last executing test programs: 2m41.649052239s ago: executing program 4 (id=463): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) fchdir(r4) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000000)={{0x8, 0x3, 0x81, 0x3, 'syz0\x00', 0x5}, 0x3, 0x20, 0x8, r1, 0x4, 0x8, 'syz1\x00', &(0x7f0000000180)=[':#,\x00', ',[\a\x00\x00\x00\x00\x00\x00\x00&]]\x00', '\x00', ':#,\x00'], 0x17}) r5 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r5, 0x8, &(0x7f00000001c0)={[0x100000000]}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8081, 0x90}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000805}, 0x4054) 2m38.094583461s ago: executing program 4 (id=472): r0 = socket$inet(0x2, 0x1, 0x800) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xe}, 0x1c) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x7) getsockopt(r3, 0xff, 0x20, 0x0, &(0x7f00000002c0)) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) pipe(&(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_io_uring_setup(0x4d5, &(0x7f0000000480)={0x0, 0x404525, 0x80, 0x2, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r6, 0x22d0, 0x20, 0x0, 0x0, 0x0) 2m35.442699382s ago: executing program 4 (id=479): mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc0b45545, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x12810400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044004}, 0x40000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m34.12137636s ago: executing program 4 (id=483): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3b, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) syz_emit_ethernet(0x19, &(0x7f0000000b40)={@broadcast, @remote, @val={@val={0x88a8, 0x1, 0x1}, {0x9900, 0x3, 0x0, 0x205}}, {@mpls_mc={0x9900, {[], @llc={@llc={0x0, 0xd4, "e0"}}}}}}, 0x0) 2m33.584145867s ago: executing program 4 (id=486): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getpid() r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x9, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x494002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) fsetxattr$security_capability(r4, &(0x7f00000000c0), &(0x7f0000000640)=@v2={0x2000000, [{0x401, 0x5418}, {0x5, 0x9}]}, 0x14, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x4, @loopback}}, 0x100, 0x0, 0x0, 0xffffffff}, 0x9c) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="808f00020800000095000000000000008500000032ef7747e5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702220008000000b7030000800000008500000006000000185500000e00000000000000000000001864000002000000000000000000ffffffffffffff7cffff"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x40, '\x00', r6, 0x0, r3, 0x8, &(0x7f0000000240)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xf, 0x7ff, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[r3, r3, r3, r3, r3, r3, r3], &(0x7f00000003c0)=[{0x0, 0x5, 0x3, 0x2}], 0x10, 0x7}, 0x94) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000001b00), &(0x7f0000000000)=0x4) 2m32.043238993s ago: executing program 4 (id=491): syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) r4 = socket(0x10, 0x80002, 0x0) bind$netlink(r4, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc040}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002340)=@newtfilter={0x1b7c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {}, {0x10, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x779f0574}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0xa8}}, @TCA_RATE={0x6, 0x5, {0xab, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x7f}, @filter_kind_options=@f_basic={{0xa}, {0x1af0, 0x2, [@TCA_BASIC_POLICE={0x4}, @TCA_BASIC_POLICE={0x50, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x202000}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff2, 0x5, 0xffffa45c, 0x401, 0x1, {0x7, 0x1, 0x8000, 0x4, 0xff80, 0x8000}, {0x10, 0x1, 0x9, 0x7, 0x5, 0x1}, 0x8, 0x8, 0x9}}]}, @TCA_BASIC_POLICE={0xcb0, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xffff, 0x5, 0x5, 0x3, 0x1, 0x4, 0x52a6, 0x9c9d, 0x8000, 0xf80f, 0x6, 0x5, 0xfffffff9, 0xd, 0x7fff, 0x8, 0x1, 0x6, 0x8, 0x5, 0x4, 0x2b, 0x5, 0xf, 0x9a7, 0x40d, 0x56c, 0x6, 0x7fa, 0x800, 0x8000, 0x8, 0x0, 0x3, 0x9, 0x6, 0xfffffffe, 0xe, 0x7, 0xfffffffc, 0x4, 0x10000, 0x72b, 0x8001, 0x1, 0x0, 0x8, 0x3, 0x3, 0xfffffc00, 0x8000800, 0xf92a, 0x100, 0x5, 0x2, 0x3, 0x5, 0x4, 0x4, 0xf, 0x1, 0x8, 0x8008, 0x7, 0x7, 0xad4, 0x44bd, 0x1, 0xfffffff2, 0x7, 0x2, 0x4, 0x905, 0x380, 0x4, 0x100, 0x7, 0x0, 0x1bef, 0x15be, 0x4, 0xa8a5, 0x9, 0xfffffffa, 0x0, 0x2, 0x2, 0x1000, 0x8, 0x3, 0x100, 0x2, 0xcea, 0x8, 0x8, 0x0, 0xbfc6, 0x8, 0x7ff, 0x4, 0x6, 0x7, 0x4, 0x3ca2, 0xfffffffc, 0x7, 0x80000001, 0x1, 0x8000, 0x8, 0x3, 0x6, 0xccf, 0x400, 0xebc, 0x20, 0x1f9e, 0x101, 0x4, 0x101, 0x8, 0xa, 0x4, 0x6, 0xf, 0x9, 0x0, 0xf, 0xb, 0x7fff, 0x1, 0xb, 0x4, 0x1000, 0x101, 0x0, 0x7, 0x8, 0xffff, 0x7, 0xf, 0x2, 0x48, 0x7fffffff, 0xa, 0x3, 0x1000000, 0x10001, 0x8001, 0xffff7fff, 0x3, 0x3, 0x9, 0x2b864271, 0x3, 0x4, 0x53, 0x5, 0x5, 0x2, 0x8001, 0x4, 0x6fe7, 0x0, 0x8000, 0x0, 0xffffff32, 0x9d, 0x9, 0x6, 0x3, 0x26, 0x34a31964, 0xfffffaa8, 0x6, 0x9, 0x7, 0x4, 0x6, 0x5, 0x3, 0x7, 0xf, 0x10001, 0xffffffff, 0x6, 0x5, 0xc, 0x4, 0xb, 0x2, 0xfffffffa, 0x4b7, 0x8, 0x89, 0x1000, 0x9, 0x8, 0x8, 0x2, 0x80000001, 0x6, 0xffffffff, 0x5, 0x1, 0x1, 0x6, 0x4, 0x9, 0x0, 0x3e80, 0x5, 0x8, 0x10, 0x3, 0x9, 0x0, 0x6, 0x9, 0x400, 0x3, 0x1, 0x7fffffff, 0x101, 0x9, 0x0, 0x10001, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x10001, 0x0, 0x0, 0xd, 0x7, 0x5, 0xa11, 0x5, 0x692, 0x4, 0x116a, 0x7f, 0x0, 0x2, 0x2, 0x16, 0x4, 0x2, 0x7, 0x8, 0x6, 0x101]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x6, 0x6, 0x1, 0x1, {0xff, 0x1, 0x5, 0x3, 0x8, 0x81}, {0x6, 0x2, 0xff, 0x7f, 0x3ff, 0x4}, 0xcf5, 0x3, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x390e, 0x6, 0x3, 0xfffffff8, 0x9, 0x0, 0x8, 0x5, 0xfffffff9, 0x3ff, 0x3, 0x3411, 0x3, 0x939, 0x1, 0x1, 0x800, 0x400, 0xfffffffd, 0x5b6, 0x5, 0x6, 0x4, 0xab2, 0x8, 0x9, 0x7f3000, 0x8, 0x800, 0x7, 0x3, 0x0, 0x7, 0x528d222a, 0x6, 0x6, 0x1e, 0x6, 0x0, 0x1, 0x3ff, 0x3, 0xff, 0xee68f83, 0x400006, 0x7, 0xe, 0x0, 0x40000000, 0x5, 0x401, 0xb84, 0x8001, 0x2440000, 0x1fe00, 0x7, 0x6, 0x3, 0x100, 0x8001, 0x2bb, 0x4, 0x3, 0x4a0, 0x63, 0xfffffffb, 0x3, 0x7, 0xa, 0x0, 0x101, 0x6, 0x4, 0x80, 0x2, 0x8000000, 0x1ff, 0x3, 0x2, 0x85ac, 0x0, 0x4, 0x4, 0x10, 0x1, 0x1000, 0xd, 0x1f, 0x7, 0x6fca, 0x4, 0x3, 0x9, 0x2, 0x5, 0xfff, 0x4, 0xd, 0x5, 0x23, 0xfff, 0x6, 0x3, 0x9f55, 0xbbc1, 0x5, 0x7d75, 0x6, 0xbf86, 0x6, 0x2, 0x2, 0x51de1db5, 0x8, 0x9, 0xe, 0x3, 0x7, 0x4, 0x2, 0x2, 0x8, 0x4, 0x7, 0x99, 0x200, 0x200400, 0x6, 0x6c, 0xec, 0x9, 0x5, 0x1, 0x8, 0x503, 0x3, 0x10001, 0x9, 0x7520, 0xd, 0x9, 0x392, 0x7, 0x7af, 0x0, 0x92d1, 0x6, 0x9, 0x80000000, 0x8000, 0x1000, 0x4, 0x4db4, 0x40, 0x3ebe704c, 0x2, 0x1, 0x0, 0x3, 0x0, 0x1, 0x7f, 0x3, 0x5, 0xb, 0x1000, 0x1, 0x7, 0x0, 0x5, 0x5, 0x0, 0x2, 0x51a22c71, 0x101, 0xffff, 0xac24, 0x4, 0xffff8000, 0x0, 0xfa8e, 0x4b, 0x7, 0x5, 0xfffffff3, 0x4, 0x8, 0x80, 0x9, 0xfffffffe, 0x10000, 0x7, 0x0, 0x4, 0x0, 0x4, 0x410eb408, 0x3, 0x7fffffff, 0x7fffffff, 0x7ff, 0xb, 0x82, 0x3, 0x7, 0x9, 0x80000001, 0x7, 0x5, 0x1, 0x5, 0x2, 0x5, 0x1, 0xdc35, 0xc83, 0x9, 0x6c, 0x3, 0x8, 0xd, 0x5, 0x3b, 0x0, 0x3, 0xe36, 0x5, 0x6, 0x8000, 0x7ff, 0x3ff, 0x5, 0x3, 0xfffffffb, 0x1, 0x7, 0x80000000, 0xfff, 0x4, 0x5, 0x1, 0x0, 0x6, 0x65, 0x6, 0x4, 0x80, 0x10, 0x6, 0x1a9c, 0x62a, 0x2a, 0x3a8a, 0x8000, 0x6, 0x400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x20000000, 0x800, 0x7f, 0x10001, {0x3, 0x0, 0x8, 0xde, 0x400, 0x3}, {0x1, 0x1, 0x2, 0x5, 0x3, 0x1}, 0x7, 0x1000}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x6, 0x81, 0x8, 0x4, 0x6f, 0x168b, 0x859, 0x8, 0x5, 0xc, 0x7, 0x3, 0x1, 0x7ffffffd, 0x5, 0x7, 0x41cad068, 0x6, 0x4, 0x1, 0x1, 0x6, 0x4, 0x0, 0xf86, 0x1, 0x3, 0x7, 0x6, 0xfff, 0xeaf, 0x7, 0x4, 0x3, 0x6, 0x2, 0x689, 0x76, 0x7, 0x2, 0x1, 0x3, 0x7, 0x6, 0xfffffffc, 0x4, 0xfffffff7, 0x9, 0x1, 0x6c, 0x141, 0x88, 0x9, 0x9, 0x3, 0x4, 0x8000, 0x1, 0x9, 0x8edb, 0xaf, 0x8001, 0x914, 0x6, 0xf5, 0xdc6, 0x9, 0x1, 0xfffffffd, 0x100, 0x80000001, 0x8, 0xd3e, 0x58f, 0x2, 0xa29, 0xfffffffa, 0x3, 0x0, 0x7, 0x6, 0x6121, 0x3ff, 0x7fd7, 0x8, 0x7, 0x3, 0x1, 0x8, 0x7, 0x9, 0xc, 0x1, 0x0, 0x8, 0x0, 0x8, 0x6, 0x4, 0x6, 0x800, 0x0, 0x101, 0x7ff, 0x8, 0x4, 0xfffffffb, 0xd, 0x8, 0x8, 0x7fffffff, 0xc, 0x9, 0x8001, 0x90b, 0xb6b8, 0x71bc, 0x4, 0x2, 0x3, 0x1, 0x5, 0x3, 0x9, 0x587, 0x9, 0x5, 0x8, 0x4, 0x22, 0x9, 0x3, 0x2425, 0x4, 0xadad, 0x9, 0x0, 0x9, 0x9, 0x9, 0x1, 0x2, 0x9, 0x7ff, 0x28, 0xfffbffff, 0x7ff, 0x4, 0x0, 0x81, 0x2, 0x4, 0x7, 0x1, 0x9, 0x0, 0x1, 0x4, 0x7ff, 0xfffffff8, 0x4, 0x0, 0xcb8, 0xb2, 0xb28, 0x7, 0x28f96ab0, 0xffff, 0x7fff, 0x80, 0xb, 0xa, 0x3, 0x41, 0x0, 0x0, 0x6, 0x7, 0x40, 0x200, 0x0, 0x9, 0x16a, 0x80ab, 0x3, 0x9, 0x6, 0xffffffff, 0x80, 0x80000001, 0xc2, 0xd16, 0x34c9, 0x3, 0x100, 0x5, 0x6, 0x8000, 0x604, 0x0, 0x3, 0x80000000, 0x7, 0x0, 0x1000, 0x7, 0x4, 0x4, 0x7, 0x10000, 0x4, 0x1, 0x3b181066, 0xfff, 0xc1, 0x8f, 0x100, 0x2, 0xfff, 0x1, 0xe, 0x4e0, 0x5, 0x6, 0xdef, 0x6, 0x8, 0x5, 0x4, 0x1000007, 0x1, 0x3, 0x1, 0x5, 0x6, 0x6, 0x3, 0xa, 0x9, 0xbf, 0x80000001, 0x6, 0x6, 0xffffffff, 0x9, 0xfffff000, 0x6, 0x0, 0x2cff, 0x6, 0x8, 0x0, 0x5, 0x1, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfc}]}, @TCA_BASIC_ACT={0x5d4, 0x3, [@m_ctinfo={0xb4, 0x0, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xfe00}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8001}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x8bd6, 0x8, 0x80000001, 0x2}}]}, {0x50, 0x6, "1f7e79d62c8a8ae99467b9380c865b17466ff4276cff374e0946b619f1b90e7681cd40c7ef47404b4bed5ccf54d98b7d3eb1eed75b74d382831d53f08e4d9b8a502b5a1898136edd77e3a637"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0xfc, 0x11, 0x0, 0x0, {{0x9}, {0x78, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x80000001, 0xffffff7b, 0x10000000, 0x3, 0x2}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x7aa0bb6a, 0x4, 0x2, 0x7}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7f, 0x8, 0x2, 0x80000001, 0x7fff}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb18}]}, {0x59, 0x6, "ff3b9ce605abeb1a280c53537e398ba8f5b1edee0eb6cd440268d1a9fbdd2704edffc145bd2fc313461acc9c4ebc4669bd0c57470d6a93a9bc553e1c6b10b9e5dd225ff8089bc0d29a3dc2d0027f841daad89eb498"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xf8, 0x8, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4ce, 0x9, 0x0, 0x3}, 0x2}}]}, {0xaa, 0x6, "d5ef290eb3de2598c626033034d9265108657579c2427fbfdf3993291f39da30313c359160fd64bd6815c9725d73536d67e7b48d0410ccaa428065f6eaef4617e7cd6649d90503fbaf890d5c5e11a004809da85ba93d0fbb2959f5fd7976071984e4b53c81cb0e24737da4da00578321a282693c99f6dba4544ed4177ee3da997686a6cca2901ac77ab7ab0ed08b47e16976ea71ba6e7d92f67815d04003f8032033c91ffa1b"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x74, 0xb, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xef, 0x6, 0x4, 0x38d}, 0x1, r8}}]}, {0x27, 0x6, "269b45b78910e5549801e29e36d317db928e67a78af4db243e9fc4e79c9d2fc2064c0a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_mirred={0x78, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x4a, 0x6, "68279bcb109e05257fed2f427d7263c7d36646f2935936fa19fe22977d68aefd98150110c57e9a7b7a83a8cf000f8a835cdb16f11a9ffc6c249ebdd03b95ba99ea670b15fc05"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x148, 0x1f, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x542c, 0x2, 0x4, 0xfffffc00, 0x9}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x671}]}, {0xd4, 0x6, "7c81bed61ce2fb9510adcca6b4a5e14547b36d6b4bc9153e4e18c3503b83a751b8cfa34cfeeb9dcbdfc4fee4972e537127c7ddcedc9fcff8c258bd40c27bac1e23bb91590b3984154132a78673f718c320274b7cf9131d84c31a709340f42c63dcf64da84d53b5deceacc4f55743fac64f70816f56295d8fb8c26a2a3d506849cef44887a12fd47b726d7d9112c7690f8cca158a861438717af2bf2dc4862aa68036513780925e281d87b2c065b012129ca6c233b1b26f9eb5feaf3265205837343b0ed41aeb384bee2a293664c5d753"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0xf4, 0x5, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8}]}, {0xba, 0x6, "9e2a0231a6834926f76dc1c03c1a050dc08b03573c65e95d7bd94c68fceab9b14183d202785d6d2ca56e8c0a77b0c68bc46a7acf92ff0f63fc79c171a29ea616a342529ab4075572b4c0d985f197c9f43094674fc68a164aec2842381dcab479245e9c25b4bd93e276e66504ad0db7981d3a67c863b538b09a6dbac2cc10a25b8e7934890a768c6ba028902f180c24df179a4c93d2edf47667fdc496b42add1167289a315a9441256f91a045cdab870ecd48aeb75ab8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2}}, @TCA_BASIC_POLICE={0x80c, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x81, 0x40000000, 0x10000, 0x3, 0x0, 0x7, 0x182d8087, 0x4, 0x0, 0x4, 0xe, 0x1ff, 0x10, 0x8001, 0x5, 0x54bb, 0x4, 0xa, 0x8, 0x8000, 0x9, 0x27, 0x5, 0x3f115381, 0x9, 0xfffff0a8, 0x5b9cb8ed, 0x6, 0x2, 0x200, 0x8, 0x6, 0x6, 0x8, 0x1000, 0x0, 0x8, 0x4, 0x3, 0x9, 0x0, 0x5, 0x8001, 0x5, 0x0, 0xb, 0x8, 0x9, 0xc00, 0x12, 0xb4, 0x3, 0x8, 0x2, 0xfff, 0x1, 0x0, 0x4ff, 0x1, 0x5, 0x3ff, 0xff, 0x1, 0x2, 0x3, 0xfffffa09, 0x6, 0x6b, 0xb, 0x0, 0x2, 0x493, 0x80, 0x9, 0x9, 0x6, 0xffffffff, 0x7ff, 0x38, 0x6, 0xa000, 0x4, 0x2, 0xfffffff1, 0x4, 0x7ff, 0x7fff, 0x2, 0x80000000, 0x80, 0x6, 0x4, 0x400, 0x35, 0x9, 0x7, 0x5, 0x0, 0xfffffffd, 0xa1b, 0xda, 0x0, 0x1, 0x10000, 0x39c, 0x0, 0x8ef, 0x4, 0x80, 0x9, 0x1000, 0x9, 0x4, 0x8000, 0x2, 0x2, 0x2, 0xd9, 0x0, 0xa, 0x6, 0x100, 0x5, 0x9, 0x5, 0x8, 0x3, 0xffffff5f, 0x9, 0x5, 0x9, 0x176f, 0x0, 0x1, 0xd1a, 0x0, 0x8, 0x9, 0x9, 0x7fff, 0x9, 0x4, 0xd, 0x65, 0x3ff, 0x3, 0xc3f2, 0xffffffff, 0xfffffffc, 0x9483, 0xffff, 0x2, 0x3, 0x6, 0x2, 0xa, 0x0, 0x9, 0xa4, 0x7, 0x4, 0x3, 0x0, 0x7, 0x2, 0x81, 0x9, 0x10, 0xff, 0xffffff6d, 0x8, 0x5, 0xd790, 0x7, 0x7, 0xf6, 0xffff, 0x8, 0x5, 0x8, 0xffffffff, 0xccee, 0x3, 0x2, 0x1, 0x7, 0x0, 0x4, 0xa3, 0x2000, 0x3, 0x62, 0x76, 0x9, 0x9, 0x485b, 0x0, 0x2, 0xf, 0x4, 0x7, 0x4, 0x7, 0x2, 0x1ff, 0x7, 0x6, 0xfffff9f7, 0x8000, 0x9, 0x44e6, 0x3, 0x1, 0xbe, 0x8, 0x7fff, 0x401, 0x1000, 0x4, 0x9c, 0x5, 0x3, 0x8, 0x5, 0x6, 0x0, 0x4, 0x5, 0x9, 0x9, 0x2, 0x6, 0x80, 0xc, 0x5, 0xc79c, 0x9, 0x5, 0x9, 0x7, 0xe0, 0x2, 0xd, 0xea9, 0x400, 0xfffffded, 0x0, 0x2, 0x8000902, 0x7f, 0x9, 0x800, 0x7ff, 0x2, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0xb3, 0x4, 0xffffffff, 0x4e, 0x4, 0x68de, 0x8, 0x1ff, 0x0, 0x200, 0x6, 0x81, 0x0, 0xf, 0x8, 0x19, 0x3, 0x3b21, 0x1d, 0x9, 0x4, 0xffffffff, 0x7, 0x3, 0x5, 0x8, 0xf, 0x7fffffff, 0x5, 0x0, 0x9, 0x476, 0x100, 0x2, 0x80000001, 0x6, 0x0, 0xdf9, 0x3, 0x2, 0x8c, 0x9, 0x159c3cf8, 0x7, 0x7, 0x989983c, 0xfffffffe, 0x7, 0x4, 0x1, 0x6, 0xfffbfff9, 0x4, 0x7, 0x10, 0x80000000, 0x18, 0x1, 0x1, 0x1ff, 0x2, 0x800, 0x8, 0x6, 0x80000001, 0x3, 0x16109562, 0x7fff, 0x80000000, 0x7, 0xab, 0x7, 0x9, 0x20000000, 0x7, 0x9, 0x426, 0x6, 0x0, 0x80000001, 0x40, 0xf, 0x80000001, 0x40, 0x38349c9c, 0xffffff80, 0xffffffff, 0x80, 0x401, 0xa, 0xc, 0xdbb7, 0x7, 0xbb61, 0x6, 0x9, 0x5, 0xfffffffe, 0x80000000, 0x93, 0x0, 0x0, 0xf81, 0x0, 0x73a6, 0xd, 0x4, 0x5, 0x7f, 0x2, 0x1, 0x3ff, 0x0, 0x10000, 0xe, 0x7, 0x7, 0xfffffff7, 0x62be, 0x207, 0xdf0, 0x6, 0x6, 0xf9dd, 0x8, 0xffffffff, 0x0, 0x1, 0xffffff4f, 0x1b60000, 0x5, 0x1, 0x0, 0x200, 0x7fc, 0x5, 0x920e, 0x3, 0x70ba, 0x1, 0x5, 0x4, 0x9, 0xf, 0x8, 0xe, 0x0, 0x2, 0xfffffc01, 0x2, 0xd, 0x0, 0x8, 0x0, 0x7, 0x4, 0x4, 0xd, 0x8, 0x1ff, 0x4, 0x1, 0x9, 0x6, 0x2, 0x0, 0x5, 0x0, 0x5, 0x5, 0xfffffff7, 0x8008, 0xf5f9, 0xf444, 0x6, 0xa, 0x6, 0xfff, 0x800, 0x6, 0x10000, 0xef1, 0x7, 0x3, 0x6, 0x7fff, 0x6, 0x7fff, 0x7, 0x1ff, 0xf, 0x6, 0x2, 0x9, 0x756, 0x7, 0x4, 0xc, 0x1e4e, 0x1, 0xfffffffd, 0x8001, 0x9, 0x92f, 0x8, 0x3, 0xb949, 0x9, 0x8, 0x81, 0x0, 0xf54, 0x9, 0x4, 0xc, 0x5, 0x7, 0x8, 0x5, 0xfff, 0x4, 0x9, 0xfffffffe, 0x80, 0x3, 0x80000001, 0x1, 0x0, 0x9, 0xa, 0xade, 0x0, 0x7, 0x3, 0x10000, 0x8, 0x9, 0x8, 0x5, 0x3fb, 0x2a7, 0x4, 0x800, 0x4, 0xffff8000, 0xde2c, 0x8, 0x6, 0x87de, 0x49b, 0x8, 0xe, 0x8000, 0xab9]}]}]}}]}, 0x1b7c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1f0000000000000000000000001000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0xa) 2m16.532573885s ago: executing program 32 (id=491): syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) r4 = socket(0x10, 0x80002, 0x0) bind$netlink(r4, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc040}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002340)=@newtfilter={0x1b7c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {}, {0x10, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x779f0574}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0xa8}}, @TCA_RATE={0x6, 0x5, {0xab, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x7f}, @filter_kind_options=@f_basic={{0xa}, {0x1af0, 0x2, [@TCA_BASIC_POLICE={0x4}, @TCA_BASIC_POLICE={0x50, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x202000}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff2, 0x5, 0xffffa45c, 0x401, 0x1, {0x7, 0x1, 0x8000, 0x4, 0xff80, 0x8000}, {0x10, 0x1, 0x9, 0x7, 0x5, 0x1}, 0x8, 0x8, 0x9}}]}, @TCA_BASIC_POLICE={0xcb0, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xffff, 0x5, 0x5, 0x3, 0x1, 0x4, 0x52a6, 0x9c9d, 0x8000, 0xf80f, 0x6, 0x5, 0xfffffff9, 0xd, 0x7fff, 0x8, 0x1, 0x6, 0x8, 0x5, 0x4, 0x2b, 0x5, 0xf, 0x9a7, 0x40d, 0x56c, 0x6, 0x7fa, 0x800, 0x8000, 0x8, 0x0, 0x3, 0x9, 0x6, 0xfffffffe, 0xe, 0x7, 0xfffffffc, 0x4, 0x10000, 0x72b, 0x8001, 0x1, 0x0, 0x8, 0x3, 0x3, 0xfffffc00, 0x8000800, 0xf92a, 0x100, 0x5, 0x2, 0x3, 0x5, 0x4, 0x4, 0xf, 0x1, 0x8, 0x8008, 0x7, 0x7, 0xad4, 0x44bd, 0x1, 0xfffffff2, 0x7, 0x2, 0x4, 0x905, 0x380, 0x4, 0x100, 0x7, 0x0, 0x1bef, 0x15be, 0x4, 0xa8a5, 0x9, 0xfffffffa, 0x0, 0x2, 0x2, 0x1000, 0x8, 0x3, 0x100, 0x2, 0xcea, 0x8, 0x8, 0x0, 0xbfc6, 0x8, 0x7ff, 0x4, 0x6, 0x7, 0x4, 0x3ca2, 0xfffffffc, 0x7, 0x80000001, 0x1, 0x8000, 0x8, 0x3, 0x6, 0xccf, 0x400, 0xebc, 0x20, 0x1f9e, 0x101, 0x4, 0x101, 0x8, 0xa, 0x4, 0x6, 0xf, 0x9, 0x0, 0xf, 0xb, 0x7fff, 0x1, 0xb, 0x4, 0x1000, 0x101, 0x0, 0x7, 0x8, 0xffff, 0x7, 0xf, 0x2, 0x48, 0x7fffffff, 0xa, 0x3, 0x1000000, 0x10001, 0x8001, 0xffff7fff, 0x3, 0x3, 0x9, 0x2b864271, 0x3, 0x4, 0x53, 0x5, 0x5, 0x2, 0x8001, 0x4, 0x6fe7, 0x0, 0x8000, 0x0, 0xffffff32, 0x9d, 0x9, 0x6, 0x3, 0x26, 0x34a31964, 0xfffffaa8, 0x6, 0x9, 0x7, 0x4, 0x6, 0x5, 0x3, 0x7, 0xf, 0x10001, 0xffffffff, 0x6, 0x5, 0xc, 0x4, 0xb, 0x2, 0xfffffffa, 0x4b7, 0x8, 0x89, 0x1000, 0x9, 0x8, 0x8, 0x2, 0x80000001, 0x6, 0xffffffff, 0x5, 0x1, 0x1, 0x6, 0x4, 0x9, 0x0, 0x3e80, 0x5, 0x8, 0x10, 0x3, 0x9, 0x0, 0x6, 0x9, 0x400, 0x3, 0x1, 0x7fffffff, 0x101, 0x9, 0x0, 0x10001, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x10001, 0x0, 0x0, 0xd, 0x7, 0x5, 0xa11, 0x5, 0x692, 0x4, 0x116a, 0x7f, 0x0, 0x2, 0x2, 0x16, 0x4, 0x2, 0x7, 0x8, 0x6, 0x101]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x6, 0x6, 0x1, 0x1, {0xff, 0x1, 0x5, 0x3, 0x8, 0x81}, {0x6, 0x2, 0xff, 0x7f, 0x3ff, 0x4}, 0xcf5, 0x3, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x390e, 0x6, 0x3, 0xfffffff8, 0x9, 0x0, 0x8, 0x5, 0xfffffff9, 0x3ff, 0x3, 0x3411, 0x3, 0x939, 0x1, 0x1, 0x800, 0x400, 0xfffffffd, 0x5b6, 0x5, 0x6, 0x4, 0xab2, 0x8, 0x9, 0x7f3000, 0x8, 0x800, 0x7, 0x3, 0x0, 0x7, 0x528d222a, 0x6, 0x6, 0x1e, 0x6, 0x0, 0x1, 0x3ff, 0x3, 0xff, 0xee68f83, 0x400006, 0x7, 0xe, 0x0, 0x40000000, 0x5, 0x401, 0xb84, 0x8001, 0x2440000, 0x1fe00, 0x7, 0x6, 0x3, 0x100, 0x8001, 0x2bb, 0x4, 0x3, 0x4a0, 0x63, 0xfffffffb, 0x3, 0x7, 0xa, 0x0, 0x101, 0x6, 0x4, 0x80, 0x2, 0x8000000, 0x1ff, 0x3, 0x2, 0x85ac, 0x0, 0x4, 0x4, 0x10, 0x1, 0x1000, 0xd, 0x1f, 0x7, 0x6fca, 0x4, 0x3, 0x9, 0x2, 0x5, 0xfff, 0x4, 0xd, 0x5, 0x23, 0xfff, 0x6, 0x3, 0x9f55, 0xbbc1, 0x5, 0x7d75, 0x6, 0xbf86, 0x6, 0x2, 0x2, 0x51de1db5, 0x8, 0x9, 0xe, 0x3, 0x7, 0x4, 0x2, 0x2, 0x8, 0x4, 0x7, 0x99, 0x200, 0x200400, 0x6, 0x6c, 0xec, 0x9, 0x5, 0x1, 0x8, 0x503, 0x3, 0x10001, 0x9, 0x7520, 0xd, 0x9, 0x392, 0x7, 0x7af, 0x0, 0x92d1, 0x6, 0x9, 0x80000000, 0x8000, 0x1000, 0x4, 0x4db4, 0x40, 0x3ebe704c, 0x2, 0x1, 0x0, 0x3, 0x0, 0x1, 0x7f, 0x3, 0x5, 0xb, 0x1000, 0x1, 0x7, 0x0, 0x5, 0x5, 0x0, 0x2, 0x51a22c71, 0x101, 0xffff, 0xac24, 0x4, 0xffff8000, 0x0, 0xfa8e, 0x4b, 0x7, 0x5, 0xfffffff3, 0x4, 0x8, 0x80, 0x9, 0xfffffffe, 0x10000, 0x7, 0x0, 0x4, 0x0, 0x4, 0x410eb408, 0x3, 0x7fffffff, 0x7fffffff, 0x7ff, 0xb, 0x82, 0x3, 0x7, 0x9, 0x80000001, 0x7, 0x5, 0x1, 0x5, 0x2, 0x5, 0x1, 0xdc35, 0xc83, 0x9, 0x6c, 0x3, 0x8, 0xd, 0x5, 0x3b, 0x0, 0x3, 0xe36, 0x5, 0x6, 0x8000, 0x7ff, 0x3ff, 0x5, 0x3, 0xfffffffb, 0x1, 0x7, 0x80000000, 0xfff, 0x4, 0x5, 0x1, 0x0, 0x6, 0x65, 0x6, 0x4, 0x80, 0x10, 0x6, 0x1a9c, 0x62a, 0x2a, 0x3a8a, 0x8000, 0x6, 0x400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x20000000, 0x800, 0x7f, 0x10001, {0x3, 0x0, 0x8, 0xde, 0x400, 0x3}, {0x1, 0x1, 0x2, 0x5, 0x3, 0x1}, 0x7, 0x1000}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x6, 0x81, 0x8, 0x4, 0x6f, 0x168b, 0x859, 0x8, 0x5, 0xc, 0x7, 0x3, 0x1, 0x7ffffffd, 0x5, 0x7, 0x41cad068, 0x6, 0x4, 0x1, 0x1, 0x6, 0x4, 0x0, 0xf86, 0x1, 0x3, 0x7, 0x6, 0xfff, 0xeaf, 0x7, 0x4, 0x3, 0x6, 0x2, 0x689, 0x76, 0x7, 0x2, 0x1, 0x3, 0x7, 0x6, 0xfffffffc, 0x4, 0xfffffff7, 0x9, 0x1, 0x6c, 0x141, 0x88, 0x9, 0x9, 0x3, 0x4, 0x8000, 0x1, 0x9, 0x8edb, 0xaf, 0x8001, 0x914, 0x6, 0xf5, 0xdc6, 0x9, 0x1, 0xfffffffd, 0x100, 0x80000001, 0x8, 0xd3e, 0x58f, 0x2, 0xa29, 0xfffffffa, 0x3, 0x0, 0x7, 0x6, 0x6121, 0x3ff, 0x7fd7, 0x8, 0x7, 0x3, 0x1, 0x8, 0x7, 0x9, 0xc, 0x1, 0x0, 0x8, 0x0, 0x8, 0x6, 0x4, 0x6, 0x800, 0x0, 0x101, 0x7ff, 0x8, 0x4, 0xfffffffb, 0xd, 0x8, 0x8, 0x7fffffff, 0xc, 0x9, 0x8001, 0x90b, 0xb6b8, 0x71bc, 0x4, 0x2, 0x3, 0x1, 0x5, 0x3, 0x9, 0x587, 0x9, 0x5, 0x8, 0x4, 0x22, 0x9, 0x3, 0x2425, 0x4, 0xadad, 0x9, 0x0, 0x9, 0x9, 0x9, 0x1, 0x2, 0x9, 0x7ff, 0x28, 0xfffbffff, 0x7ff, 0x4, 0x0, 0x81, 0x2, 0x4, 0x7, 0x1, 0x9, 0x0, 0x1, 0x4, 0x7ff, 0xfffffff8, 0x4, 0x0, 0xcb8, 0xb2, 0xb28, 0x7, 0x28f96ab0, 0xffff, 0x7fff, 0x80, 0xb, 0xa, 0x3, 0x41, 0x0, 0x0, 0x6, 0x7, 0x40, 0x200, 0x0, 0x9, 0x16a, 0x80ab, 0x3, 0x9, 0x6, 0xffffffff, 0x80, 0x80000001, 0xc2, 0xd16, 0x34c9, 0x3, 0x100, 0x5, 0x6, 0x8000, 0x604, 0x0, 0x3, 0x80000000, 0x7, 0x0, 0x1000, 0x7, 0x4, 0x4, 0x7, 0x10000, 0x4, 0x1, 0x3b181066, 0xfff, 0xc1, 0x8f, 0x100, 0x2, 0xfff, 0x1, 0xe, 0x4e0, 0x5, 0x6, 0xdef, 0x6, 0x8, 0x5, 0x4, 0x1000007, 0x1, 0x3, 0x1, 0x5, 0x6, 0x6, 0x3, 0xa, 0x9, 0xbf, 0x80000001, 0x6, 0x6, 0xffffffff, 0x9, 0xfffff000, 0x6, 0x0, 0x2cff, 0x6, 0x8, 0x0, 0x5, 0x1, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfc}]}, @TCA_BASIC_ACT={0x5d4, 0x3, [@m_ctinfo={0xb4, 0x0, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xfe00}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8001}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x8bd6, 0x8, 0x80000001, 0x2}}]}, {0x50, 0x6, "1f7e79d62c8a8ae99467b9380c865b17466ff4276cff374e0946b619f1b90e7681cd40c7ef47404b4bed5ccf54d98b7d3eb1eed75b74d382831d53f08e4d9b8a502b5a1898136edd77e3a637"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0xfc, 0x11, 0x0, 0x0, {{0x9}, {0x78, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x80000001, 0xffffff7b, 0x10000000, 0x3, 0x2}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x7aa0bb6a, 0x4, 0x2, 0x7}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7f, 0x8, 0x2, 0x80000001, 0x7fff}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb18}]}, {0x59, 0x6, "ff3b9ce605abeb1a280c53537e398ba8f5b1edee0eb6cd440268d1a9fbdd2704edffc145bd2fc313461acc9c4ebc4669bd0c57470d6a93a9bc553e1c6b10b9e5dd225ff8089bc0d29a3dc2d0027f841daad89eb498"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xf8, 0x8, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4ce, 0x9, 0x0, 0x3}, 0x2}}]}, {0xaa, 0x6, "d5ef290eb3de2598c626033034d9265108657579c2427fbfdf3993291f39da30313c359160fd64bd6815c9725d73536d67e7b48d0410ccaa428065f6eaef4617e7cd6649d90503fbaf890d5c5e11a004809da85ba93d0fbb2959f5fd7976071984e4b53c81cb0e24737da4da00578321a282693c99f6dba4544ed4177ee3da997686a6cca2901ac77ab7ab0ed08b47e16976ea71ba6e7d92f67815d04003f8032033c91ffa1b"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x74, 0xb, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xef, 0x6, 0x4, 0x38d}, 0x1, r8}}]}, {0x27, 0x6, "269b45b78910e5549801e29e36d317db928e67a78af4db243e9fc4e79c9d2fc2064c0a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_mirred={0x78, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x4a, 0x6, "68279bcb109e05257fed2f427d7263c7d36646f2935936fa19fe22977d68aefd98150110c57e9a7b7a83a8cf000f8a835cdb16f11a9ffc6c249ebdd03b95ba99ea670b15fc05"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x148, 0x1f, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x542c, 0x2, 0x4, 0xfffffc00, 0x9}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x671}]}, {0xd4, 0x6, "7c81bed61ce2fb9510adcca6b4a5e14547b36d6b4bc9153e4e18c3503b83a751b8cfa34cfeeb9dcbdfc4fee4972e537127c7ddcedc9fcff8c258bd40c27bac1e23bb91590b3984154132a78673f718c320274b7cf9131d84c31a709340f42c63dcf64da84d53b5deceacc4f55743fac64f70816f56295d8fb8c26a2a3d506849cef44887a12fd47b726d7d9112c7690f8cca158a861438717af2bf2dc4862aa68036513780925e281d87b2c065b012129ca6c233b1b26f9eb5feaf3265205837343b0ed41aeb384bee2a293664c5d753"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0xf4, 0x5, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8}]}, {0xba, 0x6, "9e2a0231a6834926f76dc1c03c1a050dc08b03573c65e95d7bd94c68fceab9b14183d202785d6d2ca56e8c0a77b0c68bc46a7acf92ff0f63fc79c171a29ea616a342529ab4075572b4c0d985f197c9f43094674fc68a164aec2842381dcab479245e9c25b4bd93e276e66504ad0db7981d3a67c863b538b09a6dbac2cc10a25b8e7934890a768c6ba028902f180c24df179a4c93d2edf47667fdc496b42add1167289a315a9441256f91a045cdab870ecd48aeb75ab8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2}}, @TCA_BASIC_POLICE={0x80c, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x81, 0x40000000, 0x10000, 0x3, 0x0, 0x7, 0x182d8087, 0x4, 0x0, 0x4, 0xe, 0x1ff, 0x10, 0x8001, 0x5, 0x54bb, 0x4, 0xa, 0x8, 0x8000, 0x9, 0x27, 0x5, 0x3f115381, 0x9, 0xfffff0a8, 0x5b9cb8ed, 0x6, 0x2, 0x200, 0x8, 0x6, 0x6, 0x8, 0x1000, 0x0, 0x8, 0x4, 0x3, 0x9, 0x0, 0x5, 0x8001, 0x5, 0x0, 0xb, 0x8, 0x9, 0xc00, 0x12, 0xb4, 0x3, 0x8, 0x2, 0xfff, 0x1, 0x0, 0x4ff, 0x1, 0x5, 0x3ff, 0xff, 0x1, 0x2, 0x3, 0xfffffa09, 0x6, 0x6b, 0xb, 0x0, 0x2, 0x493, 0x80, 0x9, 0x9, 0x6, 0xffffffff, 0x7ff, 0x38, 0x6, 0xa000, 0x4, 0x2, 0xfffffff1, 0x4, 0x7ff, 0x7fff, 0x2, 0x80000000, 0x80, 0x6, 0x4, 0x400, 0x35, 0x9, 0x7, 0x5, 0x0, 0xfffffffd, 0xa1b, 0xda, 0x0, 0x1, 0x10000, 0x39c, 0x0, 0x8ef, 0x4, 0x80, 0x9, 0x1000, 0x9, 0x4, 0x8000, 0x2, 0x2, 0x2, 0xd9, 0x0, 0xa, 0x6, 0x100, 0x5, 0x9, 0x5, 0x8, 0x3, 0xffffff5f, 0x9, 0x5, 0x9, 0x176f, 0x0, 0x1, 0xd1a, 0x0, 0x8, 0x9, 0x9, 0x7fff, 0x9, 0x4, 0xd, 0x65, 0x3ff, 0x3, 0xc3f2, 0xffffffff, 0xfffffffc, 0x9483, 0xffff, 0x2, 0x3, 0x6, 0x2, 0xa, 0x0, 0x9, 0xa4, 0x7, 0x4, 0x3, 0x0, 0x7, 0x2, 0x81, 0x9, 0x10, 0xff, 0xffffff6d, 0x8, 0x5, 0xd790, 0x7, 0x7, 0xf6, 0xffff, 0x8, 0x5, 0x8, 0xffffffff, 0xccee, 0x3, 0x2, 0x1, 0x7, 0x0, 0x4, 0xa3, 0x2000, 0x3, 0x62, 0x76, 0x9, 0x9, 0x485b, 0x0, 0x2, 0xf, 0x4, 0x7, 0x4, 0x7, 0x2, 0x1ff, 0x7, 0x6, 0xfffff9f7, 0x8000, 0x9, 0x44e6, 0x3, 0x1, 0xbe, 0x8, 0x7fff, 0x401, 0x1000, 0x4, 0x9c, 0x5, 0x3, 0x8, 0x5, 0x6, 0x0, 0x4, 0x5, 0x9, 0x9, 0x2, 0x6, 0x80, 0xc, 0x5, 0xc79c, 0x9, 0x5, 0x9, 0x7, 0xe0, 0x2, 0xd, 0xea9, 0x400, 0xfffffded, 0x0, 0x2, 0x8000902, 0x7f, 0x9, 0x800, 0x7ff, 0x2, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0xb3, 0x4, 0xffffffff, 0x4e, 0x4, 0x68de, 0x8, 0x1ff, 0x0, 0x200, 0x6, 0x81, 0x0, 0xf, 0x8, 0x19, 0x3, 0x3b21, 0x1d, 0x9, 0x4, 0xffffffff, 0x7, 0x3, 0x5, 0x8, 0xf, 0x7fffffff, 0x5, 0x0, 0x9, 0x476, 0x100, 0x2, 0x80000001, 0x6, 0x0, 0xdf9, 0x3, 0x2, 0x8c, 0x9, 0x159c3cf8, 0x7, 0x7, 0x989983c, 0xfffffffe, 0x7, 0x4, 0x1, 0x6, 0xfffbfff9, 0x4, 0x7, 0x10, 0x80000000, 0x18, 0x1, 0x1, 0x1ff, 0x2, 0x800, 0x8, 0x6, 0x80000001, 0x3, 0x16109562, 0x7fff, 0x80000000, 0x7, 0xab, 0x7, 0x9, 0x20000000, 0x7, 0x9, 0x426, 0x6, 0x0, 0x80000001, 0x40, 0xf, 0x80000001, 0x40, 0x38349c9c, 0xffffff80, 0xffffffff, 0x80, 0x401, 0xa, 0xc, 0xdbb7, 0x7, 0xbb61, 0x6, 0x9, 0x5, 0xfffffffe, 0x80000000, 0x93, 0x0, 0x0, 0xf81, 0x0, 0x73a6, 0xd, 0x4, 0x5, 0x7f, 0x2, 0x1, 0x3ff, 0x0, 0x10000, 0xe, 0x7, 0x7, 0xfffffff7, 0x62be, 0x207, 0xdf0, 0x6, 0x6, 0xf9dd, 0x8, 0xffffffff, 0x0, 0x1, 0xffffff4f, 0x1b60000, 0x5, 0x1, 0x0, 0x200, 0x7fc, 0x5, 0x920e, 0x3, 0x70ba, 0x1, 0x5, 0x4, 0x9, 0xf, 0x8, 0xe, 0x0, 0x2, 0xfffffc01, 0x2, 0xd, 0x0, 0x8, 0x0, 0x7, 0x4, 0x4, 0xd, 0x8, 0x1ff, 0x4, 0x1, 0x9, 0x6, 0x2, 0x0, 0x5, 0x0, 0x5, 0x5, 0xfffffff7, 0x8008, 0xf5f9, 0xf444, 0x6, 0xa, 0x6, 0xfff, 0x800, 0x6, 0x10000, 0xef1, 0x7, 0x3, 0x6, 0x7fff, 0x6, 0x7fff, 0x7, 0x1ff, 0xf, 0x6, 0x2, 0x9, 0x756, 0x7, 0x4, 0xc, 0x1e4e, 0x1, 0xfffffffd, 0x8001, 0x9, 0x92f, 0x8, 0x3, 0xb949, 0x9, 0x8, 0x81, 0x0, 0xf54, 0x9, 0x4, 0xc, 0x5, 0x7, 0x8, 0x5, 0xfff, 0x4, 0x9, 0xfffffffe, 0x80, 0x3, 0x80000001, 0x1, 0x0, 0x9, 0xa, 0xade, 0x0, 0x7, 0x3, 0x10000, 0x8, 0x9, 0x8, 0x5, 0x3fb, 0x2a7, 0x4, 0x800, 0x4, 0xffff8000, 0xde2c, 0x8, 0x6, 0x87de, 0x49b, 0x8, 0xe, 0x8000, 0xab9]}]}]}}]}, 0x1b7c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1f0000000000000000000000001000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0xa) 1m37.583576904s ago: executing program 0 (id=630): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="800000002e00090025bd700000dcdf250500000069000a"], 0x80}, 0x1, 0x700, 0x0, 0x8000}, 0x0) 1m37.372885739s ago: executing program 0 (id=631): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_io_uring_setup(0x18d7, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) 1m36.84162243s ago: executing program 0 (id=633): r0 = open(&(0x7f0000000000)='./file1\x00', 0xc0642, 0x4c) sendfile(r0, r0, 0x0, 0x4d9b6eaf) getgroups(0x449a065a, 0xfffffffffffffffe) (async) getgroups(0x449a065a, 0xfffffffffffffffe) open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r1, 0x400, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 1m36.570374333s ago: executing program 0 (id=635): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, &(0x7f0000000b80)=ANY=[@ANYRES8], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20040084) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/config\x00') r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 1m35.575921362s ago: executing program 0 (id=639): r0 = socket$inet(0x2, 0x1, 0xfffffffd) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f00000000c0), 0x0}, 0x20) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x5, &(0x7f0000000080)=0x1) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={@ipv4={'\x00', '\xff\xff', @empty}, @remote, @mcast1, 0x5, 0x8, 0x5, 0x500, 0x8, 0x800002}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfffa0000}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x40000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x5, 0x40) 1m32.886923748s ago: executing program 0 (id=647): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0xa00000, 0x0) 1m17.821119145s ago: executing program 33 (id=647): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0xa00000, 0x0) 17.26011848s ago: executing program 6 (id=850): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x101}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) getrlimit(0xc, &(0x7f0000000080)) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "39fc55481aa56906", "d71dab3104558545115509e1c34caab9", "f7ffffff", "5e33931677e0f2d7"}, 0x28) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x7f, 0x20002e2e, 0x10040, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}}) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r4 = epoll_create1(0x0) epoll_pwait2(r4, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000240), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010026bd70003c020000020000000800", @ANYRES32=r5], 0x1c}}, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="6105060802040109080801e402fd0650f7eb736075243dde82a68ee874aeb56ee7526d1c9bf576834e0c0d0b1d71440823b6e57d4a5ab73efcc1fb9f4c5080c7eff2ccb9551176560561c8422dc77fcba70239dc0aeb1cf54a65b1b8652c31f3"], 0x61) r6 = socket(0x1d, 0x2, 0x6) bind$inet(r6, &(0x7f00000000c0)={0x1d, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000010201"], 0x14}, 0x1, 0x0, 0x0, 0x4850}, 0x41) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'nr0\x00'}) 15.314874069s ago: executing program 6 (id=856): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 15.268021646s ago: executing program 3 (id=857): r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x2, 0x7ff, 0x1, 0x0, 0x100}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f00000000c0)=0x9, &(0x7f0000000100)=0x4) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c491}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x40010102, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090605fb00b92b089625f2c5275c00002000000000010000050900020073797a100000001d050001000700000008000940000000012400088010005b5aa707800a0077000000"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 15.197071517s ago: executing program 3 (id=858): madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r4, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r4, 0xc0506107, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x48100, 0x0) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, &(0x7f00000002c0)={0xffff, 0x7, 0x9, 0xff2d, 0x0, 0x0, 0x0, 0xf0, &(0x7f0000000040)=""/240}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r8, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="40000000100039042cbd7000eaffffff000003e4", @ANYRES32=r8, @ANYBLOB="830005002a60000020001280080001007369740014000280080014000c00000008000300ac14020d806c4c40002dbdfbf310b7166458159db935b94bbe3fcbf8ee7f3e90b8b7a6ca"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 13.834637269s ago: executing program 3 (id=862): r0 = epoll_create1(0x0) syz_usb_connect$uac1(0x3, 0xaa, &(0x7f0000000100)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x5, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9fed}, [@processing_unit={0x7, 0x24, 0x7, 0x3, 0x6, 0x6}, @extension_unit={0x8, 0x24, 0x8, 0x3, 0x3, 0x8, "b9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0xc37999810fd25aeb, 0xc, 0x5, 0x3, {0x7, 0x25, 0x1, 0x0, 0x5, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0xd, 0x40, "1715b0d630"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0x8, 0x58, "b7"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x6, 0x7, 'Ra', "e68f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x6, 0xd5, {0x7, 0x25, 0x1, 0x1, 0xe, 0xf}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x7, 0x1, 0x6, 0x40, 0x7}, 0x20, &(0x7f0000000280)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7c93c1bf459f5dfb276acb2ec26d1af8"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0xa, 0xff}]}, 0x9, [{0xde, &(0x7f00000002c0)=@string={0xde, 0x3, "f5c05ca6c676696d0afb38b904c564c94447cf25f295b0174c59360e7902c20080ad6d499ddd20d0e96ea44ccf0cd667d495e865f18ab654d0d0c5b7c8a2e257d3d698b403bad09ab346252eaca63c1fce0d078c30e1a679d1a1de2dadcb90bf4890d042d9c09a371e9948a04f1ea86fd7bbf7797e65ae9e1ffcabeaf60e63aa732f2a3b8d6c667056f20db55a169aab3ad67d18d00bc97f84966df77f8747dcce5902d72a4fd8d4a1f90aea5202e7a1ed9bbe26613e65d63ffd510493286391233157ed86f8cbf746221ed979d49197d1ec6fc798030d55e252cd2c"}}, {0x4e, &(0x7f00000003c0)=@string={0x4e, 0x3, "e64df28287bd7fe20ee448a77710f740867946ee85c9ea9d20e453b0b8603d06ded0d2385599d5f7328499f92e32e46db960537752886b9754111bf66cfa6d3ba8cc88a326e54d63e1de616d"}}, {0xbf, &(0x7f0000000440)=@string={0xbf, 0x3, "30e695020e86590b79454bb9904b2566a465933f12af9175186432ed14e1528f0153d1efbbe5b68e592368cabc0cf57d0ff9c291931685ce9dac4043813efdf832ddb099336c8b97eff2928b881bc8fd0413346546095f9321f40b0a934ff91042544db06c8d43efc1f19d799360390372969c0df0e7ef2d449c6255bd138dab379fe20a50571123bece0da48c3f4402d20397dd14b5cc377eb880d5e9cc802f50296aa942e11ff12d204a631bda18fb6fd73fca0a138c6aa8f3c81248"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x180c}}, {0xfb, &(0x7f0000000580)=@string={0xfb, 0x3, "8a0146bfe64b81f154684ea7c1cbb0f7e4e64ea175df43c9d2427880d96444fcd6840c45015a3861ada4b4dd24bb89bd741df8c082d81a7b69292e4921230c9b4f9cd1d7ad0c6c7c915444334a101d5a906c35ca5828ef29fcebac27de34af1462fffc4bf0af0f8cce2432a5f274a123e18b6675eb4d47e8e756935475e326d812d390e6e16b6ace1fd2bd1d9f38c7a7e9d5059044160bc0da01724fa2d79a539889e0852e0d4aa3abdc376241bc210238f5faec1502bc8e07ebd82e9271b96786bdd5722d4e70c1ad03317329243f37791a7febd4a2a7933962a57538081cc69bd9312854ba82168218fb18724d4abdc8b3b996387e2fe053"}}, {0x4a, &(0x7f0000000680)=@string={0x4a, 0x3, "76d9011cb608f00f1898cdf4a8a634730c7a5f76710e57e959d7d3a7367b0b80b2a777e151267c7e99ff86a94d7dc51ffe76cc85564ce843eeed690962557ebf439aa4c2107b4840"}}, {0x0, 0x0}, {0xf9, &(0x7f0000000840)=@string={0xf9, 0x3, "cdd5dbc84b94bd64e49caa57fac56e95e1b54c04d4f80ed82599328c9f1f1b6731556c82181ecd6119f58a1459435892c0bf80c188e21a44d9eccb1beddfe5cd628476c12664aaf314ce21aaa2e6bddb0ac4910097f1f90dfc99ecc38aefa07cf1762fdacf15ba95fcc6592adc3a0e73cb5cda870899a9f9871a1ff09fb7635c8d2464f3a23da64a56b207e679bb27605860b86c0be5c6b88fbdab8bc15aaae8e78401142ded00ecdb89f82b6bfc1c4fab94ffd788b4c798be6cbbe80c08f05f7752d5e2d1eccc3ce52a9ec2cb2ad2961346d3aa0413bf831cdea09e49b1c91b37e181941f30fc3d845d1e1e1cc078dfb264b53cf1a865"}}]}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_expedited', 0x401, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90002003}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x15f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x18c0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x6c02) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x82) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000000040)) 10.45178621s ago: executing program 2 (id=868): sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_rdma(0x10, 0x3, 0x14) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x7, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000ffffffffffffff9900000008000300", @ANYRES32=r3, @ANYBLOB="04005b00060065"], 0x28}}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f0000000000)) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4004) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r12, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r12, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) 10.143936074s ago: executing program 3 (id=870): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getpid() r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x9, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x494002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000640)=@v2={0x2000000, [{0x401, 0x5418}, {0x5, 0x9}]}, 0x14, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f0000000040)) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="808f00020800000095000000000000008500000032ef7747e5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702220008000000b7030000800000008500000006000000185500000e00000000000000000000001864000002000000000000000000ffffffffffffff7cffff"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x40, '\x00', r6, 0x0, r3, 0x8, &(0x7f0000000240)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xf, 0x7ff, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[r3, r3, r3, r3, r3, r3, r3], &(0x7f00000003c0)=[{0x0, 0x5, 0x3, 0x2}], 0x10, 0x7}, 0x94) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000001b00), &(0x7f0000000000)=0x4) 8.821300797s ago: executing program 3 (id=874): r0 = epoll_create1(0x0) syz_usb_connect$uac1(0x3, 0xaa, &(0x7f0000000100)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x5, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9fed}, [@processing_unit={0x7, 0x24, 0x7, 0x3, 0x6, 0x6}, @extension_unit={0x8, 0x24, 0x8, 0x3, 0x3, 0x8, "b9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0xc37999810fd25aeb, 0xc, 0x5, 0x3, {0x7, 0x25, 0x1, 0x0, 0x5, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0xd, 0x40, "1715b0d630"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0x8, 0x58, "b7"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x6, 0x7, 'Ra', "e68f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x6, 0xd5, {0x7, 0x25, 0x1, 0x1, 0xe, 0xf}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x7, 0x1, 0x6, 0x40, 0x7}, 0x20, &(0x7f0000000280)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "7c93c1bf459f5dfb276acb2ec26d1af8"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0xa, 0xff}]}, 0x9, [{0xde, &(0x7f00000002c0)=@string={0xde, 0x3, "f5c05ca6c676696d0afb38b904c564c94447cf25f295b0174c59360e7902c20080ad6d499ddd20d0e96ea44ccf0cd667d495e865f18ab654d0d0c5b7c8a2e257d3d698b403bad09ab346252eaca63c1fce0d078c30e1a679d1a1de2dadcb90bf4890d042d9c09a371e9948a04f1ea86fd7bbf7797e65ae9e1ffcabeaf60e63aa732f2a3b8d6c667056f20db55a169aab3ad67d18d00bc97f84966df77f8747dcce5902d72a4fd8d4a1f90aea5202e7a1ed9bbe26613e65d63ffd510493286391233157ed86f8cbf746221ed979d49197d1ec6fc798030d55e252cd2c"}}, {0x4e, &(0x7f00000003c0)=@string={0x4e, 0x3, "e64df28287bd7fe20ee448a77710f740867946ee85c9ea9d20e453b0b8603d06ded0d2385599d5f7328499f92e32e46db960537752886b9754111bf66cfa6d3ba8cc88a326e54d63e1de616d"}}, {0xbf, &(0x7f0000000440)=@string={0xbf, 0x3, "30e695020e86590b79454bb9904b2566a465933f12af9175186432ed14e1528f0153d1efbbe5b68e592368cabc0cf57d0ff9c291931685ce9dac4043813efdf832ddb099336c8b97eff2928b881bc8fd0413346546095f9321f40b0a934ff91042544db06c8d43efc1f19d799360390372969c0df0e7ef2d449c6255bd138dab379fe20a50571123bece0da48c3f4402d20397dd14b5cc377eb880d5e9cc802f50296aa942e11ff12d204a631bda18fb6fd73fca0a138c6aa8f3c81248"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x180c}}, {0xfb, &(0x7f0000000580)=@string={0xfb, 0x3, "8a0146bfe64b81f154684ea7c1cbb0f7e4e64ea175df43c9d2427880d96444fcd6840c45015a3861ada4b4dd24bb89bd741df8c082d81a7b69292e4921230c9b4f9cd1d7ad0c6c7c915444334a101d5a906c35ca5828ef29fcebac27de34af1462fffc4bf0af0f8cce2432a5f274a123e18b6675eb4d47e8e756935475e326d812d390e6e16b6ace1fd2bd1d9f38c7a7e9d5059044160bc0da01724fa2d79a539889e0852e0d4aa3abdc376241bc210238f5faec1502bc8e07ebd82e9271b96786bdd5722d4e70c1ad03317329243f37791a7febd4a2a7933962a57538081cc69bd9312854ba82168218fb18724d4abdc8b3b996387e2fe053"}}, {0x40, &(0x7f0000000680)=@string={0x40, 0x3, "76d9011cb608f00f1898cdf4a8a634730c7a5f76710e57e959d7d3a7367b0b80b2a777e151267c7e99ff86a94d7dc51ffe76cc85564ce843eeed69096255"}}, {0x0, 0x0}, {0xf9, &(0x7f0000000840)=@string={0xf9, 0x3, "cdd5dbc84b94bd64e49caa57fac56e95e1b54c04d4f80ed82599328c9f1f1b6731556c82181ecd6119f58a1459435892c0bf80c188e21a44d9eccb1beddfe5cd628476c12664aaf314ce21aaa2e6bddb0ac4910097f1f90dfc99ecc38aefa07cf1762fdacf15ba95fcc6592adc3a0e73cb5cda870899a9f9871a1ff09fb7635c8d2464f3a23da64a56b207e679bb27605860b86c0be5c6b88fbdab8bc15aaae8e78401142ded00ecdb89f82b6bfc1c4fab94ffd788b4c798be6cbbe80c08f05f7752d5e2d1eccc3ce52a9ec2cb2ad2961346d3aa0413bf831cdea09e49b1c91b37e181941f30fc3d845d1e1e1cc078dfb264b53cf1a865"}}]}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_expedited', 0x401, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90002003}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x15f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x18c0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x6c02) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x82) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000000040)) 8.26895511s ago: executing program 2 (id=875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b000)=""/102384, 0x18ff0) getpid() r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x494002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}}], 0x3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f0000000040)) 7.89379863s ago: executing program 1 (id=876): syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r0 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0x0, 0x3, 0x75, @string={0x75, 0x3, "89bb0b36216eeaf36b76d58a20d38adcfed850f862dace059034530251d002c7842004644a608e767924111ae7787bd3681919c5e522f052956908d8c2f3387cbe4439ff5cb6d8ca2dd08a813e90a27493bc8ec4ddaf8f938653b0d6c1c58881e18a020bcc028b888653257423b7f30f70826b"}}, &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x0, 0x0, 0x8, "94deb4f1", "c1bd2546"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5a, 0x80, 0x9, 0x1, 0x8, 0x8000, 0x9}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001800)={0x800000000000193, 0x0, [{0xf7f55000, 0xd0, &(0x7f0000001840)=""/224}]}) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000000)=0x1000009, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) open(0x0, 0xa0340, 0x84) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000ac0)='coda\x00', 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) sysfs$2(0x2, 0x0, &(0x7f0000000080)=""/194) 7.860372634s ago: executing program 6 (id=877): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001002dff7000000000000000000000000000ad16d441a5182592ba220e1bf0ecccf0d20000000000000afaffffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000800000200000fcffffffffffffff0000000000000000000a0000000000000400000000000000020000000000000800000000000000000101020200000000"], 0xb8}}, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x40000000}) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'hsr0\x00', 0x0}) sendto$packet(r4, &(0x7f00000000c0)="3f67576c1772ec735f050000892fcdea325f390f0671a5afa92624fc4cc40b51e0bce620b743a5f73e5ff10fb7643e5f71dc6b8a575543e073536a974244185f4e0628483c94701013c73a2b9b3b9110d55abfa4cab43b547591c823880824474862ea06ad976087303e7383719aa11bb63c343fca281ad144e5313bbe5dd9bd361e664265c15009b86ee5429c94675587126145b38b0f1cfb47faac019dc228336f2c", 0xa3, 0x8880, &(0x7f0000000300)={0xc9, 0x88a8, r5, 0x1, 0x5, 0x6, @remote}, 0x14) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={0xffffffffffffffff, 0x0}, 0x20) sendto$inet6(r0, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 7.095346199s ago: executing program 2 (id=878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4e4, 0xee0000000000}, 0x0) r0 = gettid() prlimit64(r0, 0x6, &(0x7f0000000040)={0x8, 0x5}, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r5, 0x89e0, &(0x7f0000000100)) 6.934948958s ago: executing program 6 (id=879): mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc0b45545, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x12810400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x40000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.079630606s ago: executing program 2 (id=880): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c0002000aac0f00000000001400014a637a"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r6, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x1c, 0xfffffffffffffffd}) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[], 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0x5b}}, './file0\x00'}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r8, 0xc0305615, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) 5.441655896s ago: executing program 1 (id=881): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffdaa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000340)={0x80000001, {{0xa, 0x4e21, 0x8, @loopback, 0x101}}}, 0x88) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000002060103000034e400000000000000060900020073797a310000000005000400020000000c99b4d1cda5b20ec7d680080008400069702c706f7274000000000500050002000000050001000700000000"], 0x58}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a3100000000050001000700"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000080)={0x3, &(0x7f0000000200)=[{0x0, 0x1000}, {0x7, 0x10}, {0x4, 0x4}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8890}, 0x41) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000000500010007000000c27be38a0cce5d596019bbff075cec876a46511765bf72b6d3085829dedd630172d3aea266b96d9cb6f781d2e5ee0d9c3b33aaa2c7f69a64542f3f2d6ed1b05897d006dc510063395eddaae3bd45d70ecb4a22b0682f8f85ab55c242a80fbfbda6fee11a1a951f1d895ccb5a567a1d79bde562a9301d24bc033a7e32dbbfc8cbe548d1928d2f9b609643eed775c9365ca405bfbc10c799cf7046f532d0d0"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES8, @ANYBLOB="010a25bd7000fddbdf250400000008000c000300000014000600fc02000000000000000000000000000014000500fe8000000000000000000000000000bb0800020007"], 0x4c}, 0x1, 0x0, 0x0, 0x88d3}, 0x4080) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='dyn', @ANYRESDEC, @ANYRES8=r0, @ANYRESDEC=r5]) chdir(&(0x7f0000000080)='./file0\x00') getcwd(&(0x7f0000000140)=""/115, 0x73) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 4.84038282s ago: executing program 5 (id=882): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048840}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r2 = socket$kcm(0x2d, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r3, 0x0, 0x9}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r2}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x4080, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x40080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) 4.348298705s ago: executing program 6 (id=883): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x20, 0x38, 0x6, {0x6, 0x21, "c693823a"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xa}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xac3a, 0xe, 0x1, {0x22, 0x11d}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x20, 0x16, 0xbd, "ca8bd6e421e7cf11038105ae98f604942027e601f3b06cf98871bcbf7fbcb90c0b876fc2b1f3c20d3944b675b0a65ea07794b157b85dfccdf3bd713a261947d09c43ac915a7ef354d7db71fdbd8a9f7222387882fd5d268c2f3c1014da470b33e5116f2bfe875f1baf334617d480c31e3ae1f616309a33ebf4b8b47c07adb1ac6e1265779feb11be31703eac61026a3651ea04e7ae5ace2dbe1ba1643a9f4c91a8f4c90afab2d5e1affa9b786b82fd1fc748828408659b8f3308527dd7"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xf6}, &(0x7f00000002c0)={0x20, 0x1, 0xba, "ec95ed88d9abeb4a3f5fe43f0ccd96e8a58d9512eac92001185cf418cdf97042fd5000a7ee79bebb633e49cc041ebfc7e76ac4a699d3e390a31def29a0b63809934f4bdb885ea6dd91edc9294e2d70be40cb31d99f0a128af07e87080e8e45e48c8e990becb53f0ca222bf5d32f1ee1860f632bc7c50d4d8fb2476dd68c3157eee2a2b0cbfd10add8c615469566128baf5b587ca01db19b7cf6034d4dd7b8ca0ad22e2f26a31be3cf85113f66b06bd333b3fba69bfab5aa27b6a"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x1}}) r0 = syz_open_dev$hidraw(&(0x7f0000000400), 0xa8bc, 0x101100) r1 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000640)={0x14, &(0x7f0000000480)={0x40, 0xe, 0xdb, {0xdb, 0x2, "e05136cd0331d561a65a7b7c26efa12e242975b70fb71e403ce44a62a00be4a103706da7a98b57f561852d55e915cd3b339d356a80d6443f6d0b4d11fce9d2badbea6bb029b58fd3278071dbf78343b2091f10e591af518db45cab886116c3211f92eb370b17eb039aab3e6493de3b2230cf862c782530fb02e3a11b34ac1f9e0d89f5a6a5e043403d0e2785c7d64bb8b501f1e1b8daee90e25918ee572c4e16dd6dcbf58b86b058d2f1935d3746adb8aa52b51c25814a3295ca6c1cad1cd4b3d36bc07709576f6f2827ba28ebbc0dbd11af1b70dd2b96c615"}}, &(0x7f0000000580)={0x0, 0x3, 0x85, @string={0x85, 0x3, "4f2b0a5bfc2f1af52ec9998521d000ee27e0710e1e9530fd627e61df848d03064bb8772f780f604f9d85dd46bbdea4329717c945c9d5b914f007d1e406dd7f9026f31828102411dee5dd5cde488502ec9c8d95cd7a675a7f6d07f0fcfe99d8e6349583b6223dd01c667847bf88252273e5bd4ee618e082c248d7420124c5ece418313a"}}}, &(0x7f0000000880)={0x34, &(0x7f0000000680)={0x20, 0x16, 0xb8, "a459340a5c0b392473e01b68a5aea6912f3cca1f4845e8db647ac7070261e31b17e344a65dd93749fd3269dec55f8f5b2696943d6097be49c7b7b9318689ac97f880ef7d78dd7f7c043861e17fd841c4d446c39608f429c7a30990c8bb5a340e12066f50bc9550047be64c90eacfa6d9e639c9d180264e6a8dea2f6bafb9bb334fd6f60c3716e6e956629d7701ae70ad1009d3dc40dcd2294e7575cce642c03f45052136dbd3b2dbba5205de182f1bc4019aa1dfa40216a7"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x93}, &(0x7f00000007c0)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f0000000800)={0x40, 0xa0, 0x4, 0x7f}, &(0x7f0000000840)={0xc0, 0xa2, 0x2f, "ad29ac0675a87f40c6567c6ef7637b3eef6140f7b61fb6090fcb2ac50f84b31b125824ee31be7e4bb58e133c5ab099"}}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xf0, 0x5, [{{0x9, 0x4, 0x0, 0xe4, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xfe, 0x2, 0xb}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf6, 0x4, 0x1}}]}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x300, 0xc9, 0x28, 0x0, 0x40, 0x3}, 0x10, &(0x7f0000000940)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x22, 0x0, 0x3, 0x2ddf, 0x9}]}, 0x2, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x804}}]}) syz_usb_ep_write(r2, 0x1, 0x79, &(0x7f0000000a40)="a0debe4a9ec2a7150fa80ee5fa358346120ff49e7073db8e8de71e3e71fe5b3ca7e3f30bd85a6c300260f5d3389bfddbdb812b656bd4abb9982b6d29639c25b6eae23c7543080c8604980ad264e29775f8095018fc3d59e582a562910d3a3b72307324d8e690d94ad69d6027d7a1a7a2fb04481281a153c255") syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000ac0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xd4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xd5b74fa4156c0da2, 0x9, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0x3, 0xe, 0x1, {0x22, 0x74f}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x6, 0x8d}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7f, 0x3f, 0x8}}]}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x310, 0x9, 0x4d, 0x9, 0x10, 0x14}, 0x43, &(0x7f0000000b40)={0x5, 0xf, 0x43, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xff, 0x6, 0x3ff}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x10001, 0xf, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0x4a, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "8248164a079cf582a98c01a2326ec5cf"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xf0, 0x2, 0x9}]}, 0x1, [{0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x445}}]}) r3 = syz_usb_connect$cdc_ecm(0x6, 0x5b, &(0x7f0000000c40)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x0, 0xc0, 0x4, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x99, {{0x6, 0x24, 0x6, 0x0, 0x0, 'z'}, {0x5, 0x24, 0x0, 0x4ece}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xfffd, 0x1, 0x4}, [@acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x76, 0xf9}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x8, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0xa3, 0x2}}}}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x201, 0xe, 0x7, 0x5, 0x20, 0x2}, 0xa0, &(0x7f0000000d00)={0x5, 0xf, 0xa0, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x3, 0x7}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x1, 0xff00, 0x4, [0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "e0fc8316cc1016c75d8d0a6bc06190ee"}, @generic={0x6a, 0x10, 0xb, "01610ef006eaea32f7bfa49229bf502cfa1ab17e640ec06c5050eec6ff7e48bf86a2b53d43180cfb4de8fc395a493d913c8aa64c96f2d903c040154f7c5302b157f662a73e5919068e3c5f58ddf8b9df30250229964739590787aacf9acea6b62d6eab648bc4e0"}]}, 0x2, [{0xeb, &(0x7f0000000dc0)=@string={0xeb, 0x3, "cf5e7d4b36187914d3346bb7b61fdad717f3bf3be0010c27170eb789d84715519b9ebe3cb0395ea4ed345724c01ec4b61fb0b30ef246c13de424e8d950334be4dc16b4de7399d261b35dfb7dc163d44afd1cbc43de9878d32d117eb74d27129a8f41106e99c491346f62b135740db0748d6f034110293c18a757e81567ae0be0e3ff88536fa7c204c63d4f314c162f8e247f61bc704b7f716d74f6cb1bc334a8db5c2b7c2608fe0472af76ecd5292e6a614864738230cfe9dd5cba1dc1f2238e27bbdd51b30639a2cfd1ec8379cbaa3aeb3e1055a39dfbefe047a001af9ab766a81c19f090d5d873ac"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x418}}]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000001040)={0x14, &(0x7f0000000f40)={0x20, 0x11, 0xb6, {0xb6, 0xf, "d8b32a5927a2c4a2019f23209eea5e007b12ae640bc9fd478f4748504d321180ea3584aa7f514f9d52df6e48756a75754fa728d67150aacc42f4cb5c079a04f09105d883dbcd98da60509f49f7485fa08e1e36cf8f2343b768edf1ed56728f1c0ffcdf1cde6a4d1e5c40eadc25962a3df43b446cfadc66e1c0b084e33d9290925eb59042176e63e76301463235f579d5b307e0defc26a88474c769e2a211f6707e2b6737a82c486575df9c6694d5657961a9dccf"}}, &(0x7f0000001000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000011c0)={0x1c, &(0x7f0000001080)={0x40, 0x17, 0x9d, "030771b5e8b086a82a1233aebf6357eb15611092690d05a567cc7ffce2764a02066de2ae08bb507135a80fdc1991480ef81a519fc5df5d97136e4f77152fb62194464c4728a50d29cf9418e14fe26b2172b0fbdde008bb0e9b71099b24b849b8a3eaeeb216933a684b089063828dd4ece6dba1e1f88ef66ce5fc84d5c2536e088758fc747a40137c4ed3e4b26a9fbf38bb05f28732239f405b9ce8b50f"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x8a}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001700)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000016c0)={&(0x7f0000001240)={0x470, 0x22, 0x200, 0x70bd27, 0x25dfdbfe, {0x1b}, [@typed={0x4, 0x6e}, @typed={0x103, 0x10a, 0x0, 0x0, @binary="7676f397ea8da66ff5ba71177693614c62f1b802277ecfef490106ab1431adcd8f076ebd91c13e8ea362df3f8408d3962f4b54d6b3e3af8a06f5acbe77b9611f7530473c506b4385f5ed738b1e2350a3378ed484e8987de177781b9517761b300602c74791863b6f769d497226b6357fb0d9a791153db3d510f7590e4788e9a1f7dada69faa248c92aaaeddc77b07a55a56e6efcb87f8acc94bbb9391d033d72e3a35844405bc69f4352e991e3a8b72933c3c261f98747b68a40ad707536e550c75f3423f2db1eb134dc947ab7116d88e4449b5c3f2d99b0366d0489e9455025c349e275dcdf06f2dab41b969f5121b40c98aa95d2dfc520687323377577bc"}, @typed={0x8, 0x33, 0x0, 0x0, @fd=r0}, @nested={0x82, 0x13f, 0x0, 0x1, [@generic="f9430d12769c40ba0e614dff9249c283959531914ea1f2873a1442aa43be3cabb1580bf7b43778c5d92009315de367a301c79555ccadd025d1bce69fc9425b3716deaa054145a262540fe4e07c2306cc5ecc", @generic="da7a3f469ec762b2aa82b81f428455417411111f2a1f13fec7f1f691a5f2680f8278d7bcd91239a2082e1676"]}, @generic="3095ba82b650ff86642ce27f0c72ed5c21aba90a64c5998dc088bfe5425e336a94abff0043e4985e274c788b2faa3db4565eab8520c3701c990afb7f512998e014f0ec1e3ff45d855dbf91", @nested={0x196, 0x11a, 0x0, 0x1, [@generic="268345534df3477e88eef31f74dd901f7eafd372c4ee7c6bcde77da33b282d753742826b708024f3f7677dbf16a8f4856bd34e5925e7bb9d4203bea460c316d29c2fdda07d6ce50772619000aa9197360c330c3a7c3cdf7eef21cdad44a0a3b388a3783d89ecb63a7694c67758b640d6bc8378cf620769c372529e11eb8c9154b499eed4256cbe9b", @typed={0x8, 0xce, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0xe7}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x4, 0x9a}, @nested={0x4, 0xc5}, @generic="eb4fc24039998cd373711e6abbf759512c2048c944526698a4e0fc1f895673fd3a2197eeaf6aed4de2176be185a8d8791260c3d0a2349184d711202d8df89ba453c93f50b70815afedcec53e7934cce452c604cf7632a7e8e158897e1b5a37b5df3ee2c026c706cdc0528ca89eebc4a0913ad59097973c9bc39aa435de72c0f66367f4503b754b133ec5cc93ca0423e1060ef29224560edad87d54828cbc199cee54d0c7ff2f9f59a937f25af8f77736c892cfff918a45fe4823d1d3a09ea4344f14e949ca7f23c65e45d6cd11944465dee264ae5b45", @nested={0x4, 0x129}, @typed={0x8, 0x56, 0x0, 0x0, @ipv4=@broadcast}]}, @generic="64b32acc63cdcad7f7edafc15134d46e4be11122ce43ba355884f9fe59a46f05c58eda01e485904889cef5214322b1eebcac62e9117b9dd632c2f87b2b5097f1a1ececca9813ad25633bf8d7ff768da650afa67fe1f9bdc937f1be3431", @nested={0x85, 0xe7, 0x0, 0x1, [@nested={0x4, 0xe6}, @nested={0x4, 0xc3}, @generic="49dd3f78f09eadd54379c6dddf2226effa67cad72ef1f451e44be7f0e3e17f89ea39a389699291c6b3c0b23fe1b30085bec605e9448b46a664d225c8e447112697533370afc44ca19e701a0f9f6bbc34651d59b671009c8b278f780061ba06eb43c6ea48eb09ced1a767cebb25db9bea1671e8d882228f94da", @generic]}]}, 0x470}}, 0x20000884) syz_usb_connect$cdc_ncm(0x2, 0x92, &(0x7f0000001740)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x2, 0x1, 0x7f, 0x80, 0xc, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "b76755a06b"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xb29, 0x3, 0x2, 0x9d}, {0x6, 0x24, 0x1a, 0x3c, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x6, 0xa}, @country_functional={0x12, 0x24, 0x7, 0x5, 0x3, [0x6, 0x3fc1, 0xd, 0x856, 0x249, 0x6]}, @obex={0x5, 0x24, 0x15, 0xfffa}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x28, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0xae, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3c, 0xf, 0x8}}}}}}}]}}, &(0x7f0000001980)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x200, 0x5, 0x8, 0x2, 0x40, 0xe5}, 0xd2, &(0x7f0000001840)={0x5, 0xf, 0xd2, 0x6, [@generic={0x89, 0x10, 0x1, "c503b761a9bf078d17c854fe5099426637ad15955623397b640514165d4f04d6af60888b85c80fe505d98425b0e41466ddc74797461ba12f80a6b2e7076ef804f510230a381da608c2d895220f56a29dbad2eeaeaee2630a8a214df3f9191a72c3b1604b807604b2ba5268367a000431a950fd6270890384f365a8605a08e534f75ee6633e1a"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x5, 0xf00f, 0xc, [0x3f3f, 0x0, 0x30, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x7, 0x5b}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2d, 0x3, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x94, "73618edef122bf69471eb498c53ae22d"}]}, 0x1, [{0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x2809}}]}) r5 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f00000019c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r5, &(0x7f0000001b80)={0x14, &(0x7f0000001a00)={0x0, 0x22, 0xbb, {0xbb, 0x23, "52c7f06c785a0052e5e28a3b3cd041b28db7d5401c568202e8cca51e5ce8a1ef3ef756f3811ed6b20e418a3e9a0fb2a53432928b37bf0c1d971c8b7bc4f773d01ba850edceb7899fee422bab3bba9f8855d16884be8bc50fd9dbf95369f3f1e5506f1a575708b4db91a1f6a2cfb9a5c81953fcde8f04fd2375af712d83bfe03d94ea31e88b5b04f2d02b8b1cc43529ae779742fd2944f5af4f97d47f20a205de4d30f53165c82685e49bad66748df3cba0f6684bd3b4de6ce1"}}, &(0x7f0000001b00)={0x0, 0x3, 0x54, @string={0x54, 0x3, "cac741cc16ea0ea24fe4f45bb72e6919ef1702713e573da0e32f67177b8b408f6e654e3ddae199220cca47ba3bef7b9a23fb4b00a7515014fa749c9f887a648d603de5a6fab650e78f027baf17e99dd72ffd"}}}, &(0x7f0000001d80)={0x2c, &(0x7f0000001bc0)={0x20, 0xf, 0xba, "1d3a1864f1543ec231f18117219e3827a3af42f829c39fdf6411e606c972b96223db7c656c03f8cc4cf82fb4b8a2c89419e4090b3b148c954bbca06df2ea82196b55ba793ede15955c4b2f13aeae4e4a5bc5f34217279025c7959350f08ad7c56fe84c3aba55d2e25167c1f3384a209b95d60461389a5d7b3b2daf24b4b923c2648e00ce50422ea1fda3445e1902abcf53912e08ee861d41a76f1a19599c24545c708f2ef8dad9742d7d764ece20a83a2b47bffbfbe0b3bd193c"}, &(0x7f0000001c80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001cc0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001d00)={0xc0, 0x5, 0x4, "8920df27"}, &(0x7f0000001d40)}) syz_usb_control_io$printer(r2, &(0x7f0000001e80)={0x14, &(0x7f0000001dc0)={0x20, 0x5, 0x6e, {0x6e, 0x8, "79da75b73c5da52c2c33effe1ad3391ae2a2a09e6264d5d19c379ca7fd3fe1b420234b5651d1ad8af2b61a29e4e8b74375cc59916225db7edbce4b4e8e34081d3ae2416f7808b170660cf407b9aaf2335d8fabe940759a892c6c887f69542f6bfed547e041d9821ad110d934"}}, &(0x7f0000001e40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}}, &(0x7f0000002100)={0x34, &(0x7f0000001ec0)={0x20, 0xf, 0xba, "93b1e52f1f957524d47b1a6d43dc60f138d170b7490d786cff895e578e527d9df84ac4664f57ad44cd0cdfb87581ff2365f63962a725c66662a663703d6f4b93b533debc42c731237f8c249b0a23bde5a84e1e61f155c0d590709036c4eb7b9c6809ed364af65b62188528fe9413cd0d7914604f8d4d9fdb1dad65a5ff6f71ed7e76f8d6f0df28b2911ef6c838f77aaa3a0a4fd33ddeeda045b3b4e9cc11d33c2f78a46f145d08f2510722951af532c940cd868e7372f3128f00"}, &(0x7f0000001f80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001fc0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000002000)={0x20, 0x0, 0x40, {0x3e, "1ec1d8384d74cce29350bf5eb0b3ee1dc0c6429a46b08320738008e588c413fbd47913171dd0c5d2d625fbfe9f108cdeef22c8cd764ec1beec119fcc8963"}}, &(0x7f0000002080)={0x20, 0x1, 0x1, 0x3}, &(0x7f00000020c0)={0x20, 0x0, 0x1, 0x5}}) syz_usb_connect$cdc_ncm(0x6, 0x9a, &(0x7f0000002140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x2, 0x1, 0x2, 0x28, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'h'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7, 0x1, 0x5}, {0x6, 0x24, 0x1a, 0x9, 0x34}, [@dmm={0x7, 0x24, 0x14, 0x7b8, 0x4}, @dmm={0x7, 0x24, 0x14, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x4, 0xc}, @mdlm={0x15, 0x24, 0x12, 0xf}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0xd, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x270, 0x1, 0x4, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0xfe, 0x8}}}}}}}]}}, &(0x7f00000024c0)={0xa, &(0x7f0000002200)={0xa, 0x6, 0x110, 0x4, 0x5, 0x1, 0x10, 0x2}, 0x11c, &(0x7f0000002240)={0x5, 0xf, 0x11c, 0x5, [@generic={0x71, 0x10, 0x4, "21dde2729c13cb1548fbc06dd8c8fd416f0124cab5001b7512d8fda03975216374da2c1aad7eeabc22d8bc4a9e6466181b2c584e24c464449fea228b5a19177c0d899c5bf4208022561b56d000515e02ca4c9dbef65d3c6f387757f5033b9011bc516ae3a276c860fde9608c962d"}, @ssp_cap={0x1c, 0x10, 0xa, 0x2c, 0x4, 0xd, 0xf, 0x9, [0xff3fff, 0x30, 0xc000, 0x30]}, @generic={0x75, 0x10, 0xb, "1c5764f281bc5db490dc5d7414f3f94414f507e6eb43e4e5900e040ec5aa697efc5fbec6f437aa9464c4dcc0c8cb744c8970acf76586e759cd049031f339f3bfac7b3985c39dd92c377ac8a90414ecaa89a28ee3b61abf10dfada998ba1f1d8bb71b013644bf1066833be892e0e229fd881c"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x0, 0x1, 0x93, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x3, 0x8}]}, 0x2, [{0x4, &(0x7f0000002380)=@lang_id={0x4, 0x3, 0x44d}}, {0xd8, &(0x7f00000023c0)=@string={0xd8, 0x3, "8bca1529c4fb2d084282f39d81c2209b10fdb60bfcb560186b4ac4c96ae18ca79e969df6b91735ed2b41ebcb2bbc6b661c4bee41a5d430038520987a86ad3c129198a31f0fa6cbe85b65c4ec20ecd96d53e45bd9bdf763547713ceb9ebc6db17a6899d1a6f3f6e7345e1e578f58ee597e76b3bf94bbcdaae14176b8c449c0225074c763a307d1e0f2480cc7518c6bb5527c4b8dbf1a485ab57d96c8855dbb2b27e7feaa03dd761f9fd9dac81f0ea37c653c777c86def274c2e9f4c4f4e6b7641e0c03c680e773b52b2ade59651a478b641f14fb89fca"}}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002500)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x28, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x75}}}}}, 0x28}}, 0x8045) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000002740)={'syztnl0\x00', &(0x7f00000026c0)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x81, 0x3, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x1, 0x80, 0x8000, 0xb}}) sendmsg$nl_route(r6, &(0x7f0000002840)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002800)={&(0x7f0000002780)=@ipv6_getaddr={0x70, 0x16, 0x300, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r8}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8001}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x845}, 0x40000) r9 = syz_usb_connect$uac1(0x4, 0xab, &(0x7f0000002880)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x3, 0x80, 0x6c, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x10}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x301, 0x1, 0x4, 0x89}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0x80}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0x6, "7f10"}, @extension_unit={0x9, 0x24, 0x8, 0x5, 0x3, 0x6, "2684"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x6, 0x8, 0x6, 0x45, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x80, 0x7, "d5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x6, 0x2, {0x7, 0x25, 0x1, 0x81, 0x5, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x80}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x9, 0x8, {0x7, 0x25, 0x1, 0x3, 0x5, 0x9}}}}}}}]}}, &(0x7f0000002b00)={0xa, &(0x7f0000002940)={0xa, 0x6, 0x310, 0x0, 0xdc, 0x6, 0x8, 0x69}, 0xf, &(0x7f0000002980)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xd, 0x3, 0x159}]}, 0x2, [{0xf5, &(0x7f00000029c0)=@string={0xf5, 0x3, "174dbede200c310ed15bea6393c79caa1ea0fc43e212894c975f96d941245389e77ced550d60cb93323c5f82812c30f813affe9b859ca081fd2938901ff70df6331765239f651c0e676071cf028b23d0421d60190b67368402156b5bbfc908b705e1a11bb1c9d8fc960ad78d7a76e7755e0f2c6c30ed6098c8dcbc2cbe15b791d576a1c16d518b0fecdb72ff9ffed80e7ace10a2d57765449f0f5efdc67bb75b44ac7702cf974d89dceeac2b61fdd663f2f3a06bd5d81e5c8c0b5bec0be18ca15508bfaf620f6b1172929f0a7f4e28bb366c6edc22c867870f84936d571892aa0996f3b7ce5adb7e480657d8df6f59b524de32"}}, {0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x380a}}]}) syz_usb_control_io$uac1(r9, &(0x7f0000002c80)={0x14, &(0x7f0000002b40)={0x0, 0xf, 0xc7, {0xc7, 0x3, "8a0d8c183ce574c887e40027d3e75c6bea22554e49f84c8782840ecf0defcb75eac888132892af4aaf6e11e0ff556cd27f792e08ef71f2b3028822ba483c4aa71271e73880b90976dee6b1f2358ce0e7df82f766a6a631dbfe51ab2c0666c1eb7deec59a6020de8ae13f7513e56f5cdd43aeefbfcb286268ee0307d1abdd934c9f053bb61c7302ae613992b184e3abc4f601b03428e2f41b8094fe4454cc0983981599aed604e85bd7d8f5eb66092a46fb30cae6efb338b36d0815c6e4af9716c290345a7d"}}, &(0x7f0000002c40)={0x0, 0x3, 0x7, @string={0x7, 0x3, "25b6e4695e"}}}, &(0x7f0000002f40)={0x44, &(0x7f0000002cc0)={0x20, 0x12, 0x98, "753fe7112ece394712a66c50af4a122953516ee6560659be369cc812c72d75be2e92965c1749def3215ac01e696e3756fe030cf91a5e6f31de3faac28f5dc03aed9401a581c0f11f0e9526aae2bf2665e20f73f2d58bde2dd8f4e91eaf2a63eb0e6684f153e9023e790e2c1946d18cab3438d99470a813843b9806c854fef3e30106e8cb4a73499410c4462d1ee06335789dc557c5be1219"}, &(0x7f0000002d80)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000002dc0)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000002e00)={0x20, 0x81, 0x3, "ded761"}, &(0x7f0000002e40)={0x20, 0x82, 0x2, "53a8"}, &(0x7f0000002e80)={0x20, 0x83, 0x2, "fd48"}, &(0x7f0000002ec0)={0x20, 0x84, 0x4, "d1009eaf"}, &(0x7f0000002f00)={0x20, 0x85, 0x3, "93f98c"}}) timerfd_settime(r6, 0x3, &(0x7f0000002fc0)={{}, {0x77359400}}, &(0x7f0000003000)) write$eventfd(r6, &(0x7f0000003040)=0x5, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) read$fb(r6, &(0x7f0000003080)=""/74, 0x4a) syz_usb_control_io$uac1(r9, &(0x7f0000003280)={0x14, &(0x7f0000003100)={0x20, 0x6, 0x6c, {0x6c, 0x22, "6280cdcc7ea3687195ac0399ad98ec15ab199eb12527c2fd199412d9d883ca182c1a61b01a01e42b16cacab5fa38e3fdd31c9f7fd05a8b362cf81771922ea200c94b3af6d8759d11b863a2fcc04f6aaf608ead5526c6ca5d72d3eea0c1938c5d4cc9b22cb071254413af"}}, &(0x7f0000003180)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "d3914b3af1cf9e9614ea2b358ecdca91aa92d9ea262de8e39d50193dc5f67d02b6c6694e83f3d43ba0d2229f8b5f32793646fea5e0b8019a8a425e63a4f23ec14565c7c9ec9c873e44da57b1c33672dabeb6b168266fa253f2f92b597e37c25fed013dd6eabb299472943cd281e9d5e55d6a78826e904cc53297e75ba8a320f68bb22abc496a4768de773b4bdc9ef4e45bdbfd729263eb43b2d05f827d7da9d08f0dffd5f383620cc742aa5a2ef482c2cae3229a32969b66a90e47634c20ea2a3668db6473da6e5353116cd1247331d5ab0f9a49153dfeec21934342f664b488631e32ba724dd779a90bd2c2122d"}}}, &(0x7f0000003580)={0x44, &(0x7f00000032c0)={0x0, 0x7, 0xcc, "d028b3072e89d89293819836e83bfe7baa3095f240769edcde051b053e1537cd47d8bec4d8ab76d26220bc32c0c150493215087f1a684166f4da246b1d95e81f6ff7c06465de0915309f60e1081d75bd17865e1145b6692e449feaff3b1c8ce3ee51b120b92509cdc34a5bbed6ea57c6e412ea55d23e75997b14d88f28355f54ee40e5b2a0057ea259a3a7a7763e3a490afbdc1528b35e1752447ce14bb2f28dfb42a7bffb9a6909c298d00613e1276869fcad2c65097aa449335198135f06315ed2bab8536e922abfafb5ef"}, &(0x7f00000033c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000003400)={0x0, 0x8, 0x1}, &(0x7f0000003440)={0x20, 0x81, 0x2, "d555"}, &(0x7f0000003480)={0x20, 0x82, 0x2, "8d37"}, &(0x7f00000034c0)={0x20, 0x83, 0x3, "8a13dd"}, &(0x7f0000003500)={0x20, 0x84, 0x2, "2ceb"}, &(0x7f0000003540)={0x20, 0x85, 0x3, "15b548"}}) dup3(r0, r10, 0x0) getpid() 4.314350864s ago: executing program 1 (id=884): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) 4.216311723s ago: executing program 1 (id=885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) clock_adjtime(0x5, &(0x7f0000004dc0)={0x1b, 0x45, 0x20063, 0xfffffffffffffffe, 0x9, 0x7cca, 0x5, 0xc632, 0xfffffffffffffffc, 0x10004, 0x2000000000000, 0x7, 0xb1e4, 0xfff, 0x8004, 0x5, 0x8, 0x9, 0xfffffffffffffff9, 0x9, 0x200000000000, 0xa5, 0x3c0000000000000, 0x1000009011, 0x10, 0x18}) ioctl$KVM_RUN(r3, 0xae80, 0x4000) 4.029361087s ago: executing program 3 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048840}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r2 = socket$kcm(0x2d, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r3, 0x0, 0x9}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r2}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x4080, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x40080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) 3.971014456s ago: executing program 1 (id=887): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x7ff, 0x33d4, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x6}, 0x48) r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) r1 = socket(0xa, 0x801, 0x0) getsockopt(r1, 0x1, 0x8, 0x0, &(0x7f0000001ffc)) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='>') 3.690789342s ago: executing program 5 (id=888): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d, 0x2}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x3, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000200)={0xc}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r6, 0x3b71, &(0x7f0000000280)={0x20, 0x0, &(0x7f0000000480), 0x1c, 0xfffffffffffffffd}) 2.745962284s ago: executing program 5 (id=889): munlockall() munlockall() fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f00000000c0)={0x1, 0x30000, 0x40, 0xb, 0x40, 0x2, 0x40, 0x0, 0xffffffff, 0x1, 0x0, 0x889f, &(0x7f0000000080), 0x0, 0x0}) 2.541672913s ago: executing program 2 (id=890): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000073000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002c00070101fcdbdf25067c0031c97c85d432c61180000000"], 0x1c}}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES16=r2, @ANYRESDEC=r1, @ANYRES16=r0, @ANYRESDEC=r1, @ANYRES8=r2], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000340)='pimreg\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000000000005010040"]) 2.520604224s ago: executing program 5 (id=891): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x34000, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0) 2.307027351s ago: executing program 5 (id=892): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7f67, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x5}}) 1.280509429s ago: executing program 6 (id=893): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) setsockopt$sock_int(r3, 0x1, 0x1e, &(0x7f0000000940)=0x1000008, 0x4) mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000000), 0x3200841, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x30]}}}}]}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="f7a8b59867e316f5a88a949b86a6d3a0f28846060681abc5880b5081956869598e76374f152b196f26da", 0x2a}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x6}}, './cgroup\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, 0x0) write$cgroup_type(r1, 0x0, 0x0) 1.139278501s ago: executing program 5 (id=894): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffdaa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000340)={0x80000001, {{0xa, 0x4e21, 0x8, @loopback, 0x101}}}, 0x88) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000002060103000034e400000000000000060900020073797a310000000005000400020000000c99b4d1cda5b20ec7d680080008400069702c706f7274000000000500050002000000050001000700000000"], 0x58}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a3100000000050001000700"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000080)={0x3, &(0x7f0000000200)=[{0x0, 0x1000}, {0x7, 0x10}, {0x4, 0x4}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8890}, 0x41) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000000500010007000000c27be38a0cce5d596019bbff075cec876a46511765bf72b6d3085829dedd630172d3aea266b96d9cb6f781d2e5ee0d9c3b33aaa2c7f69a64542f3f2d6ed1b05897d006dc510063395eddaae3bd45d70ecb4a22b0682f8f85ab55c242a80fbfbda6fee11a1a951f1d895ccb5a567a1d79bde562a9301d24bc033a7e32dbbfc8cbe548d1928d2f9b609643eed775c9365ca405bfbc10c799cf7046f532d0d0"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES8, @ANYBLOB="010a25bd7000fddbdf250400000008000c000300000014000600fc02000000000000000000000000000014000500fe8000000000000000000000000000bb0800020007"], 0x4c}, 0x1, 0x0, 0x0, 0x88d3}, 0x4080) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='dyn', @ANYRESDEC, @ANYRES8=r0, @ANYRESDEC=r5]) chdir(&(0x7f0000000080)='./file0\x00') getcwd(&(0x7f0000000140)=""/115, 0x73) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 75.815171ms ago: executing program 2 (id=895): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000340)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r4, 0x1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x70bd22, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x1, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9f}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 1 (id=896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x1, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x2, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x6, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x1, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0xfffffff9, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x9, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x7, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x8, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x0, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x1fffc000, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x7, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x6, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x8, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x80000001, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x6, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x5, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0x9, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x805, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x42, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x1, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x9, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0xffffff12, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x9, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008400000044010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000000000001f199450a3987147823d1b35a12db72fd"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x8, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e120800", 0x2a}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000400007012bbd700000000000017c0000d89c889a534dd782cdd772d9b7166a45acfa730278d700190e3278e482db0fd0459498b66b64698dad2fb671fbf8d72a81a2499ca865afea7964b0fc2da7f223f082ec05cce8db5dba0dd9e0d25b128729e797165df279b2730100000081df7eb1cb95f32014b0ce86"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff7) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x10, 0x8, 0x1, '\x00', 0x4}) kernel console output (not intermixed with test programs): syscall=202 compat=0 ip=0x7fe2e358f6c9 code=0x7ffc0000 [ 238.063125][ T30] audit: type=1326 audit(1762245348.355:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe2e358f6c9 code=0x7ffc0000 [ 238.261010][ T7800] netlink: 32 bytes leftover after parsing attributes in process `syz.2.498'. [ 239.033798][ T976] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 239.243669][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 239.257979][ T976] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 239.266444][ T976] usb 4-1: config 179 has no interface number 0 [ 239.283721][ T976] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 239.304055][ T976] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 239.404082][ T976] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 239.460573][ T976] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 239.565677][ T976] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 239.577375][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.701302][ T7806] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 244.730206][ T11] block nbd0: Possible stuck request ffff88802617e000: control (read@0,1024B). Runtime 30 seconds [ 244.741678][ T11] block nbd0: Possible stuck request ffff88802617e1c0: control (read@1024,1024B). Runtime 30 seconds [ 244.757159][ T11] block nbd0: Possible stuck request ffff88802617e380: control (read@2048,1024B). Runtime 30 seconds [ 244.768555][ T11] block nbd0: Possible stuck request ffff88802617e540: control (read@3072,1024B). Runtime 30 seconds [ 244.807923][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 244.807937][ T30] audit: type=1400 audit(1762245356.545:480): avc: denied { read } for pid=7834 comm="syz.1.507" path="socket:[16178]" dev="sockfs" ino=16178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 244.973699][ T30] audit: type=1400 audit(1762245356.665:481): avc: denied { write } for pid=7834 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 245.138318][ T976] usb 4-1: USB disconnect, device number 14 [ 245.553702][ T976] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 245.729748][ T976] usb 4-1: Using ep0 maxpacket: 16 [ 245.743471][ T7842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.509'. [ 245.746418][ T976] usb 4-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 245.762882][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.778479][ T976] usb 4-1: Product: syz [ 245.823210][ T976] usb 4-1: Manufacturer: syz [ 245.842675][ T976] usb 4-1: SerialNumber: syz [ 245.920478][ T976] usb 4-1: config 0 descriptor?? [ 246.650146][ T976] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 246.781492][ T7839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.792807][ T7839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.839586][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 246.839887][ T30] audit: type=1400 audit(1762245358.575:482): avc: denied { nlmsg_tty_audit } for pid=7847 comm="syz.0.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 246.864331][ T7848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.018970][ T7859] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 247.035252][ T10] usb 4-1: USB disconnect, device number 15 [ 247.045110][ T5889] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 247.222801][ T5889] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 247.232163][ T5889] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 247.246226][ T5889] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 247.255624][ T5889] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 247.269750][ T5889] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 247.328488][ T5889] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 247.370610][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 247.379747][ T5889] usb 3-1: Product: syz [ 247.391001][ T5889] usb 3-1: Manufacturer: syz [ 247.470752][ T5889] cdc_wdm 3-1:1.0: skipping garbage [ 247.476250][ T5889] cdc_wdm 3-1:1.0: skipping garbage [ 247.606754][ T5889] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 247.633372][ T5889] cdc_wdm 3-1:1.0: Unknown control protocol [ 247.696651][ T30] audit: type=1400 audit(1762245359.425:483): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 247.726749][ T7853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.748168][ T7853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.767132][ T7853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.776520][ T7853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.909185][ T10] usb 3-1: USB disconnect, device number 13 [ 247.973665][ T5889] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 248.153637][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 248.162497][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 248.180838][ T5889] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 248.191454][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.206413][ T5889] usb 4-1: Product: syz [ 248.213030][ T5889] usb 4-1: Manufacturer: syz [ 248.226287][ T5889] usb 4-1: SerialNumber: syz [ 248.236648][ T5889] usb 4-1: config 0 descriptor?? [ 248.325542][ T5889] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 248.347218][ T5889] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 248.711134][ T7879] support for the xor transformation has been removed. [ 249.221189][ T30] audit: type=1326 audit(1762245360.945:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7877 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae758f6c9 code=0x7ffc0000 [ 249.265399][ T30] audit: type=1326 audit(1762245360.945:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7877 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae758f6c9 code=0x7ffc0000 [ 249.293374][ T5889] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 249.304319][ T30] audit: type=1326 audit(1762245360.945:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7877 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4ae758f6c9 code=0x7ffc0000 [ 249.331996][ T30] audit: type=1326 audit(1762245360.945:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7877 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae758f6c9 code=0x7ffc0000 [ 249.366177][ T30] audit: type=1326 audit(1762245360.945:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7877 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae758f6c9 code=0x7ffc0000 [ 249.393835][ T30] audit: type=1326 audit(1762245360.945:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7877 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ae758f6c9 code=0x7ffc0000 [ 249.958862][ T5889] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 249.979368][ T5889] em28xx 4-1:0.0: board has no eeprom [ 250.334353][ T7868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.344123][ T7868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.397034][ T7896] syzkaller0: entered promiscuous mode [ 250.456815][ T7896] syzkaller0: entered allmulticast mode [ 250.662453][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 250.671734][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 250.686234][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 250.721705][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 250.729418][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.788188][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 250.788203][ T30] audit: type=1400 audit(1762245362.515:505): avc: denied { mounton } for pid=7901 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 250.904532][ T7908] netlink: 32 bytes leftover after parsing attributes in process `syz.1.526'. [ 251.165549][ T7868] em28xx 4-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 251.297100][ T5889] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 251.307540][ T5889] em28xx 4-1:0.0: dvb set to bulk mode. [ 251.313391][ T979] em28xx 4-1:0.0: Binding DVB extension [ 251.371480][ T5889] usb 4-1: USB disconnect, device number 16 [ 251.479751][ T30] audit: type=1400 audit(1762245363.185:506): avc: denied { connect } for pid=7909 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 251.880593][ T979] em28xx 4-1:0.0: Registering input extension [ 251.899165][ T5889] em28xx 4-1:0.0: Disconnecting em28xx [ 251.906190][ T5889] em28xx 4-1:0.0: Closing input extension [ 251.919765][ T30] audit: type=1400 audit(1762245363.205:507): avc: denied { setopt } for pid=7909 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 251.981196][ T5889] em28xx 4-1:0.0: Freeing device [ 252.391659][ T7919] binder: 7914:7919 ioctl c0306201 200000000040 returned -22 [ 252.677463][ T30] audit: type=1400 audit(1762245364.395:508): avc: denied { map } for pid=7916 comm="syz.1.529" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 253.164571][ T5818] Bluetooth: hci5: command tx timeout [ 253.196974][ T30] audit: type=1400 audit(1762245364.405:509): avc: denied { call } for pid=7916 comm="syz.1.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 253.285920][ T30] audit: type=1400 audit(1762245364.405:510): avc: denied { transfer } for pid=7916 comm="syz.1.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 253.633748][ T7938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.533'. [ 254.150603][ T7901] chnl_net:caif_netlink_parms(): no params data found [ 254.247944][ T30] audit: type=1400 audit(1762245365.985:511): avc: denied { append } for pid=7948 comm="syz.2.536" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 254.373669][ T979] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 254.533689][ T979] usb 2-1: Using ep0 maxpacket: 8 [ 254.538897][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 254.549541][ T979] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 254.557944][ T979] usb 2-1: config 179 has no interface number 0 [ 254.568306][ T979] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 254.594470][ T7901] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.611747][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.619368][ T979] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 254.633934][ T7901] bridge_slave_0: entered allmulticast mode [ 254.665211][ T7901] bridge_slave_0: entered promiscuous mode [ 254.673936][ T7901] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.681037][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.698834][ T7901] bridge_slave_1: entered allmulticast mode [ 254.704865][ T979] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 254.704894][ T979] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 254.704934][ T979] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 254.704954][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.737558][ T7947] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 254.755553][ T9] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 254.808525][ T7901] bridge_slave_1: entered promiscuous mode [ 255.083649][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.101929][ T7901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.133668][ T9] usb 3-1: Product: syz [ 255.135881][ T7901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.137866][ T9] usb 3-1: Manufacturer: syz [ 255.252141][ T5818] Bluetooth: hci5: command tx timeout [ 256.235149][ T9] usb 3-1: SerialNumber: syz [ 256.247767][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.255361][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.299430][ T7901] team0: Port device team_slave_0 added [ 256.314509][ T9] usb 3-1: config 0 descriptor?? [ 256.324763][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 256.369171][ T7901] team0: Port device team_slave_1 added [ 256.387950][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 256.412878][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 256.534412][ T30] audit: type=1400 audit(1762245368.225:512): avc: denied { read } for pid=7959 comm="syz.0.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 256.595221][ T30] audit: type=1400 audit(1762245368.245:513): avc: denied { append } for pid=7959 comm="syz.0.538" name="system" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 256.868775][ T9] usb 3-1: media controller created [ 257.047203][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.079637][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.096425][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.219648][ T7901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.235699][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.243642][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.297805][ T9] DVB: Unable to find symbol mt352_attach() [ 257.317580][ T5818] Bluetooth: hci5: command tx timeout [ 257.351621][ T7901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.429321][ T5929] usb 2-1: USB disconnect, device number 21 [ 257.448133][ T9] DVB: Unable to find symbol nxt6000_attach() [ 257.483711][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 257.513884][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 257.541628][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 257.563684][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 257.594139][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 257.600109][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 257.671943][ T9] usb 3-1: USB disconnect, device number 14 [ 257.880896][ T7901] hsr_slave_0: entered promiscuous mode [ 257.905395][ T7901] hsr_slave_1: entered promiscuous mode [ 257.920932][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 257.937997][ T7901] debugfs: 'hsr0' already exists in 'hsr' [ 257.946539][ T7901] Cannot create hsr debugfs directory [ 258.109431][ T7986] netlink: 32 bytes leftover after parsing attributes in process `syz.2.544'. [ 258.451231][ T7990] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 258.457787][ T7990] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 258.464619][ T7993] ======================================================= [ 258.464619][ T7993] WARNING: The mand mount option has been deprecated and [ 258.464619][ T7993] and is ignored by this kernel. Remove the mand [ 258.464619][ T7993] option from the mount to silence this warning. [ 258.464619][ T7993] ======================================================= [ 258.533610][ T7990] vhci_hcd vhci_hcd.0: Device attached [ 258.571045][ T30] audit: type=1400 audit(1762245370.305:514): avc: denied { create } for pid=7989 comm="syz.3.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 258.580663][ T7993] tmpfs: Unknown parameter 've:2' [ 258.610555][ T7991] vhci_hcd: connection closed [ 258.647180][ T6141] vhci_hcd: stop threads [ 258.680482][ T6141] vhci_hcd: release socket [ 258.686489][ T6141] vhci_hcd: disconnect device [ 258.713695][ T976] vhci_hcd: vhci_device speed not set [ 258.732295][ T30] audit: type=1400 audit(1762245370.465:515): avc: denied { setopt } for pid=7988 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 258.850266][ T7901] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 258.886604][ T7901] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 258.898579][ T7901] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 258.910436][ T7901] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 258.910926][ T30] audit: type=1400 audit(1762245370.645:516): avc: denied { read } for pid=8001 comm="syz.1.549" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 258.948325][ T30] audit: type=1400 audit(1762245370.675:517): avc: denied { open } for pid=8001 comm="syz.1.549" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 258.999122][ T30] audit: type=1400 audit(1762245370.685:518): avc: denied { ioctl } for pid=8001 comm="syz.1.549" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 259.394089][ T5818] Bluetooth: hci5: command tx timeout [ 259.496512][ T7901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.520925][ T7901] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.543486][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.550615][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.625942][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.633055][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.798966][ T7901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 260.483391][ T7901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.491739][ T8042] cgroup: fork rejected by pids controller in /syz2 [ 261.549829][ T7901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.840784][ T8237] support for the xor transformation has been removed. [ 262.552194][ T8259] FAULT_INJECTION: forcing a failure. [ 262.552194][ T8259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.614317][ T8259] CPU: 1 UID: 0 PID: 8259 Comm: syz.3.558 Not tainted syzkaller #0 PREEMPT(full) [ 262.614342][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.614352][ T8259] Call Trace: [ 262.614358][ T8259] [ 262.614364][ T8259] dump_stack_lvl+0x16c/0x1f0 [ 262.614394][ T8259] should_fail_ex+0x512/0x640 [ 262.614417][ T8259] _copy_from_user+0x2e/0xd0 [ 262.614436][ T8259] x25_ioctl+0x144/0xe20 [ 262.614454][ T8259] ? __pfx_x25_ioctl+0x10/0x10 [ 262.614470][ T8259] ? avc_has_extended_perms+0x47c/0x1090 [ 262.614496][ T8259] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 262.614513][ T8259] ? kasan_quarantine_put+0x10a/0x240 [ 262.614524][ T8259] ? lockdep_hardirqs_on+0x7c/0x110 [ 262.614541][ T8259] ? find_held_lock+0x2b/0x80 [ 262.614558][ T8259] ? tomoyo_path_number_perm+0x18d/0x580 [ 262.614579][ T8259] sock_do_ioctl+0x118/0x280 [ 262.614597][ T8259] ? __pfx_sock_do_ioctl+0x10/0x10 [ 262.614617][ T8259] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 262.614633][ T8259] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 262.614648][ T8259] sock_ioctl+0x227/0x6b0 [ 262.614659][ T8259] ? __pfx_sock_ioctl+0x10/0x10 [ 262.614668][ T8259] ? hook_file_ioctl_common+0x145/0x410 [ 262.614690][ T8259] ? selinux_file_ioctl+0x180/0x270 [ 262.614700][ T8259] ? selinux_file_ioctl+0xb4/0x270 [ 262.614712][ T8259] ? __pfx_sock_ioctl+0x10/0x10 [ 262.614723][ T8259] __x64_sys_ioctl+0x18e/0x210 [ 262.614738][ T8259] do_syscall_64+0xcd/0xfa0 [ 262.614756][ T8259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.614767][ T8259] RIP: 0033:0x7f670c18f6c9 [ 262.614775][ T8259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.614785][ T8259] RSP: 002b:00007f670a3ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.614795][ T8259] RAX: ffffffffffffffda RBX: 00007f670c3e5fa0 RCX: 00007f670c18f6c9 [ 262.614802][ T8259] RDX: 00002000000003c0 RSI: 00000000000089e3 RDI: 0000000000000004 [ 262.614808][ T8259] RBP: 00007f670a3ee090 R08: 0000000000000000 R09: 0000000000000000 [ 262.614814][ T8259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.614820][ T8259] R13: 00007f670c3e6038 R14: 00007f670c3e5fa0 R15: 00007ffddd2f65d8 [ 262.614833][ T8259] [ 263.284813][ T8267] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.324253][ T8267] bond3: (slave bond4): Enslaving as an active interface with an up link [ 264.043839][ T30] audit: type=1400 audit(1762245375.775:519): avc: denied { read write } for pid=8276 comm="syz.2.562" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 264.146838][ T30] audit: type=1400 audit(1762245375.775:520): avc: denied { open } for pid=8276 comm="syz.2.562" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 264.193487][ T30] audit: type=1400 audit(1762245375.815:521): avc: denied { ioctl } for pid=8276 comm="syz.2.562" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 264.202712][ T7901] veth0_vlan: entered promiscuous mode [ 265.785274][ T7901] veth1_vlan: entered promiscuous mode [ 266.916764][ T8285] netlink: 48 bytes leftover after parsing attributes in process `syz.0.564'. [ 266.951412][ T8285] afs: Unknown parameter 'dyn1844674407370955161500000000000000000009' [ 267.011201][ T7901] veth0_macvtap: entered promiscuous mode [ 267.030927][ T7901] veth1_macvtap: entered promiscuous mode [ 267.071507][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.195267][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.336619][ T8301] support for the xor transformation has been removed. [ 267.664852][ T1104] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.697607][ T1104] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.721871][ T1104] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.736368][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.749399][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.758545][ T1104] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.780734][ T8305] netlink: 76 bytes leftover after parsing attributes in process `syz.1.570'. [ 267.840454][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.851178][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.897851][ T30] audit: type=1400 audit(1762245379.635:522): avc: denied { mount } for pid=7901 comm="syz-executor" name="/" dev="gadgetfs" ino=6968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 268.008578][ T8307] syz_tun: entered allmulticast mode [ 268.035560][ T976] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 268.058730][ T8307] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 268.098250][ T8307] syz_tun: left allmulticast mode [ 268.254207][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.323712][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.353261][ T976] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 268.381631][ T976] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 268.411670][ T976] usb 1-1: Manufacturer: syz [ 268.738942][ T976] usb 1-1: config 0 descriptor?? [ 269.293932][ T8304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.312993][ T8304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.355091][ T976] cougar 0003:060B:700A.000A: unknown main item tag 0x0 [ 270.427414][ T976] cougar 0003:060B:700A.000A: unknown main item tag 0x0 [ 270.466567][ T976] cougar 0003:060B:700A.000A: unknown main item tag 0x0 [ 270.883664][ T976] cougar 0003:060B:700A.000A: unknown main item tag 0x0 [ 270.890692][ T976] cougar 0003:060B:700A.000A: unknown main item tag 0x0 [ 271.007224][ T976] cougar 0003:060B:700A.000A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 271.158053][ T976] usb 1-1: USB disconnect, device number 11 [ 271.618694][ T8338] fido_id[8338]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 271.942465][ T8350] support for the xor transformation has been removed. [ 272.707868][ T30] audit: type=1326 audit(1762245384.385:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8352 comm="syz.2.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae758f6c9 code=0x7ffc0000 [ 273.066510][ T8358] vxfs: WRONG superblock magic 00000000 at 1 [ 273.074344][ T8358] vxfs: WRONG superblock magic 00000000 at 8 [ 273.080365][ T8358] vxfs: can't find superblock. [ 273.238928][ T30] audit: type=1326 audit(1762245384.385:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8352 comm="syz.2.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae758f6c9 code=0x7ffc0000 [ 273.262639][ T30] audit: type=1326 audit(1762245384.385:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8352 comm="syz.2.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4ae758f6c9 code=0x7ffc0000 [ 273.266605][ T976] libceph: connect (1)[c::]:6789 error -101 [ 273.314672][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 273.321015][ T30] audit: type=1326 audit(1762245384.385:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8352 comm="syz.2.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae758f6c9 code=0x7ffc0000 [ 273.344222][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.366773][ T30] audit: type=1326 audit(1762245384.385:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8352 comm="syz.2.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae758f6c9 code=0x7ffc0000 [ 273.391307][ T30] audit: type=1326 audit(1762245384.385:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8352 comm="syz.2.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ae758f6c9 code=0x7ffc0000 [ 273.415518][ T30] audit: type=1326 audit(1762245384.385:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8352 comm="syz.2.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae758f6c9 code=0x7ffc0000 [ 273.439534][ T30] audit: type=1326 audit(1762245384.385:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8352 comm="syz.2.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae758f6c9 code=0x7ffc0000 [ 273.462886][ T30] audit: type=1326 audit(1762245384.385:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8352 comm="syz.2.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4ae758f6c9 code=0x7ffc0000 [ 273.488000][ T30] audit: type=1326 audit(1762245384.385:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8352 comm="syz.2.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae758f6c9 code=0x7ffc0000 [ 273.488545][ T8356] ceph: No mds server is up or the cluster is laggy [ 273.511196][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.563739][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 274.063736][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 274.071141][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 274.081061][ T10] usb 1-1: config 0 has no interface number 0 [ 274.093818][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 274.149314][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 274.158771][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.167637][ T10] usb 1-1: Product: syz [ 274.171850][ T10] usb 1-1: Manufacturer: syz [ 274.176678][ T10] usb 1-1: SerialNumber: syz [ 274.186723][ T10] usb 1-1: config 0 descriptor?? [ 274.267719][ T8380] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 275.162263][ T11] block nbd0: Possible stuck request ffff88802617e000: control (read@0,1024B). Runtime 60 seconds [ 275.173367][ T11] block nbd0: Possible stuck request ffff88802617e1c0: control (read@1024,1024B). Runtime 60 seconds [ 275.184825][ T11] block nbd0: Possible stuck request ffff88802617e380: control (read@2048,1024B). Runtime 60 seconds [ 275.196650][ T11] block nbd0: Possible stuck request ffff88802617e540: control (read@3072,1024B). Runtime 60 seconds [ 275.667130][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 275.694191][ T10] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 275.709424][ T10] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 275.717259][ T10] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 275.725079][ T10] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 275.739016][ T10] usb 1-1: USB disconnect, device number 12 [ 275.860353][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 275.891572][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.340373][ T9] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 276.368462][ T9] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 276.384090][ T9] usb 6-1: Manufacturer: syz [ 276.393993][ T8392] netlink: 32 bytes leftover after parsing attributes in process `syz.3.592'. [ 276.481993][ T9] usb 6-1: config 0 descriptor?? [ 276.939328][ T8373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.971880][ T8373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.095733][ T9] cougar 0003:060B:700A.000B: unknown main item tag 0x0 [ 277.234493][ T9] cougar 0003:060B:700A.000B: unknown main item tag 0x0 [ 277.719988][ T9] cougar 0003:060B:700A.000B: unknown main item tag 0x0 [ 277.727086][ T9] cougar 0003:060B:700A.000B: unknown main item tag 0x0 [ 277.734107][ T9] cougar 0003:060B:700A.000B: unknown main item tag 0x0 [ 277.743506][ T9] cougar 0003:060B:700A.000B: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 277.854548][ T9] usb 6-1: USB disconnect, device number 2 [ 278.065432][ T8405] fido_id[8405]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 278.339291][ T8411] siw: device registration error -23 [ 279.130521][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 279.130536][ T30] audit: type=1400 audit(1762245390.455:554): avc: denied { accept } for pid=8413 comm="syz.0.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 279.170860][ T8419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.597'. [ 279.194922][ T8417] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 279.218693][ T8417] bridge_slave_0: left allmulticast mode [ 279.227237][ T8417] bridge_slave_0: left promiscuous mode [ 279.234332][ T8417] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.258086][ T8417] bridge_slave_1: left allmulticast mode [ 279.265832][ T8427] netlink: 'syz.3.598': attribute type 10 has an invalid length. [ 279.543762][ T8417] bridge_slave_1: left promiscuous mode [ 279.554909][ T8417] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.567510][ T8417] bond0: (slave bond_slave_0): Releasing backup interface [ 279.577726][ T8417] bond0: (slave bond_slave_1): Releasing backup interface [ 279.696444][ T8417] team0: Port device team_slave_0 removed [ 279.707166][ T8417] team0: Port device team_slave_1 removed [ 279.721941][ T8417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.733446][ T8417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.778936][ T8417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.810766][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 279.853767][ T8417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.771043][ T8417] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 280.871109][ T8427] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 281.210537][ T8427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.251652][ T8427] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 281.388690][ T8453] netlink: 32 bytes leftover after parsing attributes in process `syz.5.604'. [ 281.965176][ T8460] netlink: 180 bytes leftover after parsing attributes in process `syz.1.607'. [ 282.970736][ T8467] support for the xor transformation has been removed. [ 283.213716][ T976] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 283.275197][ T30] audit: type=1400 audit(1762245395.005:555): avc: denied { map } for pid=8468 comm="syz.2.609" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 283.299624][ T30] audit: type=1400 audit(1762245395.005:556): avc: denied { execute } for pid=8468 comm="syz.2.609" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 283.404491][ T30] audit: type=1400 audit(1762245395.145:557): avc: denied { ioctl } for pid=8472 comm="syz.5.610" path="socket:[18832]" dev="sockfs" ino=18832 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 283.453678][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 283.486143][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.501136][ T30] audit: type=1400 audit(1762245395.145:558): avc: denied { read } for pid=8472 comm="syz.5.610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 283.534337][ T976] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 283.546413][ T976] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 283.574995][ T8480] netlink: 'syz.5.613': attribute type 1 has an invalid length. [ 283.602112][ T30] audit: type=1400 audit(1762245395.145:559): avc: denied { write } for pid=8472 comm="syz.5.610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 283.690053][ T976] usb 4-1: Manufacturer: syz [ 283.723834][ T976] usb 4-1: config 0 descriptor?? [ 284.887257][ T976] usb 4-1: can't set config #0, error -71 [ 285.648748][ T8480] bond1 (unregistering): Released all slaves [ 285.687118][ T976] usb 4-1: USB disconnect, device number 17 [ 285.824690][ T8496] netlink: 32 bytes leftover after parsing attributes in process `syz.0.616'. [ 286.112651][ T30] audit: type=1400 audit(1762245397.835:560): avc: denied { getopt } for pid=8497 comm="syz.3.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 286.163906][ T30] audit: type=1400 audit(1762245397.845:561): avc: denied { ioctl } for pid=8497 comm="syz.3.617" path="socket:[19639]" dev="sockfs" ino=19639 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 286.272025][ T8503] FAULT_INJECTION: forcing a failure. [ 286.272025][ T8503] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 286.354295][ T8506] FAULT_INJECTION: forcing a failure. [ 286.354295][ T8506] name failslab, interval 1, probability 0, space 0, times 0 [ 286.367161][ T8506] CPU: 0 UID: 0 PID: 8506 Comm: syz.3.619 Not tainted syzkaller #0 PREEMPT(full) [ 286.367184][ T8506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.367193][ T8506] Call Trace: [ 286.367199][ T8506] [ 286.367205][ T8506] dump_stack_lvl+0x16c/0x1f0 [ 286.367233][ T8506] should_fail_ex+0x512/0x640 [ 286.367256][ T8506] should_failslab+0xc2/0x120 [ 286.367275][ T8506] __kmalloc_noprof+0xdd/0x880 [ 286.367297][ T8506] ? tcf_idr_create+0x62/0x8c0 [ 286.367316][ T8506] ? tcf_idr_create+0x62/0x8c0 [ 286.367329][ T8506] tcf_idr_create+0x62/0x8c0 [ 286.367343][ T8506] ? tcf_idr_check_alloc+0x101/0x770 [ 286.367365][ T8506] tcf_idr_create_from_flags+0x4f/0x70 [ 286.367386][ T8506] tcf_ct_init+0x1533/0x4540 [ 286.367412][ T8506] ? kasan_save_stack+0x42/0x60 [ 286.367437][ T8506] ? kasan_save_stack+0x33/0x60 [ 286.367451][ T8506] ? kasan_save_track+0x14/0x30 [ 286.367467][ T8506] ? __kasan_kmalloc+0xaa/0xb0 [ 286.367480][ T8506] ? tcf_action_init_1+0x278/0x6c0 [ 286.367497][ T8506] ? tcf_action_init+0x432/0xa50 [ 286.367519][ T8506] ? __pfx_tcf_ct_init+0x10/0x10 [ 286.367567][ T8506] ? tcf_action_init_1+0x2d2/0x6c0 [ 286.367592][ T8506] ? tcf_action_init_1+0x460/0x6c0 [ 286.367607][ T8506] tcf_action_init_1+0x460/0x6c0 [ 286.367629][ T8506] ? __pfx_tcf_action_init_1+0x10/0x10 [ 286.367663][ T8506] ? __nla_parse+0x40/0x60 [ 286.367689][ T8506] tcf_action_init+0x432/0xa50 [ 286.367718][ T8506] ? __pfx_tcf_action_init+0x10/0x10 [ 286.367757][ T8506] ? __resched_curr+0xfd/0x3b0 [ 286.367777][ T8506] ? find_held_lock+0x2b/0x80 [ 286.367826][ T8506] ? __pfx___schedule+0x10/0x10 [ 286.367850][ T8506] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.367880][ T8506] tcf_action_add+0xee/0x5c0 [ 286.367903][ T8506] ? __pfx_tcf_action_add+0x10/0x10 [ 286.367923][ T8506] ? irqentry_exit+0x3b/0x90 [ 286.367984][ T8506] ? __nla_parse+0x40/0x60 [ 286.368012][ T8506] tc_ctl_action+0x35b/0x470 [ 286.368032][ T8506] ? __pfx_tc_ctl_action+0x10/0x10 [ 286.368061][ T8506] ? __pfx_tc_ctl_action+0x10/0x10 [ 286.368081][ T8506] rtnetlink_rcv_msg+0x3c9/0xe90 [ 286.368109][ T8506] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.368133][ T8506] ? __lock_acquire+0xb8a/0x1c90 [ 286.368163][ T8506] ? rcu_is_watching+0x12/0xc0 [ 286.368185][ T8506] ? irqentry_exit+0x3b/0x90 [ 286.368210][ T8506] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.368238][ T8506] netlink_rcv_skb+0x158/0x420 [ 286.368265][ T8506] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.368291][ T8506] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.368333][ T8506] netlink_unicast+0x5aa/0x870 [ 286.368362][ T8506] ? __pfx_netlink_unicast+0x10/0x10 [ 286.368386][ T8506] ? netlink_autobind.isra.0+0xa8/0x370 [ 286.368425][ T8506] netlink_sendmsg+0x8c8/0xdd0 [ 286.368454][ T8506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.368489][ T8506] ____sys_sendmsg+0xa98/0xc70 [ 286.368508][ T8506] ? copy_msghdr_from_user+0x10a/0x160 [ 286.368530][ T8506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.368556][ T8506] ___sys_sendmsg+0x134/0x1d0 [ 286.368574][ T8506] ? find_held_lock+0x2b/0x80 [ 286.368593][ T8506] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.368611][ T8506] ? __lock_acquire+0x622/0x1c90 [ 286.368657][ T8506] ? lockdep_hardirqs_on+0x70/0x110 [ 286.368689][ T8506] __sys_sendmsg+0x16d/0x220 [ 286.368713][ T8506] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.368734][ T8506] ? rcu_is_watching+0x12/0xc0 [ 286.368766][ T8506] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 286.368795][ T8506] do_syscall_64+0xcd/0xfa0 [ 286.368824][ T8506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.368842][ T8506] RIP: 0033:0x7f670c18f6c9 [ 286.368857][ T8506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.368872][ T8506] RSP: 002b:00007f670a3cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.368888][ T8506] RAX: ffffffffffffffda RBX: 00007f670c3e6090 RCX: 00007f670c18f6c9 [ 286.368906][ T8506] RDX: 0000000010000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 286.368916][ T8506] RBP: 00007f670a3cd090 R08: 0000000000000000 R09: 0000000000000000 [ 286.368925][ T8506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.368935][ T8506] R13: 00007f670c3e6128 R14: 00007f670c3e6090 R15: 00007ffddd2f65d8 [ 286.368961][ T8506] [ 286.790200][ T8503] CPU: 0 UID: 0 PID: 8503 Comm: syz.1.620 Not tainted syzkaller #0 PREEMPT(full) [ 286.790225][ T8503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.790234][ T8503] Call Trace: [ 286.790239][ T8503] [ 286.790245][ T8503] dump_stack_lvl+0x16c/0x1f0 [ 286.790268][ T8503] should_fail_ex+0x512/0x640 [ 286.790284][ T8503] should_fail_alloc_page+0xe7/0x130 [ 286.790298][ T8503] prepare_alloc_pages+0x3c2/0x610 [ 286.790313][ T8503] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 286.790333][ T8503] ? __lock_acquire+0x622/0x1c90 [ 286.790353][ T8503] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 286.790379][ T8503] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 286.790394][ T8503] ? policy_nodemask+0xea/0x4e0 [ 286.790408][ T8503] alloc_pages_mpol+0x1fb/0x550 [ 286.790421][ T8503] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 286.790433][ T8503] ? __mutex_lock+0x1c5/0x1060 [ 286.790447][ T8503] ___kmalloc_large_node+0xed/0x160 [ 286.790472][ T8503] __kmalloc_large_node_noprof+0x1c/0x70 [ 286.790494][ T8503] __kmalloc_noprof.cold+0xc/0x62 [ 286.790518][ T8503] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 286.790539][ T8503] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 286.790551][ T8503] vb2_core_allocated_buffers_storage+0x184/0x220 [ 286.790564][ T8503] vb2_core_reqbufs+0x398/0xfe0 [ 286.790579][ T8503] ? __mutex_trylock_common+0xe9/0x250 [ 286.790589][ T8503] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 286.790601][ T8503] ? __pfx___mutex_trylock_common+0x10/0x10 [ 286.790612][ T8503] ? __pfx___might_resched+0x10/0x10 [ 286.790627][ T8503] ? trace_contention_end+0xdd/0x130 [ 286.790637][ T8503] ? __mutex_lock+0x1c5/0x1060 [ 286.790645][ T8503] ? avc_has_extended_perms+0x47c/0x1090 [ 286.790663][ T8503] vb2_ioctl_reqbufs+0x291/0x450 [ 286.790675][ T8503] ? __pfx_vb2_ioctl_reqbufs+0x10/0x10 [ 286.790684][ T8503] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 286.790699][ T8503] ? kasan_quarantine_put+0x10a/0x240 [ 286.790715][ T8503] vidioc_reqbufs+0x86/0x100 [ 286.790732][ T8503] v4l_reqbufs+0x142/0x1d0 [ 286.790748][ T8503] __video_do_ioctl+0xb77/0xf00 [ 286.790766][ T8503] ? __might_fault+0xe3/0x190 [ 286.790782][ T8503] ? __pfx___video_do_ioctl+0x10/0x10 [ 286.790803][ T8503] video_usercopy+0x4d0/0x1720 [ 286.790820][ T8503] ? __pfx___video_do_ioctl+0x10/0x10 [ 286.790835][ T8503] ? selinux_kernel_read_file+0x120/0x130 [ 286.790850][ T8503] ? __pfx_video_usercopy+0x10/0x10 [ 286.790876][ T8503] v4l2_ioctl+0x1bd/0x250 [ 286.790890][ T8503] ? __pfx_v4l2_ioctl+0x10/0x10 [ 286.790906][ T8503] __x64_sys_ioctl+0x18e/0x210 [ 286.790923][ T8503] do_syscall_64+0xcd/0xfa0 [ 286.790940][ T8503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.790950][ T8503] RIP: 0033:0x7f1444d8f6c9 [ 286.790959][ T8503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.790969][ T8503] RSP: 002b:00007f1445b8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.790979][ T8503] RAX: ffffffffffffffda RBX: 00007f1444fe5fa0 RCX: 00007f1444d8f6c9 [ 286.790986][ T8503] RDX: 0000200000000240 RSI: 00000000c0145608 RDI: 0000000000000003 [ 286.790992][ T8503] RBP: 00007f1445b8e090 R08: 0000000000000000 R09: 0000000000000000 [ 286.790998][ T8503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.791003][ T8503] R13: 00007f1444fe6038 R14: 00007f1444fe5fa0 R15: 00007ffe50f4c808 [ 286.791018][ T8503] [ 287.761030][ T8522] support for the xor transformation has been removed. [ 288.968270][ T30] audit: type=1400 audit(1762245400.705:562): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 289.743666][ T42] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 289.983921][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 289.995124][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.011439][ T42] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 290.025475][ T42] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 290.059418][ T42] usb 2-1: Manufacturer: syz [ 290.102128][ T42] usb 2-1: config 0 descriptor?? [ 290.125668][ T8554] serio: Serial port pty27 [ 290.161984][ T30] audit: type=1400 audit(1762245401.895:563): avc: denied { setopt } for pid=8556 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 290.403675][ T9] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 290.841306][ T8531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.850807][ T8531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.862455][ T42] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 290.869613][ T42] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 290.876818][ T42] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 290.885282][ T42] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 290.892274][ T42] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 290.900812][ T42] cougar 0003:060B:700A.000C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 290.919855][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 290.930430][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 290.942800][ T9] usb 3-1: config 1 has an invalid interface number: 138 but max is 0 [ 290.952699][ T9] usb 3-1: config 1 has no interface number 0 [ 290.959310][ T9] usb 3-1: config 1 interface 138 has no altsetting 0 [ 290.968590][ T9] usb 3-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 290.980287][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.990526][ T9] usb 3-1: Product: syz [ 290.994988][ T9] usb 3-1: Manufacturer: syz [ 291.000168][ T9] usb 3-1: SerialNumber: syz [ 291.083041][ T42] usb 2-1: USB disconnect, device number 22 [ 291.179213][ T8570] mkiss: ax0: crc mode is auto. [ 291.348125][ T30] audit: type=1400 audit(1762245403.075:564): avc: denied { bind } for pid=8566 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 291.431734][ T30] audit: type=1400 audit(1762245403.105:565): avc: denied { listen } for pid=8566 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 291.557490][ T30] audit: type=1400 audit(1762245403.155:566): avc: denied { write } for pid=8566 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 291.583755][ T30] audit: type=1400 audit(1762245403.315:567): avc: denied { search } for pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.607279][ T30] audit: type=1400 audit(1762245403.315:568): avc: denied { search } for pid=5479 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.630751][ T30] audit: type=1400 audit(1762245403.315:569): avc: denied { search } for pid=5479 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.653047][ T30] audit: type=1400 audit(1762245403.315:570): avc: denied { read } for pid=5479 comm="dhcpcd" name="n100" dev="tmpfs" ino=3896 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 291.676223][ T30] audit: type=1400 audit(1762245403.315:571): avc: denied { open } for pid=5479 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3896 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 292.143918][ T30] audit: type=1400 audit(1762245403.315:572): avc: denied { getattr } for pid=5479 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3896 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 292.175245][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 292.249840][ T9] usb 3-1: USB disconnect, device number 15 [ 293.761341][ T30] audit: type=1400 audit(1762245405.495:573): avc: denied { setopt } for pid=8596 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 297.500796][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 297.500807][ T30] audit: type=1400 audit(1762245408.855:575): avc: denied { ioctl } for pid=8618 comm="syz.1.651" path="socket:[19164]" dev="sockfs" ino=19164 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 297.574085][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.653'. [ 297.952031][ T8639] blktrace: Concurrent blktraces are not allowed on sg0 [ 298.573073][ T8647] siw: device registration error -23 [ 299.304281][ T8663] netlink: 32 bytes leftover after parsing attributes in process `syz.3.661'. [ 299.498459][ T30] audit: type=1400 audit(1762245411.235:576): avc: denied { remount } for pid=8658 comm="syz.5.660" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 299.666419][ T8664] netlink: 24 bytes leftover after parsing attributes in process `syz.5.660'. [ 299.692656][ T30] audit: type=1400 audit(1762245411.425:577): avc: denied { module_load } for pid=8658 comm="syz.5.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 299.803638][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 299.963616][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 299.979741][ T9] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 299.989122][ T9] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 300.000477][ T9] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 300.009790][ T9] usb 2-1: config 250 has no interface number 0 [ 300.017695][ T9] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 300.029726][ T9] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 300.044178][ T9] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 300.055200][ T9] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 300.065634][ T9] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 300.079249][ T9] usb 2-1: config 250 interface 228 has no altsetting 0 [ 300.092438][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 300.104189][ T9] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 300.112433][ T9] usb 2-1: Product: syz [ 300.117793][ T9] usb 2-1: SerialNumber: syz [ 300.140782][ T9] hub 2-1:250.228: bad descriptor, ignoring hub [ 300.147296][ T9] hub 2-1:250.228: probe with driver hub failed with error -5 [ 300.349429][ T9] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 23 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 300.551532][ T8679] netlink: 60 bytes leftover after parsing attributes in process `syz.5.664'. [ 300.853105][ T8683] blktrace: Concurrent blktraces are not allowed on sg0 [ 300.956668][ T8686] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (dt2814) [ 300.966696][ T9] usb 2-1: reset high-speed USB device number 23 using dummy_hcd [ 301.535189][ T30] audit: type=1400 audit(1762245413.275:578): avc: denied { ioctl } for pid=8687 comm="syz.2.668" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 301.559530][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.613474][ T8666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.626627][ T8666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.653826][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 301.749643][ T5929] usb 2-1: USB disconnect, device number 23 [ 301.781182][ T5929] usblp0: removed [ 301.864733][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 302.120282][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.130578][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.158711][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.188028][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.199816][ T9] usb 6-1: Product: ʕ蘎୙䕹륋䮐春斤㾓꼒疑搘轒匁躶⍙쩨಼緵羅釂ᚓ캅겝䍀㺁馰氳鞋讒ᮈ﷈ጄ攴ॆ鍟਋侓ჹ呂끍赬禝悓̹陲ගⷯ鱄啢Ꮍꮍ鼷ૢ坐⌑캾ꐍ㾌Ʉϒ디㟌롾햀쳩⾀⥐ꥪ‭捊﬘흯쨿ጊ檌ወ [ 302.243287][ T9] usb 6-1: Manufacturer: ䷦苲붇Ꝉၷ䃷禆즅鷪끓悸ؽ탞㣒饕萲蓮㈮淤悹睓衒靫ᅔ𤋮㭭첨ꎈ捍浡 [ 302.285507][ T9] usb 6-1: SerialNumber: Ќ [ 302.429654][ T8705] netlink: 32 bytes leftover after parsing attributes in process `syz.2.672'. [ 304.202005][ T9] usb 6-1: 0:2 : does not exist [ 304.237915][ T9] usb 6-1: USB disconnect, device number 3 [ 304.970830][ T8729] blktrace: Concurrent blktraces are not allowed on sg0 [ 304.972806][ T8727] input: syz0 as /devices/virtual/input/input11 [ 305.122301][ T8733] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 305.328920][ T11] block nbd0: Possible stuck request ffff88802617e000: control (read@0,1024B). Runtime 90 seconds [ 305.374728][ T11] block nbd0: Possible stuck request ffff88802617e1c0: control (read@1024,1024B). Runtime 90 seconds [ 305.438706][ T11] block nbd0: Possible stuck request ffff88802617e380: control (read@2048,1024B). Runtime 90 seconds [ 305.649141][ T8737] 8021q: adding VLAN 0 to HW filter on device bond2 [ 305.659492][ T8737] bond1: (slave bond2): Enslaving as an active interface with an up link [ 305.683773][ T11] block nbd0: Possible stuck request ffff88802617e540: control (read@3072,1024B). Runtime 90 seconds [ 305.891201][ T8746] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 307.302594][ T8750] random: crng reseeded on system resumption [ 307.688547][ T30] audit: type=1400 audit(1762245419.425:579): avc: denied { relabelfrom } for pid=8751 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 307.823746][ T30] audit: type=1400 audit(1762245419.425:580): avc: denied { relabelto } for pid=8751 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 308.280630][ T30] audit: type=1400 audit(1762245419.655:581): avc: denied { bind } for pid=8751 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 308.283626][ T5929] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 308.603652][ T5929] usb 6-1: Using ep0 maxpacket: 8 [ 308.620995][ T5929] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 308.629860][ T5929] usb 6-1: config 179 has no interface number 0 [ 308.652197][ T5929] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 308.674770][ T5929] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 308.686335][ T5929] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 308.696669][ T5929] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 308.712104][ T30] audit: type=1400 audit(1762245420.435:582): avc: denied { setattr } for pid=8763 comm="syz.2.687" name="seq" dev="devtmpfs" ino=1285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 308.735312][ T5929] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 308.744471][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.760720][ T8754] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 308.793661][ T5890] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 308.966283][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.973653][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 308.980613][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.983226][ T5890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.989273][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 309.000606][ T5890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.014047][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 309.018668][ T5890] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 309.022022][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 309.040981][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.064272][ T5890] usb 2-1: Product: ʕ蘎୙䕹륋䮐春斤㾓꼒疑搘轒匁躶⍙쩨಼緵羅釂ᚓ캅겝䍀㺁馰氳鞋讒ᮈ﷈ጄ攴ॆ鍟਋侓ჹ呂끍赬禝悓̹陲ගⷯ鱄啢Ꮍꮍ鼷ૢ坐⌑캾ꐍ㾌Ʉϒ디㟌롾햀쳩⾀⥐ꥪ‭捊﬘흯쨿ጊ檌ወ [ 309.123641][ T976] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 310.346209][ T5890] usb 2-1: Manufacturer: ䷦苲붇Ꝉၷ䃷禆즅鷪끓悸ؽ탞㣒饕萲蓮㈮淤悹睓衒靫ᅔ𤋮㭭첨ꎈ捍浡 [ 310.373664][ T5890] usb 2-1: SerialNumber: Ќ [ 310.452038][ T5874] usb 6-1: USB disconnect, device number 4 [ 310.473644][ T976] usb 3-1: device descriptor read/64, error -71 [ 310.492681][ T30] audit: type=1400 audit(1762245422.225:583): avc: denied { override_creds } for pid=8775 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 310.723959][ T976] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 310.961075][ T5890] usb 2-1: 0:2 : does not exist [ 310.969044][ T30] audit: type=1400 audit(1762245422.705:584): avc: denied { bind } for pid=8775 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 311.001360][ T30] audit: type=1400 audit(1762245422.725:585): avc: denied { listen } for pid=8775 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 311.022886][ T5890] usb 2-1: USB disconnect, device number 24 [ 311.034456][ T30] audit: type=1400 audit(1762245422.735:586): avc: denied { read } for pid=8775 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 311.039953][ T8771] chnl_net:caif_netlink_parms(): no params data found [ 311.071613][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.087692][ T5828] Bluetooth: hci6: command tx timeout [ 311.094236][ T976] usb 3-1: device descriptor read/64, error -71 [ 311.103154][ T8781] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (dt2814) [ 311.132955][ T30] audit: type=1400 audit(1762245422.865:587): avc: denied { shutdown } for pid=8775 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 311.184888][ T8771] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.192037][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.199587][ T8771] bridge_slave_0: entered allmulticast mode [ 311.215879][ T976] usb usb3-port1: attempt power cycle [ 311.222957][ T8771] bridge_slave_0: entered promiscuous mode [ 311.237777][ T8771] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.248417][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.255853][ T8771] bridge_slave_1: entered allmulticast mode [ 311.266467][ T8771] bridge_slave_1: entered promiscuous mode [ 311.302450][ T8771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.316390][ T8771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.560089][ T8790] siw: device registration error -23 [ 311.671035][ T8771] team0: Port device team_slave_0 added [ 311.713754][ T976] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 311.819438][ T976] usb 3-1: device descriptor read/8, error -71 [ 311.819620][ T8771] team0: Port device team_slave_1 added [ 311.955003][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.963461][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.994693][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.695'. [ 312.003603][ T8798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.695'. [ 312.053755][ T8771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.065883][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.072826][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.100837][ T8771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.173667][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 312.305149][ T8771] hsr_slave_0: entered promiscuous mode [ 312.316635][ T8771] hsr_slave_1: entered promiscuous mode [ 312.323697][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 312.343627][ T8771] debugfs: 'hsr0' already exists in 'hsr' [ 312.353871][ T8771] Cannot create hsr debugfs directory [ 312.359919][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 312.416608][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 312.524587][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 312.537429][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.567439][ T9] usb 2-1: Product: syz [ 312.577547][ T9] usb 2-1: Manufacturer: syz [ 312.587664][ T9] usb 2-1: SerialNumber: syz [ 312.597928][ T8802] FAULT_INJECTION: forcing a failure. [ 312.597928][ T8802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.613073][ T8802] CPU: 0 UID: 0 PID: 8802 Comm: syz.5.696 Not tainted syzkaller #0 PREEMPT(full) [ 312.613094][ T8802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 312.613103][ T8802] Call Trace: [ 312.613109][ T8802] [ 312.613116][ T8802] dump_stack_lvl+0x16c/0x1f0 [ 312.613144][ T8802] should_fail_ex+0x512/0x640 [ 312.613165][ T8802] _copy_from_iter+0x29f/0x1720 [ 312.613188][ T8802] ? rcu_is_watching+0x12/0xc0 [ 312.613208][ T8802] ? irqentry_exit+0x3b/0x90 [ 312.613233][ T8802] ? lockdep_hardirqs_on+0x7c/0x110 [ 312.613256][ T8802] ? __pfx__copy_from_iter+0x10/0x10 [ 312.613275][ T8802] ? preempt_schedule_common+0x44/0xc0 [ 312.613298][ T8802] ? preempt_schedule_thunk+0x16/0x30 [ 312.613328][ T8802] write_pool_user+0xe8/0x2f0 [ 312.613345][ T8802] ? __pfx_write_pool_user+0x10/0x10 [ 312.613364][ T8802] ? import_ubuf+0x1b6/0x220 [ 312.613381][ T8802] random_ioctl+0x2ce/0x4a0 [ 312.613394][ T8802] ? __pfx_random_ioctl+0x10/0x10 [ 312.613410][ T8802] ? selinux_file_ioctl+0x180/0x270 [ 312.613426][ T8802] ? selinux_file_ioctl+0xb4/0x270 [ 312.613445][ T8802] ? __pfx_random_ioctl+0x10/0x10 [ 312.613460][ T8802] __x64_sys_ioctl+0x18e/0x210 [ 312.613485][ T8802] do_syscall_64+0xcd/0xfa0 [ 312.613511][ T8802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.613527][ T8802] RIP: 0033:0x7f6a5bb8f6c9 [ 312.613540][ T8802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.613559][ T8802] RSP: 002b:00007f6a59dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.613574][ T8802] RAX: ffffffffffffffda RBX: 00007f6a5bde6090 RCX: 00007f6a5bb8f6c9 [ 312.613584][ T8802] RDX: 000020000000fec0 RSI: 0000000040085203 RDI: 0000000000000005 [ 312.613594][ T8802] RBP: 00007f6a59dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 312.613602][ T8802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 312.613610][ T8802] R13: 00007f6a5bde6128 R14: 00007f6a5bde6090 R15: 00007ffcd9839b58 [ 312.613633][ T8802] [ 312.991560][ T9] usb 2-1: config 0 descriptor?? [ 313.017979][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 313.029902][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 313.130663][ T30] audit: type=1400 audit(1762245424.865:588): avc: denied { remount } for pid=8803 comm="syz.2.697" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 313.164050][ T5828] Bluetooth: hci6: command tx timeout [ 313.382837][ T8771] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 313.397358][ T8811] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 313.414062][ T8811] FAULT_INJECTION: forcing a failure. [ 313.414062][ T8811] name failslab, interval 1, probability 0, space 0, times 0 [ 313.426800][ T8811] CPU: 0 UID: 0 PID: 8811 Comm: syz.3.699 Not tainted syzkaller #0 PREEMPT(full) [ 313.426823][ T8811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 313.426834][ T8811] Call Trace: [ 313.426840][ T8811] [ 313.426847][ T8811] dump_stack_lvl+0x16c/0x1f0 [ 313.426878][ T8811] should_fail_ex+0x512/0x640 [ 313.426899][ T8811] ? fs_reclaim_acquire+0xae/0x150 [ 313.426925][ T8811] should_failslab+0xc2/0x120 [ 313.426947][ T8811] __kmalloc_noprof+0xdd/0x880 [ 313.426972][ T8811] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 313.426998][ T8811] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 313.427017][ T8811] tomoyo_realpath_from_path+0xc2/0x6e0 [ 313.427040][ T8811] ? tomoyo_profile+0x47/0x60 [ 313.427065][ T8811] tomoyo_path_number_perm+0x245/0x580 [ 313.427092][ T8811] ? tomoyo_path_number_perm+0x237/0x580 [ 313.427122][ T8811] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 313.427151][ T8811] ? find_held_lock+0x2b/0x80 [ 313.427196][ T8811] ? find_held_lock+0x2b/0x80 [ 313.427218][ T8811] ? hook_file_ioctl_common+0x145/0x410 [ 313.427247][ T8811] ? __fget_files+0x20e/0x3c0 [ 313.427270][ T8811] security_file_ioctl+0x9b/0x240 [ 313.427292][ T8811] __x64_sys_ioctl+0xb7/0x210 [ 313.427319][ T8811] do_syscall_64+0xcd/0xfa0 [ 313.427347][ T8811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.427365][ T8811] RIP: 0033:0x7f670c18f6c9 [ 313.427380][ T8811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.427396][ T8811] RSP: 002b:00007f670a3ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.427420][ T8811] RAX: ffffffffffffffda RBX: 00007f670c3e6180 RCX: 00007f670c18f6c9 [ 313.427431][ T8811] RDX: 0000000000000003 RSI: 0000000000004611 RDI: 000000000000000a [ 313.427441][ T8811] RBP: 00007f670a3ac090 R08: 0000000000000000 R09: 0000000000000000 [ 313.427452][ T8811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.427462][ T8811] R13: 00007f670c3e6218 R14: 00007f670c3e6180 R15: 00007ffddd2f65d8 [ 313.427488][ T8811] [ 313.427517][ T8811] ERROR: Out of memory at tomoyo_realpath_from_path. [ 313.606141][ T30] audit: type=1400 audit(1762245425.145:589): avc: denied { read write } for pid=8808 comm="syz.3.699" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 313.606195][ T30] audit: type=1400 audit(1762245425.145:590): avc: denied { open } for pid=8808 comm="syz.3.699" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 313.704963][ T30] audit: type=1400 audit(1762245425.435:591): avc: denied { ioctl } for pid=8808 comm="syz.3.699" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 313.749761][ T8771] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 313.774247][ T8771] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 313.801886][ T8771] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 313.830575][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (180) [ 313.996379][ T8771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.078830][ T8822] binder: 8820:8822 ioctl c0306201 200000000040 returned -22 [ 314.344105][ T9] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 314.346298][ T30] audit: type=1400 audit(1762245426.045:592): avc: denied { write } for pid=8795 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 314.370368][ T8771] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.397234][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.404413][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.460696][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.467847][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.476752][ T30] audit: type=1400 audit(1762245426.055:593): avc: denied { getopt } for pid=8795 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 315.095707][ T979] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 315.282702][ T5828] Bluetooth: hci6: command tx timeout [ 315.443666][ T30] audit: type=1400 audit(1762245427.005:594): avc: denied { connect } for pid=8828 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 315.627305][ T30] audit: type=1400 audit(1762245427.005:595): avc: denied { write } for pid=8828 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 315.686698][ T9] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 315.703775][ T9] em28xx 2-1:0.0: No AC97 audio processor [ 315.711819][ T979] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 315.734910][ T979] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 315.768771][ T8771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.776475][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 315.803666][ T979] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.923477][ T979] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 315.932711][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.945973][ T979] usb 3-1: Product: syz [ 315.950144][ T979] usb 3-1: Manufacturer: syz [ 315.954858][ T979] usb 3-1: SerialNumber: syz [ 315.974959][ T979] usb 3-1: config 0 descriptor?? [ 316.023655][ T5890] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 316.106980][ T976] usb 2-1: USB disconnect, device number 25 [ 316.136462][ T976] em28xx 2-1:0.0: Disconnecting em28xx [ 316.203886][ T5890] usb 6-1: device descriptor read/64, error -71 [ 316.215404][ T976] em28xx 2-1:0.0: Freeing device [ 316.306027][ T8851] 9pnet_fd: Insufficient options for proto=fd [ 316.466108][ T5890] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 316.716101][ T5890] usb 6-1: device descriptor read/64, error -71 [ 316.740530][ T8852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53536 sclass=netlink_route_socket pid=8852 comm=syz.1.707 [ 316.763390][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.772060][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.931310][ T5890] usb usb6-port1: attempt power cycle [ 317.276371][ T5890] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 317.307390][ T5874] usb 3-1: USB disconnect, device number 20 [ 317.313947][ T5828] Bluetooth: hci6: command tx timeout [ 317.338788][ T5890] usb 6-1: device descriptor read/8, error -71 [ 317.498798][ T8864] support for the xor transformation has been removed. [ 317.593834][ T5890] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 317.624150][ T5890] usb 6-1: device descriptor read/8, error -71 [ 317.693981][ T8771] veth0_vlan: entered promiscuous mode [ 317.694136][ T8866] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 317.705586][ T8771] veth1_vlan: entered promiscuous mode [ 317.749516][ T8771] veth0_macvtap: entered promiscuous mode [ 317.754014][ T5890] usb usb6-port1: unable to enumerate USB device [ 317.763307][ T8771] veth1_macvtap: entered promiscuous mode [ 317.800392][ T8771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.829785][ T8771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.855875][ T1151] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.878842][ T1151] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.904023][ T1151] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.929549][ T1151] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.129625][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.161407][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.208263][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.208284][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.334202][ T30] audit: type=1400 audit(1762245430.065:596): avc: denied { setopt } for pid=8867 comm="syz.3.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 318.334249][ T30] audit: type=1400 audit(1762245430.065:597): avc: denied { connect } for pid=8867 comm="syz.3.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 319.248339][ T30] audit: type=1400 audit(1762245430.985:598): avc: denied { create } for pid=8876 comm="syz.5.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 319.275508][ T30] audit: type=1400 audit(1762245430.985:599): avc: denied { getopt } for pid=8876 comm="syz.5.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 321.245554][ T30] audit: type=1400 audit(1762245432.985:600): avc: denied { read } for pid=8888 comm="syz.6.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 321.582633][ T5890] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 322.014198][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 322.028070][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.046372][ T5890] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 322.103800][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.118949][ T5890] usb 6-1: config 0 descriptor?? [ 322.225261][ T8906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.266824][ T30] audit: type=1400 audit(1762245433.995:601): avc: denied { accept } for pid=8903 comm="syz.6.719" lport=33607 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 322.549673][ T5890] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 323.885876][ T30] audit: type=1400 audit(1762245435.625:602): avc: denied { write } for pid=8920 comm="syz.3.723" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 323.938762][ T30] audit: type=1400 audit(1762245435.625:603): avc: denied { open } for pid=8920 comm="syz.3.723" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 324.001405][ T30] audit: type=1400 audit(1762245435.645:604): avc: denied { read write } for pid=8920 comm="syz.3.723" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 324.026457][ T30] audit: type=1400 audit(1762245435.645:605): avc: denied { open } for pid=8920 comm="syz.3.723" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 324.087047][ T5890] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 324.223627][ T5890] usb 3-1: device descriptor read/64, error -71 [ 324.473699][ T5890] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 324.613466][ T8924] netlink: 'syz.6.724': attribute type 2 has an invalid length. [ 324.641999][ T30] audit: type=1400 audit(1762245436.345:606): avc: denied { setattr } for pid=8923 comm="syz.6.724" name="route" dev="proc" ino=4026534214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 324.665416][ T5890] usb 3-1: device descriptor read/64, error -71 [ 324.757963][ T30] audit: type=1400 audit(1762245436.345:607): avc: denied { getopt } for pid=8923 comm="syz.6.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 324.803936][ T5890] usb usb3-port1: attempt power cycle [ 326.023694][ T30] audit: type=1400 audit(1762245436.855:608): avc: denied { wake_alarm } for pid=8927 comm="syz.6.726" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 326.063822][ T5890] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 326.069530][ T8933] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 327.201124][ T8933] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 327.308524][ T8933] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 327.448887][ T8933] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 327.466043][ T8933] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 327.476471][ T8933] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 327.487872][ T8933] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 327.498136][ T8933] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 327.507716][ T8933] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 327.876941][ T5890] usb 3-1: device descriptor read/8, error -71 [ 328.029063][ T5867] usb 6-1: USB disconnect, device number 9 [ 328.633665][ T5867] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 328.641431][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 329.423666][ T5867] usb 6-1: device descriptor read/64, error -32 [ 329.634766][ T30] audit: type=1400 audit(1762245441.295:609): avc: denied { write } for pid=8941 comm="syz.3.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 329.638794][ T8961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.729'. [ 329.685204][ T5867] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 329.916410][ T5867] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 329.953284][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.972883][ T5867] usb 6-1: Product: syz [ 329.987471][ T5867] usb 6-1: Manufacturer: syz [ 330.002290][ T5867] usb 6-1: SerialNumber: syz [ 330.023538][ T5867] usb 6-1: config 0 descriptor?? [ 330.054570][ T5867] hub 6-1:0.0: bad descriptor, ignoring hub [ 330.062951][ T5867] hub 6-1:0.0: probe with driver hub failed with error -5 [ 330.285921][ T5867] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 330.456549][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 330.468079][ T5867] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 330.477034][ T5867] usb 6-1: media controller created [ 330.489589][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.491840][ T8976] ocfs2: Unknown parameter 'barrierq' [ 332.619836][ T5867] DVB: Unable to find symbol dib7000p_attach() [ 332.639364][ T5867] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 332.783640][ T5867] rc_core: IR keymap rc-dib0700-rc5 not found [ 332.789734][ T5867] Registered IR keymap rc-empty [ 332.823782][ T5867] dvb-usb: could not initialize remote control. [ 332.865371][ T5867] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 333.020409][ T5867] usb 6-1: USB disconnect, device number 11 [ 333.107693][ T5867] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 333.331072][ T8984] Invalid source name [ 333.398870][ T8986] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 333.455538][ T8984] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26 sclass=netlink_audit_socket pid=8984 comm=syz.5.739 [ 333.753792][ T5867] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 333.965379][ T5889] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 334.043679][ T5867] usb 7-1: device descriptor read/64, error -71 [ 334.057358][ T30] audit: type=1400 audit(1762245445.795:610): avc: denied { read } for pid=8993 comm="syz.1.743" path="socket:[21291]" dev="sockfs" ino=21291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 334.138933][ T5889] usb 6-1: config 0 has no interfaces? [ 334.155534][ T5889] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 334.176777][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.217145][ T5889] usb 6-1: Product: syz [ 334.221356][ T5889] usb 6-1: Manufacturer: syz [ 334.234417][ T5889] usb 6-1: SerialNumber: syz [ 334.252891][ T5889] usb 6-1: config 0 descriptor?? [ 334.293791][ T5867] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 334.454773][ T5867] usb 7-1: device descriptor read/64, error -71 [ 334.489467][ T5874] usb 6-1: USB disconnect, device number 12 [ 334.580825][ T5867] usb usb7-port1: attempt power cycle [ 335.072343][ T30] audit: type=1400 audit(1762245446.805:611): avc: denied { create } for pid=9005 comm="syz.2.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 335.303627][ T5867] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 335.326796][ T5867] usb 7-1: device descriptor read/8, error -71 [ 335.633786][ T5867] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 335.670343][ T5867] usb 7-1: device descriptor read/8, error -71 [ 335.784538][ T5867] usb usb7-port1: unable to enumerate USB device [ 335.958304][ T11] block nbd0: Possible stuck request ffff88802617e000: control (read@0,1024B). Runtime 120 seconds [ 335.969157][ T11] block nbd0: Possible stuck request ffff88802617e1c0: control (read@1024,1024B). Runtime 120 seconds [ 335.980334][ T11] block nbd0: Possible stuck request ffff88802617e380: control (read@2048,1024B). Runtime 120 seconds [ 335.992104][ T11] block nbd0: Possible stuck request ffff88802617e540: control (read@3072,1024B). Runtime 120 seconds [ 336.337285][ T9026] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 336.413779][ T5874] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 336.583448][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 336.675164][ T5874] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 336.751102][ T5874] usb 6-1: config 179 has no interface number 0 [ 336.822676][ T5874] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 337.353697][ T979] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 337.908091][ T5874] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 337.919398][ T5874] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 337.938377][ T5874] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 337.951830][ T5874] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 338.063640][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 338.085106][ T979] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.338938][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.373322][ T9024] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 338.437078][ T979] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 338.451826][ T979] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 338.465685][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.486648][ T979] usb 3-1: config 0 descriptor?? [ 338.553613][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 338.563687][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 338.586511][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 338.630095][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.804115][ T9] usb 2-1: config 0 descriptor?? [ 339.060562][ T9035] [U] v3f"S/4:XTzWtlW= [ 339.074208][ T9035] [U] J"e:" [ 339.082295][ T5874] usb 3-1: USB disconnect, device number 25 [ 340.617527][ T5889] usb 6-1: USB disconnect, device number 13 [ 340.646546][ T9] usb 2-1: can't set config #0, error -71 [ 340.718460][ T9] usb 2-1: USB disconnect, device number 26 [ 340.765292][ T9061] Invalid source name [ 340.877306][ T9061] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26 sclass=netlink_audit_socket pid=9061 comm=syz.2.758 [ 340.888162][ T9065] binder: 9062:9065 ioctl c0306201 200000000040 returned -22 [ 341.178879][ T30] audit: type=1400 audit(1762245452.915:612): avc: denied { connect } for pid=9066 comm="syz.6.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 341.212111][ T9067] netlink: 'syz.6.761': attribute type 2 has an invalid length. [ 341.253681][ T5874] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 341.415507][ T5874] usb 3-1: config 0 has no interfaces? [ 341.423303][ T5874] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 341.433918][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.480206][ T5874] usb 3-1: Product: syz [ 341.497231][ T5874] usb 3-1: Manufacturer: syz [ 341.503164][ T5874] usb 3-1: SerialNumber: syz [ 341.534181][ T5874] usb 3-1: config 0 descriptor?? [ 341.649848][ T9074] IPVS: length: 161 != 2966504 [ 341.660879][ T9074] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 341.724151][ T42] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 341.755002][ T10] usb 3-1: USB disconnect, device number 26 [ 341.873703][ T42] usb 2-1: device descriptor read/64, error -71 [ 342.123734][ T42] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 342.273803][ T42] usb 2-1: device descriptor read/64, error -71 [ 342.624257][ T9096] FAULT_INJECTION: forcing a failure. [ 342.624257][ T9096] name failslab, interval 1, probability 0, space 0, times 0 [ 342.638713][ T9096] CPU: 0 UID: 0 PID: 9096 Comm: syz.5.769 Not tainted syzkaller #0 PREEMPT(full) [ 342.638736][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 342.638747][ T9096] Call Trace: [ 342.638752][ T9096] [ 342.638759][ T9096] dump_stack_lvl+0x16c/0x1f0 [ 342.638790][ T9096] should_fail_ex+0x512/0x640 [ 342.638810][ T9096] ? fs_reclaim_acquire+0xae/0x150 [ 342.638833][ T9096] should_failslab+0xc2/0x120 [ 342.638855][ T9096] __kmalloc_noprof+0xdd/0x880 [ 342.638880][ T9096] ? tomoyo_encode2+0x100/0x3e0 [ 342.638905][ T9096] ? tomoyo_encode2+0x100/0x3e0 [ 342.638922][ T9096] tomoyo_encode2+0x100/0x3e0 [ 342.638945][ T9096] tomoyo_encode+0x29/0x50 [ 342.638963][ T9096] tomoyo_realpath_from_path+0x18f/0x6e0 [ 342.638991][ T9096] tomoyo_mount_acl+0x1ae/0x850 [ 342.639008][ T9096] ? bpf_ksym_find+0x127/0x1c0 [ 342.639034][ T9096] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 342.639059][ T9096] ? is_bpf_text_address+0x94/0x1a0 [ 342.639082][ T9096] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 342.639100][ T9096] ? unwind_get_return_address+0x59/0xa0 [ 342.639149][ T9096] ? tomoyo_domain+0xbb/0x150 [ 342.639171][ T9096] ? tomoyo_profile+0x47/0x60 [ 342.639195][ T9096] tomoyo_mount_permission+0x16d/0x420 [ 342.639213][ T9096] ? tomoyo_mount_permission+0x14f/0x420 [ 342.639233][ T9096] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 342.639268][ T9096] security_sb_mount+0x9b/0x260 [ 342.639288][ T9096] path_mount+0x158/0x23a0 [ 342.639313][ T9096] ? __pfx_path_mount+0x10/0x10 [ 342.639335][ T9096] ? kmem_cache_free+0x2d4/0x6c0 [ 342.639350][ T9096] ? putname+0x154/0x1a0 [ 342.639375][ T9096] ? putname+0x154/0x1a0 [ 342.639393][ T9096] ? putname+0x154/0x1a0 [ 342.639416][ T9096] ? __x64_sys_mount+0x293/0x310 [ 342.639440][ T9096] __x64_sys_mount+0x293/0x310 [ 342.639461][ T9096] ? __pfx___x64_sys_mount+0x10/0x10 [ 342.639490][ T9096] do_syscall_64+0xcd/0xfa0 [ 342.639519][ T9096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.639537][ T9096] RIP: 0033:0x7f6a5bb8f6c9 [ 342.639551][ T9096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.639568][ T9096] RSP: 002b:00007f6a59db4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 342.639585][ T9096] RAX: ffffffffffffffda RBX: 00007f6a5bde6180 RCX: 00007f6a5bb8f6c9 [ 342.639596][ T9096] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 00002000000002c0 [ 342.639606][ T9096] RBP: 00007f6a59db4090 R08: 0000000000000000 R09: 0000000000000000 [ 342.639616][ T9096] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000001 [ 342.639626][ T9096] R13: 00007f6a5bde6218 R14: 00007f6a5bde6180 R15: 00007ffcd9839b58 [ 342.639652][ T9096] [ 342.639688][ T9096] ERROR: Out of memory at tomoyo_realpath_from_path. [ 343.283778][ T42] usb usb2-port1: attempt power cycle [ 343.289678][ T30] audit: type=1400 audit(1762245454.325:613): avc: denied { execute } for pid=9087 comm="syz.5.769" dev="hugetlbfs" ino=22569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 343.364043][ T9098] netlink: 80 bytes leftover after parsing attributes in process `syz.6.767'. [ 343.514995][ T30] audit: type=1400 audit(1762245454.345:614): avc: denied { execute_no_trans } for pid=9087 comm="syz.5.769" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=22569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 343.713649][ T42] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 343.758179][ T42] usb 2-1: device descriptor read/8, error -71 [ 344.093702][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 344.134033][ T42] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 344.154270][ T42] usb 2-1: device descriptor read/8, error -71 [ 344.166831][ T9108] netlink: 32 bytes leftover after parsing attributes in process `syz.5.774'. [ 344.646197][ T42] usb usb2-port1: unable to enumerate USB device [ 344.803634][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 344.838211][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 344.857004][ T9] usb 3-1: config 179 has no interface number 0 [ 344.899129][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 345.063847][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 345.137780][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 345.186617][ T30] audit: type=1400 audit(1762245456.895:615): avc: denied { setopt } for pid=9119 comm="syz.3.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 345.602287][ T9124] Invalid source name [ 345.619958][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 345.663092][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 345.678224][ T9124] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26 sclass=netlink_audit_socket pid=9124 comm=syz.1.779 [ 345.696950][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.718242][ T9106] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 345.984132][ T42] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 347.401703][ T9] usb 3-1: USB disconnect, device number 27 [ 347.546076][ T42] usb 2-1: config 0 has no interfaces? [ 347.553291][ T42] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 347.570370][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.680996][ T42] usb 2-1: Product: syz [ 347.766483][ T9146] FAULT_INJECTION: forcing a failure. [ 347.766483][ T9146] name failslab, interval 1, probability 0, space 0, times 0 [ 347.779301][ T9146] CPU: 1 UID: 0 PID: 9146 Comm: syz.5.783 Not tainted syzkaller #0 PREEMPT(full) [ 347.779324][ T9146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 347.779335][ T9146] Call Trace: [ 347.779341][ T9146] [ 347.779347][ T9146] dump_stack_lvl+0x16c/0x1f0 [ 347.779378][ T9146] should_fail_ex+0x512/0x640 [ 347.779398][ T9146] ? __kmalloc_cache_noprof+0x5f/0x780 [ 347.779425][ T9146] should_failslab+0xc2/0x120 [ 347.779444][ T9146] __kmalloc_cache_noprof+0x72/0x780 [ 347.779468][ T9146] ? sctp_association_new+0xbb/0x2a00 [ 347.779491][ T9146] ? sctp_association_new+0xbb/0x2a00 [ 347.779509][ T9146] sctp_association_new+0xbb/0x2a00 [ 347.779534][ T9146] sctp_connect_new_asoc+0x1a8/0x770 [ 347.779557][ T9146] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 347.779580][ T9146] ? bpf_lsm_sctp_bind_connect+0x4/0x10 [ 347.779604][ T9146] sctp_sendmsg+0x1557/0x1e00 [ 347.779632][ T9146] ? __pfx_sctp_sendmsg+0x10/0x10 [ 347.779657][ T9146] ? __pfx_sock_has_perm+0x10/0x10 [ 347.779697][ T9146] ? __pfx_sctp_sendmsg+0x10/0x10 [ 347.779723][ T9146] inet_sendmsg+0x11c/0x140 [ 347.779746][ T9146] __sys_sendto+0x43c/0x520 [ 347.779768][ T9146] ? __pfx___sys_sendto+0x10/0x10 [ 347.779811][ T9146] ? ksys_write+0x1ac/0x250 [ 347.779832][ T9146] __x64_sys_sendto+0xe0/0x1c0 [ 347.779852][ T9146] ? do_syscall_64+0x91/0xfa0 [ 347.779877][ T9146] ? lockdep_hardirqs_on+0x7c/0x110 [ 347.779902][ T9146] do_syscall_64+0xcd/0xfa0 [ 347.779929][ T9146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.779946][ T9146] RIP: 0033:0x7f6a5bb8f6c9 [ 347.779961][ T9146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.779977][ T9146] RSP: 002b:00007f6a59db4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 347.779994][ T9146] RAX: ffffffffffffffda RBX: 00007f6a5bde6180 RCX: 00007f6a5bb8f6c9 [ 347.780005][ T9146] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 347.780016][ T9146] RBP: 00007f6a59db4090 R08: 0000200000000040 R09: 000000000000001c [ 347.780026][ T9146] R10: 000000000000c041 R11: 0000000000000246 R12: 0000000000000001 [ 347.780036][ T9146] R13: 00007f6a5bde6218 R14: 00007f6a5bde6180 R15: 00007ffcd9839b58 [ 347.780062][ T9146] [ 348.177411][ T42] usb 2-1: Manufacturer: syz [ 348.183643][ T42] usb 2-1: SerialNumber: syz [ 348.290540][ T42] usb 2-1: config 0 descriptor?? [ 348.369557][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 348.517520][ T5889] usb 2-1: USB disconnect, device number 31 [ 348.745232][ T30] audit: type=1400 audit(1762245460.455:616): avc: denied { mount } for pid=9154 comm="syz.5.787" name="/" dev="autofs" ino=22816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 348.819929][ T9165] bond3 (unregistering): Released all slaves [ 348.851103][ T9168] : renamed from vlan0 (while UP) [ 348.869602][ T30] audit: type=1400 audit(1762245460.605:617): avc: denied { unmount } for pid=7901 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 349.579098][ T9183] netlink: 'syz.6.792': attribute type 1 has an invalid length. [ 349.597401][ T30] audit: type=1400 audit(1762245461.325:618): avc: denied { read } for pid=9179 comm="syz.2.795" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 350.178604][ T9177] netlink: 44 bytes leftover after parsing attributes in process `syz.1.796'. [ 350.189026][ T9180] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 350.195424][ T9180] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 350.269565][ T9180] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 350.277241][ T9180] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 350.315738][ T9180] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 350.321749][ T9180] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 350.328659][ T9180] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 350.336575][ T9180] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 350.342540][ T9180] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 350.349371][ T9180] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 350.355373][ T9180] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 350.363286][ T9180] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 350.378645][ T9180] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 350.384893][ T9180] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 350.401710][ T9180] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 350.487319][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'. [ 350.723802][ T42] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 351.053722][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 351.095874][ T42] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 351.123892][ T42] usb 4-1: config 0 has no interface number 0 [ 351.152625][ T9200] netlink: 48 bytes leftover after parsing attributes in process `syz.2.802'. [ 351.162551][ T42] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 351.174773][ T5890] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 351.186175][ T42] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 351.512384][ T9200] afs: Unknown parameter 'dyn1844674407370955161500000000000000000009' [ 351.537287][ T42] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 351.562224][ T42] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 351.580324][ T42] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.599680][ T42] usb 4-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 351.619700][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.628670][ T42] usb 4-1: Product: syz [ 351.632927][ T42] usb 4-1: Manufacturer: syz [ 351.640065][ T42] usb 4-1: SerialNumber: syz [ 351.648161][ T42] usb 4-1: config 0 descriptor?? [ 351.683639][ T5890] usb 7-1: Using ep0 maxpacket: 8 [ 351.705133][ T5890] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 351.715087][ T5890] usb 7-1: config 179 has no interface number 0 [ 351.721416][ T5890] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 351.734317][ T5890] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 351.748129][ T5890] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 351.758274][ T5890] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 351.771653][ T5890] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 351.772971][ T9213] bond1 (unregistering): Released all slaves [ 351.780775][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.783637][ T9203] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 351.854020][ T5874] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 351.871142][ T42] iowarrior 4-1:0.186: IOWarrior product=0x1500, serial=42424242 interface=186 now attached to iowarrior0 [ 352.033718][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 352.147719][ T5874] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 352.158358][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.205924][ T5874] usb 3-1: config 0 descriptor?? [ 352.296247][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 352.302304][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 352.353938][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 352.359987][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 352.362837][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 352.366011][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 352.604272][ T5828] Bluetooth: hci6: command 0x0c1a tx timeout [ 353.405078][ T5874] gspca_main: sq930x-2.14.0 probing 041e:403c [ 353.458488][ T979] usb 7-1: USB disconnect, device number 6 [ 353.528788][ T42] usb 4-1: USB disconnect, device number 18 [ 353.619191][ T30] audit: type=1400 audit(1762245465.355:619): avc: denied { sqpoll } for pid=9229 comm="syz.3.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 353.884344][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 354.095822][ T30] audit: type=1400 audit(1762245465.645:620): avc: denied { getopt } for pid=9229 comm="syz.3.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 354.276721][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 354.284198][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 354.294474][ T10] usb 2-1: config 164 has an invalid interface number: 246 but max is 0 [ 354.302904][ T10] usb 2-1: config 164 has no interface number 0 [ 354.315843][ T10] usb 2-1: config 164 interface 246 has no altsetting 0 [ 354.325524][ T10] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice= f.fe [ 354.347757][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.358444][ T10] usb 2-1: Product: syz [ 354.364427][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 354.364831][ T10] usb 2-1: Manufacturer: syz [ 354.372070][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 354.380258][ T10] usb 2-1: SerialNumber: syz [ 354.434021][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 354.440135][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 354.534757][ T30] audit: type=1400 audit(1762245466.265:621): avc: denied { setopt } for pid=9210 comm="syz.2.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 354.629832][ T10] powermate 2-1:164.246: probe with driver powermate failed with error -5 [ 354.673851][ T10] usb 2-1: USB disconnect, device number 32 [ 354.692599][ T5828] Bluetooth: hci6: command 0x0c1a tx timeout [ 354.698993][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 354.728156][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.812'. [ 354.945466][ T5874] gspca_sq930x: ucbus_write failed -110 [ 354.951115][ T5874] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 354.961765][ T9283] bond1 (unregistering): Released all slaves [ 355.664510][ T9] usb 3-1: USB disconnect, device number 28 [ 356.178454][ T9297] netlink: 'syz.5.819': attribute type 8 has an invalid length. [ 356.196428][ T9297] 9pnet_fd: Insufficient options for proto=fd [ 356.698198][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 356.768245][ T5812] Bluetooth: hci6: command 0x0c1a tx timeout [ 357.463822][ T5874] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 357.569538][ T9313] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 358.623699][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 64 [ 358.667625][ T5874] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 359.896706][ T9319] netlink: 32 bytes leftover after parsing attributes in process `syz.2.823'. [ 360.101498][ T5874] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 361.295377][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.421653][ T5874] usb 6-1: config 0 descriptor?? [ 361.433487][ T5874] usb 6-1: can't set config #0, error -71 [ 361.441660][ T5874] usb 6-1: USB disconnect, device number 14 [ 362.513761][ T5890] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 363.258167][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 363.265267][ T5890] usb 3-1: unable to get BOS descriptor or descriptor too short [ 363.277439][ T5890] usb 3-1: config 8 has an invalid interface number: 34 but max is 0 [ 365.098056][ T5890] usb 3-1: config 8 has no interface number 0 [ 365.116605][ T5890] usb 3-1: config 8 interface 34 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 365.128786][ T5890] usb 3-1: config 8 interface 34 has no altsetting 0 [ 365.138057][ T5890] usb 3-1: string descriptor 0 read error: -71 [ 365.153023][ T5890] usb 3-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=e2.0c [ 365.335256][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.899504][ T9365] netlink: 'syz.2.836': attribute type 1 has an invalid length. [ 365.918549][ T5890] usb 3-1: can't set config #8, error -71 [ 365.925582][ T5890] usb 3-1: USB disconnect, device number 29 [ 366.191923][ T11] block nbd0: Possible stuck request ffff88802617e000: control (read@0,1024B). Runtime 150 seconds [ 366.202699][ T11] block nbd0: Possible stuck request ffff88802617e1c0: control (read@1024,1024B). Runtime 150 seconds [ 366.213695][ T11] block nbd0: Possible stuck request ffff88802617e380: control (read@2048,1024B). Runtime 150 seconds [ 366.224665][ T11] block nbd0: Possible stuck request ffff88802617e540: control (read@3072,1024B). Runtime 150 seconds [ 366.447041][ T9364] ALSA: mixer_oss: invalid OSS volume '' [ 366.463352][ T30] audit: type=1400 audit(1762245478.195:622): avc: denied { ioctl } for pid=9363 comm="syz.1.837" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 366.666445][ T9374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=9374 comm=syz.3.838 [ 366.894416][ T30] audit: type=1400 audit(1762245478.195:623): avc: denied { setopt } for pid=9363 comm="syz.1.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 367.965975][ T9396] netlink: 32 bytes leftover after parsing attributes in process `syz.6.844'. [ 368.085092][ T30] audit: type=1400 audit(1762245479.825:624): avc: denied { mount } for pid=9400 comm="syz.6.847" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 368.581544][ T30] audit: type=1400 audit(1762245480.315:625): avc: denied { mounton } for pid=9400 comm="syz.6.847" path="/32/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 369.307097][ T30] audit: type=1400 audit(1762245480.785:626): avc: denied { remount } for pid=9400 comm="syz.6.847" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 369.593707][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 369.693812][ T30] audit: type=1400 audit(1762245481.305:627): avc: denied { unmount } for pid=8771 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 369.924526][ T30] audit: type=1400 audit(1762245481.655:628): avc: denied { ioctl } for pid=9418 comm="syz.6.850" path="socket:[23195]" dev="sockfs" ino=23195 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 369.953973][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 369.961233][ T10] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 369.978833][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.019117][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 370.094041][ T5874] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 370.335674][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 370.418091][ T5874] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 370.436053][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 370.743857][ T5874] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 370.753025][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.773144][ T5874] usb 6-1: Product: syz [ 370.777584][ T5874] usb 6-1: Manufacturer: syz [ 370.782159][ T5874] usb 6-1: SerialNumber: syz [ 370.795278][ T5874] usb 6-1: config 0 descriptor?? [ 370.812612][ T5874] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 370.828887][ T5874] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 371.191729][ T10] gspca_nw80x: reg_w err -71 [ 371.197575][ T10] nw80x 2-1:3.0: probe with driver nw80x failed with error -71 [ 371.215776][ T10] usb 2-1: USB disconnect, device number 33 [ 371.273946][ T979] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 371.389291][ T9437] netlink: 32 bytes leftover after parsing attributes in process `syz.3.857'. [ 371.423674][ T979] usb 3-1: Using ep0 maxpacket: 8 [ 371.433235][ T5874] em28xx 6-1:0.0: chip ID is em2874 [ 371.435823][ T979] usb 3-1: unable to get BOS descriptor or descriptor too short [ 371.451459][ T979] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 371.462377][ T979] usb 3-1: config 1 has no interface number 1 [ 371.468946][ T979] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 371.497986][ T979] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 371.512218][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.521437][ T979] usb 3-1: Product: syz [ 371.527405][ T979] usb 3-1: Manufacturer: syz [ 371.532424][ T979] usb 3-1: SerialNumber: syz [ 371.683451][ T9] usb 6-1: USB disconnect, device number 15 [ 371.707511][ T9443] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 371.708402][ T9] em28xx 6-1:0.0: Disconnecting em28xx [ 371.754336][ T9] em28xx 6-1:0.0: Freeing device [ 371.841880][ T9442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=9442 comm=syz.3.858 [ 371.876654][ T9446] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 371.876654][ T9446] The task syz.2.855 (9446) triggered the difference, watch for misbehavior. [ 372.391795][ T9456] bridge2: entered promiscuous mode [ 373.039319][ T30] audit: type=1400 audit(1762245484.775:629): avc: denied { read } for pid=9453 comm="syz.5.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 373.077593][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 373.234036][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 373.364437][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.385794][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.439511][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 373.441210][ T5874] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 373.457776][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.466525][ T10] usb 4-1: Product: ʕ蘎୙䕹륋䮐春斤㾓꼒疑搘轒匁躶⍙쩨಼緵羅釂ᚓ캅겝䍀㺁馰氳鞋讒ᮈ﷈ጄ攴ॆ鍟਋侓ჹ呂끍赬禝悓̹陲ගⷯ鱄啢Ꮍꮍ鼷ૢ坐⌑캾ꐍ㾌Ʉϒ디㟌롾햀쳩⾀⥐ꥪ‭捊﬘흯쨿ጊ檌ወ [ 373.505205][ T10] usb 4-1: Manufacturer: ䷦苲붇Ꝉၷ䃷禆즅鷪끓悸ؽ탞㣒饕萲蓮㈮淤悹睓衒靫ᅔ𤋮㭭첨ꎈ捍浡 [ 373.526876][ T10] usb 4-1: SerialNumber: Ќ [ 373.613596][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 373.642377][ T5874] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 373.658473][ T5874] usb 2-1: config 179 has no interface number 0 [ 373.684163][ T5874] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 373.715314][ T5874] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 373.737352][ T5874] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 373.757666][ T5874] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 373.791409][ T5874] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 373.802844][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.963691][ T9462] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 374.958431][ T10] usb 4-1: 0:2 : does not exist [ 375.047443][ T979] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 375.095655][ T10] usb 4-1: USB disconnect, device number 19 [ 376.103633][ T979] usb 3-1: 2:1 : sample bitwidth 65 in over sample bytes 0 [ 376.129718][ T5889] usb 2-1: USB disconnect, device number 34 [ 376.153451][ T979] usb 3-1: 2:1 : unsupported sample bitwidth 65 in 0 bytes [ 376.272184][ T979] usb 3-1: USB disconnect, device number 30 [ 376.313028][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.995916][ T9480] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 377.469441][ T30] audit: type=1400 audit(1762245489.175:630): avc: denied { name_bind } for pid=9478 comm="syz.2.868" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 377.926006][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.872'. [ 377.961524][ T9504] netlink: 48 bytes leftover after parsing attributes in process `syz.1.873'. [ 378.090762][ T9504] afs: Unknown parameter 'dyn1844674407370955161500000000000000000009' [ 378.212391][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.229692][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.723694][ T979] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 378.911864][ T9515] siw: device registration error -23 [ 379.014097][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 379.145389][ T979] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.198709][ T979] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 379.262409][ T30] audit: type=1400 audit(1762245490.965:631): avc: denied { name_connect } for pid=9516 comm="syz.6.877" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 379.504774][ T979] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 379.526770][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.534881][ T979] usb 4-1: Product: ʕ蘎୙䕹륋䮐春斤㾓꼒疑搘轒匁躶⍙쩨಼緵羅釂ᚓ캅겝䍀㺁馰氳鞋讒ᮈ﷈ጄ攴ॆ鍟਋侓ჹ呂끍赬禝悓̹陲ගⷯ鱄啢Ꮍꮍ鼷ૢ坐⌑캾ꐍ㾌Ʉϒ디㟌롾햀쳩⾀⥐ꥪ‭捊﬘흯쨿ጊ檌ወ [ 379.563556][ T979] usb 4-1: Manufacturer: ䷦苲붇Ꝉၷ䃷禆즅鷪끓悸ؽ탞㣒饕萲蓮㈮淤悹睓衒靫ᅔ𤋮㭭첨ꎈ捍浡 [ 379.581594][ T979] usb 4-1: SerialNumber: Ќ [ 379.877444][ T30] audit: type=1400 audit(1762245491.605:632): avc: denied { ioctl } for pid=9521 comm="syz.2.878" path="socket:[23512]" dev="sockfs" ino=23512 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 381.007155][ T9531] netlink: 228 bytes leftover after parsing attributes in process `syz.2.880'. [ 381.737420][ T979] usb 4-1: 0:2 : does not exist [ 381.804259][ T979] usb 4-1: USB disconnect, device number 20 [ 381.824675][ T5867] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 381.986506][ T9538] afs: Unknown parameter 'dyn1844674407370955161500000000000000000008' [ 382.169830][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.283689][ T5867] usb 3-1: device descriptor read/64, error -71 [ 382.533599][ T5867] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 382.584152][ T5889] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 382.664885][ T5867] usb 3-1: device descriptor read/64, error -71 [ 382.767134][ T5889] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 382.783927][ T5867] usb usb3-port1: attempt power cycle [ 382.807505][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.828970][ T5889] usb 7-1: Product: syz [ 382.836591][ T5889] usb 7-1: Manufacturer: syz [ 382.849256][ T5889] usb 7-1: SerialNumber: syz [ 382.903683][ T5874] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 383.306255][ T9553] xt_connbytes: Forcing CT accounting to be enabled [ 383.324114][ T5867] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 383.331850][ T5874] usb 2-1: device descriptor read/64, error -71 [ 383.637936][ T9542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.650676][ T9542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.661919][ T5867] usb 3-1: device descriptor read/8, error -71 [ 383.698072][ T9542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.718568][ T9542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.749344][ T9542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.768442][ T9542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.864305][ T5874] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 383.903615][ T5867] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 383.924117][ T5867] usb 3-1: device descriptor read/8, error -71 [ 383.944289][ T9542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.963201][ T9542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.013640][ T5874] usb 2-1: device descriptor read/64, error -71 [ 384.033891][ T5867] usb usb3-port1: unable to enumerate USB device [ 384.099889][ T5889] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 384.163029][ T5889] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 384.177464][ T5889] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 384.200453][ T5889] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 384.213067][ T5889] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 384.234386][ T5889] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 384.263409][ T5889] usb 7-1: USB disconnect, device number 7 [ 384.287859][ T5874] usb usb2-port1: attempt power cycle [ 384.634350][ T5874] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 385.448711][ T30] audit: type=1400 audit(1762245497.185:633): avc: denied { read } for pid=9566 comm="syz.6.893" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 385.474590][ T5874] usb 2-1: device descriptor read/8, error -71 [ 386.415569][ T30] audit: type=1400 audit(1762245497.185:634): avc: denied { open } for pid=9566 comm="syz.6.893" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 386.450512][ T30] audit: type=1400 audit(1762245498.175:635): avc: denied { ioctl } for pid=9566 comm="syz.6.893" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 386.588190][ T30] audit: type=1400 audit(1762245498.325:636): avc: denied { write } for pid=9566 comm="syz.6.893" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 388.003734][ T31] INFO: task syz.4.491:7786 blocked for more than 143 seconds. [ 389.961318][ T31] Not tainted syzkaller #0 [ 389.967764][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.976873][ T31] task:syz.4.491 state:D [ 389.976901][ T5184] udevd[5184]: worker [5817] /devices/virtual/block/nbd0 is taking a long time [ 389.976913][ T31] stack:25288 pid:7786 tgid:7771 ppid:5808 task_flags:0x400140 flags:0x00080003 [ 390.000191][ T31] Call Trace: [ 390.003458][ T31] [ 390.973749][ T31] __schedule+0x1190/0x5de0 [ 390.985271][ T31] ? __pfx___schedule+0x10/0x10 [ 390.991580][ T31] ? find_held_lock+0x2b/0x80 [ 391.001170][ T31] ? schedule+0x2d7/0x3a0 [ 391.019950][ T31] schedule+0xe7/0x3a0 [ 391.034968][ T31] io_schedule+0xbf/0x130 [ 391.047076][ T31] folio_wait_bit_common+0x3d5/0x9e0 [ 391.052531][ T31] ? folio_wait_bit_common+0x13a/0x9e0 [ 391.058285][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 391.064336][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 391.070011][ T31] ? __pfx___might_resched+0x10/0x10 [ 391.075625][ T31] migrate_pages_batch+0x1487/0x3bb0 [ 391.081037][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 391.086555][ T31] ? __pfx_compaction_free+0x10/0x10 [ 391.092013][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 391.097908][ T31] migrate_pages_sync+0x4c5/0x8a0 [ 391.103006][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 391.108677][ T31] ? __pfx_compaction_free+0x10/0x10 [ 391.114232][ T31] ? __pfx_migrate_pages_sync+0x10/0x10 [ 391.119898][ T31] ? irqentry_exit+0x3b/0x90 [ 391.124661][ T31] migrate_pages+0x1b5f/0x23a0 [ 391.129536][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 391.136684][ T31] ? __pfx_compaction_free+0x10/0x10 [ 391.142054][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 391.147243][ T31] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 391.153672][ T31] ? pfn_to_online_page+0x1de/0x560 [ 391.158941][ T31] compact_zone+0x2018/0x4750 [ 391.163769][ T31] ? __pfx_compact_zone+0x10/0x10 [ 391.168838][ T31] ? __flush_work+0xa48/0xcc0 [ 391.173708][ T31] compact_node+0x1a3/0x2c0 [ 391.178244][ T31] ? __pfx_compact_node+0x10/0x10 [ 391.183311][ T31] ? __lru_add_drain_all+0xec/0x6f0 [ 391.188605][ T31] sysctl_compaction_handler+0x141/0x210 [ 391.194583][ T31] proc_sys_call_handler+0x445/0x570 [ 391.199957][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 391.205851][ T31] iter_file_splice_write+0xa24/0x12e0 [ 391.211384][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 391.217458][ T31] ? __pfx_copy_splice_read+0x10/0x10 [ 391.222910][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 391.228934][ T31] direct_splice_actor+0x192/0x6c0 [ 391.236070][ T31] splice_direct_to_actor+0x345/0xa30 [ 391.241518][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 391.247287][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 391.253227][ T31] do_splice_direct+0x174/0x240 [ 391.258298][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 391.263796][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 391.269892][ T31] ? rw_verify_area+0xcf/0x6c0 [ 391.274850][ T31] do_sendfile+0xb06/0xe50 [ 391.279396][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 391.284501][ T31] __x64_sys_sendfile64+0x154/0x220 [ 391.289777][ T31] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 391.295674][ T31] ? __secure_computing+0x28e/0x3b0 [ 391.300931][ T31] do_syscall_64+0xcd/0xfa0 [ 391.305523][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.311488][ T31] RIP: 0033:0x7fe2e358f6c9 [ 391.317283][ T31] RSP: 002b:00007fe2e4462038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 391.325861][ T31] RAX: ffffffffffffffda RBX: 00007fe2e37e6180 RCX: 00007fe2e358f6c9 [ 391.334018][ T31] RDX: 00002000000000c0 RSI: 000000000000000e RDI: 000000000000000f [ 391.343139][ T31] RBP: 00007fe2e3611f91 R08: 0000000000000000 R09: 0000000000000000 [ 391.351244][ T31] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 391.359341][ T31] R13: 00007fe2e37e6218 R14: 00007fe2e37e6180 R15: 00007ffe32526b98 [ 391.367483][ T31] [ 391.370891][ T31] [ 391.370891][ T31] Showing all locks held in the system: [ 391.379734][ T31] 1 lock held by khungtaskd/31: [ 391.384690][ T31] #0: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 391.394869][ T31] 2 locks held by getty/5570: [ 391.399604][ T31] #0: ffff88814cc1c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 391.421088][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 391.438444][ T31] 1 lock held by udevd/5817: [ 391.444702][ T31] #0: ffff888142fcf358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 391.454586][ T31] 6 locks held by kworker/1:4/5874: [ 391.459857][ T31] #0: ffff88801e2bed48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 391.470939][ T31] #1: ffffc90002ed7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 391.485611][ T31] #2: ffff888145336198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 391.495010][ T31] #3: ffff888029579518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 391.505413][ T31] #4: ffff888144bf5268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 391.515631][ T31] #5: ffffffff8f6af970 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a1/0x1cb0 [ 391.526611][ T31] 1 lock held by syz.4.491/7786: [ 391.531615][ T31] #0: ffff888075332420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 391.544375][ T31] 2 locks held by syz.0.647/8601: [ 391.549494][ T31] #0: ffff888048ba40e0 (&type->s_umount_key#78/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 391.560065][ T31] #1: ffff888142fcf358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 391.569767][ T31] 2 locks held by syz.6.893/9566: [ 391.575094][ T31] #0: ffffffff900e7248 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0x167/0x230 [ 391.584373][ T31] #1: ffffffff8e3cfcb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 391.594805][ T31] 1 lock held by syz.1.896/9568: [ 391.599792][ T31] #0: ffffffff900e7248 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0x167/0x230 [ 391.609112][ T31] [ 391.611495][ T31] ============================================= [ 391.611495][ T31] [ 391.620454][ T31] NMI backtrace for cpu 0 [ 391.620474][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 391.620492][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 391.620502][ T31] Call Trace: [ 391.620508][ T31] [ 391.620514][ T31] dump_stack_lvl+0x116/0x1f0 [ 391.620544][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 391.620562][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 391.620586][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 391.620611][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 391.620630][ T31] watchdog+0xf3f/0x1170 [ 391.620651][ T31] ? rcu_is_watching+0x12/0xc0 [ 391.620670][ T31] ? __pfx_watchdog+0x10/0x10 [ 391.620686][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 391.620709][ T31] ? __kthread_parkme+0x19e/0x250 [ 391.620732][ T31] ? __pfx_watchdog+0x10/0x10 [ 391.620749][ T31] kthread+0x3c5/0x780 [ 391.620764][ T31] ? __pfx_kthread+0x10/0x10 [ 391.620778][ T31] ? rcu_is_watching+0x12/0xc0 [ 391.620797][ T31] ? __pfx_kthread+0x10/0x10 [ 391.620814][ T31] ret_from_fork+0x675/0x7d0 [ 391.620828][ T31] ? __pfx_kthread+0x10/0x10 [ 391.620845][ T31] ret_from_fork_asm+0x1a/0x30 [ 391.620880][ T31] [ 391.620886][ T31] Sending NMI from CPU 0 to CPUs 1: [ 391.750269][ C1] NMI backtrace for cpu 1 [ 391.750283][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 391.750299][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 391.750308][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 391.750332][ C1] Code: e7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 a6 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 391.750345][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 391.750357][ C1] RAX: 0000000001de5379 RBX: 0000000000000001 RCX: ffffffff8b6082a9 [ 391.750366][ C1] RDX: 0000000000000000 RSI: ffffffff8da2b0a2 RDI: ffffffff8bf07040 [ 391.750375][ C1] RBP: ffffed1003b53490 R08: 0000000000000001 R09: ffffed10170a6655 [ 391.750383][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 391.750391][ C1] R13: ffff88801da9a480 R14: ffffffff908203d0 R15: 0000000000000000 [ 391.750400][ C1] FS: 0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 391.750414][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.750423][ C1] CR2: 00007ffdd2f03ffc CR3: 0000000035071000 CR4: 00000000003526f0 [ 391.750432][ C1] Call Trace: [ 391.750436][ C1] [ 391.750441][ C1] default_idle+0x13/0x20 [ 391.750455][ C1] default_idle_call+0x6c/0xb0 [ 391.750468][ C1] do_idle+0x38d/0x500 [ 391.750486][ C1] ? __pfx_do_idle+0x10/0x10 [ 391.750501][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 391.750518][ C1] cpu_startup_entry+0x4f/0x60 [ 391.750534][ C1] start_secondary+0x21d/0x2b0 [ 391.750553][ C1] ? __pfx_start_secondary+0x10/0x10 [ 391.750573][ C1] common_startup_64+0x13e/0x148 [ 391.750592][ C1] [ 395.127682][ T5184] udevd[5184]: worker [5817] /devices/virtual/block/nbd0 timeout; kill it [ 395.137963][ T5184] udevd[5184]: seq 13176 '/devices/virtual/block/nbd0' killed [ 396.754258][ T11] block nbd0: Possible stuck request ffff88802617e000: control (read@0,1024B). Runtime 180 seconds [ 396.766340][ T11] block nbd0: Possible stuck request ffff88802617e1c0: control (read@1024,1024B). Runtime 180 seconds [ 396.777418][ T11] block nbd0: Possible stuck request ffff88802617e380: control (read@2048,1024B). Runtime 180 seconds [ 396.788417][ T11] block nbd0: Possible stuck request ffff88802617e540: control (read@3072,1024B). Runtime 180 seconds