last executing test programs: 2m26.649667968s ago: executing program 4 (id=1625): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003840)=ANY=[@ANYBLOB="4400000040000701feffffff00000000017c00000400d7002800018006000600800a000008001100", @ANYBLOB="14001900fe800000000000000000000000000019040002"], 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2m26.509920309s ago: executing program 4 (id=1626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 2m24.233449843s ago: executing program 4 (id=1650): socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) r4 = syz_open_pts(r3, 0x20800) dup3(r4, r3, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x44) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0xff7a, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m23.134122729s ago: executing program 4 (id=1657): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) r4 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x20000000, 0x0, 0x0, {0x40, 0x3, 0x6, 0x6c1, 0x1000, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0x1440348, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7fffffff}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) write$tcp_congestion(r6, 0x0, 0x0) r7 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r8, 0x289e0cb5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 2m22.133502323s ago: executing program 4 (id=1664): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001800000004000000", 0x1c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file2\x00'}) faccessat(r4, &(0x7f0000000100)='./file1\x00', 0x1b4) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000140)) setpgid(0x0, r5) userfaultfd(0x80001) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf258600000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000890) 2m18.268557074s ago: executing program 4 (id=1686): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000010003704fdffffff0006000000000000", @ANYRES32=0x0, @ANYBLOB="831401000000000008001280080b010e670665000c0002e20f483f4b9ddf26a9"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) setrlimit(0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x4040880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000006c0)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000005c0)="805bfdc63ba40925ec3a57203d012737f59fcb743ec07c6b9cb6989c4b06b38e7998df303ec88a7146ed2af53163dcf611d28a807c7068287264355f86880c6162c8e921360c0453b155e9f7f88655f2f05d226e34e1980cd78f13fa0fe9c48f578949d7cf0155634527c7ec0a243ae7d089e4173d542a6e4297481270951661890f3602847deacca94daed65fdc147d5749", 0x92}], 0x1, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x18, 0x1, 0x1, [r5, r4]}}], 0x30, 0x20000850}}], 0x1, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCSTI(r6, 0x5412, 0x0) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000040)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r8 = syz_io_uring_setup(0x4687, &(0x7f0000000440)={0x0, 0x9cae, 0x40, 0x400005, 0xd8}, &(0x7f0000000100), &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYRES64, @ANYRES16=r6, @ANYBLOB="83c1473645432aa3d164e624b07e23316e33fb5d93d190e7dc90a96ea0bc9a410d01e1c0f469c6367284f6398e8c2a715c3b7add649217f5290feaffe91de4f6f6983fb69ea0ee1fce1b90fe5b5355377de67953555215027722c99b68caf9e5d861f661dcec65cf2e4ba9343cc79c97d45a12924c5f79520bf71c4d96c326e1f0bcdeb6bcbe5241be468239e3b21cdea141", @ANYRESDEC=r2, @ANYRES8=r1, @ANYRES64=0x0, @ANYRES32=r8, @ANYRES64=r7], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0xd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r9}, 0x18) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) 2m3.077477108s ago: executing program 32 (id=1686): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000010003704fdffffff0006000000000000", @ANYRES32=0x0, @ANYBLOB="831401000000000008001280080b010e670665000c0002e20f483f4b9ddf26a9"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) setrlimit(0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x4040880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000006c0)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000005c0)="805bfdc63ba40925ec3a57203d012737f59fcb743ec07c6b9cb6989c4b06b38e7998df303ec88a7146ed2af53163dcf611d28a807c7068287264355f86880c6162c8e921360c0453b155e9f7f88655f2f05d226e34e1980cd78f13fa0fe9c48f578949d7cf0155634527c7ec0a243ae7d089e4173d542a6e4297481270951661890f3602847deacca94daed65fdc147d5749", 0x92}], 0x1, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x18, 0x1, 0x1, [r5, r4]}}], 0x30, 0x20000850}}], 0x1, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCSTI(r6, 0x5412, 0x0) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000040)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r8 = syz_io_uring_setup(0x4687, &(0x7f0000000440)={0x0, 0x9cae, 0x40, 0x400005, 0xd8}, &(0x7f0000000100), &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYRES64, @ANYRES16=r6, @ANYBLOB="83c1473645432aa3d164e624b07e23316e33fb5d93d190e7dc90a96ea0bc9a410d01e1c0f469c6367284f6398e8c2a715c3b7add649217f5290feaffe91de4f6f6983fb69ea0ee1fce1b90fe5b5355377de67953555215027722c99b68caf9e5d861f661dcec65cf2e4ba9343cc79c97d45a12924c5f79520bf71c4d96c326e1f0bcdeb6bcbe5241be468239e3b21cdea141", @ANYRESDEC=r2, @ANYRES8=r1, @ANYRES64=0x0, @ANYRES32=r8, @ANYRES64=r7], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0xd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r9}, 0x18) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) 2m1.979558809s ago: executing program 2 (id=1769): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32dbb0664a5f747d7deda3fa0b7327bd49eb067a0689fff2a4", 0x2b}], 0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 2m1.491605935s ago: executing program 2 (id=1770): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000080000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r3, r1, 0x25, 0x0, @val=@perf_event={0x7}}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) 2m1.009388905s ago: executing program 2 (id=1774): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) close(r0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000240)={0x31, 0x1, 0x2, "1c13ebdaf2f20d55802b21b14fd75a206da058e85b2197edb143991cc200", 0x32314d48}) 2m0.855668724s ago: executing program 2 (id=1775): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtaction={0x414, 0x30, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{0x194, 0x1, [@m_tunnel_key={0x118, 0x1a, 0x0, 0x0, {{0xf}, {0x88, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x81}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xb2, 0x2, 0x10000000, 0x8, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}]}, {0x61, 0x6, "c312ab00b3fa0611e11fdf1bb1fa86b83c4f620fd746df6fbea74a854dfbefd2a10942993c0a99adeedfcb91773c3ee01328cb2e4e68b30632810cd6999f298e142b2f9d10de7514cd0ce3761380aa479f3efe6b8a826f7e65f74e62df"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x78, 0x0, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x3d, 0x6, "d163f6c93b573df1fce013facc0b2d41b91286207e933eda8b52342b14c68dc2fbd8f3873c3bed1f8321bfbc3c82bc144ba67394cfb39f1edb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x26c, 0x1, [@m_csum={0x70, 0xd, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x3, 0xffffffffffffffff, 0x3826, 0x4}, 0x75}}]}, {0x25, 0x6, "d59c4dea64047abc781cdade027d6af3faf1e97a01b7fe5ceac18ed920546bcea1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0xec, 0x8, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0xffff180a, 0x69fcd63bbe26cbff, 0x10000, 0x8}}, @TCA_DEF_DATA={0x9, 0x3, '&#^$\x00'}, @TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x6e, 0x0, 0x1, 0x8}}]}, {0x59, 0x6, "61bd2f92553d49ff0064dc4d4077b00a8374ead6ab19fc7f7e0926ffd9d10fbdc40768ec4a3d553891910d36ed3e8711744df5553112104a29f30aef9b099419bd979ec1698fa26a0c176795a3bf6594900e6b5e79"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0xb0, 0xf, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5000000, 0x7fff, 0x0, 0x7, 0x822}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0x39, 0x6, "d8ee70fe030339f19165d0bdde6047bc7ab9e117270103abddfbfcafe985d740747ef7b85080860ae44e6dac20a81e8998722a413b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}]}, {0x1e, 0x6, "e3c8cd6145ac54c800495af10313154c5d4e742d1e03b4148226"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x414}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020259040e9e0000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) 2m0.618857076s ago: executing program 2 (id=1778): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x8000000000000001, 0xe3d}, 0x3}, 0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x5, 0x9, 0x7ff, 0x3}, 0x6}, 0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1a, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYRESDEC=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x2f08, 0x17f, 0x0, &(0x7f0000000a80)="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", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffff9}, 0x27) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 2m0.478167564s ago: executing program 2 (id=1780): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32dbb0664a5f747d7deda3fa0b7327bd49eb067a0689fff2a4", 0x2b}], 0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 1m45.091493575s ago: executing program 33 (id=1780): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32dbb0664a5f747d7deda3fa0b7327bd49eb067a0689fff2a4", 0x2b}], 0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 13.047876999s ago: executing program 3 (id=2215): futex_waitv(&(0x7f00000011c0)=[{0x2, &(0x7f0000000000)=0xeaa, 0x2}, {0x1, &(0x7f0000000080)=0x4, 0x2}, {0x6, &(0x7f0000000140)=0x1, 0x82}, {0x1000, &(0x7f0000000180)=0x2872, 0x2}, {0x2, &(0x7f00000001c0)=0x8000000000000001, 0x82}, {0x4, &(0x7f0000000200)=0x6, 0x2}, {0x9, &(0x7f0000000240)=0xaa3, 0x2}, {0x5, &(0x7f0000000280)=0x5, 0x2}, {0x3e, &(0x7f00000002c0)=0x7, 0x82}, {0x67e, &(0x7f0000000300)=0x9}, {0x8000, &(0x7f0000000340)=0x1, 0x2}, {0xd, &(0x7f0000000380)=0x1ff, 0x82}, {0x2, &(0x7f00000003c0), 0x82}, {0x0, &(0x7f0000000400)=0x5}, {0x3, &(0x7f0000000440)=0x5c8}, {0x8, &(0x7f0000000480)=0x2, 0x2}, {0x3, &(0x7f00000004c0)=0x401, 0x82}, {0x4, &(0x7f0000000500)=0x2f75, 0x83}, {0x100000000, &(0x7f0000000540)=0x9, 0x2}, {0x7, &(0x7f0000000580)=0xfffffffffffffffa, 0x82}, {0x8, &(0x7f00000005c0)=0x8, 0x2}, {0x5, &(0x7f0000000600)=0x6, 0x82}, {0x1, &(0x7f0000000640)=0xfff, 0x2}, {0x3, &(0x7f0000000680)=0x2, 0x82}, {0x8000000000000001, &(0x7f00000006c0)=0xfffffffffffffff8, 0x82}, {0x0, &(0x7f0000000700)=0x8, 0x82}, {0x9, &(0x7f0000000740)=0x9, 0x82}, {0x8001, &(0x7f0000000780)=0x8, 0x2}, {0x9, &(0x7f00000007c0)=0x9, 0x2}, {0x4, &(0x7f0000000800)=0x3, 0x2}, {0x2, &(0x7f0000000840)=0x200, 0x82}, {0x5, &(0x7f0000000880)=0x7, 0x943143e971c48b2c}, {0x0, &(0x7f00000008c0)=0x4}, {0x10000, &(0x7f0000000900)=0x10, 0x2}, {0x10, &(0x7f0000000940)=0xffff, 0x82}, {0x0, &(0x7f0000000980)=0x2, 0x2}, {0x1, &(0x7f00000009c0)=0x6, 0x82}, {0x85, &(0x7f0000000a00)=0x6, 0x2}, {0x1, &(0x7f0000000a40)=0x2, 0x82}, {0x2, &(0x7f0000000a80)=0x2, 0x82}, {0x7, &(0x7f0000000ac0)=0x3, 0x82}, {0x2, &(0x7f0000000b00)=0x8, 0x82}, {0x1, &(0x7f0000000b40)=0x5, 0x2}, {0xffffffffffffff01, &(0x7f0000000b80)=0x7, 0x82}, {0x8, &(0x7f0000000bc0)=0x5, 0x2}, {0x9, &(0x7f0000000c00)=0x80, 0x2}, {0xbd8, &(0x7f0000000c40)=0xaa18, 0x82}, {0xa, &(0x7f0000000c80)=0x5, 0x2}, {0x6, &(0x7f0000000cc0)=0x9, 0x82}, {0x9, &(0x7f0000000d00)=0x6000, 0x2}, {0x80000001, &(0x7f0000000d40)=0xfffffffffffffffa, 0x2}, {0xf, &(0x7f0000000d80)=0x8, 0x80}, {0x9, &(0x7f0000000dc0)=0x3ff, 0x82}, {0x89, &(0x7f0000000e00)=0x7, 0x82}, {0x0, &(0x7f0000000e40)=0x63e8ced6, 0x41}, {0x0, &(0x7f0000000e80)=0x2, 0x2}, {0x8, &(0x7f0000000ec0)=0xff, 0x82}, {0x5, &(0x7f0000000f00)=0xf, 0x82}, {0x3, &(0x7f0000000f40)=0x7ff, 0x2}, {0x0, &(0x7f0000000f80)=0x1, 0x82}, {0x1, &(0x7f0000000fc0)=0x4, 0x82}, {0xc23, &(0x7f0000001000), 0x82}, {0x461a, &(0x7f0000001040)=0x4, 0x82}, {0x100000000, &(0x7f0000001080)=0x3ff, 0x82}, {0x5, &(0x7f0000001100)=0xfffffffffffffffb, 0x2}, {0x3, &(0x7f0000001140)=0xa69d, 0x2}, {0x6, &(0x7f0000001180)=0x4, 0x2}], 0x43, 0x0, &(0x7f0000001840), 0x1) r0 = socket$netlink(0x10, 0x3, 0x6) (async) io_setup(0xdda, &(0x7f00000000c0)=0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) (async) syz_emit_ethernet(0x19, &(0x7f00000001c0)={@link_local, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@x25={0x8100, {0x2, 0x0, 0xfb}}}}, 0x0) io_pgetevents(r1, 0x1000009, 0x5, &(0x7f0000001b80)=[{}, {}, {}, {}, {}], &(0x7f0000001c40), &(0x7f0000001cc0)={&(0x7f0000001c80)={[0x3]}, 0x8}) (async) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) (async) shutdown(r3, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0xffff, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) (async) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000003060103000105000001000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004900), 0x0, 0x20, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x28}}], 0x1, 0x4000005) (async) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/6, 0x6}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 11.463959062s ago: executing program 6 (id=2220): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c64d2, &(0x7f0000000180)={r7, 0x80000}) 10.766156775s ago: executing program 0 (id=2223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) bind$xdp(r4, &(0x7f0000000100), 0x10) 10.593591399s ago: executing program 3 (id=2224): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4008032, 0xffffffffffffffff, 0xffffe000) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)=0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x9, 0x6b8200) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000280), &(0x7f0000000400)=0x30) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async) io_setup(0x8, &(0x7f0000000340)=0x0) (async) r6 = eventfd2(0x3, 0x800) io_submit(r5, 0x3, &(0x7f0000000a40)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, r2, 0x0, 0x0, 0x6, 0x0, 0x1, r6}, 0x0, 0x0]) (async) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000002240)={0xffffffff, [0x2f3, 0x7, 0x8], [{0x9, 0xb, 0x1, 0x1, 0x1}, {0x9, 0xa6df, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x0, 0x0, 0x0, 0x1}, {0x7fffffff, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xfffffff7, 0x9}, {0xffffffff, 0xffffffff, 0x1, 0x1, 0x1, 0x1}, {0xb5a4, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x21cc, 0x1, 0x1, 0x0, 0x1, 0x1}, {0xac00, 0x2, 0x1, 0x0, 0x1}, {0x1d, 0x81, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x85, 0x0, 0x1}], 0x8}) (async) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x29, 0x0) (async) r7 = accept4$x25(r2, &(0x7f0000002340), &(0x7f0000002380)=0x12, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r7, 0x89ea, &(0x7f0000000000)) (async) setsockopt$inet_buf(r1, 0x0, 0x27, &(0x7f0000000180)="09f3c867ee560ffab528fd5cb7d0d9f6000000000000006525326d4052eb2d9580aa453b72abeb3f0602292422be8d59f9ab00035eef0d9d00a466e098b60c000000df855c00000000", 0xfffffffffffffdf2) unshare(0x6a040000) socket$netlink(0x10, 0x3, 0xb) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r8, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x5, 0x4, 0x8a0f, 0x7fff, 0x200]}, &(0x7f0000000080)=0x78) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40300c000000008000fde2b8d928129cc680"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000380)={0x40, 0x18, 0x28, "fea454b6be399664cb5dc5694f0784caac4e942ab860a54146931560110d6c29c6c5cbda1cd0dc7d"}, 0x0, 0x0, 0x0, 0x0}) 9.939493788s ago: executing program 1 (id=2226): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 9.76439705s ago: executing program 0 (id=2227): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000047c0)=@newtfilter={0x5c98, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c68, 0x2, [@TCA_BASIC_ACT={0x1594, 0x3, [@m_police={0x1590, 0x18, 0x0, 0x0, {{0xb}, {0x14a8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x6ca}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x0, 0x81, 0x7a535867, 0x5, 0x2, 0x9, 0x55, 0x0, 0x4, 0x7fff, 0x6d3, 0x80000001, 0x7, 0x2, 0xfd, 0x7, 0x7, 0x8, 0x1b, 0x2, 0x0, 0x8, 0x68f, 0x3ff, 0x8, 0xa4, 0x4, 0x4, 0x2, 0x2, 0x3, 0x2, 0x4, 0x0, 0x8000, 0x1000, 0x7fff, 0x7, 0xfffffff7, 0x0, 0x8031, 0x9, 0x8, 0x9, 0x0, 0x2d, 0x5, 0x101, 0x7fffffff, 0x1, 0x7, 0x7, 0xc3, 0x7, 0x56, 0x8, 0xfffffff8, 0x0, 0x7fff, 0x1, 0x2, 0x9, 0x5e30a429, 0xc6, 0x3, 0x3, 0x4, 0x4, 0x5, 0x511f, 0x9, 0x3, 0x4, 0x1, 0x0, 0x9, 0x3, 0x5, 0x4, 0x8, 0x400, 0x47b, 0x1, 0x2, 0x800, 0x1, 0xff3f, 0x1e1, 0x2, 0x4, 0x7, 0x72b, 0x8, 0x1c00000, 0x75, 0x2, 0x9, 0x7, 0x4, 0x5c370478, 0x2, 0x8, 0x3, 0x8, 0x3, 0x5, 0x1, 0x4, 0x3, 0x3, 0xffffff00, 0xfffffff7, 0x2, 0xaf2, 0x4, 0x3eee, 0x8000, 0xb, 0x800, 0x5, 0xffff4eec, 0x8, 0x2, 0xa3, 0x101, 0x5, 0x70d9, 0xfffffffc, 0x9, 0x28, 0x6, 0xabec, 0x8000, 0x6, 0xb, 0x1, 0x9, 0x101, 0x7, 0x1, 0xe0000000, 0x81, 0x4, 0x0, 0xfffffffd, 0x9, 0x400, 0x9, 0x2, 0x5, 0x5, 0x40, 0x4, 0x9, 0x3, 0x2, 0x29d6, 0x1, 0x7, 0x4d, 0x7, 0x4, 0xe298, 0xfffffff3, 0x4f, 0x44, 0x6, 0x9, 0xd, 0x3, 0x80000001, 0xffffffff, 0x5, 0x9, 0x4, 0x4, 0x74f7, 0x400, 0x3, 0x10000, 0xffffffff, 0x401, 0x40, 0x1, 0xc26c, 0x7f, 0x5, 0xfffffffc, 0x3, 0x902, 0x4c, 0x1, 0x6, 0x2, 0x5, 0x0, 0x2, 0x7, 0x0, 0x6, 0x6, 0x80000000, 0x5, 0xfffffffb, 0xe, 0x10000, 0x0, 0xffff, 0xe, 0x6, 0xa, 0x5, 0x38c6, 0x6, 0x5, 0x8001, 0x8, 0x1, 0x39539bf9, 0x3, 0x8, 0x80000001, 0xffffff80, 0x0, 0x7, 0x7, 0x4, 0x6, 0xfffffff5, 0xffffff71, 0xb, 0x3, 0xfffffff9, 0x1000, 0x2, 0x8, 0x5, 0x0, 0x6, 0x3, 0xe, 0x5, 0x8, 0x0, 0x0, 0x7fffffff, 0xa, 0x3, 0x7ff, 0x3, 0x4000000, 0x80000001, 0x5, 0x4, 0x62]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9bc1, 0x3, 0xffffff80, 0x7, 0x2, 0x25, 0x10, 0x2, 0x10000, 0xffff, 0x3aa906af, 0x3, 0x4, 0xffffffff, 0x1a34, 0x9, 0x5, 0x2, 0x96, 0x86, 0xfffffff7, 0xdbe4, 0x0, 0x101, 0x800, 0x56, 0x3, 0x9, 0xfffffff9, 0x1, 0x0, 0x1, 0x5, 0x2, 0x5, 0x5, 0x1c, 0x8, 0xfffffffb, 0x6, 0x5, 0x3, 0x10, 0x4, 0x7, 0x10, 0x1, 0x6, 0x1, 0xf, 0x7853c3ca, 0x0, 0x3, 0x40000000, 0x3fb8, 0x8b, 0xfffffffa, 0x0, 0x1, 0x6, 0x2, 0xfffffffc, 0x8001, 0xd, 0x3, 0x1d3601f0, 0x3, 0x100, 0x9c0, 0xccc9, 0x0, 0x1, 0x9, 0xffff, 0x0, 0x3, 0xe, 0xef, 0x40, 0x2, 0xffffffff, 0x80000000, 0xa33, 0x3, 0x2, 0x4, 0x200, 0x661, 0x3, 0x46db, 0x10, 0x508, 0x4, 0x6, 0xe, 0x5d1, 0x1000000, 0x0, 0x400, 0x9e, 0xffff, 0x0, 0x0, 0x1, 0x4, 0x2, 0x4, 0x9, 0xfff, 0x4, 0x6, 0xe5, 0x4, 0xcfa, 0x7, 0xffffff81, 0x2, 0x2, 0x0, 0x8bc6, 0x3, 0x3, 0x7, 0x80, 0x0, 0x6, 0xfeda, 0x2, 0x5, 0xb, 0x4, 0x10001, 0x1, 0x10000, 0x2, 0x7fff, 0xc1, 0xfffffffa, 0x3, 0x0, 0x320, 0x8001, 0x7, 0x3ff, 0x7, 0xc, 0x80000001, 0x40, 0x7, 0x2125, 0x84ca0000, 0x6, 0x5, 0x5, 0xa8, 0x5, 0xa, 0xffffff13, 0x9b, 0x400, 0x3, 0x3, 0xbd1, 0x3, 0x100, 0x6, 0x5, 0x6, 0x8, 0x81, 0x8, 0x8, 0x5, 0x7, 0x3, 0x3b29, 0x2, 0x10001, 0x9, 0x3ff, 0x10, 0x400, 0x10, 0x6, 0x9, 0x0, 0x10000, 0x3ff, 0x9, 0x8000, 0x8, 0xb201, 0x7, 0x7, 0x4, 0x5, 0x8001, 0x1, 0x1, 0x1, 0x2, 0x5a, 0x2, 0x140, 0x5, 0xad, 0x2c6, 0x7, 0xfffffff8, 0xffffda62, 0x2, 0x7f, 0x9, 0x4, 0x6, 0x9, 0x80000001, 0x1, 0x7, 0x5, 0x4, 0x4, 0x7, 0x55f8, 0x9, 0xc5, 0xd8, 0x301, 0x5, 0x4, 0x1c32, 0xfffffffb, 0x0, 0x7fff, 0x5, 0x117, 0x7fffffff, 0x3ff, 0x6, 0xffff, 0x72, 0x40, 0x7ff, 0x5, 0xa5, 0x44, 0x5, 0x10000, 0x58f, 0x0, 0xfffffffe, 0x6, 0x2, 0x43, 0x40, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0x2, 0x4, 0x86, 0x0, 0x5, 0xdd21f0cf, 0xe00, 0x7cb, 0xfffff2f6, 0xf, 0x1, 0x9061, 0x6, 0x1, 0x5, 0x2, 0x8, 0x7, 0x9, 0x7b3, 0x1, 0x401, 0x7, 0x9, 0x6, 0x3, 0x3, 0xa1, 0x7, 0x6, 0x9, 0x401, 0x92, 0x5, 0x0, 0x9, 0x6, 0x0, 0x2, 0x1, 0x6, 0x5, 0x0, 0xc2, 0x1, 0x7, 0x7, 0x0, 0x1fe, 0x8, 0x87, 0x4, 0xf, 0xd, 0x7, 0x10001, 0x7, 0x0, 0x5, 0xae, 0x7, 0x0, 0x1ff, 0x6, 0x33c9b90f, 0x0, 0x3ff, 0x0, 0x7fff, 0xe84, 0xff, 0x5, 0x21765802, 0x0, 0x40, 0x1, 0x10000, 0x7, 0x6, 0x1, 0x0, 0xfffffff8, 0x62f, 0xfffffffd, 0xfffffff7, 0xff, 0x9020, 0x0, 0x5, 0x1, 0x9, 0x4, 0x1, 0x0, 0xffffffff, 0x9, 0x7fff, 0x4, 0xe6, 0x3, 0x7, 0x8, 0x7fff, 0x1, 0x8, 0x2cf0, 0x3, 0x7, 0x200, 0x52d, 0x0, 0x7, 0x1, 0x3, 0xffff, 0x4, 0x3, 0x3, 0x3, 0x2, 0x101, 0x8, 0x4, 0xfff, 0x1, 0xfffffffa, 0x2, 0x2, 0x0, 0x3, 0x2, 0xf40a, 0x4, 0x89d3, 0x401, 0x8, 0x4, 0x2, 0x9, 0x80000000, 0x4, 0x53c0, 0xa01e, 0x7, 0x7fff, 0xfffffff9, 0x40, 0xacfb, 0x800, 0x5, 0xab9, 0xe, 0xfffffe00, 0x3ff, 0xcd6, 0x8, 0x1417, 0x3, 0x3, 0xa, 0xfff, 0x5, 0x0, 0xb9, 0x2, 0x3, 0x8, 0x8, 0x5, 0x1, 0x80, 0x4, 0x2, 0x8, 0xd, 0x5, 0x5, 0x0, 0x8, 0x1000, 0x8, 0x9, 0x7fffffff, 0x2bf7adfc, 0x0, 0x6bca3aeb, 0x100, 0x80000001, 0x1, 0xff, 0x8, 0xfffffff0, 0x32, 0x1, 0x7, 0x9, 0x4, 0x8a, 0xe, 0x5, 0x1, 0x9, 0x9aac, 0x80000001, 0xffff, 0x4, 0xffff, 0x722, 0x4, 0xfffffffc, 0x0, 0xfb08, 0x7, 0x38, 0x0, 0x8, 0x5, 0x4, 0x35aa8ba0, 0x8, 0x9, 0x7, 0x4, 0x8, 0x3, 0xe6, 0x6, 0x7, 0xffff, 0x603, 0x9, 0x5, 0x4, 0xc097, 0x8, 0x7, 0x80000000, 0x8, 0x4, 0x7, 0x100, 0x8, 0x6, 0x44, 0x7, 0x8, 0x9, 0xffffffff, 0x0, 0xfffffffe, 0x9, 0x7ff, 0x9d3, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xecb}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffe01}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x0, 0xd, 0x4, 0x6000000, 0x80, 0x83, 0x1, 0x2, 0xff, 0xb, 0x8, 0x1, 0x5, 0x2, 0x80000000, 0x4, 0x3, 0xb6f2, 0x7, 0x1ff, 0xf3d, 0x5, 0x1, 0x904, 0x3ff, 0x1, 0x1, 0xb5, 0x3ff, 0x7, 0x0, 0x6, 0x9, 0x5, 0xa0, 0x2da800, 0xbf0, 0x8, 0x2, 0x0, 0x81, 0x9, 0x46, 0x9, 0xa, 0x0, 0x401, 0x9b, 0x5, 0x1, 0x8, 0x5, 0x7, 0x10000, 0x1, 0x790, 0x2, 0x40, 0x8, 0x4, 0x2, 0x6, 0x100, 0xcb5, 0x2, 0x4, 0xfff, 0x3, 0x2, 0x8, 0xc2, 0x9, 0x0, 0x2, 0x8c6c, 0x200, 0x9, 0x8000, 0x9, 0x1, 0x101, 0x0, 0x0, 0x1ff, 0x5, 0x3, 0x9, 0xfffffff5, 0x0, 0x0, 0x4, 0x5, 0xa, 0x8, 0x8, 0x5, 0x4, 0x6, 0x2232f3f5, 0x5, 0x4, 0xffffffff, 0x90, 0x100, 0xfffffffc, 0x101, 0x1, 0x2, 0x5, 0xffffffff, 0x7fffffff, 0x8, 0x4, 0x2, 0x3, 0x4, 0x2, 0x7, 0x2, 0xf5, 0x7, 0x1000, 0x3d399b82, 0x0, 0x492, 0x2, 0x8, 0x8, 0x2, 0x40, 0x800, 0x8, 0x8, 0x5, 0x9, 0x5, 0x3, 0x0, 0xcefa, 0x7, 0x101, 0x0, 0x80000000, 0xe, 0x0, 0x0, 0xd898, 0x4, 0x2, 0x5, 0x51, 0xff, 0x0, 0xff, 0x80b, 0x80000001, 0x3, 0x8, 0x7, 0x7f, 0x7, 0xcd, 0x6, 0x5, 0x9, 0x2, 0x9, 0x7f, 0x4, 0x9, 0x8, 0x0, 0x9, 0xd, 0x473e, 0xd9e, 0x81, 0xb7f, 0x1aa, 0x5e0e, 0x7, 0x1c00, 0x0, 0x7, 0x2, 0x25, 0x0, 0x4, 0x2, 0x3, 0x66d5, 0xaeb6, 0x5, 0x8, 0x8, 0x2, 0x10000, 0x72, 0x9, 0x6, 0x5, 0x8, 0x6, 0x5a2, 0x4, 0xffff, 0x6, 0xfffffffc, 0x1ff, 0x40, 0x4, 0xf7, 0x6, 0xfffff696, 0x40, 0x800, 0x1000, 0x80000000, 0x2d3, 0xf1, 0x2, 0x1, 0x8, 0x9, 0x8, 0x3, 0x7ff, 0x80000000, 0x3, 0x200, 0x0, 0x100, 0x9, 0x1, 0x1, 0x19, 0x6, 0x8, 0x5f, 0x9, 0xd, 0x5, 0x5a, 0x4, 0xdc, 0x80000000, 0x10, 0xd, 0x9, 0x5, 0x8, 0x0, 0x8, 0x4, 0x4]}], [@TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x9, 0x8, 0x6, 0x0, 0x8, 0x7, 0x7, 0x5, 0x6, 0x0, 0x0, 0x101, 0x6, 0x2, 0x2, 0x6, 0x4, 0x2fd, 0x5000000, 0xe3f, 0xffff, 0x7, 0x1, 0x9, 0x3, 0x2, 0x80000001, 0x800, 0xfffff7b9, 0x8, 0x5, 0x10, 0x5, 0x10000, 0x2, 0x6, 0xfffffbff, 0x10000, 0xb, 0x0, 0x9, 0x8, 0x1ff, 0x7, 0x3, 0x3, 0x7, 0x9, 0x8, 0x8, 0x0, 0xd, 0x0, 0x3, 0xff, 0xb, 0x544, 0x7ff, 0x5, 0xfb93, 0xff, 0xff, 0x7c518000, 0x7, 0xc4, 0x3, 0x4, 0x3, 0xd, 0xffffffff, 0x4, 0x5, 0x4, 0xffffffff, 0x7fff, 0x4442, 0x7fffffff, 0x4, 0xc4e8, 0x6, 0x8c400000, 0xc, 0x65dae1b1, 0x1, 0xfffffff5, 0x401, 0xfffffffa, 0xfffffe00, 0x6, 0x6, 0x8, 0xffffffff, 0x7fffffff, 0x6, 0x1, 0x611, 0x7, 0x2, 0x9, 0x7, 0x3, 0x10, 0xb, 0x23ab, 0x5, 0xfffff001, 0x7fff, 0xe6, 0x4, 0xf2d8, 0x7, 0xd, 0xe5e, 0x9, 0x2, 0xc, 0x6, 0x8001, 0x3ff, 0x80000000, 0x3, 0x4, 0x8, 0x2, 0x0, 0x80, 0x1, 0x6, 0x6, 0x8, 0x800, 0x80000001, 0x5, 0x0, 0x9, 0x100, 0xfffffffa, 0x6, 0x7f, 0x6, 0x200, 0x6, 0x7fff, 0xbb, 0x70b, 0xa, 0x3ff, 0x0, 0x4, 0x3112, 0x6, 0xdb, 0x7, 0xffffffff, 0xd, 0x1, 0x1000, 0x0, 0x100, 0x3, 0xfffffffa, 0x10001, 0x1, 0x8, 0x80000001, 0x4800, 0x4, 0xc, 0x4, 0x5, 0xfffffffe, 0xffff, 0x900000, 0x80000000, 0x8, 0xffffffff, 0x8, 0x1, 0x401, 0x7, 0x40, 0x3, 0x7, 0x7, 0xf, 0x7, 0x9, 0xd, 0x1, 0xf, 0xc687, 0xfffffeff, 0x7e74cb77, 0x1, 0x9, 0x4, 0x4, 0x400, 0xfff, 0x3, 0x1ff, 0x4, 0x1, 0x0, 0xdee, 0x2, 0xffffff7f, 0x10, 0x6c, 0x5, 0x40, 0x120000, 0x200, 0xa9, 0x10, 0x2, 0xd2, 0x4, 0x0, 0xfffffff3, 0x1, 0x9, 0x2, 0xf, 0x7ff, 0x0, 0xfffffffd, 0x6, 0x7, 0xfffffffa, 0x6, 0x3, 0xfffffffb, 0xc2fd, 0x4, 0x6, 0x2, 0x8, 0x10, 0x4b8, 0x7, 0x9, 0x6, 0xffee, 0x5, 0x4, 0x400, 0x1, 0x2, 0x1, 0x401, 0xd632, 0x9, 0x80, 0x5]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8486}]]}, {0xbd, 0x6, "58f62d7f798ffd94e4b03e7773c472ebb89d615514101acd2b51e03249a9e5a66ffc1b8b13f0108c3f596cb7ac6af8c1009a52e2d7f4b5497eb1297bdb038f806b1598bdbbb3b19e6c861540a73b27df1f398d431b3f8c9a8cb12ea9a9e5523e4ee866b6760b962fcb19e235f11843080e1a4900ce231fae1598200e67283c20827b67fa16c29163f4fd490709e029ab81f6a872fbc0c35f059dc2d17b26ffcbf5a4dc7a455a015ac59dbf4be5455b519a5ed6b8937a3a42a3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_BASIC_ACT={0x19c8, 0x3, [@m_tunnel_key={0x10a8, 0x19, 0x0, 0x0, {{0xf}, {0x78, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xfc, 0x1e, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x4, 0x7, 0x0, 0x6}, 0x2}}]}, {0xad, 0x6, "e07df3799b4c763cb8ec1c5801a41c12ef05b27565aa46c9e6094d099a05b22b5f61af67301d7d9419df1d6a34f8728a0b23f217e34cebb708194c4bfd9c51267b4c368fea0cdac6b3a24fa821128cb61f1e72633174d85f7bd5efe94b42d2e187eebea1a5d3112d07dada612291a77cf0144479efb0e4135c96c94756f68aea3d225c550aaa2fe7ecb426982bdd35b0297ac7063245eee973345dde505c3580fd1705198a82d85022"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_xt={0x148, 0x3, 0x0, 0x0, {{0x7}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x39, 0x6, {0xbe0, 'raw\x00', 0x5, 0x4, "35ff68e97d5b3da6da3c22e3bb1974"}}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0xad}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x79, 0x6, "f856f19c7b6c0e5d4eb22b47300975e4fc004b18bca720d5cdb429239d8fe96b4125674dd3eb0a109db0b79dd9ca6f50c09f0ef3518a7942ff791f2ea3dc1742b7f28a47d4c9299c5cbfa42953f21799ce9781a163748a45993aead30da961a5ab4f2405537dff00a72d870fce1de333b2b6bf6aec"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x14c, 0xb, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x18000000, 0x3ff, 0xffffffffffffffff, 0x9, 0x8}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe, 0x0, 0xfffffffffffffffa, 0x0, 0x6}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0xc2, 0x4, 0x1, 0xe}, 0xf000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd8, 0x7fffffff, 0x4, 0xffffffc3, 0xcca4}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x4, 0x0, 0xf}, 0xfffb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x2, 0x70d, 0x4f}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x1, 0x3, 0xe, 0x101}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xfff, 0x6, 0x2, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x10, 0x7, 0xfffffffe, 0x9}, 0x3}}]}, {0x1f, 0x6, "36f4ad5a1d29f4f4fdaa228e005e02813af257a04595e7d21751c9"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0x74, 0x11, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x48a, 0x8}}]}, {0x3b, 0x6, "de5f7f2176cd561b0dffe756480364e941a156ad73682e6285e06c016a59e4da1829af66ae53962ccdcb556d6d4f80cefd867d14f6f949"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x180, 0x12, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x8000, 0x8, 0x7}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x30, 0x9, 0x0, 0x1000, 0xe7a}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xf, 0x6, 0xffffff1d, 0x5}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x8, 0x6, 0x6, 0x3}, 0x2, r2}}]}, {0xd4, 0x6, "05c10072657fe0283bd087b8ddc2a9695a8a62de33528088eb1bec939f5c0da099d384d09e8c43acbf2e7f5196873c618ab9ff53c5a98679bc4e7b28bf08ebb2f911d6f3a44916603ce002643082087cef450b374de6cbd6486a7d0a8a405880a7cc323dee80388d5282cea1109cb4add27fe9782811b26e2a7319dba4d78b0de9eb8ff697fa80b57e18e7f0f1c058390a7ac74270e2162c250bf921074a81ea5f0a21e593e7b7cd58fa7f55419463b5e2cc48dc8b81f5b7cff54bb9155f2c8d9d562e14dbc69c6cfb31d810416fc87e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x13c, 0x1d, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xc16, 0x10000000}}]}, {0x101, 0x6, "b1c13c34c092113f32b2a61f8fe453a1960923b5b6e0403e80d0e34a1fb6313eed072b5c0e0438cc3367c9c26fcc35079c2c4ad9c34aeaf2b6bb90df16e91eaa35c78cf3d7e15c66808f237a4053697a2fa82f42093ffe3a8e3e8154d20decca97dad9c72e3b0358d93f59fd4617c87d3bfc2ddeea3b5a4bc755caf29cf508aee68d884f75fdeff3d5e5ad75839fb85bddbbff5613f8662259685d5362da0d9ed30ea1cf41c7436a4f5460ab2283099fd71207a1510472ab0dade1efb5695e8707954d53887c64b580d9afdf1807681ddec4eb7cd37e580c77113601d0ae1261d37335152798f4603b7a031a12d75f616014b431345c1e66ad13f03d89"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x168, 0x11, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2008, 0x7, 0xffffffffffffffff, 0x0, 0x8}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x1, 0x10, 0x8}, 0x6b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x7, 0x4, 0x4}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x400, 0x3, 0x100, 0x1}, 0x7c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x10001, 0x0, 0x2, 0x6}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x7, 0x9, 0x1}, 0x19}}]}, {0x94, 0x6, "f7bd7492739edca06fc890948106d4f3208b46bd8fc658ab7e1ca3e5e07ab4257e9438c3caff4efe4e588bef50509a6f3f43d8fa0a32c9ecde8a23371959956bf99021e51da99422ca02561bbe6125b4a8e024eea65a249632cc64b0a70b852158d7d8b2fc2f9674b0456e119d07e621653472a1ca7c641430a81724a94be56e0521b2a201f6130218a5576ff4ec34fe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0xf4, 0xe, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x800}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x400, 0x8, 0x3}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfbd2}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0x0, 0x7fff, 0x4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x8, 0x10000000, 0x35}}]}, {0x65, 0x6, "a905f515607ce4a05999cbec50cdd731c67a8bb12e522e37051c8cf9f354ed7d689716751f30d47d9019236e4ea1ed5ff0aa9fbfe6389a38bd724574553f62b4f1bfed3d3816d0b3905c9062879fe5e43972ffd92473d1a75576e26e0386a688e6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BASIC_EMATCHES={0x25c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}, @TCA_EMATCH_TREE_LIST={0x250, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x2, 0x9, 0xa611}, [@TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x9}, {0x5, 0x0, 0xe, 0x0, 0xb, 0x1, 0x2}}}, @TCF_EM_META={0x94, 0x1, 0x0, 0x0, {{0x7fff, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="bee6b0", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xff, 0x9}, {0x7f, 0x8, 0x1}}}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="4f28754de30b"]}, @TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR="d2cd", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_VAR="d14176a1529ba327c9", @TCF_META_TYPE_VAR="5c0ca8", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="cc2fce4da2c52efb", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xfe}, {0x7f, 0x0, 0x1}}}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_VAR="8fa77c3a", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="9e3f0a757738"]}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7f, 0x2, 0xb}, {0x1, 0x2, 0x0, 'iG'}}}, @TCF_EM_META={0x68, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR='|', @TCF_META_TYPE_VAR="0ab293ab96731dde3d", @TCF_META_TYPE_VAR="80a6ec80", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x7}, {0x4, 0xff}}}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="e8f0"]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="16"]}]}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x7ff, 0x9, 0xde}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xe731, 0x8, 0x9}, {0xffffffffffffffff, 0x6, 0x3}}}, @TCF_EM_CONTAINER={0xbc, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x9}, "4669ab39f267900d8442cce067b3d4f4ebcdef991f0bf667a3fb14e296a88b65c7db993cad9bbeddb716abee9713fa8103baf16dbb43f856f0bae99e288d11690336e433d38ba2e6d97359ebb8537ae60ac2233d7556441285946dede25b563007e28ac212631d8d308ffd081061bdb64599e8e8c33aecfa4996311f73b2bfe24966cd1c77e4bc5deee9c5e6f66f7a181709e83dbbf5b4c733e6f7023f3f198ceb21c208140b46a1c3d0bd7eba"}}, @TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0x9, 0x9, 0xcd7}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}, @TCA_BASIC_ACT={0x1c0, 0x3, [@m_xt={0x1bc, 0xa, 0x0, 0x0, {{0x7}, {0x194, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x77, 0x6, {0xe29, 'security\x00', 0xff, 0x366, "44aa8be6af12595e4f49cfbf6a5919616f6656c78853401100ec46be16dc5a4295a3df0d55a9ebcb46a0b960453c6d974141c5bae78f41050530b23c384c1768baa3fc444292d04609a66dda55"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x92, 0x6, {0x2, 'filter\x00', 0x5, 0x5, "d9457e5be1192aa0267b2a9f1a9f40ce37fab6bcd65877579bf82a496a5252b2fc9eb8caa041db4d651d869214f91109876c9d32f8b7d411fe4c5460f5cc53306546075e3c6f327a2dd1e4b1b79595d91ef11e873cd98e0cbc9427261730ff67659ff743848824f5"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_ACT={0x27ac, 0x3, [@m_mirred={0x1d8, 0x1a, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x99, 0x8, 0x0, 0x9}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x4, 0x0, 0x100}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x6, 0x0, 0x6}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x6, 0xfffffffffffffff3, 0x0, 0xfffffff9}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x9, 0x0, 0x10, 0x5}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7a2, 0x0, 0x1, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x2, 0x1, 0x6, 0xfcf}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0xffffffffffffffff, 0xffffffff, 0x9}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x15d7, 0x0, 0x8, 0xffffffff, 0x3}, 0x3, r2}}]}, {0x8a, 0x6, "7b3a386cd480f1b4760c41ca5f26c4e068da303a18ee1a8b5531760510ed85eb72b05af620aabb38ed647026902f32e614eb3297a9eb5b75d6df44d5ed6036b16917f65df83f5bbbf16370fcebf5eaf3e244a8076efb2fd39920277286cf2bc4c33b012c3fb1b59f33b9d88c99ec7963aafb464e8974d05413a23d7ae4f4390db823dde56cbb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x194, 0x8, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xfffffffe, 0x4, 0x8, 0x8}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'sfb\x00'}, @TCA_DEF_DATA={0x6, 0x3, '&\x00'}, @TCA_DEF_DATA={0x11, 0x3, 'sched_switch\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3c45, 0xfffff808, 0x8, 0x8, 0x9}}, @TCA_DEF_DATA={0x11, 0x3, 'sched_switch\x00'}]}, {0xf5, 0x6, "6aa9ed2fc8030c7c13f75941f0c93a9c6df5b4b22e3600ce15511283b3696e323259fc23645a60a5e88d9ee4d9281c82c49e57fc8da6a2ea227aaf464709b97ebd167daff643557327536f142cb85784812d8f379d0343c13541b8988b50c3495090d5ab891dbef08211558e18085f5e45e8b055afada26f8809a00fe0424ab28332e9aee55c42e8d7a710f913b06497ae76ab19c3c67de49e6c6b3edfd1891c3a2cf1b85235a1f0acd76199b53589f0562a54cae78143e962779535a942bda8a0b3d247b69daa902f9aac555bc65bda92e86404c479a651916d30d040be22d78c2797217ed68334ed1bcb8493abc76908"}, {0xc}, {0xc, 0x8, {0x10d43ca40c750ca, 0x3}}}}, @m_ct={0x124, 0x8, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "3ef5171a256013608957458f0c739ae8"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_LABELS={0x14, 0x7, "8414d85a86dc124da52be8c724017469"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_ZONE={0x6, 0x4, 0x6}]}, {0x97, 0x6, "f124ea52207f61bd470584b46fa7d2d4bd4eb290d7602b4a4d7c9f097d8be5cfe8da17d8a6affd45ccf5721bd5a0106e52d8126f5d11118a9ab47db5e9410fce30b86a029a02dd249daaba20ef6ef9c72ae5bcd4b989f19e4a6f2166ad56b6021332c0efa7ab04602d3c47b81da7cc14479f82e4160ec211a9d9368248ead479b503dedbee1795bbf0b8c0a49daaf01c251c21"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_pedit={0x1dd8, 0x7, 0x0, 0x0, {{0xa}, {0x1d34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x0, 0x7fff, 0x5, 0x1, 0x7}, 0x6, 0x5, [{0x400, 0x400, 0x5, 0x9, 0x1, 0x4}, {0x6, 0x2, 0x0, 0x7ba80000, 0x2, 0x7}, {0x2, 0x3, 0x4, 0xf95, 0x7fff, 0xe1d}, {0x2, 0x3ff, 0xffff3e56, 0x1, 0x5, 0x7}, {0x4, 0x19ab, 0x4, 0xd, 0x38c, 0x4}, {0x7fffffff, 0x9, 0x800, 0x0, 0x6, 0x8}, {0x1, 0x5, 0x7, 0x3, 0x8, 0x6}]}, [{0x2, 0x7, 0x4b, 0x6, 0x6, 0x6}, {0x3, 0x0, 0x8, 0x5, 0x4, 0x5}, {0x5, 0x6, 0x4, 0xb114, 0x15f, 0x2}, {0xfffffff7, 0x6, 0x57b7, 0x10000, 0x8c, 0x1}, {0x7, 0x81, 0x1, 0x7, 0x1, 0x5}, {0x65e5, 0xffff, 0xe4a8, 0x10001, 0x3, 0x788f}, {0x3, 0x60000, 0x7fffffff, 0x8, 0x0, 0x40}, {0x4, 0x401, 0x0, 0xa, 0x7, 0x4}, {0xd8, 0x0, 0x40d, 0x10200000, 0x40}, {0x1, 0x1, 0x7fff, 0x10001, 0x8, 0x6}, {0x2, 0x7f, 0x4, 0x4, 0x9, 0x9}, {0x2, 0x8, 0x3, 0x5, 0xaeb3, 0x3}, {0x0, 0x5, 0xfffffffd, 0xa, 0x7, 0x599}, {0x100, 0x82, 0x2, 0x6, 0x0, 0x1000}, {0x0, 0xf0, 0x6, 0x1, 0x0, 0x6}, {0x6, 0x1, 0x6, 0x101, 0x6, 0xc}, {0x73, 0x26a, 0x326, 0xffffffff, 0x80000000, 0x4}, {0xb, 0xffffff9b, 0xffffffff, 0x0, 0x0, 0x790aaf9e}, {0x6, 0xc52, 0x0, 0x1, 0x8, 0xffff}, {0x6, 0x2bb8000, 0x4, 0x7, 0x7, 0x6}, {0x8, 0x9, 0x5, 0x9, 0x4, 0x6}, {0x0, 0x3, 0x4, 0x100, 0x2, 0x2}, {0x7, 0x14, 0x3, 0x8580000, 0xa2da, 0xff}, {0xfffffffb, 0x4, 0x2, 0xffffffff, 0x6, 0x8}, {0xffffffde, 0x401, 0xffff, 0x401, 0x3, 0xe00000}, {0xf18, 0x1, 0x1000, 0x2, 0x40, 0xc8e}, {0x8, 0x5, 0x6, 0x8, 0x7, 0x5}, {0x0, 0x1, 0x9, 0x1000, 0xa, 0x7f}, {0x6a79, 0x5, 0x9a, 0x7, 0x13, 0x3}, {0x4, 0x6, 0x20000000, 0x4, 0x37, 0x5}, {0x8, 0x9, 0x8000, 0x9, 0x83, 0x9}, {0xa50, 0x9, 0x0, 0x9, 0x400, 0x80000}, {0x29, 0xff, 0x6, 0x5, 0xa0}, {0x8000, 0x3, 0x1, 0x7eb, 0x7fffffff, 0x1}, {0x0, 0x1a62, 0x4, 0x1, 0x7, 0x6}, {0x1ef, 0x1, 0x1000, 0xf, 0x677fcda9, 0x8}, {0x2, 0xe54, 0x9, 0x10, 0x744, 0x216}, {0x9, 0x5, 0xc1, 0x0, 0x9bd0, 0x8}, {0x5, 0x5, 0xfffffff9, 0x280000, 0x1, 0x3224}, {0x3, 0x7f, 0xfffffffc, 0x9, 0x21, 0x200}, {0x400, 0x401, 0x9, 0x6, 0x3, 0x8}, {0x200, 0x0, 0x7, 0xbfd1, 0x3, 0x3}, {0x0, 0xce, 0x10000, 0x22c4, 0x1, 0x80}, {0x400, 0x8000, 0x200, 0x78de9985, 0x40, 0x4}, {0xc4, 0xffffffcb, 0x1, 0xf, 0x1ff, 0x4}, {0xe, 0x400, 0x40, 0xe8, 0x2364, 0x5fa}, {0x9, 0x0, 0x9, 0x10000, 0x243, 0xdc2a}, {0x8, 0x2, 0x8, 0x7fffffff, 0x7fff}, {0xe, 0x4, 0x9, 0x8, 0x7, 0x7}, {0x70f, 0x5, 0x7fffffff, 0x13d, 0x693, 0x10000}, {0x1, 0x9, 0xfffffffe, 0x0, 0x3, 0xb508}, {0xc03, 0x7, 0xfffffc00, 0x4, 0x3, 0x6}, {0x1, 0x3, 0x69, 0x4, 0x4}, {0x8, 0x8001, 0x8001, 0x8, 0x6, 0xfffffffb}, {0x6, 0x0, 0x506, 0x8001, 0x0, 0x7}, {0x9, 0x7, 0x6, 0x5, 0x0, 0x3}, {0x9, 0x8d39, 0x2f, 0xfffffffe, 0x3, 0x989}, {0x8, 0x8001, 0x0, 0x0, 0x8c3, 0x6}, {0xfffffff8, 0x0, 0xf, 0x9, 0x0, 0x3}, {0x9, 0x8, 0xdc2, 0x4, 0x77c6, 0x81}, {0x7, 0x1, 0x3, 0x3, 0x10, 0x8}, {0x0, 0x3, 0xffffffff, 0x5, 0x30000000, 0x400}, {0xfffffff7, 0x3, 0x519, 0x1, 0x7, 0x7287}, {0xffff, 0x80000001, 0x23, 0x5, 0x8, 0x38}, {0xd7d, 0x2, 0x99, 0x80000001, 0xff, 0x3}, {0x4, 0x5, 0x2, 0xffffffff, 0x1, 0x2}, {0x100, 0x1, 0x2, 0x7fffffff, 0x1, 0x7ff}, {0x6, 0x401, 0x1, 0x2, 0x1, 0x1ff}, {0x47ea, 0x7, 0x3, 0xffffffff, 0x7}, {0x0, 0x7, 0x9, 0xbd, 0x2, 0xfffffff5}, {0x100, 0x6, 0x8, 0x1, 0x80000001, 0x1}, {0x7e, 0x40, 0x7, 0x4, 0x1000}, {0x41e, 0x1, 0xff, 0x2, 0xa2d9, 0xf1}, {0x800, 0xfffffffe, 0x7, 0x7f, 0x5, 0x6}, {0x4, 0x7, 0x2, 0x2f0a, 0x2ee2, 0x1}, {0x2, 0xd, 0x0, 0x81, 0x6, 0xfffffff9}, {0x200, 0x56, 0x7f19, 0x3, 0x3, 0x7}, {0xd, 0x0, 0x0, 0x2, 0x1, 0x578e}, {0x5, 0x6, 0xcf82, 0xc5d, 0x1, 0x100}, {0x9, 0xfd2, 0x0, 0x3, 0x9, 0x10001}, {0x3c, 0xdc5d, 0x2, 0x3, 0x6, 0x6}, {0x0, 0x2, 0x3, 0x5, 0x2, 0x7}, {0x7f, 0x3, 0x0, 0xd0, 0x9, 0x2}, {0x80, 0x400, 0x1, 0x9, 0x8, 0x10}, {0x800, 0x68, 0x5, 0x5, 0x2, 0x5}, {0x4, 0x8, 0x6, 0x8d, 0x9, 0x4}, {0x1, 0x3, 0x1, 0x10001, 0x4602, 0xfffffffd}, {0x1c000000, 0x6, 0x69, 0x7ff, 0x63f6, 0x1}, {0x7, 0x3, 0x4, 0x6, 0xf, 0xfff}, {0x4, 0x7, 0x9, 0x5f, 0x200, 0x1}, {0x8, 0x3436, 0xfcd, 0xbe21, 0x4, 0x2}, {0x9051, 0xf83, 0x9, 0xd, 0x8, 0x91}, {0x3, 0x6, 0xc16, 0xc, 0x3, 0x8}, {0x7f, 0x9, 0xfffffffc, 0x2, 0x7, 0x400}, {0x8, 0xff, 0x3ff, 0x4, 0xe0, 0x6}, {0x800, 0x8, 0xa8, 0x34, 0xc, 0x9}, {0x2, 0x4, 0x0, 0x200, 0x7, 0x2}, {0x200, 0x0, 0x3, 0x6, 0x8, 0x2}, {0x72, 0x4, 0x40, 0x74, 0x8, 0x5}, {0x1000, 0xf2c, 0x6, 0x10, 0x8, 0x10}, {0x2, 0xfffffffa, 0xffffff01, 0x1, 0x2fbde2cf, 0x80000001}, {0x11000000, 0x1f, 0x9, 0x465, 0xdd5, 0x6}, {0x6, 0x0, 0x27f2, 0x4a9, 0xe, 0x3}, {0x9, 0x1, 0x8, 0xfffffffb, 0x9d4b, 0x4}, {0x80000001, 0x4, 0x9c9, 0x9, 0x20000, 0xfffffff7}, {0x0, 0x3, 0x1, 0x5, 0x8, 0xffffff7f}, {0xc81, 0x8, 0x0, 0xfffffff9, 0x2, 0x7fff}, {0x80, 0x2, 0x5, 0xac63, 0x0, 0x2}, {0x3ff, 0x0, 0xfffffffd, 0x3, 0x1, 0x1}, {0x7, 0x2, 0x8, 0x8, 0x6aefa869, 0x101}, {0xb5, 0x857, 0x5, 0x8, 0x9, 0xfffffff7}, {0x2, 0x3, 0x7ff, 0xad9, 0x6, 0x5}, {0xfffffff8, 0x7, 0x0, 0xe, 0x0, 0x9}, {0x4, 0x8, 0x8, 0xe, 0xb, 0x8}, {0x4, 0xd6f, 0x8, 0x1, 0x8, 0x1}, {0x2, 0x400, 0xfffffff7, 0xb, 0x80000000, 0x4d6}, {0xd8, 0x0, 0x4, 0x4, 0x1ff}, {0x9, 0x3, 0x9, 0x3, 0xea76, 0x3}, {0xb8, 0x7, 0x4, 0x4, 0xf41, 0x4}, {0x6, 0xffffffff, 0x2, 0xd, 0x1, 0x9}, {0x4, 0x9, 0x71, 0xff, 0x3, 0x800}, {0x6, 0x6, 0xa112, 0xdd, 0x67, 0x3}, {0x6, 0x2, 0x8, 0x8, 0x7, 0x80}, {0x9, 0x1, 0x6e20, 0x9, 0x10001, 0x3}, {0x9, 0x4, 0x5, 0xf63, 0xfffffffd, 0xffffffff}, {0x8, 0xffffffb6, 0x7, 0xbc4, 0x9, 0x1}, {0x9, 0x5, 0x10000, 0x8c, 0x9, 0x8}, {0x8, 0x5, 0x1, 0x24f9, 0x0, 0x8}], [{0x5, 0x1}, {}, {0x5, 0x1}, {}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x3f6d8777fceba916, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {}, {}, {}, {}, {}, {0x5}, {0x5}, {0x2, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x3}, {0x7, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x90ea5100a7781dc0}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x4}, {0x1, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x1, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x5, 0x9f029532628a5086}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0xff9d5302a6f5b38d, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {}, {0x1}, {0x2}], 0x1}}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x7, 0x6, 0x2, 0xc7, 0x4}, 0xd5, 0x8, [{0x8, 0x2, 0xffffffff, 0xfffffff9, 0x2, 0xa}, {0x7, 0x3, 0x7081bf84, 0x90, 0x7, 0x3}, {0x0, 0x7c11, 0x4, 0x2, 0xfffffffb, 0x8001}]}, [{0x3, 0xec, 0x7d9, 0x1000, 0xac, 0x6}, {0x8, 0xf, 0x800, 0x5, 0x8, 0x66ee}, {0xa8b, 0x2, 0xff, 0x6, 0xdb1}, {0xa35, 0x9, 0xc3, 0x200, 0x80, 0x9}, {0x80000001, 0xcf2, 0x1, 0x800, 0x800, 0x17}, {0x20, 0x6, 0x6, 0xb8a, 0x84, 0x68c7c000}, {0xfe2a, 0xe98, 0x6, 0x9, 0x101, 0x8001}, {0x9, 0xc59, 0x2, 0xa49, 0xf1, 0x80000000}, {0x48000, 0x245f, 0x2, 0x2, 0xf, 0xd}, {0x5, 0x2, 0x1, 0xf, 0x4, 0x100}, {0x101, 0x5c0c, 0x80, 0x3, 0x8}, {0x6, 0x8, 0x9, 0x1, 0x0, 0x4}, {0x1, 0x80000001, 0x9, 0x9, 0x2, 0x9}, {0xe89, 0x7ff, 0x2dae, 0xffffffff, 0x5, 0x80}, {0x7, 0xffffff3d, 0xb7, 0x8, 0x3, 0xfd7}, {0x5, 0x6, 0x9, 0x7, 0x5, 0xffff}, {0x7, 0xf34, 0x8, 0x1, 0x7, 0x9}, {0xfffffffe, 0x8, 0x10000, 0x3, 0x8, 0xdfab}, {0xff, 0x7, 0x2, 0x2, 0x100, 0x4}, {0x100, 0xfff, 0x7, 0x2, 0x3, 0xffffffff}, {0x400, 0x400, 0x9, 0xecc, 0x9, 0x7}, {0xfff, 0x5, 0x1, 0x5, 0xfffffff8, 0x11a}, {0x9, 0x0, 0xfffffff7, 0x6, 0x3140, 0x2}, {0x0, 0x60, 0x6, 0xffffffff, 0x5, 0x400}, {0x7, 0xffff, 0xfffff000, 0x5, 0x1000, 0x8}, {0xeccb, 0x3, 0x101, 0x3, 0x679e7076, 0x7fff}, {0xfffffff7, 0x46acc60c, 0x0, 0x4, 0x1, 0x5}, {0x39, 0x0, 0xb89, 0x4, 0xffffffae, 0xe}, {0x9, 0x3, 0x100, 0x5, 0xf, 0x7ff}, {0x8, 0x7, 0x21, 0x2, 0x5, 0x3}, {0x3c, 0x101, 0xfffffff7, 0x10000, 0x3, 0xf}, {0xdc7, 0x9, 0x65d, 0x4, 0x7fffffff, 0x5}, {0x8000, 0x5, 0xa7, 0x1, 0x5, 0x4}, {0x5, 0x38, 0x7, 0x5c6, 0xdb465c7, 0xf1bb}, {0x6, 0x200, 0x4, 0x200, 0x1, 0xd}, {0x8001, 0xba, 0x6, 0x81, 0x2, 0x895}, {0x4, 0x4ed060f0, 0x401, 0x1, 0x8, 0x101}, {0x0, 0x100, 0x7, 0x4, 0x80, 0x5}, {0xffffffb2, 0x9, 0x7, 0x3, 0x2, 0x1}, {0x6, 0x2, 0x2adb, 0xc, 0x3ff, 0x2}, {0x0, 0x8001, 0xd, 0x1000, 0x1, 0x8}, {0xfffffffb, 0x6, 0xfffffffc, 0x2a, 0x4, 0x997}, {0xd6b4, 0xfffffffc, 0xeb, 0x4, 0x0, 0x6}, {0xfffff990, 0x3, 0x8a93, 0x0, 0x2, 0xfffffffc}, {0xf, 0x8, 0x5, 0x5, 0xb8e7, 0x9}, {0x3, 0x8, 0x200, 0xb, 0x2, 0x7ff}, {0x7, 0x5, 0x7fffffff, 0x8, 0x1, 0xf69}, {0x1, 0x1, 0x7, 0xfffff3e4, 0x3ff, 0x6}, {0x7f, 0x7ff, 0x10001, 0x3, 0x7, 0xfffff1a7}, {0x7, 0x6, 0x7, 0x5, 0x0, 0x4}, {0x6, 0x0, 0x6acb, 0x5, 0x80000000, 0xffffffff}, {0x1000, 0x4, 0x5, 0xffffff46, 0x6, 0xc8}, {0x6, 0x1000000, 0x4, 0x5, 0x0, 0x8fe}, {0x8, 0xfb1, 0x0, 0xffffffff, 0x6, 0x9}, {0xfb38, 0x7f, 0xf0, 0x4, 0xf, 0xc}, {0x1800000, 0x0, 0x6, 0x5, 0x9, 0x4}, {0x5, 0x80000000, 0xa2d, 0x15b7, 0x50588877, 0x8}, {0x5, 0x5, 0x8, 0x5e, 0x4b21757d, 0x2}, {0x2, 0x2, 0x8000, 0xfffff3c9, 0x5, 0x3}, {0x6, 0x88e, 0x100, 0xfffffff4, 0xc0000, 0x3000}, {0xd, 0x5, 0x200, 0x6, 0x3, 0x8000}, {0x6, 0x80, 0x50b1, 0xffffffff, 0xffff8001, 0x2}, {0x7, 0x7, 0x0, 0x4, 0x4, 0x7fff}, {0x8000, 0x493, 0x1, 0x0, 0x4, 0x100}, {0x8, 0x0, 0x7fff, 0x1000, 0x2}, {0x6, 0xa2d, 0x9, 0x1, 0x8000, 0x2}, {0x5, 0x8, 0x8, 0x9, 0x97, 0xe13}, {0x8, 0x80000000, 0x5, 0x0, 0x4, 0x1ff}, {0x1, 0x1, 0x4, 0x2}, {0x7, 0xff, 0x3ff, 0xce, 0xc, 0x5}, {0x0, 0x8, 0x9, 0x2ed, 0x3, 0x4}, {0x91, 0x1ff, 0x0, 0x4, 0x0, 0x10}, {0x4, 0xc119, 0x1, 0xffffff01, 0xd}, {0x1, 0x5, 0xd, 0x10000, 0x10001, 0x1ff}, {0x300, 0x7, 0x9, 0x9, 0x80000000, 0xfff}, {0xf90, 0x6, 0xec55, 0xf9, 0x0, 0x7}, {0x9, 0x9, 0xfffffffa, 0x2, 0x6, 0xa}, {0x80000000, 0x21a, 0x0, 0x5, 0xfff, 0x200}, {0x4, 0x9, 0x7fff, 0x832, 0xff, 0x1}, {0x5a, 0x7, 0x3, 0x3, 0x0, 0x1}, {0x6, 0xffffffff, 0xca, 0x4675, 0x9, 0x2}, {0x7992, 0x7, 0x5, 0xffffff34, 0x1, 0x537}, {0x4, 0x7, 0x2, 0x6, 0x6860, 0x10001}, {0x1, 0x100, 0x9, 0xf43, 0x6, 0x100}, {0x101, 0x0, 0x1, 0xc, 0x81, 0xfffff800}, {0x80, 0x3, 0x2, 0x2, 0x4, 0x17f}, {0xd8aa, 0x0, 0x400, 0x365e, 0x9, 0xffffffff}, {0x4, 0x4, 0x4, 0x101, 0xffffffff, 0x9}, {0x4, 0x5, 0xc, 0xffffebfd, 0x5, 0x200000}, {0x8000, 0x4, 0x56c, 0x2, 0x1f, 0xc77}, {0x0, 0xfff, 0x4, 0x2, 0x10000, 0x2}, {0x2, 0x2, 0x0, 0x5, 0x80, 0x7fffffff}, {0x81, 0x1, 0xfffffff8, 0x1, 0x9, 0x8000}, {0x2, 0x7, 0xa298, 0x400, 0x6, 0x72}, {0x4, 0x5, 0x7, 0x7, 0x7, 0x4}, {0x5c0, 0x1c8a, 0x7, 0xa, 0x0, 0x3}, {0x6, 0x4, 0x1, 0x2, 0x401, 0x80}, {0x7, 0x9, 0x9, 0x1, 0x8, 0x2}, {0x9, 0x0, 0x0, 0x80, 0x6, 0x800}, {0x4, 0x72, 0x985, 0xa308, 0x4df, 0x8000}, {0x7fff, 0x8000, 0x5, 0x40, 0x0, 0x9}, {0x5, 0x5, 0x8, 0x800, 0x8, 0x5}, {0x5, 0x4, 0xff, 0xb, 0x7fffffff, 0x5}, {0x3, 0x1, 0x3ff, 0x2, 0xda5, 0x9}, {0x4, 0x6, 0x0, 0x4, 0x800, 0x2e}, {0x3, 0x9, 0x0, 0x80000000, 0x8000, 0x7b}, {0xb8, 0x400, 0x5, 0x3, 0x0, 0xddd3}, {0x1, 0x3, 0x8, 0x3, 0x9, 0x4}, {0x7, 0x6, 0xfffffff0, 0xd, 0x3, 0x2}, {0x7, 0x3, 0x80000000, 0x5dfefde7, 0x0, 0xf}, {0x6, 0x50b, 0x2, 0x87, 0x6, 0x1}, {0x8, 0x3, 0x22f3, 0x10000, 0xb, 0x2}, {0x2, 0x7, 0x4, 0x72, 0x5544, 0x400}, {0x6, 0x3ff, 0x5, 0x2, 0x6, 0x7}, {0x3, 0x4, 0x400, 0x3, 0xfffffffe, 0xff}, {0x0, 0xf, 0x80000000, 0xfffffffd, 0x7, 0xf}, {0x0, 0x7, 0x139, 0x80000000, 0x37, 0x3}, {0x6, 0x3, 0xa, 0x0, 0x401, 0x9}, {0x4, 0x5, 0x7, 0x8, 0x6, 0x1}, {0x0, 0x3, 0x7, 0x9, 0x29d74000, 0x5}, {0x5, 0xe, 0x1, 0x4, 0x7, 0x3}, {0x0, 0x6, 0x2, 0x200, 0x6, 0xa9}, {0x4ef, 0x79, 0x400, 0xeac, 0x8, 0x9}, {0x2, 0x7, 0xe320, 0xffff, 0xab6, 0xd}, {0x69, 0xf218, 0xfffffff9, 0x2, 0x2, 0x80000000}, {0x9, 0xc7, 0x0, 0x9, 0x7, 0x5}, {0x2621a7b7, 0xe7c1, 0x2, 0xffff, 0x9, 0x6}, {0x17b, 0x5, 0x4, 0xfffffff5, 0x3, 0xeb1fe55}], [{0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x143cbf7b1deaf40c}, {0x0, 0x3}, {0x4, 0x1}, {0x4}, {0x5}, {0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x39e731b809315259}, {0x3}, {}, {0x52f4ff087506d13f}, {0x5, 0x1}, {0x5}, {0x5}, {0x1}, {0x4, 0x1}, {0x7}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0xe44fb019ebeeb93f}, {0x5, 0x1}, {0x5, 0x1}, {0x634d80806778aba6}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0xd}, {}, {0x0, 0x1}, {0x3}, {0xf, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x6}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x69f3775499c930e0, 0x1}, {0x7, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x7c, 0x6, "396b5f671cd7a95f17fada1cd7b80471af28070a6d470d04088073eb1a19eefbea827c4a94956fc250638cc49438fee246561055a4401bbaf3162bc9ba87ac9272cfc9bc24c959572add4940e3d1680b2efd4d21e1ed620d4301200e9cf5a72d748b27a6ecc5f000027e0d6c18409f71c545de7901459ef4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_vlan={0x18c, 0x4, 0x0, 0x0, {{0x9}, {0x9c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xdac}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x4, 0x8, 0x0, 0xc3}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x6, 0x3, 0x1c3, 0x2}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb77}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x1d21, 0x20000005, 0x5, 0x2}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x2, 0x3, 0x9, 0x2}, 0x3}}]}, {0xc5, 0x6, "b9d24414630a0aaa7063ab36fac073e1618b02a6dca16e3bd656feaa4932288a66ab922e66f69c236145024963f1060c70cefdaa843b6450599e91e4bdaa1e0d34e91588a1ae0037ba5c2d6f853cc04792924a3acee4fd98fb7309ab74a046a9e1668003ecea56d75abc8b1fbe7259c52b17e50e2b88a3646c146eabab97016acd19507f9dd989e5ac031f7d06a2110b83003431e57f9ae83ef2a0f42df1644a251fa28701a6b1903cb9b6c855092cb82da122724aa510f923f235385b731bcfff"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0xc0, 0x0, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd9a8b}, @TCA_MPLS_LABEL={0x8, 0x5, 0x5b64e}, @TCA_MPLS_LABEL={0x8, 0x5, 0xa0903}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_TTL={0x5, 0x7, 0x7f}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x5, 0xffffffffffffffff, 0x3, 0x7}, 0x1}}]}, {0x38, 0x6, "4a8413ca125c3a30ca1a7e59e1bc0126067687255298b3a386f3c31d1b985e09e3a7e861d63d3717a0196e468b902b86baf99956"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_nat={0x184, 0x12, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x7, 0x10000000, 0xdbf5, 0x2}, @broadcast, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0x8f14, 0x7, 0x2, 0xc}, @empty, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7ff, 0x6, 0x5, 0x1}, @private=0xa010102, @multicast2, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x1, 0x6, 0x3995, 0x7}, @multicast2, @private=0xa010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x87b, 0x3, 0x2, 0x81, 0x7}, @loopback, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x572, 0x2, 0x33, 0x10000}, @multicast1, @private=0xa010101, 0xffffff00, 0x1}}]}, {0x6b, 0x6, "3dfcaa52f1cba299c5fa4a455f5a2fce898adb02f64e84627af3087a4d5ecdb6b4674cb1becafbd480a35d61484814675eb67fb8a17f41e39a61d32cde2c7771edefd4c569ca91ab9978c830710ff0b890ee0e1293693ea14da279247451aa8fd2543d848b60b2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x124, 0x1e, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xee, 0x6, "d7bf11ac7a8c4e980387d5668f6aa42d8a076ba2d871c7ad8b2b49170489c404fc400a97f5151aedcedde54f0a3efd1826e4104d02a6e051d4c2ee98d5b33a42da2918590d70f6532db5de891b3b104dfeff2f302733fc11549dc7c23526b29e1b0768a3abe659799c236df9e605a40862bccba4be716509acaaca606f7ea23ee0dc01a6c57eaaccbabc8cacdbe7625f8b795049ad14a6644dae0e86ffae110b48d731adab4c56a12f8fa21e12132872c7e01d4050cede006e0a601f2177155cf9f0586df0f98a2a174c9a1bc524227ec066a406f78df4d9f244d354aa18865e90a7fb12946343a44206"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ctinfo={0x4c, 0x15, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xc015}]}, {0x18, 0x6, "f2f488dd7e0dba9ff1564cc8fe0f787edefaad0c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_POLICE={0xc, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}, @TCA_BASIC_EMATCHES={0x134, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0xf0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7f, 0x7, 0xa}, {{0x4}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x2, 0x7fff}, {0xc0, 0xa, 0x2, "54ef3c2207ab320b2ad0"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x800, 0x3, 0x1}, {0xfffffff0, 0x2, 0x1, 0x5}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x9b8, 0x2, 0xff}, {0x1, 0x6, 0x0, "8ebabce9703a"}}}, @TCF_EM_META={0x70, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x100}, [@TCA_EM_META_LVALUE={0x30, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="fa918c27f910168ad2", @TCF_META_TYPE_VAR="f1398b0f055e7edf09d5", @TCF_META_TYPE_VAR="379d56b9fac5e2", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="be95f724c138"]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x2e, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="972e71ede9efd828", @TCF_META_TYPE_VAR="5c5175944dfe19e5dde4", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR='$', @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="05e83950b93cea"]}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7999, 0x1, 0x5c82}, {0x5, 0x9, 0x8, 0x1, 0x6, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7c77, 0x7, 0xaf6}, {{0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xe, 0x1, 0x2}, {0xffffffff, 0x2, 0x80, 0x1, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x5c98}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) eventfd2(0x8, 0x1) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r6 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f0000003e40)=[{{&(0x7f0000000540)=@caif=@dgm, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/18, 0x12}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000680)=""/97, 0x61}], 0x3, &(0x7f0000000740)=""/101, 0x65}, 0x3}, {{&(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000840)=""/178, 0xb2}, {&(0x7f0000000900)=""/190, 0xbe}, {&(0x7f00000009c0)=""/198, 0xc6}], 0x3}, 0x2}, {{&(0x7f0000000b00)=@can, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b80)=""/194, 0xc2}, {&(0x7f0000000c80)=""/121, 0x79}], 0x2}, 0x9}, {{&(0x7f0000000d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)=""/166, 0xa6}, {&(0x7f0000000e80)=""/15, 0xf}], 0x2, &(0x7f0000000f00)=""/148, 0x94}, 0x63c}, {{&(0x7f0000000fc0)=@nfc, 0x80, &(0x7f0000001100)=[{&(0x7f0000001040)=""/183, 0xb7}], 0x1, &(0x7f0000001140)=""/104, 0x68}, 0x3}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000011c0)=""/198, 0xc6}, {&(0x7f00000012c0)=""/91, 0x5b}, {&(0x7f0000001340)=""/54, 0x36}, {&(0x7f0000001380)=""/65, 0x41}, {&(0x7f0000001400)=""/15, 0xf}, {&(0x7f00000014c0)=""/151, 0x97}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000001440)}, {&(0x7f0000002580)=""/181, 0xb5}], 0x9, &(0x7f0000002700)=""/46, 0x2e}, 0x8001}, {{0x0, 0x0, &(0x7f0000002740), 0x0, &(0x7f0000002780)=""/83, 0x53}}, {{&(0x7f0000002800)=@hci, 0x80, &(0x7f0000003d80)=[{&(0x7f0000002880)=""/47, 0x2f}, {&(0x7f00000028c0)=""/102, 0x66}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/94, 0x5e}, {&(0x7f00000039c0)=""/143, 0x8f}, {&(0x7f0000003a80)=""/74, 0x4a}, {&(0x7f0000003b00)=""/148, 0x94}, {&(0x7f0000003bc0)=""/188, 0xbc}, {&(0x7f0000003c80)=""/254, 0xfe}], 0x9}, 0x1}], 0x8, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000080)=0xfff, 0x4) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000000)=0xffffff7e, 0x4) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYRESHEX], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x1, 0x3, 0xf4, {0x9, 0x21, 0x0, 0xc0, 0x1, {0x22, 0x4f}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x4, 0xe6}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x2, 0x47, 0x40, 0x8, 0x1}, 0x2a, &(0x7f0000000140)={0x5, 0xf, 0x2a, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x9, 0x80, 0x3, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x45, 0xc, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x4, 0xf, 0x7, [0xff0030]}]}, 0x6, [{0xfb, &(0x7f0000000180)=@string={0xfb, 0x3, "fe2df92d28b69d34000d6b5b8dd725eb663016da703bea05fc7ecd57b7fd5baea2f3898f2be13db83d374cb81804ecd40dfede269d0d0802f25e9b3c562d636f43c19dca7f1f6e9ef5d0a1f3b7a9536e0081cd011de4b909cbb18721c095cc57e13d2c5e0ff069b74490e797f78b5f8da37421fc20c0c2185dbb031e189288dff06f88ce51fb4f75a5d2806777eecf1dcbd520c863ba717a1840b84fb4f665667cd97cf95cad7d879db9d5c52e4752842135b16e5aff2d9ddfe7f1024dda2da0aa78009e977e762db6a694262205e3666a735e6af38edec8a85f9ce7c310139f5ed9be90be88b4d39bf6a719bac62ffcb77239cf37c5caea16"}}, {0x5f, &(0x7f0000000280)=@string={0x5f, 0x3, "19c53ad18e6c32787c7ee1e3106f1ad057ce695732171364535df382a3973351e4256dac5d2a4b6f7205384109ab1d1281a52b328dcde91fa4ea995afa032f094f67ab7d84e119f0958a7a8411eb51bc379bd9008def4eaafb9a62626e"}}, {0x72, &(0x7f0000000300)=@string={0x72, 0x3, "10b65565ec968b0262bcd1cca8bc829188f1562696cf11e80a24eaaad2a6c3a85ebf752fb9d99df638ab285418add036183492b4e6d7df21bf04dce5124ed4b6714977164fc8fbdd97911d51f11b3e88b3a3e7f35659106082f8b4b16343fd05038b9692a5bccc8a975bb501e843b64e"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x421}}, {0xa1, &(0x7f0000000400)=@string={0xa1, 0x3, "b405c246865e8caf525856dbd60089e83c69fa03d3d6e36011bbfa494eedf87d28400e74e49c938e2868fbbed383ddf6c02f0563334a0b3f5bcc4df12c23ff0cf5c9d3d33ecfd061cca39cdac8400aa042a507ac2dafb85d7a4c6a8c012b8bafb0440e11b0ea3e5615982bb21eee698fd47824cf1df6bfb53361a585b5ff35c9d22eb5a6ecdefca7cebdfc7d326576102790c6a0d79c8780301489c9036a24"}}]}) 9.122045759s ago: executing program 5 (id=2228): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) capset(0x0, 0x0) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) rt_sigsuspend(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x400000000f1]}, 0x8) (async, rerun: 32) r4 = eventfd2(0x9, 0x80000) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000001c0)={r4, 0x9, 0x2, r3}) (async, rerun: 64) read$FUSE(r2, &(0x7f0000004840)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 64) sched_setattr(r7, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x100, 0x9, 0x6, 0xfffffe0000000000, 0xfa13, 0x5}, 0x0) (async) madvise(&(0x7f00004f0000/0x3000)=nil, 0x3000, 0x17) (async) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)=0x14) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) (async) r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) mremap(&(0x7f00006ec000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) (async, rerun: 32) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020}, 0x2020) (async) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, 0x0) 9.098738167s ago: executing program 5 (id=2229): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r5) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x11, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000000000065d6004e24e0000002d4da24a80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ff9f1dbeb69c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023768f4bd36f4d3e378ff8d4be66af6816391ad6cd58248941463b4a1d0b288b16169b7d39ca162a60c5083724c807928125"], 0x90) (async) read$FUSE(r9, &(0x7f00000083c0)={0x2020}, 0x2020) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x0, r10, 0x1, 0x2, 0x6, @broadcast}, 0x14) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 9.01393679s ago: executing program 1 (id=2230): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)={0x3}) eventfd2(0x6, 0x80000) ioctl$KVM_IRQFD(r3, 0x4020ae76, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x17, &(0x7f0000000000)=0x1, 0x4) 8.045908328s ago: executing program 1 (id=2231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 7.953168166s ago: executing program 6 (id=2232): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x4, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x1c, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x174}}, 0x0) 6.46599662s ago: executing program 6 (id=2233): mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0]) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000000)=0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={@null, 0x0, 'bridge_slave_1\x00'}) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 5.854651117s ago: executing program 3 (id=2234): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES8, @ANYRES32=r0], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="47dac3a0df3d7c57cd3681e6154359144584f7510a00000000000000152b03"], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$SNDCTL_DSP_GETISPACE(r4, 0x8010500d, &(0x7f0000000040)) close_range(r3, r3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES8, @ANYRES32=r0], 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="47dac3a0df3d7c57cd3681e6154359144584f7510a00000000000000152b03"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) (async) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) ioctl$SNDCTL_DSP_GETISPACE(r4, 0x8010500d, &(0x7f0000000040)) (async) close_range(r3, r3, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) 5.65299792s ago: executing program 5 (id=2235): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='clear_refs\x00') readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 5.585799319s ago: executing program 0 (id=2236): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000903000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002000000fe8000000000000000000000000000000000000004"], 0x254}}, 0x0) 5.543533133s ago: executing program 6 (id=2237): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) bind$xdp(r4, &(0x7f0000000100), 0x10) 5.523625215s ago: executing program 5 (id=2238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000143000/0x2000)=nil, 0x2000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) syz_open_procfs$namespace(r3, &(0x7f0000000c00)='ns/pid\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r6, &(0x7f0000000200), 0x0}, 0x20) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = getpgrp(0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x1, 0x0) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r11, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) getpriority(0x1, r10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) setsockopt(r7, 0x84, 0x400, &(0x7f0000000200)="1a0000000200", 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 5.281819117s ago: executing program 0 (id=2239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014640000000c0a0101000000000000ee000a0000060900020073797a31000000000900010073797a31000000003800038034000080040001800c000540000000000000004914000b801000e6800b0001006f626a72656600000c00044000000000000007"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.975590216s ago: executing program 6 (id=2240): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3.916910606s ago: executing program 5 (id=2241): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)={0x3}) eventfd2(0x6, 0x80000) ioctl$KVM_IRQFD(r3, 0x4020ae76, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x17, &(0x7f0000000000)=0x1, 0x4) 2.345887029s ago: executing program 0 (id=2242): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) epoll_create(0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000014001a80100004800c000480"], 0x34}}, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x3, r3, 0x8}, 0xc) mremap(&(0x7f0000754000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000088a000/0x1000)=nil) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000d5e000/0x2000)=nil, &(0x7f0000c6d000/0x4000)=nil, 0x2000, 0x2}) 2.345552244s ago: executing program 6 (id=2243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 1.825001892s ago: executing program 3 (id=2244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x39) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='rxrpc_call_complete\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r6, &(0x7f0000000040)={{0x3, @null}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='rtc_alarm_irq_enable\x00', r2, 0x0, 0x40}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000060000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) 1.317680131s ago: executing program 1 (id=2245): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@mcast2, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f00000005c0)=0xe8) getegid() r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) write(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [{0x20, 'nl80211\x00'}, {0x20, '\x12#'}, {0x20, '}\xf19*\xa5\x9d\xca\x95\xa5)\xc1g\xc7OM\x89e\r\x89o\xf9\xa0\xc5\"\x87\x95\xbco,\xeda\x93\xcb:_Y\x163sv\xa5/\x1ec\x93^\"\xd48Xs>]\xba\x12\x02\x0f8#\x7f]\x87\xd6\xcc\rH\r\x15\xbe.B:\xcdv\xf6\x1b~\xb3\xb0}x\x8d\x00z%W\xac\xe3@\xd0\x02\xf1\x0f\x18\xe1_\xb9\xdeM\xf5\x92u\xf3\xe1R\xdb\t\xb6\x82\x15\xbc\xae\xe0\xb0,>\a\xd1J\x81/L\x17\xe0\r\\\xb9\xc9\xcf\x1f\xd9\t\xe8\x03\xdb`\xbb\x91\x97k\xa5\xc4\x19;\xd2{\xbd\x85\xac\xe8\xaf\xd2\xd78+8\x80jJ\xa0\x9f\xc5eb\x19\xdc)\xbal\x90\x7f)\x89\xcd\xb7\x89\x19+\x1bj1\xf0\x13\xe6c\xe0\x1frX\xe3\xaeT\x9bO\xbc\x14\f\x7fz#\xbe\x10S\xae\x92k\xe4'}, {0x20, '/@\','}, {0x20, '@'}, {0x20, 'nl80211\x00'}], 0xa, "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"}, 0x217) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000680)={0x5, 0xd}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r7) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc9da, 0xf, 0x8, 0x80, 0x2, 0x5d0, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x2, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x1, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x1000000, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x6, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x6, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0x1, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x400000, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x80005, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x27757394, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x9, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x600, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x9, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x3ff, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0xa6a, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x3, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfffffff8]}, 0x45c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) 822.128899ms ago: executing program 0 (id=2246): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioperm(0x0, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(r1, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x2) close(0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) pread64(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r6, 0x5501) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x8, 0x0, 0x0, 0x7ff00000}]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 809.256791ms ago: executing program 3 (id=2247): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x88, 0x80, 0x0, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x1, 0x38, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@cipso={0x86, 0x6, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x0, 0xfffe, 0x0, 0x0, {[@generic={0xfe, 0x6, "f7ab9a4f"}]}}}}}}}, 0x0) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000100), 0x1003) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000004}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x2000007b, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x82, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r10, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket(0x10, 0x803, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) (async) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) 729.744275ms ago: executing program 5 (id=2248): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf2502000000", @ANYRES32=r0, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x2000000) 649.48309ms ago: executing program 1 (id=2249): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r0, 0x1) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "45cc07", 0x8, 0x2b, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @local, {[@fragment={0x29, 0x0, 0xa, 0x1, 0x0, 0xf, 0x68}]}}}}}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xa4edd6bb19995dfd}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {0x3}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x54, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x8, 0x5, 0xf8, 0x3e}, {0x1, 0x1, 0x0, 0xe}, {0x3, 0x3, 0x7, 0xf59}, {0x1ff, 0x5, 0x7, 0xcb}, {0x9, 0x1, 0x9, 0x3ff}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffff, 0xc}}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x200008d8}, 0x20004804) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000001300)={0x1038, r5, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3d}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x1038}, 0x1, 0x0, 0x0, 0x4004000}, 0x8880) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="f00000001000010025bd7000fcdbdf257f000001000000000000000000000000ac14142a0000000000000000000000004e2100004e2000010a0000a087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000002000004d233000000fe8000000000000000000f00000000bb01000080000000000c082c500000000000000000000000000b00000000000000070000000000000005000000000000000600000000000000070000000000000001000100000000000300000000000000130d00000000000006000000000000000600000006000000d6a500002abd70000b3500000a0001082000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x4840) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r9, 0x1, 0x0) (async) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r11 = gettid() openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x44100, 0x0) timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) 620.184539ms ago: executing program 3 (id=2250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e80)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000072"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="2000000042000701feffffff0000000003"], 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x1, 0x7, 0x12, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x6f, 0x8, 0x8001, 0xe}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000040000150400020a0000000000004008", @ANYRES32=r0, @ANYBLOB='\t\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="01000000010000000100"/28], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x9, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4048014) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x4e22, 0x4, 'lblcr\x00', 0x32, 0x1000000, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ufs\x00', 0x2208004, 0x0) 0s ago: executing program 1 (id=2251): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c64d2, &(0x7f0000000040)={r4}) kernel console output (not intermixed with test programs): [T11264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 448.655173][T11264] Call Trace: [ 448.655179][T11264] [ 448.655185][T11264] dump_stack_lvl+0x16c/0x1f0 [ 448.655209][T11264] should_fail_ex+0x512/0x640 [ 448.655235][T11264] should_failslab+0xc2/0x120 [ 448.655256][T11264] kmem_cache_alloc_noprof+0x83/0x770 [ 448.655273][T11264] ? ipv6_chk_mcast_addr+0x331/0x9a0 [ 448.655291][T11264] ? skb_clone+0x190/0x3f0 [ 448.655311][T11264] ? skb_clone+0x190/0x3f0 [ 448.655325][T11264] skb_clone+0x190/0x3f0 [ 448.655342][T11264] ip6_finish_output2+0x13b2/0x1cf0 [ 448.655367][T11264] ? ip6_dst_mtu_maybe_forward.constprop.0+0x1be/0x530 [ 448.655398][T11264] __ip6_finish_output+0x3cd/0x1010 [ 448.655426][T11264] ip6_output+0x253/0x710 [ 448.655454][T11264] ip6_mr_output+0x233/0x11b0 [ 448.655474][T11264] ? __pfx_nf_nat_ipv6_local_fn+0x10/0x10 [ 448.655500][T11264] ? nf_nat_ipv6_local_fn+0x38a/0x530 [ 448.655525][T11264] ? __pfx_ip6_mr_output+0x10/0x10 [ 448.655542][T11264] ? __ip6_local_out+0x45b/0xa80 [ 448.655559][T11264] ? nf_hook_slow+0x132/0x200 [ 448.655579][T11264] ? __ip6_local_out+0x2f1/0xa80 [ 448.655602][T11264] ? __pfx_dst_output+0x10/0x10 [ 448.655626][T11264] ? ip6_local_out+0x2a9/0x4d0 [ 448.655642][T11264] ip6_local_out+0x2a9/0x4d0 [ 448.655663][T11264] ip6_send_skb+0x112/0x460 [ 448.655688][T11264] udp_v6_send_skb+0x96f/0x1910 [ 448.655716][T11264] udpv6_sendmsg+0x23b1/0x2d30 [ 448.655734][T11264] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 448.655770][T11264] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 448.655794][T11264] ? __lock_acquire+0x436/0x2890 [ 448.655824][T11264] ? reacquire_held_locks+0xcd/0x1f0 [ 448.655855][T11264] ? rcu_is_watching+0x12/0xc0 [ 448.655870][T11264] ? __local_bh_enable_ip+0xa4/0x120 [ 448.655894][T11264] ? lockdep_hardirqs_on+0x7c/0x110 [ 448.655914][T11264] ? inet_autobind+0x145/0x1a0 [ 448.655934][T11264] ? __local_bh_enable_ip+0xa4/0x120 [ 448.655957][T11264] ? inet_autobind+0x14a/0x1a0 [ 448.655979][T11264] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 448.655999][T11264] ? inet6_sendmsg+0x105/0x140 [ 448.656016][T11264] inet6_sendmsg+0x105/0x140 [ 448.656036][T11264] ____sys_sendmsg+0x705/0xc30 [ 448.656058][T11264] ? copy_msghdr_from_user+0x10a/0x160 [ 448.656075][T11264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.656100][T11264] ? __pfx__kstrtoull+0x10/0x10 [ 448.656124][T11264] ___sys_sendmsg+0x134/0x1d0 [ 448.656142][T11264] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.656171][T11264] ? find_held_lock+0x2b/0x80 [ 448.656214][T11264] __sys_sendmmsg+0x200/0x420 [ 448.656234][T11264] ? __pfx___sys_sendmmsg+0x10/0x10 [ 448.656259][T11264] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 448.656293][T11264] ? fput+0x70/0xf0 [ 448.656307][T11264] ? ksys_write+0x1ac/0x250 [ 448.656327][T11264] ? __pfx_ksys_write+0x10/0x10 [ 448.656352][T11264] __x64_sys_sendmmsg+0x9c/0x100 [ 448.656379][T11264] ? lockdep_hardirqs_on+0x7c/0x110 [ 448.656399][T11264] do_syscall_64+0xcd/0xf80 [ 448.656421][T11264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.656438][T11264] RIP: 0033:0x7fe4d498f749 [ 448.656451][T11264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.656466][T11264] RSP: 002b:00007fe4d5878038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 448.656483][T11264] RAX: ffffffffffffffda RBX: 00007fe4d4be5fa0 RCX: 00007fe4d498f749 [ 448.656493][T11264] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000005 [ 448.656502][T11264] RBP: 00007fe4d5878090 R08: 0000000000000000 R09: 0000000000000000 [ 448.656510][T11264] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 448.656519][T11264] R13: 00007fe4d4be6038 R14: 00007fe4d4be5fa0 R15: 00007ffee890de48 [ 448.656544][T11264] [ 449.091554][ T30] audit: type=1400 audit(1766076847.130:561): avc: denied { lock } for pid=11261 comm="syz.3.1600" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 449.141214][T11271] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 449.272839][T11276] fuse: Bad value for 'user_id' [ 449.282481][T11276] fuse: Bad value for 'user_id' [ 449.322384][ T5958] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 449.402297][ T5815] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 449.522210][ T5958] usb 4-1: Using ep0 maxpacket: 32 [ 449.532725][ T5958] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 449.549166][ T5958] usb 4-1: config 0 has no interface number 0 [ 449.559309][ T5958] usb 4-1: config 0 interface 184 has no altsetting 0 [ 449.581694][ T5958] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 449.601385][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.601424][ T5815] usb 2-1: device descriptor read/64, error -71 [ 449.627458][ T5958] usb 4-1: Product: syz [ 449.631631][ T5958] usb 4-1: Manufacturer: syz [ 449.636535][ T5958] usb 4-1: SerialNumber: syz [ 449.655233][ T5958] usb 4-1: config 0 descriptor?? [ 449.671504][ T5958] smsc75xx v1.0.0 [ 449.882428][ T5815] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 450.014003][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'. [ 450.032497][ T5815] usb 2-1: device descriptor read/64, error -71 [ 450.156837][ T5815] usb usb2-port1: attempt power cycle [ 450.232159][ T6435] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 450.414787][ T6435] usb 5-1: Using ep0 maxpacket: 8 [ 450.429799][ T6435] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 450.445992][ T6435] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.464626][ T6435] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 450.478147][ T6435] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 450.488646][ T6435] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.507559][ T6435] usb 5-1: Product: syz [ 450.512352][ T5815] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 450.531630][ T6435] usb 5-1: Manufacturer: syz [ 450.542870][ T6435] usb 5-1: SerialNumber: syz [ 450.555153][ T6435] usb 5-1: config 0 descriptor?? [ 450.582132][ T5815] usb 2-1: device descriptor read/8, error -71 [ 450.706964][ T5958] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 450.770182][ T6435] usb 5-1: USB disconnect, device number 22 [ 450.942872][ T5958] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 450.950595][ T5815] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 450.982750][ T5815] usb 2-1: device descriptor read/8, error -71 [ 450.983922][ T5958] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 451.038398][ T5958] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 451.048841][ T5958] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 451.058667][ T5958] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 451.092518][ T5815] usb usb2-port1: unable to enumerate USB device [ 451.796652][T11338] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 451.827038][ T30] audit: type=1400 audit(1766076849.840:562): avc: denied { map } for pid=11337 comm="syz.4.1613" path="socket:[31211]" dev="sockfs" ino=31211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 451.903509][T11338] SELinux: failed to load policy [ 452.039688][ T5958] usb 4-1: USB disconnect, device number 36 [ 452.109776][T11345] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 453.109722][T11323] Set syz1 is full, maxelem 65536 reached [ 453.272757][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1620'. [ 453.843345][T11379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1625'. [ 453.853275][T11379] openvswitch: netlink: Flow actions attr not present in new flow. [ 454.875368][T11419] binder: BINDER_SET_CONTEXT_MGR already set [ 454.892036][T11419] binder: 11418:11419 ioctl 4018620d 200000000100 returned -16 [ 455.067769][T11419] binder: BINDER_SET_CONTEXT_MGR already set [ 455.073774][T11419] binder: 11418:11419 ioctl 4018620d 2000000002c0 returned -16 [ 455.401503][ T30] audit: type=1400 audit(1766076853.440:563): avc: denied { bind } for pid=11436 comm="syz.3.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 455.631350][T11438] hfsplus: unable to find HFS+ superblock [ 455.973058][T11455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1644'. [ 456.169334][T11461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1647'. [ 456.409308][T11473] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 456.409308][T11473] program syz.1.1651 not setting count and/or reply_len properly [ 457.053647][T11481] fuse: Bad value for 'fd' [ 457.930349][ T30] audit: type=1800 audit(1766076855.700:564): pid=11493 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1657" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 458.109997][ T30] audit: type=1400 audit(1766076856.150:565): avc: denied { listen } for pid=11503 comm="syz.2.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 458.729486][ T30] audit: type=1400 audit(1766076856.770:566): avc: denied { mounton } for pid=11510 comm="syz.4.1664" path="/333/file1/file0" dev="autofs" ino=30458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 458.796224][T11517] fuse: Invalid rootmode [ 459.338001][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1664'. [ 460.242378][T11548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1674'. [ 460.534953][T11564] fuse: Invalid rootmode [ 460.712575][ T30] audit: type=1400 audit(1766076858.760:567): avc: denied { ioctl } for pid=11565 comm="syz.2.1679" path="socket:[31436]" dev="sockfs" ino=31436 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 460.836739][T11574] FAULT_INJECTION: forcing a failure. [ 460.836739][T11574] name failslab, interval 1, probability 0, space 0, times 0 [ 461.498574][T11574] CPU: 0 UID: 0 PID: 11574 Comm: syz.3.1682 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.498601][T11574] Tainted: [L]=SOFTLOCKUP [ 461.498607][T11574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.498617][T11574] Call Trace: [ 461.498622][T11574] [ 461.498628][T11574] dump_stack_lvl+0x16c/0x1f0 [ 461.498652][T11574] should_fail_ex+0x512/0x640 [ 461.498676][T11574] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 461.498706][T11574] should_failslab+0xc2/0x120 [ 461.498727][T11574] kmem_cache_alloc_noprof+0x83/0x770 [ 461.498743][T11574] ? skb_clone+0x190/0x3f0 [ 461.498762][T11574] ? skb_clone+0x190/0x3f0 [ 461.498776][T11574] skb_clone+0x190/0x3f0 [ 461.498791][T11574] netlink_deliver_tap+0xabd/0xd30 [ 461.498813][T11574] netlink_unicast+0x71f/0x870 [ 461.498834][T11574] ? __pfx_netlink_unicast+0x10/0x10 [ 461.498853][T11574] ? genl_rcv_msg+0x4bb/0x800 [ 461.498881][T11574] netlink_ack+0x696/0xb80 [ 461.498909][T11574] netlink_rcv_skb+0x332/0x420 [ 461.498927][T11574] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.498949][T11574] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.498979][T11574] ? netlink_deliver_tap+0x1ae/0xd30 [ 461.499001][T11574] genl_rcv+0x28/0x40 [ 461.499020][T11574] netlink_unicast+0x5aa/0x870 [ 461.499043][T11574] ? __pfx_netlink_unicast+0x10/0x10 [ 461.499072][T11574] netlink_sendmsg+0x8c8/0xdd0 [ 461.499096][T11574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.499125][T11574] ____sys_sendmsg+0xa5d/0xc30 [ 461.499148][T11574] ? copy_msghdr_from_user+0x10a/0x160 [ 461.499164][T11574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.499196][T11574] ___sys_sendmsg+0x134/0x1d0 [ 461.499215][T11574] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.499263][T11574] __sys_sendmsg+0x16d/0x220 [ 461.499281][T11574] ? __pfx___sys_sendmsg+0x10/0x10 [ 461.499313][T11574] do_syscall_64+0xcd/0xf80 [ 461.499335][T11574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.499352][T11574] RIP: 0033:0x7f1c6e98f749 [ 461.499366][T11574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.499381][T11574] RSP: 002b:00007f1c6f805038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.499398][T11574] RAX: ffffffffffffffda RBX: 00007f1c6ebe5fa0 RCX: 00007f1c6e98f749 [ 461.499408][T11574] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 461.499417][T11574] RBP: 00007f1c6f805090 R08: 0000000000000000 R09: 0000000000000000 [ 461.499426][T11574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.499434][T11574] R13: 00007f1c6ebe6038 R14: 00007f1c6ebe5fa0 R15: 00007fff345846d8 [ 461.499458][T11574] [ 462.730874][T11593] binfmt_misc: Unknown parameter '1ܐmѼl;4%fȉrŀmE "1ͅhCYNwZBH' [ 462.748294][T11595] FAULT_INJECTION: forcing a failure. [ 462.748294][T11595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.771525][T11595] CPU: 0 UID: 0 PID: 11595 Comm: syz.2.1689 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.771552][T11595] Tainted: [L]=SOFTLOCKUP [ 462.771558][T11595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 462.771568][T11595] Call Trace: [ 462.771574][T11595] [ 462.771580][T11595] dump_stack_lvl+0x16c/0x1f0 [ 462.771606][T11595] should_fail_ex+0x512/0x640 [ 462.771634][T11595] _copy_to_user+0x32/0xd0 [ 462.771660][T11595] simple_read_from_buffer+0xcb/0x170 [ 462.771692][T11595] proc_fail_nth_read+0x197/0x240 [ 462.771712][T11595] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 462.771732][T11595] ? rw_verify_area+0xcf/0x6c0 [ 462.771750][T11595] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 462.771767][T11595] vfs_read+0x1e4/0xcf0 [ 462.771788][T11595] ? __pfx___mutex_lock+0x10/0x10 [ 462.771813][T11595] ? __pfx_vfs_read+0x10/0x10 [ 462.771840][T11595] ? __fget_files+0x20e/0x3c0 [ 462.771875][T11595] ksys_read+0x12a/0x250 [ 462.771894][T11595] ? __pfx_ksys_read+0x10/0x10 [ 462.771922][T11595] do_syscall_64+0xcd/0xf80 [ 462.771943][T11595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.771959][T11595] RIP: 0033:0x7f5da5f8e15c [ 462.771973][T11595] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 462.771989][T11595] RSP: 002b:00007f5da6d5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 462.772005][T11595] RAX: ffffffffffffffda RBX: 00007f5da61e5fa0 RCX: 00007f5da5f8e15c [ 462.772015][T11595] RDX: 000000000000000f RSI: 00007f5da6d5f0a0 RDI: 0000000000000004 [ 462.772024][T11595] RBP: 00007f5da6d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 462.772034][T11595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.772043][T11595] R13: 00007f5da61e6038 R14: 00007f5da61e5fa0 R15: 00007ffd55daa438 [ 462.772067][T11595] [ 464.014886][T11619] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1697'. [ 464.024659][T11618] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1697'. [ 464.513214][ T30] audit: type=1804 audit(1766076862.550:568): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1696" name="/newroot/338/file0" dev="tmpfs" ino=1778 res=1 errno=0 [ 464.726014][ T30] audit: type=1804 audit(1766076862.560:569): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1696" name="/newroot/338/file0" dev="tmpfs" ino=1778 res=1 errno=0 [ 465.311603][ T10] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 466.006363][ T10] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 466.054669][ T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 466.076537][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 466.093105][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 466.110009][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 466.137536][ T10] usb 2-1: Product: syz [ 466.144846][ T10] usb 2-1: Manufacturer: syz [ 466.158281][ T10] usb 2-1: SerialNumber: syz [ 466.172323][ T10] usb 2-1: config 0 descriptor?? [ 466.180947][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 466.200052][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 466.228955][ T10] usb 2-1: selecting invalid altsetting 0 [ 466.266977][T11669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1705'. [ 466.655957][ T10] usb 2-1: USB disconnect, device number 28 [ 466.806945][ T30] audit: type=1400 audit(1766076864.851:570): avc: denied { read } for pid=11675 comm="syz.3.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 466.831417][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 466.861235][ T30] audit: type=1400 audit(1766076864.851:571): avc: denied { bind } for pid=11675 comm="syz.3.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 466.915957][ T30] audit: type=1326 audit(1766076864.951:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.2.1705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5da5f8f749 code=0x0 [ 467.241533][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 467.249528][ T10] usb 2-1: config 0 has no interfaces? [ 467.268743][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 467.282474][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.293654][ T10] usb 2-1: Product: syz [ 467.302677][ T10] usb 2-1: Manufacturer: syz [ 467.318783][ T10] usb 2-1: SerialNumber: syz [ 467.333243][ T10] usb 2-1: config 0 descriptor?? [ 468.261489][T11711] fuse: Unknown parameter '0xffffffffffffffff' [ 468.268508][ T10] usb 2-1: USB disconnect, device number 29 [ 468.475115][T11706] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1712'. [ 468.517836][T11720] binder: BINDER_SET_CONTEXT_MGR already set [ 468.524049][T11720] binder: 11719:11720 ioctl 4018620d 200000000100 returned -16 [ 468.672600][T11721] binder: BINDER_SET_CONTEXT_MGR already set [ 468.678593][T11721] binder: 11719:11721 ioctl 4018620d 2000000002c0 returned -16 [ 469.947133][ T30] audit: type=1804 audit(1766076867.991:573): pid=11746 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1726" name="/newroot/323/file0" dev="tmpfs" ino=1723 res=1 errno=0 [ 469.979178][ T30] audit: type=1804 audit(1766076867.991:574): pid=11746 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1726" name="/newroot/323/file0" dev="tmpfs" ino=1723 res=1 errno=0 [ 470.095039][T11752] binder: BINDER_SET_CONTEXT_MGR already set [ 470.101182][T11752] binder: 11751:11752 ioctl 4018620d 200000000100 returned -16 [ 470.141116][ T5930] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 470.310793][T11754] binder: BINDER_SET_CONTEXT_MGR already set [ 470.316889][T11754] binder: 11751:11754 ioctl 4018620d 2000000002c0 returned -16 [ 470.601017][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 470.607458][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 470.618276][ T5930] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 470.627382][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.648607][ T5930] usb 2-1: config 0 descriptor?? [ 470.656414][ T5930] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 471.172635][T11764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1734'. [ 471.182067][T11764] openvswitch: netlink: Flow key attr not present in new flow. [ 471.740792][T11781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1740'. [ 471.818429][T11783] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 472.394521][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1743'. [ 472.901137][ T5958] usb 2-1: USB disconnect, device number 30 [ 475.526433][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 475.964945][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 475.978359][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 476.019534][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 476.048553][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.064704][ T9] usb 1-1: config 0 descriptor?? [ 476.084164][ T9] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 476.690934][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 476.850640][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 476.922277][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 476.941189][ T9] usb 4-1: config 0 has an invalid interface number: 36 but max is 0 [ 476.949242][ T9] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 476.957548][ T9] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 476.966894][ T9] usb 4-1: config 0 has no interface number 0 [ 476.981826][ T9] usb 4-1: config 0 has no interface number 1 [ 476.988467][ T9] usb 4-1: config 0 interface 36 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 477.009397][ T9] usb 4-1: too many endpoints for config 0 interface 5 altsetting 156: 226, using maximum allowed: 30 [ 477.030544][ T9] usb 4-1: config 0 interface 5 altsetting 156 has 0 endpoint descriptors, different from the interface descriptor's value: 226 [ 477.044010][ T9] usb 4-1: config 0 interface 36 has no altsetting 0 [ 477.052120][ T9] usb 4-1: config 0 interface 5 has no altsetting 0 [ 477.067527][ T9] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=64.67 [ 477.080750][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.090236][ T9] usb 4-1: Product: syz [ 477.099413][ T9] usb 4-1: Manufacturer: syz [ 477.108480][ T9] usb 4-1: SerialNumber: syz [ 477.116715][ T9] usb 4-1: config 0 descriptor?? [ 477.661135][T11861] FAULT_INJECTION: forcing a failure. [ 477.661135][T11861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.707187][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 477.717853][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 477.727771][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 477.736665][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 477.740910][T11861] CPU: 0 UID: 0 PID: 11861 Comm: syz.1.1765 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.740935][T11861] Tainted: [L]=SOFTLOCKUP [ 477.740940][T11861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 477.740948][T11861] Call Trace: [ 477.740953][T11861] [ 477.740958][T11861] dump_stack_lvl+0x16c/0x1f0 [ 477.740980][T11861] should_fail_ex+0x512/0x640 [ 477.741004][T11861] _copy_from_iter+0x2a4/0x16c0 [ 477.741027][T11861] ? __alloc_skb+0x220/0x410 [ 477.741047][T11861] ? __alloc_skb+0x35d/0x410 [ 477.741066][T11861] ? __pfx__copy_from_iter+0x10/0x10 [ 477.741086][T11861] ? netlink_autobind.isra.0+0x158/0x370 [ 477.741111][T11861] netlink_sendmsg+0x820/0xdd0 [ 477.741131][T11861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.741157][T11861] ____sys_sendmsg+0xa5d/0xc30 [ 477.741175][T11861] ? copy_msghdr_from_user+0x10a/0x160 [ 477.741190][T11861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.741217][T11861] ___sys_sendmsg+0x134/0x1d0 [ 477.741232][T11861] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.741272][T11861] __sys_sendmsg+0x16d/0x220 [ 477.741287][T11861] ? __pfx___sys_sendmsg+0x10/0x10 [ 477.741316][T11861] do_syscall_64+0xcd/0xf80 [ 477.741335][T11861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.741350][T11861] RIP: 0033:0x7fc176d8f749 [ 477.741361][T11861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.741374][T11861] RSP: 002b:00007fc177b60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.741388][T11861] RAX: ffffffffffffffda RBX: 00007fc176fe5fa0 RCX: 00007fc176d8f749 [ 477.741397][T11861] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 477.741410][T11861] RBP: 00007fc177b60090 R08: 0000000000000000 R09: 0000000000000000 [ 477.741419][T11861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.741427][T11861] R13: 00007fc176fe6038 R14: 00007fc176fe5fa0 R15: 00007ffd18c64d48 [ 477.741448][T11861] [ 477.943779][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 477.956223][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 477.966027][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 477.984508][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 477.993938][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 478.002006][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 478.170197][T11862] wlan0 speed is unknown, defaulting to 1000 [ 478.231279][T11867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1767'. [ 478.255217][T11867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1767'. [ 478.326674][ T988] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.331153][ T5958] usb 1-1: USB disconnect, device number 33 [ 478.349584][T11867] ptrace attach of "./syz-executor exec"[5812] was attempted by "./syz-executor exec"[11867] [ 478.438648][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1767'. [ 478.485246][T11867] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.493482][T11867] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.999719][T11867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.015020][T11867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.190999][ T9] usb 4-1: USB disconnect, device number 37 [ 479.191155][ T30] audit: type=1326 audit(1766076877.241:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11883 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6e98f749 code=0x7ffc0000 [ 479.272779][ T30] audit: type=1326 audit(1766076877.271:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11883 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6e98f749 code=0x7ffc0000 [ 479.331337][ T9464] udevd[9464]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.5/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 479.361138][ T6330] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.387962][ T30] audit: type=1326 audit(1766076877.341:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11883 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f1c6e98f749 code=0x7ffc0000 [ 479.453262][ T988] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.465614][ T30] audit: type=1326 audit(1766076877.341:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11883 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6e98f749 code=0x7ffc0000 [ 479.530551][ T30] audit: type=1326 audit(1766076877.341:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11883 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6e98f749 code=0x7ffc0000 [ 479.594607][ T30] audit: type=1326 audit(1766076877.351:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11883 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f1c6e98f749 code=0x7ffc0000 [ 479.638427][ T6330] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.647897][ T6330] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.669940][ T6330] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.699624][ T30] audit: type=1326 audit(1766076877.351:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11883 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6e98f749 code=0x7ffc0000 [ 479.723508][ T30] audit: type=1326 audit(1766076877.351:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11883 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6e98f749 code=0x7ffc0000 [ 479.747423][ T30] audit: type=1326 audit(1766076877.351:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11883 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c6e98f749 code=0x7ffc0000 [ 479.771204][ T30] audit: type=1326 audit(1766076877.351:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11883 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6e98f749 code=0x7ffc0000 [ 479.812518][ T988] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.037449][ T988] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.040527][ T5817] Bluetooth: hci5: command tx timeout [ 480.220637][ T5815] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 480.345790][T11862] chnl_net:caif_netlink_parms(): no params data found [ 480.390529][ T5815] usb 4-1: Using ep0 maxpacket: 8 [ 480.403977][ T5815] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 480.477135][ T5815] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 480.490059][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.501684][ T5815] usb 4-1: config 0 descriptor?? [ 480.676322][T11862] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.702187][T11862] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.734930][ T5815] apple 0003:05AC:027D.0010: unknown main item tag 0x6 [ 480.748254][T11862] bridge_slave_0: entered allmulticast mode [ 480.774022][T11862] bridge_slave_0: entered promiscuous mode [ 480.788780][ T5815] apple 0003:05AC:027D.0010: unknown main item tag 0x0 [ 480.801971][ T988] bridge_slave_1: left allmulticast mode [ 480.807939][ T5815] apple 0003:05AC:027D.0010: unknown main item tag 0x4 [ 480.820753][ T988] bridge_slave_1: left promiscuous mode [ 480.851620][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.925124][ T988] bridge_slave_0: left allmulticast mode [ 480.965711][ T988] bridge_slave_0: left promiscuous mode [ 481.025939][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.035994][ T5815] apple 0003:05AC:027D.0010: unknown main item tag 0x0 [ 481.044788][T11923] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 481.057090][ T5815] apple 0003:05AC:027D.0010: hidraw0: USB HID v4.00 Device [HID 05ac:027d] on usb-dummy_hcd.3-1/input0 [ 481.140742][ T5815] usb 4-1: USB disconnect, device number 38 [ 481.205422][T11926] fido_id[11926]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 482.120378][ T5817] Bluetooth: hci5: command tx timeout [ 482.655024][T11952] binder: BINDER_SET_CONTEXT_MGR already set [ 482.671895][T11952] binder: 11951:11952 ioctl 4018620d 200000000100 returned -16 [ 482.875660][T11960] binder: BINDER_SET_CONTEXT_MGR already set [ 482.881810][T11960] binder: 11951:11960 ioctl 4018620d 2000000002c0 returned -16 [ 483.227891][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 483.649221][T11974] virtio-fs: tag not found [ 483.656159][T11974] overlay: filesystem on ./bus not supported [ 483.692042][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.746318][ T988] bond0 (unregistering): (slave c@0): Releasing backup interface [ 483.766353][ T988] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 483.795730][ T988] bond0 (unregistering): Released all slaves [ 483.845789][T11862] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.856629][T11862] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.876971][T11862] bridge_slave_1: entered allmulticast mode [ 483.896975][T11862] bridge_slave_1: entered promiscuous mode [ 484.110053][T11982] syzkaller0: entered promiscuous mode [ 484.118646][T11982] syzkaller0: entered allmulticast mode [ 484.152975][T11862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.202847][ T5817] Bluetooth: hci5: command tx timeout [ 484.227969][T11862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.417985][T11862] team0: Port device team_slave_0 added [ 484.549565][ T988] hsr_slave_0: left promiscuous mode [ 484.722110][ T988] hsr_slave_1: left promiscuous mode [ 484.800467][ T988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.926206][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.987444][ T988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.108550][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.182266][ T988] veth1_macvtap: left promiscuous mode [ 485.839081][ T988] veth0_macvtap: left promiscuous mode [ 485.881521][ T988] veth1_vlan: left promiscuous mode [ 485.886966][ T988] veth0_vlan: left promiscuous mode [ 486.290445][ T5817] Bluetooth: hci5: command tx timeout [ 487.445264][ T988] team0 (unregistering): Port device team_slave_1 removed [ 487.487989][ T988] team0 (unregistering): Port device team_slave_0 removed [ 488.121507][T11862] team0: Port device team_slave_1 added [ 488.366545][T12046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1808'. [ 488.385548][T11862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.430986][T11862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.475972][T11862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.493702][T11862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.501214][T11862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.529507][T11862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.799215][T11862] hsr_slave_0: entered promiscuous mode [ 488.854137][T11862] hsr_slave_1: entered promiscuous mode [ 488.953648][T11862] debugfs: 'hsr0' already exists in 'hsr' [ 489.006521][T11862] Cannot create hsr debugfs directory [ 489.414099][ T988] IPVS: stop unused estimator thread 0... [ 489.728296][T12076] syzkaller0: entered promiscuous mode [ 489.733907][T12076] syzkaller0: entered allmulticast mode [ 489.773012][T12082] binder: BINDER_SET_CONTEXT_MGR already set [ 489.789573][T12082] binder: 12081:12082 ioctl 4018620d 200000000100 returned -16 [ 489.958206][T12082] binder: BINDER_SET_CONTEXT_MGR already set [ 489.964277][T12082] binder: 12081:12082 ioctl 4018620d 2000000002c0 returned -16 [ 490.212423][T12095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1817'. [ 490.305051][T11862] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 490.309917][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 490.348002][T11862] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 490.414054][T11862] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 490.559417][T11862] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 490.603373][ T9] usb 2-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 490.730938][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.793000][ T9] usb 2-1: config 0 descriptor?? [ 490.859167][ T9] usb 2-1: unsupported MDLM descriptors [ 490.988376][T11862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.938805][ T9] usb 2-1: USB disconnect, device number 31 [ 491.957213][T11862] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.980699][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.987830][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.013103][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.020325][ T385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.126282][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 492.126297][ T30] audit: type=1400 audit(1766076890.172:601): avc: denied { sys_module } for pid=11862 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 492.330141][T11862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.567952][T12146] FAULT_INJECTION: forcing a failure. [ 492.567952][T12146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.693439][T12151] netlink: zone id is out of range [ 492.698593][T12151] netlink: zone id is out of range [ 492.703950][T12151] netlink: zone id is out of range [ 492.709141][T12151] netlink: zone id is out of range [ 492.714448][T12151] netlink: zone id is out of range [ 492.719639][T12151] netlink: zone id is out of range [ 492.724876][T12151] netlink: zone id is out of range [ 492.730120][T12151] netlink: zone id is out of range [ 492.730472][T12146] CPU: 1 UID: 0 PID: 12146 Comm: syz.1.1823 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.730494][T12146] Tainted: [L]=SOFTLOCKUP [ 492.730499][T12146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 492.730508][T12146] Call Trace: [ 492.730513][T12146] [ 492.730518][T12146] dump_stack_lvl+0x16c/0x1f0 [ 492.730540][T12146] should_fail_ex+0x512/0x640 [ 492.730565][T12146] _copy_from_iter+0x2a4/0x16c0 [ 492.730589][T12146] ? __alloc_skb+0x220/0x410 [ 492.730613][T12146] ? __alloc_skb+0x35d/0x410 [ 492.730632][T12146] ? __pfx__copy_from_iter+0x10/0x10 [ 492.730653][T12146] ? netlink_autobind.isra.0+0x158/0x370 [ 492.730678][T12146] netlink_sendmsg+0x820/0xdd0 [ 492.730699][T12146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.730724][T12146] ____sys_sendmsg+0xa5d/0xc30 [ 492.730743][T12146] ? copy_msghdr_from_user+0x10a/0x160 [ 492.730756][T12146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.730784][T12146] ___sys_sendmsg+0x134/0x1d0 [ 492.730799][T12146] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.730840][T12146] __sys_sendmsg+0x16d/0x220 [ 492.730854][T12146] ? __pfx___sys_sendmsg+0x10/0x10 [ 492.730883][T12146] do_syscall_64+0xcd/0xf80 [ 492.730902][T12146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.730917][T12146] RIP: 0033:0x7fc176d8f749 [ 492.730928][T12146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.730941][T12146] RSP: 002b:00007fc177b60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.730956][T12146] RAX: ffffffffffffffda RBX: 00007fc176fe5fa0 RCX: 00007fc176d8f749 [ 492.730965][T12146] RDX: 0000000000000080 RSI: 0000200000000c40 RDI: 0000000000000003 [ 492.730973][T12146] RBP: 00007fc177b60090 R08: 0000000000000000 R09: 0000000000000000 [ 492.730981][T12146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.730989][T12146] R13: 00007fc176fe6038 R14: 00007fc176fe5fa0 R15: 00007ffd18c64d48 [ 492.731010][T12146] [ 492.944521][T12151] netlink: zone id is out of range [ 492.945965][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'. [ 492.986913][T12151] netlink: zone id is out of range [ 493.043655][T12153] batadv_slave_0: entered promiscuous mode [ 493.376555][T11862] veth0_vlan: entered promiscuous mode [ 493.382626][T12159] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 493.428631][T12164] syzkaller0: entered promiscuous mode [ 493.434412][T12164] syzkaller0: entered allmulticast mode [ 493.443860][T11862] veth1_vlan: entered promiscuous mode [ 493.542577][T12169] syzkaller0: entered promiscuous mode [ 493.559770][T12169] syzkaller0: entered allmulticast mode [ 494.151052][ T30] audit: type=1400 audit(1766076891.722:602): avc: denied { write } for pid=12167 comm="syz.3.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 494.183717][T11862] veth0_macvtap: entered promiscuous mode [ 494.201759][T11862] veth1_macvtap: entered promiscuous mode [ 494.306718][T11862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.362516][T11862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.465158][ T6087] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.480029][ T6087] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.506424][ T6087] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.523609][ T6087] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.592145][T12180] tipc: Enabling of bearer rejected, failed to enable media [ 494.688064][ T6087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.717992][ T6087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.824821][ T6087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.849020][ T6087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.895290][T12185] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.944904][T12185] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.030717][T12187] ptrace attach of "./syz-executor exec"[5822] was attempted by ""[12187] [ 495.118952][ T30] audit: type=1400 audit(1766076893.162:603): avc: denied { mounton } for pid=11862 comm="syz-executor" path="/root/syzkaller.2h25ws/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 495.203051][T12189] pimreg: entered allmulticast mode [ 495.208606][ T30] audit: type=1400 audit(1766076893.222:604): avc: denied { mounton } for pid=11862 comm="syz-executor" path="/root/syzkaller.2h25ws/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 495.310201][ T30] audit: type=1400 audit(1766076893.222:605): avc: denied { mounton } for pid=11862 comm="syz-executor" path="/root/syzkaller.2h25ws/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=34180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 495.407817][ T5817] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 495.714568][ T30] audit: type=1400 audit(1766076893.252:606): avc: denied { mounton } for pid=11862 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 495.758778][T12193] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1764'. [ 496.291953][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 496.334463][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 496.343531][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 496.352949][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 496.362568][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 496.469055][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.583410][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.704718][T12216] syzkaller0: entered promiscuous mode [ 496.713095][T12216] syzkaller0: entered allmulticast mode [ 496.879919][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.096071][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.438708][T12207] chnl_net:caif_netlink_parms(): no params data found [ 497.936136][ T36] bridge_slave_1: left allmulticast mode [ 497.966967][ T36] bridge_slave_1: left promiscuous mode [ 497.994489][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.095902][ T30] audit: type=1804 audit(1766076896.142:607): pid=12257 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1847" name="/newroot/364/file0" dev="tmpfs" ino=1932 res=1 errno=0 [ 498.140806][ T36] bridge_slave_0: left allmulticast mode [ 498.228556][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1848'. [ 498.271900][ T36] bridge_slave_0: left promiscuous mode [ 498.439537][ T5816] Bluetooth: hci1: command tx timeout [ 498.446250][ T30] audit: type=1804 audit(1766076896.182:608): pid=12257 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1847" name="/newroot/364/file0" dev="tmpfs" ino=1932 res=1 errno=0 [ 498.478463][ T30] audit: type=1326 audit(1766076896.272:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.3.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6e98f749 code=0x7ffc0000 [ 498.509819][ T30] audit: type=1326 audit(1766076896.272:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.3.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6e98f749 code=0x7ffc0000 [ 498.549914][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.570091][ T30] audit: type=1326 audit(1766076896.272:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.3.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c6e98f749 code=0x7ffc0000 [ 498.594140][ T30] audit: type=1326 audit(1766076896.272:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.3.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6e98f749 code=0x7ffc0000 [ 498.618779][ T30] audit: type=1326 audit(1766076896.272:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.3.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6e98f749 code=0x7ffc0000 [ 499.216341][T12241] net_ratelimit: 14 callbacks suppressed [ 499.216353][T12241] Set syz1 is full, maxelem 65536 reached [ 499.379418][ T30] audit: type=1326 audit(1766076896.272:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.3.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1c6e9915dc code=0x7ffc0000 [ 499.468071][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1849'. [ 499.497385][ T30] audit: type=1326 audit(1766076896.272:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.3.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1c6e991514 code=0x7ffc0000 [ 499.586617][ T30] audit: type=1326 audit(1766076896.272:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.3.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1c6e991514 code=0x7ffc0000 [ 499.791740][T12279] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 500.215437][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.235861][ T36] bond0 (unregistering): (slave c@0): Releasing backup interface [ 500.245670][ T36] bond0 (unregistering): Released all slaves [ 500.303860][ T36] bond1 (unregistering): Released all slaves [ 500.462448][T12279] netdevsim netdevsim1: Direct firmware load for / [ 500.462448][T12279] failed with error -2 [ 500.523340][ T5817] Bluetooth: hci1: command tx timeout [ 500.574572][T12279] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 500.574572][T12279] [ 500.599142][T12207] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.609998][T12207] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.617116][T12207] bridge_slave_0: entered allmulticast mode [ 500.624465][T12207] bridge_slave_0: entered promiscuous mode [ 500.781909][T12207] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.883386][T12207] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.899549][T12207] bridge_slave_1: entered allmulticast mode [ 501.004145][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.010498][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.070616][T12207] bridge_slave_1: entered promiscuous mode [ 501.313471][T12301] binder: BINDER_SET_CONTEXT_MGR already set [ 501.419324][T12301] binder: 12297:12301 ioctl 4018620d 2000000002c0 returned -16 [ 501.463024][T12207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.581523][T12207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.761773][ T36] hsr_slave_0: left promiscuous mode [ 501.872638][ T36] hsr_slave_1: left promiscuous mode [ 501.881128][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.910430][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.944236][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.959344][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.032049][ T36] veth1_macvtap: left promiscuous mode [ 502.050377][ T36] veth0_macvtap: left promiscuous mode [ 502.073023][ T36] veth1_vlan: left promiscuous mode [ 502.078328][ T36] veth0_vlan: left promiscuous mode [ 502.128610][T12326] ptrace attach of "./syz-executor exec"[5808] was attempted by ""[12326] [ 502.625745][ T5817] Bluetooth: hci1: command tx timeout [ 503.048579][T12337] netlink: 'syz.1.1866': attribute type 83 has an invalid length. [ 503.373756][ T36] pimreg3 (unregistering): left allmulticast mode [ 504.179482][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 504.548820][ T36] team0 (unregistering): Port device team_slave_1 removed [ 504.589100][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 504.598094][ T10] usb 1-1: config 0 has an invalid interface number: 215 but max is 0 [ 504.607160][ T10] usb 1-1: config 0 has no interface number 0 [ 504.622449][ T10] usb 1-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 504.633867][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.642424][ T10] usb 1-1: Product: syz [ 504.646672][ T10] usb 1-1: Manufacturer: syz [ 504.651591][ T10] usb 1-1: SerialNumber: syz [ 504.659953][ T10] usb 1-1: config 0 descriptor?? [ 504.667519][ T10] io_ti 1-1:0.215: required endpoints missing [ 504.689183][ T5817] Bluetooth: hci1: command tx timeout [ 504.887874][ T10] usb 1-1: USB disconnect, device number 34 [ 505.289663][T12352] bridge0: entered promiscuous mode [ 505.310163][T12352] bridge0: left promiscuous mode [ 505.324816][T12357] syzkaller0: entered promiscuous mode [ 505.340949][T12357] syzkaller0: entered allmulticast mode [ 505.365745][T12207] team0: Port device team_slave_0 added [ 505.383849][T12207] team0: Port device team_slave_1 added [ 505.862976][T12207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.880797][T12207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.919525][ T5815] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 505.971632][T12207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.010641][T12207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.022134][T12207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.074787][T12207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.101819][ T5815] usb 1-1: Using ep0 maxpacket: 8 [ 506.112805][ T5815] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 506.168733][ T5815] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 506.201576][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.243233][ T5815] usb 1-1: config 0 descriptor?? [ 506.266137][ T5815] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 506.433108][T12207] hsr_slave_0: entered promiscuous mode [ 506.442519][T12207] hsr_slave_1: entered promiscuous mode [ 506.532849][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 506.532865][ T30] audit: type=1400 audit(1766076904.583:635): avc: denied { append } for pid=12394 comm="syz.5.1881" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 506.624987][ T30] audit: type=1400 audit(1766076904.583:636): avc: denied { open } for pid=12394 comm="syz.5.1881" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 507.172589][T12207] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 507.200067][T12207] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 507.224382][T12207] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 507.306213][T12207] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 508.024684][T12207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.096338][T12207] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.130757][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.137849][ T6330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.182566][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.189715][ T6087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.466149][T12434] syzkaller0: entered promiscuous mode [ 508.514032][T12434] syzkaller0: entered allmulticast mode [ 508.569524][ T6435] usb 1-1: USB disconnect, device number 35 [ 509.778176][ T30] audit: type=1400 audit(1766076907.683:637): avc: denied { map } for pid=12443 comm="syz.3.1889" path="socket:[35885]" dev="sockfs" ino=35885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 509.836767][T12207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.779194][T12478] bridge0: entered promiscuous mode [ 511.049680][T12462] bridge0: left promiscuous mode [ 511.441795][T12207] veth0_vlan: entered promiscuous mode [ 511.544614][T12207] veth1_vlan: entered promiscuous mode [ 511.648769][T12207] veth0_macvtap: entered promiscuous mode [ 511.666589][T12207] veth1_macvtap: entered promiscuous mode [ 511.767075][T12207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.832668][T12207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.879074][ T6330] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.918867][ T6330] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.943897][ T6330] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.963564][ T6894] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 511.980828][ T6330] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.043610][T12512] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1900'. [ 512.138789][ T6894] usb 2-1: Using ep0 maxpacket: 8 [ 512.167371][ T6894] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 512.198940][ T6894] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 512.216890][ T6894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.225150][ T6063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.240790][ T6894] usb 2-1: config 0 descriptor?? [ 512.257085][ T6063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.262270][ T6894] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 512.413396][ T6330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.508643][ T5958] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 512.526371][ T6330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.693920][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 512.707680][ T5958] usb 1-1: unable to get BOS descriptor or descriptor too short [ 512.725234][ T5958] usb 1-1: too many configurations: 99, using maximum allowed: 8 [ 512.753613][ T5958] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 512.865740][ T5958] usb 1-1: can't read configurations, error -61 [ 513.419456][ T5958] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 513.701758][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 513.730209][T12551] bridge0: entered promiscuous mode [ 513.870072][ T5958] usb 1-1: unable to get BOS descriptor or descriptor too short [ 513.889572][ T5958] usb 1-1: too many configurations: 99, using maximum allowed: 8 [ 513.913926][ T5958] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 513.934196][ T5958] usb 1-1: can't read configurations, error -61 [ 513.949246][ T5958] usb usb1-port1: attempt power cycle [ 514.235602][T12561] delete_channel: no stack [ 514.290880][T12547] bridge0: left promiscuous mode [ 514.309211][ T5958] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 514.359433][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 514.374816][ T5958] usb 1-1: unable to get BOS descriptor or descriptor too short [ 514.417630][ T5958] usb 1-1: too many configurations: 99, using maximum allowed: 8 [ 514.469390][ T5958] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 514.476979][ T5958] usb 1-1: can't read configurations, error -61 [ 514.639368][ T5958] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 514.689174][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 514.706983][ T5958] usb 1-1: unable to get BOS descriptor or descriptor too short [ 514.746573][ T5958] usb 1-1: too many configurations: 99, using maximum allowed: 8 [ 514.758022][ T6435] usb 2-1: USB disconnect, device number 32 [ 514.771706][ T5958] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 514.795819][ T5958] usb 1-1: can't read configurations, error -61 [ 514.812666][ T5958] usb usb1-port1: unable to enumerate USB device [ 515.045662][T12594] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1916'. [ 515.219623][ T30] audit: type=1326 audit(1766076913.273:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc176d8f749 code=0x7ffc0000 [ 515.556873][ T30] audit: type=1326 audit(1766076913.373:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc176d8f749 code=0x7ffc0000 [ 515.672562][ T30] audit: type=1326 audit(1766076913.423:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12605 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc176dc2005 code=0x7ffc0000 [ 515.991150][ T30] audit: type=1326 audit(1766076913.483:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc176d8f749 code=0x7ffc0000 [ 516.158786][T12620] bridge0: entered promiscuous mode [ 516.314642][ T30] audit: type=1326 audit(1766076913.483:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc176d8f749 code=0x7ffc0000 [ 516.423454][ T30] audit: type=1326 audit(1766076913.543:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc176d91667 code=0x7ffc0000 [ 516.495781][T12624] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1923'. [ 516.516896][T12624] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1923'. [ 516.544880][ T30] audit: type=1326 audit(1766076913.543:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc176d8f749 code=0x7ffc0000 [ 516.726724][T12631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.743753][ T30] audit: type=1326 audit(1766076913.543:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc176d8f749 code=0x7ffc0000 [ 516.839862][ T910] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 516.856383][T12617] bridge0: left promiscuous mode [ 516.898118][ T30] audit: type=1326 audit(1766076913.543:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fc176d8f749 code=0x7ffc0000 [ 517.000403][ T30] audit: type=1326 audit(1766076913.573:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12605 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc176d8f749 code=0x7ffc0000 [ 517.928340][ T910] usb 2-1: Using ep0 maxpacket: 8 [ 517.962905][ T910] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 517.976378][T12643] kernel profiling enabled (shift: 63) [ 517.989703][ T910] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 518.008441][T12643] profiling shift: 63 too large [ 518.025290][ T910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.071754][ T910] usb 2-1: config 0 descriptor?? [ 518.095868][ T910] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 518.328421][ T910] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 518.568406][ T910] usb 7-1: Using ep0 maxpacket: 16 [ 518.615423][ T910] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 518.951543][ T910] usb 7-1: config 0 has no interface number 0 [ 518.973454][ T910] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 519.006640][ T910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.020098][ T910] usb 7-1: Product: syz [ 519.024331][ T910] usb 7-1: Manufacturer: syz [ 519.029725][ T910] usb 7-1: SerialNumber: syz [ 519.049811][ T910] usb 7-1: config 0 descriptor?? [ 519.056811][ T910] hub 7-1:0.132: bad descriptor, ignoring hub [ 519.074419][ T910] hub 7-1:0.132: probe with driver hub failed with error -5 [ 519.101961][ T910] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/input/input16 [ 520.198834][ T5919] usb 2-1: USB disconnect, device number 33 [ 522.818089][ T10] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 522.941592][T12671] CIFS: Unable to determine destination address [ 523.001468][ T10] usb 2-1: device descriptor read/64, error -71 [ 523.273093][ T10] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 523.448050][ T10] usb 2-1: device descriptor read/64, error -71 [ 523.630657][ T10] usb usb2-port1: attempt power cycle [ 524.430248][ T10] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 524.468382][ T10] usb 2-1: device descriptor read/8, error -71 [ 524.591634][T12716] netlink: 'syz.6.1943': attribute type 11 has an invalid length. [ 524.638598][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 524.638612][ T30] audit: type=1400 audit(1766076922.574:652): avc: denied { read } for pid=12701 comm="syz.6.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 525.037929][ T10] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 525.049669][ T910] usb 7-1: USB disconnect, device number 2 [ 525.066476][ T30] audit: type=1400 audit(1766076922.634:653): avc: denied { shutdown } for pid=12701 comm="syz.6.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 525.096970][ T10] usb 2-1: device descriptor read/8, error -71 [ 525.263003][ T10] usb usb2-port1: unable to enumerate USB device [ 525.774559][ T910] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 525.934102][ T30] audit: type=1400 audit(1766076923.984:654): avc: denied { ioctl } for pid=12727 comm="syz.5.1951" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 525.963654][ T910] usb 7-1: device descriptor read/64, error -71 [ 526.307899][ T910] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 526.363586][T12731] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1951'. [ 527.204751][T12756] netlink: 'syz.0.1960': attribute type 4 has an invalid length. [ 527.212531][T12756] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1960'. [ 527.769286][T12761] loop3: detected capacity change from 0 to 7 [ 527.778872][T12761] Dev loop3: unable to read RDB block 7 [ 527.784463][T12761] loop3: unable to read partition table [ 527.797876][T12761] loop3: partition table beyond EOD, truncated [ 527.804050][T12761] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 527.860837][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1962'. [ 527.928962][ T910] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 527.949453][T12761] SELinux: failed to load policy [ 528.131826][ T30] audit: type=1400 audit(1766076926.174:655): avc: denied { name_bind } for pid=12774 comm="syz.1.1966" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 528.698225][ T910] usb 1-1: Using ep0 maxpacket: 32 [ 529.027453][ T30] audit: type=1400 audit(1766076926.984:656): avc: denied { shutdown } for pid=12774 comm="syz.1.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 529.125146][ T910] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 529.166275][ T910] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 529.188434][ T910] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 529.203461][ T910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.238666][ T910] usb 1-1: Product: syz [ 529.260746][ T910] usb 1-1: Manufacturer: syz [ 529.273287][ T910] usb 1-1: SerialNumber: syz [ 529.307780][ T910] usb 1-1: config 0 descriptor?? [ 529.447362][ T30] audit: type=1804 audit(1766076927.484:657): pid=12795 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1970" name="/newroot/392/file0" dev="tmpfs" ino=2076 res=1 errno=0 [ 529.535240][ T30] audit: type=1804 audit(1766076927.524:658): pid=12795 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1970" name="/newroot/392/file0" dev="tmpfs" ino=2076 res=1 errno=0 [ 530.443555][ T910] usb 1-1: USB disconnect, device number 40 [ 530.587697][ T5919] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 530.770065][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.788376][ T5919] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 530.799358][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.268834][ T30] audit: type=1400 audit(1766076928.914:659): avc: denied { connect } for pid=12814 comm="syz.6.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 531.302584][ T5919] usb 4-1: config 0 descriptor?? [ 531.822829][T12838] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1979'. [ 532.091623][ T30] audit: type=1400 audit(1766076930.134:660): avc: denied { getopt } for pid=12852 comm="syz.5.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 532.151301][T12855] tmpfs: Unknown parameter 'noinode32' [ 532.344952][T12865] FAULT_INJECTION: forcing a failure. [ 532.344952][T12865] name failslab, interval 1, probability 0, space 0, times 0 [ 532.382656][T12865] CPU: 1 UID: 0 PID: 12865 Comm: syz.1.1984 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.382685][T12865] Tainted: [L]=SOFTLOCKUP [ 532.382690][T12865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 532.382699][T12865] Call Trace: [ 532.382705][T12865] [ 532.382712][T12865] dump_stack_lvl+0x16c/0x1f0 [ 532.382737][T12865] should_fail_ex+0x512/0x640 [ 532.382762][T12865] ? fs_reclaim_acquire+0xae/0x150 [ 532.382787][T12865] should_failslab+0xc2/0x120 [ 532.382809][T12865] __kmalloc_noprof+0xeb/0x910 [ 532.382834][T12865] ? tomoyo_encode2+0x100/0x3e0 [ 532.382860][T12865] ? tomoyo_encode2+0x100/0x3e0 [ 532.382880][T12865] tomoyo_encode2+0x100/0x3e0 [ 532.382906][T12865] tomoyo_encode+0x29/0x50 [ 532.382926][T12865] tomoyo_realpath_from_path+0x18f/0x6e0 [ 532.382956][T12865] tomoyo_path_number_perm+0x245/0x580 [ 532.382973][T12865] ? tomoyo_path_number_perm+0x237/0x580 [ 532.382994][T12865] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 532.383014][T12865] ? find_held_lock+0x2b/0x80 [ 532.383061][T12865] ? find_held_lock+0x2b/0x80 [ 532.383085][T12865] ? hook_file_ioctl_common+0x144/0x410 [ 532.383121][T12865] ? __fget_files+0x20e/0x3c0 [ 532.383150][T12865] security_file_ioctl+0x9b/0x240 [ 532.383174][T12865] __x64_sys_ioctl+0xb7/0x210 [ 532.383195][T12865] do_syscall_64+0xcd/0xf80 [ 532.383218][T12865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.383233][T12865] RIP: 0033:0x7fc176d8f749 [ 532.383247][T12865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.383262][T12865] RSP: 002b:00007fc177b60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.383277][T12865] RAX: ffffffffffffffda RBX: 00007fc176fe5fa0 RCX: 00007fc176d8f749 [ 532.383288][T12865] RDX: 0000200000000180 RSI: 00000000c00c64d2 RDI: 0000000000000005 [ 532.383297][T12865] RBP: 00007fc177b60090 R08: 0000000000000000 R09: 0000000000000000 [ 532.383306][T12865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.383315][T12865] R13: 00007fc176fe6038 R14: 00007fc176fe5fa0 R15: 00007ffd18c64d48 [ 532.383339][T12865] [ 532.383354][T12865] ERROR: Out of memory at tomoyo_realpath_from_path. [ 532.643521][ T30] audit: type=1400 audit(1766076930.504:661): avc: denied { lock } for pid=12801 comm="syz.3.1971" path="socket:[36468]" dev="sockfs" ino=36468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 532.722669][ T30] audit: type=1400 audit(1766076930.724:662): avc: denied { bind } for pid=12872 comm="syz.5.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 533.036489][T12882] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1986'. [ 533.045826][T12882] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1986'. [ 533.066775][T12883] CUSE: unknown device info "" [ 533.073117][T12882] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1986'. [ 533.074299][T12883] CUSE: unknown device info "" [ 533.134922][T12883] CUSE: unknown device info "" [ 533.215601][T12883] CUSE: unknown device info "" [ 533.243050][T12883] CUSE: zero length info key specified [ 533.639961][ T30] audit: type=1400 audit(1766076931.684:663): avc: denied { connect } for pid=12903 comm="syz.5.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 533.671561][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 533.681811][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 533.701267][ T5919] usb 4-1: USB disconnect, device number 39 [ 533.711158][T12879] syz_tun: entered allmulticast mode [ 533.907566][ T910] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 533.990712][ T5930] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 534.098971][ T910] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 534.127551][ T910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.157432][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 534.171206][ T5930] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 534.197289][ T910] usb 6-1: config 0 has no interface number 0 [ 534.209901][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.221164][ T910] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 534.244016][ T5930] usb 2-1: Product: syz [ 534.259158][ T910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.287551][ T5930] usb 2-1: Manufacturer: syz [ 534.299079][ T5930] usb 2-1: SerialNumber: syz [ 534.306837][ T910] usb 6-1: Product: syz [ 534.317824][ T5930] usb 2-1: config 0 descriptor?? [ 534.323171][ T910] usb 6-1: Manufacturer: syz [ 534.328182][ T910] usb 6-1: SerialNumber: syz [ 534.354087][ T5930] gspca_main: se401-2.14.0 probing 047d:5003 [ 534.361216][ T910] usb 6-1: config 0 descriptor?? [ 534.568817][ T910] hub 6-1:0.31: bad descriptor, ignoring hub [ 534.600355][ T910] hub 6-1:0.31: probe with driver hub failed with error -5 [ 534.625214][ T910] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 534.636429][ T910] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized! [ 534.649074][ T910] uvcvideo 6-1:0.31: Failed to create links for entity 6 [ 534.657090][ T910] uvcvideo 6-1:0.31: Failed to register entities (-22). [ 534.778780][ T910] usb 6-1: USB disconnect, device number 2 [ 534.938779][ T5930] usb 2-1: reset high-speed USB device number 38 using dummy_hcd [ 535.157540][ T910] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 535.392959][ T910] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 535.403615][ T910] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.416590][ T910] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 535.447453][ T910] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.138077][ T910] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 536.155066][ T910] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 536.164287][ T910] usb 7-1: Product: syz [ 536.168527][ T910] usb 7-1: Manufacturer: syz [ 536.352007][ T910] cdc_wdm 7-1:1.0: skipping garbage [ 536.354111][T12908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.359343][ T5930] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 536.385936][T12908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.392038][ T910] cdc_wdm 7-1:1.0: skipping garbage [ 537.147824][ T5930] se401 2-1:0.0: probe with driver se401 failed with error -110 [ 537.156473][ T910] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 537.168727][ T910] cdc_wdm 7-1:1.0: Unknown control protocol [ 537.175925][ T5930] usb 2-1: USB disconnect, device number 38 [ 537.251894][ T30] audit: type=1400 audit(1766076935.295:664): avc: denied { read write } for pid=12922 comm="syz.6.1997" name="cdc-wdm0" dev="devtmpfs" ino=3354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 537.352174][ T30] audit: type=1400 audit(1766076935.295:665): avc: denied { open } for pid=12922 comm="syz.6.1997" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 537.492277][T12923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.532857][T12923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.733043][T12950] block nbd6: shutting down sockets [ 538.256208][ T30] audit: type=1400 audit(1766076936.295:666): avc: denied { accept } for pid=12965 comm="syz.5.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 538.847363][ T910] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 539.077145][ T910] usb 6-1: Using ep0 maxpacket: 8 [ 539.094342][ T910] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 539.098390][ T910] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 539.098700][ T910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.098722][ T910] usb 6-1: Product: syz [ 539.098735][ T910] usb 6-1: Manufacturer: syz [ 539.098749][ T910] usb 6-1: SerialNumber: syz [ 539.101607][ T910] usb 6-1: config 0 descriptor?? [ 539.179543][ T910] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 539.285537][ T910] usb 6-1: setting power ON [ 539.290518][ T910] dvb-usb: bulk message failed: -22 (2/0) [ 539.298619][ T910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 539.313571][ T910] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 539.318181][T12979] dvb-usb: bulk message failed: -22 (3/0) [ 539.337535][ T910] usb 6-1: media controller created [ 539.347165][T12979] cxusb: i2c rd: len=4100 is too big! [ 539.347165][T12979] [ 539.354724][T12979] FAULT_INJECTION: forcing a failure. [ 539.354724][T12979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.383140][ T910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 539.424950][T12979] CPU: 1 UID: 0 PID: 12979 Comm: syz.5.2006 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.424977][T12979] Tainted: [L]=SOFTLOCKUP [ 539.424982][T12979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 539.424991][T12979] Call Trace: [ 539.424997][T12979] [ 539.425003][T12979] dump_stack_lvl+0x16c/0x1f0 [ 539.425028][T12979] should_fail_ex+0x512/0x640 [ 539.425064][T12979] _copy_to_user+0x32/0xd0 [ 539.425089][T12979] simple_read_from_buffer+0xcb/0x170 [ 539.425113][T12979] proc_fail_nth_read+0x197/0x240 [ 539.425131][T12979] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 539.425150][T12979] ? rw_verify_area+0xcf/0x6c0 [ 539.425168][T12979] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 539.425184][T12979] vfs_read+0x1e4/0xcf0 [ 539.425204][T12979] ? __pfx___mutex_lock+0x10/0x10 [ 539.425228][T12979] ? __pfx_vfs_read+0x10/0x10 [ 539.425255][T12979] ? __fget_files+0x20e/0x3c0 [ 539.425284][T12979] ksys_read+0x12a/0x250 [ 539.425302][T12979] ? __pfx_ksys_read+0x10/0x10 [ 539.425328][T12979] do_syscall_64+0xcd/0xf80 [ 539.425350][T12979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.425367][T12979] RIP: 0033:0x7f136fd8e15c [ 539.425379][T12979] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 539.425393][T12979] RSP: 002b:00007f1370d0c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 539.425409][T12979] RAX: ffffffffffffffda RBX: 00007f136ffe5fa0 RCX: 00007f136fd8e15c [ 539.425419][T12979] RDX: 000000000000000f RSI: 00007f1370d0c0a0 RDI: 0000000000000005 [ 539.425429][T12979] RBP: 00007f1370d0c090 R08: 0000000000000000 R09: 0000000000000000 [ 539.425438][T12979] R10: 00000000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 539.425447][T12979] R13: 00007f136ffe6038 R14: 00007f136ffe5fa0 R15: 00007ffeb1a138b8 [ 539.425471][T12979] [ 539.811224][ T5959] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 539.827341][ T910] usb 6-1: selecting invalid altsetting 6 [ 539.833077][ T910] usb 6-1: digital interface selection failed (-22) [ 539.858689][ T910] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 539.869360][ T910] usb 6-1: setting power OFF [ 539.877201][ T910] dvb-usb: bulk message failed: -22 (2/0) [ 539.877544][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 539.882916][ T910] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 539.882929][ T910] (NULL device *): no alternate interface [ 539.950298][ T910] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 539.967777][ T5959] usb 1-1: device descriptor read/64, error -71 [ 540.002251][ T910] usb 6-1: USB disconnect, device number 3 [ 540.058263][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 540.068372][ T10] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 540.096841][ T10] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 540.106073][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.116376][ T10] usb 4-1: Product: syz [ 540.120941][ T10] usb 4-1: Manufacturer: syz [ 540.125636][ T10] usb 4-1: SerialNumber: syz [ 540.139201][ T10] usb 4-1: config 0 descriptor?? [ 540.150873][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 540.160338][ T10] usb 4-1: setting power ON [ 540.167901][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 540.176406][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 540.187562][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 540.196058][ T10] usb 4-1: media controller created [ 540.217191][ T5959] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 540.232380][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 540.256671][ T10] usb 4-1: selecting invalid altsetting 6 [ 540.262607][ T10] usb 4-1: digital interface selection failed (-22) [ 540.269522][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 540.284326][ T10] usb 4-1: setting power OFF [ 540.290218][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 540.296006][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 540.305695][ T10] (NULL device *): no alternate interface [ 541.257026][ T30] audit: type=1400 audit(1766076938.815:667): avc: denied { name_bind } for pid=13011 comm="syz.6.2018" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 541.289178][T12998] dvb-usb: bulk message failed: -22 (3/0) [ 541.295138][T12998] cxusb: i2c rd: len=4100 is too big! [ 541.295138][T12998] [ 541.302766][ T910] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 541.322983][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 541.387003][ T5959] usb 1-1: device descriptor read/64, error -71 [ 541.416604][ T10] usb 4-1: USB disconnect, device number 40 [ 541.467439][ T910] usb 6-1: Using ep0 maxpacket: 32 [ 541.475093][ T910] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 541.497356][ T5959] usb usb1-port1: attempt power cycle [ 541.509159][ T910] usb 6-1: config 0 has no interface number 0 [ 541.518300][ T910] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 541.546995][ T910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.554969][ T910] usb 6-1: Product: syz [ 541.576978][ T910] usb 6-1: Manufacturer: syz [ 541.581591][ T910] usb 6-1: SerialNumber: syz [ 541.608654][ T910] usb 6-1: config 0 descriptor?? [ 541.628482][ T910] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 541.821581][ T910] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 541.902409][ T910] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 541.932270][ T5959] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 541.967368][ T5959] usb 1-1: device descriptor read/8, error -71 [ 542.015103][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 542.207047][ T5959] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 542.226965][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 542.228503][ T5919] usb 6-1: USB disconnect, device number 4 [ 542.257972][ T5959] usb 1-1: device descriptor read/8, error -71 [ 542.269575][ T5919] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 542.309122][ T5919] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 542.351210][ T5919] quatech2 6-1:0.51: device disconnected [ 542.397540][ T5959] usb usb1-port1: unable to enumerate USB device [ 542.418460][T13029] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2024'. [ 542.427680][T13029] openvswitch: netlink: Flow actions attr not present in new flow. [ 543.324332][ T910] usb 7-1: USB disconnect, device number 5 [ 543.526948][ T5919] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 543.696989][ T5919] usb 6-1: device descriptor read/64, error -71 [ 544.837030][ T5919] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 544.997598][ T5919] usb 6-1: device descriptor read/64, error -71 [ 545.117161][ T5919] usb usb6-port1: attempt power cycle [ 545.153190][ T5959] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 545.327309][ T5959] usb 4-1: device descriptor read/64, error -71 [ 545.476847][ T5919] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 545.674069][ T5919] usb 6-1: device descriptor read/8, error -71 [ 545.787838][ T5959] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 545.936894][ T5919] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 545.944352][ T5959] usb 4-1: device descriptor read/64, error -71 [ 545.990188][ T5919] usb 6-1: device descriptor read/8, error -71 [ 546.486854][ T5919] usb usb6-port1: unable to enumerate USB device [ 546.493878][ T5959] usb usb4-port1: attempt power cycle [ 546.617982][T13085] CUSE: unknown device info "" [ 546.784471][T13085] CUSE: unknown device info "@" [ 546.789690][T13085] CUSE: DEVNAME unspecified [ 546.865742][T13087] FAULT_INJECTION: forcing a failure. [ 546.865742][T13087] name failslab, interval 1, probability 0, space 0, times 0 [ 546.892809][T13087] CPU: 0 UID: 0 PID: 13087 Comm: syz.5.2041 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.892831][T13087] Tainted: [L]=SOFTLOCKUP [ 546.892835][T13087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 546.892840][T13087] Call Trace: [ 546.892844][T13087] [ 546.892848][T13087] dump_stack_lvl+0x16c/0x1f0 [ 546.892865][T13087] should_fail_ex+0x512/0x640 [ 546.892880][T13087] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 546.892893][T13087] should_failslab+0xc2/0x120 [ 546.892907][T13087] kmem_cache_alloc_node_noprof+0x86/0x800 [ 546.892917][T13087] ? __alloc_skb+0x156/0x410 [ 546.892936][T13087] ? __alloc_skb+0x156/0x410 [ 546.892950][T13087] __alloc_skb+0x156/0x410 [ 546.892965][T13087] ? __alloc_skb+0x35d/0x410 [ 546.892980][T13087] ? __pfx___alloc_skb+0x10/0x10 [ 546.893000][T13087] ? netlink_autobind.isra.0+0x158/0x370 [ 546.893016][T13087] netlink_alloc_large_skb+0x69/0x140 [ 546.893030][T13087] netlink_sendmsg+0x698/0xdd0 [ 546.893044][T13087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.893062][T13087] ____sys_sendmsg+0xa5d/0xc30 [ 546.893075][T13087] ? copy_msghdr_from_user+0x10a/0x160 [ 546.893086][T13087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.893105][T13087] ___sys_sendmsg+0x134/0x1d0 [ 546.893116][T13087] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.893141][T13087] __sys_sendmsg+0x16d/0x220 [ 546.893152][T13087] ? __pfx___sys_sendmsg+0x10/0x10 [ 546.893170][T13087] do_syscall_64+0xcd/0xf80 [ 546.893184][T13087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.893195][T13087] RIP: 0033:0x7f136fd8f749 [ 546.893204][T13087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.893214][T13087] RSP: 002b:00007f1370d0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.893224][T13087] RAX: ffffffffffffffda RBX: 00007f136ffe5fa0 RCX: 00007f136fd8f749 [ 546.893230][T13087] RDX: 0000000004000010 RSI: 00002000000007c0 RDI: 0000000000000003 [ 546.893236][T13087] RBP: 00007f1370d0c090 R08: 0000000000000000 R09: 0000000000000000 [ 546.893242][T13087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.893247][T13087] R13: 00007f136ffe6038 R14: 00007f136ffe5fa0 R15: 00007ffeb1a138b8 [ 546.893261][T13087] [ 547.176713][ T5959] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 547.198044][ T5959] usb 4-1: device descriptor read/8, error -71 [ 547.249448][T13089] syzkaller0: entered promiscuous mode [ 547.254912][T13089] syzkaller0: entered allmulticast mode [ 547.309957][T13091] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 547.437222][ T5959] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 547.467618][ T5959] usb 4-1: device descriptor read/8, error -71 [ 547.492361][T13100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2045'. [ 547.526453][T13102] veth0: entered promiscuous mode [ 547.586988][ T5959] usb usb4-port1: unable to enumerate USB device [ 548.232188][T13107] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 548.486370][T13101] veth0: left promiscuous mode [ 549.331686][ T30] audit: type=1804 audit(1766076947.375:668): pid=13116 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.2048" name="/newroot/32/file0" dev="tmpfs" ino=195 res=1 errno=0 [ 549.381541][ T30] audit: type=1804 audit(1766076947.405:669): pid=13116 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.2048" name="/newroot/32/file0" dev="tmpfs" ino=195 res=1 errno=0 [ 549.469828][T13122] syzkaller0: entered promiscuous mode [ 549.475316][T13122] syzkaller0: entered allmulticast mode [ 549.561442][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2054'. [ 549.643422][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2054'. [ 549.656033][ T30] audit: type=1400 audit(1766076947.695:670): avc: denied { map } for pid=13130 comm="syz.3.2055" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 549.696560][ T9] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 549.766782][ T5958] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 549.858507][ T9] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 549.902462][ T9] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 549.916546][ T5958] usb 2-1: Using ep0 maxpacket: 8 [ 549.928454][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 549.935716][ T9] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 549.949563][ T5958] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 1552, setting to 1024 [ 549.962071][ T5958] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 549.979829][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.993781][ T5958] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 550.005027][ T5958] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 550.019796][ T9] usb 1-1: config 0 descriptor?? [ 550.040343][ T5958] usb 2-1: config 1 interface 0 has no altsetting 0 [ 550.056543][ T5958] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 550.076696][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.092844][ T5958] usb 2-1: Product: syz [ 550.098653][ T5958] usb 2-1: Manufacturer: syz [ 550.103296][ T5958] usb 2-1: SerialNumber: syz [ 550.622832][T13122] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 550.713037][T13122] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 550.906155][T13155] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 550.914978][ T30] audit: type=1400 audit(1766076948.955:671): avc: denied { setattr } for pid=13154 comm="syz.3.2063" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 550.967173][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 550.979492][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 551.017699][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2066'. [ 551.028249][ T9] usb 1-1: USB disconnect, device number 45 [ 551.037161][ T5959] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 551.098129][ T5958] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 551.152889][T13167] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 551.159402][T13167] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 551.167233][T13167] vhci_hcd vhci_hcd.0: Device attached [ 551.189942][ T30] audit: type=1400 audit(1766076949.235:672): avc: denied { map } for pid=13165 comm="syz.3.2067" path="socket:[39421]" dev="sockfs" ino=39421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 551.224192][ T5958] usb 2-1: USB disconnect, device number 39 [ 551.241550][ T5959] usb 6-1: config 1 interface 0 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 8 [ 551.319709][ T5959] usb 6-1: config 1 interface 0 has no altsetting 0 [ 551.423775][ T5959] usb 6-1: New USB device found, idVendor=0486, idProduct=0185, bcdDevice= 0.40 [ 551.460500][ T30] audit: type=1400 audit(1766076949.495:673): avc: denied { getopt } for pid=13170 comm="syz.6.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 551.483623][T13171] bpf: Bad value for 'gid' [ 551.498155][ T9] usb 40-1: SetAddress Request (2) to port 0 [ 551.561612][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.579715][ T9] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 551.897554][ T5959] usb 6-1: Product: Х [ 551.918613][ T5959] usb 6-1: Manufacturer: 鎘ⶌꡤꅏᦩ䌿皜筺Ḻ딴ꯀ䇀ꞥ䲁ﾨ댬᜝䁗咀ⓡ΅荚䗓쟳騠גּ⅐⣒앚娡벳㥤젇綾亴앩ꫣ헍ꞩ䠓뿐궐霌爍ⅉ䋄ጉ厬̆ೣ끈ꤍ铈瑾푷떌븗醒堳୙♎走⳱ꓲ⁊拏깯 [ 551.958656][T13168] vhci_hcd: connection reset by peer [ 551.985983][ T385] vhci_hcd vhci_hcd.3: stop threads [ 552.014962][ T5959] usb 6-1: SerialNumber: 䛂҆Ꝓ耗辐峷ሼи؁咽썱ꚥ鴛Ӝ垇䂟㐇롅ᇢ暙㷋휌൚楻鮜９믹⟀겘錨犲⒨瞄봃뚷기獶* [ 552.037381][ T385] vhci_hcd vhci_hcd.3: release socket [ 552.133211][ T385] vhci_hcd vhci_hcd.3: disconnect device [ 552.354654][T13152] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 553.616114][ T30] audit: type=1400 audit(1766076951.655:674): avc: denied { shutdown } for pid=13188 comm="syz.0.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 553.642050][ T5959] usbhid 6-1:1.0: can't add hid device: -71 [ 553.673569][ T5815] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 553.719518][ T5959] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 553.880589][ T5959] usb 6-1: USB disconnect, device number 9 [ 553.882310][ T5815] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 553.960968][ T5815] usb 4-1: config 0 has no interface number 0 [ 554.019106][ T5815] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 554.040466][ T5815] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 554.050620][ T5815] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 554.062456][ T5815] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 554.071803][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.092067][ T5815] usb 4-1: config 0 descriptor?? [ 554.102337][ T5815] gspca_main: spca561-2.14.0 probing abcd:cdee [ 554.305563][T13183] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2071'. [ 554.318263][T13205] syzkaller1: entered promiscuous mode [ 554.323740][T13205] syzkaller1: entered allmulticast mode [ 554.327588][ T5815] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 554.342830][ T5815] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 554.367361][ T5815] usb 4-1: MIDIStreaming interface descriptor not found [ 554.428920][ T5815] usb 4-1: USB disconnect, device number 45 [ 554.704433][T13219] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20000 [ 554.784246][T13217] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2081'. [ 556.308713][T13238] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2086'. [ 556.354656][T13244] FAULT_INJECTION: forcing a failure. [ 556.354656][T13244] name failslab, interval 1, probability 0, space 0, times 0 [ 556.373797][T13244] CPU: 1 UID: 0 PID: 13244 Comm: syz.3.2089 Tainted: G L syzkaller #0 PREEMPT(full) [ 556.373822][T13244] Tainted: [L]=SOFTLOCKUP [ 556.373828][T13244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 556.373838][T13244] Call Trace: [ 556.373843][T13244] [ 556.373850][T13244] dump_stack_lvl+0x16c/0x1f0 [ 556.373875][T13244] should_fail_ex+0x512/0x640 [ 556.373899][T13244] ? __kmalloc_node_noprof+0xcd/0x930 [ 556.373922][T13244] should_failslab+0xc2/0x120 [ 556.373951][T13244] __kmalloc_node_noprof+0xee/0x930 [ 556.373970][T13244] ? qdisc_alloc+0xb7/0xa50 [ 556.373985][T13244] ? find_held_lock+0x2b/0x80 [ 556.374015][T13244] ? qdisc_alloc+0xb7/0xa50 [ 556.374029][T13244] qdisc_alloc+0xb7/0xa50 [ 556.374043][T13244] ? do_raw_read_unlock+0x44/0xe0 [ 556.374065][T13244] ? _raw_read_unlock+0x28/0x50 [ 556.374087][T13244] qdisc_create+0x71/0xfa0 [ 556.374113][T13244] tc_modify_qdisc+0x122f/0x2230 [ 556.374138][T13244] ? __mutex_lock+0x27b/0x1ca0 [ 556.374163][T13244] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 556.374186][T13244] ? __lock_acquire+0x436/0x2890 [ 556.374223][T13244] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 556.374247][T13244] rtnetlink_rcv_msg+0x3c9/0xe90 [ 556.374270][T13244] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 556.374296][T13244] ? ref_tracker_free+0x37c/0x830 [ 556.374325][T13244] netlink_rcv_skb+0x158/0x420 [ 556.374345][T13244] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 556.374365][T13244] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 556.374395][T13244] ? netlink_deliver_tap+0x1ae/0xd30 [ 556.374420][T13244] netlink_unicast+0x5aa/0x870 [ 556.374444][T13244] ? __pfx_netlink_unicast+0x10/0x10 [ 556.374474][T13244] netlink_sendmsg+0x8c8/0xdd0 [ 556.374499][T13244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.374529][T13244] ____sys_sendmsg+0xa5d/0xc30 [ 556.374552][T13244] ? copy_msghdr_from_user+0x10a/0x160 [ 556.374569][T13244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 556.374601][T13244] ___sys_sendmsg+0x134/0x1d0 [ 556.374620][T13244] ? __pfx____sys_sendmsg+0x10/0x10 [ 556.374669][T13244] __sys_sendmsg+0x16d/0x220 [ 556.374687][T13244] ? __pfx___sys_sendmsg+0x10/0x10 [ 556.374721][T13244] do_syscall_64+0xcd/0xf80 [ 556.374744][T13244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.374761][T13244] RIP: 0033:0x7f1c6e98f749 [ 556.374775][T13244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.374791][T13244] RSP: 002b:00007f1c6f805038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.374807][T13244] RAX: ffffffffffffffda RBX: 00007f1c6ebe5fa0 RCX: 00007f1c6e98f749 [ 556.374818][T13244] RDX: 0000000004000010 RSI: 00002000000007c0 RDI: 0000000000000003 [ 556.374828][T13244] RBP: 00007f1c6f805090 R08: 0000000000000000 R09: 0000000000000000 [ 556.374838][T13244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.374847][T13244] R13: 00007f1c6ebe6038 R14: 00007f1c6ebe5fa0 R15: 00007fff345846d8 [ 556.374872][T13244] [ 557.412590][ T9] usb 40-1: device descriptor read/8, error -110 [ 557.466226][ T5919] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 557.927210][ T9] usb usb40-port1: attempt power cycle [ 558.413960][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 558.508734][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 558.553996][ T5919] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 558.652091][ T910] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 558.665810][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 558.746300][ T9] usb usb40-port1: unable to enumerate USB device [ 558.769216][ T5919] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 558.798074][ T5919] usb 6-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 558.826303][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.834304][ T5919] usb 6-1: Product: syz [ 558.847813][ T910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.856016][ T5919] usb 6-1: Manufacturer: syz [ 558.862116][ T5919] usb 6-1: SerialNumber: syz [ 558.866236][ T910] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 558.880391][ T5919] usb 6-1: config 0 descriptor?? [ 558.903703][ T910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.919059][ T5919] omninet 6-1:0.0: ZyXEL - omni.net usb converter detected [ 558.937998][ T5919] usb 6-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 558.938384][ T910] usb 1-1: config 0 descriptor?? [ 560.162356][ T9] usb 6-1: USB disconnect, device number 10 [ 560.185191][ T9] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 560.209451][ T9] omninet 6-1:0.0: device disconnected [ 560.268626][T13268] futex_wake_op: syz.0.2097 tries to shift op by -1; fix this program [ 560.790042][ T910] usbhid 1-1:0.0: can't add hid device: -71 [ 560.800628][ T910] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 560.831049][ T910] usb 1-1: USB disconnect, device number 46 [ 561.050335][ T30] audit: type=1400 audit(1766076959.096:675): avc: denied { read } for pid=13295 comm="syz.5.2104" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 561.086813][ T30] audit: type=1400 audit(1766076959.126:676): avc: denied { open } for pid=13295 comm="syz.5.2104" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 561.116400][ T30] audit: type=1400 audit(1766076959.136:677): avc: denied { read write } for pid=12207 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 561.141379][ T30] audit: type=1400 audit(1766076959.136:678): avc: denied { open } for pid=12207 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 561.165712][ T30] audit: type=1400 audit(1766076959.136:679): avc: denied { ioctl } for pid=12207 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 561.215914][ T5920] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 561.627292][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.206206][ T30] audit: type=1400 audit(1766076959.766:680): avc: denied { mount } for pid=13304 comm="syz.6.2106" name="/" dev="hugetlbfs" ino=39923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 562.260878][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 562.393181][ T5920] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 562.447829][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.454846][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.461419][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.565261][ T5920] usb 2-1: config 0 descriptor?? [ 564.091972][ T5920] usbhid 2-1:0.0: can't add hid device: -71 [ 564.105820][ T5920] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 564.137448][ T5920] usb 2-1: USB disconnect, device number 40 [ 566.999916][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 567.118815][T13366] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2122'. [ 567.297009][T13367] fuse: Bad value for 'user_id' [ 567.301861][T13367] fuse: Bad value for 'user_id' [ 567.346009][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 567.366423][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.387603][ T9] usb 4-1: Product: syz [ 567.395293][ T9] usb 4-1: Manufacturer: syz [ 567.402477][ T9] usb 4-1: SerialNumber: syz [ 567.428420][ T9] usb 4-1: config 0 descriptor?? [ 567.680994][T13345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.695902][T13345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.259784][ T9] usb-storage 4-1:0.0: USB Mass Storage device detected [ 568.349048][T13384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=13384 comm=syz.6.2128 [ 568.461607][ T9] usb 4-1: USB disconnect, device number 46 [ 568.557389][T13393] FAULT_INJECTION: forcing a failure. [ 568.557389][T13393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.575546][T13393] CPU: 1 UID: 0 PID: 13393 Comm: syz.6.2131 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.575572][T13393] Tainted: [L]=SOFTLOCKUP [ 568.575578][T13393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 568.575585][T13393] Call Trace: [ 568.575592][T13393] [ 568.575597][T13393] dump_stack_lvl+0x16c/0x1f0 [ 568.575623][T13393] should_fail_ex+0x512/0x640 [ 568.575648][T13393] _copy_from_user+0x2e/0xd0 [ 568.575672][T13393] __sys_bpf+0x248/0x4980 [ 568.575698][T13393] ? __pfx___sys_bpf+0x10/0x10 [ 568.575719][T13393] ? find_held_lock+0x2b/0x80 [ 568.575758][T13393] ? find_held_lock+0x2b/0x80 [ 568.575786][T13393] ? __mutex_unlock_slowpath+0x161/0x790 [ 568.575821][T13393] ? fput+0x70/0xf0 [ 568.575836][T13393] ? ksys_write+0x1ac/0x250 [ 568.575857][T13393] ? __pfx_ksys_write+0x10/0x10 [ 568.575881][T13393] __x64_sys_bpf+0x78/0xc0 [ 568.575904][T13393] ? lockdep_hardirqs_on+0x7c/0x110 [ 568.575924][T13393] do_syscall_64+0xcd/0xf80 [ 568.575952][T13393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.575969][T13393] RIP: 0033:0x7f8bb798f749 [ 568.575983][T13393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.575999][T13393] RSP: 002b:00007f8bb88d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 568.576015][T13393] RAX: ffffffffffffffda RBX: 00007f8bb7be5fa0 RCX: 00007f8bb798f749 [ 568.576026][T13393] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 000000000000000f [ 568.576036][T13393] RBP: 00007f8bb88d3090 R08: 0000000000000000 R09: 0000000000000000 [ 568.576046][T13393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.576055][T13393] R13: 00007f8bb7be6038 R14: 00007f8bb7be5fa0 R15: 00007ffed0bf3a88 [ 568.576078][T13393] [ 568.745456][ T5919] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 568.816038][ T5815] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 568.840365][ T30] audit: type=1400 audit(1766076966.886:681): avc: denied { map } for pid=13395 comm="syz.6.2132" path="socket:[40257]" dev="sockfs" ino=40257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 568.866968][ T30] audit: type=1400 audit(1766076966.916:682): avc: denied { read } for pid=13395 comm="syz.6.2132" path="socket:[40257]" dev="sockfs" ino=40257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 569.798038][ T5815] usb 1-1: device descriptor read/64, error -71 [ 569.836929][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.846867][ T5919] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 569.874373][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.904906][ T5919] usb 6-1: config 0 descriptor?? [ 570.045455][ T5815] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 570.166055][T13406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2137'. [ 570.205477][ T5815] usb 1-1: device descriptor read/64, error -71 [ 570.283711][T13408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2137'. [ 570.326276][ T5815] usb usb1-port1: attempt power cycle [ 570.354079][ T5919] logitech-djreceiver 0003:046D:C71F.0011: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0 [ 570.855441][ T5815] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 570.901285][ T5815] usb 1-1: device descriptor read/8, error -71 [ 571.155424][ T5815] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 571.197656][ T5815] usb 1-1: device descriptor read/8, error -71 [ 571.255406][ T5958] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 571.316337][ T5815] usb usb1-port1: unable to enumerate USB device [ 571.509680][ T5958] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 571.541001][ T5958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 571.552340][ T5958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 572.057496][ T5958] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 572.070767][ T5958] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 572.081767][ T5958] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.102886][ T5958] usb 7-1: config 0 descriptor?? [ 572.108590][ T5919] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 572.391236][ T30] audit: type=1400 audit(1766076970.437:683): avc: denied { create } for pid=13437 comm="syz.5.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 572.465334][ T30] audit: type=1400 audit(1766076970.437:684): avc: denied { write } for pid=13437 comm="syz.5.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 572.607859][ T5958] usbhid 7-1:0.0: can't add hid device: -71 [ 572.648518][ T5958] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 572.714597][ T5958] usb 7-1: USB disconnect, device number 6 [ 573.011078][ T5959] usb 6-1: USB disconnect, device number 11 [ 573.067114][ T30] audit: type=1400 audit(1766076971.117:685): avc: denied { create } for pid=13451 comm="syz.6.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 573.169663][ T30] audit: type=1400 audit(1766076971.157:686): avc: denied { write } for pid=13451 comm="syz.6.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 574.590689][T13461] syz.3.2147 (13461): drop_caches: 2 [ 574.643036][ T30] audit: type=1400 audit(1766076972.687:687): avc: denied { create } for pid=13480 comm="syz.5.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 575.474042][ T5930] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 575.655105][ T5930] usb 7-1: Using ep0 maxpacket: 8 [ 575.676524][ T5930] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 575.719869][ T5930] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 575.750150][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.775831][ T5930] usb 7-1: config 0 descriptor?? [ 575.793633][ T5930] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 577.075160][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 577.082890][ T30] audit: type=1400 audit(1766076975.127:688): avc: denied { execute } for pid=13522 comm="syz.0.2168" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 577.265006][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 577.271488][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.294107][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.314075][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 577.347386][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.373735][ T10] usb 4-1: config 0 descriptor?? [ 578.225801][ T10] ft260 0003:0403:6030.0012: item fetching failed at offset 0/2 [ 578.233994][ T10] ft260 0003:0403:6030.0012: failed to parse HID [ 578.254989][ T10] ft260 0003:0403:6030.0012: probe with driver ft260 failed with error -22 [ 578.291885][ T5930] usb 7-1: USB disconnect, device number 7 [ 578.641328][ T10] IPVS: starting estimator thread 0... [ 578.734933][T13537] IPVS: using max 54 ests per chain, 129600 per kthread [ 578.754293][T13546] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2175'. [ 578.783322][T13547] cgroup: Name too long [ 578.811274][T13548] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 580.067702][T13538] tipc: Started in network mode [ 580.074000][T13538] tipc: Node identity 4, cluster identity 4711 [ 580.080288][T13538] tipc: Node number set to 4 [ 580.331902][ T10] usb 4-1: USB disconnect, device number 47 [ 582.307473][ T30] audit: type=1400 audit(1766076980.357:689): avc: denied { getopt } for pid=13595 comm="syz.5.2189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 583.369183][T13612] netlink: 'syz.0.2195': attribute type 15 has an invalid length. [ 584.042104][ T30] audit: type=1804 audit(1766076982.087:690): pid=13635 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2200" name="/newroot/444/file0" dev="tmpfs" ino=2349 res=1 errno=0 [ 584.083451][ T30] audit: type=1804 audit(1766076982.127:691): pid=13635 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.2200" name="/newroot/444/file0" dev="tmpfs" ino=2349 res=1 errno=0 [ 584.118742][T13639] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 584.214192][ T30] audit: type=1400 audit(1766076982.257:692): avc: denied { append } for pid=13641 comm="syz.0.2205" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 584.691055][T13649] xt_CONNSECMARK: invalid mode: 66 [ 585.762418][ T5919] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 585.924776][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 585.954962][ T5919] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 585.976162][ T5919] usb 1-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 586.007400][ T5919] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 586.026785][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.056159][ T5919] usb 1-1: Product: syz [ 586.064604][ T5919] usb 1-1: Manufacturer: syz [ 586.075079][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 586.084593][ T5919] usb 1-1: SerialNumber: syz [ 586.118170][ T5919] usb 1-1: config 0 descriptor?? [ 586.135299][ T5958] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 586.244689][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 586.257016][ T10] usb 7-1: config 0 has an invalid interface number: 136 but max is 0 [ 586.274643][ T10] usb 7-1: config 0 has no interface number 0 [ 586.289533][ T10] usb 7-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 586.304639][ T5958] usb 2-1: Using ep0 maxpacket: 16 [ 586.322036][ T10] usb 7-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 586.335384][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.350499][ T5919] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 586.381778][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.390208][ T5919] usb 1-1: USB disconnect, device number 51 [ 586.396150][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.419283][ T10] usb 7-1: Product: syz [ 586.439191][ T5958] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 586.452042][ T10] usb 7-1: Manufacturer: syz [ 586.461280][ T10] usb 7-1: SerialNumber: syz [ 586.473708][ T10] usb 7-1: config 0 descriptor?? [ 586.484461][ T5958] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 586.493484][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.502361][T13667] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 586.504314][ T5958] usb 2-1: config 0 descriptor?? [ 586.528031][ T10] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 586.727952][ T5919] usb 7-1: USB disconnect, device number 8 [ 586.906953][T13693] binder: BINDER_SET_CONTEXT_MGR already set [ 586.912962][T13693] binder: 13688:13693 ioctl 4018620d 2000000002c0 returned -16 [ 587.780205][T13708] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1539 sclass=netlink_xfrm_socket pid=13708 comm=syz.3.2215 [ 590.462591][ T5958] usbhid 2-1:0.0: can't add hid device: -71 [ 590.468592][ T5958] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 590.478792][ T5958] usb 2-1: USB disconnect, device number 41 [ 590.521522][T13734] binder: BINDER_SET_CONTEXT_MGR already set [ 590.527660][T13734] binder: 13733:13734 ioctl 4018620d 200000000100 returned -16 [ 590.781741][T13742] binder: BINDER_SET_CONTEXT_MGR already set [ 590.787949][T13742] binder: 13733:13742 ioctl 4018620d 2000000002c0 returned -16 [ 591.274254][ T5815] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 591.504213][ T5815] usb 4-1: Using ep0 maxpacket: 32 [ 591.515631][ T5815] usb 4-1: config 0 interface 0 has no altsetting 0 [ 591.537392][ T5815] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 591.549733][ T5930] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 591.564178][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.184208][ T5930] usb 1-1: Using ep0 maxpacket: 16 [ 592.282321][ T5815] usb 4-1: Product: syz [ 592.289711][ T5815] usb 4-1: Manufacturer: syz [ 592.295170][ T5930] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 592.315013][ T5815] usb 4-1: SerialNumber: syz [ 592.319729][ T5930] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 592.344461][ T5815] usb 4-1: config 0 descriptor?? [ 592.350961][ T5930] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 592.373971][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.418681][ T5930] usb 1-1: Product: syz [ 592.432169][ T5930] usb 1-1: Manufacturer: syz [ 592.444118][ T5930] usb 1-1: SerialNumber: syz [ 592.678029][T13741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.686731][T13741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.634510][ T5815] gs_usb 4-1:0.0: Couldn't get device config: (err=-110) [ 593.923256][ T5815] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 594.099182][ T5930] usb 1-1: 0:2 : does not exist [ 594.107983][ T5930] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 594.332425][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 594.538968][ T5930] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 594.555125][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 594.582167][ T910] usb 4-1: USB disconnect, device number 48 [ 594.597582][ T5930] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 594.626861][ T5930] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 594.682791][ T5930] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 594.711777][ T5930] usb 1-1: USB disconnect, device number 52 [ 594.764540][ T9674] udevd[9674]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 594.807133][T13773] ceph: No mds server is up or the cluster is laggy [ 594.972791][T13783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2236'. [ 595.174275][ T5930] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 595.822277][ T5930] usb 4-1: device descriptor read/64, error -71 [ 597.463891][T13801] binder: BINDER_SET_CONTEXT_MGR already set [ 597.469885][T13801] binder: 13796:13801 ioctl 4018620d 2000000002c0 returned -16 [ 598.045897][ T5930] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 598.081243][T13804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2242'. [ 598.357447][ T5930] usb 4-1: device descriptor read/64, error -71 [ 598.782458][ T5930] usb usb4-port1: attempt power cycle [ 599.588037][ T30] audit: type=1400 audit(1766076997.638:693): avc: denied { setopt } for pid=13819 comm="syz.1.2245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 599.988605][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2250'. [ 600.710716][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 600.894971][T13845] ------------[ cut here ]------------ [ 600.900477][T13845] WARNING: drivers/gpu/drm/drm_prime.c:224 at drm_prime_destroy_file_private+0x43/0x60, CPU#1: syz.1.2251/13845 [ 600.912984][T13845] Modules linked in: [ 600.917166][T13845] CPU: 1 UID: 0 PID: 13845 Comm: syz.1.2251 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.928221][T13845] Tainted: [L]=SOFTLOCKUP [ 600.932531][T13845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 600.942669][T13845] RIP: 0010:drm_prime_destroy_file_private+0x43/0x60 [ 600.949389][T13845] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 21 48 8b 83 90 00 00 00 48 85 c0 75 06 5b e9 63 43 6c fc e8 5e 43 6c fc 90 <0f> 0b 90 5b e9 54 43 6c fc e8 6f 1d d6 fc eb d8 66 66 2e 0f 1f 84 [ 600.969106][T13845] RSP: 0018:ffffc90012affca0 EFLAGS: 00010293 [ 600.978248][T13845] RAX: 0000000000000000 RBX: ffff888044e54380 RCX: ffffffff8b7955d1 [ 600.986553][T13845] RDX: ffff8880288624c0 RSI: ffffffff8552a332 RDI: ffff888044e54410 [ 600.994902][T13845] RBP: ffff888044e54000 R08: 0000000000000001 R09: fffff5200255ff74 [ 601.002869][T13845] R10: ffffc90012affba7 R11: 0000000000000000 R12: ffff888025742000 [ 601.011279][T13845] R13: ffff888044e542b0 R14: 0000000000000000 R15: ffff888044e542d8 [ 601.019519][T13845] FS: 000055556a211500(0000) GS:ffff8881249f6000(0000) knlGS:0000000000000000 [ 601.028569][T13845] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 601.035455][T13845] CR2: 00007fff34583ec0 CR3: 0000000040033000 CR4: 00000000003526f0 [ 601.043415][T13845] Call Trace: [ 601.046783][T13845] [ 601.049713][T13845] drm_file_free.part.0+0x7ee/0xcd0 [ 601.054933][T13845] ? __pfx___fsnotify_parent+0x10/0x10 [ 601.060397][T13845] drm_close_helper.isra.0+0x186/0x1f0 [ 601.065900][T13845] drm_release+0x1ab/0x360 [ 601.070322][T13845] ? __pfx_drm_release+0x10/0x10 [ 601.075281][T13845] __fput+0x402/0xb70 [ 601.079265][T13845] task_work_run+0x150/0x240 [ 601.083888][T13845] ? __pfx_task_work_run+0x10/0x10 [ 601.088977][T13845] ? __do_sys_close_range+0x278/0x730 [ 601.094350][T13845] exit_to_user_mode_loop+0xfb/0x540 [ 601.099630][T13845] do_syscall_64+0x4ee/0xf80 [ 601.104231][T13845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.110192][T13845] RIP: 0033:0x7fc176d8f749 [ 601.114681][T13845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.134314][T13845] RSP: 002b:00007ffd18c64ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 601.142706][T13845] RAX: 0000000000000000 RBX: 0000000000092b04 RCX: 00007fc176d8f749 [ 601.150735][T13845] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 601.158736][T13845] RBP: 00007fc176fe7da0 R08: 0000000000000001 R09: 0000000618c6519f [ 601.166731][T13845] R10: 0000001b2ec20000 R11: 0000000000000246 R12: 00007fc176fe5fac [ 601.174719][T13845] R13: 00007fc176fe5fa0 R14: ffffffffffffffff R15: 00007ffd18c64fc0 [ 601.182670][T13845] [ 601.185695][T13845] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 601.192948][T13845] CPU: 1 UID: 0 PID: 13845 Comm: syz.1.2251 Tainted: G L syzkaller #0 PREEMPT(full) [ 601.203857][T13845] Tainted: [L]=SOFTLOCKUP [ 601.208168][T13845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 601.218204][T13845] Call Trace: [ 601.221462][T13845] [ 601.224373][T13845] dump_stack_lvl+0x3d/0x1f0 [ 601.228947][T13845] vpanic+0x640/0x6f0 [ 601.232907][T13845] ? drm_prime_destroy_file_private+0x43/0x60 [ 601.238954][T13845] panic+0xca/0xd0 [ 601.242652][T13845] ? __pfx_panic+0x10/0x10 [ 601.247052][T13845] ? check_panic_on_warn+0x1f/0xb0 [ 601.252142][T13845] check_panic_on_warn+0xab/0xb0 [ 601.257056][T13845] __warn+0x108/0x3c0 [ 601.261019][T13845] __report_bug+0x2a0/0x520 [ 601.265503][T13845] ? drm_prime_destroy_file_private+0x43/0x60 [ 601.271547][T13845] ? __pfx___report_bug+0x10/0x10 [ 601.276550][T13845] ? find_held_lock+0x2b/0x80 [ 601.281212][T13845] ? drm_master_release+0x2c1/0x600 [ 601.286391][T13845] ? drm_prime_destroy_file_private+0x43/0x60 [ 601.292436][T13845] report_bug+0xb2/0x220 [ 601.296659][T13845] ? drm_prime_destroy_file_private+0x43/0x60 [ 601.302701][T13845] handle_bug+0x127/0x260 [ 601.307016][T13845] exc_invalid_op+0x17/0x50 [ 601.311504][T13845] asm_exc_invalid_op+0x1a/0x20 [ 601.316332][T13845] RIP: 0010:drm_prime_destroy_file_private+0x43/0x60 [ 601.322984][T13845] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 21 48 8b 83 90 00 00 00 48 85 c0 75 06 5b e9 63 43 6c fc e8 5e 43 6c fc 90 <0f> 0b 90 5b e9 54 43 6c fc e8 6f 1d d6 fc eb d8 66 66 2e 0f 1f 84 [ 601.342569][T13845] RSP: 0018:ffffc90012affca0 EFLAGS: 00010293 [ 601.348615][T13845] RAX: 0000000000000000 RBX: ffff888044e54380 RCX: ffffffff8b7955d1 [ 601.356571][T13845] RDX: ffff8880288624c0 RSI: ffffffff8552a332 RDI: ffff888044e54410 [ 601.364538][T13845] RBP: ffff888044e54000 R08: 0000000000000001 R09: fffff5200255ff74 [ 601.372501][T13845] R10: ffffc90012affba7 R11: 0000000000000000 R12: ffff888025742000 [ 601.380450][T13845] R13: ffff888044e542b0 R14: 0000000000000000 R15: ffff888044e542d8 [ 601.388405][T13845] ? __mutex_unlock_slowpath+0x161/0x790 [ 601.394022][T13845] ? drm_prime_destroy_file_private+0x42/0x60 [ 601.400074][T13845] drm_file_free.part.0+0x7ee/0xcd0 [ 601.405258][T13845] ? __pfx___fsnotify_parent+0x10/0x10 [ 601.410702][T13845] drm_close_helper.isra.0+0x186/0x1f0 [ 601.416144][T13845] drm_release+0x1ab/0x360 [ 601.420547][T13845] ? __pfx_drm_release+0x10/0x10 [ 601.425466][T13845] __fput+0x402/0xb70 [ 601.429429][T13845] task_work_run+0x150/0x240 [ 601.434004][T13845] ? __pfx_task_work_run+0x10/0x10 [ 601.439092][T13845] ? __do_sys_close_range+0x278/0x730 [ 601.444450][T13845] exit_to_user_mode_loop+0xfb/0x540 [ 601.449717][T13845] do_syscall_64+0x4ee/0xf80 [ 601.454291][T13845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.460162][T13845] RIP: 0033:0x7fc176d8f749 [ 601.464553][T13845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.484138][T13845] RSP: 002b:00007ffd18c64ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 601.492527][T13845] RAX: 0000000000000000 RBX: 0000000000092b04 RCX: 00007fc176d8f749 [ 601.500476][T13845] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 601.508422][T13845] RBP: 00007fc176fe7da0 R08: 0000000000000001 R09: 0000000618c6519f [ 601.516371][T13845] R10: 0000001b2ec20000 R11: 0000000000000246 R12: 00007fc176fe5fac [ 601.524321][T13845] R13: 00007fc176fe5fa0 R14: ffffffffffffffff R15: 00007ffd18c64fc0 [ 601.532292][T13845] [ 601.535561][T13845] Kernel Offset: disabled [ 601.539865][T13845] Rebooting in 86400 seconds..