last executing test programs: 7m37.612952945s ago: executing program 2 (id=427): r0 = timerfd_create(0x0, 0x0) r1 = timerfd_create(0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) timerfd_settime(r1, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x8000}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x711102, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, 0x0) 7m37.377841154s ago: executing program 2 (id=431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x2, 0x4600) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x468200, 0x635845dbb52aedb) mknodat(r3, &(0x7f00000001c0)='./file2\x00', 0x81c0, 0xffffffff) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x34}, 0x8017, 0x3, 'wrr\x00', 0x10, 0x4, 0x77}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x3000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f0000000080)={0x6, 'pim6reg\x00', {0xb}, 0x1000}) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 7m36.204236432s ago: executing program 2 (id=434): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000004d80), 0x2, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0x1, 0x105400) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000000)={0x7, 0x2, "3c22de5997488da90316c28a124097586211f10839047606", {0x9, 0x9}, 0x58e480d2}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x9c, 0x33424752, 0x0, 0x3, [{0x100, 0xfff}, {0x1}, {0x10001, 0x8}, {0x1, 0xffbffffe}, {0x6, 0xfffffffc}, {0x1, 0xe00}, {0x9360, 0x7ff}, {0x6, 0x5}], 0x16, 0x8, 0x7, 0x2, 0x2}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xe1, 0x0, 0x4}]}) sendmsg$nl_route(r3, 0x0, 0x8000) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @cgroup_sock=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9"], 0xb) 7m35.901455349s ago: executing program 2 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x7fff7fffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xfffffffffffffc5b}) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x509a01, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x509a01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0xa7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) connect$unix(r5, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0xa, 0x1, 0x0) (async) socket$inet(0xa, 0x1, 0x0) 7m34.494704314s ago: executing program 2 (id=442): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000040), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e4197", 0x4}], 0x1, &(0x7f00000003c0)=[@rights={{0x10, 0x1, 0x1, [r2]}}], 0x10, 0x20000041}}], 0x1, 0xc004) recvmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000905a1e7", @ANYRESDEC], 0x0) 7m31.317270868s ago: executing program 2 (id=455): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x109800, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'virt_wifi0\x00', @broadcast}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x1, 0x1, 0x7, 0x400, 0x7, 0xffffffffffffffff}) setpgid(0x0, r2) 7m28.12486769s ago: executing program 1 (id=465): prlimit64(0x0, 0xc, &(0x7f0000000140)={0x61, 0xfffffffffffffffe}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffed3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000220200000600000000002400", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03000060010000000300000003010000ea1ee06e4a675d1c"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$can_bcm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2, 0x204, 0x8, {}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x0, 0x1}, 0x8, 0x7, 0x0, 0x0, "a9c4eaa89d9376ed"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) syz_open_dev$video(&(0x7f0000000040), 0xa8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$l2tp6(0xa, 0x2, 0x73) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x200016, 0x6, 0xc2, &(0x7f0000000540)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309002500000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc60efd680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca512b5f336dfeb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7f804bb4713019a83353dc519d11c3cc1c22a3b86cf3c645413fcea0ce9ded703699d2bb6a4a663b99b6069da5aaf64785a58847440f064b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200216032811fadcf1e0f49a514df529061e09ce45e3f303a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a250200000000000000d23d324205000000000000000a617f22133b6cb5087f4c6057942ad995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74f0000000000000000c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a3cff46591ccaff3075b86ea6171b046b856168f403b5253a5cc393630a09a4489a0895571e597ac8861416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedcbefc5990d7fed29a002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d559b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756d732533c2722e03002293e37966611602f297de6ff5408777d7a93c45cee3ee5c56e8a3e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb881c02f484f6579ef62866a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c909cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc562507430d8f2c17479a6678b0b3700080000000000000000000000000000000000000000f80000000000001700000000000000000000000000000000000200"}) 7m26.636851388s ago: executing program 1 (id=467): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0x3, 0x4}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd30, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) 7m26.617823566s ago: executing program 1 (id=468): syz_emit_ethernet(0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000200892f000000000000000000"], 0x0) 7m26.57608549s ago: executing program 1 (id=469): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) read$midi(r0, &(0x7f0000000040)=""/202, 0xca) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x10000, 0x6, 0x1, 'queue1\x00', 0x9}) syz_usb_connect(0x5, 0x79, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000c7099e404319572251810000000109026700010400800009042a"], 0x0) r2 = request_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='\x00', 0xfffffffffffffffa) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0xc2) 7m23.484509576s ago: executing program 1 (id=476): r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x203, @empty, 0x2}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) mmap(&(0x7f0000637000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00006a0000/0x3000)=nil, 0x400000, 0x0, 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r6 = socket(0x10, 0x803, 0x0) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000840)={0xb, 0x103, 0x0, {0x3, 0x9, 0x3, 0x800}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) recvmsg$inet_nvme(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)=""/223, 0xdf}, {&(0x7f0000000300)=""/77, 0x4d}, {&(0x7f0000000400)=""/65, 0x41}, {&(0x7f0000000480)=""/64, 0x40}, {&(0x7f00000004c0)=""/120, 0x78}, {&(0x7f0000000540)=""/186, 0xba}, {&(0x7f0000000600)=""/121, 0x79}], 0x7, &(0x7f0000000700)=""/114, 0x72}, 0x200) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x200800, 0x0) ioctl$SNDCTL_DSP_SPEED(r11, 0xc0045002, &(0x7f00000007c0)=0x1) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000066001fff0000000000000000", @ANYRES64], 0x40}}, 0x4000800) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000880)=@ipv6_getaddrlabel={0x0, 0x4a, 0x2, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x38, 0x0, r9, 0x5}, [@IFAL_LABEL={0x0, 0x2, 0x1}, @IFAL_ADDRESS={0x0, 0x1, @mcast1}, @IFAL_ADDRESS={0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_ADDRESS={0x0, 0x1, @local}]}, 0x48}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000800)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @broadcast}}}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x8, 0x2}, {0x3, 0x2}, {0x3, 0x6}}}, 0x24}}, 0x240488d0) 7m22.997134142s ago: executing program 1 (id=478): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000008c0)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m16.220149627s ago: executing program 32 (id=455): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x109800, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'virt_wifi0\x00', @broadcast}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x1, 0x1, 0x7, 0x400, 0x7, 0xffffffffffffffff}) setpgid(0x0, r2) 7m7.960966428s ago: executing program 33 (id=478): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000008c0)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m2.040809683s ago: executing program 3 (id=1764): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0xd, 0x0, 0x5}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x20, 0x40, 0x4, 0x4, {{0xb, 0x4, 0x2, 0x4, 0x2c, 0x68, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@lsrr={0x83, 0x17, 0xb2, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @private=0xa010101]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x4, 0xa, 0x9, 0x81, 0xa, @mcast2, @mcast1, 0x10, 0x700, 0x3, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x1, 0x7, 0x4, 0x401, {{0x24, 0x4, 0x3, 0x7, 0x90, 0x65, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x27, 0x66, [@rand_addr=0x64010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1, @private=0xa010102, @private=0xa010102, @broadcast, @multicast1, @empty]}, @ssrr={0x89, 0x13, 0x4c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @lsrr={0x83, 0xf, 0x9d, [@remote, @loopback, @private=0xa010101]}, @timestamp={0x44, 0x14, 0x86, 0x0, 0x7, [0x3, 0x400, 0x3, 0xfffff26c]}, @noop, @noop, @rr={0x7, 0x7, 0xb4, [@rand_addr=0x64010101]}, @noop, @lsrr={0x83, 0xf, 0xb5, [@private=0xa010102, @loopback, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0x79, 0x9, 0x2, 0x0, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x20, 0xee, 0x5}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x210, r2, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9eb6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x7, 0x6, 0xffff2682}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r7}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3c3b}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x210}, 0x1, 0x0, 0x0, 0x10}, 0x20) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000740)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x41, r5}) sendmsg$inet(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)="373542b1a5797ffec5842ab6e775533588bf40c7e25c156526eaeba39ce9bf6589f9334b3b921af3a527689099ca2073c47ed97af9ef636df149540ebd2a9c8600b5abbf09989be66e1f86bb90f8b75d166e90c66573bb6c3f73a673c6ff2ef39ebbfb094e429862cbe228297f1b32b1c28f18e1ee52b4a7374b2fcb339c82353c049559c7384d695dc8430385a730ffeb5b9bd38328db7a15bb8e57cfdbc981bf19f78420e63cc136e73544d688d033d77f252e60f8768608263e70ad74c3d397028e9e028e5c3b341c1a4ce37096cb55dedd1da8112f0dd495a357c2be1af57be3a9484fb4", 0xe6}, {&(0x7f0000000880)="2c5a623556cfcfc732232c264707c72cb68fc68f6f7948dd1bad94d5e5931d6d55864df2ac98e919d92ecec2dac7e544150d69b023f8ab636f4c4cf10927d19ad2c5c82c46f59bb717ba9fdcb947f8a3a34e051562037538ec56949e9f090e161336437c3fd6f47a6cd7f2176704e18d15da971b1fdd441c3099711a323364ac4cd79fa9931187463ca53f87bdc4f2b39cf4fe62b8cbd62b30873dd071ac2c0a927bd8885dba8e16615aebe57dcfefde4072fdef7fd6e425f49138a469d09089fa2375694e9611600a032938fb6fcdc3525c53626c7c282c796981", 0xdb}, {&(0x7f0000000980)="327117c7a770978095c061148dfb6d20d395df56bf5f6c9c0ac347e07930219cfb20f2a697d864e002d01d167dfd55875100c96f0c99c4a8a016379fa499279e9061255fdb26576d4ab6c44306ac7c2689459a3150061d03b43cd714f3e0e94b98933c71085474e151d62ee10435dc9aa6684c2f591ff2898656523b0afcec3cac7a3a7a2624a374ee2c9be52c381d8c3b8321bf4f078a260d2abc1e7c6b9765ca65b8cbc10c6e5565035cf87bcd30985a4e97ef748969f99b817988e1d2a2b06a1a1b2d8dc8822b905404ab812c34de9e765ea0390325e4bb43c121638480643e0e64fb03f5a6dd", 0xe8}, {&(0x7f0000000a80)="bbf7ac5fd50f032f6de975974234cd5c14516cd15e3ab0eb7cdc6e951d3fb8445b58d424601f7da1e3fb43f2cdbd9a55badbc649d77e9cd9e3db67906b87665f1b64a10c9cb2b6ae497673a2e6a01bc8a237633916be39350e45946af77f1f3b66ff9c10ada7b6a0950c50ea2a054d4563469409b75ba660e615c09ce859921af4bc050ff6202e369333c66e695d34807731b96f8f76d3c3af65b0efc251b97a7f615103b469630a010a959dec520ada2fba11cb3bf9", 0xb6}, {&(0x7f0000000b40)="b1fc9f7340e7588be057337caadf73217be4051ab8d550a9ea85f501322c14601bbb7f04b1b33c18649b199a540d682143f0cbf7637cab984a213642f4b1aca21c79d9195e271bb439cb8862f153e8fb1722d2ebf91dec27d52adfc4825bdbce177d871f8871739c9b0e31c411d7a5", 0x6f}], 0x5, &(0x7f0000000c40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x18}, 0x800) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000d80)=@buf={0x96, &(0x7f0000000cc0)="38b5be0fd6d25a3d74907cf798bfcd729c25acda24b3c409b446aa1ef2db33d307da11968871b1119323f989bdd6b985421fbe7e4706a4d17fea6661d25eb4b5dd4d3afc2046815da7aca0739325dea20b1712d4ce6c97a7713a7a4bfd748741c18f4042cf4929588fd888581e1989f094168ec2e6276103e8a2164ee0dc3738558194c25a76cf0054b017fb4c6cc9a2cb0fe7507b76"}) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=""/109}) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) ioctl$KVM_CLEAR_DIRTY_LOG(r10, 0xc018aec0, &(0x7f00000012c0)={0x5, 0x3c0, 0x0, &(0x7f0000000ec0)=[0x9, 0x8, 0x3, 0x9, 0x100000001, 0x8, 0x26, 0x3, 0x4, 0x8d, 0x72, 0x4, 0x8, 0xffffffffffffffff, 0xe4, 0xcf0, 0x7, 0x9, 0x6, 0x9, 0x4, 0x0, 0x2, 0x1, 0x5, 0x1000, 0x80000000, 0x4, 0x5, 0x5, 0x3, 0xf848, 0x6, 0x6fde, 0x7, 0x3, 0xfffffffffffff13e, 0xffffffff, 0x2, 0x5, 0x518, 0x2, 0x1, 0x7fffffffffffffff, 0x8001, 0x8, 0x3ff, 0x6, 0x6aac, 0x2, 0x6, 0x9, 0xffffffff, 0x5, 0x3, 0x4, 0xfffffffffffffffa, 0x100000000, 0x2, 0x6, 0x4a1, 0x5, 0x101, 0x81ac, 0x6, 0xe, 0xde, 0x10001, 0xb32, 0x7, 0x9, 0x9, 0x400, 0x7fffffffffffffff, 0x0, 0x8, 0x4, 0x9b, 0x3ff, 0x8000000000000001, 0x3, 0x8, 0x0, 0x9, 0x2, 0xc52, 0x4, 0x3, 0xffffffff, 0x5, 0x7, 0x1, 0x5, 0x9, 0x7fffffff, 0x800, 0x3085, 0x100, 0xfffffffffffffffa, 0x824a, 0xffffffffffff8bff, 0x343, 0x798c, 0xff, 0x8001, 0x100000001, 0x8, 0x5, 0x0, 0x100, 0x7, 0x8f9b, 0xfffffffffffff800, 0x8, 0x4, 0x8000000000000000, 0xf, 0x70000, 0x800, 0x0, 0xaf5, 0x0, 0xab, 0x6, 0x7, 0x3, 0x7fff, 0x9]}) r11 = syz_open_dev$vcsn(&(0x7f0000001300), 0x8, 0x284002) recvfrom$unix(r11, &(0x7f0000001340)=""/145, 0x91, 0x100, &(0x7f0000001400)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r11, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)=@getroute={0x14, 0x1a, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$DRM_IOCTL_GET_CLIENT(r11, 0xc0286405, &(0x7f0000001580)={0x7f, 0x80000000, {0x0}, {0xee01}, 0x10001}) ptrace(0x4207, r12) write$cgroup_int(r11, &(0x7f00000015c0)=0x8, 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r11, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000001800)=[0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f0000001880)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000018c0), &(0x7f0000001900), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000001940)}}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000001c40)={{r10, &(0x7f0000001ac0)='erspan0\x00', 0x551400, &(0x7f0000001b00)={@_ha_fsid={[0xffffffff, 0x7]}, {0x8561, 0x4, 0xe3, 0x9}}, 0xe131, &(0x7f0000001b40), &(0x7f0000001b80)=0x8}, {[0x1000, 0xfffffffa, 0x42e]}, 0x84, 0x57, &(0x7f0000001bc0)=""/87}) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x16, 0x10, &(0x7f0000001600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1a}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@jmp={0x5, 0x1, 0xd, 0x5, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001680)='syzkaller\x00', 0x1, 0x76, &(0x7f00000016c0)=""/118, 0x41100, 0x22, '\x00', 0x0, @fallback=0x1c, r11, 0x8, &(0x7f0000001740)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001780)={0x4, 0xb, 0x3, 0x5}, 0x10, r13, r11, 0x0, &(0x7f0000001cc0)=[r11, r14, r11, r11, r11, r11, r11], 0x0, 0x10, 0x9}, 0x94) ioctl$KVM_SET_PIT2(r11, 0x4070aea0, &(0x7f0000001dc0)={[{0x8, 0xfffb, 0x4, 0x9, 0x9, 0x10, 0x0, 0x9, 0x5, 0x3, 0x4, 0xfd, 0x3}, {0x9, 0x4, 0xc0, 0xf, 0x0, 0xf2, 0x15, 0x9, 0x4, 0x4, 0x1, 0x2, 0x5}, {0x2, 0xb404, 0x9, 0xfa, 0x8, 0x2, 0x1, 0x1, 0xee, 0x3, 0x3, 0x6, 0x7}], 0x9}) openat$tun(0xffffffffffffff9c, &(0x7f0000001e40), 0x400100, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r14, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 1m2.015443423s ago: executing program 3 (id=1765): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r3 = syz_open_dev$usbmon(&(0x7f0000000380), 0x2, 0xc9740) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r3, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f00000000c0)={0x1000, 0x5, 0xfffffffb}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2154, 0xc000, 0x3, 0xc4}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x300}]}, 0x28}}, 0x0) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 1m0.417372067s ago: executing program 3 (id=1768): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvmmsg(r2, &(0x7f0000005180), 0x400000000000166, 0x1a0a6, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x800000, 0xe, 0x80, 0x0, 0x100000001, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xfffe, 0xfffffffffffffffe, 0x7, 0x80000002, 0x5, 0xc3e2, 0x9880, 0x4000000000080, 0x6, 0x8, 0x2, 0x3, 0x20000000009, 0x2, 0x1fd, 0x80008, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x1fe, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x7ff, 0x5, 0x101, 0x80, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000002, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x8, 0xa, 0x0, 0x24000008, 0xdac, 0xe96, 0x7, 0xfffffffffffffffc, 0xa7, 0x3, 0x0, 0x9, 0x0, 0x7, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc02, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x3, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x8fc3, 0xfff, 0x20000080, 0x3, 0xd, 0x4, 0x9, 0xfffd, 0x1, 0x50, 0x1, 0x2, 0x7, 0xea7, 0x1]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) 1m0.202425462s ago: executing program 3 (id=1773): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) syz_emit_ethernet(0x46, &(0x7f0000019300)=ANY=[@ANYRES16=r0], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/notes', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bind$x25(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149004006040800", 0x58}], 0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) kexec_load(0x58fb, 0x0, 0x0, 0x160000) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl724\x00', [0x2, 0x10000, 0x2, 0x10800421, 0x5, 0xd, 0x7ffffffe, 0x3, 0x5, 0x7, 0x0, 0x2002300, 0x1, 0x3, 0x9, 0x1, 0x40400, 0x8, 0x8, 0x4e, 0x80000089, 0x40000d, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x2, 0x4008, 0x6, 0x7fffffe, 0x20]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="18000000250001"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r4, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r4, 0x0, 0x0, 0x40002000, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {0x0}, {&(0x7f0000000d00)}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0a", 0x82}], 0x6, &(0x7f00000014c0)}}], 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000019340)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b05, &(0x7f0000000100)={'wlan0\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2, 0x1}, &(0x7f00000001c0), &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r6}, 0x0, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x24, 0x27, 0x5, 0xffffffff}, 0x0, 0x0, &(0x7f0000000000)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) 59.670118083s ago: executing program 3 (id=1777): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x8, 0x10000, 0x2}) 59.024515738s ago: executing program 3 (id=1779): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xfffffffffffffeff, 0x16, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@access_user}, {@noextend}]}}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f0000000300)='1', 0x1) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x10, "", [{{0x9, 0x4, 0x0, 0xa, 0xc, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xb, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xd, 0xfc, 0x1}}}}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_control_io$hid(r9, 0x0, 0x0) (async) syz_usb_control_io$hid(r9, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="120000003a000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000a6aafde97834cab2e1adcbb4d0762b12a01482f0f97548d70615f540c6491a2393333d42dac2014d920837a8602f898119437ae4d29af96fbb6bc651b8b1cf839c1fbe9d207f0feb064493d3d27f92ef6c30a1ddf7a723f3c7f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800", @ANYRES64=r11], 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000) (async) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2], 0x15) 43.989845261s ago: executing program 34 (id=1779): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xfffffffffffffeff, 0x16, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@access_user}, {@noextend}]}}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f0000000300)='1', 0x1) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x10, "", [{{0x9, 0x4, 0x0, 0xa, 0xc, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xb, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xd, 0xfc, 0x1}}}}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_control_io$hid(r9, 0x0, 0x0) (async) syz_usb_control_io$hid(r9, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="120000003a000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000a6aafde97834cab2e1adcbb4d0762b12a01482f0f97548d70615f540c6491a2393333d42dac2014d920837a8602f898119437ae4d29af96fbb6bc651b8b1cf839c1fbe9d207f0feb064493d3d27f92ef6c30a1ddf7a723f3c7f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800", @ANYRES64=r11], 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000) (async) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2], 0x15) 14.476599245s ago: executing program 5 (id=1943): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x2) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102384, 0x18ff0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001180)={0x8, {"cb3e2c01c127e77dbb05f48c8d92eea5cab7c2ae002a83e6fac67d1a15b7edbdc431aa458ac642f6b76d060a9256aafe4e5a566283d9d529ce68573b36808134c410fc4f1a0d1d3f005975a11a55fc79742174547deedeb9623bb28aeb4f2ec2e1bcc930d3dacef0e9a18d0c4282d20e572a9e5e1922d2d003c24b5ca3e0f2110edde008bd7843c0e7114508ac001464092633ba45b6137d1e15319be20f04d0c74228a7d0f26d56f51c809787a9650c72a00ebb633ab2ec4d5c45cec215381d4630d4349516066b0d7cebdc3f8f0888ed99fd8d9184c8e05ee8b15fcb46839280fba71d9598e1bd5146c65272b5b487264414f5ca5470236f4098ebf6a24e8a0e36e76fa56bfe0b5fc5cb93398725de1ff76fdcea89138a48c9ed31db73bd0b3b4c06ea094de2ea829012ac8b3dfc6b0c28125d26d7117ec98a59d959f2baaab2c87846afb3c76ac5da7f4d9095924013dc4d435d664609d599c392d3eedeb8c1b02301bcf4780090b0401c1357d077f099300c079ed321415407a8761d78e5bad9b1e394873f4ae0524fb3425b66a89ebe0ae86216d5762e9ea8025ffac4b6225fd71b79600e96a5c45daa1a189a92a2cc8049c28f9f4c795761c97cef2b4daec141adf41286ebbbbb53d6f1b9ef3e38b7a5b874da2cd55176034a31fd6cdeb4795e4ec43310adc116ea34b7df38ab2e079018d7cbd95da0ee01e3ac63dd341ad2393e0600c91c8ac60492981f9590bdfc08b73fd3d6651ff714277312565644905d7bf1983f6fb93679f305eab024effa274d0aa127fef71f96b13e382f725aa8301ad450532ba1bb4b70b7f956ec4410e2599fb9a05de96b36e91d95b45e7f40de0e6a44e4020fc9265124c193a86f845e242c3fdb73c60dca56d3011494a89bdebbd349948b8f485f99fe201cc640103c34bc6ab10eb3388e8633c48f2bb89b0d25f58056d6cfa440c2575c7338d796b4550a571a71d1574f49f948da7b4f6bfc5423907f89ed0764a44b4ffd83774c1f5acfc7e28aad0718f7b6e3cbfd1c19c06231b89a13e6967faf4a46617504e834a405d7b12ec3f3b1cc43bbafffee57ae600b4522ce792186898d116f4fd4298d9d79b8ec1778d095c6a8d03cdcc091309ece453ee4e20bd454b67b9a44ef421eefffba799d576a964539887c301f9718bde5ec5f7845bd720967f2c055b76e9efb6f4573c26c39a74212068364222b8087c59dc4ff22b5fe6f714374d356ef1cc8987ecf2cccfdfa01c4e1cccff5766e68710e2a5d04d9b95693d06c21bcbbf90592e5c75e15e922b88bb9cbce8fb857ece783d477e832851e1bc605a30705de6b8b3c8a2b70933713b1361435e8fb9870498357aa21127463a0cac0cb157f7804f2f6b2c1def4afdac1c335b85c2930b4e20f11c3ddfdba5b521d8b69bc27022379062ec9b18e98dfa90ffc84d4dc04ad05136e57f3209dcce4dd4e52cb6fa070f0ab919c26dbea0378b85f1e1015d682af00a4a8d3cca6877f980f75936649a578fa1a8f5ae555055122594ebe4e90e2230f673ab4419f4d257134ab37afb0f089be49ff6747a11e6c4526db27f0ada4fc3861fe8970cc3f61a89741612ae3bf5a9c02e3f737dc7282c799b864b36a0e61d8ed886345f0ffeb7406bcca1cc37909990d217c9a8bf78fc242c7c9edd6ce55e61068196059d9b2e1a50fdf7112f6a588e0bee21e1ca3b4d02484e4e51449b0703f9af496e45bd445df84b9461fc4b024f61eb7ec684764b55e6967f33b4b4d8781410a3d8daefbde8a75c8995eec1e931dc5fb6b83ed1fe2484405ca4cf8a4cfdcfe6ef151f03c1c47d41a88320e04208540af43699715bf599dbec8c3c30070347ea38a7f3653763bd76b3070a64a918b52afebc35c6a4b952c8f54c97b5e130d0126da95a04cb3985e37f2f395b9d43e2a2d660ee208d4702302e510bc35ab8dc321eed02e30db95fb04b58d275ce850dace1f3675109e8458d292c8b1049980e4efcb8c92ed1c0b89fb82a369c8da7645f3f98b298868a52553e2daa865681153deeea3f2ea4f18f93667e94513c9a87ca2c0a26be03646c83a5ff9d79369880373e08e8de628a47a7301aeacc77f9c0b97ef97a93da114d4fa28ae91d3da82faf77142fb17d1d71b2460f9cd3115e5972b2cf61868c6ac1a2e20854670f30b05f7818a9fb324855049e335d8342ffa4c91a5050227505230cfb3f97b915ccaa65223a60a61d58b6e1d37ccb5bab3321372536441fa882e98019be452b55c55684f6a471679f6b45253917742818cdcbf90bfba3eaf49386c3b3b9ff9a9282c324bcb32f3c057273c92a2560067c647b39e0bf149e68ffaa610da383c28019123a775a6b60d201418be1c3841ab1f29dbc944d1deb5476bcad88b64c6792f142a879246b09bbd13ddd504d26367ae68799a7f0d1037112b40eae30be57e75c832ec6e0004147778a7f21e1f5373964d7f3b5052105580e1082edd0f0f85b508005087ef831d435ddef1bea1b82ae1fcff958268d2be5a98a009fa2f4fb4417efff78406a9fa0ed68c8c40162ace51b1ed2414253e70d8a86a365e2ce54873c9efe37601d94706d50b76ef77aaa0887a8293bb6a0bc0bf3ef26258821a3c3bf53c5000015f1f84fef7325f8802e6d22151d4d35767f8c23bb91ca0891c115e8b4ab1e1aff65bf71d52f56d49a4192e68db75b56348b21af4e505556656709c45ea3d1d4145bf226765d6818082ceb353410f6bd11001a34ca36d88979654b9204fb55ee51d914da6a2bccc211e9ab85a429095754f850be016c3e5c0080ef47189686bae3deccc0c2ff6770b68cece4f965123e410a399cf4a3abbcf23ecf37a3c4bc7e3402d610adc8bd147d8e9fbfafcf9dcb177ecc369b1c1cb6606203c34dbee39755321d754ce07f24042195cbe20bf9aefe6df40d611ec8518aa94565425ceb2a20c6714521c6be40af465e57e60de7a1f3e7b5cdbd03425804b85228372f3d6b682dc97db63535c26b43022d2206946196a26cc9f2d17b7a5f8f6f2d819d25e730b8b7d13849d5178bd4b0cab1cf0b6e4d647ad27ec06efe8db00e4d5bafe1bbfc41d3d88111cd20b200aa2afb83da25e3ccdeebb6801bad435de231ba3ab56814b07b6f5a034e5cb19233179b10e6f9d9566c9bae1dd5bc6ca46c7eaa50ec38835a6ac4872b919e527cf55a7109559b495cde6721d0a2eb4336a5ff2f70bf7daf130b7b18e6772fc7b4315ce44811da69888992be368ef97c008fe26828e3f8c4c34ffa03eb5942eceb589b6ce5bfb49ad644d173eb213d8beb8e18faa8fbf9f045e58e8c82f0bd88b40e1d6907521c3f78c481d81f97bf390a96ee5cfe8cdfe3d82d83acc8ed5deab2c812119f55ca875dd7537e45d83acdaf5af21caa46fef1378fd582b6e2ee27349a7dffd2df89de3e334e749e3ca37c13114fb8e93f1902cdd1cb99edb7d9989647b666875692780845c30eb699fec485cffdfffb83f027ec0cce6edc789bdbb08ff74f07703bd790e42701240be01dc77ae7c2a93be66f98c841cb04e27ffdff9aea25f5a710b3b4f9a924dc8207056c4143fe52dd79e74b7344c499f8bb082e6bda10162dd08dc957d5b1f16fe085135646584a3673b37e62e3be7af890e32796241b717048f115815166324759c3dc227131e390938357a717d0db6be7ca68d0877e0ce74d0429d2da22384ff2fc57fbb1e22585961f0599724a8524053dd8ba46adfab9945ea00ec8afb98f5dcffe7605c0f526ab0ca4d31433fd79ec5c537b3d0e1659456cf544e0f44b086d876ca9ecdadb0cf0404f83550532eeebe9ca7b075d909b3300b88b8edeec35cc91face7ed5a3f2ceb031760bf84488f531d6a2f1f4846d2a9284a60f9fda46c81b3ade119474eeb0e49f721c70d64b97b4ce923cb6ce17795ada7b37022a0370200c4ce69a07b1a362979d8acaf1fd3407af873cd7c878c136c63729c4d0373c18fa502614d57e32910928b1e8f04e1182c83ae1573f341fca201a1101943765354f963074f7aa03a35bda087d07d099d6c926a37a877ee9e051bec8f873c6af1e6067fff83d7a86601fa4fbc0a95817a72da4effa03ffef2ea89847a8c98ea015bdcb226f91e38e579eaa12b3f8fc7c391889d2fb70b9b1714176570f653b05c7ea6c65e60a10498b4273d173e4f89121858a12e43ce73c7914c15b749ce227e680a8d805da707f1b2e4c3857cc3a107f5a0cd00e2b7e7a2c9794f441d07f46a49cc8bfac4b836e62126a28b682c86e0cb5b8cde463feccef17dde6baad89b7aad61e4b15e5d71a472ca61514ca03ac1667b2a37de0aa39abb85aac4164e0c1b9c7ad77386bb890ad439495f64d6c12eca8f1af2d950155c3852039d5e4d05be8fdaffd9a8325a3b89261e525f4042564d039cc362c186dc89d050ee4ff0ed606280d250647f1662563967362e13ecedd8a4a8806161e084fb7f556ed3089ed3b0d73fd2a3077a36d819c56c2a16a61d7abe1d693efdae493d8e00054fb52c0486b89bbb69c143d19185947226b4cf56e9861ea62cd4714735e2ca609c3e7e4e92d376c3879c3064202871bd098a21ff0a0d756c2bf7ecf2f19f6ebf1d71a0a1ef56fddd534d67b1effabc8f1cbbcdb9a1fc9d6d5f580e053a6f35e73cee04fdaa69293a8e1643f0c627ce3299989638225dd7bebb128d7c2d2ab74f15a969596d4e6985760bf5a7b21b452e0ca5a22a86cb9a1fba5865b25434334704d05874dbaba86141c45e5e53591a100218c952a8b3a56bbb20c707e23c9641f39743421a1c6c3d3f7df7af55627cff0e23306858d54e4ed7f19383c6c9d6b53aa1d47b93db06f5d8448af017879de572b421ca565fecb3c6e4041d387a29deafa069fb17dec56de4df37e307de16d18259539897f0f04433575f48ed7e141cae91a6b65d6885a17ed43a7342849ed4f61db8f129e0d31703858e1beda4a3fe55f48b7ddcbc336e8b63dc65dc93caae4fe53531298c85b5e8ef657bc9546bb3e2cc184b5f675bfd0e64f1c32d77877436c5011d554b986c0802ddd53ddbde1800bb17ff43afdd3465c3034060f1b03313b7b05ffa3b4e4c3c5eadbf2002606336010febf711c65ed7f03e86d8f6bf9b738bb023d06889eea12d9350dc32c5c5e99e9277b48c6504c92cc53ad1448ee3e12d58a9be44534b47e218b335ff27924d1b3fcde23049d40a61fb67bd0f283a8bfbd09e0aadcedf45eea1c2431a25fb337773b1a4553895e620208d4356cd891ff1f6b7feb3a2282e6abbc1b357cd66c170b9b519694055c44abab58255b4432f9b7e7e5a05e9e7035f5936f297f371dd94f068c869b2761f7ebc6734b311ce14fb11063bf925726b39ad1af4dd9819647beabbeac548ef762cc0f6015dc79168b22301d27e0d87d180ac27a5f8d823b2b51393f0cc0f1f093966fdfdaf99e8a222bb210cb81b092c52b5f5dfcfb0cda5b358a0b5f718a199a3109db9dd917c1f04bab1e8947f25b7e6f679f60edefc8a77895b8df9a21804e41e5a78ab645e5d80d6b5d58b4b201657a9f3658993a48c4b87c6f727c9ca563d89cace7b2e3338f045c5997c50032c7014509bf1562d0be470ab49b20f0fa3a44df51c5d2a2713fdca1b644ac1f3b6ae2702cada97c020623411d36bf0e2a5261911243056db89f1d8128b67b8184657ce807e580aeee40417115960fac12c8e4f70bd8f7d6526fe5f46c7b51d785b239bf4e25e92c06f7ef729e401660a51a31cb4f90bae1b72b71481abdb0a7b47d574ad75167a7622", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x200000000000003f) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f00000000c0)={0x3, 0x4, 0x5, 0x80000001, 0x1}) syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x4000, 0x13090, 0x2, 0x29}, 0x0, 0x0, &(0x7f0000000000)) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x809, 0x4, 0x6, 0xfffa}, 0x1d, [0x7, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0xffffffff, 0x7f, 0x40, 0x4d, 0x39cc191a, 0x5c, 0x6, 0x3, 0x2, 0x6, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x5, 0x1f461e2c, 0x7, 0x2000e665, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x101, 0x7, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x1200000, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x6, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x916, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x2008, 0x4, 0x8000, 0x9, 0x7fffffff, 0x404, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x4020006, 0xb, 0xa, 0x1, 0x7, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x0, 0x3, 0x9, 0x48c93693, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x20005, 0x7fff, 0x0, 0x20000001, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x1000, 0x38, 0x800003, 0x200, 0x80, 0x800001, 0xcc52, 0x950bfb0, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffbf, 0x0, 0x6, 0x1c, 0x40120000, 0x3, 0x6, 0xaaed, 0x4, 0x7], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7ffd, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000004, 0x7, 0x8, 0xc8, 0x9, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0xffff0001, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xd, 0x7, 0x1, 0x6c1b, 0x0, 0x5, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = socket(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x4d, 0xffffefff}, {0x6, 0x0, 0xff}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x0) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, 0x24) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x5}]}}}]}, 0x3c}}, 0x24) sendmsg$nfc_llcp(r8, &(0x7f0000000ac0)={&(0x7f0000000880)={0x27, 0x0, 0x1, 0x7, 0xfb, 0x2f, "1a8b203b81b320b4a09dfacc8b0c1c4a207b0f6f10a1b6d9b0de77ff1b8bf453eda046c345363da215d743f03327ae1e67971c2a79b231a78d82711b40af83", 0x12}, 0x60, &(0x7f00000009c0)=[{&(0x7f0000000900)="b66c1622da34cf255ac24df8faf32775fa358c70eaaa044d108b8aa601712f4ceedd1c54d9002c31afe8c8eca3ca0de83d4ee62b1d96824e275b4cb7679b964c2e7128457e4f64e1b2e14d4b3cd2d2ebd24f5f6400b47a1ef04c30ee959c0b16f5555f12bfdf173d460e4c39eb95986a1c31d488bb483b028d67768a21d74e056a896c81492eb77443d6caf953516a651b69daf512ab818745366d1c77104f8d67e5b786b58cb02c085a595c326eb796bc574dc3a1bd56b1e8", 0xb9}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="a0000000000000000600000007000000d205de23624549e56881e7a24fa09e39ae4b39cf6df79022f6d9061b7175e4404415cee569865e55bdddd52c8cc55036a28be4e1b801835714f2289c869471ba36417be39dbb1d59f0277f93acf42a103574ab6757c3faac28f34233edd2d0cf2e6a6714984f5be0d9cf316670660b15aeb62097da1c0c9c059f91ad000026a66d08b89288a97d00b32c3bac0190fe1edaf12590744937"], 0xa0}, 0x4000014) 10.536943699s ago: executing program 5 (id=1951): listen(0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x96) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "a844"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @local=@item_4={0x3, 0x2, 0x8, "0a52528d"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 8.107229284s ago: executing program 4 (id=1954): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x8, 0x0, &(0x7f0000002140)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000ffff27bd3000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5d4705006ffd0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="a44a2e3cf88c2227760ee0eda5864ac2b8ed61ebf5620a62c91bed472e5a0ba208a9dcdc8985909c12d75fd01b23ed781ca17a2721c98b7ea4024ebcc7afa6ca783aa1da6c24e0daded4652d2b5456b68fd8f6b68ed233718b57bc13070903c60200000012270b939adc8779d46ec2135339519aa20426521d4e76b47ef3abf2857960c2fcbd"], 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r7, &(0x7f00000002c0)=""/153, 0x99) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x12, r6, 0x0) ioctl$UFFDIO_MOVE(r7, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000839000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000}) 8.035803704s ago: executing program 0 (id=1956): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fsetxattr$security_selinux(r0, &(0x7f00000001c0), &(0x7f0000000240)='system_u:object_r:dri_device_t:s0\x00', 0x22, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) connect$ax25(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000000d090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000180)="38c9522ade", 0x5}], 0x1) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000000)) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x4a0802, 0x0) ioctl$TIOCSTI(r8, 0x5412, 0x0) (async) close(r0) 7.71737653s ago: executing program 0 (id=1958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x30, 0x1, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_EXPECT_NAT={0x8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000041}, 0x20008084) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue1\x00', 0x48}) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) syz_usb_connect(0x2, 0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="120100029c5303081e040a405ff80102030109027100010106903b0904380f034e4346800a2401781b3d000201020924030103040603090b240604020200000400030c24020601040202070008080b240502075a403b933139082408030300043c2d061fcd578b9e7fe466a6318030ac0905000200040f008109050a0000020981000724a1662cbf36090503020800010102"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 7.712986616s ago: executing program 5 (id=1960): syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x8) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x6, 0x6, 0xc}) syz_usb_ep_read(0xffffffffffffffff, 0x2, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @mcast1, 0x0, 0x2}, 0x80, 0x0}, 0x5b4}], 0x1, 0x4004000) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x318, 0x100000c, 0x0, 0x1c0, 0xc0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "a2f3"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000480)={0x311e, 0xfffffffb, 0x1, 0xa43d, 0xec48, 0x7fff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000600)={'NETMAP\x00'}, &(0x7f0000000640)=0x1e) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x80811501, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000380), &(0x7f0000000500)=0x4) fspick(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', 0x1) r5 = socket(0x2, 0x80805, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40080480}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r6, 0x10, 0x70bd29, 0x24dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000040)={r7, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000540)={r7, 0x6, 0x20, 0x1930, 0x3}, &(0x7f0000000580)=0x18) 6.369291351s ago: executing program 6 (id=1962): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0x44, 0x0, &(0x7f0000001300)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001240)={@fda={0x66646185, 0x1, 0x1, 0x38}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/59, 0x3b, 0x1, 0x5}, @fd}, &(0x7f00000012c0)={0x0, 0x20, 0x48}}}], 0x54, 0x0, &(0x7f0000001380)="39d7aaf735978c87d45587bcb23cc86b2543a9ea0e83470923c20697d380fdd04464369687f02d9064877086d1fa51b0eaeb9b2353a1330ea7d56e93448b932a7aeba9792276e0825124ef56bada776f8144bc4c"}) preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000080)=@ng={0x4, 0x13, "2ffe6da6ffa56fb925"}, 0xb, 0x0) 5.974643873s ago: executing program 6 (id=1964): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @random}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r3, &(0x7f0000000280)=ANY=[], 0xff2e) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x7f3d, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x10}) io_uring_enter(r4, 0x742f, 0x77ae, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r9 = getuid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_getroute={0x70, 0x1a, 0x4, 0x70bd27, 0x25dfdbfd, {0xa, 0x14, 0x14, 0x3, 0x80, 0x1, 0xff, 0x0, 0x1a00}, [@RTA_UID={0x8, 0x19, r9}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x11, 0x5, r8}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x38, 0xf3, r8}}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x4, 0x8, r8}}, @RTA_PREF={0x5, 0x14, 0x43}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xa}}}, @RTA_MARK={0x8, 0x10, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 5.86116806s ago: executing program 7 (id=1965): bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x400) recvfrom$unix(r3, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000089c0)=[{{&(0x7f0000000400)=@qipcrtr, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)=""/57, 0x39}, {&(0x7f00000004c0)=""/63, 0x3f}, {&(0x7f0000000500)=""/168, 0xa8}, {&(0x7f00000005c0)=""/70, 0x46}, {&(0x7f0000000640)=""/135, 0x87}], 0x5}, 0xf704}, {{&(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000800)=""/162, 0xa2}, {&(0x7f00000008c0)=""/54, 0x36}, {&(0x7f0000000900)=""/4, 0x4}], 0x3, &(0x7f0000000980)=""/121, 0x79}, 0x5}, {{&(0x7f0000000a00)=@can, 0x80, &(0x7f0000000c80)=[{&(0x7f0000001100)=""/183, 0xb7}, {&(0x7f0000000b40)=""/20, 0x14}, {&(0x7f0000000b80)=""/230, 0xe6}], 0x3, &(0x7f0000000cc0)=""/86, 0x56}, 0x51}, {{&(0x7f0000000d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}}}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000000dc0)=""/35, 0x23}, {&(0x7f0000000e00)=""/197, 0xc5}, {&(0x7f00000025c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003600)=""/4096, 0x1000}, 0xa}, {{&(0x7f0000000f00)=@nl, 0x80, &(0x7f0000005780)=[{&(0x7f0000004680)=""/197, 0xc5}, {&(0x7f0000004780)=""/4096, 0x1000}], 0x2, &(0x7f0000001080)=""/70, 0xa1}, 0x4}, {{&(0x7f0000005840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000006b40)=[{&(0x7f00000058c0)=""/122, 0x7a}, {&(0x7f0000005940)=""/31, 0x1f}, {&(0x7f0000005980)=""/4096, 0x1000}, {&(0x7f0000006980)=""/179, 0xb3}, {&(0x7f0000006a40)=""/241, 0xf1}], 0x5, &(0x7f0000001040)=""/54, 0x36}, 0x4}, {{&(0x7f0000006c00)=@xdp, 0x80, &(0x7f0000007140)=[{&(0x7f0000006c80)=""/210, 0xd2}, {&(0x7f0000006d80)=""/202, 0xca}, {&(0x7f0000006e80)=""/188, 0xbc}, {&(0x7f0000006f40)=""/242, 0xf2}, {&(0x7f0000007040)=""/194, 0xc2}], 0x5}, 0x40}, {{&(0x7f00000071c0)=@x25, 0x80, &(0x7f00000076c0)=[{&(0x7f0000007240)=""/190, 0xbe}, {&(0x7f0000007300)=""/113, 0x71}, {&(0x7f0000007380)=""/210, 0xd2}, {&(0x7f0000007480)=""/101, 0x65}, {&(0x7f0000007500)=""/65, 0x41}, {&(0x7f0000007580)=""/105, 0x69}, {&(0x7f0000007600)=""/96, 0x60}, {&(0x7f0000007680)=""/37, 0x25}], 0x8, &(0x7f0000007740)=""/60, 0x3c}, 0x7}, {{&(0x7f0000007780)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f00000078c0)=[{&(0x7f0000007800)=""/184, 0xb8}], 0x1}, 0x7}, {{&(0x7f0000007900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000008980)=[{&(0x7f0000007980)=""/4096, 0x1000}], 0x1}, 0xa58}], 0xa, 0x2, 0x0) pipe(&(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec61060004400004000005000700", @ANYRES8=r3], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_init_net_socket$x25(0x9, 0x5, 0x0) 5.797443243s ago: executing program 5 (id=1966): r0 = socket(0xa, 0x3, 0xff) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000100)={0xa, 0x4e22, 0xf4, @mcast2, 0x2}, 0x17) 5.65747361s ago: executing program 4 (id=1967): ioperm(0xfffffffffffffffe, 0x7fffffffffffffff, 0x8000000000009) clock_getres(0x4, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010405000000030000000000", @ANYRES32=0x0, @ANYBLOB="03050000000000002c00128009000100766c616e000000001c00028010004cc8bbc66ebbe45843b1b37e8e80b2a904800c000803"], 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x24, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x210180, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0x8004510b, &(0x7f00000001c0)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a886ddb96648e582ff119644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 5.597083977s ago: executing program 6 (id=1968): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) read$msr(r1, &(0x7f0000000a00)=""/102400, 0x19000) getrlimit(0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x5402, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000840)=""/92, 0x5c}], 0x1}, 0x1}], 0x1, 0x2000, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r7, 0x8) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ac0)={0x5c, r4, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b}, 0x0, @random=0x6, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00'}, 0x94) 5.595807153s ago: executing program 5 (id=1969): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ee, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x40) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) syz_emit_ethernet(0x46, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='so@\xdc\xcd\xf8H-\xb8\x16u\x96\x15\f\xa2ce', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fp\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00'/119, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000001c0)={0x4, "563e359cde7ccdca47d10000dc9b00000000000000800a00000000007310717d", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000180)={"2486970284ed923431d400001f000000a9201be943f06f2f4000", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000240)={"8c5d2ddcdba01c2b0e062db91ec2209d789c4dcce0ab20c5fa0b8a204e3b856a", r7}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x3a) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, &(0x7f0000001a40)={&(0x7f00000019c0)=[{&(0x7f0000000080)="2498d0d7632484e91d4b031d427fb8348a01d5dabee7", 0x16}], 0x1, 0x6, 0x0, 0xfffffffffffffff8, 0x7ff, 0x7, 0x7, 0x3}) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000140)="2e450f7826fefe64460f326466440fc730e11d450f0119c4e23d160bf3450fa6d0440f01cf", 0x25}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.946863546s ago: executing program 4 (id=1970): socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x5, 0x0, 0x7043}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@getneightbl={0x14, 0x42, 0x4, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40040c4) 4.716079303s ago: executing program 7 (id=1971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x200040d0}, 0x10048810) 4.6436258s ago: executing program 7 (id=1972): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pipe(&(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x337a4002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgrp(r1) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x7cb7562f2d67) socket(0x400000000010, 0x3, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi3\x00', 0x100180, 0x0) ioctl$COMEDI_SUBDINFO(r5, 0x80486402, &(0x7f0000000200)) 4.640578816s ago: executing program 0 (id=1973): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) epoll_create(0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newtaction={0x4098, 0x30, 0xcac229faa96ee7df, 0xffffffff, 0xfffffffd, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4000, 0xffffffff}}}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}, {0x15c, 0x1, [@m_bpf={0x30, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x5, 0x6, '^'}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x128, 0x1a, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0xee, 0x6, "7cf2759e69a90711151def6937ea42185b1df43ba3ca06017bfe30823d1104a2d6feac75f97134563b26a41110d7ead401e2ae988e3dc1f6aa8b10ef13ed25344795db6e1a9d6080b1634dca892c679482c8800a91c639cc41d26b873ae6cb9e4f587646a110ce99672d7e246a0e7567d098a4bd112e2bb912da9d2c7cc21ec847f915f2135582c941bdf997bb0932efb6d99e5200e53b8bf9b46b61e9133aa548b887b9cba2cefebf01e733f954cd7934c9065bb03abd24dd09a036b84d23b14c48f2439d92e20033e0a9ffa99008c7ef918815a60f158a9e4786911d72ea0f0ff4d5d3bf0aa45a00d9"}, {0xc}, {0xc}}}]}, {0x118, 0x1, [@m_mirred={0x114, 0x14, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0x4, 0xffffffff, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x6, 0x4, 0x3, 0x9}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x10001, 0xffffffffffffffff, 0x80000000, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2400000, 0x78ed, 0x7, 0x3, 0x7}, 0x2}}]}, {0x65, 0x6, "8564a101dd4ba1a8d512ec7584cd77c1154bfb3ec1d73b1f5df89f336377dfbb93c14b0a3be5ad0f80788380879e8eae73aba7ac0b528c115eca32f12758310c2b3d7c2f0e8dd8e2aa1178b326cf922fdcd05f43f10e4de088ad7da2bd56e9b25b"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x20dc, 0x1, [@m_pedit={0x20d8, 0x10, 0x0, 0x0, {{0xa}, {0x1fbc, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x98, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x9, 0x2, 0x9c386efd20f1885, 0xfff, 0x133}, 0x9, 0xf7, [{0x7, 0x0, 0x40, 0x3, 0x3, 0x8}, {0x6dc, 0x641b, 0x7, 0x0, 0x0, 0x2}, {0x7f, 0x2c91, 0x8, 0x6, 0x80, 0x74}, {0x400, 0xff46, 0x3000000, 0x5, 0xd, 0x1}]}, [{0x3, 0xe0000000, 0x4, 0x3, 0x8, 0x80000001}, {0x1, 0x9fed, 0x4, 0x5, 0xdf11, 0xd}, {0x0, 0xb907b1c4, 0x5, 0x0, 0x9, 0x6}, {0x7fff, 0x55c, 0x14000, 0x0, 0xadbe, 0xbb53}, {0x1, 0x8000, 0x0, 0x6, 0x0, 0x8}, {0xfffffffd, 0x324, 0x0, 0xe7, 0x8, 0x2}, {0x7f6f, 0x6, 0x401, 0x5, 0xf, 0x2}, {0xb, 0x3, 0x5, 0x6b7, 0x1, 0x6}, {0xf4, 0x58de, 0xf, 0xffffffff, 0x6, 0x1}, {0x10000, 0xc09b, 0x0, 0x1000, 0x4, 0x101}, {0x7, 0x0, 0xffff, 0x6, 0x400, 0x8}, {0x10001, 0x2, 0x80000000, 0x70, 0x7, 0x2}, {0x4, 0x4, 0x8, 0xe63, 0x4, 0xa6464c1}, {0x1, 0x800, 0x8, 0x5, 0x4, 0x6}, {0x400, 0x6c, 0x3f, 0x3, 0x9, 0x5}, {0xd9b, 0x9, 0x2, 0x5, 0x2, 0x8001}, {0xfffffff7, 0x8, 0xffffffff, 0x10001, 0x1, 0x2}, {0x2400, 0x8, 0xd, 0x4f, 0x2}, {0x0, 0xfffffff7, 0x0, 0x1000, 0x9, 0x40}, {0x8, 0xdf4, 0xfffffffd, 0x6, 0x2, 0x5}, {0x9, 0xffff176a, 0x7, 0x4, 0x8, 0xc6}, {0x2, 0x1, 0x3e, 0x3, 0x7, 0x1}, {0x9, 0xc, 0x1c400000, 0x7, 0xc, 0xfffffbff}, {0x99, 0x8, 0xc0a9, 0x51f1, 0x3}, {0x10, 0x1ff, 0x101, 0xb, 0x5, 0x2}, {0x4, 0x80, 0x0, 0xd18c, 0x7}, {0x4, 0x79, 0xe23, 0x2, 0x8, 0x9}, {0x0, 0x7f2, 0x1, 0x4, 0x2, 0x4}, {0x1, 0x9, 0x6, 0x6, 0x4, 0x6}, {0x9, 0x0, 0x2, 0x3, 0x8000}, {0x8, 0x3, 0x4, 0xf, 0x3, 0x870}, {0x9, 0x5, 0x0, 0x48, 0x2, 0xfffffffb}, {0xff, 0x81, 0x7, 0x0, 0x4, 0x6}, {0x9, 0x7, 0x1, 0xdb, 0x4, 0x200}, {0x2, 0x10001, 0x5, 0x3, 0x40, 0x6}, {0xe65a, 0x8, 0x8000, 0x8, 0x6, 0x50}, {0x4, 0x1, 0x4, 0x401, 0x4, 0x9}, {0xc, 0x5, 0x6, 0x3, 0x9, 0x78}, {0x3, 0x7, 0x101, 0x3f00, 0x2, 0xd}, {0x2c, 0x1, 0x8, 0x0, 0x401, 0x3}, {0xfffffffd, 0xb9c5, 0x980, 0xffff, 0x4a}, {0x4, 0x80000000, 0xfffffffd, 0x9, 0x40, 0x2}, {0x9, 0x0, 0x100, 0x3, 0x98, 0x7}, {0xac, 0x9, 0x429, 0x9, 0x1, 0x400}, {0x8, 0x1ff, 0x2, 0xcc, 0x200495, 0xb5}, {0xf, 0x7, 0x8, 0x9, 0xfffffffb}, {0x80000001, 0x6, 0x7, 0x2, 0x5, 0x3}, {0x6, 0xffff, 0x9, 0x4, 0x3bd, 0xcef}, {0x2, 0x6, 0x5, 0xb, 0x7, 0xc}, {0x2, 0x6, 0x8, 0x2, 0x5, 0x7}, {0x3, 0x8, 0x8, 0x6, 0x56f, 0x1}, {0x6, 0x8, 0x4, 0xb47b, 0x3, 0x3}, {0x8, 0x7fa, 0x800, 0xaa6, 0x3, 0xffffffcb}, {0x0, 0x1, 0x2, 0x1, 0x90, 0x80}, {0x1, 0x3152, 0x5, 0x7, 0x6}, {0x1, 0x5, 0xa67, 0x1, 0x9, 0x9}, {0xd4, 0x6, 0x0, 0x3f33, 0x9, 0x7}, {0xbf, 0x5, 0x8, 0x9, 0x8, 0xb}, {0x100, 0x0, 0x7, 0x0, 0x3, 0x3}, {0xcfb2, 0x7, 0x6, 0x7ff, 0x7220, 0x3ff}, {0x7aa6, 0xe, 0x2e6, 0xffff, 0x2, 0xde7b}, {0x7, 0x101, 0x9, 0x6, 0x868, 0x5bab}, {0x6, 0x8, 0x94f7, 0xe, 0x2bd}, {0xffffffff, 0x7fff, 0xa834, 0x10001, 0xbc0, 0x8}, {0x7, 0x0, 0x5f, 0x8001, 0x8ec1, 0x4}, {0x3, 0x80000000, 0x6, 0x4, 0x25, 0xffff}, {0x7fff, 0x9, 0x81, 0x7, 0x34c33c00, 0x3efe}, {0x0, 0x4, 0x40, 0x5f2c7b7a, 0xb7, 0x1}, {0x3, 0xffff, 0x2, 0x80000000, 0x9, 0x8}, {0x8000, 0x1, 0x4, 0x1c00000, 0xd, 0xc}, {0x7, 0xfa, 0x2, 0x7, 0x3, 0xb4ce}, {0x6, 0x7, 0xfffffff6, 0x8, 0xb0, 0x8}, {0x35a, 0xaf10, 0x4, 0x101, 0x4}, {0x81, 0x8, 0x4, 0xc551, 0x1200, 0xedd1}, {0x4, 0x4, 0x2, 0x4, 0x7, 0x3}, {0x5, 0x6, 0x1, 0x0, 0x1000, 0x1}, {0x8, 0x8, 0x4, 0x2, 0x7, 0x48}, {0x3, 0x7, 0x9, 0x2, 0xfff, 0x6}, {0x9, 0x3, 0x8, 0x7, 0x2, 0x5}, {0x7, 0x2, 0x1b00000, 0x0, 0xd}, {0x8, 0x101, 0x8, 0x2, 0x2, 0xac}, {0x6, 0x35, 0x7, 0x8, 0x7, 0x1}, {0x8, 0x3, 0xf, 0x80000001, 0x1399, 0x3}, {0x9, 0x56, 0x2, 0xc9d4, 0xac, 0x9}, {0x7, 0x3, 0x2, 0x3, 0x8, 0x10}, {0x80f, 0x3, 0x7fa, 0x7, 0x8, 0x1}, {0x4, 0x4, 0x1, 0x4100, 0xb, 0xffffff25}, {0x8, 0x3, 0x2, 0x57b1, 0x10001, 0x5}, {0x1000, 0x7, 0x5, 0x6e8e938, 0x6, 0x5}, {0xe, 0x100, 0x1534, 0x80000001, 0x4, 0x5}, {0x6, 0xfffffffa, 0x4, 0x400, 0x3, 0x1}, {0x0, 0x0, 0x6, 0x7, 0x1, 0x4}, {0x0, 0xc8, 0x8, 0x1, 0x2, 0x8}, {0x8, 0x56d, 0x0, 0x4, 0xc, 0x19d}, {0x6, 0x2, 0x4, 0xb, 0x8001, 0x80000000}, {0x2868d51, 0x401, 0xfffffff8, 0x9, 0x8, 0xffffffff}, {0xbc6, 0x8, 0x800, 0xc574, 0x0, 0x2}, {0x325f, 0x1, 0x4, 0x2, 0x38, 0x2}, {0x8, 0x4, 0x0, 0x0, 0x7fffffff, 0x158}, {0x1, 0xd6d, 0xffffffff, 0x78, 0xeb4, 0x9}, {0x3, 0x6, 0x7, 0x1, 0x7ff, 0x10}, {0x1, 0x40, 0xc, 0xb7, 0x0, 0x8}, {0x7, 0x6, 0x96, 0x10001, 0x7ff, 0x80}, {0x3ff, 0x9, 0xfffffff8, 0x2, 0x776, 0x2}, {0x6, 0x51, 0xffffff66, 0x9, 0x3}, {0x7ff, 0x4, 0x7, 0x3, 0x4, 0x2}, {0x7, 0x3, 0xd96a, 0x10000, 0x0, 0xd}, {0x5, 0x7ff, 0x1, 0x5, 0x500000, 0x4}, {0x4, 0x8, 0x5, 0x8, 0x7, 0x80000001}, {0xffff, 0x68, 0x8, 0x0, 0xee, 0x36}, {0x6, 0x8, 0x659210bc, 0x0, 0x7d, 0x334}, {0xe7be, 0x6, 0x401, 0x1, 0x0, 0xf}, {0x81, 0xf, 0xe, 0x81, 0xfffffff6, 0x6ff1}, {0x8, 0x7, 0x7, 0xb8a9, 0x101, 0xf}, {0xd, 0x0, 0x2, 0xf7, 0xffffffff, 0x7fff}, {0x9, 0x2, 0xb, 0xfb20, 0x101, 0x9}, {0x4b2, 0x3, 0x1f70d8a3, 0x8, 0x3, 0x100}, {0x5, 0x4, 0x508, 0x80000000, 0x675c, 0x94}, {0x7bdea433, 0x0, 0xa, 0xfffffff9, 0x4, 0x6}, {0x3, 0x2, 0x5, 0x5, 0x0, 0x1}, {0x5898, 0x7, 0x6, 0x0, 0xcd1, 0x3}, {0x6, 0x40, 0x3ff, 0x1, 0x1, 0x800}, {0xc, 0x4, 0x1ff, 0xff3a, 0x5, 0x1286}, {0x101, 0x7, 0x5, 0x315b, 0x0, 0x2}, {0x9, 0x1, 0x3, 0x4, 0xb, 0x5}, {0x0, 0x3, 0x9, 0x10000, 0x1, 0xff}, {0x0, 0x2, 0x6, 0x71c9, 0x6, 0x7}, {0x4, 0xd0e, 0x3, 0xfffffffc, 0xfffffffe, 0xfff}], [{0x4}, {0x4}, {0x1, 0x1}, {0x5}, {0x4}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x5ae96fa967020009}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x49b3419f1f500e1c}, {0x2}, {0x5}, {}, {}, {0x4}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x2}, {0x5}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x971df0fef51ef97c}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x4}, {}, {0x5}, {}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x130, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x4}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xf2f859a238c149a}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x4}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x4, 0x2, 0x8, 0x4, 0x3}, 0x38, 0x1, [{0x7, 0x1, 0x7322, 0x2, 0x4, 0x4}, {0x6, 0x3828, 0x4, 0x5, 0x8, 0x2}, {0x1ff, 0xdc4, 0x8, 0xffffffff, 0x7f, 0x7fff}, {0x100, 0x618, 0x555, 0xc, 0xfffffffc, 0x2}, {0x0, 0x1, 0xff, 0xa, 0x6, 0x2}, {0x9, 0x7, 0x3, 0x548c, 0x3e3d, 0x7}, {0x7, 0x8, 0x9, 0x100, 0xfffffffe}]}, [{0x0, 0x80000001, 0xfff, 0x2, 0x3ff, 0x40}, {0x8, 0x7ff, 0x0, 0xfffffff9, 0x0, 0x2}, {0x5, 0x8, 0x80000000, 0xfffffff8, 0x5, 0xf}, {0x1, 0x7, 0xa, 0x3, 0x8, 0x85e4}, {0x2, 0x4, 0x4, 0x0, 0x184d, 0x1}, {0x5, 0x6, 0x7fffffff, 0x3, 0x4, 0x3}, {0xffffffff, 0x4ee0, 0x5, 0x65a, 0x80, 0x8}, {0x4, 0x1, 0x1, 0x3, 0x1ff, 0x9}, {0xe, 0x2, 0x8, 0xffff, 0xef19, 0x2}, {0x3, 0x0, 0x9e, 0x86a, 0x0, 0x5}, {0x5cb, 0xff, 0xffffffff, 0x9, 0x9, 0x1}, {0x3fb, 0x7f, 0x1, 0x3, 0x3, 0x7bad}, {0x4, 0x3ff, 0xffff30c3, 0x7, 0x8000, 0x4239}, {0xffffff8b, 0xb91, 0x80000001, 0x7, 0x81, 0xe7bf}, {0x1, 0x7fffffff, 0x8, 0xa943, 0x6, 0x3}, {0x7, 0x8, 0x0, 0x5, 0x4, 0x5}, {0x4ce, 0xdba6, 0x2, 0x92, 0x1, 0x10001}, {0x1, 0x7, 0xff, 0xe, 0x53, 0x2}, {0x6, 0x47d, 0x3, 0x2, 0xe, 0xa0}, {0x2, 0xfa29, 0x8, 0x400, 0x1000, 0x2}, {0xffffffff, 0x9, 0x2, 0x3575, 0x2, 0x9}, {0xffff, 0x1, 0xf, 0x6, 0x8, 0x8934}, {0x1ff, 0x2, 0x1, 0x100, 0x6, 0x800}, {0x16d3, 0x6d95, 0x3, 0x7fff, 0x400, 0x6}, {0x4, 0x1, 0xbff9, 0x6, 0x8, 0xfffffff7}, {0xffffffff, 0xa, 0x7, 0x400, 0x6, 0x6}, {0x6, 0x86, 0x1, 0x5, 0x8, 0x9}, {0x5, 0xa2, 0xd, 0x1, 0xffffb421, 0xbe53}, {0x1, 0x3b, 0x6, 0x10000, 0xa, 0x7b2}, {0x1, 0x40, 0xff, 0x4, 0x3}, {0xa2, 0x9, 0x800, 0x4, 0x3, 0x100}, {0x2, 0x8, 0x0, 0x1, 0x400, 0x4fce}, {0x18, 0x5, 0x4, 0x48, 0x8, 0x3}, {0xffffff81, 0x9, 0x125, 0xff, 0x6, 0x80000001}, {0xfffffe00, 0x5, 0x8, 0x4, 0xffffffff, 0x3}, {0xfff, 0x7ff, 0x4, 0x8, 0x2, 0x400}, {0x8, 0x0, 0x5, 0x1000, 0x400, 0x8}, {0x0, 0x5e9c080c, 0x9d, 0x3, 0xffffffff, 0x7ede}, {0xf95c, 0x80000000, 0xa, 0x6c, 0x33, 0x200}, {0x7fffffff, 0x200, 0x8, 0x9, 0x7ff, 0x6}, {0x0, 0x1, 0xf3, 0xfffffffa, 0x9, 0x9}, {0x10, 0x7, 0xc, 0x9, 0x3ff, 0x7800}, {0x42, 0x400, 0x7, 0x6, 0xcfe, 0x6931}, {0xe3, 0x0, 0x7fff, 0xbe, 0x294, 0x5}, {0x1, 0x7, 0x8, 0x6, 0x2eb, 0x4}, {0x4, 0x0, 0x8, 0x27, 0x0, 0x4}, {0x8, 0x9, 0x0, 0xfffffffc, 0x2, 0x7}, {0xfffffffc, 0xef, 0x7fff, 0x8, 0xc, 0x2}, {0x0, 0x7fff, 0xa2aa, 0x9, 0x3, 0x80}, {0x9, 0x0, 0x0, 0x0, 0x6ef, 0xca}, {0x2, 0xffff, 0x9, 0x800, 0x10, 0x15}, {0x1, 0x4, 0xa, 0xffff, 0x40, 0x400}, {0x3e20194a, 0x9, 0xfffffff8, 0xfffffff7, 0x7, 0xfffffffe}, {0x6, 0x800, 0x7fff, 0x50b11d39, 0x36944000, 0x7}, {0x2, 0x3, 0x3, 0x9, 0x1, 0x2}, {0x3, 0x9, 0xffff8000, 0x7f, 0x4, 0x5}, {0x80000000, 0x8, 0x9, 0xfffffe01, 0x0, 0x4}, {0x8, 0x3, 0x8, 0x3, 0x7, 0x9}, {0xfff, 0x2, 0x6bf9, 0x3, 0x5, 0xb}, {0xfffffe01, 0x8, 0x4, 0x8000, 0x6}, {0x3e8, 0x8, 0x6, 0x7, 0x21, 0x767}, {0x10001, 0x7, 0x90d, 0x9, 0xffffffff, 0xd}, {0xffff, 0x9, 0x8, 0xe21, 0x4, 0x8}, {0x8001, 0x5, 0x2, 0x4add, 0xfffffffc, 0x6}, {0xfffffff9, 0x7fffffff, 0x7, 0x7, 0x6, 0xccf9}, {0x78, 0x8ef3, 0x95b4, 0x154, 0x7f, 0x4}, {0xe, 0x8001, 0xd, 0x63, 0xc, 0x9}, {0xca5, 0x8001, 0x7, 0x4a60a7e0, 0x0, 0x7}, {0x2b, 0x7, 0x3, 0x5, 0x8001}, {0x1ff, 0x62, 0x8, 0x6, 0x2, 0x8000}, {0x2, 0x7fff, 0x2, 0x9, 0x6, 0x3}, {0x2, 0x0, 0x2, 0x7, 0x9, 0x10001}, {0x1000, 0x5, 0x28b, 0x37af, 0x9, 0x6}, {0x48, 0x2, 0x3, 0xa97, 0x8, 0x1000}, {0x6, 0x32898436, 0x2, 0x4, 0xfffffffc, 0x8e}, {0x6000000, 0x1, 0x2, 0x6, 0x74b, 0x7}, {0x3, 0xe, 0x8, 0x2, 0xfffffffe, 0x8}, {0x9, 0xb2a, 0x4, 0x7, 0x45a8, 0x5}, {0x55a6, 0xffffff81, 0x1000, 0x4a, 0x5, 0x1e1a}, {0x4, 0x6, 0x10000, 0x7, 0x6, 0xb8}, {0xc, 0x4, 0x5, 0x7, 0x0, 0x7}, {0x10, 0x60, 0x10001, 0x5c6, 0x6, 0x3}, {0x3, 0x401, 0xada, 0x0, 0x3, 0x2}, {0x3ff, 0x35, 0x7f, 0x480000, 0x2, 0x5}, {0xbc2, 0x3, 0x1, 0xff, 0xffffffff, 0x4}, {0x7, 0x1, 0x3aee, 0x0, 0x4, 0x800}, {0x9, 0xc, 0x0, 0x9b6b, 0x10, 0xaa}, {0xfffffff8, 0x7fffffff, 0x9, 0xfffffffe, 0x2000000, 0xfffffc00}, {0x5, 0xbd, 0x7, 0x7, 0x800000, 0x8000}, {0x8, 0xfffffff4, 0x0, 0xffffffff, 0xfffffff8, 0xfffffffc}, {0x80, 0x8001, 0xa, 0x80000001, 0x8, 0x4}, {0x0, 0x7a35, 0x997e, 0x8, 0x1, 0x1}, {0xfffffffe, 0x3fa, 0x3, 0x200, 0x8, 0x6}, {0x4, 0x8, 0x80000001, 0x5, 0x8, 0x1}, {0x9, 0x4, 0x7, 0x100, 0x5, 0x5}, {0x6, 0x1, 0x10, 0xfffffff8, 0x7, 0xa}, {0x3, 0x7, 0x9, 0x8, 0x1, 0x1}, {0xff, 0x8, 0x7f, 0xfffffff7, 0x0, 0xef}, {0x0, 0x8, 0x5, 0x136, 0x5, 0xfff}, {0x983, 0x28000, 0x8, 0x8, 0x0, 0x8}, {0x3, 0x40, 0x7, 0x6, 0x6, 0xfffffff9}, {0x1, 0x5, 0x80000000, 0x80000000, 0x4, 0x10}, {0x3, 0x7fff, 0x0, 0xfb, 0x7, 0x199f}, {0xfffffffa, 0x7032, 0x1, 0x7fff, 0x401, 0x7}, {0x1ff, 0x7, 0x6, 0x2, 0x3, 0x4}, {0x3, 0x1, 0x5, 0x1, 0x3e4, 0x81}, {0xb64, 0x1ff, 0x7, 0x5, 0x0, 0x3}, {0x9, 0x8, 0x9848, 0xffffff0f, 0x3, 0x1c}, {0x8, 0x322c, 0x1, 0xff, 0x3, 0x5}, {0xfffffffa, 0x0, 0x5, 0x88, 0x8, 0x7ff}, {0x4, 0x9, 0x8, 0x80000001, 0xe, 0x101}, {0x7fff, 0x2, 0xb5, 0x5, 0x4, 0x5}, {0x6, 0x4, 0x5, 0xf, 0x9, 0x1}, {0xfffffffe, 0x777, 0xb4, 0xfffffffd, 0x63, 0x6ac}, {0x0, 0x8, 0x3, 0x7, 0x3, 0x8}, {0x6, 0xa, 0x8, 0x8000, 0x8, 0x5}, {0x455, 0x1, 0xfffffffc, 0x1, 0x7f3, 0xfffffe01}, {0x1ec00, 0x6, 0x5, 0x5, 0x3, 0x81}, {0x8000, 0xb, 0xfffffff9, 0x4, 0x8, 0x345b}, {0x8001, 0x5, 0x8, 0x9, 0xfffffff9, 0xfff}, {0x1, 0x6, 0x14, 0x3ff, 0xf, 0x9}, {0x9, 0x1, 0x7, 0x8, 0x4, 0x8001}, {0x6f52, 0x0, 0x0, 0x1, 0x10001, 0x8f5}, {0x0, 0x2, 0x8001, 0x3, 0xffff, 0x8}, {0x9, 0x1000, 0x0, 0x5, 0x5, 0x6}, {0x1000, 0x8, 0xff, 0x3ff, 0xc00, 0x8}, {0x8001, 0x7, 0xfffffffa, 0x1, 0x7, 0xfffffdf1}, {0x9, 0xf7, 0xfffffff7, 0xa55, 0xfffffffc, 0x800}], [{0x0, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x1}, {0x3}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {}, {0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x2}, {0x1}, {}, {}, {0x3}, {0x7}, {0x0, 0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x48, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0xf1, 0x6, "a0b2024550c1d2a109d9b188b5ea627a45868d637615c186e59e04389521d719a4d4cd75440af7a26ea6a68ed4c6553df5c8a7f0c88ed8907641d58781a3f6f7c0fd96797a2aa4fae882616c322a195c8eee0a1c5999ed5bbed54f97c8549706cceef56464676340e6311f76cd7257b77e5a827ee51deac51aac000f9b43d6955c8a7eee45e2fc6692b970e0e426dd60161056420dd46fbed95188b5d9bd182bcdf4d779a5a5b4e3b72927e0e68e62782c7d9330131b64f2a16a23c0f10820c511135ddfdcbbe703b2640dbf9668b90bdece8d8b41ba68ee1b9791ab22053e5f5fb716e96f8ea7b8c089445c6d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x1ce8, 0x1, [@m_simple={0xe8, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x61, 0x4, 0x0, 0x84, 0x80}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x1, 0x0, 0x7fffffff, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x7c, 0x6, "4d097f797eee9200e33d9a1ad936a0799d410a3223c80bd1ae928edd3c31ac3ae4efe5d03e51f9ef57bf726cc9675d72903355eb8d4e4db0004d6e161875a243ceb54148256ea44e1f292a71aa5f42d4b09e9d1c647d40ae63272df1226c401d41232fb34c72e997a466f0a2b66abc09ee0bccfe10551324"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x154, 0x11, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7a0}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0xcc, 0xffffffffffffffff, 0x401, 0x5}}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1ed}]}, {0xe9, 0x6, "68c3f375e75eec0eb70e9fc5aba4b70b0f5ee42e42e744e89906e91d49c6763a7ea6ca093cb025c56d52e248f1b05555ebe7f30c585b1394c11eb767aa3eef578b6fb162fe02a304d8117905ab1b0e1e8fd511c383bae1be14e9d6d5f72dbdaaacd640560537ee233f4f90487ff32fe4dee89867239ca77bade23733733a677ae50efe321eb873ab9b7d90ab5467582026699af01031135705a1fbbe8bf5cc5251b228c270257dc7d54edd124899e9ef6a027bd3d19b46b28ded10282d4501fd94ca3d5ab8baf5e81f07618d44030590946a84abc927a8570202d9008bfe2df5d39e1b5569"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x208, 0xc, 0x0, 0x0, {{0x7}, {0x150, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xab, 0x6, {0x4, 'nat\x00', 0x4, 0x3, "9aea777dae6734d37d75236b4370078aaa60176cec02443b363ed02ab008811d82c6a37ae8e9b628f7c5758b60c5c513e2ddf5a7838abb9be7dd827a3bf51dbf62904880a03e669bae46450af856f19308fb30e833c1a97e925ab14201d4fabcd00922dfca7d91caca86ac6fa0afcf2fbb82e1aa22b323bd75bdf2460494553014"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TARG={0x2a, 0x6, {0x100, 'filter\x00', 0xfc}}]}, {0x92, 0x6, "fdd9bf896f93de76d89b2dfc2bf81974bc33c5540e0ad0a4136aca736e0f2502f874037601ea885c77083cab73d2acfc5102f2117b2d3ed06d68f1e7834a78451099db7098d0fd99bb3cf90871df7fddee9ceea4d2d6510e83fa9f060918c8a1fdd814794f81646a779aa6f9ea48a94b4176549447c5185c792677f70aceffee7c25c1e398ab76876fd9cdda4fa3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x8c, 0x4, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x2d, 0x6, "bacf15d22c6dba8d8534fa6cd08f417bd47c5d7dcc9318ae7973fc4f1a7958a50d035da2cc27f4e200"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5}}}}, @m_police={0xc7c, 0x5, 0x0, 0x0, {{0xb}, {0xc38, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x100, 0x2, 0x3, 0x2, 0x4, 0xcc, 0x1000, 0x6, 0x0, 0xd6c, 0x10000, 0xd6, 0xaf, 0x9, 0x5, 0x4, 0xfffffffa, 0x97d, 0x31c5, 0x15, 0x9, 0x7, 0x2, 0x80000000, 0x200, 0x0, 0x5a, 0x3, 0xfffffffd, 0x401, 0x9, 0x10000, 0xf5, 0x4, 0x4b8fded, 0x8, 0x7, 0xd4, 0x2, 0x4ba, 0x1, 0x7fff, 0xfffffff8, 0x7ff, 0xdcd, 0x5, 0x3ff, 0x3, 0x41, 0x3ff, 0x834, 0x4, 0x0, 0x80000000, 0x9, 0xffffffff, 0x3, 0x8, 0xd, 0xb98c, 0x0, 0xb83, 0x7, 0x2, 0x5, 0x8, 0x3, 0xfffffff8, 0x8, 0x10000, 0xe0f8, 0x1ff, 0x3, 0x6, 0x7, 0x9, 0x3, 0x9, 0x2, 0x8000, 0x6, 0x3, 0x7836, 0xd775, 0x6, 0x1000, 0x6, 0x2, 0x7, 0x9, 0x6, 0xffff, 0x400, 0x4, 0xffffffff, 0x3, 0xe, 0x4, 0xffff, 0x4, 0x5, 0x8, 0x0, 0x6, 0x7, 0x6, 0xfff, 0xf0000000, 0xe, 0x2, 0x3, 0x400, 0x4, 0x1000, 0x8, 0x5, 0x4, 0x6, 0xb, 0x7fff, 0x8, 0x8, 0x3, 0x3, 0x1e65, 0xd, 0xb, 0x2, 0xff, 0x1, 0x0, 0x8, 0x1, 0x5c5, 0x8, 0x2, 0x4, 0x6, 0x9, 0x5, 0x8, 0xfffff473, 0x400000, 0x2, 0xff, 0x2, 0x4, 0x2d27, 0x3, 0x0, 0x0, 0x100, 0x6, 0x1, 0x5, 0x8, 0x2, 0x8, 0x7, 0xe5, 0x5, 0xfaac, 0xf909, 0x36, 0x2, 0x400, 0xffffffff, 0x5, 0xfa, 0x0, 0x6, 0x10001, 0xfff, 0x4, 0x7fffffff, 0x7, 0x1, 0x7, 0x10000, 0x0, 0x8, 0x6, 0x8, 0x7, 0x5, 0xccfc, 0x7, 0x3, 0x277, 0x1, 0x10000, 0x5, 0x3, 0x916, 0x1, 0x6, 0xa3, 0x7, 0x100, 0x1, 0x0, 0x4, 0x7f, 0x2, 0xb1cb, 0x7fff, 0x4, 0x5, 0x0, 0x2, 0xfa, 0x3, 0xa, 0xb1a, 0xfdf, 0x9, 0x9, 0xc5, 0x6, 0xd, 0x0, 0xdcb, 0x1, 0x7, 0x8, 0x10, 0x0, 0x1, 0xbd, 0x2, 0x8000, 0x2, 0x3ff, 0x7, 0x401, 0x1, 0x7, 0x3, 0x9, 0x7fff, 0x8, 0x4, 0x2, 0x6d, 0xe81, 0x9, 0x4, 0x8, 0x8, 0x3495, 0xbf, 0x3c0e6f61, 0x3, 0xad0, 0x40]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xdead}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x3faf8004, 0x6, 0x3ff, 0x10000, 0x8, 0x8, 0x100, 0x0, 0xffffffff, 0x9, 0x9, 0xfff, 0x6ba0, 0x5, 0x200, 0x3, 0x7, 0x80000000, 0x6, 0x9, 0x7, 0xa, 0x52a, 0xb, 0xd, 0x6, 0xffff, 0xc098, 0x3, 0x7, 0x9, 0x9, 0x9, 0x0, 0xff, 0x4, 0xffffffff, 0x6, 0xb, 0x200, 0x9, 0xcbb, 0x37f0, 0x10001, 0x7, 0x74e7, 0x7, 0xf, 0x0, 0x6, 0x3, 0x25, 0x800, 0x1c, 0x893, 0x8, 0x8, 0x7, 0x7, 0xa, 0x2, 0x9, 0x3bd, 0x200, 0xffff, 0x40000000, 0x809, 0x9, 0x40, 0x659e, 0x5, 0x4080, 0x4, 0x9, 0x6, 0x525, 0x8, 0x1, 0x36, 0x2, 0x5, 0x3, 0x7, 0x5, 0x3ff, 0x1, 0xff, 0x2, 0x5, 0x1, 0x8, 0x3ff, 0x5, 0xd, 0xfffffff8, 0x0, 0x80000001, 0x1000, 0x5, 0xe, 0x3, 0x3ff, 0x0, 0x8, 0xf3f6, 0x30000000, 0xfffffff3, 0x3, 0xfffffffb, 0x3ba2, 0x0, 0x0, 0xffff0ba0, 0x4, 0xa, 0x7ff, 0x8, 0xd, 0xffff, 0x101, 0x4, 0x8, 0xe, 0x8, 0x80000000, 0xf, 0x778144d4, 0x9, 0x9, 0x7, 0x7, 0x8, 0x8, 0x0, 0x7, 0x0, 0x9, 0x0, 0x4, 0x7, 0x0, 0x9, 0x0, 0x1d, 0xfffeffff, 0x5, 0xb08, 0x800, 0x3, 0x1ff, 0x3413, 0xb7, 0x4, 0xfffffffa, 0x1, 0xfffffff7, 0x9, 0x0, 0x1, 0xfffffff7, 0x2, 0xfffeffff, 0x0, 0x3, 0x0, 0x0, 0x400, 0x9, 0x1ff, 0x4, 0x5, 0x8, 0x0, 0x101, 0x5a0, 0x9, 0x1, 0x2, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x433e96e3, 0x2, 0x5, 0x2, 0x6528, 0x1, 0x4, 0x5, 0x3, 0x7, 0x3, 0x3, 0xfd, 0xff, 0xfffffffd, 0x3, 0x6, 0x98d5, 0x185, 0xa4c, 0x3, 0x40, 0x80, 0x4, 0x2, 0x51, 0x80000000, 0x4, 0x9, 0x70000, 0x7, 0x4, 0x8000, 0x101, 0x6, 0x4, 0xaf, 0xfffffffb, 0x6, 0x7fffffff, 0x1d9, 0x5fb4, 0x4, 0xd, 0x680, 0x0, 0x40, 0x2, 0xb3fb, 0x4, 0x4, 0x5, 0x6, 0x1, 0x5, 0x0, 0xa, 0x7, 0x4, 0x1, 0x3, 0xffffb42b, 0x0, 0xfffffffb, 0x6, 0xfffffbff, 0x2, 0xfff, 0xff, 0x200, 0x1, 0x36]}], [@TCA_POLICE_RATE={0x404, 0x2, [0xd9, 0x7, 0x2, 0x1, 0x7, 0xa5, 0x8001, 0x63, 0x8000, 0x80, 0x7, 0x3, 0x316, 0x9, 0x66a, 0xd6, 0x9, 0x1, 0x9, 0x3, 0x5, 0x400, 0x8, 0x5, 0x1, 0x40, 0x5, 0x5, 0x5, 0x5, 0x100, 0x3, 0x2, 0x1, 0x317, 0x6, 0x200, 0x1, 0x3, 0x4, 0x7f51, 0x5, 0x6, 0x6, 0x8, 0x2, 0x9, 0x0, 0xfffffff8, 0x4, 0x4, 0x5, 0x80000001, 0x9, 0x6, 0x10001, 0x3, 0xfff, 0x5, 0x8, 0xe5, 0xffffff57, 0x0, 0x98, 0xff, 0x1000, 0x8, 0x2, 0x7, 0x2e04, 0x1, 0x401, 0x2, 0x5, 0x1, 0x7, 0x92, 0x31, 0x6b, 0x5, 0x1, 0x7, 0x6, 0xe2ca, 0x8, 0x2, 0xc, 0x5, 0x800, 0x3, 0x4b9, 0x4, 0x1000, 0x4, 0xbe6, 0x75, 0xffff27b3, 0x1, 0x3ff, 0x5, 0xfffffff8, 0x400, 0x5, 0x2, 0x2, 0x4e, 0x10, 0xb, 0x2, 0x8, 0x5, 0xb, 0x5, 0x0, 0x2, 0x8, 0x2, 0x4, 0x2, 0x0, 0x4479, 0x1, 0x4, 0x9, 0x6, 0x8d, 0x4, 0xfffffff7, 0x10001, 0xd2, 0x8001, 0x5, 0x4, 0x8, 0x3b, 0x7, 0x7, 0x97a, 0xfffffffa, 0x7, 0x2426, 0x9, 0xfffffffb, 0x7f, 0x80000001, 0x9, 0x45fb8db7, 0x3, 0xffff8000, 0x80000001, 0x2, 0x56f, 0xd87, 0x1, 0x3, 0x2, 0x3, 0x7fff, 0x8, 0x4, 0x7, 0x8, 0xc0000, 0x5, 0x1, 0x8, 0x3e, 0x8f, 0x7, 0x8000, 0xe3, 0x7, 0xa73, 0x6ec, 0x4, 0x9, 0x2, 0xfffffff9, 0xfffffffb, 0x1, 0x3, 0x5, 0x100, 0x6, 0x5, 0x9, 0xff, 0x80000000, 0x9, 0x5, 0xdf78, 0x9, 0xfff, 0xf66e, 0x1, 0xffff0000, 0x5, 0x5, 0x5, 0x9, 0x9, 0x4, 0x9, 0x7ff, 0x6, 0x4, 0x1, 0xffffff4f, 0x8d5, 0xc, 0xc3c, 0x5, 0x2, 0x3, 0x8, 0x6, 0x0, 0x8, 0x0, 0x9, 0x7, 0x60000000, 0x9, 0x200, 0x1e, 0x9, 0x4, 0x1, 0x1, 0x0, 0x4, 0xffffffff, 0x5, 0x1, 0x5, 0x101, 0x9, 0x2, 0x7, 0xffff, 0x6, 0x200, 0x7, 0x200, 0x3f8, 0xffff, 0xa, 0xc44, 0x3, 0x10000, 0x2, 0x9, 0x4, 0x9, 0xfffffff8, 0x78f991cd]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10001}]]}, {0x19, 0x6, "f0e95d0f433a8b7d9a11431312a9fe3099f295dd7d"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0xb98, 0x10, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1b25, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x10, 0x8, 0x7, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x4c8, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x23a4, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x1, 0x3, 0xfff, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9d, 0x8e, 0x5, 0xf, 0x1555}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1913, 0x10000000}}]}, {0xaf4, 0x6, "ff650191fa5da70ef980bf2844605c25a30ccd1547431e9fa165cbe71a36298a04062f9ab2448ac3bb5f8c827b95fbcd9b2c7f2c794a2bd44d4fe4143ca471b8ff26df614b80e62e8c1448878e959035f66c29b143aabbecf3062929beecd2a78b9c60204797a61eb73e11a613e668b30fe271a73659359a063732c53eef8e34f7a8c753ac6026f4293a2959ddae15fd77079529ba85ac44b1648e81e056c434a9b44855b357446015ee12d26c9bed6d7f9aa096cbd2d2901c2a4b20fb77e0b84f4078474cba489611cecf91a65a1e70e2adb76fe57ae6fd08510dbe5cb0a194819847cf7ef7b87ff160625e52bd442a745f4a3dd97ad8c2c018ba316d0e8adcb0dbbd771f67657164f93c2b06545e516fdbc46c8ed18f7ab64b1f14c58467061a8f0bcc58f568a5e8881dd61bc72774bc8e897bf87faca10676e2b38cb067cd7680c4f5c3d1a0d701c62917312c8dcec743606adfe6912a419ebe47b82887251373ce7a11060d37e4e1a668fc10a9ca040742ec714f787ac058f0dfdfcb5d69f6b37372a3ec15c2643452a39f6150f10db5c4ed8f2ec92013d95926ccbd7d57e74fc28c82b9911454af4a846983fcff3733e0664f595066e39df301157cda3fd1611a866b5f41eae37df35160b47d6de3f589bc442ca4b5a6989429ac62f0534940302a31cf5c5a69d92dcdfbcb0c0c3263e860ac8d98a6bafda96f90b35d3a92163d2d2c119de23b9a912d78de2771035d8cef3398eb54242157dc2f3cb7107db4b8c858506353fb5f0ba631ac025154e258c6e80eff9452aff57eeba3d414baf345858a5ebad7376fc2ae35407e2b765351265cae26aab7f6cfdb86b1bd8d33c9d55bc886f48aab01c702a7144d2b32e18915bd30a6af9dafc8c19f269badd134a1f430fb1334da4dda6c75db99f99675e0ecbccec1631148498e4710195018ed17106d765d55355c61e7bc5cf273c3100106363ea5841b7ed908703c2b879c975328fef67807a5f54407e87d30e922430850dfa1f9472215433240eee87415ab48351c6a20cdefd0f171d7c25f685bde6aebb0de140dbef85b0d24bfffb6c17ab89bb7f0edad94cccf160a7d20dcd533ac08fffea2b90d87ba8ca4599777b27ba4d9aa7b2efc22f4b3fd364dad9abe35249d433e4d6ca4081d6757d24183ea9bb2d6bda18df0f4b40e473c30cd497405311fff62207af0f1a130bcc01c2e0633cb718ec1208ba4f422d62fe5022d69f835632d5701aad5ca158d870f1b67ba3dade10b26d58e37ba86e488c69b573b5baf9a73dd9d19abbc01671cdca80f795a6ba4be5da6c3293b607bbbd5dfe1937857f6f6ffa09ef4f3a3190f448206e7928a130d44758a66c2e7d61919072f8fde84c5787670395f96d424d245e7269d96b5ac3df5645d7c74b9e29391e0f629d998d864e58a34a748f6bd2f541a47b71e6beca441f368bd097cc59120bf37eaa2e107f40857d14b88cee492e5bdf23eefb9186841e9853700d81b4122c67a6c3b38e8054e30d495b71d5f6026a1f6daee60556d9f98b646d2d6193364df73e6d2fb5e64564747ed9e239efb996a5f5fb1325d319d455c15811f1a0ee431208c9323ff09791644adfcd05113e7f580e221c18eb390abfc0ae170473989616f4a130496f00aba273d2c3971875ddb564b81e139f82eb5d5896d6b36a79a071f63ca81c753e5075ebaf916e62c786212aa68d41f7deb8a4b9fbbf64b2d5d6fb4e771a84843b3f3123a2f8386fcb4c6d96331d2b5c18bab4b863a0249ff6c3e7d9c7d83727bfe5876a6c60301f3ade1f8e341ea064ec13bc0900830b31a21c8dd57b924a12a4ac60ee79612ec01bca85bcf3ecae0fd6d10fcc6908fb662c2cfe035464099b961890b9b7b32190a2996db26b5705452261b20a58629f421c08efcd544d9103381ad57afa1e0fad9321ba0ee9e6eb34e5104dc14bdb42e1c1b753f920bba325cd35652e3cf0ec473a55ce39c306dcd7a3776393960fa069fc081b4b506bf04cc01fd4f052849c81a7a0c4b0afceac1377dfbafdc4b7475a154a64f5b7ca1e19c19a9a5c72a9d28f6c4c90e522f3c0f897370ac52dcd045cc2fa6cc0ae0cc01777f966015b5487d5a49c42af29553b36f18412bccc0130c4d980b023413cc46925fa5560887a11f26a87cb7d8072241cf21c181b10641bfd6d28f75713a38e005ee602fb3342240f79c28af70e2cc31e6a0d42cd1ce6c2b0509eb383a530342566ea670939bb462fc4ae86c76ebf27d8e1dbf0580555dc6aaea1fbfb5be8dd53add5ac3689c4458483b07461a40317e5227ea6a612b66711b996a0542d0a663bba6235065e3a14614da0db32f4c24227345598e53bceb4fe63920c81fd419721cab0c0bf056c05a2d41b75ba2165c2ca465b84322db427c2cf9eef31d065b4e187fc5e94e00ea6f0e0cb406008edad27ee175be27e644ac0d28e455a1762e46889fb81da8222de32dc1af88eecc6e7f92227ba04186fd8206bcb80f3df62b43be2a407f5706329a6a29ef5683154dc47547342ec373be49ba2dc7df8259cf7526d77f7b7bc8ed6e3839e539dd465ab6cc8f3900ebaa7f509d66510f21192a0fe5dab20e5b545569dfcbe24f6a0c08c5ce02b92caa95e4b4cf3bc885eaf95d6d7be69365cc845650748ce20301a0c5dc96769eebcc994f5f7a11195eff3fe25cc81835d1007317682dc4f539440db0a4d0cca2eae0f59a0409e3ba43fa6fe6dd84fc50f50985d5f5797c15467e90296c9838cbb1921a4ae11abc3e8ca07c2790ae51bd67e502d61baf4799dd928bb9a9a01c5cdaa6022f078b844b4712bac036a6d533598e36abb852690c81860f43a87dfed8f17ea228cda3ae75658fadd03b818f7281c98b4f17fd1307c30c28b863c0b9d91ccbcc7bd3ee11784ad325f6e9de1eedfb59619cb50e833b1a0ebf6859e89783d2574b0eb99dde05f01aa947d23562ef4fb63327da99629043a574cc9a2826057fcf6e61a302ebce176336539a247458c1b44cb50b5c4bf3a08c0c3a2c8f3c68456b0e432c230301543e3a81cacaf7a5521feed946fba2c18a41cb71c9fc9d4506a06d9e1d7219fc2f8c48500713763c35859558974ef150302eedec75fb4302d14a674c80df993ccb050c656449f3fb344dd672931d210259cdd2fa79b798bc1e924c73f2b5194ddcad39ee754fc36cc1bd474943e199387a9436dd347bff638715798591f172322b559f8160548a0ac9473efc560f5a0a187cebda74a139d3945d0b087b10eb0725c96776d0e386a2271cb53b89dfa21779d9adf774cb53dd14e29e0da9def2d9dd903c05f1f8a1b42cf4852e3b7a4d66f3bc8829daf5b00231d6b3b62e965271ce3ad0b78ac469a65d850109cbccf142522cb0fbc8e258a31c3573956f38232a76f95c8261030fb8e40d587c7b66083ddf9a98f04d5a04f790fc9f3f77ac4db2e2a36bdb56a3aeaca15bf5d67ee95468663c950d1e09cda3e7cb6a4927d316773a298b5b685b8fa8ce55a0b7c10cc29d3e6bcae8fcdae8dec7cd9c35eda437800198b02ec392ed6abc91aab5a0b6aa5291ea5ddebf41f2ae4db7584c52269cdc32ea7a146130ccf56d0cea6eff0e07b9b0bb7e0b1a981f3c9ce3921f17124de7ab95a37c88c65ea1b8963327b7c3aac899b1831116ed3f60482a4cbdc70e2bea29349ae49d49ffad6b4a8d566013ea745fedd4e583f0d19332cf1d53d2e9f0b3f6a18cc4ab696732ccbd25cbb3429e157df6f23478449e86712901d4f7dd443c1577239ad9e7cf54fd7ed228a3f2743d393562b56bf887e10f2f1b111a596cf85889e26b25af4a53adc42379d8da3d9057567006047da92e7b10bd98d869b76ccc9c8f303293628f58338075a572c6b6044764b7eba5c4d414dd98cddbc50e16db78ec95b2f37f3afdb6a7e3319065c1c1cd0a792a61d7f40a2930c727b9b2d9df"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x4098}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = getpgrp(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1, r9}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r7, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r10 = accept4$nfc_llcp(r4, &(0x7f0000000380), &(0x7f0000000100)=0x60, 0x800) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000500)={r10, r6, 0xf, 0xd0, &(0x7f0000000400)="b73bbabfe2967e515aea1f40c8769d5ca5333e726cc6fd4fb7f153375d1559f00827c47d2ff7d7084bb0cdfb487987533d224ea3ba89ef48f1c9f8e88d03678e33707fb6e4e9367d72d838ca934f6edae8277264740dc6dc3c5c3c83fcd2067297fd2b29896af87ca80bb0d7692baa74e4175b67ea3069f9d07500b8921e52bc6991d7cc67cbc4e213b8d154aff705345fae38f43e2842698929cce06c5976938b54481389ccd76d6c1716be76e87bdfa9804223e654f535a3cec9c57082c8eb0c995223385d1678a17fb4b9694cee1f", 0xbc, 0x2, 0xf23, 0x0, 0x2, 0x3, 0x4, 'syz0\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="012dbd7000fcdbdf252100009e414f2dc08fde0582e9000800031000", @ANYRES32=r12, @ANYBLOB="0a00f5005050505050500000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x44) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r1, 0x101, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x2400c040) 4.198969418s ago: executing program 0 (id=1974): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2840) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000040)={0x15, 0x0}) close(r3) listen(0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSF(r6, 0x5404, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) 3.030714571s ago: executing program 7 (id=1975): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x80003, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x200000000000011, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000087000000000000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000018500000086000000bf09000000000000550901000000000095000000000000003509fcff08008000bf9100000000001fb702000001000000850000002a000000b70000000000000795"], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1016, &(0x7f0000001880)=""/4118, 0x41000, 0xf}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x88c0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x44, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4b}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.863636123s ago: executing program 0 (id=1976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061194c00000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0000fdffffffffdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x17) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.30174396s ago: executing program 6 (id=1977): r0 = eventfd2(0x4, 0x800) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xffed, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r0}]) write(r0, &(0x7f00000001c0)="e1eb8e6a800f0be2", 0x8) 2.281191941s ago: executing program 5 (id=1978): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x9e4f000) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x20822180, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs$pagemap(r2, &(0x7f0000000200)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000006c0)={0x60, 0x1, &(0x7f0000e3a000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x7fff, 0x0, 0x0, 0x8, 0xe, 0x32, 0x40, 0xa}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100ffffff00004000010000000800090000000010"], 0x1c}, 0x1, 0x620b}, 0x40cd4) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_dvr(&(0x7f0000000280), 0x0, 0x10b401) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x18, 0x0}, 0x20000011) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x2000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240000012ebd7000fbdbdf25027c00000cb9fd72c32d9e5e2fa29c79"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x850) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2.093137447s ago: executing program 6 (id=1979): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002140)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715be861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a420c35322f9cf8060550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_clone3(0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0x1418, 0x1, 0x70bd25}, 0x10}}, 0x4008040) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffe, 0x2}, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="3800000040000100fcff0b00040000000100000004004880140001801000108004000f8005000b00000000000c00"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b00000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x1b00000}, 0x48) 1.794646799s ago: executing program 4 (id=1980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01062abd7000ffdbdf250600000006000b"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34b}, 0x0, 0x0, &(0x7f0000000000)) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.761239174s ago: executing program 6 (id=1981): pipe(&(0x7f0000000440)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x6, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 1.694611418s ago: executing program 0 (id=1982): bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x400) recvfrom$unix(r3, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000089c0)=[{{&(0x7f0000000400)=@qipcrtr, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)=""/57, 0x39}, {&(0x7f00000004c0)=""/63, 0x3f}, {&(0x7f0000000500)=""/168, 0xa8}, {&(0x7f00000005c0)=""/70, 0x46}, {&(0x7f0000000640)=""/135, 0x87}], 0x5}, 0xf704}, {{&(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000800)=""/162, 0xa2}, {&(0x7f00000008c0)=""/54, 0x36}, {&(0x7f0000000900)=""/4, 0x4}], 0x3, &(0x7f0000000980)=""/121, 0x79}, 0x5}, {{&(0x7f0000000a00)=@can, 0x80, &(0x7f0000000c80)=[{&(0x7f0000001100)=""/183, 0xb7}, {&(0x7f0000000b40)=""/20, 0x14}, {&(0x7f0000000b80)=""/230, 0xe6}], 0x3, &(0x7f0000000cc0)=""/86, 0x56}, 0x51}, {{&(0x7f0000000d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}}}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000000dc0)=""/35, 0x23}, {&(0x7f0000000e00)=""/197, 0xc5}, {&(0x7f00000025c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003600)=""/4096, 0x1000}, 0xa}, {{&(0x7f0000000f00)=@nl, 0x80, &(0x7f0000005780)=[{&(0x7f0000004680)=""/197, 0xc5}, {&(0x7f0000004780)=""/4096, 0x1000}], 0x2, &(0x7f0000001080)=""/70, 0xa1}, 0x4}, {{&(0x7f0000005840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000006b40)=[{&(0x7f00000058c0)=""/122, 0x7a}, {&(0x7f0000005940)=""/31, 0x1f}, {&(0x7f0000005980)=""/4096, 0x1000}, {&(0x7f0000006980)=""/179, 0xb3}, {&(0x7f0000006a40)=""/241, 0xf1}], 0x5, &(0x7f0000001040)=""/54, 0x36}, 0x4}, {{&(0x7f0000006c00)=@xdp, 0x80, &(0x7f0000007140)=[{&(0x7f0000006c80)=""/210, 0xd2}, {&(0x7f0000006d80)=""/202, 0xca}, {&(0x7f0000006e80)=""/188, 0xbc}, {&(0x7f0000006f40)=""/242, 0xf2}, {&(0x7f0000007040)=""/194, 0xc2}], 0x5}, 0x40}, {{&(0x7f00000071c0)=@x25, 0x80, &(0x7f00000076c0)=[{&(0x7f0000007240)=""/190, 0xbe}, {&(0x7f0000007300)=""/113, 0x71}, {&(0x7f0000007380)=""/210, 0xd2}, {&(0x7f0000007480)=""/101, 0x65}, {&(0x7f0000007500)=""/65, 0x41}, {&(0x7f0000007580)=""/105, 0x69}, {&(0x7f0000007600)=""/96, 0x60}, {&(0x7f0000007680)=""/37, 0x25}], 0x8, &(0x7f0000007740)=""/60, 0x3c}, 0x7}, {{&(0x7f0000007780)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f00000078c0)=[{&(0x7f0000007800)=""/184, 0xb8}], 0x1}, 0x7}, {{&(0x7f0000007900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000008980)=[{&(0x7f0000007980)=""/4096, 0x1000}], 0x1}, 0xa58}], 0xa, 0x2, 0x0) pipe(&(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec61060004400004000005000700", @ANYRES8=r3], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_init_net_socket$x25(0x9, 0x5, 0x0) 1.049225432s ago: executing program 4 (id=1983): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09e3650f01efeff8000f0d35", 0x29}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0xffff1000}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 914.092062ms ago: executing program 4 (id=1984): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r2, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x64}, 0x1, 0x620b}, 0x40004c0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2401, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0x6, 0xffff}, {0xe, 0x9}}, [@qdisc_kind_options=@q_cake={{0xfffffffffffffd0f}, {0x14, 0x2, [@TCA_CAKE_ATM={0x0, 0x4, 0x2}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x41) r4 = socket(0x2d, 0x2, 0x0) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0xf, 0x0, 0xc}, 0x10) r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x50}}, 0x4800) 733.402828ms ago: executing program 7 (id=1985): read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) setrlimit(0x8, &(0x7f0000000000)={0xbc, 0x5}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x8000000002) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x2, @meta={0x88ac92ac, 0x7747dce1, 0x4f62, 0x8971, 0x1e1fdebf}}) socket(0x1e, 0xa, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x42040, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x45, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0xf73f728008fec34a}, 0x801) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004002, 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r7, &(0x7f00000000c0)='2\x00', 0x2) 0s ago: executing program 7 (id=1986): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x2) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102384, 0x18ff0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001180)={0x8, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x200000000000003f) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f00000000c0)={0x3, 0x4, 0x5, 0x80000001, 0x1}) syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x4000, 0x13090, 0x2, 0x29}, 0x0, 0x0, &(0x7f0000000000)) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x809, 0x4, 0x6, 0xfffa}, 0x1d, [0x7, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0xffffffff, 0x7f, 0x40, 0x4d, 0x39cc191a, 0x5c, 0x6, 0x3, 0x2, 0x6, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x5, 0x1f461e2c, 0x7, 0x2000e665, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x101, 0x7, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x1200000, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x6, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x916, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x2008, 0x4, 0x8000, 0x9, 0x7fffffff, 0x404, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x4020006, 0xb, 0xa, 0x1, 0x7, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x0, 0x3, 0x9, 0x48c93693, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x20005, 0x7fff, 0x0, 0x20000001, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x1000, 0x38, 0x800003, 0x200, 0x80, 0x800001, 0xcc52, 0x950bfb0, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffbf, 0x0, 0x6, 0x1c, 0x40120000, 0x3, 0x6, 0xaaed, 0x4, 0x7], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7ffd, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000004, 0x7, 0x8, 0xc8, 0x9, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0xffff0001, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xd, 0x7, 0x1, 0x6c1b, 0x0, 0x5, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15460300ef0000001c0012800b000100697036746e6c"], 0x3c}}, 0x0) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, 0x24) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x5}]}}}]}, 0x3c}}, 0x24) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000880)={0x27, 0x0, 0x1, 0x7, 0xfb, 0x2f, "1a8b203b81b320b4a09dfacc8b0c1c4a207b0f6f10a1b6d9b0de77ff1b8bf453eda046c345363da215d743f03327ae1e67971c2a79b231a78d82711b40af83", 0x12}, 0x60, &(0x7f00000009c0)=[{&(0x7f0000000900)="b66c1622da34cf255ac24df8faf32775fa358c70eaaa044d108b8aa601712f4ceedd1c54d9002c31afe8c8eca3ca0de83d4ee62b1d96824e275b4cb7679b964c2e7128457e4f64e1b2e14d4b3cd2d2ebd24f5f6400b47a1ef04c30ee959c0b16f5555f12bfdf173d460e4c39eb95986a1c31d488bb483b028d67768a21d74e056a896c81492eb77443d6caf953516a651b69daf512ab818745366d1c77104f8d67e5b786b58cb02c085a595c326eb796bc574dc3a1bd56b1e8", 0xb9}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="a0000000000000000600000007000000d205de23624549e56881e7a24fa09e39ae4b39cf6df79022f6d9061b7175e4404415cee569865e55bdddd52c8cc55036a28be4e1b801835714f2289c869471ba36417be39dbb1d59f0277f93acf42a103574ab6757c3faac28f34233edd2d0cf2e6a6714984f5be0d9cf316670660b15aeb62097da1c0c9c059f91ad000026a66d08b89288a97d00b32c3bac0190fe1edaf12590744937"], 0xa0}, 0x4000014) kernel console output (not intermixed with test programs): 5872] usb 6-1: device descriptor read/64, error -71 [ 502.479091][T12167] netlink: 'syz.3.1464': attribute type 1 has an invalid length. [ 502.503257][ T881] usb 1-1: USB disconnect, device number 72 [ 502.552058][T12170] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 502.582473][T12173] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 502.623295][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1464'. [ 502.638256][T12167] bond6 (unregistering): (slave ip6gretap2): Releasing backup interface [ 502.659308][T12167] bond6 (unregistering): Released all slaves [ 502.719251][ T5872] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 502.864252][ T5872] usb 6-1: device descriptor read/64, error -71 [ 502.883195][T12197] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1469'. [ 503.011817][ T5872] usb usb6-port1: attempt power cycle [ 503.019302][T12201] kAFS: unable to lookup cell '' [ 503.028872][T12202] kAFS: unable to lookup cell '(,c' [ 503.051575][T12200] syzkaller0: entered promiscuous mode [ 503.057358][T12200] syzkaller0: entered allmulticast mode [ 503.287282][T12207] kvm: pic: level sensitive irq not supported [ 503.287489][T12207] kvm: pic: non byte read [ 503.298853][T12207] kvm: pic: level sensitive irq not supported [ 503.298908][T12207] kvm: pic: non byte read [ 503.311013][T12207] kvm: pic: level sensitive irq not supported [ 503.311068][T12207] kvm: pic: non byte read [ 503.332169][T12207] kvm: pic: level sensitive irq not supported [ 503.332229][T12207] kvm: pic: non byte read [ 503.356673][ T5872] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 503.374849][T12207] kvm: pic: level sensitive irq not supported [ 503.374905][T12207] kvm: pic: non byte read [ 503.385268][ T5872] usb 6-1: device descriptor read/8, error -71 [ 503.421072][T12207] kvm: pic: level sensitive irq not supported [ 503.421129][T12207] kvm: pic: non byte read [ 503.573272][T12207] kvm: pic: level sensitive irq not supported [ 503.573334][T12207] kvm: pic: non byte read [ 503.602250][T12207] kvm: pic: level sensitive irq not supported [ 503.602335][T12207] kvm: pic: non byte read [ 503.613385][T12207] kvm: pic: level sensitive irq not supported [ 503.613439][T12207] kvm: pic: non byte read [ 503.634070][ T5872] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 503.764130][ T5872] usb 6-1: device descriptor read/8, error -71 [ 503.765902][T12207] kvm: pic: level sensitive irq not supported [ 503.880032][ T5872] usb usb6-port1: unable to enumerate USB device [ 503.959589][T12207] kvm: pic: non byte read [ 504.956330][ T30] audit: type=1400 audit(2000000198.310:967): avc: denied { map } for pid=12231 comm="syz.3.1478" path="socket:[37531]" dev="sockfs" ino=37531 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 505.272009][ T30] audit: type=1400 audit(2000000198.620:968): avc: denied { mounton } for pid=12236 comm="syz.5.1481" path="/197/file0" dev="tmpfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 505.324526][ T5810] Bluetooth: hci5: ACL packet for unknown connection handle 2033 [ 505.454039][ T5872] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 505.512564][T12244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 505.576598][T12232] Option 'Ӿ,0A' to dns_resolver key: bad/missing value [ 505.637261][ T5872] usb 7-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 505.646773][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.655050][ T5872] usb 7-1: Product: syz [ 505.659426][ T5872] usb 7-1: Manufacturer: syz [ 505.664497][ T5872] usb 7-1: SerialNumber: syz [ 505.904381][ T5872] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 505.936634][ T5872] usb 7-1: MIDIStreaming interface descriptor not found [ 506.070892][T12254] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 506.267066][ T30] audit: type=1400 audit(2000000199.620:969): avc: denied { unmount } for pid=7932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 506.324201][ T5872] usb 7-1: USB disconnect, device number 41 [ 506.712687][ T5981] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 506.867807][T12265] SELinux: Context system_u:object_r:setrans_var_run_t:s0 is not valid (left unmapped). [ 506.890942][ T30] audit: type=1400 audit(2000000200.240:970): avc: denied { relabelto } for pid=12264 comm="syz.4.1487" name="" dev="pipefs" ino=37580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:setrans_var_run_t:s0" [ 506.939785][T12268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=12268 comm=syz.0.1488 [ 506.974065][ T5981] usb 6-1: Using ep0 maxpacket: 16 [ 506.982592][ T5981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.008425][ T5981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.019454][ T5981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 507.038180][ T5981] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 507.047643][ T5981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.077022][ T5981] usb 6-1: config 0 descriptor?? [ 507.140602][T12281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.150453][T12281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.248121][T12281] bridge0: port 3(syz_tun) entered blocking state [ 507.254983][T12281] bridge0: port 3(syz_tun) entered disabled state [ 507.263713][T12281] syz_tun: entered allmulticast mode [ 507.278394][T12281] syz_tun: entered promiscuous mode [ 507.284973][T12281] bridge0: port 3(syz_tun) entered blocking state [ 507.291479][T12281] bridge0: port 3(syz_tun) entered forwarding state [ 507.329054][T12281] netlink: 'syz.4.1491': attribute type 10 has an invalid length. [ 507.337407][T12281] bridge0: port 3(syz_tun) entered disabled state [ 507.344021][T12281] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.351482][T12281] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.367545][T12281] bridge0: port 3(syz_tun) entered blocking state [ 507.374085][T12281] bridge0: port 3(syz_tun) entered forwarding state [ 507.380933][T12281] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.388050][T12281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.395477][T12281] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.402583][T12281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.423778][T12281] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 507.845699][ T5816] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 508.206968][ T5981] usbhid 6-1:0.0: can't add hid device: -71 [ 508.212979][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 508.251448][ T5981] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 508.323517][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.334700][ T5816] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 508.335474][ T5981] usb 6-1: USB disconnect, device number 51 [ 508.347808][ T5816] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 508.347835][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.350134][ T5816] usb 4-1: config 0 descriptor?? [ 508.807312][ T5816] usbhid 4-1:0.0: can't add hid device: -71 [ 508.817865][T12294] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 508.831939][ T5816] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 508.853482][ T5816] usb 4-1: USB disconnect, device number 59 [ 508.942763][T12303] openvswitch: netlink: Flow actions attr not present in new flow. [ 510.033224][T12321] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1502'. [ 510.101801][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1502'. [ 510.111322][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1502'. [ 510.204074][ T5816] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 510.214035][ T5981] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 510.375903][T12333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1505'. [ 510.385063][T12333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1505'. [ 510.410159][T12333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1505'. [ 510.419211][T12333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1505'. [ 510.483707][ T30] audit: type=1326 audit(2000000203.820:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.4.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97f59c819 code=0x7ffc0000 [ 510.547364][ T30] audit: type=1326 audit(2000000203.820:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.4.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97f59c819 code=0x7ffc0000 [ 510.571522][ T30] audit: type=1326 audit(2000000203.820:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.4.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa97f59c819 code=0x7ffc0000 [ 510.606538][ T30] audit: type=1326 audit(2000000203.960:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.4.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97f59c819 code=0x7ffc0000 [ 510.630062][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 510.635275][ T5981] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 510.642615][ T30] audit: type=1326 audit(2000000203.960:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.4.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97f59c819 code=0x7ffc0000 [ 510.643912][ T5981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.679783][ T5981] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 510.680085][ T5816] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 510.689385][ T5981] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 510.689413][ T5981] usb 6-1: Manufacturer: syz [ 510.713868][ T5816] usb 4-1: config 0 interface 0 has no altsetting 0 [ 510.721493][ T5981] usb 6-1: config 0 descriptor?? [ 510.723409][ T5816] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 510.736490][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.744794][ T5816] usb 4-1: Product: syz [ 510.749038][ T5816] usb 4-1: Manufacturer: syz [ 510.753743][ T5816] usb 4-1: SerialNumber: syz [ 510.768775][ T5816] usb 4-1: config 0 descriptor?? [ 510.797573][ T5981] rc_core: IR keymap rc-hauppauge not found [ 510.803554][ T5981] Registered IR keymap rc-empty [ 510.811327][ T5981] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 510.826171][ T5981] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input29 [ 510.963825][T12319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.985592][ T5816] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input30 [ 511.268815][T12319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.286783][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1507'. [ 511.407854][T12345] netlink: 'syz.0.1507': attribute type 2 has an invalid length. [ 511.430466][T12319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.524023][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1507'. [ 511.533722][T12348] netlink: 'syz.0.1507': attribute type 2 has an invalid length. [ 511.534611][T12319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.723622][ T5816] rc_core: IR keymap rc-imon-pad not found [ 511.729607][ T5816] Registered IR keymap rc-empty [ 511.734576][ T5816] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 511.746582][ T5816] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 511.845932][T12354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.174879][ T5816] rc rc2: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc2 [ 512.188972][ T5816] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc2/input31 [ 512.210671][T12354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.267335][T12324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.312179][ T5816] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:60> initialized [ 512.346254][T12360] openvswitch: netlink: Flow actions attr not present in new flow. [ 512.409641][ T9] usb 6-1: USB disconnect, device number 52 [ 512.460353][T12324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.491037][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 512.509482][ T5816] usb 4-1: USB disconnect, device number 60 [ 512.757869][ T24] IPVS: starting estimator thread 0... [ 512.864440][T12367] IPVS: using max 37 ests per chain, 88800 per kthread [ 512.953495][T12371] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 513.796733][T12392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=12392 comm=syz.3.1518 [ 513.810333][T12392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1518'. [ 513.871670][T12392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12392 comm=syz.3.1518 [ 514.084509][ T8254] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 514.284130][ T8254] usb 6-1: Using ep0 maxpacket: 16 [ 514.375464][ T8254] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.505412][ T8254] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.519480][ T8254] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 514.545693][ T8254] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 514.596380][ T8254] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.616797][ T8254] usb 6-1: config 0 descriptor?? [ 514.964044][ T5981] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 515.127756][ T5981] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.138173][ T5981] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 515.148335][ T5981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.170227][ T5981] usb 7-1: config 0 descriptor?? [ 515.185712][ T5981] pwc: Askey VC010 type 2 USB webcam detected. [ 515.235003][ T8254] usbhid 6-1:0.0: can't add hid device: -71 [ 515.241734][ T8254] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 515.269470][ T8254] usb 6-1: USB disconnect, device number 53 [ 515.388107][T12420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.400734][T12420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.455391][ T5981] pwc: send_video_command error -71 [ 515.460841][ T5981] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 515.469442][ T5981] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 515.485324][ T5981] usb 7-1: USB disconnect, device number 42 [ 516.314703][T12437] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 516.406420][T12429] ptrace attach of "./syz-executor exec"[5803] was attempted by ""[12429] [ 516.533304][T12443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.627932][T12443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.283818][T12454] dlm: no local IP address has been set [ 517.293632][T12454] dlm: cannot start dlm midcomms -107 [ 517.684987][T12465] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 518.229657][T12474] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 518.262938][T12474] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 518.702551][T12438] Bluetooth: hci6: command 0x0405 tx timeout [ 519.066100][ T9] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 519.115968][ T30] audit: type=1400 audit(2000000212.410:976): avc: denied { mount } for pid=12476 comm="syz.3.1540" name="/" dev="hugetlbfs" ino=38752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 519.205613][ T30] audit: type=1400 audit(2000000212.560:977): avc: denied { read } for pid=12480 comm="syz.4.1541" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 519.347747][ T30] audit: type=1400 audit(2000000212.560:978): avc: denied { open } for pid=12480 comm="syz.4.1541" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 519.373687][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 519.406994][T12482] __nla_validate_parse: 4 callbacks suppressed [ 519.407023][T12482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1541'. [ 519.432520][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.522991][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 519.544102][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.705886][ T9] usb 7-1: config 0 descriptor?? [ 519.766882][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 520.680396][T12503] openvswitch: netlink: Flow actions attr not present in new flow. [ 521.186500][ T5872] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 521.473237][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 521.482300][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.500173][ T5872] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 521.522684][ T5872] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 521.571238][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.599386][ T5872] usb 1-1: config 0 descriptor?? [ 521.730149][T12519] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 522.310591][ T5981] usb 7-1: USB disconnect, device number 43 [ 522.488816][T12527] netlink: 'syz.5.1553': attribute type 10 has an invalid length. [ 522.519451][T12527] wg1: entered allmulticast mode [ 522.568314][T12527] team0: Device wg1 is of different type [ 523.124343][T12538] vxcan1 speed is unknown, defaulting to 1000 [ 523.502819][T12538] lo speed is unknown, defaulting to 1000 [ 523.514689][T12538] wg1 speed is unknown, defaulting to 1000 [ 524.058505][ T8254] usb 1-1: USB disconnect, device number 73 [ 524.427732][T12553] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 524.514137][T12553] can0: slcan on ttyS3. [ 524.867435][T12553] can0 (unregistered): slcan off ttyS3. [ 524.907275][T12557] tmpfs: Cannot change global quota limit on remount [ 525.475762][T12569] Cannot find add_set index 0 as target [ 525.741817][T12572] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 526.218155][T12578] tmpfs: Unknown parameter 'q+A*.(inod' [ 526.485948][ T30] audit: type=1400 audit(2000000219.830:979): avc: denied { bind } for pid=12584 comm="syz.6.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 526.564172][ T8254] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 526.959601][T12595] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1572'. [ 526.978376][ T30] audit: type=1400 audit(2000000220.320:980): avc: denied { getopt } for pid=12593 comm="syz.4.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 527.064178][ T8254] usb 1-1: Using ep0 maxpacket: 16 [ 527.070695][ T8254] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.087461][ T8254] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 527.098117][ T8254] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 527.106633][T12606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.107330][ T8254] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.116120][T12606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.125660][ T8254] usb 1-1: config 0 descriptor?? [ 527.324044][ T9] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 527.607516][T12611] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 527.933716][ T9] usb 6-1: device descriptor read/64, error -71 [ 528.038553][T12613] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 528.059710][T12613] can0: slcan on ttyS3. [ 528.174047][ T9] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 528.374315][T12612] can0 (unregistered): slcan off ttyS3. [ 528.465064][ T9] usb 6-1: device descriptor read/64, error -71 [ 528.977404][ T9] usb usb6-port1: attempt power cycle [ 528.984805][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 529.541630][ T5872] usb 1-1: USB disconnect, device number 74 [ 529.825612][ T9] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 529.832532][T12650] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 529.843466][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1580'. [ 529.882094][T12651] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 529.931177][ T30] audit: type=1326 audit(2000000223.240:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12642 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0519c819 code=0x7ffc0000 [ 529.987541][T12650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.013495][ T5981] lo speed is unknown, defaulting to 1000 [ 530.180579][ T9] usb 6-1: device descriptor read/8, error -71 [ 530.212845][ T30] audit: type=1326 audit(2000000223.250:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12642 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f0f0519c819 code=0x7ffc0000 [ 530.288854][ T30] audit: type=1326 audit(2000000223.250:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12642 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0519c819 code=0x7ffc0000 [ 530.436037][ T30] audit: type=1326 audit(2000000223.250:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12642 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f0f0519c819 code=0x7ffc0000 [ 530.644379][ T30] audit: type=1326 audit(2000000223.250:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12642 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0519c819 code=0x7ffc0000 [ 530.732350][ T30] audit: type=1326 audit(2000000223.250:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12642 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f0f0519c819 code=0x7ffc0000 [ 530.790254][ T30] audit: type=1326 audit(2000000223.260:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12642 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0519c819 code=0x7ffc0000 [ 530.832054][ T30] audit: type=1326 audit(2000000223.260:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12642 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f0519c819 code=0x7ffc0000 [ 530.877519][ T5872] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 531.002368][T12672] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 531.117379][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 531.210021][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 531.219702][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.245508][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.256007][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 531.269169][ T5872] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 531.278254][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.299195][ T5872] usb 1-1: config 0 descriptor?? [ 531.299809][T12675] loop4: detected capacity change from 0 to 7 [ 531.341733][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 531.355726][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 531.365354][ C1] buffer_io_error: 11 callbacks suppressed [ 531.365369][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 531.382807][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 531.392456][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 531.407952][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 531.417602][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 531.426587][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 531.436202][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 531.445070][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 531.454697][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 531.668472][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 531.678111][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 531.688261][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 531.697890][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 531.707756][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 531.717365][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 531.731210][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 531.740834][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 531.867575][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 531.868158][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 532.005229][ T5872] usbhid 1-1:0.0: can't add hid device: -71 [ 532.103473][ T5872] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 532.120786][ T5872] usb 1-1: USB disconnect, device number 75 [ 532.144103][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 532.159931][ T9] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 532.179122][ T9] usb 4-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63 [ 532.198344][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.207898][T12675] netlink: 'syz.5.1588': attribute type 1 has an invalid length. [ 532.216391][ T9] usb 4-1: Product: syz [ 532.240823][ T9] usb 4-1: Manufacturer: syz [ 532.255581][ T9] usb 4-1: SerialNumber: syz [ 532.982591][T12712] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 533.429491][T12718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1596'. [ 534.072016][ T5981] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 534.686538][ T8254] usb 4-1: USB disconnect, device number 61 [ 534.694404][ T5981] usb 6-1: device descriptor read/64, error -71 [ 534.999721][ T5981] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 535.144282][ T5981] usb 6-1: device descriptor read/64, error -71 [ 535.406228][ T5981] usb usb6-port1: attempt power cycle [ 536.969475][T12751] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 536.979359][ T5981] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 538.214619][T12761] affs: No valid root block on device nullb0 [ 538.280399][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 538.280905][T12760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1605'. [ 538.296502][ T30] audit: type=1400 audit(2000000231.620:1005): avc: denied { map } for pid=12752 comm="syz.0.1606" path="socket:[40316]" dev="sockfs" ino=40316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 538.325781][ T5981] usb 6-1: device not accepting address 60, error -71 [ 538.354617][ T30] audit: type=1400 audit(2000000231.620:1006): avc: denied { read accept } for pid=12752 comm="syz.0.1606" path="socket:[40316]" dev="sockfs" ino=40316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 538.378852][ T30] audit: type=1326 audit(2000000231.620:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12753 comm="syz.3.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24719c819 code=0x7ffc0000 [ 538.419875][ T30] audit: type=1326 audit(2000000231.620:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12753 comm="syz.3.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24719c819 code=0x7ffc0000 [ 538.624210][ T30] audit: type=1326 audit(2000000231.620:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12753 comm="syz.3.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24719c819 code=0x7ffc0000 [ 538.652039][ T30] audit: type=1326 audit(2000000231.620:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12753 comm="syz.3.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fd24719c819 code=0x7ffc0000 [ 538.696454][ T30] audit: type=1326 audit(2000000231.620:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12753 comm="syz.3.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24719c819 code=0x7ffc0000 [ 538.845859][ T30] audit: type=1326 audit(2000000231.620:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12753 comm="syz.3.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24719c819 code=0x7ffc0000 [ 539.700025][ T30] audit: type=1326 audit(2000000231.620:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12753 comm="syz.3.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24719c819 code=0x7ffc0000 [ 540.254047][ T30] audit: type=1326 audit(2000000231.620:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12753 comm="syz.3.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24719c819 code=0x7ffc0000 [ 540.864763][T12781] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 540.982024][T12781] dummy0: entered promiscuous mode [ 541.026649][T12781] dummy0: entered allmulticast mode [ 542.745785][ T24] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 543.012062][T12808] netlink: 'syz.3.1617': attribute type 1 has an invalid length. [ 543.020289][T12808] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1617'. [ 543.153596][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 543.166643][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 543.186269][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 543.195604][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.203624][ T24] usb 7-1: Product: syz [ 543.215565][ T24] usb 7-1: Manufacturer: syz [ 543.226874][ T24] usb 7-1: SerialNumber: syz [ 543.256962][ T24] usb 7-1: config 0 descriptor?? [ 543.332004][T12813] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 543.351890][T12813] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 543.473008][T12788] vxcan1 speed is unknown, defaulting to 1000 [ 543.571334][T12788] lo speed is unknown, defaulting to 1000 [ 543.577814][T12788] wg1 speed is unknown, defaulting to 1000 [ 543.754441][T12825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12825 comm=syz.4.1621 [ 543.774357][T12825] netlink: 'syz.4.1621': attribute type 1 has an invalid length. [ 543.827576][T12825] bond2: (slave bridge3): making interface the new active one [ 543.828533][ T24] usb 7-1: USB disconnect, device number 44 [ 543.846541][T12825] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 544.074355][ T8254] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 544.246849][T12830] 9p: Bad value for 'rfdno' [ 544.293152][ T8254] usb 6-1: Using ep0 maxpacket: 32 [ 544.306013][ T8254] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.316445][ T8254] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 544.332123][ T8254] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 544.354467][ T8254] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 544.366054][ T8254] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 544.377002][ T8254] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 544.387192][ T8254] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 544.473205][T12836] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 544.524113][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 544.524130][ T30] audit: type=1400 audit(2000000237.870:1077): avc: denied { setcurrent } for pid=12828 comm="syz.3.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 544.534982][ T8254] usb 6-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 544.753754][ T8254] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.763995][ T8254] usb 6-1: Product: syz [ 544.782170][ T8254] usb 6-1: Manufacturer: syz [ 544.792791][ T8254] usb 6-1: SerialNumber: syz [ 544.818999][ T8254] usb 6-1: config 0 descriptor?? [ 544.827867][T12820] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 544.836892][T12843] libceph: resolve '0' (ret=-3): failed [ 544.842292][ T8254] usb 6-1: NFC: Reader power on cmd error -90 [ 544.849568][ T8254] pn533_usb 6-1:0.0: NFC: Couldn't poweron the reader (error -90) [ 544.864679][ T30] audit: type=1400 audit(2000000238.220:1078): avc: denied { lock } for pid=12842 comm="syz.0.1626" path="socket:[39910]" dev="sockfs" ino=39910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 544.874058][ T8254] pn533_usb 6-1:0.0: probe with driver pn533_usb failed with error -90 [ 544.950098][ T30] audit: type=1400 audit(2000000238.300:1079): avc: denied { lock } for pid=12844 comm="syz.0.1628" path="socket:[39917]" dev="sockfs" ino=39917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 545.034039][ T5872] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 545.040006][ T881] usb 6-1: USB disconnect, device number 62 [ 545.056469][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 545.185692][ T5872] usb 7-1: unable to get BOS descriptor or descriptor too short [ 545.194442][ T5872] usb 7-1: not running at top speed; connect to a high speed hub [ 545.203217][ T5872] usb 7-1: config 2 has an invalid interface number: 214 but max is 0 [ 545.211624][ T5872] usb 7-1: config 2 has no interface number 0 [ 545.217777][ T5871] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 545.225388][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 545.230600][ T5872] usb 7-1: config 2 interface 214 has no altsetting 0 [ 545.242558][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.254054][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.263889][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 545.277163][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 545.286397][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.294679][ T5872] usb 7-1: New USB device found, idVendor=04dd, idProduct=8001, bcdDevice=28.9a [ 545.303709][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.313165][ T9] usb 4-1: config 0 descriptor?? [ 545.322628][ T5872] usb 7-1: Product: syz [ 545.327248][ T5872] usb 7-1: Manufacturer: syz [ 545.332072][ T5872] usb 7-1: SerialNumber: syz [ 545.395419][ T5871] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.406150][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 545.417990][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 28514, setting to 64 [ 545.429364][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 545.458882][ T5871] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 545.474355][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 545.494093][T12848] openvswitch: netlink: Flow actions attr not present in new flow. [ 545.511028][ T5871] usb 1-1: Product: syz [ 545.516728][ T5871] usb 1-1: Manufacturer: syz [ 545.525756][ T5871] usb 1-1: SerialNumber: syz [ 545.777759][ T5871] usb 1-1: config 0 descriptor?? [ 545.783335][T12845] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 545.801152][ T5872] safe_serial 7-1:2.214: safe_serial converter detected [ 545.830353][ T5872] usb 7-1: safe_serial converter now attached to ttyUSB0 [ 545.846826][ T5872] usb 7-1: USB disconnect, device number 45 [ 545.859397][ T5872] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 545.868883][ T5872] safe_serial 7-1:2.214: device disconnected [ 545.981743][T12862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.991123][T12862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.010288][ T5871] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 546.025815][ T5871] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 546.037569][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 546.043603][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 546.064936][ T5871] usb 1-1: USB disconnect, device number 76 [ 546.073884][ T9] usb 4-1: USB disconnect, device number 62 [ 546.108018][T12863] ceph: No mds server is up or the cluster is laggy [ 546.202937][T12870] SELinux: policydb magic number 0xc46363c2 does not match expected magic number 0xf97cff8c [ 546.213213][T12870] SELinux: failed to load policy [ 546.347543][T12877] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1636'. [ 546.361399][T12877] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1636'. [ 546.837526][T12896] openvswitch: netlink: Flow actions attr not present in new flow. [ 547.054404][ T30] audit: type=1400 audit(2000000240.330:1080): avc: denied { setcheckreqprot } for pid=12883 comm="syz.3.1639" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 547.253119][T12904] openvswitch: netlink: Flow actions attr not present in new flow. [ 547.413219][ T30] audit: type=1400 audit(2000000240.610:1081): avc: denied { write } for pid=12899 comm="syz.4.1642" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 548.301222][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1646'. [ 548.321657][T12905] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 548.346717][T12910] netlink: 'syz.6.1644': attribute type 1 has an invalid length. [ 548.358334][T12910] netlink: 'syz.6.1644': attribute type 51 has an invalid length. [ 548.612142][T12931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.621856][T12931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.924382][T12935] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 549.214010][ T24] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 549.831127][ T30] audit: type=1400 audit(2000000243.180:1082): avc: denied { view } for pid=12957 comm="syz.6.1659" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 549.852155][ T30] audit: type=1400 audit(2000000243.210:1083): avc: denied { accept } for pid=12960 comm="syz.0.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 549.852591][T12961] dummy0: entered promiscuous mode [ 549.907883][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.947729][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1658'. [ 549.966379][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 549.985321][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 28514, setting to 64 [ 550.010435][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 550.119208][ T24] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 550.151662][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 550.207001][ T24] usb 6-1: Product: syz [ 550.228915][ T24] usb 6-1: Manufacturer: syz [ 550.292893][ T24] usb 6-1: SerialNumber: syz [ 550.319533][ T24] usb 6-1: config 0 descriptor?? [ 550.346268][T12938] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 550.483237][T12974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 550.644772][ T5871] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 550.706879][ T24] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 550.805938][ T24] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 550.870436][ T24] usb 6-1: USB disconnect, device number 63 [ 550.925350][ T5871] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.969489][ T5871] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 550.984721][ T5871] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 551.006540][ T5871] usb 1-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 551.019647][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.031115][ T5871] usb 1-1: Product: syz [ 551.037492][ T5871] usb 1-1: Manufacturer: syz [ 551.044283][ T5871] usb 1-1: SerialNumber: syz [ 551.244100][ T5980] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 551.313496][T12990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.323352][T12990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.340741][ T5871] usb 1-1: USB disconnect, device number 77 [ 551.378979][T12774] udevd[12774]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.434309][ T5980] usb 7-1: Using ep0 maxpacket: 16 [ 551.441315][ T5980] usb 7-1: unable to get BOS descriptor or descriptor too short [ 551.449102][ T5980] usb 7-1: no configurations [ 551.453761][ T5980] usb 7-1: can't read configurations, error -22 [ 551.534048][ T5872] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 551.594121][ T5980] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 551.684002][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 551.700354][ T5872] usb 6-1: New USB device found, idVendor=0499, idProduct=5001, bcdDevice= 0.40 [ 551.709814][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.718346][ T5872] usb 6-1: Product: syz [ 551.722687][ T5872] usb 6-1: Manufacturer: syz [ 551.727823][ T5872] usb 6-1: SerialNumber: syz [ 551.754033][ T5980] usb 7-1: Using ep0 maxpacket: 16 [ 551.762396][ T5980] usb 7-1: unable to get BOS descriptor or descriptor too short [ 551.770680][ T5980] usb 7-1: no configurations [ 551.775711][ T5980] usb 7-1: can't read configurations, error -22 [ 551.783572][ T5980] usb usb7-port1: attempt power cycle [ 552.162537][ T5872] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 552.181102][T13002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.214098][ T5872] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 552.231697][ T5980] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 552.231912][T13002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.251046][ T5872] usb 6-1: USB disconnect, device number 64 [ 552.265646][ T5980] usb 7-1: Using ep0 maxpacket: 16 [ 552.269426][T12816] udevd[12816]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.298155][T12999] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 552.321044][ T5980] usb 7-1: unable to get BOS descriptor or descriptor too short [ 552.331153][ T5980] usb 7-1: no configurations [ 552.336545][ T5980] usb 7-1: can't read configurations, error -22 [ 552.513539][ T5980] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 552.534576][ T5980] usb 7-1: Using ep0 maxpacket: 16 [ 552.541456][ T5980] usb 7-1: unable to get BOS descriptor or descriptor too short [ 552.549789][ T5980] usb 7-1: no configurations [ 552.554861][ T5980] usb 7-1: can't read configurations, error -22 [ 552.561301][ T5980] usb usb7-port1: unable to enumerate USB device [ 553.397430][T13027] vivid-006: disconnect [ 553.766613][T13038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.784571][T13038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.884016][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 553.914043][ T5980] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 554.034007][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 554.041360][ T9] usb 4-1: config 64 has an invalid interface number: 19 but max is 0 [ 554.050057][ T9] usb 4-1: config 64 has no interface number 0 [ 554.056516][ T9] usb 4-1: config 64 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 554.067489][ T9] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 554.078919][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.093697][ T9] usb 4-1: probing VID:PID(2201:012C) [ 554.095388][ T5980] usb 6-1: Using ep0 maxpacket: 16 [ 554.100720][ T9] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 554.113688][ T9] vub300 4-1:64.19: probe with driver vub300 failed with error -22 [ 554.127920][ T5980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.138967][ T5980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.161319][ T5980] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 554.174923][ T5980] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 554.209698][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.238292][ T5980] usb 6-1: config 0 descriptor?? [ 554.303916][ T9] usb 4-1: USB disconnect, device number 63 [ 554.317350][T13047] vivid-006: reconnect [ 554.537041][T13051] kvm: user requested TSC rate below hardware speed [ 554.863501][ T5980] usbhid 6-1:0.0: can't add hid device: -71 [ 554.870464][ T5980] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 554.889003][ T5980] usb 6-1: USB disconnect, device number 65 [ 555.531726][ T30] audit: type=1400 audit(2000000248.850:1084): avc: denied { getopt } for pid=13062 comm="syz.5.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 555.552594][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 555.744114][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 555.754626][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.767499][T13068] netlink: 'syz.6.1690': attribute type 10 has an invalid length. [ 555.777114][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 555.814014][ T5980] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 555.814212][T13068] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1690'. [ 555.831014][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 555.874122][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.888448][ T9] usb 4-1: config 0 descriptor?? [ 555.897196][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 556.015630][ T5980] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.027790][ T5980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 556.051217][ T5980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 556.075947][ T5980] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 556.087334][ T5980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.104151][ T5980] usb 6-1: Product: syz [ 556.110041][ T5980] usb 6-1: Manufacturer: syz [ 556.115021][ T5980] usb 6-1: SerialNumber: syz [ 556.123614][ T5980] usb 6-1: config 0 descriptor?? [ 556.146486][ T5980] streamzap 6-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 556.184092][ T9] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 556.335135][ T5980] kernel write not supported for file /dsp1 (pid: 5980 comm: kworker/1:6) [ 556.344406][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 556.350671][T13082] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1694'. [ 556.365035][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 556.373122][ T9] usb 1-1: config 0 has no interface number 0 [ 556.375081][ T5980] usb 6-1: USB disconnect, device number 66 [ 556.394062][ T24] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 556.406899][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 556.408685][T13082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1694'. [ 556.446753][T13083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.464291][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 556.484226][T13083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.502162][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 556.522393][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 556.552558][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 556.554956][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 556.574581][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 556.575448][ T24] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 556.591789][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.602143][ T24] usb 7-1: config 179 has no interface number 0 [ 556.609766][ T9] usb 1-1: config 0 descriptor?? [ 556.619392][ T24] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 556.624031][ T9] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 556.639282][ T24] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 556.660793][ T24] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 556.673367][ T24] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 556.683713][ T24] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 556.697276][ T24] usb 7-1: config 179 interface 65 has no altsetting 0 [ 556.704209][ T24] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 556.714922][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.733374][ T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input34 [ 556.947462][ T24] usb 7-1: USB disconnect, device number 50 [ 556.953432][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 556.996583][T13087] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1695'. [ 558.780381][ T5872] usb 4-1: USB disconnect, device number 64 [ 558.825811][ T9] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 558.988392][ T9] usb 6-1: device descriptor read/64, error -71 [ 559.086489][T13102] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 559.285396][ T9] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 559.382592][T13103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1700'. [ 559.437087][ T9] usb 6-1: device descriptor read/64, error -71 [ 559.584650][ T9] usb usb6-port1: attempt power cycle [ 559.738535][T13106] siw: device registration error -23 [ 559.875605][ T8254] usb 1-1: USB disconnect, device number 78 [ 559.882950][ T8254] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 559.935189][ T9] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 559.994798][ T5872] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 560.134560][ T9] usb 6-1: device descriptor read/8, error -71 [ 560.169538][T13110] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 560.329196][T13112] openvswitch: netlink: Flow actions attr not present in new flow. [ 560.567435][ T5872] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.578770][ T5872] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 560.597388][ T5872] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 28514, setting to 64 [ 560.614443][ T5872] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 560.634587][ T5872] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 560.643839][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 560.652254][ T5872] usb 7-1: Product: syz [ 560.656990][ T5872] usb 7-1: Manufacturer: syz [ 560.661671][ T5872] usb 7-1: SerialNumber: syz [ 560.715570][ T5872] usb 7-1: config 0 descriptor?? [ 560.724798][T13106] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 560.955694][ T5872] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 560.971264][ T5872] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 561.001909][ T5872] usb 7-1: USB disconnect, device number 51 [ 561.303684][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1706'. [ 561.794279][ T9] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 561.944162][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 561.959049][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.979023][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 561.992529][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 562.002956][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.131010][ T9] usb 6-1: config 0 descriptor?? [ 562.139325][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 562.414057][ T5816] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 562.687844][ T5816] usb 7-1: Using ep0 maxpacket: 8 [ 562.695870][ T5816] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 562.706608][ T5816] usb 7-1: config 179 has no interface number 0 [ 562.717416][ T5816] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 562.765505][ T5816] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 562.779564][ T5816] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 562.792547][ T5816] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 562.805135][ T5816] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 562.820779][ T5816] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 562.830113][ T5816] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.847753][T13140] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 563.087325][ T30] audit: type=1400 audit(2000000256.440:1085): avc: denied { create } for pid=13157 comm="syz.4.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 563.370703][ T8254] usb 7-1: USB disconnect, device number 52 [ 563.370811][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 563.385682][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 564.025113][T13175] binder: 13164:13175 ioctl c0306201 2000000004c0 returned -14 [ 564.241662][T13178] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 564.523649][ T8254] usb 6-1: USB disconnect, device number 71 [ 564.607835][T13181] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 565.835220][T13184] Cannot find add_set index 0 as target [ 565.954124][T13192] netlink: 'syz.0.1725': attribute type 10 has an invalid length. [ 565.974194][T13192] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.981351][T13192] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.024311][ T9] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 566.037128][T13195] gfs2: not a GFS2 filesystem [ 566.043344][T13195] gfs2: not a GFS2 filesystem [ 566.050090][T13195] gfs2: not a GFS2 filesystem [ 566.247204][ T9] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 566.257417][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.286012][ T9] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 566.309891][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1725'. [ 566.320583][T13201] bridge_slave_1: left allmulticast mode [ 566.326647][T13201] bridge_slave_1: left promiscuous mode [ 566.332379][T13201] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.677192][ T9] usb 7-1: config 1 has no interface number 1 [ 566.687331][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 566.715959][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 566.734008][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.742078][ T9] usb 7-1: Product: syz [ 566.746883][ T9] usb 7-1: Manufacturer: syz [ 566.752828][ T9] usb 7-1: SerialNumber: syz [ 566.779095][T13201] bridge_slave_0: left allmulticast mode [ 566.796715][T13201] bridge_slave_0: left promiscuous mode [ 566.814622][T13201] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.936448][T13210] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 566.950615][T13210] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1728'. [ 567.022551][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 567.033993][ T9] usb 7-1: MIDIStreaming interface descriptor not found [ 567.044033][ T8254] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 567.135608][ T9] usb 7-1: USB disconnect, device number 53 [ 567.190929][T12991] udevd[12991]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 567.206874][ T8254] usb 6-1: Using ep0 maxpacket: 16 [ 567.240508][ T8254] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 567.306283][ T8254] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 567.319589][ T8254] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.330975][ T8254] usb 6-1: Product: syz [ 567.338928][ T8254] usb 6-1: Manufacturer: syz [ 567.348764][ T8254] usb 6-1: SerialNumber: syz [ 567.368539][ T8254] r8152-cfgselector 6-1: Unknown version 0x0000 [ 567.381950][ T8254] r8152-cfgselector 6-1: config 0 descriptor?? [ 567.736788][ T8254] r8152-cfgselector 6-1: Needed 2 retries to read version [ 568.296021][ T8254] r8152-cfgselector 6-1: USB disconnect, device number 72 [ 568.710734][ T30] audit: type=1800 audit(2000000261.770:1086): pid=13221 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1732" name="file1" dev="overlay" ino=1897 res=0 errno=0 [ 568.834923][ T30] audit: type=1400 audit(2000000262.130:1087): avc: denied { read } for pid=13216 comm="syz.0.1733" dev="nsfs" ino=4026532833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 568.854978][T13222] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1733'. [ 568.875210][T13222] unsupported nlmsg_type 40 [ 568.923855][ T30] audit: type=1400 audit(2000000262.130:1088): avc: denied { open } for pid=13216 comm="syz.0.1733" path="net:[4026532833]" dev="nsfs" ino=4026532833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 568.964649][ T30] audit: type=1400 audit(2000000262.190:1089): avc: denied { bind } for pid=13216 comm="syz.0.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 568.965407][T13224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.965854][T13224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.015405][ T5980] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 569.164061][ T5980] usb 4-1: Using ep0 maxpacket: 16 [ 569.171618][ T5980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.185769][ T5980] usb 4-1: config 0 has no interfaces? [ 569.191444][ T5980] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 569.203631][ T5980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.318422][ T5980] usb 4-1: config 0 descriptor?? [ 569.908877][T13232] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 570.441092][T13238] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1736'. [ 574.843901][ T881] usb 4-1: USB disconnect, device number 65 [ 574.952492][T13252] openvswitch: netlink: Flow actions attr not present in new flow. [ 575.147685][ T30] audit: type=1400 audit(2000000268.500:1090): avc: denied { name_bind } for pid=13248 comm="syz.5.1739" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 575.196882][T13255] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 575.559419][ T30] audit: type=1400 audit(2000000268.900:1091): avc: denied { allowed } for pid=13262 comm="syz.4.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 575.584061][ T24] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 575.726072][T13269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1745'. [ 575.769584][T13269] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 575.845363][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 575.857470][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 575.893257][ T24] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 575.965486][ T24] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 575.987677][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.013305][ T24] usb 7-1: Product: syz [ 576.027057][ T24] usb 7-1: Manufacturer: syz [ 576.041081][ T24] usb 7-1: SerialNumber: syz [ 576.074079][ T5872] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 576.104317][ T9] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 576.227701][ T5872] usb 6-1: not running at top speed; connect to a high speed hub [ 576.250622][ T5872] usb 6-1: config 1 has an invalid interface number: 56 but max is 0 [ 576.262293][ T5872] usb 6-1: config 1 has an invalid descriptor of length 45, skipping remainder of the config [ 576.264597][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 576.282402][ T5872] usb 6-1: config 1 has no interface number 0 [ 576.286517][ T24] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 576.314408][ T5872] usb 6-1: config 1 interface 56 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.321747][ T24] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 576.328163][ T5872] usb 6-1: config 1 interface 56 has no altsetting 0 [ 576.346293][ T9] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 576.395625][ T9] usb 1-1: config 2 has no interface number 0 [ 576.401902][ T9] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 576.414264][ T9] usb 1-1: config 2 interface 88 has no altsetting 0 [ 576.435109][ T9] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 576.453341][ T5872] usb 6-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=f8.5f [ 576.463285][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.473286][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.481419][ T9] usb 1-1: Product: syz [ 576.486682][ T5872] usb 6-1: Product: syz [ 576.490882][ T9] usb 1-1: Manufacturer: syz [ 576.501297][ T5872] usb 6-1: Manufacturer: syz [ 576.507651][ T9] usb 1-1: SerialNumber: syz [ 576.515223][ T5872] usb 6-1: SerialNumber: syz [ 576.524073][T13274] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 576.749462][T13274] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 576.755671][ T5872] gspca_main: spca500-2.14.0 probing 041e:400a [ 576.793068][ T5872] usb 6-1: USB disconnect, device number 73 [ 576.844460][ T24] usb 7-1: USB disconnect, device number 54 [ 576.951143][T13253] udevd[13253]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 577.190771][T13287] FAULT_INJECTION: forcing a failure. [ 577.190771][T13287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.277327][T13287] CPU: 1 UID: 0 PID: 13287 Comm: syz.4.1750 Tainted: G L syzkaller #0 PREEMPT(full) [ 577.277358][T13287] Tainted: [L]=SOFTLOCKUP [ 577.277364][T13287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 577.277374][T13287] Call Trace: [ 577.277380][T13287] [ 577.277386][T13287] dump_stack_lvl+0x100/0x190 [ 577.277419][T13287] should_fail_ex.cold+0x5/0xa [ 577.277441][T13287] _copy_from_user+0x2e/0xd0 [ 577.277461][T13287] copy_msghdr_from_user+0x9f/0x4f0 [ 577.277480][T13287] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 577.277506][T13287] ___sys_sendmsg+0x106/0x1e0 [ 577.277526][T13287] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.277567][T13287] __sys_sendmsg+0x170/0x220 [ 577.277590][T13287] ? __pfx___sys_sendmsg+0x10/0x10 [ 577.277632][T13287] do_syscall_64+0x106/0xf80 [ 577.277646][T13287] ? clear_bhb_loop+0x40/0x90 [ 577.277664][T13287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.277680][T13287] RIP: 0033:0x7fa97f59c819 [ 577.277691][T13287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.277704][T13287] RSP: 002b:00007fa98042b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.277719][T13287] RAX: ffffffffffffffda RBX: 00007fa97f815fa0 RCX: 00007fa97f59c819 [ 577.277730][T13287] RDX: 0000000000048810 RSI: 0000200000000140 RDI: 0000000000000003 [ 577.277738][T13287] RBP: 00007fa98042b090 R08: 0000000000000000 R09: 0000000000000000 [ 577.277746][T13287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.277755][T13287] R13: 00007fa97f816038 R14: 00007fa97f815fa0 R15: 00007ffff4113e68 [ 577.277777][T13287] [ 577.642357][T13290] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 577.717956][ T9] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 577.740127][ T9] asix 1-1:2.88: probe with driver asix failed with error -71 [ 577.773113][ T9] usb 1-1: USB disconnect, device number 79 [ 578.092956][T13300] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 578.267158][T13301] openvswitch: netlink: Duplicate or invalid key (type 0). [ 578.274708][T13301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.289225][ T24] wg1 speed is unknown, defaulting to 1000 [ 578.391134][T13303] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1756'. [ 578.401191][T13303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1756'. [ 578.573845][T13305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.597046][T13305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.863123][T13319] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1761'. [ 579.984370][ T5872] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 580.161294][ T5872] usb 1-1: unable to get BOS descriptor or descriptor too short [ 580.176977][ T5872] usb 1-1: New USB device found, idVendor=0582, idProduct=0048, bcdDevice= 0.40 [ 580.194980][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.204176][ T5872] usb 1-1: Product: syz [ 580.208319][ T5872] usb 1-1: Manufacturer: syz [ 580.212912][ T5872] usb 1-1: SerialNumber: syz [ 580.414568][ T9] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 580.505551][T13325] Cannot find add_set index 0 as target [ 580.643606][ T5872] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 580.664777][ T5872] usb 1-1: invalid MIDI in EP 0 [ 580.794379][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 580.812016][ T5872] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 580.821262][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 580.830651][ T9] usb 6-1: config 14 has an invalid interface number: 178 but max is 0 [ 580.850687][ T5872] usb 1-1: USB disconnect, device number 80 [ 580.858510][ T9] usb 6-1: config 14 has no interface number 0 [ 580.865302][T13247] udevd[13247]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.891253][ T9] usb 6-1: config 14 interface 178 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16 [ 580.911448][ T9] usb 6-1: config 14 interface 178 has no altsetting 0 [ 580.932036][ T9] usb 6-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice= 2.44 [ 580.949526][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.958056][ T9] usb 6-1: Product: syz [ 580.966733][ T9] usb 6-1: Manufacturer: syz [ 580.972506][ T9] usb 6-1: SerialNumber: syz [ 580.993444][T13322] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 581.251580][T13339] vxcan1 speed is unknown, defaulting to 1000 [ 581.402834][T13339] lo speed is unknown, defaulting to 1000 [ 581.409899][T13339] wg1 speed is unknown, defaulting to 1000 [ 581.457956][T13340] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1767'. [ 581.479986][ T9] radio-si470x 6-1:14.178: could not find interrupt in endpoint [ 581.494093][ T9] radio-si470x 6-1:14.178: probe with driver radio-si470x failed with error -5 [ 582.260601][ T9] usbhid 6-1:14.178: couldn't find an input interrupt endpoint [ 582.282179][ T9] usb 6-1: USB disconnect, device number 74 [ 582.400865][T13343] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 582.434564][T13347] fuse: Unknown parameter 'C' [ 582.439784][T13343] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 582.520454][T13343] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 582.547561][T13343] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 583.061436][ T30] audit: type=1400 audit(2000000276.270:1092): avc: denied { sqpoll } for pid=13355 comm="syz.3.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 583.328747][T13369] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1775'. [ 583.715285][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1779'. [ 584.282002][T13385] sp0: Synchronizing with TNC [ 585.956800][T13393] vxcan1 speed is unknown, defaulting to 1000 [ 586.831650][T13393] lo speed is unknown, defaulting to 1000 [ 586.845558][T13393] wg1 speed is unknown, defaulting to 1000 [ 587.538061][ T5816] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 587.658199][T13403] netlink: 'syz.4.1784': attribute type 3 has an invalid length. [ 587.666342][T13403] netlink: 'syz.4.1784': attribute type 3 has an invalid length. [ 587.694695][ T5816] usb 7-1: Using ep0 maxpacket: 16 [ 587.709301][ T5816] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.732801][ T5816] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.739795][T13407] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1785'. [ 587.744186][ T5816] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.772677][ T5816] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 587.799369][ T5816] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.810451][T13410] netlink: 400 bytes leftover after parsing attributes in process `syz.4.1786'. [ 587.813807][T13407] syzkaller0: entered promiscuous mode [ 587.821965][ T5816] usb 7-1: config 0 descriptor?? [ 587.877935][T13411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.889831][T13407] syzkaller0: entered allmulticast mode [ 587.896466][T13411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.188283][T13416] openvswitch: netlink: Flow actions attr not present in new flow. [ 588.218737][ T30] audit: type=1400 audit(2000000281.550:1093): avc: denied { mount } for pid=13412 comm="syz.5.1787" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 588.271755][T13390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.281926][T13390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.389334][ T30] audit: type=1400 audit(2000000281.730:1094): avc: denied { setopt } for pid=13388 comm="syz.6.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 588.535072][T13421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.564237][T13421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.613041][T13422] imon:display_open: display port is already open [ 589.944169][T13437] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1791'. [ 593.035047][ T9] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 593.064897][ T5816] usbhid 7-1:0.0: can't add hid device: -32 [ 593.156660][ T5816] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 593.234088][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 593.241235][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.252925][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.264210][ T9] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 593.273358][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.286615][ T9] usb 6-1: config 0 descriptor?? [ 593.711007][ T9] hid_parser_main: 27 callbacks suppressed [ 593.711021][ T9] ntrig 0003:1B96:0008.0011: unknown main item tag 0x0 [ 593.724074][ T9] ntrig 0003:1B96:0008.0011: unknown main item tag 0x0 [ 593.731056][ T9] ntrig 0003:1B96:0008.0011: unknown main item tag 0x0 [ 593.738392][ T9] ntrig 0003:1B96:0008.0011: unknown main item tag 0x0 [ 593.745654][ T9] ntrig 0003:1B96:0008.0011: unknown main item tag 0x0 [ 593.846528][ T9] ntrig 0003:1B96:0008.0011: unknown main item tag 0x0 [ 593.853395][ T9] ntrig 0003:1B96:0008.0011: unknown main item tag 0x0 [ 593.874146][ T9] ntrig 0003:1B96:0008.0011: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.5-1/input0 [ 594.210140][ T9] ntrig 0003:1B96:0008.0011: Firmware version: 6.2.27.63.0 (8bec f87f) [ 594.402633][T13436] vxcan1 speed is unknown, defaulting to 1000 [ 594.477820][T13436] lo speed is unknown, defaulting to 1000 [ 594.484529][T13436] wg1 speed is unknown, defaulting to 1000 [ 594.717690][T13462] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 594.908091][ T9] usb 6-1: USB disconnect, device number 75 [ 595.461244][T13468] SELinux: failed to load policy [ 595.897933][ T30] audit: type=1400 audit(2000000289.250:1095): avc: denied { append } for pid=13478 comm="syz.0.1802" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 596.185545][ T9] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 596.495806][T13484] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 596.505501][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 596.517046][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.535455][T13475] input: syz1 as /devices/virtual/input/input35 [ 596.545901][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.557807][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 596.581863][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 596.709276][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.723065][ T9] usb 6-1: config 0 descriptor?? [ 597.411609][T13496] netlink: 'syz.6.1806': attribute type 4 has an invalid length. [ 597.420188][T13496] netlink: 'syz.6.1806': attribute type 4 has an invalid length. [ 597.459703][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0012/input/input36 [ 597.604285][ T9] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 598.367831][T13505] syz.4.1807 (13505): drop_caches: 2 [ 598.639068][T13508] gfs2: gfs2 mount does not exist [ 598.881399][ T9] usb 6-1: reset high-speed USB device number 76 using dummy_hcd [ 599.269676][T13521] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1812'. [ 599.563366][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 599.575530][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 599.586127][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 599.597453][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 599.607077][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 600.054779][T13522] vxcan1 speed is unknown, defaulting to 1000 [ 600.337639][ T30] audit: type=1400 audit(2000000293.670:1096): avc: denied { ioctl } for pid=13525 comm="syz.6.1814" path="socket:[44398]" dev="sockfs" ino=44398 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 600.603441][T13522] lo speed is unknown, defaulting to 1000 [ 600.624937][T13522] wg1 speed is unknown, defaulting to 1000 [ 600.724861][T13546] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 600.734857][T13544] syzkaller1: entered promiscuous mode [ 600.740338][T13544] syzkaller1: entered allmulticast mode [ 600.798474][ T30] audit: type=1400 audit(2000000294.150:1097): avc: denied { read } for pid=13541 comm="syz.4.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 600.814017][ T9] usb 6-1: device descriptor read/64, error -71 [ 600.897660][T13522] chnl_net:caif_netlink_parms(): no params data found [ 600.907436][ T30] audit: type=1400 audit(2000000294.260:1098): avc: denied { shutdown } for pid=13541 comm="syz.4.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 601.018377][T13522] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.058090][T13522] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.072234][T13522] bridge_slave_0: entered allmulticast mode [ 601.079362][T13522] bridge_slave_0: entered promiscuous mode [ 601.096294][T13522] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.103544][T13522] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.112644][T13522] bridge_slave_1: entered allmulticast mode [ 601.116939][ T9] usb 6-1: reset high-speed USB device number 76 using dummy_hcd [ 601.120338][T13522] bridge_slave_1: entered promiscuous mode [ 601.132652][ T9] usb 6-1: device reset changed ep0 maxpacket size! [ 601.145590][ T5816] usb 6-1: USB disconnect, device number 76 [ 601.164178][T13522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.177244][T13522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.206484][T13522] team0: Port device team_slave_0 added [ 601.213589][T13522] team0: Port device team_slave_1 added [ 601.234929][T13522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.241949][T13522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.268221][T13522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.279946][T13522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.286948][T13522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.313100][T13522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.314013][ T5816] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 601.350611][T13522] hsr_slave_0: entered promiscuous mode [ 601.356823][T13522] hsr_slave_1: entered promiscuous mode [ 601.362801][T13522] debugfs: 'hsr0' already exists in 'hsr' [ 601.368708][T13522] Cannot create hsr debugfs directory [ 601.475785][ T5816] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.506358][ T5816] usb 6-1: config 0 interface 0 has no altsetting 0 [ 601.536016][ T5816] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 601.548078][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.567149][ T5816] usb 6-1: Product: syz [ 601.572115][ T5816] usb 6-1: Manufacturer: syz [ 601.578739][ T5816] usb 6-1: SerialNumber: syz [ 601.586164][ T5816] usb 6-1: config 0 descriptor?? [ 601.639098][ T5816] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 601.694630][ T5816] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 601.704425][ T5810] Bluetooth: hci4: command tx timeout [ 601.716134][ T5816] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 601.780746][ T5816] usb 6-1: media controller created [ 601.798401][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 601.877621][ T5816] DVB: Unable to find symbol tda10046_attach() [ 601.896719][ T5816] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 601.911321][ T5816] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 601.969936][T13522] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 601.998298][T13522] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 602.014984][T13522] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 602.040040][T13522] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 602.332957][T13522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.374643][T13522] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.517086][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.524245][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.547546][ T7790] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.554724][ T7790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.810413][T13582] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 602.868135][T13522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.203949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 604.000334][ T5810] Bluetooth: hci4: command tx timeout [ 604.152026][ T5816] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 604.197710][ T5816] usb 6-1: USB disconnect, device number 77 [ 604.413392][T13522] veth0_vlan: entered promiscuous mode [ 604.478283][T13522] veth1_vlan: entered promiscuous mode [ 604.528976][T13618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.552873][T13522] veth0_macvtap: entered promiscuous mode [ 604.559465][T13618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.560075][T13619] exfat: Deprecated parameter 'debug' [ 604.572193][T13522] veth1_macvtap: entered promiscuous mode [ 604.587974][T13619] exFAT-fs (nullb0): invalid boot record signature [ 604.591500][T13522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.607215][T13522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.614589][T13619] exFAT-fs (nullb0): failed to read boot sector [ 604.620883][T13619] exFAT-fs (nullb0): failed to recognize exfat type [ 604.644456][ T7790] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.655952][ T7790] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.680770][ T7790] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.703512][ T7790] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.982657][T13624] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 605.260801][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.275304][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.358441][T12983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.364468][T13628] syzkaller0: entered promiscuous mode [ 605.371734][T13628] syzkaller0: entered allmulticast mode [ 605.376592][T12983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.419449][ T30] audit: type=1400 audit(2000000298.770:1099): avc: denied { mounton } for pid=13522 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 605.518250][ T30] audit: type=1400 audit(2000000298.860:1100): avc: denied { append } for pid=13632 comm="syz.7.1811" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 606.023995][ T5810] Bluetooth: hci4: command tx timeout [ 606.522876][T13659] xt_ecn: cannot match TCP bits for non-tcp packets [ 607.104840][T13671] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1844'. [ 607.168056][T13671] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.178452][T13671] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.196054][T13671] .` (unregistering): (slave syz_tun): Releasing backup interface [ 607.216038][T13671] .` (unregistering): Released all slaves [ 607.369674][T13674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.380717][T13674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.668092][T13676] input: syz0 as /devices/virtual/input/input37 [ 607.760952][T13678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.772002][T13678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.855573][T13681] loop6: detected capacity change from 0 to 2640 [ 607.862401][T13681] buffer_io_error: 5 callbacks suppressed [ 607.862415][T13681] Buffer I/O error on dev loop6, logical block 0, async page read [ 607.876170][T13681] Buffer I/O error on dev loop6, logical block 0, async page read [ 607.884015][T13681] Buffer I/O error on dev loop6, logical block 0, async page read [ 607.891847][T13681] Buffer I/O error on dev loop6, logical block 0, async page read [ 607.900116][T13681] Buffer I/O error on dev loop6, logical block 0, async page read [ 607.910695][T13681] Buffer I/O error on dev loop6, logical block 0, async page read [ 607.912295][T13684] blk_print_req_error: 1 callbacks suppressed [ 607.912307][T13684] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 607.918611][T13681] Buffer I/O error on dev loop6, logical block 0, async page read [ 607.918662][T13681] Buffer I/O error on dev loop6, logical block 0, async page read [ 607.918676][T13681] ldm_validate_partition_table(): Disk read failed. [ 607.918698][T13681] Buffer I/O error on dev loop6, logical block 0, async page read [ 607.924851][T13684] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 607.934533][T13681] Buffer I/O error on dev loop6, logical block 0, async page read [ 607.934572][T13681] Dev loop6: unable to read RDB block 0 [ 607.944661][T13684] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 607.950735][T13681] loop6: unable to read partition table [ 607.957087][T13684] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 607.965005][T13681] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 607.975355][T13684] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 1 [ 608.032069][T13684] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 1 [ 608.041854][T13684] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 1 [ 608.051662][T13684] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 1 [ 608.124058][ T5810] Bluetooth: hci4: command tx timeout [ 608.306821][ T30] audit: type=1400 audit(2000000301.630:1101): avc: denied { write } for pid=13682 comm="syz.0.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 608.328558][ T30] audit: type=1400 audit(2000000301.650:1102): avc: denied { accept } for pid=13682 comm="syz.0.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 608.585883][ T30] audit: type=1400 audit(2000000301.940:1103): avc: denied { map } for pid=13688 comm="syz.5.1851" path="socket:[46307]" dev="sockfs" ino=46307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 608.620337][T13691] syzkaller0: entered promiscuous mode [ 608.627425][T13691] syzkaller0: entered allmulticast mode [ 608.888157][ T8254] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 609.332435][ T30] audit: type=1400 audit(2000000302.680:1104): avc: denied { getopt } for pid=13701 comm="syz.7.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 609.659032][ T8254] usb 6-1: unable to get BOS descriptor or descriptor too short [ 609.702080][ T8254] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.716784][ T8254] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 609.725955][ T8254] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 609.843034][ T8254] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 609.861436][ T8254] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 609.870754][ T8254] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.053698][ T8254] usb 6-1: Product: syz [ 610.073730][ T8254] usb 6-1: Manufacturer: syz [ 610.097293][ T8254] usb 6-1: SerialNumber: syz [ 610.371431][T13726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.380559][T13726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.393980][ T5980] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 610.444450][ T881] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 610.553973][ T5980] usb 1-1: Using ep0 maxpacket: 16 [ 610.791739][ T5980] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 610.801405][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.809513][ T881] usb 8-1: Using ep0 maxpacket: 16 [ 610.818371][ T881] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.830028][ T5980] usb 1-1: Product: syz [ 610.834547][ T881] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.844334][ T5980] usb 1-1: Manufacturer: syz [ 610.852860][ T5980] usb 1-1: SerialNumber: syz [ 610.859524][ T881] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 610.875531][ T5980] usb 1-1: config 0 descriptor?? [ 610.886735][ T881] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 611.063589][ T881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.608717][ T881] usb 8-1: config 0 descriptor?? [ 611.814830][ T8254] usb 6-1: USB disconnect, device number 78 [ 611.828511][T13754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.854152][T13752] syzkaller0: entered promiscuous mode [ 611.859756][T13752] syzkaller0: entered allmulticast mode [ 611.880652][T13754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.903278][T13603] udevd[13603]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 612.279011][ T881] usbhid 8-1:0.0: can't add hid device: -71 [ 612.789830][ T881] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 612.800018][ T881] usb 8-1: USB disconnect, device number 2 [ 613.005711][T13777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.015977][T13777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.112704][ T9] usb 1-1: USB disconnect, device number 81 [ 613.221020][T13783] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 614.431342][T13800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.441100][T13800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.034099][ T881] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 615.195910][ T881] usb 8-1: unable to get BOS descriptor or descriptor too short [ 615.211114][ T881] usb 8-1: config 1 has an invalid descriptor of length 155, skipping remainder of the config [ 615.232541][ T881] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 615.274673][ T881] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 615.292786][ T881] usb 8-1: string descriptor 0 read error: -22 [ 615.304746][ T881] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 615.566985][ T881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.629061][T13826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13826 comm=syz.6.1887 [ 616.005076][ T881] usb 8-1: 2:0: cannot get min/max values for control 2 (id 2) [ 616.096076][ T881] usb 8-1: 2:0: cannot get min/max values for control 2 (id 2) [ 616.137688][T13845] openvswitch: netlink: Flow actions attr not present in new flow. [ 616.291185][ T5871] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 616.356102][ T881] usb 8-1: 2:0: cannot get min/max values for control 2 (id 2) [ 616.394298][ T881] usb 8-1: USB disconnect, device number 3 [ 616.464309][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 616.474266][ T5871] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 616.502791][ T30] audit: type=1326 audit(2000000309.840:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97f59c819 code=0x7ffc0000 [ 616.511353][T13849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.528069][ T5871] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.550553][ T5871] usb 1-1: config 0 has no interface number 0 [ 616.557161][T13849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.571812][ T30] audit: type=1326 audit(2000000309.840:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97f59c819 code=0x7ffc0000 [ 616.612154][ T5871] usb 1-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 616.626563][ T5871] usb 1-1: config 0 interface 200 has no altsetting 0 [ 616.633454][ T30] audit: type=1326 audit(2000000309.840:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97f59c819 code=0x7ffc0000 [ 616.664454][ T30] audit: type=1326 audit(2000000309.840:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fa97f59c819 code=0x7ffc0000 [ 616.711563][ T5871] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 616.835682][T13856] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 616.862217][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.974385][ T5871] usb 1-1: Product: syz [ 616.978575][ T5871] usb 1-1: Manufacturer: syz [ 616.986552][ T5871] usb 1-1: SerialNumber: syz [ 617.004401][ T30] audit: type=1326 audit(2000000309.900:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97f59c819 code=0x7ffc0000 [ 617.028820][ T5871] usb 1-1: config 0 descriptor?? [ 617.035005][ T30] audit: type=1326 audit(2000000309.900:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa97f59c582 code=0x7ffc0000 [ 617.088198][ T30] audit: type=1326 audit(2000000309.900:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa97f59c617 code=0x7ffc0000 [ 617.112817][ T30] audit: type=1326 audit(2000000309.900:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa97f559511 code=0x7ffc0000 [ 617.137463][ T30] audit: type=1326 audit(2000000309.900:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa97f59d609 code=0x7ffc0000 [ 617.165482][ T30] audit: type=1326 audit(2000000309.900:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa97f55957b code=0x7ffc0000 [ 617.273670][ T5871] usbhid 1-1:0.200: couldn't find an input interrupt endpoint [ 617.295507][ T5871] usb 1-1: USB disconnect, device number 82 [ 617.314140][ T5816] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 617.381417][T13867] vxcan1 speed is unknown, defaulting to 1000 [ 617.447575][T13868] loop6: detected capacity change from 0 to 2640 [ 617.484101][ T5816] usb 6-1: Using ep0 maxpacket: 16 [ 617.490759][ T5816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.503367][T13868] buffer_io_error: 6 callbacks suppressed [ 617.503378][T13868] Buffer I/O error on dev loop6, logical block 0, async page read [ 617.517206][ T5816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.527551][ T5816] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 617.540766][ T5816] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 617.545958][T13868] Buffer I/O error on dev loop6, logical block 0, async page read [ 617.550170][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.597544][ T5816] usb 6-1: config 0 descriptor?? [ 617.648961][T13868] Buffer I/O error on dev loop6, logical block 0, async page read [ 617.664313][T13868] Buffer I/O error on dev loop6, logical block 0, async page read [ 617.853448][T13868] Buffer I/O error on dev loop6, logical block 0, async page read [ 617.994095][T13868] Buffer I/O error on dev loop6, logical block 0, async page read [ 618.005578][T13872] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 618.019817][T13868] Buffer I/O error on dev loop6, logical block 0, async page read [ 618.030511][T13868] Buffer I/O error on dev loop6, logical block 0, async page read [ 618.070099][ T5816] usbhid 6-1:0.0: can't add hid device: -71 [ 618.078182][ T5816] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 618.100931][ T5816] usb 6-1: USB disconnect, device number 79 [ 618.109896][T13868] ldm_validate_partition_table(): Disk read failed. [ 618.124903][T13868] Buffer I/O error on dev loop6, logical block 0, async page read [ 618.143318][T13868] Buffer I/O error on dev loop6, logical block 0, async page read [ 618.151547][T13868] Dev loop6: unable to read RDB block 0 [ 618.159255][T13868] loop6: unable to read partition table [ 618.181722][T13868] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 618.312971][T13884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 618.347518][T13867] lo speed is unknown, defaulting to 1000 [ 618.363997][T13867] wg1 speed is unknown, defaulting to 1000 [ 618.488476][T13888] openvswitch: netlink: Flow actions attr not present in new flow. [ 619.074055][ T881] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 619.125156][ T5980] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 619.189947][ T5178] ldm_validate_partition_table(): Disk read failed. [ 619.223993][ T881] usb 6-1: device descriptor read/64, error -71 [ 619.296725][ T5178] Dev loop6: unable to read RDB block 0 [ 619.307549][ T5178] loop6: unable to read partition table [ 619.315343][ T5980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.333771][ T5980] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 619.376993][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 619.411183][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 619.458883][ T5980] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 619.482804][T13910] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 619.514164][ T881] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 619.586570][ T5980] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 619.597249][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 619.605526][ T5980] usb 1-1: Product: syz [ 619.610108][ T5980] usb 1-1: Manufacturer: syz [ 619.614908][ T5980] usb 1-1: SerialNumber: syz [ 619.676634][ T5980] usb 1-1: config 0 descriptor?? [ 619.756949][ T881] usb 6-1: device descriptor read/64, error -71 [ 619.864524][ T881] usb usb6-port1: attempt power cycle [ 619.976318][ T5980] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 620.004214][ T5980] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 620.091346][ T5980] usb 1-1: USB disconnect, device number 83 [ 620.223999][ T881] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 620.244846][ T881] usb 6-1: device descriptor read/8, error -71 [ 620.484005][ T881] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 620.505883][ T881] usb 6-1: device descriptor read/8, error -71 [ 620.624271][ T881] usb usb6-port1: unable to enumerate USB device [ 620.909171][T13919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.919029][T13919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.805954][T13925] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 622.017225][T13921] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 622.275508][T13931] openvswitch: netlink: Flow actions attr not present in new flow. [ 622.444976][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 622.444993][ T30] audit: type=1400 audit(2000000315.680:1133): avc: denied { create } for pid=13926 comm="syz.6.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 622.483850][ T30] audit: type=1400 audit(2000000315.750:1134): avc: denied { setattr } for pid=13926 comm="syz.6.1916" name="wireless" dev="proc" ino=4026534221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 622.834443][ T881] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 622.931634][T13944] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1920'. [ 622.942958][T13944] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 623.004108][ T881] usb 6-1: Using ep0 maxpacket: 16 [ 623.269419][ T881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.384196][ T881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.394323][ T881] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 623.413128][ T881] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 623.422794][ T881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.445357][ T881] usb 6-1: config 0 descriptor?? [ 623.556568][T13951] x_tables: duplicate underflow at hook 1 [ 623.562942][ T30] audit: type=1400 audit(2000000316.910:1135): avc: denied { listen } for pid=13950 comm="syz.6.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 623.888773][T13959] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 623.894923][T13961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.927833][T13961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.097553][ T881] usbhid 6-1:0.0: can't add hid device: -71 [ 624.104253][ T881] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 624.149116][ T881] usb 6-1: USB disconnect, device number 84 [ 624.206639][T13966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.215591][T13966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.104359][T13984] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1930'. [ 625.113395][T13984] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1930'. [ 625.464324][ T881] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 625.490172][T13986] openvswitch: netlink: Flow actions attr not present in new flow. [ 625.621416][ T881] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 625.690095][ T881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.718053][ T881] usb 6-1: Product: syz [ 625.728978][ T881] usb 6-1: Manufacturer: syz [ 625.740399][ T881] usb 6-1: SerialNumber: syz [ 626.123878][ T881] usb 6-1: config 0 descriptor?? [ 626.218072][ T881] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 626.343195][T14001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1934'. [ 626.362400][T14000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1934'. [ 626.633843][T14008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.654390][T14008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.754190][ T881] gspca_sunplus: reg_r err -110 [ 626.766377][T13997] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1935'. [ 627.175456][T14007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=14007 comm=syz.5.1928 [ 627.447757][T14018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1937'. [ 627.605601][T14020] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1937'. [ 627.827825][T14016] ptrace attach of "./syz-executor exec"[8032] was attempted by "./syz-executor exec"[14016] [ 628.377747][T14032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1941'. [ 628.671277][ T5816] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 628.995603][ T5816] usb 8-1: not running at top speed; connect to a high speed hub [ 629.117312][ T5816] usb 8-1: config 1 has an invalid interface number: 56 but max is 0 [ 629.134744][ T5816] usb 8-1: config 1 has an invalid descriptor of length 45, skipping remainder of the config [ 629.156298][ T5816] usb 8-1: config 1 has no interface number 0 [ 629.300031][T14038] netlink: 'syz.4.1944': attribute type 21 has an invalid length. [ 629.329682][ T5816] usb 8-1: config 1 interface 56 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.346189][ T5816] usb 8-1: config 1 interface 56 has no altsetting 0 [ 629.352902][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.363004][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.375691][ T5816] usb 8-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=f8.5f [ 629.375923][ T5980] usb 6-1: USB disconnect, device number 85 [ 629.387076][ T5816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.398896][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.411648][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.534097][ T5816] usb 8-1: Product: syz [ 629.542466][ T5816] usb 8-1: Manufacturer: syz [ 629.549100][ T5816] usb 8-1: SerialNumber: syz [ 629.800758][ T5816] gspca_main: spca500-2.14.0 probing 041e:400a [ 629.891775][ T5810] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 629.903069][ T5810] CPU: 0 UID: 0 PID: 5810 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.903102][ T5810] Tainted: [L]=SOFTLOCKUP [ 629.903109][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 629.903124][ T5810] Workqueue: hci3 hci_rx_work [ 629.903153][ T5810] Call Trace: [ 629.903159][ T5810] [ 629.903167][ T5810] dump_stack_lvl+0x100/0x190 [ 629.903199][ T5810] sysfs_warn_dup.cold+0x1c/0x28 [ 629.903224][ T5810] sysfs_create_dir_ns+0x24b/0x2b0 [ 629.903252][ T5810] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 629.903276][ T5810] ? find_held_lock+0x2b/0x80 [ 629.903305][ T5810] ? kobject_add_internal+0x25f/0x930 [ 629.903328][ T5810] ? kobject_add_internal+0x25f/0x930 [ 629.903350][ T5810] ? do_raw_spin_unlock+0x145/0x1e0 [ 629.903374][ T5810] kobject_add_internal+0x2c8/0x930 [ 629.903400][ T5810] kobject_add+0x16a/0x1e0 [ 629.903422][ T5810] ? __pfx_kobject_add+0x10/0x10 [ 629.903442][ T5810] ? class_to_subsys+0x10f/0x150 [ 629.903468][ T5810] ? kobject_put+0xb9/0x640 [ 629.903485][ T5810] ? _raw_spin_unlock+0x28/0x50 [ 629.903518][ T5810] device_add+0x294/0x1950 [ 629.903541][ T5810] ? __pfx_dev_set_name+0x10/0x10 [ 629.903568][ T5810] ? __pfx_device_add+0x10/0x10 [ 629.903591][ T5810] ? mgmt_send_event_skb+0x2fb/0x460 [ 629.903624][ T5810] hci_conn_add_sysfs+0x1a3/0x260 [ 629.903653][ T5810] le_conn_complete_evt+0x11eb/0x1f60 [ 629.903688][ T5810] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 629.903721][ T5810] hci_le_conn_complete_evt+0x23c/0x3a0 [ 629.903747][ T5810] ? skb_pull_data+0x15f/0x1e0 [ 629.903772][ T5810] hci_le_meta_evt+0x34a/0x5f0 [ 629.903797][ T5810] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 629.903825][ T5810] hci_event_packet+0x51c/0xcd0 [ 629.903851][ T5810] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 629.903878][ T5810] ? __pfx_hci_event_packet+0x10/0x10 [ 629.903905][ T5810] ? kcov_remote_start+0x374/0x660 [ 629.903929][ T5810] ? lockdep_hardirqs_on+0x78/0x100 [ 629.903964][ T5810] hci_rx_work+0x451/0xfc0 [ 629.903993][ T5810] process_one_work+0xa23/0x19a0 [ 629.904037][ T5810] ? __pfx_process_one_work+0x10/0x10 [ 629.904068][ T5810] ? __pfx_hci_rx_work+0x10/0x10 [ 629.904098][ T5810] worker_thread+0x5ef/0xe50 [ 629.904132][ T5810] ? kthread+0x13a/0x450 [ 629.904150][ T5810] ? __pfx_worker_thread+0x10/0x10 [ 629.904170][ T5810] kthread+0x370/0x450 [ 629.904187][ T5810] ? __pfx_kthread+0x10/0x10 [ 629.904208][ T5810] ret_from_fork+0x754/0xd80 [ 629.904230][ T5810] ? __pfx_ret_from_fork+0x10/0x10 [ 629.904250][ T5810] ? rcu_is_watching+0x12/0xc0 [ 629.904273][ T5810] ? __switch_to+0x7b4/0x1120 [ 629.904298][ T5810] ? __pfx_kthread+0x10/0x10 [ 629.904319][ T5810] ret_from_fork_asm+0x1a/0x30 [ 629.904357][ T5810] [ 629.914236][T14049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.190247][ T5810] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 630.204932][ T5810] Bluetooth: hci3: failed to register connection device [ 630.230760][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1946'. [ 630.586647][T14051] nbd: socks must be embedded in a SOCK_ITEM attr [ 631.110257][ T5816] usb 8-1: USB disconnect, device number 4 [ 631.188158][T14059] Cannot find add_set index 0 as target [ 632.114360][T13603] udevd[13603]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 632.150317][T13450] udevd[13450]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 632.251226][T14049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.276828][T14049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.286092][T14049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.474009][ T5872] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 632.494149][ T24] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 632.563989][ T5816] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 632.623964][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 632.630904][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.642260][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.652826][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 632.654035][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 632.665882][ T5872] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 632.674052][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.680182][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.699338][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.701028][ T5872] usb 1-1: config 0 descriptor?? [ 632.714349][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 632.728432][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 632.736229][ T5816] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.738014][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.748058][ T5816] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 632.769835][ T5816] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 632.770348][ T24] usb 6-1: config 0 descriptor?? [ 632.788951][ T5816] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 632.802909][ T5816] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 632.819820][ T5816] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 632.831431][ T5816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 632.856749][ T5816] usb 8-1: Product: syz [ 632.861010][ T5816] usb 8-1: Manufacturer: syz [ 632.866005][ T5816] usb 8-1: SerialNumber: syz [ 632.885760][ T5816] usb 8-1: config 0 descriptor?? [ 633.093733][ T5816] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 633.106963][ T5816] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -5 [ 633.147352][ T5816] usb 8-1: USB disconnect, device number 5 [ 633.328857][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0013/input/input38 [ 633.341643][ T5872] usbhid 1-1:0.0: can't add hid device: -71 [ 633.351805][ T5872] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 633.363558][ T5872] usb 1-1: USB disconnect, device number 84 [ 634.329637][ T24] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 634.378985][ T24] usb 6-1: USB disconnect, device number 86 [ 634.432108][T14080] fido_id[14080]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 634.700018][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1954'. [ 634.725971][T14085] SELinux: Context system_u:object_r:dri_device_t:s0 is not valid (left unmapped). [ 634.836213][ T30] audit: type=1400 audit(2000000328.070:1136): avc: denied { relabelfrom } for pid=14083 comm="syz.0.1956" name="RDS" dev="sockfs" ino=47189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 634.921120][T14092] sctp: [Deprecated]: syz.7.1957 (pid 14092) Use of struct sctp_assoc_value in delayed_ack socket option. [ 634.921120][T14092] Use struct sctp_sack_info instead [ 634.940609][ T30] audit: type=1400 audit(2000000328.090:1137): avc: denied { relabelto } for pid=14083 comm="syz.0.1956" name="RDS" dev="sockfs" ino=47189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rds_socket permissive=1 trawcon="system_u:object_r:dri_device_t:s0" [ 635.338341][T14100] vxcan1 speed is unknown, defaulting to 1000 [ 635.488762][T14100] lo speed is unknown, defaulting to 1000 [ 635.495866][T14100] wg1 speed is unknown, defaulting to 1000 [ 635.551350][T14101] netlink: 'syz.6.1959': attribute type 14 has an invalid length. [ 635.559257][T14101] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1959'. [ 635.826725][ T5816] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 635.969636][T14107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 636.243786][T14104] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 636.416129][ T5816] usb 1-1: not running at top speed; connect to a high speed hub [ 636.454879][ T5816] usb 1-1: config 1 has an invalid interface number: 56 but max is 0 [ 636.713344][T14112] openvswitch: netlink: Flow actions attr not present in new flow. [ 636.722220][ T5816] usb 1-1: config 1 has an invalid descriptor of length 45, skipping remainder of the config [ 636.783873][ T5816] usb 1-1: config 1 has no interface number 0 [ 636.794304][ T5816] usb 1-1: config 1 interface 56 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 636.818081][ T5816] usb 1-1: config 1 interface 56 has no altsetting 0 [ 636.843681][ T5816] usb 1-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=f8.5f [ 636.887354][T14118] batadv_slave_0: entered promiscuous mode [ 636.903507][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.964074][ T5816] usb 1-1: Product: syz [ 636.968380][ T5816] usb 1-1: Manufacturer: syz [ 636.972970][ T5816] usb 1-1: SerialNumber: syz [ 637.063387][T14115] batadv_slave_0: left promiscuous mode [ 637.212419][T14123] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1967'. [ 637.561569][ T5816] gspca_main: spca500-2.14.0 probing 041e:400a [ 637.569544][T14130] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 637.569838][T14130] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 637.624089][ T5816] usb 1-1: USB disconnect, device number 85 [ 640.021928][T14163] netlink: 'syz.0.1976': attribute type 10 has an invalid length. [ 640.726866][T14171] openvswitch: netlink: Flow actions attr not present in new flow. [ 641.998338][ T30] audit: type=1400 audit(2000000335.350:1138): avc: denied { bind } for pid=14186 comm="syz.4.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 642.530170][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1978'. [ 642.765921][T14167] siw: device registration error -23 [ 642.772639][T14167] smc: removing ib device syz2 [ 643.343722][T14167] ------------[ cut here ]------------ [ 643.349218][T14167] !xa_empty(&pool->xa) [ 643.349226][T14167] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#1: syz.5.1978/14167 [ 643.364664][T14167] Modules linked in: [ 643.368791][T14167] CPU: 1 UID: 0 PID: 14167 Comm: syz.5.1978 Tainted: G L syzkaller #0 PREEMPT(full) [ 643.379728][T14167] Tainted: [L]=SOFTLOCKUP [ 643.384077][T14167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 643.394129][T14167] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 643.399742][T14167] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 c6 d5 4e f9 5b e9 00 4a da 02 e8 bb d5 4e f9 90 <0f> 0b 90 e8 b2 d5 4e f9 5b c3 cc cc cc cc e8 e7 69 bb f9 eb d0 0f [ 643.419422][T14167] RSP: 0018:ffffc9000c87f1a0 EFLAGS: 00010246 [ 643.425524][T14167] RAX: 0000000000080000 RBX: ffff88805e4893b8 RCX: ffffc9001c85f000 [ 643.433570][T14167] RDX: 0000000000080000 RSI: ffffffff88ba21e5 RDI: ffff88805e489438 [ 643.441583][T14167] RBP: ffffffff88b88470 R08: 0000000000000005 R09: 0000000000000001 [ 643.449680][T14167] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88805e4886b0 [ 643.457721][T14167] R13: ffff88805e487fe0 R14: ffff88805e487fe0 R15: ffff88805e489118 [ 643.465728][T14167] FS: 00007f71fb3306c0(0000) GS:ffff888124439000(0000) knlGS:0000000000000000 [ 643.474667][T14167] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 643.481231][T14167] CR2: 00007f6527d4da08 CR3: 00000000336a5000 CR4: 00000000003526f0 [ 643.489213][T14167] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 643.497207][T14167] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 643.505177][T14167] Call Trace: [ 643.508448][T14167] [ 643.511356][T14167] rxe_dealloc+0x25/0xc0 [ 643.515599][T14167] ib_dealloc_device+0x49/0x230 [ 643.520442][T14167] __ib_unregister_device+0x396/0x480 [ 643.525816][T14167] ib_unregister_device_and_put+0x5a/0x80 [ 643.531516][T14167] nldev_dellink+0x226/0x320 [ 643.536191][T14167] ? __pfx_nldev_dellink+0x10/0x10 [ 643.541318][T14167] ? rcu_is_watching+0x12/0xc0 [ 643.546117][T14167] ? cap_capable+0x107/0x460 [ 643.550704][T14167] ? bpf_lsm_capable+0x9/0x10 [ 643.555371][T14167] ? security_capable+0x80/0x260 [ 643.560315][T14167] ? ns_capable+0xd2/0xf0 [ 643.564817][T14167] ? __pfx_nldev_dellink+0x10/0x10 [ 643.569934][T14167] rdma_nl_rcv_msg+0x38a/0x6e0 [ 643.574702][T14167] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 643.579966][T14167] ? __lock_acquire+0x4a5/0x2630 [ 643.584899][T14167] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 643.591301][T14167] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 643.598235][T14167] ? netlink_deliver_tap+0x1ae/0xcc0 [ 643.603507][T14167] netlink_unicast+0x5aa/0x870 [ 643.608270][T14167] ? __pfx_netlink_unicast+0x10/0x10 [ 643.613535][T14167] netlink_sendmsg+0x8b0/0xda0 [ 643.618293][T14167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.623550][T14167] ? __might_fault+0x50/0x140 [ 643.628469][T14167] ____sys_sendmsg+0x9e1/0xb70 [ 643.633214][T14167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.638559][T14167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.643832][T14167] ? __pfx_futex_wake_mark+0x10/0x10 [ 643.649118][T14167] ___sys_sendmsg+0x190/0x1e0 [ 643.653775][T14167] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.658980][T14167] __sys_sendmsg+0x170/0x220 [ 643.663759][T14167] ? __pfx___sys_sendmsg+0x10/0x10 [ 643.668903][T14167] ? __x64_sys_futex+0x34f/0x4d0 [ 643.673840][T14167] do_syscall_64+0x106/0xf80 [ 643.678416][T14167] ? clear_bhb_loop+0x40/0x90 [ 643.683072][T14167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.688973][T14167] RIP: 0033:0x7f71fa39c819 [ 643.693377][T14167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.713587][T14167] RSP: 002b:00007f71fb330028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.722021][T14167] RAX: ffffffffffffffda RBX: 00007f71fa615fa0 RCX: 00007f71fa39c819 [ 643.729997][T14167] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000c [ 643.737957][T14167] RBP: 00007f71fa432c91 R08: 0000000000000000 R09: 0000000000000000 [ 643.746003][T14167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.753987][T14167] R13: 00007f71fa616038 R14: 00007f71fa615fa0 R15: 00007ffd5fabccf8 [ 643.761950][T14167] [ 643.764965][T14167] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 643.772231][T14167] CPU: 1 UID: 0 PID: 14167 Comm: syz.5.1978 Tainted: G L syzkaller #0 PREEMPT(full) [ 643.783147][T14167] Tainted: [L]=SOFTLOCKUP [ 643.787454][T14167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 643.797485][T14167] Call Trace: [ 643.800742][T14167] [ 643.803650][T14167] dump_stack_lvl+0x100/0x190 [ 643.808313][T14167] vpanic+0x552/0x970 [ 643.812270][T14167] ? __pfx_vpanic+0x10/0x10 [ 643.816750][T14167] panic+0xd1/0xe0 [ 643.820444][T14167] ? __pfx_panic+0x10/0x10 [ 643.824840][T14167] check_panic_on_warn.cold+0x19/0x34 [ 643.830199][T14167] ? rxe_pool_cleanup+0x46/0x60 [ 643.835028][T14167] __warn.cold+0x191/0x348 [ 643.839420][T14167] __report_bug+0x296/0x3d0 [ 643.843924][T14167] ? rxe_pool_cleanup+0x46/0x60 [ 643.848761][T14167] ? __pfx___report_bug+0x10/0x10 [ 643.853762][T14167] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 643.859547][T14167] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 643.865337][T14167] ? __flush_workqueue+0x426/0x1200 [ 643.870511][T14167] ? __mutex_unlock_slowpath+0x15c/0x790 [ 643.876130][T14167] ? rxe_pool_cleanup+0x46/0x60 [ 643.880959][T14167] report_bug+0xb2/0x220 [ 643.885180][T14167] ? rxe_pool_cleanup+0x46/0x60 [ 643.890016][T14167] handle_bug+0x16a/0x2a0 [ 643.894319][T14167] exc_invalid_op+0x17/0x50 [ 643.898809][T14167] asm_exc_invalid_op+0x1a/0x20 [ 643.903631][T14167] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 643.909068][T14167] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 c6 d5 4e f9 5b e9 00 4a da 02 e8 bb d5 4e f9 90 <0f> 0b 90 e8 b2 d5 4e f9 5b c3 cc cc cc cc e8 e7 69 bb f9 eb d0 0f [ 643.928650][T14167] RSP: 0018:ffffc9000c87f1a0 EFLAGS: 00010246 [ 643.934700][T14167] RAX: 0000000000080000 RBX: ffff88805e4893b8 RCX: ffffc9001c85f000 [ 643.942659][T14167] RDX: 0000000000080000 RSI: ffffffff88ba21e5 RDI: ffff88805e489438 [ 643.950620][T14167] RBP: ffffffff88b88470 R08: 0000000000000005 R09: 0000000000000001 [ 643.958568][T14167] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88805e4886b0 [ 643.966529][T14167] R13: ffff88805e487fe0 R14: ffff88805e487fe0 R15: ffff88805e489118 [ 643.974476][T14167] ? __pfx_rxe_dealloc+0x10/0x10 [ 643.979408][T14167] ? rxe_pool_cleanup+0x45/0x60 [ 643.984240][T14167] rxe_dealloc+0x25/0xc0 [ 643.988472][T14167] ib_dealloc_device+0x49/0x230 [ 643.993300][T14167] __ib_unregister_device+0x396/0x480 [ 643.998654][T14167] ib_unregister_device_and_put+0x5a/0x80 [ 644.004353][T14167] nldev_dellink+0x226/0x320 [ 644.008921][T14167] ? __pfx_nldev_dellink+0x10/0x10 [ 644.014041][T14167] ? rcu_is_watching+0x12/0xc0 [ 644.018782][T14167] ? cap_capable+0x107/0x460 [ 644.023350][T14167] ? bpf_lsm_capable+0x9/0x10 [ 644.028012][T14167] ? security_capable+0x80/0x260 [ 644.032928][T14167] ? ns_capable+0xd2/0xf0 [ 644.037232][T14167] ? __pfx_nldev_dellink+0x10/0x10 [ 644.042322][T14167] rdma_nl_rcv_msg+0x38a/0x6e0 [ 644.047064][T14167] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 644.052335][T14167] ? __lock_acquire+0x4a5/0x2630 [ 644.057249][T14167] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 644.063642][T14167] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 644.070561][T14167] ? netlink_deliver_tap+0x1ae/0xcc0 [ 644.075831][T14167] netlink_unicast+0x5aa/0x870 [ 644.080570][T14167] ? __pfx_netlink_unicast+0x10/0x10 [ 644.085831][T14167] netlink_sendmsg+0x8b0/0xda0 [ 644.090573][T14167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.095829][T14167] ? __might_fault+0x50/0x140 [ 644.100494][T14167] ____sys_sendmsg+0x9e1/0xb70 [ 644.105232][T14167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.110491][T14167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.115769][T14167] ? __pfx_futex_wake_mark+0x10/0x10 [ 644.121034][T14167] ___sys_sendmsg+0x190/0x1e0 [ 644.125688][T14167] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.130884][T14167] __sys_sendmsg+0x170/0x220 [ 644.135454][T14167] ? __pfx___sys_sendmsg+0x10/0x10 [ 644.140558][T14167] ? __x64_sys_futex+0x34f/0x4d0 [ 644.145477][T14167] do_syscall_64+0x106/0xf80 [ 644.150043][T14167] ? clear_bhb_loop+0x40/0x90 [ 644.154707][T14167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.160574][T14167] RIP: 0033:0x7f71fa39c819 [ 644.164964][T14167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.184547][T14167] RSP: 002b:00007f71fb330028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.192946][T14167] RAX: ffffffffffffffda RBX: 00007f71fa615fa0 RCX: 00007f71fa39c819 [ 644.200903][T14167] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000c [ 644.208868][T14167] RBP: 00007f71fa432c91 R08: 0000000000000000 R09: 0000000000000000 [ 644.216813][T14167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.224756][T14167] R13: 00007f71fa616038 R14: 00007f71fa615fa0 R15: 00007ffd5fabccf8 [ 644.232708][T14167] [ 644.235986][T14167] Kernel Offset: disabled [ 644.240288][T14167] Rebooting in 86400 seconds..