last executing test programs: 13m25.161046724s ago: executing program 3 (id=2166): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x80000000, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0xa0000, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x2], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r5, 0x5501) preadv(0xffffffffffffffff, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4000000190001000000400000000000e00000020000000000000000000000000000000000000000000000000000000000000002000000000a00000000000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbffffffffffffff00000000000000000500000000000000000000000000000008000000000000000000000000000000000000000000000000000002000000000c0008000800080000080000"], 0xc4}}, 0x4004) 13m24.131042093s ago: executing program 3 (id=2168): syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$vim2m(0x0, 0x8, 0x2) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000f3000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) 13m23.778970834s ago: executing program 3 (id=2171): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000020000000000ee8a6c9fefd8ec39000100070000003ee7ac09ef010073797a30000000000c000780080013000000000005000500020000000573683a69702c706f727400"/84], 0x58}}, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pwrite64(0xffffffffffffffff, &(0x7f000003bfff)='/', 0x1, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000300)={'wg0\x00', &(0x7f0000000380)=@ethtool_eee={0x25, 0x1ff, 0x80000000, 0x9, 0x2, 0x7f, 0xa9, 0x800, [0x1, 0x7a]}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000802, r4, &(0x7f0000000000)={0x8, 0x8, 0x1000, 0x4, 0x6a97, 0x3, 0x9, 0xffff, 0x101}) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000200)={0x0, 'veth1_to_bridge\x00', {0x4}, 0x43}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x40080) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_open_dev$mouse(&(0x7f0000000080), 0x1, 0x1c4202) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0xfa21, 0xb, 0x6, 0x1, 0x7, 0x8000, 0xb}, 0x1c) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a0000000208", 0x6) 13m22.728006139s ago: executing program 3 (id=2174): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x922, 0x12) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) ioperm(0x0, 0x1fb, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r4, &(0x7f0000000080)='./file0/file0\x00', r4, &(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0) tkill(r3, 0x1) write$cgroup_int(r2, &(0x7f0000000040)=0x922, 0x12) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) 13m22.038248719s ago: executing program 3 (id=2176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r1 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0xfffffffc, 0x0, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x80c5}, 0x44850) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="487eef024b819ef2b532e4db9bd69cf0e0afca86b79eb251e56d3324e4b4691e9a95cc1108a383a312c0a806b80ad9f4ce5895b9c2cd2889299acd115746f38ae315313deafda794c2b61c8bb39fcc19be48c015b210df317d8b9b769d500c55fa88b527f6e65cfd33f50e7efc11d969968d16d9e1e5e2cb18dd98cb6e611f22bb9c7ca12a030b508d70d74dd29150ec868a01074c32896ce33ae9913eb1f501cda0056e7d368993eb62", 0xaa}, {&(0x7f0000000280)="5af61f9b8926d877e2c03e419f509afc2446db23918625f6f381e4c99e87fbbac38f61934eef873a911f53cdbb16fe654aa5d69b81dc", 0x36}], 0x2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) 13m20.984234897s ago: executing program 3 (id=2181): socket$kcm(0xa, 0x922000000001, 0x11) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf362100000008000300", @ANYRES32=r2], 0x24}}, 0x9590f6cc3aa711f2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000440)='\x00'/15, 0xf) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r10, 0x0, 0x0, 0x8084) recvmmsg$unix(r9, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010000, 0x0) 13m20.390519855s ago: executing program 32 (id=2181): socket$kcm(0xa, 0x922000000001, 0x11) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf362100000008000300", @ANYRES32=r2], 0x24}}, 0x9590f6cc3aa711f2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000440)='\x00'/15, 0xf) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r10, 0x0, 0x0, 0x8084) recvmmsg$unix(r9, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010000, 0x0) 13m11.920957477s ago: executing program 5 (id=2184): syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(r0, 0x1000006) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000200000007"], 0x100040) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f00000001c0)={r5, 0x0, 0x4000, 0xfffffffffffff000}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) 13m10.770264299s ago: executing program 5 (id=2213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000180)='ext4_ext_remove_space\x00', r1, 0x0, 0x7}, 0x18) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) close_range(r2, r0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x300f000, 0xe, 0x0, &(0x7f00000000c0)="0069002000000000060000000000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 13m7.130360073s ago: executing program 5 (id=2221): syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e90110", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "271e46", 0x0, 0x33, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@routing={0x29, 0x2, 0x0, 0x0, 0x0, [@private2]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x3, 0x2, {0x0, 0x0, 0xe4ffffff}}]}, {0x4}, {0xc}, {0xc, 0x9}}}, @m_gact={0x0, 0x5, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x0, 0x13c, 0x10000000}}, @TCA_GACT_PARMS={0x0, 0x2, {0x1, 0xa42c, 0x2, 0x9, 0x101}}, @TCA_GACT_PARMS={0x0, 0x2, {0x9795, 0xfffff801, 0x3, 0xa}}, @TCA_GACT_PROB={0x0, 0x3, {0x0, 0xedb, 0x7}}, @TCA_GACT_PROB={0x0, 0x3, {0x1, 0xf7d, 0x8}}, @TCA_GACT_PARMS={0x0, 0x2, {0xfffffffe, 0x3, 0x10000000, 0x8, 0x5}}]}, {0x0, 0x6, "45b6eea6a0da56b4b898e40d75f0903afe4ea0d5eef92f5b7eb0b57beb59b5d3ec04ba75398830cdb5e960cf45939e7eb75e5948d6d3df04303bd4d6df4ba8de68a7f7cb54efe510da3191ee089d5fe704338349298f6221ce7217f6f20cc950e5e549d4017c4293f407e9cf041b08708bb9d3a6c01f89ba9c4b12c37c2cf5110951c52ad0e1a55c612c44de67268b4ce5cdd8d5005748a06139f17f819ff135ecb3bf7d32263a07"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040c2}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="d9013638fade", @multicast2, @loopback, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0xffffffff, 0x5, 0xc, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x3, 0x8, 0x3, 0xffff, 0xb5c, 0xe, 'bridge_slave_0\x00', 'ip6gre0\x00', {}, {0xff}, 0x0, 0x2d0}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x39e, 0x3800, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 13m6.996872293s ago: executing program 33 (id=2221): syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e90110", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "271e46", 0x0, 0x33, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@routing={0x29, 0x2, 0x0, 0x0, 0x0, [@private2]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x3, 0x2, {0x0, 0x0, 0xe4ffffff}}]}, {0x4}, {0xc}, {0xc, 0x9}}}, @m_gact={0x0, 0x5, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x0, 0x13c, 0x10000000}}, @TCA_GACT_PARMS={0x0, 0x2, {0x1, 0xa42c, 0x2, 0x9, 0x101}}, @TCA_GACT_PARMS={0x0, 0x2, {0x9795, 0xfffff801, 0x3, 0xa}}, @TCA_GACT_PROB={0x0, 0x3, {0x0, 0xedb, 0x7}}, @TCA_GACT_PROB={0x0, 0x3, {0x1, 0xf7d, 0x8}}, @TCA_GACT_PARMS={0x0, 0x2, {0xfffffffe, 0x3, 0x10000000, 0x8, 0x5}}]}, {0x0, 0x6, "45b6eea6a0da56b4b898e40d75f0903afe4ea0d5eef92f5b7eb0b57beb59b5d3ec04ba75398830cdb5e960cf45939e7eb75e5948d6d3df04303bd4d6df4ba8de68a7f7cb54efe510da3191ee089d5fe704338349298f6221ce7217f6f20cc950e5e549d4017c4293f407e9cf041b08708bb9d3a6c01f89ba9c4b12c37c2cf5110951c52ad0e1a55c612c44de67268b4ce5cdd8d5005748a06139f17f819ff135ecb3bf7d32263a07"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040c2}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="d9013638fade", @multicast2, @loopback, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0xffffffff, 0x5, 0xc, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x3, 0x8, 0x3, 0xffff, 0xb5c, 0xe, 'bridge_slave_0\x00', 'ip6gre0\x00', {}, {0xff}, 0x0, 0x2d0}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x39e, 0x3800, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 10m45.500700752s ago: executing program 6 (id=2762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f00000002c0)={0xed, 0x0, 0x16}) 10m45.27835607s ago: executing program 6 (id=2765): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10m45.253077678s ago: executing program 6 (id=2766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000005ec0)={0x0, 0x0, &(0x7f0000005e80)={&(0x7f0000000740)=ANY=[@ANYBLOB="28000000080601020000000000000000058000030500010007"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c000) 10m45.187471896s ago: executing program 6 (id=2767): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28a901a, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='mountinfo\x00') read$FUSE(r0, &(0x7f0000008580)={0x2020}, 0x2020) 10m45.110368425s ago: executing program 6 (id=2768): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000e00)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0400460005003400c4000000080026006c09"], 0x50}}, 0x0) 10m44.887607005s ago: executing program 6 (id=2772): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x7, 0x4) 10m44.786360637s ago: executing program 34 (id=2772): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x7, 0x4) 2m51.296300767s ago: executing program 4 (id=4773): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x81, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x2, 0x1, 0x1a, 0xa0, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "19"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x0, 0xff, 0x3}, {0x6, 0x24, 0x1a, 0x8, 0x1}, [@country_functional={0xe, 0x24, 0x7, 0xe2, 0x6, [0x9, 0x4, 0x4, 0x8000]}, @acm={0x4, 0x24, 0x2, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x28, 0x3, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0xa, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x0, 0xa2}}}}}}}]}}, &(0x7f0000000e40)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x200, 0x2, 0x4, 0x1, 0x20, 0x7}, 0x64, &(0x7f0000000700)={0x5, 0xf, 0x64, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0xff, 0x4, 0x0, 0x0, 0x7, [0x1fe3f0f, 0x3f00, 0xff0000, 0xc030]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x68, 0xfa, 0x9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0x2, 0xa}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x1, 0xf00, 0x5, [0xc0c0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x8b, 0x3, 0xd40}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "fd46082cd27bdb678ef777bb74168676"}]}, 0xa, [{0x1e, &(0x7f0000000780)=@string={0x1e, 0x3, "3c474aacbd31fa58d6881447aadb713aa5d78125a7b229b04d30f4b4"}}, {0x0, 0x0}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0xf0f8}}, {0x6d, &(0x7f0000000840)=@string={0x6d, 0x3, "be6d4123ba5a773e3870ba3025c72e945771fa1d04bd41998ece2254cebaa7c7e052c81c19974befed37bf4a9aa4464df628862406c897b22cae4c42872eb1e4670f8d1790cfb5f7d13d931f1f14033c1d5500e06339440372400a8e8b18ac7ed2050bf438db1a51229eec"}}, {0x0, 0x0}, {0x58, &(0x7f0000000d00)=@string={0x58, 0x3, "6ef3d8dd86cc532d22e552c6cf81b464b047b3acd3767f3c27cddbeca87cb9bbf04f3fd77c4350f85ed24ec3ce3b8b5952cf0f5c07882ff44ef9816f76c6b43f03f4a7d4f84e15ee45d6b07b81e87f0fed5bbd69291a"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xba, &(0x7f0000000d80)=@string={0xba, 0x3, "45f71ce5bf80eeb6c216a833b641f7637f1e08efe15ac40a678052f5c988165168940b7c0fd6171eb45f895985fa2e81841b491eef1cbf183ad637c6542ca9dd6c2a02696e00a636db9f08358f76c4dec2bb13adb9ba76d3f8932013d36826d7d8d480231ad95986f99cb6340e4ac1c248f7098be5509e9766556dda76e748b2ed4319d9b16ff12174e4c1b6e9eab7d3c6b0c6e0b5fa9371d2fa60234319408795f89cbba89b3f88b8d778badbc1560100d7747779c32a4b"}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001100)={0x14, &(0x7f0000001000)={0x40, 0x4, 0xa3, {0xa3, 0x7, "8c689d98a2d13f81030f26e07c4d30d4d33e08d70868297bd8613db0350f56049f70d06271f3cf730e0bc0fdb316da7bf2ae73c8da78cac591d5580c3650d49214f8f2ba8af1378fa4d916bad8c53fd75d530f287b9d3b0144b0a10b0a113b5c34c2d08126dfdaffcdaa8ee5b030aa01a15fb17fe21135180c155db0d9ee0cc41c51ba7590b50dfc1167f09ed583b16b518e78e8b048552dfe142b625037542897"}}, &(0x7f00000010c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001340)={0x44, &(0x7f0000001140)={0x20, 0xc, 0x2, "a1ef"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001200)={0x20, 0x80, 0x1c, {0x3, 0x1, 0x6, 0x13c, 0x4, 0xffff, 0x7, 0xc2b, 0x1, 0x1, 0x42, 0xffff}}, &(0x7f0000001240)={0x20, 0x85, 0x4, 0xffffff11}, &(0x7f0000001280)={0x20, 0x83, 0x2}, &(0x7f00000012c0)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000001300)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000fc0)={0x60, 0x16, 0x2, "cfae"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000440)={0x40, 0x1, 0x4, "b7e01e62"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000180)={0x40, 0x21, 0x8c, {0x8c, 0x9, "caafa54e079aeef6706c445109a3206da2cdd1f3834fe23c0de1c69a488ff8daa2b7dbedad80f9c25214cd57969a09439e6d028c9640c8de591198d669aeb1d5014857ba24c5ff2e818ba2a4af407dea7da3416e6816e87b14fe6ee174993a23bb7358dceee1c6c17be3e5bfa8d8421eb11c8fd0a9275d8be03941813525e4e10abdeff5be6071573f33"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340d}}}, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x40, 0x1b, 0xa5, "4cba78cbedd4d36167397362f06ad11c07faa2924966bb98ae4fd37c1fb532fb6a8e7992db393b09b9568065a978b462ef04fbd560984473d916f3fa7a43b4fb87a392ddd09640dee00263516eb65f839bfcd9421474c6307a81f9ad5ea4862f792fa975684698a2f668a7153a0efb818c5d123b3c2ac4b6019006f64d8385940b55f84163c694ccd45dc7e69b8b3788dddcfc4fc88b54993c8815d878366d2d5db1275081"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x81, 0x2, "f7e8"}, &(0x7f0000000480)={0x20, 0x82, 0x1, "96"}, &(0x7f00000004c0)={0x20, 0x83, 0x3, "31c232"}, &(0x7f0000000500)={0x20, 0x84, 0x2, "74f6"}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a40)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x84, 0x2, "48ee"}, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10148, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x2f) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e20, 0x4, @mcast2={0xff, 0x5}, 0x3ff}, r7}}, 0x48) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x2, "b7dd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m45.880377524s ago: executing program 4 (id=4790): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_secret(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @remote}, {0x0, @multicast}, 0x0, {0x2, 0x4e23, @loopback}, 'wg1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xab) syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) 2m43.195666729s ago: executing program 4 (id=4801): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 2m42.553075174s ago: executing program 4 (id=4806): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setuid(0xee01) r1 = dup2(r0, r0) ioctl$RNDADDENTROPY(r1, 0x5207, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe0000010000000008"], 0x24}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x4}}, 0x9) 2m42.386395746s ago: executing program 4 (id=4808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0xf0, &(0x7f0000000780)={&(0x7f0000000240)={0x20, r1, 0x301, 0x70bd25, 0xfffffffd, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x40}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 2m41.765428438s ago: executing program 4 (id=4810): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x184, 0x9, &(0x7f00000004c0)}) (async) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x184, 0x9, &(0x7f00000004c0)}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 2m25.681987112s ago: executing program 35 (id=4810): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x184, 0x9, &(0x7f00000004c0)}) (async) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x184, 0x9, &(0x7f00000004c0)}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 9.991875063s ago: executing program 2 (id=5332): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_secret(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xab) syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) 6.225706688s ago: executing program 7 (id=5341): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = signalfd(r0, &(0x7f00000000c0)={[0x8]}, 0x8) r2 = accept4$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x80000) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080), 0x2) 6.042290233s ago: executing program 7 (id=5343): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0xa, {0x2, 0x0, @multicast2}, 'lo\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000000000003400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007166d8a7097bb410babcf7c027e6f7fbaccd3129049662c390b9c0546e1056d0ff47491223ad5d702ce96e869cf5207bc438b7d8cb922b9f6f245945b3b7ce587613b2194f31ccdd8065357f1994224c6c3552c732f6f66a0a724fa01766f663d519aed26955d1b1eda5c2ac6b568a225db5acf4e0e340a724bc4f3efc"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {}, 0x8, {0x2, 0x0, @dev}, 'macsec0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4010) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone3(&(0x7f0000000340)={0x101000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.947503821s ago: executing program 1 (id=5344): r0 = socket(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x4000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0xa, {0x2, 0x0, @multicast2}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {}, 0x8, {0x2, 0x0, @dev}, 'macsec0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4010) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone3(&(0x7f0000000340)={0x101000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x80}, 0x1, 0x0, 0x0, 0x20000011}, 0x6021f9ea87b53982) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.573047055s ago: executing program 1 (id=5345): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000040)=0xf3e, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb1}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x2a) sendmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) pselect6(0x40, &(0x7f00000000c0)={0x2, 0x0, 0x9, 0xffff, 0x5, 0x56, 0x101, 0x4}, &(0x7f0000000100)={0x1, 0x5, 0xff, 0x6, 0x6, 0x1, 0x7, 0xf}, &(0x7f0000000140)={0x180000000, 0x7, 0x7fffffffffffffff, 0xe, 0x8, 0x9, 0x22f, 0x3}, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000200)={&(0x7f00000001c0)={[0xae6]}, 0x8}) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x3fff, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffd}, {0xffff}, {0x0, 0x1}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) io_setup(0x2003, &(0x7f00000002c0)=0x0) r7 = memfd_create(&(0x7f0000000080)='$(}]#\\\x00', 0x7) io_submit(r6, 0x1, &(0x7f0000000b00)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}]) io_pgetevents(r6, 0x5, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340)={[0x7]}, 0x8}) 5.361377632s ago: executing program 7 (id=5346): socket(0x848000000015, 0x805, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7100fcdbdf251500000008002c0009fb0000a29730a8", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x2040094) 5.167979006s ago: executing program 7 (id=5347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000002000000008000300", @ANYRES32=r2], 0x1c}}, 0x0) (fail_nth: 1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 5.130754715s ago: executing program 2 (id=5348): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0xfffe, 0x0, 0x0, {0xa, 0x0, 0x0, @local, 0xfff}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="8ceb92eb5b1881bbb099715c8ade19f85524e2e90b1cb0eba61eed8ec5a4864493abf22c8806be3fbfc802fdaee0857a89e9f1248db9ca85435e9b58ce98fb21124e887f650d2d981a4df207af", @ANYRES16=0x0, @ANYBLOB="010002000000fcdbdf25050000000c0001800800030003000000"], 0x20}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendto(r1, &(0x7f0000000580)="0c98e907d820e96c9dae27cef1b7b7cb44eab9a3f58de7ccf1a9df8dc4d7e2cb11e49c052f08d7551f664695a968062193c536dd716a7d3704b47b28c3340f399979335191491716fc57c6d55e3f9ec53d7673698d6bb7cefdb91924e51e6a9e91335243ab1c8d6c86f724cfe811e75fe4690046c2a078f1d22154f8cdcdc2780e248129b58cf9def1059d1986c2c158538a191cdf9e40c7266d6e771fb114a62c245f647ed8161b5f49df867fbf73e7e6", 0xb1, 0x80, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xd) r8 = epoll_create(0x47f) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000540)) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)) r9 = dup(r6) writev(r9, &(0x7f0000008380)=[{&(0x7f0000005fc0)="935debece9", 0x5}], 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) socket$kcm(0x2, 0xa, 0x2) syz_usb_connect(0x0, 0x3d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x92, 0xe5, 0x9e, 0x20, 0x108c, 0x169, 0x75b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x2, 0xd, 0xfa, 0x0, 0x3, [], [{{0x9, 0x5, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, [@generic={0x7, 0x5, "db224370bf"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff}}]}}]}}]}}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @local}) write$tun(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000008007142c3acf59ff946d126"], 0x60) socket$inet_sctp(0x2, 0x1, 0x84) 4.865411756s ago: executing program 8 (id=5349): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = semget(0x0, 0x0, 0x122) semtimedop(r0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, 0x0, 0x8000) syz_open_dev$sndmidi(0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8e383, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="041208be84dffa7adc578036a8fe690772cdb03e5a721365adef53f8b5ca996e7e87206b008d05"], 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04042a00000000001e47dfe525"], 0xd) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f040701411e32e7618e8096375b39dfbf0408"], 0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000040)="3900000013", 0x5}], 0x1) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000086021440f4151500bffd010203010902120001010000"], 0x0) 4.674449394s ago: executing program 7 (id=5350): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r0, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 4.185225635s ago: executing program 1 (id=5351): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 3.048105592s ago: executing program 1 (id=5353): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c5512406c7f0000000000008000", [0x6, 0x40000000000000]}}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xf0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xb8e9}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x2a9}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xfff}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000140)=@framed={{}, [@generic={0x71, 0x2, 0x1, 0x100}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) accept4(r1, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x880ff, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}}, 0x40) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r0, @ANYRES32=r8], 0x44}}, 0x0) 2.963591259s ago: executing program 1 (id=5354): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2, 0x5}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockname$unix(r3, 0x0, 0x0) fstat(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@country_functional={0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) setresuid(0xee01, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f00000000c0)="205005cf77bf3901d632ed7a95782cecbac50a1a86e485545c4805", 0x1b}], 0x2}}], 0x1, 0x440009c0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @dev, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010133}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000280)={0xfc, 0x5f2, 0xa, 0x0, 0x0, [{{r5}, 0xffffffffffffff60}, {{r2}, 0x6}, {{r0}, 0x2}, {{}, 0x6}, {{r0}, 0x10000}, {{r0}, 0x1}, {{r5}, 0x8}, {{r1}, 0x6}, {{r1}, 0x10}, {{r0}, 0xa6}]}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="090b0000d47a7d2ce1a1a08f000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r7 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) lseek(r7, 0x0, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 2.805687448s ago: executing program 0 (id=5355): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0xfffe, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x502b}]}}}]}, 0x38}}, 0x0) 2.711892253s ago: executing program 0 (id=5356): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) chroot(&(0x7f00000001c0)='./file0\x00') 2.71150206s ago: executing program 0 (id=5357): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000002000000008000300", @ANYRES32=r2], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x40000000000011a, 0x0, 0x0) 2.433905501s ago: executing program 7 (id=5358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_secret(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xab) syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) 2.302677475s ago: executing program 8 (id=5359): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x1ff, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x38}, 0x1, 0x300}, 0x8000) r3 = socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) fremovexattr(r5, &(0x7f0000000000)=@known='system.posix_acl_access\x00') open_tree(r5, 0x0, 0x89981) connect$llc(r4, &(0x7f0000000040)={0x1a, 0x331, 0x0, 0x0, 0xe, 0x81, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="042c1108c900ffffffffffff010104010000010f2b091994eb5aa57caada7b052123d770625be87254d4bb768be6891ba8e667b7b6a0f35fa3aeff8900000000"], 0x14) 2.221253612s ago: executing program 8 (id=5360): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x800, 0x0, 0x0, 0x3d, 0x0, 0x2, 0x2, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x7, 0x1, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x5], 0x0, 0x202}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x2) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/47, 0x2f}, {&(0x7f0000000240)=""/197, 0xc5}, {&(0x7f0000000180)=""/98, 0x62}, {&(0x7f0000000600)=""/68, 0x44}], 0x4, 0x5, 0xde43) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x150, 0x150, 0x170, 0x0, 0x260, 0x238, 0x206, 0x260, 0x238, 0x7fffffe, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_team\x00', 'xfrm0\x00', {}, {}, 0x6}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x100, 0x0, 0x0, 0xfffffff7, 0x7}}}, @common=@inet=@ecn={{0x28}, {0x11}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x1391ccd1beab952f}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @dev}]}}}]}, 0x4c}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000100)={@local, 0x13, r7}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.028254508s ago: executing program 8 (id=5361): r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(0x0, 0x1291c2, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYRES16=0x0, @ANYRES64=r1, @ANYBLOB="472828d9541533a93c561eafed33f99e723d7aa20bbef052fb891e58994deaf34108b77bb71a4c5f03b5f038f47b8aba36868e3273a235f00d1191bb9e7be5fb53ef59", @ANYRESDEC, @ANYRES64, @ANYRES32, @ANYRES64=0x0, @ANYBLOB="e185f6", @ANYBLOB="ac7c113be6ee8b07d692ed4ab42cff94b9c04313b0398fe674f24c31489c91d0e9b83e3ba2f72804eebf0d4ac9714d2e4df353fdf18c1cf5b72466fd9d8f25db171ea185b85b1c5ecbe3bf05ccfd0e89c86f36b9399dbeaa008624443a435b8263b6d9a88ebb3b5552b2dce60f9aff7aaa7133575c1ca7498ce8cb58c534b467fd25bd8a388f77c2917905f8", @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400800bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r3 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r3, &(0x7f00000008c0)='/', 0x1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') chown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x309240, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe}) 1.580448118s ago: executing program 0 (id=5362): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000007f00000100000000000000000000000000000000000000000000ffff000000000000000000000000000080a0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac141424"], 0xf8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 1.576643446s ago: executing program 2 (id=5363): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x10, 0x0, 0x11) r1 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') r5 = socket(0x848000000015, 0x805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) read$msr(r4, &(0x7f0000000080)=""/3, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_da_write_pages_extent\x00'}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) close$fd_v4l2_buffer(r6) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x5) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x94, 0x1, 0x1, 0xd59f80, 0x19f0, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0xa, {0x8, 0xffffffff}, 0xd0, 0x9}}) timer_getoverrun(0x0) 1.489874419s ago: executing program 0 (id=5364): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$FUSE_INIT(r2, &(0x7f0000000080)={0x4f}, 0xfffffdef) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x28403, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r3, 0x8008743f, 0x20000000) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x27ffffe, 0x10, r0, 0x4000) fallocate(r4, 0x0, 0x0, 0x1000f4) setsockopt(r1, 0x6, 0x20, &(0x7f00000001c0)="05000020afba1c5977082b7bdaf258aa1cc574fed78d964a46f1a7ac86348b5e86c673c1db18c939bef46ba0d1d22a3114a3cd69b01169e5f92373b81767e6a0bd94a98ebd0b60e137a3c3eb70b24b8880ea8b5d74928ea57507a2366ebef3c0570b3a14390e7d76123423b405a540161a9395cf8f41000000000000000000b1ca1793ec2e379f2f9b58d22412e7f3a7da9880a3af92b4f25245d5b701bf455c98df1c90b8f9c601bcb7862e8bf31a6ad77a927dc4e607a7791e78b2e470943541c3e200"/206, 0xce) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r6, 0xc06c4124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c00070f000000000000100007000000", @ANYRES32, @ANYBLOB="80008f000a000200aaaaaaaaaa1c"], 0x28}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 1.488032218s ago: executing program 8 (id=5365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB='`\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000170000004c000680"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1.390196823s ago: executing program 8 (id=5366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r1, &(0x7f00000003c0), 0x100000000000022d) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, '\x00', @raw_data=[0xef1, 0x0, 0xe, 0x2, 0x2c8a, 0x40, 0x8, 0xffffb9db, 0x3, 0x8001, 0x9d7, 0x380000, 0xfe, 0x4, 0x2, 0x1, 0x4, 0x2, 0x3, 0x6, 0x3ff, 0x8, 0x100, 0xffffff2a, 0x5be, 0x401, 0x74a, 0x1, 0x1, 0xffffff21, 0x6, 0x4]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0xe7a6, "566035010000000000000048ed51000000000000000100", 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='ip6gre0\x00', 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x10001, "029c6e5c846eccb800d2ae30e3f5c320998750190300"}) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1000}, {r6, 0x4080}], 0x2, 0x0, 0x0, 0xfee5) syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) sendto$inet(r4, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 1.342530836s ago: executing program 2 (id=5367): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xb4}}, 0x0) 1.206325219s ago: executing program 2 (id=5368): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, r0, 0x1, 0x0, 0x0, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) 858.913209ms ago: executing program 1 (id=5369): pipe2$9p(&(0x7f0000000240), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000010) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x29, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @echo_request}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000cd40)=@newtaction={0x6bfc, 0x30, 0x300, 0x70bd26, 0x0, {}, [{0x80, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x4}, {0xc}, {0xc}}}]}, {0x1af8, 0x1, [@m_mpls={0x44, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xff}]}, {0xd, 0x6, "ff38ff2e0f4dd8b199"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x98, 0x9, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0x10}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x8, 0x10000000, 0x4, 0xfffffff9}}]}, {0x24, 0x6, "057553bc1490a67241d107fae38e17e4abcd51a0060abe831f8a2f1db8984296"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x110, 0x7, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '.$\x006\x00'}, @TCA_DEF_DATA={0xc, 0x3, '{\\-#)$-\x00'}, @TCA_DEF_DATA={0x11, 0x3, 'sched_switch\x00'}, @TCA_DEF_DATA={0x7, 0x3, '@^\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x10001, 0x6, 0x9, 0x7d81eab9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x2, 0xffffffffffffffff, 0x6, 0x8}}]}, {0x7e, 0x6, "e9c9d4508421079c58f51c0b0215e2b08d98dbb18a8152a4936e0c42cad0d56970e1f0056faf2f37284cd65ff23962501cb948a72c5ae3e4ec4462fc1f24de025298a8fe844897c07f062ebeda0927c55f1ec718484b3010e036c8964bd96c8bfedb683be2d6af710abe0cb61f2debec46dfa1f457fe17d4dde8"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x11c, 0x1e, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x40, 0x20000000, 0x0, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x643, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xa11, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x5, 0xffffffffffffffff, 0x5, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1659, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x105d, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xe, 0x0, 0x7, 0x2}}]}, {0x75, 0x6, "f0de5c1b7e225300239aca1cbe8d92a6187f14854db56c4dcda9d291f969cd192ca97e97ae7d97f82ea0e220a6b61866de122b72e9007ded51e3c55ff9fb62f5cd20d1258f89f596c0c1b1a34ac83634fcadc6b17e3951bab39542655d9053641f913697cccebf3172b42ccc7b941925f3"}, {0xc}, {0xc, 0x8, {0x2, 0x1603802f223b14ed}}}}, @m_police={0x434, 0xb, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xcaa2, 0x9, 0x1ff, 0x8, 0x200, 0x94, 0x1, 0x81, 0x3ff, 0x90, 0x8000, 0x9, 0x4, 0x5, 0xbd5b, 0x338f, 0xe00000, 0xfff, 0xfffffeff, 0x20b, 0x767, 0x7ff, 0xffff914a, 0x6, 0xc, 0x5, 0xde, 0x1, 0x4, 0x80000001, 0x4, 0x8, 0x0, 0x400, 0x6, 0x101, 0x0, 0x2, 0x4, 0x6, 0x2, 0x1a, 0x9, 0x0, 0x4a, 0x3, 0x42, 0x1, 0x10, 0x6, 0x8, 0x8000, 0x5, 0x40, 0xffffffff, 0x8277, 0x6, 0x800, 0x1, 0x2, 0x8, 0x400, 0x2, 0x590, 0xede, 0x8, 0x10001, 0x6, 0xd4, 0x6, 0x8ee0, 0xa6a, 0xb7fc, 0x7, 0x9, 0x2, 0x9, 0x8, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x3, 0x9, 0x401, 0x1, 0x69, 0x1, 0xd, 0x5, 0x5, 0x8, 0x7, 0xa0fe, 0x6, 0x10, 0x7, 0x2, 0x4, 0x3, 0x80000001, 0xb, 0x0, 0x3, 0x5, 0x5, 0x9, 0xc3, 0x2, 0x2, 0x1, 0x7, 0x3, 0x3, 0x2, 0xf0, 0x3, 0x9, 0x400, 0x0, 0x3ff, 0x1, 0x4, 0x100, 0x4, 0x294, 0x7, 0x2, 0xa, 0x5ee, 0x2, 0x9, 0x10, 0xf, 0x9, 0x6, 0x80, 0x4, 0xffff, 0x2, 0x3, 0x4, 0x3, 0x2, 0x0, 0x7fffffff, 0x5, 0x6, 0x80000001, 0x7b2, 0x7, 0xe4, 0x9, 0xffe00000, 0x8001, 0xc7, 0x80, 0x8, 0x8, 0xbba82e17, 0xffffffff, 0xfffffffa, 0x0, 0xe300, 0x4533, 0x101, 0x5a8, 0x9, 0xbe82, 0x8001, 0x1, 0x6, 0xc, 0x10, 0x7, 0xfffffffd, 0x8, 0x5, 0xfffffff9, 0x0, 0xd, 0x3ff, 0x7, 0x2, 0x1, 0x7, 0x7, 0xa, 0x0, 0x2, 0xe4, 0x7, 0x6c, 0x3, 0x7fff, 0x0, 0x4, 0x9, 0x3, 0x2, 0xcb0c, 0xfffffffe, 0x2, 0x0, 0x10000000, 0x8, 0x7, 0x3f4, 0x8, 0x9, 0x3, 0x3, 0x7, 0x7, 0x8, 0x5, 0xe, 0x71, 0x2, 0x8, 0x3, 0x3, 0x101, 0x5, 0x1, 0x100, 0x3, 0x1, 0x8, 0x8, 0x800, 0xffffff37, 0x2, 0x9, 0x4, 0x1891e521, 0x2, 0x6, 0x2, 0x9, 0x5, 0x6, 0xb, 0x7, 0x4, 0x8, 0x3, 0x10001, 0x10, 0x0, 0x6, 0x7c47, 0x800]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x198, 0x8, 0x0, 0x0, {{0xb}, {0xac, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="267030ded427"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000001, 0x0, 0x0, 0x0, 0x1}, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x5, 0x7, 0x80000000, 0x9}, 0x1}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0xc4, 0x6, "3ec58a8d2cc2ff1c8c9d5a649f19ea7622d6af8f90ee0d0b1e53e9077486e2db208ee30d52a31d0a884de13a78f303906dea09ec0d24ef2df724d5c65a6d425194edec651e1dac9800c2b63922b62f35185bd83110fee7a9c3a179d867094ec5c18a61e14e1ecc11cd98e89fd37164217d475182a7fd438a99c54d8aa0c8fe49d73650e9b2e13a3b1c3c1542d203a6efae1c8eeeeddad422e8725be63b26dd464a51d01f3087540963b85ea295dd406c7c781b92b5b56b343c49ff08803da65c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0xac, 0x6, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x3, 0x5, 0xffff}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0x52, 0x6, "c2067a86f197aa135649a872b6f749f3fc75d6a377263c7370fdd65107dd96b4951da637af9d7d86b499e2fa634505df937f3f8a92da663c04175ecc29fd510ecc7f60c3ed904f663ec21adbc5b0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x10b4, 0x11, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xafd, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x9, 0x3, 0x280, 0x24}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xc9a2, 0x1, 0xfffffffd, 0x77d9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x5800, 0x6, 0x68e9, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1232, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x14aa, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x68, 0x10000000, 0x8, 0x6}}]}, {0x1004, 0x6, "186ecd52c1cdf7328d23475146f02482bc56f575e492d9ce053f253c53a4e038885eb0933103f99897d7e9b600b33fb5a461522be809b41e50daa3f5401b2a0d03c65e4195c74b9adfb8cbe69fed85252520b9ec8173a57afaeba2e54fc5c338e641793e45587f4b8d6ed461206daed9bef3d733b50e3ee1de7d0e347cdea3643e308d7e6ccee7655613caa805913fa75710dedc90b3d6f09c95bb80928155892d369f63de6f0a62da41579319cf216611e5f6538bc0560935af9f08301ab3af4c8e84b50e029ac29a0032f273a404655e57b84796a7bdafe02d7de4c52280228b6b387b0a9d47a45ef9f99b50e339591d5039705f102204982ed448a9dea68420231dd5c05275a939f1c225052daa46d6f993639a5400c415d45480c53ac4815ab4a4b77c5f19cb66b0527b86fc16972fd252ac0907a670bed34b5ab3d70547933b16e7498e4064bbcd60578e23168e5208a6f2c0d551de7445f5cffefdbaae22772f856ce237930b4952e1a769a189e8b8bb431526c0211ce8955790d82b666848620780ca1053c2485c49106b1458f5e7ddb5f695497eb3f66136862c73d6c77e45c7e141ae78ba4b949692ea2e5be63066b50f265689871fd3d65418baf254d23f1e5646c08cce175a5e7b0d04dad9139cb00896194111cbea317c6590e007f0e7629c489df68c9cb0ac8fba74f7db20d6e9143f5488ae6d0c3d7913a41fa4d3070eb921ca04ac7d35f02ffd789902bd36eccfbd617c10a2e7a771244a261d4442cbdf1af3ab8bdf3453f145eb6635e76f8eafc53d8f7c3c20ef5efd678869b3baa00c1df7355e07e66f5b429c645b8f25b384dbbb5bef79d9ca197aa92efc205b67c0b808df01bc973cc02280770518ed141845b03dd23186a58588a129e8994cec460ebf57f9069e960acf8ed0c8bb744b1134e8612d653e9c653b78181f5429737d412f28377fdd01240c5199f7806bc63b86bca9645d31e35b5622159c606eac0e8f71e4f75c80f44403f279e52b06f52d94279f0add4cd63c1f72430b6792097feffc7054db74efc2bc0de8f0e6cc781673383a8c471d422ee543a12e7a84b4591ea12ec90501250d9a7ab5059b2693ce102affb34c86660be3adc527867344ef6980fc7c43945a4c758aa87dd58bd8729cc9d3d909c3fa76726777d26e63792bf6699c8875d870d3985684d9a22319b02f228f6332508f4d02c7bd887865e605f984f54db19fdff7c3c180288f83f6bcc17d1eb4563c5c7685a4db2ca9d06974321116ed25ac0da19c1fd0fc3a4555f3ed7f7d2a4461526d0f17210bdea2bdda5198a42f8ebccdbf7cc9ca21c546ea49ce1fa46e2d4fdbffdeba74102606d7a9721ac7f2b63ed94dfcdf0bcd58a384d3ceb18ecc8db310cc70695ac2473386bf3ee8eae866275c415177672be91d889ec86eb066b511fb1c3692d46736aeadbac5ecf38620ddaf2c5d402ad1953094dbb0a8294e9ddc563ec78dcf8845ba7dd98e9cf9170eaa027410bd86d9c3377cdb08aa91c8667410c0dd569299653828201093567089b653b4ea6a4297a85777b9807e180a94b3518477b8fb57e0b0dd3a7a33ce0d99237f8dc69bc97bbe6534a4677595973459100441eadec46a5b6311b06d08fde9a92da162ecdac39c387f2eb1c18e530e140b0a08248984b7da5273ea23dd8511b4bc940a7372b13192269895ac871e0958d54868abc5ea7c2d06a251ae216005690ffd8056c08dfd3b1e1d5aafedf9795cc362ee26c8a51945ea939226aa956a23bee05a403115369244bba89f164f26028d97b96997bb545c9ac9cef1a62f43b735076ecf8955d2fce934766e5050b70339054f72dd8a40413f234c949f86cf912159304172fb8f3be711012da6d663e4e621e653c9ee6bcdb76bd878ff6d3c5637cccdc5477865dd4e9b594b1f9d8dcbe438f88b98bd1b5db1965bae481e0bbac0ecfe2dbe967e737fee657ae71a93002f633a8bc250ef03549e2464f1d82c8ea6868eea68b35042ce00db844612c1e320a008d9be4826156475984e49042b7ee7a4608dfe2ca8d08b81957a8710d6a001bf5bc7fceb1717981f1d8bfa39bde84f9909e8d3556e73eac7206f62779c61e095a25b836a5d67af502e719c12a586fe6081bf2302eb6e39d7121050eff6bc90cdf87c4c10b8f36c96544dcfa40cf3c10961848a5d023ea669e9725fd37f1eb614c2e3e0b05baaa65b4f3e61078e915036e55b40362dc4140dd4db602c3ae05d91c38b03ba2e16fb25faeb160dfdc02637994d7eb20bf36c7fda88deb57f38726e5fa22c7d27139713874cd1407b3cf84279225d2dedaf38613e85fde5fa61f88879cdb60451fb4d0d8a5f91f6c496743f21c16586876bdf5d49b62d584d3d4e84dc2084cdeb7963de9331f4cfc814980a0a4b7167a09dcfe4f4b058deb77d035f5d5ce4dedd860b06b563882034552dc75a2543ba504cbbff95b2222e93ceec9183e7ad3db0d1849a34296d4b21ca0342817c1e1fa2dc966112bdc4ab27b19106850b43dadd3de123fbef9661a3b3509b416a2e7da2df8c0243dc6bd8fce23c2ab4276f078a08e1f7170ad2653c8f1c376b8270deec79c8000a3c37da6452f33f5dad00597b1757a6337e71ca4ff8c0b8d2f5a1394d73d1a3c5103b3c0f8b58e0a13009d30fa5bd3a7180b8216cb53fe13de8f7ff7a11480e81d89c8944b54247b456ac9e6f2cd385f5de0bcc761cbb29c9ebc8453f380d4e3b3135f5dbabb85b92eaafd0533ed7b7d549236aae85091c492399eaab3915bc29b3cf819bad4c9096a3088dc451332a933cce63987869018d1cf263525c7471809d7d1c2163b967531c7532bea5ebe064878b4fbd3a547a7ceb9afe807ed25f1e7b3b2e2f416a0b1c3fc4443507522eaf5bc1f0290f56f2938337ecab68bf779e82006c02a472ac633d5645943affa98d3d1629c04c7b4513887cdd7a74d002677a826fc71d24be92eeeccd459ccaf771a74fdd6162b375ff80b0ebc8b4ef6ab7846d6787e0c6b8341e055a2dba0926f094b54830d194b9642c8e0b12b50fa6acd153384023ca01c41e9953aa206c974ce2e02b1a94eb27a2f48dda62833aa861560a46add4ae7eb5cda6f75b3b5e083a513e33b601e351a9119dbac4bfbeb140b4fea2a221f369be76a1c0fd424c9d08fbf34bbe94efc5b2f4d0f63dfdb272b09122c9c59101e2cf4321445f9f6affd0129342b296a3da28b8a3fd9d9d03359692dfd88c0bbe319b00b98577e35d6590124b0343c74c75578da764e204ec47df0839796d2c6fb44e78621472b66f75da27a235c2306cccd2a6f8a791503a945cb06baaf7acddff2cc0c52dafff0f042bd4c6a33aca5fa63ab10d8faadcfddcb43552768ff2683880435a8d29aad8ea5a4de6101bd87c0723639ba739babc4d025c6cb12a6cfb49e0d4341814f3ad27b17f3690c75c5a358335fc85cd722077d384bc447e0ed448d5a34e08f2ba2a6e26d2205a3e6d8c81735706f36b2dde2318768e4ebf0ee18482b2e5ac6082fa3031f9d66a58e1033152b6761bd24551ce75a584370001dba31c5e9240231083a850bc5e99e680bbcbce9888617d6ceea53006086eed6af136c5d889f63c7455d97eb9fc8e5e9628085534ea64bf8c9f87196094e6b08f57e2185f1a6cb5162f8084ae6cd2f2d62efcd041dcb471e628ef135843c4987b97bfe947d8b64d7d309f1be7ff28e44b275aebc6bf46ac815e2d806603f5e5a5d67be6fef64296fd0aad3875257c86e5e4fcbbb82f05f6e921776d5ab9e9b58e84df447aa830e239644a8a18852dfea6b10fd15db1ae8de4f514a133effeaeec1aed236f0341219769911f23611ea63183d3c8858e16bce225e1f3943aa83b0526c19f79b234ad7553cfb8cdbebe1f53c746b110bef7626f29a6018531168d22e3c84feb09203b3fdc9db056d19fccec297e98a939f5c45db8e5fe5b020b6d94ff71987490e39cdb7429f76f3abe70d0bc9a4762924db6fb25958d7c5c9faf52ffe77ff6f5e8a70b29a8820cab537aa05509d7e95657696888df11a6773163f3b9fe3ff1853b54dbe5f901a79af55a3c55c0778c45755450b2c631fbc08b34a27cc25aa44c36290ae6ef40cb6a47bd311a2d098d63d9478344eab572ef93a9f59932751dcda1bc655efc9e108f7b19215a57853c213a801ccdc0fbf6c27ddadca5ded0978a60ae9ce921e967d72ac80d92549e31fead1e1f741dc7729af0100f6a03172313b8c095cc7f2edaa55680b80c4a253b20ecef6ac2552c257fe82b1b9da81ae529d3eb0f96da263816f872e85766fd4c71d6925bb7b0226d9a4fada135fe21e6b22bb0eeccdfb81fb54179fa1572c89e68fb107bff8d9f85bef9cc52553e4d2d0ff2cfb02b578f63e7b580b284519ef511c72df8d99f4e0744ac545644726869297967ed11d99b703f5db21ebe8797c85302a8428016000a1688604b721a98018382eaa92930802e891f215dabd1f744090bc3c9910050d5b21bd61514328d23f919ef7604c8982144e169d8f16a7351d23e87e4557254e1d428f6b1e1449e5ef36eb7b0bbe9a8fa1fa7c8013690a48fdd37e10cca6988ed5dbccf9f897953957495ab29cdad93edee20d6f50b25bb46280aa1e20c39dae8c35be4049751c4cd6b032553b44d6eb1527d8fdd2a6f05cc94b7b7e124380e1536c4e48cd57bd6008e926efbedd6d4838b41813075fe84b0fd6f0dd5d0bf74f2c7f1469fbcb5eb7ad31570634ab85b5d44dd4d9399074f0b247262f9572dddc07a74d7637ad33da8164c060a968af51fa711987dd5dc1ba15eedd620d30f349d7badf2b18f56fc27acefde1d6c78853bc886591ce6ba7d2b4e3a7d103fb6addccd387121442ac8ec2db117ed72140dfb282cbb2c1feb1be37b63817856156f1053a8d423d6315bf98c26196cde5719efd72f644c7159d1e4d448be6a77ede46886544a45c49035f1c60741c8fc0a34f2341beeeacc9206b66ebc19ef13821f828098167028804388e7e46f00deaa496963dc7c3f5c1d8ee608ec1ff214af44302e2c5934bbfa07902c4254a1020da0e53fffd277e073add5aeacb2e319b5486e749c50eb348c219769be04da54ff99194947a952eae1f00c66c27f33b976ddda4670f9eb3bb4ec79df0f81f9d37d65f4b9ec5c2fca7820ae7ea8a8bdbbb8f7906e54b2ce7bf6c3cdcd0edca2ff8b2fe9dff4a8072458f56423bc6addaa0bfd433494d9af5b33e78d1e1eeaa968ce1a94924debf572e220d9b45aaaf18dc01c51a77c83ff9e8855455ce3519251f186ae6d05c693ab6ef9aefb34699a83de612f77377ad7670a5a5566bef2e89af71b6d88a8b1f517bbd53ffc89d0d3c84cdfe60d0b30031d5ab600cf5d321db8aba46463ea7007da9cd215c76fc9c472328c1e92598d5d83fb7c8154c09ddbdcbcaa63d7f72e90c5608ae4c70e4f1e0b8afafda10f9e5cf03409216b5ad57f90aca2378f4b925b11f0d24aa10aa010142ee75d742d4c41a3afaf5c0f8c16348027282f58d54d235a4180803097f0a631e1939cb99e7932aaa079ae40eda496948f3c83d1f08527cc00a7c03cdae4ac62747ef6db259465bd0fd3c97a9420b59605684221822872b6ab3f0bff811742d6458f940969b166c9af8a3626bb64407b83dfc36240f958dcba29b432330324a2858f015c60b756eaa896a59ed952d512091929b5d0546191e436a88fe4cf319e48d4e8a6f9c9f520e0a802f0147742e8d5480813c93750ef383d316451d5893327bcf80c380d473836955e3c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0xc0, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x4, 0x20000000, 0xffffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xffffffff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1ab2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7fff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8e7}]}, {0x4b, 0x6, "ad1c3a8cfac8da2b73e0aeb21a6d6426a2241e1b817aebc03c3a498165987cdfe95d09dfcf7820f973134e18150e754f9f88f6c20fd603b0d16f6ef60567dbafdf0cba6208b7fc"}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}, {0x288, 0x1, [@m_tunnel_key={0x9c, 0xb, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x3d, 0x6, "4a9316c5a5f8bad510a20294a614920d40ad9556ae6a4029f8d67db2487c2ba4c74ff0a3dab3ea78e50a5ae68e28304f8b42d069a84698bb12"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0xfc, 0x20, 0x0, 0x0, {{0xd}, {0x4}, {0xca, 0x6, "a22f490254a33984003ec8a5a72355b50c27accd54d8f3e7fa98431d58989ef783660daf35f6e53e9e3dda76f760c5d1a7bb38772ec84a948a6a24eb83a9874e83bd4d0249526ed0e701365bd38370d5dfbc647d904ee5cfe8f9b9eb6277e017c2db8087e2c88a307eefa49101f8b1ce18da87ab0abb338ab529b5614cd7836be67c8c689fa7706af0295ff140b93a2adeee9a0ddfccd5a6a35e383557f92b625100c475e1113a53719a824f03d75c0bab99d52a509e20ca1b88e6ccec0da72005a0f209d4ac"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0xec, 0x1f, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x3, 0x7, 0x80}, 0x3}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xc, 0x7514, 0x1000000a, 0x5, 0x4}, 0x4}}]}, {0x86, 0x6, "175de9c1e3f804893e4b27d87ff29ff250ca7ca0b7d9cf4b6864d8a3496c57b090e2d4f39b30e1a03ff43e441af8bbc0a41c8a591a79b138f291d9956d06398c23e25d9db5ee65ffeaa0bdd7639581b4b716ef53e945026896df3679efb357c6685503c99cd195d11c4872c7cd9dec12f0d1158f017a9cf395d43e18b17da14d9b65"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, {0x1094, 0x1, [@m_simple={0x1090, 0xf, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x10000, 0x6, 0x401, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x9, 0x0, 0x15cf25fe, 0x45}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x3, 0x7, 0x0, 0x10001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9, 0x20000000, 0x7f, 0x7374}}]}, {0x1004, 0x6, "169d920aea816e7fdd1a6a35a5dfca627bdd93b922650d3ca3177c5c3ff554bc4970e5a6ef23be4d0120fb915bd46b60711b937fa2ce15ea614fca99f1cfcb19a2e8dde591270214c0c0d974bf7e6c05ec777d1f4a3404521d4b358af034e887c928cdc61734d838bb514912d12bf319289375e483205f3ca6a2188454326d23f043a7d8e7e4d789cd0f436d54543ea701defafdb946f43baec81aaf1653846fff15ad25026d4ecd234a965b2a7fabc93237bcbe6216dd8909912a2efda4b2a2564ab6766838f6e8523f035c146bdbcf3a773c42b2e46f9c34df4826b867934a9f677647d923fc4bc7b976fc582f8dc9a4c56ebaea64080b0e23306823e1ae96aaf57c2cf8ec2bbf1f214614b12e792c1ac8883ff1008888d8cee3783d85e65042e31298af2934194655e9831a74776b1a3332c89ff4adfc9829f97b84fbc6bb2bedbc4b5971197d4f3af21405487f5bfc76dc791673c74208ff05f36d7b3e102177d09898fc6df6e3f7e1a39029c10b6a27c582b47d34c2d97929ada853e0ab2f18e75f2a8588f61bdd1b0738abf8d579f30d44aa7db6f3d13fd6110b41662f79166dfb78563a8a0fece1cc2db7a11fd4268571924bff4025f561872465b9a43237ee0677fb5f476c36ec3139cf9431d44d2060fa806b83dcbcbcfb8f10d3e39fe792626cd20a51ebf8e8f48a22c6b6eff1bd19735c7f3f9c9fb977aa7f67f26a5767a545e6ef366a8128a17833d92cc8277fca2a039a93c4020e5b89b5507d56c469877bd5c90d8fdb46e3c061863f9f89dea2a099bcc9427fffc6b69e4c29cc797296e51bf974038af8f5502ca6e0b9c3be35f71a3cfd28d06b2efc692296f98e81c6fa84f2a45c7235abd337ddbaedb430f3fea639100d5f532099e5e60b7c4fcdb4a672ca35e3d50b858113b351c7c398892d3f70ea45e6760cd703c59abe56d89f6bad9177b4abb39590774653a7f636b82f7da858d54476d101153e6b47a2ec9ca66a84bb926f0833b2187fe237a71c7127d73806e984bb4163a6f384757c260845d2093992202a114fceb7d5c299e54ba9600db81a05a7fe480e92c6cb9d16c087c22aa28932fae4f756499a2a2616c9bc2270f8c895b025452bd630777f9de80220ececd2c75e23c665858bf592071c6ceb72feedd801fe4b54ac26a615d1b8c59ce58483b87c57f54368f0ee3a335cfbed27089834f31bd7ffc351d535efb72123d95b1e6fe51c5c75953d5e81ce73c7830dca7340eb7331ba881f9e004de01d32c08066f7e36d941051003eaf186ca9546f635edc508f8048cfde3f830ff1fb47bdbf2438fa7c55575fc2119ad0ee1233ef9977ba9f2110cf8867ca788fcfb59c748c4fb7e806fbc221a9920d25a01adb2d5d34bb1cb18692c3aefa1e0646f7afcd54e3058cf3ed5c7c6c7782c1d085fbc6db7868313652b5fd30ec2f945ea1e3ea1ca5fbd1d4b5e92d67ec500ea90b86035098ebb91e4ab0fa7bd2182c8ec51b6adc2fb4c7e9f5d95cab7d98df98686ea4c8a98fc3ed339a49247387f473ef773d5df6d5cc8b21120a9c17632f451544dc81233c3027d75d35d24855e07843ea239289c1d56c4fb02b8c7855ff19bbbcb69e5d2dca6fd2acf3ec02c8094a4890919da5b923abd5b7f927a97da3ee79dafc02ff65bd9a0ce13a1d7ab045fe88a3c873ed57d2a0bc272888a2fdb8070c3744e5908f66f7e577ed59509360ca7304d84c0cac667358ee8a761cfb6b8d75eead82eca3d781ece2cd9ef860c2cb13e410103240409ec43ae38b7292a83486689a133a591263f7b3f73ac350212d7e16737b862cfec2ae9908a42722e8c4dc4a3cc0611bcdd2eaf4557509d8edb5148f4295bfa11f6c36c9933223ee8a5465fd215460eaf62b90e85ed227a3a0256b72a736e8d4a012bceb700bbe59d39ed3fc2f58639dd3159ab3d8d6392d23b60740e766b41d21277d21f760f85e1f9c9bb3e2eb273ae71b9725e1a30b153d023aa7a88865bc5091d45738e87e09e47636bb8e7e75a7b86f0081dda03d7b36688a5f5e7fba7bbdb2dd74d22858ad0d40ebb0ab61a7e172a99f7f78fdbd91b5da2ae692635575acc26d7bb54cdb1f06284d81cf4b8df720972de00e287769db88c0356e1379cf116c913de20b4d11cd6b1f82476fed83cfc0e69318220e8284a37c4328be4b35d567bb567509d4933f34606eb0ea35264d0f913601d31db7f29d6150d68b784922c9950c9de7822e79079041ec7650dc52a5fefa778e512935820332510559ecdee3870c54d554e8742621314d209f1a0af3c7b91c5c3b53b77581be19d554347289ffc81ac52648d72f3d0a9080526e3c6bd8789dc97925ece5b7068f12a0ee23dcf5f4d05e3beaaea671de6f521729aa832b1d7bab6f737cd4ed731884534232d9810a1df4046dc04bad67e081bceba3951013471a7e3826512b0f4235237c4dc15acb0bf052bdab7096e084f0901fe57e6f6067b714e4694fb8de1e7505b0a3f54f2608b7a51a575562bc386e7937691d4ecc5a5dbc930f550ee8f535c6bf238be80e1bba20c78990dac129b84eb12cbbdea8afc69c355db33838bbbd969b99a6fd1cac1dcf8845678c0ed3c22e50ca0eac62ab964844fa8ceba1521fb7907a17dfe285ea21f95ebbea9e458c5e6b50d5967f4618267615f23d94add44d9ddcb88dd05e447f231793bfbe7f7bf121075d7e543d239e14fdebbe7f9f4f2271da73346babc0b7037952e3d95af0fc9719b3c453c6f802dc10191819155826b83b666f9b283a04431150d11dcc7c222757cd8c5ae157222824c88c95ce949fdd1220b607733f799ed4c2040efb696f0a98e5e73b6f160690c0e6173f69eaace0b0bad6a748e6c1f95b9f0a475d941cbd20a3762cc74633dc82e2b5c03bf2ea37ea479220f5b20ac9d4fb06ba4a9d173968c30b600cd94cd6a2b4766d247e2efb749a3694f48be5a25dab34088448b4b733c6870b442387ab11059dfa224d9240bc5c4c8e6ef9a815b01a0f331140a2865160aaf805946da59ddaff125c91c234d30b2c0c891bab65aa7660ed7ee2fa9bad6eef8ea47bfb71c178e49649f7c513eb9c691b3cc052171b8e2dabf6f02b7417d96eacfafceaed867d8435deb4ddda7aa1c019291be17602314b6539b57231ac03208bf8648dbcb8930feaf220b095b05695a61f079ff95761d21c152002db49ea9953d1ec6565838cc894209c5893e68dd9b899ab01b43631c5879181135764dcd75153b85a3dcd481323ccb0d64f96a1ae9421cbb3f327304a9542f8de8dccfa5bd93a73eb311bff0b48ef6d1964fbc28f16505f96f8463995fa5db59e137ae3fa9e4b086f4ef1168a537e89f958ac82ed8fc3ea3edf0173c1d5699c84fb5d0a29a6eb2a8db86bbf020569d8ffc6123a6fc6b3265cf635779b28cbab42eff0b2b4dbd225500918e3af1bab157e9442aa8a9bab730440d94d87b7587847902297ff15b284054ca3072f80caad81a68bf6bbf3971bf648a8711bcac13d202eb0112106315092f66940c5f83a87534ee939d47ecf7787a44f78528f66e342b8f22eabd2cabe1b9ce515e1726c3792dd4e7e56441489f0dfb7666523851c337247abe1a0b09c8711ce4f4adbdfb8394ebdd378008b57fb6c8e9e65df9fefd72d1c22fc8feb43f3d7bbb3c5182ae1d6f0ae8302cf19b311bff31f0d06b25f78b24ae2fefe2c57ef56de5d78fee40a954fcd508b42850c02caeefc5de7e79b4619fb22aeb4d5f7c6c1c2b634fdc853d36f43f02b1e59f6f461b471794da2801168891e9a7ba000fcfeabace4c0a7f9a6b7892746a866b7c8aeb44dec336360ccb25bc9b6cfbf331f15467748a904ebb804ec6e266d0e5a9ab566b33b41c06d34d30636efc08804c09323a784785b8372f339dc1daa21dcb53d6dca2e44db352200bdd8c778facbe9491d340f9b872bf72d555c4ae8931dd5372b12c0d76298aca9b6bc2a5041fe76775c3c9b44d762f7ad1307c40bbc91128a421ab5849052e9e551de5e70641914b4009e89580050848884b2c91c968a3d4a388ed0db392dbc1fdb47d7d3bc7f19954cbcb42ea20af25e40249b97a92e0c2687a3e40a7ff761f92ba5a2dffbdf4acf13021f2998bdeadcbba9b7d08089eaeef10c4b76f5a6e0a0699eca659145280f61bfba69babce50d2b1834ebda36f8423740a74275460d209b83c591b1d606bac53fa06abc5db8793448597ab9fd122089074cb14589e6160f151512979b13057569b8a419c033470d76fda2e6e4fbf60bbfd04f249e7262a5eeb8efd072e6ce201ce6d95a5ac964ab477473ecff0cc296a5eb6814cfbb1ac55471fc6d9869793f5a928b85e33e38a071b0c16b37471ee978075d81f791a7bf340ef65b4e887cca0812ef0be3a0d31f255d2ee7ecbd632d522def3c420976b6308494dab22722601a003c12cb0a0b9d328bec5cac5ed1fbb2df394ad67c3a0921c44b33313fda75d27ec4c3b9461fcda3a62d36f74bd96e79e2bf186feb07ffb738a3147360a6a2b6247557cb978e246b6de419a3051c2f6fc56cc9326e2ff029176142c98dd6a0b03e8b4c0b95db7027c64a9eb3a1f5b6222687050376b39be3fd2e7180bfd4d6bd05150519f82a073a336f098cfdc777efb65a252a28bd65a7f19da2e3e3a6a2ef7f7849cb56fb89eb961fa698219a1b0c4f4a39270c252e611634a60b145239df4fef53cdd3a888ecc27f57074ed02c7a9c52f8b9b6446f8f3239c52ccb6bc66df163e1f3eacb84dcdf30d2118bf546f84dee252ee35eace69e57f9d035db973ceeb41b33705ed3001818b1afea533421f163d4bf74c0c8c883cdebd224bb0e97f6b69c42839041ce2d81dd46bb82f42b560f16ac9f98fd2b130b474aac4c77f8d2e20f9cf770b9c9d3cf2e51be993572915ea314eb73d6fb3f2964333851d8e49d6876bb91ae548bc1c08f4ef0147a85bbbe83ae05c0811206c12ae983b5f7d64cbe44f0df315c53b37eb75c6fb0e12133fabce6ba61c8d2a0c5b4319c5e86315871160b3753d69992cbd49b251be64932f5be56ebf17f4f7d48f6ad53e6d9bb770ca7f1a0406e87dcd032b92b9d5a8691957839e4e3be9eff5a1a6a0dc339e51fb5132c00c3ba6c32191dc122d62a96bd1502535690b93cccafa2b8dfac122cd2a848ef928ea5205a8a570593cc8083a40283d64d35b344fd85b01b2929aec7ac764612f714327989ef0432f10d3416f478ae2dea43c550c488cf65c2868b071a61f2b780bebe5a5afbf704aed99ea5e80e241813aea03e5dae8255731eb335afa429ad2088a562e89bd6c2043403b81ee83ef3f69bd018d6f5f1cf2966e7f9497e78caced26427403cb976c2f22ed996642e30f8dfe895f6c7f11802116705978bc65374decd36b6ba68b94dcbcd4c9d21a4853b277dedfbd4956171c6cb25d57e0153325c1845991bfb97a20a0900437c0f1da53c236bb64d50f18e015b5f9b96ae7164eb1ef20e08e6173284b2ef4044e03bea656aac0ad4fc0067c5c6aa0f07e0584fdf7b4f5b7248c453fbb962760bd05414c1f0bc5400956c58ccabd072f7d0577fd62275c3558dffeb56a34a1aa530fd5767a464b24f1bcf9db87b2679d56c99f86e1fa48097995b5b097fd9f53f8fd5152ca55cb253cc2de046168c5a03429477e7aeb9560f5d6ca8a840a59983649d6ee950282fd36efb7e13cbfa6fba2ac283386afd9ab33bad511e913d085f2b1862ccfe7832888765c23aea00bca50125a0b1a8bc642418b0b13884f8633a9fb1c74bda0c601aeda1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x34c0, 0x1, [@m_simple={0xc0, 0x11, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '+@+]-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x11, 0x3, 'sched_switch\x00'}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller1\x00'}, @TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x4b, 0x6, 0x8, 0x2}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x31, 0x6, "d230c012d3d67dd0103ea6c84e383c7b29c229b1aaeb54235079076e3551813e2f2264bb4cffe70a595ff961c9"}, {0xc}, {0xc}}}, @m_police={0x2238, 0x20, 0x0, 0x0, {{0xb}, {0x2110, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3, 0xc8, 0xde20, 0x3, 0x9, 0x9, 0xb1ff, 0x2, 0x6, 0x81, 0x6, 0x4, 0xb, 0x1, 0xed8, 0x8, 0x7fffffff, 0x62f, 0x400, 0x4, 0x6, 0x0, 0xd, 0x8, 0x9, 0x3, 0x7, 0x2, 0xb39, 0x5, 0x9, 0xc0, 0x7, 0x5, 0xd3bf, 0xc4, 0x8, 0x9, 0x3, 0x5, 0x2, 0x7a2, 0x5, 0x2, 0xb7f, 0x79d0, 0x5, 0xffffffc8, 0x3, 0x7fffffff, 0x4, 0x6, 0x1ff, 0x3, 0x0, 0x40, 0x2, 0x2, 0x7fff, 0x1, 0x396d, 0x10000, 0x10, 0x5, 0xb7, 0x1, 0x80000000, 0x8e9, 0x9, 0x8001, 0x401, 0x1, 0xd67, 0x9, 0x8762, 0x897, 0x6, 0x7, 0x4, 0x8, 0x0, 0xd, 0xffffffff, 0xa, 0x8001, 0x8, 0x6, 0x0, 0x1, 0x3, 0x5a, 0xf, 0xe7, 0x8, 0x4, 0x40, 0x53d, 0x401, 0x9, 0x800, 0x1, 0xc400, 0x9, 0x80, 0xfffeffff, 0x0, 0x1, 0x9, 0x5, 0x4, 0x5, 0x8, 0x5, 0x1ff, 0x6, 0xd010, 0x10001, 0x0, 0x9, 0x6, 0x5a4, 0xff, 0x3, 0x0, 0x4, 0x9, 0x9, 0x400, 0x4c, 0xda3, 0x8000, 0x6, 0x6, 0x3, 0x3, 0x8, 0x207, 0x6, 0x1, 0xfb10, 0x8, 0x5, 0x5, 0x6, 0xffffffbc, 0x40, 0x9, 0x4, 0x1, 0x3ac, 0x5, 0x80, 0x7, 0x4, 0x9, 0x7, 0x7b, 0x4, 0x8, 0x9, 0x20000000, 0x200, 0x1000, 0x6, 0x7fff, 0x1, 0x1, 0x6, 0x3, 0x8, 0x3, 0x0, 0xc3, 0x0, 0x6, 0x5, 0x0, 0x8414, 0x3, 0x9, 0x100, 0x0, 0x8001, 0xfff, 0x4, 0x40, 0x2, 0x5, 0xc, 0x400, 0x10001, 0x10, 0x9, 0x6, 0x10000, 0x6, 0x0, 0xc, 0x8, 0x7ff, 0x380, 0x7f, 0x6, 0x1, 0x10001, 0x1aad, 0x0, 0x1, 0x800, 0x9, 0x6, 0x6, 0x6, 0x0, 0x4, 0x8, 0x3, 0x0, 0x0, 0x1, 0x401, 0xacf, 0xe, 0x9, 0xb7, 0x8, 0x7, 0x5, 0x7, 0x7988, 0x10000, 0xffffff81, 0x7fff, 0x9, 0x914b, 0x401, 0x7, 0x5, 0xe79f, 0x0, 0x3, 0x8, 0xfffffff7, 0x9, 0xaf2, 0x2, 0x40, 0x6, 0x6, 0xa7, 0x1, 0x10, 0x400, 0x7ff, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x10, 0x10001, 0x6019, 0x80000000, 0x8, 0x5483, 0x8, 0x5, 0x9, 0x0, 0x80000001, 0x9, 0xe, 0xfffffed4, 0x7, 0x5, 0x7, 0x3, 0x80000000, 0x5, 0x7f, 0xa1e, 0x7, 0x8, 0xe, 0xffffffff, 0x5, 0x7ff, 0x1, 0x9, 0x8, 0x10000, 0x95, 0x8, 0xf16, 0x6, 0x4, 0x3, 0x6, 0x0, 0x7, 0x10000, 0x6, 0xff, 0x5, 0x81, 0x81, 0x95a2, 0x9, 0x3bfc, 0x2, 0xa3fd, 0x3db2, 0x4, 0x1, 0x9, 0x6b, 0x400, 0x9, 0x3, 0x74, 0x8, 0x3, 0x0, 0x0, 0x8001, 0x7, 0x80000000, 0x9, 0x9, 0x1000, 0x5, 0x9, 0x4, 0x80000001, 0x25cf, 0x8001, 0x38e, 0xd, 0xc, 0x5, 0x8, 0xb, 0x2, 0x0, 0x18c, 0x9, 0x3, 0x1, 0x1, 0x80000001, 0x1, 0x2, 0x8000, 0x10000, 0x7, 0x1, 0x2, 0x7, 0x7, 0x0, 0x8, 0x2, 0x40, 0x50, 0x2, 0x5, 0xffffffff, 0x101, 0x40, 0x5fc, 0xcd, 0xc8a4, 0x0, 0x1000, 0x4, 0x101, 0x3, 0xd6bd, 0xe9, 0x1000, 0x0, 0x6, 0xf, 0x10, 0xc0, 0x8, 0xcc6eb657, 0x4, 0x8000, 0x40, 0xc, 0x149, 0x0, 0x3, 0x2, 0x1, 0x100, 0x1, 0x6, 0xc7aa, 0x800, 0x7, 0x10000, 0x0, 0x7, 0x8, 0x3, 0x7, 0x101, 0x400, 0x7, 0x9, 0x9, 0xfff, 0x7, 0x7, 0x8, 0x7, 0x839f, 0x30, 0x5, 0x1ff, 0xffff, 0x7, 0x8, 0x1e2, 0x10, 0xbd, 0xe41, 0x7, 0x8, 0x800, 0x100, 0x4, 0x4, 0x4, 0x7, 0x5, 0x4, 0x9, 0x2, 0x7fffffff, 0xffffff22, 0xe, 0x7fffffff, 0xd, 0xfffffffb, 0x2, 0x6, 0x2fc, 0xffff, 0x9, 0x0, 0x1000, 0x8000, 0x5, 0x0, 0xfffffffc, 0xa314, 0xe, 0xffff144e, 0x2, 0x3, 0xe, 0x4, 0x7, 0x6691, 0x8, 0x8, 0x61c1, 0x8, 0x5, 0x6, 0x6, 0xc, 0x5, 0x9, 0x100000, 0x3, 0x1, 0x3, 0xfffffffa, 0x71e0, 0xffffffff, 0x1, 0x10001, 0xffffff44, 0x54, 0x8, 0x5, 0x2, 0x2, 0x0, 0x1f, 0x0, 0x9, 0x400, 0x3, 0x7f, 0xffffffff, 0x0, 0x6, 0x2, 0x2, 0xfffffff7, 0x400, 0x3, 0x7fff, 0x44a7, 0x800, 0xffff, 0x50, 0x5, 0x101, 0xf49]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffe, 0x3, 0x2, 0x4, 0xb8f, 0x0, 0x9, 0x8001, 0x9, 0x9, 0xfffffffb, 0x1, 0x8000, 0x6, 0x3, 0x2, 0x57f, 0x7, 0x6, 0x4, 0x5, 0x8, 0x2, 0x7fff, 0x3, 0xfffffff9, 0x7, 0x2, 0x2, 0x7, 0x5, 0x401, 0x3, 0x2, 0xfff, 0x4, 0x659, 0x3, 0x2b0c6f73, 0x6, 0x800, 0x0, 0x3e200000, 0x6, 0x6, 0x9, 0x2, 0xc, 0x9, 0x6, 0x5, 0x9, 0x101, 0x8, 0x1, 0xfffffffa, 0x8, 0x3, 0x0, 0x1ff, 0x7f, 0x2, 0x0, 0x4, 0x7c3, 0xaf6, 0x6, 0x7, 0x3, 0x7f, 0x3ff, 0x25f, 0x7, 0x7, 0x7fff, 0x7, 0x101, 0x260, 0x1, 0x8, 0x0, 0x5bd, 0x10000, 0x7, 0x4, 0x9b, 0x9, 0x1, 0xe9, 0x1, 0xfffffff9, 0xf16, 0x8000, 0x0, 0x6, 0x80000001, 0xfc0d, 0xffff, 0xf0, 0x2, 0x5, 0x2, 0x1, 0x914, 0x10, 0x5, 0x1000, 0x1090, 0x0, 0xffff, 0x7, 0x2, 0x1, 0x731, 0x6, 0x7, 0x3, 0x4, 0x49, 0x9, 0x6, 0x2, 0x7, 0x8, 0x2, 0xa, 0x80, 0xffff, 0x7fffffff, 0x100, 0x1, 0x9, 0x2, 0xd01, 0x4, 0x9, 0xd, 0x40, 0x5, 0xa3, 0xffffa5fb, 0x7ff, 0x7, 0x1, 0x9, 0x81, 0xa, 0x0, 0xffffffff, 0xe, 0x8, 0xba8c, 0x80000001, 0x4, 0x7fff, 0x7, 0xde, 0x4, 0x9, 0xfffffff3, 0x3ff, 0x1, 0xb98, 0x1013800, 0x1, 0x200, 0xeaf, 0x5, 0x6, 0x9, 0x4, 0x1, 0x2, 0xffffff01, 0xf, 0x9, 0x9, 0xfc, 0x6, 0x4, 0x3, 0x80000001, 0x8, 0x2ee5, 0x4000, 0x5ea9, 0x7fff, 0x1ea, 0xd8, 0x8, 0x0, 0x8b6, 0xe, 0xf0000000, 0x101, 0x5, 0xb5, 0x1, 0x3, 0x6, 0x9, 0xf2, 0x1, 0x3, 0x1, 0x8, 0x6, 0x8, 0x2, 0x4, 0x497816b3, 0x0, 0x9, 0xb, 0x80, 0x7, 0x2, 0x7, 0x9, 0x3, 0x2, 0x6, 0xf, 0xe56, 0x4, 0x1000, 0x4, 0x7fff, 0x200, 0x7fffffff, 0x7, 0x8e1, 0x9, 0x8dd8, 0xff, 0x8, 0x8, 0xb, 0x7fffffff, 0x5, 0x800, 0x7, 0xb5, 0x3, 0x4, 0x1, 0xb3e4, 0x5, 0x9, 0x8, 0x8355, 0x8, 0x7837, 0xa, 0x7fffffff, 0x8]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x15, 0x5, 0x4, 0x101, 0x8, 0x8000, 0x3ff, 0x3, 0x7d, 0x1, 0xffffffff, 0x40, 0x8, 0x8, 0x1ff, 0x4, 0x9, 0xffffff1f, 0x1c01, 0x6, 0x2, 0x80000000, 0xb5, 0x8, 0x4, 0x80, 0x5, 0x4, 0x9a82, 0xffff, 0x1, 0x10000, 0x3, 0x6, 0x9, 0xffff8000, 0x1, 0x401, 0x7f, 0x8, 0x4, 0x1, 0x3, 0x8, 0x2, 0xfffffffc, 0x3, 0xa21, 0x7, 0x1, 0xe, 0x9, 0x2f8, 0xd, 0x6, 0x8000, 0x6, 0x3, 0xcc, 0x9, 0x8, 0xfffffff7, 0x3, 0x7, 0x9, 0x80000000, 0x1, 0xf, 0x5, 0x10, 0x0, 0x800, 0xdedf, 0x4, 0x5f32fef1, 0xfffffff6, 0x0, 0x9, 0x10, 0x0, 0x6, 0xfffffffa, 0x8001, 0x6, 0x6, 0x3, 0x4, 0x8, 0x9, 0x7, 0x7, 0x9d, 0x3, 0x7ff, 0x9, 0x7ff, 0x0, 0x3, 0x6, 0x2, 0xfe, 0x6, 0x9, 0x4310, 0x2, 0x6, 0x9, 0xfffffff7, 0x3ff, 0x7, 0x92a, 0x0, 0x1, 0x6, 0x1, 0xd, 0x10, 0x77d11384, 0x9, 0x200, 0x1000, 0x0, 0x5, 0xf6, 0x9, 0x1, 0x2, 0x9, 0x9, 0x100, 0x1, 0x9, 0x4, 0xad61, 0x912, 0x74, 0x4, 0x7, 0x400, 0x1, 0x5, 0x4392, 0xf9b, 0x6, 0xfffff70e, 0x1, 0xfffffffd, 0x18, 0x0, 0xffffffff, 0x1, 0x248, 0x3, 0x800, 0xa0, 0x3ff, 0x9, 0xf0e, 0x4, 0xb, 0x30000000, 0x3, 0x10000, 0x3, 0x8, 0x7, 0x76a9, 0x5, 0x5, 0xf, 0x6, 0x7f, 0x3, 0xd5, 0x2, 0x8, 0x0, 0x1, 0x0, 0x1ff, 0x4, 0x3ff, 0x3, 0x7f, 0x97a, 0x2, 0x800, 0x1, 0xfffffffb, 0x7, 0x0, 0x0, 0x0, 0x3ff, 0xfffffc00, 0x3f, 0x0, 0x2, 0x9, 0x6, 0x80000000, 0x3, 0x6, 0x2, 0x6, 0x8, 0x5620, 0x3, 0x7, 0x3, 0x8, 0x1, 0x0, 0x0, 0x3, 0x9, 0x2, 0x4, 0x0, 0x2, 0x0, 0x2, 0x5, 0x4e24, 0x7876fd4b, 0xe4, 0x40, 0x6, 0x9, 0x10001, 0xd9, 0x800, 0xd02, 0xdb, 0xd036, 0x2, 0x2, 0x3, 0x1, 0xa05, 0x8, 0xfffffff9, 0x10000, 0x800, 0x9, 0x4, 0x5, 0x2, 0x1, 0x8, 0xfdc, 0x3, 0x10, 0x1, 0xc1b, 0xe]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x2, 0x0, 0x8, 0x5, {0x8, 0x3, 0xe9bb, 0x2, 0xfe22, 0x3fd}, {0xff, 0x1, 0x8, 0x3, 0x8, 0x2}, 0x6, 0x3, 0xe97}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x3, 0x4, 0x9, 0x8, 0x8, 0x7fff, 0x1, 0x1, 0x8b, 0xc, 0x5, 0x0, 0xf9f7, 0x7, 0x7, 0x400, 0x4, 0x2, 0x80000000, 0x8, 0xfff, 0x10000, 0x0, 0xffffffff, 0x5, 0x0, 0x700, 0x9, 0xfffffff7, 0xbef0, 0x401, 0x5, 0x9cb, 0xfffffff9, 0x401, 0x3ff, 0x8, 0x4c, 0x0, 0x5, 0xa572, 0x3, 0x4, 0x100, 0x0, 0x895, 0x2d, 0xc5be, 0x7ed0, 0x3bd1, 0x7, 0x2b546850, 0x6, 0x9, 0x9, 0x1, 0x3, 0x95c, 0x1, 0x800, 0x7fff, 0x8, 0x4a18499f, 0xf40f, 0x3cb, 0x2, 0x1, 0x7, 0x0, 0x1bc70538, 0x0, 0x0, 0x7, 0x6fa2, 0x8, 0x80, 0x4, 0x191, 0x2, 0x8, 0x0, 0xc, 0x400, 0x4, 0x8, 0x8, 0x7fffffff, 0x5, 0xfffffff9, 0x6, 0x0, 0x8, 0x6, 0xffffc000, 0x7, 0x5, 0x1, 0xfff, 0x42, 0x29d, 0x9, 0xa, 0x3, 0x0, 0x8, 0x3, 0x9, 0x1, 0x800, 0x1, 0x3, 0x5, 0x9, 0x4, 0x1, 0x8c, 0x6, 0x9, 0x7, 0x7, 0x2, 0xffffffff, 0x2, 0xe4, 0x6, 0x4, 0x0, 0x752bb95b, 0xc54, 0x4, 0x7, 0xfffffffd, 0x8433, 0x0, 0x7, 0x7, 0x8, 0xe, 0x2, 0x8001, 0x800, 0x2, 0x200, 0x6426, 0x2, 0x38, 0x4, 0x1, 0x3, 0x4, 0x4, 0x0, 0x2, 0x3ff, 0x9, 0x9, 0x2, 0x400, 0xd0f2, 0x3, 0x8, 0x2, 0xffff, 0x80000001, 0x7, 0x5, 0xfffffff8, 0x5, 0x4, 0x7fffffff, 0x1c6, 0x10001, 0x3, 0x4, 0x1, 0x0, 0x48444665, 0x6, 0x5, 0x8, 0x0, 0x2, 0x8, 0x7, 0x5, 0x7ff, 0x6, 0x6, 0x3, 0x7fffffff, 0x9, 0x1, 0x4230, 0xe380, 0x8, 0x6, 0x1d, 0x4e1b9e6a, 0x3, 0x2, 0xffffffff, 0xfffffff7, 0xd, 0x7fffffff, 0xd, 0x200, 0x5d0, 0x7, 0xff, 0xd, 0x5, 0x8001, 0x4, 0xe, 0x2, 0x2, 0x0, 0x0, 0x1000, 0x6, 0x40, 0x2, 0x1, 0xffffffff, 0x200, 0x7, 0xa, 0x8, 0xfffffffd, 0x6, 0x3, 0x8, 0x9, 0x8, 0x2be, 0x3c3, 0x2, 0x0, 0x600000, 0x6, 0x9, 0x3, 0x3ff, 0x800, 0x689, 0xff, 0x1, 0x1, 0xfffffffe, 0x8000, 0x7fff, 0x9, 0xa, 0x0, 0x10]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x2, 0x8, 0x85, 0xffffffff, 0x1, 0x0, 0xfffffff1, 0x10, 0x0, 0x9, 0x3, 0x96b5, 0x2, 0x24000000, 0x7, 0x7, 0x6, 0x1, 0x7, 0x9, 0x6, 0xffff0c15, 0x1, 0x7, 0x9, 0x6, 0x0, 0x10000, 0xe, 0x7fffffff, 0x101, 0x7, 0xfffffffb, 0x3ff, 0x8, 0x8, 0xf, 0x4, 0x6b, 0x9, 0xfb3e, 0x80, 0x8, 0x7, 0x4, 0x5ba, 0x1, 0x7, 0x2, 0x1, 0xfff, 0x0, 0xc22, 0xa, 0x3, 0x2, 0x8, 0x7fffffff, 0x8, 0x800, 0xf5, 0x4, 0x9, 0x100, 0x4, 0x8001, 0xd, 0x8, 0xfffffffd, 0x0, 0x1ff, 0x0, 0x4, 0x6ab2, 0x0, 0x3, 0xff, 0x3, 0xe, 0x7, 0x26, 0x2, 0x6, 0x0, 0x382, 0x9, 0x5, 0x8, 0x40, 0x654, 0x1, 0x4, 0x0, 0x8, 0x401, 0x3, 0x81, 0x8, 0x101, 0x67, 0x4d42, 0x9e, 0xfff, 0x1, 0x8000, 0x3ff, 0x1ff0, 0x7, 0x6, 0xc, 0x5, 0xfffffffe, 0x8, 0x7, 0x7f, 0x8, 0x7, 0xfff, 0x7, 0x9, 0x7, 0xb, 0x64, 0x100, 0xfffffeff, 0x1, 0x4, 0xfffffffc, 0x0, 0xe, 0x2, 0x2, 0x8, 0x7f, 0x8, 0x2, 0x800, 0xd, 0x4, 0x1, 0x6, 0x1, 0x2, 0x9, 0x8001, 0x6, 0x3ff, 0x0, 0x200, 0x2, 0x9, 0x0, 0x90ca, 0x10, 0x1, 0xffff, 0xa7a, 0x7, 0xd, 0x7, 0x2, 0x527, 0xd5c5, 0x0, 0x5, 0x101, 0x7, 0x7f, 0xb, 0x6, 0x67, 0xfffffffa, 0x90000, 0x80000001, 0x800, 0x2, 0xe6a2, 0x2, 0xfffffffd, 0x22c34f31, 0x3, 0x3ff, 0x6, 0x3, 0x3ff, 0x5, 0xc0000000, 0xd, 0x4, 0x5, 0x0, 0x0, 0x4, 0x1, 0x5, 0x3, 0x0, 0xf, 0xce34, 0x4, 0x2, 0x5, 0x1511, 0x1ff, 0x22, 0x6, 0x3, 0xf367, 0x5da2, 0x8, 0xfffffff5, 0x1, 0xfffffff2, 0x33, 0x401, 0x5, 0x5f34, 0x101, 0x7, 0x7, 0xfffffff5, 0x5, 0x3, 0xffffffd6, 0x1, 0x8, 0xffffffff, 0x8, 0xfffff4c2, 0x80000000, 0x4a79acf4, 0x4b, 0x2a, 0x2, 0x7fffffff, 0x7, 0x2, 0xcf0, 0x1000, 0x5, 0xb94, 0x946c, 0x0, 0x3ff, 0x81, 0xff, 0xfffffffc, 0x54e5, 0x2, 0x97, 0x4, 0x5, 0x9f17]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7ac}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x215}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff7}, @TCA_POLICE_RATE64={0xc}], [@TCA_POLICE_RATE={0x404, 0x2, [0x390, 0x0, 0x6, 0x40, 0x1d, 0x340b, 0x0, 0xe55, 0x0, 0x4, 0x1, 0xff, 0x6, 0x8, 0xfffffab1, 0x6, 0x4, 0x2, 0xf2, 0x8, 0x80, 0x13d4f4d4, 0x7, 0x2, 0x3000, 0x6, 0xecdc, 0x2, 0x6, 0x5, 0x67, 0x0, 0xfffffffc, 0xd1, 0x8000, 0x4, 0x10001, 0x8, 0x2, 0x120000, 0x5dd1, 0x0, 0x941, 0x8, 0x401, 0x7fffffff, 0x0, 0x40, 0x8, 0x1, 0x2, 0x10001, 0x8, 0x4, 0x0, 0x6, 0x2, 0x5, 0x1, 0x6, 0xb, 0x10000, 0x9, 0xffffffcc, 0x1ff, 0xa, 0x864, 0x5, 0x4, 0xfffff089, 0xe2, 0x3, 0x8000, 0x3, 0x3, 0x1, 0x7f, 0x8001, 0x6, 0xf70, 0x35, 0x1, 0xfffff001, 0x6, 0x919, 0x7, 0x7, 0x40000000, 0x5, 0x4, 0x400, 0x10000, 0x3, 0x5, 0x1, 0xff, 0xca5, 0x1, 0x1, 0xc, 0xb7, 0x401, 0x3, 0xd, 0x1, 0x9, 0x1, 0x7, 0xfff, 0x140000, 0x6, 0x7, 0x6be5b774, 0xe, 0x6, 0xc, 0x4, 0x9, 0x9, 0x8, 0x6, 0x9, 0xff, 0x8, 0x2, 0x8, 0x400, 0x2, 0x2, 0x1a0, 0x6, 0x7, 0xff, 0x6, 0x5, 0x7, 0x3ff, 0x3447def6, 0x2, 0x4, 0x1, 0x49, 0x4, 0x4, 0x7fffffff, 0x75, 0x9, 0x5, 0x0, 0x80000000, 0x9, 0x10, 0x2a2c, 0xbc77, 0xc, 0x3, 0x1000, 0x6, 0xea0b, 0x200, 0x6, 0x8, 0x7, 0x4, 0x9, 0x10, 0x2, 0x800, 0x9, 0x6, 0x5, 0xc7, 0x0, 0x0, 0x1, 0x932e, 0x4, 0x3, 0x800, 0xb11, 0x8, 0x0, 0xfffffffe, 0xc0000000, 0xe, 0xfe8, 0x7, 0x8, 0x2, 0x0, 0x7fffffff, 0x101, 0x1, 0x8, 0x1, 0x5, 0xbf6a, 0x6, 0x40, 0x6, 0x4, 0x80000001, 0x1, 0x7, 0x5, 0x8, 0x4, 0xf1b, 0x3, 0x3, 0x81, 0x4be, 0x1, 0xffff, 0x1, 0x7f, 0x2, 0x5, 0x8, 0x4, 0x1, 0x5, 0x7, 0x6, 0x2, 0x3, 0x319, 0x80, 0x2, 0x7ff, 0x447f, 0x10100, 0x6, 0x3, 0x6, 0x2, 0x4, 0x6, 0x2, 0x6, 0x4, 0x0, 0x9, 0x0, 0x6, 0x3, 0x4, 0xa0, 0x7, 0x776, 0xb, 0x11e, 0xd, 0x6, 0x6, 0xc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x2, 0x7, 0x3, {0x10, 0x0, 0x8, 0x7, 0x1339, 0x5}, {0x1, 0x1, 0x8e22, 0x3, 0x1ff, 0x3}, 0x6, 0xfffffc2d, 0xd}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x5, 0x5, 0x1b, 0x7fffffff, 0x7f, 0x2, 0xfffffff8, 0x2, 0x0, 0x4, 0x0, 0x6, 0x8, 0x0, 0x1, 0x1c, 0x0, 0x8, 0x8, 0x0, 0x401, 0x8, 0x0, 0xffffffff, 0x5000, 0x5, 0x1ff, 0x8, 0xfffffffe, 0x4, 0xed9, 0xfffffffa, 0x4, 0x7, 0xffffffff, 0x28a7, 0xffff821c, 0x6870, 0x5, 0x6, 0x7, 0x0, 0x1ff, 0x6, 0x9, 0x1, 0x1ff, 0x7, 0x388, 0x5, 0x6, 0xa9bd, 0x3, 0x8, 0x4, 0xf6, 0xe7b, 0xac5, 0x1, 0xffff39be, 0x9, 0x80, 0xf, 0x8f6a, 0x5, 0x100, 0x7f, 0x2d0e, 0xf, 0x2, 0x0, 0x10001, 0xf, 0x5, 0x6, 0x1, 0x7, 0x1, 0x4, 0xabf, 0x2, 0x401, 0x8, 0x8001, 0x80000001, 0x7, 0x3927, 0xfff, 0x10, 0xc, 0x0, 0x4, 0x4, 0x1369, 0x100, 0x0, 0x6, 0x0, 0x2, 0xe, 0x7, 0x7, 0xffffffff, 0x6, 0x80000000, 0x200, 0x1ff, 0x4, 0x9, 0x7, 0x9, 0x10, 0x80000001, 0x5, 0x7, 0x9, 0x10001, 0x81, 0x5, 0x81, 0x4, 0x3, 0x7, 0x50b2, 0xffff, 0x0, 0x80, 0xb1ade6b, 0x7, 0xed4, 0x9, 0x80000001, 0x0, 0x5, 0x0, 0x800, 0x8, 0xffff, 0x566c, 0x0, 0x4, 0x10000, 0x2, 0x8001, 0x5, 0xffff4f11, 0x3, 0x4, 0x2a1a, 0x6, 0x5, 0x400, 0x7ff, 0x3ff, 0x2ff0, 0x4227, 0x8001, 0x7, 0x10000, 0x6, 0x0, 0xcf9, 0xc0000000, 0x7, 0x7, 0x9, 0x7f0000, 0x5, 0x0, 0x3ff, 0xffffff9f, 0x1, 0xd63c453, 0x7, 0x2e92, 0x7, 0x1, 0xc600, 0x31c58339, 0x0, 0x9, 0x4, 0x7f, 0x8, 0x55ac, 0x5, 0x4a9, 0x8, 0x9, 0x1, 0x5, 0x52, 0xfff, 0x5f, 0xe, 0x985b, 0x1ff, 0xff7, 0x4, 0x4, 0x2, 0xc88, 0x6, 0x1, 0x8, 0x4, 0x7, 0x1, 0x20000000, 0x6, 0x7, 0x9, 0x8, 0x3, 0x0, 0x29, 0x9, 0xf, 0x8, 0x0, 0x401, 0x6, 0x5, 0x7, 0x9, 0xffff, 0x3, 0x9, 0x0, 0xfffffffe, 0x10001, 0xd, 0x4000000, 0xf66, 0x1, 0x8000, 0x7ff, 0x7, 0x79, 0x7, 0x7, 0x4, 0x4, 0x3, 0x2, 0x9, 0xffffffff, 0x8, 0x3, 0xff03, 0x7, 0x3, 0x8, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]]}, {0x100, 0x6, "4ab375c3f00d4313f9508404233b122f60cd6bf750b118f86eec3d9dfd166dbefba59a5610320478039b5b0cd26e81466d09488395b37467797a38c1f885361d1a32a2a0546977ed50095cfc75a92ab9fcc3dbd83b399a681699626a0d61c3a47e44396a7f505011e3620a658fb69a2c8e863df49763d5de0d91c4d901fd0971b12d5b62a9dbe8d9b1ab8e924cb9ce929491182f98c2ff8cd05fb9cbb2b4270f1342eee18dca853a45ee977bbfb197ed42889325b3be3cc3ee300cdd564f8e7f0a529b9e60b737047ef90c8c240941039729a5043b5b344fe399d68396b29d398c3dc9d68a2fbc629d3bf2f0c479ca8e077b144dee5a82ab572ce583"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0xbc, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_ACT={0x18, 0x3, {0x10001, 0xc, 0x7, 0x1, 0x9}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}]}, {0x5d, 0x6, "afbe681bc13456dfce85c39759b6545e197b3e5610f92a17ca3a8768abb593e150e3125ec759f64467805e1f13fc66e616c60104fd476d742777a2c4b1c4150fdc511a05e08d02395570b1195454910a61123e03fa0dc898b8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x4}}}}, @m_skbmod={0xd0, 0x8, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1000}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x7, 0x0, 0x6, 0x7fff}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, {0x41, 0x6, "897459837f68c6388014bee1c078741c07f75d73f14d2853a4e56f5d75c7f2e2860c58bf7c888c1849c89cfc0618d8a115db732019a88cbbcd62b4d64a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x1038, 0xa, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x894, 0x1, [@m_gact={0x144, 0x1f, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1e81}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x6, 0x3, 0x1, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xe4e}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x20e, 0x10000000}}]}, {0xd9, 0x6, "c344a6a07df8e1541510ee123000f90d3941862e78cf0d9a2df28c349fdf0953b2b7e638dd69fdb1a8c910cd9d15a679cbde672bb41e921cca4335207c1f1834c14ecb59abc5e4491a53ef1da02666af780633bf4e4c43c30c83298e7a17cf7b3c947d0006a330d5d54b476b13cf65b507cadcb7ade720cd72b900ac176a7b1cf8d7a2e9efb06146fb3e0225e16bea5f5c60a8d9489dfa6e9a5239833c32fbd0b4bf345b4728aaed3fddc297bb12458cc9e70c2a46290c5c3f66cbab408dfb163ecc095afd525a77480da0646a66c8b5b32b6ecae2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x150, 0x8, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xfffff015, 0x20000000, 0xa, 0xbea}, @remote, @remote, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0xfffffffd, 0x0, 0x5, 0x7}, @remote, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xde, 0x0, 0x5, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xff000000, 0x1}}]}, {0xb0, 0x6, "bb3ac4544840634a0f3ad67a8077a0e32c53965f9f586b78c17306e4acf8351acc2a7332e629c812acc518a54979b3b19aabdde3fa5703a3ae1ed2c38a6707c095239ddfc34a2a579bc96f14b8370f1227c3074adc8f84928f7ce0d463129d137934a7a8e500328a9e10018d10ab7d0cdc31f538c82a9743cb8ba9b6b066b0f473e6c6383e28a9d8c85b6c54c083393ffc4c6a6c6f5f868085aec6423a24a60d6fa2116475324ca713bdaee0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x188, 0x2, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x2, 0x4, 0x0, 0x1900000}, 0xc}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x1, 0x0, 0x3047c1a3}, 0x4}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0xfe, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x110, 0x10, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x2, 0x8, 0x9}, 0x7}}]}, {0xc7, 0x6, "df15a125b7e154e96c0468809e08bfa4d171d90453e6e15cb8226efdd7c67fd2e1a527a162cdce452f6e1aace04b61b1aef0aea52d5ece43673f1f9012aa70d324b0315fd9ec6abc4b0fa613e740c222723e9d76fe3ecdf9ee781856da4d39fbd58a73f6a54140eeba8e23fe361ca64e0ff5bc48bb0cd7ec9ef3008cfd8a2b9a39213cc6179026d32c3c2d25848975fd74ed120eaeb516d50017c9087e9d3506f98ab8c68857582e64afaf30d16d56134a368ee69785cc897883e3a38bf1e68da311a4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x94, 0x7, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff, 0x40, 0x2, 0x6acb, 0x5}, 0xd}}]}, {0x1d, 0x6, "f9fb3f6554e1d4de0f18552de603088c4592d6f56ab163569f"}, {0xc}, {0xc, 0x8, {0x9c2abaaf584fcf3a, 0x2}}}}, @m_mirred={0xe8, 0xb, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x5, 0x20000000, 0x2, 0x9}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc0000000, 0x8001, 0x6, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0x1f5db784, 0x2, 0x3, 0x5}, 0x4}}]}, {0x5c, 0x6, "fba14d1a0686f5261003c7dfa528f03fba6a5fd05dd769e2ded5ea9d69d97bc482fe2636b5eda50c4741931e2a14989b1de75400ab7e7841bb1ae5eb876ee2671032e230c1ffeef872c8c08b64ec033c93fd922dab1dd4bd"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0xd0, 0x1c, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5cd, 0x9, 0x8, 0x6, 0x9}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xe, 0x6, 0x9, 0x2e}, 0x2b6d}}]}, {0x65, 0x6, "f6c94d6e3ca1258e607773255eb8ec356e91a336a089c8b259d3e9dcc87f55fd76f6ddf46aeae7229e7fd150cc4af2b7d89bbfb972f9e3e385858ced02e171053c25bc5e9d73ae30995122a85de55d96a1bd42e3287f45d884443593db788b6a06"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x118, 0x5, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1000, 0x4, 0x7, 0x6, 0xa}}]}, {0xd4, 0x6, "1138c5be6beb734f61b7ef4bbf9ba2106d97b59b8f4e7a65265f066dff8b76c93d348a5ecd87c981063939e5bfdc007d1e08290e8166fbcd241913de27d9f4ef104b81b9dff37ec0ceb4aa45b5c918c06ac879830234bdace398b2fa38a162e49612ca925bfa6a8c93efd0809f88f2c4539f8d97f72d16c5e8902b492d04be7e0afd7fb5dc1ff49676d40217ea5357af1f7077f588c281cd0e21d1d6d0592a54f405cd55bc00d1f569c64f9231a2738d2ca036c065f129b0eb4e606b4d6a2d41bb47413564f158f6df2723a8686b67e5"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x6bfc}, 0x1, 0x0, 0x0, 0x804}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 805.56494ms ago: executing program 2 (id=5370): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x1ff, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x38}, 0x1, 0x300}, 0x8000) r3 = socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) fremovexattr(r5, &(0x7f0000000000)=@known='system.posix_acl_access\x00') open_tree(r5, 0x0, 0x89981) connect$llc(r4, &(0x7f0000000040)={0x1a, 0x331, 0x0, 0x0, 0xe, 0x81, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="042c1108c900ffffffffffff010104010000010f2b091994eb5aa57caada7b052123d770625be87254d4bb768be6891ba8e667b7b6a0f35fa3aeff8900000000"], 0x14) 0s ago: executing program 0 (id=5371): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x800, 0x0, 0x0, 0x3d, 0x0, 0x2, 0x2, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x7, 0x1, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x5], 0x0, 0x202}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x2) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/47, 0x2f}, {&(0x7f0000000240)=""/197, 0xc5}, {&(0x7f0000000180)=""/98, 0x62}, {&(0x7f0000000600)=""/68, 0x44}], 0x4, 0x5, 0xde43) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x150, 0x150, 0x170, 0x0, 0x260, 0x238, 0x206, 0x260, 0x238, 0x7fffffe, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_team\x00', 'xfrm0\x00', {}, {}, 0x6}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x100, 0x0, 0x0, 0xfffffff7, 0x7}}}, @common=@inet=@ecn={{0x28}, {0x11}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x1391ccd1beab952f}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @dev}]}}}]}, 0x4c}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000100)={@local, 0x13, r7}) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): 255356][T22300] chnl_net:caif_netlink_parms(): no params data found [ 1304.406668][T22312] usb usb1: usbfs: process 22312 (syz.7.4868) did not claim interface 0 before use [ 1304.592511][T22300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.602338][T22300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.609905][T22300] bridge_slave_0: entered allmulticast mode [ 1304.619448][T22300] bridge_slave_0: entered promiscuous mode [ 1304.628653][T22300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.638375][T22300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.645463][T22300] bridge_slave_1: entered allmulticast mode [ 1304.651881][T22300] bridge_slave_1: entered promiscuous mode [ 1304.667339][T22300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1304.677717][T22300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.696744][T22300] team0: Port device team_slave_0 added [ 1304.703792][T22300] team0: Port device team_slave_1 added [ 1304.717308][T22300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1304.724374][T22300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1304.772558][T22300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1304.794926][T22300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1304.802092][T22300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1304.827946][ C0] vkms_vblank_simulate: vblank timer overrun [ 1304.834312][ T5864] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1304.923662][T22300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.583598][ T5864] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1305.696084][T22300] hsr_slave_0: entered promiscuous mode [ 1305.719381][T22300] hsr_slave_1: entered promiscuous mode [ 1305.727051][T22300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1305.734609][T22300] Cannot create hsr debugfs directory [ 1305.757407][T22332] netlink: 'syz.2.4865': attribute type 39 has an invalid length. [ 1305.769665][T22327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4871'. [ 1305.778804][T22327] netlink: 'syz.1.4871': attribute type 7 has an invalid length. [ 1305.778985][T22332] veth0_macvtap: left promiscuous mode [ 1305.786941][T22327] netlink: 'syz.1.4871': attribute type 8 has an invalid length. [ 1305.816366][T19251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1305.832950][T22327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4871'. [ 1305.943759][T22299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.999709][T16091] usb 3-1: USB disconnect, device number 93 [ 1306.015930][T13483] Bluetooth: hci2: command tx timeout [ 1306.162014][T22300] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1306.183695][T22300] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1306.243425][T22339] usb usb8: usbfs: process 22339 (syz.1.4873) did not claim interface 0 before use [ 1306.262290][T22300] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1306.318532][T22300] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1306.636467][T22300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.667589][T22300] 8021q: adding VLAN 0 to HW filter on device team0 [ 1306.682152][T19279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.689250][T19279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.734544][T22300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1306.767013][T22300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1306.807976][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.815042][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.911123][ T29] audit: type=1400 audit(1734514492.768:29308): avc: denied { create } for pid=22346 comm="syz.2.4877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1306.949766][T22353] program syz.0.4878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1307.010653][T22355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4879'. [ 1307.053210][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1308.006662][T22300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1308.090048][T22363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4881'. [ 1308.217433][T22374] delete_channel: no stack [ 1308.260252][T13483] Bluetooth: hci2: command tx timeout [ 1308.322259][T22375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1308.665608][T22383] usb usb8: usbfs: process 22383 (syz.7.4885) did not claim interface 0 before use [ 1308.775009][ T3523] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1308.874863][T22300] veth0_vlan: entered promiscuous mode [ 1308.910073][T22300] veth1_vlan: entered promiscuous mode [ 1308.937191][T22387] syzkaller0: entered allmulticast mode [ 1308.949900][T22300] veth0_macvtap: entered promiscuous mode [ 1308.969079][T22300] veth1_macvtap: entered promiscuous mode [ 1308.973445][ T29] audit: type=1400 audit(1734514494.695:29309): avc: denied { read } for pid=22386 comm="syz.1.4886" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1309.034836][T13483] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 1309.049885][T22300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.073269][ T29] audit: type=1326 audit(1734514494.779:29310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22386 comm="syz.1.4886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbeb9f85d29 code=0x0 [ 1309.104352][T22300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.117011][T22300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.127765][T22300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.137750][T22300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.148377][T22300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.159219][T22300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.169817][T22300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.179924][T22300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.190680][T22398] program syz.7.4889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1309.261249][T22300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.274027][T22300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.285885][T22300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.300002][T22300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1309.544677][T22300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.564911][T22300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.895434][T22300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.919486][T22300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.962158][T22300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1310.142519][T22300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.154513][T22300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1310.187037][T22300] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.313998][T22300] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.322708][T22300] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.331675][T22300] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.446369][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.457671][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.465093][T13483] Bluetooth: hci2: command tx timeout [ 1310.482521][T19251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.493049][T19251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.543591][ T29] audit: type=1400 audit(1734514496.164:29311): avc: denied { mounton } for pid=22300 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1310.651132][ T29] audit: type=1400 audit(1734514496.267:29312): avc: denied { setopt } for pid=22405 comm="syz.2.4891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1310.671290][ C0] vkms_vblank_simulate: vblank timer overrun [ 1310.751101][ T3523] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1310.764151][T22415] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1311.621595][T16091] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1311.788982][T16091] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.813669][T16091] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.827671][T16091] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1311.851504][T16091] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1311.871156][T16091] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.885390][T16091] usb 8-1: config 0 descriptor?? [ 1312.014254][ T6290] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1312.049432][T22387] syzkaller0: left allmulticast mode [ 1312.325966][T22437] sp0: Synchronizing with TNC [ 1312.370260][ T9] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1312.741133][T13483] Bluetooth: hci2: command tx timeout [ 1312.751260][T22418] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4894'. [ 1313.115866][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1313.124421][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.134662][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 7 [ 1313.165351][ T9] usb 1-1: New USB device found, idVendor=05c6, idProduct=9202, bcdDevice=8d.28 [ 1313.199099][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.209256][ T9] usb 1-1: Product: syz [ 1313.214803][ T9] usb 1-1: Manufacturer: syz [ 1313.269732][ T9] usb 1-1: SerialNumber: syz [ 1313.276227][ T9] usb 1-1: config 0 descriptor?? [ 1313.562289][ T29] audit: type=1400 audit(1734514498.933:29313): avc: denied { execute } for pid=22432 comm="syz.0.4898" path="/dev/usbmon7" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1313.700029][ T29] audit: type=1326 audit(1734514498.933:29314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22432 comm="syz.0.4898" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f820fd85d29 code=0x0 [ 1313.733987][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1313.983661][T16091] usbhid 8-1:0.0: can't add hid device: -71 [ 1314.009774][T16091] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1314.214123][T16091] usb 8-1: USB disconnect, device number 42 [ 1314.722324][T22458] program syz.8.4904 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1315.080354][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1315.092333][ T3523] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1315.111786][T22460] usb usb1: usbfs: process 22460 (syz.8.4905) did not claim interface 0 before use [ 1315.651787][T22469] program syz.8.4907 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1316.176883][ T5864] usb 1-1: USB disconnect, device number 90 [ 1316.338062][ T29] audit: type=1400 audit(1734514501.580:29315): avc: denied { append } for pid=22472 comm="syz.1.4910" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1316.444474][ T29] audit: type=1400 audit(1734514501.683:29316): avc: denied { map } for pid=22472 comm="syz.1.4910" path="socket:[77285]" dev="sockfs" ino=77285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1316.857137][ T6290] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1316.877468][ T5864] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1317.025314][T22489] delete_channel: no stack [ 1317.172504][ T5864] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1317.181987][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.218254][ T5864] usb 3-1: config 0 descriptor?? [ 1317.381219][T22501] program syz.1.4917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1318.346392][ T6290] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1320.885479][ T5864] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1320.898347][ T5864] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1320.907380][ T5864] [drm:udl_init] *ERROR* Selecting channel failed [ 1320.928844][ T5864] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1320.935535][ T5864] [drm] Initialized udl on minor 2 [ 1320.940948][ T5864] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1320.948886][ T5864] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1320.958817][T16091] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1320.967217][T16091] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1320.982221][ T5864] usb 3-1: USB disconnect, device number 94 [ 1321.034086][T19279] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1321.186308][T22536] program syz.0.4923 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1321.772778][ T5864] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 1321.815404][ T5868] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1321.939750][ T5864] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1321.961209][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.985131][ T5864] usb 3-1: config 0 descriptor?? [ 1322.005076][ T29] audit: type=1400 audit(1734514506.883:29317): avc: denied { write } for pid=22540 comm="syz.8.4927" path="socket:[76457]" dev="sockfs" ino=76457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1322.039408][ T5868] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1322.048981][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.057093][ T29] audit: type=1400 audit(1734514506.883:29318): avc: denied { nlmsg_read } for pid=22540 comm="syz.8.4927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1322.088071][ T5868] usb 1-1: config 0 descriptor?? [ 1322.110170][ T5868] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1322.136239][T22545] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4929'. [ 1322.371383][T13208] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 1322.435973][ T3487] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1322.556331][ T5868] gspca_cpia1: usb_control_msg 03, error -32 [ 1322.568481][T13208] usb 9-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 1323.245880][T22555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.260367][T13208] usb 9-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 30768, setting to 8 [ 1323.271941][T13208] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1323.282120][T13208] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.494151][T22541] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1323.804481][ T5868] gspca_cpia1: usb_control_msg 03, error -110 [ 1323.813538][ T5868] gspca_cpia1: usb_control_msg 01, error -32 [ 1323.818984][T13208] usb 9-1: string descriptor 0 read error: -71 [ 1323.888052][ T5868] gspca_cpia1: usb_control_msg 01, error -32 [ 1324.037332][T22560] usb usb8: usbfs: process 22560 (syz.1.4932) did not claim interface 0 before use [ 1324.055975][ T6290] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1324.064363][ T5868] gspca_cpia1: usb_control_msg 01, error -32 [ 1324.066707][T13208] usb 9-1: USB disconnect, device number 2 [ 1324.070966][ T5868] gspca_cpia1: usb_control_msg 01, error -71 [ 1324.099190][ T5868] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 1324.156789][ T5868] usb 1-1: USB disconnect, device number 91 [ 1324.199397][ T5864] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1324.207917][ T5864] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1324.216274][ T5864] [drm:udl_init] *ERROR* Selecting channel failed [ 1324.231144][ T5864] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1324.237944][ T5864] [drm] Initialized udl on minor 2 [ 1324.244715][ T5864] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1324.252901][ T5864] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1324.264502][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1324.298791][ T5864] usb 3-1: USB disconnect, device number 95 [ 1324.305762][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1324.313969][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1324.392928][T13483] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 1324.612930][T22568] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4934'. [ 1324.621915][T22568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4934'. [ 1325.419540][T22580] FAULT_INJECTION: forcing a failure. [ 1325.419540][T22580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1325.432767][T22580] CPU: 1 UID: 0 PID: 22580 Comm: syz.7.4938 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 1325.443521][T22580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1325.453570][T22580] Call Trace: [ 1325.456841][T22580] [ 1325.459766][T22580] dump_stack_lvl+0x16c/0x1f0 [ 1325.464455][T22580] should_fail_ex+0x497/0x5b0 [ 1325.469139][T22580] _copy_to_user+0x32/0xd0 [ 1325.473565][T22580] simple_read_from_buffer+0xd0/0x160 [ 1325.478941][T22580] proc_fail_nth_read+0x198/0x270 [ 1325.483970][T22580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1325.489523][T22580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1325.495076][T22580] vfs_read+0x1df/0xbe0 [ 1325.499231][T22580] ? __fget_files+0x1fc/0x3a0 [ 1325.503907][T22580] ? __pfx___mutex_lock+0x10/0x10 [ 1325.508939][T22580] ? __pfx_vfs_read+0x10/0x10 [ 1325.513621][T22580] ? __fget_files+0x206/0x3a0 [ 1325.518304][T22580] ksys_read+0x12b/0x250 [ 1325.522542][T22580] ? __pfx_ksys_read+0x10/0x10 [ 1325.527308][T22580] do_syscall_64+0xcd/0x250 [ 1325.531814][T22580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.537706][T22580] RIP: 0033:0x7f029318473c [ 1325.542117][T22580] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1325.561719][T22580] RSP: 002b:00007f0290ff6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1325.570131][T22580] RAX: ffffffffffffffda RBX: 00007f0293376160 RCX: 00007f029318473c [ 1325.578098][T22580] RDX: 000000000000000f RSI: 00007f0290ff60a0 RDI: 000000000000000a [ 1325.586068][T22580] RBP: 00007f0290ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1325.594030][T22580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1325.602000][T22580] R13: 0000000000000000 R14: 00007f0293376160 R15: 00007ffee0ae42a8 [ 1325.609979][T22580] [ 1326.412763][T19279] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1326.714230][T22585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4940'. [ 1327.193331][ T5864] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1327.194946][T13483] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 1327.391363][T22600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1327.869301][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.894327][T13208] usb 8-1: new low-speed USB device number 43 using dummy_hcd [ 1328.076205][T13208] usb 8-1: No LPM exit latency info found, disabling LPM. [ 1328.086175][T13208] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 1328.089177][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.107583][ T5864] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1328.116674][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.130231][ T5864] usb 2-1: config 0 descriptor?? [ 1328.153319][T13208] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 1328.197131][T13208] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 1328.264135][T14276] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1328.384752][T13208] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1328.394235][T13208] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.639224][T13208] usb 8-1: Product: 庯昡窵⩢欰蒜Ẓ쯘졢ᓯ뢅䌆퀚ఃᏃ➢綿蓘猪셿璴錰챼⾞䜶飇옣㇂嫙㝹퇃ኮ鮡拓舨춁Ꮓ∺㔧斩⌽봗ꞌזൖ讳解埘抭〖႐旓悹ꠐᑗ恗矟퐂뤂㺌ዊ辖괡좄혴␿잺廯⏒‌ጒ㐞弈መ㖗牽 [ 1328.665753][T13208] usb 8-1: Manufacturer: Ѓ [ 1328.670552][T13208] usb 8-1: SerialNumber: х [ 1329.224390][ T5864] hid (null): bogus close delimiter [ 1329.404850][ T5864] usb 2-1: language id specifier not provided by device, defaulting to English [ 1329.411893][T22601] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1329.613814][T22626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22626 comm=syz.8.4952 [ 1329.629549][T22626] netlink: 'syz.8.4952': attribute type 1 has an invalid length. [ 1329.887560][T22593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.032078][T22593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.043906][T13208] cdc_ncm 8-1:1.0: bind() failure [ 1330.049968][ T5864] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000F/input/input95 [ 1330.051837][T13208] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1330.100769][T13208] cdc_ncm 8-1:1.1: bind() failure [ 1330.123811][ T5864] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000F/input/input96 [ 1330.132566][T13208] usb 8-1: USB disconnect, device number 43 [ 1330.434102][ T6290] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1330.456918][ T5864] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000F/input/input97 [ 1330.607586][ T5864] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000F/input/input98 [ 1330.824808][ T5864] uclogic 0003:256C:006D.000F: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 1332.351887][T13483] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 1332.527301][ T5864] usb 2-1: USB disconnect, device number 98 [ 1332.534969][T22650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22650 comm=syz.1.4959 [ 1332.809248][T22650] netlink: 'syz.1.4959': attribute type 1 has an invalid length. [ 1332.905197][T22656] 9pnet_fd: Insufficient options for proto=fd [ 1332.955196][T22650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1333.021061][T19251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1333.058865][T22661] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4962'. [ 1333.069710][T22661] netlink: 'syz.2.4962': attribute type 39 has an invalid length. [ 1335.049793][T22674] program syz.7.4965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1336.881591][ T5817] Bluetooth: hci0: unexpected event for opcode 0x0c47 [ 1336.894503][T13483] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 1336.919177][T22700] program syz.1.4973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1337.104576][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1337.257046][T13483] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 1338.809066][ T6887] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1338.979308][ T5868] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1339.211916][T22728] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4983'. [ 1339.600999][ T5868] usb 9-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 1339.615698][ T5868] usb 9-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1339.851933][ T5868] usb 9-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 1339.866085][ T5868] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1340.024261][T22742] program syz.2.4988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1340.385006][T19251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1341.130415][ T5868] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1341.140170][ T5868] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.194176][T13483] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 1341.207209][ T5868] usb 9-1: Product: syz [ 1341.248616][ T5868] usb 9-1: Manufacturer: syz [ 1341.379283][T22762] program syz.7.4993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1341.533475][ T5868] usb 9-1: SerialNumber: syz [ 1341.742685][ T9] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1341.771479][ T5868] usb 9-1: can't set config #1, error -71 [ 1341.800969][T22766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22766 comm=syz.8.4996 [ 1341.826437][ T5868] usb 9-1: USB disconnect, device number 3 [ 1342.032243][T22770] netlink: 'syz.8.4996': attribute type 1 has an invalid length. [ 1342.256217][ T6887] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1342.330188][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1342.337085][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.354169][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1342.388949][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1342.441774][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1342.452605][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1342.462506][ T9] usb 1-1: SerialNumber: syz [ 1342.470692][T22756] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1342.478393][ T9] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1342.944591][ T29] audit: type=1400 audit(1734514526.368:29319): avc: denied { ioctl } for pid=22754 comm="syz.0.4994" path="socket:[77768]" dev="sockfs" ino=77768 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1343.561427][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1343.570114][ T9] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1343.578051][ T9] usb 1-1: USB disconnect, device number 92 [ 1343.713548][T22781] program syz.8.5000 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1344.112335][T13483] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 1344.684183][T13483] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 1344.760884][T22813] usb usb8: usbfs: process 22813 (syz.7.5011) did not claim interface 0 before use [ 1344.778822][ T5868] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1345.133925][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1345.165060][ T5868] usb 9-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 1345.179987][ T5868] usb 9-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 1345.212233][ T5868] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1345.338000][ T5868] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1345.347067][ T5868] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.355051][ T5868] usb 9-1: Product: syz [ 1345.359282][ T5868] usb 9-1: Manufacturer: syz [ 1345.363868][ T5868] usb 9-1: SerialNumber: syz [ 1346.435928][ T9] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 1346.601685][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.611972][ T9] usb 8-1: config 0 has no interfaces? [ 1346.618271][ T6887] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1346.622702][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1346.645482][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.654099][ T9] usb 8-1: Product: syz [ 1346.658514][ T9] usb 8-1: Manufacturer: syz [ 1346.664204][ T9] usb 8-1: SerialNumber: syz [ 1346.677724][ T9] usb 8-1: config 0 descriptor?? [ 1347.612399][ T5868] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1347.649869][ T5868] usb 9-1: USB disconnect, device number 4 [ 1347.698758][ T5868] usblp0: removed [ 1347.818189][T19279] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1348.210195][T22855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5024'. [ 1348.221699][T22851] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5016'. [ 1349.109087][T19439] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1349.912665][ T5867] usb 8-1: USB disconnect, device number 44 [ 1349.967811][T22881] ip6gre1: entered allmulticast mode [ 1350.718316][T19251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1351.407063][ T5868] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 1352.514068][T22914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5039'. [ 1352.711366][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1353.060732][ T5868] usb 1-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 1353.074753][T13208] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1353.579979][T13208] usb 2-1: Using ep0 maxpacket: 32 [ 1353.642972][T13208] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1353.712979][ T5868] usb 1-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 1353.730272][T22921] program syz.2.5043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1353.740836][ T5868] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1353.745178][T13208] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1353.777363][ T5868] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1353.779678][ T6887] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1353.786978][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.799739][T13208] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1353.820627][ T5868] usb 1-1: Product: syz [ 1353.825094][ T5868] usb 1-1: Manufacturer: syz [ 1353.830098][ T5868] usb 1-1: SerialNumber: syz [ 1354.143875][ T5868] usb 1-1: can't set config #1, error -71 [ 1354.154586][ T5864] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1354.162822][T13208] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1354.174541][ T5868] usb 1-1: USB disconnect, device number 93 [ 1354.178091][T13208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1354.272879][T13208] usb 2-1: SerialNumber: syz [ 1354.288641][T22905] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1354.298879][T13208] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1354.340320][ T5864] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.356501][ T5864] usb 9-1: config 0 has no interfaces? [ 1354.392943][ T5864] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1354.404365][ T5864] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.423806][ T5864] usb 9-1: Product: syz [ 1354.428604][ T5864] usb 9-1: Manufacturer: syz [ 1354.436957][ T5864] usb 9-1: SerialNumber: syz [ 1354.453309][ T5864] usb 9-1: config 0 descriptor?? [ 1354.464518][T13490] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1354.632828][T13208] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1354.711601][T13490] usb 8-1: Using ep0 maxpacket: 32 [ 1354.778432][T13490] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.789125][T13208] usb 2-1: USB disconnect, device number 99 [ 1354.801524][T13490] usb 8-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1354.822654][T13490] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.868341][T13490] usb 8-1: Product: syz [ 1354.881560][T13490] usb 8-1: Manufacturer: syz [ 1354.891976][T13490] usb 8-1: SerialNumber: syz [ 1355.020079][T19439] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1355.180886][T13490] usb 8-1: config 0 descriptor?? [ 1355.214087][T13490] usb 8-1: bad CDC descriptors [ 1355.219132][T13490] usb 8-1: unsupported MDLM descriptors [ 1355.684983][ T5868] usb 8-1: USB disconnect, device number 45 [ 1355.724388][T13483] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 1355.975641][ T29] audit: type=1400 audit(1734514538.668:29320): avc: denied { append } for pid=22952 comm="syz.0.5052" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1355.998584][ C1] vkms_vblank_simulate: vblank timer overrun [ 1356.395962][T19251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1356.558067][ T5864] usb 9-1: USB disconnect, device number 5 [ 1358.441893][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1359.373804][T13483] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 1359.784063][T19279] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1359.809295][T13490] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1359.970186][T13490] usb 8-1: Using ep0 maxpacket: 32 [ 1359.979584][T13490] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.991006][T13490] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1360.032656][T13490] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1360.074251][T13490] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1360.089934][T13490] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1360.108841][T13490] usb 8-1: SerialNumber: syz [ 1360.133050][T22989] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1360.141443][T13490] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 1360.184117][T13208] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1360.216068][ T5867] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1360.361185][T13208] usb 3-1: Using ep0 maxpacket: 16 [ 1360.374462][T13490] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 1360.381596][T13208] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1360.391851][ T5867] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.404239][ T5867] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1360.411134][T13208] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.421888][T13490] usb 8-1: USB disconnect, device number 46 [ 1360.437139][ T5867] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1360.446490][T13208] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1360.457196][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.466967][ T5867] usb 2-1: Product: syz [ 1360.473091][T13208] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1360.483324][ T5867] usb 2-1: Manufacturer: syz [ 1360.487920][ T5867] usb 2-1: SerialNumber: syz [ 1360.493009][T13208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.504487][T13208] usb 3-1: Product: syz [ 1360.509018][T13208] usb 3-1: Manufacturer: syz [ 1360.520226][T13208] usb 3-1: SerialNumber: syz [ 1360.766259][T23011] program syz.0.5067 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1361.028564][T19279] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1361.037058][T13208] usb 3-1: 0:2 : does not exist [ 1361.208580][T23015] input: syz0 as /devices/virtual/input/input101 [ 1361.258866][T23003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.272986][T23003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.800620][T23025] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5064'. [ 1361.994451][T23028] delete_channel: no stack [ 1362.065731][ T5868] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1362.234967][T19251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1362.495884][ T5868] usb 9-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 1362.507302][ T5868] usb 9-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1363.133791][T13208] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 1363.195414][T13208] usb 3-1: USB disconnect, device number 96 [ 1363.196386][ T5868] usb 9-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 1363.214501][ T5868] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1363.233045][ T5868] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1363.242289][ T5868] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.250286][ T5868] usb 9-1: Product: syz [ 1363.254491][ T5868] usb 9-1: Manufacturer: syz [ 1363.259081][ T5868] usb 9-1: SerialNumber: syz [ 1363.589673][ T9] usb 2-1: USB disconnect, device number 100 [ 1363.614770][T13483] Bluetooth: hci0: unexpected event for opcode 0x0c47 [ 1364.322904][T19251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1364.757357][T23058] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5071'. [ 1366.567801][ T3464] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1366.652695][ T5867] usb 9-1: USB disconnect, device number 6 [ 1366.689590][T23070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5083'. [ 1366.786678][ T29] audit: type=1326 audit(1734514548.771:29321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23073 comm="syz.8.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff361985d29 code=0x7ffc0000 [ 1366.811428][ T29] audit: type=1326 audit(1734514548.771:29322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23073 comm="syz.8.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff361985d29 code=0x7ffc0000 [ 1366.834971][ C1] vkms_vblank_simulate: vblank timer overrun [ 1366.862750][ T29] audit: type=1326 audit(1734514548.789:29323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23073 comm="syz.8.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff361985d29 code=0x7ffc0000 [ 1366.886316][ C1] vkms_vblank_simulate: vblank timer overrun [ 1366.915256][ T29] audit: type=1326 audit(1734514548.789:29324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23073 comm="syz.8.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff361985d29 code=0x7ffc0000 [ 1366.940791][ C1] vkms_vblank_simulate: vblank timer overrun [ 1366.971002][ T29] audit: type=1326 audit(1734514548.789:29325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23073 comm="syz.8.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff361985d29 code=0x7ffc0000 [ 1366.994554][ C1] vkms_vblank_simulate: vblank timer overrun [ 1367.004594][T20291] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 1367.049205][ T29] audit: type=1326 audit(1734514548.789:29326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23073 comm="syz.8.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff361985d29 code=0x7ffc0000 [ 1367.075465][ T29] audit: type=1326 audit(1734514548.789:29327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23073 comm="syz.8.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff361985d29 code=0x7ffc0000 [ 1367.099019][ C1] vkms_vblank_simulate: vblank timer overrun [ 1367.128139][ T29] audit: type=1326 audit(1734514548.789:29328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23073 comm="syz.8.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff361985d29 code=0x7ffc0000 [ 1367.151694][ C1] vkms_vblank_simulate: vblank timer overrun [ 1367.158176][ T29] audit: type=1326 audit(1734514548.827:29329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23073 comm="syz.8.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff361985d29 code=0x7ffc0000 [ 1367.182733][ T29] audit: type=1326 audit(1734514548.827:29330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23073 comm="syz.8.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff361985d29 code=0x7ffc0000 [ 1367.206271][ C1] vkms_vblank_simulate: vblank timer overrun [ 1367.242356][T20291] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.252606][T20291] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1367.260850][T20291] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1367.269958][T20291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.278627][T20291] usb 3-1: Product: syz [ 1367.283699][T20291] usb 3-1: Manufacturer: syz [ 1367.288474][T20291] usb 3-1: SerialNumber: syz [ 1367.529360][ T5864] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1367.806475][ T3487] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1367.919853][ T5864] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.977332][ T5864] usb 9-1: config 0 has no interfaces? [ 1367.986478][ T5864] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1368.032672][ T5864] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1368.040758][ T5864] usb 9-1: Manufacturer: syz [ 1368.067711][ T5864] usb 9-1: config 0 descriptor?? [ 1368.675155][T23103] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5085'. [ 1368.822102][ T5864] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1368.983787][ T5864] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1368.993855][ T6887] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1369.001780][ T5864] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.011518][ T5864] usb 8-1: config 0 descriptor?? [ 1369.019233][ T5864] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1369.174905][ T9] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 1369.347480][ T9] usb 2-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 1369.358697][ T9] usb 2-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1369.370586][ T9] usb 2-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 1369.383883][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1369.392245][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1369.401454][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.409537][ T9] usb 2-1: Product: syz [ 1369.413822][ T9] usb 2-1: Manufacturer: syz [ 1369.418482][ T9] usb 2-1: SerialNumber: syz [ 1369.448829][ T5864] gspca_cpia1: usb_control_msg 03, error -32 [ 1369.533676][T23107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1369.971789][ T5864] gspca_cpia1: usb_control_msg 03, error -71 [ 1369.986171][ T9] usb 9-1: USB disconnect, device number 7 [ 1369.994276][T20291] usb 3-1: USB disconnect, device number 97 [ 1369.997095][ T5864] gspca_cpia1: usb_control_msg 01, error -71 [ 1370.022765][ T5864] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0) [ 1370.053474][ T5864] usb 8-1: USB disconnect, device number 47 [ 1370.056614][T23110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5095'. [ 1370.179801][ T6887] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1370.206860][T23116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5098'. [ 1370.378942][T23114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5096'. [ 1370.450961][T13483] Bluetooth: hci0: unexpected event for opcode 0x0c47 [ 1370.641886][T23131] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5094'. [ 1370.671664][T20291] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1370.828016][T23132] delete_channel: no stack [ 1370.894791][T20291] usb 3-1: Using ep0 maxpacket: 32 [ 1370.907392][T20291] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1370.918522][T20291] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1371.034756][T20291] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1371.210609][T23136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23136 comm=syz.7.5102 [ 1371.224197][T23136] netlink: 'syz.7.5102': attribute type 29 has an invalid length. [ 1371.317992][T20291] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1371.327149][T20291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1371.343462][T20291] usb 3-1: SerialNumber: syz [ 1371.391414][T23122] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1371.416704][T20291] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1371.473747][T19251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1371.793766][T20291] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 1372.056280][T20291] usb 3-1: USB disconnect, device number 98 [ 1372.446298][ T9] usb 2-1: USB disconnect, device number 101 [ 1372.919654][ T3487] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1372.934890][T23153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5107'. [ 1372.958452][T23153] netlink: 'syz.0.5107': attribute type 7 has an invalid length. [ 1372.970022][T23153] netlink: 'syz.0.5107': attribute type 8 has an invalid length. [ 1372.980282][T23153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5107'. [ 1373.258032][T23153] gretap0: entered promiscuous mode [ 1373.269834][T23153] batadv_slave_1: entered promiscuous mode [ 1373.317438][T23163] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5110'. [ 1373.389938][T13483] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 1373.508037][T23173] delete_channel: no stack [ 1373.835913][ T5867] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1373.843478][T13208] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1373.929266][T23177] IPv6: Can't replace route, no match found [ 1373.994404][T23181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5116'. [ 1374.011683][T13208] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1374.020943][ T5867] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1374.037536][ T5867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.047977][T13208] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.068415][ T5867] usb 8-1: config 0 descriptor?? [ 1374.077871][T13208] usb 9-1: config 0 descriptor?? [ 1374.091164][ T5867] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1374.318256][ T6290] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1374.613825][T13208] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1374.642972][T13208] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1374.651299][T13208] [drm:udl_init] *ERROR* Selecting channel failed [ 1374.671364][T13208] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 1374.678121][T13208] [drm] Initialized udl on minor 2 [ 1374.688957][T13208] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1374.708214][T13208] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1374.717602][T20291] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1374.730372][T20291] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1374.740655][T13208] usb 9-1: USB disconnect, device number 8 [ 1375.187873][ T5867] gspca_cpia1: usb_control_msg 03, error -32 [ 1375.445324][T23167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1375.761125][T23204] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5121'. [ 1376.445268][ T3464] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1376.580129][ T5867] gspca_cpia1: usb_control_msg 03, error -110 [ 1376.587212][ T5867] gspca_cpia1: usb_control_msg 01, error -32 [ 1376.594418][ T5867] gspca_cpia1: usb_control_msg 01, error -32 [ 1376.600984][ T5867] gspca_cpia1: usb_control_msg 01, error -32 [ 1376.607312][ T5867] gspca_cpia1: usb_control_msg 01, error -32 [ 1376.613305][ T5867] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0) [ 1376.632870][T23210] sg_write: data in/out 107608802/136 bytes for SCSI command 0x0-- guessing data in; [ 1376.632870][T23210] program syz.2.5123 not setting count and/or reply_len properly [ 1376.884168][T23215] netlink: 'syz.8.5122': attribute type 1 has an invalid length. [ 1377.756271][T23213] block nbd2: shutting down sockets [ 1378.061997][ T6290] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1378.361807][T13208] usb 8-1: USB disconnect, device number 48 [ 1378.473717][ T5867] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1378.700188][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 1378.707278][ T5867] usb 2-1: too many configurations: 102, using maximum allowed: 8 [ 1378.722255][ T5867] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1378.730621][ T5867] usb 2-1: can't read configurations, error -61 [ 1379.619626][ T5867] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1379.897896][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 1380.162166][ T5867] usb 2-1: too many configurations: 102, using maximum allowed: 8 [ 1380.180150][ T5867] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1380.187899][ T5867] usb 2-1: can't read configurations, error -61 [ 1380.197220][ T5867] usb usb2-port1: attempt power cycle [ 1380.344493][T23247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5133'. [ 1380.489877][ T3464] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1381.576038][ T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1381.798688][T23269] program syz.1.5140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1381.888566][T19251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1382.059582][ T9] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1382.070154][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.089744][ T9] usb 3-1: config 0 descriptor?? [ 1382.102141][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1382.157636][T23271] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1382.431228][ T5864] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1382.602511][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 1382.645105][ T5867] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1382.646789][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1382.781011][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1382.793512][ T5864] usb 2-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 1382.803058][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.848588][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 1382.848938][ T5864] usb 2-1: config 0 descriptor?? [ 1382.894032][T23280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1382.911510][ T9] gspca_cpia1: usb_control_msg 03, error -32 [ 1383.050995][ T5867] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1383.062514][ T5867] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1383.083348][ T5867] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1383.336229][ T5867] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1383.345550][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1383.359508][ T5867] usb 1-1: SerialNumber: syz [ 1383.366585][ T6887] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1383.381515][ T9] gspca_cpia1: usb_control_msg 03, error -71 [ 1383.389986][ T9] gspca_cpia1: usb_control_msg 01, error -71 [ 1383.400698][T23275] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1383.412061][ T9] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1383.423731][ T5867] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1383.424550][ T9] usb 3-1: USB disconnect, device number 99 [ 1383.833478][ T5867] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1383.845701][ T5864] wacom 0003:056A:0325.0010: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.1-1/input0 [ 1383.872636][ T5867] usb 1-1: USB disconnect, device number 94 [ 1384.105377][ T5867] usb 2-1: USB disconnect, device number 105 [ 1384.298408][T13483] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 1384.494469][T13208] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1384.557316][T13483] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 1384.671406][T13208] usb 9-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 1384.695772][T13208] usb 9-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1384.697366][T19279] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1384.759886][T13208] usb 9-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 1384.789375][T13208] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1384.900350][T23302] delete_channel: no stack [ 1384.946862][T13208] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1384.956004][T13208] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.964929][T13208] usb 9-1: Product: syz [ 1384.969097][T13208] usb 9-1: Manufacturer: syz [ 1384.973690][T13208] usb 9-1: SerialNumber: syz [ 1385.089676][T23307] ip6gre1: entered allmulticast mode [ 1385.320459][ T5867] usb 8-1: new full-speed USB device number 49 using dummy_hcd [ 1385.532744][ T5867] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1385.542934][ T5867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.576254][ T5867] usb 8-1: config 0 descriptor?? [ 1385.708972][T23312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5154'. [ 1385.814149][ T5867] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1385.830606][ T5867] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1385.859646][T23289] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5146'. [ 1385.871725][ T5867] [drm:udl_init] *ERROR* Selecting channel failed [ 1385.927578][T19251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1386.267916][ T5867] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 1386.274789][ T5867] [drm] Initialized udl on minor 2 [ 1386.285567][ T5867] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1386.293564][ T5867] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1386.311073][T13490] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1386.319380][T13208] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1386.342547][ T5867] usb 8-1: USB disconnect, device number 49 [ 1386.354927][T13490] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1386.362816][T13490] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1386.391770][T13208] usb 9-1: USB disconnect, device number 9 [ 1386.402734][T13208] usblp0: removed [ 1386.984107][T23330] usb usb8: usbfs: process 23330 (syz.2.5158) did not claim interface 0 before use [ 1387.135154][ T9] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1387.296500][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1387.638416][ T9] usb 2-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 1387.650149][ T9] usb 2-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 1387.663580][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1387.758983][T23341] bridge0: port 3(erspan0) entered blocking state [ 1387.767232][T23341] bridge0: port 3(erspan0) entered disabled state [ 1387.775381][T23341] erspan0: entered allmulticast mode [ 1387.788213][T23341] erspan0: entered promiscuous mode [ 1387.799036][T23341] bridge0: port 3(erspan0) entered blocking state [ 1387.805569][T23341] bridge0: port 3(erspan0) entered forwarding state [ 1388.006315][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1388.016675][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.036594][ T9] usb 2-1: Product: syz [ 1388.044373][ T9] usb 2-1: Manufacturer: syz [ 1388.062111][ T9] usb 2-1: SerialNumber: syz [ 1388.157439][T23348] binder: BINDER_SET_CONTEXT_MGR already set [ 1388.164824][T23348] binder: 23346:23348 ioctl 4018620d 200001c0 returned -16 [ 1388.497013][ T5868] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1388.631843][ T5864] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1388.706789][ T5868] usb 8-1: Using ep0 maxpacket: 8 [ 1388.762534][T19279] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1388.819644][ T5868] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1388.829861][ T5868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.845629][ T5868] usb 8-1: Product: syz [ 1388.850914][ T5868] usb 8-1: Manufacturer: syz [ 1388.855592][ T5868] usb 8-1: SerialNumber: syz [ 1388.862701][ T5868] usb 8-1: config 0 descriptor?? [ 1388.976448][ T5864] usb 3-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 1388.987511][ T5864] usb 3-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1388.997441][ T5864] usb 3-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 1389.030103][ T5864] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1389.067037][ T5864] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1389.076692][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.084972][ T5864] usb 3-1: Product: syz [ 1389.089292][ T5864] usb 3-1: Manufacturer: syz [ 1389.094021][ T5864] usb 3-1: SerialNumber: syz [ 1389.145334][ T5868] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1390.057610][ T5864] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 100 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1390.071987][T23352] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5165'. [ 1390.128274][ T5864] usb 3-1: USB disconnect, device number 100 [ 1390.137345][ T5864] usblp0: removed [ 1390.214598][ T6887] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1390.735413][ T5868] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1390.747203][ T5868] usb 8-1: USB disconnect, device number 50 [ 1390.794447][T13483] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 1391.235463][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 106 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1391.691602][ T3464] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1391.692637][ T9] usb 2-1: USB disconnect, device number 106 [ 1391.724128][ T9] usblp0: removed [ 1391.760720][T23377] netlink: 'syz.0.5171': attribute type 10 has an invalid length. [ 1391.831505][T23381] netlink: 'syz.0.5171': attribute type 10 has an invalid length. [ 1391.841162][T23381] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5171'. [ 1391.901999][T23379] program syz.8.5172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1391.923104][T23377] batman_adv: batadv0: Adding interface: team0 [ 1391.930513][T23377] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1391.955738][T23377] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1392.123553][T23381] team0: entered promiscuous mode [ 1392.136315][T23381] team_slave_0: entered promiscuous mode [ 1392.148679][T23381] team_slave_1: entered promiscuous mode [ 1392.156550][T23381] 8021q: adding VLAN 0 to HW filter on device team0 [ 1392.163377][T23381] batman_adv: batadv0: Interface activated: team0 [ 1392.169862][T23381] batman_adv: batadv0: Interface deactivated: team0 [ 1392.176541][T23381] batman_adv: batadv0: Removing interface: team0 [ 1392.512414][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 1392.512429][ T29] audit: type=1400 audit(1734514572.455:29421): avc: denied { append } for pid=23374 comm="syz.0.5171" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1392.522207][T23385] FAULT_INJECTION: forcing a failure. [ 1392.522207][T23385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1392.559760][ T29] audit: type=1400 audit(1734514572.455:29422): avc: denied { map } for pid=23374 comm="syz.0.5171" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1392.911116][T23381] bridge0: port 4(team0) entered blocking state [ 1392.917398][T23381] bridge0: port 4(team0) entered disabled state [ 1392.929301][ T29] audit: type=1400 audit(1734514572.455:29423): avc: denied { execute } for pid=23374 comm="syz.0.5171" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1392.958208][T23391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5176'. [ 1392.967257][T23385] CPU: 0 UID: 0 PID: 23385 Comm: syz.7.5173 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 1392.978003][T23385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1392.988032][T23385] Call Trace: [ 1392.991282][T23385] [ 1392.994186][T23385] dump_stack_lvl+0x16c/0x1f0 [ 1392.998838][T23385] should_fail_ex+0x497/0x5b0 [ 1393.003492][T23385] _copy_to_user+0x32/0xd0 [ 1393.007898][T23385] simple_read_from_buffer+0xd0/0x160 [ 1393.013255][T23385] proc_fail_nth_read+0x198/0x270 [ 1393.018253][T23385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1393.023772][T23385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1393.029293][T23385] vfs_read+0x1df/0xbe0 [ 1393.033421][T23385] ? __fget_files+0x1fc/0x3a0 [ 1393.038070][T23385] ? __pfx___mutex_lock+0x10/0x10 [ 1393.043069][T23385] ? __pfx_vfs_read+0x10/0x10 [ 1393.047718][T23385] ? __fget_files+0x206/0x3a0 [ 1393.052369][T23385] ksys_read+0x12b/0x250 [ 1393.056579][T23385] ? __pfx_ksys_read+0x10/0x10 [ 1393.061315][T23385] do_syscall_64+0xcd/0x250 [ 1393.065790][T23385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.071656][T23385] RIP: 0033:0x7f029318473c [ 1393.076040][T23385] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1393.095618][T23385] RSP: 002b:00007f0293f0d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1393.104003][T23385] RAX: ffffffffffffffda RBX: 00007f0293375fa0 RCX: 00007f029318473c [ 1393.111946][T23385] RDX: 000000000000000f RSI: 00007f0293f0d0a0 RDI: 0000000000000004 [ 1393.119888][T23385] RBP: 00007f0293f0d090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.127829][T23385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.135770][T23385] R13: 0000000000000000 R14: 00007f0293375fa0 R15: 00007ffee0ae42a8 [ 1393.143718][T23385] [ 1393.150482][T23381] team0: entered allmulticast mode [ 1393.173552][T23381] team_slave_0: entered allmulticast mode [ 1393.179676][T23381] team_slave_1: entered allmulticast mode [ 1393.194829][T23381] bridge0: port 4(team0) entered blocking state [ 1393.201138][T23381] bridge0: port 4(team0) entered forwarding state [ 1393.207299][ T9] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1393.261996][T13483] Bluetooth: hci3: unexpected event for opcode 0x0c47 [ 1393.358094][T23402] XFS (nullb0): Invalid superblock magic number [ 1393.380470][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1393.389861][T23411] delete_channel: no stack [ 1393.396363][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.436323][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1393.660698][ T6290] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1393.950935][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1393.966360][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1393.975406][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1393.983442][ T9] usb 2-1: SerialNumber: syz [ 1393.990489][T23386] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1394.035409][ T9] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1394.213889][ T5868] usb 8-1: new full-speed USB device number 51 using dummy_hcd [ 1394.348490][ T9] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1394.409896][ T9] usb 2-1: USB disconnect, device number 107 [ 1394.597448][ T5868] usb 8-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 1394.670605][ T5868] usb 8-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 1394.693358][ T5868] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1394.701636][ T5868] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1394.711101][ T5868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.849627][ T5868] usb 8-1: Product: syz [ 1394.853868][ T5868] usb 8-1: Manufacturer: syz [ 1394.858456][ T5868] usb 8-1: SerialNumber: syz [ 1395.078973][T19279] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1396.413184][ T6887] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1396.425380][T13208] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1396.459285][T23434] program syz.8.5187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1396.629001][T13208] usb 2-1: Using ep0 maxpacket: 16 [ 1396.721088][T13208] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1396.755523][T13208] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.788529][T13208] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1396.830189][T13208] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1396.842226][T13208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.850222][T13208] usb 2-1: Product: syz [ 1396.862201][T13208] usb 2-1: Manufacturer: syz [ 1396.878558][T13208] usb 2-1: SerialNumber: syz [ 1397.215716][ T5868] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1397.245652][ T5868] usb 8-1: USB disconnect, device number 51 [ 1397.272928][ T51] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 1397.273692][ T5868] usblp0: removed [ 1397.343621][T13208] usb 2-1: 0:2 : does not exist [ 1397.472976][ T51] usb 3-1: Invalid ep0 maxpacket: 64 [ 1397.558513][T23431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.574576][T23431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.611898][ T51] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 1397.676557][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1397.793650][ T51] usb 3-1: Invalid ep0 maxpacket: 64 [ 1397.803882][ T51] usb usb3-port1: attempt power cycle [ 1398.173538][ T51] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 1398.212240][ T51] usb 3-1: Invalid ep0 maxpacket: 64 [ 1398.370921][ T51] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 1398.413837][ T51] usb 3-1: Invalid ep0 maxpacket: 64 [ 1398.419475][ T51] usb usb3-port1: unable to enumerate USB device [ 1398.847738][T13208] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 1398.899128][ T3487] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1399.285226][T13208] usb 2-1: USB disconnect, device number 108 [ 1399.443632][T23465] syzkaller0: entered promiscuous mode [ 1399.449418][T23465] syzkaller0: entered allmulticast mode [ 1399.478052][ T29] audit: type=1400 audit(1734514579.358:29424): avc: denied { connect } for pid=23467 comm="syz.7.5197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1399.543036][T23471] syzkaller0: create flow: hash 2980229033 index 1 [ 1399.559754][T23466] FAULT_INJECTION: forcing a failure. [ 1399.559754][T23466] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.577689][T23466] CPU: 1 UID: 0 PID: 23466 Comm: syz.8.5194 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 1399.588458][T23466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1399.598508][T23466] Call Trace: [ 1399.601785][T23466] [ 1399.604714][T23466] dump_stack_lvl+0x16c/0x1f0 [ 1399.609386][T23466] should_fail_ex+0x497/0x5b0 [ 1399.614052][T23466] ? fs_reclaim_acquire+0xae/0x150 [ 1399.619164][T23466] should_failslab+0xc2/0x120 [ 1399.623817][T23466] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 1399.629594][T23466] ? __alloc_skb+0x2b1/0x380 [ 1399.634175][T23466] __alloc_skb+0x2b1/0x380 [ 1399.638590][T23466] ? __pfx___alloc_skb+0x10/0x10 [ 1399.643506][T23466] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1399.649464][T23466] netlink_alloc_large_skb+0x69/0x130 [ 1399.654823][T23466] netlink_sendmsg+0x689/0xd70 [ 1399.659583][T23466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1399.664847][T23466] __sys_sendto+0x488/0x4f0 [ 1399.669327][T23466] ? __pfx___sys_sendto+0x10/0x10 [ 1399.674353][T23466] ? ksys_write+0x1ba/0x250 [ 1399.678855][T23466] ? __pfx_ksys_write+0x10/0x10 [ 1399.683697][T23466] __x64_sys_sendto+0xe0/0x1c0 [ 1399.688438][T23466] ? do_syscall_64+0x91/0x250 [ 1399.693093][T23466] ? lockdep_hardirqs_on+0x7c/0x110 [ 1399.698277][T23466] do_syscall_64+0xcd/0x250 [ 1399.702775][T23466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.708643][T23466] RIP: 0033:0x7ff361985d29 [ 1399.713030][T23466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1399.732610][T23466] RSP: 002b:00007ff3627ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1399.741003][T23466] RAX: ffffffffffffffda RBX: 00007ff361b76080 RCX: 00007ff361985d29 [ 1399.748960][T23466] RDX: 0000000000000078 RSI: 00000000200007c0 RDI: 0000000000000007 [ 1399.756903][T23466] RBP: 00007ff3627ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1399.764856][T23466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1399.772812][T23466] R13: 0000000000000000 R14: 00007ff361b76080 R15: 00007ffd5af09f38 [ 1399.780761][T23466] [ 1399.788283][T23464] syzkaller0: delete flow: hash 2980229033 index 1 [ 1400.270985][T19439] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1401.738455][T23496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1401.742000][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1402.968629][ T3464] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1403.888930][ T5868] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1403.904478][T23515] delete_channel: no stack [ 1404.166673][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 1404.181074][ T5868] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1404.201175][ T5868] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1404.218960][T16091] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1404.810308][ T5868] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1404.813332][ T3464] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1404.826468][ T5868] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1404.842916][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1404.851232][ T5868] usb 1-1: SerialNumber: syz [ 1404.950078][ T29] audit: type=1400 audit(1734514584.466:29425): avc: denied { getopt } for pid=23521 comm="syz.2.5215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1404.988606][T23509] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1404.996608][ T5868] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1405.329331][T16091] usb 8-1: Using ep0 maxpacket: 32 [ 1405.702883][T23524] lo speed is unknown, defaulting to 1000 [ 1405.709655][T16091] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1405.720607][T16091] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1405.732043][ T5868] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1405.774757][T16091] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1405.792017][ T5868] usb 1-1: USB disconnect, device number 95 [ 1405.823331][T16091] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1405.832394][T16091] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1405.840624][T16091] usb 8-1: SerialNumber: syz [ 1405.863792][T23517] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1405.872217][T16091] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 1405.907283][T23524] lo speed is unknown, defaulting to 1000 [ 1406.291112][T16091] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 1406.311145][T16091] usb 8-1: USB disconnect, device number 52 [ 1406.388956][T11233] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1406.501475][T23547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2323 sclass=netlink_route_socket pid=23547 comm=syz.0.5222 [ 1406.514096][ T29] audit: type=1400 audit(1734514585.934:29426): avc: denied { connect } for pid=23543 comm="syz.1.5221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1406.533850][ C0] vkms_vblank_simulate: vblank timer overrun [ 1406.685727][T23550] No control pipe specified [ 1406.944910][ T5867] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1406.987761][T20291] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 1407.158682][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 1407.165421][ T5867] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 80, using maximum allowed: 30 [ 1407.177060][T20291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1407.192653][T20291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1407.207927][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1407.236463][T20291] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1407.236759][ T5867] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1407.262359][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 80 [ 1407.299436][T20291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.325157][ T5867] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1408.356231][T16091] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1408.373501][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.750307][ T5867] usb 2-1: Product: syz [ 1408.781114][T20291] usb 1-1: config 0 descriptor?? [ 1408.869837][ T3464] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1408.889076][ T5867] usb 2-1: Manufacturer: syz [ 1408.894073][ T5867] usb 2-1: SerialNumber: syz [ 1408.903883][ T5867] usb 2-1: config 0 descriptor?? [ 1408.933232][T16091] usb 3-1: Using ep0 maxpacket: 8 [ 1408.939507][T16091] usb 3-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 1408.962825][T16091] usb 3-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 1408.983225][T16091] usb 3-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 1408.998114][T16091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.006102][T16091] usb 3-1: Product: syz [ 1409.011829][T16091] usb 3-1: Manufacturer: syz [ 1409.016673][T16091] usb 3-1: SerialNumber: syz [ 1409.027135][T16091] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 1409.051116][T16091] dvb-usb: bulk message failed: -22 (3/0) [ 1409.074093][T16091] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1409.084619][T16091] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 1409.101249][T16091] usb 3-1: media controller created [ 1409.115528][T16091] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1409.131175][T23544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5221'. [ 1409.132996][T16091] dvb-usb: bulk message failed: -22 (6/0) [ 1409.145952][T16091] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 1409.169297][T16091] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input105 [ 1409.181328][T16091] dvb-usb: schedule remote query interval to 150 msecs. [ 1409.188296][T16091] dvb-usb: bulk message failed: -22 (3/0) [ 1409.212556][T16091] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 1409.253197][T16091] usb 3-1: USB disconnect, device number 105 [ 1409.273394][T16091] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 1409.344801][T20291] isku 0003:1E7D:319C.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 1409.774637][T20291] usb 1-1: USB disconnect, device number 96 [ 1410.131334][T19439] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1410.242376][T23580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1410.547646][T16091] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1410.622367][ T9] usb 2-1: USB disconnect, device number 109 [ 1410.630767][T23589] FAULT_INJECTION: forcing a failure. [ 1410.630767][T23589] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.649292][T23589] CPU: 1 UID: 0 PID: 23589 Comm: syz.1.5237 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 1410.660051][T23589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1410.670078][T23589] Call Trace: [ 1410.673328][T23589] [ 1410.676233][T23589] dump_stack_lvl+0x16c/0x1f0 [ 1410.680886][T23589] should_fail_ex+0x497/0x5b0 [ 1410.685540][T23589] should_failslab+0xc2/0x120 [ 1410.690192][T23589] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1410.695536][T23589] ? skb_clone+0x190/0x3f0 [ 1410.699924][T23589] skb_clone+0x190/0x3f0 [ 1410.704144][T23589] netlink_deliver_tap+0xabd/0xd30 [ 1410.709236][T23589] netlink_unicast+0x5e1/0x7f0 [ 1410.713975][T23589] ? __pfx_netlink_unicast+0x10/0x10 [ 1410.719236][T23589] netlink_sendmsg+0x8b8/0xd70 [ 1410.723975][T23589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1410.729237][T23589] ____sys_sendmsg+0xaaf/0xc90 [ 1410.733973][T23589] ? copy_msghdr_from_user+0x10b/0x160 [ 1410.739400][T23589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1410.744666][T23589] ___sys_sendmsg+0x135/0x1e0 [ 1410.749314][T23589] ? __pfx____sys_sendmsg+0x10/0x10 [ 1410.754487][T23589] ? __pfx_lock_release+0x10/0x10 [ 1410.759503][T23589] ? trace_lock_acquire+0x14e/0x1f0 [ 1410.764688][T23589] ? __fget_files+0x206/0x3a0 [ 1410.769340][T23589] __sys_sendmsg+0x16e/0x220 [ 1410.773902][T23589] ? __pfx___sys_sendmsg+0x10/0x10 [ 1410.778992][T23589] do_syscall_64+0xcd/0x250 [ 1410.783470][T23589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.789337][T23589] RIP: 0033:0x7fbeb9f85d29 [ 1410.793722][T23589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1410.813314][T23589] RSP: 002b:00007fbeb7df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1410.821720][T23589] RAX: ffffffffffffffda RBX: 00007fbeba175fa0 RCX: 00007fbeb9f85d29 [ 1410.829673][T23589] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000004 [ 1410.837624][T23589] RBP: 00007fbeb7df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1410.845568][T23589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1410.853514][T23589] R13: 0000000000000000 R14: 00007fbeba175fa0 R15: 00007ffc1f1b7bd8 [ 1410.861467][T23589] [ 1410.943130][T16091] usb 9-1: Using ep0 maxpacket: 32 [ 1410.961667][T16091] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1410.975221][T16091] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1410.988238][T16091] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1411.008952][T16091] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1411.106247][T16091] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1411.307967][ T5867] usb 8-1: new full-speed USB device number 53 using dummy_hcd [ 1411.322039][T16091] usb 9-1: SerialNumber: syz [ 1411.447986][T23582] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1411.460943][T16091] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 1412.054868][ T5867] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1412.064636][ T5867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.112299][ T5867] usb 8-1: config 0 descriptor?? [ 1412.227794][ T6290] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1412.417295][T16091] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 1412.504390][T16091] usb 9-1: USB disconnect, device number 10 [ 1412.516654][ T5867] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1412.533138][T13483] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 1412.543737][ T5867] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1412.563804][ T5867] [drm:udl_init] *ERROR* Selecting channel failed [ 1412.572799][ T5867] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 1412.579661][ T5867] [drm] Initialized udl on minor 2 [ 1412.585178][ T5867] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1412.593307][ T5867] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1412.600998][T20291] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1412.609732][T20291] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1412.621835][ T5867] usb 8-1: USB disconnect, device number 53 [ 1412.674674][T23611] program syz.0.5242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1412.912840][T20291] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 1413.120974][T20291] usb 3-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 1413.370042][T20291] usb 3-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 1413.384184][T20291] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1413.410257][T20291] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1413.425665][T20291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.434666][T20291] usb 3-1: Product: syz [ 1413.438887][T20291] usb 3-1: Manufacturer: syz [ 1413.443725][T20291] usb 3-1: SerialNumber: syz [ 1413.576134][ T3523] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1414.053373][T23609] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5241'. [ 1415.003167][T23637] delete_channel: no stack [ 1415.272724][T16091] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1415.533870][T16091] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.629186][T16091] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1415.721914][T19251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1415.764197][T16091] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.884761][T16091] usb 8-1: config 0 descriptor?? [ 1416.093272][T23663] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5257'. [ 1416.133328][T16091] usbhid 8-1:0.0: can't add hid device: -71 [ 1416.139662][T16091] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1416.155323][T16091] usb 8-1: USB disconnect, device number 54 [ 1416.232751][T20291] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 106 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1416.245309][T20291] usb 3-1: USB disconnect, device number 106 [ 1416.252805][T20291] usblp0: removed [ 1416.386559][T23670] serio: Serial port pts6 [ 1416.900397][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1416.923239][T16091] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1417.589038][ T5868] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1417.678104][T16091] usb 8-1: Using ep0 maxpacket: 16 [ 1417.684474][T16091] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1417.699470][T16091] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1417.709156][T16091] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.720371][T16091] usb 8-1: config 0 descriptor?? [ 1417.753671][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 1417.766226][ T5868] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1417.796004][T16091] usbhid 8-1:0.0: can't add hid device: -71 [ 1417.801958][T16091] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1417.809718][ T5868] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.832470][ T29] audit: type=1326 audit(1734514596.523:29427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23693 comm="syz.7.5265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0293185d29 code=0x0 [ 1417.835259][ T5868] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1417.883005][T16091] usb 8-1: USB disconnect, device number 55 [ 1417.904757][ T5868] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1417.918862][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.924634][ T5867] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1417.928356][ T5868] usb 1-1: Product: syz [ 1417.944131][ T5868] usb 1-1: Manufacturer: syz [ 1417.945322][ T29] audit: type=1326 audit(1734514596.626:29428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23697 comm="syz.8.5267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff361985d29 code=0x0 [ 1417.951272][ T5868] usb 1-1: SerialNumber: syz [ 1417.971725][ C0] vkms_vblank_simulate: vblank timer overrun [ 1417.985786][ T29] audit: type=1326 audit(1734514596.673:29429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23693 comm="syz.7.5265" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0293185d29 code=0x0 [ 1418.205149][ T5867] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1418.393803][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1418.404257][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.420297][ T5867] usb 3-1: config 0 descriptor?? [ 1418.427379][ T5867] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1418.597725][T16091] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1418.638640][ T5868] usb 1-1: 0:2 : does not exist [ 1418.769835][T16091] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1418.783881][T16091] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1418.793600][T16091] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1418.810495][T16091] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1418.821044][T16091] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1418.834787][T16091] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.852670][T16091] usb 8-1: config 0 descriptor?? [ 1418.861060][T23679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.874527][T23679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.902105][ T5867] gspca_cpia1: usb_control_msg 03, error -32 [ 1418.959304][T23704] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1419.139191][T16091] hdpvr 8-1:0.0: firmware version 0x7c dated [ 1419.145843][T16091] hdpvr 8-1:0.0: untested firmware, the driver might not work. [ 1419.406191][ T5867] gspca_cpia1: usb_control_msg 03, error -71 [ 1419.415800][ T5867] gspca_cpia1: usb_control_msg 01, error -71 [ 1419.419725][T23706] syzkaller0: entered promiscuous mode [ 1419.424087][ T5867] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1419.427357][T23706] syzkaller0: entered allmulticast mode [ 1419.440141][ T5867] usb 3-1: USB disconnect, device number 107 [ 1419.613352][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1420.699906][ T5868] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 1420.724767][ T5868] usb 1-1: USB disconnect, device number 97 [ 1420.793142][T23713] cgroup: No subsys list or none specified [ 1420.810985][ T29] audit: type=1326 audit(1734514599.301:29430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23712 comm="syz.2.5269" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe3bb85d29 code=0x0 [ 1420.913172][T19439] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1421.466608][T16091] hdpvr 8-1:0.0: device init failed [ 1421.473970][T16091] hdpvr 8-1:0.0: probe with driver hdpvr failed with error -12 [ 1421.486864][T16091] usb 8-1: USB disconnect, device number 56 [ 1422.150350][T23727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5273'. [ 1422.212185][T19251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1423.102107][T23733] program syz.2.5275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1423.156826][T23735] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5276'. [ 1423.373508][T13483] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 1424.082315][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1424.278620][T20291] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1424.445272][T20291] usb 3-1: Using ep0 maxpacket: 16 [ 1424.452547][T20291] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1424.465112][T20291] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1424.475453][T20291] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1424.486011][T20291] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1424.496444][T20291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.500889][T16091] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1424.506630][T20291] usb 3-1: Product: syz [ 1424.516321][T20291] usb 3-1: Manufacturer: syz [ 1424.520990][T20291] usb 3-1: SerialNumber: syz [ 1424.694836][T16091] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1424.709404][T16091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.726312][T16091] usb 2-1: config 0 descriptor?? [ 1424.740019][T16091] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1424.980881][T20291] usb 3-1: 0:2 : does not exist [ 1425.103311][ T29] audit: type=1400 audit(1734514603.323:29431): avc: denied { mounton } for pid=23755 comm="syz.8.5284" path="/70/file0/bus" dev="ramfs" ino=80891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1425.126372][T23758] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1425.348315][T23749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.749668][T23758] overlayfs: failed to set xattr on upper [ 1425.756572][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1426.008738][T16091] gspca_cpia1: usb_control_msg 03, error -32 [ 1426.054685][T23749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.060556][T23758] overlayfs: ...falling back to redirect_dir=nofollow. [ 1426.206952][T23758] overlayfs: ...falling back to metacopy=off. [ 1426.241504][T23758] overlayfs: ...falling back to index=off. [ 1426.247301][T23758] overlayfs: ...falling back to uuid=null. [ 1426.301290][T23769] FAULT_INJECTION: forcing a failure. [ 1426.301290][T23769] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.337526][T23769] CPU: 1 UID: 0 PID: 23769 Comm: syz.0.5285 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 1426.348298][T23769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1426.358334][T23769] Call Trace: [ 1426.361598][T23769] [ 1426.364508][T23769] dump_stack_lvl+0x16c/0x1f0 [ 1426.369179][T23769] should_fail_ex+0x497/0x5b0 [ 1426.373867][T23769] should_failslab+0xc2/0x120 [ 1426.378543][T23769] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1426.383893][T23769] ? skb_clone+0x190/0x3f0 [ 1426.388292][T23769] skb_clone+0x190/0x3f0 [ 1426.392540][T23769] netlink_deliver_tap+0xabd/0xd30 [ 1426.397661][T23769] netlink_unicast+0x5e1/0x7f0 [ 1426.402427][T23769] ? __pfx_netlink_unicast+0x10/0x10 [ 1426.407708][T23769] netlink_sendmsg+0x8b8/0xd70 [ 1426.412454][T23769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1426.417732][T23769] ____sys_sendmsg+0xaaf/0xc90 [ 1426.422483][T23769] ? copy_msghdr_from_user+0x10b/0x160 [ 1426.427922][T23769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1426.433202][T23769] ___sys_sendmsg+0x135/0x1e0 [ 1426.437859][T23769] ? __pfx____sys_sendmsg+0x10/0x10 [ 1426.443062][T23769] ? __pfx_lock_release+0x10/0x10 [ 1426.448074][T23769] ? trace_lock_acquire+0x14e/0x1f0 [ 1426.453283][T23769] ? __fget_files+0x206/0x3a0 [ 1426.457942][T23769] __sys_sendmsg+0x16e/0x220 [ 1426.462509][T23769] ? __pfx___sys_sendmsg+0x10/0x10 [ 1426.467607][T23769] do_syscall_64+0xcd/0x250 [ 1426.472110][T23769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.477991][T23769] RIP: 0033:0x7f820fd85d29 [ 1426.482391][T23769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1426.501993][T23769] RSP: 002b:00007f8210ca3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1426.510384][T23769] RAX: ffffffffffffffda RBX: 00007f820ff75fa0 RCX: 00007f820fd85d29 [ 1426.518335][T23769] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 1426.526295][T23769] RBP: 00007f8210ca3090 R08: 0000000000000000 R09: 0000000000000000 [ 1426.534241][T23769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1426.542199][T23769] R13: 0000000000000000 R14: 00007f820ff75fa0 R15: 00007ffc269cd358 [ 1426.550158][T23769] [ 1426.609351][T16091] gspca_cpia1: usb_control_msg 03, error -71 [ 1426.633836][T16091] gspca_cpia1: usb_control_msg 01, error -71 [ 1426.644690][T16091] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1426.660686][T16091] usb 2-1: USB disconnect, device number 110 [ 1426.718873][T23772] program syz.0.5287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1427.302679][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1427.349695][ T6290] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1427.427958][ T5864] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 1427.623741][ T5864] usb 9-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 1427.635859][ T5864] usb 9-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 1427.686795][ T5864] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1427.932888][T20291] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 1427.934379][ T5864] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1427.967379][ T5864] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.967622][T20291] usb 3-1: USB disconnect, device number 108 [ 1427.978749][ T5864] usb 9-1: Product: syz [ 1427.989349][ T5864] usb 9-1: Manufacturer: syz [ 1427.994859][ T5864] usb 9-1: SerialNumber: syz [ 1428.660271][T23796] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5289'. [ 1428.687044][T23798] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1428.743701][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1428.767304][T23804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1428.798805][T23802] FAULT_INJECTION: forcing a failure. [ 1428.798805][T23802] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.803399][ T29] audit: type=1804 audit(1734514606.784:29432): pid=23805 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.5294" name="/newroot/525/file1" dev="fuse" ino=1 res=1 errno=0 [ 1428.823176][T23802] CPU: 1 UID: 0 PID: 23802 Comm: syz.7.5294 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 1428.844659][T23802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1428.853521][ T29] audit: type=1800 audit(1734514606.784:29433): pid=23805 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.5294" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1428.854697][T23802] Call Trace: [ 1428.854706][T23802] [ 1428.854714][T23802] dump_stack_lvl+0x16c/0x1f0 [ 1428.886709][T23802] should_fail_ex+0x497/0x5b0 [ 1428.891391][T23802] ? fs_reclaim_acquire+0xae/0x150 [ 1428.896514][T23802] should_failslab+0xc2/0x120 [ 1428.901191][T23802] __kmalloc_noprof+0xcb/0x510 [ 1428.905949][T23802] ima_write_template_field_data+0x56/0x1f0 [ 1428.911837][T23802] ima_eventname_init_common+0x1b9/0x270 [ 1428.917459][T23802] ? __pfx_ima_eventname_init_common+0x10/0x10 [ 1428.923605][T23802] ? trace_kmalloc+0x2d/0xd0 [ 1428.928187][T23802] ? __kmalloc_noprof+0x23b/0x510 [ 1428.933205][T23802] ima_alloc_init_template+0x399/0x720 [ 1428.938660][T23802] ima_add_violation+0x12d/0x3d0 [ 1428.943586][T23802] ? __pfx_ima_add_violation+0x10/0x10 [ 1428.949033][T23802] ? ima_d_path+0x12c/0x2a0 [ 1428.953528][T23802] ? __pfx_ima_d_path+0x10/0x10 [ 1428.958370][T23802] ? __pfx_down_write+0x10/0x10 [ 1428.963213][T23802] process_measurement+0x172f/0x2370 [ 1428.968503][T23802] ? avc_has_perm_noaudit+0x143/0x3a0 [ 1428.973876][T23802] ? __pfx_process_measurement+0x10/0x10 [ 1428.979500][T23802] ? __pfx_avc_has_perm+0x10/0x10 [ 1428.984513][T23802] ? __pfx_lock_release+0x10/0x10 [ 1428.989526][T23802] ? avc_has_perm_noaudit+0x61/0x3a0 [ 1428.994817][T23802] ? file_map_prot_check+0x1eb/0x360 [ 1429.000089][T23802] ima_file_mmap+0x140/0x1d0 [ 1429.004669][T23802] ? __pfx_ima_file_mmap+0x10/0x10 [ 1429.009763][T23802] ? find_held_lock+0x2d/0x110 [ 1429.014518][T23802] security_mmap_file+0x8bd/0x990 [ 1429.019530][T23802] vm_mmap_pgoff+0xdb/0x360 [ 1429.024028][T23802] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1429.029130][T23802] ? __fget_files+0x206/0x3a0 [ 1429.033796][T23802] ksys_mmap_pgoff+0x32c/0x5c0 [ 1429.038547][T23802] ? __pfx_ksys_write+0x10/0x10 [ 1429.043387][T23802] __x64_sys_mmap+0x125/0x190 [ 1429.048053][T23802] do_syscall_64+0xcd/0x250 [ 1429.052547][T23802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.058425][T23802] RIP: 0033:0x7f0293185d29 [ 1429.062823][T23802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1429.082416][T23802] RSP: 002b:00007f0293f0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1429.090815][T23802] RAX: ffffffffffffffda RBX: 00007f0293375fa0 RCX: 00007f0293185d29 [ 1429.098766][T23802] RDX: 0000000000000006 RSI: 0000000000002000 RDI: 0000000020000000 [ 1429.106718][T23802] RBP: 00007f0293f0d090 R08: 0000000000000007 R09: 0000000000000000 [ 1429.114668][T23802] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 1429.122620][T23802] R13: 0000000000000000 R14: 00007f0293375fa0 R15: 00007ffee0ae42a8 [ 1429.130583][T23802] [ 1429.171786][ T29] audit: type=1804 audit(1734514607.130:29434): pid=23802 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.5294" name="/newroot/525/file1" dev="fuse" ino=1 res=0 errno=0 [ 1429.212452][ T29] audit: type=1804 audit(1734514607.130:29435): pid=23802 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.5294" name="/newroot/525/file1" dev="fuse" ino=1 res=1 errno=0 [ 1429.223950][ T5867] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1429.244139][ T29] audit: type=1800 audit(1734514607.130:29436): pid=23802 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.5294" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1429.491282][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 1429.501770][ T5867] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1429.511160][ T5867] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.525802][ T5867] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1429.540737][ T5867] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1429.550002][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.558530][ T5867] usb 1-1: Product: syz [ 1429.563028][ T5867] usb 1-1: Manufacturer: syz [ 1429.567727][ T5867] usb 1-1: SerialNumber: syz [ 1429.752953][T23812] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5299'. [ 1430.002060][T13483] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 1430.027495][ T5867] usb 1-1: 0:2 : does not exist [ 1430.264296][T23795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.276276][ T5864] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1430.287637][ T3523] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1430.293723][T23795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.362879][ T5864] usb 9-1: USB disconnect, device number 11 [ 1430.380692][ T5864] usblp0: removed [ 1431.764714][ T6290] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1432.592060][ T5867] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 1432.824758][T23841] syz.2.5307: attempt to access beyond end of device [ 1432.824758][T23841] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1432.840158][T23841] syz.2.5307: attempt to access beyond end of device [ 1432.840158][T23841] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1432.854149][T23841] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1432.894555][T23841] syz.2.5307: attempt to access beyond end of device [ 1432.894555][T23841] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1432.901519][T20291] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1432.915794][T23841] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1432.930894][T23841] syz.2.5307: attempt to access beyond end of device [ 1432.930894][T23841] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1432.944327][T23841] syz.2.5307: attempt to access beyond end of device [ 1432.944327][T23841] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1432.957664][T23841] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1432.970124][T23841] syz.2.5307: attempt to access beyond end of device [ 1432.970124][T23841] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1432.983344][T23841] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1433.063950][T23841] syz.2.5307: attempt to access beyond end of device [ 1433.063950][T23841] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1433.129955][ T5867] usb 1-1: USB disconnect, device number 98 [ 1433.196457][T23841] syz.2.5307: attempt to access beyond end of device [ 1433.196457][T23841] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 1433.210176][T23841] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1433.219697][T23841] syz.2.5307: attempt to access beyond end of device [ 1433.219697][T23841] nbd2: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 1433.240269][T23843] program syz.1.5308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1433.276862][T23841] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1433.283043][T23847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5310'. [ 1433.287430][T23841] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1433.408401][T20291] usb 9-1: Using ep0 maxpacket: 16 [ 1433.418597][T20291] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1433.430934][T20291] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.458173][T23852] usb usb8: usbfs: process 23852 (syz.0.5311) did not claim interface 0 before use [ 1433.629695][T20291] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1433.715949][T19251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1433.781019][T20291] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1433.798286][ T29] audit: type=1400 audit(1734514611.452:29437): avc: denied { sqpoll } for pid=23855 comm="syz.2.5312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1433.829542][T20291] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.848337][T20291] usb 9-1: Product: syz [ 1433.858708][T20291] usb 9-1: Manufacturer: syz [ 1433.863978][T20291] usb 9-1: SerialNumber: syz [ 1433.907282][T23856] Process accounting resumed [ 1434.377519][ T5864] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1434.540276][T20291] usb 9-1: 0:2 : does not exist [ 1434.564757][ T5864] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1434.574613][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.587707][ T5864] usb 2-1: config 0 descriptor?? [ 1434.711524][T23836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.723103][T23836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.989012][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 1435.125864][ T6290] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1435.221466][T13208] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1435.596697][T13208] usb 8-1: device descriptor read/64, error -71 [ 1435.852387][T13208] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1436.108704][T13208] usb 8-1: device descriptor read/64, error -71 [ 1436.168464][T20291] usb 9-1: 1:0: failed to get current value for ch 0 (-22) [ 1436.201607][T20291] usb 9-1: USB disconnect, device number 12 [ 1436.237407][T13208] usb usb8-port1: attempt power cycle [ 1436.434813][ T5864] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1436.459017][ T5864] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1436.486072][ T5864] [drm:udl_init] *ERROR* Selecting channel failed [ 1436.512547][ T5864] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1436.533696][ T5864] [drm] Initialized udl on minor 2 [ 1436.552256][ T5864] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1436.571456][ T5864] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1436.587888][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1436.596142][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1436.606204][ T5864] usb 2-1: USB disconnect, device number 111 [ 1436.632596][T13208] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1436.657489][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1436.667732][T13208] usb 8-1: device descriptor read/8, error -71 [ 1436.949443][T13208] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1437.050880][T13208] usb 8-1: device descriptor read/8, error -71 [ 1437.168588][T13208] usb usb8-port1: unable to enumerate USB device [ 1437.306081][T13208] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1437.487827][T13208] usb 8-1: device descriptor read/64, error -71 [ 1437.819233][T13208] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1437.958231][T13208] usb 8-1: device descriptor read/64, error -71 [ 1438.034797][ T3523] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1438.087221][T13208] usb usb8-port1: attempt power cycle [ 1438.347491][T13483] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 1438.850760][ T29] audit: type=1401 audit(1734514616.185:29438): op=setxattr invalid_context="" [ 1439.231527][ T6290] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1440.049709][ T5864] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1440.182846][T16091] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1440.229679][ T5864] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1440.249370][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.270767][ T5864] usb 3-1: config 0 descriptor?? [ 1440.363636][T16091] usb 1-1: Using ep0 maxpacket: 16 [ 1440.381061][T16091] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1440.615777][T23944] FAULT_INJECTION: forcing a failure. [ 1440.615777][T23944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1440.629794][T23944] CPU: 0 UID: 0 PID: 23944 Comm: syz.8.5337 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 1440.640548][T23944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1440.650591][T23944] Call Trace: [ 1440.653858][T23944] [ 1440.656781][T23944] dump_stack_lvl+0x16c/0x1f0 [ 1440.661455][T23944] should_fail_ex+0x497/0x5b0 [ 1440.666136][T23944] _copy_from_user+0x2e/0xd0 [ 1440.670728][T23944] copy_msghdr_from_user+0x99/0x160 [ 1440.675919][T23944] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1440.681730][T23944] ___sys_sendmsg+0xff/0x1e0 [ 1440.686312][T23944] ? __pfx____sys_sendmsg+0x10/0x10 [ 1440.691512][T23944] ? __pfx_lock_release+0x10/0x10 [ 1440.696531][T23944] ? trace_lock_acquire+0x14e/0x1f0 [ 1440.701737][T23944] ? __fget_files+0x206/0x3a0 [ 1440.706415][T23944] __sys_sendmsg+0x16e/0x220 [ 1440.710997][T23944] ? __pfx___sys_sendmsg+0x10/0x10 [ 1440.716114][T23944] do_syscall_64+0xcd/0x250 [ 1440.720618][T23944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.726507][T23944] RIP: 0033:0x7ff361985d29 [ 1440.730912][T23944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1440.750513][T23944] RSP: 002b:00007ff3627ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1440.758919][T23944] RAX: ffffffffffffffda RBX: 00007ff361b76160 RCX: 00007ff361985d29 [ 1440.766881][T23944] RDX: 9590f6cc3aa711f2 RSI: 0000000020000040 RDI: 0000000000000003 [ 1440.774843][T23944] RBP: 00007ff3627ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1440.782804][T23944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1440.790762][T23944] R13: 0000000000000000 R14: 00007ff361b76160 R15: 00007ffd5af09f38 [ 1440.798737][T23944] [ 1441.250905][T16091] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.293004][T16091] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1441.348008][T16091] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1441.357057][T16091] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.369723][T16091] usb 1-1: Product: syz [ 1441.373908][T16091] usb 1-1: Manufacturer: syz [ 1441.380947][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1441.609178][T23948] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5338'. [ 1442.282346][T16091] usb 1-1: SerialNumber: syz [ 1442.875963][T16091] usb 1-1: 0:2 : does not exist [ 1443.095550][T23934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.108537][T13483] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 1443.137274][T23934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.662699][T23963] usb usb8: usbfs: process 23963 (syz.7.5343) did not claim interface 0 before use [ 1443.714964][ T29] audit: type=1400 audit(1734514620.722:29439): avc: denied { bind } for pid=23969 comm="syz.1.5345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1443.789131][ T29] audit: type=1400 audit(1734514620.722:29440): avc: denied { write } for pid=23969 comm="syz.1.5345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1443.953385][ T6290] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1444.040186][ T5864] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1444.068209][ T5864] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1444.078788][T23979] FAULT_INJECTION: forcing a failure. [ 1444.078788][T23979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1444.094675][T23979] CPU: 1 UID: 0 PID: 23979 Comm: syz.7.5347 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 1444.105440][T23979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1444.115477][T23979] Call Trace: [ 1444.118738][T23979] [ 1444.121652][T23979] dump_stack_lvl+0x16c/0x1f0 [ 1444.126322][T23979] should_fail_ex+0x497/0x5b0 [ 1444.130988][T23979] _copy_from_user+0x2e/0xd0 [ 1444.135571][T23979] copy_msghdr_from_user+0x99/0x160 [ 1444.140751][T23979] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1444.146547][T23979] ___sys_sendmsg+0xff/0x1e0 [ 1444.151120][T23979] ? __pfx____sys_sendmsg+0x10/0x10 [ 1444.156307][T23979] ? __pfx_lock_release+0x10/0x10 [ 1444.161313][T23979] ? trace_lock_acquire+0x14e/0x1f0 [ 1444.166503][T23979] ? __fget_files+0x206/0x3a0 [ 1444.171177][T23979] __sys_sendmsg+0x16e/0x220 [ 1444.175754][T23979] ? __pfx___sys_sendmsg+0x10/0x10 [ 1444.180860][T23979] do_syscall_64+0xcd/0x250 [ 1444.185369][T23979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.191247][T23979] RIP: 0033:0x7f0293185d29 [ 1444.195643][T23979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1444.215234][T23979] RSP: 002b:00007f0293f0d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1444.223628][T23979] RAX: ffffffffffffffda RBX: 00007f0293375fa0 RCX: 00007f0293185d29 [ 1444.231582][T23979] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1444.239535][T23979] RBP: 00007f0293f0d090 R08: 0000000000000000 R09: 0000000000000000 [ 1444.247489][T23979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1444.255442][T23979] R13: 0000000000000000 R14: 00007f0293375fa0 R15: 00007ffee0ae42a8 [ 1444.263404][T23979] [ 1444.266485][ C1] vkms_vblank_simulate: vblank timer overrun [ 1444.273255][ T5864] [drm:udl_init] *ERROR* Selecting channel failed [ 1444.331453][ T5864] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1444.339331][ T5864] [drm] Initialized udl on minor 2 [ 1444.353901][ T5864] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1444.420973][ T5864] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1444.445393][ T5869] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1444.456093][ T5869] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1444.464695][ T5864] usb 3-1: USB disconnect, device number 109 [ 1444.499907][T13483] Bluetooth: unknown link type 37 [ 1444.505133][T13483] Bluetooth: hci2: connection err: -111 [ 1444.512090][T13483] Bluetooth: hci2: unexpected event for opcode 0x1e41 [ 1445.111018][T16091] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 1445.129809][T16091] usb 1-1: USB disconnect, device number 99 [ 1445.356233][T19251] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1445.373369][ T5864] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1445.382404][ T5869] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1445.548507][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 1445.573288][ T5864] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 1445.582223][ T5864] usb 3-1: config 0 has no interface number 0 [ 1445.588336][ T5864] usb 3-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1445.614092][ T5869] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.631586][ T5864] usb 3-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1445.644049][ T5869] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1445.658892][ T5864] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1445.672518][ T5864] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1445.682931][ T5864] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1445.693464][ T5864] usb 3-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1445.707157][ T5869] usb 9-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=fd.bf [ 1446.029336][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.078527][ T5869] usb 9-1: Product: syz [ 1446.082738][ T5869] usb 9-1: Manufacturer: syz [ 1446.087484][ T5869] usb 9-1: SerialNumber: syz [ 1446.381669][ T5869] usb 9-1: USB disconnect, device number 13 [ 1446.389963][ T5864] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1446.399120][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.407137][ T5864] usb 3-1: Product: syz [ 1446.411298][ T5864] usb 3-1: Manufacturer: syz [ 1446.415961][ T5864] usb 3-1: SerialNumber: syz [ 1446.421928][ T5864] usb 3-1: config 0 descriptor?? [ 1446.428187][T23981] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1446.438898][T23981] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1446.510727][T13490] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1446.680854][ T5864] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz) [ 1446.682063][T13490] usb 2-1: Using ep0 maxpacket: 32 [ 1446.688937][ T5864] etas_es58x 3-1:0.219: could not retrieve the product info string [ 1446.708960][T13490] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1446.715601][ T5864] usb 3-1: USB disconnect, device number 110 [ 1446.726890][ T5864] etas_es58x 3-1:0.219: Disconnecting syz syz [ 1446.738266][T13490] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1446.759542][T13490] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1446.789791][T13490] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1446.802078][T13490] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1446.811832][ T6290] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1446.818669][T13490] usb 2-1: SerialNumber: syz [ 1446.833121][T24001] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1446.840790][T13490] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1446.926800][T13483] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 1447.097141][T13490] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1447.114513][T13490] usb 2-1: USB disconnect, device number 112 [ 1447.121268][T16091] usb 8-1: new full-speed USB device number 64 using dummy_hcd [ 1447.549758][T16091] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1447.559100][T16091] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.578338][T16091] usb 8-1: config 0 descriptor?? [ 1447.656964][T24023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5362'. [ 1447.986499][ T6290] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1448.310396][T16091] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1448.328721][T16091] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1448.348657][T16091] [drm:udl_init] *ERROR* Selecting channel failed [ 1448.363918][T16091] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 1448.387491][T16091] [drm] Initialized udl on minor 2 [ 1448.403361][T16091] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1448.418874][T16091] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1448.537990][ T5864] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1448.545947][T16091] usb 8-1: USB disconnect, device number 64 [ 1448.552291][ T5864] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1449.085457][T13483] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 1449.192026][ T30] INFO: task syz.4.4810:22102 blocked for more than 143 seconds. [ 1449.203088][ T30] Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 1449.266441][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1449.277134][ T30] task:syz.4.4810 state:D stack:26048 pid:22102 tgid:22102 ppid:15673 flags:0x00000004 [ 1449.303859][ T30] Call Trace: [ 1449.307583][ T30] [ 1449.311097][ T30] __schedule+0xe58/0x5ad0 [ 1449.321727][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1449.356350][ T30] ? __lock_acquire+0x15a9/0x3c40 [ 1449.424028][ T30] ? __pfx___schedule+0x10/0x10 [ 1449.438797][ T30] ? schedule+0x298/0x350 [ 1449.453175][ T30] ? __pfx_lock_release+0x10/0x10 [ 1449.469032][ T30] ? lock_acquire+0x2f/0xb0 [ 1449.482625][ T30] ? schedule+0x1fd/0x350 [ 1449.486980][ T30] schedule+0xe7/0x350 [ 1449.491051][ T30] schedule_timeout+0x244/0x280 [ 1449.514685][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1449.520102][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1449.525308][ T30] __wait_for_common+0x3e1/0x600 [ 1449.541188][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1449.546575][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 1449.562832][ T30] vhost_task_stop+0x79/0xe0 [ 1449.567425][ T30] kvm_mmu_pre_destroy_vm+0x44/0x60 [ 1449.578832][ T30] kvm_put_kvm+0x23e/0xb40 [ 1449.583257][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1449.599224][ T30] ? __pfx_kvm_vm_release+0x10/0x10 [ 1449.610950][ T30] kvm_vm_release+0x3c/0x50 [ 1449.615474][ T30] __fput+0x3f8/0xb60 [ 1449.630259][ T30] task_work_run+0x14e/0x250 [ 1449.642972][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1449.653689][ T30] ? __pfx___do_sys_close_range+0x10/0x10 [ 1449.664356][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1449.669986][ T30] do_syscall_64+0xda/0x250 [ 1449.685214][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.696421][ T30] RIP: 0033:0x7f0a58b85d29 [ 1449.700826][ T30] RSP: 002b:00007ffd631278e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1449.728540][ T30] RAX: 0000000000000000 RBX: 00007f0a58d77ba0 RCX: 00007f0a58b85d29 [ 1449.739182][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1449.747146][ T30] RBP: 00007f0a58d77ba0 R08: 0000000000000000 R09: 00007ffd63127bdf [ 1449.771269][ T30] R10: 00007f0a58d77ac0 R11: 0000000000000246 R12: 000000000012793f [ 1449.790039][ T30] R13: 00007ffd631279f0 R14: 0000000000000032 R15: ffffffffffffffff [ 1449.808309][ T30] [ 1449.811371][ T30] [ 1449.811371][ T30] Showing all locks held in the system: [ 1449.819246][ T30] 1 lock held by khungtaskd/30: [ 1449.825096][ T30] #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 1449.835500][ T30] 2 locks held by kworker/u8:8/3523: [ 1449.840783][ T30] #0: ffff8880b863ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1449.850894][ T30] #1: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d6/0x5a0 [ 1449.860441][ T30] 2 locks held by getty/5567: [ 1449.865118][ T30] #0: ffff888031c3e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1449.869536][T19439] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1449.875077][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 1449.893071][ T30] 3 locks held by kworker/u8:14/19439: [ 1449.898525][ T30] #0: ffff8880b863ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1449.908660][ T30] #1: ffffc9000bf67d80 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1449.921298][ T30] #2: ffff8880b863ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1449.931288][ T30] 1 lock held by syz.8.5366/24032: [ 1449.936738][ T30] 2 locks held by syz.1.5369/24038: [ 1449.942326][ T30] #0: ffff888061c6ee08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 1449.952921][ T30] #1: ffffffff8e1c7238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 1449.963007][ T30] 2 locks held by syz.0.5371/24049: [ 1449.968269][ T30] #0: ffff88805c5e80c8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x33/0x130 [ 1449.979014][ T30] #1: ffffffff8e1c7238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 1449.989079][ T30] [ 1449.991402][ T30] ============================================= [ 1449.991402][ T30] [ 1449.999995][ T30] NMI backtrace for cpu 1 [ 1450.004318][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 1450.014814][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1450.024857][ T30] Call Trace: [ 1450.028130][ T30] [ 1450.031053][ T30] dump_stack_lvl+0x116/0x1f0 [ 1450.035730][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1450.040654][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1450.046618][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1450.052581][ T30] watchdog+0xf14/0x1240 [ 1450.056825][ T30] ? __pfx_watchdog+0x10/0x10 [ 1450.061491][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1450.066674][ T30] ? __kthread_parkme+0x148/0x220 [ 1450.071685][ T30] ? __pfx_watchdog+0x10/0x10 [ 1450.076345][ T30] kthread+0x2c1/0x3a0 [ 1450.080396][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1450.085576][ T30] ? __pfx_kthread+0x10/0x10 [ 1450.090151][ T30] ret_from_fork+0x45/0x80 [ 1450.094552][ T30] ? __pfx_kthread+0x10/0x10 [ 1450.099126][ T30] ret_from_fork_asm+0x1a/0x30 [ 1450.103888][ T30] [ 1450.107033][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1450.112241][ C0] NMI backtrace for cpu 0 [ 1450.112251][ C0] CPU: 0 UID: 0 PID: 19439 Comm: kworker/u8:14 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 1450.112268][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1450.112277][ C0] Workqueue: bat_events batadv_nc_worker [ 1450.112298][ C0] RIP: 0010:lock_release+0x129/0x6f0 [ 1450.112316][ C0] Code: 0f 85 d6 02 00 00 65 4c 8b 35 73 1f 8d 7e 49 8d be dc 0a 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 <48> 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 50 05 00 00 41 [ 1450.112329][ C0] RSP: 0018:ffffc9000bf67ac8 EFLAGS: 00000a03 [ 1450.112340][ C0] RAX: dffffc0000000000 RBX: 1ffff920017ecf5b RCX: ffffffff8176b929 [ 1450.112349][ C0] RDX: 0000000000000000 RSI: ffffffff8bd1e8a0 RDI: ffff888026acd35c [ 1450.112359][ C0] RBP: ffffffff905f62f4 R08: 0000000000000000 R09: fffffbfff20be5fa [ 1450.112368][ C0] R10: ffffffff905f2fd7 R11: 0000000000000002 R12: ffffffff8e1bb900 [ 1450.112377][ C0] R13: 0000000000000001 R14: ffff888026acc880 R15: dffffc0000000000 [ 1450.112386][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1450.112401][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1450.112411][ C0] CR2: 0000001b2f9f0ff8 CR3: 000000007bc1e000 CR4: 00000000003526f0 [ 1450.112420][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1450.112429][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1450.112437][ C0] Call Trace: [ 1450.112442][ C0] [ 1450.112448][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1450.112463][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1450.112477][ C0] ? nmi_handle+0x1ac/0x5d0 [ 1450.112492][ C0] ? lock_release+0x129/0x6f0 [ 1450.112506][ C0] ? default_do_nmi+0x6a/0x160 [ 1450.112520][ C0] ? exc_nmi+0x170/0x1e0 [ 1450.112532][ C0] ? end_repeat_nmi+0xf/0x53 [ 1450.112554][ C0] ? lock_release+0xa9/0x6f0 [ 1450.112569][ C0] ? lock_release+0x129/0x6f0 [ 1450.112583][ C0] ? lock_release+0x129/0x6f0 [ 1450.112598][ C0] ? lock_release+0x129/0x6f0 [ 1450.112612][ C0] [ 1450.112617][ C0] [ 1450.112622][ C0] ? batadv_nc_worker+0x887/0x1060 [ 1450.112640][ C0] ? __pfx_lock_release+0x10/0x10 [ 1450.112653][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1450.112673][ C0] ? batadv_nc_worker+0x164/0x1060 [ 1450.112691][ C0] ? lock_acquire+0x2f/0xb0 [ 1450.112704][ C0] ? batadv_nc_worker+0x164/0x1060 [ 1450.112723][ C0] batadv_nc_worker+0x88c/0x1060 [ 1450.112744][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1450.112762][ C0] ? rcu_is_watching+0x12/0xc0 [ 1450.112780][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1450.112799][ C0] ? process_one_work+0x921/0x1ba0 [ 1450.112814][ C0] ? lock_acquire+0x2f/0xb0 [ 1450.112828][ C0] ? process_one_work+0x921/0x1ba0 [ 1450.112844][ C0] process_one_work+0x9c5/0x1ba0 [ 1450.112862][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1450.112880][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1450.112894][ C0] ? rcu_is_watching+0x12/0xc0 [ 1450.112914][ C0] ? assign_work+0x1a0/0x250 [ 1450.112929][ C0] worker_thread+0x6c8/0xf00 [ 1450.112950][ C0] ? __kthread_parkme+0x148/0x220 [ 1450.112971][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1450.112988][ C0] kthread+0x2c1/0x3a0 [ 1450.113009][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1450.113026][ C0] ? __pfx_kthread+0x10/0x10 [ 1450.113045][ C0] ret_from_fork+0x45/0x80 [ 1450.113059][ C0] ? __pfx_kthread+0x10/0x10 [ 1450.113078][ C0] ret_from_fork_asm+0x1a/0x30 [ 1450.113103][ C0] [ 1450.113454][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1450.113464][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 1450.113481][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1450.113490][ T30] Call Trace: [ 1450.113496][ T30] [ 1450.113502][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1450.113524][ T30] panic+0x71d/0x800 [ 1450.113546][ T30] ? __pfx_panic+0x10/0x10 [ 1450.113568][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1450.113587][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1450.113602][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1450.113619][ T30] ? watchdog+0xd7e/0x1240 [ 1450.113638][ T30] ? watchdog+0xd71/0x1240 [ 1450.113658][ T30] watchdog+0xd8f/0x1240 [ 1450.113680][ T30] ? __pfx_watchdog+0x10/0x10 [ 1450.113697][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1450.113717][ T30] ? __kthread_parkme+0x148/0x220 [ 1450.113739][ T30] ? __pfx_watchdog+0x10/0x10 [ 1450.113768][ T30] kthread+0x2c1/0x3a0 [ 1450.113787][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1450.113804][ T30] ? __pfx_kthread+0x10/0x10 [ 1450.113825][ T30] ret_from_fork+0x45/0x80 [ 1450.113839][ T30] ? __pfx_kthread+0x10/0x10 [ 1450.113860][ T30] ret_from_fork_asm+0x1a/0x30 [ 1450.113890][ T30] [ 1450.577146][ T30] Kernel Offset: disabled [ 1450.581443][ T30] Rebooting in 86400 seconds..