last executing test programs: 2m22.606371576s ago: executing program 3 (id=1583): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x219}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) listen(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0xa) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x2480) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f0000000180)) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) shutdown(r0, 0x0) recvmmsg(r8, &(0x7f0000002540), 0x0, 0x406, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 2m20.662173211s ago: executing program 3 (id=1587): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c000000100000030000000000000000000000009c550f0a068d19df2cd3590fecbe5ec9eaf414c38468c70e71bdcae9b8a152974ae63334474f09e35753a880e2f7d9b8790cbbfd027a1d04ac7471c57d8098dd0c6e624ff8025cb4a51e770f827431a413d22bc3f9e146dae6943c3be376b2879892c9b3d8e6958e13071397107164c841b4fbec3b73542fefa2d9fd8042f9d3c40f277334816c17b0ab539eb49a9b43ab222b7960862dd53b1d33c325478d90b19e", @ANYRES32=0x0, @ANYBLOB="00400000000000002c0012800b00010067656e65766500001c000280080002000000000008000100050000000500040058000000"], 0x4c}}, 0x4000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x0) recvfrom$rxrpc(r1, &(0x7f00000001c0)=""/203, 0xcb, 0x20, &(0x7f0000000340)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x7, @mcast1, 0x8}}, 0x24) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0x1c5ea000) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x87, 0x20100) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0xf000000, 0xc, 0x4, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00903, 0xf, '\x00', @ptr=0xffffffffffffffc0}}) r3 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f000078b000/0x14000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x14000, 0x3, 0x2}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x4900, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xffffffd1, 0x1, 0x6, 0x9, 0xff, "030000deff00000000049dd001000000db0b0e", 0x8, 0x40005}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000080)={0x4, 0x0, 0x1000000, 0x5, 0x0, 0x1}) mlock2(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0) memfd_secret(0x80000) setrlimit(0x7, &(0x7f0000000040)={0xff, 0x7}) 2m17.312166414s ago: executing program 3 (id=1590): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x41) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000063c0)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000002c0)="598847167aa3eeecd678a4be219c9f7ac36dd422be5e395f6579a0878eb84f76bdd866c510f785691711178ee5cb9450f77f56bbaf73c14c1ebd44", 0x3b}, {&(0x7f0000000300)="b786bc59a1cb691b04822a0f54b2b17f5a4afe4ce36a2f48fc2618b0ac688301c64cddbc9cc37147e1e30600000000000000b0226e87c4f8bf33c30762dbd32178da0f7934edd400009e1ed978a46720a2000000000000056a82e62b7125d9cb9b1213126902a101ef19d03adc4ba6c8e70b7ab0cf45279a", 0x78}], 0x2, 0x0, 0x0, 0x14}], 0x1, 0x800) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000380)=""/4, 0x4}, {&(0x7f0000000540)=""/113, 0x71}], 0x2}, 0x40000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="747275737465642e757365722e696e0566732e6d6574616461746100"]) sched_setaffinity(0x0, 0xffffff43, &(0x7f00000002c0)=0x10c0f) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) openat$nullb(0xffffffffffffff9c, 0x0, 0x185580, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x10380, 0x36) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) accept4$phonet_pipe(r1, &(0x7f0000000040), &(0x7f0000000280)=0x10, 0x180800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x156, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000030c0)={'geneve1\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m16.866848499s ago: executing program 3 (id=1595): socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001900010324a510000000df2501000000"], 0x14}}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1a, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x30) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a80)={0x228, 0x2e, 0x4, 0x0, 0x25dfdbfc, "", [@nested={0x216, 0xf2, 0x0, 0x1, [@typed={0x27, 0x18, 0x0, 0x0, @binary="cc5cb84b4c4da4313d7cb07988fc5942f6991df4f04b49f84762ad52ca46c580f029c4"}, @generic="c97d7703cbb1fd79913b787262bb32f7ecdfcae6d9927d03d52223976461aa3458343e183a61", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @nested={0xe7, 0xb8, 0x0, 0x1, [@typed={0x0, 0x114, 0x0, 0x0, @str=':\xd7!\x00'}, @nested={0x0, 0x9b, 0x0, 0x1, [@nested={0x0, 0x4b, 0x0, 0x1, [@typed={0x0, 0x66}, @nested={0x0, 0x72}, @nested={0x0, 0x10f}]}, @generic="e1222f7e22e2f85d533b18a6d712d083cab6bad483cac45867adadd7ef64de8349822632410d8873d89412b33b6b610a6f07972fc5d2a80e17a8867e84533112c696af64e2b5012f6081b9f62101e0646b379ec30da6956534a6212489b2baba8b1e41b68e9149eee8a9d504c6121cf04511450615dc86139bd42790014754bb", @typed={0x0, 0xb6, 0x0, 0x0, @pid}, @generic="656aa1bfefd9f862453430c91f81d2ab86ac1751cb67701ec2fadd0cbd1b15459efceb4c4fd74338799426ac8c192c149747360584a326534b0d2026c0ad9f5ed5070997351166bb089b58a6d1f356eae14aedc6d84ce5621a95d0e11aa156fddf38a24038a070c0daeea3b2edef97f7356bf7bb67dbf8a8f62cd224d0e3bf"]}]}]}]}, 0x228}], 0x1, 0x0, 0x9, 0x1}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x1000040c, 0xffff}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r7, r5) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f3e7e3dac3c05e8646b7bd462e639dcf59dda3f218f7e1145fb919f26a7d1b60575a836099b3419087772b627a80591dba31ea2ca829f59282ff1c036f22716e0df0bded6075b60b0ca1ae39aea0241cfc2149a22833773fd76d89a5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2041, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000180)={0x8000000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r10, 0x4010ae68, &(0x7f0000000040)={0xdddd0000, 0x10000}) 2m16.096711439s ago: executing program 3 (id=1599): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) r3 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r6, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) preadv(0xffffffffffffffff, &(0x7f0000001780)=[{0x0}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f000001b000)=""/102345, 0x18fc9) (async, rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') preadv(r10, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x96, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000003000000000500000000000085000000000000010000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800837d73ec300000008000600000000000800050000000000240007800800050000230000000005000000"], 0xd0}}, 0x0) 2m14.553202871s ago: executing program 3 (id=1602): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r6, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x20}}}]}, 0x3c}}, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000008104"]) 2m13.046236991s ago: executing program 32 (id=1602): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r6, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x20}}}]}, 0x3c}}, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000008104"]) 18.875278931s ago: executing program 5 (id=1878): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b40500000000000079108f0000000000070000000000000095000000000000000637f79d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000dd"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) lseek(0xffffffffffffffff, 0x851, 0x0) 17.263587475s ago: executing program 5 (id=1880): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x154}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r5, 0x3b65, 0x9) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, &(0x7f0000000280)) getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f00000003c0)=0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) munlockall() sendmsg$nl_route(r0, 0x0, 0x0) syz_io_uring_setup(0x23a, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="44001ba9", @ANYRES16=r7, @ANYBLOB="000129bd7000ffdbdf2504000000080002000200000008000100030000000800020002000000080001000000000008000200020000000800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000105}, 0x4000001) 15.936043786s ago: executing program 2 (id=1885): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005"], 0x2c}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x2}}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r3, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0xc, &(0x7f0000000040)=@gcm_256={{0x304}, "5f2852f88fa61aef", "d9f20624eac59ac2953cc646fd176845eaee44ab8ebbb083c03c301bba5d1520", "9afea2f5", "5e3b22435e040ebe"}, 0x38) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x20000006, 0x4) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) r7 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x18}, 0x48, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000300)={0x48, 0x1, 0x0, 0x0, 0x2, 0x7fffffffffffffff}) keyctl$KEYCTL_MOVE(0x1e, r7, 0x0, 0x0, 0x0) 15.724363746s ago: executing program 2 (id=1887): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ff1131330000000000010902240001000000070904000206030002a40921030004012205000905810300000cfa02a21874a0550921f6c3ad1b4fedc151c535dda25aa296141a92c3e310ace638ce4d3d1952a0df5db4e8ab2bdb677a5f1a90a76e6379cc1f4ee9bba7a877ab67d4580e261c7de0496f28"], 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r3) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0xc) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205000000358d46b314c48be7104c94f234a8887b299216813d981eb393c585e32abfa1543e05afa0f7c901bec67737a56ba7448790a7007b87b5a500475f88f53174e2b6c8d70595efc8987e0d6e98000000000000ee5f07e58794de4eeb8a5c00000000dcc241a2a10fa434d305a88f1d5aa207b10189e0caf8981121d75713dc97edd600000000887012a79ae8a2e5eecc5486c57e462c1619d4b10516f3484000000000000000ea2121691ff5b8ebe71a97b9604b6c7f62a02b"], 0x0}, 0x0) 14.662441317s ago: executing program 2 (id=1888): creat(0x0, 0xecf86c37d53049cc) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bind$can_raw(r4, &(0x7f0000000480), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x1}}], 0x10) close(r4) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r3, @ANYBLOB="ce00000000000000"], 0x24}}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000202c0)=@newtfilter={0x29a0, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0x4}, {}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x820, 0x2, [@TCA_BPF_POLICE={0x81c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf67}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x1, 0x6, 0x3, 0x4, 0x80000001, 0x6, 0x10000, 0xc1, 0x2b8, 0x61ea, 0xffc00000, 0x9, 0x7c9, 0x1ff, 0x6, 0xc, 0x9c, 0x7, 0xee, 0x1, 0x8000, 0x2, 0x1, 0xfffffff3, 0x40, 0x6, 0x9, 0xcf12, 0xfd, 0x8, 0xab2, 0x7, 0x9, 0x5, 0x5e7c, 0xd6f6, 0x5, 0x1, 0x7, 0x3, 0x1, 0xffffffff, 0xffffff81, 0x8, 0xa7, 0x8, 0x7, 0x9, 0x7, 0x9, 0x1a9, 0x1, 0x3, 0x5d, 0x1, 0x0, 0x0, 0x7, 0x8, 0x0, 0x3, 0xf47, 0x3, 0x4, 0xe, 0xce, 0x7, 0x7fffffff, 0x800, 0x9, 0x9, 0x1, 0x2, 0x6, 0x7ff, 0x6, 0x2c6, 0x3ff, 0x1, 0x7, 0x8, 0x0, 0x54, 0x7fffffff, 0x5, 0x735, 0x0, 0x2, 0x4, 0x3, 0x40000, 0x8, 0x5, 0x101, 0x4, 0x1000, 0x1, 0x9, 0x2, 0x1, 0x1, 0x6, 0xc4, 0xfff, 0x2, 0x2, 0x5, 0x7, 0x7fff, 0x0, 0x400, 0x7, 0x0, 0x6561b60c, 0x7, 0x5, 0x8, 0xffff, 0x2, 0x4, 0x9, 0x0, 0xfa9, 0xb, 0x7fffffff, 0x80000000, 0x4, 0x2, 0x8001, 0x7, 0x8, 0x5, 0x7, 0x60, 0x8, 0x61d73d3e, 0x3, 0xd22a, 0x4, 0x80, 0x4, 0x8001, 0x7, 0x1, 0x3ff, 0x400, 0x2, 0xd7d, 0xfffffff9, 0xbf9, 0x3f8, 0x6, 0x9, 0x0, 0xfffffff0, 0x80000000, 0x9, 0x3, 0x100, 0x3, 0x7fffffff, 0x9, 0xc5, 0x3, 0x0, 0x7, 0x7, 0x10, 0x8, 0x4, 0x200, 0x2, 0x6b0, 0x2, 0xffff, 0x0, 0x9, 0x8001, 0x4, 0xc, 0x8, 0x6, 0x800, 0x401, 0x8000, 0x3, 0x9, 0x4, 0x175f, 0x8000, 0xf, 0x2, 0x78, 0x6, 0x8, 0x4, 0x3, 0x1, 0xfff, 0xd, 0x0, 0x4, 0xff49, 0x2, 0xae, 0x1, 0x8, 0x4, 0x2, 0x9, 0x2, 0x1ff, 0x8977, 0x2, 0x7fffffff, 0x6, 0x8, 0xac4, 0x8c99, 0x1ff, 0xb34, 0x5, 0x7, 0x4, 0x0, 0x0, 0x5, 0x9, 0x2, 0x200, 0x3, 0x80, 0x7, 0x0, 0xfff, 0x5, 0x18, 0xc3ab, 0xc2e, 0x7, 0x2, 0x5, 0x3, 0x4, 0x9, 0x0, 0x2, 0x6, 0x80000001, 0x1, 0x6, 0x10, 0x1000100]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x9, 0x2, 0x3, 0x0, 0x8, 0x8, 0x0, 0x2, 0xa1, 0x1, 0x3, 0x7f, 0xe, 0x6, 0x6, 0x1, 0xa, 0x6c, 0x400, 0x2, 0x1, 0x800000, 0x6, 0x9, 0x4, 0x8, 0x4, 0x20, 0x3, 0x6f, 0x9, 0x7618, 0xffff, 0x41, 0x37e, 0x7fff, 0x0, 0x2, 0x9, 0x1, 0x8e5, 0x200, 0x0, 0xfffff4e2, 0x10001, 0x5, 0x9, 0x5, 0x6, 0xd2f, 0x8, 0x5, 0x8, 0x3, 0x36af, 0x5, 0x973e, 0x900, 0x3, 0x0, 0x953, 0x1, 0x1, 0x4, 0xfff, 0x1, 0x8, 0x8, 0x2, 0x8b56, 0x2, 0x9, 0x1, 0x3bba, 0x2, 0x0, 0x60, 0x5, 0x10, 0xfffffff8, 0xe, 0x5, 0x2, 0x611e, 0x5, 0x0, 0x1441, 0x401, 0x2, 0x40, 0x0, 0xa, 0x38c, 0xfffffffb, 0x1, 0x8000, 0x5, 0xce1, 0x164, 0xfe9d, 0x3ff, 0x1000, 0xcd29, 0x3, 0x6aca, 0x4, 0x0, 0x80000001, 0x6, 0x2, 0x4, 0x80000001, 0x2, 0x1, 0x9, 0x46ac8e4e, 0xfd4, 0x1, 0x10001, 0x5, 0x0, 0x6, 0xd0000000, 0x2, 0x10000, 0x2, 0x7, 0x5, 0x0, 0x2, 0x80000001, 0x8000, 0x6, 0x0, 0x632, 0x9, 0x4, 0x80000001, 0xae, 0x2, 0x9, 0x80, 0x7f, 0x3, 0xd, 0xfffffff8, 0x3, 0x401, 0xcf, 0x9, 0x56, 0x9, 0x2, 0x7, 0x4, 0x3c, 0x80000001, 0x40, 0x80, 0x622, 0x4be, 0x2, 0x5, 0x3281, 0x9, 0x7ff, 0x0, 0xfffffffa, 0x7f, 0x0, 0x2, 0x3, 0x8, 0xfffffff8, 0x40, 0x3, 0x8, 0x10, 0xce6, 0x9, 0xd, 0x2, 0xa, 0x6, 0x1, 0xf, 0x7, 0x4, 0xfffffffd, 0x8, 0x8, 0x0, 0xa9, 0x1, 0x8, 0x6, 0xfffff398, 0x4, 0x3, 0x6, 0x7, 0x81, 0x2, 0x5, 0x7, 0x10000, 0x909df0d, 0x1310, 0x4, 0xfce7, 0x6, 0x7, 0x1, 0x2, 0x8, 0x10, 0x100, 0x8, 0xffff, 0x9, 0xa48a, 0x9, 0x2, 0x3, 0x7fff, 0x3, 0xfffffff7, 0x1, 0x8001, 0xff, 0xae, 0x401, 0x475, 0xff, 0x1, 0x615, 0x522c972e, 0x4, 0xf6, 0x6, 0xffff, 0x7, 0x6589, 0x0, 0x4, 0x9, 0xffff7fff, 0x9, 0x1, 0x5, 0x9, 0xce13c9f, 0x3, 0x6, 0x8]}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x200}, @filter_kind_options=@f_matchall={{0xd}, {0x1b14, 0x2, [@TCA_MATCHALL_ACT={0x117c, 0x2, [@m_connmark={0x128, 0x1f, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xef56, 0x6, 0x7, 0xfffffffa, 0x9e}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x7c, 0xffffffffffffffff, 0xfffffffa, 0x1}, 0x40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x80000000, 0x7, 0x4}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x1, 0xffffff55, 0x36ad}, 0x80}}]}, {0x88, 0x6, "a5cd7dd6039913606d9e21c5fbfff72eba3310cbf26f106612cc79f2fbcbc2062b3d861c0174a1977db2e51eb2354aa9010f0ce34843b686de4e53bdc01e05f99421f92210d95cac49968c1da0a99284fcee17ecad8a13ba6a4cb6ea2ccdbadfd3a717b0ed258d71e68461b0d526a1ca577664c5c170d5deabece973675f4823bea65bb5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0xedc, 0xb, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0xea0, 0x9, 0x10000000, 0x1ff, 0x6}, 0x3, 0x5, [{0xbd, 0x7, 0x7, 0x5, 0x8, 0x9e4a84d6}, {0x7, 0x48, 0x9, 0x7, 0x3ff, 0xfb}]}, [{0x10001, 0xffff, 0x81, 0x1000, 0xffff604e}, {0x2, 0x1, 0x0, 0x460, 0xfffffff2, 0x4}, {0x6, 0xd, 0x6, 0x10, 0x8, 0x8}, {0x6, 0x100, 0x7, 0x3a, 0x2}, {0x0, 0x8, 0x2, 0xfffffffb, 0x9, 0x3}, {0x101, 0x8f4, 0x397, 0x2, 0x0, 0x3}, {0x0, 0x7, 0x80, 0x101}, {0xa5b9, 0x1b58, 0x0, 0x0, 0x6, 0xfff}, {0x8, 0x1, 0xeb5, 0x0, 0x0, 0xfffff800}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x401}, {0x0, 0xfffff800, 0xd, 0x23f, 0x722a, 0x8}, {0x8000, 0x3, 0x8, 0x1, 0x101, 0x80000001}, {0x2, 0x0, 0xfffffffc, 0x1, 0x0, 0xffff38ec}, {0x6, 0x80, 0x401, 0x1, 0x3}, {0x3ff, 0x7, 0x0, 0x6, 0xa981, 0xd}, {0x4, 0xff, 0x4, 0x273, 0xff, 0x9}, {0x8, 0x9, 0x7, 0x800, 0x7, 0x2}, {0xe, 0xb138, 0x5, 0x10000, 0xb, 0x9}, {0xffffffff, 0x9, 0x8000, 0x9, 0x4, 0x5}, {0x5, 0xfff, 0x400000, 0x7, 0x80000000, 0xcedc}, {0x80000001, 0x7fff, 0x4, 0x0, 0x4, 0x1}, {0x9, 0x8e2, 0x9, 0x7ff, 0x5, 0x3ff}, {0x89, 0x1000, 0xb0, 0x7, 0xf, 0x2}, {0x5, 0x800, 0xb, 0xa, 0x7, 0x101}, {0x4, 0x80, 0x2, 0x1, 0xc}, {0x5a, 0xa, 0x200, 0x1, 0x2, 0x400}, {0x7, 0x81, 0x8, 0x3, 0x771, 0x8}, {0x80000001, 0x1000000, 0x8, 0x3, 0x5, 0x3}, {0xcb3b, 0x7ff, 0x1, 0x200000, 0x5, 0x7}, {0x2, 0x1, 0xa, 0x400, 0x9, 0x8}, {0x1, 0x6, 0x8, 0x4, 0x9, 0x80000000}, {0x10001, 0x9, 0x1, 0x3, 0xcf, 0x1ff}, {0xffff, 0x40, 0x7fe, 0x6, 0x0, 0x9}, {0x2, 0x9, 0xff, 0xb6, 0x4}, {0x6, 0x0, 0x8, 0x5, 0x4a, 0x896}, {0x3, 0x0, 0x100, 0x3, 0x4, 0x3}, {0x80, 0x9, 0x1, 0xc116, 0x1, 0x401}, {0x2, 0x9, 0x3, 0x6, 0x0, 0xfb80}, {0xc, 0x2, 0x2f, 0xfff, 0x2, 0x400}, {0x40, 0x2, 0x7, 0x3, 0xf, 0x3}, {0x40, 0x6, 0x34e2, 0x574a7909, 0x2, 0x5}, {0x8, 0x6, 0x86a6, 0x9, 0x3, 0x9}, {0x0, 0x3ff, 0x4, 0xc, 0x4, 0x6}, {0x80000001, 0x5, 0x2, 0x4, 0x1000, 0x5bf}, {0xce, 0x4, 0x4, 0x10001, 0xfffffffa, 0xffffff90}, {0x2, 0x900, 0x8, 0x2, 0x3, 0x5}, {0x0, 0x7, 0x9, 0x7fff, 0xff, 0x2}, {0x5, 0x8000, 0x2, 0x7f, 0x51, 0x5}, {0x9, 0x4, 0x7, 0x6, 0xe1, 0xfffffffa}, {0x5, 0x0, 0x2, 0x9, 0x9, 0x5}, {0x1, 0x8, 0x6, 0x80, 0x4, 0x9}, {0x5, 0xfffffffc, 0x5199, 0x7, 0x300, 0x762d}, {0x3ff, 0x1, 0x9, 0x2, 0xffffffff}, {0x0, 0xe4d, 0xb7c, 0x3, 0x6, 0x8}, {0x5, 0x9, 0x8c, 0xfffffff7, 0xfffff9ce, 0xffff0000}, {0x5, 0x8, 0x3, 0x7, 0x4, 0xff}, {0x7, 0x2, 0x8, 0x3, 0xcc8c, 0x4}, {0x6, 0xf72, 0x82, 0x9, 0x42, 0xa65}, {0x796, 0x2, 0x7, 0xb, 0x2f, 0x2}, {0x3ff, 0x4, 0x94, 0x5, 0x1, 0x3}, {0x70, 0x6, 0xa, 0x3, 0x3, 0x3}, {0x6, 0x8, 0x9, 0x80000001, 0x0, 0x1}, {0x9c81, 0x100, 0x6, 0xfffffff9, 0x8, 0x9}, {0x8, 0x6, 0x1d4, 0x2, 0x7ff, 0x40}, {0xc, 0xfffffff9, 0x8, 0x0, 0x7, 0x2}, {0x9, 0x200, 0x3, 0x10000, 0x1, 0x7}, {0x224, 0xa, 0x2, 0x4, 0x400, 0x6}, {0x7, 0x1aa400, 0xfffffff2, 0x79fd, 0xe0000000, 0x3}, {0x7, 0x60, 0x4827, 0x4, 0x5, 0x7}, {0x3, 0x80, 0x7, 0x0, 0x9, 0xfffffffe}, {0x6, 0x4, 0xd, 0x401, 0x10000, 0x5}, {0x6, 0x5, 0x9, 0x7, 0x76b4, 0xc26}, {0x0, 0x6, 0xa, 0xffffff81, 0x80000000, 0x6}, {0x3, 0x8, 0x7, 0x20f, 0x8c, 0x9}, {0x1, 0x5, 0x7ceb, 0x4, 0x7, 0x7}, {0x2, 0xffff, 0x1000, 0xffff97db, 0x1, 0x8}, {0x3, 0x8000, 0x8, 0x8, 0x7fff, 0xff}, {0xf93, 0x8001, 0x3, 0x5, 0x3, 0x7}, {0xd, 0x5, 0x9, 0xd246, 0x8}, {0x10001, 0x2, 0x4, 0xa, 0x0, 0x7ff}, {0x3ff, 0x5, 0x0, 0x8, 0x1}, {0x7fffffff, 0x2, 0x67, 0xfffff6a0, 0x3, 0x485}, {0xfffffffb, 0x93, 0x0, 0x1ff, 0x7, 0x25}, {0x4, 0x0, 0xe, 0x287, 0x3, 0xf}, {0x7, 0x7, 0xab, 0x3, 0x0, 0x7ff}, {0xa, 0x4, 0xfffffffc, 0x2, 0x7, 0x1}, {0x7, 0x9, 0x7, 0x7, 0x8e3, 0x6}, {0x2, 0x7, 0xfffff774, 0x8001, 0x0, 0x5}, {0x0, 0x400, 0x5, 0xeff, 0x3ff, 0xffffffff}, {0x8001, 0xfffffffd, 0x40cf16e8, 0x3, 0x81}, {0xf, 0xa, 0x7d30, 0x8, 0x2, 0x7}, {0x780000, 0x3ff, 0x5, 0x5, 0x5, 0x8}, {0x4, 0x9, 0xe, 0x2, 0x80, 0xe82}, {0x0, 0x9, 0x53, 0x7fffffff, 0x1, 0x4147}, {0x800, 0x5, 0x2, 0x8, 0x6, 0x6}, {0x7, 0x6154969c, 0x9, 0x0, 0x65f, 0x9}, {0x2, 0x7fff, 0x6, 0x2, 0x6, 0x7fff}, {0xffff856e, 0x4, 0x7, 0x6f9, 0x985, 0x2}, {0x2, 0x8, 0xb, 0x0, 0xc, 0x8}, {0x57, 0xfffffff8, 0x4, 0x6, 0x80000000, 0x8}, {0x0, 0xb0, 0x7, 0x2, 0x9, 0x1877}, {0x10, 0x80000000, 0x6, 0x28, 0x8, 0xff}, {0x5, 0x4, 0xb96d, 0x4, 0x3, 0x800007}, {0x1ff, 0xfff, 0x5, 0x0, 0x703, 0x7}, {0x7, 0x0, 0x9, 0x10, 0x7, 0x6c85c56e}, {0x7fffffff, 0x0, 0x1, 0x4, 0x0, 0x3}, {0x1, 0x10, 0x3, 0x9, 0x6, 0xf}, {0x1, 0x2, 0x98000000, 0x10, 0x8, 0x6745}, {0x3, 0x7fffffff, 0x8000, 0x1, 0x67aedf75}, {0x7, 0x3ff, 0x7, 0x1, 0x3, 0x1}, {0xa43, 0xe8, 0x7, 0xd1, 0x0, 0x7c4}, {0x7, 0x7f, 0x9, 0x0, 0x4, 0xf}, {0xdae2, 0xffff7fff, 0x4, 0x9, 0x7, 0x4}, {0x9, 0x4, 0xffffffff, 0x0, 0x8, 0x1c0}, {0x3, 0x8, 0x4, 0x7, 0x80000001, 0x8001}, {0x3, 0x9, 0xc5, 0x7fff, 0x7, 0x6}, {0xfffffcf9, 0x6, 0x5, 0x9, 0x3}, {0x28000, 0x6, 0x7, 0x4, 0x2, 0x7}, {0x5, 0x1f242, 0xff, 0x80, 0x5, 0x9}, {0x8000, 0xff, 0x401, 0xa, 0x2, 0x4870b2ad}, {0x8, 0xc8f, 0xfd8, 0x4, 0xffffff0f, 0x6}, {0x101, 0xe, 0x10000, 0x2d1c, 0x2, 0x8}, {0x8, 0x4, 0xba, 0x4, 0x100, 0xf3}, {0x5, 0x7, 0x64, 0x8, 0x8, 0x401}, {0x7f, 0x800, 0x7, 0x5, 0xfffffffe, 0x400}, {0xc06, 0xff, 0x9, 0x3, 0x10000, 0x3}, {0x4, 0x6f, 0x8001, 0x100, 0x7, 0x2}, {0x71e, 0x5, 0x1000, 0xa7, 0xa, 0x220b}], [{0x1, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x2}, {0x3}, {}, {}, {0x4}, {0x3}, {0x5}, {0x6a599d0f7bb2574c, 0x1}, {0x1}, {0x4}, {}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x1}, {0x9f6c398975ec28eb, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1}, {0x1}, {}, {0x5}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x4}, {0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x1}, {0x5, 0x1}, {0x3}, {0x2}]}}]}, {0x5e, 0x6, "8a36410c0bf4eddeb6f6feb2ecfb88f2103671c3e017d4c9963388c43622bf8dbbb24597c38304ea414ac73813fd6e8ce5b89f7baab8ee4a18b6920aa7a815aa247723cfd2e7b09aa5271f8c46b83b1c1c068a3d3317a117cb25"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x174, 0x10, 0x0, 0x0, {{0x7}, {0xf8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x1000, 'mangle\x00', 0x81, 0xbadb, "179b932fe9b400d1158fc8bb218dc697a824a90fa2db312ae9775e6c6b20eee9d4f9431fb69caa49dafd2f12bcee6c6d8e83a449a6429ab4f05dbcab054a18a819d4c6f24182fc38afdf453a69f9eeea2dd2d9bed402402aa9e9a136a785da9b93281feb80718a32d174d46640dea410ca2de202f589f4361ffeec50a7f1c1d2804796efa6bfb52e9e8d8bed9c308fc1b46d5b1a5ea587dac2945e172adf16789c1c59c2ed44cb3f379e336758881f1f363685728aa2eed12392f7620bac5db3bf56971e3b3662"}}]}, {0x58, 0x6, "0af82bc1f19efc38532bf5293a6d9580f49c6ee18f8ef6e2ee9784cade11c65e9f594abf5bc0a18930e8b51ebb1e22d0ee3f820d1c6eace87536aafc880ab9b0606bd207f9954e6f57e3cb391133af9580778e35"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x10}}, @TCA_MATCHALL_ACT={0x98c, 0x2, [@m_bpf={0x130, 0x2, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}]}, {0xf3, 0x6, "ccaf44b5e9c091b0738db7fb1a0a47e9dbf385f567d9cb68185a86fe4b690a2b7a27f0bc50be1f40a3d25161674ef6ce0ee8ec6306a8d9b27d0ea81d39f1bfc00d5225f404cef68bb8c9a8a4b0819948b13e9b051d2912cda2cc13ac5813c5a6ca8cdde50e4540c960246365c22df8335b3f9674ecc3a3257b3b6f9bcf34374efd3033997726809260e4fe0cc5ec1ef88f09dd5f0ee9231abcf56bb0e9523ecf0712a6a30f55f558256849898ded8f8b8e7d0dc25d767f26b959cd3b6c114affa0269019d814b3ab780492e6288c612127b0553fb163b8ca26ce9f79a1b6644523bb5abd3fa3b323367985ed8c349e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0xb8, 0x11, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffa}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0xb}}]}, {0x6b, 0x6, "d6b8779d18d3a0de3b536fcfc33cc75184ce5aa18f5a5c296eba98397eeec0be6d2d749eddf3ada0c64b06147c9fa4facd7f1dfe0c5dcda8873f12036dec1072cc2d00e5683461dc0039d01245a67dcf367c6df114573d2e12e8b65d4fe68a91fafd3ce111a4d5"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x134, 0x80f, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xae5, 0x0, 0x2000000f, 0x7, 0x10}, 0x7c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0xff}, 0x6f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x1, 0x3, 0x68000}, 0x44}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff7fff, 0x9, 0x3, 0x8, 0x6}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x3, 0x17f9, 0x1}, 0x2d}}]}, {0x7b, 0x6, "484f5aee9fe85d335c98ab1bf0bd71b88c4686e907d89b73cd04e03530bcc76d85d00da1aabfeb4cbf2ccecf9304c1e6475e9ce54e3beb585f463777844d74ff2a0524997c12be1220cd0007d1c90e18fac961a3e4291438e7df86cda439d4a6836be09790579b393ae6eb322adba5162ea910f4cbc8da"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0xe8, 0x1c, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xea8}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, {0x7c, 0x6, "11e57651939a945f12fe31d2fa839377c0050000000000006577416fe600acaa0b85a9dbb893927c20d08f6cf20dd46da528c5ac0058f2d3958c7f57fb4c7e183c93804d264513049b98b8aa8af9a676deba2a0ab0a4a997d03cf1e6be66bfbad781587f635871481eaa0a3cc27820598d0824455209c3f4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x68, 0x5, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}]}, {0x29, 0x6, "040d4b29355fccacdd941bddf4a951676529bb9d499872f82a49e716979d27e70617081991"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x1ac, 0x11, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x2, 0x9, 0x24, 0x4}, {0x4, 0x5, 0x1}]}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xde6, 0x0, 0x8, 0xd}, {0x0, 0x6, 0x0, 0x9163}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x10, 0x2, 0x6, 0x0, 0xfffeffff}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x8, 0xab, 0xab, 0x8eb}, {0x4, 0x2, 0x0, 0xfffffff7}, {0xfffc, 0xc6, 0x1a, 0x8}, {0x9, 0x8, 0x5, 0x9}, {0x0, 0x10, 0xd, 0x3}, {0x5, 0x2, 0x48, 0x4}, {0x3, 0x9, 0x2}, {0x3, 0xa, 0x6e, 0x7}]}]}, {0xd6, 0x6, "a0e02e4e900bce93abe74d4ef40160a06f84fb8f70f373468fef8b28e48bb6f98e51a6b7e6236df59758ddba98c918cb05f1cf0e3d9c270477f7c2719159071c91c9c317cee30e8ef7d24e2fcd6d23ba98c37d313c8e1dc5e2a96e07a3c78fd942863229c0e611c6c6fd40a000a6b3d7c908b6246713bdf17ee75a69d3ed68baf0a2dbd6cef74ab3d0892e789d943cf98731f1666bb3fb565e57528d19a22f3b29313851aa72f788dd11e5641c6575a0e44029b191c1b6c88b5438bae7ee024510251f7e7c0a6a2277f15685d76615881595"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_ct={0x110, 0x8, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x40}, @TCA_CT_LABELS={0x14, 0x7, "bceae08b06d14b9b7d77d149bacd723a"}, @TCA_CT_MARK={0x8, 0x5, 0xfffffffa}, @TCA_CT_LABELS_MASK={0x14, 0x8, "9e99d725a7859312186f5842394d43a3"}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0xa0, 0x6, "307e58b811f1a0ec7f7b2107b1c8e83a5633bf563ec3abd416003e0f6c4d9361a357f82b075785191b36b4b577490953c3de660d40b3574cc50d70dd35987328f460ef1c2bbe4d861a5cbe57a3d28b28652eabcb59ac443ae3ba9d3addf5a66f1757729180de57df6a9070f6835a1eb0bd111378ac65fbaa8780cef82e355bc0c63cfb47f497a40b8a929ace607fc4cf49492ee897eb729e35ae81bc"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x128, 0x2, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x44, 0x4, [{0x1da2, 0x6, 0x2, 0x3}, {0x0, 0x7f, 0xe, 0x8}, {0x9, 0x6, 0x6, 0xfffffffc}, {0x81, 0x84, 0x6}, {0x1ff, 0x0, 0xcc, 0x10}, {0x3ff, 0x87, 0x5, 0x80000001}, {0x3, 0x36, 0x81, 0x8}, {0x7fff, 0x4, 0x40, 0xe994}]}]}, {0xbb, 0x6, "a367fbf0ee0363dd1fb47090bbee01829bd85b8e7450af1a129d2146d75f241d41733a8f19c1034e2525e42d65f648c470d3980917734c8094bf46a0ef23fb078d9757d7b991bb4008250bb6203624d2493bba8f8ff5c0615457a76873eb4a3a2622a603c30f50b7f1f9d3bfc17b296d779ae322a33b39e85ab05bc01b23748e076842427ebd38378f911eb6c41c6e9266283aff712087a496b9a205583e9147be893f52d160c8bf07d34631c752e69516764ba5c49858"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x138, 0x16, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x90, 0x3, 0x7, 0x800, 0x9}, 0x7b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb30, 0x1, 0x20000000, 0x6f, 0x7}, 0x6b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x39, 0x6, 0x3, 0x81, 0x1016000}, 0x70}}]}, {0xb6, 0x6, "d97a8dae1b19bae2666d80fb168fe07dcd4b21c9e5176a25692d32a8e87f33d668af0f6f2d15261d5e9be7a53eb550aa4f58b920b0c785eb18c00cab29486432ebb5a8a4c7ea4b73646c79940299203a189f3557fe85e43e8937a43b3e0e10113fdc2778ddd1601e15ae970ed729557b120e5059237ded7ef9ffec146943e8a06a7ec74d0c4b040d44e22da6c1b28e2668c9b4c188f0f3885b5ee3ee9777d71562f216e2de87560c7f95d70d7e17a97aa790"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x80000001}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xa, 0x4}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xd, 0x4}}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @broadcast}, @TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x32e}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x6}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x8}]}}, @filter_kind_options=@f_basic={{0xa}, {0x59c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x3}}, @TCA_BASIC_EMATCHES={0x60, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe447, 0x1, 0x401}, {0x4, 0x1, 0xd, 0x1, 0x6, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x9}, {0x80, 0x0, 0x7, 0x9}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x934, 0x7, 0x40}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7fff, 0x8, 0x3}, {0x1, 0x1}}}]}]}, @TCA_BASIC_ACT={0x528, 0x3, [@m_connmark={0x1fc, 0x0, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xf3, 0xffffffffffffffff, 0x0, 0x6}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x7, 0x6, 0xf50}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x8, 0x9, 0x22575e68}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x512, 0x8, 0x5, 0x2}, 0x7ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xf846, 0x1, 0x9, 0x1}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff800, 0x40, 0x10000000, 0x0, 0x1ff}, 0xa3c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x7, 0x1, 0x7}, 0xa25}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x80000000, 0x6, 0x7ff, 0xffff}, 0x6}}]}, {0xeb, 0x6, "0cd8e99f8b0d3f046cd626ab04f6762ecc950c8fc1e40a3ae2943d1271601a4aac6c598878d96505ac047cefafbfe7c576e89f358e627e0419f325fd99ae20b9dfeb9b7dcb9f6e0af34942d44b3d14c92d6fa2a5b347d332a64f49a881e6207a6e1790c09a12e6425950242032f8fa9a259d81080b425cd3be083b9ced1b6d41f7481761804e6d2ec8eb9df32f3fcd657a653385185afa8b31ad93acd035e0e05822c9ff46e2ab34e4226f06e2203a596ab2ed0dbc512121baa9049b1e6c8938da3589d7fe9c085ff714eee35f96970b2818b01f1deb169ba23fedc9241c04da2160e91dfc28b0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0xc8, 0x15, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0xc, 0x4, 0x8, 0x7ff}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}]}, {0x6d, 0x6, "adeaa4f78812c3e43b1bc3c99869506a8ad3ace1ad49bbee6cf3ae1c7ef3686f793d46db6d16a2243ec38516ad5a9f9730ca4d8e36e447bea95190a3f668a3d9fe0ec7d67d88ef62b4ee2cc603eeb651d0801db50789daedf8ba65797602d29e3aac03f51a01a80e48"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x13c, 0x4, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xf}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}]}, {0xb3, 0x6, "25b124f28143a32f42fce1f837760277151ca54a8518896dd055b16d1257e2ac0c62ac99fca313b8b925883642dfb71cdc10ab282ebdeefc49c286ed8c904ad7bfb876e48cbe8f6da4b6dd31f04715f7cc48f4ad682477906ff6aad38cb23f321c3989baac40d872a95cd184eddf77bc6feb2fdf9e2534049cdcceca7de6a42e83203a2fd885cb21dd1801edd41737101c94dac743cf8e245bc3ca608953c6eeb62529081f2a49a6d1e0fc4c9d9be8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x124, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xeceb, 0x6, 0x4, 0x4, 0xfffffff7}, 0x1}}]}, {0xda, 0x6, "b9c21cb5e800e7adc97fdfac8f3a10d0dc970d9a833e34556aa204a00972959e373773e7862ec296b7f8cbc36cecd0cbf101763d81ebd2f6a883b3c28e8ac4f4595189ed6cfc15ccdcbf3e4437619c05f9f9b5d064a7ddf8cbae228cf1ca9c882eb7aab7a75cf74935853353a384f7ed29fbddffabfee18100ca74bf505f77ea08a88f60b9c78009872eee780c820f8aff97fc732ce05d7331943918f808a478a9454133e26541a8fc8799c3e418bc6a6340c0268c0ece475a7e076cd7771cce4b2e388bcb1a40234eb2e8da3f95272178cf28a68f31"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x29a0}, 0x1, 0xf0ffffffffffff}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="d9620bb35df5a66a86e792bb95c26b1d77ca91a98aee8188776186a5e1b4ea4c95bfa044c6d0a0b0825516bbb9d3927a42b09c8a27765673f4f074"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='spmi_cmd\x00', r9, 0x0, 0xfffffffffffffffe}, 0x18) syslog(0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0x16) 14.14037632s ago: executing program 1 (id=1890): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x200, 0x70bd26, 0x24dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}}, 0x200400c0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a030000000000"], 0x34}}, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000002c0)={0x7}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x50009405, &(0x7f0000000180)) getdents64(r5, &(0x7f0000000380)=""/98, 0x62) 13.334907795s ago: executing program 5 (id=1892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xf5, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) (fail_nth: 5) 12.090276977s ago: executing program 5 (id=1893): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRES16, @ANYRES64=0x0, @ANYRES64, @ANYRESOCT=0x0], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200"], 0x48) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x19) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x56, 0x5, 0x9, 0xa, 0x2, "00120dd608f500001e20000080c90a008000"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xa) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x2, 0x2}, 0x18, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000c40)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x33, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @empty}, [@dstopts]}}}}}}}, 0x0) landlock_restrict_self(r2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f000092a000/0x1000)=nil, 0x1000, 0x2000002) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x9, 0x6, 0x1, {0x9, @sliced={0x4, [0x8, 0x80, 0x7f, 0x8403, 0x1, 0xe, 0x81, 0x3, 0x7, 0x7, 0x9, 0x7, 0x3f1, 0x698, 0x5d99, 0x9, 0xf, 0x1, 0x7, 0x2, 0x9, 0x6, 0x3ff, 0x8010, 0x0, 0x6, 0x2, 0xf84, 0x4, 0x8, 0x1, 0xf, 0x3, 0x35, 0x0, 0x9, 0x5857, 0x8001, 0x6, 0x400, 0x8, 0x1, 0x1, 0x7, 0x5, 0xb, 0x5, 0x8], 0x3}}, 0x800}) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000300)={0x1, @raw_data="b740085ebfd3f6817ed4dc7dde8bbc07b2e30d590dd837cc1a9c053fe1ba9a231622c899cffa1d1eacd88ab51ec4bde784ec61ccfa2226d287d208e4008db7d578160aa9a7080fc7e9d9b65c029215a93eb066050211eef5baa66e3a367ddeff84652089d705524524a63c3c17fc77627b568851e4af84bf3170f1cc7aafed9bed3f278720b8ed511da4c8085f95d49ceddc912db11e26f426b9caa704543d478eecf3f4134f980d069ba21d273c71656cec1fd94701c7e662a9353b5d76ca175ac732c8989e2928"}) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800117fe365d6febb825fda0335dd00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) 11.753562982s ago: executing program 1 (id=1896): syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={0x1d, r4, 0x0, {}, 0x1}, 0x18) close_range(r2, 0xffffffffffffffff, 0x0) 10.364592247s ago: executing program 1 (id=1898): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0xe00c2, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r5], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r6}, &(0x7f0000000980), &(0x7f00000009c0)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r6, &(0x7f0000000680), &(0x7f0000000700)=""/168}, 0x20) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) 8.187674375s ago: executing program 4 (id=1901): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600"], 0x34}, 0x1, 0x0, 0x0, 0x4000015}, 0x24000074) syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_pts(0xffffffffffffffff, 0x200001) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x6a0, 0x3ff, 0x2, 0x7, 0x2}}) 7.823573152s ago: executing program 4 (id=1902): syz_extract_tcp_res(&(0x7f0000000040), 0x81e00, 0x3387) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$tun(r0, &(0x7f0000000500)={@void, @void, @llc={@llc={0x9140d48143b6dcd2, 0xaa, "ca", "4bd558b9e9143a02a54b7a1826356d5c1214fa280f12fb1c01ee3cbede9cd123201b5b17349e0f51a5303dcaa319e981becc55ac773defc729724ca4263f325beb82ba78ae7eca0cf43a8a09548d7ebd6dde37160c3f8da1f54778f4df338b70707a1b6cd960143769f2da3d04f25057d03e3538a3433e895f"}}}, 0x7c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000004c0)=ANY=[@ANYBLOB="01"]) 7.442904588s ago: executing program 5 (id=1903): ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000080)={0xf000, 0x280000, 0x8}) unshare(0x24020400) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) unshare(0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r6 = socket$kcm(0xa, 0x1, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r7], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r5}) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r8}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000)={r7}) 7.394506744s ago: executing program 2 (id=1904): socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) close_range(r2, 0xffffffffffffffff, 0x0) 7.185835814s ago: executing program 0 (id=1906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r1 = io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r2 = fanotify_init(0x200, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup(r3) fanotify_mark(r2, 0x201, 0x48001038, r4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0x5, 0x0, 0xffdffffe}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(r5, &(0x7f00000002c0)="54695b065e0485", 0x7) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@ifindex=0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = gettid() openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0x22100, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = syz_open_procfs$pagemap(r7, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ed053203a8d3ae295da90efdc22615ed7f25adafbdb3d97005df0dda11d20de453b70c13050644b3e38577c9393b7b2201e8f2bd8b46c3fdb878301ef370d1046a1fb258f78f42ba46e3b2586be7539ab083f9b657ba9af59cad42b50effb7c7f4b5d996f9d0e7a9373eb22787f3d3f84c092d6da2c6d01c41d1ac2e15bab812cfeffde6a7c28477f7aae618638109000000d8c68bc72a3580da512440fe5dd87c56a66cd9575637e0e221acaa309503", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000124d00000000000000000018110000", @ANYRESDEC=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff8375000008000000b7040000020011000000002100000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) 7.183415147s ago: executing program 1 (id=1907): creat(0x0, 0xecf86c37d53049cc) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bind$can_raw(r4, &(0x7f0000000480), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x1}}], 0x10) close(r4) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r3, @ANYBLOB="ce00000000000000"], 0x24}}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000202c0)=@newtfilter={0x29a0, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0x4}, {}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x820, 0x2, [@TCA_BPF_POLICE={0x81c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf67}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x1, 0x6, 0x3, 0x4, 0x80000001, 0x6, 0x10000, 0xc1, 0x2b8, 0x61ea, 0xffc00000, 0x9, 0x7c9, 0x1ff, 0x6, 0xc, 0x9c, 0x7, 0xee, 0x1, 0x8000, 0x2, 0x1, 0xfffffff3, 0x40, 0x6, 0x9, 0xcf12, 0xfd, 0x8, 0xab2, 0x7, 0x9, 0x5, 0x5e7c, 0xd6f6, 0x5, 0x1, 0x7, 0x3, 0x1, 0xffffffff, 0xffffff81, 0x8, 0xa7, 0x8, 0x7, 0x9, 0x7, 0x9, 0x1a9, 0x1, 0x3, 0x5d, 0x1, 0x0, 0x0, 0x7, 0x8, 0x0, 0x3, 0xf47, 0x3, 0x4, 0xe, 0xce, 0x7, 0x7fffffff, 0x800, 0x9, 0x9, 0x1, 0x2, 0x6, 0x7ff, 0x6, 0x2c6, 0x3ff, 0x1, 0x7, 0x8, 0x0, 0x54, 0x7fffffff, 0x5, 0x735, 0x0, 0x2, 0x4, 0x3, 0x40000, 0x8, 0x5, 0x101, 0x4, 0x1000, 0x1, 0x9, 0x2, 0x1, 0x1, 0x6, 0xc4, 0xfff, 0x2, 0x2, 0x5, 0x7, 0x7fff, 0x0, 0x400, 0x7, 0x0, 0x6561b60c, 0x7, 0x5, 0x8, 0xffff, 0x2, 0x4, 0x9, 0x0, 0xfa9, 0xb, 0x7fffffff, 0x80000000, 0x4, 0x2, 0x8001, 0x7, 0x8, 0x5, 0x7, 0x60, 0x8, 0x61d73d3e, 0x3, 0xd22a, 0x4, 0x80, 0x4, 0x8001, 0x7, 0x1, 0x3ff, 0x400, 0x2, 0xd7d, 0xfffffff9, 0xbf9, 0x3f8, 0x6, 0x9, 0x0, 0xfffffff0, 0x80000000, 0x9, 0x3, 0x100, 0x3, 0x7fffffff, 0x9, 0xc5, 0x3, 0x0, 0x7, 0x7, 0x10, 0x8, 0x4, 0x200, 0x2, 0x6b0, 0x2, 0xffff, 0x0, 0x9, 0x8001, 0x4, 0xc, 0x8, 0x6, 0x800, 0x401, 0x8000, 0x3, 0x9, 0x4, 0x175f, 0x8000, 0xf, 0x2, 0x78, 0x6, 0x8, 0x4, 0x3, 0x1, 0xfff, 0xd, 0x0, 0x4, 0xff49, 0x2, 0xae, 0x1, 0x8, 0x4, 0x2, 0x9, 0x2, 0x1ff, 0x8977, 0x2, 0x7fffffff, 0x6, 0x8, 0xac4, 0x8c99, 0x1ff, 0xb34, 0x5, 0x7, 0x4, 0x0, 0x0, 0x5, 0x9, 0x2, 0x200, 0x3, 0x80, 0x7, 0x0, 0xfff, 0x5, 0x18, 0xc3ab, 0xc2e, 0x7, 0x2, 0x5, 0x3, 0x4, 0x9, 0x0, 0x2, 0x6, 0x80000001, 0x1, 0x6, 0x10, 0x1000100]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x9, 0x2, 0x3, 0x0, 0x8, 0x8, 0x0, 0x2, 0xa1, 0x1, 0x3, 0x7f, 0xe, 0x6, 0x6, 0x1, 0xa, 0x6c, 0x400, 0x2, 0x1, 0x800000, 0x6, 0x9, 0x4, 0x8, 0x4, 0x20, 0x3, 0x6f, 0x9, 0x7618, 0xffff, 0x41, 0x37e, 0x7fff, 0x0, 0x2, 0x9, 0x1, 0x8e5, 0x200, 0x0, 0xfffff4e2, 0x10001, 0x5, 0x9, 0x5, 0x6, 0xd2f, 0x8, 0x5, 0x8, 0x3, 0x36af, 0x5, 0x973e, 0x900, 0x3, 0x0, 0x953, 0x1, 0x1, 0x4, 0xfff, 0x1, 0x8, 0x8, 0x2, 0x8b56, 0x2, 0x9, 0x1, 0x3bba, 0x2, 0x0, 0x60, 0x5, 0x10, 0xfffffff8, 0xe, 0x5, 0x2, 0x611e, 0x5, 0x0, 0x1441, 0x401, 0x2, 0x40, 0x0, 0xa, 0x38c, 0xfffffffb, 0x1, 0x8000, 0x5, 0xce1, 0x164, 0xfe9d, 0x3ff, 0x1000, 0xcd29, 0x3, 0x6aca, 0x4, 0x0, 0x80000001, 0x6, 0x2, 0x4, 0x80000001, 0x2, 0x1, 0x9, 0x46ac8e4e, 0xfd4, 0x1, 0x10001, 0x5, 0x0, 0x6, 0xd0000000, 0x2, 0x10000, 0x2, 0x7, 0x5, 0x0, 0x2, 0x80000001, 0x8000, 0x6, 0x0, 0x632, 0x9, 0x4, 0x80000001, 0xae, 0x2, 0x9, 0x80, 0x7f, 0x3, 0xd, 0xfffffff8, 0x3, 0x401, 0xcf, 0x9, 0x56, 0x9, 0x2, 0x7, 0x4, 0x3c, 0x80000001, 0x40, 0x80, 0x622, 0x4be, 0x2, 0x5, 0x3281, 0x9, 0x7ff, 0x0, 0xfffffffa, 0x7f, 0x0, 0x2, 0x3, 0x8, 0xfffffff8, 0x40, 0x3, 0x8, 0x10, 0xce6, 0x9, 0xd, 0x2, 0xa, 0x6, 0x1, 0xf, 0x7, 0x4, 0xfffffffd, 0x8, 0x8, 0x0, 0xa9, 0x1, 0x8, 0x6, 0xfffff398, 0x4, 0x3, 0x6, 0x7, 0x81, 0x2, 0x5, 0x7, 0x10000, 0x909df0d, 0x1310, 0x4, 0xfce7, 0x6, 0x7, 0x1, 0x2, 0x8, 0x10, 0x100, 0x8, 0xffff, 0x9, 0xa48a, 0x9, 0x2, 0x3, 0x7fff, 0x3, 0xfffffff7, 0x1, 0x8001, 0xff, 0xae, 0x401, 0x475, 0xff, 0x1, 0x615, 0x522c972e, 0x4, 0xf6, 0x6, 0xffff, 0x7, 0x6589, 0x0, 0x4, 0x9, 0xffff7fff, 0x9, 0x1, 0x5, 0x9, 0xce13c9f, 0x3, 0x6, 0x8]}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x200}, @filter_kind_options=@f_matchall={{0xd}, {0x1b14, 0x2, [@TCA_MATCHALL_ACT={0x117c, 0x2, [@m_connmark={0x128, 0x1f, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xef56, 0x6, 0x7, 0xfffffffa, 0x9e}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x7c, 0xffffffffffffffff, 0xfffffffa, 0x1}, 0x40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x80000000, 0x7, 0x4}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x1, 0xffffff55, 0x36ad}, 0x80}}]}, {0x88, 0x6, "a5cd7dd6039913606d9e21c5fbfff72eba3310cbf26f106612cc79f2fbcbc2062b3d861c0174a1977db2e51eb2354aa9010f0ce34843b686de4e53bdc01e05f99421f92210d95cac49968c1da0a99284fcee17ecad8a13ba6a4cb6ea2ccdbadfd3a717b0ed258d71e68461b0d526a1ca577664c5c170d5deabece973675f4823bea65bb5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0xedc, 0xb, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0xea0, 0x9, 0x10000000, 0x1ff, 0x6}, 0x3, 0x5, [{0xbd, 0x7, 0x7, 0x5, 0x8, 0x9e4a84d6}, {0x7, 0x48, 0x9, 0x7, 0x3ff, 0xfb}]}, [{0x10001, 0xffff, 0x81, 0x1000, 0xffff604e}, {0x2, 0x1, 0x0, 0x460, 0xfffffff2, 0x4}, {0x6, 0xd, 0x6, 0x10, 0x8, 0x8}, {0x6, 0x100, 0x7, 0x3a, 0x2}, {0x0, 0x8, 0x2, 0xfffffffb, 0x9, 0x3}, {0x101, 0x8f4, 0x397, 0x2, 0x0, 0x3}, {0x0, 0x7, 0x80, 0x101}, {0xa5b9, 0x1b58, 0x0, 0x0, 0x6, 0xfff}, {0x8, 0x1, 0xeb5, 0x0, 0x0, 0xfffff800}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x401}, {0x0, 0xfffff800, 0xd, 0x23f, 0x722a, 0x8}, {0x8000, 0x3, 0x8, 0x1, 0x101, 0x80000001}, {0x2, 0x0, 0xfffffffc, 0x1, 0x0, 0xffff38ec}, {0x6, 0x80, 0x401, 0x1, 0x3}, {0x3ff, 0x7, 0x0, 0x6, 0xa981, 0xd}, {0x4, 0xff, 0x4, 0x273, 0xff, 0x9}, {0x8, 0x9, 0x7, 0x800, 0x7, 0x2}, {0xe, 0xb138, 0x5, 0x10000, 0xb, 0x9}, {0xffffffff, 0x9, 0x8000, 0x9, 0x4, 0x5}, {0x5, 0xfff, 0x400000, 0x7, 0x80000000, 0xcedc}, {0x80000001, 0x7fff, 0x4, 0x0, 0x4, 0x1}, {0x9, 0x8e2, 0x9, 0x7ff, 0x5, 0x3ff}, {0x89, 0x1000, 0xb0, 0x7, 0xf, 0x2}, {0x5, 0x800, 0xb, 0xa, 0x7, 0x101}, {0x4, 0x80, 0x2, 0x1, 0xc}, {0x5a, 0xa, 0x200, 0x1, 0x2, 0x400}, {0x7, 0x81, 0x8, 0x3, 0x771, 0x8}, {0x80000001, 0x1000000, 0x8, 0x3, 0x5, 0x3}, {0xcb3b, 0x7ff, 0x1, 0x200000, 0x5, 0x7}, {0x2, 0x1, 0xa, 0x400, 0x9, 0x8}, {0x1, 0x6, 0x8, 0x4, 0x9, 0x80000000}, {0x10001, 0x9, 0x1, 0x3, 0xcf, 0x1ff}, {0xffff, 0x40, 0x7fe, 0x6, 0x0, 0x9}, {0x2, 0x9, 0xff, 0xb6, 0x4}, {0x6, 0x0, 0x8, 0x5, 0x4a, 0x896}, {0x3, 0x0, 0x100, 0x3, 0x4, 0x3}, {0x80, 0x9, 0x1, 0xc116, 0x1, 0x401}, {0x2, 0x9, 0x3, 0x6, 0x0, 0xfb80}, {0xc, 0x2, 0x2f, 0xfff, 0x2, 0x400}, {0x40, 0x2, 0x7, 0x3, 0xf, 0x3}, {0x40, 0x6, 0x34e2, 0x574a7909, 0x2, 0x5}, {0x8, 0x6, 0x86a6, 0x9, 0x3, 0x9}, {0x0, 0x3ff, 0x4, 0xc, 0x4, 0x6}, {0x80000001, 0x5, 0x2, 0x4, 0x1000, 0x5bf}, {0xce, 0x4, 0x4, 0x10001, 0xfffffffa, 0xffffff90}, {0x2, 0x900, 0x8, 0x2, 0x3, 0x5}, {0x0, 0x7, 0x9, 0x7fff, 0xff, 0x2}, {0x5, 0x8000, 0x2, 0x7f, 0x51, 0x5}, {0x9, 0x4, 0x7, 0x6, 0xe1, 0xfffffffa}, {0x5, 0x0, 0x2, 0x9, 0x9, 0x5}, {0x1, 0x8, 0x6, 0x80, 0x4, 0x9}, {0x5, 0xfffffffc, 0x5199, 0x7, 0x300, 0x762d}, {0x3ff, 0x1, 0x9, 0x2, 0xffffffff}, {0x0, 0xe4d, 0xb7c, 0x3, 0x6, 0x8}, {0x5, 0x9, 0x8c, 0xfffffff7, 0xfffff9ce, 0xffff0000}, {0x5, 0x8, 0x3, 0x7, 0x4, 0xff}, {0x7, 0x2, 0x8, 0x3, 0xcc8c, 0x4}, {0x6, 0xf72, 0x82, 0x9, 0x42, 0xa65}, {0x796, 0x2, 0x7, 0xb, 0x2f, 0x2}, {0x3ff, 0x4, 0x94, 0x5, 0x1, 0x3}, {0x70, 0x6, 0xa, 0x3, 0x3, 0x3}, {0x6, 0x8, 0x9, 0x80000001, 0x0, 0x1}, {0x9c81, 0x100, 0x6, 0xfffffff9, 0x8, 0x9}, {0x8, 0x6, 0x1d4, 0x2, 0x7ff, 0x40}, {0xc, 0xfffffff9, 0x8, 0x0, 0x7, 0x2}, {0x9, 0x200, 0x3, 0x10000, 0x1, 0x7}, {0x224, 0xa, 0x2, 0x4, 0x400, 0x6}, {0x7, 0x1aa400, 0xfffffff2, 0x79fd, 0xe0000000, 0x3}, {0x7, 0x60, 0x4827, 0x4, 0x5, 0x7}, {0x3, 0x80, 0x7, 0x0, 0x9, 0xfffffffe}, {0x6, 0x4, 0xd, 0x401, 0x10000, 0x5}, {0x6, 0x5, 0x9, 0x7, 0x76b4, 0xc26}, {0x0, 0x6, 0xa, 0xffffff81, 0x80000000, 0x6}, {0x3, 0x8, 0x7, 0x20f, 0x8c, 0x9}, {0x1, 0x5, 0x7ceb, 0x4, 0x7, 0x7}, {0x2, 0xffff, 0x1000, 0xffff97db, 0x1, 0x8}, {0x3, 0x8000, 0x8, 0x8, 0x7fff, 0xff}, {0xf93, 0x8001, 0x3, 0x5, 0x3, 0x7}, {0xd, 0x5, 0x9, 0xd246, 0x8}, {0x10001, 0x2, 0x4, 0xa, 0x0, 0x7ff}, {0x3ff, 0x5, 0x0, 0x8, 0x1}, {0x7fffffff, 0x2, 0x67, 0xfffff6a0, 0x3, 0x485}, {0xfffffffb, 0x93, 0x0, 0x1ff, 0x7, 0x25}, {0x4, 0x0, 0xe, 0x287, 0x3, 0xf}, {0x7, 0x7, 0xab, 0x3, 0x0, 0x7ff}, {0xa, 0x4, 0xfffffffc, 0x2, 0x7, 0x1}, {0x7, 0x9, 0x7, 0x7, 0x8e3, 0x6}, {0x2, 0x7, 0xfffff774, 0x8001, 0x0, 0x5}, {0x0, 0x400, 0x5, 0xeff, 0x3ff, 0xffffffff}, {0x8001, 0xfffffffd, 0x40cf16e8, 0x3, 0x81}, {0xf, 0xa, 0x7d30, 0x8, 0x2, 0x7}, {0x780000, 0x3ff, 0x5, 0x5, 0x5, 0x8}, {0x4, 0x9, 0xe, 0x2, 0x80, 0xe82}, {0x0, 0x9, 0x53, 0x7fffffff, 0x1, 0x4147}, {0x800, 0x5, 0x2, 0x8, 0x6, 0x6}, {0x7, 0x6154969c, 0x9, 0x0, 0x65f, 0x9}, {0x2, 0x7fff, 0x6, 0x2, 0x6, 0x7fff}, {0xffff856e, 0x4, 0x7, 0x6f9, 0x985, 0x2}, {0x2, 0x8, 0xb, 0x0, 0xc, 0x8}, {0x57, 0xfffffff8, 0x4, 0x6, 0x80000000, 0x8}, {0x0, 0xb0, 0x7, 0x2, 0x9, 0x1877}, {0x10, 0x80000000, 0x6, 0x28, 0x8, 0xff}, {0x5, 0x4, 0xb96d, 0x4, 0x3, 0x800007}, {0x1ff, 0xfff, 0x5, 0x0, 0x703, 0x7}, {0x7, 0x0, 0x9, 0x10, 0x7, 0x6c85c56e}, {0x7fffffff, 0x0, 0x1, 0x4, 0x0, 0x3}, {0x1, 0x10, 0x3, 0x9, 0x6, 0xf}, {0x1, 0x2, 0x98000000, 0x10, 0x8, 0x6745}, {0x3, 0x7fffffff, 0x8000, 0x1, 0x67aedf75}, {0x7, 0x3ff, 0x7, 0x1, 0x3, 0x1}, {0xa43, 0xe8, 0x7, 0xd1, 0x0, 0x7c4}, {0x7, 0x7f, 0x9, 0x0, 0x4, 0xf}, {0xdae2, 0xffff7fff, 0x4, 0x9, 0x7, 0x4}, {0x9, 0x4, 0xffffffff, 0x0, 0x8, 0x1c0}, {0x3, 0x8, 0x4, 0x7, 0x80000001, 0x8001}, {0x3, 0x9, 0xc5, 0x7fff, 0x7, 0x6}, {0xfffffcf9, 0x6, 0x5, 0x9, 0x3}, {0x28000, 0x6, 0x7, 0x4, 0x2, 0x7}, {0x5, 0x1f242, 0xff, 0x80, 0x5, 0x9}, {0x8000, 0xff, 0x401, 0xa, 0x2, 0x4870b2ad}, {0x8, 0xc8f, 0xfd8, 0x4, 0xffffff0f, 0x6}, {0x101, 0xe, 0x10000, 0x2d1c, 0x2, 0x8}, {0x8, 0x4, 0xba, 0x4, 0x100, 0xf3}, {0x5, 0x7, 0x64, 0x8, 0x8, 0x401}, {0x7f, 0x800, 0x7, 0x5, 0xfffffffe, 0x400}, {0xc06, 0xff, 0x9, 0x3, 0x10000, 0x3}, {0x4, 0x6f, 0x8001, 0x100, 0x7, 0x2}, {0x71e, 0x5, 0x1000, 0xa7, 0xa, 0x220b}], [{0x1, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x2}, {0x3}, {}, {}, {0x4}, {0x3}, {0x5}, {0x6a599d0f7bb2574c, 0x1}, {0x1}, {0x4}, {}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x1}, {0x9f6c398975ec28eb, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1}, {0x1}, {}, {0x5}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x4}, {0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x1}, {0x5, 0x1}, {0x3}, {0x2}]}}]}, {0x5e, 0x6, "8a36410c0bf4eddeb6f6feb2ecfb88f2103671c3e017d4c9963388c43622bf8dbbb24597c38304ea414ac73813fd6e8ce5b89f7baab8ee4a18b6920aa7a815aa247723cfd2e7b09aa5271f8c46b83b1c1c068a3d3317a117cb25"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x174, 0x10, 0x0, 0x0, {{0x7}, {0xf8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x1000, 'mangle\x00', 0x81, 0xbadb, "179b932fe9b400d1158fc8bb218dc697a824a90fa2db312ae9775e6c6b20eee9d4f9431fb69caa49dafd2f12bcee6c6d8e83a449a6429ab4f05dbcab054a18a819d4c6f24182fc38afdf453a69f9eeea2dd2d9bed402402aa9e9a136a785da9b93281feb80718a32d174d46640dea410ca2de202f589f4361ffeec50a7f1c1d2804796efa6bfb52e9e8d8bed9c308fc1b46d5b1a5ea587dac2945e172adf16789c1c59c2ed44cb3f379e336758881f1f363685728aa2eed12392f7620bac5db3bf56971e3b3662"}}]}, {0x58, 0x6, "0af82bc1f19efc38532bf5293a6d9580f49c6ee18f8ef6e2ee9784cade11c65e9f594abf5bc0a18930e8b51ebb1e22d0ee3f820d1c6eace87536aafc880ab9b0606bd207f9954e6f57e3cb391133af9580778e35"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x10}}, @TCA_MATCHALL_ACT={0x98c, 0x2, [@m_bpf={0x130, 0x2, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}]}, {0xf3, 0x6, "ccaf44b5e9c091b0738db7fb1a0a47e9dbf385f567d9cb68185a86fe4b690a2b7a27f0bc50be1f40a3d25161674ef6ce0ee8ec6306a8d9b27d0ea81d39f1bfc00d5225f404cef68bb8c9a8a4b0819948b13e9b051d2912cda2cc13ac5813c5a6ca8cdde50e4540c960246365c22df8335b3f9674ecc3a3257b3b6f9bcf34374efd3033997726809260e4fe0cc5ec1ef88f09dd5f0ee9231abcf56bb0e9523ecf0712a6a30f55f558256849898ded8f8b8e7d0dc25d767f26b959cd3b6c114affa0269019d814b3ab780492e6288c612127b0553fb163b8ca26ce9f79a1b6644523bb5abd3fa3b323367985ed8c349e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0xb8, 0x11, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffa}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0xb}}]}, {0x6b, 0x6, "d6b8779d18d3a0de3b536fcfc33cc75184ce5aa18f5a5c296eba98397eeec0be6d2d749eddf3ada0c64b06147c9fa4facd7f1dfe0c5dcda8873f12036dec1072cc2d00e5683461dc0039d01245a67dcf367c6df114573d2e12e8b65d4fe68a91fafd3ce111a4d5"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x134, 0x80f, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xae5, 0x0, 0x2000000f, 0x7, 0x10}, 0x7c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0xff}, 0x6f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x1, 0x3, 0x68000}, 0x44}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff7fff, 0x9, 0x3, 0x8, 0x6}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x3, 0x17f9, 0x1}, 0x2d}}]}, {0x7b, 0x6, "484f5aee9fe85d335c98ab1bf0bd71b88c4686e907d89b73cd04e03530bcc76d85d00da1aabfeb4cbf2ccecf9304c1e6475e9ce54e3beb585f463777844d74ff2a0524997c12be1220cd0007d1c90e18fac961a3e4291438e7df86cda439d4a6836be09790579b393ae6eb322adba5162ea910f4cbc8da"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0xe8, 0x1c, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xea8}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, {0x7c, 0x6, "11e57651939a945f12fe31d2fa839377c0050000000000006577416fe600acaa0b85a9dbb893927c20d08f6cf20dd46da528c5ac0058f2d3958c7f57fb4c7e183c93804d264513049b98b8aa8af9a676deba2a0ab0a4a997d03cf1e6be66bfbad781587f635871481eaa0a3cc27820598d0824455209c3f4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x68, 0x5, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}]}, {0x29, 0x6, "040d4b29355fccacdd941bddf4a951676529bb9d499872f82a49e716979d27e70617081991"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x1ac, 0x11, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x2, 0x9, 0x24, 0x4}, {0x4, 0x5, 0x1}]}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xde6, 0x0, 0x8, 0xd}, {0x0, 0x6, 0x0, 0x9163}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x10, 0x2, 0x6, 0x0, 0xfffeffff}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x8, 0xab, 0xab, 0x8eb}, {0x4, 0x2, 0x0, 0xfffffff7}, {0xfffc, 0xc6, 0x1a, 0x8}, {0x9, 0x8, 0x5, 0x9}, {0x0, 0x10, 0xd, 0x3}, {0x5, 0x2, 0x48, 0x4}, {0x3, 0x9, 0x2}, {0x3, 0xa, 0x6e, 0x7}]}]}, {0xd6, 0x6, "a0e02e4e900bce93abe74d4ef40160a06f84fb8f70f373468fef8b28e48bb6f98e51a6b7e6236df59758ddba98c918cb05f1cf0e3d9c270477f7c2719159071c91c9c317cee30e8ef7d24e2fcd6d23ba98c37d313c8e1dc5e2a96e07a3c78fd942863229c0e611c6c6fd40a000a6b3d7c908b6246713bdf17ee75a69d3ed68baf0a2dbd6cef74ab3d0892e789d943cf98731f1666bb3fb565e57528d19a22f3b29313851aa72f788dd11e5641c6575a0e44029b191c1b6c88b5438bae7ee024510251f7e7c0a6a2277f15685d76615881595"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_ct={0x110, 0x8, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x40}, @TCA_CT_LABELS={0x14, 0x7, "bceae08b06d14b9b7d77d149bacd723a"}, @TCA_CT_MARK={0x8, 0x5, 0xfffffffa}, @TCA_CT_LABELS_MASK={0x14, 0x8, "9e99d725a7859312186f5842394d43a3"}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0xa0, 0x6, "307e58b811f1a0ec7f7b2107b1c8e83a5633bf563ec3abd416003e0f6c4d9361a357f82b075785191b36b4b577490953c3de660d40b3574cc50d70dd35987328f460ef1c2bbe4d861a5cbe57a3d28b28652eabcb59ac443ae3ba9d3addf5a66f1757729180de57df6a9070f6835a1eb0bd111378ac65fbaa8780cef82e355bc0c63cfb47f497a40b8a929ace607fc4cf49492ee897eb729e35ae81bc"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x128, 0x2, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x44, 0x4, [{0x1da2, 0x6, 0x2, 0x3}, {0x0, 0x7f, 0xe, 0x8}, {0x9, 0x6, 0x6, 0xfffffffc}, {0x81, 0x84, 0x6}, {0x1ff, 0x0, 0xcc, 0x10}, {0x3ff, 0x87, 0x5, 0x80000001}, {0x3, 0x36, 0x81, 0x8}, {0x7fff, 0x4, 0x40, 0xe994}]}]}, {0xbb, 0x6, "a367fbf0ee0363dd1fb47090bbee01829bd85b8e7450af1a129d2146d75f241d41733a8f19c1034e2525e42d65f648c470d3980917734c8094bf46a0ef23fb078d9757d7b991bb4008250bb6203624d2493bba8f8ff5c0615457a76873eb4a3a2622a603c30f50b7f1f9d3bfc17b296d779ae322a33b39e85ab05bc01b23748e076842427ebd38378f911eb6c41c6e9266283aff712087a496b9a205583e9147be893f52d160c8bf07d34631c752e69516764ba5c49858"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x138, 0x16, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x90, 0x3, 0x7, 0x800, 0x9}, 0x7b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb30, 0x1, 0x20000000, 0x6f, 0x7}, 0x6b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x39, 0x6, 0x3, 0x81, 0x1016000}, 0x70}}]}, {0xb6, 0x6, "d97a8dae1b19bae2666d80fb168fe07dcd4b21c9e5176a25692d32a8e87f33d668af0f6f2d15261d5e9be7a53eb550aa4f58b920b0c785eb18c00cab29486432ebb5a8a4c7ea4b73646c79940299203a189f3557fe85e43e8937a43b3e0e10113fdc2778ddd1601e15ae970ed729557b120e5059237ded7ef9ffec146943e8a06a7ec74d0c4b040d44e22da6c1b28e2668c9b4c188f0f3885b5ee3ee9777d71562f216e2de87560c7f95d70d7e17a97aa790"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x80000001}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xa, 0x4}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xd, 0x4}}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @broadcast}, @TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x32e}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x6}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x8}]}}, @filter_kind_options=@f_basic={{0xa}, {0x59c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x3}}, @TCA_BASIC_EMATCHES={0x60, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe447, 0x1, 0x401}, {0x4, 0x1, 0xd, 0x1, 0x6, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x9}, {0x80, 0x0, 0x7, 0x9}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x934, 0x7, 0x40}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7fff, 0x8, 0x3}, {0x1, 0x1}}}]}]}, @TCA_BASIC_ACT={0x528, 0x3, [@m_connmark={0x1fc, 0x0, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xf3, 0xffffffffffffffff, 0x0, 0x6}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x7, 0x6, 0xf50}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x8, 0x9, 0x22575e68}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x512, 0x8, 0x5, 0x2}, 0x7ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xf846, 0x1, 0x9, 0x1}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff800, 0x40, 0x10000000, 0x0, 0x1ff}, 0xa3c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x7, 0x1, 0x7}, 0xa25}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x80000000, 0x6, 0x7ff, 0xffff}, 0x6}}]}, {0xeb, 0x6, "0cd8e99f8b0d3f046cd626ab04f6762ecc950c8fc1e40a3ae2943d1271601a4aac6c598878d96505ac047cefafbfe7c576e89f358e627e0419f325fd99ae20b9dfeb9b7dcb9f6e0af34942d44b3d14c92d6fa2a5b347d332a64f49a881e6207a6e1790c09a12e6425950242032f8fa9a259d81080b425cd3be083b9ced1b6d41f7481761804e6d2ec8eb9df32f3fcd657a653385185afa8b31ad93acd035e0e05822c9ff46e2ab34e4226f06e2203a596ab2ed0dbc512121baa9049b1e6c8938da3589d7fe9c085ff714eee35f96970b2818b01f1deb169ba23fedc9241c04da2160e91dfc28b0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0xc8, 0x15, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0xc, 0x4, 0x8, 0x7ff}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}]}, {0x6d, 0x6, "adeaa4f78812c3e43b1bc3c99869506a8ad3ace1ad49bbee6cf3ae1c7ef3686f793d46db6d16a2243ec38516ad5a9f9730ca4d8e36e447bea95190a3f668a3d9fe0ec7d67d88ef62b4ee2cc603eeb651d0801db50789daedf8ba65797602d29e3aac03f51a01a80e48"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x13c, 0x4, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xf}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}]}, {0xb3, 0x6, "25b124f28143a32f42fce1f837760277151ca54a8518896dd055b16d1257e2ac0c62ac99fca313b8b925883642dfb71cdc10ab282ebdeefc49c286ed8c904ad7bfb876e48cbe8f6da4b6dd31f04715f7cc48f4ad682477906ff6aad38cb23f321c3989baac40d872a95cd184eddf77bc6feb2fdf9e2534049cdcceca7de6a42e83203a2fd885cb21dd1801edd41737101c94dac743cf8e245bc3ca608953c6eeb62529081f2a49a6d1e0fc4c9d9be8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x124, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xeceb, 0x6, 0x4, 0x4, 0xfffffff7}, 0x1}}]}, {0xda, 0x6, "b9c21cb5e800e7adc97fdfac8f3a10d0dc970d9a833e34556aa204a00972959e373773e7862ec296b7f8cbc36cecd0cbf101763d81ebd2f6a883b3c28e8ac4f4595189ed6cfc15ccdcbf3e4437619c05f9f9b5d064a7ddf8cbae228cf1ca9c882eb7aab7a75cf74935853353a384f7ed29fbddffabfee18100ca74bf505f77ea08a88f60b9c78009872eee780c820f8aff97fc732ce05d7331943918f808a478a9454133e26541a8fc8799c3e418bc6a6340c0268c0ece475a7e076cd7771cce4b2e388bcb1a40234eb2e8da3f95272178cf28a68f31"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x29a0}, 0x1, 0xf0ffffffffffff}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="d9620bb35df5a66a86e792bb95c26b1d77ca91a98aee8188776186a5e1b4ea4c95bfa044c6d0a0b0825516bbb9d3927a42b09c8a27765673f4f074"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='spmi_cmd\x00', r9, 0x0, 0xfffffffffffffffe}, 0x18) syslog(0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0x16) 7.103355774s ago: executing program 4 (id=1908): syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={0x1d, r4, 0x0, {}, 0x1}, 0x18) close_range(r2, 0xffffffffffffffff, 0x0) 7.102552129s ago: executing program 5 (id=1909): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1, 0x15, 0xfd, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x161200, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}}, 0x200400c0) recvmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/6, 0x6}], 0x1}}], 0x1, 0x600000a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000540), 0x10, 0x0}, 0x4040) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000)) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0xc0000484) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/50, 0x32}], 0x1) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, 0x0) 5.109781519s ago: executing program 4 (id=1910): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000014000000240007800800020001"], 0x38}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="188f0000ad9f741157b2237aca53e4a4f6ebd2ca430ff75b49a75720e29557f81836e60a55748b57413d7e9d8e630d0115eae2955d265bf00f85692268cfe71a6b5acdd793", @ANYRES16=r5, @ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r6 = socket$kcm(0x11, 0x2, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="8100004000000000", @ANYRES16=r7, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e640000009c0003809800038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7917707fe9bce142b8971a5f2be0a4b037a87c58f573ded72407080001000200000004000180"], 0xc8}}, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000640)={@private1, 0x0}, &(0x7f0000000680)=0x14) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002580)=@newtfilter={0xd34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xd04, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x6d}, @TCA_ROUTE4_POLICE={0xcc4, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x5, 0x1, 0x8, 0x8, 0x9, 0x6, 0x0, 0xe3, 0xfffff942, 0x1, 0x2, 0x7, 0x3f, 0xd, 0xad7e, 0x8, 0x0, 0x8, 0x9, 0x0, 0x401, 0xfffffffa, 0x1ff, 0x1, 0x8, 0x28d, 0x0, 0x6, 0x8, 0x42412583, 0x0, 0x8, 0x7, 0x10000, 0x8, 0x6, 0x6, 0x997e, 0xff, 0x2, 0x40, 0x0, 0x7e, 0xa1, 0x9, 0x1ff, 0x3, 0xfffffffe, 0xfffffffd, 0x2, 0x3, 0x3, 0x1ff, 0x10, 0x4, 0x4, 0x0, 0xe82, 0x7, 0x1, 0xd, 0x8, 0x80000000, 0x5, 0x7, 0x6, 0xb, 0x0, 0x0, 0x4d2, 0xfffffff1, 0x57, 0x4c86, 0x1, 0x7, 0x4, 0x6, 0x7, 0x80000000, 0x2, 0x5, 0x8001, 0x200, 0x4, 0x8, 0x0, 0xc52, 0x86bc, 0xfffffeff, 0x2, 0x0, 0x6, 0xe301, 0x4, 0xff, 0x0, 0x1, 0x1, 0x0, 0x23, 0x1, 0xa3, 0x9, 0xfffffff8, 0x9, 0x9, 0x3ff, 0x2, 0x32e1, 0x2, 0xadbb, 0x1, 0x1ff, 0x7ff, 0x79, 0x254, 0x8, 0x4, 0xb36e, 0x5, 0x4, 0x3, 0x9, 0xc, 0x7, 0x9, 0x1000, 0x0, 0x80, 0x3, 0x6, 0x9, 0x80000000, 0xfffffffc, 0x2, 0xfffeffff, 0x1, 0x7, 0x7, 0xc99, 0x5, 0x1, 0x5, 0x8, 0x8, 0x7, 0x81, 0x3, 0x9, 0xfffeffff, 0x0, 0x9, 0x6, 0x5, 0x1000, 0xc2, 0x3, 0x3, 0xe, 0x8, 0x5, 0x3, 0x2, 0x6, 0x3, 0x8001, 0x5, 0x9, 0x4, 0x4, 0x0, 0x81, 0xabb3, 0x7, 0xe, 0x2, 0x2, 0x70, 0x9bd3, 0x40, 0x40, 0x7, 0x400, 0x5, 0x9, 0x6, 0xd8ca, 0x7, 0x1ff, 0x1, 0x7, 0x8, 0x9, 0x7, 0x0, 0x6, 0x3, 0x0, 0x9, 0x7, 0xdee, 0x1ff, 0x3dc938f6, 0x89a0, 0x28, 0x7, 0x3, 0x86a1, 0x6, 0xffffff81, 0x4, 0x2, 0x6, 0x0, 0xfb1f, 0x400, 0x7, 0xf85, 0x401, 0x800, 0x8, 0xb, 0x1d0, 0x4, 0x7fffffff, 0x200, 0x1b4c, 0x2, 0x80, 0x5, 0xde58, 0xfc, 0x8, 0x1, 0x400, 0x1ff, 0x5d, 0xc, 0x7, 0x1, 0xb, 0xa, 0x5, 0x0, 0xa, 0x1, 0xfffffff9, 0x80000000, 0x5, 0x1, 0xffffffff, 0x698, 0xffff, 0x2, 0x7fffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x80, 0x18000, 0x0, 0xfffffffa, 0x6, 0x9, 0x3, 0x2, 0x0, 0x7ff, 0x84, 0x200, 0x7a, 0xd9, 0x5, 0x187e, 0x2, 0x10000, 0x1, 0xd, 0xfffff800, 0x8, 0x3, 0x7, 0x5, 0x4, 0x4, 0xffffffff, 0x6e, 0xb, 0x1, 0x9, 0x7ff, 0x5, 0x6, 0x0, 0x37, 0x5, 0x8000, 0x6, 0x5, 0xfffffff8, 0xb, 0xc, 0xd773, 0xfffffffa, 0x3, 0x3, 0x7, 0x10001, 0x6, 0xff, 0x9, 0x1, 0x4449, 0xb3d5, 0x2, 0x8, 0x1, 0x5, 0x2, 0xfffffffb, 0x400, 0x3e, 0xfffffffa, 0x0, 0x0, 0x5, 0xffffffff, 0xa, 0x5, 0x200, 0xffff, 0xe, 0xffffffff, 0x9, 0x1, 0x1, 0x800, 0x6, 0x6, 0x1, 0x7, 0x9a3, 0x10, 0x0, 0x1, 0x9, 0x639f, 0x0, 0xc, 0x4, 0x4, 0x5, 0xa, 0x56c4, 0x3, 0x1, 0xd8, 0x3, 0x26000, 0x0, 0x101, 0x7, 0x7, 0xfffffff9, 0x4, 0x5, 0xcc8, 0x6, 0x1, 0x0, 0x1, 0x3, 0x5, 0xbc, 0xefcf, 0x7ff, 0x2000fc, 0x2, 0x1, 0xd3f, 0x6, 0x80000000, 0x3, 0x1, 0xb7, 0x26d4, 0x740c16b, 0x3, 0x6befb3ef, 0x401, 0x8e5, 0x2, 0x8, 0x7681, 0x7, 0x7b, 0xb7, 0x6, 0x9, 0x4, 0xfffffffc, 0xb5, 0x3, 0x4, 0x8000, 0x4, 0x10000, 0xf2, 0x49d, 0x5, 0x0, 0x5, 0x80000001, 0x4, 0x7, 0xd76, 0x1000, 0x9, 0x5538000, 0x1a25, 0x8, 0x8, 0x0, 0x8, 0x10001, 0x1000, 0x8, 0x81, 0x6, 0x0, 0x1b0b, 0x9, 0x3, 0x2, 0x2, 0x3, 0x0, 0x9, 0x7, 0x8, 0x1000, 0x0, 0x4, 0x6, 0x2, 0xfff, 0x6, 0x3, 0x3, 0x1, 0x5, 0x4, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x8, 0x7f, 0x115de6a2, 0x65cec579, 0x3, 0x1000, 0x7, 0x0, 0x2, 0x4, 0x1000, 0xf, 0x1, 0x7, 0x81, 0x0, 0x2, 0x0, 0x8, 0x1, 0x81, 0xffff5f54, 0x1, 0x31d, 0x1, 0x4e, 0x9, 0x8, 0x1, 0xebd, 0x0, 0xc8, 0x81e4, 0x3, 0x5, 0x61a8a401, 0x7, 0x3f, 0x5, 0x100, 0x7, 0x8, 0x39, 0x6b1a, 0x6, 0xfffffffb, 0x1, 0x0, 0x8, 0x4, 0x5, 0x6bf, 0x6, 0x6, 0x47, 0x7, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x10000000, 0xf5, 0x401, 0x2, {0x2, 0x1, 0x4, 0x6846, 0x0, 0x4}, {0xfd, 0x2, 0x4, 0xe, 0x4, 0xfffffff9}, 0x8, 0x72, 0xa0e}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x7, 0x200, 0x9, 0x3, {0x6, 0x0, 0x1, 0xb, 0x4, 0x10000}, {0x1, 0x4, 0x0, 0x8c, 0x9, 0x60000}, 0x9, 0x0, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x2, 0x4000, 0x1000, 0xd, {0xf4, 0x2, 0x7, 0xaa5f, 0x9, 0x8001}, {0x6, 0x3, 0x8001, 0x4, 0x4, 0x7}, 0x5, 0x3, 0x462}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0x1, 0x10, 0xa, 0x21d, 0x1, 0x7, 0xffffffff, 0x3, 0x6, 0x9, 0x7, 0xed, 0xf044, 0xfffffffd, 0x7, 0x2, 0x6, 0x62f, 0xc, 0x10000, 0xd, 0x3, 0xffffffff, 0x3, 0x8, 0x7, 0x4, 0x5, 0x682ec8f, 0xbd2, 0x0, 0x7, 0x7fffffff, 0x5, 0x0, 0x7ff, 0x1, 0x0, 0x0, 0xb, 0x2, 0xffffffff, 0xe, 0x7, 0x1, 0x9, 0x7, 0x5, 0xae7, 0x45, 0xfffffff0, 0x5, 0x7, 0xea, 0x7ff, 0x6, 0xf, 0x8, 0x7f, 0x10001, 0x9, 0xc84, 0xc01e, 0x3, 0x9, 0x1000, 0xeb3f, 0x6, 0x8000, 0x9, 0x9, 0x27a50f99, 0x736, 0x7fe8, 0x5, 0xffff9ebc, 0xc20, 0xfffffffb, 0xa90, 0xb, 0x7ff, 0xfffffff7, 0xf, 0x5, 0x3, 0x2, 0xfffff540, 0x5, 0x9, 0x80000000, 0x20, 0x4613, 0x1d0b884b, 0x0, 0x6, 0x1ff, 0x0, 0xe, 0x70, 0x4, 0xd5f, 0x8, 0x6, 0x7, 0x7, 0xe2, 0x3, 0x6, 0x5, 0x8, 0x26448efd, 0x7f, 0x76b, 0x7fffffff, 0x401, 0x6, 0x8, 0x8, 0x1, 0x7, 0x0, 0x7fffffff, 0x8, 0x2, 0x2, 0xfffff001, 0x7fffffff, 0x0, 0x8001, 0x6, 0x0, 0x4, 0x5d, 0x80000000, 0x1, 0x3, 0xdb7d, 0x9, 0x1, 0x8, 0x7, 0xe, 0x9, 0x2, 0x0, 0x1, 0x101, 0xfffffff8, 0xc, 0x4, 0x2, 0x8, 0xffffffff, 0x8, 0x5, 0x1ff, 0x3a62, 0x3, 0x71, 0x0, 0xfff, 0x4, 0x10000, 0x536, 0x0, 0x9, 0xffff00, 0x5, 0x81, 0x6, 0x2, 0x3, 0x1c4c, 0x9, 0x6, 0xffffffff, 0xba, 0x4, 0x7, 0x0, 0x9, 0xf7c6, 0x0, 0x10000, 0x0, 0x1f800, 0x349, 0x40, 0x0, 0x7fff, 0x401, 0x5, 0x3, 0x1, 0x4, 0x3, 0x9, 0x80, 0x2, 0x2, 0x7, 0x20000000, 0x8001, 0xe4d4, 0xfffffffb, 0x30000, 0x1ff, 0x5, 0x9, 0x5, 0xb1a2, 0x5, 0x401, 0x10, 0xfffffff8, 0xfffffffc, 0x4000000, 0x5, 0x6, 0x10c6, 0x8, 0x30000000, 0xfffffff6, 0xffff5626, 0x5, 0x8, 0x6, 0x3aeeffe3, 0x6, 0x7, 0x81, 0xedc, 0x5, 0x6e68, 0x7e, 0xfffffffb, 0x3, 0xfffff747, 0x0, 0x2, 0x1, 0x6, 0x3, 0x7, 0xc, 0x3ff, 0x4, 0x4, 0x88e4, 0x9, 0x5, 0x5, 0xff, 0x1, 0x4926]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x99}, @TCA_ROUTE4_IIF={0x8, 0x4, r11}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x58}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x9d}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xd, 0x1b}}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x3}}]}}]}, 0xd34}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'ip6gre0\x00', r4, 0x2f, 0xc0, 0x5, 0x5b5d, 0x5, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7, 0x8, 0x4, 0x7f}}) r14 = socket$unix(0x1, 0x1, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000140)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaa3aaaab1aa000008000500", @ANYRES32=r16], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="8c030000", @ANYRES16=r7, @ANYBLOB="000827bd7000fddbdf25070000008400018008000100", @ANYRES32=r4, @ANYBLOB="1400020076657468315f746f5f68737200000000080003000200000014000200766972745f7769666930000000000000140002006e7230000000000000000000000000001400020073797a6b616c6c6572300000000000000800030000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="5c00018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000300010000001400020076657468305f746f5f6261746164760008000100", @ANYRES32=r4, @ANYBLOB="140002006e657464657673696d3000000000000008000300010000003c0001801400020076657468315f746f5f7465616d00000008000100", @ANYRES32=r4, @ANYBLOB="140002006261746164763000000000000000000008000300010000006c0001800800030000000000140002006272696467655f736c6176655f30000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="0800030001000000080003000300000008000100", @ANYRES32=r4, @ANYBLOB="14000200626f6e645f736c6176655f310000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="74000180140002007866726d3000000000000000000000001400020074756e6c30000000000000000000000008000300000000001400020076657468315f766c616e000000000000140002006970366772657461703000000000000008000300030000000800030001000000080003000100000028000180080003000300000008000100", @ANYRES32=r13, @ANYBLOB="1400020069705f76746930000000000000000000300001800800030001000000140002006970366772653000000000000000000008000300030000000800030002000000500001801400020076657468315f746f5f62617461647600080003000300000014000200626f6e645f736c6176655f30000000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=r16, @ANYBLOB="9c00018014000200766c616e31008fdcd24abee6beadd09b3c4d83aa750000000000000000000014000200626f6e643000000000000000000000001400020069703665727370616e300000000000001400020065727370616e30000000000000000000080003000100000008000300010000001400020070696d72656730000000000000", @ANYRES32=r4, @ANYBLOB="1400020070696d726567000000000000000000003800018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="140002007665746830000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="0800030001000000"], 0x38c}, 0x1, 0x0, 0x0, 0x9991e38aa17f9423}, 0x24048001) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) r17 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000003c719d1000000001830040000000000000000000000000018000000020000000000000008000000"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x30, &(0x7f0000000100)=""/48, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x5, 0x8, 0xed9}, 0x10, 0x1adb2, 0xffffffffffffffff, 0x1, &(0x7f00000001c0)=[0xffffffffffffffff], &(0x7f0000000200)=[{0x3, 0x2, 0xf, 0xa}], 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000340)={r0, r17}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=r18, @ANYBLOB="15020000000000002400128009000100766c616e0000000014000280040003800c0002001000000032"], 0x4c}, 0x1, 0xba01}, 0x200c000) 5.090263682s ago: executing program 0 (id=1911): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(0x0, 0x7e, 0x8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x1}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 4.066987443s ago: executing program 0 (id=1912): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x37, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x14747000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f00000000c0)='7', 0x1) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000010140)=""/64, &(0x7f0000010180)=0x40) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x110) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="8f39006ffd82a900fae1ecc101e8000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="010000000400"/28], 0x50) clock_gettime(0xfffffffffffffff6, 0x0) 4.028532615s ago: executing program 4 (id=1913): r0 = socket$inet6(0xa, 0x3, 0x75) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x13, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff7}, {0x0, 0xfef2, 0xd, 0x40000000000}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0xfffffffe, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x35ced141}}, 0xe8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @local}, @in6={0xa, 0x0, 0x0, @empty}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x48) syz_io_uring_setup(0x24fd, &(0x7f0000000180)={0x0, 0x4000000, 0x10100}, &(0x7f0000000240), &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) fchdir(0xffffffffffffffff) setns(0xffffffffffffffff, 0x20000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) time(0xfffffffffffffffc) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) shmget(0x1, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 2.901657216s ago: executing program 0 (id=1914): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x3c}, @remote, @remote, 0x9, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r4}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000380)="02034a64022895f20506ab5a048a2a", 0xf, 0x8000000, &(0x7f0000000140)={0x11, 0x17, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.679765976s ago: executing program 1 (id=1915): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x330, 0x28, 0xd27, 0x70bd2d, 0x1000000, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0xe, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x300, 0x2, [@TCA_CGROUP_EMATCHES={0x2fc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1d4, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0x5}, {0x3, 0x4, 0x9, 0x0, 0x1}}}, @TCF_EM_META={0x68, 0x2, 0x0, 0x0, {{0x7, 0x4, 0x8000}, [@TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="04d35d787fa9", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="632663e39f8d1684", @TCF_META_TYPE_VAR="f6fe"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1ff, 0x61, 0x1}, {0x5, 0x40, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe4cf, 0xaa, 0x1}, {0xd64, 0xff, 0x2}}}, @TCA_EM_META_RVALUE={0x23, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="3893dc19ab2ee60dbb", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR='W9', @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_META={0x74, 0x1, 0x0, 0x0, {{0x6, 0x4, 0xfbff}, [@TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR='HY', @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="f5f2", @TCF_META_TYPE_VAR="31c8", @TCF_META_TYPE_VAR="daa2c6eda008", @TCF_META_TYPE_VAR="796b83ab76", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_VAR="e0fd", @TCF_META_TYPE_VAR="57b804675e", @TCF_META_TYPE_VAR='{\\]7W', @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x9}, {0xff81, 0x8}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7fff, 0x7, 0x1}, {0x4, 0x7}}}]}}, @TCF_EM_CONTAINER={0x90, 0x2, 0x0, 0x0, {{0x1200, 0x0, 0x7}, "c11f58e19008ece9ed3a011b16b4e308f115577e7812fef4de2e212ca39a3295d285d415e2f83f5e716bd702f4b5b11ff87f8d7a6789004a0b0d699385750dec619c32ac8b2f7166a4c59f53170eaa36fc4a30b5dd8fa49272f3066e5c7501e4b3c9ab4d9020deb8fb714ba4c771783b28d48e03c2c7481e0dfd4b9cbd25a7ebeed0e4ea"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x800, 0x1, 0x3}, {0x7, 0x1, 0xcbc, 0x2, 0x5, 0x0, 0x1}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x5, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x59b, 0x1, 0x6}, {0x9, 0x1000, 0x10, 0x7, 0xd, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x683}}, @TCA_EMATCH_TREE_LIST={0x11c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x64, 0x2, 0x0, 0x0, {{0x5, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_VAR="9673", @TCF_META_TYPE_VAR="eb81891d51ffcd4209", @TCF_META_TYPE_VAR="434a929d2a2bc2", @TCF_META_TYPE_VAR="8f18f1cf2507e8"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x4}, {0x3ff, 0x1, 0x2}}}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_VAR="f46040b5989d708d4e", @TCF_META_TYPE_VAR="5527265633beac", @TCF_META_TYPE_VAR="09c61340"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe, 0x5, 0x2}, {0x1, 0x8, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x90}, {0x3, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x10, 0x8, 0x5750}, {0x0, 0x5, 0x6}}}, @TCF_EM_META={0x80, 0x1, 0x0, 0x0, {{0x9, 0x4, 0xa}, [@TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="574a8848747c4f8bc5", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="007721de3c4c5b59"]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="d50d14a102fee00c", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR='\rt', @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="305a618eb1ae7809316f", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="83"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1000, 0x0, 0x1}, {0x81, 0x1, 0x1}}}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xbb, 0x7, 0x6}, {{0x3, 0x1}}}}]}]}]}}]}, 0x330}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) 2.467253725s ago: executing program 0 (id=1916): r0 = epoll_create1(0x80000) epoll_pwait2(r0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40081, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x8, 0x801) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x3, r3}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000000c0)={0x4, r3, 0x1}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='timers\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, 0x0, 0x0) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'vxcan1\x00', 0x2}) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) 2.11585706s ago: executing program 2 (id=1917): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x219}, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)=@fd={0x7fff, 0x4, 0x4, 0x40, 0xf, {0x77359400}, {0x2, 0xc, 0x0, 0x0, 0x1, 0x6, "c140f698"}, 0x7, 0x4, {0xffffffffffffffff}, 0x9}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0050801d000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000100000000"], 0xb8}}, 0x4040000) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f00000001c0)) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100"], 0x188}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000080)={r7, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={r7, 0xb, 0x4, 0x3, 0x5}, &(0x7f0000000240)=0x14) fchdir(r2) bind$x25(0xffffffffffffffff, &(0x7f0000000100), 0x12) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40881) recvmmsg(r8, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000d80)=""/247, 0xf7}], 0x1}, 0x3}], 0x1, 0x1, 0x0) 349.777874ms ago: executing program 2 (id=1918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x80a, 0x0) bind$rxrpc(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() timer_create(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x1, 0x0, 0x100000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400000000feff000000007400", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500190002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c0000001800dd8800000000000000000200000000000006000000000600150005000000280016802400010001000000000000002b00040000000000ff02fd00000000000000000000000001"], 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000540)='./cgroup/pids.max\x00', 0x2, 0x0) read$msr(r9, &(0x7f00000004c0)=""/15, 0xf) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x88}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e20, 0x100, @local, 0x2}}, 0x100, 0x0, 0xfffffffe, 0x400, 0x2}, 0x9c) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x2, 0x20, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@generic={0x48, 0x0, 0x4, 0x2}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x99, &(0x7f0000000580)=""/153, 0x41100, 0x2, '\x00', 0x0, @fallback=0x38, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x0, 0xf, 0x100, 0xfffffff7}, 0x10, 0x0, r9, 0x4, &(0x7f0000000900)=[0x1, 0xffffffffffffffff, r9, r9, r9], &(0x7f0000000940)=[{0x3, 0x3, 0xc, 0x4}, {0x4, 0x5, 0x7, 0x8}, {0x2, 0x3, 0x10, 0x3}, {0x0, 0x4, 0xc, 0xc}], 0x10, 0xf9}, 0x94) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000010100fbdbdf251200000008000300", @ANYRES32=r11, @ANYBLOB="0a0006000802110000010000a4000100000085f90032bb9ed2cc4c2dc0e3db2a4739145fc8a7a922896185c2e12e774d0ffb57d41ebd103c5066a536eedafe3543a86c05947c4ccd77bd14a917bcaf6ed0d5844331eb15b929671f127bcadffe488ed63df4f05b6ddd940332860cc4ab4d464fe4b094ec282bb7a09acea13b3d3a6ea614361d6f1775c212c00ead974ca9cf2af11be9e0635c633c5107fd0a608b941327c962c6516da3fc4034f538cc67996e59dfa13fb02ce5218e833cca5d031d48a138b3ec18e891532a805867a838cb8e71d57d07001cf95c92f93e706becf88d0000"], 0x30}, 0x1, 0x0, 0x0, 0x4008814}, 0x0) 109.293379ms ago: executing program 0 (id=1919): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1300000069"], 0x20}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r1, r1, 0x178}) (async) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x2, 0x0, &(0x7f0000000280)) (async) write$tun(r2, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0x1, 0x6, "89fd17", 0x14, 0x6, 0x1, @mcast2, @private2, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x21, 0x6, 0x0, 0x1}}}}}}}}, 0x4e) 1.033802ms ago: executing program 4 (id=1920): syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={0x1d, r4, 0x0, {}, 0x1}, 0x18) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=1921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) listxattr(&(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x38) syz_open_dev$vbi(0x0, 0x1, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000002060108000034e4000000000000fa080c000780080006400000000111000300686173683a69702c706f7274000000000900020073797a31000000000500050002000000050004000000000005000100070000"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write$binfmt_register(r3, &(0x7f00000004c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x100000001, 0x3a, 'bcachefs\x00', 0x3a, '', 0x3a, './file1'}, 0x30) r4 = socket$unix(0x1, 0x2, 0x0) inotify_init1(0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') kernel console output (not intermixed with test programs): e strings: Mfr=1, Product=2, SerialNumber=3 [ 620.579831][ T5897] usb 1-1: Product: syz [ 620.584045][ T5897] usb 1-1: Manufacturer: syz [ 620.594765][ T5897] usb 1-1: SerialNumber: syz [ 620.603954][ T5897] usb 1-1: config 0 descriptor?? [ 621.574462][ T5829] usb 4-1: USB disconnect, device number 31 [ 621.584415][ T5829] usblp0: removed [ 621.828677][ T5897] usb 1-1: USB disconnect, device number 26 [ 622.147742][ T5897] f81534a_ctrl 1-1:0.88: failed to set register 0x116: -19 [ 622.155066][ T5897] f81534a_ctrl 1-1:0.88: failed to enable ports: -19 [ 622.574766][T10505] netlink: 'syz.3.1222': attribute type 1 has an invalid length. [ 622.583202][T10505] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1222'. [ 622.606323][T10505] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1222'. [ 622.772073][T10508] netlink: 'syz.2.1223': attribute type 30 has an invalid length. [ 622.786170][T10508] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.795167][T10508] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.803947][T10508] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.812700][T10508] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.851581][T10508] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.860686][T10508] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.872036][T10508] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.880985][T10508] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.026106][ T5829] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 624.914948][T10530] netlink: 10616 bytes leftover after parsing attributes in process `syz.1.1230'. [ 625.965242][ T5829] usb 5-1: unable to get BOS descriptor or descriptor too short [ 625.985056][ T5829] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 626.010176][ T5829] usb 5-1: can't read configurations, error -71 [ 626.153772][T10541] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 626.170250][T10541] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 626.177439][T10541] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 626.197313][T10541] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 626.204998][T10541] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 626.261365][T10556] netem: incorrect gi model size [ 626.266798][T10556] netem: change failed [ 626.286958][T10559] netlink: 'syz.4.1237': attribute type 1 has an invalid length. [ 626.294897][T10559] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1237'. [ 626.319528][T10559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1237'. [ 626.589209][ T5896] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 626.654638][T10569] vivid-000: disconnect [ 626.659730][T10569] vivid-000: reconnect [ 626.746154][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 626.977070][T10571] fuse: Unknown parameter 'group_id00000000000000000000' [ 627.123474][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 627.147360][ T5896] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 627.172863][ T5896] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 627.200826][ T5896] usb 1-1: Product: syz [ 627.215916][ T5896] usb 1-1: Manufacturer: syz [ 627.322942][ T5896] usb 1-1: SerialNumber: syz [ 628.907725][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 628.913930][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 628.925720][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 628.926639][ T5896] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 628.931860][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 628.955731][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 629.009137][ T5896] visor 1-1:1.0: probe with driver visor failed with error -110 [ 629.233640][T10587] netlink: 10616 bytes leftover after parsing attributes in process `syz.2.1245'. [ 629.565814][ T5897] usb 1-1: USB disconnect, device number 27 [ 629.754879][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.403333][T10614] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.1251'. [ 632.413262][T10614] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.1251'. [ 633.210183][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1253'. [ 633.350727][T10619] vivid-000: disconnect [ 633.358144][T10618] vivid-000: reconnect [ 634.110281][T10628] fuse: Unknown parameter 'group_id00000000000000000000' [ 636.675747][ T5896] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 636.825761][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 636.885917][ T5896] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 637.019994][ T5896] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 637.099673][ T5896] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 637.175490][ T5896] usb 5-1: Product: syz [ 637.229296][ T5896] usb 5-1: Manufacturer: syz [ 637.234016][ T5896] usb 5-1: SerialNumber: syz [ 637.526943][ T5896] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 637.610770][ T5896] usb 5-1: Handspring Visor / Palm OS: port 163, is for unknown use [ 637.648998][ T5896] usb 5-1: Handspring Visor / Palm OS: port 51, is for unknown use [ 637.714579][ T5896] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 637.766776][T10664] qnx6: unable to read the first superblock [ 637.792375][ T5896] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 637.822391][ T5896] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 637.864104][ T5896] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 637.906015][ T5896] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 637.955251][ T5896] usb 5-1: USB disconnect, device number 24 [ 637.981264][ T5896] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 638.060879][ T5896] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 638.078635][ T5896] visor 5-1:1.0: device disconnected [ 638.178777][T10659] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 638.187632][T10659] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 638.194120][T10659] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 638.200835][T10659] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 638.207593][T10659] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 638.458295][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'. [ 639.356314][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 639.486312][T10680] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 640.107800][T10687] netlink: 'syz.4.1270': attribute type 4 has an invalid length. [ 640.366754][ T8678] Bluetooth: hci2: command 0x0c1a tx timeout [ 640.373034][ T8678] Bluetooth: hci1: command 0x0c1a tx timeout [ 640.380029][ T5155] Bluetooth: hci3: command 0x0c1a tx timeout [ 640.386547][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 641.421780][T10700] set match dimension is over the limit! [ 643.313125][ T5897] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 644.077612][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 644.094287][ T5897] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 644.105300][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.115726][ T5897] usb 3-1: Product: syz [ 644.120107][ T5897] usb 3-1: Manufacturer: syz [ 644.127016][ T5897] usb 3-1: SerialNumber: syz [ 644.136541][ T5897] usb 3-1: config 0 descriptor?? [ 644.208646][T10713] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 644.230453][T10713] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 644.259613][T10713] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 644.274583][T10713] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 644.284050][T10713] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 644.409186][T10707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.438385][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1280'. [ 644.456160][T10707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.272736][T10733] fuse: blksize only supported for fuseblk [ 645.875981][ T5897] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 645.884340][ T5897] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -32) [ 645.906424][T10732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 646.097766][ T5897] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -32 [ 646.168927][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 646.356091][ T5155] Bluetooth: hci3: command 0x0c1a tx timeout [ 646.356121][ T8678] Bluetooth: hci2: command 0x0c1a tx timeout [ 646.356270][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 646.374896][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 647.389130][ T5896] usb 3-1: USB disconnect, device number 27 [ 648.846509][T10758] set match dimension is over the limit! [ 649.320095][T10755] qnx6: unable to read the first superblock [ 650.737068][T10766] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 650.744682][T10766] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 650.903330][T10766] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 650.924261][T10766] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 650.943368][T10766] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 650.954579][T10771] vivid-000: disconnect [ 650.959743][T10771] vivid-000: reconnect [ 651.898405][T10780] qnx6: unable to read the first superblock [ 652.581453][T10801] qnx6: unable to read the first superblock [ 652.797021][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 652.803174][ T5155] Bluetooth: hci0: command 0x0c1a tx timeout [ 653.035910][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 653.042667][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 653.043060][ T5155] Bluetooth: hci3: command 0x0c1a tx timeout [ 653.683457][T10812] Cannot find set identified by id 0 to match [ 654.074679][T10811] FAULT_INJECTION: forcing a failure. [ 654.074679][T10811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.096746][T10811] CPU: 0 UID: 0 PID: 10811 Comm: syz.2.1303 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 654.096778][T10811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 654.096792][T10811] Call Trace: [ 654.096801][T10811] [ 654.096808][T10811] dump_stack_lvl+0x189/0x250 [ 654.096834][T10811] ? lockdep_hardirqs_on+0x9c/0x150 [ 654.096853][T10811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 654.096872][T10811] ? __pfx__printk+0x10/0x10 [ 654.096904][T10811] should_fail_ex+0x414/0x560 [ 654.096926][T10811] _copy_to_user+0x31/0xb0 [ 654.096951][T10811] simple_read_from_buffer+0xe1/0x170 [ 654.096973][T10811] proc_fail_nth_read+0x1df/0x250 [ 654.096996][T10811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 654.097019][T10811] ? rw_verify_area+0x258/0x650 [ 654.097045][T10811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 654.097066][T10811] vfs_read+0x200/0x980 [ 654.097096][T10811] ? __pfx___mutex_lock+0x10/0x10 [ 654.097131][T10811] ? __pfx_vfs_read+0x10/0x10 [ 654.097182][T10811] ? __fget_files+0x2a/0x420 [ 654.097206][T10811] ? __fget_files+0x3a0/0x420 [ 654.097224][T10811] ? __fget_files+0x2a/0x420 [ 654.097251][T10811] ksys_read+0x145/0x250 [ 654.097269][T10811] ? __pfx_ksys_read+0x10/0x10 [ 654.097282][T10811] ? rcu_is_watching+0x15/0xb0 [ 654.097305][T10811] ? do_syscall_64+0xbe/0x3b0 [ 654.097328][T10811] do_syscall_64+0xfa/0x3b0 [ 654.097349][T10811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.097365][T10811] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 654.097382][T10811] ? clear_bhb_loop+0x60/0xb0 [ 654.097405][T10811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.097421][T10811] RIP: 0033:0x7f852b98d5fc [ 654.097436][T10811] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 654.097452][T10811] RSP: 002b:00007f852c7eb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 654.097470][T10811] RAX: ffffffffffffffda RBX: 00007f852bbb5fa0 RCX: 00007f852b98d5fc [ 654.097483][T10811] RDX: 000000000000000f RSI: 00007f852c7eb0a0 RDI: 000000000000000e [ 654.097494][T10811] RBP: 00007f852c7eb090 R08: 0000000000000000 R09: 0000000000000000 [ 654.097504][T10811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.097514][T10811] R13: 00007f852bbb6038 R14: 00007f852bbb5fa0 R15: 00007fffe73d8598 [ 654.097541][T10811] [ 655.106655][T10824] fuse: Bad value for 'fd' [ 655.481591][T10821] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 655.502524][T10821] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 655.579562][T10830] syz_tun: entered promiscuous mode [ 655.584975][T10830] syz_tun: entered allmulticast mode [ 655.818282][T10821] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 655.824497][T10821] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 655.847120][T10821] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 656.255433][T10834] qnx6: unable to read the first superblock [ 656.420433][ T5897] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 656.530451][T10838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1309'. [ 656.946643][ T5155] Bluetooth: hci0: command 0x0c1a tx timeout [ 657.525978][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 657.825862][ T8678] Bluetooth: hci2: command 0x0c1a tx timeout [ 657.832251][ T5155] Bluetooth: hci3: command 0x0c1a tx timeout [ 657.905938][ T5155] Bluetooth: hci4: command 0x0c1a tx timeout [ 658.137592][T10823] delete_channel: no stack [ 658.143938][ T5897] usb 3-1: unable to get BOS descriptor or descriptor too short [ 658.165283][ T5897] usb 3-1: no configurations [ 658.174015][ T5897] usb 3-1: can't read configurations, error -22 [ 658.656030][T10862] vivid-000: disconnect [ 658.667982][T10862] vivid-000: reconnect [ 659.350845][T10859] Cannot find set identified by id 0 to match [ 660.140748][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1317'. [ 660.598252][T10875] fuse: Bad value for 'fd' [ 661.175106][T10870] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 661.227034][T10870] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 661.247995][T10870] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 661.260160][T10870] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 661.273133][T10870] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 662.146628][ T5897] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 662.305959][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 662.457530][ T5897] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 662.490156][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.498471][ T5897] usb 1-1: Product: syz [ 662.504134][ T5897] usb 1-1: Manufacturer: syz [ 662.512961][ T5897] usb 1-1: SerialNumber: syz [ 662.529462][ T5897] usb 1-1: config 0 descriptor?? [ 662.546401][ T5155] Bluetooth: hci0: command 0x0c1a tx timeout [ 662.775099][T10887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.807952][T10887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.365882][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 663.372136][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 663.375974][ T8678] Bluetooth: hci2: command 0x0c1a tx timeout [ 663.379917][ T5155] Bluetooth: hci3: command 0x0c1a tx timeout [ 663.407603][T10899] netlink: 10616 bytes leftover after parsing attributes in process `syz.2.1327'. [ 663.767361][T10905] fuse: blksize only supported for fuseblk [ 664.772507][T10911] FAULT_INJECTION: forcing a failure. [ 664.772507][T10911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.802818][T10911] CPU: 0 UID: 0 PID: 10911 Comm: syz.2.1329 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 664.802850][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 664.802863][T10911] Call Trace: [ 664.802872][T10911] [ 664.802881][T10911] dump_stack_lvl+0x189/0x250 [ 664.802910][T10911] ? __pfx____ratelimit+0x10/0x10 [ 664.802926][T10911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 664.802943][T10911] ? __pfx__printk+0x10/0x10 [ 664.802986][T10911] should_fail_ex+0x414/0x560 [ 664.803005][T10911] _copy_from_user+0x2d/0xb0 [ 664.803027][T10911] bpf_test_init+0xf8/0x170 [ 664.803051][T10911] bpf_prog_test_run_xdp+0x37c/0x1000 [ 664.803084][T10911] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 664.803110][T10911] ? __fget_files+0x2a/0x420 [ 664.803130][T10911] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 664.803152][T10911] bpf_prog_test_run+0x2c7/0x340 [ 664.803179][T10911] __sys_bpf+0x4a4/0x860 [ 664.803204][T10911] ? __pfx___sys_bpf+0x10/0x10 [ 664.803235][T10911] ? ksys_write+0x22a/0x250 [ 664.803252][T10911] ? __pfx_ksys_write+0x10/0x10 [ 664.803263][T10911] ? rcu_is_watching+0x15/0xb0 [ 664.803285][T10911] __x64_sys_bpf+0x7c/0x90 [ 664.803305][T10911] do_syscall_64+0xfa/0x3b0 [ 664.803321][T10911] ? lockdep_hardirqs_on+0x9c/0x150 [ 664.803337][T10911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.803352][T10911] ? clear_bhb_loop+0x60/0xb0 [ 664.803370][T10911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.803384][T10911] RIP: 0033:0x7f852b98ebe9 [ 664.803397][T10911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.803411][T10911] RSP: 002b:00007f852c7eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 664.803433][T10911] RAX: ffffffffffffffda RBX: 00007f852bbb5fa0 RCX: 00007f852b98ebe9 [ 664.803444][T10911] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 664.803454][T10911] RBP: 00007f852c7eb090 R08: 0000000000000000 R09: 0000000000000000 [ 664.803463][T10911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.803472][T10911] R13: 00007f852bbb6038 R14: 00007f852bbb5fa0 R15: 00007fffe73d8598 [ 664.803495][T10911] [ 665.453537][ T5897] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 665.465585][ T5897] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 665.632927][ T5897] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 665.685099][ T5897] usb 1-1: USB disconnect, device number 28 [ 666.075714][ T5939] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 666.850982][ T5939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.863330][T10930] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 666.871776][ T5939] usb 4-1: config 0 has no interfaces? [ 666.877469][ T5939] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 666.898000][T10930] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 666.904070][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.919159][ T5939] usb 4-1: config 0 descriptor?? [ 667.026743][T10930] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 667.066511][T10930] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 667.076017][T10930] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 667.264182][ T5939] usb 4-1: USB disconnect, device number 32 [ 668.555813][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'. [ 668.565073][ T5155] Bluetooth: hci0: command 0x0c1a tx timeout [ 670.351246][T10955] netlink: 10616 bytes leftover after parsing attributes in process `syz.3.1339'. [ 670.370440][ T8678] Bluetooth: hci4: command 0x0c1a tx timeout [ 670.370785][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 670.380977][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 670.389023][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 670.406978][T10954] FAULT_INJECTION: forcing a failure. [ 670.406978][T10954] name failslab, interval 1, probability 0, space 0, times 0 [ 670.420003][T10954] CPU: 0 UID: 0 PID: 10954 Comm: syz.1.1341 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 670.420022][T10954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 670.420032][T10954] Call Trace: [ 670.420039][T10954] [ 670.420045][T10954] dump_stack_lvl+0x189/0x250 [ 670.420067][T10954] ? __pfx____ratelimit+0x10/0x10 [ 670.420084][T10954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 670.420101][T10954] ? __pfx__printk+0x10/0x10 [ 670.420130][T10954] should_fail_ex+0x414/0x560 [ 670.420150][T10954] should_failslab+0xa8/0x100 [ 670.420168][T10954] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 670.420183][T10954] ? __alloc_skb+0x112/0x2d0 [ 670.420208][T10954] __alloc_skb+0x112/0x2d0 [ 670.420232][T10954] ndisc_alloc_skb+0x9f/0x480 [ 670.420251][T10954] ndisc_ns_create+0x21b/0x650 [ 670.420269][T10954] ? __pfx_ndisc_ns_create+0x10/0x10 [ 670.420295][T10954] ndisc_solicit+0x339/0x610 [ 670.420317][T10954] ? __pfx_ndisc_solicit+0x10/0x10 [ 670.420340][T10954] ? __neigh_event_send+0xf08/0x1560 [ 670.420361][T10954] ? __pfx_ndisc_solicit+0x10/0x10 [ 670.420382][T10954] __neigh_event_send+0xf70/0x1560 [ 670.420406][T10954] ? ___neigh_create+0x1c83/0x2260 [ 670.420427][T10954] neigh_resolve_output+0x198/0x750 [ 670.420459][T10954] ip6_finish_output2+0x11fe/0x16a0 [ 670.420485][T10954] ? ip6_finish_output2+0x701/0x16a0 [ 670.420513][T10954] ? __pfx_ip6_finish_output2+0x10/0x10 [ 670.420556][T10954] ? ip6_mtu+0x7d/0x3f0 [ 670.420575][T10954] ? ip6_mtu+0x321/0x3f0 [ 670.420597][T10954] ? ip6_finish_output+0x2ef/0x4e0 [ 670.420616][T10954] ? ip6_send_skb+0x10f/0x390 [ 670.420640][T10954] ip6_send_skb+0x1d5/0x390 [ 670.420665][T10954] udp_v6_send_skb+0xc17/0x1830 [ 670.420700][T10954] udpv6_sendmsg+0x1bba/0x24c0 [ 670.420737][T10954] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 670.420757][T10954] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 670.420784][T10954] ? __pfx___up_read+0x10/0x10 [ 670.420804][T10954] ? smack_socket_sendmsg+0x1a7/0x520 [ 670.420838][T10954] ? irqentry_exit+0x74/0x90 [ 670.420861][T10954] ? inet_send_prepare+0x5c/0x270 [ 670.420881][T10954] ? inet6_sendmsg+0xe4/0x120 [ 670.420901][T10954] __sock_sendmsg+0xe5/0x270 [ 670.420934][T10954] ____sys_sendmsg+0x52d/0x830 [ 670.420961][T10954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.420991][T10954] ? import_iovec+0x74/0xa0 [ 670.421016][T10954] ___sys_sendmsg+0x21f/0x2a0 [ 670.421040][T10954] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.421090][T10954] ? __fget_files+0x2a/0x420 [ 670.421106][T10954] ? __fget_files+0x3a0/0x420 [ 670.421130][T10954] __sys_sendmmsg+0x227/0x430 [ 670.421158][T10954] ? __pfx___sys_sendmmsg+0x10/0x10 [ 670.421179][T10954] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 670.421216][T10954] ? ksys_write+0x22a/0x250 [ 670.421231][T10954] ? __pfx_ksys_write+0x10/0x10 [ 670.421243][T10954] ? rcu_is_watching+0x15/0xb0 [ 670.421264][T10954] __x64_sys_sendmmsg+0xa0/0xc0 [ 670.421289][T10954] do_syscall_64+0xfa/0x3b0 [ 670.421305][T10954] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.421320][T10954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.421334][T10954] ? clear_bhb_loop+0x60/0xb0 [ 670.421352][T10954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.421367][T10954] RIP: 0033:0x7f2aeff8ebe9 [ 670.421380][T10954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.421393][T10954] RSP: 002b:00007f2af0edf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 670.421409][T10954] RAX: ffffffffffffffda RBX: 00007f2af01b5fa0 RCX: 00007f2aeff8ebe9 [ 670.421420][T10954] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000004 [ 670.421430][T10954] RBP: 00007f2af0edf090 R08: 0000000000000000 R09: 0000000000000000 [ 670.421439][T10954] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000002 [ 670.421449][T10954] R13: 00007f2af01b6038 R14: 00007f2af01b5fa0 R15: 00007ffd807f35e8 [ 670.421472][T10954] [ 671.125727][ T5897] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 671.173353][T10965] overlayfs: conflicting options: nfs_export=on,index=off [ 671.255097][T10968] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 671.300893][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 671.338164][ T5897] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 671.355917][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.364671][ T5897] usb 5-1: Product: syz [ 671.503505][ T5897] usb 5-1: Manufacturer: syz [ 671.545932][ T5829] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 671.674177][ T5897] usb 5-1: SerialNumber: syz [ 671.796764][ T5897] usb 5-1: config 0 descriptor?? [ 671.847585][ T5829] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.887166][ T5829] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 671.907724][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.030689][T10961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.050945][T10961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.137294][ T5829] usb 2-1: config 0 descriptor?? [ 672.146463][ T5829] pwc: Askey VC010 type 2 USB webcam detected. [ 672.980704][T10987] fuse: blksize only supported for fuseblk [ 673.411657][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'. [ 673.595723][T10992] netlink: 10616 bytes leftover after parsing attributes in process `syz.2.1348'. [ 673.796655][ T5829] pwc: recv_control_msg error -32 req 02 val 2b00 [ 673.897101][T10981] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 673.903353][T10981] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 673.909565][T10981] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 673.916001][T10981] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 673.922098][T10981] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 674.031023][ T5829] pwc: recv_control_msg error -32 req 02 val 2c00 [ 674.092717][ T5829] pwc: recv_control_msg error -32 req 04 val 1000 [ 674.123637][ T5829] pwc: recv_control_msg error -32 req 04 val 1300 [ 674.155126][ T5829] pwc: recv_control_msg error -32 req 04 val 1400 [ 674.181191][ T5829] pwc: recv_control_msg error -32 req 02 val 2000 [ 674.396119][ T5896] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 674.443894][ T5897] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 674.516994][ T5829] pwc: recv_control_msg error -71 req 04 val 1500 [ 674.532312][ T5897] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 674.582499][ T5829] pwc: recv_control_msg error -71 req 02 val 2500 [ 674.596298][ T5829] pwc: recv_control_msg error -71 req 02 val 2400 [ 674.613500][ T5829] pwc: recv_control_msg error -71 req 02 val 2600 [ 674.621470][ T5829] pwc: recv_control_msg error -71 req 02 val 2900 [ 674.674618][ T5829] pwc: recv_control_msg error -71 req 02 val 2800 [ 675.003204][ T5897] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 675.005130][ T5829] pwc: recv_control_msg error -71 req 04 val 1100 [ 675.018790][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.036723][ T5829] pwc: recv_control_msg error -71 req 04 val 1200 [ 675.043392][ T5896] usb 4-1: config 0 has no interfaces? [ 675.049833][ T5897] usb 5-1: USB disconnect, device number 25 [ 675.067837][ T5896] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 675.085449][ T5829] pwc: Registered as video103. [ 675.109315][ T5155] Bluetooth: hci0: command 0x0c1a tx timeout [ 675.121121][ T5829] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input63 [ 675.135378][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.169115][ T5896] usb 4-1: config 0 descriptor?? [ 675.182989][ T5829] usb 2-1: USB disconnect, device number 28 [ 675.190195][T11001] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 675.203218][T11001] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 675.210245][T11001] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 675.221539][T11001] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 675.239745][T11001] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 675.884408][ T5829] usb 4-1: USB disconnect, device number 33 [ 676.002356][T11017] block nbd4: NBD_DISCONNECT [ 676.007195][T11017] block nbd4: Send disconnect failed -22 [ 676.014214][T11016] block nbd4: Disconnected due to user request. [ 676.023374][T11016] block nbd4: shutting down sockets [ 676.174721][ T5897] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 676.230511][T11022] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 676.686316][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 676.703905][ T5897] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 676.713470][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.751101][ T5897] usb 2-1: Product: syz [ 676.775835][ T5897] usb 2-1: Manufacturer: syz [ 676.780514][ T5897] usb 2-1: SerialNumber: syz [ 676.822099][ T5897] usb 2-1: config 0 descriptor?? [ 676.989359][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1359'. [ 677.199902][ T5829] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 677.200003][ T5155] Bluetooth: hci0: command 0x0c1a tx timeout [ 677.265860][ T5155] Bluetooth: hci4: command 0x0c1a tx timeout [ 677.266446][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 677.272270][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 677.278136][ T8678] Bluetooth: hci1: command 0x0c1a tx timeout [ 677.675832][ T5829] usb 1-1: Using ep0 maxpacket: 32 [ 677.690782][ T5829] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 677.717653][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.733631][ T5829] usb 1-1: Product: syz [ 677.742453][ T5829] usb 1-1: Manufacturer: syz [ 677.750365][ T5829] usb 1-1: SerialNumber: syz [ 677.766140][ T5829] usb 1-1: config 0 descriptor?? [ 677.803269][T11037] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 677.819806][T11037] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 677.841101][T11037] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 677.848209][T11037] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 677.862915][T11037] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 677.870264][T11015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.886200][T11015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.187948][T11035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.260423][T11046] fuse: blksize only supported for fuseblk [ 678.781943][ T5897] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 678.790834][T11035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.807834][ T5897] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -32) [ 679.916652][T11047] sp0: Synchronizing with TNC [ 679.971430][ T8678] Bluetooth: hci0: command 0x0c1a tx timeout [ 679.971787][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 679.977639][ T5155] Bluetooth: hci4: command 0x0c1a tx timeout [ 679.983739][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 679.989796][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 680.054389][T11043] [U] è [ 680.757333][T11051] fuse: blksize only supported for fuseblk [ 680.980060][ T5897] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -32 [ 681.013203][ T5897] usb 2-1: USB disconnect, device number 29 [ 682.613641][ T5829] peak_usb 1-1:0.0 can1: unable to request usb[type=0 value=0] err=-71 [ 682.624146][ T5896] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 682.636153][ T5829] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 682.760685][ T5829] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 682.807762][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 682.857239][T11074] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 682.872859][ T5829] usb 1-1: USB disconnect, device number 29 [ 682.907983][ T5896] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 682.925688][ T5896] usb 3-1: config 0 has no interface number 0 [ 683.001764][ T5896] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 683.044942][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.255661][ T5896] usb 3-1: Product: syz [ 683.259909][ T5896] usb 3-1: Manufacturer: syz [ 683.279047][ T5896] usb 3-1: SerialNumber: syz [ 683.357007][ T5896] usb 3-1: config 0 descriptor?? [ 683.394774][ T5896] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 683.415817][ T5896] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 683.713317][ T5896] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 683.854150][ T5897] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 684.088602][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.102585][ T5897] usb 2-1: config 0 has no interfaces? [ 684.118309][ T5897] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 684.142386][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.162722][ T5897] usb 2-1: config 0 descriptor?? [ 684.236809][ T5896] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 684.260804][ T5896] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 684.286080][ T5896] usb 3-1: USB disconnect, device number 30 [ 684.296717][ T5896] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 684.382137][ T5939] usb 2-1: USB disconnect, device number 30 [ 684.987679][T11096] syz.3.1373: attempt to access beyond end of device [ 684.987679][T11096] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 685.000468][T11096] MINIX-fs: unable to read superblock [ 685.736644][T11093] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 685.747887][T11093] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 686.005785][T11093] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 686.027056][T11093] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 686.059671][T11093] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 686.443707][ T5896] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 686.622756][T11122] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 686.725800][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 686.847063][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 687.024407][ T5896] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 687.050444][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.068906][ T5896] usb 4-1: Product: syz [ 687.078155][ T5896] usb 4-1: Manufacturer: syz [ 687.165751][ T5896] usb 4-1: SerialNumber: syz [ 687.227863][ T5896] usb 4-1: config 0 descriptor?? [ 687.685518][T11115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.774165][T11115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.866079][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 688.091120][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 688.091158][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 688.103608][ T8678] Bluetooth: hci2: command 0x0c1a tx timeout [ 688.225550][T11134] fuse: blksize only supported for fuseblk [ 689.959053][ T5896] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 689.982667][ T5896] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 690.016580][ T5897] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 690.143533][ T5896] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 690.163886][ T5896] usb 4-1: USB disconnect, device number 34 [ 690.190138][T11142] random: crng reseeded on system resumption [ 690.201335][ T5897] usb 1-1: device descriptor read/64, error -71 [ 690.515711][ T5897] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 691.115012][ T5897] usb 1-1: device descriptor read/64, error -71 [ 691.196507][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.230614][ T5897] usb usb1-port1: attempt power cycle [ 691.426372][T11149] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 691.441156][T11149] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 691.462230][T11149] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 691.474220][T11149] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 691.516948][T11149] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 692.055882][ T5939] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 692.862460][ T5939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.899003][ T5939] usb 5-1: config 0 has no interfaces? [ 693.235742][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 693.395181][ T5939] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 693.442751][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.469364][ T5939] usb 5-1: config 0 descriptor?? [ 693.505902][ T8678] Bluetooth: hci2: command 0x0c1a tx timeout [ 693.505957][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 693.512031][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 693.544720][ T5896] usb 5-1: USB disconnect, device number 26 [ 693.589104][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 693.605199][T11179] netlink: 'syz.4.1399': attribute type 12 has an invalid length. [ 693.693708][T11179] netlink: 'syz.4.1399': attribute type 29 has an invalid length. [ 693.701722][T11179] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1399'. [ 693.823016][T11170] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 693.854022][T11182] dvmrp1: left allmulticast mode [ 693.863300][T11182] dvmrp8: left allmulticast mode [ 693.865447][T11170] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 693.874992][T11170] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 693.881759][T11170] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 693.886865][T11184] netlink: 'syz.1.1400': attribute type 5 has an invalid length. [ 693.897491][T11170] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 693.925964][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1400'. [ 694.157368][ T5939] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 694.488214][ T5939] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 694.498389][ T5939] usb 1-1: config 0 interface 0 has no altsetting 0 [ 694.527757][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 694.672525][ T5939] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 694.681813][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 694.690681][ T5939] usb 1-1: Product: syz [ 694.694871][ T5939] usb 1-1: Manufacturer: syz [ 694.699654][ T5939] usb 1-1: SerialNumber: syz [ 694.726584][ T5939] usb 1-1: config 0 descriptor?? [ 694.740347][ T5939] usb 1-1: selecting invalid altsetting 0 [ 694.825950][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 694.836686][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 694.845774][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 694.854822][ T10] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 694.865204][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 694.884380][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 694.893936][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.902216][ T10] usb 5-1: Product: syz [ 694.906645][ T10] usb 5-1: Manufacturer: syz [ 694.911370][ T10] usb 5-1: SerialNumber: syz [ 694.948430][ T5939] usb 1-1: USB disconnect, device number 33 [ 694.990919][T11196] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 695.010656][T11196] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 695.023398][T11196] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 695.032667][T11196] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 695.042076][T11196] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 695.143462][ T10] usb 5-1: 0:2 : does not exist [ 695.165077][ T10] usb 5-1: USB disconnect, device number 27 [ 695.529165][ T5896] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 695.785838][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 695.810135][ T5896] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 696.503362][ T5896] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 696.513460][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 696.532495][ T5896] usb 3-1: Product: syz [ 696.545980][ T5896] usb 3-1: Manufacturer: syz [ 696.559266][ T5896] usb 3-1: SerialNumber: syz [ 696.589187][ T5896] usb 3-1: config 0 descriptor?? [ 696.596966][T11206] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 696.639676][T11198] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 696.707995][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 697.036579][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 697.042860][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 697.117464][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 697.117487][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 697.273390][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1409'. [ 698.159428][T11219] netlink: 10616 bytes leftover after parsing attributes in process `syz.0.1409'. [ 698.962955][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'. [ 699.099472][T11245] netlink: 10616 bytes leftover after parsing attributes in process `syz.1.1413'. [ 699.415010][ T5896] usb 3-1: USB disconnect, device number 31 [ 699.476422][T11248] fuse: Bad value for 'fd' [ 699.712881][T11235] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 699.721500][T11235] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 699.730703][T11235] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 699.737150][T11235] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 699.743237][T11235] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 701.025835][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 701.825852][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 701.827556][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 701.831942][ T8678] Bluetooth: hci2: command 0x0c1a tx timeout [ 701.838787][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 702.121028][T11268] fuse: Bad value for 'fd' [ 702.577810][T11269] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 702.584430][T11269] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 702.644041][T11269] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 702.650541][T11269] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 702.657370][T11269] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 702.782110][T11286] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 703.526345][ T5939] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 703.534357][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 703.635846][T11297] tipc: Enabling of bearer rejected, failed to enable media [ 703.705745][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 703.714387][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 703.732902][ T5939] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 703.747983][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.757879][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 703.771201][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 703.780984][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 703.792512][ T5939] usb 4-1: Product: syz [ 703.808616][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 703.838382][ T5939] usb 4-1: Manufacturer: syz [ 703.846141][ T5939] usb 4-1: SerialNumber: syz [ 704.375755][ T10] usb 3-1: Product: syz [ 704.385918][ T10] usb 3-1: Manufacturer: syz [ 704.392821][ T10] usb 3-1: SerialNumber: syz [ 704.403677][T11294] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 704.411704][ T5939] usb 4-1: config 0 descriptor?? [ 704.424768][T11294] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 704.435572][ T10] usb 3-1: config 0 descriptor?? [ 704.442314][T11288] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 704.716035][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 704.722279][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 704.733123][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 704.895774][T11294] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 704.909349][T11294] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 705.199478][T11294] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 705.216860][T11292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.236157][T11292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.505845][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 705.622662][T11313] fuse: blksize only supported for fuseblk [ 706.474068][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 706.945823][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 706.946246][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 707.259002][ T5939] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 707.267451][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 707.303912][ T5939] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 707.375139][T11322] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 707.425186][T11322] netlink: 'syz.0.1433': attribute type 16 has an invalid length. [ 707.433298][T11322] netlink: 'syz.0.1433': attribute type 17 has an invalid length. [ 707.514677][T11322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 708.441058][ T5939] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 708.469911][ T5939] usb 4-1: USB disconnect, device number 35 [ 710.116069][T11339] syz.0.1437: attempt to access beyond end of device [ 710.116069][T11339] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 710.129306][T11339] MINIX-fs: unable to read superblock [ 711.320627][T11350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'. [ 711.398681][T11357] netlink: 10616 bytes leftover after parsing attributes in process `syz.1.1441'. [ 711.584029][T11360] netlink: 'syz.0.1443': attribute type 1 has an invalid length. [ 711.635180][T11360] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1443'. [ 711.703007][T11360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1443'. [ 711.928654][T11367] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1445'. [ 711.962017][T11367] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1445'. [ 711.975528][ T5829] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 712.022549][T11367] netlink: 'syz.0.1445': attribute type 1 has an invalid length. [ 712.030592][T11367] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1445'. [ 712.040241][ T5939] usb 3-1: USB disconnect, device number 32 [ 712.308040][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 712.353162][ T5829] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 712.356320][T11381] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 712.377251][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.426106][ T5896] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 712.778290][ T5829] usb 5-1: Product: syz [ 712.866748][ T5829] usb 5-1: Manufacturer: syz [ 712.871853][ T5829] usb 5-1: SerialNumber: syz [ 712.882892][ T5829] usb 5-1: config 0 descriptor?? [ 712.901152][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 712.938570][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.965755][ T5896] usb 2-1: config 0 has no interfaces? [ 713.004673][T11388] vivid-000: disconnect [ 713.009922][T11388] vivid-000: reconnect [ 713.070928][T11389] netlink: 10616 bytes leftover after parsing attributes in process `syz.3.1450'. [ 713.095244][ T5896] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 713.115033][T11365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.134019][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.176280][T11365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.192243][ T5896] usb 2-1: config 0 descriptor?? [ 713.589299][T11394] fuse: blksize only supported for fuseblk [ 714.052442][T11397] syz.2.1452: attempt to access beyond end of device [ 714.052442][T11397] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 714.068292][T11397] MINIX-fs: unable to read superblock [ 715.008325][T11405] qnx6: unable to read the first superblock [ 715.511480][ T5829] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 715.520175][ T5829] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 715.582079][T11406] netlink: 'syz.3.1455': attribute type 1 has an invalid length. [ 715.629483][T11406] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1455'. [ 715.733301][ T5829] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 715.799600][ T5829] usb 5-1: USB disconnect, device number 28 [ 715.830700][ T5939] usb 2-1: USB disconnect, device number 31 [ 716.600055][T11421] __nla_validate_parse: 1 callbacks suppressed [ 716.600104][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1459'. [ 716.798444][T11424] netlink: 10616 bytes leftover after parsing attributes in process `syz.3.1459'. [ 716.846812][ T43] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 716.892112][T11419] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1460'. [ 716.968525][T11425] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1460'. [ 717.023062][T11419] netlink: 'syz.1.1460': attribute type 1 has an invalid length. [ 717.057009][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 717.072583][T11419] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1460'. [ 717.085544][ T43] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 717.130467][ T43] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 717.334121][ T43] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 717.344994][ T43] usb 3-1: Product: syz [ 717.349351][ T43] usb 3-1: Manufacturer: syz [ 717.353991][ T43] usb 3-1: SerialNumber: syz [ 717.363616][ T43] usb 3-1: config 0 descriptor?? [ 717.655634][T11418] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 719.749491][T11450] syz.4.1465: attempt to access beyond end of device [ 719.749491][T11450] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 719.762761][T11450] MINIX-fs: unable to read superblock [ 720.665139][T11452] vivid-000: disconnect [ 720.677785][T11452] vivid-000: reconnect [ 720.869614][ T10] usb 3-1: USB disconnect, device number 33 [ 721.011210][T11458] netlink: 'syz.3.1469': attribute type 1 has an invalid length. [ 721.030208][T11458] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1469'. [ 721.049639][T11458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1469'. [ 721.075725][ T5939] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 721.245764][ T5939] usb 5-1: Using ep0 maxpacket: 32 [ 721.258284][ T5939] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 721.273153][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.294750][ T5939] usb 5-1: Product: syz [ 721.306609][ T5939] usb 5-1: Manufacturer: syz [ 721.332773][ T5939] usb 5-1: SerialNumber: syz [ 721.355502][ T5939] usb 5-1: config 0 descriptor?? [ 721.531670][T11467] qnx6: unable to read the first superblock [ 721.593996][T11454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.616227][T11454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.014076][T11471] fuse: blksize only supported for fuseblk [ 723.940961][ T5939] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 723.972867][ T5939] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 724.257795][ T5939] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 724.291836][ T5939] usb 5-1: USB disconnect, device number 29 [ 725.200741][T11487] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1474'. [ 725.216914][T11487] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1474'. [ 725.297454][T11487] netlink: 'syz.4.1474': attribute type 1 has an invalid length. [ 725.305283][T11487] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1474'. [ 725.672598][T11494] syz.1.1477: attempt to access beyond end of device [ 725.672598][T11494] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 725.685774][T11494] MINIX-fs: unable to read superblock [ 726.902661][ T5939] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 727.109131][ T5939] usb 5-1: Using ep0 maxpacket: 32 [ 727.116827][ T5939] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 727.166311][T11500] netlink: 'syz.0.1480': attribute type 1 has an invalid length. [ 727.187911][ T5939] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 727.205742][T11500] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1480'. [ 727.216254][T11500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1480'. [ 727.228190][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 727.269015][ T5939] usb 5-1: Product: syz [ 727.296133][ T5939] usb 5-1: Manufacturer: syz [ 727.301244][ T5939] usb 5-1: SerialNumber: syz [ 727.309306][ T5939] usb 5-1: config 0 descriptor?? [ 727.315440][T11496] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 727.615079][T11509] /dev/nullb0: Can't open blockdev [ 728.570603][ T5939] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 728.843437][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 729.356874][ T5939] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 729.366441][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.374580][ T5939] usb 4-1: Product: syz [ 729.379102][ T5939] usb 4-1: Manufacturer: syz [ 729.383799][ T5939] usb 4-1: SerialNumber: syz [ 729.395941][ T5939] usb 4-1: config 0 descriptor?? [ 729.697917][ T10] usb 5-1: USB disconnect, device number 30 [ 729.756432][T11513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.799483][T11513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.211604][T11535] fuse: blksize only supported for fuseblk [ 732.198540][ T5939] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 732.207015][ T5939] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 732.287023][T11542] FAULT_INJECTION: forcing a failure. [ 732.287023][T11542] name failslab, interval 1, probability 0, space 0, times 0 [ 732.313333][T11542] CPU: 1 UID: 0 PID: 11542 Comm: syz.3.1491 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 732.313366][T11542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 732.313381][T11542] Call Trace: [ 732.313391][T11542] [ 732.313402][T11542] dump_stack_lvl+0x189/0x250 [ 732.313434][T11542] ? __pfx____ratelimit+0x10/0x10 [ 732.313460][T11542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 732.313485][T11542] ? __pfx__printk+0x10/0x10 [ 732.313522][T11542] ? __pfx___might_resched+0x10/0x10 [ 732.313545][T11542] ? fs_reclaim_acquire+0x7d/0x100 [ 732.313577][T11542] should_fail_ex+0x414/0x560 [ 732.313607][T11542] should_failslab+0xa8/0x100 [ 732.313634][T11542] __kmalloc_noprof+0xcb/0x4f0 [ 732.313656][T11542] ? tipc_nl_compat_doit+0x19b/0x5f0 [ 732.313696][T11542] tipc_nl_compat_doit+0x19b/0x5f0 [ 732.313737][T11542] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 732.313773][T11542] ? rcu_is_watching+0x15/0xb0 [ 732.313798][T11542] ? cap_capable+0x11f/0x460 [ 732.313821][T11542] ? safesetid_security_capable+0xa9/0x1a0 [ 732.313846][T11542] ? bpf_lsm_capable+0x9/0x20 [ 732.313872][T11542] ? security_capable+0x7e/0x2e0 [ 732.313909][T11542] tipc_nl_compat_recv+0x83c/0xbe0 [ 732.313951][T11542] ? __bpf_trace_contention_begin+0xdc/0x130 [ 732.313978][T11542] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 732.314010][T11542] ? __mutex_trylock_common+0x153/0x260 [ 732.314039][T11542] ? __pfx_tipc_nl_node_set_link+0x10/0x10 [ 732.314063][T11542] ? __pfx_tipc_nl_compat_link_set+0x10/0x10 [ 732.314094][T11542] ? __pfx___mutex_trylock_common+0x10/0x10 [ 732.314119][T11542] ? __local_bh_enable_ip+0x12d/0x1c0 [ 732.314148][T11542] ? rcu_is_watching+0x15/0xb0 [ 732.314184][T11542] genl_family_rcv_msg_doit+0x215/0x300 [ 732.314218][T11542] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 732.314271][T11542] genl_rcv_msg+0x60e/0x790 [ 732.314311][T11542] ? __pfx_genl_rcv_msg+0x10/0x10 [ 732.314333][T11542] ? ref_tracker_free+0x63a/0x7d0 [ 732.314356][T11542] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 732.314391][T11542] ? __pfx_ref_tracker_free+0x10/0x10 [ 732.314429][T11542] netlink_rcv_skb+0x205/0x470 [ 732.314462][T11542] ? __pfx_genl_rcv_msg+0x10/0x10 [ 732.314488][T11542] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 732.314539][T11542] ? down_read+0x1ad/0x2e0 [ 732.314571][T11542] genl_rcv+0x28/0x40 [ 732.314592][T11542] netlink_unicast+0x75c/0x8e0 [ 732.314634][T11542] netlink_sendmsg+0x805/0xb30 [ 732.314677][T11542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.314720][T11542] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 732.314742][T11542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.314774][T11542] __sock_sendmsg+0x21c/0x270 [ 732.314806][T11542] ____sys_sendmsg+0x505/0x830 [ 732.314847][T11542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 732.314893][T11542] ? import_iovec+0x74/0xa0 [ 732.314929][T11542] ___sys_sendmsg+0x21f/0x2a0 [ 732.314967][T11542] ? __pfx____sys_sendmsg+0x10/0x10 [ 732.315046][T11542] ? __fget_files+0x2a/0x420 [ 732.315071][T11542] ? __fget_files+0x3a0/0x420 [ 732.315109][T11542] __x64_sys_sendmsg+0x19b/0x260 [ 732.315147][T11542] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 732.315194][T11542] ? __pfx_ksys_write+0x10/0x10 [ 732.315213][T11542] ? rcu_is_watching+0x15/0xb0 [ 732.315243][T11542] ? do_syscall_64+0xbe/0x3b0 [ 732.315273][T11542] do_syscall_64+0xfa/0x3b0 [ 732.315296][T11542] ? lockdep_hardirqs_on+0x9c/0x150 [ 732.315327][T11542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.315349][T11542] ? clear_bhb_loop+0x60/0xb0 [ 732.315376][T11542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.315398][T11542] RIP: 0033:0x7f689218ebe9 [ 732.315418][T11542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.315444][T11542] RSP: 002b:00007f689303e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 732.315467][T11542] RAX: ffffffffffffffda RBX: 00007f68923b5fa0 RCX: 00007f689218ebe9 [ 732.315483][T11542] RDX: 0000000000040010 RSI: 000020000000fb80 RDI: 0000000000000005 [ 732.315498][T11542] RBP: 00007f689303e090 R08: 0000000000000000 R09: 0000000000000000 [ 732.315511][T11542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.315524][T11542] R13: 00007f68923b6038 R14: 00007f68923b5fa0 R15: 00007fff1a300c18 [ 732.315564][T11542] [ 733.285192][ T5939] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 733.328368][ T5939] usb 4-1: USB disconnect, device number 36 [ 735.290721][T11562] Cannot find set identified by id 0 to match [ 737.516298][T11577] xt_bpf: check failed: parse error [ 738.115759][ T5829] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 738.209461][ T5939] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 738.295835][ T5829] usb 3-1: Using ep0 maxpacket: 32 [ 738.316483][ T5829] usb 3-1: config 1 has an invalid interface number: 242 but max is 0 [ 738.370000][ T5829] usb 3-1: config 1 has no interface number 0 [ 738.425243][ T5829] usb 3-1: config 1 interface 242 has no altsetting 0 [ 738.521019][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 738.521118][ T5829] usb 3-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 738.673877][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.763129][ T5829] usb 3-1: Product: syz [ 738.798877][ T5829] usb 3-1: Manufacturer: syz [ 738.872650][ T5829] usb 3-1: SerialNumber: syz [ 738.881421][ T5939] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 738.895674][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.923408][ T5939] usb 4-1: Product: syz [ 738.933467][ T5939] usb 4-1: Manufacturer: syz [ 738.949973][ T5939] usb 4-1: SerialNumber: syz [ 738.969711][ T5939] usb 4-1: config 0 descriptor?? [ 739.171127][ T5829] aqc111 3-1:1.242: probe with driver aqc111 failed with error -71 [ 739.194398][T11585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.214142][T11585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.578883][ T5829] usb 3-1: USB disconnect, device number 34 [ 739.630508][T11599] fuse: blksize only supported for fuseblk [ 741.240115][T11607] /dev/nullb0: Can't open blockdev [ 742.187190][T11609] syz.1.1509: attempt to access beyond end of device [ 742.187190][T11609] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 742.200077][T11609] MINIX-fs: unable to read superblock [ 742.236673][ T5939] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 742.315807][ T5939] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 742.977973][ T5939] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 743.112819][T11615] Cannot find set identified by id 0 to match [ 743.462853][ T5939] usb 4-1: USB disconnect, device number 37 [ 746.946593][T11640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1515'. [ 747.465831][T11644] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 748.367020][ T5829] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 748.525691][ T5829] usb 1-1: Using ep0 maxpacket: 32 [ 748.541468][ T5829] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 748.569656][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.607653][ T5829] usb 1-1: Product: syz [ 748.684606][ T5829] usb 1-1: Manufacturer: syz [ 748.697331][ T5829] usb 1-1: SerialNumber: syz [ 748.781491][ T5829] usb 1-1: config 0 descriptor?? [ 749.003438][T11652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.076326][T11652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.483246][T11658] fuse: blksize only supported for fuseblk [ 751.211945][ T5829] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 751.235229][ T5829] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 751.376920][ T5829] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 751.485036][ T5829] usb 1-1: USB disconnect, device number 34 [ 752.357235][T11671] Cannot find set identified by id 0 to match [ 752.630092][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.050314][T11691] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 756.052166][T11697] netlink: 'syz.0.1533': attribute type 10 has an invalid length. [ 756.069120][T11697] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1533'. [ 756.078738][T11697] ipvlan1: entered allmulticast mode [ 756.084109][T11697] veth0_vlan: entered allmulticast mode [ 756.091306][T11697] bridge0: port 3(ipvlan1) entered blocking state [ 756.098107][T11697] bridge0: port 3(ipvlan1) entered disabled state [ 756.107736][T11697] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 756.376089][T11707] syz.2.1535: attempt to access beyond end of device [ 756.376089][T11707] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 756.389460][T11707] MINIX-fs: unable to read superblock [ 756.397279][ T5829] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 756.555779][ T5829] usb 4-1: Using ep0 maxpacket: 32 [ 757.858982][ T5829] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 758.677796][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.815664][ T5829] usb 4-1: Product: syz [ 758.819880][ T5829] usb 4-1: Manufacturer: syz [ 758.872230][ T5829] usb 4-1: SerialNumber: syz [ 758.874446][T11719] netlink: 'syz.0.1538': attribute type 1 has an invalid length. [ 758.880328][ T5829] usb 4-1: config 0 descriptor?? [ 758.884930][T11719] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1538'. [ 758.899459][T11719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1538'. [ 759.145759][ T5829] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 759.154115][ T5829] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 759.196412][T11725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 759.221117][T11730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 759.486061][T11733] smc: adding net device syzkaller0 with user defined pnetid SYZ2 [ 759.814404][ T5829] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 761.612942][ T5829] usb 4-1: USB disconnect, device number 38 [ 761.616321][T11744] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 761.701328][T11726] smc: removing net device syzkaller0 with user defined pnetid SYZ2 [ 762.356656][T11749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 765.409539][T11758] xt_bpf: check failed: parse error [ 765.817053][T11760] vivid-000: disconnect [ 765.849976][T11760] vivid-000: reconnect [ 766.718575][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1553'. [ 767.008114][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 767.425693][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 767.518957][ T10] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 767.530058][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.833310][ T10] usb 4-1: Product: syz [ 767.837625][ T10] usb 4-1: Manufacturer: syz [ 767.842482][ T10] usb 4-1: SerialNumber: syz [ 767.856662][ T10] usb 4-1: config 0 descriptor?? [ 768.091308][T11772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.142091][T11772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.415331][ T5829] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 768.545363][T11792] fuse: blksize only supported for fuseblk [ 769.295727][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 769.306535][ T5829] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 769.316140][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.324219][ T5829] usb 5-1: Product: syz [ 769.328546][ T5829] usb 5-1: Manufacturer: syz [ 769.333230][ T5829] usb 5-1: SerialNumber: syz [ 769.341166][ T5829] usb 5-1: config 0 descriptor?? [ 771.595935][ T5829] peak_usb 5-1:0.0 can1: unable to request usb[type=0 value=1] err=-71 [ 771.631963][ T10] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 771.719995][ T5829] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 771.776799][ T10] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 772.116995][T11798] syz.3.1561: attempt to access beyond end of device [ 772.116995][T11798] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 772.130671][T11798] MINIX-fs: unable to read superblock [ 774.618122][ T5829] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 774.963453][ T5829] usb 5-1: USB disconnect, device number 31 [ 774.966314][ T10] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 775.202523][ T10] usb 4-1: USB disconnect, device number 39 [ 776.338398][T11824] netlink: 'syz.3.1569': attribute type 1 has an invalid length. [ 776.364199][T11824] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1569'. [ 776.373616][T11824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1569'. [ 776.459883][T11826] vivid-000: disconnect [ 776.500094][T11826] vivid-000: reconnect [ 776.534050][T11828] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1570'. [ 776.589217][T11828] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1570'. [ 776.757668][T11833] netlink: 'syz.2.1570': attribute type 1 has an invalid length. [ 776.792864][T11833] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1570'. [ 777.122580][T11839] /dev/nullb0: Can't open blockdev [ 781.603015][T11878] xt_bpf: check failed: parse error [ 782.504311][T11880] /dev/nullb0: Can't open blockdev [ 786.071897][T11907] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 786.078579][T11907] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 786.086792][T11907] vhci_hcd vhci_hcd.0: Device attached [ 786.095688][ T5939] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 786.257099][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.352264][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.364231][ T5939] usb 5-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 786.375690][ T5939] usb 5-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 786.384258][ T5939] usb 5-1: Manufacturer: syz [ 786.400344][ T5939] usb 5-1: config 0 descriptor?? [ 786.435864][ T5829] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 786.815982][ T5939] ntrig 0003:1B96:000F.0007: unknown main item tag 0x0 [ 786.841417][ T5939] ntrig 0003:1B96:000F.0007: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 787.008663][T11924] vivid-000: disconnect [ 787.013644][T11924] vivid-000: reconnect [ 787.212104][T11926] xt_bpf: check failed: parse error [ 787.770780][ T5939] ntrig 0003:1B96:000F.0007: Firmware version: 7.15.12.55.4 (3dbf fc9e) [ 787.889903][T11908] vhci_hcd: connection reset by peer [ 787.922253][ T13] vhci_hcd: stop threads [ 787.934962][ T13] vhci_hcd: release socket [ 787.964648][ T13] vhci_hcd: disconnect device [ 791.576879][ T5829] vhci_hcd: vhci_device speed not set [ 792.086442][ T5896] usb 5-1: USB disconnect, device number 32 [ 792.447011][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 792.457484][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 792.466345][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 792.481119][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 792.512827][T11947] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 792.522877][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 792.584744][T11958] FAULT_INJECTION: forcing a failure. [ 792.584744][T11958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.599578][T11958] CPU: 0 UID: 0 PID: 11958 Comm: syz.4.1610 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 792.599607][T11958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 792.599620][T11958] Call Trace: [ 792.599627][T11958] [ 792.599636][T11958] dump_stack_lvl+0x189/0x250 [ 792.599666][T11958] ? __pfx____ratelimit+0x10/0x10 [ 792.599686][T11958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 792.599709][T11958] ? __pfx__printk+0x10/0x10 [ 792.599735][T11958] ? __might_fault+0xb0/0x130 [ 792.599766][T11958] should_fail_ex+0x414/0x560 [ 792.599796][T11958] _copy_from_iter+0x3f5/0x16f0 [ 792.599826][T11958] ? rcu_is_watching+0x15/0xb0 [ 792.599854][T11958] ? __pfx__copy_from_iter+0x10/0x10 [ 792.599882][T11958] ? __build_skb_around+0x257/0x3e0 [ 792.599915][T11958] ? netlink_sendmsg+0x642/0xb30 [ 792.599942][T11958] ? skb_put+0x11b/0x210 [ 792.599975][T11958] netlink_sendmsg+0x6b2/0xb30 [ 792.600033][T11958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.600072][T11958] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 792.600093][T11958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.600125][T11958] __sock_sendmsg+0x21c/0x270 [ 792.600154][T11958] ____sys_sendmsg+0x505/0x830 [ 792.600210][T11958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 792.600254][T11958] ? import_iovec+0x74/0xa0 [ 792.600287][T11958] ___sys_sendmsg+0x21f/0x2a0 [ 792.600322][T11958] ? __pfx____sys_sendmsg+0x10/0x10 [ 792.600393][T11958] ? __fget_files+0x2a/0x420 [ 792.600416][T11958] ? __fget_files+0x3a0/0x420 [ 792.600451][T11958] __x64_sys_sendmsg+0x19b/0x260 [ 792.600487][T11958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 792.600530][T11958] ? __pfx_ksys_write+0x10/0x10 [ 792.600547][T11958] ? rcu_is_watching+0x15/0xb0 [ 792.600575][T11958] ? do_syscall_64+0xbe/0x3b0 [ 792.600604][T11958] do_syscall_64+0xfa/0x3b0 [ 792.600627][T11958] ? lockdep_hardirqs_on+0x9c/0x150 [ 792.600650][T11958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.600672][T11958] ? clear_bhb_loop+0x60/0xb0 [ 792.600699][T11958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.600721][T11958] RIP: 0033:0x7f4899f8ebe9 [ 792.600739][T11958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.600757][T11958] RSP: 002b:00007f489ad79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 792.600779][T11958] RAX: ffffffffffffffda RBX: 00007f489a1b5fa0 RCX: 00007f4899f8ebe9 [ 792.600795][T11958] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 792.600809][T11958] RBP: 00007f489ad79090 R08: 0000000000000000 R09: 0000000000000000 [ 792.600822][T11958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.600835][T11958] R13: 00007f489a1b6038 R14: 00007f489a1b5fa0 R15: 00007ffce9dacab8 [ 792.600867][T11958] [ 793.165375][T11947] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 793.188642][T11947] usb 1-1: too many endpoints for config 2 interface 0 altsetting 1: 128, using maximum allowed: 30 [ 793.213541][T11947] usb 1-1: config 2 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 793.231896][T11947] usb 1-1: config 2 interface 0 has no altsetting 0 [ 793.242024][T11947] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 793.255672][T11947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.294754][T11947] usb 1-1: Product: syz [ 793.306446][T11947] usb 1-1: Manufacturer: syz [ 793.311167][T11947] usb 1-1: SerialNumber: syz [ 793.363859][T11947] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 793.395884][T11947] usb 1-1: selecting invalid altsetting 0 [ 793.403829][T11952] chnl_net:caif_netlink_parms(): no params data found [ 793.433551][T11947] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 793.683987][T11947] usb 1-1: USB disconnect, device number 35 [ 794.065239][T11952] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.076374][T11952] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.084517][T11952] bridge_slave_0: entered allmulticast mode [ 794.120682][T11952] bridge_slave_0: entered promiscuous mode [ 794.646962][ T51] Bluetooth: hci0: command tx timeout [ 794.829096][T11952] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.845729][T11952] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.861755][T11952] bridge_slave_1: entered allmulticast mode [ 794.884634][T11952] bridge_slave_1: entered promiscuous mode [ 794.916797][T11982] smc: adding net device syzkaller0 with user defined pnetid SYZ2 [ 795.193458][T11982] smc: removing net device syzkaller0 with user defined pnetid SYZ2 [ 795.853164][T11952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.904477][T11952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.979133][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1620'. [ 795.994196][T12003] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1618'. [ 796.061175][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 796.555217][ T10] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 796.566818][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.588247][T11952] team0: Port device team_slave_0 added [ 796.604788][ T10] usb 2-1: Product: syz [ 796.624842][ T10] usb 2-1: Manufacturer: syz [ 796.628969][T11952] team0: Port device team_slave_1 added [ 796.630573][ T10] usb 2-1: SerialNumber: syz [ 796.654624][ T10] usb 2-1: config 0 descriptor?? [ 796.742889][T11952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.764949][T11952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.797170][ T51] Bluetooth: hci0: command tx timeout [ 796.815700][T11952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.845905][T11952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.853014][T11952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.885728][ T43] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 796.898656][T11952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.971618][T11947] usb 2-1: USB disconnect, device number 32 [ 797.016563][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1621'. [ 797.067838][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 797.083970][ T43] usb 1-1: config 1 has an invalid interface number: 242 but max is 0 [ 797.114975][ T43] usb 1-1: config 1 has no interface number 0 [ 797.122056][ T43] usb 1-1: config 1 interface 242 has no altsetting 0 [ 797.139220][ T43] usb 1-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 797.160103][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.168728][T12011] netlink: 10616 bytes leftover after parsing attributes in process `syz.2.1621'. [ 797.185206][T11952] hsr_slave_0: entered promiscuous mode [ 797.203256][T11952] hsr_slave_1: entered promiscuous mode [ 797.238455][ T43] usb 1-1: Product: syz [ 797.242981][ T43] usb 1-1: Manufacturer: syz [ 797.247950][ T43] usb 1-1: SerialNumber: syz [ 797.282779][T11952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 797.304278][T11952] Cannot create hsr debugfs directory [ 797.494535][ T43] aqc111 1-1:1.242: probe with driver aqc111 failed with error -71 [ 797.536073][ T43] usb 1-1: USB disconnect, device number 36 [ 798.886149][ T51] Bluetooth: hci0: command tx timeout [ 799.482750][T12039] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 799.876117][ T43] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 800.011856][T11952] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 800.034572][T11952] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 800.060035][T11952] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 800.072660][T11952] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 800.091455][ T43] usb 2-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 800.102634][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.169011][ T43] usb 2-1: Product: syz [ 800.173357][ T43] usb 2-1: Manufacturer: syz [ 800.209614][ T43] usb 2-1: SerialNumber: syz [ 800.246600][ T43] usb 2-1: config 0 descriptor?? [ 800.255271][ T43] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 800.504537][T11952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.585840][T11947] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 800.671630][T11952] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.683118][ T43] sonixb 2-1:0.0: Error writing register 01: -71 [ 800.690455][ T43] sonixb 2-1:0.0: probe with driver sonixb failed with error -71 [ 800.711319][ T43] usb 2-1: USB disconnect, device number 33 [ 800.735491][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.742707][ T6087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.750686][T11947] usb 3-1: Using ep0 maxpacket: 32 [ 800.763602][T11947] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 800.774483][T11947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.783846][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.791065][ T6087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.799912][T11947] usb 3-1: Product: syz [ 800.804914][T11947] usb 3-1: Manufacturer: syz [ 800.818083][T11947] usb 3-1: SerialNumber: syz [ 800.876577][T11947] usb 3-1: config 0 descriptor?? [ 800.951403][ T51] Bluetooth: hci0: command tx timeout [ 801.027608][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1635'. [ 801.190159][T12057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.206479][T12057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.951190][T12067] fuse: blksize only supported for fuseblk [ 803.133435][T11952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.735962][T11947] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 803.744412][T11947] peak_usb 3-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 803.935946][T12079] vivid-000: disconnect [ 803.972687][T12079] vivid-000: reconnect [ 804.016956][T11947] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 804.044160][T11947] usb 3-1: USB disconnect, device number 35 [ 805.268140][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1641'. [ 805.553902][T11952] veth0_vlan: entered promiscuous mode [ 805.560696][T12103] netlink: 10616 bytes leftover after parsing attributes in process `syz.4.1641'. [ 805.619808][T11952] veth1_vlan: entered promiscuous mode [ 805.806704][T11952] veth0_macvtap: entered promiscuous mode [ 805.821120][T11952] veth1_macvtap: entered promiscuous mode [ 805.869965][T11952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.945663][T12110] vivid-000: disconnect [ 805.950908][T12110] vivid-000: reconnect [ 806.035904][T11952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.096790][T11952] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.134632][T11952] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.164556][T11952] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.193872][T11952] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.492414][ T3939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.525642][ T3939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.276877][ T7357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.315341][ T7357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.313224][T12136] netlink: 'syz.0.1653': attribute type 1 has an invalid length. [ 809.388248][T12136] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1653'. [ 809.666895][T12136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1653'. [ 810.496252][T12146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 810.701603][ T30] audit: type=1800 audit(1755776581.883:37): pid=12152 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1656" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 810.915681][ T5939] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 810.935776][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 811.109944][ T5939] usb 5-1: Using ep0 maxpacket: 8 [ 811.428174][ T5939] usb 5-1: unable to get BOS descriptor or descriptor too short [ 811.496448][ T5939] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 811.546800][ T10] usb 3-1: config 0 has an invalid interface number: 130 but max is 0 [ 811.573396][ T5939] usb 5-1: can't read configurations, error -71 [ 811.583481][ T10] usb 3-1: config 0 has no interface number 0 [ 811.607353][ T10] usb 3-1: config 0 interface 130 altsetting 0 endpoint 0x8B has an invalid bInterval 68, changing to 10 [ 811.634036][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e2.ca [ 811.654306][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.679663][ T10] usb 3-1: config 0 descriptor?? [ 811.709587][ T10] usb 3-1: Found UVC 0.00 device (8086:0b5b) [ 811.720021][ T10] usb 3-1: No valid video chain found. [ 813.140868][ T10] usb 3-1: USB disconnect, device number 36 [ 813.782752][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1665'. [ 814.056733][T12176] evm: overlay not supported [ 814.074018][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.388691][T12176] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1664'. [ 814.402960][T12182] netlink: 'syz.4.1667': attribute type 1 has an invalid length. [ 814.412986][T12182] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1667'. [ 814.454711][T12182] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1667'. [ 814.675663][T11947] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 815.077195][T11947] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 815.214821][T11947] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.350111][T11947] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 815.454023][T11947] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.586654][T11947] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 815.606060][T11947] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 815.638300][T11947] usb 3-1: Product: syz [ 815.647575][T11947] usb 3-1: Manufacturer: syz [ 815.681514][T11947] cdc_wdm 3-1:1.0: skipping garbage [ 815.689036][T11947] cdc_wdm 3-1:1.0: skipping garbage [ 815.795301][T11947] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 816.174685][T12212] Bluetooth: MGMT ver 1.23 [ 817.032522][ T30] audit: type=1326 audit(1755776588.213:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12217 comm="syz.0.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f658ebe9 code=0x7ffc0000 [ 817.120976][ T30] audit: type=1326 audit(1755776588.213:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12217 comm="syz.0.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f658ebe9 code=0x7ffc0000 [ 817.232161][ T30] audit: type=1326 audit(1755776588.263:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12217 comm="syz.0.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59f658ebe9 code=0x7ffc0000 [ 817.264181][ T10] usb 3-1: USB disconnect, device number 37 [ 817.352701][ T30] audit: type=1326 audit(1755776588.263:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12217 comm="syz.0.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f658ebe9 code=0x7ffc0000 [ 817.623745][T12223] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 817.885803][ T30] audit: type=1326 audit(1755776588.263:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12217 comm="syz.0.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f59f6590a7c code=0x7ffc0000 [ 817.973873][ T30] audit: type=1326 audit(1755776588.263:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12217 comm="syz.0.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f59f65909b4 code=0x7ffc0000 [ 818.021659][ T30] audit: type=1326 audit(1755776588.263:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12217 comm="syz.0.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f59f65909b4 code=0x7ffc0000 [ 818.983016][ T30] audit: type=1326 audit(1755776588.263:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12217 comm="syz.0.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f658ebe9 code=0x7ffc0000 [ 819.017028][ T30] audit: type=1326 audit(1755776588.263:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12217 comm="syz.0.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59f658ebe9 code=0x7ffc0000 [ 819.101739][ T30] audit: type=1326 audit(1755776588.263:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12217 comm="syz.0.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f658ebe9 code=0x7ffc0000 [ 819.277644][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1681'. [ 820.145690][ T5939] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 820.366308][ T5939] usb 6-1: Using ep0 maxpacket: 8 [ 820.391229][ T5939] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 820.952159][ T5939] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 821.010201][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1683'. [ 821.025720][ T5939] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 821.033880][ T5939] usb 6-1: Product: syz [ 821.041014][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1683'. [ 821.095725][ T5939] usb 6-1: Manufacturer: syz [ 821.125612][ T5939] usb 6-1: SerialNumber: syz [ 822.215697][ T5939] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 822.224589][ T5939] visor 6-1:1.0: probe with driver visor failed with error -110 [ 823.367729][ T43] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 823.606582][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 823.851884][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.871623][T11947] usb 6-1: USB disconnect, device number 2 [ 823.900996][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 823.931620][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.971850][ T43] usb 1-1: config 0 descriptor?? [ 823.994708][ T43] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 824.800807][T12281] netlink: 'syz.1.1692': attribute type 1 has an invalid length. [ 824.881403][ T43] gspca_vc032x: reg_w err -110 [ 824.905440][ T43] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 825.074471][T12281] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1692'. [ 825.384041][T12281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1692'. [ 825.660349][T12291] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1694'. [ 827.442309][T12304] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1699'. [ 827.888356][T12305] xt_connbytes: Forcing CT accounting to be enabled [ 827.895144][T12305] set match dimension is over the limit! [ 828.766316][ T43] usb 1-1: USB disconnect, device number 37 [ 829.099596][ T5829] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 829.635780][ T5829] usb 2-1: Using ep0 maxpacket: 8 [ 829.643403][ T5829] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 829.658803][ T5829] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 829.672691][ T5829] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 829.696225][ T5829] usb 2-1: Product: syz [ 829.700634][ T5829] usb 2-1: Manufacturer: syz [ 829.742304][ T5829] usb 2-1: SerialNumber: syz [ 830.290168][ T5829] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 830.327489][ T5829] visor 2-1:1.0: probe with driver visor failed with error -110 [ 830.600166][T12343] netlink: 'syz.5.1708': attribute type 10 has an invalid length. [ 832.852236][ T5844] Bluetooth: hci0: command 0x0405 tx timeout [ 832.913117][ T5939] usb 2-1: USB disconnect, device number 34 [ 833.103491][T12343] team0: Port device wlan1 added [ 833.846472][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 835.241435][T12376] netlink: 'syz.2.1719': attribute type 1 has an invalid length. [ 835.252628][T12376] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1719'. [ 835.284619][T12376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1719'. [ 835.558316][T12387] fuse: Bad value for 'user_id' [ 835.563297][T12387] fuse: Bad value for 'user_id' [ 835.635789][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 837.395697][ T43] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 837.466223][ T9] usb 5-1: device descriptor read/64, error -71 [ 838.106717][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 838.144243][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 838.169157][ T43] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 838.193964][ T43] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 838.214776][ T43] usb 1-1: Product: syz [ 838.302670][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 838.646041][ T43] usb 1-1: Manufacturer: syz [ 838.665888][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 838.694548][ T9] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 838.703969][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.715873][ T9] usb 5-1: Product: syz [ 838.722500][ T9] usb 5-1: Manufacturer: syz [ 838.727365][ T9] usb 5-1: SerialNumber: syz [ 838.735262][ T9] usb 5-1: config 0 descriptor?? [ 838.749140][ T43] usb 1-1: SerialNumber: syz [ 838.954445][T12396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.966472][T12396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.978132][ T43] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 839.657722][T12417] fuse: blksize only supported for fuseblk [ 839.937214][ T43] usb 1-1: Handspring Visor / Palm OS: port 163, is for unknown use [ 839.949695][ T43] usb 1-1: Handspring Visor / Palm OS: port 51, is for unknown use [ 839.962128][ T43] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 839.975036][ T43] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 839.992493][ T43] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 840.125343][ T43] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 840.152480][ T43] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 840.185973][ T43] usb 1-1: USB disconnect, device number 39 [ 840.222199][ T43] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 840.252034][ T43] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 840.282272][ T43] visor 1-1:1.0: device disconnected [ 840.460381][T12425] netlink: 'syz.1.1732': attribute type 1 has an invalid length. [ 840.471524][T12425] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1732'. [ 840.482864][T12425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1732'. [ 840.574648][T12426] vivid-000: disconnect [ 840.582751][T12426] vivid-000: reconnect [ 841.027650][ T9] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 841.075124][T12430] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1735'. [ 841.085621][ T9] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 841.301234][T12430] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1735'. [ 841.374860][ T9] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 841.427117][ T9] usb 5-1: USB disconnect, device number 36 [ 841.439485][T12430] netlink: 'syz.0.1735': attribute type 1 has an invalid length. [ 841.687291][T12430] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1735'. [ 842.566289][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1739'. [ 843.292857][T12442] netlink: 10616 bytes leftover after parsing attributes in process `syz.2.1739'. [ 845.390318][T12471] netlink: 'syz.0.1744': attribute type 1 has an invalid length. [ 845.405811][T12471] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1744'. [ 845.415005][T12471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1744'. [ 845.696115][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 845.735634][ T43] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 845.868033][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 845.880568][ T9] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 845.889926][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.917989][ T9] usb 5-1: Product: syz [ 845.925121][ T9] usb 5-1: Manufacturer: syz [ 845.932139][ T9] usb 5-1: SerialNumber: syz [ 846.007188][ T9] usb 5-1: config 0 descriptor?? [ 846.125693][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 846.147471][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 846.161220][ T43] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 846.186414][ T43] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 846.194867][ T43] usb 3-1: Product: syz [ 846.208974][ T43] usb 3-1: Manufacturer: syz [ 846.213801][ T43] usb 3-1: SerialNumber: syz [ 847.049045][T12474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.081277][T12474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.472935][ T43] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 847.517129][ T43] usb 3-1: Handspring Visor / Palm OS: port 163, is for unknown use [ 847.597125][T12494] fuse: blksize only supported for fuseblk [ 849.259021][ T43] usb 3-1: Handspring Visor / Palm OS: port 51, is for unknown use [ 849.290319][ T43] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 849.301168][ T43] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 849.898207][ T9] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 849.911711][ T43] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 849.922427][ T9] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 850.231022][ T43] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 850.291869][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1755'. [ 850.404189][T12507] netlink: 10616 bytes leftover after parsing attributes in process `syz.4.1755'. [ 850.515997][ T9] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 850.563316][ T43] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 850.601609][ T9] usb 5-1: USB disconnect, device number 37 [ 850.633418][ T43] usb 3-1: USB disconnect, device number 38 [ 850.662376][ T43] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 850.719379][ T43] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 850.739950][T12515] netlink: 'syz.1.1758': attribute type 1 has an invalid length. [ 850.776095][ T43] visor 3-1:1.0: device disconnected [ 850.778123][T12515] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1758'. [ 850.928308][T12512] netlink: 14528 bytes leftover after parsing attributes in process `syz.5.1756'. [ 850.943924][T12515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1758'. [ 851.143982][T12521] KVM: debugfs: duplicate directory 12521-6 [ 851.403141][T12531] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1761'. [ 851.446504][T12531] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1761'. [ 851.539713][T12531] netlink: 'syz.4.1761': attribute type 1 has an invalid length. [ 851.575631][T12531] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1761'. [ 853.196769][T12552] loop6: detected capacity change from 0 to 524287999 [ 853.208114][T12552] Buffer I/O error on dev loop6, logical block 0, async page read [ 853.219101][T12552] Buffer I/O error on dev loop6, logical block 0, async page read [ 853.231143][T12552] Buffer I/O error on dev loop6, logical block 0, async page read [ 853.239762][T12552] Buffer I/O error on dev loop6, logical block 0, async page read [ 853.288852][T12540] netlink: 'syz.0.1762': attribute type 1 has an invalid length. [ 853.317695][T12552] Buffer I/O error on dev loop6, logical block 0, async page read [ 853.326761][T12552] Buffer I/O error on dev loop6, logical block 0, async page read [ 853.345448][T12552] Buffer I/O error on dev loop6, logical block 0, async page read [ 853.361915][T12552] Buffer I/O error on dev loop6, logical block 0, async page read [ 853.374318][T12552] ldm_validate_partition_table(): Disk read failed. [ 853.384913][T12552] Buffer I/O error on dev loop6, logical block 0, async page read [ 853.399367][T12552] Buffer I/O error on dev loop6, logical block 0, async page read [ 853.408271][T12552] Dev loop6: unable to read RDB block 0 [ 853.662578][T12552] loop6: unable to read partition table [ 853.668774][T12552] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 854.951306][T12570] netlink: 'syz.0.1771': attribute type 1 has an invalid length. [ 854.960440][T12570] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1771'. [ 854.970657][T12570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1771'. [ 855.293234][ T5982] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 856.335738][T11947] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 856.338188][ T5982] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 856.353313][ T5982] usb 3-1: config 8 has no interface number 0 [ 856.359674][ T5982] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 856.371002][ T5982] usb 3-1: config 8 interface 177 has no altsetting 0 [ 856.485638][T11947] usb 5-1: Using ep0 maxpacket: 8 [ 856.592885][ T5982] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 856.607853][T11947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.629792][ T5982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.632879][T11947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.654056][T11947] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 856.654284][T12565] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 856.667502][T11947] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 856.687174][T11947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.716902][T11947] usb 5-1: config 0 descriptor?? [ 856.947119][ T5982] usb 3-1: string descriptor 0 read error: -71 [ 856.994383][ C0] ir_toy 3-1:8.177: out urb status: -71 [ 856.998014][T12587] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1776'. [ 857.010710][T12587] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1776'. [ 857.027675][T12587] netlink: 'syz.2.1776': attribute type 1 has an invalid length. [ 857.036263][T12587] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1776'. [ 857.085689][ T5829] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 857.153805][T11947] logitech 0003:046D:C293.0008: bogus close delimiter [ 857.170625][T11947] logitech 0003:046D:C293.0008: item 0 1 2 10 parsing failed [ 857.192720][T11947] logitech 0003:046D:C293.0008: parse failed [ 857.206804][T11947] logitech 0003:046D:C293.0008: probe with driver logitech failed with error -22 [ 857.271640][ T5829] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.506275][ T5982] ir_toy 3-1:8.177: could not write reset command: -110 [ 857.745992][ T5982] ir_toy 3-1:8.177: probe with driver ir_toy failed with error -110 [ 858.275849][ T5829] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 858.285354][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1777'. [ 858.330541][ T5982] usb 3-1: USB disconnect, device number 39 [ 858.348674][ T5829] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 858.359366][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 858.637457][ T5829] usb 6-1: SerialNumber: syz [ 859.387548][T12585] sctp: [Deprecated]: syz.5.1775 (pid 12585) Use of int in maxseg socket option. [ 859.387548][T12585] Use struct sctp_assoc_value instead [ 860.288186][ T5982] usb 5-1: USB disconnect, device number 38 [ 863.084364][T12619] set match dimension is over the limit! [ 863.668636][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'. [ 863.981495][ T5829] usb 6-1: 0:2 : does not exist [ 864.624276][ T5829] usb 6-1: USB disconnect, device number 3 [ 864.694121][T12630] netlink: 200 bytes leftover after parsing attributes in process `syz.5.1788'. [ 864.717331][T12630] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1788'. [ 864.788759][T12630] netlink: 'syz.5.1788': attribute type 1 has an invalid length. [ 864.829724][T12630] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1788'. [ 866.072847][T12645] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1793'. [ 866.550565][T12660] Cannot find set identified by id 0 to match [ 866.956663][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 867.584278][T12674] xt_bpf: check failed: parse error [ 868.598441][T12316] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 868.895067][T12316] usb 1-1: Using ep0 maxpacket: 32 [ 868.911220][T12316] usb 1-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.485911][ T5844] Bluetooth: hci5: command 0x1003 tx timeout [ 869.486308][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 869.506139][T12316] usb 1-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 869.506177][T12316] usb 1-1: config 0 interface 0 has no altsetting 0 [ 869.506978][T12316] usb 1-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 869.507035][T12316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.642811][T12316] usb 1-1: config 0 descriptor?? [ 870.379673][T12316] asus 0003:048D:CE50.0009: item fetching failed at offset 2/5 [ 870.418047][T12316] asus 0003:048D:CE50.0009: Asus hid parse failed: -22 [ 870.421451][T12316] asus 0003:048D:CE50.0009: probe with driver asus failed with error -22 [ 871.103657][T12688] vivid-001: disconnect [ 872.231484][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1807'. [ 872.303668][T12688] vivid-001: reconnect [ 872.371657][ T9] usb 1-1: USB disconnect, device number 40 [ 872.404355][T12692] comedi comedi4: bad chanlist[0]=0x0002002f chan=47 range length=2 [ 872.675019][T12703] syz.4.1808: attempt to access beyond end of device [ 872.675019][T12703] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 873.397824][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1809'. [ 873.456257][T12316] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 873.458437][T12704] netlink: 10616 bytes leftover after parsing attributes in process `syz.5.1809'. [ 873.475775][T12704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 873.486166][T12704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.533376][T12704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 873.541315][T12704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.635740][T12316] usb 5-1: Using ep0 maxpacket: 16 [ 873.638797][T12316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.723342][T12316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.825667][T12316] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 873.878312][T12316] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 873.910224][T12316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.952963][T12316] usb 5-1: config 0 descriptor?? [ 874.870025][T12316] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 875.111834][T12316] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 875.119068][T12316] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 875.126148][T12316] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 875.133552][T12316] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 875.150006][T12316] input: HID 0955:7214 Haptics as /devices/virtual/input/input73 [ 875.325453][T12717] xt_bpf: check failed: parse error [ 875.843059][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.952993][ T5939] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 876.003020][T12316] shield 0003:0955:7214.000A: Registered Thunderstrike controller [ 876.015805][T12316] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 876.128351][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 876.160277][ T5939] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 876.237039][ T5829] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 876.250503][T12316] usb 5-1: USB disconnect, device number 39 [ 876.259269][ T5829] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 876.304534][ T5829] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 876.342389][ T5829] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 876.342479][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.563493][ T5939] usb 2-1: Product: syz [ 876.816907][ T5939] usb 2-1: Manufacturer: syz [ 876.821591][ T5939] usb 2-1: SerialNumber: syz [ 876.854659][ T5939] usb 2-1: config 0 descriptor?? [ 877.487454][T12712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.559484][T12712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.878948][T12724] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.887825][T12724] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.896596][T12724] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.905614][T12724] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.226679][T12741] fuse: blksize only supported for fuseblk [ 879.675144][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1820'. [ 880.126850][ T5939] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 880.135215][ T5939] peak_usb 2-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 880.756394][ T5939] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 881.158839][ T5939] usb 2-1: USB disconnect, device number 35 [ 883.517518][T12784] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 883.523799][T12784] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 883.798539][T12784] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 883.804520][T12784] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 883.814346][T12784] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 883.820521][T12784] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 883.831056][T12784] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 883.837088][T12784] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 883.848655][T12784] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 883.854612][T12784] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 884.137163][T12781] ieee802154 phy1 wpan1: encryption failed: -22 [ 884.511726][T12790] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 884.518336][T12790] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 884.576303][T12790] vhci_hcd vhci_hcd.0: Device attached [ 884.949672][ T10] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 884.965600][ T5939] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 885.189764][ T5939] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 885.212996][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.248750][ T5939] usb 5-1: Product: syz [ 885.252981][ T5939] usb 5-1: Manufacturer: syz [ 885.267978][ T5939] usb 5-1: SerialNumber: syz [ 885.294023][ T5939] usb 5-1: config 0 descriptor?? [ 886.437138][ T5939] usb 5-1: Firmware version (0.0) predates our first public release. [ 886.474621][T12811] batadv0: entered promiscuous mode [ 886.486963][T12811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.782407][ T5939] usb 5-1: Please update to version 0.2 or newer [ 886.891287][T12791] usb 41-1: recv xbuf, 0 [ 886.920520][T11443] vhci_hcd: stop threads [ 886.924908][T11443] vhci_hcd: release socket [ 886.939703][T11443] vhci_hcd: disconnect device [ 886.976069][ T10] vhci_hcd: vhci_device speed not set [ 887.048100][ T5939] usb 5-1: USB disconnect, device number 40 [ 887.895645][T12316] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 888.035846][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 888.118928][T12316] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 888.132819][T12316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.252538][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 888.355697][T12316] usb 3-1: config 0 descriptor?? [ 888.357589][ T9] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 888.370953][ T9] usb 2-1: config 0 has no interface number 0 [ 888.476304][T12316] pwc: Philips SPC 900NC USB webcam detected. [ 888.751443][ T9] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=b0.c6 [ 888.767944][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.793341][ T9] usb 2-1: config 0 descriptor?? [ 888.879139][ T9] speedtch 2-1:0.168: speedtch_bind: wrong device class 176 [ 888.888674][ T9] speedtch 2-1:0.168: usbatm_usb_probe: bind failed: -19! [ 889.269018][T12316] pwc: send_video_command error -71 [ 889.274457][T12316] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 889.286954][T12316] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 889.321824][T12316] usb 3-1: USB disconnect, device number 40 [ 890.500326][T12846] vivid-000: disconnect [ 890.510437][T12846] vivid-000: reconnect [ 891.366494][ T9] usb 2-1: USB disconnect, device number 36 [ 891.589104][T12855] xt_bpf: check failed: parse error [ 892.228016][T12856] netlink: 'syz.5.1847': attribute type 4 has an invalid length. [ 892.235943][T12856] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1847'. [ 892.273187][T12856] : renamed from bond0 (while UP) [ 894.238377][T12875] xt_TPROXY: Can be used only with -p tcp or -p udp [ 895.736984][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1856'. [ 898.505610][ T10] IPVS: starting estimator thread 0... [ 898.679151][T12911] IPVS: using max 37 ests per chain, 88800 per kthread [ 898.695024][T12913] loop6: detected capacity change from 0 to 63 [ 899.796464][T12930] xt_bpf: check failed: parse error [ 900.476245][T12926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1866'. [ 901.307290][T12943] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1870'. [ 903.197246][T12316] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 903.366043][T12316] usb 2-1: Using ep0 maxpacket: 32 [ 903.557547][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1873'. [ 903.702066][T12316] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 903.716869][T12316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.890036][T12316] usb 2-1: Product: syz [ 903.894786][T12316] usb 2-1: Manufacturer: syz [ 903.899943][T12316] usb 2-1: SerialNumber: syz [ 903.912828][T12316] usb 2-1: config 0 descriptor?? [ 904.161639][T12956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.208739][T12956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.183782][T12988] netlink: 'syz.2.1882': attribute type 10 has an invalid length. [ 906.868082][T12992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'. [ 907.131911][T12998] xt_SECMARK: invalid mode: 2 [ 907.491084][T13001] xt_hashlimit: max too large, truncated to 1048576 [ 907.746621][ T9] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 908.297063][T12316] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 908.337427][T12316] peak_usb 2-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 908.460840][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1888'. [ 908.674503][T12316] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 908.718521][T13018] netlink: 10616 bytes leftover after parsing attributes in process `syz.2.1888'. [ 909.493739][T12316] usb 2-1: USB disconnect, device number 37 [ 909.756358][T13027] FAULT_INJECTION: forcing a failure. [ 909.756358][T13027] name failslab, interval 1, probability 0, space 0, times 0 [ 909.821945][T13027] CPU: 0 UID: 0 PID: 13027 Comm: syz.5.1892 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 909.821980][T13027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 909.821994][T13027] Call Trace: [ 909.822003][T13027] [ 909.822012][T13027] dump_stack_lvl+0x189/0x250 [ 909.822043][T13027] ? __pfx____ratelimit+0x10/0x10 [ 909.822067][T13027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 909.822091][T13027] ? __pfx__printk+0x10/0x10 [ 909.822126][T13027] ? ref_tracker_alloc+0x318/0x460 [ 909.822154][T13027] should_fail_ex+0x414/0x560 [ 909.822182][T13027] should_failslab+0xa8/0x100 [ 909.822207][T13027] kmem_cache_alloc_noprof+0x73/0x3c0 [ 909.822228][T13027] ? skb_clone+0x212/0x3a0 [ 909.822255][T13027] skb_clone+0x212/0x3a0 [ 909.822280][T13027] __netlink_deliver_tap+0x404/0x850 [ 909.822326][T13027] ? netlink_deliver_tap+0x2e/0x1b0 [ 909.822358][T13027] netlink_deliver_tap+0x19c/0x1b0 [ 909.822390][T13027] netlink_unicast+0x730/0x8e0 [ 909.822431][T13027] netlink_sendmsg+0x805/0xb30 [ 909.822472][T13027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 909.822512][T13027] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 909.822535][T13027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 909.822567][T13027] __sock_sendmsg+0x21c/0x270 [ 909.822597][T13027] ____sys_sendmsg+0x505/0x830 [ 909.822647][T13027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 909.822689][T13027] ? import_iovec+0x74/0xa0 [ 909.822724][T13027] ___sys_sendmsg+0x21f/0x2a0 [ 909.822761][T13027] ? __pfx____sys_sendmsg+0x10/0x10 [ 909.822837][T13027] ? __fget_files+0x2a/0x420 [ 909.822861][T13027] ? __fget_files+0x3a0/0x420 [ 909.822898][T13027] __x64_sys_sendmsg+0x19b/0x260 [ 909.822934][T13027] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 909.822983][T13027] ? __pfx_ksys_write+0x10/0x10 [ 909.823000][T13027] ? rcu_is_watching+0x15/0xb0 [ 909.823030][T13027] ? do_syscall_64+0xbe/0x3b0 [ 909.823058][T13027] do_syscall_64+0xfa/0x3b0 [ 909.823080][T13027] ? lockdep_hardirqs_on+0x9c/0x150 [ 909.823103][T13027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.823123][T13027] ? clear_bhb_loop+0x60/0xb0 [ 909.823150][T13027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.823171][T13027] RIP: 0033:0x7f3030d8ebe9 [ 909.823190][T13027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 909.823209][T13027] RSP: 002b:00007f3031beb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 909.823227][T13027] RAX: ffffffffffffffda RBX: 00007f3030fb5fa0 RCX: 00007f3030d8ebe9 [ 909.823239][T13027] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 909.823250][T13027] RBP: 00007f3031beb090 R08: 0000000000000000 R09: 0000000000000000 [ 909.823261][T13027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.823271][T13027] R13: 00007f3030fb6038 R14: 00007f3030fb5fa0 R15: 00007fff73908228 [ 909.823298][T13027] [ 910.472769][T13032] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1890'. [ 910.517481][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1891'. [ 910.620824][T13024] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 910.628720][T13024] overlayfs: failed to set xattr on upper [ 910.634815][T13024] overlayfs: ...falling back to redirect_dir=nofollow. [ 910.695861][T13024] overlayfs: ...falling back to index=off. [ 910.703424][T13024] overlayfs: ...falling back to uuid=null. [ 912.089105][T13046] vivid-000: disconnect [ 912.094240][T13046] vivid-000: reconnect [ 912.672380][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'. [ 914.853750][T13062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1901'. [ 914.867687][T13062] openvswitch: netlink: Flow actions attr not present in new flow. [ 915.107676][T13064] set match dimension is over the limit! [ 916.223583][T13081] vivid-000: disconnect [ 916.230902][T13081] vivid-000: reconnect [ 916.842271][T13078] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 917.054215][ T3550] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.224323][ T3550] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.288332][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'. [ 917.321245][T13083] netlink: 10616 bytes leftover after parsing attributes in process `syz.1.1907'. [ 917.382285][ T3550] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.469377][ T3550] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.683134][T13087] vivid-000: disconnect [ 917.694826][T13087] vivid-000: reconnect [ 917.794343][ T3550] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.834522][ T3550] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.868049][T13090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1910'. [ 918.272402][ T3550] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 918.335639][ T3550] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.369223][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1910'. [ 919.151716][ T3550] bridge_slave_1: left allmulticast mode [ 919.165680][ T3550] bridge_slave_1: left promiscuous mode [ 919.173937][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.204022][ T3550] bridge_slave_0: left allmulticast mode [ 920.210664][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 920.221200][ T3550] bridge_slave_0: left promiscuous mode [ 920.221810][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 920.242790][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 920.247301][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.263742][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 920.275437][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 920.299014][ T8678] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 920.309211][ T8678] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 920.317492][ T8678] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 920.325849][ T8678] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 920.334285][ T8678] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 920.940210][T13123] netlink: 153 bytes leftover after parsing attributes in process `syz.2.1917'. [ 922.371150][ T3550]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.385966][ T8678] Bluetooth: hci0: command tx timeout [ 922.421224][ T3550]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.475738][ T3550]  (unregistering): Released all slaves [ 922.519669][ T3550] bond0 (unregistering): Released all slaves [ 922.868392][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1918'. [ 923.035376][ T3550] [ 923.037791][ T3550] ====================================================== [ 923.044832][ T3550] WARNING: possible circular locking dependency detected [ 923.051893][ T3550] 6.16.0-syzkaller #0 Not tainted [ 923.056941][ T3550] ------------------------------------------------------ [ 923.063990][ T3550] kworker/u8:6/3550 is trying to acquire lock: [ 923.070173][ T3550] ffff88807d3b0e00 (team->team_lock_key#6){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 923.079842][ T3550] [ 923.079842][ T3550] but task is already holding lock: [ 923.087237][ T3550] ffff88802f970768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 923.097671][ T3550] [ 923.097671][ T3550] which lock already depends on the new lock. [ 923.097671][ T3550] [ 923.108097][ T3550] [ 923.108097][ T3550] the existing dependency chain (in reverse order) is: [ 923.117130][ T3550] [ 923.117130][ T3550] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 923.124872][ T3550] lock_acquire+0x120/0x360 [ 923.129927][ T3550] __mutex_lock+0x182/0xe80 [ 923.134988][ T3550] ieee80211_open+0xed/0x1f0 [ 923.140119][ T3550] __dev_open+0x470/0x880 [ 923.144995][ T3550] netif_open+0xaa/0x170 [ 923.149779][ T3550] dev_open+0x125/0x260 [ 923.154474][ T3550] team_add_slave+0xb36/0x2840 [ 923.159783][ T3550] do_set_master+0x530/0x6d0 [ 923.164922][ T3550] do_setlink+0xcf0/0x41c0 [ 923.169887][ T3550] rtnl_newlink+0x160b/0x1c70 [ 923.175189][ T3550] rtnetlink_rcv_msg+0x7cc/0xb70 [ 923.180672][ T3550] netlink_rcv_skb+0x205/0x470 [ 923.185984][ T3550] netlink_unicast+0x75c/0x8e0 [ 923.191296][ T3550] netlink_sendmsg+0x805/0xb30 [ 923.196606][ T3550] __sock_sendmsg+0x21c/0x270 [ 923.201832][ T3550] ____sys_sendmsg+0x505/0x830 [ 923.207138][ T3550] ___sys_sendmsg+0x21f/0x2a0 [ 923.212357][ T3550] __x64_sys_sendmsg+0x19b/0x260 [ 923.217838][ T3550] do_syscall_64+0xfa/0x3b0 [ 923.222878][ T3550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.229307][ T3550] [ 923.229307][ T3550] -> #0 (team->team_lock_key#6){+.+.}-{4:4}: [ 923.237497][ T3550] validate_chain+0xb9b/0x2140 [ 923.242794][ T3550] __lock_acquire+0xab9/0xd20 [ 923.247999][ T3550] lock_acquire+0x120/0x360 [ 923.253046][ T3550] __mutex_lock+0x182/0xe80 [ 923.258098][ T3550] team_del_slave+0x32/0x1c0 [ 923.263277][ T3550] team_device_event+0x285/0xa20 [ 923.268756][ T3550] notifier_call_chain+0x1b3/0x3e0 [ 923.274412][ T3550] unregister_netdevice_many_notify+0x15d8/0x2320 [ 923.281476][ T3550] unregister_netdevice_queue+0x33c/0x380 [ 923.287733][ T3550] _cfg80211_unregister_wdev+0x165/0x590 [ 923.293905][ T3550] ieee80211_remove_interfaces+0x49a/0x6d0 [ 923.300250][ T3550] ieee80211_unregister_hw+0x5d/0x2c0 [ 923.306165][ T3550] mac80211_hwsim_del_radio+0x275/0x460 [ 923.312248][ T3550] hwsim_exit_net+0x584/0x640 [ 923.317485][ T3550] ops_undo_list+0x497/0x990 [ 923.322615][ T3550] cleanup_net+0x4c5/0x800 [ 923.327571][ T3550] process_scheduled_works+0xade/0x17b0 [ 923.333647][ T3550] worker_thread+0x8a0/0xda0 [ 923.338771][ T3550] kthread+0x70e/0x8a0 [ 923.343375][ T3550] ret_from_fork+0x3fc/0x770 [ 923.348493][ T3550] ret_from_fork_asm+0x1a/0x30 [ 923.353795][ T3550] [ 923.353795][ T3550] other info that might help us debug this: [ 923.353795][ T3550] [ 923.364031][ T3550] Possible unsafe locking scenario: [ 923.364031][ T3550] [ 923.371489][ T3550] CPU0 CPU1 [ 923.376862][ T3550] ---- ---- [ 923.382234][ T3550] lock(&rdev->wiphy.mtx); [ 923.386756][ T3550] lock(team->team_lock_key#6); [ 923.394236][ T3550] lock(&rdev->wiphy.mtx); [ 923.401277][ T3550] lock(team->team_lock_key#6); [ 923.406238][ T3550] [ 923.406238][ T3550] *** DEADLOCK *** [ 923.406238][ T3550] [ 923.414390][ T3550] 5 locks held by kworker/u8:6/3550: [ 923.419678][ T3550] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 923.430586][ T3550] #1: ffffc9000bab7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 923.441133][ T3550] #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 923.450476][ T3550] #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 923.460343][ T3550] #4: ffff88802f970768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 923.471249][ T3550] [ 923.471249][ T3550] stack backtrace: [ 923.477145][ T3550] CPU: 0 UID: 0 PID: 3550 Comm: kworker/u8:6 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 923.477167][ T3550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 923.477180][ T3550] Workqueue: netns cleanup_net [ 923.477206][ T3550] Call Trace: [ 923.477214][ T3550] [ 923.477221][ T3550] dump_stack_lvl+0x189/0x250 [ 923.477243][ T3550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 923.477261][ T3550] ? __pfx__printk+0x10/0x10 [ 923.477284][ T3550] ? print_lock_name+0xde/0x100 [ 923.477306][ T3550] print_circular_bug+0x2ee/0x310 [ 923.477329][ T3550] check_noncircular+0x134/0x160 [ 923.477351][ T3550] validate_chain+0xb9b/0x2140 [ 923.477372][ T3550] ? lockdep_unlock+0x89/0x120 [ 923.477397][ T3550] ? validate_chain+0x897/0x2140 [ 923.477421][ T3550] __lock_acquire+0xab9/0xd20 [ 923.477444][ T3550] ? team_del_slave+0x32/0x1c0 [ 923.477466][ T3550] lock_acquire+0x120/0x360 [ 923.477480][ T3550] ? team_del_slave+0x32/0x1c0 [ 923.477505][ T3550] ? __mutex_trylock_common+0x153/0x260 [ 923.477527][ T3550] __mutex_lock+0x182/0xe80 [ 923.477546][ T3550] ? team_del_slave+0x32/0x1c0 [ 923.477568][ T3550] ? rcu_is_watching+0x15/0xb0 [ 923.477589][ T3550] ? team_del_slave+0x32/0x1c0 [ 923.477612][ T3550] ? __pfx___mutex_lock+0x10/0x10 [ 923.477630][ T3550] ? bond_netdev_event+0xd9/0xe80 [ 923.477657][ T3550] ? __pfx___mutex_lock+0x10/0x10 [ 923.477675][ T3550] ? __pfx_bond_netdev_event+0x10/0x10 [ 923.477705][ T3550] team_del_slave+0x32/0x1c0 [ 923.477729][ T3550] team_device_event+0x285/0xa20 [ 923.477747][ T3550] notifier_call_chain+0x1b3/0x3e0 [ 923.477769][ T3550] unregister_netdevice_many_notify+0x15d8/0x2320 [ 923.477796][ T3550] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 923.477817][ T3550] ? __lock_acquire+0xab9/0xd20 [ 923.477842][ T3550] unregister_netdevice_queue+0x33c/0x380 [ 923.477861][ T3550] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 923.477882][ T3550] _cfg80211_unregister_wdev+0x165/0x590 [ 923.477908][ T3550] ieee80211_remove_interfaces+0x49a/0x6d0 [ 923.477929][ T3550] ? __pfx_synchronize_rcu+0x10/0x10 [ 923.477949][ T3550] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 923.477969][ T3550] ? rcu_is_watching+0x15/0xb0 [ 923.477990][ T3550] ieee80211_unregister_hw+0x5d/0x2c0 [ 923.478017][ T3550] mac80211_hwsim_del_radio+0x275/0x460 [ 923.478045][ T3550] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 923.478074][ T3550] hwsim_exit_net+0x584/0x640 [ 923.478097][ T3550] ? __pfx_hwsim_exit_net+0x10/0x10 [ 923.478120][ T3550] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 923.478146][ T3550] ops_undo_list+0x497/0x990 [ 923.478171][ T3550] ? __pfx_ops_undo_list+0x10/0x10 [ 923.478198][ T3550] cleanup_net+0x4c5/0x800 [ 923.478223][ T3550] ? __pfx_cleanup_net+0x10/0x10 [ 923.478246][ T3550] ? _raw_spin_unlock_irq+0x23/0x50 [ 923.478260][ T3550] ? process_scheduled_works+0x9ef/0x17b0 [ 923.478278][ T3550] ? process_scheduled_works+0x9ef/0x17b0 [ 923.478295][ T3550] process_scheduled_works+0xade/0x17b0 [ 923.478325][ T3550] ? __pfx_process_scheduled_works+0x10/0x10 [ 923.478349][ T3550] worker_thread+0x8a0/0xda0 [ 923.478372][ T3550] ? __kthread_parkme+0x7b/0x200 [ 923.478394][ T3550] kthread+0x70e/0x8a0 [ 923.478417][ T3550] ? __pfx_worker_thread+0x10/0x10 [ 923.478441][ T3550] ? __pfx_kthread+0x10/0x10 [ 923.478463][ T3550] ? _raw_spin_unlock_irq+0x23/0x50 [ 923.478478][ T3550] ? lockdep_hardirqs_on+0x9c/0x150 [ 923.478493][ T3550] ? __pfx_kthread+0x10/0x10 [ 923.478515][ T3550] ret_from_fork+0x3fc/0x770 [ 923.478532][ T3550] ? __pfx_ret_from_fork+0x10/0x10 [ 923.478550][ T3550] ? __switch_to_asm+0x39/0x70 [ 923.478570][ T3550] ? __switch_to_asm+0x33/0x70 [ 923.478589][ T3550] ? __pfx_kthread+0x10/0x10 [ 923.478611][ T3550] ret_from_fork_asm+0x1a/0x30 [ 923.478639][ T3550] [ 923.861256][ T3550] team0: Port device wlan1 removed [ 923.958511][T13142] vivid-000: disconnect [ 923.965694][T13142] vivid-000: reconnect [ 924.466014][ T8678] Bluetooth: hci0: command tx timeout [ 924.728057][ T3550] hsr_slave_0: left promiscuous mode [ 924.733806][ T3550] hsr_slave_1: left promiscuous mode [ 924.787569][ T3550] veth1_macvtap: left promiscuous mode [ 924.793215][ T3550] veth0_macvtap: left promiscuous mode [ 924.811198][ T3550] veth1_vlan: left promiscuous mode [ 924.816832][ T3550] veth0_vlan: left promiscuous mode [ 924.954280][ T3550] team0 (unregistering): Port device team_slave_1 removed [ 924.983535][ T3550] team0 (unregistering): Port device team_slave_0 removed [ 925.124436][T13110] chnl_net:caif_netlink_parms(): no params data found [ 925.181653][T13110] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.194992][T13110] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.202811][T13110] bridge_slave_0: entered allmulticast mode [ 925.211142][T13110] bridge_slave_0: entered promiscuous mode [ 925.219791][T13110] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.227114][T13110] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.234321][T13110] bridge_slave_1: entered allmulticast mode [ 925.241365][T13110] bridge_slave_1: entered promiscuous mode [ 925.263703][T13110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.282390][T13110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.311066][T13110] team0: Port device team_slave_0 added [ 925.320369][T13110] team0: Port device team_slave_1 added [ 925.320936][ T3550] IPVS: stop unused estimator thread 0... [ 925.342046][T13110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.349817][T13110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.376315][T13110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.388680][T13110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.396258][T13110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.423149][T13110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.455455][T13110] hsr_slave_0: entered promiscuous mode [ 925.461818][T13110] hsr_slave_1: entered promiscuous mode [ 925.467853][T13110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 925.475419][T13110] Cannot create hsr debugfs directory [ 925.741757][T13110] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 925.761374][T13110] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 925.770317][T13110] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 925.779323][T13110] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 925.829911][T13110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.846282][T13110] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.857243][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.864377][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.877791][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.884927][ T6366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.018973][T13110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 926.178728][T13110] veth0_vlan: entered promiscuous mode [ 926.188229][T13110] veth1_vlan: entered promiscuous mode [ 926.210907][T13110] veth0_macvtap: entered promiscuous mode [ 926.220294][T13110] veth1_macvtap: entered promiscuous mode [ 926.233891][T13110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.247673][T13110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.257854][T13110] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.266930][T13110] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.275696][T13110] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.284434][T13110] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.311040][T13110] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 926.332695][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.334462][T13110] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 926.341334][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.365574][T11443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.373422][T11443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.545706][ T8678] Bluetooth: hci0: command tx timeout [ 928.628030][ T8678] Bluetooth: hci0: command tx timeout