last executing test programs: 15m43.847543274s ago: executing program 4 (id=809): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x503, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}]}}}]}, 0x40}}, 0x0) 15m43.568463554s ago: executing program 4 (id=810): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000040)) syz_open_dev$rtc(&(0x7f0000000000), 0x5, 0x4c1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, 0x0, 0x20008000) sendmmsg$inet(r1, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r6 = openat$comedi(0xffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x220a00, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x3, 0x7ffffff7, 0x884e1, 0x2f, 0x2007, 0x7, 0x8, 0x1080ffe, 0x1, 0x4, 0x8500, 0x1003, 0x1000004, 0xb, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x8, 0x7, 0x40000, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x0, 0x4, 0x7fff]}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0x5, &(0x7f0000000040)=ANY=[@ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c80)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_LABELS={0x14, 0x7, "b4c069143122e33e22f7e8b566780204"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x700}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 15m42.590083611s ago: executing program 4 (id=814): r0 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {0x0, 0x27}], 0x2, 0x0, 0x5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xbf00, 0xf2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_sco(r4, &(0x7f0000000340), 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@ipv6_delroute={0x38, 0x19, 0x1, 0x800, 0x25dfdbfd, {0xa, 0x0, 0x1c, 0x0, 0xff, 0x1, 0x0, 0xb, 0x3900}, [@RTA_OIF={0x8, 0x1e}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWT_BPF_IN={0x10, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x9, 0x2, 'I#*!\x00'}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008055}, 0x20000800) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'team_slave_1\x00', @random="013181329eff"}) 15m39.413899368s ago: executing program 4 (id=822): socket(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\b\x00\x00'], 0x40, 0x4040800}}], 0x1, 0x4000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="4100000003090000140003006970766c616e31000000000000000000140012800b0001006970766c616e0000044d0280"], 0x48}}, 0x4020000) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4081) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000060000000600000018cb000080100000", @ANYRES32, @ANYBLOB="2800000000000000000000000000000000000000b6ea7b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000001000000020000000700"/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="e7470c0000000400000004000000018000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='io_uring_task_add\x00', r5, 0x0, 0x1}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[], 0x1c}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0xffffffffffffff80, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x13, 0x0, 0x0, @u64=0x7ff}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_open_dev$usbfs(0x0, 0x73, 0x141341) 15m37.157391595s ago: executing program 4 (id=831): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000a40), 0x5d, 0x4000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)) syz_usb_connect$cdc_ecm(0x6, 0x5a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x10, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001200010a27bd7000fdffffff800000001400a800fe80000000000000000000000000ffffad8b19fc299aa4ec222d5ad3651a326a175b2e1ba82e1675d3d0e3b5b008c0570400b4ebf31a585fd14b29242bc92047080de64c5f16d40f5f76c60bf39bdc84eebeaae7f8f1dfbfac48db129321e15c58330d9ad91f2a7cddd8722a32da62c6a3f777558612d20d4f2eb60e345aa09e8fe7b2d6836594b25f2bb7d8a84e6cccee637f5038c90b3a4887c38a7d55000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0xa, 0x4e20, 0xffffffc7, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x49}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000002c0)="90a0df655f851094367272bb47fc31a92d6a899105d64124a414aee11e17fe83a60ee38a78f227f3ae874013ae9a8718566085cdba3966f22ad2830660", 0x3d}, {&(0x7f00000003c0)="d8f757ec85c47388de8639c16e3eac9a6118f1cf9b4f9dff7fc1ccb636dab0374758344ec29dd8526e46ffe01439ac891709d5afac69fd41e2feed7ebb3d5f7a791fee2c9dae651bf745b88e628655ab73bd95bbda27ce2cbd07b340b2b2ea5d3c47ca0e7821cea2af972e58b825d2d9c0aa6dc1", 0x74}, {&(0x7f0000000440)="c2358000ad28ea995f647588eadf007d4763181403230deb4291102500f6889d667dbfbfeab0ede813515b46b7c1986249a68c0dfa4ecbd1559ec1c4471af06dd46399dcbb5f9df95df05529f438287fcbdec3711a9962faedb1c9e331452d1da7553c37df415dedaddeb15f1dc7170894179f1791657aaa6a04899b9c3526ad1978c42a91814aae5c9a60121846b1692e6004caea6c884577724ea6a846bb7bc0d24ae9c8b89d8c754ddeea510f37d51f8d968f157a592077cbb2e733923b02c5f9c4fd4e2b556e5536209fc4099b3b7020bea2400a0a66c0f3dd3fa2ba155501190882d1dccf", 0xe7}, {&(0x7f0000001480)="5fee6e66509e86a5e3fc04f6b18dcdae05477e6a928761317753c4dd367a5b7e52e8793632002d0846712dbbd6354f64cf479a889c3150e817906421d6cd9f4a6b0ee4cce373dd733d6b843391593bde9cd52fa5d99a1ebf321e877b0da6a0cd3de5322872edf3258dfdafc26dd6249af43343766c8d9a07dc93ac12a507898dbc7858df023f25396a0f7a551974e62a8667eec5aeba87ec83098b4d8b3562fa6fded8d45a91f79d39cae17f95eff9147abc93e874f6d0ef421ce450cfc5d61751b3052d5750b132440530c4ea47bae0d770ef28515c79333c78ad2d79ddc686af3c5f25b92eb04d3ad7ace9b36dc4b5bbed59fe708e6542a4c5028c757e3eb74bcac4672e9d338852c9f010896ac312d22e89be034f1e48729a32dea6e8d426e2530a1b42e4f5a7315868fe8ac09164530294e23374e32cf5c42d6b1b51ae6f53fce448eeb82996a1a5f2ea7781405ddf26e90b9b0f30e5267e1d361eef9683a8aa4e51747c49b6ed8bd6ad4de7674a3bfee7e30f342273253a25995bcc3a9922df1344f4b4f1b31be0b6b9fde7999ab3bd6fe17d68bce5f955bf673d2cc642703d298628f86113fa7d58571fe1d324beb7f8c8412ef59079f5297f78f2e04f3e6ef5bc6740d494605cb6464abd77a0fb82f9334bfea5ed6923478db297266b3ff4370630e573194bcedd28d7e3e14f214c7286d2d2a77578cb58f797100725c7d4340b689fef6a0d8f328ad2ecf18d5ef31080e2ee6f7e711b828d9dffb7a2fc243ec19423ddb4d887158cfe1eb4870e16e6451e08debaa58083bd6cdff6b104180c301ea495a1cf36cf38d2db448caef5b6fa9df0d131187382c24c71629f4b4e8c39aa21b514e12a74cec4ec9d9ccb2715e0d8d5adc10ab2690d27a966ba33b5351ae43d3d68e553f5fccfab3009e1bd68af75449c094480018c869d3105a9978a52545adcfa507d8951c1790a6317a0e3022146b7943181f866febfaf1109f1df6bb63453828d29b797559c8dd48382e5614a0248b1270c6f5b4ed44b33195462fb72713810fde479610299c2acd32ebae6c1b7d1f623d71b685d3add502dfa20cc17c96fe040594bede7912482e15bbda801398e3187f1df0150a9044341632168d09320b484a2df6dd557df8f12ec4c8f1d0e561a2c85b48e69c5a464c46e3b9f74ce5619915269372b3195b29f5e177cbe84e63967d1c344b711939056725ce598d17824fb08840c2c108334ced40d9089c96a27ae13091bb7991380f0d54357c5ce7ddf1973b0f3cdb80dbabcc797688ec76a322d12bf104d7e1a8306c60556689eda3dae376a780ec7fa112c92a32562854002786eb4a74158fcb30e66f1577e6afda520072e464e6509ea10f0d4efa0d8a879bcb2c213638f36b0b496c6d9153bb66391dec66c42e86ffef18836df642f563266bd4bb68dc9db33eafcb5e2de23cbcc737c2f3a49315e9c0826c362fa0d5ae8d669d8c4e0c7e163f0d61724e9d6cdee8e3d3729bfc74900c63a966d6676818ad8cc309105fbc31e834af27d749027a1e80aae8c724a15c6b036f40e721b44cee5ea4a014732565c86d3697f1badeff4c8995c9630a89ef18367f23ed30850ea3f7d96210be4b380580c95a1b4677d42afc3a008396b202196d61b6160a488235f9d311cd3c46a11d2c8f8b60d23693968fc4a91ec920bc879bdc0a34639d0f3b031fab7e97066455fb9cb4e461799212ded3d7894def4c7da2346ca2d2c2c0857891455efb4203ca0450ab92cdd408dcdb2af92be9499176d1c463c1eb244fae4926b4c0974ed18967bdb8a3a4129a7aff00f0d30972df3d3cdffd62995b7fc4d6ce22df9f842678de89279974e8fe7128d012d616e9c64e5d63761273187f5fbfd9986fe0afb6254283609de9f867e6e512d332bc7a7964d3d30b43446864b7804720bc64f9b43c1d0030cd8e2fc842830d831936cb538b8437c6bb8aadf76e5a89aad3f35ebdf54a5cfc3d1f4bcd48d1feb6b79ea73c56ca59cb3af0a81aac8645209cdded0e58fd2768f30b6bd1a76c9d45c4e68760970e945b63af45dd00b2b4002a27f22623bd5a25975bf5dcbfc353d26c76da5351a6c4a5417b13e48343608f412a75fe49d1d7a0c99aa0c467b077de20efd6edc0437ae9880970f6da08cc3fc11d918a0dd7373afdaf9eff3324e0b7913038519aa3aa03d0f7a43a215649850652c4b3b59c5257e41263ad8047cb3309303e3535762d732513fc74c9ad4a064bd971f50fbabaf4d9dde9519d3c16adc6e6d09eceb8a079b3834d1ed3bba08bafd06fb929302200fd7ff13fac7a73ebc3d24eca3698433fd1932cbd2ee00f4b9f874cfa50ecf68654286996eb41dd25a748935b119eb123639527f95a0bdb1f0663d09f7105f221143d6ac6ab476f0c454e3a5801c84e0e8ab7484a205c0cb1c8fa5c5fddcd969616429e8266968c171aa4070a6c92e137661c6a99c489256480b7aedfe42af0dfebb95f3ee0cd53f426033c9f5bbb87fdab022ce6ce4ac2350a7780f40a5fceebbbcead07869ea1daf8e1ca1915d9e17b9e8aaeca0242c05f5ea7a49e5d27588e754a99b718f52dd2c2e5af4255e9f9052aa6d2f916218d2a3e4b3408399611b040f92cd94ff49675ff956af8c6d42e7cdffe2d979ac3f0e74515c859f67c61542dc61db81dd4bc838522af9cf6093d849a58ffc6167a9d538b5808c798cfbfeca4ba91add60ef2e562794d9b47b46319097c97c946b4ea3d06470ec8ada4ff4f0d6c0d1ede6cdf0dcb80ed4563540135758ca22256e2782b714ef2666511f90b8caa7f8acd3ddf25e8844dd7d415845210b44a0cdcf041501a6961fc54b99f1e56a1e9a36bb34fed0337e4059a3de63bd083d3fbb525ede0c21301858c83147af906d3c4435b90872b91e827f2aebb329af1abbdca4aaedbf2fb17edd6700f78d784675e8d66153cd628fb063511cca9f9893f2d0a89847efd38e3f9243d9ac2afdb6b4aa98dffbe0a1539044bb47fa9c9b1fff6d20c246783811f68c00e0f1c2c7efd50bc8b7b82177d6762fd9080425bc2004f1e5759b2e659d65529585111970df6700dd1ada693b99d3e3db632e4f0a13f5b4b20154eced47e5d5602b93cf6e2ce35056d62a113e6d5cd815e2ea2c25a7ad0da8ef88eee2b3a168585550eb566bc5e9cdade4bfdc009390eb841caaeb957ae7adc897ebd257e9eb4da9be87a8a5b255eaa15e8a8bdc4839b15dd02b38e9b33bf46d25650d3d7650b8c5f0a694b5a7f432432232efc6b134dca819f3231510410500d597177e1b5e59934c185297412544651b97ffa057470b7a76595322e2be7b2caa5e48508df2135f1b86348b81fea5e7dba8229c84fa4ac3b45c4ccb239856bc30a359b0933641a903b6866b9769583e72d594daa3542b1899da6db390fa37ceaca29cc0bc49a562ef58ce57919444c3a2ca8959c3c4f225d7bc869f71c919afbebf1d7b1c6c45f7673de1d7a7f5fe19604d429cd3521748f993b147a68f8f644a7b6ec30dc49f2a24c68e01288b587127da18dc8201fb319ff57a53cc2c93a3e5993f68791f8ce94f68530572dad6dc1ebf80ab0c65317e395550243a1ea48d71c3fa78662289a54ea6eb09d79a09e549dd73e193ab91cc1c4871b6da161cb4fb3722162d02536d61e49a1cc1e31ff75f5ddbf5fc5cb79eb5585cf36510295967c22e1f66a2e1fd60e177ee599ef379fddedd89aa30d1761c23c37447d35c84f4fcd93af54c2c927244ca881058515f2feac1db30be21f5d2b3d041473b1345fda28612b70a5422a51220e39c665c8a9b0f314c240e666f0188ebc0283a2d8cb27658c8eb079d9e4fd4733b4a0aa914905f12aec0d8b43f93025ce144c8b84592995f3929d432090bc08287526e474786c252e4f3e7cda34fe0e793f20e01f39f8c787e2e18870d4a0fd4e153aa476d0d2133134c5583ba39597b49ba25db2ac80b0665806c91c54da882347490f4ce9fb03157507c0574d2744d9916808992d32b911449ec00e1b773b4369fa7c30173d737b6a6188770174d7a15046fabb6e331b5c5e0490675255dfd0e494fb188e3f39f77591700b12898ca2b2a4d0b18df0a1b53da63f6c11db0d96b6979177fb7e4c38a6fd2f54585955adaca155927f74768dd3a8a526e0d254a12668ca12fddfd42dd5ac385cb7bf93403a2189307e8e45fbf3e376d81f536136cbfce220834d512dcc336ca51fa9ca096d3a1c7dab7ea10a6e50282b7f51a6ef44a9c072a1a2774028d54eccce3787313828a3cf3ea22830e2d9949bcfb1e38782736d1a3be28e63c42213d5ecad1af46ab6c59052c2a9c4f7f914cebf81b31223eb93e3c780ba8dab898b58a58ffef28c303f43e4a0d733e1befa6293b617576246ff1b16deb081416451da0d731c68063324ba89ab340b0d63202d6d86b52edefda4bc97563ddc12b12c840ca7682372deddd234cde6b069ae2bd4f5813a1a2c5343255f652ecaffe6c2f13098e67b381852d12b6d9faf18dc33f562a20b21bbde90db885d23c653af12808c76919b02290e609f10b1da87f3cc1e5acf3e78da2959290e5c66d0aef0fad8aa5b9ab5b401c5216050e100828efc83c96c424b0ef2500f6c479c6416407f7556ac65bb62f5ee204cca03a2c0de27791de045b1079de14d8031c6ea71c93094b45e6df60b354c2841916f1d244dfbf8d333d0cfa515481ea653ed95d2834d0e0ee54fc76ebf6fed1d5d744d1aeeaa2c04ada8642970a4b7a009df16725e892f50922f467852663903ee56a372c9d5267b0ac131a2aaa9f58c9cdc68d0659ed3b3053b40d12cb0513d57bc85e2ebcd715e84daaf6c821bc7cd37d35bb829f5690c3a5acb8224fc605818767359bff4ee687bec5065b4486a1eaee90a109153357a3a435b68a68a0f1ea3a981cae40664e66c57863ffd419c9fc908276bf80eeea7d771e12daaeae719b0019486de6d1ca3b7e2414d4579b09fbc9997fda1d354ed2f09feec6484df73d2d5600cbb775047bb5d8c242d18dbf020f7d95ef92adf38a1207fe280de5fdbd63dbadde8a14ff8159539e2ed55df7592cf3b4080f30ba29d3d4e09b182e39d575e5be5faaebc6fa5c484713f22118f849dad2269ab78538beed08ccd4fe359d84ac1e006ea58e14429b1c9e57c921b92422ac586afc1c395ff2be8684b0cc82661d461f5344e5566276f3c651077e1f7d5581f7e3472f14d8766efabc60078947bb51ab28c892f1381cd128130133f1899c7e7bb9a025184e3e2839a6ed21552b9e66d40cec0bc2f6922591d6321554c8fcc42f768131c5e8fda550dcf865a867961d597dcf46fe1f19e4460c03a4c487af18b49cf9db58a232a59a026952e3f6ba26421a745f6e850c5cd8d401d2ca7a9291f1f4bf3d6e9465fb5328da7fcb1fb7fdd1b1785ae672a0a993ba9dcac32b6dcbbd8b15b9b82db494ba81ec620569341ca3d14bc67f4e84c4069b0ff2b29bb64ac556ff568c561378a6f5f7eeb83275e7b49e2c958a94cf67e7e1ad02520c2bc9b20ab9eb75f3a34e7161dbe337aaf6668c18f8305a455a4313086f150b5cc4457aef33333a53d862eac522dd55634f046b99a3920a9b1a0d78453761a47bafe13a3d1ed2b4e6a0a2f78ba43f195bc0c81ccd2150d12c6869d3d9feb6ef1cb8a5bfc1471d5f7703a4f097ea07911d272a80068c697e70dfc5c70d59cbe3dd2318bcb00d93ecabd83b340c12842c2bbd4b18028380991da98dea21a454407397c43c76711804a43c97c578c5ec0d639740d258", 0x1000}], 0x4, &(0x7f0000000580)=[@hoplimit={{0x14, 0x29, 0x34, 0xffffffff}}], 0x18}, 0x4000001) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 15m32.623566644s ago: executing program 4 (id=842): r0 = socket(0x10, 0x803, 0x0) set_mempolicy(0x7fff, 0x0, 0xd4b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SET_PDEATHSIG(0x1, 0x41) set_mempolicy(0x0, &(0x7f0000000040)=0x401, 0xff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, r4, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$rds(0x15, 0x5, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000c80), &(0x7f0000000cc0)={'enc=', 'pkcs1', ' hash=', {'sha1-neon\x00'}}, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000140)="9917ba0c8e26ccb3e4ab2c4bb788cadc7c7e7a163b00eee2ac3e422cd00f41235848e10e54e673f73ae335be22725865cebe1216c73a24365ba7d5e4d9cb027ea918e0ba9176030601d701b5b6a77050ee0a327bd1f200ce9166e670ea5fd42fef67e65e5c141792c2c51cd3b1dc59292311", 0x72, &(0x7f0000000300), 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r11], 0x3c}}, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0xc01, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c1}, 0x4008010) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="1748000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) 15m17.326814636s ago: executing program 32 (id=842): r0 = socket(0x10, 0x803, 0x0) set_mempolicy(0x7fff, 0x0, 0xd4b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SET_PDEATHSIG(0x1, 0x41) set_mempolicy(0x0, &(0x7f0000000040)=0x401, 0xff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, r4, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$rds(0x15, 0x5, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000c80), &(0x7f0000000cc0)={'enc=', 'pkcs1', ' hash=', {'sha1-neon\x00'}}, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000140)="9917ba0c8e26ccb3e4ab2c4bb788cadc7c7e7a163b00eee2ac3e422cd00f41235848e10e54e673f73ae335be22725865cebe1216c73a24365ba7d5e4d9cb027ea918e0ba9176030601d701b5b6a77050ee0a327bd1f200ce9166e670ea5fd42fef67e65e5c141792c2c51cd3b1dc59292311", 0x72, &(0x7f0000000300), 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r11], 0x3c}}, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0xc01, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c1}, 0x4008010) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="1748000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) 10.706444481s ago: executing program 5 (id=3510): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x14, 0x2, 0x4}, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdba) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c80c4"], 0x250}}, 0x4c000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, 0x0, &(0x7f00000000c0)) 9.690762483s ago: executing program 2 (id=3513): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00000000001dbd66f1dc67897e00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)='%pB \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = mq_open(&(0x7f0000001600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\aXg\xbb\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x8a=\x0f\n*\x8a\x99\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5\x00\x00\x00\x00\x00\x00\x00\x01\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbbV\x1a\x8a\x03#T\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8', 0x40, 0xb, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) mq_open(&(0x7f0000000280)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x2, 0x17d, 0x0) 8.976724763s ago: executing program 1 (id=3514): syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x3b0, 0xffffffff, 0x1a0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffffff, 0x0, 0xffffff00, 0xffffff00], 'veth0_to_bridge\x00', 'macvlan0\x00', {}, {}, 0x88, 0x40, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x2}, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0x0, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0xe7, 0x4, 0x44}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x80}}, @common=@unspec=@helper={{0x48}, {0x0, 'pptp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x18, 0x0, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000800)={0x0, {0x3, 0x0, 0x8000005, 0x3, 0x5, 0x80000001}}) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$uinput_user_dev(r2, &(0x7f0000000900)={'syz1\x00', {0x0, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x3, 0xbffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4e0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x5, 0x70000000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0xfffffffe, 0x105, 0x0, 0x0, 0x80008], [0x10, 0xffffffff, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x9, 0x800, 0xffffffd6, 0xfffffffc, 0x0, 0x1, 0x0, 0x1, 0x2ec6a, 0x5, 0x40000002, 0xffffffff, 0xfffffffc, 0x7fffffff, 0x8001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x8c, 0x0, 0x0, 0x4, 0x5, 0x3, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4000000, 0x80, 0x2, 0x3, 0x0, 0x9, 0x800000, 0x7], [0x0, 0x4, 0x0, 0x1000000, 0xffffffff, 0x1, 0xa000000, 0x0, 0x0, 0xb78, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x10000, 0x0, 0x80, 0x520, 0xd, 0x0, 0x0, 0x800000, 0x1ff, 0x0, 0x0, 0x2, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x0, 0x3, 0xa9c5, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x100, 0xff, 0x80000001, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x8, 0x6, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x5, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x1, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0x0, 0x4000000, 0x0, 0x4, 0x6, 0x0, 0xffffeffd, 0x2, 0x0, 0x0, 0x3, 0x4, 0x88, 0x4, 0x3, 0x0, 0x0, 0x1, 0x80000001, 0x100, 0x0, 0x3, 0x7, 0xfffffffe, 0x53591b24, 0x7fffffd, 0x2, 0x5, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x3, 0x3]}, 0x45c) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) socket(0x2b, 0xa, 0x1) lseek(0xffffffffffffffff, 0x101, 0x3) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') 8.890466094s ago: executing program 5 (id=3515): getpid() madvise(&(0x7f0000bdd000/0x2000)=nil, 0x2000, 0x61) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) mkdir(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = fanotify_init(0x200, 0x40000) fanotify_mark(r5, 0x1, 0x8000018, r4, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r6, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r8, 0x2) bind$alg(r8, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200003, 0x200003, 0x802, 0x4, 0x7}) 7.849993496s ago: executing program 5 (id=3516): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000240)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000"], 0x113c}}, 0x8004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r5) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x20000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xdaf}}, './file0\x00'}) r8 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @mcast1, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x20000, 0x0, 0x2}, 0x18) 7.133462581s ago: executing program 0 (id=3519): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160004000000000000000000fe880000000000000000000000000001ff0100000000000000000000000000010000000000000082000000002b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000096cd4c7d212ca3702bb6000000aa000000002b"], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1, 0x0, 0xf201}, 0x0) 7.108482655s ago: executing program 3 (id=3520): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0xffff, 0xfff9}, {0xffe0}}}, 0x24}}, 0x4) 7.055351771s ago: executing program 1 (id=3521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0xfffff000, 0x0, 0x4c000}, 0x40) 6.884283723s ago: executing program 0 (id=3522): socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="002100000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 6.88148997s ago: executing program 1 (id=3523): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000002c0)={{r0}, "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"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) read$FUSE(r6, &(0x7f00000025c0)={0x2020}, 0x2020) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x3, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaede, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, 0x0) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x300) fsopen(&(0x7f00000002c0)='minix\x00', 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e0b06c900"], 0xe) 6.856545074s ago: executing program 3 (id=3524): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000004a00030000200000009400000a00803f"], 0x1c}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) syz_open_procfs(0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@typed={0x4e, 0x7, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r8, 0x1, 0x400a00, 0x25dfdbf9, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c080}, 0x4004000) 6.632290566s ago: executing program 2 (id=3525): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r3, 0x0, 0xe, 0xffffffffffffff80}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r5 = gettid() r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r4, @ANYBLOB="049c01000750050008001300", @ANYRES32=r5, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000000)={@loopback, 0xb, r4}) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) 6.086922044s ago: executing program 0 (id=3526): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x0, 0xb, 0x1, "966b30e820215d3275672580dd437d2d78e4f100000000fdfdffffffffffff00", 0x384c4150}) 5.876754699s ago: executing program 3 (id=3527): openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x801, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 5.312903642s ago: executing program 2 (id=3528): socket$inet(0x10, 0xa, 0x7) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000070800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000500"/28], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000002000000b703000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000008000800f9c5c13f5d2b60de432841e689c0c9bdb4f95c5377d92aea56cdb218fa1ed5ac632974190fb1315c8c90f365dbe53aca4a8de4cdf8c925af5cedb3a3f2b6", @ANYRES32, @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e010100000000010094cd49fe704c23ffbf000006000000e0000001e00000010a010100640101"], 0x28) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r7 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x6) 5.23084667s ago: executing program 3 (id=3529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x14c, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xd0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xec0e}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe60}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x14c}, 0x1, 0x0, 0x0, 0x48054}, 0xc800) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x3, 0x0) read$msr(r1, &(0x7f0000000280)=""/63, 0x3f) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x8, 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000340)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000380)={0xfff, 0x3, 0x2, 0xe41}, 0x8) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, 0x1406, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x44040}, 0x4000080) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@private}}, &(0x7f0000000640)=0xe8) setresuid(r4, r6, 0xffffffffffffffff) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r7, 0x8008af00, &(0x7f00000006c0)) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000700)) r8 = socket$can_bcm(0x1d, 0x2, 0x2) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r9, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x10, 0x3f6, 0x200, 0x70bd25, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040840}, 0x24008081) cachestat(r3, &(0x7f0000000840)={0x71, 0x80}, &(0x7f0000000880), 0x0) connect$can_bcm(r8, &(0x7f00000008c0)={0x1d, r5}, 0x10) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000900), 0x109200, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000940), &(0x7f0000000980)=0xc) ioctl$TIOCL_UNBLANKSCREEN(r10, 0x541c, &(0x7f00000009c0)) ioctl$SIOCX25GDTEFACILITIES(r10, 0x89ea, &(0x7f0000000a00)) ioctl$UFFDIO_MOVE(r10, 0xc028aa05, &(0x7f0000000a40)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x1000, 0x2}) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000a80)={0x0, {}, 0x0, {}, 0x2, 0x1, 0xb, 0x1, "42a41428fd80bb46b379ed9d0aef8357d9846403321d543ffafb41a89b6b71f0f79cff38548ee82ed815cdbda9ba5dc6c90e4bc999eceaaee96062e0255cad7f", "4f50a76661e910b38fba66039701cc063f37a928d335d33c190f16c92e941ddb", [0x585, 0x9]}) ioctl$SOUND_OLD_MIXER_INFO(r10, 0x80304d65, &(0x7f0000000b40)) bind$rose(r10, &(0x7f0000000b80)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, r8) 5.112170417s ago: executing program 0 (id=3530): add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x6}, 0x22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200), 0x0) r6 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68) syz_emit_ethernet(0x107, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00001100ff8a9ec64ab8068fcd7dc5ea86b299f42e6eccc1962f4820ebc2a82324763e4734dbdef83e111878f45b6554061a5dec7ea2583a2276bafc68ea11ce9ba2fd482b60b68c15d52e8fa6765a0454c7ed400349f0513b4bcd2b8368cfdbd1bb0a421b30ce868ad82653325eea40631e5f3686ace6366a5cc3cea66e4b3351e5a6a8078590d30300000000000000b9ea6cbc9e428ff1535e71b7eee7b3071299702e06b11d"], 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.111744576s ago: executing program 2 (id=3531): r0 = memfd_secret(0x80000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0xb) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c044}, 0x840) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000340)={0x28, 0x100000001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_setup(0x57eb, 0x0) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) set_robust_list(&(0x7f0000000200)={0x0, 0xffffffffffffffff}, 0x18) close(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 4.154804139s ago: executing program 3 (id=3532): madvise(&(0x7f0000bdd000/0x2000)=nil, 0x2000, 0x61) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) mkdir(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) r1 = syz_clone3(&(0x7f00000005c0)={0x4802c100, &(0x7f00000001c0), 0x0, &(0x7f0000000340), {0x2a}, 0x0, 0x0, &(0x7f0000000380)=""/215, 0x0}, 0x58) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x40000) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r6, 0x2) bind$alg(r6, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) 4.139971082s ago: executing program 0 (id=3533): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x13}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.473738715s ago: executing program 5 (id=3534): syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb7}, &(0x7f0000000000), 0x0) io_uring_enter(r2, 0x3e09, 0x0, 0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e290042180300182580000000000f000280000c0012", 0x2e}], 0x1}, 0x0) 3.402276804s ago: executing program 2 (id=3535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) connect$netlink(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000300)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x8000000, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x104, 0x4}, 0x50) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, 0x0) 3.195604008s ago: executing program 3 (id=3536): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="09040400001002002c001280080001006774700060000280141c4d42aea44d1eac2c2c5d2dfc1e000000000000000000ffff0000"], 0x4c}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1d, 0x0, @thr={&(0x7f0000000180)="3b2ac9c6dc30eee0f54c51f05770bc8f67cee7e31b9934dc01311aec08bc95e1a98919a37abe6bbf12ae58b6d1428ca9f0e6d93e726fda33deb09ed726eadcdf109e65d0847026be24e410a6ddbbdef843f73b1a942198aaa676b0", &(0x7f0000000400)="e358f6e3f52973a00799c7f672057718b49727e3c4508c449a07ba127a9280ff15b5f82c87f7f0d7123aca43bb725aeab091980bcee0a55442510d5faffe"}}, &(0x7f00000003c0)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r5, 0x80085610, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {r6, r7+60000000}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109026500010100200009040000ff02020000052406000005240000000d240f010000000000000000001524120d00a317a88b045e4f01a607c0ffcb7e392a152412ff03a317a88b045e4b01a607c0ffcb7e392a0905820220000000000905030208000406007c55f2396d7c735f2c479a4a630c371fbb744ba1d4600abf5900a21ac381ce425008c86b8e6c7bc817586811e6fa6d71b1c4bf21fd18ba2c7812ce804b2ca2f43961b6ccc000ec3b76504f351068902a1135f5954b7c852f"], 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0xfe) readv(0xffffffffffffffff, &(0x7f0000000c80)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x8400088) 2.676014227s ago: executing program 1 (id=3537): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x300000000000000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 2.546692443s ago: executing program 5 (id=3538): r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x3, 0x2) fallocate(r0, 0x0, 0x3b7f81a6, 0x400000009) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$sndpcmc(&(0x7f0000000740), 0x1, 0x2000) io_destroy(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$userns(r1, &(0x7f00000000c0)) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000300)='virtiofs\x00', 0x2208004, 0x0) 2.407474131s ago: executing program 2 (id=3539): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x3f68, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x3f3c, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x2c0c, 0x4, [@m_police={0x122c, 0x3, 0x0, 0x0, {{0xb}, {0x1168, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x8, 0x5, 0x200, {0xc3, 0x2, 0xe331, 0x81, 0x2b, 0x2}, {0x1, 0x0, 0x401, 0xe9b, 0xd}, 0x2, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xc, 0x1000, 0x8, 0x8, 0x9, 0x1, 0x187, 0xffffffff, 0x31, 0xab4, 0xd3, 0x7, 0xe33, 0x7, 0x7, 0xfff, 0xc63, 0x40, 0x2, 0xd, 0x2, 0x7, 0x6, 0x5, 0x9, 0xe, 0x1, 0x80000001, 0x5, 0xb, 0x7, 0x9, 0x4, 0x80000000, 0x1, 0x7, 0x1, 0x80000001, 0xffffffff, 0x8, 0x5, 0xfffffffb, 0x1, 0x3, 0x9, 0x4, 0x526a, 0x8001, 0x5, 0x6, 0x61f, 0x1, 0xfffffffa, 0xfffffe00, 0x2, 0x66, 0xfff, 0x2f, 0xffff, 0x1000, 0xffff, 0x9, 0x9, 0x9, 0x2, 0x9, 0x4, 0xdcb, 0xd, 0x8, 0xffffffff, 0x8, 0x6, 0x5, 0x2, 0x5, 0x40, 0x3, 0x8, 0x80000001, 0x6, 0x2, 0x36e, 0x5, 0x80000001, 0x8, 0x5, 0xb3, 0xfffffff7, 0x6, 0x34f, 0x0, 0x1, 0x9aa, 0x10, 0x4, 0x3, 0x8, 0x9, 0x81, 0xf, 0x80, 0x6, 0x8, 0x0, 0x5, 0x5, 0x8001, 0x4, 0x0, 0xe, 0x9, 0x5, 0xedb8, 0x10000, 0xf4, 0x1000, 0x4, 0x4, 0x4, 0x8, 0x0, 0x16d, 0xfffffffc, 0x3, 0x9000, 0x6, 0x10001, 0x5, 0x6, 0xa5e, 0xcf, 0x5, 0x6, 0x6eaf, 0x0, 0x0, 0x5, 0xd36, 0xc19, 0x4, 0x3, 0x2, 0x400, 0xb8, 0x1ff, 0x9, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x0, 0x1, 0xc263, 0x7, 0xc, 0x3, 0x8, 0x9, 0x6, 0x81, 0x5, 0x3, 0x2, 0x9, 0xe65c, 0x3, 0x8, 0x3, 0xf, 0x80000001, 0xfff, 0x53a, 0x3, 0x2, 0xc00000, 0x7c85, 0x1, 0x3, 0xfff, 0x8, 0x9, 0x2, 0xbaa4, 0x3ff, 0x7f, 0x7, 0xd91, 0x101, 0x1003a4d9, 0x32e4, 0x6, 0x5, 0x7, 0x3, 0x8000, 0x10, 0x0, 0x8, 0xfffeffff, 0x8, 0x4, 0x0, 0x8, 0xee3, 0x2, 0x10000, 0x5, 0x7, 0xfffffffc, 0x1, 0x1, 0x6, 0x81, 0xe0, 0x3, 0x3, 0x5, 0x6, 0x3, 0xae, 0x9, 0x6, 0x3, 0x5, 0x1, 0x4, 0x6, 0x0, 0x5, 0x3, 0x3ff, 0xba4f, 0x0, 0x4, 0x3, 0x4, 0xbe, 0x7, 0x0, 0x101, 0x4, 0x2c8f, 0x1ff, 0x489f9a93, 0x7, 0x2, 0x9, 0xffffff90, 0x80, 0xd, 0x5, 0x5]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0x9, 0xa4ea, 0x200, 0x2, 0x9, 0x7, 0x1, 0x7, 0x10000, 0xfff, 0x5, 0x8000, 0x4, 0x8, 0x1, 0x4e14194b, 0x9, 0xfffffffa, 0x3, 0x4, 0xfffffffc, 0x6, 0x4, 0x5, 0x8, 0x4, 0x95b, 0x2, 0x0, 0x3, 0x9, 0x8, 0x5, 0x194f, 0xbf6, 0xe6c5, 0x5, 0xf, 0xffffff81, 0x5, 0x2, 0xd, 0x7ff, 0x7, 0xfff, 0x2, 0xfffffffa, 0x81, 0x54c, 0x8, 0x91, 0x8, 0x7, 0x1, 0x101, 0x7, 0xa9, 0x5, 0x7, 0x4, 0x3, 0x10001, 0x16c00000, 0x1, 0x3, 0x8, 0xc, 0xb, 0x81, 0x4, 0x3, 0x0, 0x10001, 0x7, 0x5, 0x80000000, 0x101, 0x5, 0xb, 0x380, 0x6, 0x1, 0xea6, 0x400, 0x4, 0x1, 0xe, 0x7, 0xfff, 0x9, 0x5, 0x2, 0x8, 0x89df, 0x9, 0x7, 0x56, 0x6, 0x65b, 0x8, 0x7ff, 0x9, 0x100, 0x1ff, 0x1ff, 0x7, 0x5, 0x8001, 0x0, 0x7, 0x0, 0x1e, 0x800, 0x2, 0x10, 0x2, 0x8f, 0x8, 0x6, 0x1, 0x9, 0x34, 0x6, 0x3, 0x400, 0xf22, 0xa, 0x7ff, 0x5, 0xfffffff7, 0x22, 0x2, 0x10, 0x8, 0x9, 0x6, 0x4, 0x9, 0xf, 0xfffff800, 0x4, 0x10, 0x9, 0x0, 0x1ff, 0x9, 0x7, 0x8, 0x7, 0x92, 0x200, 0x4, 0xc, 0x6, 0x2, 0x4, 0x2a9, 0x7, 0x8, 0x3, 0x101, 0x10000, 0x3, 0xe, 0x3, 0x6, 0x6, 0x1, 0x0, 0x7, 0x0, 0x3, 0x32a2, 0x4, 0xfb8, 0x1be0, 0xd, 0x916, 0x24, 0xfffffffa, 0x1, 0x200, 0x101, 0x7, 0x6, 0xfffffffb, 0x1, 0x6, 0x6, 0x0, 0x10000, 0x0, 0x7ff, 0x0, 0x3, 0x6, 0x8, 0x1, 0x9, 0x72f, 0x7, 0x1, 0xb, 0x1, 0xcab, 0x800, 0x10, 0x10000, 0x6, 0x8, 0xda0, 0x2, 0x4, 0x7, 0x6, 0x1, 0x8, 0x2, 0x81, 0x81, 0x4, 0x2f9, 0xf46, 0x800, 0x80000000, 0x80f0, 0x4, 0x8, 0x3, 0x10001, 0x371, 0x5, 0xfd, 0xa, 0xe217, 0x6, 0x7fffffff, 0x9, 0x6, 0x3, 0x80, 0x4, 0x7, 0x6, 0xa, 0x7, 0x2, 0x6, 0x3ae8, 0x1, 0xea, 0x3, 0x0, 0x3ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x7, 0x7, 0x38d7, {0x71, 0x2, 0x2, 0x9, 0xc3a0, 0xd32f}, {0xb, 0x1, 0x4, 0x46, 0x1000, 0xfffffffe}, 0xb, 0xa0c5, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0x9, 0xff, 0x0, {0x7, 0x1, 0x8fa, 0xbd, 0x9, 0x3}, {0x8, 0x0, 0x9533, 0x3, 0x64f5, 0x3}, 0x7, 0x5, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x6, 0x6, 0x8, {0x5, 0x2, 0x8, 0x7fff, 0x7, 0x273}, {0x8, 0x0, 0x7, 0x13, 0x7, 0x8}, 0x5fa, 0x5, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffc}, @TCA_POLICE_RATE={0x404, 0x2, [0x5db1, 0x5, 0xe7a9, 0x0, 0x1ff, 0xe, 0x1, 0x9, 0x700000, 0x2, 0xfc1d, 0x400, 0x9, 0x6, 0x1, 0x979, 0x3, 0x7, 0x502, 0x1, 0x9, 0x9, 0x0, 0x8000, 0x3, 0x50d, 0x3, 0x7, 0x1000, 0x3, 0x42, 0x6, 0x7fff, 0xd7, 0x2, 0x0, 0xe137, 0x9, 0x0, 0xffffc5de, 0xff, 0x5, 0x7, 0x9, 0xf, 0x1000, 0x7, 0xfd04, 0x7, 0x7d5, 0x1, 0x4, 0x2, 0x5, 0x9c0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x3ff, 0x4, 0x0, 0xd84a, 0x87, 0xfffffff9, 0x1, 0x4, 0x6, 0x6, 0x9, 0xc, 0xffff13b1, 0x5, 0x10000, 0x4, 0x8, 0x3f, 0x2, 0xfffffc00, 0xfffffbff, 0xf56a, 0x1ff, 0x0, 0x0, 0x5, 0x1, 0x6, 0x8, 0x1, 0x9, 0x5, 0xfffff0fb, 0xe, 0x7, 0x2, 0x8, 0xb16, 0x2, 0x3, 0xc54, 0x4, 0x6, 0x2, 0x9804, 0xfffffffd, 0x9, 0x7fff, 0x5, 0x5, 0xa, 0x5, 0xfffffffd, 0x8000, 0x24000, 0x3, 0x0, 0x8001, 0x7f, 0x5, 0x4, 0x3, 0x9, 0x3, 0xd7, 0x3, 0x0, 0x3, 0x0, 0x8001, 0x2, 0x4, 0x5, 0x1c, 0xffffff00, 0x7, 0x3, 0x2, 0x5, 0x5, 0xfffff762, 0xffffc01f, 0x3, 0x401, 0x6, 0x10001, 0x200, 0x2, 0x8, 0xfffffff8, 0x4, 0xff, 0x5de, 0x5, 0x0, 0x4, 0xefde, 0xc5, 0x9, 0x1ff, 0xb6, 0x3, 0xd8d, 0xaa, 0x7eb530e4, 0x0, 0x3f05d376, 0x8, 0x4, 0x86fe, 0x6, 0xa, 0x2, 0x3, 0x5, 0x7, 0x1, 0xbad7, 0xa9, 0xc9e, 0x6, 0xfd, 0xc, 0x8001, 0x10000, 0x7, 0xfffffffb, 0x4, 0x7, 0x8000, 0xfffffffb, 0x1d19, 0x8, 0xffff, 0xfffff622, 0x8, 0x9042, 0x5, 0x4, 0xd, 0x647c, 0x4, 0x2, 0x17, 0x8, 0x9, 0x101, 0x4, 0x5ba7, 0x0, 0x2, 0x1, 0xffffffff, 0x200, 0x2, 0x8, 0x4, 0x2, 0x2, 0x148b, 0x2, 0x0, 0x2f, 0x5, 0x401, 0xed, 0x9, 0x3, 0x0, 0xc, 0x1, 0x7, 0x800, 0xfffffff9, 0x5, 0x7f, 0x5, 0xffffff28, 0x2, 0x1ff, 0x800, 0x1ff, 0x15, 0x4, 0x5, 0x77, 0x9a3f, 0x7406a8a6, 0x1a44825d, 0xd719, 0x101, 0x10000, 0x5, 0x1, 0x3, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x12000, 0x6, 0x5b68, 0x4, 0x7f, 0x4, 0x5, 0xd0e, 0x15, 0x4c, 0x0, 0x7ff, 0xffffffff, 0x7fffffff, 0x81, 0x4, 0x1, 0xf, 0x8000, 0x727, 0x80000000, 0x4, 0x5fb, 0x0, 0x6, 0x8, 0x3, 0x2000, 0x101, 0x400, 0x1, 0x7fffffff, 0x1, 0x1052, 0x7ff, 0x3, 0xbfe, 0x4, 0x3, 0x5, 0x159, 0x1, 0x7, 0x3, 0x7, 0x3, 0x7, 0x1, 0x4, 0x4, 0xffff0000, 0x8001, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0xd, 0x6, 0x8001, 0xc7, 0x6, 0x6, 0x8, 0x3, 0x661, 0x7fffffff, 0x40, 0x4, 0xd, 0x7f, 0x4c7, 0xec50, 0x80000000, 0x9, 0x1, 0x7, 0x25, 0x7, 0x3, 0x8000, 0xc, 0x400, 0x1, 0x8, 0x2, 0x4, 0xce0, 0x4, 0x7, 0x64, 0x9, 0x3, 0x1, 0xd9e, 0x2, 0x5, 0x5, 0x7, 0x0, 0x3, 0x4, 0x3, 0x5, 0x1, 0x3, 0x10, 0xfffffffb, 0x8, 0xffffffff, 0x5, 0x8, 0x3, 0x27d1, 0x3, 0xfffffffc, 0x9, 0x3, 0x5, 0x63c, 0xfffffe01, 0xc, 0x4, 0x3, 0xb2c, 0x42d3fd28, 0x0, 0x2, 0xfffffffe, 0x45, 0x200, 0xa, 0x52, 0xffffffff, 0x1ff, 0x7, 0x1, 0x5, 0xc4cd, 0x10000, 0x7fff, 0x0, 0xac4e, 0x7, 0xfffffc01, 0x4, 0x9707, 0x0, 0x1, 0x1, 0x1ff, 0x7, 0x3, 0x4, 0x6, 0x40, 0x9, 0x5, 0xa782, 0x10000000, 0x80, 0x800, 0x1, 0x7, 0x3, 0x3, 0xa, 0x60, 0x5188, 0xc5, 0x7, 0x2, 0x7fff, 0xb, 0x9af2, 0x7, 0x6e3, 0x3, 0x0, 0x5, 0x7, 0x9, 0x1, 0x8, 0x4, 0x6, 0x1ff, 0x9, 0x4e83, 0x2, 0x31d, 0x6, 0x8, 0x9, 0x9, 0x7, 0x6, 0xc7f5, 0x4, 0x7, 0x7, 0x7, 0x5, 0x3ff, 0x5, 0x1, 0x3, 0x6687, 0xc41, 0x4, 0x63d1, 0x96, 0x2, 0x0, 0xa77, 0xd, 0x4, 0x4, 0x9, 0x930, 0x10001, 0x9, 0x8, 0x5, 0x2, 0x3cb6, 0x5, 0x4, 0x1, 0x8, 0x5, 0x7ff, 0x7, 0x4, 0x5, 0xaa3, 0x9, 0x8001, 0xe90, 0x3ff, 0xfffffffa, 0x8, 0x2800000, 0x2, 0x9, 0x9, 0x8, 0x7, 0x2, 0x9cf, 0x719, 0xfffffff4, 0x4, 0x56, 0x8000, 0x2]}]]}, {0x99, 0x6, "fe6d860dd84cbb0f361d847bcdf4f1cca1e189ca63b31409d2acc4a678e75e5969d6bbe5a54ecf29b01ab3b4a3b575873b9ace4b4d426436bc19fe437db796f824b3650f50334b10d4b94e2d7d6c31aea3e06975ef3aaa1770d81ceb777a8a733f87a5fd75c8c7aaaf871120b4486a042df4912b9067f5a70de44db7a118c6fc2718a5996c29d9b0aed950a3b4dd45a3ddb7e37f5a"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x130, 0x9, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xf}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf}}]}, {0xc1, 0x6, "14337e58be45d60f659754ec12e5d9ab30fcb57981051924d37f4f0fd25a3ef87b4e232d3bfdc9c80e6ee7845cbdd8ea6467a6e4d8f14d4a03a927cf8cd13c4b64426d975ee16c7b9e3ea473e415c230d4a08725de6d4cf8fa0a2ee1d29d4426544a0954a83455c69df54a86f88e23bdfc955eff64c7fb93320b3d431c93a09c51b007f50b01eda77a1d9eecd6c666f112264ca0082163908544f2055aff6b63df294e668556bd859c2aeeed83a0033d335fa628e8c8f83687fc15f992"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x8c, 0x0, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="584b3d6d9c36"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x2, 0x30000006, 0x5, 0x4}, 0x5}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf167}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0xa4, 0x17, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xd, 0x20000000, 0x5, 0x95}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x2, 0x821, 0x6}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x47, 0x5, 0x3, 0x4}, 0xc341}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x10000000, 0x2, 0x9}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x60, 0x18, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}]}, {0x21, 0x6, "d6337fc71344d621b3f41a408848462f2be26f838c2124f3ed97095d70"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x171c, 0x12, 0x0, 0x0, {{0xb}, {0x1648, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x19c44db1, 0xdcb, 0x1, 0x1, 0x2, 0x1, 0xcd4, 0x7, 0x5, 0x1000, 0x4, 0xfffffffd, 0x1, 0xbb77, 0x1, 0x3, 0x8, 0x2, 0x4, 0xea, 0x2, 0x8b5c, 0x8, 0x34e, 0x8, 0x1, 0x80000001, 0x3, 0x932, 0x7, 0x9, 0x8001, 0x80, 0x2, 0x4, 0x10000, 0x9, 0x200, 0x3, 0x400, 0x4, 0xf, 0x6, 0x1a, 0x5, 0x5, 0x80000000, 0x1bb6, 0x2, 0x9, 0x4, 0x8, 0x6, 0x5, 0x9800, 0x1, 0x356, 0x3, 0x8, 0x1, 0xffffffff, 0xfffffff4, 0x7, 0x6599, 0x4, 0xe931, 0x0, 0x4, 0x5, 0x2, 0x7, 0x1, 0xda, 0x5, 0x75f3c000, 0xa, 0x8c0b, 0x560, 0x7c, 0x100, 0x0, 0xfffffffd, 0x78d7f19a, 0xc, 0x8, 0x7fffffff, 0x3, 0x9, 0x7f, 0x5, 0xffff5c04, 0x8000, 0xdfbe, 0xf6646b3e, 0xffff, 0x2, 0x2e4, 0x400, 0x780f, 0x9, 0x9, 0x9, 0x2, 0x5, 0x4, 0x6, 0x6, 0xd, 0x4, 0xfc, 0x58a6970a, 0x3, 0x1000, 0x12, 0xc, 0x1, 0xff, 0x9, 0x7, 0xe, 0x6, 0x8, 0x7a05cad8, 0x1, 0x84, 0x400, 0xfffffffb, 0x9, 0xe, 0x8, 0x5, 0x4, 0xfffff800, 0x6, 0x7, 0xffffffff, 0x41, 0x6, 0x100, 0xfb67, 0x7, 0xe698, 0x7, 0x4, 0x7, 0x1000, 0xfffffffd, 0x6, 0x9, 0x80000000, 0x0, 0xf, 0xc392, 0xdaa9, 0x7, 0x4, 0x1, 0x9, 0x7fffffff, 0x5d394290, 0x5, 0xd, 0x6, 0x6, 0x200, 0x8, 0x1, 0xa63, 0x5, 0x10001, 0x582, 0x6, 0x6, 0x2, 0x8001, 0x7, 0x8, 0x84c, 0xffff, 0x7, 0xffff, 0x5699, 0xd8fa, 0x7, 0x3, 0x0, 0xb396, 0x7fff, 0x2d3, 0x4, 0x5e73, 0x0, 0x1, 0x18a, 0x3ff, 0x0, 0xc4, 0x2, 0x3ff, 0x3, 0x1ff, 0x8, 0x5fd7000, 0xf3, 0x4, 0x3, 0xd8, 0x1, 0x8, 0x0, 0x8, 0x1, 0xca4a, 0xfffffffe, 0xb, 0x2, 0x3, 0x81, 0x7, 0x6, 0x200, 0x1, 0x39b2, 0x8, 0x1, 0x9, 0x0, 0x9, 0x9, 0x8, 0x4, 0x3, 0x2, 0x446, 0x839, 0x7, 0xea0b, 0x401, 0x1, 0x2, 0xa956, 0x9, 0x7, 0x8, 0x4, 0x1, 0x7f, 0x4d, 0x5, 0xf, 0x800000, 0x35, 0xaa, 0x0, 0x5, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x75}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x1, 0x1, 0x3, {0x3, 0x0, 0x1, 0xfff7, 0x9, 0x7}, {0x3, 0x0, 0x6, 0xa8, 0x8, 0x3}, 0x4, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x7, 0xd3b, 0x2, {0xf6, 0x1, 0x4, 0x200, 0x4597, 0x7fff}, {0x2, 0x2, 0x2, 0xbe, 0x9, 0x40}, 0x6, 0x10001, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4ee5a755}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x101, 0x81, 0x70a2, {0x0, 0x0, 0x7, 0x5, 0xef, 0x8001}, {0x9, 0x2, 0x8, 0xf6, 0xfffc, 0x8001}, 0xae8, 0x2, 0x9c}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff4, 0x1, 0xcc, 0x6, 0x4e11, 0x7, 0x62d, 0x80000001, 0x3, 0x401, 0x5, 0x6, 0x1, 0x5, 0x7fff, 0x0, 0x97, 0x5, 0x3, 0x301ea6fc, 0x80000000, 0x200, 0x7, 0x10, 0x4, 0x3, 0x8, 0x9, 0x100, 0xc, 0x56, 0x8, 0x8, 0xa, 0x4eee6086, 0x1, 0x5, 0x2, 0x1, 0x4c, 0x2, 0x9, 0x122e, 0x4, 0x1000, 0x2, 0x80000000, 0x9, 0x8001, 0x10001, 0x200, 0x1b, 0x8, 0x7, 0xc000000, 0x1, 0x0, 0x1, 0x0, 0x9, 0x7fffffff, 0x2, 0x7, 0x101, 0x0, 0x10, 0x260, 0x0, 0x7, 0x2, 0x2, 0x3, 0x3, 0x6450, 0x1ff, 0xb2, 0x5, 0x0, 0x0, 0x380000, 0x8000, 0x0, 0x6, 0x80000001, 0x1, 0x5, 0x6, 0x8, 0x9, 0x4, 0x3, 0x7, 0x6, 0x40, 0x813, 0x1, 0x7ff, 0xb, 0x6, 0x9, 0x6, 0x8b, 0x6, 0x0, 0xa06, 0xc33, 0xfffffff9, 0x3, 0xb, 0x3, 0x6, 0x9, 0x0, 0x4, 0x25a, 0x3000000, 0x101, 0xfffffff8, 0x0, 0xfea, 0x20000000, 0x6, 0xd, 0x6, 0x8dd4, 0x7, 0xd, 0xffffffff, 0x163f856e, 0xd6, 0xbb68, 0x9, 0x101, 0x14000, 0x9, 0x7, 0x200, 0x5, 0x1, 0x3, 0x6, 0xdb, 0x71c, 0x7, 0x1000, 0x6, 0xb8, 0x54fa07ca, 0x5, 0x5, 0x4, 0xb, 0x8, 0x6, 0x9, 0x2, 0xa, 0x9f, 0x1000, 0x5, 0xba, 0x3b5, 0x1ff, 0x5, 0x7, 0xfffffffe, 0x5, 0x0, 0x5, 0xb479, 0xfffffffd, 0x8, 0x3, 0x2, 0x3, 0x1, 0x1, 0x3, 0x5, 0x101, 0x800, 0x2, 0x7fffffff, 0xbb5c, 0x4e, 0x6, 0x7, 0x3, 0x1, 0x3, 0x2, 0x5, 0x7f, 0x4, 0x3d6, 0x4, 0x4, 0x2, 0x7, 0x3, 0x60000000, 0x1, 0x40, 0xa6, 0x7, 0x6, 0x6, 0x803, 0x0, 0x8, 0x0, 0x8, 0x90, 0x6, 0x0, 0x4, 0x3, 0x4, 0x0, 0x8, 0x9, 0xa4fb, 0x7f, 0x7f0, 0xffffff80, 0x9, 0xa, 0x40000000, 0x19, 0x6, 0x6428, 0x6, 0x7, 0x1, 0x6, 0x9, 0x5, 0xc2a, 0x80000001, 0x2, 0x0, 0x6, 0x6, 0x7, 0x200, 0x2, 0x400, 0x3, 0xf2, 0x0, 0x0, 0x0, 0x6, 0x373, 0x7f, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x6068, 0x1000, 0x80000000, {0x3, 0x1, 0x6, 0xfffa, 0x81, 0x6}, {0xe, 0x1, 0x7f, 0xfffa, 0xdb, 0xffffffff}, 0x6, 0x80, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x3, 0xf, 0x0, 0x200, {0x45, 0x1, 0xa, 0x4, 0x7, 0x2}, {0x2, 0x0, 0x4, 0x2000, 0x7, 0x1}, 0x8000, 0x7, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0xf3, 0x2, 0x9, 0x8, 0x0, 0x1, 0x9, 0x7, 0xff, 0x3c79, 0x3, 0xffffff80, 0xff, 0x5, 0x8001, 0x3ff, 0x2, 0x51, 0x1, 0x1, 0xa729, 0xc, 0xffffff54, 0x4, 0x6, 0x101c, 0x7, 0xfa8, 0x9, 0x8001, 0xd7, 0x7fff, 0x7, 0x3, 0x4, 0x5, 0x401, 0xf906, 0x8, 0x2, 0x1ff, 0x100, 0x8, 0x8, 0x5, 0x3, 0x742, 0x3, 0x8, 0x3, 0x2, 0x4, 0x2, 0xffffffff, 0x9, 0x8000, 0x200, 0xdcc, 0x1000, 0xc, 0xffffff76, 0xa2e, 0x1000000, 0x4, 0x5, 0xffff, 0x101, 0x13, 0x5, 0x9a, 0x0, 0x4, 0x0, 0x4, 0x7, 0x6, 0x8, 0x10001, 0x1, 0x101, 0x6, 0x4, 0x903, 0x0, 0x2, 0x8e, 0xfffffc01, 0x0, 0x4b, 0x9, 0xfffffffa, 0x7ff, 0x0, 0x4a8, 0x9, 0x4, 0x9, 0x2, 0x4, 0x9, 0x56, 0xfffffffa, 0x6, 0x7, 0x8, 0x3, 0x0, 0x9b4, 0x0, 0x3, 0x101, 0x9, 0x2, 0x100, 0xfff, 0x5, 0x6, 0x1ff, 0x785, 0xc, 0x4, 0x4, 0x200, 0xa, 0xf4, 0xa9, 0xb4, 0x4, 0xfffffffb, 0x32b, 0x80000000, 0x80000001, 0x8, 0x82, 0x3, 0xfffffff8, 0xb865, 0x7, 0x1, 0x7, 0x7, 0x6, 0x4, 0x0, 0x5, 0x70000000, 0x8, 0x8, 0xe, 0x2, 0x5, 0xc6c, 0x9, 0x10001, 0x3e, 0x6, 0xfffffff8, 0x5, 0x1, 0x40, 0x4, 0x2834, 0x59e37698, 0xcd3d, 0x751, 0x0, 0x5, 0x5, 0xfffffffa, 0x3ff, 0x1, 0x4, 0x80000000, 0xfff, 0xffffffff, 0x8, 0x4, 0x9, 0x6, 0xfffffffa, 0x6, 0x66b, 0x5, 0x5, 0x5, 0x8, 0x6, 0xfffffffb, 0x5, 0xc63, 0x80000000, 0xfffffe01, 0xfffffffe, 0x9, 0x4, 0x4, 0x45be, 0x5, 0x2, 0x5, 0x1, 0x5, 0x6, 0x9, 0x2, 0x82, 0x6a, 0x0, 0x67, 0x3, 0x400, 0x4, 0x3, 0x1, 0x800, 0x3ff, 0x1ff, 0x9, 0x1, 0x8, 0xfffffffa, 0x6, 0x7, 0x5, 0x5, 0x9, 0x7, 0x0, 0x2, 0xff, 0x400, 0xfb, 0x8ee, 0x2, 0x2, 0x22f5e1cb, 0xa11, 0x4, 0x80000000, 0x5, 0x1, 0xffff, 0x5, 0x6, 0x3, 0x1, 0x3, 0x0, 0x7e, 0x9, 0x7, 0x0, 0x80000001, 0x0, 0x4]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0xbd, 0xbb11, 0x10000, 0xfffffffc, 0x7, 0x6, 0x8, 0x800000, 0x9, 0x3, 0x342, 0x3, 0x1, 0x80000000, 0xc, 0xfffffffa, 0x1000, 0x5, 0x7, 0xd, 0x7, 0x0, 0x101, 0xad, 0xffffffff, 0xd5, 0x1, 0x3, 0x10000000, 0x1000, 0xff, 0x8, 0x0, 0x3, 0x40000000, 0x1, 0x3ff, 0x9, 0x43c9, 0x2, 0x3f7, 0x9e52, 0x0, 0x40000000, 0xf2, 0x5, 0x7, 0x7, 0x4, 0x8, 0x9, 0x7, 0xbc1, 0x9, 0x3, 0x8, 0xfffffff7, 0x4e, 0x5, 0xfff, 0x5a6, 0x8, 0x0, 0x3b, 0xffff, 0x7f, 0x7ff, 0x1, 0x5b5b, 0x4, 0x100, 0x8, 0x4, 0x8b, 0x4a, 0x8, 0x7f, 0x1, 0x81, 0x6, 0xa43, 0x9f, 0x4, 0x7, 0xfffffffb, 0x4, 0x1c000000, 0x10000, 0x7ff, 0x7, 0x9, 0x6, 0x5, 0x8, 0x1, 0x10001, 0x8, 0x1, 0x10001, 0x8, 0x3, 0x7, 0x100, 0xd93, 0x0, 0x0, 0x5, 0x1, 0x5, 0xe448, 0x400, 0x8, 0x4, 0xe99, 0x5, 0x61, 0x38527528, 0x6, 0x40, 0x8, 0x1, 0x8, 0x1, 0xda9, 0x9, 0xfffffff7, 0x2, 0x5, 0x8, 0x7, 0x8, 0x7, 0xfffffc01, 0xd78e, 0x21, 0x8000, 0x2, 0x6, 0x4fa4, 0x200, 0x4, 0x4, 0x5, 0x81, 0x4, 0x824, 0x9, 0x4, 0x9, 0x0, 0x1, 0xf3f, 0x2, 0x5, 0x2, 0x8, 0x8, 0x9, 0x8, 0x9, 0x3, 0x1, 0x51, 0x6, 0x3, 0x76, 0x4, 0x1ff, 0xfffffffa, 0x8, 0x2, 0x60, 0x6, 0xff, 0x7dd, 0x0, 0x2, 0xe, 0x9, 0x3, 0x2, 0x73c5, 0x400, 0xe4, 0x8, 0xfffffffb, 0x2, 0x4, 0xfffffff9, 0x1, 0x6, 0x5, 0xe, 0x2c10, 0x5, 0xfffffff9, 0x1ff, 0xe03469b6, 0x9, 0x2, 0x9, 0x1, 0x2, 0x101, 0x2, 0x6, 0x60, 0x340, 0xfffffffc, 0x6, 0x2, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb1ba, 0x4f84, 0x7, 0x0, 0x1, 0x3, 0x3, 0x9, 0xc6, 0xe, 0x3, 0x2, 0x1ff, 0x4, 0x5, 0x0, 0x0, 0xad, 0x2, 0x40000, 0x0, 0x4, 0x4, 0x7, 0x3, 0x1, 0x401, 0x8, 0x7, 0xffffffff, 0x4, 0x4, 0x2, 0x8, 0x6, 0x3, 0x1c000, 0xe3f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6963}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0xe4, 0x34, 0x1, {0x5, 0x1, 0x9, 0x3, 0x80, 0x5}, {0x4, 0x2, 0x200, 0x7, 0x3, 0x200}, 0x0, 0x4, 0x87}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffd, 0x71bb, 0x401, 0x9, 0xfffffffb, 0x1000, 0x0, 0x1, 0xbd, 0xbd, 0x5, 0x5, 0x577, 0x5, 0x3, 0x7, 0x7ff, 0x40, 0x8000, 0x879, 0x2, 0x8c89, 0x13c9, 0x1, 0x5eac, 0x8, 0x8, 0x4, 0x6, 0x6, 0x1, 0x0, 0xfffffffe, 0x6, 0x1, 0x5, 0x100, 0x1, 0x1, 0x74, 0xa6a8, 0x100, 0x80000001, 0x40, 0x4, 0x9, 0x6dd, 0x0, 0x0, 0x3, 0x21, 0xd842, 0x0, 0x8, 0x4df, 0x10001, 0x10001, 0x7, 0x9, 0x8e, 0xff, 0x2, 0x6, 0x2, 0x80000001, 0xb6e9, 0x1, 0x10000, 0x41, 0x200, 0x9, 0x3, 0xa0000, 0xa, 0x8, 0xfffffffb, 0x6, 0x8, 0x4, 0x2, 0x10, 0xe, 0x661f, 0x5, 0xf3, 0x3, 0xbf, 0x800, 0x7, 0x1, 0x3ff, 0x3967, 0x4, 0x0, 0xd8b, 0x8, 0x1, 0x9f0, 0xffffff18, 0x100, 0x40, 0x0, 0x7, 0xa, 0x81, 0x200, 0x6, 0x3, 0xffffffff, 0x1000, 0x6, 0x10, 0x9, 0xcd21, 0x81, 0x7ff, 0x8001, 0x6, 0xffff, 0x4, 0x4, 0xfffffffb, 0x4, 0x2, 0x9, 0xa, 0x5, 0x5, 0x3, 0xb, 0x5, 0x8, 0xa21, 0x9, 0x6, 0x10000, 0x5, 0xcce, 0x4, 0x1c00000, 0x1000, 0x10001, 0x4, 0x7, 0x2, 0x80000000, 0x400, 0x400, 0xfffff5c3, 0x8, 0x0, 0x101, 0x4, 0x7, 0x80000001, 0xe, 0x5, 0x9, 0x40, 0x6, 0x9, 0xffffffff, 0x4, 0xfffff800, 0x0, 0xc1e4, 0x9, 0xa0, 0x7, 0xfff, 0x0, 0x10, 0x8, 0x4, 0x800, 0x821, 0x3, 0x40f539ee, 0x7f, 0x4, 0x0, 0x1, 0xb51, 0x2, 0x2, 0x1, 0x7, 0x1, 0x1, 0x434f, 0x4, 0x4, 0xf, 0x6, 0x4, 0xa, 0x1, 0x31ed, 0x4, 0x179, 0x9, 0x5, 0xa, 0x2a, 0x9, 0x6, 0x8, 0x5, 0x4, 0x9, 0x9, 0x2000, 0x5, 0x80000001, 0xa, 0x0, 0x9, 0x3, 0x6, 0x1, 0x0, 0x8, 0x401, 0x6, 0x7fff, 0x9, 0x5, 0x2, 0xfffffff5, 0x8, 0x7, 0x7fff, 0x7, 0xfffff3d2, 0xb2c, 0x1a9, 0x4, 0x0, 0x687, 0x80, 0x80000001, 0xdbe8, 0x8, 0x7188f37f, 0x2, 0x400, 0x90, 0x2, 0x2b6, 0x4b3d, 0xfffffffa, 0x1, 0x3, 0x7ff, 0x5, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf11}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}]]}, {0xa9, 0x6, "e4513679a2a987fd6afd93f9f7809739a798e4986a9d0d819ddafae5dc53af09b1e1886c21b22c6098cde951cf89def0e9d9956829a518b85ec649294a00d2af006ae2ef4036d37b9fb4c6c599d69ef091f1a8c51c68bc1e2dbf38a0e7de6b31836b283597c3511a43cad6c5ba3be7853d41ce908aed40ffe7143f389467f795a653166618ea2aaafd39994a9938f17191b1165e9efe7c261b41036e316280d7059cc7ddbc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FW_ACT={0x1328, 0x4, [@m_xt={0x170, 0x18, 0x0, 0x0, {{0x7}, {0xbc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x3d, 0x6, {0xd, 'security\x00', 0xff, 0x1b, "3901bae1b2c90dec01349be3ac5bab1aa98106"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xb}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x8d, 0x6, "c62e9a687eed868051eb651c24304d274e8629de1b50d16051064435fc24ec70771d17f6fcdc9e9ee75e25d0f91438203e64eefedecde132008eeb0431ab391ca0bf5a7765d9d88867fb095fac2a9c7739fdc611b922111ed0c5abbfcc78d191c3703f0604da38e930080de9aa271e5f8e9da2c50a80ed7034f68c77939dbe86fb46c18e845a89f584"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xf0, 0x13, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x7f, 0x5, 0x10001, 0x6}}]}, {0xa9, 0x6, "7c0a1851060342436687049aaca83c87334c4d9cf996bff1b72efe3eb55f6b006dbd0e1c0bd78373b86981d3f1c87ebe53beca47c54b14ae9193d84be9fe799163951c5c233b691617e5508ea3f9b14b8a84941b72dac877ea437941f785a1c09929108fa47ec3420933e77185f8c50d8140dd015231cd6cece69214efe0b7030a9679081f8f3c0f55b91dcbb582cdf68d0c84d7b970c7842211384835fe59a974c410e0f3"}, {0xc, 0x7, {0xb07c3f3708729d04}}, {0xc, 0x8, {0x3}}}}, @m_pedit={0x10c4, 0x4, 0x0, 0x0, {{0xa}, {0x1098, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x1bc, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x337b561b573d7d9c}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x60e, 0x3, 0x10000000, 0x4, 0xdf7e}, 0x4, 0xa}, [{0x7, 0x4, 0x392, 0x6, 0x1000, 0x5}, {0x7, 0xfffeffff, 0xf, 0x6a5b, 0xfffffffd, 0x1000}, {0x37a0, 0x5, 0xcd0, 0xfffffff7, 0x40, 0x6}, {0x6, 0xd2a3, 0x0, 0xfffffffc, 0xcf, 0x3}, {0xffff0001, 0x2, 0x8000000, 0x4, 0x2, 0x320}, {0x7, 0x695967f0, 0xffff, 0x0, 0x8, 0x33}, {0x7b9c60c0, 0x7, 0x5, 0x0, 0x7, 0x1}, {0x7fff, 0xd, 0xb, 0x0, 0x4, 0x9}, {0x800, 0x6, 0xaa, 0x1, 0xfa609cae, 0x8}, {0x7d, 0x3, 0x3, 0x6, 0x0, 0x20000}, {0xfffffff7, 0x200, 0x6, 0x1ff, 0x87, 0x4}, {0x9, 0x8, 0x5, 0x8, 0x80000000, 0x7ff}, {0x5, 0x6, 0x8, 0x2, 0x80, 0x10001}, {0x0, 0x8, 0x0, 0x7, 0xfffff4d2, 0x1000}, {0x3, 0x6, 0x2, 0x0, 0xc, 0xbb1f}, {0x8, 0x218, 0x10000, 0x3, 0x6, 0x10001}, {0x5, 0x9, 0xa, 0x13, 0x6ab32164, 0x400}, {0x7, 0x8, 0x4c94, 0x2, 0xc5, 0xcd}, {0xd133, 0xf244, 0xfffffff6, 0x9, 0x5}, {0xe9e, 0x0, 0xffffc170, 0x64d, 0xffffffff, 0x4}, {0x1800000, 0x1, 0x80000001, 0x3, 0x280, 0x3}, {0x9, 0xcc7, 0x6, 0xfffffff7, 0xb, 0xb}, {0x800, 0x9, 0x9, 0xfffffffe, 0x0, 0xc}, {0xfd, 0x6, 0x6, 0x3, 0x8, 0x3}, {0x32d2, 0x7, 0x5, 0x6, 0x10000, 0x4696}, {0x7f, 0xb9cf, 0x4, 0x2, 0x64f8, 0xfffffffa}, {0x4, 0x7, 0x0, 0x7, 0x0, 0x4e49}, {0x6, 0x1ff, 0x5, 0xfffffeff, 0x9b63}, {0x1, 0x4, 0x6, 0xffffffff, 0x7fff, 0xf}, {0x2, 0x7, 0x4, 0x8000, 0x0, 0x80000001}, {0x8000, 0xd613, 0x6, 0x7ff, 0x200, 0x6}, {0x6, 0x7f0b, 0x9, 0x1, 0x4, 0x4}, {0x80, 0x2, 0x7fffffff, 0x5fb, 0xffff, 0x2}, {0x10000, 0x8000, 0x101, 0x5, 0x6, 0x2}, {0x7, 0xdbff, 0x2, 0x1, 0x6, 0x4}, {0x1, 0x7dc1, 0xfffffeff, 0xf8, 0xfffffffb, 0x4}, {0x6, 0xa8, 0x9, 0xb, 0x2, 0x81}, {0x3, 0xc2, 0x3, 0x9, 0xf4, 0x10000}, {0x4, 0x6, 0xff, 0x6, 0x6f, 0x100}, {0x7, 0x7, 0x6, 0x66e, 0xffff8001, 0x8000}, {0x72, 0x9845, 0x4, 0x900, 0xffffffff, 0x1}, {0x101, 0x9, 0x3, 0x10001, 0x5}, {0x0, 0x2, 0xafc, 0x3, 0x4, 0x6}, {0x7, 0x8, 0x1, 0x0, 0x1, 0xdb}, {0xfffffffe, 0x40, 0x23a, 0x2}, {0x1, 0x7, 0x7, 0x0, 0xb, 0x7}, {0xfffffff7, 0xa, 0x4d, 0x2, 0x6, 0x9}, {0xee, 0x2, 0x3, 0xefe, 0x2, 0xd12}, {0x200, 0xe, 0x6, 0x9, 0x80000001, 0x4}, {0x400, 0x0, 0x4, 0x4, 0x200}, {0x9, 0x7, 0x5, 0x1, 0x3, 0x32a}, {0xc50d, 0x8, 0x5, 0x4f, 0x0, 0x8}, {0xfffffff0, 0x9, 0x7, 0x1, 0x8, 0x5}, {0x0, 0x7fffffff, 0x4, 0x3, 0x6, 0x6}, {0x18ed, 0x8, 0x7, 0x9, 0x5181441a}, {0x1, 0x6, 0x4, 0x5, 0x5, 0xc}, {0xffffffff, 0x1ff, 0xb, 0x3, 0x7, 0x3}, {0x9, 0x5, 0xfffffffd, 0x2, 0x3fe, 0x8}, {0xd4, 0x7, 0x7, 0x6, 0x7}, {0xd4fc572, 0x8, 0x1, 0xe, 0xc3, 0x10000}, {0x6b7, 0x8, 0x8000, 0x5fc, 0x4, 0xffff}, {0x4, 0x7, 0x2, 0x5, 0x400, 0x7}, {0x7, 0x8, 0x8ce5, 0x6, 0x32}, {0x8, 0x13, 0x8, 0x3ff, 0x3, 0x3}, {0x6, 0x80000000, 0x5, 0x9, 0x80000001, 0x2}, {0x6, 0xff34, 0x3, 0x5, 0x6, 0x4}, {0x7, 0x6, 0xa4e, 0x10, 0x2, 0x8ac}, {0x6, 0xffffff00, 0x5, 0x80000000, 0x8, 0x3}, {0xfffffffa, 0x94, 0x5452, 0x400, 0x401, 0x9}, {0x80000001, 0x4fbd, 0x80000000, 0x7, 0x0, 0x401}, {0x7, 0x1000, 0x1, 0x8, 0x4, 0xfffff0d4}, {0x7, 0x9, 0xe3, 0x2, 0x3, 0x8}, {0x5f7, 0x4, 0x7f, 0xc8cc, 0x6, 0x10000}, {0x1e, 0xffffffff, 0xb84, 0x7066, 0x9, 0xfff}, {0xb, 0x1, 0x0, 0xffff, 0x4, 0x5}, {0x6, 0x241, 0x7, 0xa8, 0xa445, 0x7f}, {0x2, 0x5, 0x8, 0x2, 0x3, 0xffff8000}, {0x10001, 0x2f, 0x5f87, 0x8b, 0x80000000, 0x2}, {0x6, 0xffffff00, 0x4af17099, 0x7, 0xd, 0xfa31}, {0x2, 0x7ff, 0x2, 0x3, 0x0, 0x40}, {0x9, 0x2, 0x4, 0x2, 0x9, 0x4}, {0x3, 0xd4, 0xf0, 0x0, 0x100, 0xff}, {0x100, 0x10001, 0x100, 0xa, 0x831d, 0x7fffffff}, {0x8, 0x238, 0x8, 0x9, 0x8, 0xfb}, {0x16, 0xd8, 0x400, 0x7, 0x100, 0x5}, {0x9, 0x1aa0, 0x2, 0xa8f, 0x3, 0x10000}, {0x44f, 0x7fff, 0xfeb, 0x7, 0x7, 0x80000001}, {0x8, 0x2d065fec, 0x8, 0x3ba, 0x6, 0x5fa3}, {0xfffffffb, 0xb34c, 0x8, 0xa, 0xffff, 0x1}, {0x4, 0x3, 0x0, 0x8, 0x4, 0x6}, {0x1, 0x80, 0x5, 0xfffffff8, 0x9, 0x9}, {0x9, 0x2, 0x80000000, 0xff, 0x81, 0xb}, {0x8, 0x7, 0x2, 0x0, 0x9, 0x4}, {0x1, 0x800, 0x0, 0x3, 0x5, 0x10000}, {0x2e1, 0x9, 0x7, 0x0, 0x9, 0x5b875ee4}, {0xff, 0x0, 0x7ea, 0x7b, 0x8, 0xfffffffc}, {0x2a, 0xffffffff, 0x80, 0x7fff, 0x2, 0x7}, {0x10, 0x6, 0x5, 0x4, 0x4, 0x33}, {0x3, 0xc, 0x6, 0x6, 0x9, 0x6}, {0x4, 0x5, 0x101, 0x4, 0x353e, 0x4}, {0x8, 0xc, 0x7fffffff, 0x2, 0x5, 0x7}, {0xfffffffa, 0x9, 0x7, 0x42baad39, 0x6, 0x6}, {0x7, 0xfffffff1, 0x1, 0xd, 0xb26e, 0x1}, {0x1, 0x94, 0x5, 0x5, 0x7, 0xfffffff9}, {0x9, 0xbfa3, 0x5, 0x7, 0x6, 0x3}, {0x10001, 0x0, 0x1, 0x7, 0x2, 0xb1}, {0x7fffffff, 0xfffff5be, 0x8, 0x3, 0x2c, 0x9}, {0xffd, 0x7f, 0x40, 0x0, 0x6, 0x3}, {0x2a9, 0x0, 0x6, 0x4, 0xb04, 0xd}, {0x957b, 0x0, 0x24a3, 0x7, 0x3, 0x1}, {0x4, 0x3, 0x7, 0x0, 0x91, 0x6}, {0x1, 0x3800000, 0x6, 0x8, 0x2, 0xffffffff}, {0x5, 0x8, 0x2, 0x10001, 0x5}, {0xb34, 0x6, 0x8, 0x7, 0x5, 0x4}, {0x1, 0x1, 0x42, 0x7fff, 0x8, 0x9}, {0x401, 0x9, 0x8, 0x1}, {0x2, 0x8, 0x6a, 0x0, 0x1, 0xffffffff}, {0x7fffffff, 0x7, 0x2, 0x10, 0x4, 0xf}, {0xfffffff2, 0x1, 0x9, 0xd, 0x3, 0x1}, {0x0, 0x1, 0xffffffff, 0xff, 0x2c4, 0x4}, {0x4, 0x86f6, 0x4, 0x3, 0x9, 0x6}, {0x7, 0x9, 0x3, 0x3, 0x7, 0x67cf108b}, {0x0, 0x2, 0x4, 0x7, 0x5, 0xffffffff}, {0x8, 0xd8, 0x3, 0x4, 0x3ff, 0x8}, {0x6, 0x7fff, 0x100, 0x4, 0x2, 0x8}, {0x8, 0xe041, 0x4, 0x8, 0x5, 0x5e1}, {0x6, 0x3, 0x8, 0x1000, 0x5, 0xcb31}, {0x1, 0xd223, 0x8, 0x0, 0x4, 0x5}], [{0x2, 0x1}, {0x5, 0x1}, {0x2}, {0xaa699aae85504618, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x3}, {0x2}, {0x2, 0x1}, {0x0, 0x43e94edb6b16b030}, {}, {0x5, 0x1}, {0x4}, {}, {0x3}, {0x1}, {0xc770d970940cffe5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x1, 0x1489d857e77e70bb}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5}, {0x6, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x3f68}}, 0x0) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) syz_usb_connect(0x3, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="12011001c22c4310fd0b02016b710102030109021b00010808900009048f05010fd6fc9209050b0000020608f385d647b21ffb1c2444b36e0135224f7760f6381461cf7202de7679f34202527ed7fe4172be7f4390ed2cb0557dc9f659d409e0d46dd0c99b54474d5db62d4ff98fefaaecba59f6c56e0cf6a583be9780cd19051ed889291af2fb53555c55952631d9874e9b4f58a33d3830b97e1526b70137eb690ec405737bb0d26daaff8571398abdd3cb75503c88e9fa8b6585cd6ee676fc4afa1442"], 0x0) pipe2(&(0x7f0000000000), 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x1, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r5, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x4000) 2.405866554s ago: executing program 1 (id=3540): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 1.467298079s ago: executing program 1 (id=3541): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffcba, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000083900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c000080040002000400010075ddc1f623b99482cb725124516fdfcb045c660fb258cb5fb6fd63a6af3dacda14031d38308d9851609c3b7f862812c053e05ba863b7d818ae7c70b2c2475f214062e24100"/100], 0x2c}, 0x1, 0x500, 0x0, 0x4810}, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f000000a940)={{0x12, 0x1, 0x250, 0x1b, 0xf4, 0xd8, 0x40, 0x408, 0x4033, 0x4395, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x2, 0x10, 0x4, [{{0x9, 0x4, 0x8c, 0x8, 0x0, 0xe, 0x1, 0x1}}]}}]}}, &(0x7f000000b380)={0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1d) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x3, 0x0, [{0x4000009b, 0x0, 0xffffffffffffff00}, {0x936, 0x0, 0x3a6c}, {0x2ff, 0x0, 0xf}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000ffdbdf251400000008000100010000000c00060001"], 0x28}}, 0x4000080) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x5836, 0x20000006, 0x4e98d9f4000, 0x40, 0x5, 0x5479, 0x1037, 0x6, 0x0, 0x55, 0xe0e2, 0x100000002, 0x0, 0x9, 0x109, 0x6a], 0xffffffff, 0x1c7a86}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.463996302s ago: executing program 5 (id=3542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x88180, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000300000000000000070000001865000009000000000000004000000095000000000000002a3d1e1e7dc5e83e34aa245b00fd11b02b4f9164bbc3b28e9cc03e659370957029532416bc8352edeef02c0dc50983a82725ffaf5cb2eec9b68a5c930c71f0c5dece3c3bb08fccd0aff9c1cad7faec4b6c44c7f0a4d008d0c5efe06ca5958e45651615"], &(0x7f0000000100)='GPL\x00', 0x10000, 0xc6, &(0x7f0000000240)=""/198, 0x41100, 0x2a, '\x00', r1, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0xa, 0x4, 0x48000000}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000440)=[r3], &(0x7f0000000480)=[{0x0, 0x2, 0x2, 0x2}, {0x5, 0x4, 0x9}, {0x4, 0x1, 0x3, 0xa}, {0x0, 0x5, 0xf, 0xb}, {0x2, 0x3, 0xf, 0x6}], 0x10, 0xe6}, 0x94) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = semget$private(0x0, 0x4000000009, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f00000000c0)) semop(r5, &(0x7f0000000040)=[{0x4}], 0x1f4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50) 0s ago: executing program 0 (id=3543): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) open(0x0, 0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) socket$packet(0x11, 0x3, 0x300) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x20500, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./bus\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x0, 0x0) inotify_init1(0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) write(r2, &(0x7f0000000200)="ec191f2f44", 0x5) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) kernel console output (not intermixed with test programs): for endpoint zero, skipping [ 1138.751391][ T10] usb 6-1: config 0 interface 214 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 12 [ 1138.809497][ T10] usb 6-1: New USB device found, idVendor=eb1a, idProduct=17de, bcdDevice=b6.71 [ 1138.834774][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.861593][ T10] usb 6-1: Product: syz [ 1138.890218][ T10] usb 6-1: Manufacturer: syz [ 1138.927728][ T10] usb 6-1: SerialNumber: syz [ 1138.973331][ T10] usb 6-1: config 0 descriptor?? [ 1138.983367][ T10] dvb-usb: found a 'KWorld V-Stream XPERT DTV - DVB-T USB1.1' in cold state, will try to load a firmware [ 1139.192645][T17737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2928'. [ 1139.612754][T10838] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1139.844117][T10838] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1139.870350][T10838] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.883583][T17263] Bluetooth: hci1: command tx timeout [ 1139.893428][T17733] chnl_net:caif_netlink_parms(): no params data found [ 1139.901734][T10838] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1139.917455][T10838] usb 3-1: config 1 has no interface number 1 [ 1139.944263][T10838] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1139.985843][T10838] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1139.997090][T10838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.006724][T10838] usb 3-1: Product: syz [ 1140.012493][T10838] usb 3-1: Manufacturer: syz [ 1140.029176][T10838] usb 3-1: SerialNumber: syz [ 1141.092129][T17733] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.100487][T17733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.108059][T17733] bridge_slave_0: entered allmulticast mode [ 1141.117904][T17733] bridge_slave_0: entered promiscuous mode [ 1141.158463][T17733] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.166789][T17733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.182646][T17733] bridge_slave_1: entered allmulticast mode [ 1141.260442][T17733] bridge_slave_1: entered promiscuous mode [ 1141.355962][T17764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2933'. [ 1141.481146][T17733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.566493][T17733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.735810][T17769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2934'. [ 1141.815552][T17733] team0: Port device team_slave_0 added [ 1141.845362][T17733] team0: Port device team_slave_1 added [ 1141.963642][T17263] Bluetooth: hci1: command tx timeout [ 1142.000915][T17733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.021345][T17733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.120068][T10838] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1142.127654][T17733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1142.129382][T17733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1142.185867][T10838] usb 3-1: MIDIStreaming interface descriptor not found [ 1142.215567][T17733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.275943][T17733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1142.342104][T10838] usb 3-1: USB disconnect, device number 72 [ 1142.409533][T17435] udevd[17435]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1142.469249][T14210] hsr_slave_0: left promiscuous mode [ 1142.781504][T14210] hsr_slave_1: left promiscuous mode [ 1142.814245][T14210] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1142.828835][T14210] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1143.073014][T17797] netlink: 'syz.2.2940': attribute type 1 has an invalid length. [ 1143.098081][T17797] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2940'. [ 1143.454593][T17801] netlink: 'syz.2.2941': attribute type 10 has an invalid length. [ 1143.462572][T17801] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2941'. [ 1144.046960][T17263] Bluetooth: hci1: command tx timeout [ 1145.651887][T17801] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1145.659643][T17801] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.686775][T17801] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1145.777003][T17815] netlink: 'syz.1.2944': attribute type 1 has an invalid length. [ 1145.815851][T17815] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2944'. [ 1145.978026][T17733] hsr_slave_0: entered promiscuous mode [ 1146.172411][T17263] Bluetooth: hci1: command tx timeout [ 1146.508464][T17733] hsr_slave_1: entered promiscuous mode [ 1146.771714][T14210] IPVS: stop unused estimator thread 0... [ 1147.011690][T17824] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2946'. [ 1147.494964][T17824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1147.532832][T17824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.587213][T17824] bond0 (unregistering): Released all slaves [ 1147.955851][T17839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2949'. [ 1148.129452][T17845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2951'. [ 1148.397633][T17733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1148.443085][T17733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1148.486809][T17733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1148.617979][T17849] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1148.626058][T17849] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1148.638680][T17849] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1148.646778][T17849] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1148.864780][T17733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1148.983407][T17854] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1149.147163][T17862] netlink: 'syz.2.2954': attribute type 10 has an invalid length. [ 1149.155096][T17862] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2954'. [ 1149.615797][T17733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.664893][T17733] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.689924][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.697049][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.705428][T17851] overlayfs: statfs failed on './file0' [ 1149.728706][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.735845][ T5994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1150.088270][T17869] netlink: 'syz.2.2956': attribute type 10 has an invalid length. [ 1150.096208][T17869] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2956'. [ 1150.887856][T17733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.934821][T17733] veth0_vlan: entered promiscuous mode [ 1150.960792][T17733] veth1_vlan: entered promiscuous mode [ 1151.032541][T17733] veth0_macvtap: entered promiscuous mode [ 1151.071140][T17733] veth1_macvtap: entered promiscuous mode [ 1151.096095][T17733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.138260][T17733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.178638][T14210] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.215843][T14210] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.264546][T14210] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.281482][T14210] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.417649][T17887] CIFS mount error: No usable UNC path provided in device string! [ 1151.417649][T17887] [ 1151.427964][T17887] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1152.070281][T14209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.100718][T14209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.151921][T14188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.160704][T14188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.316561][T17904] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1153.551707][T17910] netlink: 'syz.3.2965': attribute type 10 has an invalid length. [ 1153.559767][T17910] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2965'. [ 1153.590899][T17910] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1153.597615][T17910] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1153.629074][T17910] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1154.088005][T17903] overlayfs: statfs failed on './file0' [ 1154.523711][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1154.546530][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1154.568316][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1154.591826][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1154.600092][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1154.969035][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2970'. [ 1155.017588][T17927] bridge_slave_1: left allmulticast mode [ 1155.023856][T17927] bridge_slave_1: left promiscuous mode [ 1155.036420][T17927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.067479][T17927] bridge_slave_0: left allmulticast mode [ 1155.078592][T17927] bridge_slave_0: left promiscuous mode [ 1155.092508][T17927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.535218][ T30] audit: type=1400 audit(1766991436.719:1595): avc: denied { ioctl } for pid=17931 comm="syz.5.2973" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1155.729012][T17936] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2972'. [ 1155.802173][T14203] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.924516][T14203] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.147612][T17921] chnl_net:caif_netlink_parms(): no params data found [ 1156.562203][T14203] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.607187][ T976] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1156.608341][ T976] dvb_usb_dibusb_mb 2-1:0.214: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 1156.610456][ T10] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1156.610558][ T10] dvb_usb_dibusb_mb 6-1:0.214: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 1156.640666][ T10] usb 6-1: USB disconnect, device number 64 [ 1156.683993][ T5819] Bluetooth: hci0: command tx timeout [ 1156.744412][ T976] usb 2-1: USB disconnect, device number 87 [ 1156.809483][T14203] team0: Port device netdevsim0 removed [ 1156.815944][T14203] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.942670][T17921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.943156][T17921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.943291][T17921] bridge_slave_0: entered allmulticast mode [ 1156.945910][T17921] bridge_slave_0: entered promiscuous mode [ 1156.948549][T17921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.950032][T17921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.950155][T17921] bridge_slave_1: entered allmulticast mode [ 1156.951256][T17921] bridge_slave_1: entered promiscuous mode [ 1156.972369][ T10] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 1157.070879][T17921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.079509][T17921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.140353][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.140381][ T10] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1157.140394][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.144302][ T10] usb 6-1: config 0 descriptor?? [ 1157.154962][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1157.286911][T17921] team0: Port device team_slave_0 added [ 1157.329226][T17921] team0: Port device team_slave_1 added [ 1157.371116][T17955] netlink: 'syz.2.2977': attribute type 10 has an invalid length. [ 1157.379210][T17955] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2977'. [ 1157.596277][T14203] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1157.607016][T14203] gretap1 (unregistering): left allmulticast mode [ 1157.836139][T14203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1157.851297][T14203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.864256][T14203] bond0 (unregistering): Released all slaves [ 1157.892327][T14203] bond1 (unregistering): Released all slaves [ 1157.924721][T14203] bond2 (unregistering): Released all slaves [ 1157.947741][T14203] bond3 (unregistering): Released all slaves [ 1157.974575][T17921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.981689][T17921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.013392][T17921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.143464][T14203] IPVS: stopping master sync thread 17586 ... [ 1158.208964][T17921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.217950][T17921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.247660][T17921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1158.356076][T17921] hsr_slave_0: entered promiscuous mode [ 1158.371447][T17921] hsr_slave_1: entered promiscuous mode [ 1158.378901][T17921] debugfs: 'hsr0' already exists in 'hsr' [ 1158.385072][T17921] Cannot create hsr debugfs directory [ 1158.617647][T17961] netlink: 'syz.2.2978': attribute type 10 has an invalid length. [ 1158.625704][T17961] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2978'. [ 1158.763452][ T5819] Bluetooth: hci0: command tx timeout [ 1158.956709][ T6915] usb 6-1: USB disconnect, device number 65 [ 1159.146482][T14203] hsr_slave_0: left promiscuous mode [ 1159.153897][T14203] hsr_slave_1: left promiscuous mode [ 1159.160024][T14203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.168544][T14203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.191523][T14203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1159.200394][T14203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.266976][T14203] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1159.275295][T14203] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1159.316940][T14203] veth1_macvtap: left promiscuous mode [ 1159.329580][T14203] veth0_macvtap: left promiscuous mode [ 1159.354593][T14203] veth1_vlan: left promiscuous mode [ 1159.382550][T14203] veth0_vlan: left promiscuous mode [ 1160.238489][T17981] CIFS mount error: No usable UNC path provided in device string! [ 1160.238489][T17981] [ 1160.248737][T17981] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1160.491965][T14203] team0 (unregistering): Port device batadv1 removed [ 1160.852512][ T5819] Bluetooth: hci0: command tx timeout [ 1161.200887][T17988] binder: 17987:17988 ioctl c0306201 200000000640 returned -14 [ 1161.237224][T14203] team0 (unregistering): Port device team_slave_1 removed [ 1161.355330][T14203] team0 (unregistering): Port device C removed [ 1161.674039][T17998] xt_nat: multiple ranges no longer supported [ 1162.459413][T18003] netlink: 'syz.5.2991': attribute type 10 has an invalid length. [ 1162.467349][T18003] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1162.922425][ T5819] Bluetooth: hci0: command tx timeout [ 1163.571202][T17921] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1163.676590][T17921] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1163.686880][T17921] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1163.735079][T17921] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1163.767698][T18018] netlink: 'syz.3.2996': attribute type 10 has an invalid length. [ 1163.812808][T18020] netlink: 'syz.0.2993': attribute type 10 has an invalid length. [ 1163.820727][T18020] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2993'. [ 1164.140877][T18018] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2996'. [ 1164.435615][T18020] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1164.496749][T18018] team0: entered promiscuous mode [ 1164.507528][T18018] team_slave_0: entered promiscuous mode [ 1164.532690][T18018] team_slave_1: entered promiscuous mode [ 1164.584566][T18018] team0: entered allmulticast mode [ 1164.609990][T18018] team_slave_0: entered allmulticast mode [ 1164.659552][ T30] audit: type=1400 audit(1766991446.079:1596): avc: denied { ioctl } for pid=18030 comm="syz.5.3001" path="socket:[59094]" dev="sockfs" ino=59094 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1164.688204][T18018] team_slave_1: entered allmulticast mode [ 1164.707787][T18018] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1164.782106][ T30] audit: type=1400 audit(1766991446.079:1597): avc: denied { write } for pid=18030 comm="syz.5.3001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1164.885917][ T30] audit: type=1400 audit(1766991446.079:1598): avc: denied { setopt } for pid=18030 comm="syz.5.3001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1165.074077][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 1165.083843][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 1165.093749][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 1165.103843][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 1165.114105][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 1165.123829][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 1165.133810][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 1165.144047][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 1165.756443][T17921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.973762][ T10] IPVS: starting estimator thread 0... [ 1166.071473][T18057] netlink: 'syz.3.3004': attribute type 10 has an invalid length. [ 1166.477008][T17921] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.497197][T14190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.504376][T14190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.515257][T18056] IPVS: using max 65 ests per chain, 156000 per kthread [ 1166.551868][ T6166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.559016][ T6166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.885512][T18069] fuse: Bad value for 'fd' [ 1166.966401][T17921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1167.089588][T17921] veth0_vlan: entered promiscuous mode [ 1167.146399][T17921] veth1_vlan: entered promiscuous mode [ 1167.209897][T17921] veth0_macvtap: entered promiscuous mode [ 1167.230053][T17921] veth1_macvtap: entered promiscuous mode [ 1167.279137][T17921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.313379][T17921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.370222][ T6166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.395372][ T6166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.467865][ T6166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.480769][ T6166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.574569][ T6166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.592167][ T6166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.656614][ T2136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.679714][ T2136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.233289][ T6970] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1168.476001][ T6970] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1168.498848][ T6970] usb 6-1: config 0 has no interface number 0 [ 1168.525142][ T6970] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.585206][ T6970] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.633046][ T6970] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1168.664552][ T6970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.708032][ T6970] usb 6-1: config 0 descriptor?? [ 1169.408492][ T6970] prodikeys 0003:041E:2801.0017: unknown main item tag 0x7 [ 1169.473345][ T6970] prodikeys 0003:041E:2801.0017: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input1 [ 1169.529699][ T6970] hid_prodikeys: hid-prodikeys: failed to find output report [ 1169.529699][ T6970] [ 1169.615795][T18083] netlink: 'syz.5.3013': attribute type 1 has an invalid length. [ 1169.631417][T18118] fuse: Bad value for 'fd' [ 1169.647767][T18083] __nla_validate_parse: 65 callbacks suppressed [ 1169.647785][T18083] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3013'. [ 1169.697642][ T10] usb 6-1: USB disconnect, device number 66 [ 1170.177504][T18123] netlink: 'syz.2.3021': attribute type 10 has an invalid length. [ 1170.185430][T18123] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3021'. [ 1171.507266][T18141] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1171.507266][T18141] program syz.2.3025 not setting count and/or reply_len properly [ 1171.947063][ T976] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1172.038938][ T9] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1172.068674][T18156] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3031'. [ 1172.522548][ T976] usb 2-1: device descriptor read/64, error -71 [ 1172.624829][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1172.633928][ T9] usb 4-1: can't read configurations, error -61 [ 1172.763636][ T976] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1172.771957][ T9] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1172.859972][T18162] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3032'. [ 1172.932818][ T976] usb 2-1: device descriptor read/64, error -71 [ 1172.945184][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1172.967930][ T9] usb 4-1: can't read configurations, error -61 [ 1172.987682][ T9] usb usb4-port1: attempt power cycle [ 1173.062605][ T976] usb usb2-port1: attempt power cycle [ 1173.332530][ T9] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1173.381395][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1173.402429][ T976] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1173.411358][ T9] usb 4-1: can't read configurations, error -61 [ 1173.442955][ T976] usb 2-1: device descriptor read/8, error -71 [ 1173.565181][ T9] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1173.611969][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1173.633923][ T9] usb 4-1: can't read configurations, error -61 [ 1173.658825][ T9] usb usb4-port1: unable to enumerate USB device [ 1173.702482][ T976] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1173.753175][ T976] usb 2-1: device descriptor read/8, error -71 [ 1173.873087][ T976] usb usb2-port1: unable to enumerate USB device [ 1174.682564][ T976] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1174.902761][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 1174.909779][ T976] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1174.922628][ T976] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1174.934537][ T976] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1174.946835][ T976] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1174.980712][ T976] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1174.994899][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.052640][ T30] audit: type=1326 audit(1766991456.579:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18189 comm="syz.5.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4518f749 code=0x7ffc0000 [ 1176.084762][T18192] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:20004 [ 1177.086693][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.443091][T18204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3043'. [ 1177.592432][ T5896] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1177.602593][ T30] audit: type=1326 audit(1766991456.579:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18189 comm="syz.5.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f0f4518f749 code=0x7ffc0000 [ 1177.978782][ T30] audit: type=1326 audit(1766991457.069:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18189 comm="syz.5.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4518f749 code=0x7ffc0000 [ 1178.035531][ T976] usb 3-1: usb_control_msg returned -71 [ 1178.076565][ T976] usbtmc 3-1:16.0: can't read capabilities [ 1178.097758][ T30] audit: type=1326 audit(1766991457.069:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18189 comm="syz.5.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4518f749 code=0x7ffc0000 [ 1178.199857][ T976] usb 3-1: USB disconnect, device number 73 [ 1178.839664][T18218] netlink: 'syz.2.3047': attribute type 10 has an invalid length. [ 1178.848107][T18218] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3047'. [ 1179.708735][ T5896] usb 2-1: device descriptor read/all, error -71 [ 1179.725352][T18191] delete_channel: no stack [ 1180.650641][T18232] netlink: 332 bytes leftover after parsing attributes in process `syz.5.3049'. [ 1181.203217][ T5896] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1181.600640][T18256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3055'. [ 1181.718756][ T5896] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1181.727677][ T5896] usb 2-1: can't read configurations, error -61 [ 1181.863549][ T5896] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1182.024546][ T5896] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1182.032559][ T5896] usb 2-1: can't read configurations, error -61 [ 1182.040668][ T5896] usb usb2-port1: attempt power cycle [ 1182.352919][T18260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3056'. [ 1182.382429][ T5896] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1182.467451][ T5896] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1182.483258][ T5896] usb 2-1: can't read configurations, error -61 [ 1182.507179][T18270] CUSE: info not properly terminated [ 1182.632655][ T5896] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1182.704583][ T5896] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1182.723162][ T5896] usb 2-1: can't read configurations, error -61 [ 1182.752002][ T5896] usb usb2-port1: unable to enumerate USB device [ 1183.637984][T18284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3060'. [ 1183.661322][T18284] bridge_slave_1: left allmulticast mode [ 1183.667206][T18284] bridge_slave_1: left promiscuous mode [ 1183.701780][T18284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.981144][T18284] bridge_slave_0: left allmulticast mode [ 1183.993421][T18284] bridge_slave_0: left promiscuous mode [ 1184.121351][T18284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.642110][T18291] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3062'. [ 1186.864940][T18333] netlink: 'syz.1.3067': attribute type 1 has an invalid length. [ 1187.572579][ T9] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1187.764892][ T9] usb 2-1: config 85 has too many interfaces: 148, using maximum allowed: 32 [ 1187.781556][ T9] usb 2-1: config 85 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.794397][ T9] usb 2-1: config 85 has 0 interfaces, different from the descriptor's value: 148 [ 1187.810574][ T9] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= e.b7 [ 1187.828227][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.034155][ T890] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1188.163853][ T9] usb 2-1: string descriptor 0 read error: -71 [ 1188.212976][ T9] usb 2-1: USB disconnect, device number 98 [ 1188.282645][T18358] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3075'. [ 1188.291814][T18358] openvswitch: netlink: Flow key attr not present in new flow. [ 1188.323144][ T890] usb 4-1: Using ep0 maxpacket: 32 [ 1188.330027][ T890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.344031][ T890] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1188.353468][ T890] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1188.361641][ T890] usb 4-1: Product: syz [ 1188.370335][ T890] usb 4-1: Manufacturer: syz [ 1188.640389][ T890] usb 4-1: SerialNumber: syz [ 1188.649494][ T890] usb 4-1: config 0 descriptor?? [ 1188.665588][ T890] hub 4-1:0.0: bad descriptor, ignoring hub [ 1188.671949][ T890] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1188.910226][ T30] audit: type=1400 audit(1766991469.333:1603): avc: denied { create } for pid=18346 comm="syz.3.3072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1189.516136][T18373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1189.714901][T18376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3079'. [ 1192.152713][ T9] usb 4-1: USB disconnect, device number 88 [ 1192.422093][T18401] xt_nat: multiple ranges no longer supported [ 1194.890905][T18419] xt_nat: multiple ranges no longer supported [ 1195.292372][ T30] audit: type=1326 audit(1766991475.703:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18415 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15198f749 code=0x7ffc0000 [ 1195.668685][ T30] audit: type=1326 audit(1766991475.703:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18415 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15198f749 code=0x7ffc0000 [ 1195.696870][ T30] audit: type=1326 audit(1766991475.703:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18415 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc15198f749 code=0x7ffc0000 [ 1195.759365][T18424] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 1196.934662][T18443] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3095'. [ 1197.732052][T18449] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1197.762361][ T9] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1197.932547][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1198.013086][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'. [ 1198.023575][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'. [ 1198.034109][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'. [ 1198.044447][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'. [ 1198.054576][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'. [ 1198.064777][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'. [ 1198.076078][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'. [ 1198.086340][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'. [ 1198.097287][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'. [ 1198.436480][ T9] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1198.450280][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1198.461716][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1198.473243][ T6915] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1198.483431][T18459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8217 sclass=netlink_route_socket pid=18459 comm=syz.0.3096 [ 1198.496826][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 1198.512691][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1198.522199][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1198.534773][ T9] usb 2-1: SerialNumber: syz [ 1198.543072][T18443] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1198.550957][T18443] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1198.650408][ T6915] usb 4-1: Using ep0 maxpacket: 8 [ 1198.668169][ T6915] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 198, setting to 64 [ 1198.709129][ T6915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1198.844102][ T6915] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1198.870952][ T6915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.902099][ T6915] usb 4-1: Product: syz [ 1198.906715][ T6915] usb 4-1: Manufacturer: syz [ 1198.925893][ T6915] usb 4-1: SerialNumber: syz [ 1198.944872][ T6915] usb 4-1: config 0 descriptor?? [ 1198.978032][ T6915] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1199.002591][ T9] usb 2-1: USB disconnect, device number 99 [ 1199.135047][ T30] audit: type=1400 audit(1766991479.563:1607): avc: denied { create } for pid=18465 comm="syz.0.3102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1199.166877][ T30] audit: type=1400 audit(1766991479.593:1608): avc: denied { bind } for pid=18452 comm="syz.3.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1199.408095][T18470] Device name cannot be null; rc = [-22] [ 1200.363767][T18483] overlay: ./file0 is not a directory [ 1200.369305][ T30] audit: type=1400 audit(1766991480.783:1609): avc: denied { mount } for pid=18482 comm="syz.5.3105" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1200.407171][T18483] overlay: ./file0 is not a directory [ 1200.974564][ T6915] snd_usb_toneport 4-1:0.0: set_interface failed [ 1201.010600][ T6915] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1201.030350][ T6915] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 1201.210292][ T6915] usb 4-1: USB disconnect, device number 89 [ 1201.939162][ T30] audit: type=1400 audit(1766991482.363:1610): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1202.304674][T18513] __nla_validate_parse: 62 callbacks suppressed [ 1202.304697][T18513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3113'. [ 1203.446769][T18535] tmpfs: Unknown parameter 'trans' [ 1204.425916][T18544] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1204.435656][T18544] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1204.448736][T18544] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1204.456786][T18544] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1204.785097][T18548] FAULT_INJECTION: forcing a failure. [ 1204.785097][T18548] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.797811][T18548] CPU: 0 UID: 0 PID: 18548 Comm: syz.2.3123 Tainted: G L syzkaller #0 PREEMPT(full) [ 1204.797841][T18548] Tainted: [L]=SOFTLOCKUP [ 1204.797848][T18548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1204.797857][T18548] Call Trace: [ 1204.797862][T18548] [ 1204.797868][T18548] dump_stack_lvl+0x16c/0x1f0 [ 1204.797888][T18548] should_fail_ex+0x512/0x640 [ 1204.797907][T18548] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1204.797929][T18548] should_failslab+0xc2/0x120 [ 1204.797952][T18548] kmem_cache_alloc_noprof+0x83/0x770 [ 1204.797971][T18548] ? security_file_alloc+0x34/0x2b0 [ 1204.797990][T18548] ? security_file_alloc+0x34/0x2b0 [ 1204.798004][T18548] security_file_alloc+0x34/0x2b0 [ 1204.798018][T18548] init_file+0x93/0x4c0 [ 1204.798036][T18548] alloc_empty_file+0x73/0x1e0 [ 1204.798047][T18548] alloc_file_pseudo+0x13a/0x230 [ 1204.798058][T18548] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1204.798069][T18548] ? alloc_fd+0x471/0x7d0 [ 1204.798087][T18548] sock_alloc_file+0x50/0x210 [ 1204.798100][T18548] __sys_socket+0x1c0/0x260 [ 1204.798113][T18548] ? fput+0xe2/0xf0 [ 1204.798122][T18548] ? __pfx___sys_socket+0x10/0x10 [ 1204.798135][T18548] ? ksys_write+0x1ac/0x250 [ 1204.798148][T18548] ? __pfx_ksys_write+0x10/0x10 [ 1204.798164][T18548] __x64_sys_socket+0x72/0xb0 [ 1204.798177][T18548] ? lockdep_hardirqs_on+0x7c/0x110 [ 1204.798192][T18548] do_syscall_64+0xcd/0xf80 [ 1204.798206][T18548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.798218][T18548] RIP: 0033:0x7fa311d8f749 [ 1204.798228][T18548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1204.798239][T18548] RSP: 002b:00007fa312c5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1204.798250][T18548] RAX: ffffffffffffffda RBX: 00007fa311fe6180 RCX: 00007fa311d8f749 [ 1204.798259][T18548] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 1204.798265][T18548] RBP: 00007fa312c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.798272][T18548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.798278][T18548] R13: 00007fa311fe6218 R14: 00007fa311fe6180 R15: 00007fff8ea31a08 [ 1204.798293][T18548] [ 1205.031090][T18547] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1205.031090][T18547] program syz.2.3123 not setting count and/or reply_len properly [ 1205.522425][T18488] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1205.561782][ T30] audit: type=1400 audit(1766991485.983:1611): avc: denied { map } for pid=18550 comm="syz.0.3124" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1205.665127][T18553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3125'. [ 1205.677047][T18488] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 1205.690956][T18488] usb 3-1: config 0 has no interface number 0 [ 1205.702460][T18488] usb 3-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x96, changing to 0x86 [ 1205.718928][T18553] tipc: Started in network mode [ 1205.726269][T18553] tipc: Node identity 7f000001, cluster identity 4711 [ 1205.739663][T18488] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1205.751056][T18488] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.760302][T18553] tipc: Enabled bearer , priority 10 [ 1205.771563][T18488] usb 3-1: Product: syz [ 1205.777149][T18553] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3125'. [ 1205.786479][T18488] usb 3-1: Manufacturer: syz [ 1205.792652][T18488] usb 3-1: SerialNumber: syz [ 1205.803190][T18553] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1205.813483][T18488] usb 3-1: config 0 descriptor?? [ 1205.820781][T18553] tipc: Enabled bearer , priority 10 [ 1206.043898][T18546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.052572][T18546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.068013][T18488] usb 3-1: USB disconnect, device number 74 [ 1206.101814][T18565] NILFS (nullb0): couldn't find nilfs on the device [ 1206.241791][T18564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3129'. [ 1206.333091][T18578] netlink: 'syz.1.3131': attribute type 1 has an invalid length. [ 1206.341958][T18578] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3131'. [ 1206.421778][T18572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3130'. [ 1206.826112][ T6970] tipc: Node number set to 2130706433 [ 1207.269930][T18589] netlink: 'syz.5.3133': attribute type 10 has an invalid length. [ 1207.277898][T18589] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3133'. [ 1208.188607][ T30] audit: type=1400 audit(1766991488.613:1612): avc: denied { connect } for pid=18602 comm="syz.5.3137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1210.103157][T18621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18621 comm=syz.3.3141 [ 1210.117964][T18621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3141'. [ 1210.134697][ T30] audit: type=1400 audit(1766991490.543:1613): avc: denied { write } for pid=18620 comm="syz.3.3141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1210.266758][T18628] 9p: Bad value for 'wfdno' [ 1211.419282][T18661] netlink: 'syz.5.3150': attribute type 10 has an invalid length. [ 1211.427225][T18661] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3150'. [ 1211.905901][T18668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3151'. [ 1214.277420][T18684] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3156'. [ 1214.351748][T18688] netlink: 'syz.5.3154': attribute type 10 has an invalid length. [ 1214.359696][T18688] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3154'. [ 1215.072425][ T7439] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1215.372755][ T7439] usb 2-1: Using ep0 maxpacket: 16 [ 1215.454336][ T7439] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1215.478964][T18707] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3159'. [ 1215.491837][ T7439] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1215.561571][T18711] netlink: 'syz.2.3162': attribute type 10 has an invalid length. [ 1215.569545][T18711] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3162'. [ 1215.931835][ T7439] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1215.958765][ T7439] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 1215.966011][T18698] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3157'. [ 1216.009323][ T7439] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1216.028230][ T7439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1216.050892][ T7439] usb 2-1: SerialNumber: syz [ 1216.055729][ T6970] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1216.074928][T18684] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1216.094254][T18684] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1216.327516][ T6970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.347068][ T6970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1216.360025][ T6970] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1216.370254][ T6970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.382003][ T890] usb 2-1: USB disconnect, device number 100 [ 1216.823745][ T6970] usb 4-1: config 0 descriptor?? [ 1217.258365][T18722] netlink: 'syz.5.3164': attribute type 10 has an invalid length. [ 1217.266492][T18722] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3164'. [ 1217.643648][ T6970] kovaplus 0003:1E7D:2D50.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 1217.898060][T18709] input: syz0 as /devices/virtual/input/input15 [ 1217.982621][T18709] netlink: 400 bytes leftover after parsing attributes in process `syz.3.3161'. [ 1218.140540][ T30] audit: type=1400 audit(1766991498.563:1614): avc: denied { map } for pid=18702 comm="syz.3.3161" path="socket:[62869]" dev="sockfs" ino=62869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1218.553027][ T30] audit: type=1400 audit(1766991498.593:1615): avc: denied { read } for pid=18702 comm="syz.3.3161" path="socket:[62869]" dev="sockfs" ino=62869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1218.581007][ T6970] kovaplus 0003:1E7D:2D50.0018: couldn't init struct kovaplus_device [ 1218.590503][ T6970] kovaplus 0003:1E7D:2D50.0018: couldn't install mouse [ 1218.601684][ T6970] kovaplus 0003:1E7D:2D50.0018: probe with driver kovaplus failed with error -71 [ 1218.621910][ T6970] usb 4-1: USB disconnect, device number 90 [ 1218.683801][ T7439] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1218.929721][T18737] netlink: 'syz.2.3168': attribute type 10 has an invalid length. [ 1218.937703][T18737] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3168'. [ 1218.982767][ T7439] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1218.993004][ T7439] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1219.310049][ T7439] usb 6-1: config 0 has an invalid descriptor of length 173, skipping remainder of the config [ 1219.334480][ T7439] usb 6-1: config 0 has no interface number 0 [ 1219.348780][ T7439] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1219.376692][ T7439] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1219.405653][ T7439] usb 6-1: config 0 interface 214 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1219.425984][ T7439] usb 6-1: config 0 interface 214 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 12 [ 1219.454040][ T7439] usb 6-1: New USB device found, idVendor=eb1a, idProduct=17de, bcdDevice=b6.71 [ 1219.471610][ T7439] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.494475][ T7439] usb 6-1: Product: syz [ 1219.503919][ T7439] usb 6-1: Manufacturer: syz [ 1219.516820][ T7439] usb 6-1: SerialNumber: syz [ 1219.531836][ T7439] usb 6-1: config 0 descriptor?? [ 1219.627247][ T7439] dvb-usb: found a 'KWorld V-Stream XPERT DTV - DVB-T USB1.1' in cold state, will try to load a firmware [ 1219.928400][ T7439] usb 6-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 1219.964909][ T7439] usb 6-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 1220.119894][T18751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3171'. [ 1220.136684][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 1220.169889][T18763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3174'. [ 1220.746193][T18763] netlink: 'syz.1.3174': attribute type 1 has an invalid length. [ 1220.772387][T18763] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3174'. [ 1221.859296][T18779] netlink: 'syz.5.3176': attribute type 10 has an invalid length. [ 1221.867224][T18779] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3176'. [ 1222.428248][T18783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3178'. [ 1222.528930][T18784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3178'. [ 1222.608563][T18786] overlayfs: failed to resolve './file0': -2 [ 1223.156133][T18796] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1223.172575][ T6915] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1223.305897][T18798] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3185'. [ 1223.346163][T18798] openvswitch: netlink: Flow key attr not present in new flow. [ 1223.357102][ T6915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.387392][ T6915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1223.469941][ T6915] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1223.617376][ T6915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.641788][ T6915] usb 2-1: config 0 descriptor?? [ 1223.838328][T18809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3186'. [ 1224.614904][ T30] audit: type=1400 audit(1766991505.043:1616): avc: denied { getopt } for pid=18787 comm="syz.5.3180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1225.890090][ T6915] kovaplus 0003:1E7D:2D50.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 1226.130352][T18823] netlink: 'syz.3.3189': attribute type 10 has an invalid length. [ 1226.138273][T18823] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3189'. [ 1226.373801][ T6915] kovaplus 0003:1E7D:2D50.0019: couldn't init struct kovaplus_device [ 1226.393768][ T6915] kovaplus 0003:1E7D:2D50.0019: couldn't install mouse [ 1226.423768][ T6915] kovaplus 0003:1E7D:2D50.0019: probe with driver kovaplus failed with error -71 [ 1226.469509][ T6915] usb 2-1: USB disconnect, device number 101 [ 1226.559593][T18824] fido_id[18824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1226.863659][ T6915] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1227.056176][ T6915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1227.117802][ T6915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.159534][ T6915] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1227.189231][ T6915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.516580][T18834] NILFS (nullb0): couldn't find nilfs on the device [ 1227.830417][ T6915] usb 2-1: config 0 descriptor?? [ 1228.277291][ T6915] hid (null): report_id 0 is invalid [ 1228.356469][ T6915] nintendo 0003:057E:200E.001A: report_id 0 is invalid [ 1228.388297][T18838] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3190'. [ 1228.437975][ T6915] nintendo 0003:057E:200E.001A: item 0 0 1 8 parsing failed [ 1228.471739][ T6915] nintendo 0003:057E:200E.001A: HID parse failed [ 1228.503580][ T6915] nintendo 0003:057E:200E.001A: probe - fail = -22 [ 1228.530734][ T6915] nintendo 0003:057E:200E.001A: probe with driver nintendo failed with error -22 [ 1228.622714][ T6915] usb 2-1: USB disconnect, device number 102 [ 1229.214683][ T30] audit: type=1400 audit(1766991509.643:1617): avc: denied { audit_read } for pid=18851 comm="syz.1.3198" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1229.412806][ T9] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1229.644445][ T9] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 1229.696171][ T9] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.740991][ T9] usb 3-1: config 6 has no interface number 0 [ 1229.764674][ T9] usb 3-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1230.144440][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1230.165200][T18839] Device name cannot be null; rc = [-22] [ 1230.175090][ T9] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 1230.215422][ T9] usb 3-1: Product: syz [ 1230.229890][ T9] usb 3-1: Manufacturer: syz [ 1230.251794][ T9] usb 3-1: SerialNumber: syz [ 1230.333883][ T9] hso 3-1:6.2: Failed to find INT IN ep [ 1230.455825][T18863] Bluetooth: MGMT ver 1.23 [ 1230.682411][T14188] wlan0: Trigger new scan to find an IBSS to join [ 1230.916401][T18869] netlink: 'syz.3.3202': attribute type 10 has an invalid length. [ 1230.924640][T18869] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3202'. [ 1231.923224][T18883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3204'. [ 1232.240415][T18488] usb 3-1: USB disconnect, device number 75 [ 1232.377571][T18888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3205'. [ 1233.880318][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3208'. [ 1233.889479][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3208'. [ 1233.899586][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3208'. [ 1233.910119][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3208'. [ 1233.920283][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3208'. [ 1233.930958][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3208'. [ 1233.941405][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3208'. [ 1233.951645][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3208'. [ 1234.744053][T14192] wlan0: Trigger new scan to find an IBSS to join [ 1236.041914][T18920] netlink: 'syz.2.3214': attribute type 10 has an invalid length. [ 1236.082862][T14189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.573953][T18930] netlink: 'syz.3.3217': attribute type 1 has an invalid length. [ 1236.628390][T18930] bond1: entered promiscuous mode [ 1236.663779][T18930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1236.735158][T18935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1236.742470][T18935] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1236.753242][T18935] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1236.781396][T18935] bond1: (slave wireguard0): making interface the new active one [ 1236.782424][ T5947] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1236.809127][T18935] wireguard0: entered promiscuous mode [ 1236.832637][T18935] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 1236.965570][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1236.985528][ T5947] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1237.012662][ T5947] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1237.031433][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.055502][ T5947] usb 3-1: config 0 descriptor?? [ 1237.714147][T18950] __nla_validate_parse: 82 callbacks suppressed [ 1237.714160][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3221'. [ 1237.885875][ T5947] kovaplus 0003:1E7D:2D50.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 1238.079101][T18931] input: syz0 as /devices/virtual/input/input16 [ 1238.133734][T18931] netlink: 400 bytes leftover after parsing attributes in process `syz.2.3216'. [ 1238.320962][T18962] NILFS (nullb0): couldn't find nilfs on the device [ 1238.976143][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.615867][ T5947] kovaplus 0003:1E7D:2D50.001B: couldn't init struct kovaplus_device [ 1239.624419][ T5947] kovaplus 0003:1E7D:2D50.001B: couldn't install mouse [ 1239.694899][ T5947] kovaplus 0003:1E7D:2D50.001B: probe with driver kovaplus failed with error -71 [ 1239.831943][ T5947] usb 3-1: USB disconnect, device number 76 [ 1239.939752][T18976] netlink: 'syz.5.3226': attribute type 10 has an invalid length. [ 1239.947772][T18976] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3226'. [ 1241.082429][T19001] netlink: 'syz.1.3234': attribute type 10 has an invalid length. [ 1241.090432][T19001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3234'. [ 1241.124376][T19001] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1241.131099][T19001] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.162782][T19001] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1241.360531][ T6915] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1241.492410][ T6915] usb 4-1: device descriptor read/64, error -71 [ 1241.863660][ T6915] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1241.883611][ T30] audit: type=1400 audit(1766991522.303:1618): avc: denied { setattr } for pid=19005 comm="syz.1.3238" name="/" dev="configfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1242.572373][ T6915] usb 4-1: device descriptor read/64, error -71 [ 1242.688237][ T6915] usb usb4-port1: attempt power cycle [ 1242.742557][ T5823] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1242.824731][T19021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.835955][T19021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.902470][ T5823] usb 2-1: Using ep0 maxpacket: 32 [ 1242.913693][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.932500][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.942266][ T5823] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1242.961425][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.998139][ T5823] usb 2-1: config 0 descriptor?? [ 1243.026660][ T5823] hub 2-1:0.0: USB hub found [ 1243.042703][ T6915] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1243.062849][ T6915] usb 4-1: device descriptor read/8, error -71 [ 1243.247844][ T5823] hub 2-1:0.0: 1 port detected [ 1243.278728][T19025] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3243'. [ 1243.322430][ T6915] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1243.343026][ T6915] usb 4-1: device descriptor read/8, error -71 [ 1243.464963][ T6915] usb usb4-port1: unable to enumerate USB device [ 1243.856118][ T6915] hub 2-1:0.0: activate --> -90 [ 1244.176076][ T9] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 1244.259146][ T5823] usb 2-1: USB disconnect, device number 103 [ 1244.366134][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1244.391415][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.419962][ T9] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1244.451730][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.495867][ T9] usb 4-1: config 0 descriptor?? [ 1244.856182][T19051] FAULT_INJECTION: forcing a failure. [ 1244.856182][T19051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1245.723531][T19051] CPU: 0 UID: 0 PID: 19051 Comm: syz.1.3249 Tainted: G L syzkaller #0 PREEMPT(full) [ 1245.723563][T19051] Tainted: [L]=SOFTLOCKUP [ 1245.723570][T19051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1245.723582][T19051] Call Trace: [ 1245.723589][T19051] [ 1245.723597][T19051] dump_stack_lvl+0x16c/0x1f0 [ 1245.723624][T19051] should_fail_ex+0x512/0x640 [ 1245.723657][T19051] _copy_to_user+0x32/0xd0 [ 1245.723685][T19051] simple_read_from_buffer+0xcb/0x170 [ 1245.723713][T19051] proc_fail_nth_read+0x197/0x240 [ 1245.723734][T19051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1245.723756][T19051] ? rw_verify_area+0xcf/0x6c0 [ 1245.723775][T19051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1245.723795][T19051] vfs_read+0x1e4/0xcf0 [ 1245.723817][T19051] ? __pfx___mutex_lock+0x10/0x10 [ 1245.723842][T19051] ? __pfx_vfs_read+0x10/0x10 [ 1245.723871][T19051] ? __fget_files+0x20e/0x3c0 [ 1245.723903][T19051] ksys_read+0x12a/0x250 [ 1245.723924][T19051] ? __pfx_ksys_read+0x10/0x10 [ 1245.723946][T19051] ? fput+0x70/0xf0 [ 1245.723967][T19051] do_syscall_64+0xcd/0xf80 [ 1245.723991][T19051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.724010][T19051] RIP: 0033:0x7f8e8b38e15c [ 1245.724026][T19051] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1245.724043][T19051] RSP: 002b:00007f8e8c304030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1245.724059][T19051] RAX: ffffffffffffffda RBX: 00007f8e8b5e5fa0 RCX: 00007f8e8b38e15c [ 1245.724070][T19051] RDX: 000000000000000f RSI: 00007f8e8c3040a0 RDI: 0000000000000004 [ 1245.724081][T19051] RBP: 00007f8e8c304090 R08: 0000000000000000 R09: 0000000000000000 [ 1245.724091][T19051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.724101][T19051] R13: 00007f8e8b5e6038 R14: 00007f8e8b5e5fa0 R15: 00007fff1c2cb768 [ 1245.724122][T19051] [ 1246.131423][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 1246.143697][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1246.160850][ T9] usb 4-1: USB disconnect, device number 95 [ 1246.347645][T19057] overlayfs: failed to resolve './file1': -2 [ 1246.469671][T19059] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3252'. [ 1246.501698][T19059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3252'. [ 1247.252825][ T5947] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1247.372531][ T5823] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 1247.413413][T19079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3256'. [ 1247.424621][ T5947] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1247.465822][T19079] bridge_slave_1: left allmulticast mode [ 1247.471482][T19079] bridge_slave_1: left promiscuous mode [ 1247.479248][T19079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.502362][ T5947] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1247.540748][ T5947] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1247.582549][ T5823] usb 3-1: Invalid ep0 maxpacket: 16 [ 1247.593371][T19079] bridge_slave_0: left allmulticast mode [ 1247.608044][T19079] bridge_slave_0: left promiscuous mode [ 1247.628991][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.652974][T19079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.690690][T19066] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1247.751297][ T5947] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1247.772248][ T5823] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 1247.992338][ T5823] usb 3-1: Invalid ep0 maxpacket: 16 [ 1248.019201][ T5947] usb 4-1: USB disconnect, device number 96 [ 1248.026610][ T5823] usb usb3-port1: attempt power cycle [ 1248.413936][ T5823] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 1248.426245][T19066] erspan1: entered allmulticast mode [ 1248.507824][ T5823] usb 3-1: Invalid ep0 maxpacket: 16 [ 1248.682373][ T5823] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 1248.723303][ T5823] usb 3-1: Invalid ep0 maxpacket: 16 [ 1248.850531][ T5823] usb usb3-port1: unable to enumerate USB device [ 1250.639047][T19101] overlayfs: failed to resolve './file1': -2 [ 1252.410924][T19111] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3264'. [ 1252.896625][T19127] netlink: 'syz.1.3269': attribute type 10 has an invalid length. [ 1252.904619][T19127] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3269'. [ 1253.521473][T19130] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1253.529328][T19130] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1253.619587][T19132] /dev/nullb0: Can't open blockdev [ 1253.979227][T19130] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1253.989912][T19130] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1254.135199][T19135] fuse: Unknown parameter '0x0000000000000005' [ 1256.105502][T19155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3273'. [ 1256.168880][T19163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3279'. [ 1256.358421][T19173] IPVS: set_ctl: invalid protocol: 94 172.20.20.38:65533 [ 1256.434060][ T30] audit: type=1326 audit(1766991536.843:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19164 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8b38f749 code=0x7ffc0000 [ 1256.511378][ T30] audit: type=1326 audit(1766991536.843:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19164 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8b38f749 code=0x7ffc0000 [ 1256.789038][ T30] audit: type=1326 audit(1766991536.843:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19164 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f8e8b38f749 code=0x7ffc0000 [ 1257.109453][T19173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1257.207578][T19179] netlink: 'syz.5.3281': attribute type 10 has an invalid length. [ 1257.215572][T19179] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3281'. [ 1258.053027][ T30] audit: type=1326 audit(1766991536.843:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19164 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8b38f749 code=0x7ffc0000 [ 1258.127312][ T30] audit: type=1326 audit(1766991536.843:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19164 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8b38f749 code=0x7ffc0000 [ 1258.217241][ T30] audit: type=1326 audit(1766991536.843:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19164 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f8e8b38f749 code=0x7ffc0000 [ 1258.271393][ T30] audit: type=1326 audit(1766991537.003:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19164 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8b38f749 code=0x7ffc0000 [ 1258.340673][ T30] audit: type=1326 audit(1766991537.003:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19164 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8b38f749 code=0x7ffc0000 [ 1259.595188][T19192] fuse: Unknown parameter '0x0000000000000005' [ 1260.389902][T19206] netlink: 'syz.3.3290': attribute type 12 has an invalid length. [ 1260.405208][T19206] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3290'. [ 1260.745923][T19212] netlink: 'syz.3.3292': attribute type 10 has an invalid length. [ 1260.753866][T19212] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3292'. [ 1261.162456][T17263] Bluetooth: hci1: command 0x0406 tx timeout [ 1261.187045][ T30] audit: type=1326 audit(1766991541.613:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19213 comm="syz.2.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa311d8f749 code=0x7ffc0000 [ 1261.212215][ T30] audit: type=1326 audit(1766991541.613:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19213 comm="syz.2.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa311d8f749 code=0x7ffc0000 [ 1261.253320][T19216] pim6reg: entered allmulticast mode [ 1261.363209][T19219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3294'. [ 1261.617567][T19227] netlink: 'syz.5.3297': attribute type 10 has an invalid length. [ 1261.635397][T19227] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3297'. [ 1261.660325][T19227] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1261.974093][T19216] pim6reg: left allmulticast mode [ 1262.470251][T19245] NILFS (nullb0): couldn't find nilfs on the device [ 1263.614934][T19246] NILFS (nullb0): couldn't find nilfs on the device [ 1263.859894][T19251] netlink: 'syz.1.3303': attribute type 10 has an invalid length. [ 1263.868044][T19251] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3303'. [ 1264.378023][T19255] netlink: 'syz.2.3304': attribute type 10 has an invalid length. [ 1264.386001][T19255] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3304'. [ 1265.278389][T19270] netlink: 'syz.0.3306': attribute type 10 has an invalid length. [ 1265.286335][T19270] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3306'. [ 1265.331217][ T6915] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1265.722763][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1265.722775][ T30] audit: type=1400 audit(1766991546.143:1662): avc: denied { wake_alarm } for pid=19273 comm="syz.2.3310" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1265.793925][ T6915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.124313][ T6915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1266.161404][T19281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3311'. [ 1266.217765][T19281] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1266.237911][ T6915] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1266.276465][ T6915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.331636][ T6915] usb 4-1: config 0 descriptor?? [ 1266.812593][ T6915] kovaplus 0003:1E7D:2D50.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 1267.065280][T19260] input: syz0 as /devices/virtual/input/input17 [ 1267.616914][T19260] netlink: 400 bytes leftover after parsing attributes in process `syz.3.3307'. [ 1267.881064][ T6915] kovaplus 0003:1E7D:2D50.001C: couldn't init struct kovaplus_device [ 1267.912402][ T6915] kovaplus 0003:1E7D:2D50.001C: couldn't install mouse [ 1267.938521][ T6915] kovaplus 0003:1E7D:2D50.001C: probe with driver kovaplus failed with error -71 [ 1267.980595][ T6915] usb 4-1: USB disconnect, device number 97 [ 1269.270138][ T30] audit: type=1400 audit(1766991549.693:1663): avc: denied { ioctl } for pid=19314 comm="syz.5.3322" path="socket:[65053]" dev="sockfs" ino=65053 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1269.362598][ T6970] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 1269.718494][ T30] audit: type=1400 audit(1766991550.143:1664): avc: denied { getopt } for pid=19324 comm="syz.5.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1270.389348][ T6970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1270.412897][ T6970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.434747][ T6970] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1270.512465][ T6970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.556724][ T6970] usb 3-1: config 0 descriptor?? [ 1271.086607][ T6970] nintendo 0003:057E:200E.001D: unbalanced delimiter at end of report description [ 1271.170671][T19339] netlink: 'syz.0.3329': attribute type 10 has an invalid length. [ 1271.178622][T19339] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3329'. [ 1271.543625][ T6970] nintendo 0003:057E:200E.001D: HID parse failed [ 1271.586832][ T6970] nintendo 0003:057E:200E.001D: probe - fail = -22 [ 1271.628056][ T6970] nintendo 0003:057E:200E.001D: probe with driver nintendo failed with error -22 [ 1271.691310][ T6970] usb 3-1: USB disconnect, device number 81 [ 1272.131268][T19342] kAFS: No cell specified [ 1272.423788][T19346] fuse: Unknown parameter 'fd0x0000000000000005' [ 1272.846619][T19355] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig [ 1273.092758][ T976] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1273.252416][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 1273.259350][ T976] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1273.273095][ T976] usb 3-1: config 179 has no interface number 0 [ 1273.281202][ T976] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1273.298536][ T976] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1273.313746][ T976] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1273.328006][ T976] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1273.438341][ T976] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1273.459457][ T976] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1273.900652][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.915088][T19353] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1274.226240][T19353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.247191][T19353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.518007][T19374] netlink: 'syz.1.3340': attribute type 10 has an invalid length. [ 1274.526190][T19374] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3340'. [ 1274.706439][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1274.714786][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1274.725577][ T976] usb 3-1: USB disconnect, device number 82 [ 1275.178651][ T30] audit: type=1400 audit(1766991555.603:1665): avc: denied { nlmsg_write } for pid=19378 comm="syz.1.3341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1276.088915][T10838] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1276.275563][T10838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1276.302705][T10838] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1276.371567][T10838] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1276.392996][T10838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.434703][T10838] usb 4-1: config 0 descriptor?? [ 1276.860257][T10838] kovaplus 0003:1E7D:2D50.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 1277.506494][T19401] netlink: 'syz.1.3347': attribute type 10 has an invalid length. [ 1277.514407][T19401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3347'. [ 1277.539817][T19407] netlink: 'syz.2.3346': attribute type 10 has an invalid length. [ 1277.547722][T19407] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3346'. [ 1277.606750][T19409] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3348'. [ 1277.653222][T19409] netlink: 'syz.5.3348': attribute type 1 has an invalid length. [ 1277.677177][T19409] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3348'. [ 1277.726519][T10838] kovaplus 0003:1E7D:2D50.001E: couldn't init struct kovaplus_device [ 1277.740101][T10838] kovaplus 0003:1E7D:2D50.001E: couldn't install mouse [ 1277.752752][T10838] kovaplus 0003:1E7D:2D50.001E: probe with driver kovaplus failed with error -71 [ 1277.774886][T10838] usb 4-1: USB disconnect, device number 98 [ 1277.985384][T19413] 9p: Bad value for 'wfdno' [ 1278.453781][ T976] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 1278.503674][ T30] audit: type=1400 audit(1766991558.923:1666): avc: denied { remount } for pid=19420 comm="syz.2.3355" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1278.653950][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1278.684271][ T976] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1278.732214][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.775634][ T976] usb 2-1: config 0 descriptor?? [ 1279.816273][ T976] elecom 0003:056E:011C.001F: hidraw0: USB HID v0.00 Device [HID 056e:011c] on usb-dummy_hcd.1-1/input0 [ 1279.858346][T19433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3356'. [ 1280.960117][T19448] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3360'. [ 1281.576970][T17263] Bluetooth: hci0: command 0x0406 tx timeout [ 1281.670204][ T6915] usb 2-1: USB disconnect, device number 104 [ 1281.925102][T19460] netlink: 'syz.0.3362': attribute type 10 has an invalid length. [ 1281.933529][T19460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3362'. [ 1282.338415][T19461] kAFS: No cell specified [ 1283.082505][ T6970] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1283.366824][T19469] netlink: 'syz.5.3366': attribute type 13 has an invalid length. [ 1283.584507][ T6970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1283.723127][ T6970] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1283.752371][ T6970] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1284.252352][ T6970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.263816][ T6970] usb 2-1: config 0 descriptor?? [ 1284.608533][ T7439] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1284.659050][ T7439] dvb_usb_dibusb_mb 6-1:0.214: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 1284.717338][ T7439] usb 6-1: USB disconnect, device number 67 [ 1284.728777][T19491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3372'. [ 1284.737908][ T30] audit: type=1400 audit(1766991565.153:1667): avc: denied { setattr } for pid=19488 comm="syz.3.3374" name="ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 1284.763723][ T6970] kovaplus 0003:1E7D:2D50.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 1284.911573][T19467] input: syz0 as /devices/virtual/input/input18 [ 1285.012889][ T976] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1285.102068][ T6970] kovaplus 0003:1E7D:2D50.0020: couldn't init struct kovaplus_device [ 1285.118326][ T6970] kovaplus 0003:1E7D:2D50.0020: couldn't install mouse [ 1285.181467][ T976] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1285.233534][ T6970] kovaplus 0003:1E7D:2D50.0020: probe with driver kovaplus failed with error -71 [ 1285.354179][ T6970] usb 2-1: USB disconnect, device number 105 [ 1285.474694][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.500955][ T976] usb 4-1: Product: syz [ 1285.511707][ T976] usb 4-1: Manufacturer: syz [ 1285.522866][ T976] usb 4-1: SerialNumber: syz [ 1285.543177][ T976] usb 4-1: config 0 descriptor?? [ 1285.836384][T19502] netlink: 'syz.2.3376': attribute type 10 has an invalid length. [ 1285.844368][T19502] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3376'. [ 1286.174496][ T976] hso 4-1:0.0: Failed to find BULK IN ep [ 1286.190506][ T976] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1286.416035][ T6915] usb 4-1: USB disconnect, device number 99 [ 1286.622730][ T976] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1286.630703][T10838] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1286.673957][T19512] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3380'. [ 1286.825388][ T976] usb 6-1: device descriptor read/64, error -71 [ 1286.844139][T10838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1286.855643][T10838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1286.857128][ T6915] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1286.865759][T10838] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1286.884046][T10838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.894719][T10838] usb 2-1: config 0 descriptor?? [ 1286.982751][T19516] netlink: 'syz.0.3381': attribute type 10 has an invalid length. [ 1286.990628][T19516] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3381'. [ 1287.032465][ T6915] usb 3-1: Using ep0 maxpacket: 32 [ 1287.070182][ T6915] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1287.145278][ T6915] usb 3-1: config 1 has an invalid interface number: 150 but max is 2 [ 1287.206580][ T6915] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1287.261713][ T6915] usb 3-1: config 1 has an invalid interface number: 255 but max is 2 [ 1287.295115][ T6915] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.341235][ T6915] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1287.351248][ T6915] usb 3-1: config 1 has no interface number 0 [ 1287.357736][ T6915] usb 3-1: config 1 has no interface number 1 [ 1287.375806][ T6915] usb 3-1: config 1 interface 150 altsetting 8 bulk endpoint 0xC has invalid maxpacket 8 [ 1287.389699][ T6915] usb 3-1: config 1 interface 150 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1287.390023][T10838] hid (null): bogus close delimiter [ 1287.406985][T10838] hid (null): report_id 0 is invalid [ 1287.422437][ T6915] usb 3-1: config 1 interface 150 altsetting 8 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1287.426695][T10838] nintendo 0003:057E:200E.0021: bogus close delimiter [ 1287.434158][ T6915] usb 3-1: config 1 interface 150 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1287.448640][T10838] nintendo 0003:057E:200E.0021: item 0 0 2 10 parsing failed [ 1287.455225][ T6915] usb 3-1: config 1 interface 150 altsetting 8 has an endpoint descriptor with address 0x63, changing to 0x3 [ 1287.470735][ T6915] usb 3-1: config 1 interface 150 altsetting 8 endpoint 0x3 has invalid maxpacket 3535, setting to 1024 [ 1287.471193][T10838] nintendo 0003:057E:200E.0021: HID parse failed [ 1287.482560][ T6915] usb 3-1: config 1 interface 150 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1287.489522][ T976] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1287.498778][ T6915] usb 3-1: config 1 interface 150 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 1287.517686][ T6915] usb 3-1: config 1 interface 150 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1287.527780][T10838] nintendo 0003:057E:200E.0021: probe - fail = -22 [ 1287.528704][ T6915] usb 3-1: config 1 interface 150 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 1287.535817][T10838] nintendo 0003:057E:200E.0021: probe with driver nintendo failed with error -22 [ 1287.549424][ T6915] usb 3-1: config 1 interface 150 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1287.590948][T19523] netlink: 'syz.3.3383': attribute type 13 has an invalid length. [ 1287.647378][ T976] usb 6-1: device descriptor read/64, error -71 [ 1287.670967][ T7439] usb 2-1: USB disconnect, device number 106 [ 1287.692117][ T6915] usb 3-1: config 1 interface 150 altsetting 8 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 1287.725855][ T6915] usb 3-1: config 1 interface 255 altsetting 237 has a duplicate endpoint with address 0x1, skipping [ 1287.752706][ T6915] usb 3-1: config 1 interface 255 altsetting 237 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 1287.782780][ T6915] usb 3-1: config 1 interface 150 has no altsetting 0 [ 1287.783144][ T976] usb usb6-port1: attempt power cycle [ 1287.794263][ T6915] usb 3-1: config 1 interface 255 has no altsetting 0 [ 1287.804808][ T6915] usb 3-1: New USB device found, idVendor=0421, idProduct=0481, bcdDevice=1b.bf [ 1287.817431][ T6915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.831226][ T6915] usb 3-1: Product: syz [ 1287.835586][ T6915] usb 3-1: Manufacturer: 䃡欛Ꞓ䭷憃嶓ﭮ龃琒炖뜕੏ឲ䯱谭㥞Ӡ绋珿丒긆偔飁겪찈㡡駶㩇曏씤鲩茳귬ߍ촋ె晭랳鿅㒥ʹ㻢횯୘⢆Ꟶ浨䨯禱쑲滸఍䟔耬᮫⚘ꪋ㔷᩼鞴繋䧬ஃ㣍닁㤜ⱓ㓡Ǥ㑡鷉ꚥ간身증鴈ቤ賯꣼꧆夸簿⨎ꜰ丛⤴┾鎜￿㌽᠇؈緕푮袒덭 [ 1287.888164][ T6915] usb 3-1: SerialNumber: syz [ 1287.898260][T19510] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1287.913013][T19510] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1287.960821][T19528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3385'. [ 1288.138173][T19510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.148415][T19510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.162437][ T976] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1288.168616][ T6915] usb 3-1: bad CDC descriptors [ 1288.183212][ T976] usb 6-1: device descriptor read/8, error -71 [ 1288.191583][ T6915] usb 3-1: USB disconnect, device number 83 [ 1288.440471][ T976] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1288.472907][ T976] usb 6-1: device descriptor read/8, error -71 [ 1288.502353][T10838] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1288.583525][ T976] usb usb6-port1: unable to enumerate USB device [ 1288.652380][ T5896] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1288.664641][T10838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.674550][T10838] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1288.687698][T10838] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1288.697263][T10838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.708739][T10838] usb 2-1: config 0 descriptor?? [ 1288.803932][ T5896] usb 4-1: config 2 interface 0 has no altsetting 0 [ 1288.814597][ T5896] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1288.824459][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.832972][ T5896] usb 4-1: Product: syz [ 1288.837382][ T5896] usb 4-1: Manufacturer: syz [ 1288.842000][ T5896] usb 4-1: SerialNumber: syz [ 1288.984580][T19538] netlink: 'syz.2.3389': attribute type 10 has an invalid length. [ 1288.992618][T19538] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3389'. [ 1289.160711][T19534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.265655][T10838] kovaplus 0003:1E7D:2D50.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 1289.285600][T19534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.317488][ T5896] usb 4-1: USB disconnect, device number 100 [ 1289.346135][T19532] input: syz0 as /devices/virtual/input/input19 [ 1289.922187][T10838] kovaplus 0003:1E7D:2D50.0022: couldn't init struct kovaplus_device [ 1289.946154][T10838] kovaplus 0003:1E7D:2D50.0022: couldn't install mouse [ 1289.956725][T10838] kovaplus 0003:1E7D:2D50.0022: probe with driver kovaplus failed with error -71 [ 1289.981281][T10838] usb 2-1: USB disconnect, device number 107 [ 1290.131998][T19558] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3391'. [ 1290.898111][T19565] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1290.898111][T19565] program syz.1.3393 not setting count and/or reply_len properly [ 1291.232373][ T976] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 1291.297680][T19567] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3394'. [ 1291.318610][T19567] netlink: 'syz.0.3394': attribute type 1 has an invalid length. [ 1291.327031][T19567] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3394'. [ 1291.466243][ T976] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 1291.474585][ T976] usb 2-1: config 0 has no interface number 0 [ 1291.480745][ T976] usb 2-1: config 0 interface 49 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1291.499682][ T976] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1291.520209][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.528536][ T976] usb 2-1: Product: syz [ 1291.533379][ T976] usb 2-1: Manufacturer: syz [ 1291.537989][ T976] usb 2-1: SerialNumber: syz [ 1291.544766][ T976] usb 2-1: config 0 descriptor?? [ 1291.692355][ T5896] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1291.808047][ T976] qmi_wwan 2-1:0.49: probe with driver qmi_wwan failed with error -22 [ 1291.848711][ T5896] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 1291.861259][ T976] usb 2-1: USB disconnect, device number 108 [ 1291.868306][ T5896] usb 4-1: config 0 has an invalid descriptor of length 241, skipping remainder of the config [ 1291.885445][ T5896] usb 4-1: config 0 has no interface number 0 [ 1291.891643][ T5896] usb 4-1: config 0 interface 9 altsetting 72 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1291.905721][ T5896] usb 4-1: config 0 interface 9 has no altsetting 0 [ 1291.912983][ T5896] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1291.922099][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.934976][ T5896] usb 4-1: config 0 descriptor?? [ 1292.265156][T19575] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1292.431252][T19578] overlay: filesystem on ./bus not supported as upperdir [ 1292.772607][ T30] audit: type=1400 audit(1766991573.203:1668): avc: denied { ioctl } for pid=19591 comm="syz.0.3403" path="socket:[66644]" dev="sockfs" ino=66644 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1293.035612][T19612] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3406'. [ 1293.270968][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1293.286441][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1293.296971][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1293.308070][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1293.316348][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1293.701085][T19624] tmpfs: Bad value for 'mpol' [ 1293.739722][ T30] audit: type=1400 audit(1766991574.163:1669): avc: denied { map } for pid=19617 comm="syz.1.3408" path="socket:[65758]" dev="sockfs" ino=65758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1293.947996][T19614] chnl_net:caif_netlink_parms(): no params data found [ 1294.011717][T19631] netlink: 'syz.2.3410': attribute type 10 has an invalid length. [ 1294.020000][T19631] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3410'. [ 1294.442940][T17263] Bluetooth: hci0: command 0x0406 tx timeout [ 1294.586725][T19614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.596687][T19614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.694046][ T5896] usb 4-1: string descriptor 0 read error: -71 [ 1294.717557][T19614] bridge_slave_0: entered allmulticast mode [ 1294.736682][T19614] bridge_slave_0: entered promiscuous mode [ 1294.742878][ T5896] usb 4-1: USB disconnect, device number 101 [ 1294.767747][T19639] netlink: 'syz.5.3412': attribute type 12 has an invalid length. [ 1294.788687][T19639] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3412'. [ 1294.809736][T19614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.823240][T19614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.863765][T19614] bridge_slave_1: entered allmulticast mode [ 1294.918508][T19614] bridge_slave_1: entered promiscuous mode [ 1295.136658][T19614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1295.183938][T19614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.404264][ T5819] Bluetooth: hci3: command tx timeout [ 1295.549752][T19661] NILFS (nullb0): couldn't find nilfs on the device [ 1296.096460][ T5812] syz_tun (unregistering): left promiscuous mode [ 1296.486097][T19614] team0: Port device team_slave_0 added [ 1296.510185][T19614] team0: Port device team_slave_1 added [ 1296.558461][T19614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.566671][T19614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.698623][T19614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.894791][T19672] virtio-fs: tag not found [ 1297.190551][T19614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1297.206380][T19614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1297.243478][T19614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1297.323377][ T6970] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 1297.382801][T19614] hsr_slave_0: entered promiscuous mode [ 1297.512983][ T5819] Bluetooth: hci3: command tx timeout [ 1297.518899][T19614] hsr_slave_1: entered promiscuous mode [ 1297.532674][T19614] debugfs: 'hsr0' already exists in 'hsr' [ 1297.543208][T19614] Cannot create hsr debugfs directory [ 1297.598417][ T6970] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 21 [ 1298.039902][ T6970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1298.082761][ T6970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 1298.143993][ T6970] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 1298.179571][ T6970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.294836][ T6970] usb 4-1: config 0 descriptor?? [ 1298.335839][T19672] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1298.567302][T19686] netlink: 'syz.1.3423': attribute type 13 has an invalid length. [ 1298.677635][T19614] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.752558][ T5819] Bluetooth: min 1 > max 0 [ 1298.766952][T19686] gretap0: refused to change device tx_queue_len [ 1298.774482][T19686] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1298.800642][ T6970] sony 0003:1345:3008.0023: unknown main item tag 0x0 [ 1298.819881][ T6970] sony 0003:1345:3008.0023: unknown main item tag 0x0 [ 1298.840646][ T6970] sony 0003:1345:3008.0023: unknown main item tag 0x0 [ 1298.873931][ T6970] sony 0003:1345:3008.0023: unknown main item tag 0x0 [ 1298.884090][ T6970] sony 0003:1345:3008.0023: unknown main item tag 0x0 [ 1299.038193][ T6970] sony 0003:1345:3008.0023: hiddev0,hidraw0: USB HID v81.01 Device [HID 1345:3008] on usb-dummy_hcd.3-1/input0 [ 1299.052973][T19614] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.562458][ T5819] Bluetooth: hci3: command tx timeout [ 1299.582397][ T6970] sony 0003:1345:3008.0023: failed to claim input [ 1299.684702][T19614] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.702400][ T30] audit: type=1400 audit(1766991581.123:1670): avc: denied { read } for pid=19692 comm="syz.1.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1300.762397][ T5819] Bluetooth: hci0: command 0x0406 tx timeout [ 1300.768754][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.784059][ T5947] usb 4-1: USB disconnect, device number 102 [ 1300.935948][T19691] fido_id[19691]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1301.052879][T19703] netlink: 'syz.3.3427': attribute type 10 has an invalid length. [ 1301.339285][T19708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3429'. [ 1301.646041][T19712] netlink: 'syz.2.3430': attribute type 10 has an invalid length. [ 1301.654134][T19712] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3430'. [ 1302.014944][ T5819] Bluetooth: hci3: command tx timeout [ 1302.034391][T19614] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.097935][T19703] dummy0: entered promiscuous mode [ 1302.110105][T19703] dummy0: entered allmulticast mode [ 1302.119542][T19703] team0: Port device dummy0 added [ 1302.476890][T19614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1302.501871][T19614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1303.198090][T19614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1303.423351][T19614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1303.966673][T19614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1303.981852][T19614] 8021q: adding VLAN 0 to HW filter on device team0 [ 1303.994812][T14188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.001924][T14188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1304.021626][T14188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.028751][T14188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1304.053257][T19614] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1304.064305][T19614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1304.082530][ T7439] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1304.272409][ T7439] usb 3-1: Using ep0 maxpacket: 8 [ 1304.293828][ T7439] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1304.327234][ T7439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.350017][T19614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1304.365064][ T5947] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1304.377300][ T7439] usb 3-1: Product: syz [ 1304.381559][ T7439] usb 3-1: Manufacturer: syz [ 1304.415528][ T7439] usb 3-1: SerialNumber: syz [ 1304.450349][T19614] veth0_vlan: entered promiscuous mode [ 1304.469773][T19614] veth1_vlan: entered promiscuous mode [ 1304.484214][ T7439] usb 3-1: config 0 descriptor?? [ 1304.546014][T19614] veth0_macvtap: entered promiscuous mode [ 1304.592660][T19614] veth1_macvtap: entered promiscuous mode [ 1304.594758][ T7439] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1304.615050][ T5947] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1304.636650][ T5947] usb 4-1: can't read configurations, error -61 [ 1304.679051][T19614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1304.744409][T19614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1304.823538][T19557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.889504][T14188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.920921][ T5947] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1304.975072][T14188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.987773][T14188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.025320][ T7439] gspca_sonixj: reg_r err -71 [ 1305.032045][ T7439] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1305.084794][ T7439] usb 3-1: USB disconnect, device number 84 [ 1305.126022][ T5947] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1305.150152][ T5947] usb 4-1: can't read configurations, error -61 [ 1305.175212][ T5947] usb usb4-port1: attempt power cycle [ 1305.201976][T19556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.217548][T19556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.296327][T14188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.304175][T14188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.388347][ T30] audit: type=1400 audit(1766991585.813:1671): avc: denied { getopt } for pid=19758 comm="syz.5.3438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1305.455030][ T30] audit: type=1400 audit(1766991585.813:1672): avc: denied { create } for pid=19758 comm="syz.5.3438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1305.636550][ T5947] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1305.675015][ T5947] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1305.737490][ T5947] usb 4-1: can't read configurations, error -61 [ 1305.758013][T19766] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1305.758013][T19766] program syz.0.3440 not setting count and/or reply_len properly [ 1305.922606][ T9] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1305.932563][ T5947] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1305.965640][ T5947] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1305.974374][ T5947] usb 4-1: can't read configurations, error -61 [ 1305.984209][ T5947] usb usb4-port1: unable to enumerate USB device [ 1306.084284][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1306.093034][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.105393][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1306.116883][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1306.131774][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1306.142168][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1306.150345][ T9] usb 6-1: Product: syz [ 1306.154763][ T9] usb 6-1: Manufacturer: syz [ 1306.166815][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 1306.174909][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 1306.183537][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1306.189759][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 1306.381098][ T30] audit: type=1400 audit(1766991586.803:1673): avc: denied { read write } for pid=19758 comm="syz.5.3438" name="cdc-wdm0" dev="devtmpfs" ino=4149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1306.409952][ T30] audit: type=1400 audit(1766991586.803:1674): avc: denied { open } for pid=19758 comm="syz.5.3438" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1306.457578][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1306.464192][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1306.470464][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1306.477047][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1306.483524][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1306.490102][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1306.496506][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1306.503083][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1306.509332][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1306.515905][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1306.522172][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1306.528744][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1306.535426][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1306.542009][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1306.548351][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1306.554925][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1306.561215][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1306.567802][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1306.574071][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1306.580650][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1306.592838][ T5947] usb 6-1: USB disconnect, device number 72 [ 1306.598781][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1307.738869][T19788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3445'. [ 1310.892472][T19829] netlink: 'syz.5.3454': attribute type 10 has an invalid length. [ 1310.900356][T19829] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3454'. [ 1311.634840][T19840] virtio-fs: tag not found [ 1311.776750][T19845] tmpfs: Unknown parameter '}e(i登:z' [ 1312.619261][T19843] netlink: 'syz.0.3456': attribute type 13 has an invalid length. [ 1312.681006][T19845] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1312.700064][T19845] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1313.062495][ T6915] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1313.082370][ T5896] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1313.232453][ T6915] usb 6-1: device descriptor read/64, error -71 [ 1313.267794][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 1313.427701][ T5896] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1313.882745][ T6915] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1313.898211][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.005367][ T5896] usb 3-1: Product: syz [ 1314.039132][ T5896] usb 3-1: Manufacturer: syz [ 1314.068422][ T5896] usb 3-1: SerialNumber: syz [ 1314.082740][ T6915] usb 6-1: device descriptor read/64, error -71 [ 1314.191061][ T5896] usb 3-1: config 0 descriptor?? [ 1314.262926][ T6915] usb usb6-port1: attempt power cycle [ 1314.336668][ T30] audit: type=1400 audit(1766991594.763:1675): avc: denied { append } for pid=19863 comm="syz.3.3465" name="sg0" dev="devtmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1314.451881][T19853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.487612][T19853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.513422][ T5896] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 1314.537063][ T5896] eb 9a 47 80 9b f8 7a f0 [ 1314.554843][ T5896] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 1314.692367][ T6915] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1314.735658][ T6915] usb 6-1: device descriptor read/8, error -71 [ 1314.769315][T12636] usb 3-1: USB disconnect, device number 85 [ 1315.002581][ T6915] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1315.050722][ T6915] usb 6-1: device descriptor read/8, error -71 [ 1315.184584][ T6915] usb usb6-port1: unable to enumerate USB device [ 1316.131100][T19881] netlink: 'syz.2.3469': attribute type 10 has an invalid length. [ 1316.139119][T19881] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3469'. [ 1317.023763][T19885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3471'. [ 1317.083754][T19885] syz_tun: refused to change device tx_queue_len [ 1317.766520][T19902] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1317.766520][T19902] program syz.5.3476 not setting count and/or reply_len properly [ 1318.252468][T19919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3473'. [ 1319.383029][T19927] netlink: 'syz.5.3480': attribute type 13 has an invalid length. [ 1319.753563][T19932] SELinux: policydb magic number 0x43504954 does not match expected magic number 0xf97cff8c [ 1319.815174][T19932] SELinux: failed to load policy [ 1319.832236][ T30] audit: type=1400 audit(1766991600.253:1676): avc: denied { connect } for pid=19930 comm="syz.3.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1319.912011][T19939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3483'. [ 1319.999540][T19934] cgroup: Need name or subsystem set [ 1320.039385][T19943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3481'. [ 1320.092435][T19943] bridge_slave_1: left allmulticast mode [ 1320.154334][T19943] bridge_slave_1: left promiscuous mode [ 1320.216806][T19943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.283690][T19943] bridge_slave_0: left allmulticast mode [ 1320.289742][T19943] bridge_slave_0: left promiscuous mode [ 1320.334959][T19943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.538834][T19946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3483'. [ 1321.512432][T12636] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1321.682358][T12636] usb 3-1: Using ep0 maxpacket: 32 [ 1321.848250][T12636] usb 3-1: config index 0 descriptor too short (expected 6683, got 27) [ 1321.868407][T12636] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1321.895943][T12636] usb 3-1: config 0 has no interface number 0 [ 1321.918237][T12636] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1322.012981][T12636] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1322.049255][T12636] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1322.089022][T12636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.119116][T12636] usb 3-1: Product: syz [ 1322.135455][T12636] usb 3-1: Manufacturer: syz [ 1322.150382][T12636] usb 3-1: SerialNumber: syz [ 1322.189113][T12636] usb 3-1: config 0 descriptor?? [ 1322.272402][ T5896] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1322.784017][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1322.816176][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1322.864894][ T5896] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1322.896867][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.935277][ T5896] usb 6-1: config 0 descriptor?? [ 1323.979993][T12636] appletouch 3-1:0.85: Failed to request geyser raw mode [ 1324.032786][T12636] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1324.077355][T12636] usb 3-1: USB disconnect, device number 86 [ 1324.106210][T18692] udevd[18692]: setting mode of /dev/bus/usb/003/086 to 020664 failed: No such file or directory [ 1324.136896][T18692] udevd[18692]: setting owner of /dev/bus/usb/003/086 to uid=0, gid=0 failed: No such file or directory [ 1324.355757][ T5896] kovaplus 0003:1E7D:2D50.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 1324.527121][T19962] input: syz0 as /devices/virtual/input/input22 [ 1324.759936][ T5896] kovaplus 0003:1E7D:2D50.0024: couldn't init struct kovaplus_device [ 1324.783860][T19985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3493'. [ 1324.827424][ T5896] kovaplus 0003:1E7D:2D50.0024: couldn't install mouse [ 1324.851834][ T5896] kovaplus 0003:1E7D:2D50.0024: probe with driver kovaplus failed with error -71 [ 1324.902089][ T5896] usb 6-1: USB disconnect, device number 77 [ 1325.071878][ T5819] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 1325.086002][T19989] sctp: [Deprecated]: syz.2.3494 (pid 19989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1325.086002][T19989] Use struct sctp_sack_info instead [ 1325.104526][T19991] FAULT_INJECTION: forcing a failure. [ 1325.104526][T19991] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.155306][T19991] CPU: 0 UID: 0 PID: 19991 Comm: syz.1.3495 Tainted: G L syzkaller #0 PREEMPT(full) [ 1325.155340][T19991] Tainted: [L]=SOFTLOCKUP [ 1325.155346][T19991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1325.155356][T19991] Call Trace: [ 1325.155363][T19991] [ 1325.155371][T19991] dump_stack_lvl+0x16c/0x1f0 [ 1325.155397][T19991] should_fail_ex+0x512/0x640 [ 1325.155421][T19991] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1325.155439][T19991] should_failslab+0xc2/0x120 [ 1325.155463][T19991] kmem_cache_alloc_noprof+0x83/0x770 [ 1325.155482][T19991] ? skb_clone+0x190/0x3f0 [ 1325.155504][T19991] ? skb_clone+0x190/0x3f0 [ 1325.155520][T19991] skb_clone+0x190/0x3f0 [ 1325.155538][T19991] netlink_deliver_tap+0xabd/0xd30 [ 1325.155565][T19991] netlink_unicast+0x64c/0x870 [ 1325.155589][T19991] ? __pfx_netlink_unicast+0x10/0x10 [ 1325.155617][T19991] netlink_sendmsg+0x8c8/0xdd0 [ 1325.155641][T19991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1325.155668][T19991] ____sys_sendmsg+0xa5d/0xc30 [ 1325.155690][T19991] ? copy_msghdr_from_user+0x10a/0x160 [ 1325.155707][T19991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1325.155732][T19991] ? __pfx__kstrtoull+0x10/0x10 [ 1325.155759][T19991] ___sys_sendmsg+0x134/0x1d0 [ 1325.155780][T19991] ? __pfx____sys_sendmsg+0x10/0x10 [ 1325.155811][T19991] ? find_held_lock+0x2b/0x80 [ 1325.155855][T19991] __sys_sendmmsg+0x200/0x420 [ 1325.155877][T19991] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1325.155906][T19991] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1325.155942][T19991] ? fput+0x70/0xf0 [ 1325.155959][T19991] ? ksys_write+0x1ac/0x250 [ 1325.155979][T19991] ? __pfx_ksys_write+0x10/0x10 [ 1325.156006][T19991] __x64_sys_sendmmsg+0x9c/0x100 [ 1325.156025][T19991] ? lockdep_hardirqs_on+0x7c/0x110 [ 1325.156047][T19991] do_syscall_64+0xcd/0xf80 [ 1325.156071][T19991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.156090][T19991] RIP: 0033:0x7f8e8b38f749 [ 1325.156106][T19991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1325.156124][T19991] RSP: 002b:00007f8e8c304038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1325.156141][T19991] RAX: ffffffffffffffda RBX: 00007f8e8b5e5fa0 RCX: 00007f8e8b38f749 [ 1325.156154][T19991] RDX: 0000000000000002 RSI: 00002000000109c0 RDI: 0000000000000003 [ 1325.156165][T19991] RBP: 00007f8e8c304090 R08: 0000000000000000 R09: 0000000000000000 [ 1325.156176][T19991] R10: 0000000004004804 R11: 0000000000000246 R12: 0000000000000001 [ 1325.156188][T19991] R13: 00007f8e8b5e6038 R14: 00007f8e8b5e5fa0 R15: 00007fff1c2cb768 [ 1325.156214][T19991] [ 1325.632066][ T30] audit: type=1400 audit(1766991606.053:1677): avc: denied { name_connect } for pid=19988 comm="syz.2.3494" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1328.274788][T20021] netlink: 'syz.0.3504': attribute type 10 has an invalid length. [ 1328.282772][T20021] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3504'. [ 1328.647218][T20023] netlink: 'syz.1.3502': attribute type 10 has an invalid length. [ 1328.730377][T20021] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1328.741515][T20021] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1328.748188][T20021] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.774148][T20021] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1328.964110][T20023] team0: Port device dummy0 added [ 1329.096426][ T5819] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1329.108492][ T5819] Bluetooth: hci4: Injecting HCI hardware error event [ 1329.123710][ T5819] Bluetooth: hci4: hardware error 0x00 [ 1329.133214][ T6970] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1330.005093][ T6970] usb 2-1: Using ep0 maxpacket: 8 [ 1330.096788][ T6970] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1330.158385][ T6970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.188496][ T6970] usb 2-1: Product: syz [ 1330.333208][T20037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3506'. [ 1330.345313][ T6970] usb 2-1: Manufacturer: syz [ 1330.378860][ T6970] usb 2-1: SerialNumber: syz [ 1330.882175][ T6970] usb 2-1: config 0 descriptor?? [ 1330.976842][ T6970] usb 2-1: can't set config #0, error -71 [ 1331.104831][ T6970] usb 2-1: USB disconnect, device number 109 [ 1331.112868][T20026] udevd[20026]: setting mode of /dev/bus/usb/002/109 to 020664 failed: No such file or directory [ 1331.187295][T20026] udevd[20026]: setting owner of /dev/bus/usb/002/109 to uid=0, gid=0 failed: No such file or directory [ 1331.243613][ T5819] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1331.550297][T20060] NILFS (nullb0): couldn't find nilfs on the device [ 1331.949917][T20059] overlayfs: overlapping lowerdir path [ 1332.637644][T20063] netlink: 332 bytes leftover after parsing attributes in process `syz.5.3510'. [ 1333.231443][T20077] netlink: 'syz.5.3515': attribute type 10 has an invalid length. [ 1333.239449][T20077] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3515'. [ 1333.585819][T20073] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1333.693369][T20078] input: syz1 as /devices/virtual/input/input23 [ 1333.893045][T20078] 9pnet_virtio: no channels available for device syz [ 1334.900852][T20094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3520'. [ 1335.740249][T20102] netlink: 'syz.1.3523': attribute type 13 has an invalid length. [ 1335.791142][T20102] gretap0: refused to change device tx_queue_len [ 1335.971324][T20102] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1336.441191][T20107] v: renamed from dummy0 (while UP) [ 1336.477475][ T5819] Bluetooth: min 1 > max 0 [ 1337.067561][ T30] audit: type=1400 audit(1766991617.493:1678): avc: denied { getopt } for pid=20122 comm="syz.3.3529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1337.986585][T20138] netlink: 'syz.3.3532': attribute type 10 has an invalid length. [ 1337.994616][T20138] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3532'. [ 1338.429684][T20141] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3534'. [ 1338.582393][ T5819] Bluetooth: hci0: command 0x0406 tx timeout [ 1339.426573][T20153] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3536'. [ 1339.768825][T20160] virtio-fs: tag not found [ 1339.777642][T19970] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1340.150599][T20163] overlayfs: missing 'lowerdir' [ 1340.293408][T19970] usb 4-1: Using ep0 maxpacket: 16 [ 1340.365457][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1340.409194][T19970] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1340.457837][T20166] syzkaller1: entered promiscuous mode [ 1340.476338][T20166] syzkaller1: entered allmulticast mode [ 1340.541959][T19970] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1340.582390][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1340.599755][T19970] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1340.621447][ T9] usb 3-1: config 8 has an invalid interface number: 143 but max is 0 [ 1340.651889][T19970] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 1340.705929][ T9] usb 3-1: config 8 has no interface number 0 [ 1340.726926][ T9] usb 3-1: config 8 interface 143 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1340.762398][ T9] usb 3-1: config 8 interface 143 has no altsetting 0 [ 1340.773766][T19970] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1340.813847][ T9] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=71.6b [ 1340.839961][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.848291][T19970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1340.872467][ T9] usb 3-1: Product: syz [ 1340.872668][T19970] usb 4-1: SerialNumber: syz [ 1340.892996][ T890] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1340.911795][ T9] usb 3-1: Manufacturer: syz [ 1340.931192][ T9] usb 3-1: SerialNumber: syz [ 1340.977401][T20153] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1340.987656][T20153] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1341.084369][ T890] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1341.106136][ T890] usb 2-1: config 4 has an invalid interface number: 140 but max is 0 [ 1341.140082][ T890] usb 2-1: config 4 has no interface number 0 [ 1341.181138][ T890] usb 2-1: config 4 interface 140 has no altsetting 0 [ 1341.342198][ T890] usb 2-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=43.95 [ 1341.371724][ T890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.550221][ T5819] Bluetooth: hci3: link tx timeout [ 1341.556856][ T5819] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1341.781111][ T890] usb 2-1: Product: syz [ 1341.805026][ T890] usb 2-1: Manufacturer: syz [ 1341.831181][ T890] usb 2-1: SerialNumber: syz [ 1341.978031][ T5896] usb 4-1: USB disconnect, device number 107 [ 1448.452440][ C0] ------------[ cut here ]------------ [ 1448.459404][ C0] WARNING: kernel/rcu/tree_stall.h:1049 at rcu_check_gp_start_stall.part.0+0x1c4/0x4b0, CPU#0: swapper/0/0 [ 1448.470814][ C0] Modules linked in: [ 1448.475978][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1448.486495][ C0] Tainted: [L]=SOFTLOCKUP [ 1448.490818][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1448.501140][ C0] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 1448.508099][ C0] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 52 c2 9a e8 b0 3a 85 00 b8 01 00 00 00 87 05 d5 c4 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 74 e5 88 90 48 81 fd 80 46 3d 8e 74 5a 48 b8 00 [ 1448.527688][ C0] RSP: 0018:ffffc90000007df0 EFLAGS: 00010046 [ 1448.533729][ C0] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a38de0 [ 1448.541672][ C0] RDX: fffffbfff3584a58 RSI: 0000000000000004 RDI: ffffffff9ac252c0 [ 1448.550136][ C0] RBP: ffffffff8e3d4680 R08: 0000000000000001 R09: fffffbfff3584a58 [ 1448.558079][ C0] R10: 0000000000000003 R11: ffffffff8e098670 R12: 1ffffffff1c02250 [ 1448.566021][ C0] R13: 0000000000000246 R14: ffffffff8e3d4680 R15: ffff8880b843bc52 [ 1448.573971][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 1448.582874][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1448.589431][ C0] CR2: 00007f0f433f6d58 CR3: 0000000036381000 CR4: 00000000003526f0 [ 1448.597378][ C0] Call Trace: [ 1448.600645][ C0] [ 1448.603466][ C0] rcu_core+0x4cf/0x15f0 [ 1448.607690][ C0] ? sched_clock+0x38/0x60 [ 1448.612080][ C0] ? sched_clock_cpu+0x6c/0x530 [ 1448.616905][ C0] ? clockevents_program_event+0x151/0x370 [ 1448.622705][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1448.627357][ C0] ? read_tsc+0x9/0x20 [ 1448.631408][ C0] ? ktime_get+0x1a7/0x310 [ 1448.635797][ C0] ? find_held_lock+0x2b/0x80 [ 1448.640457][ C0] handle_softirqs+0x219/0x950 [ 1448.645209][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1448.650482][ C0] __irq_exit_rcu+0x109/0x170 [ 1448.655141][ C0] irq_exit_rcu+0x9/0x30 [ 1448.659361][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1448.664972][ C0] [ 1448.667875][ C0] [ 1448.670779][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1448.676732][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1448.682339][ C0] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1448.701921][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 1448.707959][ C0] RAX: 000000000632f08f RBX: 0000000000000000 RCX: ffffffff8b7816d9 [ 1448.715902][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdeb7 RDI: ffffffff8bf2b400 [ 1448.723846][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 1448.731788][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 1448.739731][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b4d0 R15: 0000000000000000 [ 1448.747682][ C0] ? ct_kernel_exit+0x139/0x190 [ 1448.752521][ C0] default_idle+0x13/0x20 [ 1448.756835][ C0] default_idle_call+0x6c/0xb0 [ 1448.761576][ C0] do_idle+0x38d/0x510 [ 1448.765627][ C0] ? __pfx_do_idle+0x10/0x10 [ 1448.770196][ C0] cpu_startup_entry+0x4f/0x60 [ 1448.774938][ C0] rest_init+0x16b/0x2b0 [ 1448.779158][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1448.784413][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1448.789930][ C0] start_kernel+0x3ef/0x4d0 [ 1448.794762][ C0] x86_64_start_reservations+0x18/0x30 [ 1448.800200][ C0] x86_64_start_kernel+0x130/0x190 [ 1448.805301][ C0] common_startup_64+0x13e/0x148 [ 1448.810229][ C0] [ 1448.813224][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1448.820475][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1448.830944][ C0] Tainted: [L]=SOFTLOCKUP [ 1448.835241][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1448.845268][ C0] Call Trace: [ 1448.848518][ C0] [ 1448.851334][ C0] dump_stack_lvl+0x3d/0x1f0 [ 1448.855906][ C0] vpanic+0x640/0x6f0 [ 1448.859868][ C0] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 1448.866171][ C0] panic+0xca/0xd0 [ 1448.869864][ C0] ? __pfx_panic+0x10/0x10 [ 1448.874256][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 1448.879342][ C0] check_panic_on_warn+0xab/0xb0 [ 1448.884257][ C0] __warn+0x108/0x3c0 [ 1448.888212][ C0] __report_bug+0x2a0/0x520 [ 1448.892686][ C0] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 1448.898989][ C0] ? __pfx___report_bug+0x10/0x10 [ 1448.903986][ C0] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 1448.909688][ C0] ? __lock_acquire+0x436/0x2890 [ 1448.914599][ C0] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 1448.920901][ C0] report_bug+0xb2/0x220 [ 1448.925115][ C0] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 1448.931417][ C0] handle_bug+0x127/0x260 [ 1448.935724][ C0] exc_invalid_op+0x17/0x50 [ 1448.940203][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1448.945025][ C0] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 1448.951934][ C0] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 52 c2 9a e8 b0 3a 85 00 b8 01 00 00 00 87 05 d5 c4 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 74 e5 88 90 48 81 fd 80 46 3d 8e 74 5a 48 b8 00 [ 1448.971512][ C0] RSP: 0018:ffffc90000007df0 EFLAGS: 00010046 [ 1448.977551][ C0] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a38de0 [ 1448.985493][ C0] RDX: fffffbfff3584a58 RSI: 0000000000000004 RDI: ffffffff9ac252c0 [ 1448.993436][ C0] RBP: ffffffff8e3d4680 R08: 0000000000000001 R09: fffffbfff3584a58 [ 1449.001377][ C0] R10: 0000000000000003 R11: ffffffff8e098670 R12: 1ffffffff1c02250 [ 1449.009320][ C0] R13: 0000000000000246 R14: ffffffff8e3d4680 R15: ffff8880b843bc52 [ 1449.017270][ C0] ? rcu_check_gp_start_stall.part.0+0x1b0/0x4b0 [ 1449.023579][ C0] rcu_core+0x4cf/0x15f0 [ 1449.027808][ C0] ? sched_clock+0x38/0x60 [ 1449.032192][ C0] ? sched_clock_cpu+0x6c/0x530 [ 1449.037013][ C0] ? clockevents_program_event+0x151/0x370 [ 1449.042798][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1449.047451][ C0] ? read_tsc+0x9/0x20 [ 1449.051494][ C0] ? ktime_get+0x1a7/0x310 [ 1449.055889][ C0] ? find_held_lock+0x2b/0x80 [ 1449.060551][ C0] handle_softirqs+0x219/0x950 [ 1449.065294][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1449.070559][ C0] __irq_exit_rcu+0x109/0x170 [ 1449.075213][ C0] irq_exit_rcu+0x9/0x30 [ 1449.079429][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1449.085037][ C0] [ 1449.087938][ C0] [ 1449.090841][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1449.096792][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1449.102398][ C0] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1449.121978][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 1449.128017][ C0] RAX: 000000000632f08f RBX: 0000000000000000 RCX: ffffffff8b7816d9 [ 1449.135959][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdeb7 RDI: ffffffff8bf2b400 [ 1449.143904][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 1449.151850][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 1449.159793][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b4d0 R15: 0000000000000000 [ 1449.167742][ C0] ? ct_kernel_exit+0x139/0x190 [ 1449.172589][ C0] default_idle+0x13/0x20 [ 1449.176899][ C0] default_idle_call+0x6c/0xb0 [ 1449.181648][ C0] do_idle+0x38d/0x510 [ 1449.185696][ C0] ? __pfx_do_idle+0x10/0x10 [ 1449.190266][ C0] cpu_startup_entry+0x4f/0x60 [ 1449.195009][ C0] rest_init+0x16b/0x2b0 [ 1449.199229][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1449.204484][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1449.210005][ C0] start_kernel+0x3ef/0x4d0 [ 1449.214486][ C0] x86_64_start_reservations+0x18/0x30 [ 1449.219927][ C0] x86_64_start_kernel+0x130/0x190 [ 1449.225017][ C0] common_startup_64+0x13e/0x148 [ 1449.229935][ C0] [ 1450.299661][ C0] Shutting down cpus with NMI [ 1450.304667][ C0] Kernel Offset: disabled [ 1450.308971][ C0] Rebooting in 86400 seconds..