][T19594] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3546'. [ 1243.717667][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1243.756522][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1243.861377][ T29] audit: type=1400 audit(1779785254.581:1747): avc: denied { ioctl } for pid=19595 comm="syz.9.3538" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1244.267087][T19602] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.3547'. [ 1244.495652][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1245.111024][T19605] netlink: 'syz.2.3541': attribute type 4 has an invalid length. [ 1245.446152][ T24] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1245.461299][ T24] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1245.502995][ T24] em28xx 3-1:0.0: No AC97 audio processor [ 1245.556141][ T24] usb 3-1: USB disconnect, device number 106 [ 1245.606863][T19612] raw_sendmsg: syz.9.3550 forgot to set AF_INET. Fix it! [ 1245.618355][ T24] em28xx 3-1:0.0: Disconnecting em28xx [ 1245.652297][ T24] em28xx 3-1:0.0: Freeing device [ 1245.786409][T19619] ref_ctr increment failed for inode: 0x170 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807b32bd40 [ 1245.901654][T17212] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1246.040603][T17212] usb 10-1: device descriptor read/64, error -71 [ 1246.721126][ T24] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1246.863812][T17212] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1246.960085][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1246.974643][ T24] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1246.991957][ T24] usb 5-1: config 0 has no interface number 0 [ 1247.002672][T17212] usb 10-1: device descriptor read/64, error -71 [ 1247.004742][ T24] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1247.038524][ T24] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1247.048924][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.058725][ T24] usb 5-1: Product: syz [ 1247.063063][ T24] usb 5-1: Manufacturer: syz [ 1247.067961][T18016] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1247.077091][ T24] usb 5-1: SerialNumber: syz [ 1247.089387][ T24] usb 5-1: config 0 descriptor?? [ 1247.105115][ T24] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1247.118751][ T24] em28xx 5-1:0.132: Video interface 132 found: [ 1247.132878][T17212] usb usb10-port1: attempt power cycle [ 1247.252551][T18016] usb 3-1: Using ep0 maxpacket: 16 [ 1247.338276][T18016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1247.352969][T19637] lo speed is unknown, defaulting to 1000 [ 1247.359615][T19637] lo speed is unknown, defaulting to 1000 [ 1247.376382][T19637] lo speed is unknown, defaulting to 1000 [ 1247.395008][T19637] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1247.422747][T19637] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1247.441977][T19637] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1247.477206][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1247.508683][T18016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1247.560187][T18016] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1247.605063][T18016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.651489][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1247.668968][T19637] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1247.752864][T18016] usb 3-1: config 0 descriptor?? [ 1247.812125][ T24] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1247.961283][T19637] lo speed is unknown, defaulting to 1000 [ 1247.998407][T17212] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1248.161130][T19637] lo speed is unknown, defaulting to 1000 [ 1248.306940][T19637] lo speed is unknown, defaulting to 1000 [ 1248.332039][T19637] lo speed is unknown, defaulting to 1000 [ 1248.422789][T19637] lo speed is unknown, defaulting to 1000 [ 1248.448382][T19637] lo speed is unknown, defaulting to 1000 [ 1248.502302][T19637] lo speed is unknown, defaulting to 1000 [ 1248.667167][T19627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.708707][T18016] kye 0003:0458:5016.0017: control desc unexpectedly large [ 1248.724278][T19627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.841476][T17212] usb 10-1: device descriptor read/8, error -71 [ 1248.849863][T18016] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0017/input/input76 [ 1248.940320][ T24] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1248.956777][ T24] em28xx 5-1:0.132: board has no eeprom [ 1248.978508][T18016] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0017/input/input77 [ 1249.169199][T18016] kye 0003:0458:5016.0017: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 1249.247360][ T24] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1249.255237][ T24] em28xx 5-1:0.132: analog set to bulk mode. [ 1249.286308][T18016] em28xx 5-1:0.132: Registering V4L2 extension [ 1249.478426][ T24] usb 5-1: USB disconnect, device number 110 [ 1249.485336][ T24] em28xx 5-1:0.132: Disconnecting em28xx [ 1249.511237][T19632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.524366][T19647] macvtap1: entered allmulticast mode [ 1249.530048][T19647] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 1249.557950][T19647] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1249.594576][T19632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.641049][T19647] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1249.685034][T18016] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1249.704338][T18016] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1249.733369][T18016] em28xx 5-1:0.132: No AC97 audio processor [ 1249.737056][T19647] netdevsim netdevsim8 netdevsim0: left allmulticast mode [ 1249.772493][T18016] usb 5-1: Decoder not found [ 1249.797447][T18016] em28xx 5-1:0.132: failed to create media graph [ 1249.819756][T18016] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1249.891876][T18016] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1249.930833][ T24] em28xx 5-1:0.132: Closing input extension [ 1249.959869][ T24] em28xx 5-1:0.132: Freeing device [ 1250.032342][T18028] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 1250.219990][T18028] usb 3-1: reset high-speed USB device number 107 using dummy_hcd [ 1250.466948][ T24] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1250.647567][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 1250.660809][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1250.719625][ T24] usb 10-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 1250.747736][T19673] vxlan0: entered promiscuous mode [ 1250.767368][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.817061][ T24] usb 10-1: config 0 descriptor?? [ 1250.909620][T19673] vxlan0: entered allmulticast mode [ 1251.715242][ T5736] usb 3-1: USB disconnect, device number 107 [ 1251.877418][T10848] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1251.909194][T10848] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1251.936076][T10848] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1251.970321][T10848] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1252.320993][ T24] usbhid 10-1:0.0: can't add hid device: -71 [ 1252.337099][ T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1252.355250][ T24] usb 10-1: USB disconnect, device number 14 [ 1252.624102][T19686] binder: 19685:19686 ioctl 400c620e 0 returned -14 [ 1272.544340][ T29] audit: type=1400 audit(1779785281.412:1748): avc: denied { ioctl } for pid=19687 comm="syz.6.3572" path="socket:[65879]" dev="sockfs" ino=65879 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1272.704305][T19697] ref_ctr increment failed for inode: 0x1e3 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807527c980 [ 1273.795212][T19704] usb usb7: usbfs: process 19704 (syz.8.3577) did not claim interface 0 before use [ 1274.088395][T19717] netlink: 'syz.9.3581': attribute type 4 has an invalid length. [ 1274.506626][T18016] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1274.788007][T18016] usb 9-1: Using ep0 maxpacket: 32 [ 1275.316542][T18016] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1275.345152][T18016] usb 9-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 1275.381178][T18016] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.405909][T18016] usb 9-1: Product: syz [ 1275.414821][T18016] usb 9-1: Manufacturer: syz [ 1275.424653][T18016] usb 9-1: SerialNumber: syz [ 1276.024226][T19725] vxlan0: entered promiscuous mode [ 1276.029019][T18016] usb 9-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1276.052197][T18016] usb 9-1: unit 37 not found! [ 1276.063873][T18016] usb 9-1: unit 0 not found! [ 1276.085555][T19725] vxlan0: entered allmulticast mode [ 1276.129977][T10848] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1276.156110][T10848] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1276.177797][T18016] usb 9-1: USB disconnect, device number 13 [ 1276.187858][T10848] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1276.218756][T10848] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1276.331970][T19740] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3588'. [ 1276.801876][T19743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3589'. [ 1277.041105][T19743] bridge0: port 3(syz_tun) entered blocking state [ 1277.135886][T19743] bridge0: port 3(syz_tun) entered disabled state [ 1277.178876][T19743] syz_tun: entered allmulticast mode [ 1277.482005][T19743] syz_tun: entered promiscuous mode [ 1277.535679][T19750] udevd[19750]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1279.181658][T19777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3598'. [ 1279.434728][T18022] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 1279.465941][T18016] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1279.648716][T18022] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1279.661691][T18016] usb 5-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 1279.685495][T18022] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1279.698108][T18016] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1279.718463][T18022] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1279.736520][T18016] usb 5-1: config 1 interface 2 has no altsetting 0 [ 1279.750191][T18016] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 1279.863542][T18022] usb 9-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.07 [ 1279.873361][T18016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.881492][T18022] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.891278][T18016] usb 5-1: Product: syz [ 1279.896929][T18016] usb 5-1: Manufacturer: syz [ 1279.902460][T18022] usb 9-1: config 0 descriptor?? [ 1279.908361][T18016] usb 5-1: SerialNumber: syz [ 1280.029247][T19793] Bluetooth: MGMT ver 1.23 [ 1280.445786][ T29] audit: type=1400 audit(1779785288.802:1749): avc: denied { accept } for pid=19775 comm="syz.4.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1280.541404][ T29] audit: type=1400 audit(1779785288.802:1750): avc: denied { map } for pid=19775 comm="syz.4.3598" path="socket:[66183]" dev="sockfs" ino=66183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1280.542768][T18016] usb 5-1: Can't get UAC3 power state for id 10 [ 1280.596559][T18016] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 1280.625508][ T29] audit: type=1400 audit(1779785288.802:1751): avc: denied { accept } for pid=19775 comm="syz.4.3598" path="socket:[66183]" dev="sockfs" ino=66183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1280.625552][T18016] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1280.663411][T18016] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1280.673614][T18016] usb 5-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 1280.860598][T18016] usb 5-1: USB disconnect, device number 111 [ 1280.899600][T18022] usbhid 9-1:0.0: can't add hid device: -71 [ 1280.909406][T18022] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1280.930808][T19757] udevd[19757]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1280.951636][T18022] usb 9-1: USB disconnect, device number 14 [ 1281.162498][T19798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3606'. [ 1281.176097][T19798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3606'. [ 1282.667372][ T5620] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1282.674473][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 1283.089714][T19823] vxlan0: entered promiscuous mode [ 1283.095047][T19823] vxlan0: entered allmulticast mode [ 1283.105751][T10839] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1283.133440][T10839] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1283.161435][T10839] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1283.190086][T10839] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1283.437245][T19827] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3616'. [ 1283.906086][ T24] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1284.083607][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 1284.108304][ T24] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1284.289863][ T24] usb 9-1: config 179 has no interface number 0 [ 1284.550948][ T24] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1284.584560][ T24] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1284.854930][ T24] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1284.889599][ T24] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1285.088394][ T24] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1285.125950][ T24] usb 9-1: config 179 interface 65 has no altsetting 0 [ 1285.158923][ T24] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1285.239099][T19844] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.3621'. [ 1286.196617][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.271123][ T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input78 [ 1286.388177][ T4967] input input78: unable to receive magic message: -110 [ 1286.463667][ T4967] input input78: unable to receive magic message: -32 [ 1286.494263][ T4967] input input78: unable to receive magic message: -32 [ 1287.103363][ T4967] input input78: unable to receive magic message: -32 [ 1287.189651][ T4967] input input78: unable to receive magic message: -32 [ 1287.261943][ T991] usb 9-1: USB disconnect, device number 15 [ 1287.262055][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1287.439530][T17212] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1288.035981][T19861] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3623'. [ 1288.178407][T17212] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.219191][T17212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1288.241062][T17212] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1288.269713][T17212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.294971][T17212] usb 5-1: config 0 descriptor?? [ 1288.655068][T19876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.801124][ T29] audit: type=1326 audit(1779785296.595:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.8.3630" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141e39ce59 code=0x7ffc0000 [ 1288.832979][ T29] audit: type=1326 audit(1779785296.595:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.8.3630" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141e39ce59 code=0x7ffc0000 [ 1288.895363][T19876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.989424][ T5627] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1288.997459][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 1289.024549][ T29] audit: type=1326 audit(1779785296.595:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.8.3630" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f141e39ce59 code=0x7ffc0000 [ 1289.134994][ T29] audit: type=1326 audit(1779785296.595:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.8.3630" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141e39ce59 code=0x7ffc0000 [ 1289.166250][ T29] audit: type=1326 audit(1779785296.595:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.8.3630" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141e39ce59 code=0x7ffc0000 [ 1289.245149][ T29] audit: type=1326 audit(1779785296.595:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.8.3630" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f141e39ce59 code=0x7ffc0000 [ 1289.296851][ T29] audit: type=1326 audit(1779785296.595:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.8.3630" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141e39ce59 code=0x7ffc0000 [ 1289.330943][ T29] audit: type=1326 audit(1779785296.595:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.8.3630" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141e39ce59 code=0x7ffc0000 [ 1289.431254][ T29] audit: type=1326 audit(1779785296.595:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.8.3630" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f141e39ce59 code=0x7ffc0000 [ 1289.458376][ T29] audit: type=1326 audit(1779785296.595:1761): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19871 comm="syz.8.3630" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141e39ce59 code=0x7ffc0000 [ 1289.527910][T17212] Bluetooth: Can't get state to change to load ram patch err [ 1289.620184][T17212] Bluetooth: Loading patch file failed [ 1289.710473][T19887] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.3632'. [ 1289.745802][T17212] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 1290.022018][T17212] usb 5-1: USB disconnect, device number 112 [ 1291.512215][T19894] netlink: 'syz.6.3634': attribute type 4 has an invalid length. [ 1291.613530][T19895] netlink: 'syz.6.3634': attribute type 4 has an invalid length. [ 1291.916608][T19891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3633'. [ 1292.209979][T18028] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1293.395036][T18028] usb 10-1: Using ep0 maxpacket: 32 [ 1293.412883][T18028] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1293.415159][T19890] macvtap1: entered allmulticast mode [ 1293.421854][T18028] usb 10-1: config 0 has no interface number 0 [ 1293.433173][T18028] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1293.445904][T18028] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1293.455370][T18028] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.464868][T18028] usb 10-1: Product: syz [ 1293.469406][T18028] usb 10-1: Manufacturer: syz [ 1293.474113][T18028] usb 10-1: SerialNumber: syz [ 1293.488565][T18028] usb 10-1: config 0 descriptor?? [ 1293.514469][T19890] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1293.525795][T19890] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1293.560855][T19890] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1293.614737][T18028] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1293.628435][T18028] em28xx 10-1:0.132: Video interface 132 found: [ 1293.655184][T19890] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1294.091440][T18022] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1294.178845][ T805] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1294.201774][T18028] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 1294.318112][T19932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3642'. [ 1294.474305][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1294.474323][ T29] audit: type=1400 audit(1779785301.937:1775): avc: denied { write } for pid=19908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1294.526316][ T805] usb 9-1: Using ep0 maxpacket: 32 [ 1294.577452][ T805] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 1294.590150][ T805] usb 9-1: config 0 has no interface number 0 [ 1294.610320][ T805] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1294.620776][ T29] audit: type=1400 audit(1779785302.012:1776): avc: denied { setattr } for pid=19929 comm="syz.4.3641" name="/" dev="configfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1294.774541][T19938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3641'. [ 1294.815355][T19900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.855217][ T805] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1294.886075][T19900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.922740][ T805] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.996844][ T805] usb 9-1: Product: syz [ 1295.001149][ T805] usb 9-1: Manufacturer: syz [ 1295.005947][ T805] usb 9-1: SerialNumber: syz [ 1295.010064][T19900] overlayfs: failed to resolve './file2': -2 [ 1295.024530][ T805] usb 9-1: config 0 descriptor?? [ 1295.042985][ T805] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1295.058826][T18028] em28xx 10-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1295.069948][ T805] em28xx 9-1:0.132: Video interface 132 found: [ 1295.092137][ T29] audit: type=1400 audit(1779785302.508:1777): avc: denied { write } for pid=19940 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1295.093347][T18028] em28xx 10-1:0.132: board has no eeprom [ 1295.364007][T18028] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1295.391218][T18028] em28xx 10-1:0.132: analog set to bulk mode. [ 1295.422587][T17212] em28xx 10-1:0.132: Registering V4L2 extension [ 1295.485647][T18028] usb 10-1: USB disconnect, device number 15 [ 1295.555741][T18028] em28xx 10-1:0.132: Disconnecting em28xx [ 1295.631745][ T805] em28xx 9-1:0.132: unknown em28xx chip ID (0) [ 1295.654448][T19954] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3646'. [ 1295.688197][T19954] macvtap1: entered allmulticast mode [ 1295.703662][T19954] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1295.731801][T19954] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1295.771065][T19954] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 1295.912793][T17212] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 1295.940776][T17212] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 1295.983881][T17212] em28xx 10-1:0.132: No AC97 audio processor [ 1296.055790][T17212] usb 10-1: Decoder not found [ 1296.073495][T19915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.094515][T17212] em28xx 10-1:0.132: failed to create media graph [ 1296.108761][T19915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.115560][T17212] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 1296.144165][T17212] em28xx 10-1:0.132: Remote control support is not available for this card. [ 1296.159411][T19960] macvtap1: entered allmulticast mode [ 1296.247214][T19960] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1296.256111][T18028] em28xx 10-1:0.132: Closing input extension [ 1296.278704][T19960] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1296.282178][ T805] em28xx 9-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1296.297839][T18028] em28xx 10-1:0.132: Freeing device [ 1296.352344][T19960] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1296.355855][ T805] em28xx 9-1:0.132: board has no eeprom [ 1296.378661][T19977] netlink: 'syz.9.3649': attribute type 1 has an invalid length. [ 1296.386432][T19977] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3649'. [ 1296.410865][ T29] audit: type=1400 audit(1779785303.705:1778): avc: denied { connect } for pid=19973 comm="syz.9.3649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1296.436465][ T29] audit: type=1400 audit(1779785303.705:1779): avc: denied { write } for pid=19973 comm="syz.9.3649" laddr=fe80::13 lport=10113 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1296.461842][ T29] audit: type=1400 audit(1779785303.743:1780): avc: denied { write } for pid=19947 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1296.493230][ T805] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1296.513228][ T805] em28xx 9-1:0.132: analog set to bulk mode. [ 1296.528040][T19960] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1296.538526][T18022] em28xx 9-1:0.132: Registering V4L2 extension [ 1296.555527][ T805] usb 9-1: USB disconnect, device number 16 [ 1296.607733][ T805] em28xx 9-1:0.132: Disconnecting em28xx [ 1296.739360][T18028] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1296.786732][ T29] audit: type=1400 audit(1779785304.098:1781): avc: denied { write } for pid=19984 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1296.893219][ T991] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1296.922419][T18028] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1296.930631][T18028] usb 10-1: config 0 has no interface number 0 [ 1296.939030][T18028] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1296.951271][T19991] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3653'. [ 1296.974616][T18028] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.002462][T18028] usb 10-1: Product: syz [ 1297.026528][T18028] usb 10-1: Manufacturer: syz [ 1297.048717][T18028] usb 10-1: SerialNumber: syz [ 1297.111379][T18028] usb 10-1: config 0 descriptor?? [ 1297.420752][T18022] em28xx 9-1:0.132: Config register raw data: 0xffffffed [ 1297.471615][T18022] em28xx 9-1:0.132: AC97 chip type couldn't be determined [ 1297.517878][T18022] em28xx 9-1:0.132: No AC97 audio processor [ 1297.673863][T19997] ref_ctr increment failed for inode: 0x251 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88813fe7d5c0 [ 1297.714433][T18022] usb 9-1: Decoder not found [ 1297.733455][T18022] em28xx 9-1:0.132: failed to create media graph [ 1297.780815][T18022] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 1297.896865][T20001] ref_ctr increment failed for inode: 0xacb offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807cbe3d40 [ 1297.997557][T18028] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 1298.023383][T18022] em28xx 9-1:0.132: Remote control support is not available for this card. [ 1298.092952][ T805] em28xx 9-1:0.132: Closing input extension [ 1298.369621][T18028] usb 10-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 1298.371541][ T805] em28xx 9-1:0.132: Freeing device [ 1298.383108][T18028] usb 10-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 1298.400024][ T29] audit: type=1400 audit(1779785305.586:1782): avc: denied { firmware_load } for pid=18028 comm="kworker/0:8" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1299.010184][T20012] NILFS (nullb0): couldn't find nilfs on the device [ 1299.333071][T20016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3659'. [ 1299.387842][T20016] macvtap1: entered allmulticast mode [ 1299.393803][T20016] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1299.403116][T20016] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1299.414222][T20016] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1299.426640][T20016] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1299.460969][T18022] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1300.040798][ T29] audit: type=1400 audit(1779785306.980:1783): avc: denied { read } for pid=20027 comm="syz.4.3663" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1300.072309][T20031] FAULT_INJECTION: forcing a failure. [ 1300.072309][T20031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1300.093893][ T29] audit: type=1400 audit(1779785306.980:1784): avc: denied { open } for pid=20027 comm="syz.4.3663" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1300.128580][T20031] CPU: 0 UID: 0 PID: 20031 Comm: syz.8.3664 Tainted: G L syzkaller #0 PREEMPT(full) [ 1300.128615][T20031] Tainted: [L]=SOFTLOCKUP [ 1300.128624][T20031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1300.128638][T20031] Call Trace: [ 1300.128645][T20031] [ 1300.128653][T20031] dump_stack_lvl+0x100/0x190 [ 1300.128685][T20031] should_fail_ex.cold+0x5/0xa [ 1300.128716][T20031] _copy_from_user+0x2e/0xd0 [ 1300.128749][T20031] memdup_user+0x6b/0xe0 [ 1300.128772][T20031] strndup_user+0x78/0xe0 [ 1300.128795][T20031] __x64_sys_mount+0x136/0x310 [ 1300.128827][T20031] ? __pfx___x64_sys_mount+0x10/0x10 [ 1300.128861][T20031] ? rcu_is_watching+0x12/0xc0 [ 1300.128899][T20031] do_syscall_64+0x10b/0xf80 [ 1300.128930][T20031] ? clear_bhb_loop+0x40/0x90 [ 1300.128965][T20031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.128988][T20031] RIP: 0033:0x7f141e39ce59 [ 1300.129006][T20031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1300.129027][T20031] RSP: 002b:00007f141f301028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1300.129049][T20031] RAX: ffffffffffffffda RBX: 00007f141e615fa0 RCX: 00007f141e39ce59 [ 1300.129064][T20031] RDX: 00002000000000c0 RSI: 0000200000000300 RDI: 0000000000000000 [ 1300.129076][T20031] RBP: 00007f141f301090 R08: 0000200000000680 R09: 0000000000000000 [ 1300.129090][T20031] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000001 [ 1300.129103][T20031] R13: 00007f141e616038 R14: 00007f141e615fa0 R15: 00007ffe82269fb8 [ 1300.129133][T20031] [ 1300.460204][T20036] netlink: 'syz.6.3667': attribute type 4 has an invalid length. [ 1300.485876][T20036] netlink: 'syz.6.3667': attribute type 4 has an invalid length. [ 1300.570992][T20026] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1300.586736][T20026] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1300.705095][T18022] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1300.772668][T20043] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3668'. [ 1300.871972][T20041] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1300.881199][T20041] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1300.904952][T18022] usb 5-1: Using ep0 maxpacket: 16 [ 1300.949815][T18022] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.007123][T18022] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1301.060859][T18022] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1301.118080][T18022] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.296790][T18022] usb 5-1: config 0 descriptor?? [ 1302.488043][T20065] ref_ctr increment failed for inode: 0x1d8 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888078958000 [ 1302.743268][T20073] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3676'. [ 1302.868262][T20076] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 1302.935965][T18022] usbhid 5-1:0.0: can't add hid device: -71 [ 1302.942076][T18022] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1302.960996][T18022] usb 5-1: USB disconnect, device number 113 [ 1304.363030][T20085] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c00c642d, magic 64 != 6b] [ 1304.401148][T20091] xt_socket: unknown flags 0x8 [ 1304.418498][T20092] batadv_slave_0: entered promiscuous mode [ 1304.467382][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 1304.467602][ T5620] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1305.375719][T17212] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1305.546691][T17212] usb 9-1: Using ep0 maxpacket: 32 [ 1305.561929][T17212] usb 9-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1305.580351][T17212] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.608312][T17212] usb 9-1: Product: syz [ 1305.616004][T17212] usb 9-1: Manufacturer: syz [ 1305.620880][T17212] usb 9-1: SerialNumber: syz [ 1305.630682][T17212] usb 9-1: config 0 descriptor?? [ 1305.638923][ T991] kernel read not supported for file /comedi4 (pid: 991 comm: kworker/0:3) [ 1305.881924][T17212] RobotFuzz Open Source InterFace, OSIF 9-1:0.0: version d4.15 found at bus 009 address 017 [ 1306.116852][T20092] i2c i2c-1: adapter quirk: no zero length (addr 0x0007, size 0, read) [ 1306.249983][T20090] batadv_slave_0: left promiscuous mode [ 1306.256002][ T805] usb 9-1: USB disconnect, device number 17 [ 1306.558492][ T29] audit: type=1400 audit(1779785313.239:1785): avc: denied { write } for pid=20119 comm="syz.4.3690" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1306.590763][ T29] audit: type=1400 audit(1779785313.267:1786): avc: denied { map } for pid=20119 comm="syz.4.3690" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1308.826166][T20139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.846249][T20139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.074138][T18022] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1309.953064][T20161] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3703'. [ 1310.729072][T17212] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1310.968257][T17212] usb 9-1: Using ep0 maxpacket: 16 [ 1311.036658][T17212] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.158852][T17212] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1311.246840][T17212] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1311.364004][T17212] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.513349][T17212] usb 9-1: config 0 descriptor?? [ 1311.585309][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3709'. [ 1311.897576][ T5736] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1311.993348][T20185] netlink: 'syz.4.3712': attribute type 32 has an invalid length. [ 1312.047620][T20185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3712'. [ 1312.080534][ T5736] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.134955][ T5736] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1312.145008][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.154289][ T5736] usb 3-1: Product: syz [ 1312.159780][ T5736] usb 3-1: Manufacturer: syz [ 1312.165470][ T5736] usb 3-1: SerialNumber: syz [ 1312.173376][ T29] audit: type=1400 audit(1779785318.487:1787): avc: denied { listen } for pid=20164 comm="syz.8.3706" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1313.116817][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1313.123286][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1313.555884][T17212] usbhid 9-1:0.0: can't add hid device: -71 [ 1313.590170][T17212] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1313.610021][T20197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.633885][T17212] usb 9-1: USB disconnect, device number 19 [ 1313.663491][T20197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.718871][T20197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.754125][T20202] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.3717'. [ 1313.769672][T20197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.900653][ T5736] cdc_ncm 3-1:1.0: failed to get mac address [ 1313.952200][ T5736] cdc_ncm 3-1:1.0: bind() failure [ 1313.976652][ T5736] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1313.996598][ T5736] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1314.021903][ T5736] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 1314.073654][ T5736] usb 3-1: USB disconnect, device number 108 [ 1314.191719][T20213] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3722'. [ 1315.009903][ T991] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 1315.323668][ T29] audit: type=1400 audit(1779785321.415:1788): avc: denied { lock } for pid=20225 comm="syz.2.3724" path="/dev/vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1315.508764][T20231] ref_ctr increment failed for inode: 0x28a offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888025f06200 [ 1315.883113][ T991] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1316.070324][ T991] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.109147][ T991] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1316.149644][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.183389][ T991] usb 5-1: config 0 descriptor?? [ 1316.222346][ T991] pwc: Askey VC010 type 2 USB webcam detected. [ 1316.269002][T20244] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3731'. [ 1316.309236][T20244] unsupported nlmsg_type 40 [ 1316.709241][ T29] audit: type=1400 audit(1779785322.734:1789): avc: denied { ioctl } for pid=20228 comm="syz.4.3726" path="socket:[68067]" dev="sockfs" ino=68067 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1317.333751][ T991] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1317.402756][ T991] pwc: recv_control_msg error -32 req 02 val 2700 [ 1317.448898][ T991] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1317.472940][ T991] pwc: recv_control_msg error -32 req 04 val 1000 [ 1317.476259][ T29] audit: type=1400 audit(1779785323.445:1790): avc: denied { ioctl } for pid=20257 comm="syz.2.3736" path="socket:[68085]" dev="sockfs" ino=68085 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1317.607972][ T991] pwc: recv_control_msg error -32 req 04 val 1300 [ 1317.627474][ T991] pwc: recv_control_msg error -32 req 04 val 1400 [ 1317.657981][ T991] pwc: recv_control_msg error -71 req 02 val 2000 [ 1317.680482][ T991] pwc: recv_control_msg error -71 req 02 val 2100 [ 1317.701892][ T991] pwc: recv_control_msg error -71 req 04 val 1500 [ 1317.709056][T20242] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3730'. [ 1317.718597][ T991] pwc: recv_control_msg error -71 req 02 val 2500 [ 1317.721654][ T805] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1317.737735][ T991] pwc: recv_control_msg error -71 req 02 val 2400 [ 1317.744610][ T5736] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1317.764521][ T991] pwc: recv_control_msg error -71 req 02 val 2600 [ 1317.777754][ T991] pwc: recv_control_msg error -71 req 02 val 2900 [ 1317.791714][ T991] pwc: recv_control_msg error -71 req 02 val 2800 [ 1317.808371][ T991] pwc: recv_control_msg error -71 req 04 val 1100 [ 1317.816446][T20242] macvtap1: entered promiscuous mode [ 1317.835324][ T991] pwc: recv_control_msg error -71 req 04 val 1200 [ 1317.836905][T20242] macvtap1: entered allmulticast mode [ 1317.848907][T20242] veth1_vlan: entered allmulticast mode [ 1317.894542][ T805] usb 3-1: Using ep0 maxpacket: 8 [ 1317.906989][ T805] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 1317.919128][ T805] usb 3-1: config 0 has no interface number 1 [ 1317.931745][ T5736] usb 9-1: Using ep0 maxpacket: 16 [ 1317.935364][ T805] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1317.946513][ T991] pwc: Registered as video103. [ 1317.957820][ T5736] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.973913][ T991] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input79 [ 1318.001225][ T5736] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1318.024992][ T805] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1318.033087][ T5736] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1318.047845][ T991] usb 5-1: USB disconnect, device number 115 [ 1318.089838][ T5736] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.097637][ T805] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1318.148840][ T805] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1318.152397][ T5736] usb 9-1: config 0 descriptor?? [ 1318.196885][ T805] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1318.239568][ T805] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1318.275205][ T805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1318.306048][ T805] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1318.339309][ T805] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1318.353815][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.379672][ T805] usb 3-1: Product: syz [ 1318.390475][ T805] usb 3-1: Manufacturer: syz [ 1318.402938][ T805] usb 3-1: SerialNumber: syz [ 1318.424390][ T805] usb 3-1: config 0 descriptor?? [ 1318.438215][T20260] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1318.451029][ T805] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1318.475236][ T805] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1319.255392][ T805] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1319.513973][ T805] usb 3-1: USB disconnect, device number 109 [ 1320.473353][T20289] netlink: 'syz.9.3737': attribute type 1 has an invalid length. [ 1320.581192][T20289] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3737'. [ 1320.728713][T20289] netlink: 658 bytes leftover after parsing attributes in process `syz.9.3737'. [ 1320.745732][ T5736] usbhid 9-1:0.0: can't add hid device: -71 [ 1320.752132][ T5736] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1320.780887][ T5736] usb 9-1: USB disconnect, device number 20 [ 1320.806739][T20289] netlink: 1 bytes leftover after parsing attributes in process `syz.9.3737'. [ 1322.193987][T20304] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1322.203954][T20304] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1322.212720][T20304] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1323.145557][ T5620] Bluetooth: hci5: command tx timeout [ 1324.920102][ T805] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1325.139801][ T805] usb 9-1: Using ep0 maxpacket: 16 [ 1325.344241][ T805] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.356509][ T805] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1325.364489][ T805] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1325.373618][ T805] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.399404][ T805] usb 9-1: config 0 descriptor?? [ 1327.366646][T20344] NILFS (nullb0): couldn't find nilfs on the device [ 1327.789225][ T805] usbhid 9-1:0.0: can't add hid device: -71 [ 1327.807790][ T805] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1327.838219][ T805] usb 9-1: USB disconnect, device number 21 [ 1330.607359][T20365] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3765'. [ 1331.239521][ T29] audit: type=1400 audit(1779785336.327:1791): avc: denied { connect } for pid=20369 comm="syz.9.3766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1332.408482][T17212] usb 5-1: new low-speed USB device number 116 using dummy_hcd [ 1332.656693][T17212] usb 5-1: unable to get BOS descriptor set [ 1332.680617][T17212] usb 5-1: config 0 has no interfaces? [ 1332.721866][T17212] usb 5-1: string descriptor 0 read error: -22 [ 1332.745971][T17212] usb 5-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice= 7.1c [ 1332.877521][T20385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3771'. [ 1332.881337][T17212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.241727][T17212] usb 5-1: config 0 descriptor?? [ 1333.298145][T20385] macvtap1: entered allmulticast mode [ 1333.320334][T20385] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1333.347130][T20385] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1333.379277][T20385] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1333.436744][T20385] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1333.562300][ T805] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1333.726065][T20394] ref_ctr increment failed for inode: 0x238 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8880752ac980 [ 1335.495302][ T805] usb 5-1: USB disconnect, device number 116 [ 1336.438218][ T805] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1336.598622][ T805] usb 5-1: Using ep0 maxpacket: 8 [ 1336.605575][ T805] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1336.618914][ T805] usb 5-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 1336.659194][ T805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.677824][ T805] usb 5-1: config 0 descriptor?? [ 1337.708985][T20427] NILFS (nullb0): couldn't find nilfs on the device [ 1338.892676][ T805] usbhid 5-1:0.0: can't add hid device: -71 [ 1339.245727][ T805] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1339.307018][ T805] usb 5-1: USB disconnect, device number 117 [ 1339.530398][T20436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.783903][ T805] usb 5-1: new low-speed USB device number 118 using dummy_hcd [ 1339.958795][ T805] usb 5-1: unable to get BOS descriptor set [ 1339.971387][ T805] usb 5-1: config 0 has no interfaces? [ 1339.989142][ T805] usb 5-1: string descriptor 0 read error: -22 [ 1340.006380][ T805] usb 5-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice= 7.1c [ 1340.026527][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.070043][ T805] usb 5-1: config 0 descriptor?? [ 1340.096633][T20448] macvtap1: entered allmulticast mode [ 1340.102198][T20448] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 1340.116645][T20448] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 1340.138661][T20448] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1340.169660][T20448] netdevsim netdevsim9 netdevsim0: left allmulticast mode [ 1340.263455][T17212] netdevsim netdevsim9 netdevsim0: left promiscuous mode [ 1340.643210][ T5620] Bluetooth: hci3: command tx timeout [ 1341.914667][T20471] overlayfs: failed to clone upperpath [ 1342.456856][ T991] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1342.641473][ T991] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1342.666484][ T991] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1342.718058][T17212] usb 5-1: USB disconnect, device number 118 [ 1342.726780][ T991] usb 9-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1342.768761][ T991] usb 9-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.40 [ 1342.797644][ T991] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.813876][ T991] usb 9-1: Product: 멦ﺶ₊샂ฌ䀒졔阷灕풁Ώ竾夎䝙 [ 1342.822983][ T991] usb 9-1: Manufacturer: 芀厪㕵ⷡ誯潥콿튆ೞ䱖䣑鹳俖悊ᣓ࿗脗콑搭裃ﮇ溊⓱訨멙꽈癢찀ᩨ孔ꋭ팚≑昩설욱⦄ԡ [ 1342.841768][T20483] netlink: 'syz.6.3797': attribute type 4 has an invalid length. [ 1342.841767][ T991] usb 9-1: SerialNumber: 麎꛽䇂༒⹽禷€䊱䬩睙猚ꕋ｠ꆈ喫튌쌌緙⓭䷴⽩揰꯲㖹믣꯿睻㈎闞벯꿵뚔㳄经땆᤹鵂䙠듭ꆣ뇍ⷢ䢝瑠万怣묹客扑ꩇ穃ᕯ◔⒄鰉ￓᠣ㛯ݱ⻱쮭呑삈覘⶙ⅸ炈쫅袹ஷ呜鈶膡똀緲䮏餽ﳚ挫罭ᇡ끯ᨬ꺃嘘멢锿㵂蛴ࠢ謫앆싄먾ꮟ⒈涗ﷱ믧䏞᪢䜒虉⩐ꠜ벘 [ 1342.886766][T20483] netlink: 'syz.6.3797': attribute type 4 has an invalid length. [ 1343.390680][ T991] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1343.413596][ T991] usb 9-1: USB disconnect, device number 22 [ 1343.449079][T19699] udevd[19699]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1344.543068][T20512] netlink: 'syz.8.3809': attribute type 4 has an invalid length. [ 1344.546798][T20508] MINIX-fs: unable to read superblock [ 1344.675010][T20515] netlink: 'syz.8.3809': attribute type 4 has an invalid length. [ 1345.482536][T20518] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3810'. [ 1345.524398][ T805] lo speed is unknown, defaulting to 1000 [ 1345.536067][T18021] lo speed is unknown, defaulting to 1000 [ 1346.196231][T20531] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1346.293705][T17212] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1346.411695][T20535] IPv6: Can't replace route, no match found [ 1346.464908][T17212] usb 9-1: Using ep0 maxpacket: 8 [ 1346.473370][T17212] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 1346.490885][T17212] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1346.510927][T17212] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.527122][T17212] usb 9-1: Product: syz [ 1346.539062][T17212] usb 9-1: Manufacturer: syz [ 1346.550647][T17212] usb 9-1: SerialNumber: syz [ 1346.567733][T17212] usb 9-1: config 0 descriptor?? [ 1346.584993][T17212] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1346.603125][T17212] usb 9-1: setting power ON [ 1346.615368][T17212] dvb-usb: bulk message failed: -22 (2/0) [ 1346.630026][T17212] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1346.659249][T17212] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1346.685663][T17212] usb 9-1: media controller created [ 1346.721384][T17212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1346.755040][ T29] audit: type=1400 audit(1779785350.838:1792): avc: denied { setattr } for pid=20539 comm="syz.6.3817" name="NETLINK" dev="sockfs" ino=68471 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1346.796175][ T5620] Bluetooth: hci3: command tx timeout [ 1346.811315][T17212] usb 9-1: selecting invalid altsetting 6 [ 1346.820366][T17212] usb 9-1: digital interface selection failed (-22) [ 1346.833459][T17212] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1346.887295][T17212] usb 9-1: setting power OFF [ 1346.901305][T17212] dvb-usb: bulk message failed: -22 (2/0) [ 1346.918281][T17212] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1346.942905][T17212] (NULL device *): no alternate interface [ 1347.047613][T17212] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1347.092635][T17212] usb 9-1: USB disconnect, device number 23 [ 1348.059748][T20557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3818'. [ 1348.303125][T17212] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1348.388640][ T991] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1348.474308][T17212] usb 9-1: Using ep0 maxpacket: 8 [ 1348.480765][T17212] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1348.493716][T17212] usb 9-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 1348.502914][T17212] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.513401][T17212] usb 9-1: config 0 descriptor?? [ 1348.623601][ T991] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1348.645186][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.657340][ T991] usb 3-1: config 0 descriptor?? [ 1348.670457][ T991] cp210x 3-1:0.0: cp210x converter detected [ 1348.835793][T20564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3825'. [ 1348.853386][T20564] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3825'. [ 1348.912969][T20566] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3824'. [ 1348.922435][T20566] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3824'. [ 1349.057952][T17212] usbhid 9-1:0.0: can't add hid device: -71 [ 1349.125874][T17212] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1349.137648][ T991] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1349.220836][T17212] usb 9-1: USB disconnect, device number 24 [ 1349.241755][ T991] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1349.449085][T17212] usb 3-1: USB disconnect, device number 110 [ 1349.469913][T17212] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1349.486443][T20574] ref_ctr increment failed for inode: 0xbd3 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888025f04980 [ 1349.499329][T17212] cp210x 3-1:0.0: device disconnected [ 1349.715460][T17212] Process accounting resumed [ 1350.684509][ T29] audit: type=1326 audit(1779785354.421:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20577 comm="syz.4.3829" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b259ce59 code=0x7fc00000 [ 1352.346181][T20608] vxlan0: left promiscuous mode [ 1352.357554][T20608] macvtap1: left promiscuous mode [ 1353.221057][ T29] audit: type=1400 audit(1779785356.881:1794): avc: denied { execute } for pid=20597 comm="syz.4.3837" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1354.699673][T17212] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1355.140177][T17212] usb 9-1: Using ep0 maxpacket: 8 [ 1355.282217][T17212] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1355.376259][T17212] usb 9-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 1355.422254][T17212] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.489948][T17212] usb 9-1: config 0 descriptor?? [ 1356.070894][T20636] ref_ctr increment failed for inode: 0x2c2 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88813fe855c0 [ 1356.632552][T17212] usbhid 9-1:0.0: can't add hid device: -71 [ 1356.638624][T17212] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1356.654802][T17212] usb 9-1: USB disconnect, device number 25 [ 1356.699782][T20638] fuse: fd is not a fuse device [ 1356.717935][T20638] lo speed is unknown, defaulting to 1000 [ 1357.401249][T20655] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1357.575823][T20655] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1357.586425][T20655] overlayfs: failed to look up (tracing) for ino (-66) [ 1359.584374][T20670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3856'. [ 1359.593551][T20670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3856'. [ 1359.772525][ T24] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1359.986272][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1359.992773][ T24] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1360.002543][ T24] usb 5-1: config 179 has no interface number 0 [ 1360.008903][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1360.020883][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1360.032255][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1360.043518][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1360.055406][ T24] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1360.068740][ T24] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1360.077888][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.123748][T20667] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1360.431144][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input80 [ 1361.082816][ T991] usb 5-1: USB disconnect, device number 119 [ 1361.082816][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1361.082859][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1361.408382][ T24] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1361.438550][T20692] ref_ctr increment failed for inode: 0x300 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807494bd40 [ 1362.284544][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 1362.296841][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1362.321074][ T24] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1362.343546][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1362.358149][ T24] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1362.381480][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.389656][ T24] usb 9-1: Product: syz [ 1362.393954][ T24] usb 9-1: Manufacturer: syz [ 1362.398697][ T24] usb 9-1: SerialNumber: syz [ 1362.563106][ T24] usb 9-1: config 0 descriptor?? [ 1363.014097][T20688] binder: 20686:20688 ioctl c0306201 2000000004c0 returned -22 [ 1363.282226][T20688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.296774][T20688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.484322][T20715] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3869'. [ 1364.190230][ T24] gs_usb 9-1:0.0: Couldn't get device config: (err=-110) [ 1364.366159][ T24] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -110 [ 1365.053572][T20729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3871'. [ 1365.290539][ T991] usb 9-1: USB disconnect, device number 26 [ 1366.557803][ T29] audit: type=1400 audit(1779785369.361:1795): avc: denied { mounton } for pid=20741 comm="syz.2.3878" path="/143/file0" dev="tmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1366.619585][T20747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3878'. [ 1366.627009][T20751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3882'. [ 1366.675661][T20752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3878'. [ 1367.859364][T18028] usb 10-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1367.904492][T18028] dvb_usb_ec168 10-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1367.921538][T20773] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.3889'. [ 1367.966812][T18028] usb 10-1: USB disconnect, device number 16 [ 1368.145916][T20779] ref_ctr increment failed for inode: 0x31c offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888075278c40 [ 1368.200531][T20780] ref_ctr increment failed for inode: 0xc3f offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8880236a55c0 [ 1368.492840][T20789] FAULT_INJECTION: forcing a failure. [ 1368.492840][T20789] name failslab, interval 1, probability 0, space 0, times 0 [ 1368.507202][T20789] CPU: 1 UID: 0 PID: 20789 Comm: syz.9.3894 Tainted: G L syzkaller #0 PREEMPT(full) [ 1368.507235][T20789] Tainted: [L]=SOFTLOCKUP [ 1368.507244][T20789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1368.507256][T20789] Call Trace: [ 1368.507263][T20789] [ 1368.507271][T20789] dump_stack_lvl+0x100/0x190 [ 1368.507301][T20789] should_fail_ex.cold+0x5/0xa [ 1368.507329][T20789] should_failslab+0xc2/0x120 [ 1368.507352][T20789] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1368.507385][T20789] ? sock_alloc_inode+0x26/0x290 [ 1368.507414][T20789] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1368.507441][T20789] sock_alloc_inode+0x26/0x290 [ 1368.507467][T20789] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1368.507492][T20789] alloc_inode+0x68/0x250 [ 1368.507513][T20789] sock_alloc+0x44/0x280 [ 1368.507538][T20789] do_accept+0xf9/0x530 [ 1368.507570][T20789] ? do_raw_spin_lock+0x128/0x260 [ 1368.507613][T20789] ? __pfx_do_accept+0x10/0x10 [ 1368.507665][T20789] __sys_accept4+0x108/0x200 [ 1368.507698][T20789] ? __pfx___sys_accept4+0x10/0x10 [ 1368.507733][T20789] ? __pfx_ksys_write+0x10/0x10 [ 1368.507763][T20789] __x64_sys_accept4+0x96/0x100 [ 1368.507797][T20789] ? lockdep_hardirqs_on+0x78/0x100 [ 1368.507830][T20789] do_syscall_64+0x10b/0xf80 [ 1368.507861][T20789] ? clear_bhb_loop+0x40/0x90 [ 1368.507889][T20789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.507912][T20789] RIP: 0033:0x7f0628f9ce59 [ 1368.507932][T20789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.507955][T20789] RSP: 002b:00007f06271f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1368.507977][T20789] RAX: ffffffffffffffda RBX: 00007f0629215fa0 RCX: 00007f0628f9ce59 [ 1368.507992][T20789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1368.508006][T20789] RBP: 00007f06271f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.508020][T20789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.508034][T20789] R13: 00007f0629216038 R14: 00007f0629215fa0 R15: 00007fff197e6388 [ 1368.508065][T20789] [ 1368.907155][T20792] batadv_slave_0: entered promiscuous mode [ 1368.929033][T20791] batadv_slave_0: left promiscuous mode [ 1369.029358][T18028] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1369.046446][T20796] netlink: 'syz.9.3897': attribute type 4 has an invalid length. [ 1369.067505][T20796] netlink: 'syz.9.3897': attribute type 4 has an invalid length. [ 1369.211013][T18028] usb 5-1: Using ep0 maxpacket: 32 [ 1369.225493][T18028] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1369.227711][ T29] audit: type=1400 audit(1779785371.868:1796): avc: denied { name_connect } for pid=20800 comm="syz.6.3899" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1369.247932][T18028] usb 5-1: config 0 has no interface number 0 [ 1369.283558][T18028] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1369.331451][T18028] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1369.355579][T18028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.379541][T18028] usb 5-1: Product: syz [ 1369.391244][T18028] usb 5-1: Manufacturer: syz [ 1369.405854][T18028] usb 5-1: SerialNumber: syz [ 1369.422382][T18028] usb 5-1: config 0 descriptor?? [ 1369.440497][T18028] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1369.452339][ T991] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1369.457148][ T5620] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1369.516682][T18028] em28xx 5-1:0.132: Video interface 132 found: [ 1369.571117][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 1370.211673][ T991] usb 10-1: Using ep0 maxpacket: 8 [ 1370.219582][ T991] usb 10-1: config index 0 descriptor too short (expected 30, got 18) [ 1370.229875][ T991] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1370.240124][ T991] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.248273][ T991] usb 10-1: Product: syz [ 1370.252523][ T991] usb 10-1: Manufacturer: syz [ 1370.257207][ T991] usb 10-1: SerialNumber: syz [ 1370.266855][ T991] usb 10-1: config 0 descriptor?? [ 1370.276051][ T991] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1370.289605][ T991] usb 10-1: setting power ON [ 1370.305736][ T991] dvb-usb: bulk message failed: -22 (2/0) [ 1370.320413][ T991] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1370.330890][ T991] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1370.444097][T18028] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1370.450515][ T991] usb 10-1: media controller created [ 1370.473943][ T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1370.501288][ T991] usb 10-1: selecting invalid altsetting 6 [ 1370.507201][ T991] usb 10-1: digital interface selection failed (-22) [ 1370.513889][ T991] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1370.525362][ T991] usb 10-1: setting power OFF [ 1370.530123][ T991] dvb-usb: bulk message failed: -22 (2/0) [ 1370.536035][ T991] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1370.569844][ T991] (NULL device *): no alternate interface [ 1370.601329][ T991] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1370.637965][ T991] usb 10-1: USB disconnect, device number 17 [ 1370.683548][T18028] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1370.697477][T18028] em28xx 5-1:0.132: board has no eeprom [ 1370.771594][T18028] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1370.787947][T18028] em28xx 5-1:0.132: analog set to bulk mode. [ 1370.804569][ T5736] em28xx 5-1:0.132: Registering V4L2 extension [ 1370.814833][ T24] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1370.817065][T18028] usb 5-1: USB disconnect, device number 120 [ 1370.839506][T18028] em28xx 5-1:0.132: Disconnecting em28xx [ 1370.978842][ T5736] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1370.992652][ T5736] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1370.999546][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1371.008422][ T5736] em28xx 5-1:0.132: No AC97 audio processor [ 1371.725722][ T5736] usb 5-1: Decoder not found [ 1371.737484][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1371.766550][ T24] usb 9-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1371.773744][ T5736] em28xx 5-1:0.132: failed to create media graph [ 1371.789961][ T24] usb 9-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.40 [ 1371.810312][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.819804][ T5736] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1371.828546][ T24] usb 9-1: Product: 멦ﺶ₊샂ฌ䀒졔阷灕풁Ώ竾夎䝙 [ 1371.847927][ T5736] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1371.851584][ T5620] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1371.862931][ T24] usb 9-1: Manufacturer: 芀厪㕵ⷡ誯潥콿튆ೞ䱖䣑鹳俖悊ᣓ࿗脗콑搭裃ﮇ溊⓱訨멙꽈癢찀ᩨ孔ꋭ팚≑昩설욱⦄ԡ [ 1371.894031][T18028] em28xx 5-1:0.132: Closing input extension [ 1371.904799][ T24] usb 9-1: SerialNumber: 麎꛽䇂༒⹽禷€䊱䬩睙猚ꕋ｠ꆈ喫튌쌌緙⓭䷴⽩揰꯲㖹믣꯿睻㈎闞벯꿵뚔㳄经땆᤹鵂䙠듭ꆣ뇍ⷢ䢝瑠万怣묹客扑ꩇ穃ᕯ◔⒄鰉ￓᠣ㛯ݱ⻱쮭呑삈覘⶙ⅸ炈쫅袹ஷ呜鈶膡똀緲䮏餽ﳚ挫罭ᇡ끯ᨬ꺃嘘멢锿㵂蛴ࠢ謫앆싄먾ꮟ⒈涗ﷱ믧䏞᪢䜒虉⩐ꠜ벘 [ 1371.976649][T18028] em28xx 5-1:0.132: Freeing device [ 1372.023401][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 1372.029794][T20828] ref_ctr increment failed for inode: 0x25b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802d8fd5c0 [ 1372.122111][T20830] ref_ctr increment failed for inode: 0x32c offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802d8f8000 [ 1372.343337][ T5736] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1372.458842][ T24] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1372.477374][ T24] usb 9-1: USB disconnect, device number 27 [ 1372.501235][T19750] udevd[19750]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1372.551316][ T5736] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.570106][ T5736] usb 10-1: config 0 has no interfaces? [ 1372.579982][ T5736] usb 10-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1372.593322][ T5736] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.604940][ T5736] usb 10-1: Product: syz [ 1372.609227][ T5736] usb 10-1: Manufacturer: syz [ 1372.614091][ T5736] usb 10-1: SerialNumber: syz [ 1372.622854][ T5736] usb 10-1: config 0 descriptor?? [ 1372.739587][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1372.752807][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1372.767639][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1372.775622][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1372.783689][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1372.867193][ T991] usb 10-1: USB disconnect, device number 18 [ 1373.016738][T11244] syz_tun (unregistering): left allmulticast mode [ 1373.023330][T11244] syz_tun (unregistering): left promiscuous mode [ 1373.029991][T11244] bridge0: port 3(syz_tun) entered disabled state [ 1373.161365][T20859] xt_hashlimit: size too large, truncated to 1048576 [ 1374.643297][T10843] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1374.778237][T20879] overlayfs: missing 'lowerdir' [ 1375.133895][T17811] Bluetooth: hci4: command tx timeout [ 1375.202865][T20849] lo speed is unknown, defaulting to 1000 [ 1375.256537][T20870] bond1: (slave bond_slave_1): Device is not our slave [ 1375.267295][T20870] bond1: option active_slave: invalid value (bond_slave_1) [ 1375.325271][T20870] bond1 (unregistering): Released all slaves [ 1375.607502][T10843] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1375.617817][ T5627] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1375.618138][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 1375.648319][T20889] netlink: 'syz.8.3918': attribute type 4 has an invalid length. [ 1375.703654][T20887] netlink: 'syz.8.3918': attribute type 4 has an invalid length. [ 1375.717507][ T991] lo speed is unknown, defaulting to 1000 [ 1375.721170][T18021] lo speed is unknown, defaulting to 1000 [ 1375.788828][T10843] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1375.807050][ T5736] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1375.949440][T10843] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1375.988225][ T5736] usb 3-1: Using ep0 maxpacket: 32 [ 1376.000252][ T5736] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1376.009529][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.018403][ T5736] usb 3-1: Product: syz [ 1376.023222][ T5736] usb 3-1: Manufacturer: syz [ 1376.028264][ T5736] usb 3-1: SerialNumber: syz [ 1376.037397][ T5736] usb 3-1: config 0 descriptor?? [ 1376.140506][ T991] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1376.296269][ T5736] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 111 [ 1376.341203][ T991] usb 9-1: Using ep0 maxpacket: 8 [ 1376.368933][ T991] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 1376.391142][ T991] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1376.421988][ T991] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.443627][ T991] usb 9-1: Product: syz [ 1376.449036][ T991] usb 9-1: Manufacturer: syz [ 1376.458202][ T991] usb 9-1: SerialNumber: syz [ 1376.485343][T20885] i2c i2c-1: adapter quirk: no zero length (addr 0x0007, size 0, read) [ 1376.503098][ T991] usb 9-1: config 0 descriptor?? [ 1376.525126][T18022] usb 3-1: USB disconnect, device number 111 [ 1376.543383][ T991] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1376.571265][ T991] usb 9-1: setting power ON [ 1376.586073][ T991] dvb-usb: bulk message failed: -22 (2/0) [ 1376.609510][ T991] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1376.620040][ T991] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1376.628517][ T991] usb 9-1: media controller created [ 1376.652624][T10843] bridge_slave_1: left allmulticast mode [ 1376.678564][T10843] bridge_slave_1: left promiscuous mode [ 1376.686784][ T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1376.703413][T10843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.750860][ T991] usb 9-1: selecting invalid altsetting 6 [ 1376.773566][T10843] bridge_slave_0: left allmulticast mode [ 1376.785510][ T991] usb 9-1: digital interface selection failed (-22) [ 1376.801174][T10843] bridge_slave_0: left promiscuous mode [ 1376.810756][ T991] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1376.823099][T10843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.837829][ T991] usb 9-1: setting power OFF [ 1376.855925][ T991] dvb-usb: bulk message failed: -22 (2/0) [ 1376.874110][ T991] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1376.904021][ T991] (NULL device *): no alternate interface [ 1376.987765][ T991] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1377.009820][ T991] usb 9-1: USB disconnect, device number 28 [ 1377.242633][ T29] audit: type=1400 audit(1779785379.362:1797): avc: denied { write } for pid=20902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1377.334761][ T5620] Bluetooth: hci4: command tx timeout [ 1377.469178][ T29] audit: type=1400 audit(1779785379.577:1798): avc: denied { write } for pid=20924 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1377.514472][T10843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1377.540905][T10843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1377.560837][T10843] bond0 (unregistering): Released all slaves [ 1377.579790][T10843] bond1 (unregistering): Released all slaves [ 1377.935073][ T5277] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1377.995306][T20849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.042474][T20849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.053929][T20849] bridge_slave_0: entered allmulticast mode [ 1378.133970][T20849] bridge_slave_0: entered promiscuous mode [ 1378.155795][T20849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.176822][T20849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.189455][T20849] bridge_slave_1: entered allmulticast mode [ 1378.197446][T20849] bridge_slave_1: entered promiscuous mode [ 1378.216988][T10843] : left promiscuous mode [ 1378.442230][ T29] audit: type=1400 audit(1779785380.485:1799): avc: denied { bind } for pid=20932 comm="syz.4.3925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1378.517540][T20849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.542193][ T29] audit: type=1400 audit(1779785380.485:1800): avc: denied { node_bind } for pid=20932 comm="syz.4.3925" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1378.563513][ T29] audit: type=1400 audit(1779785380.513:1801): avc: denied { create } for pid=20930 comm="syz.2.3924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1378.594689][T10843] tipc: Disabling bearer [ 1378.609779][T20941] ref_ctr increment failed for inode: 0x26c offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807ca7bd40 [ 1378.640130][T10843] tipc: Left network mode [ 1378.656381][T20849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1378.725835][T18016] usb 5-1: new low-speed USB device number 121 using dummy_hcd [ 1378.742308][T10843] IPVS: stopping master sync thread 15818 ... [ 1378.792054][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1378.794623][T20849] team0: Port device team_slave_0 added [ 1378.799087][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1378.851706][T20849] team0: Port device team_slave_1 added [ 1378.920275][T18016] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1378.939964][T18016] usb 5-1: config 8 has an invalid interface number: 51 but max is 0 [ 1378.940930][T20949] netlink: 840 bytes leftover after parsing attributes in process `syz.8.3927'. [ 1378.968057][T20935] lo speed is unknown, defaulting to 1000 [ 1378.979249][T18016] usb 5-1: config 8 has no interface number 0 [ 1378.991935][T18021] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1379.004328][T18016] usb 5-1: config 8 interface 51 altsetting 192 endpoint 0x81 is Bulk; changing to Interrupt [ 1379.021068][T18016] usb 5-1: config 8 interface 51 altsetting 192 endpoint 0xE has invalid maxpacket 16, setting to 8 [ 1379.036062][T18016] usb 5-1: config 8 interface 51 has no altsetting 0 [ 1379.092033][T18016] usb 5-1: string descriptor 0 read error: -22 [ 1379.120108][T18016] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0111, bcdDevice=e5.56 [ 1379.132032][T18016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.209628][T18021] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1379.229358][T20937] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1379.236609][T20937] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1379.246561][T18016] ftdi_sio 5-1:8.51: FTDI USB Serial Device converter detected [ 1379.255257][T18021] usb 10-1: can't read configurations, error -61 [ 1379.318444][ T29] audit: type=1400 audit(1779785381.308:1802): avc: denied { write } for pid=20938 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1379.349806][T18016] ftdi_sio ttyUSB0: unknown device type: 0xe556 [ 1379.402526][T20849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1379.413509][T20849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.445661][T18021] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1379.454418][T20849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1379.515417][T20849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1379.524086][T20849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.550475][ T5620] Bluetooth: hci4: command tx timeout [ 1379.556557][T20849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1379.629224][ T29] audit: type=1400 audit(1779785381.598:1803): avc: denied { write } for pid=20957 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1379.657368][T18021] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1379.665513][T18021] usb 10-1: can't read configurations, error -61 [ 1379.673856][T18021] usb usb10-port1: attempt power cycle [ 1379.835528][T20849] hsr_slave_0: entered promiscuous mode [ 1379.850063][T20849] hsr_slave_1: entered promiscuous mode [ 1379.858037][T20849] debugfs: 'hsr0' already exists in 'hsr' [ 1379.863888][T20849] Cannot create hsr debugfs directory [ 1379.881404][ T5277] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1379.951178][T10843] hsr_slave_0: left promiscuous mode [ 1379.959474][T10843] hsr_slave_1: left promiscuous mode [ 1379.971869][T10843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1379.984034][T10843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1379.994845][T10843] veth1_vlan: left allmulticast mode [ 1380.067192][T18021] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1380.107605][T18021] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1380.116831][T18021] usb 10-1: can't read configurations, error -61 [ 1380.306379][T18021] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1380.341036][T18021] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1380.350034][T18021] usb 10-1: can't read configurations, error -61 [ 1380.357494][T18021] usb usb10-port1: unable to enumerate USB device [ 1380.415984][T10843] team0 (unregistering): Port device team_slave_1 removed [ 1380.457894][T10843] team0 (unregistering): Port device team_slave_0 removed [ 1381.124085][T20969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3929'. [ 1381.447112][ T29] audit: type=1400 audit(1779785383.291:1804): avc: denied { write } for pid=20962 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1381.504854][T17212] usb 5-1: USB disconnect, device number 121 [ 1381.570352][T17212] ftdi_sio 5-1:8.51: device disconnected [ 1381.647183][ T29] audit: type=1400 audit(1779785383.488:1805): avc: denied { write } for pid=20977 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1381.776644][ T5620] Bluetooth: hci4: command tx timeout [ 1382.102278][ T991] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1382.294571][ T991] usb 9-1: Using ep0 maxpacket: 32 [ 1382.310325][ T991] usb 9-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1382.357369][ T991] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.382369][ T991] usb 9-1: Product: syz [ 1382.398325][ T991] usb 9-1: Manufacturer: syz [ 1382.415090][ T991] usb 9-1: SerialNumber: syz [ 1382.434362][ T991] usb 9-1: config 0 descriptor?? [ 1382.696680][ T991] RobotFuzz Open Source InterFace, OSIF 9-1:0.0: version d4.15 found at bus 009 address 029 [ 1382.893702][T20985] i2c i2c-1: adapter quirk: no zero length (addr 0x0007, size 0, read) [ 1382.943032][ T5736] usb 9-1: USB disconnect, device number 29 [ 1382.949290][T20849] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1382.978488][T20849] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1383.015136][T20849] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1383.057845][T20849] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1383.084717][T20849] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1383.140509][T20849] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1383.159129][ T29] audit: type=1400 audit(1779785384.891:1806): avc: denied { write } for pid=20994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1383.185435][T20849] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1383.212016][T20849] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1383.354096][T20849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1383.365672][ T29] audit: type=1400 audit(1779785385.097:1807): avc: denied { write } for pid=21023 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1383.412588][T20849] 8021q: adding VLAN 0 to HW filter on device team0 [ 1383.469000][T10846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.476192][T10846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1383.486344][ T29] audit: type=1400 audit(1779785385.209:1808): avc: denied { mounton } for pid=21009 comm="syz.9.3935" path="/115/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1383.487751][T21024] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1383.523551][T10843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.530707][T10843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1383.605467][T21027] NILFS (nullb0): couldn't find nilfs on the device [ 1383.971944][T21024] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1384.003914][T21024] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 1384.141781][T21034] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3938'. [ 1384.383202][T20849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1384.772586][T21034] macvtap1: entered allmulticast mode [ 1384.779706][T21034] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 1384.806169][T21034] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1384.843016][T21034] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1384.905712][T21034] netdevsim netdevsim8 netdevsim0: left allmulticast mode [ 1385.094028][T18016] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 1385.115687][ T29] audit: type=1400 audit(1779785386.724:1809): avc: denied { write } for pid=21028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1385.298180][T17212] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1385.398758][ T29] audit: type=1400 audit(1779785386.996:1810): avc: denied { write } for pid=21066 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1385.459897][T17212] usb 3-1: Using ep0 maxpacket: 16 [ 1385.488022][T17212] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1385.500925][T17212] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 1385.515634][T17212] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.530527][T17212] usb 3-1: config 13 has no interface number 0 [ 1385.540096][T21071] ref_ctr increment failed for inode: 0x328 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888034a48c40 [ 1385.553508][T17212] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 1385.564402][T17212] usb 3-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1385.580140][T17212] usb 3-1: config 13 interface 50 has no altsetting 0 [ 1385.599004][T17212] usb 3-1: string descriptor 0 read error: -22 [ 1385.605537][T17212] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1385.626385][T17212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.660384][T21059] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1385.683851][T17212] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1385.691251][T17212] usb 3-1: MIDIStreaming interface descriptor not found [ 1385.855528][ T5736] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1385.912975][T17212] usb 3-1: USB disconnect, device number 112 [ 1385.967172][T20849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1386.050091][ T5736] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1386.064784][ T5736] usb 5-1: can't read configurations, error -61 [ 1386.250557][ T5736] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1386.432961][ T5736] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1386.444673][ T29] audit: type=1400 audit(1779785387.969:1811): avc: denied { write } for pid=21074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1386.475710][ T5736] usb 5-1: can't read configurations, error -61 [ 1386.503787][ T5736] usb usb5-port1: attempt power cycle [ 1386.568202][T20849] veth0_vlan: entered promiscuous mode [ 1386.718533][T20849] veth1_vlan: entered promiscuous mode [ 1387.223497][ T5736] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1387.238643][T20849] veth0_macvtap: entered promiscuous mode [ 1387.261174][ T5736] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1387.273638][T20849] veth1_macvtap: entered promiscuous mode [ 1387.273638][ T29] audit: type=1400 audit(1779785388.745:1812): avc: denied { write } for pid=21098 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1387.289151][ T5736] usb 5-1: can't read configurations, error -61 [ 1387.370090][T20849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1387.376104][ T29] audit: type=1400 audit(1779785388.839:1813): avc: denied { mount } for pid=21102 comm="syz.9.3946" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1387.410536][T20849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1387.419146][ T29] audit: type=1400 audit(1779785388.886:1814): avc: denied { search } for pid=21102 comm="syz.9.3946" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1387.451247][T10839] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.474677][T10839] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.494452][ T5736] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1387.507198][T10839] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.529943][ T29] audit: type=1400 audit(1779785388.886:1815): avc: denied { read } for pid=21102 comm="syz.9.3946" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1387.572024][T10839] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.583863][ T5736] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1387.620636][ T5736] usb 5-1: can't read configurations, error -61 [ 1387.647439][ T5736] usb usb5-port1: unable to enumerate USB device [ 1387.888332][T18754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.928083][T18754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.036805][T10836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.060129][T10836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.586097][T21126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3949'. [ 1388.927430][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1388.927450][ T29] audit: type=1400 audit(1779785390.298:1818): avc: denied { write } for pid=21104 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1389.123938][ T29] audit: type=1400 audit(1779785390.476:1819): avc: denied { write } for pid=21137 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1389.456184][T21143] tipc: Started in network mode [ 1389.461215][T21143] tipc: Node identity ac14140f, cluster identity 4711 [ 1389.476743][T21143] tipc: New replicast peer: 255.255.255.255 [ 1389.484859][T21143] tipc: Enabled bearer , priority 10 [ 1390.375480][T18028] usb 9-1: new low-speed USB device number 30 using dummy_hcd [ 1390.386018][T21153] netlink: 'syz.4.3955': attribute type 4 has an invalid length. [ 1390.451769][T21155] netlink: 'syz.4.3955': attribute type 4 has an invalid length. [ 1390.552074][T18028] usb 9-1: unable to get BOS descriptor set [ 1390.575757][T18028] usb 9-1: config 0 has no interfaces? [ 1390.631878][T18028] usb 9-1: string descriptor 0 read error: -22 [ 1390.759882][T18022] tipc: Node number set to 2886997007 [ 1390.810614][T18028] usb 9-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice= 7.1c [ 1391.406102][T18028] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.488291][T17212] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1391.561417][T18028] usb 9-1: config 0 descriptor?? [ 1391.690779][T17212] usb 5-1: Using ep0 maxpacket: 8 [ 1391.705259][T17212] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1391.799899][T17212] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1391.809324][T17212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.830682][T17212] usb 5-1: Product: syz [ 1391.839002][T17212] usb 5-1: Manufacturer: syz [ 1391.854222][T17212] usb 5-1: SerialNumber: syz [ 1391.877335][T17212] usb 5-1: config 0 descriptor?? [ 1391.902549][T17212] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1391.922488][T17212] usb 5-1: setting power ON [ 1391.932974][T17212] dvb-usb: bulk message failed: -22 (2/0) [ 1391.952884][T17212] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1391.974588][T17212] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1391.989531][T17212] usb 5-1: media controller created [ 1392.013494][T17212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1392.059907][T17212] usb 5-1: selecting invalid altsetting 6 [ 1392.066876][T17212] usb 5-1: digital interface selection failed (-22) [ 1392.074996][T17212] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1392.075106][T18022] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1392.093788][T17212] usb 5-1: setting power OFF [ 1392.108788][T17212] dvb-usb: bulk message failed: -22 (2/0) [ 1392.114878][T17212] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1392.132835][T17212] (NULL device *): no alternate interface [ 1392.202495][T17212] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1392.231702][T17212] usb 5-1: USB disconnect, device number 126 [ 1392.278117][T18022] usb 3-1: Using ep0 maxpacket: 32 [ 1392.297829][T18022] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1392.338351][T18022] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1392.349712][T18022] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1392.359071][T18022] usb 3-1: Product: syz [ 1392.363895][T18022] usb 3-1: Manufacturer: syz [ 1392.368685][T18022] usb 3-1: SerialNumber: syz [ 1392.415837][T18022] usb 3-1: config 0 descriptor?? [ 1392.425922][T21168] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1392.440444][T18022] hub 3-1:0.0: bad descriptor, ignoring hub [ 1392.446606][T18022] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1392.830157][T21174] ref_ctr increment failed for inode: 0x338 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8880236a0c40 [ 1393.014966][T15660] usb 9-1: USB disconnect, device number 30 [ 1393.133526][T17212] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1393.307161][T17212] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1393.316719][T17212] usb 5-1: can't read configurations, error -61 [ 1393.331578][T21168] usb 3-1: reset high-speed USB device number 113 using dummy_hcd [ 1393.393135][T15660] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1393.671846][T17212] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1393.696890][ T29] audit: type=1326 audit(1779785394.751:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21181 comm="syz.9.3965" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0628f9ce59 code=0x0 [ 1393.765578][T15660] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.775788][T15660] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1393.784672][T15660] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1393.802973][T15660] usb 9-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1393.815652][T15660] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.823779][T15660] usb 9-1: Product: syz [ 1393.829142][T15660] usb 9-1: Manufacturer: syz [ 1393.834720][T15660] usb 9-1: SerialNumber: syz [ 1393.841231][T15660] usb 9-1: config 0 descriptor?? [ 1393.848590][T15660] uvcvideo 9-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 1393.856002][T15660] uvcvideo 9-1:0.0: No valid video chain found. [ 1393.864527][T17212] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1393.873395][T17212] usb 5-1: can't read configurations, error -61 [ 1393.879952][T17212] usb usb5-port1: attempt power cycle [ 1393.896464][T21168] usb 3-1: device firmware changed [ 1393.907275][T18016] usb 3-1: USB disconnect, device number 113 [ 1394.052660][T18016] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1394.071726][T21176] batman_adv: batadv0: Adding interface: macvtap1 [ 1394.078203][T21176] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1394.103681][T21176] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1394.148503][T21176] batman_adv: batadv0: Removing interface: macvtap1 [ 1394.187590][T18021] usb 9-1: USB disconnect, device number 31 [ 1394.223895][T18016] usb 3-1: Using ep0 maxpacket: 32 [ 1394.231799][T18016] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1394.245476][T17212] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1394.263831][T18016] usb 3-1: string descriptor 0 read error: -22 [ 1394.273061][T18016] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1394.282879][T18016] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1394.298964][T18016] usb 3-1: config 0 descriptor?? [ 1394.441422][T21166] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1394.449706][T17212] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1394.455376][T18016] hub 3-1:0.0: bad descriptor, ignoring hub [ 1394.457436][T17212] usb 5-1: can't read configurations, error -61 [ 1394.464866][T18016] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1394.965021][T17212] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1395.017849][T17212] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1395.762776][T17212] usb 5-1: can't read configurations, error -61 [ 1395.764980][T18021] usb 3-1: USB disconnect, device number 114 [ 1395.777628][T17212] usb usb5-port1: unable to enumerate USB device [ 1396.500902][T18021] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1396.739629][T18022] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1396.767573][T18021] usb 10-1: Using ep0 maxpacket: 16 [ 1396.784247][T21200] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1396.938681][T18022] usb 5-1: Using ep0 maxpacket: 32 [ 1396.953500][T18022] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1396.969819][ T29] audit: type=1400 audit(1779785397.820:1821): avc: denied { watch watch_reads } for pid=21199 comm="syz.9.3971" path="/syzcgroup/net/syz9/syz0" dev="cgroup" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1396.994876][T18022] usb 5-1: config 0 has no interface number 0 [ 1397.002710][T18022] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1397.014742][T18021] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1397.026356][T18021] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1397.034453][T18022] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1397.048820][T18021] usb 10-1: can't read configurations, error -71 [ 1397.055420][T18022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.064896][T18022] usb 5-1: Product: syz [ 1397.069877][T18022] usb 5-1: Manufacturer: syz [ 1397.075199][T18022] usb 5-1: SerialNumber: syz [ 1397.085681][T18022] usb 5-1: config 0 descriptor?? [ 1397.100675][T18022] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1397.196345][T21209] netlink: 'syz.8.3974': attribute type 1 has an invalid length. [ 1397.217463][T21209] netlink: 278 bytes leftover after parsing attributes in process `syz.8.3974'. [ 1397.324523][T18022] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 1397.345776][T18022] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 1397.472336][T15660] usb 5-1: USB disconnect, device number 5 [ 1397.857464][T21223] netlink: 'syz.8.3977': attribute type 1 has an invalid length. [ 1398.773819][T21223] bond1: entered promiscuous mode [ 1398.793462][T21223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1398.863620][T21225] vlan0: entered allmulticast mode [ 1398.869804][T21225] bond1: entered allmulticast mode [ 1398.889723][T21232] bond1: (slave bridge1): making interface the new active one [ 1398.897461][T21232] bridge1: entered promiscuous mode [ 1398.902875][T21232] bridge1: entered allmulticast mode [ 1398.913421][T21232] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1399.535134][T21253] lo speed is unknown, defaulting to 1000 [ 1399.761281][T18021] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1399.899710][T18028] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1400.037333][T21257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21257 comm=syz.4.3988 [ 1400.146867][T18028] usb 3-1: config 0 has no interfaces? [ 1400.156521][T18028] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1400.177441][T18021] usb 9-1: Using ep0 maxpacket: 32 [ 1400.190092][T18021] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1400.191398][T18028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.198359][T18021] usb 9-1: config 0 has no interface number 0 [ 1400.224900][T18028] usb 3-1: Product: syz [ 1400.226287][T18021] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1400.239939][T18021] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.243527][T18028] usb 3-1: Manufacturer: syz [ 1400.249789][T18021] usb 9-1: Product: syz [ 1400.260124][T18021] usb 9-1: Manufacturer: syz [ 1400.710957][T18021] usb 9-1: SerialNumber: syz [ 1400.719135][T18021] usb 9-1: config 0 descriptor?? [ 1400.728854][T18021] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1400.737873][T18028] usb 3-1: SerialNumber: syz [ 1400.768145][T18021] usb 9-1: selecting invalid altsetting 1 [ 1400.769509][T18028] usb 3-1: config 0 descriptor?? [ 1400.794527][T18021] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1400.822696][T18021] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1400.857816][T18021] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1400.875713][T18021] usb 9-1: media controller created [ 1400.882604][T21261] Bluetooth: MGMT ver 1.23 [ 1400.900740][T18021] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1401.120735][T18016] usb 3-1: USB disconnect, device number 115 [ 1401.269501][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058f24400: rx timeout, send abort [ 1401.334460][ T29] audit: type=1400 audit(1779785401.908:1822): avc: denied { read } for pid=4964 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1401.428126][ T29] audit: type=1400 audit(1779785401.908:1823): avc: denied { search } for pid=4964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1401.476492][ T29] audit: type=1400 audit(1779785401.908:1824): avc: denied { append } for pid=4964 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1401.501866][ T29] audit: type=1400 audit(1779785401.908:1825): avc: denied { open } for pid=4964 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1401.578387][ T29] audit: type=1400 audit(1779785401.908:1826): avc: denied { getattr } for pid=4964 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1401.804067][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058f25800: rx timeout, send abort [ 1401.812363][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058f24400: abort rx timeout. Force session deactivation [ 1401.838784][T18021] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1401.887482][T18021] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1401.933888][T18021] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1402.277554][T18021] usb 9-1: USB disconnect, device number 32 [ 1402.306303][T18028] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1402.346793][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058f25800: abort rx timeout. Force session deactivation [ 1402.486317][T18028] usb 3-1: Using ep0 maxpacket: 16 [ 1402.497350][T18028] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1402.524483][T18028] usb 3-1: can't read configurations, error -61 [ 1402.689402][T18028] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1402.785834][T21282] netlink: 'syz.9.3996': attribute type 4 has an invalid length. [ 1402.840090][T21283] netlink: 'syz.9.3996': attribute type 4 has an invalid length. [ 1402.872305][T18028] usb 3-1: Using ep0 maxpacket: 16 [ 1402.888054][T18028] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1402.907168][T18028] usb 3-1: can't read configurations, error -61 [ 1402.923999][T18028] usb usb3-port1: attempt power cycle [ 1403.259136][T18021] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1403.309339][T18028] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1403.371062][T18028] usb 3-1: Using ep0 maxpacket: 16 [ 1403.392642][T18028] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1404.386295][T18028] usb 3-1: can't read configurations, error -61 [ 1404.400222][T18021] usb 10-1: Using ep0 maxpacket: 8 [ 1404.431699][T18021] usb 10-1: config index 0 descriptor too short (expected 30, got 18) [ 1404.459250][T18021] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1404.474458][T18021] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.484687][T18021] usb 10-1: Product: syz [ 1404.489444][T18021] usb 10-1: Manufacturer: syz [ 1404.495268][T18021] usb 10-1: SerialNumber: syz [ 1404.505493][T18021] usb 10-1: config 0 descriptor?? [ 1404.517813][T18021] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1404.528290][T18021] usb 10-1: setting power ON [ 1404.532988][T18021] dvb-usb: bulk message failed: -22 (2/0) [ 1404.545873][T18021] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1404.549284][T18028] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1404.556569][T18021] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1404.574441][T18021] usb 10-1: media controller created [ 1404.611350][T18021] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1404.647132][T18028] usb 3-1: Using ep0 maxpacket: 16 [ 1404.647147][T18021] usb 10-1: selecting invalid altsetting 6 [ 1404.647167][T18021] usb 10-1: digital interface selection failed (-22) [ 1404.688271][T18021] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1404.690266][T18028] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1404.705037][T18021] usb 10-1: setting power OFF [ 1404.718262][T18021] dvb-usb: bulk message failed: -22 (2/0) [ 1404.731390][T18028] usb 3-1: can't read configurations, error -61 [ 1404.734151][T18021] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1404.772462][T18028] usb usb3-port1: unable to enumerate USB device [ 1404.778216][T18021] (NULL device *): no alternate interface [ 1404.838012][T17212] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1404.854740][T18021] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1404.905704][T18021] usb 10-1: USB disconnect, device number 25 [ 1405.055078][T17212] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1405.074829][T17212] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1405.110590][T17212] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1405.132487][T17212] usb 5-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.40 [ 1405.145467][T17212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.164725][T17212] usb 5-1: Product: 멦ﺶ₊샂ฌ䀒졔阷灕풁Ώ竾夎䝙 [ 1405.181831][T17212] usb 5-1: Manufacturer: 芀厪㕵ⷡ誯潥콿튆ೞ䱖䣑鹳俖悊ᣓ࿗脗콑搭裃ﮇ溊⓱訨멙꽈癢찀ᩨ孔ꋭ팚≑昩설욱⦄ԡ [ 1405.221396][T17212] usb 5-1: SerialNumber: 麎꛽䇂༒⹽禷€䊱䬩睙猚ꕋ｠ꆈ喫튌쌌緙⓭䷴⽩揰꯲㖹믣꯿睻㈎闞벯꿵뚔㳄经땆᤹鵂䙠듭ꆣ뇍ⷢ䢝瑠万怣묹客扑ꩇ穃ᕯ◔⒄鰉ￓᠣ㛯ݱ⻱쮭呑삈覘⶙ⅸ炈쫅袹ஷ呜鈶膡똀緲䮏餽ﳚ挫罭ᇡ끯ᨬ꺃嘘멢锿㵂蛴ࠢ謫앆싄먾ꮟ⒈涗ﷱ믧䏞᪢䜒虉⩐ꠜ벘 [ 1405.880927][T21299] ref_ctr increment failed for inode: 0x2d1 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807a83ee40 [ 1406.493274][T17212] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1406.575364][T21302] macvtap1: entered allmulticast mode [ 1406.582241][T21302] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1406.592116][T17212] usb 5-1: USB disconnect, device number 6 [ 1406.599079][T21302] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1406.694007][T21302] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1406.881042][T21302] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1407.130901][T19750] udevd[19750]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1407.419895][T18028] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1407.929164][T21320] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4007'. [ 1408.866787][T21333] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4010'. [ 1410.555206][T21346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4014'. [ 1410.684956][ T29] audit: type=1400 audit(1779785410.496:1827): avc: denied { watch } for pid=21343 comm="syz.2.4014" path="/173/file0" dev="tmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1411.091157][T18028] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1411.275033][T18028] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1411.304384][T18028] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1411.334913][T18028] usb 9-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1411.362560][T18028] usb 9-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.40 [ 1411.376971][T18028] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.394385][T18028] usb 9-1: Product: 멦ﺶ₊샂ฌ䀒졔阷灕풁Ώ竾夎䝙 [ 1411.402453][T15660] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 1411.426924][T18028] usb 9-1: Manufacturer: 芀厪㕵ⷡ誯潥콿튆ೞ䱖䣑鹳俖悊ᣓ࿗脗콑搭裃ﮇ溊⓱訨멙꽈癢찀ᩨ孔ꋭ팚≑昩설욱⦄ԡ [ 1411.459786][T18028] usb 9-1: SerialNumber: 麎꛽䇂༒⹽禷€䊱䬩睙猚ꕋ｠ꆈ喫튌쌌緙⓭䷴⽩揰꯲㖹믣꯿睻㈎闞벯꿵뚔㳄经땆᤹鵂䙠듭ꆣ뇍ⷢ䢝瑠万怣묹客扑ꩇ穃ᕯ◔⒄鰉ￓᠣ㛯ݱ⻱쮭呑삈覘⶙ⅸ炈쫅袹ஷ呜鈶膡똀緲䮏餽ﳚ挫罭ᇡ끯ᨬ꺃嘘멢锿㵂蛴ࠢ謫앆싄먾ꮟ⒈涗ﷱ믧䏞᪢䜒虉⩐ꠜ벘 [ 1411.615823][T15660] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0x5C, changing to 0xC [ 1411.633904][T15660] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0xC has invalid wMaxPacketSize 0 [ 1411.646144][T15660] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1411.657258][T15660] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1411.668628][T15660] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1411.679197][T15660] usb 3-1: Product: syz [ 1411.683463][T15660] usb 3-1: Manufacturer: syz [ 1411.689577][T15660] usb 3-1: SerialNumber: syz [ 1411.700758][T15660] usb 3-1: config 0 descriptor?? [ 1411.741392][T15660] usb 3-1: selecting invalid altsetting 0 [ 1411.992743][T18016] usb 3-1: USB disconnect, device number 120 [ 1412.035344][T18028] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1412.042635][T18022] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1412.049382][T18028] usb 9-1: USB disconnect, device number 33 [ 1412.083059][T19750] udevd[19750]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1412.224188][T18022] usb 10-1: Using ep0 maxpacket: 16 [ 1412.235586][T18022] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1412.251505][T18022] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1412.259231][T18022] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1412.270427][T18022] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.281334][T18022] usb 10-1: config 0 descriptor?? [ 1412.606257][T21363] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4021'. [ 1412.876243][T18028] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1412.919299][T18016] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1413.136931][T18016] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1413.166478][T18016] usb 9-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 1413.176675][T18016] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.184755][T18016] usb 9-1: Product: syz [ 1413.194089][T18016] usb 9-1: Manufacturer: syz [ 1413.203140][T18016] usb 9-1: SerialNumber: syz [ 1414.085409][T18022] usbhid 10-1:0.0: can't add hid device: -71 [ 1414.100654][T18022] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1414.115737][T18022] usb 10-1: USB disconnect, device number 26 [ 1414.321539][T18028] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.327251][T18016] usb 9-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 1414.493298][T18016] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1414.539050][T18028] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1414.549364][T18028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.559291][T18028] usb 5-1: Product: syz [ 1414.563668][T18028] usb 5-1: Manufacturer: syz [ 1414.570302][T18028] usb 5-1: SerialNumber: syz [ 1414.573500][T18016] usb 9-1: USB disconnect, device number 34 [ 1414.594288][T18028] usb 5-1: config 0 descriptor?? [ 1414.611448][T18028] usb 5-1: ucan: probing device on interface #0 [ 1414.629668][T18028] usb 5-1: ucan: invalid EP count (0) [ 1414.637924][T18028] usb 5-1: ucan: probe failed; try to update the device firmware [ 1414.917017][T19712] udevd[19712]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1415.533258][T21388] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4027'. [ 1415.980231][T18028] usb 5-1: USB disconnect, device number 7 [ 1416.078943][T21395] NILFS (nullb0): couldn't find nilfs on the device [ 1416.937965][T18016] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1416.964253][T21391] macvtap1: entered allmulticast mode [ 1416.979164][T21391] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 1417.004510][T21391] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 1417.017408][ T24] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1417.060201][T21391] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1417.109344][T18016] usb 9-1: Using ep0 maxpacket: 16 [ 1417.114592][T21391] netdevsim netdevsim9 netdevsim0: left allmulticast mode [ 1417.133950][T18016] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1417.157045][T18016] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1417.173532][T18016] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1417.198229][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1417.225949][ T24] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1417.242823][T18016] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.293085][ T24] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1417.321837][T18016] usb 9-1: config 0 descriptor?? [ 1417.376670][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1417.406217][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1417.450318][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.510831][ T24] usb 3-1: config 0 descriptor?? [ 1417.545245][T18021] netdevsim netdevsim9 netdevsim0: left promiscuous mode [ 1417.994727][T21416] [ 1417.997092][T21416] ============================================ [ 1418.003240][T21416] WARNING: possible recursive locking detected [ 1418.009393][T21416] syzkaller #0 Tainted: G L [ 1418.015368][T21416] -------------------------------------------- [ 1418.021517][T21416] syz.2.4035/21416 is trying to acquire lock: [ 1418.027592][T21416] ffffffff8f7c6c10 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 1418.037837][T21416] [ 1418.037837][T21416] but task is already holding lock: [ 1418.045178][T21416] ffffffff8f7c6c10 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 1418.055426][T21416] [ 1418.055426][T21416] other info that might help us debug this: [ 1418.063482][T21416] Possible unsafe locking scenario: [ 1418.063482][T21416] [ 1418.070933][T21416] CPU0 [ 1418.074199][T21416] ---- [ 1418.077460][T21416] lock(qp_broker_list.mutex); [ 1418.082300][T21416] lock(qp_broker_list.mutex); [ 1418.087138][T21416] [ 1418.087138][T21416] *** DEADLOCK *** [ 1418.087138][T21416] [ 1418.095289][T21416] May be due to missing lock nesting notation [ 1418.095289][T21416] [ 1418.103591][T21416] 1 lock held by syz.2.4035/21416: [ 1418.108691][T21416] #0: ffffffff8f7c6c10 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 1418.119400][T21416] [ 1418.119400][T21416] stack backtrace: [ 1418.125274][T21416] CPU: 1 UID: 0 PID: 21416 Comm: syz.2.4035 Tainted: G L syzkaller #0 PREEMPT(full) [ 1418.125305][T21416] Tainted: [L]=SOFTLOCKUP [ 1418.125312][T21416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1418.125324][T21416] Call Trace: [ 1418.125333][T21416] [ 1418.125341][T21416] dump_stack_lvl+0x100/0x190 [ 1418.125368][T21416] print_deadlock_bug.cold+0xbd/0xca [ 1418.125401][T21416] __lock_acquire+0x12bb/0x2630 [ 1418.125430][T21416] lock_acquire+0x1b1/0x370 [ 1418.125453][T21416] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 1418.125478][T21416] ? __pfx___might_resched+0x10/0x10 [ 1418.125506][T21416] ? kasan_save_stack+0x3f/0x50 [ 1418.125529][T21416] __mutex_lock+0x1a4/0x1b10 [ 1418.125559][T21416] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 1418.125583][T21416] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 1418.125606][T21416] ? vmci_host_close+0x115/0x1a0 [ 1418.125624][T21416] ? __fput+0x3ff/0xb50 [ 1418.125651][T21416] ? task_work_run+0x150/0x240 [ 1418.125675][T21416] ? exit_to_user_mode_loop+0x107/0x4f0 [ 1418.125699][T21416] ? do_syscall_64+0x706/0xf80 [ 1418.125725][T21416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1418.125745][T21416] ? __pfx___mutex_lock+0x10/0x10 [ 1418.125781][T21416] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 1418.125802][T21416] vmci_qp_broker_detach+0x14c/0x11e0 [ 1418.125825][T21416] ? kasan_quarantine_put+0x104/0x240 [ 1418.125853][T21416] ? lockdep_hardirqs_on+0x78/0x100 [ 1418.125880][T21416] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1418.125902][T21416] ? ctx_free_ctx+0x470/0xda0 [ 1418.125924][T21416] ? ctx_free_ctx+0x4bd/0xda0 [ 1418.125946][T21416] ? kfree+0x223/0x6c0 [ 1418.125972][T21416] ctx_free_ctx+0x517/0xda0 [ 1418.125996][T21416] ? __pfx___schedule+0x10/0x10 [ 1418.126021][T21416] ? __pfx_ctx_free_ctx+0x10/0x10 [ 1418.126045][T21416] ? preempt_schedule_thunk+0x16/0x30 [ 1418.126063][T21416] ? preempt_schedule_common+0x42/0xc0 [ 1418.126089][T21416] ? preempt_schedule_thunk+0x16/0x30 [ 1418.126109][T21416] vmci_ctx_enqueue_datagram+0x4be/0x5f0 [ 1418.126136][T21416] vmci_datagram_dispatch+0x3db/0xc60 [ 1418.126163][T21416] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 1418.126194][T21416] qp_notify_peer+0x1a6/0x230 [ 1418.126212][T21416] ? __pfx_qp_notify_peer+0x10/0x10 [ 1418.126237][T21416] vmci_qp_broker_detach+0xa20/0x11e0 [ 1418.126261][T21416] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1418.126282][T21416] ? ctx_free_ctx+0x470/0xda0 [ 1418.126304][T21416] ? ctx_free_ctx+0x4bd/0xda0 [ 1418.126327][T21416] ? kfree+0x223/0x6c0 [ 1418.126352][T21416] ctx_free_ctx+0x517/0xda0 [ 1418.126377][T21416] ? __pfx_ctx_free_ctx+0x10/0x10 [ 1418.126399][T21416] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1418.126425][T21416] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1418.126452][T21416] vmci_ctx_destroy+0x150/0x1c0 [ 1418.126475][T21416] vmci_host_close+0x115/0x1a0 [ 1418.126493][T21416] ? __pfx_vmci_host_close+0x10/0x10 [ 1418.126510][T21416] __fput+0x3ff/0xb50 [ 1418.126546][T21416] task_work_run+0x150/0x240 [ 1418.126572][T21416] ? __pfx_task_work_run+0x10/0x10 [ 1418.126599][T21416] ? rcu_is_watching+0x12/0xc0 [ 1418.126629][T21416] exit_to_user_mode_loop+0x107/0x4f0 [ 1418.126653][T21416] ? rcu_is_watching+0x12/0xc0 [ 1418.126682][T21416] do_syscall_64+0x706/0xf80 [ 1418.126708][T21416] ? clear_bhb_loop+0x40/0x90 [ 1418.126730][T21416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1418.126749][T21416] RIP: 0033:0x7ff01a59ce59 [ 1418.126766][T21416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1418.126784][T21416] RSP: 002b:00007ff01b37c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1418.126804][T21416] RAX: 0000000000000000 RBX: 00007ff01a816090 RCX: 00007ff01a59ce59 [ 1418.126818][T21416] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 1418.126831][T21416] RBP: 00007ff01a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1418.126843][T21416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1418.126856][T21416] R13: 00007ff01a816128 R14: 00007ff01a816090 R15: 00007ffdd5ca0818 [ 1418.126876][T21416] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1418.816637][ T29] audit: type=1400 audit(1779785418.009:1828): avc: denied { write } for pid=5599 comm="syz-executor" path="pipe:[5217]" dev="pipefs" ino=5217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1419.103385][T18016] usbhid 9-1:0.0: can't add hid device: -71 [ 1419.123081][T18016] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1419.206682][T18016] usb 9-1: USB disconnect, device number 35 [ 1419.390285][T18754] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.420428][T18754] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.517853][T18754] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.528190][T18754] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.697400][T18754] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.732131][T18754] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.818136][T18754] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.829970][T18754] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.916509][T18754] bridge_slave_1: left allmulticast mode [ 1419.925550][T18754] bridge_slave_1: left promiscuous mode [ 1419.931678][T18754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.939726][T18754] bridge_slave_0: left allmulticast mode [ 1419.947235][T18754] bridge_slave_0: left promiscuous mode [ 1419.953045][T18754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.115260][T18754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1420.125313][T18754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1420.135048][T18754] bond0 (unregistering): Released all slaves [ 1420.202028][T18754] tipc: Disabling bearer [ 1420.207365][T18754] tipc: Left network mode [ 1420.313968][ T29] audit: type=1400 audit(1779785419.655:1829): avc: denied { write } for pid=21420 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1420.380780][ T29] audit: type=1400 audit(1779785419.721:1830): avc: denied { write } for pid=21431 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1420.405465][T18754] hsr_slave_0: left promiscuous mode [ 1420.411233][T18754] hsr_slave_1: left promiscuous mode [ 1420.417704][T18754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1420.426477][T18754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1420.435499][T18754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1420.442882][T18754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1420.453296][T18754] veth1_macvtap: left promiscuous mode [ 1420.459839][T18754] veth0_macvtap: left promiscuous mode [ 1420.465482][T18754] veth1_vlan: left promiscuous mode [ 1420.470720][T18754] veth0_vlan: left promiscuous mode [ 1420.547402][T18754] team0 (unregistering): Port device team_slave_1 removed [ 1420.560287][T18754] team0 (unregistering): Port device team_slave_0 removed [ 1420.601299][ T5277] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1420.888467][ T29] audit: type=1400 audit(1779785420.198:1831): avc: denied { write } for pid=21435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1420.960924][ T29] audit: type=1400 audit(1779785420.263:1832): avc: denied { write } for pid=21446 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1421.021003][ T5277] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1421.189669][T18754] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1421.205582][T18754] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.220463][ T29] audit: type=1400 audit(1779785420.506:1833): avc: denied { write } for pid=21449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1421.263072][T18754] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1421.275823][T18754] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.297844][ T29] audit: type=1400 audit(1779785420.572:1834): avc: denied { write } for pid=21460 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1421.345791][ T5277] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1421.370168][T18754] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1421.380702][T18754] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.432546][T18754] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1421.445287][T18754] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.544988][ T29] audit: type=1400 audit(1779785420.806:1835): avc: denied { write } for pid=21463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1421.569468][T18754] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.589850][ T29] audit: type=1400 audit(1779785420.853:1836): avc: denied { write } for pid=21474 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1421.630743][T18754] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.643719][ T5277] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1421.678174][T18754] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.735390][T18754] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.852159][ T29] audit: type=1400 audit(1779785421.096:1837): avc: denied { write } for pid=21478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1421.892716][T18754] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1421.903098][T18754] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.934933][T18754] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1421.945255][T18754] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.957647][ T5277] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1421.979214][T18754] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1421.989522][T18754] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.042343][T18754] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1422.055829][T18754] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.167893][T18754] bridge_slave_1: left allmulticast mode [ 1422.178096][T18754] bridge_slave_1: left promiscuous mode [ 1422.184901][T18754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.195093][T18754] bridge_slave_0: left allmulticast mode [ 1422.201099][T18754] bridge_slave_0: left promiscuous mode [ 1422.206851][T18754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.217762][T18754] bridge_slave_1: left allmulticast mode [ 1422.224661][T18754] bridge_slave_1: left promiscuous mode [ 1422.230763][T18754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.239346][T18754] bridge_slave_0: left allmulticast mode [ 1422.248860][T18754] bridge_slave_0: left promiscuous mode [ 1422.254908][T18754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.264354][T18754] bridge_slave_1: left allmulticast mode [ 1422.269989][T18754] bridge_slave_1: left promiscuous mode [ 1422.276277][T18754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.285270][T18754] bridge_slave_0: left allmulticast mode [ 1422.291334][T18754] bridge_slave_0: left promiscuous mode [ 1422.297740][T18754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.412288][T18754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1422.422384][T18754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1422.431884][T18754] bond0 (unregistering): Released all slaves [ 1422.483180][T18754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1422.494399][T18754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1422.503904][T18754] bond0 (unregistering): Released all slaves [ 1422.581312][T18754] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1422.589602][T18754] bridge1 (unregistering): left promiscuous mode [ 1422.596074][T18754] bridge1 (unregistering): left allmulticast mode [ 1422.616910][T18754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1422.627454][T18754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1422.636934][T18754] bond0 (unregistering): Released all slaves [ 1422.647562][T18754] bond1 (unregistering): Released all slaves [ 1422.657345][ T5277] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1422.903970][ T24] usbhid 3-1:0.0: can't add hid device: -32 [ 1422.910069][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1423.021179][ T5277] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1423.220591][T18754] hsr_slave_0: left promiscuous mode [ 1423.227337][T18754] hsr_slave_1: left promiscuous mode [ 1423.233053][T18754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1423.240815][T18754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.248942][T18754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1423.259023][T18754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.271574][T18754] hsr_slave_0: left promiscuous mode [ 1423.277877][T18754] hsr_slave_1: left promiscuous mode [ 1423.283638][T18754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1423.291174][T18754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.298779][T18754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1423.306159][T18754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.314610][T18754] hsr_slave_0: left promiscuous mode [ 1423.320484][T18754] hsr_slave_1: left promiscuous mode [ 1423.326063][T18754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1423.333960][T18754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.342135][T18754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1423.349524][T18754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.361396][T18754] veth1_macvtap: left promiscuous mode [ 1423.366974][T18754] veth0_macvtap: left promiscuous mode [ 1423.372487][T18754] veth1_vlan: left promiscuous mode [ 1423.377772][T18754] veth0_vlan: left promiscuous mode [ 1423.383708][T18754] veth1_macvtap: left promiscuous mode [ 1423.389280][T18754] veth0_macvtap: left promiscuous mode [ 1423.394836][T18754] veth1_vlan: left promiscuous mode [ 1423.400065][T18754] veth0_vlan: left promiscuous mode [ 1423.406637][T18754] veth1_macvtap: left promiscuous mode [ 1423.412088][T18754] veth0_macvtap: left promiscuous mode [ 1423.550121][T18754] team0 (unregistering): Port device team_slave_1 removed [ 1423.564927][T18754] team0 (unregistering): Port device team_slave_0 removed [ 1423.639228][T18754] team0 (unregistering): Port device team_slave_1 removed [ 1423.654077][T18754] team0 (unregistering): Port device team_slave_0 removed [ 1423.712383][T18754] team0 (unregistering): Port device team_slave_1 removed [ 1423.722220][T18754] team0 (unregistering): Port device team_slave_0 removed [ 1423.789520][T10836] smbdirect: ib_dev[syz2] removed [ 1423.795551][ T5277] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1423.802474][ T5736] lo speed is unknown, defaulting to 1000 [ 1423.809649][ T5736] infiniband syz2: ib_query_port failed (-19) [ 1424.211124][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1424.211144][ T29] audit: type=1400 audit(1779785423.294:1846): avc: denied { write } for pid=21553 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1424.256714][ T5277] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1424.490328][ T29] audit: type=1400 audit(1779785423.556:1847): avc: denied { write } for pid=21556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1424.534416][ T29] audit: type=1400 audit(1779785423.594:1848): avc: denied { write } for pid=21567 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1424.583023][ T5277] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1424.747918][ T29] audit: type=1400 audit(1779785423.809:1849): avc: denied { write } for pid=21570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1424.799248][ T29] audit: type=1400 audit(1779785423.856:1850): avc: denied { write } for pid=21581 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1424.848945][ T5277] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1424.976671][ T29] audit: type=1400 audit(1779785424.024:1851): avc: denied { write } for pid=21585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1425.019286][ T29] audit: type=1400 audit(1779785424.061:1852): avc: denied { write } for pid=21596 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1425.063331][ T5277] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1425.185664][ T29] audit: type=1400 audit(1779785424.211:1853): avc: denied { write } for pid=21599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1425.231415][ T29] audit: type=1400 audit(1779785424.258:1854): avc: denied { write } for pid=21610 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1425.270937][ T5277] 8021q: adding VLAN 0 to HW filter on device eth29 [ 1425.402674][ T29] audit: type=1400 audit(1779785424.417:1855): avc: denied { write } for pid=21614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1425.466611][ T5277] 8021q: adding VLAN 0 to HW filter on device eth30 [ 1425.662231][ T5277] 8021q: adding VLAN 0 to HW filter on device eth31 [ 1425.840193][ T5277] 8021q: adding VLAN 0 to HW filter on device eth32