last executing test programs: 15m22.085383199s ago: executing program 2 (id=2293): open$dir(&(0x7f0000000000)='./file0\x00', 0x20240, 0x4f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1735c48291a13441110d9e074ad8d8d891cc61d30bd34a4d3ae42f513f0fc7c410a8c0b5"], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000040)=0x9) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 15m19.801951811s ago: executing program 2 (id=2296): ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a00020005", 0x1d}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 15m19.545748851s ago: executing program 2 (id=2299): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000000)) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r5, 0x50dc85624ea6cf59, 0xe000000, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 15m18.576057s ago: executing program 2 (id=2305): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0x5) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a01, 0x0) ioctl$COMEDI_CMDTEST(r5, 0x8050640a, &(0x7f0000000040)={0x0, 0x1, 0x4, 0xb81b, 0x12, 0xb54, 0x1, 0x6, 0xffffffff, 0xa, 0x0, 0x7, 0x0, 0x0, 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x19) r7 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) setsockopt$packet_int(r4, 0x107, 0x10, &(0x7f00000000c0)=0x81, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) 15m16.641149304s ago: executing program 2 (id=2308): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000006", @ANYRES16=r1, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x840) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120185ee81086835a8819bc30d4639e80000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb00"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="201019"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES16]}, 0x7a) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x8001}}) open(0x0, 0x64842, 0x389b0d52417bb201) 15m12.882866282s ago: executing program 2 (id=2319): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x60002, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080), 0x10, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4048015}, 0x811) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffc, 0x20493859, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001040)="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", 0x217) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475d", 0x68}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957", 0x2d}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9", 0x12}, {&(0x7f0000000280)="6bc1ff4f2a598b761e43e47f18efe5f61236ebce4498d465ae0d1e38bcdd4c192f246524ddbd8547007ef863dda74a4e8d4e5825ea1aaf9c", 0x38}], 0x7, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) socket$netlink(0x10, 0x3, 0x14) fanotify_init(0x202, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x118, &(0x7f0000000000)=0x1, 0x0, 0x4) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 14m57.736142712s ago: executing program 32 (id=2319): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x60002, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080), 0x10, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4048015}, 0x811) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffc, 0x20493859, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001040)="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", 0x217) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475d", 0x68}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957", 0x2d}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9", 0x12}, {&(0x7f0000000280)="6bc1ff4f2a598b761e43e47f18efe5f61236ebce4498d465ae0d1e38bcdd4c192f246524ddbd8547007ef863dda74a4e8d4e5825ea1aaf9c", 0x38}], 0x7, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) socket$netlink(0x10, 0x3, 0x14) fanotify_init(0x202, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x118, &(0x7f0000000000)=0x1, 0x0, 0x4) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 7m15.41995111s ago: executing program 1 (id=4109): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080)=0xffffffff, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xfffffffd, 0x6576, 0xa}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r4, 0x7b0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x80001, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x3, 0x95, 0x7, 0x7ffbfffd}]}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x28) shutdown(r5, 0x0) 7m14.914835129s ago: executing program 3 (id=4111): r0 = socket$kcm(0x2, 0x3, 0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) prlimit64(r1, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8a}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, 0x0, 0x0) write$sndseq(r4, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x3, 0x5, 0xff, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x38) 7m14.527770713s ago: executing program 1 (id=4116): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) r2 = semget$private(0x0, 0x4, 0x5c3) semop(r2, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000280)={{0x2, r0, 0x0, 0x0, r1, 0x40, 0x7f}, 0x7, 0x519, 0x0, 0x0, 0x0, 0x0, 0x3}) 7m13.552787453s ago: executing program 1 (id=4119): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0xf6, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7de", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) 7m13.214371118s ago: executing program 1 (id=4120): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(0x0, 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={@local, @local, @mcast2, 0x6, 0x91fe, 0x7, 0x500, 0xef9, 0x1000022}) mount$bind(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)='./file1\x00', 0x0, 0x1c5489, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 7m13.103391805s ago: executing program 1 (id=4122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r1, 0x0, 0x0, 0x141, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x40010) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010006f708040000001b20000000020000021c000480180001800e00010069006d656479617465000000040002800900010059797ab0000000000900020073797a320000000014941836955446b92a8b2a30f900"/112], 0x70}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) request_key(&(0x7f0000001600)='keyring\x00', &(0x7f0000001640)={'syz', 0x0}, &(0x7f0000001680)='[.!,\x00', 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) timer_create(0xc34373f6749da572, &(0x7f00000000c0)={0x0, 0x10, 0x2, @tid=r2}, &(0x7f0000000300)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r3, &(0x7f0000001b40)={0x2020}, 0x205c) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchownat(r5, &(0x7f0000000280)='.\x00', 0x0, 0x0, 0x1000) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1}) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 7m13.02145338s ago: executing program 3 (id=4123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140003001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000000c0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0) 7m12.421756359s ago: executing program 3 (id=4124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 7m7.74041626s ago: executing program 3 (id=4132): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(0x0, 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={@local, @local, @mcast2, 0x6, 0x91fe, 0x7, 0x500, 0xef9, 0x1000022}) mount$bind(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)='./file1\x00', 0x0, 0x1c5489, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 7m7.558308331s ago: executing program 3 (id=4133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) close(0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='tracefs\x00', 0x10a000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) gettid() sendmmsg$unix(r3, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x8001}}], 0x2, 0x80) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, 0x1b, "00000000000000000000ffff00"}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) r6 = syz_open_pts(r2, 0x0) r7 = dup3(r6, r2, 0x0) read$FUSE(r7, &(0x7f000000a380)={0x2020}, 0x2020) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) read$watch_queue(r7, 0x0, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, &(0x7f0000000300)=0x18) 7m6.597167205s ago: executing program 1 (id=4136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0xfff2, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = epoll_create1(0x80000) io_setup(0xdda, &(0x7f00000000c0)=0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$getregset(0x4204, r9, 0x200, &(0x7f0000000740)={0x0}) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x2}]) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140)={0x2016}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0xe6, 0x3}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000070500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r10], 0x4c}}, 0x40000) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r11 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r11, 0x0, 0x0) 7m6.339575297s ago: executing program 33 (id=4136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0xfff2, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = epoll_create1(0x80000) io_setup(0xdda, &(0x7f00000000c0)=0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$getregset(0x4204, r9, 0x200, &(0x7f0000000740)={0x0}) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x2}]) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140)={0x2016}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0xe6, 0x3}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000070500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r10], 0x4c}}, 0x40000) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r11 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r11, 0x0, 0x0) 7m6.231498977s ago: executing program 3 (id=4140): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"]) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) socket$netlink(0x10, 0x3, 0x12) lremovexattr(0x0, &(0x7f00000001c0)=@known='trusted.syz\x00') write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) r5 = semget(0x2, 0x4, 0x200) semop(r5, &(0x7f0000000040)=[{0x0, 0x7fff, 0x1800}, {0x0, 0x8001}], 0x2) semtimedop(r5, &(0x7f0000000300)=[{0x2, 0x8, 0x1800}, {0x0, 0x7, 0x1000}], 0x2, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x100}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) 7m5.995192765s ago: executing program 34 (id=4140): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"]) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) socket$netlink(0x10, 0x3, 0x12) lremovexattr(0x0, &(0x7f00000001c0)=@known='trusted.syz\x00') write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) r5 = semget(0x2, 0x4, 0x200) semop(r5, &(0x7f0000000040)=[{0x0, 0x7fff, 0x1800}, {0x0, 0x8001}], 0x2) semtimedop(r5, &(0x7f0000000300)=[{0x2, 0x8, 0x1800}, {0x0, 0x7, 0x1000}], 0x2, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x100}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) 2m59.672802103s ago: executing program 6 (id=5162): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd27, 0x1000000, {0x0, 0x0, 0x12, r5, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x72c5, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffffff92}]}]}]}}]}, 0xa4}, 0x1, 0x7a00, 0x0, 0x4010}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100000000000000e94900000000808500d1006d00400095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3f, 0x9, 0x0, 0x0, {0x4}, [@typed={0x4, 0x3ffd}, @typed={0x8, 0x8, 0x0, 0x0, @binary='a^&/'}]}, 0x20}}, 0x4004080) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3d, 0x7fff0000}]}) r8 = creat(&(0x7f0000000100)='./file0\x00', 0xc2) fsync(r8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000000200)={0x2020}, 0x2020) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008, 0x10010, r9, 0xd6000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCFLSH(r9, 0x400455c8, 0x2) 2m59.339936641s ago: executing program 6 (id=5165): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) pipe2$watch_queue(0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r4) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x94) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000700)={0x2ce, 0x7d, 0x0, {{0x500, 0x18d, 0x0, 0x4, {0x8, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0xf1, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9a\x01\x00\x00\x00\x00\x00\x00\x00K\xaf\x05\x00\x00\x00\x00\x00\xfd\xd0\xfbm\xcef\x88\xfd\xb7\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00\x14\x80\x84l\\\xba6\x1a\xe8\xcem\x10=zwt\x1bV5\x9d \x94\x9ccZ\x8f\xf3*X.\xdd!THFz[\x18\x9e}\xdaO \xa7\xd4R\xcf\x8b\x91\xc2\\kF9/\re\xd4\xa0\xdc\x1f\xf8R\x1f\x18af\xa0\xceZ\xbb^\xbb\x99\xf1\x12\x87\x1f\xfc\xc0}d{\xc0\xd4\xc1\xda\xb4\x9f\x80-\x0e\xca9\xb4\xb9\xe3\xec\xe8\xb0\xa1\xb0\x9fV\xc2\x0e\xea\xd6\xed\xe3\xf4X\x8cYK\xe9\x05\xd3\x0e\"l\x91\x8fY\xfbx\x80S\xbc\xe0[\xae\x9e\x18]\xe3\x06\x9f^\xa1 x&\xa5\xb7S\x15\xe8\x02(Yn\xd3\xe2U=\xd4\x96\x889\xd4}'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x2ce) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f00000000c0)) 2m56.248631856s ago: executing program 6 (id=5179): socket$nl_route(0x10, 0x3, 0x0) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000180)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r1 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8932, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_map={0xfffffffeffffffff, 0x7fff, 0x4, 0xc, 0x8, 0x2}}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 2m54.723053613s ago: executing program 6 (id=5187): gettid() r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) syz_usb_connect(0x5, 0x36, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r8, @ANYBLOB="71e79f"], 0x3c}, 0x1, 0x600000000000000, 0x0, 0x10}, 0x0) 2m53.544024642s ago: executing program 6 (id=5190): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x2c}}, 0x0) 2m53.497791927s ago: executing program 6 (id=5191): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r5 = syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x0, 0xffffffff}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) write$dsp(r4, &(0x7f0000000200)="97", 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r5, 0x567, 0x0, 0x8, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r9, &(0x7f0000000180)="3d8d9947326e7ba3c1ca15177c539f10", 0x10) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x8, 0x0, 0x9, 0x0, 0x203, 0x200000000000000}, 0x0, &(0x7f0000000100)={0x18, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x87b1, 0x197f}, 0x0, 0x0) splice(r8, 0x0, r10, 0x0, 0x4ffe6, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d520987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) socket$vsock_stream(0x28, 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r12, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40814}, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) r13 = pidfd_getfd(r1, r11, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a1001, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2m38.411195505s ago: executing program 35 (id=5191): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r5 = syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x0, 0xffffffff}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) write$dsp(r4, &(0x7f0000000200)="97", 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r5, 0x567, 0x0, 0x8, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r9, &(0x7f0000000180)="3d8d9947326e7ba3c1ca15177c539f10", 0x10) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x8, 0x0, 0x9, 0x0, 0x203, 0x200000000000000}, 0x0, &(0x7f0000000100)={0x18, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x87b1, 0x197f}, 0x0, 0x0) splice(r8, 0x0, r10, 0x0, 0x4ffe6, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) socket$vsock_stream(0x28, 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r12, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40814}, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) r13 = pidfd_getfd(r1, r11, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a1001, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2m35.81171144s ago: executing program 5 (id=5256): socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc6010f201000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) 2m35.484373411s ago: executing program 5 (id=5257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x7ffffff, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffc, 0x5e1}, 0x10}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0xc048aeca, &(0x7f00000011c0)=@vmx={0x6, 0x0, 0x2080, {0xd000, 0x60000, {0x3}, 0x0, 0x800}, {"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", "08dd68a3f9d04a1fded3a8b608396390101c93cc6f827d1f68b467ab568f34a832c5c3310e4c4230f543ccbef159aeba07e893ced6c65fd98413036f5ddc7ae776df1a0b576ba217b6b765e352f5a028f63633088cc9713e6761630858287b180284001d34004fa562f8a19f2c6ef27bc8fa8096b9985d831634d815e2ba5d3f5e69f8d4fbe75e2ea858e79f7551f31eebe9b9488c49b51b70a062430a8695fbb46e282135785ac2cee8d7820c0c32223672dc81ddde49f8eab2ec63c7ecddae2482e310ddf790b7760e163bad0f9bb903cd1bac8918f56a59a14476db8f5a4977cfaea477a1d7d7721cd199df11bf7ed75a9007c3fe056acf095c3c557810a9e40c2c7ba8e195873890c2ace92190756499eae9152ca184edbcfa7fdac49a20dbc8b280cd3e7af9e8bd3bf72e2c5d2dd615bd680e445abcd56f580bd3cfbb40edd02db22c382790f66b13f362a9bc8fe533b1d83b958965194eb52614ad054df7500f9eeb64ffc6f35ff1b31750081b7a6ebd0974996c77ccad8d8717aac4dd5c1361dfa502f0705108b5449bec0b73ad41b914c67d969780a59583a149e6fa1f9555d696a875c923b0375f926a5eaaef1f2725bd9acf4c1bfae30d0d3c14ba25773c39e4c0c1f7b9f1b97d0812411604e7314b11c3a8a4555ea629d41ad572a093b6c8f95acd2d0c643be85b63e9d72896b97e272db384bdcfa553d167e725e9c170f73bae303feb2109801135f1b324ce25b4859eb95a4f71022e9ab198add9cfb18a42ac2bb072e2b87e15592ee8bd9e59deae7e9365c7e6c8fe2bca6442c3417cbd92cb34fadcba3be2ce9af4c540d57520498916282ec32f08dec8f8c56c4dd6aaa986b56839c104be5f783e16698a1d7f206884687a5b0a48424bf83be13da0cc56b7c962bb996b7ee1c665ccc5f0e138a605db75835478132015d48152c84d108069944c4fe689e7784171dc31539ee19f07e7dc2b86b990880d82602fef3c5b260d403245bc990f7cffb8dcb4a60ef6d24243d72c92069b386651a080fcbc2c336ff150fd3cfe1b7bc739c05c5adc4211ae763dce6fa7456ff05f9e4550b8eff781f0816d9552b160038a1e98c5434dd584a71af1d784d16defe4153608de03ac15552f6865adb03e366b9c7af57c3ba337168552b659940d70a3a5b86b43d180865506829980a810eb483b9c54483fbb9736030339f7915bdf43d9d16d511d02df104eb8f17019296e3d5c5e5737ebd74a0aa3253441df83fa981ade1c0beabe9a626d25b6523975a079ce519ea6ae10b0739ed213a53e4e9c07539cf3a30d71cd96d2e09647dabcdda5b9b504a088a60acfad9b050c9d957d8e682d40f189469fcdda3b1d39d0e19129fdcfedf9b1f592840cdfd344b1ba41dd15ef1685b3f8c3b294e0e1d6a28743daffe1391183a9ca0772f693bf9f6561c15856b13172eb867899ee06ce3ab0cd9b4ebd6c767689c7ce0b7b50a360ee74bdb096d4ff280e967b600cab558de3af05e8fd6753f0c654baaa8e0f8e81cb13a90b3030bd7595706523e98d9eb4f8f747cb3c71ea6aff330b13d527ed5110f81131fd0c4b84eeecd721240dba08c74d9368a7f722d6bbbb3a5fc0bb200bcac21b172c10e1799803fa7c85deb25638b1e255b937fab96952ff2953eeb57d03d9e23d10cd5b387a45aa50580ef573d8426247281113ed9787f5c496109f25a3b4a212078baf490f5c72086fa0c36c16d493f8f34bc011f2ca08483546657c1cd9cd0a3a70b94f68bef53fa64a512678200da206d14f2bb9d43836e958f4f7b85cc52dc72f4a91ec3e1756587f7b37e1d63ef2abf493d07ad363a41fa7965748322eca3efac89c83c9f913c815601f5fa6507256a4cbd16a516ea7f313468df4344f86e5ba948760b7a5b8e68c2b094905d405660d73cf240bae339391d30da557958c1cf461e1ebefb578a828d94d549a17a9f7405a20089507c9f8a9de27f7ab62c97086faceec10eba3c56d6c5e42365f950ca94b84b0af884c33de72c0c7db569ac1fc097a3fbe5881c3d496c6694c147e91580c17d0b049ae8a4fa051521c1b34b5792e16cda7d5aeb60629c894e11101693e77869319ff973cb07f4666aeef7114fe367fab55372dfe887fda1d95a81ea8e11fca00dc5dc8524b89a0c27f73aa96a9dfc0f94fa619cd3133b1d45d167a3167b7f09bbcebb25b651c11b5703f6b339c7ed97047ad9ec1597877e8712ffeb838abbd2f07d6d8e60cc71a613dbc4089db58c3951de64e89c9b6ced1ce3431bff63d3e51672a9b4ba62c906b0a5d2ab797805e569da49d3a62cc83db40a553f9926aeaa9bafb31c94c88c7c1124aad7ef76868b784f613744e37c1d7fd936031c476c123a6bb79b253ef3872eb418fc6c91ee0f516d372dad1936ab70fa7920cab6608ae4bd22ea9b026a6bf7b7e128bdddcfa03a7d16ebb4558679ee685c32bd74fe9d10707956ad612f48baff83e114ab80f898e968575ee07b8f84904a8a90fb79fd1ab7f8b1cb40683b4ffd2b9eb041a990fab2db5d648bf61e325c79cbbaa967647ee133c296c57d666766f1d06e0b1c74d0ec45b521fd133e5486932b7f4ad70a47890e3e527d69451b57b6a6e7288147c25477d233832403b6ee0c211d8071197cd54d0a77ec16e2b96fbfb6009882a7c68be821bc7dd0e67a9fd091f4a68fa31b941c445d1b914b60a0be44dc22feeb4a2cdc347296ce86e1184a05249c9d3ba252ce927bbdb2bf62683791ac64bd779c95fa206de5d393d46f1a89d399943eca44a6604aedf38c14d9cc4876d8d52f864c37a5682fd7b41d6247552e6fde58f0a70ca17996d501301aff64926a53bfabdaacc03d635542aea4504e75ccf69bf12dbc963e7afce944ee3c5a4b38af75d292d4260b37b6fcfc97e6411f81cea4a5959b705769a127efe597c16eac0641e1c9dc9435235ebb87778d85c7d6645e14ca5000bd16637e1d4ba7d31ed7359c6dca68e6c6402f32afad4244b8d3c88f0d9ed9ac8acd8f5c0ae19766cf19901613ee72101db2f95cb41112d6318fa23e6681a1ae737d8927fa71531a59d23d842df58031dbe49a285e508c31cf9805ef68b7bb4d00f44cd252a520d7caa0d5ef1a173b5b2dd8aacfa2a58426f58049d3ea365ab48336fc8439b70a83f1d98efe0904184c8d032bb7967a09556f258360cf3968cc7df4abe8d8b84a36dbb4fb569861ee5184f5b444da762e1bac0e7c9e2b5375d20f30fa7406c7a0bce063dc47f9284b69bf75266de3be1f0710bbb38423057d6f2865a3aea4edb0a41eef220921cc715fc5ede38f803c2845466d4926b26b207a05647c19bb0b68923148df0d377d21aef138a5e80e67c648de88c44054567c24372e8b6f2fdb3bf2965274c341e8fc3e2870ebc1a884bd4200268e0ef757a108e58b1950c3b5e170d15df4831aac36d3ab96bbedbe8dacc25530ec851d2c33d2bf3529a5800507735a40dfc833d089fec024f7f3c06ec64e684bca52b45721b33744cb543f626b94cf8828105fd2580722642d67241a48ff2a717caa82254875581e4e8c5844cee5886e00dd9dab7ddb633c8b8d0112cd6ed368e0ada956f46a0f47b526bd0207da70697609242573e3b7e2c4ced31141745674a2968c9f989647b2f14b37aff685eff5eb39d06aaae59f0019b110fc42df03fd4822b03e7dfaf69aef13aa7f90babf9a2ce4f15f3b5ded5aa71abe0b59ee5f27d4d02af4135029ee21ead64ab211717e0ea6e3287c876bee2b87f7061c5b7455071a58ed5953a7d998dbb740562bee16787fd8d3ebe63c3446a0d8413ba95745ac094d7abcf3fa0f04c9396660bba98add4a4f7612fa22de67d952c259b04722dfed671d8d14cc5f80f2e557c58557f851de4136673f6630918f6542389d2471c69e920180db84bb8c17e88724a2c16805aaa002672459e246acece4868e7d8e4d698558e87ecfa00eee2221fa881fb947fab4e4b22242ba1757cc31390d5aba3d603f7eda072aa4770e75dda5334dd572bb9aa4dc15a9737a97c5310565ab7366ba73393728ea3ae8e2695b331e93ff43e084ae8002e0baefb989c88b4cb92c28584877314a9ed7cebdd26ec83a523b6fcdf8765dd2d5505c05a8f551d2dd350231ac6097a4ed0f9cd065a7ba3b4aa66e28e6ca3d2f318b691907df859c89273d2adb095df14aa85df1ac40e37ce22642e3866f29be2c9ff713210fbf3f446ddb2190cbaa4a28ae4d97a49eb4e012cbe621c6535ba585a81139779299d5bbe6075925e23f5cca8f91653546b319eb18f4e13ad8d52c7230994a95855979e3bded12c6e3e526598397c6b1e457d0df4d56814a1f47b893b793cf4cf86052c3da1c0c51d697f9670e0e46ba37d6088582ca9d3297860c6b481b9b18bedccfb4ca8ff4e0e32a3433f7ffd2dc84168dd3bc40f455e1049a5575b7fa0536ba067774acfd4789089f4a95d19ccb91a30ba63f355c7dcc5ae92d539691df23d31ebef4c1fc6d910ca595d69b83a5af8b41c8b86ed2ac574626a4f6b0adcca886be2882d91e5754c533ca209f0398a89a4536a61c3e8a16673b4bf1c30bfcf62f3294c6f66dd7a9cf53ac4e8add5de31120ad5304ce5a1d430638442634adb0fa394529e64f0f2fb6f38f2e83c879cdbe87fc3455d02d11c87b91012079a670f00a5f9722425bf7dcdf3b7709d2b0f630f304b0f83c98d9de07f4c15cfa890ba4aef3bf3abdaec724040824ba8917128dc84b25b85d32c9160e29f88d7388f2d4fa7a4c116c9ec3730ab7f75ff4224d61ae37ba752007480774167a94ecb75312940c1125d64d4e5fd44a5453ea2bffbec9cfcf7f51e1f9ab4b4961fdadcdf49efdb5e39f64db47c3759d94521c7f746720f421b06ca149a6a629006e50c4ab0536b52f62e21bd37030519dd929f90fb72abd7c736dbce767a5eea9da28dc23f553616f0e54b5bb50f6031aafa57ab530717e0484fed4358ca4a3f84423c2bfc5ee65af84a12ee1c22015d5149bec57fc34efa342cd194c4ee88ee8379b980f6a47bf295f30e97b030323eef2ccba89ede230a27ab8b175b5f96f229a2ad260358550efe298f84323f6b64258f1894dfbb76ae9e10110fa7ca9bc295e322bb0e849ae427eee3f7215d08dbb5db2ca3c0cb0037f2d5c4573efe54b5131f5897bc7455c14dd3c03fc7e6107be3156c11f33f1e162a26fe594f6f39bee1390e28c5282a3dbdbc13879e3024957a8b7d5a40d14808070c20c51542ecda93f7adb4c441bfb7426914fcb7dea9e18d33ae4eb28d8e30623c8c3207dc5a61997ee50b3163e9f5a69bae6b586a24bb046a5ba8f2f9b8296bb7c2110947e49a9ac7ec95dd3ff763000f28fe0eb127b3f8bf9c34df18ea6d482310875087726c672d134730614c7b8b1aa21de7019092dfbd034324490fdcb67d94740a65ef4e6faefc2d9cc82a92700526280c95247e9fff81de390d2d865ae3ca64b596c4aec76f6b2737730e15128e020c7fdfbc83fe1c80fea38d47e04229bf007eda6e1ae350423ba466c5735c1795412431b6c4523f2fbca6edc0644516615e204632254a8ba5265be37b11c10513709a8ff1846673aa360549da86c290e8a5e881d0ac6cb21aaaa9e775091fd0f958f6c0c262dad61b83cea7bd660a43de9574f946533059a9e077f34fa08dc710722f4b819fa03b3de1f8cd5fe1ebc4ba48200c004395e149a598ce57f120b96c3e49622129bb62bf3207ec821269ca23c36870422d9905094d884b6be19b69e0478a56a14fff07be0fb9dc"}}) 2m35.104570748s ago: executing program 5 (id=5261): r0 = socket(0xa, 0x5, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040), 0x6, 0xa0000) dup(r1) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000008411000007000000ac1414aa00000000300000000000000084000000010000000100050001000000050000000900000001000080050000007b000000", @ANYRES32, @ANYBLOB="200000000000000084000000080000"], 0x68, 0x4000094}, 0x24000052) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x8001, 0x2, [0x4, 0x9]}, 0xc) 2m34.275775731s ago: executing program 5 (id=5264): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c40)=""/102376, 0x18fe8) ioprio_set$pid(0x3, 0x0, 0x6000) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x17b, 0x4c801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x3) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2m32.711984004s ago: executing program 5 (id=5267): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005180)={0x2020}, 0x2020) (async, rerun: 64) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async, rerun: 64) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000680)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x7562, 0x213, 0xa5, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, 0x1c}}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x6, 0x2b, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) (async, rerun: 32) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async, rerun: 32) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) 2m31.51837387s ago: executing program 5 (id=5271): syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="8580f832f644186c5f4bed0508004515001c00670000020290780a01bc434a05949a090102ff60915beccb4c7983711a4b"], 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000008e704090000000000000109022400010200a008090400fe01030004000921fffffd0122050009058103ff030701fd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000040)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="400205000000050f4de4e8"], 0x0}, 0x0) dup(0xffffffffffffffff) 12.283530249s ago: executing program 4 (id=5836): syz_emit_vhci(&(0x7f0000002b00)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9, 0xda}}}, 0x7) memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) futex(0x0, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r3, 0x0, 0x0, 0x40000140, 0x0, 0x0) 11.217250277s ago: executing program 4 (id=5839): openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000180)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0, 0x40000000}) r1 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8932, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_map={0xfffffffeffffffff, 0x7fff, 0x4, 0xc, 0x8, 0x2}}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 9.034074167s ago: executing program 4 (id=5841): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000380)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000340)=0x1, 0x4) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x26, &(0x7f0000000140)={0x5, 0xf, 0x26, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "d45157207957ada56e1a7e32e5d2593f"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x80, 0x8}]}}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}, &(0x7f0000000480)=0xc) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0xffffff1f, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, 0x2000, 0x68acf}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x7d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x7, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "81eaef"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffffd, 0x100, 0x0, 0x77}, {0x6, 0x24, 0x1a, 0x2, 0x24}, [@obex={0x5, 0x24, 0x15, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x2, 0x4, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x8, 0x48}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x610, 0x8, 0x11, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xfe, 0x81, 0x7}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x4, 0x15, 0xa, 0x40, 0x2}, 0x43, &(0x7f0000000100)={0x5, 0xf, 0x43, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x5, 0xc, 0x9, 0x98f3}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x5, 0xee00, 0x3ff, [0x3e80, 0x30, 0xc000, 0xc000]}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x2, 0xf, 0x2, [0xff, 0x3f00, 0xc0]}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x420}}, {0xac, &(0x7f00000001c0)=@string={0xac, 0x3, "591ecb150b19f70be903a19953b23aff82ca20dc21c65a735676ad95722ae28ce8067e70612008e4a4593a988faa93448057036993aa121d954147fe45c5eab4ac3635142a5f8cf1f532f7b24b5de116b2c58988326c7f170938cfc52619e641585ce2b3924fd72e3189e865c169bf3c8860147684036d18f97635c0668f418a7714434d6b339922e76c007ff6d4dc9d2fb630b056b22c5bce76e0ad7b77a140ba6d6ca3c4c0523f311b"}}]}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x4c, 0x30, 0x1, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d77e17208680630b326a01020301090224000100041000090456100289f0b40809050602ff0309000009058206"], 0x0) 4.997667007s ago: executing program 4 (id=5849): msgrcv(0x0, 0x0, 0xfffffffffffffeac, 0x1, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x44, 0x30, 0x800, 0x70bd28, 0x200000, {}, [{0x30, 0x1, [@m_tunnel_key={0x0, 0x19, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x0, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x0, 0x4, @broadcast}, @TCA_TUNNEL_KEY_NO_CSUM={0x0, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x0, 0x2, {{0x101, 0xd99a, 0x4, 0xff, 0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_TUNNEL_KEY_ENC_KEY_ID]}, {0x0, 0x6, "61ca7e0885d798a5669f5f021cbaa017d33677b0b8b2f1a1108f14b71c125d25724fdc939893e4caeb0388e79fc9ec4a8a3523c6d9ed913813e251ad3ff35e34ba632d38a1e26840f267fa6a1117e69358e65f5f9bc5a19dfcc47d369fc9c620e32e90172bc53a59caaebf4d18ac958339ea2c9b985f43f5b58a17266dafda7c8c1e57402bd0b2a576b75e7a36e56cef14377d9cb1"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x3}}}}]}]}, 0x44}}, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0xa0c00, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000500)='./cgroup\x00', &(0x7f0000000040)='efs\x00', 0x208000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000000c0)=0x755) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) tkill(0x0, 0x2) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x149040, 0x2) fcntl$setlease(r4, 0x400, 0x0) close(0x3) truncate(&(0x7f0000000080)='./file0\x00', 0x4) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000000000fcdbdf250701f2800c0004000bac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x48810) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r7}, &(0x7f00000007c0), &(0x7f0000000640)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r7, &(0x7f00000004c0)}, 0x20) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c0007"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000440)="90e7bc", 0x3}, {0x0}, {&(0x7f00000002c0)="d6a5a87479c1f4b466100d1c655210006555e3e974fdb971b60fe5960bcd802fe3f7da93acf4e6414158438095dc8ca02f5134d635bfc8e5c5704af7e46dd4506719ff2fc92cc098786865efc9ab3fd66ceefbe88d4b86b00e4ea2a826593de679ac3994dca676f0c028a6038ff9dd69292b25dbfcfb4e8d447dacb65f81c84f7227e36398ed90ff16107fe10d8243355406f4a2da2aaee7699c89ff633bda5faaadadd7436f964ad0f591b686200d81e3462f65d23bfe9c601678741edf68b6f5f6b0e619c3ead176aea11e716374356b50fe3cc19839bc8ce18564c04e48adb847ae", 0xe3}, {0x0}], 0x4) 4.995220516s ago: executing program 7 (id=5850): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x8, 0x7ffffe39}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010000050001"], 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x4014) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close(0x3) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4048044}, 0x404c055) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x1400) unlink(&(0x7f00000002c0)='./file0\x00') rename(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3.603034444s ago: executing program 0 (id=5854): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) (async) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x6, 0x0) read$msr(r1, &(0x7f0000000080)=""/167, 0xa7) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x40002, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x8, 0x6, 0x7, 0x7}, 0x14) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil) (async) openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0x959}) (async) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000280)={{r2}, "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"}) (async) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f0000001280)={0x0, 0x10001}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001c40)={0x198, 0x0, &(0x7f0000001a00)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000013c0)={@ptr={0x70742a85, 0x1, &(0x7f00000012c0)=""/227, 0xe3, 0x200, 0x12}, @flat=@binder={0x73622a85, 0x0, 0x2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000001440)={0x0, 0x28, 0x40}}}, @exit_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001640)={@ptr={0x70742a85, 0x1, &(0x7f0000001480)=""/249, 0xf9, 0x2, 0x33}, @ptr={0x70742a85, 0x1, &(0x7f0000001580)=""/172, 0xac, 0x0, 0x26}, @flat=@weak_handle={0x77682a85, 0x1}}, &(0x7f00000016c0)={0x0, 0x28, 0x50}}, 0x1000}, @release={0x40046306, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001700)={@flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x5, 0x0, 0x40}}, &(0x7f0000001780)={0x0, 0x18, 0x30}}}, @enter_looper, @increfs_done={0x40106308, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000017c0)={@fda={0x66646185, 0x3, 0x2, 0x3}, @fda={0x66646185, 0xa, 0x1, 0x3f}, @flat=@binder={0x73622a85, 0x100a, 0x1}}, &(0x7f0000001840)={0x0, 0x20, 0x40}}, 0x1000}, @request_death, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001940)={@fda={0x66646185, 0x4, 0x2, 0x1e}, @flat=@handle={0x73682a85, 0x1, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000001880)=""/177, 0xb1, 0x0, 0x2e}}, &(0x7f00000019c0)={0x0, 0x20, 0x38}}}], 0x7a, 0x0, &(0x7f0000001bc0)="9b864db80046ea1bb8dbcf035baf51865499c977a9bd198fba8fdbe39445ac934cb1870e7ccafeca591db8be3eff6caac05b014e7b24d72e5812953d76252938439b2ba4d968fa650dce452cc5e239d79a00e1f7fa6fed0448ab9c98b8002dc324b7318cd7c8b5e8dd3e4d2cc5082d82efed7842c36815dfb385"}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001c80), 0x2, 0x0) write$FUSE_OPEN(r3, &(0x7f0000001cc0)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x10}}, 0x20) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000001d00)) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001d40)={r2, 0xffffffff, {0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x2, 0xf, 0x5, "bbcadb1dd636cc60f5bfcf9dffad994b06290829b12b43da216892071818bc038b25369a9149c36d4e6e2f21f47ef754d0c4aea9c5a9e5029c372fe1763044a2", "45d4c22543d24428f75864e82a802be7a6a9fd11b2fd2d2818584937fb92c2f03196c50bb49d628b5137b17519935e2a03d90a286594644ad27084ff7851137e", "693fb297ca3db24ec1798ea79e53de5cc2bd1fd126a6c4e0837525b0e98a2d2a", [0x7, 0x5]}}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001e80)={0x1fe, 0x2, 0x60000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) getsockname$packet(r2, &(0x7f0000001f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001f40)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001f80)={'batadv0\x00', 0x0}) (async) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000001fc0)={@mcast2, 0x0}, &(0x7f0000002000)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000020c0)={'syztnl1\x00', &(0x7f0000002040)={'syztnl2\x00', 0x0, 0x2f, 0x80, 0x2, 0x5, 0x47, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x40, 0x8000, 0x8, 0x9}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000002140)={'syztnl1\x00', &(0x7f0000002100)={'syztnl0\x00', 0x0, 0x700, 0x10, 0x6, 0x0, {{0x8, 0x4, 0x3, 0x5, 0x20, 0x65, 0x0, 0xd3, 0x4, 0x0, @broadcast, @empty, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x91, [@dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000002180)={'batadv0\x00', 0x0}) (async) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000021c0)={@empty, @remote, 0x0}, &(0x7f0000002200)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000004a00)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000049c0)={&(0x7f0000002240)=@newchain={0x2748, 0x64, 0x4, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {0xf, 0x10}, {0x10, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x7}}, @filter_kind_options=@f_fw={{0x7}, {0x790, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0xa}}, @TCA_FW_MASK={0x8, 0x5, 0x7}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_macvtap\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'ip6tnl0\x00'}, @TCA_FW_POLICE={0x464, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x5, 0x7, 0x1, 0xb, 0x44cd, 0x4, 0x101, 0x7, 0x7, 0x2, 0x8, 0x14000, 0x4, 0x81, 0xb, 0x5, 0xa84, 0x10000, 0x8, 0x7fff, 0x2, 0xa3, 0x5, 0x8, 0x8, 0x7ff, 0x4, 0x6, 0x4, 0x1b, 0x0, 0x4, 0x6, 0x1, 0x1, 0x8000, 0x7, 0xd, 0x7, 0x2, 0xc, 0x7, 0x1, 0x2, 0x7, 0x0, 0x8, 0xfffffffd, 0xad, 0x9, 0xf4, 0x9, 0x8, 0x40759f64, 0x2, 0x0, 0x5e2, 0x800, 0xf94, 0x1, 0xcc00, 0x16, 0x8000, 0x9, 0x9, 0x800, 0x1, 0x0, 0xc, 0x5, 0xe276, 0x6, 0x4577a084, 0x800, 0xa, 0x4, 0xc, 0x64, 0x7, 0x7, 0x19, 0x200, 0xc, 0xfffffff9, 0x5, 0x8, 0x5, 0x2800, 0x4, 0x6, 0x0, 0x1, 0x1, 0x1, 0x7, 0x4, 0x99c44954, 0xd, 0xff, 0x2, 0x6, 0x5, 0xffffffff, 0xfffffffc, 0x6, 0x5, 0x1, 0xfc, 0x7, 0x1ff, 0x4, 0x0, 0x8001, 0x9, 0x1, 0x6, 0x3ff, 0x46e, 0x5, 0x4, 0x90, 0x2, 0x6, 0x1, 0x7, 0xffffffdb, 0x7, 0x401, 0x6, 0x2, 0xffffff00, 0x4, 0xff, 0x7ff, 0x4, 0x7, 0x0, 0x3d78dec5, 0xce77, 0x1, 0x6, 0x45, 0x0, 0x2, 0x7fff, 0xb, 0x6, 0xd, 0x3, 0x70a8356, 0xffffffff, 0xd8, 0xd5, 0x7, 0x0, 0x80000000, 0x5, 0x8, 0xfffffff7, 0x9, 0x1, 0x401, 0x3, 0x7, 0x400, 0x8, 0xa24, 0x21, 0x8, 0x7, 0x1, 0xe5, 0x4, 0x80, 0x6, 0xf3, 0x0, 0x8, 0x5, 0xe, 0x3, 0x8, 0x7, 0x6, 0x6, 0x4, 0x3ea5, 0xc, 0x1, 0x8be, 0x6, 0x4, 0x3, 0xfffffffa, 0xb29, 0x2, 0xd, 0x60000000, 0x4, 0xf2d, 0x8, 0xfffffff9, 0x3ff, 0xffff, 0x5, 0x4, 0x6b2d, 0x5, 0xa, 0x100, 0x0, 0x0, 0xfffffffd, 0x781, 0x2, 0x2, 0xfffff249, 0x40, 0x4, 0x1, 0x9b6, 0x5, 0x8, 0x9, 0x9, 0x0, 0x7fff, 0x9, 0x7, 0x6, 0xb6eb, 0xc9, 0x8, 0x9, 0x7, 0xd42b, 0x2, 0x6, 0x3, 0x0, 0x9, 0x1, 0x3, 0x8, 0x7, 0x1, 0x3, 0x9, 0xffff4c05, 0x1, 0x7, 0x2, 0x4, 0xc, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0xa, 0x8, 0x20f, {0x7, 0x0, 0x7, 0x8, 0x8, 0x5}, {0x0, 0x0, 0x0, 0x12c, 0x5, 0xa2}, 0x2, 0xff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}, @TCA_FW_ACT={0x2f0, 0x4, [@m_tunnel_key={0x16c, 0x3, 0x0, 0x0, {{0xf}, {0x90, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x24, 0x5, 0x2, 0x6, 0x5fe}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0xfffffffe, 0x8, 0x0, 0xb}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x7, 0x10000000, 0xdd5, 0x4}, 0x2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0xf, 0x8, 0x61, 0x10000}, 0x2}}]}, {0xad, 0x6, "47257f8cb5213ae33fbfb7ba3f6449f9ee6d298f1e4ccd4aaf14ae2f19f15d4641b04756120e007177e52a2fda3ca188997f135570ddcd1a558f5a4ca498538ff3314aba06d3d32c50a35f049123bccaa2cadf7d22d6489bf6467375ea693162d521c8ec1b479a3ef40e916a3306bbaf5dbc4ee230276a20a3cfce435cacb14a1660f59e3d2009b761f23aa8604b86bbc6059650658ddd297cf88d3ae58becb5209208a572ec9d1f24"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0xd8, 0x18, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfff7}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}]}, {0x6d, 0x6, "4d4214496ddcf2a41b2ffb3db1b059beffc69e453580f778edc8a863a953c3266ae0a93e0c675bd520ac3bdad39559b8591ff3cb0661e7570452dbf533397e81169ba9b57428a76bb3e3e96c1e7dfb8127b7f3ae494031c178a59c7626e0b6360fc400a1e5de865597"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0xa8, 0x14, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0x1, 0x7, 0x3, 0x5}}]}, {0x62, 0x6, "1c88adee71ed9ff79ce695ae27fa63e68c9b4136b41fe8e870e6030979dc709fdcd433305901f6e99ba5b2f5a48514ec7442b364b4bcdc07bffeda0bba4a7f49e7950774e408737aa3fcd0ef80dba0e8e3e132a1a6d0b1c35f5f19f16b99"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x1f64, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd3}, @TCA_U32_INDEV={0x14, 0x8, 'xfrm0\x00'}, @TCA_U32_MARK={0x10, 0xa, {0x3}}, @TCA_U32_SEL={0x524, 0x5, {0xc, 0x8b, 0x1, 0x200, 0x401, 0x3, 0xbdd5, 0x2, [{0x401, 0x0, 0x5, 0x9}, {0x1a99215a, 0x2, 0x200, 0x1}, {0x2, 0x800, 0x33dd}, {0x0, 0x10000, 0x101, 0x401}, {0xffff, 0x661, 0x2, 0x3ff}, {0x9, 0x1, 0x8, 0xff}, {0x3, 0x6, 0xc0000000, 0x61}, {0x109, 0x52c33102, 0x5, 0x1000}, {0xffff, 0x1, 0x6, 0x2c53}, {0xe07, 0x2, 0x8f3}, {0x6, 0x1, 0xc62, 0xe6}, {0xfffffd17, 0x4, 0xed2, 0x1}, {0x2049, 0x3, 0xb488, 0xf474}, {0xffff, 0x7fffffff, 0x9, 0x10001}, {0x2, 0x3c6, 0x0, 0x163c}, {0x3, 0x2, 0x8, 0x8000}, {0xb84, 0x4, 0x0, 0xfffffffd}, {0x2, 0x4}, {0x0, 0x80000001, 0x1, 0xb}, {0xc, 0x7ff, 0x0, 0x5}, {0x5e83, 0x5, 0x7, 0x7e180000}, {0x0, 0x1, 0x94a8, 0x9}, {0x7, 0x4, 0x5c6, 0x4}, {0x10, 0x7, 0xe, 0x8}, {0x7c118, 0x9, 0x8, 0x4}, {0x6, 0xffff1974, 0x10, 0xfffffffd}, {0xfff, 0x1000, 0x10, 0xffffff80}, {0x7, 0x3, 0xb, 0x7}, {0xffffff7f, 0x8, 0x0, 0x4}, {0x1, 0x9, 0x9, 0x5}, {0x9, 0x7, 0x4}, {0x10, 0x6, 0x8, 0xd83}, {0x800, 0x101, 0x5, 0xffff8000}, {0x2, 0x6, 0x7, 0x8001}, {0x5, 0x2, 0xffffffff, 0xe323}, {0x3, 0x5, 0x0, 0x1ff}, {0x8, 0x2, 0x7, 0x6}, {0xb, 0xffffffff, 0x8, 0xfffffc01}, {0x5, 0x0, 0x5, 0x6}, {0x3, 0xfffffff9, 0xff, 0x3b73}, {0x7, 0x7, 0x7fff, 0x6cce}, {0x4, 0x2, 0x7, 0x200}, {0x9a60, 0xfffffffc, 0x8, 0x8}, {0x3, 0x32d, 0x2, 0x2}, {0x5, 0x7, 0x7, 0x5}, {0x0, 0x10000, 0x6}, {0x7, 0x7, 0x2, 0x5}, {0x0, 0xffffffff, 0x0, 0xfffffff9}, {0x4, 0x0, 0xd5d3, 0x2}, {0x7, 0xffffff68, 0x0, 0x2}, {0x1c, 0x2, 0x7, 0x9}, {0xfffffffc, 0x4, 0x8001, 0xa745}, {0x8, 0x5, 0x8, 0xfffff8b9}, {0x101, 0xe9, 0x0, 0x80000001}, {0x40, 0x1, 0x9, 0x1}, {0x5, 0x5, 0x7, 0xafba}, {0xeb7, 0x3, 0x7, 0x4d42}, {0x0, 0x4, 0x2, 0x5c26cc67}, {0x1254, 0x1, 0x7, 0x9}, {0x4, 0x3, 0x6, 0xcc49}, {0x0, 0x0, 0x2, 0x7}, {0x401, 0x4, 0x80, 0x2}, {0x9, 0x3, 0x9, 0x7}, {0x1, 0xfffff001, 0xff, 0x6}, {0x10000, 0x8, 0x63, 0x7}, {0xf88c, 0x7, 0x44, 0x7}, {0xb9, 0xb7c, 0x400, 0xfffffffb}, {0x8, 0xfff, 0x6, 0x7}, {0x10001, 0x1, 0xffff, 0xfffffff7}, {0x6, 0x6903, 0x37a4, 0x3}, {0x3, 0x8001, 0x97b6, 0x2}, {0xff, 0xfffffff9, 0x7, 0x8}, {0x16, 0x8, 0xfffffffc, 0x6}, {0x6, 0x7, 0x5, 0xe}, {0x0, 0xb0, 0x5, 0x4}, {0x0, 0x7, 0x7, 0x368c}, {0x7fffffff, 0x1, 0x7ff, 0x8}, {0x1, 0x9, 0xe5b, 0xfa8}, {0xa, 0x1, 0x1, 0xf3d}, {0x8, 0x1, 0x8706, 0x5}, {0x400, 0xffffffff, 0x1, 0x1}]}}, @TCA_U32_POLICE={0x410, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x333, 0x7fffffff, 0x0, 0x7fff, 0x0, 0x2, 0x3, 0x8c9, 0xdb, 0x0, 0xfff, 0x7, 0x2, 0x6, 0x1, 0x2, 0x6, 0x8, 0x24b, 0x0, 0x10, 0xfffffc00, 0xfffffffc, 0x9, 0x81, 0xffffff01, 0x89, 0x0, 0x5, 0xbe, 0x2, 0x609, 0x8, 0xefc2, 0x8, 0x22c5, 0xa, 0x5, 0x6, 0x6, 0x1, 0x3, 0x5, 0x2, 0x1, 0x1, 0x100, 0x8001, 0x4, 0x7fff, 0x9, 0x3, 0x3ff, 0x0, 0x7f, 0x7, 0x9, 0x5, 0x53c8, 0x7d, 0x4, 0x7, 0xac0, 0x4, 0xee0, 0x7, 0x1, 0x2, 0x2, 0x8001, 0x2, 0x4, 0x80, 0x8, 0x400, 0x2, 0x81, 0x3, 0x1000, 0x8, 0x1, 0xfffffff9, 0x9, 0xfffffffc, 0x4, 0x40, 0xfffffff8, 0xea, 0xf, 0x9, 0x2, 0x0, 0x56fdc0b9, 0x0, 0x13, 0x81, 0xe, 0x0, 0xf8, 0x10, 0x7f, 0x7, 0x4, 0x0, 0x491, 0x4, 0x9, 0x384, 0x9, 0x8, 0x80000000, 0x4, 0x35da, 0x3, 0x2, 0x1ff, 0x4ba, 0xe, 0x80, 0x8, 0x101, 0xff, 0x7fffffff, 0xeb11, 0x3f80, 0xfffffff3, 0x55, 0x6, 0xb, 0x8, 0x10001, 0xa766, 0xe11, 0x1, 0x7, 0x9, 0xffffffba, 0xc, 0x8000, 0x7, 0x5, 0x2, 0x10, 0x4, 0x2, 0x4, 0x7, 0x8, 0xc, 0x1, 0x0, 0xd, 0x7, 0x7f, 0x0, 0x9, 0x7f, 0x8, 0x5, 0x7, 0x6c48, 0xe, 0x3, 0x5, 0x9, 0x1000, 0x0, 0x8, 0x9, 0x4, 0x6, 0x855, 0x0, 0x2, 0x2, 0x8, 0xfffff8b1, 0xfffffffc, 0x5, 0x3, 0xb9, 0x401, 0xfffffffa, 0x1, 0xf, 0xa7, 0xfffffaef, 0x401, 0x3, 0x50b, 0x9298, 0x2, 0x5, 0x5, 0x4, 0x8, 0xa446, 0x1, 0xfff, 0xfffffff2, 0x8, 0x3, 0x8001, 0x5, 0x4, 0xee, 0x5, 0x8, 0x1ff, 0x8, 0xfff, 0x9, 0xfffffffc, 0x198000, 0x8, 0x3, 0x0, 0x6, 0x6, 0x6, 0x9, 0x40, 0x4, 0x4, 0x3131, 0x6, 0x7, 0x72, 0x2, 0x6, 0x7, 0x1, 0x7, 0x9, 0xe0, 0x12e2, 0x4, 0x8000, 0x8000, 0x80000000, 0x8, 0xd5c7, 0x0, 0x2, 0x3, 0x5, 0x3, 0x8, 0x1, 0xa8b, 0x88a, 0x9, 0x6, 0x8, 0x5, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe100}]}, @TCA_U32_ACT={0x134c, 0x7, [@m_mirred={0x128, 0x1f, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0x8, 0x8, 0xe1a1, 0x200}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xbe4, 0x80000001, 0xffffffffffffffff, 0xfffffc00}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xfffffffe, 0x5, 0x5, 0x7}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6ef7, 0x2, 0x0, 0x80, 0x3}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x4, 0x6, 0x0, 0x52e12812}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x63, 0x1, 0x4, 0x9}, 0x2, r10}}]}, {0x3c, 0x6, "82c4b9e4f6e3ad57a0577e9b522f6682267d71ca2d046c141402d006a92a5d92e62d3ab60897fd2cf0856bb3ed3216fe81a8bf7018bda97a"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0xd0, 0x1c, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffc00, 0x2a, 0x0, 0x4, 0x8}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x605}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8}]}]}, {0x76, 0x6, "de4616bdad4a1e7cc453c664e69e499dd444c82658200b904bc16d9e3c6afab032a078c4e5d526350ac5cf73bd894d0533676ed50230c682e0e9050640325f51dfbe2cf884a780ef6882ec507932ed35d941cccb263f5076caf59cbf815e808e1d3a26c8b1d398c9d4171ba450a225193001"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0x1150, 0x14, 0x0, 0x0, {{0xb}, {0x1078, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0x8, 0x5, 0x7, {0x8, 0x0, 0xec12, 0x4, 0x9, 0x7}, {0x1, 0x2, 0x339, 0x6, 0x4, 0x7fff}, 0x2, 0x8, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x6, 0x9, 0x1f3, 0x2, 0x7f, 0x6, 0x10, 0xb0eb, 0x38a, 0x0, 0x0, 0x8, 0x4, 0x80, 0x4, 0x10001, 0x89ff, 0xb46, 0xf6, 0x8, 0xffff, 0xfffffff9, 0x5, 0x0, 0xfffffffd, 0xfffffff9, 0x7fffffff, 0x3ff, 0x6, 0x9, 0x778000, 0x8, 0x35, 0xffff, 0x1c, 0x1ff, 0x4, 0xc, 0x1, 0x2, 0x0, 0x2, 0x7, 0x8, 0x5, 0xe9dc, 0x1, 0x8155, 0x5, 0x7ff, 0x0, 0x0, 0x7, 0x7fff, 0x2, 0x835, 0x82b, 0xd5, 0x7, 0x5, 0x5, 0x200, 0x5, 0x40, 0x0, 0x6, 0x3, 0x9, 0xfffffffe, 0x401, 0x5, 0x8000, 0x80000000, 0x3, 0x101, 0x0, 0x4, 0x1000, 0x7, 0x16b, 0x0, 0xf9ea, 0x1000, 0x6, 0x9, 0x5, 0x3, 0x0, 0x80000000, 0x8bb5, 0x7, 0x1, 0xffff, 0x1, 0x0, 0x5, 0xffffffff, 0x3, 0x600000, 0x4, 0xffff, 0x5, 0x5, 0x40, 0x9, 0xf, 0xa6, 0x0, 0xfffffffa, 0x1, 0x0, 0x200, 0xfffffff8, 0x4000, 0x2c770000, 0xd, 0x10, 0xfffffff8, 0x80000000, 0x5, 0x1000, 0xfffffffc, 0x6, 0x9, 0xfffff0e6, 0x2, 0xffff, 0x4e7a, 0xffffffff, 0x1, 0xff, 0x60, 0x66, 0x4, 0x8, 0xe94, 0xff, 0x83, 0x10, 0xfe39, 0xfffffff8, 0x8, 0x5, 0x0, 0x0, 0x3fb, 0x45deb524, 0x9, 0x4, 0x0, 0x4, 0x7, 0x21ebbaa1, 0xffff, 0xf, 0x3, 0x3, 0x4c, 0x7, 0x2, 0x80000000, 0x4, 0x200, 0x4, 0xffff76c5, 0x1000, 0x4, 0x8, 0x0, 0x6, 0x5, 0x5, 0x5, 0x3, 0x3, 0x8, 0x0, 0x6, 0x6, 0x7, 0x8, 0x200, 0x0, 0x2, 0x10001, 0x81, 0x72, 0x8, 0x6, 0x5, 0x2, 0x10000, 0x1, 0x5, 0xb, 0x8, 0x5, 0xfffffc00, 0x7, 0x6, 0x4, 0x1, 0x7f, 0x4a, 0x4, 0x100, 0x685, 0x5, 0xfffffff8, 0x544d, 0xe, 0x40, 0x9, 0x3, 0x92fe, 0x5, 0x6, 0x0, 0x4, 0x1, 0x1000, 0x6, 0x7ff, 0x2, 0xc7, 0x5, 0x8d7, 0x4, 0x2, 0xf61e, 0x0, 0x5, 0x254, 0x0, 0x0, 0x10, 0x4, 0xa22, 0x3, 0x6, 0x80000000, 0x6, 0x6, 0x0, 0x9, 0x2, 0xffffff05, 0x3, 0xfe9d, 0x4, 0x800, 0x7, 0xe4, 0x8001, 0xfffffe41]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x132, 0x5, 0x7, 0x73e, 0x0, 0x6c, 0x2, 0x2, 0x1000, 0x7f, 0x200, 0x9, 0x0, 0x10, 0x9, 0x0, 0x6, 0x3, 0xb3, 0x5, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0x1, 0xf5, 0x5, 0x3, 0xe, 0x2, 0x2, 0x431, 0x2, 0x0, 0xff, 0x9, 0x7, 0x9, 0xd, 0x3, 0x11, 0xfff, 0x8, 0x9b45, 0x5, 0x3, 0x0, 0x200, 0x0, 0x2, 0x1ff, 0x8, 0x9, 0x0, 0x3, 0x9, 0x9, 0x100, 0x9, 0x7ff, 0x3, 0x4, 0x9, 0xf051, 0x8, 0x63, 0x10, 0x7f, 0x1ff, 0x7, 0x7, 0x7, 0x3, 0xc, 0x4, 0x4, 0x0, 0x7, 0x0, 0xffff, 0xc, 0x6, 0xcc3, 0x6, 0x3, 0xbcf4, 0x0, 0x8, 0x7, 0x2, 0x8, 0x8, 0x4, 0x9, 0x68d9, 0x68cdbcc8, 0x5, 0x9, 0x64a1aace, 0xfffffffd, 0x101, 0x1, 0x72f, 0xf190, 0x8701, 0x8000, 0x7b1, 0x2, 0x5, 0x7, 0x10000, 0x9, 0x7, 0xff, 0x400, 0x3, 0x7fffffff, 0x597, 0x75, 0x7f, 0x101, 0xe76, 0x5, 0x0, 0x5, 0x5, 0x4, 0x300, 0x1, 0x7, 0x10000, 0x6, 0x4, 0x2, 0x9, 0x600, 0x3, 0x9, 0x1000, 0x4, 0x4, 0x4, 0x5, 0x80, 0x226, 0x0, 0x8, 0x0, 0x0, 0x6, 0x8, 0xffffff00, 0x1, 0x1, 0xf38, 0x3, 0x7ff, 0x1, 0x6, 0x0, 0x0, 0xfffffff9, 0x2, 0x7, 0x7, 0xc0000, 0x5, 0x8, 0x6, 0xffffffff, 0x10001, 0xffffffff, 0x25a, 0x2, 0xffffffff, 0xa3, 0xffff8001, 0x1, 0x3c67, 0xb5, 0xad, 0x6, 0x4f, 0x72f, 0x5b8, 0x7, 0x5, 0x6, 0x7ff, 0x1, 0x8001, 0x2, 0x7, 0x9, 0x3, 0x7, 0xb, 0xa, 0x1, 0x8001, 0x0, 0x1, 0x1, 0x3, 0x7fff, 0xb, 0x0, 0x6, 0xff, 0x6, 0x3, 0x396, 0x1, 0x9, 0x7, 0xc8a3, 0x2, 0x1, 0x0, 0x5, 0x56, 0x1, 0xb6, 0x9, 0x2, 0x80, 0x3, 0x5, 0x2, 0xd8b, 0x5, 0x8, 0x9, 0x6c, 0x0, 0x2746, 0x0, 0x8b, 0xc, 0x0, 0x7fff, 0x6, 0xe4b, 0x3, 0x8, 0x9, 0x2, 0x3, 0x9, 0x3, 0x5, 0x6, 0x5, 0xfff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x97e, 0xc4, 0x7, 0x7f, 0x0, 0x1, 0x2, 0x4, 0x80000000, 0x401, 0x6, 0x5, 0x9, 0x10001, 0x1, 0x300, 0x0, 0x4, 0x200, 0x6, 0x7ff, 0xfffffffa, 0x2, 0x5, 0x0, 0x3, 0x2, 0x5a2, 0x0, 0x8, 0x4ed, 0x566e, 0x6, 0x6, 0x401, 0x10001, 0x7, 0xfffffff8, 0x8, 0x7, 0x7, 0xc2ff, 0x8c, 0x0, 0x6c7, 0x21f, 0xc8a, 0x400, 0x80, 0x10001, 0x7, 0x1, 0x62ff, 0x10, 0x9, 0x338, 0x80000001, 0x5, 0x3, 0x4, 0x5, 0x9, 0xfb20493, 0x0, 0x18000000, 0xf04, 0x6, 0xca, 0xd, 0x9, 0x5, 0x3, 0x5, 0x0, 0xffff0000, 0x9, 0x3, 0x8, 0x6, 0x5, 0x5, 0x3, 0xf, 0x5, 0x3, 0x8, 0x1, 0xf4cc, 0x9, 0x8, 0x4, 0xb, 0xd, 0x8001, 0x4, 0x1000, 0x0, 0x5, 0x7, 0x2, 0xd9, 0xf, 0x9, 0x101, 0x7fffffff, 0xffffffff, 0x7ff, 0x100, 0x94c, 0x4, 0x29, 0x7, 0xa, 0x4, 0xfffffff9, 0x2, 0x7, 0xff, 0x401, 0x679, 0xffffb5ad, 0xfffffff9, 0x2, 0xfffffe00, 0x6, 0x3ff, 0x5, 0x5, 0x19c1, 0x8, 0x7, 0xb0080655, 0x0, 0x1, 0x4, 0xd9, 0x2, 0x2, 0xa, 0x0, 0x7ff, 0x6, 0x1, 0x4, 0x0, 0x680, 0x34c5, 0xf2d, 0x6, 0x7f, 0x3, 0x100, 0x7f, 0x1, 0x5, 0x8, 0x4, 0x6, 0xffffffff, 0x7, 0x8, 0x9, 0x3ff, 0x3, 0xc, 0xfffffff7, 0x9, 0xf0, 0x10001, 0x7d1, 0x1, 0xa45, 0x7fffffff, 0x7, 0x4, 0x9, 0x9, 0x6, 0x0, 0x3, 0x3, 0x814, 0x8, 0x5, 0x3, 0x6, 0x1, 0x4726, 0x9, 0x8, 0x9, 0x9, 0x3, 0x4d, 0xfffffff3, 0x1000000, 0x7, 0xfffffff9, 0x8, 0xb8, 0x25, 0x7ff, 0x75100, 0x9, 0xf0b2, 0x800, 0x8, 0x100, 0xffffff01, 0x8, 0x1, 0xc, 0x4, 0x0, 0x1, 0x4, 0x7, 0x8, 0x7fffffff, 0x6, 0x9, 0x1, 0x22, 0x6, 0x2, 0x0, 0x7fff, 0x6, 0x5, 0x7, 0x80000001, 0x1, 0x8, 0x3, 0x7, 0xfffffff7, 0x2, 0xffffffff, 0x2, 0x3, 0x3ff, 0x6, 0x3, 0x9, 0x0, 0xffffffff, 0xffffffff, 0xf, 0x7, 0x40, 0x1, 0x2, 0x8, 0x66, 0xa, 0x7]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0x4ea, 0x401, 0xfffffffc, 0x5, 0x6, 0x8, 0x1, 0x7, 0x8, 0x9, 0x3, 0x3, 0x9933, 0x2, 0x8, 0x0, 0x1, 0x10000, 0x8, 0x1, 0x843e, 0x7, 0x8f, 0x9, 0x5, 0xf1, 0x8, 0xd43, 0x2, 0x7, 0x7, 0x2, 0x0, 0x3, 0x40, 0xffffffff, 0xf, 0x5, 0x8, 0x8, 0x7, 0x80000000, 0x4, 0x7, 0x714, 0x80000001, 0x9, 0x6, 0x1, 0xfffeffff, 0xffffffff, 0x5, 0x4, 0xc5, 0x0, 0xb7f, 0x4, 0x4, 0x7, 0x9, 0xfffff9cc, 0x8, 0x1000, 0x1ff, 0x64, 0x5b, 0xd047, 0x4, 0x5e, 0x5a46, 0x3, 0x80000001, 0x0, 0x3, 0x7, 0x37a3, 0x9, 0x1000, 0x7f, 0x3, 0x4, 0xffffffff, 0x0, 0x8, 0x51, 0xfff, 0x5, 0x8, 0x8, 0x3, 0x142, 0x5a5, 0x38b81274, 0x1, 0xf, 0x3, 0x9, 0x9, 0x8001, 0x6, 0x1, 0xffffffff, 0x4, 0x8, 0x100, 0x6, 0xea8, 0x74, 0x5, 0x7, 0xb8, 0x3ff, 0x80, 0x1, 0x0, 0x8, 0x9, 0x7, 0xf, 0x10, 0xffff, 0x4, 0xffffff82, 0x7, 0x9, 0x3, 0x7f, 0x2, 0x4, 0x9, 0x8, 0xffffff4a, 0xffffff81, 0x17a9461f, 0xc25, 0x4, 0x6d, 0x8, 0x9, 0x6, 0x899, 0x8, 0x593, 0x80000000, 0x6, 0xa, 0x6a6, 0x0, 0x1, 0x9, 0x9, 0x1, 0x7, 0x526, 0xc81, 0x8, 0x400, 0x6, 0x1, 0x9, 0x3, 0x6, 0x8, 0x5, 0x6, 0x6, 0x0, 0x9, 0x7ff, 0x3ff, 0x1, 0x800, 0x290b, 0x5, 0x8, 0x0, 0x101, 0x8030, 0xfef, 0x7, 0x81, 0x0, 0xfffffff1, 0xf76, 0x1000, 0x2, 0x7, 0x1, 0x709e, 0xfffffe01, 0x787e102c, 0x3, 0x8, 0x9, 0xf86, 0x2, 0x4, 0x94e, 0x800, 0x9, 0x37, 0x1, 0x3, 0xfff, 0x5, 0x80000001, 0x7fff, 0x401, 0x3, 0x2e92b4b2, 0x0, 0x9, 0x2, 0x1, 0xffffffff, 0x4, 0x3, 0x813, 0x0, 0x7ff, 0x4, 0xc, 0x0, 0x5, 0x8, 0x2, 0x51d, 0x5, 0xb, 0x7, 0x4, 0x2, 0x4, 0x80000000, 0x2, 0x40, 0x6379, 0x213, 0x9, 0x8001, 0x3, 0x0, 0x9, 0x1, 0x9, 0xe184, 0x80, 0x10000, 0x3, 0x3ab1, 0x9, 0x4, 0xffffffc0, 0x5]}]]}, {0xae, 0x6, "57239d7088b0f2bf524ae36d8928fa9f4fd26e0da09f60df5e2078cc1a671f9b8fc78f922a2d594ca1c142cfa1c65acc0199c57080d77e117316245c99536f4ade3b5e89c124d129f3eac59faea9a96cdb6f5aa20cf15707623b710dd7b3dd5a9d18b4f8ebbc7386bb1d06424771384e38b170015342192cfac66bd5c56e12609dd2ab4f790724b7303205b2e30bb5e61847fcdaae4de6f719dc025ad1471f6a0bf830ba3a403aa8c95d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_HASH={0x8, 0x2, 0xfffffe01}, @TCA_U32_SEL={0x2a4, 0x5, {0xc, 0x80, 0x9, 0xf542, 0x1, 0x6, 0x7, 0x0, [{0x8001, 0x9, 0xc4, 0x56}, {0x1, 0xa, 0x3, 0x7}, {0x5, 0x2, 0x5a7d}, {0x6, 0x2, 0x6, 0x4}, {0xfff, 0xa3a, 0xffa8, 0x1}, {0x6, 0x80000001, 0x50d1, 0x7}, {0x800, 0x7fffffff, 0x1, 0x2}, {0x40, 0x5, 0x80000001, 0x8e}, {0x4, 0x7ff, 0xf82, 0x6}, {0x1, 0x8, 0x2, 0x80000001}, {0x8, 0x48c9, 0x0, 0x9}, {0xfff, 0x4, 0x9, 0xa}, {0x5, 0x10000, 0x474, 0x7ff}, {0x2, 0x0, 0x2}, {0x1, 0x8, 0x3ff, 0xffff8000}, {0x100, 0x4, 0x7, 0x4}, {0x4, 0x2, 0x24000, 0x52090fb7}, {0x9, 0x1, 0x9, 0x4}, {0x0, 0x4, 0x829, 0x5}, {0x0, 0x9dd, 0x40, 0x944}, {0x101, 0x1000, 0x3, 0x400}, {0x3, 0xb3, 0x4, 0x10000}, {0x0, 0x3, 0x276, 0xae8}, {0x21, 0xd, 0x4, 0xfff}, {0x0, 0x5, 0xc000000, 0x3}, {0x9, 0x401, 0x10001, 0x8}, {0x3, 0xfffffffc, 0x28, 0x2}, {0xfffffffe, 0xb9, 0x794, 0x3}, {0x1, 0x5, 0x0, 0xfffffff8}, {0x8, 0x5, 0x8, 0x4}, {0x84, 0x4, 0x6, 0xff}, {0x8, 0x0, 0x6, 0x4}, {0x1, 0xa, 0x0, 0x7}, {0x2, 0x7, 0xe, 0x6}, {0x1ff, 0x3, 0x1, 0x9}, {0x0, 0x0, 0x40}, {0x7, 0x2, 0xcb1, 0x2}, {0x0, 0x81, 0x2, 0x1}, {0x63a, 0x10001, 0x0, 0x4}, {0x7, 0x3, 0x2, 0xffff}, {0x2, 0xb6b6, 0x26f, 0x7}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x155f}, @TCA_RATE={0x6, 0x5, {0x7, 0x3}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x2748}, 0x1, 0x0, 0x0, 0x24000010}, 0x40) (async) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000004a40)={0x200, 0x1, 0x1}) (async) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000004a80)) write$dsp(r2, &(0x7f0000004ac0)="3d6336cd", 0x4) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r11, &(0x7f0000004e00)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x2810}, 0xc, &(0x7f0000004dc0)={&(0x7f0000004c80)={0x140, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) 3.503984566s ago: executing program 8 (id=5855): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008850) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f000004b680)=""/102400, 0x19000) gettid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x400000000000b4c, 0x10001, 0x6, 0x3, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/88, 0x58}], 0x1, 0x3c, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = mq_open(&(0x7f0000001600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\aXg\xbb\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x8a=\x0f\n*\x8a\x99\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5\x00\x00\x00\x00\x00\x00\x00\x01\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbbV\x1a\x8a\x03#T\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8', 0x40, 0xb, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x3b8, 0x140) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000040)={0xc, @raw_data="564b923f73498a3829ff65aa0e3630cb565d950f1a933ef4a73c82e4e9c06845c462e5d273b86fc18260da702d84338276d76ba4134d09b92c3f0cb72b89d1c0a0f7d6f05361d84ee3df41c786a365b9ac9dc201179164d310727f6283e8900c45e62d939852698eb4da6c9734cd90896852d1fde57c782bbc237342c9f09a449d4c31477e338b43fc96b7b75ecf62b871429f5806e7472aacc5bc683a9ab74ec5b4a890398d67eaaa443f6ff0aa82b3e1b9298f3005db3fba1c2eba839f5f1c3eda1b39c7a15898"}) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000300)={r0, &(0x7f00000001c0)='net/anycast6\x00', 0x101041, &(0x7f0000000200)={@_ha_fsid={[0x6, 0x2]}, {0x65, 0x1, 0x10, 0xfffffffffffffffa}}, 0x3, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0xffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r5) 3.501340987s ago: executing program 0 (id=5856): prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) semop(0x0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000280)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7f}, 0x7, 0x519, 0x0, 0x0, 0x0, 0x0, 0x3}) 3.011178038s ago: executing program 7 (id=5857): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f00000044c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x48081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x8a, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) 2.899200655s ago: executing program 8 (id=5858): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x1, 0x5002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$admmidi(&(0x7f0000000000), 0x8, 0x501200) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/vmcoreinfo', 0x28000, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000100180c200000300000000000081004d0086dd6900040000002f"], 0x3e) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r5, 0x26}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) recvmmsg$unix(r6, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)}], 0x1, &(0x7f00000001c0)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000280), 0x6e, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/65, 0x41}], 0x2, &(0x7f0000000780)}}], 0x3, 0x1, &(0x7f0000000900)={0x77359400}) syz_open_dev$usbmon(&(0x7f0000000200), 0x81, 0x8000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) io_setup(0x2, &(0x7f0000001200)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2.700306849s ago: executing program 8 (id=5859): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/86, 0x56}], 0x1, 0x8, 0xe) syz_open_dev$sndpcmc(&(0x7f0000000080), 0xb, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000380)='dx\xeb\xf4\xd8&w\xef\xcd1w\xfd2\x19x\xcc\x8d\xabN\xea\xd1\xea\xfa\xc3u\xcdMB\xb2m\xe5Bq\xe3\x9a~\xbe3\xd7\xb1\x16\x8b\xb9\xb6\xc6u\x0f9S\x05\x83n\x01\xa1\x1c\x82\\fsa<\xcd\x18}=A{\x17\xd0\x95\xbd25N\b^\x8eFsTvd)\xad') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$inet(0x2, 0x1, 0x2) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000ee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x50) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000280)}, 0x10) sendto(r4, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f1725", 0x5f, 0x4008044, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)='i', 0x1) 2.567899401s ago: executing program 0 (id=5860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r1, 0x0, 0x0, 0x141, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x40010) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010006f708040000001b20000000020000021c000480180001800e00010069006d656479617465000000040002800900010059797ab0000000000900020073797a320000000014941836955446b92a8b2a30f900"/112], 0x70}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) request_key(&(0x7f0000001600)='keyring\x00', &(0x7f0000001640)={'syz', 0x0}, &(0x7f0000001680)='[.!,\x00', 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) timer_create(0xc34373f6749da572, &(0x7f00000000c0)={0x0, 0x10, 0x2, @tid=r2}, &(0x7f0000000300)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchownat(r5, &(0x7f0000000280)='.\x00', 0x0, 0x0, 0x1000) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1}) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 2.549577357s ago: executing program 0 (id=5861): syz_clone(0x10033180, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)=0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000001480), 0xb, 0x200) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000200)={0x4}) write(r1, &(0x7f0000000080)='g', 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r3, 0x806c4120, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000400) socket$nl_xfrm(0x10, 0x3, 0x6) eventfd2(0x0, 0x0) 2.115707201s ago: executing program 7 (id=5862): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x8, 0xcc5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aee809000000000000009d245a90703aeff0f64ebbee07962c22772e11b44e65d76641cb000000", 0x27}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) 1.916355866s ago: executing program 7 (id=5863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES64=r1], 0x0, 0x2a, 0x0, 0x1}, 0x28) sched_setscheduler(0x0, 0x2, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40858}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r9, {0xe, 0x1}}}, 0x24}}, 0x4) 1.202269995s ago: executing program 4 (id=5864): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000180)=r5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.053443693s ago: executing program 8 (id=5865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005740)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xfec00000}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003900"}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000008c0)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa6426660f35c4e21d4501b9de0100000f32c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$llc(r3, 0x0, 0x0, 0x40000140, 0x0, 0x0) 968.02313ms ago: executing program 7 (id=5866): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x6, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESCSIZE(r2, 0x4004480d, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r2, @ANYRES16=r2], 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @remote}, 0x1c) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x3ff1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r5, r5}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r7, 0x6a, 0x2, 0x0, 0xffffffffffffff33) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="000000000014000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b609000000000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff570000000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000004d9800000000000056080000000000008500000007000000b700000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r8) 640.478292ms ago: executing program 8 (id=5867): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) mincore(&(0x7f0000845000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/37) syz_usb_connect(0x2, 0x3d, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000c9667c40501dc660e7af0800030109022b00010400000009045877022584530009050b00100001020209050b001000ff00060705d57a3b"], 0x0) 611.27836ms ago: executing program 0 (id=5868): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x2b2}, &(0x7f0000000180)=0x0, &(0x7f0000000640)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 426.300371ms ago: executing program 0 (id=5869): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x66) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x800, 0x1) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,u', @ANYBLOB, @ANYRESDEC=r2]) statx(0xffffffffffffff9c, 0x0, 0x2000, 0x2dd8806920477201, &(0x7f00000003c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5cceeedd5106050000000000000000000000000005000400000000628fead48df0ad203000000000140007800800134000000000080012400000000d0500050000000000050001000de0fafeb624060000000d6300000000"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090605000000000000050900020073797a30000000000500010007000000090009400000000114000880100007804a001100aaaaaaaaaaaa0000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r5 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x0, 0x1, 0x5, 0x4010}, 0x20) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="000000ad1759"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0xfff5}], 0x1, 0x5, 0xb2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) read$char_usb(r7, &(0x7f00000000c0)=""/104, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000a00000000000008c927c6e5280c91909fddd7b53a7c1104000000ffffffff000000000000000201000000000000000000000b22000000020000000000000e0300000000"], 0x0, 0x5c}, 0x28) 241.895235ms ago: executing program 4 (id=5870): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000017c0), 0x208000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000001600), 0x4) connect$unix(r4, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r7, 0x8b2c, &(0x7f0000000040)) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x80, 0x3, 0xf, 0xd, 0xf6, 0x4, 0x10, 0x9d, 0x4, [0x1, 0x4, 0x1, 0x468, 0x80, 0x3, 0x9, 0x80]}}) 171.40534ms ago: executing program 7 (id=5871): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f00000044c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x48081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x8a, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) 0s ago: executing program 8 (id=5872): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000300000000000004000000080002000500000006000b000a"], 0x24}}, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xea41bece6959855b, "2b415490"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000000080)={0xf, "6bf449717af46082803c888cad6c6e1e07cd875e888ba4af6ae468df523a7ea381d7c436dd3ef799bbcfa1d33fd5c123dbb5fdc1094c332bd2eca8277b77ec3f"}) kernel console output (not intermixed with test programs): syz.4.5200': attribute type 21 has an invalid length. [ 1536.472407][T26093] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5200'. [ 1537.901087][ T5878] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1538.070979][ T5878] usb 6-1: Using ep0 maxpacket: 32 [ 1538.078096][ T5878] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1538.078164][ T5878] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1538.078225][ T5878] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1538.078403][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1538.078452][ T5878] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1538.078503][ T5878] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1538.078579][ T5878] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1538.078626][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.106439][ T5878] usb 6-1: config 0 descriptor?? [ 1538.333483][ T5878] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 77 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1538.620069][ T5930] usb 6-1: USB disconnect, device number 77 [ 1538.624847][ T5930] usblp0: removed [ 1539.707616][T26127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5209'. [ 1539.824052][T26130] tipc: Started in network mode [ 1539.824065][T26130] tipc: Node identity , cluster identity 4711 [ 1539.824075][T26130] tipc: Failed to set node id, please configure manually [ 1539.824093][T26130] tipc: Enabling of bearer rejected, failed to enable media [ 1539.913253][ T5812] Bluetooth: hci5: unexpected event for opcode 0x2027 [ 1540.709745][ T5930] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1540.839631][ T5930] usb 6-1: device descriptor read/64, error -71 [ 1540.996657][T26158] team0: Port device dummy0 removed [ 1541.134547][ T5930] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1541.319434][ T5930] usb 6-1: device descriptor read/64, error -71 [ 1541.430620][ T5930] usb usb6-port1: attempt power cycle [ 1541.769165][ T5930] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1541.805359][ T5930] usb 6-1: device descriptor read/8, error -71 [ 1542.093549][ T5930] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1542.110488][ T5930] usb 6-1: device descriptor read/8, error -71 [ 1542.219130][ T5930] usb usb6-port1: unable to enumerate USB device [ 1542.959454][T26189] xt_hashlimit: max too large, truncated to 1048576 [ 1544.350932][T26202] netlink: 'syz.4.5227': attribute type 2 has an invalid length. [ 1545.385951][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.402917][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.362480][T26218] overlayfs: conflicting options: nfs_export=on,index=off [ 1546.746785][ T5878] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1546.894956][T26233] Bluetooth: MGMT ver 1.23 [ 1546.908526][ T5878] usb 6-1: config 1 has an invalid interface number: 78 but max is 0 [ 1547.014867][ T5878] usb 6-1: config 1 has no interface number 0 [ 1547.025398][ T5878] usb 6-1: config 1 interface 78 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 1547.035833][T26233] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(109) [ 1547.042514][T26233] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1547.050284][T26233] vhci_hcd vhci_hcd.0: Device attached [ 1547.068074][ T5878] usb 6-1: config 1 interface 78 has no altsetting 0 [ 1547.089741][ T5878] usb 6-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 1547.099887][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.108182][ T5878] usb 6-1: Product: syz [ 1547.112392][ T5878] usb 6-1: Manufacturer: syz [ 1547.124749][ T5878] usb 6-1: SerialNumber: syz [ 1547.140739][T26226] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1547.379407][T24107] usb 42-1: SetAddress Request (6) to port 0 [ 1547.385926][T24107] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1547.608097][ T5878] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1547.638553][ T5878] usb 6-1: selecting invalid altsetting 0 [ 1547.662499][ T2339] pvrusb2: control-write URB failure, status=-71 [ 1547.678328][ T5878] usb 6-1: USB disconnect, device number 82 [ 1547.682720][ T2339] pvrusb2: Device being rendered inoperable [ 1547.701306][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1547.722075][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1548.213587][T26236] vhci_hcd: connection reset by peer [ 1548.238115][ T6869] vhci_hcd vhci_hcd.4: stop threads [ 1548.254494][ T6869] vhci_hcd vhci_hcd.4: release socket [ 1548.312871][ T6869] vhci_hcd vhci_hcd.4: disconnect device [ 1548.585247][T26260] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5246'. [ 1548.614706][T22168] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1548.637106][T22168] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1548.670137][T22168] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1548.678250][T22168] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1548.688609][T22168] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1548.730028][T26261] xfrm0 speed is unknown, defaulting to 1000 [ 1548.743557][T26261] lo speed is unknown, defaulting to 1000 [ 1548.795796][T13713] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1548.955649][T13713] usb 1-1: Using ep0 maxpacket: 32 [ 1548.962540][T13713] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1548.971655][T13713] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1548.980896][T13713] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1548.990171][T13713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1549.000079][T13713] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1549.010022][T13713] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1549.023460][T13713] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1549.033053][T13713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.050948][T13713] usb 1-1: config 0 descriptor?? [ 1549.124123][T26261] chnl_net:caif_netlink_parms(): no params data found [ 1549.874182][T13713] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 104 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1550.081905][T13713] usb 1-1: USB disconnect, device number 104 [ 1550.104988][ T30] kauditd_printk_skb: 3842 callbacks suppressed [ 1550.105007][ T30] audit: type=1326 audit(2000000325.251:9847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.4.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598f59c629 code=0x7fc00000 [ 1550.144115][T13713] usblp0: removed [ 1550.296386][T26261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.310012][T26261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.318052][T26261] bridge_slave_0: entered allmulticast mode [ 1550.325722][T26261] bridge_slave_0: entered promiscuous mode [ 1550.333924][T26261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.346217][T26261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.353670][T26261] bridge_slave_1: entered allmulticast mode [ 1550.362574][T26261] bridge_slave_1: entered promiscuous mode [ 1550.417430][T26261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1550.440765][T26261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1550.719426][T26261] team0: Port device team_slave_0 added [ 1550.728254][T26261] team0: Port device team_slave_1 added [ 1550.735502][T22168] Bluetooth: hci4: command tx timeout [ 1550.744381][ T30] audit: type=1400 audit(2000000325.941:9848): avc: denied { read write } for pid=26300 comm="syz.0.5255" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1550.762624][T26261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1550.776147][T26261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.802759][T26261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1550.815426][T26261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1550.822985][T26261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.849187][T26261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1550.907335][T26261] hsr_slave_0: entered promiscuous mode [ 1550.915766][T26261] hsr_slave_1: entered promiscuous mode [ 1550.922171][T26261] debugfs: 'hsr0' already exists in 'hsr' [ 1550.929200][T26261] Cannot create hsr debugfs directory [ 1550.942060][ T30] audit: type=1400 audit(2000000325.971:9849): avc: denied { open } for pid=26300 comm="syz.0.5255" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1550.943607][T26303] netlink: 212356 bytes leftover after parsing attributes in process `syz.5.5256'. [ 1551.028828][ T30] audit: type=1400 audit(2000000326.231:9850): avc: denied { mount } for pid=26300 comm="syz.0.5255" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1551.052505][T26304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5255'. [ 1551.114496][ T30] audit: type=1400 audit(2000000326.251:9851): avc: denied { ioctl } for pid=26300 comm="syz.0.5255" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1551.295705][ T582] wlan1: Trigger new scan to find an IBSS to join [ 1551.378593][T26261] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1551.449529][T26261] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1551.538510][T26261] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1551.619156][ T30] audit: type=1400 audit(2000000326.822:9852): avc: denied { unmount } for pid=18850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1552.506934][T24107] usb 42-1: device descriptor read/8, error -110 [ 1552.541566][ T30] audit: type=1400 audit(2000000327.132:9853): avc: denied { create } for pid=26322 comm="syz.4.5262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1552.561515][ T30] audit: type=1400 audit(2000000327.142:9854): avc: denied { sys_admin } for pid=26322 comm="syz.4.5262" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1553.703164][T22168] Bluetooth: hci4: command tx timeout [ 1553.732287][T26261] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1554.001047][T24107] usb usb42-port1: attempt power cycle [ 1554.033070][ T5930] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1554.242995][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 1554.250992][ T5930] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1554.279198][ T5930] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1554.288477][T26261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1554.315188][ T5930] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1554.331865][T26261] 8021q: adding VLAN 0 to HW filter on device team0 [ 1554.339046][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1554.366246][T17486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.373438][T17486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1554.391601][ T5930] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1554.418556][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1554.438885][ T5930] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1554.449569][ T582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.456717][ T582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1554.467494][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.496241][ T5930] usb 5-1: config 0 descriptor?? [ 1554.594944][T24107] usb usb42-port1: unable to enumerate USB device [ 1554.652732][T13713] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1554.755575][ T5930] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 114 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1554.764604][T26261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1554.814650][T13713] usb 1-1: Using ep0 maxpacket: 32 [ 1554.823337][T13713] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1554.844629][T13713] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1554.860877][T13713] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1554.875560][T13713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1554.895721][T13713] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1554.920026][T13713] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1554.953248][T24107] usb 5-1: USB disconnect, device number 114 [ 1554.974134][T13713] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1554.989995][T24107] usblp0: removed [ 1555.004867][T13713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.039255][T13713] usb 1-1: config 0 descriptor?? [ 1555.255349][T26261] veth0_vlan: entered promiscuous mode [ 1555.266127][T26261] veth1_vlan: entered promiscuous mode [ 1555.273966][T13713] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 105 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1555.307596][T26261] veth0_macvtap: entered promiscuous mode [ 1555.327040][ T30] audit: type=1400 audit(2000000330.534:9855): avc: denied { recv } for pid=12780 comm="kworker/u8:1" saddr=10.128.0.169 src=48706 daddr=10.128.0.70 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1555.327159][T26261] veth1_macvtap: entered promiscuous mode [ 1555.362799][ T5886] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 1555.397856][T26261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1555.410039][T26261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1555.421894][T21834] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.435888][T21834] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.449215][T21834] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.458335][T21834] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.493596][T13713] usb 1-1: USB disconnect, device number 105 [ 1555.542953][T13713] usblp0: removed [ 1555.559896][ T5886] usb 6-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1555.578437][ T5886] usb 6-1: config 2 interface 0 has no altsetting 0 [ 1555.588676][ T5886] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1555.597040][T21834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1555.598464][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.616497][T21834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1555.626790][ T30] audit: type=1400 audit(2000000330.834:9856): avc: denied { watch_mount } for pid=26376 comm="syz.4.5273" path="/441" dev="tmpfs" ino=2357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1555.627854][T26371] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1555.706664][ T6869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1555.723424][ T6869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1555.778031][T22168] Bluetooth: hci4: command tx timeout [ 1555.794090][T26381] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1555.817558][ T30] audit: type=1400 audit(2000000331.024:9857): avc: denied { read } for pid=26379 comm="syz.7.5274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1555.886548][ T582] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.102669][ T5886] elo 0003:04E7:0009.002F: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.5-1/input0 [ 1556.126866][ T582] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.306993][T26395] kAFS: unparsable volume name [ 1556.329784][ T5886] usb 6-1: USB disconnect, device number 83 [ 1556.336112][T21834] wlan1: Trigger new scan to find an IBSS to join [ 1556.355914][ T582] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.388200][T26399] netlink: 'syz.4.5277': attribute type 9 has an invalid length. [ 1556.429008][T26399] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5277'. [ 1556.456908][T26398] xfrm0 speed is unknown, defaulting to 1000 [ 1556.598825][T26403] ubi: mtd0 is already attached to ubi0 [ 1556.854450][ T582] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.876488][T26398] lo speed is unknown, defaulting to 1000 [ 1557.616416][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1557.631835][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1557.640868][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1557.657270][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1557.672268][ T6869] wlan1: Creating new IBSS network, BSSID f2:90:20:30:ac:56 [ 1557.726243][T13713] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1557.785701][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1557.871208][ T5812] Bluetooth: hci4: command tx timeout [ 1557.922159][T13713] usb 5-1: config 1 has an invalid interface number: 78 but max is 0 [ 1557.957241][T13713] usb 5-1: config 1 has no interface number 0 [ 1557.968697][T13713] usb 5-1: config 1 interface 78 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 1557.997786][T13713] usb 5-1: config 1 interface 78 has no altsetting 0 [ 1558.053095][T13713] usb 5-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 1558.067328][T13713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.078716][T13713] usb 5-1: Product: syz [ 1558.083204][T13713] usb 5-1: Manufacturer: syz [ 1558.088816][T13713] usb 5-1: SerialNumber: syz [ 1558.101020][T26419] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1558.821766][T13713] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1558.870302][T13713] usb 5-1: selecting invalid altsetting 0 [ 1558.883315][ T2339] pvrusb2: control-write URB failure, status=-71 [ 1558.891791][ T2339] pvrusb2: Device being rendered inoperable [ 1558.907453][T13713] usb 5-1: USB disconnect, device number 115 [ 1558.926829][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1558.999033][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1559.387882][T26423] xfrm0 speed is unknown, defaulting to 1000 [ 1559.850219][ T5812] Bluetooth: hci1: command tx timeout [ 1559.878962][ T582] bond0 (unregistering): (slave gretap1): Releasing active interface [ 1559.897785][ T30] audit: type=1400 audit(2000000335.086:9858): avc: denied { map } for pid=26462 comm="syz.4.5292" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1559.898596][ T582] gretap1 (unregistering): left allmulticast mode [ 1559.976754][ T582] bond0 (unregistering): Released all slaves [ 1560.003073][ T30] audit: type=1400 audit(2000000335.086:9859): avc: denied { execute } for pid=26462 comm="syz.4.5292" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1560.005086][T26465] input: syz1 as /devices/virtual/input/input112 [ 1560.077717][T26465] input: failed to attach handler leds to device input112, error: -6 [ 1560.113393][T26423] lo speed is unknown, defaulting to 1000 [ 1560.228490][ T30] audit: type=1400 audit(2000000335.436:9860): avc: denied { read } for pid=26467 comm="syz.8.5293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1560.260722][T26469] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5293'. [ 1560.309921][T22370] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1560.480146][T22370] usb 5-1: Using ep0 maxpacket: 16 [ 1560.505318][T22370] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1560.530410][T22370] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1560.590335][T22370] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1560.600581][T22370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.608828][T22370] usb 5-1: Product: syz [ 1560.614190][T22370] usb 5-1: Manufacturer: syz [ 1560.618818][T22370] usb 5-1: SerialNumber: syz [ 1560.639254][T22370] usb 5-1: config 0 descriptor?? [ 1560.689824][ T10] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1560.719158][T26423] chnl_net:caif_netlink_parms(): no params data found [ 1560.840944][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1560.878380][ T10] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1560.905773][ T10] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1560.947587][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.047941][ T5864] usb 5-1: USB disconnect, device number 116 [ 1561.059593][ T10] usb 1-1: Product: syz [ 1561.068772][ T10] usb 1-1: Manufacturer: syz [ 1561.079528][ T10] usb 1-1: SerialNumber: syz [ 1561.112195][ T10] usb 1-1: config 0 descriptor?? [ 1561.312116][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1561.349514][ T10] usb 1-1: setting power ON [ 1561.354733][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1561.387864][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1561.411833][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1561.424960][ T582] hsr_slave_0: left promiscuous mode [ 1561.439376][ T10] usb 1-1: media controller created [ 1561.465446][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1561.469338][ T582] hsr_slave_1: left promiscuous mode [ 1561.508025][ T582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1561.516354][ T10] usb 1-1: selecting invalid altsetting 6 [ 1561.525839][ T10] usb 1-1: digital interface selection failed (-22) [ 1561.530995][ T582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1561.570078][T26475] dvb-usb: bulk message failed: -22 (3/0) [ 1561.575927][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1561.594934][T26475] cxusb: i2c wr: len=104 is too big! [ 1561.594934][T26475] [ 1561.605107][ T582] veth1_macvtap: left promiscuous mode [ 1561.611500][ T10] usb 1-1: setting power OFF [ 1561.623560][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1561.638193][T26504] netlink: 'syz.7.5297': attribute type 2 has an invalid length. [ 1561.639325][ T582] veth0_macvtap: left promiscuous mode [ 1561.648137][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1561.672244][ T10] (NULL device *): no alternate interface [ 1561.695905][ T582] veth1_vlan: left promiscuous mode [ 1561.734802][ T582] veth0_vlan: left promiscuous mode [ 1561.843724][T26509] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5299'. [ 1561.929061][ T5812] Bluetooth: hci1: command tx timeout [ 1562.079635][T13713] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1562.103015][T26423] bridge0: port 1(bridge_slave_0) entered blocking state [ 1562.119759][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1562.127463][T26423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.153120][T26423] bridge_slave_0: entered allmulticast mode [ 1562.156855][ T10] usb 1-1: USB disconnect, device number 106 [ 1562.183242][T26423] bridge_slave_0: entered promiscuous mode [ 1562.190726][T24105] lo speed is unknown, defaulting to 1000 [ 1562.196466][T24105] infiniband syz0: ib_query_port failed (-19) [ 1562.203438][T26423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1562.211312][T26423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.227678][T26423] bridge_slave_1: entered allmulticast mode [ 1562.238090][T26423] bridge_slave_1: entered promiscuous mode [ 1562.252699][T13713] usb 5-1: Using ep0 maxpacket: 8 [ 1562.261647][T13713] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1562.272313][T13713] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1562.288051][T13713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.300422][T13713] usb 5-1: Product: syz [ 1562.305702][T13713] usb 5-1: Manufacturer: syz [ 1562.328684][T13713] usb 5-1: SerialNumber: syz [ 1562.372501][T13713] usb 5-1: config 0 descriptor?? [ 1562.413166][T26423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1562.424465][T13713] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1562.461950][T13713] usb 5-1: setting power ON [ 1562.466509][T13713] dvb-usb: bulk message failed: -22 (2/0) [ 1562.481791][T26423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1562.531507][T26423] team0: Port device team_slave_0 added [ 1562.562370][T26423] team0: Port device team_slave_1 added [ 1562.590144][T13713] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1562.607959][T26423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1562.615613][T26423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1562.658686][T26423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1562.699518][T13713] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1562.701524][T26507] dvb-usb: bulk message failed: -22 (3/0) [ 1562.708066][T13713] usb 5-1: media controller created [ 1562.715618][T13713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1562.730535][ T30] audit: type=1400 audit(2000000337.897:9861): avc: denied { unmount } for pid=26261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1562.740350][T26423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1562.781134][T26507] cxusb: i2c wr: len=104 is too big! [ 1562.781134][T26507] [ 1562.810221][T26423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1562.837764][T13713] usb 5-1: selecting invalid altsetting 6 [ 1562.848465][T13713] usb 5-1: digital interface selection failed (-22) [ 1562.866567][T13713] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1562.876510][T26423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1562.889138][T13713] usb 5-1: setting power OFF [ 1562.889162][T13713] dvb-usb: bulk message failed: -22 (2/0) [ 1562.889177][T13713] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1562.889192][T13713] (NULL device *): no alternate interface [ 1562.971216][T13713] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1562.982423][T13713] usb 5-1: USB disconnect, device number 117 [ 1563.022274][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1563.102996][T26423] hsr_slave_0: entered promiscuous mode [ 1563.120588][T26423] hsr_slave_1: entered promiscuous mode [ 1563.135642][T26423] debugfs: 'hsr0' already exists in 'hsr' [ 1563.144359][T26423] Cannot create hsr debugfs directory [ 1563.177601][T26545] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 1563.199269][T26545] netem: incorrect gi model size [ 1563.205907][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1563.229031][T26545] netem: change failed [ 1563.235173][ T10] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1563.250808][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.272554][ T10] usb 9-1: config 0 descriptor?? [ 1563.862642][T26529] tmpfs: Bad value for 'mpol' [ 1564.008323][ T5812] Bluetooth: hci1: command tx timeout [ 1564.267005][ T10] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 1564.288777][ T10] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 1564.329527][ T10] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 1564.358943][ T10] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 1564.387554][ T10] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 1564.410144][ T10] hid-thrustmaster 0003:044F:B65D.0030: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.8-1/input0 [ 1564.467976][ T10] hid-thrustmaster 0003:044F:B65D.0030: Wrong number of endpoints? [ 1564.505574][ C0] hid-thrustmaster 0003:044F:B65D.0030: Unknown packet type 0x0, unable to proceed further with wheel init [ 1566.211272][T22168] Bluetooth: hci1: command tx timeout [ 1566.300633][T22367] usb 9-1: USB disconnect, device number 2 [ 1566.556791][ T582] netdevsim netdevsim5 netdevsim0 (unregistering): tearing down IPsec offload with 1 SAs left [ 1567.059704][T26618] netdevsim netdevsim8: Direct firmware load for . [ 1567.059704][T26618] failed with error -2 [ 1567.089323][ T30] audit: type=1400 audit(2000000342.299:9862): avc: denied { firmware_load } for pid=26617 comm="syz.8.5326" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1567.127606][T26618] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1567.127606][T26618] [ 1567.276417][T13713] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1567.450945][T13713] usb 5-1: Using ep0 maxpacket: 32 [ 1568.421066][T13713] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1568.438984][T13713] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.463564][T13713] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1568.483170][T13713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.497506][T13713] usb 5-1: Product: syz [ 1568.501811][T13713] usb 5-1: Manufacturer: syz [ 1568.511215][T13713] usb 5-1: SerialNumber: syz [ 1568.818082][T26632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26632 comm=syz.8.5328 [ 1568.907573][T13713] usb 5-1: Limiting number of CPorts to U8_MAX [ 1568.933279][T13713] usb 5-1: Not enough endpoints found in device, aborting! [ 1569.235768][ T30] audit: type=1400 audit(2000000344.401:9863): avc: denied { setattr } for pid=26644 comm="syz.0.5332" name="ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 1569.419523][T26648] ptrace attach of "./syz-executor exec"[22165] was attempted by " [ 1569.445871][T24107] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1569.923474][T24107] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1569.936064][T24107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.037238][T24107] usb 1-1: Product: syz [ 1570.047265][T24107] usb 1-1: Manufacturer: syz [ 1570.056394][T24107] usb 1-1: SerialNumber: syz [ 1570.103722][T24107] usb 1-1: config 0 descriptor?? [ 1570.344613][T24107] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1570.430177][T24107] usb 1-1: USB disconnect, device number 107 [ 1570.453154][T26661] fuse: Bad value for 'group_id' [ 1570.467388][T26661] fuse: Bad value for 'group_id' [ 1570.773289][T24107] usb 5-1: USB disconnect, device number 118 [ 1571.441756][T26672] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5340'. [ 1572.436451][T26681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26681 comm=syz.7.5343 [ 1573.210331][ T30] audit: type=1400 audit(2000000348.413:9864): avc: denied { mounton } for pid=26690 comm="syz.4.5345" path="/455/file0" dev="configfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1574.282571][ T30] audit: type=1400 audit(2000000349.493:9865): avc: denied { unmount } for pid=26261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1574.362933][T22367] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1574.534390][T22367] usb 5-1: config 0 has an invalid interface number: 80 but max is 0 [ 1574.555308][T22367] usb 5-1: config 0 has no interface number 0 [ 1574.561918][T22367] usb 5-1: too many endpoints for config 0 interface 80 altsetting 25: 34, using maximum allowed: 30 [ 1574.605148][T22367] usb 5-1: config 0 interface 80 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 1574.652732][T22367] usb 5-1: config 0 interface 80 has no altsetting 0 [ 1574.726906][T22367] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1574.756640][T22367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.807589][T22367] usb 5-1: Product: syz [ 1574.811791][T22367] usb 5-1: Manufacturer: syz [ 1574.845762][T22367] usb 5-1: SerialNumber: syz [ 1575.726031][T22367] usb 5-1: config 0 descriptor?? [ 1576.449023][T26744] /dev/nullb0: Can't lookup blockdev [ 1576.798447][T22367] usb 5-1: USB disconnect, device number 119 [ 1576.839566][ T30] audit: type=1400 audit(2000000352.044:9866): avc: denied { unmount } for pid=17458 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1577.681251][T22367] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1577.871117][T22367] usb 9-1: Using ep0 maxpacket: 8 [ 1577.897995][T22367] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1578.048861][T22367] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1578.154797][T22367] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1579.059125][T22367] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1579.074961][T22367] usb 9-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1579.085217][T22367] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.094660][T22367] usb 9-1: config 0 descriptor?? [ 1579.531139][T22367] itetech 0003:258A:6A88.0031: unknown main item tag 0x0 [ 1579.555818][T22367] itetech 0003:258A:6A88.0031: unknown main item tag 0x0 [ 1579.579379][T22367] itetech 0003:258A:6A88.0031: unknown main item tag 0x0 [ 1579.602662][T22367] itetech 0003:258A:6A88.0031: item fetching failed at offset 9/11 [ 1579.632274][T22367] itetech 0003:258A:6A88.0031: probe with driver itetech failed with error -22 [ 1579.760220][ T5886] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1579.930174][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 1579.959375][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.981112][ T5886] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1579.996063][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.000941][T26809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.024343][T26809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1580.284880][ T5886] usb 1-1: config 0 descriptor?? [ 1580.384942][ T5886] hso 1-1:0.0: Not our interface [ 1580.875179][ T5886] usb 1-1: USB disconnect, device number 108 [ 1580.897152][T26763] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5365'. [ 1581.015487][T26822] fuse: Unknown parameter '0x0000000000000004' [ 1581.150603][ T30] audit: type=1400 audit(2000000356.356:9867): avc: denied { unmount } for pid=17458 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1581.511320][ T5878] usb 9-1: USB disconnect, device number 3 [ 1582.706660][T26873] fuse: Unknown parameter 'grou00000000000000000000' [ 1582.877772][T26883] FAULT_INJECTION: forcing a failure. [ 1582.877772][T26883] name failslab, interval 1, probability 0, space 0, times 0 [ 1582.898669][T26883] CPU: 1 UID: 0 PID: 26883 Comm: syz.8.5388 Tainted: G L syzkaller #0 PREEMPT(full) [ 1582.898698][T26883] Tainted: [L]=SOFTLOCKUP [ 1582.898704][T26883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1582.898713][T26883] Call Trace: [ 1582.898719][T26883] [ 1582.898725][T26883] dump_stack_lvl+0x100/0x190 [ 1582.898759][T26883] should_fail_ex.cold+0x5/0xa [ 1582.898789][T26883] should_failslab+0xc2/0x120 [ 1582.898817][T26883] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1582.898841][T26883] ? security_inode_alloc+0x3b/0x2c0 [ 1582.898859][T26883] ? lockdep_init_map_type+0x5c/0x250 [ 1582.898881][T26883] security_inode_alloc+0x3b/0x2c0 [ 1582.898900][T26883] inode_init_always_gfp+0xced/0x1040 [ 1582.898923][T26883] alloc_inode+0x8e/0x250 [ 1582.898946][T26883] new_inode+0x22/0x1c0 [ 1582.898967][T26883] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1582.898994][T26883] shmem_get_inode+0x212/0x1040 [ 1582.899016][T26883] ? __pfx_selinux_vm_enough_memory+0x10/0x10 [ 1582.899037][T26883] ? __pfx_shmem_get_inode+0x10/0x10 [ 1582.899056][T26883] ? rcu_is_watching+0x12/0xc0 [ 1582.899075][T26883] ? percpu_counter_add_batch+0xb9/0x230 [ 1582.899109][T26883] __shmem_file_setup+0x3ac/0x490 [ 1582.899132][T26883] ? __pfx___shmem_file_setup+0x10/0x10 [ 1582.899157][T26883] ? vm_area_alloc+0x1f/0x160 [ 1582.899180][T26883] shmem_zero_setup+0x96/0x1b0 [ 1582.899206][T26883] __mmap_region+0x2198/0x29e0 [ 1582.899233][T26883] ? __pfx___mmap_region+0x10/0x10 [ 1582.899253][T26883] ? process_measurement+0x1f4/0x2350 [ 1582.899278][T26883] ? find_held_lock+0x2b/0x80 [ 1582.899300][T26883] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1582.899358][T26883] ? is_bpf_text_address+0x94/0x1a0 [ 1582.899382][T26883] ? kernel_text_address+0x8d/0x100 [ 1582.899429][T26883] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1582.899467][T26883] mmap_region+0x180/0x3e0 [ 1582.899496][T26883] do_mmap+0xc63/0x12f0 [ 1582.899518][T26883] ? __pfx_do_mmap+0x10/0x10 [ 1582.899535][T26883] ? __pfx_down_write_killable+0x10/0x10 [ 1582.899564][T26883] vm_mmap_pgoff+0x29e/0x470 [ 1582.899587][T26883] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1582.899607][T26883] ? __fget_files+0x215/0x3d0 [ 1582.899626][T26883] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1582.899654][T26883] ksys_mmap_pgoff+0xe1/0x650 [ 1582.899685][T26883] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1582.899709][T26883] ? fput+0x79/0x100 [ 1582.899728][T26883] ? ksys_write+0x1ac/0x250 [ 1582.899752][T26883] ? __pfx_ksys_write+0x10/0x10 [ 1582.899788][T26883] __x64_sys_mmap+0x125/0x190 [ 1582.899809][T26883] do_syscall_64+0x106/0xf80 [ 1582.899826][T26883] ? clear_bhb_loop+0x40/0x90 [ 1582.899848][T26883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.899866][T26883] RIP: 0033:0x7f880419c629 [ 1582.899882][T26883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1582.899900][T26883] RSP: 002b:00007f8805077028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1582.899918][T26883] RAX: ffffffffffffffda RBX: 00007f8804415fa0 RCX: 00007f880419c629 [ 1582.899930][T26883] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 1582.899941][T26883] RBP: 00007f8805077090 R08: ffffffffffffffff R09: 0000000000000000 [ 1582.899952][T26883] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 1582.899963][T26883] R13: 00007f8804416038 R14: 00007f8804415fa0 R15: 00007fffbfd795a8 [ 1582.899988][T26883] [ 1583.811635][T26901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5390'. [ 1584.092719][ T30] audit: type=1400 audit(2000000359.308:9868): avc: denied { accept } for pid=26903 comm="syz.8.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1584.205799][T26914] fuse: Unknown parameter 'grou00000000000000000000' [ 1584.697736][T22370] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1584.891135][T22370] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1584.907637][T22370] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1584.918741][T22370] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1584.928196][T22370] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.939974][T26925] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1584.952336][T26921] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1584.965631][T22370] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1584.985836][T26923] overlayfs: overlapping lowerdir path [ 1585.261559][T26932] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5402'. [ 1585.270691][T26932] chnl_net:caif_netlink_parms(): no params data found [ 1585.294248][T22370] usb 9-1: USB disconnect, device number 4 [ 1585.817840][T26948] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5405'. [ 1586.214607][T26955] fuse: Unknown parameter 'group_i00000000000000000000' [ 1586.329244][T26960] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1589.207402][T26994] fuse: Unknown parameter 'group_i00000000000000000000' [ 1589.297933][T26997] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1589.848504][ T10] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 1589.868304][T27014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5425'. [ 1589.885433][ T10] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1590.796671][ T8298] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1590.958362][T27030] fuse: Unknown parameter 'group_i00000000000000000000' [ 1591.513289][T27033] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1591.526793][T27033] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.534401][T27033] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.084101][T27056] fuse: Unknown parameter 'group_id00000000000000000000' [ 1593.278853][T27074] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1593.278853][T27074] program syz.8.5445 not setting count and/or reply_len properly [ 1593.883063][ T5878] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1594.052954][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 1594.064209][ T5878] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1594.077932][ T5878] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1594.098399][ T5878] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1594.117795][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1594.137989][ T5878] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1594.162974][ T5878] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1594.192894][ T5878] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1594.209077][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.223016][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1594.231967][ T5878] usb 5-1: config 0 descriptor?? [ 1594.370983][T27085] fuse: Unknown parameter 'group_id00000000000000000000' [ 1594.404633][ T10] usb 9-1: config 1 has an invalid interface number: 78 but max is 0 [ 1594.413002][ T10] usb 9-1: config 1 has no interface number 0 [ 1594.419239][ T10] usb 9-1: config 1 interface 78 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 1594.430397][ T10] usb 9-1: config 1 interface 78 has no altsetting 0 [ 1594.461017][ T5878] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 120 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1594.554719][T27090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5451'. [ 1594.909621][ T5878] usb 5-1: USB disconnect, device number 120 [ 1595.130209][ T5878] usblp0: removed [ 1595.890757][T22184] udevd[22184]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1595.968574][T22137] udevd[22137]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1596.582943][ T10] usb 9-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 1596.596190][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.604477][ T10] usb 9-1: Product: syz [ 1596.610979][ T10] usb 9-1: Manufacturer: syz [ 1596.615706][ T10] usb 9-1: SerialNumber: syz [ 1596.629046][T27083] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1596.782942][T27106] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5454'. [ 1596.853561][ T10] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1596.874092][ T10] usb 9-1: selecting invalid altsetting 0 [ 1596.882946][ T2339] pvrusb2: control-write URB failure, status=-71 [ 1596.885581][ T10] usb 9-1: USB disconnect, device number 5 [ 1596.912565][ T2339] pvrusb2: Device being rendered inoperable [ 1596.926029][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1596.951847][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1597.693223][T27119] fuse: Unknown parameter 'group_id00000000000000000000' [ 1598.068878][T27126] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5461'. [ 1598.069549][T27126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1598.394905][T27126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1599.572975][T27154] fuse: Bad value for 'user_id' [ 1599.587094][T27154] fuse: Bad value for 'user_id' [ 1599.745083][T27158] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5471'. [ 1602.739404][T27185] fuse: Bad value for 'user_id' [ 1602.748666][ T30] audit: type=1326 audit(2000000377.967:9869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.7.5480" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01f319c629 code=0x0 [ 1602.772064][T27185] fuse: Bad value for 'user_id' [ 1602.919438][T27191] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1602.977310][T27192] netlink: 'syz.0.5483': attribute type 4 has an invalid length. [ 1602.994774][T27192] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5483'. [ 1603.235120][ T30] audit: type=1400 audit(2000000378.458:9870): avc: denied { append } for pid=27197 comm="syz.4.5475" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1603.950366][T27206] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1603.958154][T27206] overlayfs: failed to set xattr on upper [ 1603.964170][T27206] overlayfs: ...falling back to redirect_dir=nofollow. [ 1603.971292][T27206] overlayfs: ...falling back to index=off. [ 1603.977148][T27206] overlayfs: ...falling back to uuid=null. [ 1603.995042][T27206] overlayfs: missing 'workdir' [ 1605.864456][T27229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1605.878626][T27229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1606.797934][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.805986][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.704236][T27246] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1607.923361][ T30] audit: type=1400 audit(2000000383.150:9871): avc: denied { mount } for pid=27244 comm="syz.4.5497" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1608.225948][T27257] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5500'. [ 1608.246430][T13713] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1608.435754][T13713] usb 1-1: Using ep0 maxpacket: 32 [ 1608.460078][T13713] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1608.483210][T13713] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1608.493844][T13713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.541611][T13713] usb 1-1: Product: syz [ 1608.548327][T13713] usb 1-1: Manufacturer: syz [ 1608.552946][T13713] usb 1-1: SerialNumber: syz [ 1608.567579][T13713] usb 1-1: config 0 descriptor?? [ 1608.594145][T27259] fuse: Bad value for 'fd' [ 1608.601304][T27261] fuse: Unknown parameter 'grou00000000000000000000' [ 1608.859202][T27270] NILFS (nbd8): device size too small [ 1609.923471][T13713] gs_usb 1-1:0.0: Couldn't get device config: (err=-110) [ 1609.955587][T13713] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -110 [ 1610.018990][T27279] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1610.322994][T27290] fuse: Unknown parameter 'grou00000000000000000000' [ 1610.371381][T27292] fuse: Bad value for 'fd' [ 1610.556229][T27296] xt_socket: unknown flags 0x4c [ 1611.375020][T13713] usb 1-1: USB disconnect, device number 109 [ 1611.578699][T27310] 9pnet: Found fid 0 not clunked [ 1611.587137][T27308] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1611.629329][ T30] audit: type=1400 audit(2000000386.862:9872): avc: denied { map } for pid=27303 comm="syz.8.5516" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1611.697185][ T30] audit: type=1400 audit(2000000386.892:9873): avc: denied { execute } for pid=27303 comm="syz.8.5516" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1611.922078][T27318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5521'. [ 1611.994104][T13713] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1612.004036][ T5886] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1612.156504][T13713] usb 9-1: config 0 has an invalid interface number: 17 but max is 0 [ 1612.165968][T13713] usb 9-1: config 0 has no interface number 0 [ 1612.172436][T13713] usb 9-1: config 0 interface 17 has no altsetting 0 [ 1612.183058][ T5886] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1612.202865][T13713] usb 9-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 1612.212500][T13713] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.212620][ T5886] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1612.230297][T13713] usb 9-1: Product: syz [ 1612.234512][T13713] usb 9-1: Manufacturer: syz [ 1612.239081][T13713] usb 9-1: SerialNumber: syz [ 1612.245535][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1612.253757][ T5886] usb 1-1: SerialNumber: syz [ 1612.260982][T13713] usb 9-1: config 0 descriptor?? [ 1612.271469][T13713] esd_usb 9-1:0.17: sending version message failed [ 1612.280792][T13713] esd_usb 9-1:0.17: probe with driver esd_usb failed with error -22 [ 1612.540180][T27326] fuse: Bad value for 'fd' [ 1612.578872][ T5812] Bluetooth: hci3: unexpected event for opcode 0x0c38 [ 1612.795056][T27335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5520'. [ 1613.137586][T27344] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1613.738958][ T5886] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1613.757503][ T5886] usb 1-1: USB disconnect, device number 110 [ 1613.805619][T27352] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5532'. [ 1613.844557][T27354] fuse: Bad value for 'fd' [ 1615.918063][ T10] usb 9-1: USB disconnect, device number 6 [ 1616.034917][T27381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5543'. [ 1616.656403][T27379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1617.765605][T27390] veth0: entered promiscuous mode [ 1617.773704][T27390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5544'. [ 1618.155185][T22168] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1618.168848][T22168] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1618.179449][T22168] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1618.187230][T22168] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1618.195001][T22168] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1618.328955][T27401] xfrm0 speed is unknown, defaulting to 1000 [ 1618.350940][ T5886] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1618.500846][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 1618.507517][ T5886] usb 1-1: config 0 has no interfaces? [ 1618.516643][ T5886] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1618.535652][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.556667][ T5886] usb 1-1: config 0 descriptor?? [ 1618.573838][T22367] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 1618.637418][T27401] chnl_net:caif_netlink_parms(): no params data found [ 1618.753055][T22367] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.794587][T22367] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1618.800794][ T30] audit: type=1400 audit(2000000394.025:9874): avc: denied { accept } for pid=27398 comm="syz.0.5548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1618.823337][T22367] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1618.844892][ T5886] usb 1-1: USB disconnect, device number 111 [ 1618.865283][T22367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.028838][T27401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1619.037139][T27401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1619.044799][T27401] bridge_slave_0: entered allmulticast mode [ 1619.052629][T27401] bridge_slave_0: entered promiscuous mode [ 1619.061313][T27401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1619.068744][T27401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.084333][T27401] bridge_slave_1: entered allmulticast mode [ 1619.103025][T27401] bridge_slave_1: entered promiscuous mode [ 1619.141936][T27401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1619.153017][T27401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1619.179110][T27401] team0: Port device team_slave_0 added [ 1619.186941][T27401] team0: Port device team_slave_1 added [ 1619.206404][T27401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1619.213567][T27401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1619.243062][T27401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1619.255266][T27401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1619.262566][T27401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1619.288656][T27401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1619.321275][T27401] hsr_slave_0: entered promiscuous mode [ 1619.327411][T27401] hsr_slave_1: entered promiscuous mode [ 1619.333606][T27401] debugfs: 'hsr0' already exists in 'hsr' [ 1619.339312][T27401] Cannot create hsr debugfs directory [ 1619.529033][T27424] syzkaller1: entered promiscuous mode [ 1619.534721][T27424] syzkaller1: entered allmulticast mode [ 1620.327455][T22168] Bluetooth: hci5: command tx timeout [ 1620.385812][T27428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27428 comm=syz.8.5554 [ 1621.221503][ T30] audit: type=1800 audit(2000000396.437:9875): pid=27435 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.5557" name="file1" dev="tmpfs" ino=406 res=0 errno=0 [ 1621.244579][ T30] audit: type=1400 audit(2000000396.457:9876): avc: denied { shutdown } for pid=27434 comm="syz.8.5557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1621.784876][T22367] usb 5-1: USB disconnect, device number 121 [ 1621.855940][T27444] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5559'. [ 1622.428887][T22168] Bluetooth: hci5: command tx timeout [ 1622.789443][T12780] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1622.836532][T27456] FAULT_INJECTION: forcing a failure. [ 1622.836532][T27456] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.849571][T27456] CPU: 0 UID: 0 PID: 27456 Comm: syz.8.5562 Tainted: G L syzkaller #0 PREEMPT(full) [ 1622.849599][T27456] Tainted: [L]=SOFTLOCKUP [ 1622.849606][T27456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1622.849617][T27456] Call Trace: [ 1622.849623][T27456] [ 1622.849630][T27456] dump_stack_lvl+0x100/0x190 [ 1622.849663][T27456] should_fail_ex.cold+0x5/0xa [ 1622.849686][T27456] should_failslab+0xc2/0x120 [ 1622.849714][T27456] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1622.849737][T27456] ? security_file_alloc+0x34/0x2c0 [ 1622.849758][T27456] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1622.849789][T27456] security_file_alloc+0x34/0x2c0 [ 1622.849810][T27456] init_file+0x95/0x480 [ 1622.849830][T27456] alloc_empty_file+0x73/0x1c0 [ 1622.849851][T27456] path_openat+0xe8/0x31a0 [ 1622.849868][T27456] ? finish_task_switch.isra.0+0x20e/0xb80 [ 1622.849894][T27456] ? finish_task_switch.isra.0+0x205/0xb80 [ 1622.849919][T27456] ? rcu_is_watching+0x12/0xc0 [ 1622.849940][T27456] ? trace_sched_exit_tp+0x13a/0x180 [ 1622.849966][T27456] ? __pfx_path_openat+0x10/0x10 [ 1622.849992][T27456] do_file_open+0x20e/0x430 [ 1622.850012][T27456] ? __pfx_do_file_open+0x10/0x10 [ 1622.850028][T27456] ? __pfx___schedule+0x10/0x10 [ 1622.850072][T27456] ? alloc_fd+0x476/0x790 [ 1622.850093][T27456] ? do_getname+0x191/0x390 [ 1622.850116][T27456] do_sys_openat2+0x10d/0x1e0 [ 1622.850137][T27456] ? __pfx_do_sys_openat2+0x10/0x10 [ 1622.850156][T27456] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1622.850178][T27456] ? __fget_files+0x21f/0x3d0 [ 1622.850200][T27456] __x64_sys_openat+0x12d/0x210 [ 1622.850221][T27456] ? __pfx___x64_sys_openat+0x10/0x10 [ 1622.850240][T27456] ? ksys_write+0x1ac/0x250 [ 1622.850280][T27456] do_syscall_64+0x106/0xf80 [ 1622.850297][T27456] ? clear_bhb_loop+0x40/0x90 [ 1622.850319][T27456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.850337][T27456] RIP: 0033:0x7f880415cece [ 1622.850352][T27456] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1622.850369][T27456] RSP: 002b:00007f8805055b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1622.850388][T27456] RAX: ffffffffffffffda RBX: 00007f88050566c0 RCX: 00007f880415cece [ 1622.850400][T27456] RDX: 00000000001a3c82 RSI: 00007f8805055c00 RDI: ffffffffffffff9c [ 1622.850411][T27456] RBP: 00007f8805055c00 R08: 0000000000000000 R09: 0000000000000000 [ 1622.850422][T27456] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1622.850433][T27456] R13: 00007f8804416128 R14: 00007f8804416090 R15: 00007fffbfd795a8 [ 1622.850457][T27456] [ 1623.431253][T24105] IPVS: starting estimator thread 0... [ 1623.538334][T27462] IPVS: using max 43 ests per chain, 103200 per kthread [ 1624.027331][T27477] netlink: 'syz.7.5570': attribute type 30 has an invalid length. [ 1624.246152][T27485] SET target dimension over the limit! [ 1624.458131][T22168] Bluetooth: hci5: command tx timeout [ 1624.693548][T27487] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5572'. [ 1624.991370][T27497] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1625.430947][T24105] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1625.461466][T27498] kAFS: unable to lookup cell '(' [ 1625.479372][T27501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5576'. [ 1625.488776][T27501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5576'. [ 1625.521831][T27499] kAFS: unable to lookup cell '(,c¾ûL' [ 1625.541899][T27501] 9pnet_fd: Insufficient options for proto=fd [ 1625.642957][T24105] usb 9-1: config 1 has an invalid interface number: 78 but max is 0 [ 1625.651550][T24105] usb 9-1: config 1 has no interface number 0 [ 1625.658899][T24105] usb 9-1: config 1 interface 78 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 1625.673381][T24105] usb 9-1: config 1 interface 78 has no altsetting 0 [ 1625.703008][T24105] usb 9-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 1625.712755][T24105] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.723285][T24105] usb 9-1: Product: syz [ 1625.730047][T24105] usb 9-1: Manufacturer: syz [ 1625.735085][T24105] usb 9-1: SerialNumber: syz [ 1625.785669][T27489] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1626.030970][T24105] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1626.041686][T24105] usb 9-1: selecting invalid altsetting 0 [ 1626.048124][ T2339] pvrusb2: control-write URB failure, status=-71 [ 1626.060978][T24105] usb 9-1: USB disconnect, device number 7 [ 1626.068446][ T2339] pvrusb2: Device being rendered inoperable [ 1626.078212][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1626.090585][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1626.538631][T22168] Bluetooth: hci5: command tx timeout [ 1626.882929][T27512] netlink: 'syz.4.5579': attribute type 7 has an invalid length. [ 1626.899770][T17486] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1627.054306][T17486] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1627.063776][T17486] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1627.079659][T17486] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1628.597335][T24105] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1628.815323][T24105] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1628.835730][ T30] audit: type=1400 audit(2000000404.050:9877): avc: denied { mount } for pid=27538 comm="syz.4.5589" name="/" dev="pstore" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1628.858657][T24105] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1628.876060][T24105] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1628.885131][T24105] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.926364][T24105] usb 9-1: config 0 descriptor?? [ 1629.152992][T24105] usbhid 9-1:0.0: can't add hid device: -71 [ 1629.170999][T24105] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1629.199354][T24105] usb 9-1: USB disconnect, device number 8 [ 1630.026436][ T30] audit: type=1326 audit(2000000405.271:9878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27562 comm="syz.4.5595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f598f59c629 code=0x0 [ 1630.598511][T27572] netlink: 'syz.0.5597': attribute type 2 has an invalid length. [ 1630.614956][T27572] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5597'. [ 1631.702511][T27593] netlink: 'syz.4.5605': attribute type 1 has an invalid length. [ 1631.722780][T27593] bond2: entered promiscuous mode [ 1631.728428][T27593] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1631.761623][T27593] bond2: (slave bridge2): making interface the new active one [ 1631.771558][T27593] bridge2: entered promiscuous mode [ 1631.785807][T27593] bridge2: left promiscuous mode [ 1632.713648][T24105] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1632.721402][ T5878] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1632.899671][ T5878] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1632.914394][T24105] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1632.914423][T24105] usb 9-1: config 0 has no interface number 0 [ 1632.914458][T24105] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1632.947954][ T5878] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1632.965103][ T5878] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1632.987015][T24105] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.006222][ T5878] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1633.022400][T24105] usb 9-1: config 0 descriptor?? [ 1633.035429][ T5878] usb 1-1: New USB device strings: Mfr=9, Product=130, SerialNumber=3 [ 1633.061431][T24105] usb 9-1: selecting invalid altsetting 1 [ 1633.069881][ T5878] usb 1-1: Product: syz [ 1633.077565][T24105] dvb_ttusb_budget: ttusb_init_controller: error [ 1633.084551][ T5878] usb 1-1: Manufacturer: syz [ 1633.090420][ T5878] usb 1-1: SerialNumber: syz [ 1633.100676][T24105] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1633.122221][ T5878] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1633.146536][ T5878] cdc_ncm 1-1:1.0: bind() failure [ 1633.217986][T24105] DVB: Unable to find symbol cx22700_attach() [ 1633.256052][T24105] DVB: Unable to find symbol tda10046_attach() [ 1633.266253][T27591] ipt_REJECT: ECHOREPLY no longer supported. [ 1633.272267][T24105] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1633.336529][T27606] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5604'. [ 1633.348916][T24105] usb 1-1: USB disconnect, device number 112 [ 1633.568100][T27607] usb 9-1: USB disconnect, device number 9 [ 1634.162251][T22367] hid-generic 0004:0004:FFFF0001.0033: unknown main item tag 0x0 [ 1634.178574][T22367] hid-generic 0004:0004:FFFF0001.0033: unknown main item tag 0x0 [ 1634.202474][T22367] hid-generic 0004:0004:FFFF0001.0033: unknown main item tag 0x0 [ 1634.219981][T22367] hid-generic 0004:0004:FFFF0001.0033: unknown main item tag 0x0 [ 1634.244218][T22367] hid-generic 0004:0004:FFFF0001.0033: unknown main item tag 0x0 [ 1634.270158][T22367] hid-generic 0004:0004:FFFF0001.0033: unknown main item tag 0x0 [ 1634.286229][T22367] hid-generic 0004:0004:FFFF0001.0033: unknown main item tag 0x0 [ 1634.321322][T22367] hid-generic 0004:0004:FFFF0001.0033: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1634.342821][ T5878] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1634.522757][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 1634.541341][ T5878] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1634.563278][ T5878] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1634.603329][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.611403][ T5878] usb 1-1: Product: syz [ 1634.615753][ T5878] usb 1-1: Manufacturer: syz [ 1634.620355][ T5878] usb 1-1: SerialNumber: syz [ 1634.633270][ T5878] usb 1-1: config 0 descriptor?? [ 1634.662773][ T5878] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1634.672249][ T5878] usb 1-1: setting power ON [ 1634.695972][ T5878] dvb-usb: bulk message failed: -22 (2/0) [ 1634.723368][T27634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5616'. [ 1634.942973][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1634.943919][T27623] dvb-usb: bulk message failed: -22 (3/0) [ 1634.959431][T27623] cxusb: i2c wr: len=104 is too big! [ 1634.959431][T27623] [ 1634.982886][ T5878] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1634.998825][ T5878] usb 1-1: media controller created [ 1635.033193][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1635.072868][ T5878] usb 1-1: selecting invalid altsetting 6 [ 1635.088271][ T5878] usb 1-1: digital interface selection failed (-22) [ 1635.103880][ T5878] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1635.122269][ T5878] usb 1-1: setting power OFF [ 1635.127486][ T5878] dvb-usb: bulk message failed: -22 (2/0) [ 1635.133890][ T5878] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1635.143370][ T5878] (NULL device *): no alternate interface [ 1635.174275][ T5878] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1635.182854][T27638] nbd4: detected capacity change from 0 to 112 [ 1635.209542][ T5878] usb 1-1: USB disconnect, device number 113 [ 1635.216521][T27642] block nbd4: shutting down sockets [ 1635.231984][ C0] blk_print_req_error: 27 callbacks suppressed [ 1635.232003][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1635.247793][ C0] buffer_io_error: 74 callbacks suppressed [ 1635.247808][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1635.261484][T22408] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1635.286889][T22408] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1635.296558][T22408] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1635.307914][T22408] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1635.320238][T22408] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1635.338788][T22408] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1635.363961][T22408] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1635.387012][T22408] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1635.404802][T22408] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1635.424567][T22408] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1635.436988][T22408] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1635.446648][T22408] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1635.460702][T22408] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1635.481020][T22408] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1635.500440][T22408] ldm_validate_partition_table(): Disk read failed. [ 1635.508134][T22408] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1635.517986][T22408] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1635.526072][T22408] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1635.535584][T22408] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1635.543556][T22408] Dev nbd4: unable to read RDB block 0 [ 1635.550739][T22408] nbd4: unable to read partition table [ 1635.563534][T22408] ldm_validate_partition_table(): Disk read failed. [ 1635.570746][T22408] Dev nbd4: unable to read RDB block 0 [ 1635.584749][T22408] nbd4: unable to read partition table [ 1635.993655][T24105] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1636.186764][T24105] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.206238][T24105] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1636.217992][T24105] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1636.234488][T24105] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1636.244122][T24105] usb 5-1: New USB device strings: Mfr=9, Product=130, SerialNumber=3 [ 1636.252160][T22367] usb 1-1: new low-speed USB device number 114 using dummy_hcd [ 1636.258333][T24105] usb 5-1: Product: syz [ 1636.272025][T24105] usb 5-1: Manufacturer: syz [ 1636.282175][T24105] usb 5-1: SerialNumber: syz [ 1636.319205][T24105] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1636.326182][T24105] cdc_ncm 5-1:1.0: bind() failure [ 1636.515466][T22367] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1636.524542][T22367] usb 1-1: config 0 has no interface number 0 [ 1636.530654][T24105] usb 5-1: USB disconnect, device number 122 [ 1636.530671][T22367] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1636.562927][T22367] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1636.584661][T22367] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1636.598013][T22367] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1636.610637][T22367] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1636.628228][T22367] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1636.643771][T22367] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1636.653008][T22367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.676948][T22367] usb 1-1: config 0 descriptor?? [ 1636.683416][T27654] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1636.690677][T27654] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1636.704464][T22367] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1636.929873][T22367] usb 1-1: USB disconnect, device number 114 [ 1636.935991][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 1636.983731][T27663] netlink: 'syz.0.5623': attribute type 4 has an invalid length. [ 1636.992244][T22367] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1637.001727][T27663] netlink: 'syz.0.5623': attribute type 1 has an invalid length. [ 1637.021931][T27663] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5623'. [ 1637.037280][T27663] ldusb: No device or device unplugged -19 [ 1637.361386][T24105] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 1637.440405][T27673] netlink: 'syz.7.5629': attribute type 21 has an invalid length. [ 1637.449965][T27673] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5629'. [ 1637.461352][T22367] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1637.523762][T24105] usb 5-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1637.534390][T24105] usb 5-1: config 2 interface 0 has no altsetting 0 [ 1637.541109][T24105] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1637.550839][T24105] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.579528][T24105] usbhid 5-1:2.0: couldn't find an input interrupt endpoint [ 1637.631246][T22367] usb 1-1: Using ep0 maxpacket: 16 [ 1637.638111][T22367] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1637.646660][T22367] usb 1-1: config 0 has no interface number 0 [ 1637.653482][T22367] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1637.665323][T22367] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1637.675096][T22367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.683860][T22367] usb 1-1: Product: syz [ 1637.688158][T22367] usb 1-1: Manufacturer: syz [ 1637.693217][T22367] usb 1-1: SerialNumber: syz [ 1637.699479][T22367] usb 1-1: config 0 descriptor?? [ 1637.707531][T22367] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 1638.475631][ T30] audit: type=1400 audit(2000000413.715:9879): avc: denied { ioctl } for pid=27683 comm="syz.8.5631" path="socket:[109957]" dev="sockfs" ino=109957 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1639.035240][T22367] usb 1-1: USB disconnect, device number 115 [ 1639.732661][T27707] fuse: Bad value for 'user_id' [ 1639.745156][T27707] fuse: Bad value for 'user_id' [ 1640.119117][ T5930] usb 5-1: USB disconnect, device number 123 [ 1640.279943][T22367] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1640.430053][T22367] usb 1-1: Using ep0 maxpacket: 8 [ 1640.436422][T22367] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1640.447727][T22367] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1640.457057][T22367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.465170][T22367] usb 1-1: Product: syz [ 1640.469372][T22367] usb 1-1: Manufacturer: syz [ 1640.473997][T22367] usb 1-1: SerialNumber: syz [ 1640.483041][T22367] usb 1-1: config 0 descriptor?? [ 1640.489908][ T5930] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1640.498164][T22367] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1640.506310][T22367] usb 1-1: setting power ON [ 1640.512024][T22367] dvb-usb: bulk message failed: -22 (2/0) [ 1640.520739][T22367] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1640.531231][T22367] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1640.539847][T22367] usb 1-1: media controller created [ 1640.562369][T22367] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1640.581825][T22367] usb 1-1: selecting invalid altsetting 6 [ 1640.587590][T22367] usb 1-1: digital interface selection failed (-22) [ 1640.595576][T22367] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1640.604955][T22367] usb 1-1: setting power OFF [ 1640.610296][T22367] dvb-usb: bulk message failed: -22 (2/0) [ 1640.616549][T22367] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1640.625979][T22367] (NULL device *): no alternate interface [ 1640.639834][T22367] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1640.672608][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 1640.687101][ T5930] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1640.716213][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.738485][ T10] usb 1-1: USB disconnect, device number 116 [ 1640.749664][ T5930] usb 5-1: Product: syz [ 1640.759225][ T5930] usb 5-1: Manufacturer: syz [ 1640.765598][ T5930] usb 5-1: SerialNumber: syz [ 1640.786872][ T5930] usb 5-1: config 0 descriptor?? [ 1640.822568][ T5930] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1641.539299][ T10] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1641.711631][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1641.719968][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1641.731627][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1641.744670][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1641.753877][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.113464][ T10] usb 1-1: Product: syz [ 1642.117752][ T10] usb 1-1: Manufacturer: syz [ 1642.122438][ T10] usb 1-1: SerialNumber: syz [ 1642.130136][ T10] usb 1-1: config 0 descriptor?? [ 1642.139934][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1642.149474][ T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1642.351940][ T5930] gspca_vc032x: reg_w err -71 [ 1642.357746][ T5930] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 1642.373118][ T5930] usb 5-1: USB disconnect, device number 124 [ 1642.742175][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (86) [ 1643.389145][ T5930] libceph: connect (1)[c::]:6789 error -113 [ 1643.401263][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 1643.668549][ T5930] libceph: connect (1)[c::]:6789 error -113 [ 1643.674631][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 1643.819540][ T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1643.831131][ T10] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1643.838362][ T10] em28xx 1-1:0.0: No AC97 audio processor [ 1644.123086][T27750] ceph: No mds server is up or the cluster is laggy [ 1644.211310][T12780] wlan1: Trigger new scan to find an IBSS to join [ 1644.360627][ T10] usb 1-1: USB disconnect, device number 117 [ 1644.367290][ T10] em28xx 1-1:0.0: Disconnecting em28xx [ 1644.393755][ T10] em28xx 1-1:0.0: Freeing device [ 1644.787775][ T10] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 1644.913707][T27773] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5658'. [ 1644.967450][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1645.011022][ T10] usb 1-1: config 0 has no interface number 0 [ 1645.057160][ T10] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1645.131373][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.165262][ T10] usb 1-1: Product: syz [ 1645.177404][ T10] usb 1-1: Manufacturer: syz [ 1645.187652][ T10] usb 1-1: SerialNumber: syz [ 1645.199763][ T10] usb 1-1: config 0 descriptor?? [ 1645.221163][ T10] usb 1-1: selecting invalid altsetting 1 [ 1645.234574][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 1645.248173][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1645.864566][ T10] DVB: Unable to find symbol stv0299_attach() [ 1646.197548][T27784] xfrm0 speed is unknown, defaulting to 1000 [ 1646.217152][ T10] DVB: Unable to find symbol tda8083_attach() [ 1646.233554][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1646.264237][ T10] usb 1-1: USB disconnect, device number 118 [ 1646.423725][ T5930] hid-generic 0003:0004:FFFFFFFE.0034: unknown main item tag 0x0 [ 1646.432364][ T5930] hid-generic 0003:0004:FFFFFFFE.0034: unknown main item tag 0x0 [ 1646.441118][ T5930] hid-generic 0003:0004:FFFFFFFE.0034: unknown main item tag 0x0 [ 1646.450504][ T5930] hid-generic 0003:0004:FFFFFFFE.0034: hidraw0: USB HID v4.00 Device [syz0] on syz1 [ 1647.060068][T27799] overlayfs: missing 'lowerdir' [ 1647.256462][T24105] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1647.320485][T27804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5667'. [ 1647.406275][T24105] usb 5-1: Using ep0 maxpacket: 32 [ 1647.419000][T24105] usb 5-1: config 0 has an invalid interface number: 229 but max is 0 [ 1647.430653][T24105] usb 5-1: config 0 has no interface number 0 [ 1647.440512][T24105] usb 5-1: New USB device found, idVendor=3b53, idProduct=a0d3, bcdDevice=e3.d4 [ 1647.449903][T24105] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.458059][T24105] usb 5-1: Product: syz [ 1647.462248][T24105] usb 5-1: Manufacturer: syz [ 1647.467062][T24105] usb 5-1: SerialNumber: syz [ 1647.486322][T24105] usb 5-1: config 0 descriptor?? [ 1647.507787][T24105] usb-storage 5-1:0.229: USB Mass Storage device detected [ 1647.739996][T24105] usb 5-1: USB disconnect, device number 125 [ 1648.145731][T27814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5669'. [ 1648.528651][T27822] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5671'. [ 1649.005319][T27830] binder: 27827:27830 ioctl c040563d 200000000140 returned -22 [ 1649.021896][ T30] audit: type=1400 audit(2000000424.270:9880): avc: denied { read } for pid=27827 comm="syz.4.5673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1649.045140][T27830] binder: 27827:27830 ioctl ae01 13 returned -22 [ 1649.052616][T27832] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1649.062828][T27832] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1649.235406][ T5930] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1649.245425][T21837] wlan1: Trigger new scan to find an IBSS to join [ 1649.390096][T27842] overlayfs: failed to clone upperpath [ 1649.755274][ T5930] usb 1-1: Using ep0 maxpacket: 32 [ 1649.762018][ T5930] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1649.770497][ T5930] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1649.779256][ T5930] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1649.788352][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1649.798106][ T5930] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1649.808293][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1649.818134][ T5930] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1649.831191][ T5930] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1649.840763][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.851679][ T5930] usb 1-1: config 0 descriptor?? [ 1650.115005][T24105] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1650.155215][T12780] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00 [ 1650.264859][T24105] usb 5-1: Using ep0 maxpacket: 32 [ 1650.271312][T24105] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1650.280259][T24105] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1650.289423][T24105] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1650.298603][T24105] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1650.308335][T24105] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1650.318472][T24105] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1650.331716][T24105] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1650.340910][T24105] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.350408][T24105] usb 5-1: config 0 descriptor?? [ 1650.559176][T24105] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 126 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1650.769509][ T5930] usb 5-1: USB disconnect, device number 126 [ 1650.778555][ T5930] usblp0: removed [ 1651.199228][ T30] audit: type=1400 audit(2000000426.452:9881): avc: denied { create } for pid=27863 comm="syz.7.5683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1651.772878][T27874] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1651.782904][T27874] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1651.825719][T27876] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5687'. [ 1651.980983][ T5930] usb 1-1: USB disconnect, device number 119 [ 1653.433345][ T5930] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1653.614561][ T5930] usb 1-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 1653.623763][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.634673][ T5930] usb 1-1: config 0 descriptor?? [ 1654.303190][T27868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1654.891727][T27909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5695'. [ 1655.361734][T27918] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1655.371661][T27918] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1655.441767][T27922] netlink: 'syz.8.5701': attribute type 4 has an invalid length. [ 1655.492254][T27922] netlink: 'syz.8.5701': attribute type 4 has an invalid length. [ 1655.509288][ T30] audit: type=1400 audit(2000000430.764:9882): avc: denied { setopt } for pid=27921 comm="syz.8.5701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1655.730672][T22367] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1655.882148][T22367] usb 5-1: Using ep0 maxpacket: 8 [ 1655.889212][T22367] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1655.900834][T22367] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1655.910442][T22367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.918946][T22367] usb 5-1: Product: syz [ 1655.923980][T22367] usb 5-1: Manufacturer: syz [ 1655.928790][T22367] usb 5-1: SerialNumber: syz [ 1655.966664][T22367] usb 5-1: config 0 descriptor?? [ 1655.977467][T22367] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1655.987632][T22367] usb 5-1: setting power ON [ 1655.998582][T22367] dvb-usb: bulk message failed: -22 (2/0) [ 1656.040122][ T5930] usb 1-1: can't set first interface for hiFace device. [ 1656.053050][T22367] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1656.072230][ T5930] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1656.089736][T22367] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1656.101333][ T5930] usb 1-1: USB disconnect, device number 120 [ 1656.110176][T22367] usb 5-1: media controller created [ 1656.126116][T22367] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1656.140150][T22367] usb 5-1: selecting invalid altsetting 6 [ 1656.146136][T22367] usb 5-1: digital interface selection failed (-22) [ 1656.244653][T27930] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1656.301281][T27930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1656.320066][T27930] team0: Port device batadv0 added [ 1656.612245][T22367] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1656.621411][T22367] usb 5-1: setting power OFF [ 1656.626211][T22367] dvb-usb: bulk message failed: -22 (2/0) [ 1656.632009][T22367] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1656.637095][T27920] dvb-usb: bulk message failed: -22 (3/0) [ 1656.641300][T22367] (NULL device *): no alternate interface [ 1656.661557][T27920] cxusb: i2c wr: len=104 is too big! [ 1656.661557][T27920] [ 1656.690894][T22367] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1656.858411][T22367] usb 5-1: USB disconnect, device number 127 [ 1656.922401][T27936] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1657.158164][T27943] kAFS: No cell specified [ 1657.832300][T27945] Invalid argument reading file caps for ./file0 [ 1657.923155][T27951] overlayfs: missing 'lowerdir' [ 1658.059150][T27952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5709'. [ 1658.358307][T27957] fuse: Bad value for 'fd' [ 1658.621139][T22367] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1658.790635][T22367] usb 5-1: Using ep0 maxpacket: 32 [ 1658.797200][T22367] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1658.805796][T22367] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1658.814979][T22367] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1658.824060][T22367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1658.833856][T22367] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1658.843740][T22367] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1658.855209][T22367] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1658.868325][T22367] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1658.877446][T22367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.887047][T22367] usb 5-1: config 0 descriptor?? [ 1659.087849][T27971] netlink: 124 bytes leftover after parsing attributes in process `syz.7.5716'. [ 1659.720329][T24107] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1659.880336][T24107] usb 1-1: Using ep0 maxpacket: 8 [ 1659.890109][T24107] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1659.900542][T24107] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1659.909625][T24107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.917868][T24107] usb 1-1: Product: syz [ 1659.922096][T24107] usb 1-1: Manufacturer: syz [ 1659.926667][T24107] usb 1-1: SerialNumber: syz [ 1659.933043][T24107] usb 1-1: config 0 descriptor?? [ 1659.940422][T24107] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1659.948457][T24107] usb 1-1: setting power ON [ 1659.953257][T24107] dvb-usb: bulk message failed: -22 (2/0) [ 1659.960814][T24107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1659.970589][T24107] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1659.979229][T24107] usb 1-1: media controller created [ 1659.989593][T24107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1660.003965][T24107] usb 1-1: selecting invalid altsetting 6 [ 1660.009723][T24107] usb 1-1: digital interface selection failed (-22) [ 1660.016587][T24107] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1660.025530][T24107] usb 1-1: setting power OFF [ 1660.030323][T24107] dvb-usb: bulk message failed: -22 (2/0) [ 1660.036095][T24107] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1660.045783][T24107] (NULL device *): no alternate interface [ 1660.058413][T24107] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1660.193642][T22367] usb 1-1: USB disconnect, device number 121 [ 1660.658345][T27981] fuse: Bad value for 'fd' [ 1661.113365][T27988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5722'. [ 1661.195298][T27988] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27988 comm=syz.0.5722 [ 1661.377321][T13713] usb 5-1: USB disconnect, device number 2 [ 1661.687737][T28000] SET target dimension over the limit! [ 1661.859273][T24107] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1662.010611][T24107] usb 1-1: config 1 has an invalid interface number: 78 but max is 0 [ 1662.018835][T24107] usb 1-1: config 1 has no interface number 0 [ 1662.025293][T24107] usb 1-1: config 1 interface 78 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 1662.035269][T24107] usb 1-1: config 1 interface 78 has no altsetting 0 [ 1662.046555][T24107] usb 1-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 1662.055861][T24107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.065239][T24107] usb 1-1: Product: syz [ 1662.073187][T24107] usb 1-1: Manufacturer: syz [ 1662.077881][T24107] usb 1-1: SerialNumber: syz [ 1662.173179][T27994] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1662.648399][T24107] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1662.659428][T24107] usb 1-1: selecting invalid altsetting 0 [ 1662.666108][ T2339] pvrusb2: control-write URB failure, status=-71 [ 1662.675880][T24107] usb 1-1: USB disconnect, device number 122 [ 1662.682106][ T2339] pvrusb2: Device being rendered inoperable [ 1662.688169][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1662.700856][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1664.404748][T28018] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5733'. [ 1665.566605][T28042] /dev/nullb0: Can't lookup blockdev [ 1666.277071][T24107] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1666.326892][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1666.426822][T24107] usb 1-1: Using ep0 maxpacket: 32 [ 1666.433761][T24107] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1666.443434][T24107] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1666.452284][T24107] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1666.461348][T24107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1666.471822][T24107] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1666.481609][T24107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1666.492438][T24107] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1666.496757][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1666.505524][T24107] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1666.520086][T24107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.533032][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1666.533522][T24107] usb 1-1: config 0 descriptor?? [ 1666.543494][ T10] usb 5-1: config 0 has no interface number 0 [ 1666.565859][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1666.575421][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.583969][ T10] usb 5-1: Product: syz [ 1666.589289][ T10] usb 5-1: Manufacturer: syz [ 1666.594025][ T10] usb 5-1: SerialNumber: syz [ 1666.602147][ T10] usb 5-1: config 0 descriptor?? [ 1666.610901][ T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1666.848294][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1666.861921][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1667.226523][T28059] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5745'. [ 1667.344301][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1667.344653][T24107] usb 5-1: USB disconnect, device number 3 [ 1667.364477][T24107] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1667.379256][T24107] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1667.392777][T24107] quatech2 5-1:0.51: device disconnected [ 1668.198925][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.205263][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.050507][T28078] fuse: Bad value for 'fd' [ 1669.725303][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1669.886414][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1669.903505][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1669.928861][ T10] usb 5-1: config 0 has no interface number 0 [ 1669.966968][T13713] usb 1-1: USB disconnect, device number 123 [ 1669.972631][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1670.025691][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.033721][ T10] usb 5-1: Product: syz [ 1670.063870][ T10] usb 5-1: Manufacturer: syz [ 1670.169982][ T10] usb 5-1: SerialNumber: syz [ 1670.188253][ T10] usb 5-1: config 0 descriptor?? [ 1670.421554][T28082] ip6tnl0: Caught tx_queue_len zero misconfig [ 1670.924158][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1670.954809][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1671.032684][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1671.044056][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1671.060475][ T10] usb 5-1: USB disconnect, device number 4 [ 1671.250187][T28108] fuse: Unknown parameter '0x0000000000000003' [ 1672.479464][T28126] netlink: 'syz.0.5765': attribute type 10 has an invalid length. [ 1672.493992][T28126] veth0_vlan: left promiscuous mode [ 1672.504295][T28126] veth0_vlan: entered promiscuous mode [ 1672.511320][T28126] team0: Device veth0_vlan failed to register rx_handler [ 1673.280653][T28129] bond3: entered promiscuous mode [ 1673.724733][ T30] audit: type=1400 audit(2000000448.993:9883): avc: denied { getopt } for pid=28135 comm="syz.4.5768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1673.985388][T22367] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1674.142898][T22367] usb 1-1: Using ep0 maxpacket: 16 [ 1674.149338][T22367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1674.161182][T22367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1674.171617][T22367] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1674.180870][T22367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.191048][T22367] usb 1-1: config 0 descriptor?? [ 1674.506822][T28144] syzkaller1: entered promiscuous mode [ 1674.512376][T28144] syzkaller1: entered allmulticast mode [ 1674.661870][T28151] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1674.942574][ T30] audit: type=1400 audit(2000000450.203:9884): avc: denied { ioctl } for pid=28145 comm="syz.7.5771" path="socket:[111751]" dev="sockfs" ino=111751 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1675.478500][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 1675.508114][ T30] audit: type=1326 audit(2000000450.293:9885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28133 comm="syz.0.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff777d9c629 code=0x7ffc0000 [ 1675.574391][ T30] audit: type=1326 audit(2000000450.293:9886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28133 comm="syz.0.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff777d9c629 code=0x7ffc0000 [ 1675.641166][ T30] audit: type=1326 audit(2000000450.303:9887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28133 comm="syz.0.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff777d9c629 code=0x7ffc0000 [ 1675.766079][ T30] audit: type=1326 audit(2000000450.824:9888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28133 comm="syz.0.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff777d9c629 code=0x7ffc0000 [ 1675.904594][ T30] audit: type=1326 audit(2000000450.824:9889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28133 comm="syz.0.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff777d9c629 code=0x7ffc0000 [ 1675.997534][ T30] audit: type=1400 audit(2000000450.824:9890): avc: denied { unmount } for pid=28145 comm="syz.7.5771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1676.089353][T28173] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1677.061991][T22367] usbhid 1-1:0.0: can't add hid device: -71 [ 1677.448698][T22367] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1677.458997][T22367] usb 1-1: USB disconnect, device number 124 [ 1677.497844][ T30] audit: type=1400 audit(2000000451.364:9891): avc: denied { setopt } for pid=28169 comm="syz.8.5774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1678.921468][T28193] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1678.940178][T28193] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1678.952426][T28193] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1678.982095][T28193] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1678.994159][T28193] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1679.040343][T28192] xfrm0 speed is unknown, defaulting to 1000 [ 1679.047390][T13713] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1679.199655][T28192] chnl_net:caif_netlink_parms(): no params data found [ 1679.208250][T13713] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1679.229282][T13713] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1679.252620][T13713] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1679.272300][T13713] usb 1-1: New USB device strings: Mfr=9, Product=130, SerialNumber=3 [ 1679.289626][T13713] usb 1-1: Product: syz [ 1679.304265][ T5930] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1679.306064][T13713] usb 1-1: Manufacturer: syz [ 1679.321587][T13713] usb 1-1: SerialNumber: syz [ 1679.334402][T13713] usb 1-1: selecting invalid altsetting 1 [ 1679.349774][T28192] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.357028][T28192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.364548][T28192] bridge_slave_0: entered allmulticast mode [ 1679.373007][T28192] bridge_slave_0: entered promiscuous mode [ 1679.380995][T28192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.388556][T28192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.396540][T28192] bridge_slave_1: entered allmulticast mode [ 1679.403625][T28192] bridge_slave_1: entered promiscuous mode [ 1679.428743][T28192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1679.441221][T28192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1679.462384][ T5930] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1679.479618][T28192] team0: Port device team_slave_0 added [ 1679.485713][ T5930] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1679.501416][T28192] team0: Port device team_slave_1 added [ 1679.512263][ T5930] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1679.530449][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.537416][T13713] cdc_ncm 1-1:1.0: bind() failure [ 1679.544258][T28192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1679.551371][T28185] Bluetooth: hci4: command 0x0406 tx timeout [ 1679.557429][ T5930] usb 5-1: Product: syz [ 1679.561682][ T5930] usb 5-1: Manufacturer: syz [ 1679.565443][T13713] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1679.566684][ T5930] usb 5-1: SerialNumber: syz [ 1679.577962][T28192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.590047][T13713] cdc_ncm 1-1:1.1: bind() failure [ 1679.606605][T28192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1679.626470][ T5930] hub 5-1:1.0: bad descriptor, ignoring hub [ 1679.632967][ T5930] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1679.650931][T28192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1679.657137][T13713] usb 1-1: USB disconnect, device number 125 [ 1680.280763][T28192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1680.311215][T28209] overlayfs: failed to clone lowerpath [ 1680.319065][T28192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1680.337510][T28209] overlayfs: failed to clone lowerpath [ 1680.407507][T28192] hsr_slave_0: entered promiscuous mode [ 1680.421115][T28192] hsr_slave_1: entered promiscuous mode [ 1680.427082][T28192] debugfs: 'hsr0' already exists in 'hsr' [ 1680.435630][T28192] Cannot create hsr debugfs directory [ 1680.444899][T24105] usb 5-1: USB disconnect, device number 5 [ 1680.473886][T28213] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5785'. [ 1680.670130][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 1681.237968][ T5812] Bluetooth: hci6: command tx timeout [ 1681.846568][T28229] fuse: Unknown parameter '0x0000000000000003' [ 1681.973990][ T30] audit: type=1400 audit(2000000457.237:9892): avc: denied { setopt } for pid=28231 comm="syz.0.5791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1682.181121][T28235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5791'. [ 1682.266259][T28235] syz_tun: left allmulticast mode [ 1682.272049][ T8298] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1682.284758][T28235] syz_tun: left promiscuous mode [ 1682.294248][T28239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5792'. [ 1682.305684][T28235] bridge0: port 4(syz_tun) entered disabled state [ 1682.325466][T28235] bridge_slave_1: left allmulticast mode [ 1682.337714][T28235] bridge_slave_1: left promiscuous mode [ 1682.349581][T28235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.371816][T28235] bridge_slave_0: left allmulticast mode [ 1682.378887][T28235] bridge_slave_0: left promiscuous mode [ 1682.390639][T28235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1683.088585][T22367] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1683.238660][T22367] usb 5-1: Using ep0 maxpacket: 32 [ 1683.246477][T22367] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1683.255088][T22367] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1683.263816][T22367] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1683.273128][T22367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1683.282998][T22367] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1683.292824][T22367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1683.302646][T22367] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1683.316205][ T5812] Bluetooth: hci6: command tx timeout [ 1683.322469][T22367] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1683.332514][T22367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.343195][T22367] usb 5-1: config 0 descriptor?? [ 1683.574556][T28247] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1685.277560][T24105] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1685.388283][ T5812] Bluetooth: hci6: command tx timeout [ 1685.434511][T24105] usb 1-1: Using ep0 maxpacket: 16 [ 1685.448798][T24105] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1685.461331][T24105] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1685.476357][T24105] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1685.478800][T28261] fuse: Unknown parameter '0x0000000000000003' [ 1685.494325][T24105] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1685.496042][T22367] usb 5-1: USB disconnect, device number 6 [ 1685.505871][T24105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.517750][T24105] usb 1-1: Product: syz [ 1685.522199][T24105] usb 1-1: Manufacturer: syz [ 1685.529161][T24105] usb 1-1: SerialNumber: syz [ 1685.975831][T24105] usb 1-1: 0:2 : does not exist [ 1686.465512][ T30] audit: type=1800 audit(2000000461.729:9893): pid=28265 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.5802" name="bus" dev="ramfs" ino=112930 res=0 errno=0 [ 1686.519635][ T30] audit: type=1400 audit(2000000461.779:9894): avc: denied { map } for pid=28269 comm="syz.4.5803" path="socket:[112113]" dev="sockfs" ino=112113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1686.576768][ T30] audit: type=1400 audit(2000000461.779:9895): avc: denied { read accept } for pid=28269 comm="syz.4.5803" path="socket:[112113]" dev="sockfs" ino=112113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1686.664310][T28272] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1686.755954][T28277] netlink: 35 bytes leftover after parsing attributes in process `syz.4.5803'. [ 1686.773877][ T30] audit: type=1400 audit(2000000462.039:9896): avc: denied { listen } for pid=28269 comm="syz.4.5803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1686.818876][T24105] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 1686.928917][T24105] usb 1-1: USB disconnect, device number 126 [ 1687.466351][ T5812] Bluetooth: hci6: command tx timeout [ 1687.583626][T28295] fuse: Unknown parameter '0x0000000000000003' [ 1687.686285][T24105] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1688.156335][ T5878] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1688.175947][T24105] usb 1-1: Using ep0 maxpacket: 8 [ 1688.189914][T24105] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1688.203154][T24105] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1688.214418][T24105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.223386][T24105] usb 1-1: Product: syz [ 1688.227664][T24105] usb 1-1: Manufacturer: syz [ 1688.232253][T24105] usb 1-1: SerialNumber: syz [ 1688.238822][T24105] usb 1-1: config 0 descriptor?? [ 1688.245651][T24105] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1688.253730][T24105] usb 1-1: setting power ON [ 1688.258302][T24105] dvb-usb: bulk message failed: -22 (2/0) [ 1688.265538][T24105] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1688.276751][T24105] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1688.285916][T24105] usb 1-1: media controller created [ 1688.300878][T24105] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1688.316326][T24105] usb 1-1: selecting invalid altsetting 6 [ 1688.322061][T24105] usb 1-1: digital interface selection failed (-22) [ 1688.328969][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 1688.334082][T24105] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1688.343549][T24105] usb 1-1: setting power OFF [ 1688.348297][T24105] dvb-usb: bulk message failed: -22 (2/0) [ 1688.354125][T24105] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1688.363863][T24105] (NULL device *): no alternate interface [ 1688.364983][ T5878] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1688.386209][ T5878] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1688.400125][ T5878] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1688.401274][T24105] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1688.420302][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1688.430892][ T5878] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1688.440985][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1688.497824][ T5878] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1688.545584][ T5878] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1688.565231][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.596271][ T5878] usb 5-1: config 0 descriptor?? [ 1688.618046][T24105] usb 1-1: USB disconnect, device number 127 [ 1689.502100][T28319] ptrace attach of "./syz-executor exec"[18850] was attempted by " [ 1690.567355][T24105] usb 5-1: USB disconnect, device number 7 [ 1691.544190][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 1692.006593][ T30] audit: type=1400 audit(2000000467.282:9897): avc: denied { getopt } for pid=28344 comm="syz.0.5827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1693.224321][T24105] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1693.393876][T24105] usb 1-1: Using ep0 maxpacket: 8 [ 1693.404698][T24105] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1693.417292][T24105] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1693.429822][T24105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.439815][T24105] usb 1-1: Product: syz [ 1693.451297][T24105] usb 1-1: Manufacturer: syz [ 1693.457837][T24105] usb 1-1: SerialNumber: syz [ 1693.474201][T24105] usb 1-1: config 0 descriptor?? [ 1693.490709][T24105] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1693.510378][T24105] usb 1-1: setting power ON [ 1693.520445][T24105] dvb-usb: bulk message failed: -22 (2/0) [ 1693.528947][T24105] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1693.554993][T24105] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1693.577809][T24105] usb 1-1: media controller created [ 1693.601197][T24105] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1693.630323][T24105] usb 1-1: selecting invalid altsetting 6 [ 1693.640192][T24105] usb 1-1: digital interface selection failed (-22) [ 1693.648100][T24105] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1693.659536][T24105] usb 1-1: setting power OFF [ 1693.665484][T24105] dvb-usb: bulk message failed: -22 (2/0) [ 1693.671441][T24105] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1693.682044][T24105] (NULL device *): no alternate interface [ 1693.698559][T28355] dvb-usb: bulk message failed: -22 (3/0) [ 1693.721972][T28355] cxusb: i2c wr: len=104 is too big! [ 1693.721972][T28355] [ 1693.750318][T24105] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1693.774244][T24105] usb 1-1: USB disconnect, device number 2 [ 1694.295401][T28371] kAFS: unable to lookup cell '(,c¾Ì' [ 1697.615086][T28397] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1697.655210][T28397] VFS: Can't find a romfs filesystem on dev nullb0. [ 1697.655210][T28397] [ 1697.917592][T28403] netlink: 'syz.8.5842': attribute type 12 has an invalid length. [ 1697.926759][T28403] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5842'. [ 1697.941889][ T10] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 1698.114935][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1698.136897][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 1698.160133][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 1698.318345][ T30] audit: type=1800 audit(2000000473.585:9898): pid=28396 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.5840" name="bus" dev="ramfs" ino=112358 res=0 errno=0 [ 1698.943941][T28411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1701.325328][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1701.672837][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.703029][ T10] usb 5-1: can't set config #1, error -71 [ 1701.722679][ T10] usb 5-1: USB disconnect, device number 8 [ 1702.029114][ T10] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 1702.204084][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1702.215806][ T10] usb 5-1: config 0 has no interface number 0 [ 1702.224202][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1702.236595][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1702.250399][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1702.263991][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1702.286138][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1702.299165][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1702.316642][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1702.327273][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.378007][ T10] usb 5-1: config 0 descriptor?? [ 1702.409867][T28430] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1702.437023][T28430] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1702.525931][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1702.825013][ T5930] usb 5-1: USB disconnect, device number 9 [ 1702.830972][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 1702.885491][ T5930] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1702.962152][T28442] overlayfs: failed to clone upperpath [ 1703.005533][T28446] ldusb: No device or device unplugged -19 [ 1705.025269][T28485] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5863'. [ 1706.047990][T28494] MPI: mpi too large (130952 bits) [ 1706.180823][T28502] fuse: Bad value for 'fd' [ 1706.186508][T28502] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5869'. [ 1706.196438][T28502] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1706.657929][ T582] unregister_netdevice: waiting for netdevsim0 to become free. Usage count = 2 [ 1706.790915][ T582] ref_tracker: netdev@ffff8880819c4620 has 1/1 users at [ 1706.790915][ T582] xfrm_dev_state_add+0x3a5/0x1080 [ 1706.790915][ T582] xfrm_add_sa+0x2b5d/0x5e80 [ 1706.790915][ T582] xfrm_user_rcv_msg+0x483/0xc00 [ 1706.790915][ T582] netlink_rcv_skb+0x159/0x420 [ 1706.790915][ T582] xfrm_netlink_rcv+0x71/0x90 [ 1706.790915][ T582] netlink_unicast+0x5aa/0x870 [ 1706.790915][ T582] netlink_sendmsg+0x8b0/0xda0 [ 1706.790915][ T582] ____sys_sendmsg+0xa54/0xc30 [ 1706.790915][ T582] ___sys_sendmsg+0x190/0x1e0 [ 1706.790915][ T582] __sys_sendmsg+0x170/0x220 [ 1706.790915][ T582] do_syscall_64+0x106/0xf80 [ 1706.790915][ T582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.790915][ T582] [ 1706.991972][T28511] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1707.037227][ T30] audit: type=1400 audit(2000000482.289:9899): avc: denied { ioctl } for pid=28504 comm="syz.4.5870" path="socket:[112582]" dev="sockfs" ino=112582 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1707.260237][ T30] audit: type=1400 audit(2000000482.399:9900): avc: denied { read } for pid=5158 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1707.287721][ T30] audit: type=1400 audit(2000000482.399:9901): avc: denied { search } for pid=5158 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1707.330744][ T30] audit: type=1400 audit(2000000482.399:9902): avc: denied { search } for pid=5158 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1707.352808][ T30] audit: type=1400 audit(2000000482.399:9903): avc: denied { add_name } for pid=5158 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1707.379537][ T30] audit: type=1400 audit(2000000482.399:9904): avc: denied { create } for pid=5158 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1707.454402][ T30] audit: type=1400 audit(2000000482.409:9905): avc: denied { append open } for pid=5158 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1707.478199][ T30] audit: type=1400 audit(2000000482.409:9906): avc: denied { getattr } for pid=5158 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1714.254441][T12780] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)