last executing test programs: 2m44.312594401s ago: executing program 0 (id=1716): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e23000502008080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff030000000000000100000001"], 0x428}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) 2m44.255219947s ago: executing program 0 (id=1717): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3ff, 0xfffffe0000000001, 0x892, 0xffffffff}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e26, 0xd, @local, 0x9}, 0x1c) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000040)=""/173, &(0x7f0000000100)=0xad) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0x6}, 0xb329}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) set_mempolicy(0xc005, 0x0, 0x5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) 2m43.311834962s ago: executing program 0 (id=1720): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000004000/0x2000)=nil}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) getsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000140), &(0x7f0000000200)=0x10) sched_setaffinity(0x0, 0xc67e7be33bfcd098, &(0x7f0000000180)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f0000000000000a0100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000001000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x10, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd5}, 0xc010) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) 2m38.097937236s ago: executing program 0 (id=1732): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f0000000000)={0x10}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/connector\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r3 = mq_open(&(0x7f0000000040)='\xeb\xac\xa5\x03\x00\x00\x00\x00', 0x842, 0x0, 0x0) mq_timedreceive(r3, 0x0, 0xffffffffffffffea, 0x9, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4040884) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000600000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000099c900008500000015000000850000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r7, &(0x7f0000000080)=""/1, 0x1) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setpriority(0x2, 0x0, 0x6) r9 = fsmount(r8, 0x1, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) lseek(r2, 0x8001, 0x1) 2m35.476250452s ago: executing program 0 (id=1740): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e230005020080802100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff030000000000000100000001"], 0x428}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) 2m35.175051517s ago: executing program 0 (id=1744): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r4 = openat$null(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x0, &(0x7f0000000200)}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc000000180001"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m19.782694023s ago: executing program 32 (id=1744): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r4 = openat$null(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x0, &(0x7f0000000200)}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc000000180001"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) 35.873416923s ago: executing program 3 (id=2146): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x89) fchdir(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x201313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYBLOB="b70795"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4cc6, 0x84803) close(r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547e2db80000000000000002", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) 34.277189238s ago: executing program 3 (id=2151): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d0000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00003cd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x8, @empty, @mcast1, 0x80, 0x0, 0x0, 0x21000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0}, 0xc080) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) close(r4) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd2a, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 33.609971912s ago: executing program 3 (id=2157): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x24, 0x5a, 0xc6b747b6bf1c6b95, 0xfffffffd, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x24}}, 0x4800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x4, 0x6, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x7800, 0x9, 0x9}}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x6, 0xfffffffb, @vifc_lcl_ifindex=r1, @empty}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x104e23}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000400)={0x0, 0x5885, 0x2, 0x1000000, 0x48}, &(0x7f0000000340)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r9, 0x110, 0x1, 0xfffffffffffffffe, 0x11) r10 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x100002, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r10, 0x40096102, &(0x7f0000000440)={{}, 0x80}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20044890) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000400000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="08001f0005000000050011000100000008001f0008"], 0x70}}, 0x0) 31.937539154s ago: executing program 3 (id=2161): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYRES32], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)}], 0x1, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 30.808572018s ago: executing program 3 (id=2163): syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2, @local, {[@routing={0x84}], "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"}}}}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) r3 = syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000001200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0, 0x2, 0x8, 0x3, 0x3, 0x9}, {0x9, 0x5, 0x1, 0x2, 0x3ff, 0x4, 0x2, 0x5}, {0x9, 0x5, 0xe, 0x3, 0x10, 0xa, 0x75, 0x4}}}}}}]}}, 0x0) syz_usb_disconnect(r3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r4, 0x8}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000011c0)=0xfffffffd, 0x4) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='0'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead) write$sndseq(r5, &(0x7f00000010c0)=[{0x4, 0x1, 0xa, 0x8, @tick=0x8c, {0x5, 0x5}, {0x9, 0x7}, @queue={0xc, {0x5, 0x300}}}, {0x2, 0xf9, 0x4, 0x6, @tick=0x3, {0x2, 0x6}, {0x8, 0x3}, @addr={0xf7, 0x3b}}, {0x0, 0xf8, 0x8, 0x0, @time={0x1}, {0x8, 0xf7}, {0x8, 0x40}, @connect={{0x3, 0xf7}, {0x1, 0x9}}}, {0x0, 0x3, 0x3, 0x7, @tick=0x5, {0x7, 0x2}, {0x24, 0x9}, @time=@time={0x6, 0x7}}, {0x4, 0x4, 0x0, 0x4, @tick=0xc0b, {0x6f, 0x7f}, {0x8, 0x6}, @addr={0x3, 0x7}}, {0x6, 0x6, 0x9, 0xc2, @time={0xc, 0x3}, {0x28, 0x1}, {0x3, 0x2}, @connect={{0xc6, 0x5c}, {0x6}}}, {0x7f, 0x81, 0x7, 0x5, @time={0x52, 0x5}, {0x9, 0xc5}, {0x0, 0x3}, @ext={0xf3, &(0x7f0000000fc0)="4f9af49c44f1fbbaebfbdb25fbef66695aeac8cf170a40f74b552a241e0d3d58e6e21d14a6f181e9bd2bca67a2f867ef2df560fc90ca6e53438aa0a66932d33979c1906e60a71640ca5b717ea0ac1f260910e17f01b6051f333995c6cd074cc6462b19b960b0240e2131f35992b6ff1681a9e91739f90e99b50b4843f7cfbd304bc459b7834bc8ca93a0667fc3b7bdb6fb6595afb3a4eb5279453d0241c3cdb24d066ac107aecf9dd035efcc830b2d5ccb035fe1383d48a48fe09588e7f630a7c4d7c1a30e6f5665a1bcbe1dbcb724e83d84781ee1ca33642200e1c8b771bb2e5af47c487e25224aaeb8f317b96cf4c545f1d1"}}, {0x3, 0x8, 0x10, 0x0, @time={0x6, 0x9}, {0x95, 0x13}, {0x5, 0x28}, @connect={{0xd, 0x7}, {0x4, 0xc}}}], 0xe0) 28.939774233s ago: executing program 3 (id=2169): sync() sync() (async) r0 = socket$kcm(0x2, 0x0, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000380)="49cd7c", 0x3}], 0x1}, 0x0) (async) sync() (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) (async) sync() (async) sync() 13.741234988s ago: executing program 33 (id=2169): sync() sync() (async) r0 = socket$kcm(0x2, 0x0, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000380)="49cd7c", 0x3}], 0x1}, 0x0) (async) sync() (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) (async) sync() (async) sync() 11.922720935s ago: executing program 4 (id=2235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x1, 0x2, {0xa, 0x4e22, 0x6, @local, 0x6}}}, 0x32) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) shutdown(r6, 0x0) listen(r6, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r8, &(0x7f0000000940), &(0x7f0000000a40)=@udp6=r1}, 0x20) recvmmsg(r6, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f00000009c0)}, 0x7}], 0x1, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000", @ANYRES16=r9, @ANYBLOB="796100c5d2fbbd0000007e0000"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 11.439585309s ago: executing program 4 (id=2236): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x7, @loopback}, 0xb, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x4048011) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xa793, 0x2, [0x3, 0x6]}, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448df, &(0x7f0000000300)="1547c58bb12b18b54c0d7084cabb032cc6e28277e798b84b4ba3f60088d442dfafe2e65022c968c57e7d16c56bb0cc83d66b5eeb6a2638cfb0900140198a522364fa2a8283164fb01e492d07cd8825a1d80348ccc6650ee0735e3c8bb2a5ba7d39f32d49438e6dcaa91d34678c031592fa55a7d22c87cbc2c5e195e02743de9a2972d9ea2d93a5b2fec2dbff91e69b7b9318ec6bc77e090a9f9553fedab581390cb899c4896c404c4f2c54bc3ec23c48974ed81ada3b952d8d23f8c7dcdc51683c1a00f7c6993f3aa0a7f94f589167188de92ec7a962932776c69dc04540fd65d061f7a70ee4d681d7b959de8d4ef6cc59586f2e58bee229446f7e24b58281f10b1ab38f941bbc09d6cde9b985496fc2103d78a05b94781d40f60c7f8a0283780250d7bbb8a39965bd554847612b047f6f69350171e5465d280b83b64412353c8dd2162390b62b7ba2ea472c9bbef0e83f9b32707b6ed8eb8dbbd0a850319f0eae8cee56d01a1d0abde915bded6276e55af9684a412dbf37fb45d6d20bafc1d8115ec4caddf274020916b3a0f6b814c9398544120bd6fe0ae37d27eecd1e2d8f33e36cb6fe4667713cbf16207ba721f4d8dabea27a41619940a877b4ab78efeaa21d6a02bb54d4b78800621dba2d826553c77720335c839bb5b913ccc5a475edd8ef766eb9d9818c7da6a073897783e67c8480884bb3966ebc1d84b11f771450871e40836c28ac71e529dbd007024e9fceb2cc581f6ddae95f5323080c581dc3616820e09a8aaf3c9c31edb77ee3b5c2fbeb7fc57b197440478b011f95b58ef418343fce844cce485e3b7360dd1bc4cdafdf6073b887aa4d842c28ab2cb077062f0527e39b942325f9fd409b64535e66f03103d6ee896568adb3e99e92304226c8414a8a14a9f23db5110a4183d83298436f492ff115c224920a57cc2a48dc79c36407c8285a871c531084f477f2c006937baf331c0d26dbcf794bc8c635245be706230130e70b0ab7751003b8c10be94049f0968a861799991de18a6098c8abd72db2a5b4d80f825e91b9a5b2611f0905c45b3dedc3e32121d0a47a290ab18f9e16490af48cffe59a11dac2735bbfab9e60381abe02563995def1b8ac596b8bbaceaa93f15ea87a9158a27b997370aaac8f30c9422db1260239f132f87c488623f3928da9529b4cf9a1698f6d8c81e84c8763988c667613b8dd5f28e35e0cd0e7636ef58f7490811a6ee6aef49c738744a8a5827714b2641b057dcb9ee7cc61b6c8edbb7a88ef23bef6fa4bca97b0b190fd43bb705a071a4838c74f54b915c06a5a92dae51c90650fd936f28b1b301c14f5d48336004615d824b9d52516016f9282d1804d3a18e4c4e536392b3d1a7f545050642fef1f07508d471cb37a991c480414cd89ff8920b04cbed742756101311c3fbd7cb2e2f2ff858086c3e0f153ec727b5a84553420e038f120224afe89695cb8c34b5625408e11c5863a624562c90962f36f92b9de3af7fbabe62fbebe5331efddef75f95e34a424681f0f61489a23fee9a3c4ba2fcda3ac7aaa7b62c50aa47cde4040c0576a7e52880682dc09068d0bcfc038d85b3c93ae672b32feda82b4bb8d62695ef0d43e76f206115fd4ef6588400c27504e9509bdfcae54aac74d358d68d5efc837aec0169000598bc8e6d0cbc8083ea36656bc99a46a1886c5a0cacd4b61906a1591388563a3022160213bd870185925401219c01d28847cf2a09659c00ab3a3c597ae84c9696e63e3c09edb640e212dd4185bcfcbf4e512dc8c923405e34b231c2b0719e8201fee246638e4671804cf36038479f77984e684ce9ca59767ab3004992c01b75546a5e6908c5ee8ab5760dcb59e147e47464b85acb99fed7a862c53fc1c825c43aedb95eb06d7a3b6fff757efee49d7c93f19660df560ebad86e5dc00721ed5845b0a00db53ae706a40265a694440c5e3c62e7b693ea8cad217726e3a2e4b5bc096bdb8a92d47adec0be4ef4877b9106677bc0c641f2fcb6dbe4e5387863bb678f7dacebbe0c337ba713bc2d81750831c8141d8504968582e7e515b43b5e47d0376e96e280ec05cbff211848377e679ff168a6508c7be5085cabd414690e45e05f4e532ba8e52d449f9d662bc92f94e60191ff4e004594bbf163c760de0aa23840aa67c361e6c1a2174b033f661faa403513b031a3bbc1a685f19a75bbc599f0d7af37907a01df2d27f8ff4ead0662cf470c6f936e0f18dd8ca5eb169fdbac7f8e062938ac08729ec04a7dd9fbaf3c4d1a4b00cb22ac4545699f1f7dd6f740db7ba9205d8884fe440e1a7c614f292402083e5735d9317fac69080b46c2ecb7b272928f784cc32175c8bf6ad6636d9318a7e5411ea990a3723e66919946de0d920c7c0562f6309d29028ee1bf63401e531dabce57337be03777bc8a5402aa05606f88b47655b19299107d98eeff11d10b002516b22e49c23c61ee3e6c2fa69ec8b5feb7aca9107ca78d519524a038c93b2afbc326848f728c311308522d222f9a7ebe105c4accc618a627c9232a785143c0bcf47470469ceaa8b89426b7bc59da725b15d3ff2abd4748ea02cc11bd981238a6c9410606127a6754526a26e99cf9b585386971245ffae059f770c38c9afad0abdee25bec66a751020d2e4b9a314e3c0c916459692dd5825d0f47b5667ed919e3f60a27d20b78f70e640f315a9e786c66a7500bc7bc251276c365380ad13c173aed5b124b9ad9e89dff2c9e8921ce065144017c23cc1361a3e5907dd44a919392dcd4c904fb7597504ee8e140a85413bdb973922a829449ed531ea81f0831c3474f4860d25eb40037614bc3b4cdda66ebbfb996992882eab0e2b5d7c0bd064476c509af95d7589c729a1d986b9058a8d7e78122b80b299ffd4099d72563e7be8c3314f2d04fbdfdcbebf471724898b2579f855076129c0bb100db952f4c5b4328aba25fd43309f31cfe6bca57adf7609bd26236234aa207dd701b89cbcfae9ba4c348bf15d0515eb7bac57b65c4eb95487f40d91d8e8de25441634df5da6651fc3e35101b0fb3c71cd2bb0d4f6756785174601bf70f2361e65d01059429e584dc0a156f249548db0d8d6340d48a5f324073895384da6b145667eadbdad64c19071c66bdb16925b27111bc97ceafc64ab3f06569c748f99003c19e020552b0926af382a501c6ebac5524160b5fc18ac452bf9c0b825827637b1dc4a966dd65cfb7fa694a3a0b56e98c4a2993e562b97249e9bb3a3cced9d77e21fd5da6bebdf4672f1afd12ef82d62a514343dc95c37062f288d68569502b96baeb16527d48bdc909bddf22a2747a3a1d307233f7f25a0ac554b2cc8bb06b8841ae949382d8e333c256f1a8bf8bc5102fad4da9563e5cbc011e05752e868927dad53ddca9859899bcff8766083736768b091f97d05cb167c03d6fdd62489dc9d8e478a5519ffd41a27a662e616687c45083eaa28def6abd357b39cf1f85a2c27e50ffdbdf6b0b1132cf75ca2c3b7d1174b3750d291258aa6b65cfeb96eb82b1c8c72306a7c9ba40ce184775304007f402f2e8a07dcf1739bb0f5a6126e9627fba5c20ec8be8c5b1add1d7a66c30b55297bc5ddb24d3c703c9768d165d6d0adf1cc80dee87065c4f2eb2c025a2562a2667034e060ac27bbdeac1357fb739602948f9524c0e590abfab636b253979979cd28e9fd42cd4247d829056f7a59d256cfff5013f3a3c791f0464fa8a251822f595ea0a34ec3ba0cab4e50f0cc24f7905a9f6c2a19114ca9fc0f3fe45232c42651c5c4786655bdd382f1d659a0203e8474220285be313856d0a100192e755659c25934c169cc23bcfb3d8adb0d07943f7dfea4fba4119843df5f4911a107e3d5d87f9b6b4b774b38a520bed04480e8fbe74b2a95f637b0e96ef8b80df9f5e08557cd6168a5d201b2ea0ea1f46a8a236650518871286029b115f1a23efb9f1e6ffd30b30bb3bce39394b0156b21170872d4d639724274ddad37a7737f64c0fee1c8bb486ada4c1ba5cb4887a092f4259fbb46918a0b6ad3d6f408fc30c6b538e944f545923d6d2abca4bb6e5b34cacf4a5518be57d49ec9c2ed6dcda624e9f197f9683da73f8bc8662da4ea1b9540c8654f2f380c8e2e092dfe5a207fe8f9869ca48edd368650177bd28977967955ec2fd5032aec4cf2324e6f5fe30180e8c4e0587c454105e3d2e4ab1ccec8d5352edb73aca36ceef8ff5fe16a5715d3c958963a51d9395e8adc5955c0b69cf9099a61832c5d6503a400e7079d971e53b8e851ac7944a79bc24d2dec44f68e3282d27d139f57b682a5a61cda9171870bd206696e8ffcb14f1e0bfd09c88d943755cc46540d2d7102646df7c08b0cb72ed8e91fbd0c260b0367fe846494a52ced1cec1a6e3aebb2e775f028864fc0dba5937366ceead19966fdde6e87e9af0f9e5cdc348f07030e51c9c84599c236d51e401ff8c61af671a4100f0559553e337cf496e36379472517a550ba5159a74540f8e22ed6840f99b9b6e9e8d912b21bf27ffc1b2c3ab39e1b17fb1231083cca2e12ceba57bf006dba8f390b7874ce5e5a533e94e0a89039e5cd75c32bfbc4711a576588391350f12fa905abae315a233acb5ab336a77cf24aab33d96894a409cebd30ec2648a4c3bbc17882d8ddf6373f923c5c73affe03d9d4191eceed5e250488dc95d74760c182a561a159656c7e8fa0128467128aa1c2e862eb5c52d92f9c1b2ba4c5ef7878e84d9c13177e5c503817d4d16be8a21d42b4516c7d1ca29f22cea143e7cfa29184e928db3628442a66c8fac4b8575cf9f98faef3602927aaafbdccda644312b6ca355c5cf5ae2d57ec27b3f4cfff8d38e582be47adccd5a2f47bd65f9eabe42272334a1b03d8fa3a3966989d75670e1b038c8cddf0d64278d12a68401071cdf00b46d3a0cda0647194fd5d24d21616d50b83512778461af2484ceb37fd1d4fcfc4ad33a26816165ab1e2bdb4b77220df1f39d60305ceb0431dc167ff4213dd034262260663e02a1d5fbaed05ef5035f1b6ee0fe7e2bcdf771f047394d9b9f104e7abb8c43a9db5335a33634f427ab44fb98204430cb17a3f48e7364cd6404ce92b9f41b7ab13eed238367caed122557c1de934a3b0af9db0082068814ab0903de090e13db173abd421f44bb5e33f8625362b05036ca7af50fc6c316853b508ab18058cb7bbeebe5fff7b0320e791b4141b382c1ce801665c30d6467100f60b90a0e40722db53f8c2bfe09645998a5ecb97635bd16bc3b49fceadcd668746017518e1fb14c6a0e5e1d5ae5ef747137f1ebad48c6d62037583b2b4f6233fc887bbe61b89ab7db67997e7df304eb044436775156784fc0f5b575394119439c60bd9950821b015b8eaa2c219dc9339f5b2f81a3e74580fa0ab58302e7544c4f0bdef80f0f9875bb01b3acb5e99533d6af2d6d25d6fe4bfff0ed08bbfbb9d63926ce4f8bf2db37567d5b50aa29b6df3523397945f79aa4b501cbd906822a2f775e6113d956b0d81a7e7dd42457ddb3049b36a11f9aeaf2b0f98af5dfd8a23fd430109ca97cc5f68d8263ef00ff1997add56cb947af1e80a951d5a7a2b20c910600a9c62b74b449b45529e7404a7b259a3144d45f151843f7df21a9161247e153c1be3b5c03e92f9afed1a68c87185bde33ffa04c6d55b3eee4b949fa188c33a5aca4a541631811c905b62aa65a9c523cc016d3ea562367752596e13be3ecffa9566b69abf306a5df64a95bdeb3287fb48e20f6522e612865830bccd2b5aec0507e6bd3feede42f973") 11.305791428s ago: executing program 4 (id=2237): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d0422c2000000000001090224000100000000090400000103000100e7173b571e070b0921001006012207000905810300000d0300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) request_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000002a80)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb14x\x0f\xdf\x83\xdd31\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x14\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb]@F\xe3?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18K\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00', 0xffffffffffffffff) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0xa}, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_012={0x0, 0x1, 0x7}]}}, 0x0}, 0x0) 10.246811694s ago: executing program 5 (id=2241): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x1a4060100, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000140)=0x10000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000002080)={@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x22}}, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) io_uring_enter(0xffffffffffffffff, 0x4e14, 0x913a, 0x41, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x10002}, @any, 0x0, 0xfffffffffffffffc, 0x20002, 0x26, 0x9a3, 0x10001, 0x8}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050a"], 0x0) 10.00567648s ago: executing program 1 (id=2243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x3}, 0x14) r7 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r7, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000400)=0xfb, 0x3, 0x3) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r8, 0x89f3, &(0x7f0000000000)) close(0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r10, &(0x7f0000000380)=""/46, 0xfffffeb4) sendmsg$IPSET_CMD_SAVE(r10, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r11 = socket(0x40000000015, 0x5, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001100b9042cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="040000004008030014003d"], 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x4880) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x4e25, 0xf, @empty, 0x4001}, 0x1c) 8.541616161s ago: executing program 6 (id=2244): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000580)={0x2, 0x40000000, 0x5, 0x1d, 0x1af, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000028c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3d) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c0000000000002800128009000100766c616e000000001800028006000100040000000c0002001c0000001000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="0a00bc04b67e0020"], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 8.231233528s ago: executing program 4 (id=2246): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff030000000000000100000001"], 0x428}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) 7.827612974s ago: executing program 4 (id=2247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x2000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x1c0, 0x4, 0x0, {}, {}, {0x0, 0x8000000}, {}, 0x0, 0x40, 0xaa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x0, 0x2, 0xa}) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) r7 = socket$netlink(0x10, 0x3, 0xb) r8 = memfd_secret(0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0]}) preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000740)=""/153, 0x99}], 0x1, 0x5, 0x32a) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) ptrace$setopts(0xc60c, 0x0, 0x7, 0x100003) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 7.457576378s ago: executing program 2 (id=2249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_usb_connect(0x6, 0xd6, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0x0, 0x31, 0x71, 0x35, 0x6}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 5.473141891s ago: executing program 1 (id=2250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {0x0, 0x1f}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x2}, {}, {0x0, 0x3}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x200}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xa1}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10, 0x9b8a}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0xc}, {}, {0x0, 0x0, 0x0, 0x74a8}, {}, {}, {}, {0x0, 0x0, 0x4, 0x0, 0x10001}, {}, {}, {0x4, 0x0, 0x0, 0xf}, {}, {}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0x8a5a, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffc}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {0x0, 0xfffffffc}, {}, {0x40000000}, {}, {}, {0x0, 0x0, 0x0, 0x8, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x30d}], [{}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 5.430025754s ago: executing program 6 (id=2251): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8004}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffde61}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_io_uring_setup(0x643c, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffe, 0x1a4}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r1, 0x0, 0x0, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4) io_setup(0x5, &(0x7f00000000c0)=0x0) r8 = syz_open_dev$usbfs(&(0x7f00000009c0), 0x76, 0x101b01) ioctl$USBDEVFS_RELEASE_PORT(r8, 0x80045519, &(0x7f0000000080)=0x7) io_submit(r7, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="3e689a2af2fedbdf2505040400000100e2c27500"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) recvmmsg(r6, &(0x7f0000000840)=[{{&(0x7f0000000100)=@generic, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000440)=""/239, 0xef}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f0000000600)=""/199, 0xc7}, {&(0x7f0000000700)=""/214, 0xd6}], 0x5, &(0x7f0000000800)=""/23, 0x17}, 0xa}], 0x1, 0x2, &(0x7f0000000880)={0x77359400}) munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f00), r9) sendmsg$NFC_CMD_VENDOR(r9, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000fc0)={0x14, r10, 0x4a3, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x0) lsetxattr$security_ima(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), &(0x7f0000000940)=@sha1={0x1, "e2c8086a620fc893a46b0000000000df00b600"}, 0x15, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002dbd7000000000002e000000180001801400020064756d6d793000"], 0x2c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x8004, 0x0, &(0x7f0000000400)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.285476238s ago: executing program 4 (id=2252): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000140)={0x2, @pix={0x0, 0x0, 0x47425247}}) r4 = semget$private(0x0, 0x6, 0x0) semtimedop(r4, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r4, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r4, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$GETZCNT(r4, 0x2, 0xf, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c000000ac14143f000000000000000000000001000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES8=r5], 0x50}}, 0x4000000) 5.208572268s ago: executing program 1 (id=2253): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x83, 0x2, "97fa"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="208402"], 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="208402"], 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.208243144s ago: executing program 5 (id=2254): r0 = socket(0x11, 0x800000003, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r5, &(0x7f00000003c0)=""/205, 0xcd) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) close_range(r3, r4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6, 0xd0ff}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.196504196s ago: executing program 6 (id=2255): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x3, 0x1c8}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 4.788393702s ago: executing program 6 (id=2256): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) prlimit64(0x0, 0xe, 0x0, 0x0) getrlimit(0x1, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x7, @sdr={0x39555659, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4.420526787s ago: executing program 5 (id=2257): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff030000000000000100000001"], 0x428}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) 4.365937138s ago: executing program 6 (id=2258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x1, 0x2, {0xa, 0x4e22, 0x6, @local, 0x6}}}, 0x32) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) shutdown(r6, 0x0) listen(r6, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r8, &(0x7f0000000940), &(0x7f0000000a40)=@udp6=r1}, 0x20) recvmmsg(r6, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f00000009c0)}, 0x7}], 0x1, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="796100c5d2fbbd0000007e0000"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 4.009477842s ago: executing program 2 (id=2259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a0104fffffff5000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000000c0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0) 3.95392401s ago: executing program 6 (id=2260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0x3}, 0x14) r6 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r6, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000400)=0xfb, 0x3, 0x3) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r7, 0x89f3, &(0x7f0000000000)) close(0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r9, &(0x7f0000000380)=""/46, 0xfffffeb4) sendmsg$IPSET_CMD_SAVE(r9, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r10 = socket(0x40000000015, 0x5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001100b9042cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="040000004008030014003d"], 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x4880) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e25, 0xf, @empty, 0x4001}, 0x1c) 3.807224695s ago: executing program 5 (id=2261): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x28000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x8080) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0x1f, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000"], 0x50}}, 0x4000850) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x38, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x3}}]}, 0x38}}, 0x0) 3.716486582s ago: executing program 2 (id=2262): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0xab0, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) (async, rerun: 64) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="05000000010000", 0x7) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x20, 0x1, 0xbbd, 0x2, {{0xc, 0x4, 0x0, 0x2, 0x30, 0x68, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0x18, 0x57, 0x0, 0xc, [0x9, 0x9, 0x8, 0xffffffff, 0x2]}, @noop]}}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) (async) prlimit64(r3, 0xc, &(0x7f0000000540)={0x7ff, 0x6}, &(0x7f0000000580)) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x5214, 0x28, 0xd27, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff2}, {0xfff1, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x51e8, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_ACT={0x51e0, 0x1, [@m_police={0x1c6c, 0x1e, 0x0, 0x0, {{0xb}, {0xc40, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0xf2, 0x3ff, 0x7, 0x80000001, 0x2, 0x0, 0x2, 0x2, 0xb5fd, 0x3, 0x6, 0x7, 0x24, 0x200, 0x2, 0x5, 0x4, 0x4, 0x7, 0x5, 0x2, 0x9, 0xd, 0x61e83c47, 0xa, 0x3, 0x7, 0x101, 0x1200, 0x9, 0x2, 0x35a5, 0x5, 0x8, 0x80000000, 0x0, 0x2, 0xb, 0x3e8, 0xb1bb, 0x7fff, 0x2bc, 0x1, 0x813d, 0x401, 0xf9b4, 0x2, 0x9, 0x4, 0x93e, 0x2, 0x8, 0xd, 0x2, 0x1, 0x9, 0x3, 0x5, 0x2956, 0x8, 0x6, 0x6, 0x1, 0x46d, 0x4, 0xff, 0x0, 0x5, 0x7fff, 0x9, 0x3c, 0x401, 0x0, 0x6, 0x0, 0x9, 0xfffffffb, 0x9, 0xfffff001, 0x3ff, 0x7, 0x800, 0x6, 0x0, 0x0, 0x401, 0xf, 0xffffffff, 0x1, 0x9, 0x1ff, 0x7, 0x3, 0x5, 0x4, 0x2851, 0x1, 0x5, 0x8, 0x6, 0x5, 0x352, 0x6, 0x10, 0x3ff, 0x4, 0x6bce01e7, 0x10000, 0x8, 0x7, 0xffff, 0xa1a, 0x80000001, 0x2, 0x8, 0x18e, 0x100, 0x6, 0x6, 0xfffffffc, 0xffffff00, 0x54e2, 0x2, 0xe, 0x2, 0x4, 0xffffffff, 0x4, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, 0x0, 0x3, 0xff, 0x0, 0xc5, 0x4800, 0x6, 0x3, 0x5, 0x4, 0xa3a8, 0x0, 0xfffffff7, 0x3, 0x5, 0x9, 0x3, 0x1, 0xe8, 0x16, 0x2, 0x34, 0x5, 0x2ab, 0x18, 0x8, 0x7, 0x9, 0x118, 0x400, 0x1, 0x7, 0x0, 0x4, 0x0, 0x9917, 0x3, 0x8, 0x8, 0x8001, 0x9, 0x2, 0x1, 0x80000002, 0x0, 0x1, 0x429cf44, 0x6, 0xffff, 0xa95, 0x101, 0x10000, 0x10001, 0x8, 0x10001, 0x200, 0x8, 0x1, 0x8, 0x4, 0x9, 0x1b166543, 0x6, 0x6, 0x0, 0x1000000e, 0x8001, 0x1, 0x7, 0x7, 0x8, 0x0, 0x0, 0x597a, 0xfffff800, 0x8000, 0x68b5, 0x2, 0x1000, 0x401, 0xab6, 0x9, 0x0, 0x7ff, 0x7, 0x0, 0x8, 0x63, 0x13dd54d, 0x6, 0xfffffffb, 0x2, 0x5, 0x6, 0xd, 0x7, 0x6, 0x4, 0x8, 0x6, 0x0, 0x3c1f41cc, 0x3, 0x9, 0x7, 0x3, 0x101, 0xb, 0xe3, 0xea, 0x6, 0x7, 0x1, 0xdf, 0xb, 0xd, 0x4d8f, 0x2, 0x7, 0x1, 0x5, 0xff]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x200, 0x7, 0xb, 0x7, 0x6, 0x5, 0x4566, 0xff, 0x7, 0x9, 0x80000001, 0xffffff48, 0x5, 0x1d, 0x9, 0xfffffffa, 0x3ff, 0x8, 0xe, 0x3ff, 0x5, 0x7f, 0x101, 0x7ff, 0x1ff, 0x7, 0xee87, 0x0, 0x9, 0x4, 0x763, 0x9dc6, 0x7, 0xf99, 0xe36d, 0x5, 0xc, 0x1, 0x7fffffff, 0x5dc0, 0x6, 0x200, 0x2, 0x1ff, 0x14000000, 0x6e95, 0x7, 0x8, 0x9, 0xfffffffd, 0xffff, 0x9, 0x8000, 0x9, 0xfff, 0x80, 0x4, 0x2, 0xffff, 0x622, 0x70ef, 0x7, 0xa, 0x1, 0xb543, 0x46, 0x9, 0x0, 0x1ff, 0x7fffffff, 0x5, 0x7f, 0x5, 0x0, 0x2, 0x8, 0x1, 0x7, 0x4, 0x0, 0x6, 0x80000000, 0xe, 0xfffff21b, 0x98, 0xc188, 0x7, 0x9, 0x0, 0x2, 0x9, 0xffffffff, 0xfffff03a, 0x400, 0x5, 0x4, 0x3, 0x0, 0x5, 0x7fff, 0x81, 0x40, 0x7, 0x7, 0x3, 0x5, 0xffffffff, 0x7fff, 0x4c80, 0x9, 0x5, 0x4, 0x401, 0x10, 0x9, 0x1, 0xa, 0x9, 0xb, 0xa6d, 0x7fff, 0x7, 0x1, 0x8, 0x80000001, 0x40, 0x0, 0x4, 0xfffffff8, 0x5, 0x80, 0xe, 0x7ff, 0x3, 0x60000000, 0xffff, 0x9, 0x8, 0xe3, 0x7fff, 0x3d99, 0x1, 0xfffffff6, 0x6, 0xe21f, 0x5, 0xf26d, 0xc4f4, 0x3, 0x1, 0x4, 0x4, 0x9, 0x401, 0x9, 0x1, 0x5, 0x0, 0xfffff532, 0x1, 0x2, 0x800, 0x7, 0x1, 0xb71, 0x5, 0x800, 0x8d3, 0x6, 0x100, 0x7, 0x4, 0x1, 0x3, 0x1000, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffa, 0x7, 0x8000, 0x2, 0xffff, 0x7ff, 0x0, 0x1, 0x2, 0x9, 0xfffffff7, 0x1, 0x0, 0xb1f, 0x200, 0x800, 0x8, 0xffffffff, 0x401, 0x40, 0x7, 0x1, 0x3, 0x62305a50, 0x6, 0xc, 0x7ff, 0x80, 0x7, 0x4, 0x9, 0x9, 0x98, 0x4, 0x88a, 0x5, 0x8, 0x200, 0x5, 0x9, 0x4, 0xff, 0x28, 0x7, 0x180, 0xfffffffe, 0x3, 0x5, 0x6, 0x2, 0x1000, 0xe, 0x0, 0x5, 0x2, 0x1, 0x3, 0x0, 0xfffffff6, 0x0, 0x4, 0x0, 0xfffffff9, 0x9, 0x4, 0xffff2bf3, 0x8, 0x3, 0x2156, 0xfffff591, 0xff, 0x6, 0x1, 0xd1, 0x7ff, 0x11]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x1, 0x7feb45c7, 0x10001, 0x59, 0x1ff, 0x6, 0x0, 0xfffffffa, 0xa3f, 0x0, 0x101, 0x7ff, 0x1, 0x0, 0x4, 0x2, 0x1, 0xfe, 0x0, 0x0, 0x4, 0x2, 0x6, 0x775b, 0x7, 0x7, 0x8, 0xc7, 0x61d, 0xa, 0x14, 0x200000f, 0x607, 0x8, 0x0, 0x2040, 0x0, 0x1, 0xfffffffa, 0x81, 0x6, 0x0, 0x8, 0x88a, 0x4, 0x9, 0x8, 0x80000001, 0x4, 0x6, 0x9, 0x9aa9, 0x6, 0x9, 0xc, 0x9f98, 0x100, 0xffffffff, 0x0, 0x6, 0x5, 0xf8, 0x4, 0x1, 0x7, 0xe, 0x2, 0x3, 0x7, 0x7, 0x6, 0xc85, 0x800, 0xffffffff, 0x8001, 0xe3, 0x223, 0x1, 0x4, 0x8000, 0x8, 0x2e01, 0x4cfe, 0x3, 0x0, 0x4, 0x7fff, 0x400, 0x7d, 0x7, 0x2, 0x7f, 0xd, 0xfffffffa, 0x6, 0x6d, 0x6, 0xb, 0x1, 0x1, 0x6, 0xdf, 0x7f000000, 0x5, 0x3, 0x7, 0x80000000, 0x5, 0x1, 0x8001, 0x401, 0xb, 0xc, 0x7, 0x5b1, 0x7, 0x2, 0x0, 0x6, 0xfffffff8, 0x2, 0x5, 0x7fffffff, 0x7d5a, 0x5, 0x1, 0x80, 0x5, 0x8, 0x7a2, 0x8, 0xa21, 0x17b, 0x1, 0x9, 0x0, 0x8, 0x7f, 0x7, 0xab, 0x1, 0x98, 0x2, 0x1aa1, 0x5, 0x9, 0x8000, 0x8, 0x5, 0x8, 0xda15, 0x80000001, 0x6, 0x4, 0x2, 0x0, 0x81, 0x4, 0xd00000, 0x8, 0x5d06, 0x3, 0x3000000, 0x64b, 0x7, 0x7, 0x5, 0x6, 0x8, 0x7f, 0xf, 0x2, 0x34, 0x3, 0x7, 0x1, 0x0, 0x4, 0x8, 0x40, 0x1, 0x8a53, 0x8, 0x6, 0x5, 0x1, 0x4, 0x1e6b, 0x0, 0x800, 0x3, 0x6, 0xfff, 0x8, 0x3, 0xff, 0x0, 0xeb63, 0x9, 0x9, 0x4, 0xfffffff8, 0x4, 0x40, 0x3, 0x0, 0x4, 0x9, 0x3, 0x4, 0x6, 0xe9e5, 0x6, 0x8000, 0x6, 0x57a, 0x4, 0xffffff50, 0xffffffff, 0x9, 0xfffffffc, 0x81, 0x5, 0x8, 0x80000001, 0x2, 0x25b9, 0x10, 0x81, 0x4, 0xe, 0x40, 0xfffffeff, 0x40, 0x7, 0x423, 0x9, 0x52db, 0x1ff, 0xffffffff, 0x7, 0x401, 0x8, 0xbe, 0x116fc8f, 0x6, 0xde5, 0x90, 0x5, 0x4, 0x8000, 0x400, 0x5, 0x9, 0xfffffffd]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x15c, 0x5, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x8, 0x5, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0xc}, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0xffff7fff, 0x2, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x37}, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x7f, 0x3, 0xb, 0x1}, @empty, @private=0xa010100, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x26d, 0x20000000, 0x2f4, 0xe0}, @rand_addr=0x64010100, @multicast1, 0xffffffff}}]}, {0x92, 0x6, "34ad97cb4947ea7b08e08e56b42f492f8d9b6422a401c6c6a88721d694291961428da8b3b352432722be8a12d99a5f3ce35d63302ff963547f33c0822f9fbb61294b5b8e6776d5198131086a7be2ae2e02d83ca608868e210ad49940bde2f2acaf0f3c303009a432f7761edb2f3c41e913d1b4f2a3a82f879e01b8d7fa6ef49e4b2bee09d0cb2464f5361abd14b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0xd54, 0x18, 0x0, 0x0, {{0xb}, {0xd28, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0x7, 0x0, 0x8, {0x6, 0x0, 0x7, 0x7f, 0x80, 0x9}, {0x3, 0x0, 0x9, 0x8344, 0x3, 0x1080}, 0x10001, 0x4, 0xcd6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0x3, 0x0, 0x1, {0x3, 0x2, 0x380, 0x1, 0xb, 0xc}, {0x81, 0x1, 0xa9f5, 0x9, 0x3, 0x8}, 0x10001, 0x5, 0x8}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xe04}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x6, 0x1, 0x7fffffff, 0x4, 0x2, 0x0, 0xc, 0x617c456d, 0x51b4, 0xfffffff9, 0xa, 0xb5f, 0xffff, 0x1b, 0x0, 0x8, 0x8, 0x0, 0x70a, 0x100, 0x2, 0x573, 0x6, 0x80000000, 0x1, 0x2, 0x8, 0x2, 0x3, 0xc, 0x3, 0x5, 0x7f, 0x80, 0xffff, 0x7bc2, 0xd09, 0x1ff, 0x2, 0x10, 0x4, 0xffffff81, 0x0, 0x8000, 0x1, 0x9, 0x4, 0x1, 0xa49, 0x8, 0x5, 0xc, 0x7, 0xcce, 0x0, 0xe1, 0x2, 0x0, 0xacd9, 0xb, 0x5, 0x0, 0x4, 0x7, 0x7, 0x80000000, 0x9, 0x400, 0x80000001, 0xffffff7f, 0xb12, 0xfff, 0x9, 0xf, 0x3, 0x8001, 0x6, 0x2, 0xc, 0xfffffd90, 0xffff, 0x3, 0x8f54, 0x9, 0xc3c, 0x2, 0x1, 0xff, 0x80000001, 0x10, 0x6, 0x0, 0x8, 0x3, 0x3, 0x80000000, 0xfffffffe, 0x1, 0x1b, 0x8, 0xd95c, 0xffffff01, 0x0, 0x10001, 0x2, 0x8, 0xf4da, 0x401, 0x401, 0x7, 0x9, 0x80, 0x7, 0xfffffff1, 0x8, 0x1ff, 0x9, 0x3ff, 0x9, 0x7, 0x8, 0x100, 0x104, 0x6, 0x81, 0xfffffffb, 0x3ff, 0x200, 0xfffffffe, 0xe, 0x8, 0x4, 0x6, 0x0, 0x4, 0x85, 0x5, 0x3, 0x40, 0xf4, 0xaf1, 0x8, 0x6, 0x2, 0x3, 0x8, 0xdf6, 0x33, 0xe37, 0x3, 0x9, 0x401, 0xc, 0x9d4, 0x8, 0xe7, 0x7, 0xd0c, 0x3, 0x6, 0x4, 0x3, 0x3, 0x401, 0x9, 0x9, 0x9, 0xe, 0x5, 0x5, 0x6, 0x3, 0x3, 0x9, 0xfffffff9, 0x2, 0x4, 0xb, 0x40, 0x2, 0xe, 0x6, 0x1, 0xbc0, 0x4, 0x5, 0x3ff, 0xc033, 0x8, 0x8, 0x7, 0x3, 0x4, 0x5, 0x7, 0x7, 0x80000000, 0x0, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x3, 0x7ff, 0x800003, 0x521d50a5, 0xb866, 0x7ff, 0x0, 0x8, 0x2, 0x9, 0x6da8, 0x8, 0x92a, 0x2, 0xfffffff8, 0x5, 0xa, 0x5, 0x1, 0xbe46, 0x3, 0xc, 0xb4, 0x7, 0x6, 0xbbc, 0x1, 0x7, 0x80, 0x6, 0x4, 0x6, 0x8000, 0x0, 0x10, 0x2, 0x5, 0xffc, 0x1, 0xfffffff7, 0xdd, 0x401, 0x8, 0x9, 0x101, 0x81, 0x1ff, 0x689, 0x7ef, 0x8, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xc, 0xfffffe00, 0x6, 0x6, 0x3, 0x7f6, 0xfffffff7, 0x2, 0xfffffffd, 0x0, 0x4, 0x857, 0xa, 0x3, 0xe64, 0x4, 0xffff, 0x6, 0x8, 0x3, 0x7, 0x6, 0x6, 0x3, 0x1, 0x400, 0x3, 0x9, 0x2, 0x54, 0x5f30, 0x1, 0x2ad95f8a, 0x8c7c, 0x5, 0x200, 0x7, 0x5c, 0x101, 0x9, 0x10001, 0x6, 0x101, 0x6, 0x584b683, 0x5d97, 0x4, 0xffff8653, 0x9, 0x6, 0x1, 0x4, 0x80000000, 0x76, 0x8, 0x8, 0x0, 0x3, 0x4, 0x7, 0x0, 0x8, 0x9, 0x7, 0xc0000000, 0x0, 0x9, 0xa, 0xed44, 0x9, 0x9, 0x7, 0x6, 0x7, 0x4, 0x1, 0x3, 0x9, 0x2e9, 0x3, 0x6, 0x7ea, 0x5, 0x7, 0x2, 0x1, 0x9f, 0x5, 0x1895, 0x4, 0x2, 0x7b, 0x3, 0x1, 0x901, 0xc, 0xdec, 0x7, 0x8, 0x46a, 0x8, 0x7fffffff, 0xfffffe00, 0x3, 0x9, 0x0, 0xffffffff, 0x80, 0xffff8bbb, 0x6, 0x7, 0xffffffff, 0x5, 0x7, 0x5, 0x3, 0xc, 0x9, 0x9, 0x9, 0x9, 0x10f, 0x7, 0x8, 0x6, 0xc42, 0x6, 0x7fff, 0x3, 0xc, 0xfffffffa, 0xfffffffe, 0x6, 0x3, 0x7, 0x0, 0x4, 0xd9b, 0x0, 0x101, 0x4000, 0x10000, 0x409, 0x5, 0x8, 0x9, 0x5, 0xa, 0x3, 0xa, 0x9429, 0x80000000, 0x772c, 0x2, 0x3ff, 0xb9, 0x5, 0xd176, 0x3, 0xa, 0x8, 0x9, 0xffff, 0xa, 0xd9, 0x7ff, 0x381e, 0x3, 0xffff, 0x3, 0x9, 0x7, 0x0, 0x4, 0x401, 0xf, 0x18000000, 0x6, 0x7, 0x4, 0x9bd3, 0x9, 0x7fffffff, 0x2, 0x1, 0xfff, 0xfff, 0x5, 0x4, 0x40000000, 0x4, 0x80, 0x1, 0x7, 0xffff, 0x7fffffff, 0x5, 0xfff, 0x2, 0x0, 0xd5a, 0x0, 0x3, 0x3, 0x5, 0xd8, 0xc6, 0x0, 0x7f, 0x9, 0x8d, 0x7, 0x4, 0x2, 0x0, 0x6, 0x4, 0x4, 0x2279, 0xffff0000, 0x6, 0x40000000, 0xff, 0x80000001, 0x6, 0x4, 0x400, 0x1, 0x5, 0x4, 0x3, 0x1, 0x8001, 0x200, 0x81e, 0x36d, 0x1, 0x80000001, 0x3, 0x1, 0xc, 0x4, 0xffff, 0x5, 0x26, 0xd, 0xd, 0x6d6, 0x3, 0xa24f5aea, 0x5, 0xe9f, 0x2, 0x9, 0x2, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x79ab, 0x6, 0x2, 0x91, 0xc, {0x0, 0x2, 0x8, 0x9, 0xc, 0x7}, {0x2, 0x0, 0xfff, 0x0, 0x8, 0x80000000}, 0x7, 0x1182, 0x5b9}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x9, 0xfffff001, 0xfffffff8, 0x4c8, 0x800000, 0x9, 0x184c6bf6, 0x4, 0x9a, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x5, 0xe888, 0x6, 0x3fd5, 0x7, 0x4, 0x1, 0x7, 0x9, 0x40, 0x80, 0x1, 0x5, 0x9, 0x0, 0x3, 0x1, 0x40, 0x3, 0x8, 0x81, 0x9752, 0xffffffff, 0x1, 0xfffff962, 0xfffff572, 0x9, 0x9, 0x2, 0x0, 0xf16, 0x6, 0x7, 0x0, 0x2, 0x2, 0x3, 0x7, 0x3, 0x1, 0x7fff, 0xb4e1, 0xb, 0x7, 0x652, 0x2c, 0x7, 0x40, 0x1, 0x5, 0x1, 0x80000001, 0x8001, 0x0, 0x8, 0x6, 0x7, 0x5, 0x7fff, 0x1, 0x1, 0x0, 0x1, 0x3, 0x6, 0x1, 0x8e96, 0x1, 0x4e, 0x1000, 0x7, 0x8428, 0x800, 0x6, 0x5, 0xfff, 0x80, 0x7, 0x8000, 0x7, 0xfffffffd, 0x5, 0x6, 0x9, 0x3, 0x5936, 0x33b800, 0xffffffff, 0x7a5, 0x4, 0x6, 0x0, 0xff0, 0xe, 0x1, 0x9, 0x6, 0xffffffff, 0xe, 0xc, 0x9, 0xe69a, 0x8, 0x9, 0x9, 0x7ff, 0x30, 0x4, 0x2, 0xffffff01, 0xfe, 0x5, 0x1, 0xffffffff, 0x1, 0x7ff, 0x7, 0x7, 0x9, 0x22d5, 0x3, 0x899a, 0x5, 0x200, 0x9, 0x0, 0x6, 0x80000001, 0x9, 0xf448, 0x5, 0x2029601e, 0x2, 0x2, 0x800, 0x80f8, 0xa7ee, 0xa81, 0xbd1, 0x4, 0x3, 0x0, 0x4, 0x9, 0x2, 0x4f1c, 0x0, 0x4, 0x14da, 0x5, 0x7, 0x10, 0xffff, 0x7, 0x5, 0xfffffff8, 0x4, 0x442f4a4c, 0x5, 0x0, 0x0, 0x0, 0x5, 0x4, 0x56, 0x7, 0x5, 0x5, 0x10000, 0x5, 0x2, 0x3, 0x8, 0x2, 0xfc, 0xe1f, 0x3, 0x3, 0x0, 0x7, 0x805, 0x4, 0x0, 0x3, 0x1a66, 0x7, 0x822, 0x9, 0xfffffffb, 0xab, 0xfffffc00, 0x2, 0xff, 0x6, 0xbe, 0x1, 0x0, 0x9, 0x0, 0x7, 0x1, 0x57e7069f, 0x6, 0x3, 0x1000, 0x4, 0xf8, 0x8000, 0xffffffff, 0x6, 0x7, 0x7fff, 0x32, 0x50000000, 0xc, 0xffffffff, 0x3, 0x6, 0x7, 0x2, 0x40, 0x8, 0xa, 0x5, 0x5, 0x0, 0x8, 0x143, 0xff800000, 0x2, 0xfffffff6, 0x5, 0x3, 0x5, 0x0, 0xffffffff, 0x5, 0xf1bb, 0x8, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3b}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe}], []]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x74, 0x20, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x0, 0x20000000, 0x5, 0x5}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x9, 0x2, 0x1, 0x4}, 0x0, r7}}]}, {0x5, 0x6, "11"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x8c, 0x10, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x24cc, 0x7, 0x0, 0x0, {{0xb}, {0x14a0, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0x2, 0x4f, 0x9, 0x7, 0x9, 0x10000, 0xffff, 0x6, 0x0, 0x8, 0x5, 0x6, 0x5, 0x1, 0x7, 0x3, 0x1, 0x7f, 0xffff, 0x800, 0x1, 0x400, 0x9, 0x100, 0xffff, 0x2, 0x4, 0x5, 0x0, 0xc87, 0x6, 0x7, 0xc4, 0x9, 0x9, 0x7, 0x9, 0x7, 0x0, 0x43b, 0x4, 0x8, 0x1, 0x2, 0x9, 0x2afe, 0x0, 0xa, 0x9, 0x2, 0x0, 0x3d05, 0x5, 0x7, 0x40, 0xd3ff, 0x1, 0x10, 0xd, 0x5de82271, 0x2, 0x0, 0xffffffff, 0x8001, 0x5, 0x7f0, 0x6, 0x10, 0x0, 0x5, 0x3, 0x1000, 0xd, 0x3, 0xb86, 0x8, 0x5, 0xfffffffb, 0xc, 0x400, 0x9, 0x8, 0x9, 0x3ef1, 0x15, 0x3794c88c, 0x1, 0x10, 0x9, 0xe, 0x1, 0x80000001, 0xffe, 0x80, 0xfffffff6, 0x0, 0x6, 0x40, 0x4, 0x4, 0x56220e24, 0x0, 0x1, 0x8, 0x3, 0xc, 0x7, 0xe, 0x5, 0x3, 0x5, 0x7, 0x800, 0x4, 0x5, 0x4, 0x7ff, 0x5, 0xd84, 0x3, 0xd, 0x8, 0x4135, 0x74a3, 0xffffa440, 0x6, 0x7, 0xffffffff, 0xd6, 0x8, 0x34ec, 0x8, 0x1fa, 0x3, 0x9, 0xd4c, 0x7, 0x1, 0x7fffffff, 0x10001, 0x400, 0x5, 0x9, 0x3, 0x2, 0x2, 0x8, 0x9, 0xb05a7099, 0x4, 0xff, 0xfffffffc, 0x0, 0x8000, 0x9, 0x1, 0x2, 0x4, 0x8, 0x5, 0x6, 0x7, 0x7f, 0xa0a1, 0x4, 0x8, 0x5, 0x6, 0x6, 0x0, 0x1, 0x1, 0x81, 0xd56, 0x10000, 0x96ad, 0x400, 0x51c, 0x0, 0x1, 0x2, 0x0, 0x2, 0xe53, 0xf4f, 0x6, 0xaf94, 0x7, 0x0, 0x2a54, 0x7, 0x7fffffff, 0x1, 0x9, 0x8, 0x800, 0x6, 0x10, 0xf, 0xfc, 0xbf0, 0xa8, 0xff, 0x5, 0x0, 0x3ff, 0x595f, 0x7, 0x2, 0xa611, 0xffffffff, 0x3, 0x7, 0x8, 0x1000, 0xc, 0xdef8, 0xffff, 0x4f8, 0x9, 0xc8, 0x437, 0x1, 0xd3, 0x4, 0x5, 0x7ff, 0x5, 0xff, 0x200, 0x7fff, 0x3, 0x0, 0x8, 0x4, 0x7, 0x2, 0x1a, 0x8001, 0x1, 0x5, 0x6, 0x8, 0x800, 0xc7b3, 0x1, 0x3, 0x4, 0x7, 0x0, 0x8, 0x0, 0xb, 0x4, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x2, 0x7884, 0x7, 0x80, 0x0, 0xff, 0x2, 0x6, 0x7, 0x1, 0x1000, 0x7, 0x0, 0x0, 0x6, 0x8cb, 0xc, 0x2, 0x2, 0x0, 0x7, 0x8, 0x80000000, 0x9, 0x3, 0x1, 0x3, 0x8, 0x1, 0x6, 0x7, 0x0, 0x4000000, 0x9, 0x2, 0x1ff, 0x40, 0x9, 0x4, 0x0, 0x4, 0x3, 0x7, 0x7fff, 0x3, 0xe47c, 0x4, 0x8, 0x9, 0x1, 0x3cf, 0x5, 0x7, 0xab0b5c9, 0x37, 0x4, 0x40, 0x6, 0x1, 0x3, 0x7, 0x8, 0x3, 0xd, 0x3, 0xb, 0x8001, 0xffffffff, 0x81, 0xdc3c, 0x7, 0x5b, 0x1000, 0x401, 0x5, 0x7, 0x2, 0xffff0000, 0x100, 0x27, 0xfffffeff, 0x0, 0xc, 0x1, 0x3, 0x501, 0x10001, 0xbf63, 0x98db, 0x10, 0x30e, 0x8, 0x3ff, 0xffffff80, 0x1, 0xfffffff4, 0x5, 0x4, 0x4, 0xffff0001, 0x2, 0x2, 0x100, 0x0, 0x8, 0x6, 0x6, 0x10000, 0x9, 0x10001, 0x6, 0x1, 0x101, 0x7, 0xd, 0x0, 0xf, 0x4, 0x4, 0x113f, 0xfffffffe, 0xfffffff7, 0x6, 0x7, 0x1efd43c3, 0xfff, 0x1, 0x9, 0x7fffffff, 0x5, 0x28c9, 0x2, 0x2, 0xfff, 0x6, 0x6, 0x22, 0x4, 0x3, 0xb9, 0x800, 0x0, 0x8, 0x2, 0x2, 0x6, 0x2841c6d, 0xd, 0xfffffffc, 0x8, 0x1, 0x4, 0x4, 0x9, 0x1bc1, 0x0, 0x6814, 0x7b9, 0x9, 0x3, 0x4, 0x0, 0x40, 0x733, 0xfffffffe, 0x4, 0x4, 0x0, 0x0, 0xffffffff, 0x4, 0x9, 0x9, 0x200, 0x0, 0x6, 0x67d, 0x3, 0x5, 0x7, 0x9, 0x1f15, 0xc2c, 0xd, 0x8, 0x4, 0x1, 0x7, 0x2, 0x1ff, 0xc3, 0x7, 0x0, 0x9, 0x9e, 0xea47, 0xe1, 0x0, 0x0, 0x7, 0x800000, 0x3, 0x2, 0x3, 0xd018, 0x7, 0x0, 0xfff, 0x9, 0x0, 0x1ff, 0xfe, 0x0, 0x5, 0x8001, 0x7fffffff, 0x1, 0x10000, 0x6, 0x4b5, 0x4, 0x9, 0xcbd7, 0xfff, 0x9, 0x0, 0x800, 0x0, 0x5, 0x8, 0x0, 0x3, 0xfffff801, 0x3, 0x2e5, 0x3, 0x9, 0x1, 0x8, 0x40, 0x2, 0x9, 0x6, 0xffff7fff, 0x2, 0x9, 0xfc, 0x5, 0x0, 0xfffffff7, 0x0, 0x94fb, 0xfffffff7, 0xc, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x9, 0x264, 0x7f, 0x3, 0x8001, 0xf, 0x9, 0x7, 0x8, 0x200, 0xed3, 0x9, 0x5, 0xfa89, 0x1000, 0x5, 0x81, 0x1, 0x80000000, 0x6, 0x40, 0x4, 0xc, 0x23, 0x9, 0x3, 0x328f, 0x1, 0x3, 0xf, 0x8, 0x4, 0xfffffff9, 0x45, 0xc591, 0x1, 0x81, 0xa, 0x1, 0x100, 0x3, 0x8, 0x1000, 0xfffffffb, 0xcf11, 0x6, 0x1, 0x1, 0x3, 0x1000, 0x1, 0x5f9d, 0x6, 0x6, 0x2, 0x1000, 0x401, 0x2, 0x5fe, 0x8001, 0xb, 0xffffffff, 0x800, 0x40, 0x2be, 0x80, 0x8, 0xfffffc01, 0x1ff, 0xa, 0x5, 0x7, 0x2, 0x43b4, 0x80000000, 0x7, 0x7, 0x60, 0x1, 0xe33, 0xb, 0x2, 0x2, 0x2, 0x5, 0xe, 0x400, 0xfffffffd, 0x6b39, 0x4, 0x5, 0x3, 0x828, 0x2, 0x9, 0xb73, 0x6, 0x2, 0x81, 0x0, 0x401, 0x7fffffff, 0xf, 0x7, 0x6, 0x9, 0x0, 0x1, 0xfffffff9, 0x3d97acb6, 0x3ff, 0x6, 0xb5, 0x8, 0x4, 0x5, 0xffffff7f, 0x4f55, 0x0, 0x2, 0xe, 0x5a7, 0x7, 0xb6ff, 0x9, 0x4, 0xb, 0xfff, 0x8, 0x3, 0x365faa1c, 0xb, 0x5, 0x80000001, 0xa, 0xffffffff, 0x6f, 0x100, 0xfff, 0x200000, 0x7a, 0x81, 0x3, 0x0, 0x276ed1a6, 0x8, 0x1, 0x4, 0x6, 0x2, 0x6, 0x0, 0x2, 0x75, 0x3, 0x0, 0x1, 0xcf, 0x200, 0x401, 0x6, 0x8277, 0x0, 0x400, 0x6856, 0x9, 0x1, 0x1, 0x0, 0x8c28, 0xd, 0x2, 0x6, 0xa, 0xfdbc, 0x10, 0x0, 0x6, 0x4, 0x3, 0xfffffffc, 0x792dc4df, 0x5, 0x2, 0xfffffffe, 0x5, 0x500, 0xe, 0x3b7cc85b, 0xa, 0xff, 0x94b9, 0x3, 0x4a9f, 0x1, 0x8, 0x9, 0x7, 0x1, 0x5, 0x7fff, 0x5, 0x40, 0x9b5, 0x0, 0x8, 0x6, 0x8, 0x2, 0x36b8, 0xc53, 0xd, 0xfffff801, 0x6, 0xffffa10e, 0x2, 0x845, 0xffff, 0xff, 0x10, 0x1, 0x7, 0x7, 0x6, 0x5, 0x7, 0x7fffffff, 0x7ff, 0x7, 0x4, 0x21, 0x3, 0x80, 0xfffffffe, 0x7, 0x299f, 0x0, 0x3, 0x6, 0x1000, 0x1, 0x9, 0x3ff, 0xb, 0x8, 0x5, 0x7, 0x3, 0x10000, 0x236, 0x2, 0x3, 0xfffffff5, 0x7, 0x80000001]}], [@TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x58e, 0x10001, 0x4, 0x6, 0xb1b, 0x81, 0x5, 0xe, 0x5, 0x8, 0x6, 0x7, 0x22c, 0x8, 0x6, 0x3, 0x66, 0x6, 0x7, 0x0, 0x0, 0x7, 0x6, 0x80000001, 0x1, 0x1ff, 0x6d71, 0xfff, 0x38c2, 0x3, 0x5, 0x6, 0x3, 0x4, 0x7, 0x8, 0x6, 0x8000, 0x80000000, 0x3, 0x6, 0xa06, 0x7, 0xd376, 0x401, 0xd65, 0x5, 0x0, 0x7, 0x8, 0x7, 0x7c8, 0x6c, 0x81, 0x6, 0x5, 0x2, 0xc0, 0x6, 0x2cd2, 0x0, 0x7fff, 0xfff, 0xff, 0x6, 0x1, 0x2, 0x1000, 0x8000, 0x4, 0x88, 0x95, 0x3, 0x2, 0x5, 0x0, 0x6, 0x9, 0x7, 0xffffff08, 0xae, 0x6, 0x400, 0x6, 0x2, 0x6, 0xfffffff8, 0xa0c, 0xf, 0xd, 0x7, 0xffffffff, 0x1000, 0x8, 0x7, 0x8, 0xc0000000, 0x5, 0x7, 0x5, 0x0, 0x7, 0x6, 0x5, 0x5, 0xff, 0x0, 0x1, 0x5, 0x7, 0x8, 0x3, 0x8, 0x8000, 0x7, 0x800, 0x5, 0x8, 0x8000, 0x10f7d912, 0x94, 0x7, 0x10000, 0x80, 0x10001, 0x40, 0x2, 0x1000, 0xc, 0x0, 0xfb, 0x7ff, 0x800, 0x1d, 0x1, 0xffffffff, 0x4, 0x4, 0xc, 0x400, 0x6, 0x7ff, 0x6, 0x4, 0x7, 0x4, 0x2, 0x90000, 0x7f, 0x3, 0x2, 0x7, 0x8001, 0x1bf5, 0x8001, 0x4, 0x2, 0x60a, 0x1ff, 0xc3a, 0x3, 0x200, 0x5, 0x8, 0x2, 0xf2f, 0x8, 0x8, 0x2, 0x7, 0x6, 0x3, 0x6, 0x8001, 0x8, 0x9, 0x45e4, 0x5, 0x2, 0x4, 0x1, 0x1, 0x8, 0xfffffff9, 0x4, 0x2, 0xa, 0x40, 0xfffffff9, 0x10001, 0x7f, 0x0, 0x5, 0xe, 0xfaf9, 0x80000, 0x40, 0x562b912d, 0x9, 0xff, 0x800000, 0x300000, 0x5, 0x1, 0xcd, 0x1, 0xbc1, 0xf02, 0x4, 0xa, 0x5, 0x9, 0x7f3a, 0x5, 0x497c, 0xfffffff8, 0x7, 0x1, 0x9, 0x80000000, 0x101, 0x9, 0x4, 0x7, 0x8, 0x81, 0x3, 0x2, 0x9, 0x1000, 0x7ff, 0x7f, 0xe, 0x80, 0xffffff80, 0x2, 0x7, 0x8000, 0xd, 0x3ff, 0x7, 0x10000, 0x387, 0x5, 0xd4, 0xfffffff9, 0x3, 0x3, 0xe5, 0x8, 0x2, 0x2, 0x6, 0xe5c2, 0x7]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x4, 0x1, 0x0, 0x4, {0x0, 0x0, 0x8, 0x7, 0x6, 0x80}, {0xf, 0x0, 0x4, 0x6, 0x7, 0x5}, 0x319, 0x101, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7f}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x4, 0x0, 0x5, {0x1, 0x2, 0x334, 0x80, 0x6, 0x2}, {0x0, 0x2, 0x10, 0x3, 0xfffd, 0x9}, 0x80000001, 0x2, 0x1}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3a38e83f, 0x3, 0x6, 0x400, 0xd, 0x7, 0x5, 0x7fa, 0x82, 0x7, 0xfffff881, 0x2c, 0x2a64, 0xfffff000, 0x1, 0x5, 0x7fff, 0x40, 0x0, 0x3, 0x0, 0x90c7, 0xcd2, 0x1, 0x0, 0xfffffff8, 0x5c8a, 0x6eeb, 0x3, 0x3, 0x81, 0x8f, 0xffff7db3, 0x9, 0x0, 0x0, 0x5, 0x8, 0x1, 0x200, 0xfffffffe, 0xee99, 0x9, 0x62f, 0x40, 0x0, 0x5, 0x6, 0x80000001, 0x9eb, 0xc, 0x400, 0xecd9, 0x84, 0x9, 0x40, 0x923, 0x29680dc4, 0x5, 0x1, 0xffff8000, 0x6, 0x4, 0x6349d0d4, 0x5, 0x5, 0x3, 0x1, 0x9, 0x6, 0x80, 0xb245, 0x1, 0x1, 0x5, 0x8, 0x80000000, 0x63373c63, 0x7fffffff, 0xc39f, 0x14d2, 0x8b9, 0x8, 0x8, 0x3ff, 0x4, 0x1, 0xff5, 0x1, 0x0, 0xfb, 0x1, 0x69, 0x9, 0xff, 0x6, 0x6, 0x184444cc, 0xffff4795, 0x2, 0x8, 0x5, 0x3, 0x1, 0x5, 0x8, 0x10000, 0x3, 0x6, 0x8, 0x3, 0x40a0, 0x4, 0x4, 0x2, 0x7, 0x9, 0xfffffff8, 0x9, 0x1, 0x9, 0xd, 0x80, 0x3, 0x7fffffff, 0xfffffff7, 0x80000000, 0x5, 0x4, 0x0, 0x2, 0x7, 0x2, 0x2, 0x56a706e9, 0xb1, 0x7, 0x6, 0x0, 0x6, 0x7fff, 0x1ff, 0x8, 0x7ff, 0x6, 0xda, 0x10, 0xd5, 0x167c, 0x0, 0x9, 0xea7d, 0x0, 0x7, 0xd6e, 0x3, 0x200, 0x7fff, 0x3, 0x1, 0x0, 0x8, 0x28, 0x7fff, 0xb, 0x8, 0x10000, 0x8, 0x0, 0x2, 0xfffffffb, 0x8, 0x1, 0xfffffffe, 0xe2, 0xffffff03, 0x4, 0x100, 0x1b, 0x0, 0x6, 0x3, 0xa2, 0x9, 0x80000000, 0x50e7e56a, 0x3, 0x5, 0x6, 0x1, 0x5, 0x0, 0x0, 0x7c4fbab5, 0x5, 0x9, 0xd, 0x4, 0x5, 0x0, 0x3, 0x35, 0x2, 0x0, 0x81, 0xa, 0x1, 0x4, 0xa90, 0x18e6, 0x1000, 0x6, 0x1, 0x5, 0x4, 0x4, 0x10000, 0x830, 0x3, 0x6, 0x93, 0xc11c, 0x5, 0x6, 0x0, 0xfffff1f3, 0x3, 0x2df0, 0x7, 0xd5aa, 0x8, 0x0, 0x3, 0x4, 0x9, 0x8000, 0x9, 0x2, 0x40, 0x5, 0x3, 0x7, 0x38ca, 0x2, 0x80000000, 0x4, 0xff, 0x9, 0xc, 0xd07, 0x4, 0xe, 0x80, 0xb1b, 0x69c8, 0x5]}], [], []]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0xf4, 0x8, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5c40}]}, {0xaf, 0x6, "d0614f1848ba2c23ff9842afc59b1b373bed8e34ee0222234dfb14a89adae0099ad202cf04ca38c048d1744b2fb190ad7b60bb34c2d2ba3aa0ec98603144246aa0c36b6788d8b1f3845812ef6495d56e206cdee95441831ea251ca1eefe5cc63181154ec08d9b1eb7f27c0207df1750d50d2791f3739ce8ba16855864a7e939968911cf4dd43e148f08c369a6fce0afa9bb65664561a48ace2a379bd32bb98523d1bfcb3d70490018ed580"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x5214}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async, rerun: 64) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x24044080) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000480)={&(0x7f0000000180), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000008}, 0x14) 3.326864019s ago: executing program 5 (id=2263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x6dd, 0x10, 0x200, 0x10, 0x3, 0x20, 0xffffffff, 0x21, 0x7, &(0x7f00000000c0)=[0x4], 0x1, 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7, 0x10, 0x4, 0x40, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x68, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @empty}}}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000200)="0f015f5f66b9800300000f32ba420066b8f5fffeff66ef0f2224440f20c066350e000000440f22c0640fc7684bf36d0f20d86635080000000f22d89f66b97b0900000f32", 0x44}], 0x1, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 3.231645459s ago: executing program 2 (id=2264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0xc00000000000000) 3.069887942s ago: executing program 2 (id=2265): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f0000000000)={0x10}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/connector\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r3 = mq_open(&(0x7f0000000040)='\xeb\xac\xa5\x03\x00\x00\x00\x00', 0x842, 0x0, 0x0) mq_timedreceive(r3, 0x0, 0xffffffffffffffea, 0x9, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4040884) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000600000008"], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r5, &(0x7f0000000080)=""/1, 0x1) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = fsmount(r6, 0x1, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) lseek(r2, 0x8001, 0x1) 2.375884371s ago: executing program 5 (id=2266): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000003f01f00810000006f0800000100000067a65863a53b60c7718112003fb3651e47e9672c1415e39fe2e3b3e630675883b2c1c298918b5c1084a26688ef98020e2a618e453ba881f38ff1a91fc47bf219e0fe215a9035cc497884612147268eae4adca7f6ed162b99ac913117a0602ec20325b1634707eb8e274c92f5f7027ca2aea65c6179aecb145468fa97df8331e7d94692ac8402d910ee45b2392eea6e7daa7597f2846779f990458ad23a7893ad1289d13ddcdcff9b", @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) gettid() mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000180)=0x2) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) readahead(r0, 0xffffffffffffffff, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x20000023892) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200"], 0x0) socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x41555856, 0xe, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) 2.298979361s ago: executing program 2 (id=2267): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x28, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="02070900040000002dbd7000ffdbdf2502000b"], 0x20}}, 0x4040014) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, 0x0, 0x4028000) landlock_restrict_self(r3, 0xe) syz_usb_control_io$hid(r1, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002201", @ANYBLOB="d36ca8e280f862e4138ce088635453784bf07955ef48281f4db3e643e663db97c7950312e7aa605ef5c6c9ba2ffefedca1c669d4a2f8ea1979d5e188106aab9c13344a35cdf09bea0c9eff07586ea82e036206764bef0857be74a2a1c4ddb44c98621019ff856b4b168da4995cce26ce832d5c057cbbb93e21288e0efa5669b0626bf2ab6e171a9a9e2ba9dbd23742f02c5bea825bcc5146ec922aeea6cf918d8685d383e413a92938a65fc9a97f6768ce7b4b032b3ae93e5980059e89c51fe7e79c2a24497acd25751cc41e57c0ef6c4cba04219c", @ANYRES64=r3, @ANYRESDEC=r1], 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x34, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x33, {0x31, "28f364941c1d80a4fba84f4e8f62ca9379207bc7305248606bcdc2c3f6491fc4e7f1525f624dca5220c42d69e0531a46eb"}}, 0x0, 0x0}) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) 995.718198ms ago: executing program 1 (id=2268): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 694.149369ms ago: executing program 1 (id=2269): syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x4, &(0x7f0000000080)=0x6, 0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000002380)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a0101fffffffffffffffe000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000) 0s ago: executing program 1 (id=2270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x1, 0x2, {0xa, 0x4e22, 0x6, @local, 0x6}}}, 0x32) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) shutdown(r6, 0x0) listen(r6, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r8, &(0x7f0000000940), &(0x7f0000000a40)=@udp6=r1}, 0x20) recvmmsg(r6, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f00000009c0)}, 0x7}], 0x1, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="796100c5d2fbbd0000007e0000"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) kernel console output (not intermixed with test programs): _0: entered allmulticast mode [ 574.149887][T12868] bridge_slave_0: entered promiscuous mode [ 574.168507][T12868] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.176588][T12868] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.183932][T12868] bridge_slave_1: entered allmulticast mode [ 574.192283][T12868] bridge_slave_1: entered promiscuous mode [ 574.261865][T12868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.276535][T12868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.313066][T12868] team0: Port device team_slave_0 added [ 574.321496][T12868] team0: Port device team_slave_1 added [ 574.355516][T12868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.362789][T12868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.406701][T12868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.428017][T12868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.435128][T12868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.466671][T12868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.054751][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1805'. [ 575.608681][T12868] hsr_slave_0: entered promiscuous mode [ 575.629067][T12868] hsr_slave_1: entered promiscuous mode [ 575.641616][T12868] debugfs: 'hsr0' already exists in 'hsr' [ 575.658442][T12868] Cannot create hsr debugfs directory [ 575.745636][T12918] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1809'. [ 575.797269][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1809'. [ 575.816596][ T5812] Bluetooth: hci5: command tx timeout [ 576.499222][T12928] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 576.888254][T12937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1813'. [ 577.102581][T12939] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12939 comm=syz.3.1813 [ 577.900335][ T5812] Bluetooth: hci5: command tx timeout [ 578.211876][ T12] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 578.250649][ T12] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 578.734886][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1818'. [ 579.163363][ T12] bond0: active interface up! [ 579.328437][T12868] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 579.571702][T12868] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 579.977344][ T5812] Bluetooth: hci5: command tx timeout [ 580.012214][T12868] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 580.083106][T12868] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 580.931955][T12868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.004179][T12868] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.093402][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.100541][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.192303][T13001] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1823'. [ 581.402905][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.410048][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.196254][ T1001] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.344942][T13011] FAULT_INJECTION: forcing a failure. [ 582.344942][T13011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.382715][T13011] CPU: 1 UID: 0 PID: 13011 Comm: syz.2.1826 Tainted: G L syzkaller #0 PREEMPT(full) [ 582.382746][T13011] Tainted: [L]=SOFTLOCKUP [ 582.382753][T13011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 582.382762][T13011] Call Trace: [ 582.382769][T13011] [ 582.382776][T13011] dump_stack_lvl+0x100/0x190 [ 582.382811][T13011] should_fail_ex.cold+0x5/0xa [ 582.382834][T13011] _copy_from_iter+0x1f4/0x1690 [ 582.382857][T13011] ? _copy_from_iter+0x270/0x1690 [ 582.382875][T13011] ? __pfx__copy_from_iter+0x10/0x10 [ 582.382897][T13011] ? __pfx__copy_from_iter+0x10/0x10 [ 582.382922][T13011] copy_page_from_iter+0xde/0x180 [ 582.382944][T13011] skb_copy_datagram_from_iter+0x399/0x720 [ 582.382979][T13011] tun_get_user+0x1884/0x3e10 [ 582.383015][T13011] ? __pfx_tun_get_user+0x10/0x10 [ 582.383041][T13011] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 582.383071][T13011] ? find_held_lock+0x2b/0x80 [ 582.383091][T13011] ? tun_get+0x191/0x370 [ 582.383114][T13011] ? tun_get+0x191/0x370 [ 582.383142][T13011] tun_chr_write_iter+0xdc/0x200 [ 582.383171][T13011] vfs_write+0x6ac/0x1070 [ 582.383195][T13011] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 582.383222][T13011] ? __pfx_vfs_write+0x10/0x10 [ 582.383242][T13011] ? find_held_lock+0x2b/0x80 [ 582.383280][T13011] ksys_write+0x12a/0x250 [ 582.383303][T13011] ? __pfx_ksys_write+0x10/0x10 [ 582.383333][T13011] do_syscall_64+0x106/0xf80 [ 582.383356][T13011] ? clear_bhb_loop+0x40/0x90 [ 582.383378][T13011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.383396][T13011] RIP: 0033:0x7fe2e495c84e [ 582.383417][T13011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 582.383434][T13011] RSP: 002b:00007fe2e5778fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 582.383452][T13011] RAX: ffffffffffffffda RBX: 00007fe2e57796c0 RCX: 00007fe2e495c84e [ 582.383464][T13011] RDX: 000000000000fef3 RSI: 0000200000000200 RDI: 00000000000000c8 [ 582.383475][T13011] RBP: 00007fe2e5779090 R08: 0000000000000000 R09: 0000000000000000 [ 582.383485][T13011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 582.383495][T13011] R13: 00007fe2e4c16038 R14: 00007fe2e4c15fa0 R15: 00007ffc144bc828 [ 582.383518][T13011] [ 583.226017][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1828'. [ 584.257575][ T29] audit: type=1400 audit(1771722093.537:780): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 584.340133][T12868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.840524][T13043] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1825'. [ 585.999547][T12868] veth0_vlan: entered promiscuous mode [ 586.319141][T12868] veth1_vlan: entered promiscuous mode [ 586.451122][T12868] veth0_macvtap: entered promiscuous mode [ 587.352893][T12868] veth1_macvtap: entered promiscuous mode [ 587.381422][T12868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.418319][T12868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.482866][ T1001] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.601963][ T1001] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.648708][ T1001] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.658877][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.173178][ T29] audit: type=1326 audit(1771722097.456:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13080 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e499bf79 code=0x7ffc0000 [ 588.197484][ T29] audit: type=1326 audit(1771722097.486:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13080 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e499bf79 code=0x7ffc0000 [ 588.224464][ T29] audit: type=1326 audit(1771722097.486:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13080 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe2e499bf79 code=0x7ffc0000 [ 588.251808][ T29] audit: type=1326 audit(1771722097.486:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13080 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e499bf79 code=0x7ffc0000 [ 588.280070][ T29] audit: type=1326 audit(1771722097.486:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13080 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e499bf79 code=0x7ffc0000 [ 588.304296][ T29] audit: type=1326 audit(1771722097.506:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13080 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fe2e499bf79 code=0x7ffc0000 [ 588.329482][ T29] audit: type=1326 audit(1771722097.506:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13080 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e499bf79 code=0x7ffc0000 [ 588.354073][ T29] audit: type=1326 audit(1771722097.506:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13080 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e499bf79 code=0x7ffc0000 [ 588.387994][ T29] audit: type=1326 audit(1771722097.506:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13080 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe2e499bf79 code=0x7ffc0000 [ 588.569821][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.597006][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.665105][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.673091][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.312149][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 591.312171][ T29] audit: type=1400 audit(1771722100.596:843): avc: denied { create } for pid=13103 comm="syz.2.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 591.599013][ T29] audit: type=1400 audit(1771722100.856:844): avc: denied { map } for pid=13106 comm="syz.1.1839" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 592.942839][ T2658] block nbd0: Possible stuck request ffff888028048000: control (read@0,1024B). Runtime 330 seconds [ 592.953851][ T2658] block nbd0: Possible stuck request ffff888028048200: control (read@1024,1024B). Runtime 330 seconds [ 592.967446][ T2658] block nbd0: Possible stuck request ffff888028048400: control (read@2048,1024B). Runtime 330 seconds [ 592.984991][ T2658] block nbd0: Possible stuck request ffff888028048600: control (read@3072,1024B). Runtime 330 seconds [ 593.510557][T13119] kvm: pic: non byte write [ 593.859230][ T5856] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 593.964340][ T29] audit: type=1326 audit(1771722103.245:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13132 comm="syz.5.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633879bf79 code=0x7ffc0000 [ 594.009313][ T29] audit: type=1326 audit(1771722103.245:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13132 comm="syz.5.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633879bf79 code=0x7ffc0000 [ 594.037474][ T29] audit: type=1326 audit(1771722103.275:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13132 comm="syz.5.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f633879bf79 code=0x7ffc0000 [ 594.063066][ T29] audit: type=1326 audit(1771722103.275:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13132 comm="syz.5.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633879bf79 code=0x7ffc0000 [ 594.090091][ T29] audit: type=1326 audit(1771722103.275:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13132 comm="syz.5.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633879bf79 code=0x7ffc0000 [ 594.100291][ T5856] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 594.115542][ T29] audit: type=1326 audit(1771722103.275:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13132 comm="syz.5.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f633879bf79 code=0x7ffc0000 [ 594.146457][ T29] audit: type=1326 audit(1771722103.275:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13132 comm="syz.5.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633879bf79 code=0x7ffc0000 [ 594.169871][ T5856] usb 2-1: config 0 has no interface number 0 [ 594.169915][ T5856] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 594.169937][ T5856] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 594.201108][ T29] audit: type=1326 audit(1771722103.275:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13132 comm="syz.5.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633879bf79 code=0x7ffc0000 [ 594.205270][ T5856] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 594.248530][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.262068][ T5856] usb 2-1: Product: syz [ 594.269105][ T5856] usb 2-1: Manufacturer: syz [ 594.276866][ T5856] usb 2-1: SerialNumber: syz [ 594.288597][ T5856] usb 2-1: config 0 descriptor?? [ 594.297334][T13124] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 594.313115][ T5856] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 594.327162][ T5856] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 594.587845][T13138] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1857'. [ 594.602298][T13138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1857'. [ 594.657879][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1856'. [ 596.150555][ T10] usb 2-1: USB disconnect, device number 62 [ 596.170551][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 596.203954][ T10] cyberjack 2-1:0.69: device disconnected [ 596.388489][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1861'. [ 596.494417][T13150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13150 comm=syz.4.1858 [ 596.518875][T13150] netlink: 584 bytes leftover after parsing attributes in process `syz.4.1858'. [ 596.549889][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1861'. [ 596.698005][T13150] qnx6: unable to read the first superblock [ 597.479686][ T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 597.639777][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 597.665780][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 597.703855][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.849493][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 597.952364][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 597.979649][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.994232][ T10] usb 2-1: Product: syz [ 598.009439][ T10] usb 2-1: Manufacturer: syz [ 598.014135][ T10] usb 2-1: SerialNumber: syz [ 599.392859][ T10] usb 2-1: 0:2 : does not exist [ 600.663981][ T10] usb 2-1: USB disconnect, device number 63 [ 601.024647][T13212] kvm: pic: non byte write [ 601.322232][ T5990] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 602.449639][ T5990] usb 6-1: Using ep0 maxpacket: 16 [ 602.461167][ T5990] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 602.472842][ T5990] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 602.501143][ T5990] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 602.538597][ T5990] usb 6-1: config 1 interface 0 has no altsetting 0 [ 602.691121][ T5990] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 602.992369][ T5990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.009651][ T5990] usb 6-1: Product: syz [ 603.015151][ T5990] usb 6-1: Manufacturer: syz [ 603.021837][ T5990] usb 6-1: SerialNumber: syz [ 603.825257][T13233] kvm: pic: non byte write [ 603.868111][ T5990] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 604.239738][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 604.239755][ T29] audit: type=1326 audit(1771722113.515:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7ff9bf79 code=0x7ffc0000 [ 604.270449][ T29] audit: type=1326 audit(1771722113.515:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f8f7ff9bf79 code=0x7ffc0000 [ 604.292820][ T10] usb 6-1: USB disconnect, device number 2 [ 604.306789][ T10] usblp0: removed [ 604.315793][ T29] audit: type=1326 audit(1771722113.515:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7ff9bf79 code=0x7ffc0000 [ 604.350192][ T29] audit: type=1326 audit(1771722113.515:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f8f7ff9bf79 code=0x7ffc0000 [ 604.397426][ T29] audit: type=1326 audit(1771722113.515:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7ff9bf79 code=0x7ffc0000 [ 604.431237][ T5877] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 604.451764][ T29] audit: type=1326 audit(1771722113.515:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8f7ff9bf79 code=0x7ffc0000 [ 604.501776][ T29] audit: type=1326 audit(1771722113.515:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7ff9bf79 code=0x7ffc0000 [ 604.547086][ T29] audit: type=1326 audit(1771722113.515:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f7ff9bf79 code=0x7ffc0000 [ 604.578298][ T29] audit: type=1326 audit(1771722113.515:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7ff9bf79 code=0x7ffc0000 [ 604.627313][ T5877] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 604.639943][ T5877] usb 3-1: config 0 has no interface number 0 [ 604.893437][ T29] audit: type=1326 audit(1771722113.515:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.1.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f7ff9bf79 code=0x7ffc0000 [ 604.918369][ T5877] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 604.929579][ T5877] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 604.942322][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 604.965952][ T5877] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 604.982017][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.992420][ T5877] usb 3-1: Product: syz [ 604.999085][ T5877] usb 3-1: Manufacturer: syz [ 605.012985][ T5877] usb 3-1: SerialNumber: syz [ 605.050067][ T5877] usb 3-1: config 0 descriptor?? [ 605.059619][T13240] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 605.109397][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1888'. [ 605.163777][ T5877] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 605.275940][ T5877] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 605.309825][ T10] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 606.013164][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 606.013434][ T5877] usb 3-1: USB disconnect, device number 63 [ 606.022365][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.382850][ T10] usb 5-1: config 0 descriptor?? [ 606.384290][ T5877] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 606.447897][ T10] cp210x 5-1:0.0: cp210x converter detected [ 606.459425][ T5877] cyberjack 3-1:0.69: device disconnected [ 606.613443][T13278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1894'. [ 607.018067][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 607.552305][T13289] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 608.350107][T13291] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 609.346370][T13298] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1901'. [ 609.356488][T13298] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1901'. [ 609.451940][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 609.451964][ T29] audit: type=1400 audit(1771722118.655:960): avc: denied { create } for pid=13295 comm="syz.1.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 609.692068][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 609.927782][T10824] usb 5-1: USB disconnect, device number 74 [ 609.942747][T10824] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 609.964913][T10824] cp210x 5-1:0.0: device disconnected [ 611.460755][ T1001] bond0: (slave bond_slave_0): interface is now down [ 611.467703][ T1001] bond0: (slave bond_slave_1): interface is now down [ 611.770077][ T5937] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 612.000330][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 612.027122][ T5937] usb 3-1: config 0 interface 0 has no altsetting 0 [ 612.042584][ T5937] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 612.063267][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.081714][ T5937] usb 3-1: Product: syz [ 612.096172][ T5937] usb 3-1: Manufacturer: syz [ 612.110260][ T5937] usb 3-1: SerialNumber: syz [ 612.127241][ T5937] usb 3-1: config 0 descriptor?? [ 612.578609][T13328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1910'. [ 613.431192][ T5937] gs_usb 3-1:0.0: Couldn't get device config: (err=-110) [ 613.448895][ T5937] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110 [ 614.910124][ T10] usb 2-1: device descriptor read/64, error -110 [ 615.014868][T13374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 615.062205][T13377] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 615.660850][T10824] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 615.892485][T10810] usb 3-1: USB disconnect, device number 64 [ 615.979644][T10824] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 615.988027][T10824] usb 6-1: config 0 has no interface number 0 [ 615.999641][T10824] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 616.026845][T10824] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 616.061767][T10824] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 616.098353][T10824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.107019][T10824] usb 6-1: Product: syz [ 616.118162][T10824] usb 6-1: Manufacturer: syz [ 616.126121][T10824] usb 6-1: SerialNumber: syz [ 616.142773][T10824] usb 6-1: config 0 descriptor?? [ 616.151182][T13379] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 616.185853][T10824] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 616.504551][T10824] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 617.745243][T10824] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 617.790917][T13409] EXT4-fs: Conflicting test_dummy_encryption options [ 617.830823][T10810] usb 6-1: USB disconnect, device number 3 [ 617.838825][T10810] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 617.895474][T13409] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1930'. [ 617.930330][T10824] usb 5-1: Using ep0 maxpacket: 16 [ 617.956859][T10810] cyberjack 6-1:0.69: device disconnected [ 617.968467][T10824] usb 5-1: config 0 has no interfaces? [ 617.983754][T10824] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 618.012949][T10824] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 618.031383][T10824] usb 5-1: Manufacturer: syz [ 618.040505][T13418] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1930'. [ 618.052020][T10824] usb 5-1: config 0 descriptor?? [ 618.640280][ T29] audit: type=1400 audit(1771722127.924:961): avc: denied { ioctl } for pid=13436 comm="syz.3.1932" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 618.681190][T13437] can0: slcan on pty26. [ 618.705457][T13435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.713627][T13406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.723080][T13406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.270601][T13443] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 619.587923][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 619.594417][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.853186][T10810] usb 5-1: USB disconnect, device number 75 [ 620.256529][T13436] can0 (unregistered): slcan off pty26. [ 620.346858][T13452] xt_hashlimit: size too large, truncated to 1048576 [ 620.959845][T13468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1941'. [ 621.623538][T13469] kvm: pic: level sensitive irq not supported [ 621.623695][T13469] kvm: pic: non byte read [ 621.739095][T13469] kvm: pic: level sensitive irq not supported [ 621.739162][T13469] kvm: pic: non byte read [ 621.805736][T13486] Process accounting resumed [ 621.885943][T13500] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1946'. [ 621.920340][T10810] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 622.110505][T10810] usb 4-1: Using ep0 maxpacket: 8 [ 622.150369][T10810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.178008][T10810] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 622.187330][T10810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.196730][T10810] usb 4-1: Product: syz [ 622.202346][T10810] usb 4-1: Manufacturer: syz [ 622.208939][T10810] usb 4-1: SerialNumber: syz [ 622.423836][T10810] usb 4-1: config 0 descriptor?? [ 622.470094][T10810] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 622.492687][T10810] usb 4-1: selecting invalid altsetting 1 [ 622.574921][T13512] loop7: detected capacity change from 0 to 8 [ 622.624943][ T29] audit: type=1326 audit(1771722131.904:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37959bf79 code=0x7ffc0000 [ 622.876026][ T29] audit: type=1326 audit(1771722131.904:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37959bf79 code=0x7ffc0000 [ 622.901414][ T29] audit: type=1326 audit(1771722131.934:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc37959bf79 code=0x7ffc0000 [ 622.925084][ T29] audit: type=1326 audit(1771722131.934:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37959bf79 code=0x7ffc0000 [ 622.948879][ T29] audit: type=1326 audit(1771722131.934:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37959bf79 code=0x7ffc0000 [ 622.973321][ T29] audit: type=1326 audit(1771722131.934:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fc37959bf79 code=0x7ffc0000 [ 623.002412][T10810] gspca_stk014: reg_r err -110 [ 623.007364][T10810] stk014 4-1:0.0: probe with driver stk014 failed with error -110 [ 623.051265][ T29] audit: type=1326 audit(1771722131.934:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37959bf79 code=0x7ffc0000 [ 623.058193][ T6038] Dev loop7: unable to read RDB block 8 [ 623.082066][ T29] audit: type=1326 audit(1771722131.934:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37959bf79 code=0x7ffc0000 [ 623.112990][ T29] audit: type=1326 audit(1771722131.944:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc37959bf79 code=0x7ffc0000 [ 623.133319][ T6038] loop7: unable to read partition table [ 623.163024][ T6038] loop7: partition table beyond EOD, truncated [ 623.426737][ T2658] block nbd0: Possible stuck request ffff888028048000: control (read@0,1024B). Runtime 360 seconds [ 623.437654][ T2658] block nbd0: Possible stuck request ffff888028048200: control (read@1024,1024B). Runtime 360 seconds [ 623.448939][ T2658] block nbd0: Possible stuck request ffff888028048400: control (read@2048,1024B). Runtime 360 seconds [ 623.460274][ T2658] block nbd0: Possible stuck request ffff888028048600: control (read@3072,1024B). Runtime 360 seconds [ 623.523370][T13512] Dev loop7: unable to read RDB block 8 [ 623.532499][T13512] loop7: unable to read partition table [ 623.730262][T13512] loop7: partition table beyond EOD, truncated [ 623.737014][T13512] loop_reread_partitions: partition scan of loop7 ( Cj̖P=ý?}X) failed (rc=-5) [ 623.751650][T13536] geneve2: left promiscuous mode [ 624.890592][T13543] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 624.906850][T13544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1955'. [ 625.203011][ T5877] usb 4-1: USB disconnect, device number 75 [ 625.590660][ T5877] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 625.710321][ T5990] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 625.770273][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 625.777463][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 625.816303][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 625.891176][ T5990] usb 5-1: device descriptor read/64, error -71 [ 625.910359][T13555] xt_hashlimit: size too large, truncated to 1048576 [ 625.920438][ T5877] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 625.930478][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 625.942165][ T5877] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 625.957534][ T5877] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 626.643371][ T5990] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 626.953696][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.970995][ T5877] usb 4-1: config 0 descriptor?? [ 626.994033][T13547] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 627.218407][ T5990] usb 5-1: device descriptor read/64, error -71 [ 627.242927][ T5812] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 627.249740][ T5877] usb 4-1: USB disconnect, device number 76 [ 627.341558][ T5990] usb usb5-port1: attempt power cycle [ 628.050320][ T5990] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 628.126660][ T5990] usb 5-1: device descriptor read/8, error -71 [ 628.152743][T13580] Cannot find map_set index 0 as target [ 628.834825][T13588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1967'. [ 629.204372][ T5990] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 629.477921][ T5990] usb 5-1: device not accepting address 79, error -71 [ 629.487169][ T5990] usb usb5-port1: unable to enumerate USB device [ 629.711960][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 629.711979][ T29] audit: type=1400 audit(1771722138.984:983): avc: denied { getopt } for pid=13587 comm="syz.3.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 629.754518][T13597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1969'. [ 629.755926][ T29] audit: type=1400 audit(1771722139.034:984): avc: denied { setopt } for pid=13587 comm="syz.3.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 629.759654][T13600] loop7: detected capacity change from 0 to 8 [ 629.771168][T13594] nbd1: detected capacity change from 0 to 63 [ 629.811643][ T2658] blk_print_req_error: 6 callbacks suppressed [ 629.811659][ T2658] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 629.832517][ T2658] buffer_io_error: 6 callbacks suppressed [ 629.952724][ T2658] Buffer I/O error on dev loop7, logical block 0, async page read [ 629.986919][T13600] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 629.998706][T13600] Buffer I/O error on dev loop7, logical block 0, async page read [ 630.018361][T13600] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 630.030684][ T5812] block nbd1: Receive control failed (result -104) [ 630.032648][T13600] Buffer I/O error on dev loop7, logical block 0, async page read [ 630.049128][T13600] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 630.049165][T13600] Buffer I/O error on dev loop7, logical block 0, async page read [ 630.049217][T13600] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 630.050265][T13600] Buffer I/O error on dev loop7, logical block 0, async page read [ 630.050335][T13600] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 630.050364][T13600] Buffer I/O error on dev loop7, logical block 0, async page read [ 630.050414][T13600] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 630.050439][T13600] Buffer I/O error on dev loop7, logical block 0, async page read [ 630.052537][T13600] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 630.053578][T13600] Buffer I/O error on dev loop7, logical block 0, async page read [ 630.055653][T13600] ldm_validate_partition_table(): Disk read failed. [ 630.064969][T13600] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 630.075217][T13600] Buffer I/O error on dev loop7, logical block 0, async page read [ 630.095180][T13600] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 630.097248][T13600] Buffer I/O error on dev loop7, logical block 0, async page read [ 630.122135][T13600] Dev loop7: unable to read RDB block 0 [ 630.141548][T13600] loop7: unable to read partition table [ 630.141662][T13600] loop7: partition table beyond EOD, truncated [ 630.142487][T13600] loop_reread_partitions: partition scan of loop7 ( Cj̖P=ý?}X) failed (rc=-5) [ 631.338492][T13609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 631.770297][ T5990] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 631.806283][ T29] audit: type=1326 audit(1771722141.084:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13620 comm="syz.3.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 631.844418][ T29] audit: type=1326 audit(1771722141.084:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13620 comm="syz.3.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 631.893850][ T29] audit: type=1326 audit(1771722141.084:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13620 comm="syz.3.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 631.900540][T13626] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1979'. [ 631.919798][ T29] audit: type=1326 audit(1771722141.084:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13620 comm="syz.3.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 631.962287][ T29] audit: type=1326 audit(1771722141.084:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13620 comm="syz.3.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 631.999879][ T29] audit: type=1326 audit(1771722141.084:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13620 comm="syz.3.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 632.026554][ T5990] usb 3-1: config 0 has no interfaces? [ 632.044959][ T29] audit: type=1326 audit(1771722141.084:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13620 comm="syz.3.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 632.045189][ T5990] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 632.080281][ T29] audit: type=1326 audit(1771722141.084:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13620 comm="syz.3.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 632.089172][T13626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1979'. [ 632.114307][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.123176][ T5990] usb 3-1: Product: syz [ 632.127339][ T5990] usb 3-1: Manufacturer: syz [ 632.133278][ T5990] usb 3-1: SerialNumber: syz [ 632.139522][ T5990] usb 3-1: config 0 descriptor?? [ 632.274201][T10810] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 632.591156][T10810] usb 4-1: Using ep0 maxpacket: 32 [ 632.700591][T10810] usb 4-1: config 255 has an invalid interface number: 0 but max is -1 [ 632.709320][T10810] usb 4-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 632.874018][T10810] usb 4-1: config 255 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 60627, setting to 1024 [ 632.891524][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1975'. [ 632.910240][T10810] usb 4-1: config 255 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 632.934130][T10810] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 632.946629][T10810] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 632.955823][T10810] usb 4-1: Product: syz [ 632.971507][T10810] usb 4-1: Manufacturer: syz [ 632.976191][T10810] usb 4-1: SerialNumber: syz [ 632.993260][T13630] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 633.008620][ T5990] usb 3-1: USB disconnect, device number 65 [ 633.240325][ T5937] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 633.382482][T13630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.394390][T13630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.431820][T10810] usb 4-1: USB disconnect, device number 77 [ 633.530676][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 633.552114][ T5937] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 633.565292][ T5937] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.575607][ T5937] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 633.597479][ T5937] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 633.607930][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.717631][ T5937] usb 2-1: Product: syz [ 633.875227][ T5937] usb 2-1: Manufacturer: syz [ 633.879889][ T5937] usb 2-1: SerialNumber: syz [ 634.143028][T13660] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1988'. [ 634.504974][ T5937] usb 2-1: 0:2 : does not exist [ 634.795803][T13670] loop7: detected capacity change from 0 to 8 [ 636.082078][ T2658] blk_print_req_error: 6 callbacks suppressed [ 636.082122][ T2658] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 636.098290][ T2658] buffer_io_error: 6 callbacks suppressed [ 636.098306][ T2658] Buffer I/O error on dev loop7, logical block 0, async page read [ 636.112573][T13670] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 636.125711][T13670] Buffer I/O error on dev loop7, logical block 0, async page read [ 636.134068][T13670] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 636.143759][T13670] Buffer I/O error on dev loop7, logical block 0, async page read [ 636.152029][T13670] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 636.161708][T13670] Buffer I/O error on dev loop7, logical block 0, async page read [ 636.169923][T13670] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 636.179635][T13670] Buffer I/O error on dev loop7, logical block 0, async page read [ 636.466926][T13670] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 636.489932][T13670] Buffer I/O error on dev loop7, logical block 0, async page read [ 636.498317][T13670] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 636.535080][T13670] Buffer I/O error on dev loop7, logical block 0, async page read [ 636.543202][T13670] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 636.552869][T13670] Buffer I/O error on dev loop7, logical block 0, async page read [ 636.562797][T13670] ldm_validate_partition_table(): Disk read failed. [ 636.569576][T13670] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 636.579294][T13670] Buffer I/O error on dev loop7, logical block 0, async page read [ 636.590398][ T2658] block nbd1: Connection timed out, retrying (0/1 alive) [ 636.598537][ T2658] block nbd1: Connection timed out, retrying (0/1 alive) [ 636.609309][ T2658] block nbd1: Connection timed out, retrying (0/1 alive) [ 636.616630][ T2658] block nbd1: Connection timed out, retrying (0/1 alive) [ 636.624627][ T2658] block nbd1: Dead connection, failed to find a fallback [ 636.633230][ T2658] block nbd1: shutting down sockets [ 636.639847][ T2658] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 636.650711][ T2658] Buffer I/O error on dev nbd1, logical block 3, async page read [ 636.662088][ T6038] ldm_validate_partition_table(): Disk read failed. [ 636.669359][ T6038] Dev nbd1: unable to read RDB block 0 [ 636.675629][ T6038] nbd1: unable to read partition table [ 636.687752][ T6038] ldm_validate_partition_table(): Disk read failed. [ 636.695406][T13670] Dev loop7: unable to read RDB block 0 [ 636.701176][T13670] loop7: unable to read partition table [ 636.707924][T13670] loop7: partition table beyond EOD, truncated [ 636.716177][T13670] loop_reread_partitions: partition scan of loop7 ( Cj̖P=ý?}X) failed (rc=-5) [ 636.727454][ T6038] Dev nbd1: unable to read RDB block 0 [ 636.750814][ T6038] nbd1: unable to read partition table [ 637.072049][ T1156] bond0: (slave bond_slave_0): interface is now down [ 637.090043][ T1156] bond0: (slave bond_slave_1): interface is now down [ 637.108709][ T1156] bond0: now running without any active interface! [ 637.142097][ T1156] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 637.159369][ T1156] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 637.181765][ T1156] bond0: active interface up! [ 637.210790][ T5937] usb 2-1: USB disconnect, device number 66 [ 637.297949][T10810] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 637.632078][T10810] usb 4-1: unable to get BOS descriptor or descriptor too short [ 637.641946][T10810] usb 4-1: not running at top speed; connect to a high speed hub [ 637.651091][T10810] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.661697][T10810] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 637.682672][T10810] usb 4-1: string descriptor 0 read error: -22 [ 637.689015][T10810] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 637.698145][T10810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.720804][T10810] usb 4-1: 0:2 : does not exist [ 637.760906][ T5960] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 637.770582][ T5990] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 637.920515][ T5990] usb 5-1: Using ep0 maxpacket: 8 [ 637.943115][ T5990] usb 5-1: unable to get BOS descriptor or descriptor too short [ 637.954381][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 637.967516][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 637.992063][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 638.039415][ T5990] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 638.137283][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 638.179878][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 638.202866][ T5990] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 638.238479][ T5990] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 638.252717][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.261706][ T5990] usb 5-1: Product: syz [ 638.266954][ T5990] usb 5-1: Manufacturer: syz [ 638.273937][ T5990] usb 5-1: SerialNumber: syz [ 638.285712][ T5990] usb 5-1: config 0 descriptor?? [ 638.293411][T13697] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 638.302801][ T5960] usb 3-1: device descriptor read/64, error -71 [ 638.309537][T13697] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 638.977309][T13697] openvswitch: netlink: Message has 165 unknown bytes. [ 638.989417][T13697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.998262][T13697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.007228][T13697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.015959][T13697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.183587][ T5960] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 639.227665][T10810] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 639.266523][T10810] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 639.288387][T10810] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 639.303330][T13711] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2005'. [ 639.346021][T10810] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 639.374305][ T5960] usb 3-1: device descriptor read/64, error -71 [ 639.526854][ T5960] usb usb3-port1: attempt power cycle [ 639.566772][T13716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2004'. [ 639.567217][ T5990] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 639.582735][T10810] usb 4-1: USB disconnect, device number 78 [ 639.751430][T13719] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13719 comm=syz.1.2004 [ 639.960583][ T5960] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 639.983310][ T5960] usb 3-1: device descriptor read/8, error -71 [ 640.099474][T13729] xt_hashlimit: size too large, truncated to 1048576 [ 640.130305][ T5990] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 640.223200][ T5960] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 640.541501][ T5960] usb 3-1: device descriptor read/8, error -71 [ 640.561304][T10810] usb 5-1: USB disconnect, device number 80 [ 640.650541][ T5960] usb usb3-port1: unable to enumerate USB device [ 640.783255][ T5990] usb 6-1: Using ep0 maxpacket: 8 [ 640.799578][ T5990] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 640.808813][ T5990] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 641.635561][ T5990] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 641.645931][ T5990] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 641.660480][ T5990] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.723550][ T5990] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 641.749088][ T5990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.169581][ T5990] usb 6-1: GET_CAPABILITIES returned 0 [ 642.183540][ T5990] usbtmc 6-1:16.0: can't read capabilities [ 642.546699][T13720] xt_hashlimit: max too large, truncated to 1048576 [ 642.988130][T13760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2015'. [ 643.440671][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 643.539918][ T5990] usb 6-1: USB disconnect, device number 4 [ 643.587548][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 643.587566][ T29] audit: type=1326 audit(1771722152.864:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13765 comm="syz.3.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 643.642049][ T29] audit: type=1326 audit(1771722152.864:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13765 comm="syz.3.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 643.654041][T13768] binder: BINDER_SET_CONTEXT_MGR already set [ 643.676000][ T29] audit: type=1326 audit(1771722152.904:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13765 comm="syz.3.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 643.709669][ T29] audit: type=1326 audit(1771722152.904:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13765 comm="syz.3.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 643.756597][ T29] audit: type=1326 audit(1771722152.904:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13765 comm="syz.3.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 643.798086][ T29] audit: type=1326 audit(1771722152.904:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13765 comm="syz.3.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 643.798704][T13768] binder: 13767:13768 ioctl 4018620d 200000004a80 returned -16 [ 643.841322][ T5856] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 643.845210][ T29] audit: type=1326 audit(1771722152.904:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13765 comm="syz.3.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 643.907393][ T29] audit: type=1326 audit(1771722152.904:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13765 comm="syz.3.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 644.038546][T13775] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2020'. [ 644.040266][ T5856] usb 3-1: Using ep0 maxpacket: 16 [ 644.226416][ T5856] usb 3-1: config 0 has no interfaces? [ 644.235823][ T5856] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 644.244919][ T5856] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 644.255156][ T5856] usb 3-1: Manufacturer: syz [ 644.263422][ T29] audit: type=1326 audit(1771722152.904:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13765 comm="syz.3.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 644.269994][ T5856] usb 3-1: config 0 descriptor?? [ 644.330219][ T29] audit: type=1326 audit(1771722152.904:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13765 comm="syz.3.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 644.409674][T13780] FAULT_INJECTION: forcing a failure. [ 644.409674][T13780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.427250][T13780] CPU: 0 UID: 0 PID: 13780 Comm: syz.3.2022 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.427285][T13780] Tainted: [L]=SOFTLOCKUP [ 644.427292][T13780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 644.427303][T13780] Call Trace: [ 644.427309][T13780] [ 644.427316][T13780] dump_stack_lvl+0x100/0x190 [ 644.427350][T13780] should_fail_ex.cold+0x5/0xa [ 644.427374][T13780] _copy_to_user+0x32/0xd0 [ 644.427397][T13780] simple_read_from_buffer+0xcb/0x170 [ 644.427426][T13780] proc_fail_nth_read+0x1af/0x230 [ 644.427457][T13780] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 644.427494][T13780] ? rw_verify_area+0xce/0x6d0 [ 644.427515][T13780] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 644.427544][T13780] vfs_read+0x1e4/0xb30 [ 644.427571][T13780] ? __pfx_vfs_read+0x10/0x10 [ 644.427594][T13780] ? __fget_files+0x215/0x3d0 [ 644.427625][T13780] ? __fget_files+0x21f/0x3d0 [ 644.427658][T13780] ksys_read+0x12a/0x250 [ 644.427680][T13780] ? __pfx_ksys_read+0x10/0x10 [ 644.427710][T13780] do_syscall_64+0x106/0xf80 [ 644.427731][T13780] ? clear_bhb_loop+0x40/0x90 [ 644.427753][T13780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.427771][T13780] RIP: 0033:0x7f9bb8f5c84e [ 644.427787][T13780] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 644.427803][T13780] RSP: 002b:00007f9bb9dfffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 644.427821][T13780] RAX: ffffffffffffffda RBX: 00007f9bb9e006c0 RCX: 00007f9bb8f5c84e [ 644.427832][T13780] RDX: 000000000000000f RSI: 00007f9bb9e000a0 RDI: 0000000000000004 [ 644.427843][T13780] RBP: 00007f9bb9e00090 R08: 0000000000000000 R09: 0000000000000000 [ 644.427854][T13780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.427864][T13780] R13: 00007f9bb9216038 R14: 00007f9bb9215fa0 R15: 00007ffc1c322db8 [ 644.427889][T13780] [ 644.827303][T13786] overlayfs: missing 'lowerdir' [ 644.910319][ T5960] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 645.117540][ T5960] usb 2-1: Using ep0 maxpacket: 16 [ 645.125051][T13796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2027'. [ 645.200507][ T5863] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 645.364017][ T5960] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 645.380584][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.388622][ T5960] usb 2-1: Product: syz [ 645.838334][T13800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2028'. [ 646.288096][ T5960] usb 2-1: Manufacturer: syz [ 646.299503][ T5960] usb 2-1: SerialNumber: syz [ 646.341246][ T5960] usb 2-1: config 0 descriptor?? [ 646.350438][ T5960] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 646.369400][ T5863] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.380542][ T5863] usb 6-1: config 0 interface 0 has no altsetting 0 [ 646.387155][ T5863] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 646.420825][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.452103][ T5863] usb 6-1: config 0 descriptor?? [ 646.611765][T13762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.632467][T13762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.662886][ T5960] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 646.975673][ T5863] lenovo 0003:17EF:60A3.0009: unknown main item tag 0x1 [ 646.988691][ T5863] lenovo 0003:17EF:60A3.0009: item fetching failed at offset 3/7 [ 646.996942][ T5863] lenovo 0003:17EF:60A3.0009: hid_parse failed [ 647.003203][ T5863] lenovo 0003:17EF:60A3.0009: probe with driver lenovo failed with error -22 [ 647.447817][ T5856] usb 6-1: USB disconnect, device number 5 [ 647.574500][ T5863] usb 3-1: USB disconnect, device number 70 [ 647.605150][ T5937] usb 2-1: USB disconnect, device number 67 [ 647.728799][T13822] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2034'. [ 647.738569][T13822] netlink: 'syz.2.2034': attribute type 9 has an invalid length. [ 647.748148][T13822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2034'. [ 647.790352][ T5960] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 648.337898][ T5960] usb 5-1: Using ep0 maxpacket: 32 [ 648.341652][T13838] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2038'. [ 648.390764][ T5960] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 648.408181][ T5960] usb 5-1: config 0 has no interface number 0 [ 648.421296][ T5960] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 648.431007][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.439015][ T5960] usb 5-1: Product: syz [ 648.447422][ T5960] usb 5-1: Manufacturer: syz [ 648.452347][ T5960] usb 5-1: SerialNumber: syz [ 648.471043][ T5960] usb 5-1: config 0 descriptor?? [ 648.504517][ T5960] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 648.615194][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 648.615209][ T29] audit: type=1326 audit(1771722157.894:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.3.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 648.873356][T13846] 9pnet_fd: Insufficient options for proto=fd [ 649.260280][ T29] audit: type=1326 audit(1771722158.094:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.3.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 649.293803][ T29] audit: type=1326 audit(1771722158.104:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.3.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 649.318306][ T29] audit: type=1326 audit(1771722158.104:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.3.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 649.348627][ T29] audit: type=1326 audit(1771722158.104:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.3.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 649.348672][ T29] audit: type=1326 audit(1771722158.104:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.3.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 649.348709][ T29] audit: type=1326 audit(1771722158.104:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.3.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 649.348745][ T29] audit: type=1326 audit(1771722158.104:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.3.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 649.348780][ T29] audit: type=1326 audit(1771722158.104:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.3.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 649.348815][ T29] audit: type=1326 audit(1771722158.104:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.3.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8f9bf79 code=0x7ffc0000 [ 649.613407][ T5960] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 649.741089][ T5960] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 649.840028][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 649.840442][ T5937] usb 5-1: USB disconnect, device number 81 [ 649.869108][ T5937] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 650.146317][ T5937] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 650.241656][ T5937] quatech2 5-1:0.51: device disconnected [ 650.343380][T13864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2039'. [ 650.370352][ T5960] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 650.976194][ T5960] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 650.984457][ T5960] usb 4-1: config 0 has no interface number 0 [ 650.990578][ T5960] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 651.007631][ T5960] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 651.021721][ T5960] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 651.031962][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.039976][ T5960] usb 4-1: Product: syz [ 651.044960][ T5960] usb 4-1: Manufacturer: syz [ 651.049923][ T5960] usb 4-1: SerialNumber: syz [ 651.063418][ T5960] usb 4-1: config 0 descriptor?? [ 651.070826][T13861] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 651.084542][ T5960] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 651.151571][ T5960] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 651.291525][T13876] loop7: detected capacity change from 0 to 8 [ 651.366632][ T5960] usb 4-1: USB disconnect, device number 79 [ 651.538130][ T5960] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 651.563832][ T5960] cyberjack 4-1:0.69: device disconnected [ 651.731404][T13881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2049'. [ 652.550972][ T5795] Dev loop7: unable to read RDB block 8 [ 652.558753][ T5795] loop7: unable to read partition table [ 652.565029][ T5795] loop7: partition table beyond EOD, truncated [ 652.710255][ T5863] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 652.760495][ T5937] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 652.870764][T13876] Dev loop7: unable to read RDB block 8 [ 652.879695][T13876] loop7: unable to read partition table [ 652.888583][T13876] loop7: partition table beyond EOD, truncated [ 652.895120][ T5863] usb 6-1: Using ep0 maxpacket: 16 [ 652.900565][ T5937] usb 5-1: device descriptor read/64, error -71 [ 652.910063][ T5863] usb 6-1: config index 0 descriptor too short (expected 65315, got 36) [ 652.919160][ T5863] usb 6-1: config 0 has too many interfaces: 239, using maximum allowed: 32 [ 652.928253][ T5863] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 239 [ 652.940490][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.951886][T13876] loop_reread_partitions: partition scan of loop7 ( Cj̖P=ý?}X) failed (rc=-5) [ 652.962049][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.972481][ T5863] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 652.981886][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.427693][T13904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2058'. [ 653.912879][ T2658] block nbd0: Possible stuck request ffff888028048000: control (read@0,1024B). Runtime 390 seconds [ 653.923717][ T2658] block nbd0: Possible stuck request ffff888028048200: control (read@1024,1024B). Runtime 390 seconds [ 653.934855][ T2658] block nbd0: Possible stuck request ffff888028048400: control (read@2048,1024B). Runtime 390 seconds [ 653.945949][ T2658] block nbd0: Possible stuck request ffff888028048600: control (read@3072,1024B). Runtime 390 seconds [ 653.957036][ T5856] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 653.996969][ T5863] usb 6-1: config 0 descriptor?? [ 654.050302][ T5937] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 654.128738][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 654.151851][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.162170][ T5856] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 654.172333][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.193747][ T5856] usb 3-1: config 0 descriptor?? [ 654.222823][ T5937] usb 5-1: device descriptor read/64, error -71 [ 654.267503][T13908] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2060'. [ 654.277086][T13908] netlink: 'syz.1.2060': attribute type 9 has an invalid length. [ 654.285219][T13908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2060'. [ 654.348926][ T5937] usb usb5-port1: attempt power cycle [ 654.440936][ T5863] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 654.454002][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 654.454021][ T29] audit: type=1400 audit(1771722163.734:1226): avc: denied { ioctl } for pid=13911 comm="syz.3.2059" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 654.490731][ T5863] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 654.497917][ T5863] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 654.520909][ T5863] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 654.530469][ T5863] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 654.548203][ T5863] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 654.555542][ T5863] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 654.569713][ T5863] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 654.589866][ T5863] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 654.610114][ T5863] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 654.622406][ T5863] logitech 0003:046D:C29C.000A: hidraw0: USB HID v0.01 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 654.690456][ T5937] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 654.711408][T13921] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2063'. [ 654.732225][ T5937] usb 5-1: device descriptor read/8, error -71 [ 654.770018][ T5856] magicmouse 0003:05AC:0324.000B: hidraw1: USB HID v0.00 Device [HID 05ac:0324] on usb-dummy_hcd.2-1/input0 [ 654.964633][ T5856] usb 3-1: USB disconnect, device number 71 [ 654.981666][ T5863] logitech 0003:046D:C29C.000A: no inputs found [ 655.029029][ T5863] usb 6-1: USB disconnect, device number 6 [ 655.068653][T13922] fido_id[13922]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 655.091363][ T5937] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 655.091805][T13920] fido_id[13920]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 655.131621][ T5937] usb 5-1: device descriptor read/8, error -71 [ 655.270461][ T5937] usb usb5-port1: unable to enumerate USB device [ 656.120810][ T5836] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 656.213600][ T29] audit: type=1400 audit(1771722165.494:1227): avc: denied { setattr } for pid=13941 comm="syz.2.2070" name="NETLINK" dev="sockfs" ino=48285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 656.300368][ T5836] usb 4-1: device descriptor read/64, error -71 [ 656.771778][ T29] audit: type=1400 audit(1771722166.054:1228): avc: denied { read } for pid=13944 comm="syz.1.2069" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 656.880302][ T5836] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 656.967999][T13948] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 657.470302][ T5836] usb 4-1: device descriptor read/64, error -71 [ 657.498164][T13948] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 657.526935][T13948] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 657.539825][T13948] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 657.551978][T13948] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 657.563091][T13948] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 657.571098][T13957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2073'. [ 657.585368][T13948] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 657.593200][ T5836] usb usb4-port1: attempt power cycle [ 657.648320][T13948] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 657.669150][T13948] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 658.055095][T13963] xt_hashlimit: size too large, truncated to 1048576 [ 658.080688][ T5836] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 658.113078][ T5836] usb 4-1: device descriptor read/8, error -71 [ 658.548643][T13975] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2076'. [ 658.908624][T13975] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2076'. [ 658.934965][T13975] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2076'. [ 659.020319][ T5129] Bluetooth: hci1: command 0x0406 tx timeout [ 659.356068][T13987] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 659.580457][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 659.586948][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 659.594806][ T5129] Bluetooth: hci4: command 0x0406 tx timeout [ 659.660287][T14005] Bluetooth: hci5: command 0x0c1a tx timeout [ 659.775456][ T5856] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 659.900650][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 659.941643][ T5856] usb 3-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 659.958568][ T5856] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 660.138138][ T5856] usb 3-1: config 0 has no interface number 0 [ 660.167250][ T5856] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 660.195541][ T5856] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 660.211380][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.213846][ T10] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 660.230464][ T10] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 660.238762][ T5856] usb 3-1: Product: syz [ 660.238858][ T10] usb 6-1: Product: syz [ 660.243073][ T5856] usb 3-1: Manufacturer: syz [ 660.243093][ T5856] usb 3-1: SerialNumber: syz [ 660.245250][ T5856] usb 3-1: config 0 descriptor?? [ 660.247447][ T10] usb 6-1: Manufacturer: syz [ 660.258670][ T5856] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 660.298296][ T10] usb 6-1: SerialNumber: syz [ 660.333989][ T10] usb 6-1: config 0 descriptor?? [ 660.366787][ T10] ch341 6-1:0.0: ch341-uart converter detected [ 660.660875][ T5836] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 661.010272][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 661.045339][ T5836] usb 4-1: config 0 has no interfaces? [ 661.051006][T14024] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2086'. [ 661.064154][ T5836] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 661.073775][ T5836] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 661.094024][ T5836] usb 4-1: Manufacturer: syz [ 661.100351][T14005] Bluetooth: hci1: command 0x0406 tx timeout [ 661.122872][ T5836] usb 4-1: config 0 descriptor?? [ 661.660707][T14005] Bluetooth: hci2: command 0x0406 tx timeout [ 661.740654][T14005] Bluetooth: hci5: command 0x0c1a tx timeout [ 661.875633][T14006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.970664][T14006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.979142][T14022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.991398][T14022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.072961][ T10] ch341-uart ttyUSB0: failed to read break control: -71 [ 662.080050][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 662.107697][ T10] usb 6-1: USB disconnect, device number 7 [ 662.125492][ T10] ch341 6-1:0.0: device disconnected [ 662.200283][T10810] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 662.360284][T10810] usb 5-1: Using ep0 maxpacket: 16 [ 662.369236][T10810] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 662.387662][T10810] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 662.410145][T10810] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 662.430306][T10810] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 662.449431][T10810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.468346][T10810] usb 5-1: Product: syz [ 662.476877][T10810] usb 5-1: Manufacturer: syz [ 662.487042][T10810] usb 5-1: SerialNumber: syz [ 662.487672][ C1] usb 3-1: yurex_control_callback - control failed: -2 [ 662.590607][ T10] usb 3-1: USB disconnect, device number 72 [ 662.598273][ T10] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 662.987731][T10810] usb 5-1: 0:2 : does not exist [ 663.437208][ T5856] usb 4-1: USB disconnect, device number 84 [ 663.823283][T14005] Bluetooth: hci5: command 0x0c1a tx timeout [ 664.520939][T14066] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2104'. [ 664.608575][T14067] IPv6: NLM_F_CREATE should be specified when creating new route [ 664.922381][T14073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2108'. [ 665.382176][T10810] usb 5-1: USB disconnect, device number 86 [ 665.423927][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.527295][T14079] xt_hashlimit: size too large, truncated to 1048576 [ 665.570425][ T5937] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 665.990435][ T5937] usb 4-1: device descriptor read/64, error -71 [ 666.039680][T14089] syzkaller0: left promiscuous mode [ 666.045394][T14089] syzkaller0: left allmulticast mode [ 666.082000][T14090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2111'. [ 666.230489][ T5937] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 666.360921][ T5937] usb 4-1: device descriptor read/64, error -71 [ 666.410277][T10810] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 666.481801][ T5937] usb usb4-port1: attempt power cycle [ 666.570967][T10810] usb 3-1: Using ep0 maxpacket: 32 [ 666.577929][T10810] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.589671][T10810] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.590319][ T5863] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 666.611387][T10810] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 666.633393][T10810] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 666.644125][T10810] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 666.654316][T10810] usb 3-1: Product: syz [ 666.658598][T10810] usb 3-1: Manufacturer: syz [ 666.669549][T10810] usb 3-1: SerialNumber: syz [ 666.709891][T10810] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input23 [ 666.761774][ T5863] usb 6-1: Using ep0 maxpacket: 16 [ 666.768842][ T5863] usb 6-1: config 0 has no interfaces? [ 666.794190][ T5863] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 666.803719][ T5863] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 666.812851][ T5863] usb 6-1: Manufacturer: syz [ 666.830436][ T5937] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 666.841883][ T5863] usb 6-1: config 0 descriptor?? [ 666.864245][ T5937] usb 4-1: device descriptor read/8, error -71 [ 666.975825][T14109] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2117'. [ 667.182782][T14094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.210369][T14094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.231663][T14094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.253901][ T5937] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 667.302418][ T5937] usb 4-1: device descriptor read/8, error -71 [ 667.303055][T14094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.390689][T14094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.422579][ T5937] usb usb4-port1: unable to enumerate USB device [ 667.492019][T14094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.523184][T14094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.213943][T14099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.294262][T14094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.373157][T14099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.536388][ T29] audit: type=1400 audit(1771722177.814:1229): avc: denied { bind } for pid=14093 comm="syz.2.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 668.586485][T10810] usb 3-1: USB disconnect, device number 73 [ 668.634847][T10810] appletouch 3-1:1.0: input: appletouch disconnected [ 669.831703][T14147] loop7: detected capacity change from 0 to 8 [ 669.852611][T14147] blk_print_req_error: 154 callbacks suppressed [ 669.852633][T14147] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 669.868631][T14147] buffer_io_error: 154 callbacks suppressed [ 669.868653][T14147] Buffer I/O error on dev loop7, logical block 0, async page read [ 669.883448][T14147] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 669.893540][T14147] Buffer I/O error on dev loop7, logical block 0, async page read [ 669.901984][T14147] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 669.911695][T14147] Buffer I/O error on dev loop7, logical block 0, async page read [ 669.919615][T14147] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 669.929294][T14147] Buffer I/O error on dev loop7, logical block 0, async page read [ 669.937431][T14147] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 669.947066][T14147] Buffer I/O error on dev loop7, logical block 0, async page read [ 669.955080][T14147] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 669.964858][T14147] Buffer I/O error on dev loop7, logical block 0, async page read [ 669.972726][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805037d800: rx timeout, send abort [ 669.983326][T14147] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 670.013330][T14147] Buffer I/O error on dev loop7, logical block 0, async page read [ 670.021496][T14147] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 670.031162][T14147] Buffer I/O error on dev loop7, logical block 0, async page read [ 670.039012][T14147] ldm_validate_partition_table(): Disk read failed. [ 670.045742][T14147] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 670.055552][T14147] Buffer I/O error on dev loop7, logical block 0, async page read [ 670.063525][T14147] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 670.073385][T14147] Buffer I/O error on dev loop7, logical block 0, async page read [ 670.082214][T14147] Dev loop7: unable to read RDB block 0 [ 670.088834][T14147] loop7: unable to read partition table [ 670.094678][T14147] loop7: partition table beyond EOD, truncated [ 670.100861][T14147] loop_reread_partitions: partition scan of loop7 ( Cj̖P=ý?}X) failed (rc=-5) [ 670.201142][ T29] audit: type=1400 audit(1771722179.484:1230): avc: denied { read } for pid=5159 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 670.308238][ T29] audit: type=1400 audit(1771722179.484:1231): avc: denied { search } for pid=5159 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 670.330161][T14155] loop7: detected capacity change from 0 to 8 [ 670.350306][ T29] audit: type=1400 audit(1771722179.484:1232): avc: denied { search } for pid=5159 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 670.469880][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805037e000: rx timeout, send abort [ 670.478772][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805037d800: abort rx timeout. Force session deactivation [ 670.492630][ T5177] ldm_validate_partition_table(): Disk read failed. [ 670.522561][ T29] audit: type=1400 audit(1771722179.484:1233): avc: denied { add_name } for pid=5159 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 670.541654][ T5177] Dev loop7: unable to read RDB block 0 [ 670.978712][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805037e000: abort rx timeout. Force session deactivation [ 671.104872][ T29] audit: type=1400 audit(1771722179.484:1234): avc: denied { create } for pid=5159 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 671.128044][ T29] audit: type=1400 audit(1771722179.484:1235): avc: denied { append open } for pid=5159 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 671.131139][ T5177] loop7: unable to read partition table [ 671.156158][ T29] audit: type=1400 audit(1771722179.484:1236): avc: denied { getattr } for pid=5159 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 671.193846][T14161] Cannot find map_set index 0 as target [ 671.235736][ T5177] loop7: partition table beyond EOD, truncated [ 671.271269][T14155] ldm_validate_partition_table(): Disk read failed. [ 671.292010][T10810] usb 6-1: USB disconnect, device number 8 [ 671.308636][T14155] Dev loop7: unable to read RDB block 0 [ 671.332788][T14155] loop7: unable to read partition table [ 671.342607][T14155] loop7: partition table beyond EOD, truncated [ 671.348772][T14155] loop_reread_partitions: partition scan of loop7 ( Cj̖P=ý?}X) failed (rc=-5) [ 671.728720][T14171] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 672.957160][T14181] serio: Serial port ptm0 [ 673.947193][T14196] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2141'. [ 673.957787][T10810] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 674.226433][T10810] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 674.235771][T10810] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 674.247400][T10810] usb 6-1: config 0 interface 0 has no altsetting 0 [ 674.286560][T14204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2142'. [ 674.377291][T10810] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 674.402765][T10810] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 674.546686][T10810] usb 6-1: Product: syz [ 674.558936][T10810] usb 6-1: Manufacturer: syz [ 674.564603][T10810] usb 6-1: SerialNumber: syz [ 674.600167][T10810] usb 6-1: config 0 descriptor?? [ 674.606680][T10810] hub 6-1:0.0: bad descriptor, ignoring hub [ 674.613848][T10810] hub 6-1:0.0: probe with driver hub failed with error -5 [ 674.628385][T14206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2144'. [ 674.660462][ T5856] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 674.661514][T10810] usb 6-1: selecting invalid altsetting 0 [ 674.840807][ T5856] usb 2-1: Using ep0 maxpacket: 16 [ 675.005502][ T5856] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 675.025436][ T5856] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 675.043960][ T5856] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 675.058115][ T5856] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 675.068410][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.090631][ T5856] usb 2-1: Product: syz [ 675.094847][ T5856] usb 2-1: Manufacturer: syz [ 675.099552][ T5856] usb 2-1: SerialNumber: syz [ 675.153925][ T29] audit: type=1400 audit(1771722184.434:1237): avc: denied { search } for pid=14208 comm="syz.3.2146" name="/" dev="configfs" ino=1143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 675.257165][T14005] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 675.330553][ T10] usb 6-1: USB disconnect, device number 9 [ 675.410328][T10810] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 675.525198][ T5856] usb 2-1: 0:2 : does not exist [ 675.560270][T10810] usb 4-1: Using ep0 maxpacket: 32 [ 675.567670][T10810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 675.579319][T10810] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 675.591939][T10810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 675.606396][T10810] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 675.616109][T10810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.625392][T10810] usb 4-1: Product: syz [ 675.629843][T10810] usb 4-1: Manufacturer: syz [ 675.635000][T10810] usb 4-1: SerialNumber: syz [ 675.642593][T10810] usb 4-1: config 0 descriptor?? [ 675.658066][T10810] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input24 [ 675.762091][ C0] xpad 4-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 675.784858][ C0] xpad 4-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 675.795065][ C0] xpad 4-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 676.503664][T14220] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2149'. [ 676.562157][T10810] usb 4-1: USB disconnect, device number 89 [ 676.568140][ C0] xpad 4-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 676.858504][ T5856] usb 2-1: USB disconnect, device number 68 [ 676.907550][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2151'. [ 676.919362][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 677.604616][T14247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2157'. [ 678.957679][T14257] sp0: Synchronizing with TNC [ 679.050547][T10810] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 679.176572][T14256] infiniband syz1: set active [ 679.181480][T14256] infiniband syz1: added veth1_vlan [ 679.261737][T14256] RDS/IB: syz1: added [ 679.266609][T14256] smc: adding ib device syz1 with port count 1 [ 679.273056][T14256] smc: ib device syz1 port 1 has no pnetid [ 679.300671][T10810] usb 2-1: Using ep0 maxpacket: 16 [ 680.123163][T10810] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 680.131591][T10810] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.141980][T10810] usb 2-1: config 0 has no interface number 0 [ 680.150780][T10810] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 680.161157][T10810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.169200][T10810] usb 2-1: Product: syz [ 680.190323][T10810] usb 2-1: Manufacturer: syz [ 680.195158][T10810] usb 2-1: SerialNumber: syz [ 680.212660][T10810] usb 2-1: config 0 descriptor?? [ 680.223439][T10810] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 680.241247][T10810] uvcvideo 2-1:0.105: No valid video chain found. [ 680.332515][ T12] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 680.344734][ T12] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 680.365746][ T12] bond0: active interface up! [ 680.482508][ T10] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 681.023748][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 681.030250][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 681.058186][T14279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.174887][T14279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.345198][ T29] audit: type=1400 audit(1771722190.624:1238): avc: denied { bind } for pid=14249 comm="syz.1.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 681.390288][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 681.392122][ T29] audit: type=1400 audit(1771722190.674:1239): avc: denied { connect } for pid=14249 comm="syz.1.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 681.397899][ T10] usb 4-1: can't read configurations, error -71 [ 681.450564][ T29] audit: type=1400 audit(1771722190.724:1240): avc: denied { write } for pid=14249 comm="syz.1.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 681.482050][ T29] audit: type=1400 audit(1771722190.724:1241): avc: denied { ioctl } for pid=14249 comm="syz.1.2158" path="socket:[49307]" dev="sockfs" ino=49307 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 682.204008][T14297] evm: overlay not supported [ 682.229778][T14301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2171'. [ 682.543886][ T29] audit: type=1400 audit(1771722191.814:1242): avc: denied { getopt } for pid=14308 comm="syz.4.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 682.684753][ T5960] usb 2-1: USB disconnect, device number 69 [ 682.746592][T14313] 9p: Bad value for 'rfdno' [ 682.751405][ T29] audit: type=1400 audit(1771722192.024:1243): avc: denied { append } for pid=14308 comm="syz.4.2174" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 682.944834][T14317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2175'. [ 683.564837][T14328] loop7: detected capacity change from 0 to 8 [ 683.782599][ T29] audit: type=1400 audit(1771722193.064:1244): avc: denied { write } for pid=14329 comm="syz.5.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 684.688911][ T2658] block nbd0: Possible stuck request ffff888028048000: control (read@0,1024B). Runtime 420 seconds [ 684.702959][ T2658] block nbd0: Possible stuck request ffff888028048200: control (read@1024,1024B). Runtime 420 seconds [ 684.714167][ T2658] block nbd0: Possible stuck request ffff888028048400: control (read@2048,1024B). Runtime 420 seconds [ 684.726578][ T2658] block nbd0: Possible stuck request ffff888028048600: control (read@3072,1024B). Runtime 420 seconds [ 684.804822][ T5795] Dev loop7: unable to read RDB block 8 [ 684.822967][ T5795] loop7: unable to read partition table [ 684.840399][ T5795] loop7: partition table beyond EOD, truncated [ 685.174643][T14328] Dev loop7: unable to read RDB block 8 [ 685.205397][T14328] loop7: unable to read partition table [ 685.271793][T14339] netlink: 'syz.2.2181': attribute type 1 has an invalid length. [ 685.300407][T14328] loop7: partition table beyond EOD, truncated [ 685.327901][T14328] loop_reread_partitions: partition scan of loop7 ( Cj̖P=ý?}X) failed (rc=-5) [ 685.684896][T14339] 8021q: adding VLAN 0 to HW filter on device bond2 [ 685.737427][T14338] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 685.799559][T14338] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 686.174174][ T29] audit: type=1326 audit(1771722195.454:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633879bf79 code=0x7ffc0000 [ 686.199245][ T5856] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 686.226428][ T29] audit: type=1326 audit(1771722195.454:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633879bf79 code=0x7ffc0000 [ 686.256563][ T29] audit: type=1326 audit(1771722195.484:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f633879bf79 code=0x7ffc0000 [ 686.299067][T14343] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 686.354274][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 686.354290][ T29] audit: type=1326 audit(1771722195.634:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f633879d297 code=0x7ffc0000 [ 686.386396][ T29] audit: type=1326 audit(1771722195.634:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f633875c84e code=0x7ffc0000 [ 686.410873][ T29] audit: type=1326 audit(1771722195.634:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633879bf79 code=0x7ffc0000 [ 686.440409][ T5856] usb 2-1: device descriptor read/64, error -71 [ 686.485873][ T29] audit: type=1326 audit(1771722195.634:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633879bf79 code=0x7ffc0000 [ 686.530325][ T29] audit: type=1326 audit(1771722195.674:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f633879bf79 code=0x7ffc0000 [ 686.572847][ T29] audit: type=1326 audit(1771722195.674:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633879bf79 code=0x7ffc0000 [ 686.600416][ T29] audit: type=1326 audit(1771722195.674:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633879bf79 code=0x7ffc0000 [ 686.672770][ T29] audit: type=1326 audit(1771722195.724:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f633879bf79 code=0x7ffc0000 [ 686.697968][ T5856] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 686.716042][ T29] audit: type=1326 audit(1771722195.724:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633879bf79 code=0x7ffc0000 [ 686.731760][T14362] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2186'. [ 686.741185][ T29] audit: type=1326 audit(1771722195.724:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633879bf79 code=0x7ffc0000 [ 686.816175][T14362] netlink: 'syz.5.2186': attribute type 9 has an invalid length. [ 686.824328][T14362] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2186'. [ 686.840310][ T5856] usb 2-1: device descriptor read/64, error -71 [ 686.950630][ T5856] usb usb2-port1: attempt power cycle [ 686.984671][T14367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 687.670364][ T5856] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 687.746704][ T5856] usb 2-1: device descriptor read/8, error -71 [ 687.990815][ T5856] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 688.071561][ T5856] usb 2-1: device descriptor read/8, error -71 [ 688.192814][ T5856] usb usb2-port1: unable to enumerate USB device [ 690.762777][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 690.960599][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 690.965465][ T24] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 690.965563][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.965590][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 691.011574][ T5877] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 691.038113][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 691.048120][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.056600][ T24] usb 6-1: Product: syz [ 691.063611][ T24] usb 6-1: Manufacturer: syz [ 691.068281][ T24] usb 6-1: SerialNumber: syz [ 691.443010][T14408] netlink: 532 bytes leftover after parsing attributes in process `syz.4.2202'. [ 691.455339][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 691.455357][ T29] audit: type=1400 audit(1771722200.734:1297): avc: denied { mounton } for pid=14407 comm="syz.4.2202" path="/350/file0" dev="tmpfs" ino=1827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 691.661551][T14412] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2203'. [ 691.873034][ T5877] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 691.882799][ T24] usb 6-1: 0:2 : does not exist [ 691.887906][ T5877] usb 3-1: config 0 has no interface number 0 [ 691.894136][ T5877] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 691.925668][ T5877] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 691.960654][ T5877] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 691.980799][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.988858][ T5877] usb 3-1: Product: syz [ 692.010481][ T5877] usb 3-1: Manufacturer: syz [ 692.015169][ T5877] usb 3-1: SerialNumber: syz [ 692.035471][ T5877] usb 3-1: config 0 descriptor?? [ 692.061075][T14404] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 692.078887][ T5877] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 692.101457][ T5877] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 692.517003][ T5937] usb 3-1: USB disconnect, device number 74 [ 692.526873][ T5937] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 692.539779][ T5937] cyberjack 3-1:0.69: device disconnected [ 693.273610][ T24] usb 6-1: USB disconnect, device number 10 [ 693.494411][T14442] syzkaller0: entered promiscuous mode [ 693.499936][T14442] syzkaller0: entered allmulticast mode [ 693.529113][ T153] bond0: (slave bond_slave_0): interface is now down [ 693.540672][ T153] bond0: (slave bond_slave_1): interface is now down [ 693.571018][ T153] bond0: now running without any active interface! [ 693.588905][ T153] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 693.611115][ T153] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 693.626622][ T153] bond0: active interface up! [ 695.156678][T14467] block nbd4: shutting down sockets [ 695.324423][ T29] audit: type=1400 audit(1771722204.604:1298): avc: denied { read write } for pid=14481 comm="syz.5.2226" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 695.356077][ T29] audit: type=1400 audit(1771722204.634:1299): avc: denied { open } for pid=14481 comm="syz.5.2226" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 695.824905][ T10] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 696.218032][ T10] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 696.226524][ T10] usb 5-1: config 0 has no interface number 0 [ 696.232863][ T10] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 696.245455][ T10] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 696.311200][ T10] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 696.323682][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.336138][ T10] usb 5-1: Product: syz [ 696.340517][ T10] usb 5-1: Manufacturer: syz [ 696.345131][ T10] usb 5-1: SerialNumber: syz [ 696.353068][ T10] usb 5-1: config 0 descriptor?? [ 696.360537][T14484] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 696.370853][ T10] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 696.384165][ T10] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 696.561475][ T5937] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 696.621199][ T24] usb 5-1: USB disconnect, device number 87 [ 696.640899][ T24] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 696.653864][ T24] cyberjack 5-1:0.69: device disconnected [ 696.733463][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 696.753453][ T5937] usb 6-1: config 0 has an invalid interface number: 172 but max is 0 [ 696.761755][ T5937] usb 6-1: config 0 has no interface number 0 [ 696.767888][ T5937] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=c2.a1 [ 696.777805][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.796419][ T5937] usb 6-1: config 0 descriptor?? [ 696.805279][ T5937] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 697.008804][T14490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.017858][T14490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.029518][ T5937] gspca_sn9c2028: read1 error -71 [ 697.037769][ T5937] gspca_sn9c2028: read1 error -71 [ 697.043423][ T5937] gspca_sn9c2028: read1 error -71 [ 697.048544][ T5937] sn9c2028 6-1:0.172: probe with driver sn9c2028 failed with error -71 [ 697.075984][ T5937] usb 6-1: USB disconnect, device number 11 [ 697.388903][T12317] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 697.414214][T12317] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 697.431812][T12317] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 697.455467][T12317] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 697.470925][T12317] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 697.940999][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 698.071560][ T29] audit: type=1400 audit(1771722207.354:1300): avc: denied { getopt } for pid=14498 comm="syz.2.2232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 698.104407][ T10] usb 6-1: device descriptor read/64, error -71 [ 698.116766][T14499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.127539][T14499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.295769][T14494] chnl_net:caif_netlink_parms(): no params data found [ 698.430802][ T24] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 698.542805][T14494] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.552201][T14494] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.564142][T14494] bridge_slave_0: entered allmulticast mode [ 698.583552][T14494] bridge_slave_0: entered promiscuous mode [ 698.612035][ T24] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 698.632667][T14494] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.640719][ T24] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 698.649352][T14494] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.658439][ T24] usb 3-1: Product: syz [ 698.669730][ T24] usb 3-1: Manufacturer: syz [ 698.676540][T14494] bridge_slave_1: entered allmulticast mode [ 698.677573][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 698.682653][ T24] usb 3-1: SerialNumber: syz [ 698.694105][ T5960] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 698.697020][T14494] bridge_slave_1: entered promiscuous mode [ 698.731294][ T24] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 698.754240][T14494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.767984][T14494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.796371][T14494] team0: Port device team_slave_0 added [ 698.804695][T14494] team0: Port device team_slave_1 added [ 698.834616][T14494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.842022][T14494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.869665][ T10] usb 6-1: device descriptor read/64, error -71 [ 698.876111][T14494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.888442][T14494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.895503][T14494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.921550][ T5960] usb 2-1: Using ep0 maxpacket: 16 [ 698.926777][T14494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.945539][ T5960] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.957901][ T5960] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.968672][ T5960] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 698.982191][ T5960] usb 2-1: config 0 interface 0 has no altsetting 0 [ 698.988876][ T5960] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 699.010593][ T10] usb usb6-port1: attempt power cycle [ 699.020609][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.042517][ T5960] usb 2-1: config 0 descriptor?? [ 699.091100][ T24] vp7045: USB control message 'in' went wrong. [ 699.096465][T14494] hsr_slave_0: entered promiscuous mode [ 699.097311][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 699.105600][T14494] hsr_slave_1: entered promiscuous mode [ 699.120080][ T24] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 699.120186][T14494] debugfs: 'hsr0' already exists in 'hsr' [ 699.138481][T14494] Cannot create hsr debugfs directory [ 699.421621][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 699.494729][T14502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.494859][ T10] usb 6-1: device descriptor read/8, error -71 [ 699.507964][T14499] loop7: detected capacity change from 0 to 16384 [ 699.516740][T14502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.584918][T14005] Bluetooth: hci6: command tx timeout [ 699.623791][T14502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.641701][T14499] loop7: detected capacity change from 16384 to 0 [ 699.691000][T14502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.707685][T14494] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 699.724640][T14494] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 699.735815][T14494] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 699.745520][T10810] usb 3-1: USB disconnect, device number 75 [ 699.766511][T14494] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 699.773427][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 699.801011][ T10] usb 6-1: device descriptor read/8, error -71 [ 699.806884][ T29] audit: type=1400 audit(1771722209.084:1301): avc: denied { ioctl } for pid=14501 comm="syz.1.2234" path="socket:[49798]" dev="sockfs" ino=49798 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 699.910567][ T10] usb usb6-port1: unable to enumerate USB device [ 699.920781][ T5836] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 699.978350][ T5960] usbhid 2-1:0.0: can't add hid device: -71 [ 699.985573][ T5960] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 700.040060][ T5960] usb 2-1: USB disconnect, device number 74 [ 700.062153][T14494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.079990][T14494] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.084114][ T5836] usb 5-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config [ 700.185276][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.192464][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.298572][ T29] audit: type=1804 audit(1771722209.534:1302): pid=14537 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2238" name="/newroot/419/file0" dev="tmpfs" ino=2214 res=1 errno=0 [ 700.363881][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.371060][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.470183][ T5836] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 700.483403][ T5836] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 700.492800][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.510772][ T5836] usb 5-1: config 0 descriptor?? [ 700.524771][ T5836] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 700.669032][T14494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.091634][T14565] syzkaller0: entered promiscuous mode [ 701.097174][T14565] syzkaller0: entered allmulticast mode [ 701.154686][T14494] veth0_vlan: entered promiscuous mode [ 701.178566][T14494] veth1_vlan: entered promiscuous mode [ 701.210293][T10810] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 701.211562][T14494] veth0_macvtap: entered promiscuous mode [ 701.213921][T14494] veth1_macvtap: entered promiscuous mode [ 701.222804][T14494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.228379][T14494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.236239][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.236322][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.236379][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.236427][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.303160][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.303182][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.334092][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.416887][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.430377][T10810] usb 3-1: Using ep0 maxpacket: 8 [ 701.437801][T10810] usb 3-1: config 0 has no interfaces? [ 701.449566][T10810] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 701.470401][T10810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.471475][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 701.478422][T10810] usb 3-1: Product: syz [ 701.478443][T10810] usb 3-1: Manufacturer: syz [ 701.478457][T10810] usb 3-1: SerialNumber: syz [ 701.527203][T10810] usb 3-1: config 0 descriptor?? [ 701.660440][T14005] Bluetooth: hci6: command tx timeout [ 701.823075][ T5836] usb 3-1: USB disconnect, device number 76 [ 702.074553][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 702.084567][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 702.097749][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 702.107128][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.115245][ T24] usb 6-1: Product: syz [ 702.119548][ T24] usb 6-1: Manufacturer: syz [ 702.124763][ T24] usb 6-1: SerialNumber: syz [ 702.134433][ T24] usb 6-1: config 0 descriptor?? [ 702.152435][ T24] usb 6-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 702.428552][ T24] usb 6-1: USB disconnect, device number 16 [ 702.523015][ T6595] udevd[6595]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 702.737907][ T5877] usb 5-1: USB disconnect, device number 88 [ 703.385928][ T29] audit: type=1400 audit(1771722212.664:1303): avc: denied { read } for pid=14586 comm="syz.2.2248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 703.408700][T14587] tmpfs: Invalid gid '0x00000000ffffffff' [ 703.745372][T14005] Bluetooth: hci6: command tx timeout [ 705.449678][T14577] bridge0: port 3(vlan2) entered blocking state [ 705.458155][T14577] bridge0: port 3(vlan2) entered disabled state [ 705.466821][T14577] vlan2: entered allmulticast mode [ 705.474384][T14577] bridge0: entered allmulticast mode [ 705.484300][T14577] vlan2: left allmulticast mode [ 705.491003][T14577] bridge0: left allmulticast mode [ 705.820561][T14005] Bluetooth: hci6: command tx timeout [ 706.260317][ T5856] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 706.550744][ T5856] usb 2-1: Using ep0 maxpacket: 16 [ 706.564855][ T5856] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 706.600261][ T5856] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 706.618168][ T5856] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 706.677976][ T5856] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 707.016348][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.060249][ T5856] usb 2-1: Product: syz [ 707.064460][ T5856] usb 2-1: Manufacturer: syz [ 707.069062][ T5856] usb 2-1: SerialNumber: syz [ 707.121580][T14628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2259'. [ 707.175630][T14626] syzkaller0: entered promiscuous mode [ 707.187312][T14626] syzkaller0: entered allmulticast mode [ 707.357247][T14636] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2261'. [ 707.424692][T14637] IPv6: NLM_F_CREATE should be specified when creating new route [ 707.592939][T14633] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 707.617872][T14639] Bluetooth: MGMT ver 1.23 [ 707.836522][ T5856] usb 2-1: 0:2 : does not exist [ 708.403922][ T29] audit: type=1326 audit(1771722217.674:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14654 comm="syz.2.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e499bf79 code=0x7ffc0000 [ 708.441675][ T29] audit: type=1326 audit(1771722217.674:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14654 comm="syz.2.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e499bf79 code=0x7ffc0000 [ 708.475092][ T29] audit: type=1326 audit(1771722217.724:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14654 comm="syz.2.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe2e499bf79 code=0x7ffc0000 [ 708.510149][ T29] audit: type=1326 audit(1771722217.724:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14654 comm="syz.2.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e499bf79 code=0x7ffc0000 [ 708.555919][ T29] audit: type=1326 audit(1771722217.724:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14654 comm="syz.2.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e499bf79 code=0x7ffc0000 [ 708.640165][ T29] audit: type=1326 audit(1771722217.724:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14654 comm="syz.2.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fe2e499bf79 code=0x7ffc0000 [ 708.675156][ T29] audit: type=1326 audit(1771722217.724:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14654 comm="syz.2.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e499bf79 code=0x7ffc0000 [ 708.723886][ T29] audit: type=1326 audit(1771722217.724:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14654 comm="syz.2.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe2e499bf79 code=0x7ffc0000 [ 708.748466][ T29] audit: type=1326 audit(1771722217.724:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14654 comm="syz.2.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e499bf79 code=0x7ffc0000 [ 708.775085][ T29] audit: type=1326 audit(1771722217.744:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14654 comm="syz.2.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2e499bf79 code=0x7ffc0000 [ 708.900588][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 708.908243][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 708.915831][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 708.923372][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 708.931053][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 708.939015][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 708.949558][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 708.957233][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 708.965293][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 709.130411][ T24] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 709.312918][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 99, changing to 10 [ 709.330577][ T5856] usb 2-1: USB disconnect, device number 75 [ 709.345218][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24840, setting to 1024 [ 709.370964][ T5937] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 709.381459][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 709.400169][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 709.412430][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.424973][ T24] usb 3-1: config 0 descriptor?? [ 709.572754][ T5937] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 709.581468][ T5937] usb 6-1: config 0 has no interface number 0 [ 709.587721][ T5937] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 709.598481][ T5937] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 709.612050][ T5937] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 709.632044][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.642328][ T5937] usb 6-1: Product: syz [ 709.647022][ T5937] usb 6-1: Manufacturer: syz [ 709.652679][ T5937] usb 6-1: SerialNumber: syz [ 709.669621][ T5937] usb 6-1: config 0 descriptor?? [ 709.695524][T14662] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 709.786293][ T5937] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 709.809453][ T5937] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 710.290124][ T5960] usb 6-1: USB disconnect, device number 17 [ 710.309445][ T5960] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 710.331966][ T5960] cyberjack 6-1:0.69: device disconnected [ 711.102806][ T30] INFO: task syz.0.1744:12691 blocked for more than 143 seconds. [ 711.113147][ T30] Tainted: G L syzkaller #0 [ 711.131396][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 711.140168][ T30] task:syz.0.1744 state:D stack:29000 pid:12691 tgid:12690 ppid:5802 task_flags:0x400140 flags:0x00080002 [ 711.223924][ T30] Call Trace: [ 711.291780][ T30] [ 711.341524][ T30] __schedule+0xfee/0x60e0 [ 711.431021][ T30] ? __lock_acquire+0x4a5/0x2630 [ 711.492515][ T30] ? __pfx___schedule+0x10/0x10 [ 711.497568][ T30] ? find_held_lock+0x2b/0x80 [ 711.504240][ T30] ? schedule+0x2bf/0x390 [ 711.508883][ T30] schedule+0xdd/0x390 [ 711.514948][ T30] schedule_preempt_disabled+0x13/0x30 [ 711.520653][ T30] __mutex_lock+0xc9a/0x1b90 [ 711.526827][ T30] ? bdev_open+0xa2/0xe40 [ 711.532252][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 711.541481][ T30] ? bd_prepare_to_claim+0x1e0/0x280 [ 711.547684][ T30] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 711.553702][ T30] ? file_init_path+0x48e/0x670 [ 711.558595][ T30] ? bdev_open+0xa2/0xe40 [ 711.565113][ T30] bdev_open+0xa2/0xe40 [ 711.585187][ T30] ? iput+0x3a/0x40 [ 711.589434][ T30] bdev_file_open_by_dev+0x179/0x210 [ 711.595349][ T30] setup_bdev_super+0x385/0x730 [ 711.602528][ T30] get_tree_bdev_flags+0x363/0x620 [ 711.607998][ T30] ? __pfx_vfat_fill_super+0x10/0x10 [ 711.626121][ T30] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 711.651433][ T30] ? cap_capable+0x107/0x460 [ 711.657774][ T30] ? bpf_lsm_capable+0x9/0x10 [ 711.666391][ T30] ? security_capable+0x80/0x260 [ 711.671651][ T30] vfs_get_tree+0x92/0x320 [ 711.676328][ T30] path_mount+0x7d0/0x23d0 [ 711.682109][ T30] ? __pfx_path_mount+0x10/0x10 [ 711.686998][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 711.692689][ T30] ? putname+0xb1/0x110 [ 711.696912][ T30] ? kmem_cache_free+0x124/0x6a0 [ 711.702291][ T30] ? __x64_sys_mount+0x293/0x310 [ 711.707264][ T30] __x64_sys_mount+0x293/0x310 [ 711.713189][ T30] ? __pfx___x64_sys_mount+0x10/0x10 [ 711.718519][ T30] do_syscall_64+0x106/0xf80 [ 711.725322][ T30] ? clear_bhb_loop+0x40/0x90 [ 711.730082][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.737323][ T30] RIP: 0033:0x7f473eb9bf79 [ 711.746727][ T30] RSP: 002b:00007f473f9dd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 711.773516][ T30] RAX: ffffffffffffffda RBX: 00007f473ee15fa0 RCX: 00007f473eb9bf79 [ 711.789452][ T30] RDX: 0000200000000140 RSI: 0000200000000000 RDI: 00002000000000c0 [ 711.798696][ T30] RBP: 00007f473ec327e0 R08: 0000000000000000 R09: 0000000000000000 [ 711.853216][ T30] R10: 0000000000208000 R11: 0000000000000246 R12: 0000000000000000 [ 711.886033][ T30] R13: 00007f473ee16038 R14: 00007f473ee15fa0 R15: 00007ffdc2fc68c8 [ 711.907145][ T30] [ 711.910664][ T30] [ 711.910664][ T30] Showing all locks held in the system: [ 711.918448][ T30] 5 locks held by kworker/1:0/24: [ 711.924731][ T30] #0: ffff888022ab9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 711.955011][ T30] #1: ffffc900001e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 711.972060][ T30] #2: ffff88802b992198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 711.981945][ T30] #3: ffff888049f9b198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 711.996426][ T30] #4: ffff88802bcfa160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 712.005799][ T30] 1 lock held by khungtaskd/30: [ 712.010805][ T30] #0: ffffffff8e7e94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 712.020791][ T30] 3 locks held by kworker/u8:3/49: [ 712.025983][ T30] #0: ffff888033a55948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 712.037175][ T30] #1: ffffc90000b97d08 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 712.050415][ T30] #2: ffffffff9060cd28 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 712.059914][ T30] 3 locks held by kworker/u8:8/1139: [ 712.065449][ T30] #0: ffff88813fe9c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 712.077683][ T30] #1: ffffc90004b7fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 712.088188][ T30] #2: ffffffff9060cd28 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 712.097459][ T30] 2 locks held by getty/5563: [ 712.102176][ T30] #0: ffff8880397380a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 712.112067][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 712.122212][ T30] 1 lock held by udevd/5794: [ 712.126871][ T30] #0: ffff888027f54358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 712.136375][ T30] 3 locks held by kworker/u8:11/9519: [ 712.141868][ T30] #0: ffff88813fe9c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 712.153394][ T30] #1: ffffc9000cd1fd08 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 712.164519][ T30] #2: ffffffff8e7f50b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 712.175506][ T30] 2 locks held by syz.0.1744/12691: [ 712.180791][ T30] #0: ffff8880873540e0 (&type->s_umount_key#81/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 712.191070][ T30] #1: ffff888027f54358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 712.200374][ T30] 2 locks held by syz.6.2260/14625: [ 712.205636][ T30] #0: ffffffff9060cd28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 712.214680][ T30] #1: ffffffff8e7f50b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 712.225280][ T30] 1 lock held by syz.2.2267/14663: [ 712.230466][ T30] #0: ffff888058acc708 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 712.241254][ T30] [ 712.250528][ T30] ============================================= [ 712.250528][ T30] [ 712.258998][ T30] NMI backtrace for cpu 0 [ 712.259019][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 712.259043][ T30] Tainted: [L]=SOFTLOCKUP [ 712.259049][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 712.259060][ T30] Call Trace: [ 712.259066][ T30] [ 712.259073][ T30] dump_stack_lvl+0x100/0x190 [ 712.259105][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 712.259125][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 712.259153][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 712.259184][ T30] sys_info+0x141/0x190 [ 712.259208][ T30] watchdog+0xd25/0x1050 [ 712.259239][ T30] ? __pfx_watchdog+0x10/0x10 [ 712.259261][ T30] ? __kthread_parkme+0x18c/0x230 [ 712.259288][ T30] ? kthread+0x13a/0x450 [ 712.259302][ T30] ? __pfx_watchdog+0x10/0x10 [ 712.259322][ T30] kthread+0x370/0x450 [ 712.259337][ T30] ? __pfx_kthread+0x10/0x10 [ 712.259365][ T30] ret_from_fork+0x754/0xd80 [ 712.259384][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 712.259401][ T30] ? __switch_to+0x7b4/0x1120 [ 712.259421][ T30] ? __pfx_kthread+0x10/0x10 [ 712.259449][ T30] ret_from_fork_asm+0x1a/0x30 [ 712.259481][ T30] [ 712.259488][ T30] Sending NMI from CPU 0 to CPUs 1: [ 712.294080][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 712.296492][ C1] NMI backtrace for cpu 1 [ 712.296508][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 712.296528][ C1] Tainted: [L]=SOFTLOCKUP [ 712.296533][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 712.296542][ C1] Workqueue: usb_hub_wq hub_event [ 712.296567][ C1] RIP: 0010:io_serial_in+0x87/0xb0 [ 712.296585][ C1] Code: 7b 90 fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c e9 4d 4e 19 06 e8 58 c7 fc fc eb a2 e8 e1 c7 [ 712.296598][ C1] RSP: 0018:ffffc900001e6918 EFLAGS: 00000006 [ 712.296610][ C1] RAX: dffffc0000000005 RBX: 00000000000003f9 RCX: 0000000000000000 [ 712.296619][ C1] RDX: 00000000000003f9 RSI: ffffffff85781d20 RDI: ffffffff9b493800 [ 712.296629][ C1] RBP: ffffffff9b4937c0 R08: 0000000000000001 R09: 000000000000001f [ 712.296637][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 712.296646][ C1] R13: ffffffff9b493a80 R14: ffffffff9b493810 R15: 0000000000000000 [ 712.296655][ C1] FS: 0000000000000000(0000) GS:ffff888124452000(0000) knlGS:0000000000000000 [ 712.296672][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 712.296681][ C1] CR2: 00007fe2e4be7198 CR3: 0000000096bae000 CR4: 00000000003526f0 [ 712.296691][ C1] Call Trace: [ 712.296697][ C1] [ 712.296704][ C1] serial8250_console_write+0x246/0x1900 [ 712.296728][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 712.296748][ C1] ? lock_acquire+0x1cf/0x380 [ 712.296773][ C1] console_flush_one_record+0x790/0xe50 [ 712.296791][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 712.296809][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 712.296828][ C1] console_unlock+0x103/0x260 [ 712.296842][ C1] ? __pfx_console_unlock+0x10/0x10 [ 712.296857][ C1] ? lock_acquire+0x140/0x380 [ 712.296879][ C1] vprintk_emit+0x407/0x6b0 [ 712.296894][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 712.296909][ C1] ? usbhid_parse+0x776/0xb20 [ 712.296925][ C1] ? usbhid_probe+0xd57/0x1350 [ 712.296940][ C1] ? really_probe+0x241/0xa60 [ 712.296958][ C1] ? __driver_probe_device+0x1de/0x400 [ 712.296976][ C1] ? driver_probe_device+0x4c/0x1b0 [ 712.296996][ C1] dev_vprintk_emit+0x394/0x3e0 [ 712.297014][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 712.297028][ C1] ? bus_probe_device+0x64/0x160 [ 712.297050][ C1] dev_printk_emit+0xd2/0x10d [ 712.297065][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 712.297082][ C1] ? kasan_quarantine_put+0x104/0x240 [ 712.297099][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 712.297119][ C1] __dev_printk+0xcb/0x100 [ 712.297142][ C1] _dev_err+0xef/0x127 [ 712.297157][ C1] ? __pfx__dev_err+0x10/0x10 [ 712.297178][ C1] usbhid_probe.cold+0x8c/0x118 [ 712.297200][ C1] usb_probe_interface+0x303/0x8f0 [ 712.297221][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 712.297240][ C1] really_probe+0x241/0xa60 [ 712.297260][ C1] __driver_probe_device+0x1de/0x400 [ 712.297280][ C1] driver_probe_device+0x4c/0x1b0 [ 712.297299][ C1] __device_attach_driver+0x1ff/0x3e0 [ 712.297319][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 712.297337][ C1] bus_for_each_drv+0x159/0x1e0 [ 712.297353][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 712.297369][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 712.297385][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 712.297401][ C1] __device_attach+0x1e4/0x4d0 [ 712.297420][ C1] ? __pfx___device_attach+0x10/0x10 [ 712.297439][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 712.297454][ C1] device_initial_probe+0xaf/0xd0 [ 712.297474][ C1] bus_probe_device+0x64/0x160 [ 712.297492][ C1] device_add+0x11d9/0x1950 [ 712.297506][ C1] ? __pfx_device_add+0x10/0x10 [ 712.297523][ C1] usb_set_configuration+0xd97/0x1c60 [ 712.297546][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 712.297561][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 712.297576][ C1] usb_probe_device+0xef/0x400 [ 712.297592][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 712.297609][ C1] really_probe+0x241/0xa60 [ 712.297628][ C1] __driver_probe_device+0x1de/0x400 [ 712.297646][ C1] ? usb_driver_applicable+0x1c7/0x220 [ 712.297666][ C1] driver_probe_device+0x4c/0x1b0 [ 712.297685][ C1] __device_attach_driver+0x1ff/0x3e0 [ 712.297704][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 712.297723][ C1] bus_for_each_drv+0x159/0x1e0 [ 712.297739][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 712.297755][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 712.297771][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 712.297786][ C1] __device_attach+0x1e4/0x4d0 [ 712.297804][ C1] ? __pfx___device_attach+0x10/0x10 [ 712.297823][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 712.297839][ C1] device_initial_probe+0xaf/0xd0 [ 712.297857][ C1] bus_probe_device+0x64/0x160 [ 712.297875][ C1] device_add+0x11d9/0x1950 [ 712.297889][ C1] ? __pfx_device_add+0x10/0x10 [ 712.297902][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 712.297921][ C1] usb_new_device.cold+0x685/0x115c [ 712.297938][ C1] ? do_raw_spin_lock+0x128/0x260 [ 712.297952][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 712.297968][ C1] ? mark_held_locks+0x40/0x70 [ 712.297988][ C1] hub_event+0x314d/0x4af0 [ 712.298013][ C1] ? __pfx_hub_event+0x10/0x10 [ 712.298034][ C1] ? rcu_is_watching+0x12/0xc0 [ 712.298051][ C1] process_one_work+0x9d7/0x1920 [ 712.298069][ C1] ? __pfx_process_one_work+0x10/0x10 [ 712.298086][ C1] ? __pfx_hub_event+0x10/0x10 [ 712.298104][ C1] worker_thread+0x5da/0xe40 [ 712.298121][ C1] ? kthread+0x13a/0x450 [ 712.298137][ C1] ? __pfx_worker_thread+0x10/0x10 [ 712.298149][ C1] kthread+0x370/0x450 [ 712.298160][ C1] ? __pfx_kthread+0x10/0x10 [ 712.298180][ C1] ret_from_fork+0x754/0xd80 [ 712.298194][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 712.298207][ C1] ? __switch_to+0x7b4/0x1120 [ 712.298224][ C1] ? __pfx_kthread+0x10/0x10 [ 712.298243][ C1] ret_from_fork_asm+0x1a/0x30 [ 712.298264][ C1] [ 712.298901][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 712.298916][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 712.298938][ T30] Tainted: [L]=SOFTLOCKUP [ 712.298944][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 712.298953][ T30] Call Trace: [ 712.298959][ T30] [ 712.298966][ T30] dump_stack_lvl+0x100/0x190 [ 712.298992][ T30] vpanic+0x552/0x970 [ 712.299008][ T30] ? __pfx_vpanic+0x10/0x10 [ 712.299025][ T30] ? rcu_is_watching+0x12/0xc0 [ 712.299046][ T30] panic+0xd1/0xe0 [ 712.299060][ T30] ? __pfx_panic+0x10/0x10 [ 712.299078][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 712.299103][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 712.299128][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 712.299151][ T30] ? watchdog.cold+0x198/0x1ca [ 712.299169][ T30] ? watchdog+0xd35/0x1050 [ 712.299190][ T30] watchdog.cold+0x1a9/0x1ca [ 712.299214][ T30] ? __pfx_watchdog+0x10/0x10 [ 712.299234][ T30] ? __kthread_parkme+0x18c/0x230 [ 712.299257][ T30] ? kthread+0x13a/0x450 [ 712.299270][ T30] ? __pfx_watchdog+0x10/0x10 [ 712.299288][ T30] kthread+0x370/0x450 [ 712.299301][ T30] ? __pfx_kthread+0x10/0x10 [ 712.299326][ T30] ret_from_fork+0x754/0xd80 [ 712.299343][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 712.299360][ T30] ? __switch_to+0x7b4/0x1120 [ 712.299378][ T30] ? __pfx_kthread+0x10/0x10 [ 712.299403][ T30] ret_from_fork_asm+0x1a/0x30 [ 712.299431][ T30] [ 712.303214][ T30] Kernel Offset: disabled