last executing test programs: 40.52927424s ago: executing program 0 (id=2326): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000240)="01000000", 0x4}, {&(0x7f0000000200)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000340)="747369587e0a4e47ad", 0x9}], 0x3, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x5c0a, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setresuid(0xee01, 0xee00, 0x0) r3 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0xd555, 0x1, 0x4, 0xb9}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001700)=[{&(0x7f0000000040)=""/36, 0x24}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x0, 0x1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x1080, 0x1}, 0x18, 0x0) r6 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r5, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x38) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@canfd={{}, 0x61, 0x1, 0x0, 0x0, "4e4e488e419039dda425818234de45852abd1372621b404219373c9a72cdb611ef256a70bf66c39d7082f2bb3c86e0c500000000d54ac53fe9ae0400"}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x10c00, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000280)=r9, 0x4) 40.289162078s ago: executing program 0 (id=2328): socket(0x1d, 0x2, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aab5fb91a4fc73b36849c8a9be678e5df8b0291c0daa0a59ee301d2a30c7e3"], 0xc8}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="b0000000daffffff", @ANYRES32, @ANYBLOB="04000000810000000000000000000000000000000200000000000000010000000700"/43], 0xb0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4) unshare(0x40020000) socket(0x2, 0x80805, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) eventfd2(0x2a2, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020200020b000000000000000000000001000800b61b6aebd29a17a90000000000000500000000a0030006000000000002000000ac1414ff000000000000000003000500000000000200"/88], 0x58}, 0x1, 0x7}, 0x0) 38.674238001s ago: executing program 0 (id=2331): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000000), 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000001000)=@newsa={0xf0, 0x10, 0x832152701231f605, 0x0, 0x0, {{@in=@multicast2, @in=@remote}, {@in=@local, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x6a}}, 0xf0}}, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x6fcef00345e86e4, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x586efd615fe533dd, 0x98, 0x5, 0x3, 0x4e, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x7, 0x40, 0x1}}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r6, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f4010000180002002dbd7000ffdbdf25e0000002000000000000000000000000fe8000000000000000000000000000bb4e2100034e2300000a0080002c000000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="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"], 0x1f4}}, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r9, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8010) recvmmsg(r9, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000002380)=[{0x0}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000024c0)=""/94, 0x5e}], 0x1, &(0x7f0000002900)=""/140, 0x8c}, 0x8}], 0x2, 0x0, 0x0) shutdown(r9, 0x1) socket$inet6(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 38.157392877s ago: executing program 0 (id=2335): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) 37.923674774s ago: executing program 0 (id=2338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000001b08000a000000000006000200feffff7f14001f0000000000000000000000000000000000140020"], 0x64}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x39, 0x80, {0x0, @in6={{0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0xfd}, 0x1}}, 0x2, 0x8, 0x80200, 0x9, 0x8}}, &(0x7f0000000300)=0xb0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x129100, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getpgrp(0xffffffffffffffff) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x8101, 0x2) write$P9_RWALK(r6, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x30) getdents64(0xffffffffffffffff, &(0x7f0000000f00)=""/4104, 0x1008) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r7, 0x89e2) 36.598669242s ago: executing program 0 (id=2342): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0xf, 0x73, 0x3ff, 0x10, @mcast2, @empty, 0x7800, 0x40, 0x8, 0xd0}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0xf, 0x73, 0x3ff, 0x10, @mcast2, @empty, 0x7800, 0x40, 0x8, 0xd0}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r5, &(0x7f0000002000)='`', 0x88020) (async) write$dsp(r5, &(0x7f0000002000)='`', 0x88020) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r6 = socket(0x11, 0x5, 0x0) setsockopt(r6, 0x107, 0x1, 0x0, 0x0) close(r6) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @mcast2}, 0x1c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) 20.616269755s ago: executing program 32 (id=2342): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0xf, 0x73, 0x3ff, 0x10, @mcast2, @empty, 0x7800, 0x40, 0x8, 0xd0}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0xf, 0x73, 0x3ff, 0x10, @mcast2, @empty, 0x7800, 0x40, 0x8, 0xd0}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r5, &(0x7f0000002000)='`', 0x88020) (async) write$dsp(r5, &(0x7f0000002000)='`', 0x88020) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r6 = socket(0x11, 0x5, 0x0) setsockopt(r6, 0x107, 0x1, 0x0, 0x0) close(r6) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @mcast2}, 0x1c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) 7.896152783s ago: executing program 4 (id=2450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x60b, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) dup(r4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000014}, 0x404c001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000001080)='net/sockstat\x00') preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) bind$inet(r7, 0x0, 0x0) mount$nfs(0x0, 0x0, 0x0, 0x201008, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001400), 0x1, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 6.178352416s ago: executing program 1 (id=2455): r0 = open(&(0x7f0000000240)='./file0\x00', 0x880, 0x81) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r4 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000007c0)={0x80000000, 0x0, &(0x7f0000000800)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000480)={r5, 0x0, 0x0}) 5.171066583s ago: executing program 1 (id=2457): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x48100) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000000c0)={{0x11, 0x80}, 0x0, 0x2000040e, 0x7fffffff, {0x74, 0xf}, 0x80, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0xffffffffffffffa7}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 4.749335666s ago: executing program 1 (id=2458): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/167, 0x0, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000285000000170000001801000020646c2500000000002020207b1a"], 0x0, 0xffffffff}, 0x94) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e8169523010902240001000064000904340102d469e70009058acf"], 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_control_io$uac1(r2, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r4}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}]}, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r8, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) signalfd4(r7, &(0x7f0000000140)={[0x72]}, 0x8, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r9, 0x4, 0x2}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000040)=r9, 0x4) read$msr(r3, &(0x7f00000001c0)=""/173, 0xad) 4.504573986s ago: executing program 5 (id=2460): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) socket(0x10, 0x3, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0x387040000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019c09000f01c2", 0x69}], 0x1, 0x1c, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000040)) syz_io_uring_setup(0x81f, &(0x7f00000002c0)={0x0, 0xa357, 0x10, 0xfffffffd, 0x34f}, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x800, 0x4000, 0xffffffffffffffff, 0x8, '\x00', r5, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = dup(r9) read$FUSE(r10, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004085}, 0x0) 4.485948325s ago: executing program 3 (id=2461): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') read$FUSE(r0, 0x0, 0x0) 4.365225193s ago: executing program 3 (id=2462): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004882, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mount$9p_xen(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472030000000000000000"]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8001, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000200)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r1, 0x1, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000000)='.\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) write$binfmt_script(r5, &(0x7f0000000040)={'#! ', './file0', [{0x20, '[}^).)^$$@'}, {0x20, '@^('}]}, 0x1a) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESOCT], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r8, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r7, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x1) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 4.226410481s ago: executing program 2 (id=2463): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be4bae", "bb10000000000001"}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) close(0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x45d, 0x3, 0x4, 0x8000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2, 0x0, 0xa, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) 4.109990764s ago: executing program 5 (id=2464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000001b08000a000000000006000200feffff7f14001f0000000000000000000000000000000000140020"], 0x64}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x39, 0x80, {0x0, @in6={{0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0xfd}, 0x1}}, 0x2, 0x8, 0x80200, 0x9, 0x8}}, &(0x7f0000000300)=0xb0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x129100, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x8101, 0x2) write$P9_RWALK(r5, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x30) getdents64(0xffffffffffffffff, &(0x7f0000000f00)=""/4104, 0x1008) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r6, 0x89e2) 4.057274174s ago: executing program 2 (id=2465): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x9}]}}, 0x0}, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f0000000180)={0x33, 0x40000020, 0xfffffffb}) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}]}], {0x14}}, 0x58}}, 0x0) 3.933821578s ago: executing program 5 (id=2466): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000900000000000008000003000000040004001800018014001a00fc02"], 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) io_submit(0x0, 0x0, 0x0) 3.376544249s ago: executing program 2 (id=2467): r0 = open(&(0x7f0000000240)='./file0\x00', 0x880, 0x81) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r4 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000007c0)={0x80000000, 0x0, &(0x7f0000000800)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000480)={r5, 0x0, 0x0}) 3.229268499s ago: executing program 5 (id=2468): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000018c0), 0x41, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000004c0)=""/4096) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x204, 0x8, 0x4, 0x0, 0x1}) 3.189551342s ago: executing program 5 (id=2469): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101202, 0x0) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101202, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xff, "340b7832c1efd131b8e6498c25f54a2700", 0xffffffffffffffff}) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) 3.125565308s ago: executing program 5 (id=2470): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000340)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x0, 0x6, 0x3, 0x8}}, 0x101000) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x4dd4a000) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r5, &(0x7f0000000100)='reno\x00', 0x5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) ioctl$TIOCSTI(r6, 0x5412, 0x0) syz_emit_ethernet(0xda, &(0x7f0000000480)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2f, 0x0, [{0x0, 0x12, "5e000000ff000000b9371c2f82000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@rand_addr=0x64010101, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x43, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x8, "02a20948fd74"}, {0x0, 0xd, "ccf0294e2a3bdb4aa40b24"}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r8, r7, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r9, r0, 0x0, 0x2000000000000002) 2.476952691s ago: executing program 3 (id=2471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000006006600c78800001a0033"], 0x50}}, 0x0) 2.368978197s ago: executing program 2 (id=2472): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000"], 0x50) sendto$inet(r0, &(0x7f0000000580)="e1", 0x1, 0x40000, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) 2.153420445s ago: executing program 4 (id=2473): syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x12a) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x9f}, "06a1db3981ef35c30f4a2d457ad8d927191ba5bc51144a8eedf85f56e8cb6d7f7ce828ebb954b96538fd92ae2c06259f1448d9cff92dfec91bc7433c1302e5420f3ecfdc8721130d17f2943c961a211dd1e1c77bb5abbb1437b89f9e4fbbc9ce4396ae31c768de299412bb9e72c1082990531ff76332384fe862cf55a0831b799633cd40cc319db2eed95ad2bf692b898bfdc0bbd8aa5cc261128911f03d11"}, 0xa3) 2.14389115s ago: executing program 4 (id=2474): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0x9, 0x70bd2c, 0x25dfdbfd, {0x2, 0x14, 0x20, 0x4, 0xff, 0x3, 0xfd, 0x8, 0x3600}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0xffffffea, 0x0, 0x4804}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0x9, 0x70bd2c, 0x25dfdbfd, {0x2, 0x14, 0x20, 0x4, 0xff, 0x3, 0xfd, 0x8, 0x3600}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0xffffffea, 0x0, 0x4804}, 0x40) (async) 2.055087645s ago: executing program 4 (id=2475): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r6 = gettid() socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r6}, &(0x7f0000000080)) read$FUSE(r5, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_io_uring_setup(0x616e, &(0x7f00000002c0)={0x0, 0x105cc3, 0x40, 0x0, 0x207, 0x0, r5}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}, {0x0}], 0x2, 0x12}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.897650463s ago: executing program 3 (id=2476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000001b08000a000000000006000200feffff7f14001f0000000000000000000000000000000000140020"], 0x64}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x39, 0x80, {0x0, @in6={{0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0xfd}, 0x1}}, 0x2, 0x8, 0x80200, 0x9, 0x8}}, &(0x7f0000000300)=0xb0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x129100, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x8101, 0x2) write$P9_RWALK(r5, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x30) getdents64(0xffffffffffffffff, &(0x7f0000000f00)=""/4104, 0x1008) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r6, 0x89e2) 1.144123317s ago: executing program 3 (id=2477): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.07327767s ago: executing program 2 (id=2478): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffbffffffff}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup3(r0, r2, 0x80000) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) write$binfmt_script(r3, 0x0, 0x0) 1.044723701s ago: executing program 1 (id=2479): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xc8200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x1) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='binfmt_misc\x00', 0x281c012, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xfe) 998.033982ms ago: executing program 2 (id=2480): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r6}) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0xf9d5af3a96218148) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa4c10000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d5f28732c2dbd9423debbb86f9dba4a2dba4dbe076cb0d67683f7bb11c9cab3877f25a2cb3786ba8503f3783d602bb3eed8a8bef4ff1631aa78acefca03c1"], 0xe0}], 0x1}, 0x0) poll(&(0x7f0000000080)=[{r8, 0x7e9}, {r8, 0x5062}], 0x2, 0x9) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r6], &(0x7f0000000200), &(0x7f0000000300)=[r7], &(0x7f0000000340)}) 949.047923ms ago: executing program 4 (id=2481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a05000000000000000000001400bb7a6666d500001100010000000000000000000a00000af910bb72a7b972c3e1b9e71adcfb2c064464a4a67959592efed54a5cea04408a2cd66647fcd3d8"], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') gettid() openat2(r1, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40242, 0x0, 0x10}, 0x18) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) ioctl$SIOCAX25GETINFOOLD(r2, 0x5411, &(0x7f0000000100)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000001080)="039a9129f0d3c66a173bb477c349c6ed219c497fc7246a3dce40a9addec7588ddbbea82f7cdb92b328606c435e38d4d7867092821f4173d5e237027ec5b87c2e22ce1a10b4df6a6ba5bae6ec9fb181230ada9d9729fe07be6b67aa201034c5f4da640f934e7330f5541f823758f39f3ca2cdc3351b79c19f379bc819cb1ba23712a932c587c2f2c24d0f9c1268b6876a5dd7ec2ca6a6946cb640bcd767c8865ee2f76c6f8271e1074ce824a5a2583cf91eb9350c9c374666325270890b786f9f330fce8c001d48a1b15e0ac0ab3f0f8afb2612800d236f0dc4ea22e66a3c81a055d542ba40a33bc79bcd09ed6854e79cfa920dd96f234a0e8707a2152d3555bf550d0f5feae07dec9138e61a2f25b6cccf202202d099c9b278e3c7ccf02b2b1417290b5e3d0a5d42cdf21fbc8aa946d7b9cb5267255b23191ae524bf2d4ba32e1c8cd41f80fb067fce6cc83ab0d89f927e0cb1e1c8ef1ce8f5609fa7665a94eb7860390c1749732269df67a219f6a3eedf31122431e7ae05b7cc478a5c8fed8d93c617dbaefa2b8749d5b06213a3c0c135c9f12b939bdc3df5ab2e53044d6499d5bf2c2cb59e722dad05a597f715263801bec62bf32d095aa07af2ed1a838f86f9ea8a7a7f928558d73ccda18860995c3c60cf9277a867596d0d7566bb4d83b2cd3d4179ba52c5bc95c7c9560630416484fa735e665f82fe447857498e96330ae5c4ef2dea06cd003a50c14e5af406a2360980e78dd0234734cca144d3263d69abd78be965aed33dfa0f86735c9b742e14c3f485eaf7be2df92b6ea11678c44f201392042aba273ad080ced63809cf4c0576ff1a16653e6c7e4bd4b7be0dcaa32c1035a2b58e593324a9d862f02d47b687c1e0003182874262128d456a71847eac87608f00c49ad766240fa6c3306774fd2648361d21cf0dbe4c54751a90d1e28f4fdaa50afe0782f8db98cd0586706e737257552bbd5dde945725b5ccbc0a019d1052159f23235e7a23b24be1b9c03153bd1fa5f34132bdf3a05699bd2b98ab056e265754696ab5690920dd1d42b7e08ab969e81f4ebf7cfd529f311e8c8e235cf069f5cf4767cee6681df9a2cb8f51c41bd08b64316c0053abdacdc6ca9439b204968104d571d5a53e8d4c83e3b03990be58990cd4bb97271cf6f1afde3bca04567d342926be5afa0218d7f6fd15bfe22dec022774c8af417395fb0b8ec9255a14d6e9fa9452d0a4646604dd74da9ac34e12053b7e41d216ec76c88e1c425fe0931f1e0a8ec5543482ce18efb0493d4affef86eb23ddb5bc8ae33cf1665f8300d246c83223a09e798786044eba224fef4131a29527e7fde29782ff289971e8cfac7e6e9f9fdfc6befcfa3fac6fabea32af3484fc4e29db2ac2ad0edace4753f86b99cea01ec87c92a302693c7deccd75f79abaf331a75f61975d252b82dc8da0b6e61f86927c6c81a2ea964645c58fe2231c5d23d9a20849d856387d3151893b4e95501eea89443d214d622e5f27d09a82960d2a6c2fdee31aa5489a06957e76d13712ebd190515ff073fd21f043c0c478b4e494ab2403d2524ca66d2908fa83d15bd708f57503ff03c1f0f01231ff2edbfb63b91edb869c46a83a2a1bde86714f3878b30fbb3ce29d5fd263024b5622d4190a15c9bcbf7fa323e491b4006a50dc031940125eae358b611c45c1b365fa00ec5c2e70901fea4e3f4412195d4e5f24e3e631ee5a0ba7bafa732d6f50f9a9b0acb0f127e142d84c4164b130ee5872923f344897258fff3969713f4142457a40a2b6ef6f2c87c8e7191df90e607c1d4f9da5b8fab3a03bf96562ab9bf04ffff70c11dce37110c3a757b653514662a03438bb8147371d2bfb2337f23d63a5465bf3889151a77ce493ba0a8ec70b2d3ec0d9eb77942198e703f8c28b52e71f38e0b95660ab4e8da3fe22928ab0149fb02d6e842bfc790b6cf04cef72fc7acc15545dc00875f5c8aedad188bb844be403c45c00382bf381c429922c1ddb546e44c9e9444c6fa6e358d88e0fb19fcc4fada0094231d423b6c2977a19e2a673e2983dde2a8e09c1a021cb866caa0ee60e79d0e9e7f18040348351531cb9ecb3219d722a1f6473c071f81d8388906fcf308dc9ceb73eb67b16c4a7643115fa6e385762192a58264ce11ae2755ad89ec44318c009d4da900ea60e4eeb68d71c5d4fbe4ef232cca0f89637bef98dfc1d83c0fc7d65acb0bcaa2f0cbde60326ff3c7811d5b8340aaa2261e0d90afe063a915c11e02a93a65acd3a20e6fdf7877b948025d97acd1d1ef4832f4528234567df87d61e0040e9dd17d0308d9569d74f40f6c3cc8a925dce05c3e3c328c921c485b61aaaa47baa92b933e9fc3dffe7e255e5669ad2866d6809d69c6a722d33b259cb407bdbd416dcc106d4ccd5af00f45f90c862849eed55d7f6090e3ee843eba0f6b3f314e61f040cc1a3e2bb777fdc0e15e97533a305cd07dd7a2c8b7e3798732470d5eade2e1fafa20e57f0e78bdbc6f105a6d4e380fa75fbb9e88cf5e51565bf145b7b593db7d4826d7bfebb1b8c04be43041d38456aaff8f44d93fe82356abd74a234232127ab9f51323126fc4c172d70a92e57d492fe827c4e2297341457ae0b510a01cc2f39219a494a493f49800b9db4961903d3e196213a03f705e8f7b2d0c37e33c7d0be2f7d94a7d4bf36b7de7ee330dd245aeddb778844e9ba1eb1e02bfb880bd995eb30bf07fb1b07856acc120e3236cd510f9dc6a406cbc6f31093a64086491b8e00f1da942dfd7f1ad292acf9d23c7f646a6405f65e5f60159410be36e7b09b676044e655feb0e5beb8b54a11b31d5c15ccbb9b756a76fccac011da45766ccef94ecc060d59a9598c06b7ee5919364ed503087a9d67a187572b73920fe805b8a4b1379334026e9b59f7fdfcf3860a63fe57f54df4e7a9c9029a7e8f2dec0eb9869f3349486a4deb3556072f9ec19996e198a3bcd5bbc295cb7da4f73f616d0d50a8c329e0803892a24daf10247b6327181153040fa323e8048d98cba68870aa1179efe50da3db136237b501c2f54ad3c066f6ed7622a4f143f6b45ce490e199ce8afa995d8c6be8f697c3b6e33092b5fbf6cc0ac905025598e17bac3ca1d9909b8c3084c49b8e465b73356d200da3681012303603b872655ea2a8b0ac3abc1997349bf29b5f36aea00b57dc48c8457fa02b44070f1f20756b74d35fef8d5eaf1548b6b7d974525951b026acaccce3d4d8cfeb36793a8c5cb3574633ca2e30130fdcd7d4504d6896e7e8f3d617aed65b8f9bba46d11c455a3b4fabf011daa60e6fbffbd8086b6786d81783f4c3d1f1dbc0631a5fd5c6a1e55e5ac7dd1a7df0b94684a7fbacbc469d5bbd824bcb23e268834b61abb6d6654df761620a8c7eb81afc9a7ece03cabfafecc3d19de8dfcedb59096e3d780b25107e20ac5836e616727f5fb7291f9c1ef00970675e8a3b647398510649bbf5c08040a5a314c1e4fcc1ef1c90155513454bd5a47e2f4356a4ac7131ad6b88bba0763e0e44f8eb54d573273f8fc5ded877a81d3c208ce1895f160772ac2337851a54608136526454a1da6bd1ea4c022a26a5df3786e192265aafbfb30f5bbda53b456ae5566732f5e872d5c9aa7f6377baa72e4504400606ae947e74e1cd33afad7d2af7a629bdc8493ebcd482104582010312f19abda42e36bbdb2b5b70437f673146eaf1c96a2fa0ea2a8c6a27b97f202eec164921f651cbc5bc4eff44634d449ec8cf509233d0db8719bade95ad2572be45f45d559196e1b771f2e872b6ac94c2496a52ff89f798547a8d53b6a7c6f65b6785504b19cf7cf80a231b8ce4e132ea6ead68a6bff748b41b5b7be7c9f48862cdf0b5c890240c14d34320a0b978fc49d96d6f25b8b300b5256116ba0e63ce03aef40f06ee362895da1d2d05e782caba9fd199041cc2222ea0010c09afa36e10eb23371a83f60a9cd037dbb3520480bf875ae4c2836bb7f53cef37d3f64cec97b99f527774d65ef8840600ad38d6dc1849d7f6b07bc22045c919677d2d695e4d8882d4eff20347ea6900dc922f65f76c78e5508a4a02de4c0492e235e495d9b9e26d969d954e0478ba15c3e36245dbd4853249134f2765dba293224f91cbe32c86bba567400a2b6b22d401b0b2f37fae0ef1e56f3037a551776dcaf0de1d336cd9cc5f15d07ad359b794ed287c49ac54b52e636ac80a88c37cb11ec7492a7f8da8f1f833caa25fcc007c0631bd2f417fc42ffb4246493f09af5211246a7827e90caa0b5805868e5abf949f8fc634744c245a4c45ec05a8a7f491474da20672d32b063023408135bb7fa74ac8ff7023aeb58e37f8ff7fb8fab9614c30c797505663068a271927182926e95abf8e97c22aa5fd983dcc4a49853813cbde85b07efa556a64d73adad927b8753d9e0247bebecebfd4384393ddb2bc534ddfbc550bd7a4fec7e3b1a5b29dff13ed9fda20db439e39d4c9937dc1da426495265a1cec0a198a735019febbe34f836156ff3e480e232de5632f8a48e83fa4e54633b4f7929fa9ae899e66f3807cd2dd0e70464f7956cb95c9457165fde522bca6a79d78986bfe4f59bb94d044117cf582158ec9485df9832c04a5297986df12b4562fee877422858cd82800b1fb97c5c8d0ff3a70545fa9944f9edb09e7124a4755bc8fdbd274a5661469feb2cb101e2b2fd4f1e18093adf01b89355116fa8e13bc87d2f19e6b56c81d0c948c3dda0105a9c3e02ac4d32c43db19dd3e8a3da469235d9b711eb4048773f4df23a36519b3604f6a1dccee6f809a5c087a29c47fed417057a9e105d9572f4e30aee997079fe33d15923288c14a4e689aee8c37e7e4ecc6b795e3f0b0499ff17645e04212cefc373536e2103aee123a4485fdb6018ebf5e8bd190f81cd7667775b2e81b3614ab2b216f78f034f88c7cb3f7125e08c2a44aff32e7ed682b1849e91f13a9051feb8371fecbb5119f80206f72d734cb874df9ba4f040261c43730104b4e8890c5a7d6ddfc785991b5c37e7a781ec688a3e5046c143db3747a0f22f7939ed43bc7910111450a35de6e709c2c7b64ead86856ae629ad279c777927b5535ce1c2c4b43fd0697209aad9d125c1543de4efe6c7ed0acedd4cf2c31ca6a739dd229cc6b9d97aabfcb6bfaf08d1c9cd4b5eab3bbb9d3229624fc11af02d0188821748c7e5d651e0d3819fed9d7e748ea1035c8ce3634937899bcb0da726791c1d8e7f7767caef15d927c2e7d93e977ae59ac20987e7b328aa046e874c9ec61fdfb3b5503d67d1c5a906530606b4429310536faf36ab602c56e3fd3e59d3e1ab30b00fee2e27f8d9d6bbcb6fca9d9242c84a9cf603bd88d8b883e052b9e3c04bff6398acbc59608de7de966914f7f184fef33cec3799f687da627e32f1cb7fef74afbd4f9ea357ec3dfd37cb9eb7420ddb55a7ae364099a7d445a8f9a0240e13df75a6ceef61ff6bf9355a5cb1cbbf5dc14e1d1827b31857bb9a62686c6120e10dba316cf6cb941004c7e637bd0a5735ab01d7021282c737d3371d10e5a8bcf67e4d415e290abb4a32ad1ec2d3837212e83af8849063056bd798fe21ce56b7385c5123b7192175e574cc6008bf450a51cfe7d501ad317200f129603a271730d1a13725f81e8e999fe780fc782d1d1668bc17a2897732d27fe5f6abd5fae9cf312c90dd5de307f49354e308a214d382da7eaf2e4eba99a14718e1c0556ee1f1f046f9777cc98710f709bc22d1865e2c20276f7c84929516798d699c1cc08c432016b26487aef9a0ee16dda20", &(0x7f0000000140)=""/208}, 0x20) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9, 0x7aa, 0x4, 0x5, 0x4, 0xf, 0x9, 0x6}, &(0x7f00000002c0)={0x4, 0x7, 0x2, 0xfff, 0x1, 0xc08b, 0xffffffffffff9b01, 0x3}, &(0x7f0000000300)={0x3, 0x2, 0x9, 0xb78, 0x1, 0x6, 0xb7b, 0x7}, &(0x7f0000000380)={r3, r4+10000000}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x5]}, 0x8}) 799.852833ms ago: executing program 4 (id=2482): r0 = open(&(0x7f0000000240)='./file0\x00', 0x880, 0x81) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r4 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000007c0)={0x80000000, 0x0, &(0x7f0000000800)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000480)={r5, 0x0, 0x0}) 761.922634ms ago: executing program 1 (id=2483): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x10, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff1}, {0x6}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x46, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x4e4, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 264.118133ms ago: executing program 3 (id=2484): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001600)=@delchain={0x5f48, 0x65, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff3}, {0xffe0, 0x9}, {0xfffa, 0x6}}, [@f_rsvp6={{0xa}, {0x38, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private2}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x101, 0x4, 0x7fffffff}, {0x7, 0x7, 0x4}, 0x11, 0x96, 0x8}}]}}, @f_rsvp={{0x9}, {0x37fc, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_RSVP_ACT={0x37b8, 0x6, [@m_police={0x2508, 0x1c, 0x0, 0x0, {{0xb}, {0x24a4, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x800, 0x8, 0x101, 0x68, 0x4, 0x3, 0x5, 0x0, 0x5, 0x5, 0x8, 0x9, 0xa0b, 0xd, 0x5, 0x10000, 0xece8, 0x0, 0x43, 0x6, 0x10001, 0x200, 0x6, 0x6, 0x4, 0xfd1f, 0x0, 0x2, 0x6, 0x6, 0x12, 0x9, 0x4, 0x6, 0x0, 0x0, 0x4, 0xfffffffe, 0xfff, 0xcff, 0xffffffff, 0x7, 0x81, 0x0, 0x3b64, 0x7fff, 0x2, 0x5, 0x5, 0x400, 0xe, 0x4, 0x9, 0x7f, 0xffff3ed8, 0x9, 0x4, 0x9752, 0x9, 0x4, 0xfffffff2, 0x0, 0x9, 0x4, 0x5, 0x2, 0x90, 0x2, 0x1, 0xfffffffb, 0x10001, 0x4, 0x7f, 0x100000, 0x1, 0x0, 0x2, 0x956, 0x225, 0x6, 0x9, 0x8, 0x0, 0x5, 0x5, 0x4, 0x5, 0x5, 0x8, 0x0, 0x7b0, 0xc, 0x1, 0x8, 0x6, 0xffffffff, 0x1, 0x9, 0x6, 0x881, 0x3, 0x3, 0xfff, 0x8c, 0x1, 0x3, 0x7, 0x4, 0x1, 0x8, 0x6, 0x80, 0x1, 0x8, 0x7, 0x8, 0x800, 0x8, 0x1, 0x1000, 0x6, 0x6, 0x8, 0x101, 0x3, 0x6, 0x9, 0x1, 0x3, 0xa33, 0x1, 0x711, 0x2, 0x4, 0x7, 0x80, 0xb5, 0xa8d3, 0x9, 0xffffffff, 0x8, 0x800, 0x2, 0x4491, 0xf9, 0x252e, 0x7, 0x8, 0x401, 0xffff, 0x70, 0x200, 0xa04e, 0x71a, 0xf88, 0x100, 0x3, 0xc78f, 0x7, 0xfaa, 0x4, 0xeb, 0x6, 0x401, 0x3, 0x2, 0x0, 0x6, 0x6, 0x1, 0x80, 0xe962eb94, 0x8001, 0x2, 0x9, 0x6, 0xb, 0x6, 0x9, 0x1, 0xdb92, 0x2, 0x7a, 0xff, 0xfffffe01, 0x6, 0x6, 0x1, 0x9, 0xffff, 0x7, 0xc1, 0x9d9, 0x80, 0x1, 0x5, 0x3, 0x7fff, 0x2, 0x6, 0x6, 0x3, 0xff, 0x0, 0x6, 0x8000, 0xc7, 0xabf0, 0x0, 0x6, 0x7, 0x17352d32, 0xfffffa1e, 0xffff, 0x8, 0x4, 0x1, 0x6, 0x7, 0x10000, 0x1, 0x101, 0x7fff, 0x200, 0x7fff, 0x2, 0x6, 0x1, 0x1, 0x1, 0x4b31, 0xfffffffd, 0x7fffffff, 0x0, 0x5, 0x3, 0x7fffffff, 0x5f0, 0x8, 0xe7, 0x7fffffff, 0x2, 0x8, 0xe, 0x4, 0xffff6492, 0x8, 0x8, 0x0, 0x0, 0x2, 0x3, 0x5061, 0x3, 0xfffffe01]}, @TCA_POLICE_RATE={0x404, 0x2, [0x81, 0xc, 0x5, 0x9, 0x3ff, 0x5, 0x10000, 0x1d, 0x10000, 0xffffffd5, 0x0, 0x8000, 0x2, 0xb170, 0xfffffffd, 0x0, 0xf, 0xf0, 0x9ea, 0x3000, 0x6, 0xf7e0, 0x690, 0x6, 0x80000000, 0x6, 0x1, 0x6, 0xf, 0x3f, 0x80000000, 0x6, 0xb0, 0x0, 0x9, 0xb, 0x1000, 0x7ff, 0x2, 0x80000000, 0x2, 0x3, 0xb, 0x5, 0x0, 0x7, 0x3, 0x401, 0x1, 0x2, 0x9, 0x4, 0x7, 0x6, 0x401, 0x80000001, 0x3, 0x5800, 0x5, 0x2, 0x8, 0x4, 0x7fffffff, 0x6, 0x2, 0x4, 0x8, 0xf5f4, 0x0, 0x1, 0x1, 0x10001, 0x4, 0x7, 0x3, 0x2, 0x2, 0x8, 0x7, 0x101, 0x7fff, 0xfffffff9, 0x3, 0x5, 0x1ff, 0x3, 0xffffff7a, 0x2, 0x4, 0x0, 0x0, 0x8, 0x1, 0x307f, 0x3, 0xf, 0x3, 0x5, 0x7, 0x3, 0x9, 0x5, 0x2, 0xf48c, 0x5, 0x10000, 0x28, 0x8, 0x6, 0x24, 0x401, 0x7, 0x991, 0xc0000000, 0x79, 0x0, 0x1, 0x3, 0x800, 0x7, 0x8, 0x80, 0x13e0000, 0x80000001, 0x7, 0xb7, 0x2, 0x7, 0x200, 0x8, 0xffff, 0xeed, 0x7, 0x2, 0x2b, 0x9e2, 0xdb, 0xadbb, 0x3, 0x8, 0x4, 0xd2, 0x6, 0x3, 0x1, 0x5, 0x0, 0x3, 0xc000000, 0x7ff, 0x5ec, 0x5, 0xfffffff5, 0x0, 0x401, 0x3, 0x582, 0xa, 0x10001, 0x6, 0x7f, 0xfffffff9, 0x3, 0x8, 0x5, 0x8, 0x0, 0x1, 0x9, 0x9, 0x8, 0x369ced48, 0x3, 0x4, 0x8, 0x0, 0x1, 0x6, 0x1, 0x4, 0x7, 0x412, 0x82, 0x119c, 0x5, 0x40, 0x7, 0x101, 0x1, 0x9, 0x7f, 0x4, 0x56b, 0x9, 0xc5a, 0x80000000, 0x90, 0x892, 0x3, 0x5, 0x1, 0x4, 0x6e, 0x3ff, 0x7fff, 0x7ff, 0x7, 0x1, 0x80000001, 0x72, 0x8, 0x9, 0xe9, 0x9, 0x100, 0x4, 0x9, 0x5, 0xffffffff, 0x3192, 0x10000, 0x5, 0x9000000, 0x6, 0xbf64, 0x3, 0x7, 0x7549, 0x1, 0x5, 0x9, 0x971, 0x6, 0x0, 0x52ce, 0x11f8, 0x2, 0x2, 0x0, 0xc, 0x89, 0xff, 0x1, 0x7fff, 0xebe, 0x3, 0x80000001, 0xffffec56, 0x33, 0x401, 0xb, 0x8, 0xfffffff9, 0x100, 0x6a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x53}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x0, 0x3, 0x200, 0x4, 0x6, 0x10000, 0x76e, 0x7fff, 0xffffffff, 0x78c, 0x10001, 0x113, 0x9, 0x5, 0x10000, 0x1d, 0x80000001, 0x7, 0x4, 0x1, 0x735, 0x6, 0x1ff, 0x5, 0xdb32, 0xfffeffff, 0x80, 0x5, 0x9, 0x521, 0xff, 0x5, 0x1, 0x9, 0x80000000, 0xd3a, 0x9, 0x196, 0x8a5, 0x8, 0xb1c1, 0x5, 0x5, 0xffb, 0xdd8, 0x0, 0x9, 0x500, 0x6, 0x5, 0x5, 0x720, 0x5, 0x8, 0x7, 0x5, 0x81, 0x4, 0x80000001, 0x2, 0x7, 0x80000000, 0x14, 0xac, 0x8, 0x8001, 0x0, 0x8, 0x1ff, 0x9, 0x0, 0xffffffff, 0x4, 0x7, 0x0, 0xfffffff9, 0x7c, 0x0, 0x8000, 0x5, 0x7cea, 0x9, 0x1000, 0xaf7, 0x40, 0x3ff, 0x8, 0x30000000, 0x562e, 0x0, 0x2, 0xfffffbff, 0x0, 0x900000, 0x1, 0x4, 0x0, 0x5, 0x6b, 0x7c, 0x6, 0xfffffff3, 0x800, 0x9, 0x1, 0x7ff, 0x0, 0xf606, 0x4e, 0x8, 0x9, 0x2000000, 0x9, 0xaa64, 0xe, 0x9, 0xa9, 0xa0, 0xcba, 0x1, 0x9, 0x39fb, 0x1ff, 0x0, 0xffff, 0x8, 0x7, 0x4, 0x3, 0xc, 0x7fff, 0x9, 0x8, 0x5aa, 0x7, 0x400, 0x7, 0x6, 0x57, 0x1, 0x2, 0x80000000, 0x7fffffff, 0xf3, 0x10, 0x723, 0x5, 0xfffffffb, 0x700, 0x81, 0x9, 0xff, 0x38b, 0x2f8ad578, 0x9, 0xf, 0x8, 0x80, 0x8, 0x10000, 0x8, 0x2, 0x3, 0xee1, 0x7, 0x5, 0x2, 0xb80, 0x6, 0x5, 0x1, 0x2, 0x10001, 0x9, 0x9, 0x0, 0x4, 0xd, 0xfffffffc, 0x4, 0x5, 0x10, 0x2, 0x1, 0x2, 0xa, 0x0, 0x3, 0x4, 0x9, 0x1, 0x3, 0x913, 0x1, 0x3, 0x7, 0x682, 0x54, 0x0, 0x1f, 0x0, 0x4, 0x7466f0b9, 0x9, 0x8, 0x3, 0x5, 0x1ff, 0x1, 0x8000, 0x101, 0x2, 0x8d, 0x4, 0x0, 0x7, 0xd, 0x4, 0xc, 0xfffffffa, 0x4, 0x18a, 0x406c, 0x7f, 0x9, 0x5, 0x4b68, 0x1c48, 0x3ff, 0x6, 0x5, 0xff, 0x5, 0x7, 0x3, 0x6, 0x4, 0x54, 0x4, 0x8, 0xa, 0x2, 0xf, 0x4, 0x401, 0x7fff, 0x0, 0x25d1, 0xffffffff, 0x6, 0x3, 0xb993, 0x9, 0x7, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x6, 0x2, 0x10001, 0x1ff, 0x5, 0x1, 0x22, 0x56dd, 0x8, 0x1, 0xd1, 0xac, 0x80000001, 0x38d0, 0x5, 0x1, 0xffff0b25, 0x2, 0x3, 0x3, 0x100, 0x8, 0x2, 0x9, 0x2, 0x2, 0x3, 0x3, 0x6, 0x1, 0x380, 0xe, 0x9, 0x3a, 0x7e35, 0xe6, 0x1, 0x7fff, 0x0, 0x4, 0x9, 0xc4, 0x9, 0x8, 0x5, 0x0, 0x243, 0xf, 0xfffffff8, 0x9, 0x7ff, 0x1, 0x3, 0x4, 0x7, 0x7, 0x2, 0x2, 0x10001, 0x9, 0x1ff, 0xffffffff, 0x4, 0x1, 0x1, 0x9, 0x7, 0x5, 0x5c8, 0x2, 0x1, 0x4, 0x8, 0x3, 0x7, 0x1, 0x0, 0x7, 0x80000001, 0x8, 0xc, 0x100, 0x7, 0x100, 0x8, 0xfff, 0x1, 0x5, 0x8, 0x8, 0x8, 0xd1b2, 0x2, 0x401, 0x8, 0x7, 0x2, 0x2, 0x0, 0x200, 0xf, 0x6, 0xc3b, 0x9, 0x4, 0x2, 0xcb, 0x5, 0x7, 0xfffffff9, 0x68d, 0x9, 0x2, 0x400, 0x101, 0x4, 0x1, 0xfffffff8, 0x80000000, 0x200, 0x4, 0x80000000, 0xf62b, 0x4, 0xd, 0xb5e, 0x40, 0x3, 0x0, 0x9, 0x2, 0xfffff4b3, 0xa14, 0xa, 0x3, 0x81, 0x200, 0x8, 0x2, 0x9, 0x2, 0x2, 0x1, 0x10000, 0xc1, 0x200, 0x5, 0x5, 0x2, 0xc92, 0xc, 0x1000, 0x800, 0x80, 0x80000000, 0x18000, 0x80000001, 0x4, 0x6, 0x2, 0x3, 0x7ff, 0x0, 0x11, 0xee, 0x4, 0x9f, 0x1, 0x4, 0xbf06, 0x292, 0x5, 0x3, 0x8, 0x10, 0x7, 0x86c, 0x800, 0x2e4b, 0x8, 0xd, 0xc75, 0xffffffff, 0x803, 0x5, 0x80000000, 0x0, 0x22000000, 0x6, 0x8f2, 0x2, 0x0, 0x4, 0x3ff, 0x3, 0x80000001, 0xc, 0xd, 0xc, 0x812, 0x27, 0x4, 0x0, 0x2, 0x82c, 0x7, 0x80000000, 0x8000, 0x7fffffff, 0x6, 0x67, 0x0, 0x8, 0xff, 0x1, 0x3, 0x3751, 0x4, 0x8, 0x1000, 0x20, 0xb4, 0x7f, 0x3ff, 0x0, 0x3, 0x6, 0x6, 0x5, 0x80, 0x7fff00, 0x1f42a8fd, 0x10, 0x5, 0xb57, 0x3ff, 0xfffffffb, 0x197, 0x0, 0x7, 0x2d66, 0x5, 0x9, 0x0, 0x5, 0x3, 0x5, 0x7fff, 0x8, 0x4, 0x1, 0xfffffff7, 0x7, 0x401, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x48000000, 0x7fff, 0x9, 0x4, 0x2, 0x9, 0x7, 0x1, 0x2, 0x0, 0x7fffffff, 0x8, 0x0, 0x1, 0xf94, 0x10001, 0x1, 0x3, 0xfff, 0xb, 0x3df5, 0x0, 0x5, 0xfffffff8, 0x8b7b, 0x40b1, 0x3, 0xf7a, 0x1ff, 0x0, 0x4, 0x7, 0x4, 0x5, 0x9a, 0x5fb7, 0xfffffffc, 0xb76a, 0x7, 0x362, 0xffffffff, 0x80000000, 0x80000000, 0x7, 0x80000000, 0x7ff, 0x6, 0x0, 0x5, 0x5, 0x9, 0x3, 0x81, 0x7, 0xff, 0x7, 0x101, 0x3, 0x908, 0x9, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0xc39, 0x28, 0x384, 0x0, 0x6, 0x9, 0x1, 0x400, 0x4, 0x7, 0xffffffe3, 0x5, 0xfffffffe, 0x10000, 0x2, 0x1, 0xa, 0x400, 0x9, 0x7, 0x6, 0x0, 0x2, 0x9, 0x2, 0x7, 0x2, 0x6, 0x8, 0x7f, 0x6, 0x1e, 0x2, 0x1, 0x0, 0x7ff, 0x7fffffff, 0x4, 0x5580, 0x4, 0x101, 0x5, 0x3, 0xfd, 0xd3c, 0xaf, 0x83c, 0x2, 0x3ff, 0x7, 0x5, 0x4, 0x4, 0xfffffff9, 0x40, 0x403, 0x9, 0x58, 0x9, 0x401, 0xffff, 0x4, 0x9, 0x5, 0xfffff9a8, 0xfffffffc, 0xfffffff5, 0x1000, 0xc00000, 0x4, 0x1e000000, 0x9, 0x9, 0xffffcb1a, 0x9, 0x1, 0x1, 0x6, 0x4, 0x6, 0x3, 0x2, 0xa6, 0x9e2, 0xffffffff, 0x2, 0x7, 0x101, 0x80, 0xfffffff7, 0x81, 0x3, 0x6, 0x8, 0x10, 0x9, 0x1, 0x0, 0x10000, 0xce7, 0x63c4, 0xe, 0xb, 0xc, 0x2, 0x4, 0x603, 0x5000000, 0x1, 0x80000002, 0x2, 0x6, 0xa8, 0x0, 0x1000, 0x4, 0x8, 0x3, 0x7, 0x6, 0x5, 0x7, 0x80000001, 0x0, 0x0, 0xf6, 0x5, 0x200, 0x37db, 0xa04c, 0x3, 0x0, 0xddf, 0xf, 0x4, 0x40, 0x4, 0xe99, 0x101, 0x1000, 0xfffffff9, 0x4, 0xc9c, 0x3, 0x401, 0x10001, 0x2, 0x8, 0x1, 0x80000000, 0x4, 0x7fff, 0x4a0, 0x739d, 0x2, 0xff, 0x8, 0x7, 0xfffffff7, 0x1000, 0x80000000, 0xd5, 0xa, 0x4, 0x0, 0x53, 0xd, 0x2, 0x2, 0x7ff, 0x6e9, 0x9, 0x800, 0x2, 0x4, 0x0, 0x5, 0x6, 0x800, 0x9def, 0x20000000, 0x5, 0x83, 0x8, 0x0, 0x2, 0x80000001, 0x40, 0x8]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7fffffff, 0x80000001, 0x0, 0x101, 0x8429, 0x401, 0x7, 0x8001, 0xff, 0xe6, 0x4, 0x2, 0x8, 0x5, 0x2, 0x4, 0x10000, 0x3, 0x6f4, 0xff, 0x81, 0x6, 0x4, 0x6, 0x2, 0x7, 0x1, 0x101, 0x6, 0x915, 0x14000, 0x4, 0x1, 0x8, 0x6, 0x101, 0x9, 0x80, 0x6e31, 0x9, 0xa, 0xffff, 0x4, 0xfffff940, 0x400, 0xfff, 0x9, 0x3, 0x3, 0x10, 0x72c, 0x5, 0x1, 0x5, 0x4, 0xb567, 0x2, 0xf, 0x10000, 0x4, 0xf, 0x4, 0x4, 0x1, 0x8, 0x0, 0x8, 0x5, 0x37d, 0x3, 0x1, 0x3, 0x8, 0x4, 0x470, 0xa, 0x3, 0x5, 0x0, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0x80000001, 0x4, 0x7, 0xfffffbff, 0x6, 0x7fffffff, 0x5, 0x8, 0xfffffff6, 0x40, 0x5, 0x4, 0x7, 0x10001, 0x0, 0x3, 0x4, 0x0, 0x7, 0xa8, 0x3ff, 0xc, 0x0, 0xff, 0x2, 0x10001, 0x0, 0x9, 0x3, 0x6, 0x6, 0x800, 0x7, 0x9, 0x7, 0x2, 0xfffffffe, 0x2008, 0x1, 0x4, 0x0, 0x9, 0x9, 0x8, 0x6, 0x0, 0x5, 0x2, 0x1000, 0x8, 0x2, 0x10000, 0x2, 0xd8, 0xc, 0x8, 0xe25, 0x10e, 0x1b35ec43, 0x52d2, 0x6, 0xb, 0x7, 0x6, 0x4, 0x8000, 0x8, 0x5, 0x401, 0x1, 0xb1e0, 0x192, 0x0, 0x5, 0x6, 0x6, 0x5, 0x2, 0x0, 0x8d9, 0xa, 0x10001, 0x2, 0x92, 0xf7, 0x4, 0x3, 0x0, 0x7fff, 0x53a1, 0x5568, 0x10000, 0x0, 0xffffff01, 0x4, 0x8000, 0x200, 0x3, 0xffffffff, 0xfffffff5, 0x3848b8c, 0xc, 0x800, 0x8, 0xac, 0x2, 0x5, 0x2, 0x7, 0x8, 0x5, 0xfaf, 0xfffffff9, 0x5, 0xfff, 0x800, 0xeb2d, 0x100, 0xb, 0xff, 0x200, 0xb, 0x0, 0x3, 0x7c6e, 0x5, 0x1, 0x2, 0x1, 0x3ff, 0x4, 0x5, 0xee, 0x3, 0x5, 0x3, 0x8, 0x8, 0x4, 0x67a3, 0x0, 0x0, 0x9, 0x1, 0x7fffffff, 0xaa, 0x2, 0x3, 0x7, 0x9, 0x7fff, 0x1, 0x1, 0x7, 0x2, 0xffff, 0x18af, 0x1000, 0x10001, 0x5, 0x3, 0x0, 0xc52, 0xa5, 0x3, 0xfff, 0x9, 0x1, 0x6]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0x7, 0x5, 0x8, 0x5, 0x4, 0x5, 0x4, 0xd4, 0xffffffff, 0x2, 0x2a6f, 0xd08, 0x10, 0x2, 0x188c, 0x9, 0x8, 0x3, 0xd2f1, 0xc2, 0x0, 0x8, 0x81, 0x3ff, 0xe5d6, 0x1, 0x0, 0x5a2, 0x9f5e, 0x18ea, 0x8, 0x8001, 0x7, 0xaef, 0x0, 0x5, 0x7, 0x3, 0xc8, 0x6, 0x0, 0x8, 0xf05, 0x0, 0x2980, 0x7, 0x8, 0x8, 0x16, 0x1, 0x4, 0x7fff, 0xfffffffe, 0x4, 0x5, 0xfffffffb, 0x7, 0x80000001, 0x3, 0xe, 0x9, 0xb, 0x10001, 0x4, 0x1, 0x1, 0xc, 0x7, 0x5, 0x0, 0x5, 0x5, 0x8, 0x2, 0xd, 0x6, 0x101, 0x9, 0x3, 0x80000001, 0x6, 0x8, 0x81, 0x4, 0xa, 0x3, 0x8, 0x2, 0x7, 0x9, 0xfff, 0x6, 0xe9, 0x9, 0x444, 0x2, 0x3, 0x71a5, 0x5, 0x89d, 0x5, 0x8, 0x1, 0x8, 0x0, 0xffff, 0x5, 0x3ff, 0x0, 0x76f, 0x7fff, 0x8, 0xe09, 0x5, 0x1ff, 0x4, 0x3, 0x10000, 0x0, 0xe, 0x8, 0x6, 0x2, 0x3, 0x6, 0xf0000000, 0x8, 0x1c5, 0x4, 0xff, 0x6c76, 0x8, 0x8, 0x0, 0x6, 0xf6, 0x4, 0xffffffff, 0xff000000, 0x9, 0x7, 0x7, 0xb, 0x5, 0x2, 0x8, 0xc2d, 0x5900, 0xdbdd, 0x6, 0xf, 0x0, 0x800, 0x101, 0x3, 0x200, 0x7, 0x3, 0x7fffffff, 0x80000000, 0x4, 0x8, 0x7ff, 0x40, 0x2, 0x8000, 0x3, 0x2, 0x8000, 0x1, 0x7, 0x2, 0x7, 0x9, 0x1, 0x9, 0x6, 0x7d3, 0x8, 0x200, 0xe, 0x40, 0xfffffffc, 0xc3, 0x4, 0xffff, 0xcb6e, 0x1000, 0x5, 0x10000, 0x9, 0x9, 0x5, 0x5, 0xb85, 0xfff, 0x1, 0x12000, 0x6, 0x5, 0x0, 0x4, 0xc1, 0x400, 0xffffffff, 0x568b, 0xfffffe01, 0x1, 0x4, 0x2, 0x8, 0x7d68, 0x5, 0x725, 0xfffffff7, 0x0, 0x4, 0x1, 0x6, 0xfffffff4, 0x5, 0x877c, 0x3, 0x8, 0x2, 0xffffff35, 0x4, 0x4, 0xf, 0x400, 0x400, 0xfffffe00, 0x5, 0x21, 0x5, 0x0, 0x7, 0xffffffff, 0xf, 0x8, 0x3, 0x7fff, 0xf, 0x3, 0x8b89, 0x0, 0x6, 0x8, 0x1000, 0x2, 0x9, 0x6, 0xa, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ce}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x101}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7, 0x579e, 0x10001, 0x7fffffff, 0x9959, 0xb, 0x2, 0x15e5daac, 0x80000000, 0xc, 0x6, 0x8, 0x8, 0xdcbf, 0x0, 0x80000000, 0x3000000, 0x4, 0x7, 0xb, 0x3, 0x9, 0xffff, 0x3d, 0x8, 0x5, 0x10, 0x15, 0x0, 0x8, 0xfffffffb, 0x9, 0x4, 0x8, 0x3, 0x9a9a, 0x9, 0xccb, 0x8, 0x7fffffff, 0x7, 0x401, 0xc7, 0x8, 0x5b, 0x3, 0x7, 0x6, 0x7, 0x9, 0xfffffffe, 0x9, 0x0, 0x9, 0x7, 0x5, 0x9, 0xc, 0x4, 0x134e6510, 0x81, 0x53aa7cf, 0x0, 0x0, 0x8, 0x1, 0x1, 0x4, 0x0, 0x2, 0x80, 0x3d, 0x0, 0x80000001, 0x10001, 0x3f5aa4be, 0xa00000, 0x2, 0x8, 0x5, 0x8, 0x401, 0x10001, 0x100, 0x2, 0x1, 0xac, 0x80000000, 0x8, 0x2, 0x8, 0x9, 0x9, 0x100, 0x6, 0x7, 0x2, 0x3, 0x2120, 0xee3, 0x2, 0x4e, 0xc, 0x200, 0x4, 0x7, 0x3, 0x7, 0xf, 0x7, 0x3, 0x5, 0x4, 0x2, 0x3, 0xff, 0x0, 0x1, 0x10000, 0xc14c, 0x6ad8, 0xfff, 0x5, 0x3, 0xe0, 0x10000, 0x0, 0xa, 0x5, 0x2b7b, 0x2, 0x6, 0x400, 0x9f01, 0x8, 0x2, 0x8, 0xce0b, 0x9, 0x0, 0x40, 0x6, 0x5, 0xb56, 0x9558, 0x1, 0x0, 0x800, 0x3ff, 0x3, 0x7, 0x7f, 0x8, 0x0, 0x2, 0x5, 0x1000, 0x0, 0x6b89, 0x4, 0x5, 0x101, 0x24b7, 0x0, 0x3, 0x4, 0x7fff, 0x0, 0x10001, 0xfff, 0x4, 0x7, 0x3, 0x3, 0x1f82, 0x69b, 0x9e, 0x80000001, 0x4, 0x8, 0x5, 0x100, 0x3ff, 0x44, 0x3ff, 0x81, 0x4, 0x92da, 0xfff, 0x7, 0x8, 0x1, 0xf, 0x7, 0x9, 0x10, 0x2, 0x0, 0x4, 0x80000000, 0xa0, 0x81, 0x0, 0x2d28, 0xf, 0x401, 0x80000001, 0x6, 0x3, 0x8, 0x7, 0x3203, 0x0, 0x3134, 0x8, 0x8, 0x8, 0x5, 0x814, 0x218, 0x6, 0x8000, 0x8, 0x4, 0x1ff, 0x8b, 0x80000000, 0x7, 0x8a7, 0x8, 0x6, 0xfffffff9, 0x9, 0x0, 0x4, 0x3, 0x4, 0x1, 0x0, 0xb, 0x8, 0xfffffff8, 0xe, 0xfffeffff, 0xa1, 0x3ff, 0xc, 0x100, 0x3, 0x9, 0x9, 0x9, 0x0, 0x7fffffff, 0x8001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1, 0x40, 0x7ca4, 0x2, 0x6, 0x7, 0xe, 0x7, 0x3, 0x10000000, 0x70d9, 0x9, 0x3, 0x2, 0x6, 0x8, 0x7, 0x4, 0xa80, 0x1, 0x4, 0x10000, 0xfffffffa, 0x9, 0x0, 0x8, 0x9a7, 0x1, 0x4, 0x4, 0x8, 0x0, 0x3, 0x2, 0xff, 0x7, 0x2, 0x4, 0xf69, 0x7, 0x200, 0x2, 0x100, 0x3, 0x7, 0x9, 0x9, 0x101, 0x4, 0x300000, 0x7, 0x0, 0xa4, 0x1, 0x2, 0x4, 0x7fff, 0x0, 0x1, 0x2, 0x6, 0x40, 0x4, 0x8, 0x2, 0xc834, 0xdc, 0x5, 0x81, 0x1, 0x7, 0x1ff, 0x4, 0x8, 0x81, 0x101, 0x0, 0x10000, 0x0, 0x7, 0x10000, 0x71, 0x7fff, 0x26, 0x0, 0x9, 0x1, 0x8, 0x5, 0x5, 0x5, 0x7, 0x6, 0x3ff, 0x7, 0x8, 0xfffffffb, 0xc, 0xf6b5, 0xfffffffa, 0x8000, 0xd1, 0x6, 0xff, 0x2, 0x17, 0x7, 0x3, 0x4, 0x7, 0x5, 0x3c28000, 0xad3, 0x401, 0x2, 0x81, 0x80, 0x9, 0x7, 0x6, 0xb0b, 0x8, 0xfffffffa, 0x7, 0x10001, 0x6, 0x9, 0x8e, 0x200, 0x8, 0x8, 0x7, 0x8, 0x10000, 0x8, 0x3, 0x3, 0x40, 0x7f, 0x85ff, 0x1, 0x7fff, 0x101, 0xf, 0x80000001, 0x3, 0x7, 0x1, 0x3, 0x7, 0xe6cb, 0x5, 0x6, 0x82, 0x4ce3a777, 0xffffffb4, 0x4, 0x101, 0x7, 0xfffffffe, 0x43f, 0xa, 0x0, 0x80, 0x8001, 0x6, 0x3, 0x3, 0x180, 0x5, 0x6, 0x5, 0x400, 0x2, 0x5, 0x700, 0xa, 0xfffffffb, 0x2, 0x7, 0xdc, 0x8, 0x2, 0x6, 0x7, 0x7fffffff, 0xbf2, 0xff, 0x6, 0xffff, 0x1, 0x0, 0x2, 0x8, 0x5, 0x2, 0x1, 0x1, 0x7, 0x8000, 0x5, 0xfffffff7, 0x8, 0x2e0, 0x7ff, 0xf, 0x5, 0xced7, 0xff, 0x8, 0xcdc00000, 0x10000, 0xa, 0x9, 0x8, 0x9, 0x3, 0x4, 0x8, 0x35ff02e, 0x0, 0x6, 0x0, 0xfffffff8, 0x5, 0x0, 0xe006, 0xfff, 0xfffffff9, 0xc, 0x5, 0x100, 0x2, 0x7, 0x4, 0x1, 0x7f, 0x30f3, 0xfffffff9, 0x5, 0x2, 0xe, 0x0, 0xdb, 0x10bb, 0x0, 0x4, 0x5f, 0xc, 0x2, 0x5, 0x400, 0x1, 0x5, 0x5e3e]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x880}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0x1, 0x401, 0x5f, {0xf, 0x1, 0xe48, 0x4, 0x4, 0x5}, {0x40, 0x0, 0x0, 0x9, 0x9, 0xb2}, 0x2, 0x400, 0x9}}]]}, {0x3b, 0x6, "619f9b8de23d24d62a9352aadefec2a6fd6cf8761ee1ea08f20037140fc0a14080f840df10f0309db91ad995c803848963f08e7ae5d372"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x10b0, 0xa, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x9, 0x6, 0xbf, 0x8}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xaa, 0x2, 0x2, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0x0, 0x0, 0x4d}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x6, 0x3, 0x9, 0xffffffff}, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x130, 0xd, 0x0, 0x0, {{0x9}, {0x78, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x1, 0x1, 0x39, 0x2}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xffffd29a, 0x3, 0x7, 0xa4c40a80}, 0x2}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffff7, 0xffffffff, 0x4, 0x5, 0x1ff}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x20}, @TCA_MPLS_BOS={0x5}]}, {0x8e, 0x6, "382770d52ad217bd87b275034bfb38983e766e062faa10bad96dc64df570fd5244b9780660e345cf674a4b6624d2af516e6599768c303f3358a775b26a2924411fed7071afcfa832224df5fccf9ebff3af3f4915f045236a3564b59036be25700961b5813041bab8f69e1bd981cae233d609cc788baa343fba478e241ef1a5cdf9ef1a144aa97f1690ac"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0xcc, 0x1d, 0x0, 0x0, {{0xf}, {0x78, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x800, 0x8, 0x8000, 0x3}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x73a}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x7, 0xffffffffffffffff, 0xfff, 0x800}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4e6}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}]}, {0x27, 0x6, "0f7cfdd2ae9a80905d912b6a8f469f2693b3f65e3e1250ce98846bf75fc1da8838033b"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x2, 0x3, 0x62}, {0x7f, 0x9, 0x8}, 0x1, 0x6, 0xe}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x10, 0xb}}, @TCA_RSVP_DST={0x8, 0x2, @remote}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0x1}}]}}, @f_tcindex={{0xc}, {0x26bc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x537e}, @TCA_TCINDEX_ACT={0x7dc, 0x7, [@m_nat={0x1b4, 0xb, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x7, 0x2, 0x800}, @local, @multicast2, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0xfffffff8, 0x6, 0x6, 0x9}, @remote, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x2, 0x20000000, 0x7, 0x3}, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0xdb, 0x4, 0x7, 0x4}, @private=0xa010102, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x618d, 0x7, 0x7, 0x9, 0x1}, @remote, @rand_addr=0x64010102, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa004, 0x8, 0x20000000, 0x2, 0xb62}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xa3c86dfa023a22b2, 0x1}}]}, {0x9c, 0x6, "90ab1841840db157fa0e196258801c2511967d7edd9dbe5c205fa7aa3ca2df6c63cfe505c7791a579a1e92c5e250b23edb6640bf6b5032c14436eb85dceed59e27eb4cf4ff91e61ccf2d2ac09fc79bbdfb731431913a2f96940a2cea853248c84bbf289647e676134e2ffc04c082b1fa3930f6b61e7404982b61d610cc036adcdae5930d19fd63adbf4054cc3693a1436a10193ef57b2f7b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x44, 0xa, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0xb, 0x6, "c7fb25e1172cdc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x194, 0x1d, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x2, 0x4, 0x8}, 0x47}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x400, 0x8, 0x1, 0x3, 0x1}, 0x6e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x93d, 0x0, 0x5, 0x5, 0xfff}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x9b, 0x0, 0x80000001, 0x8000000}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x5, 0x7b0a2224, 0xffffee9f}, 0x8}}]}, {0xda, 0x6, "d24a9be0934ce3b1b55486b4ce8b17a782f01a2959c44a8c23853e2528a6de4e6da6b4d394251c7225a5ce7687007ee95a6abffa31b9e2225cc3d12a3d1c14fdfef0d860ad205e75af60aa59de532675fb4d4a50f6056f0a13f9d70c54dd08f6654de3ceb3e862c585d2310af2191a8ccb816da44eaa6d26d49f1fa4700f476449657ba7490e17f69373f69d58501fa7a8f73461064347e88fa410a19a7d12d74394d4fcb223fc16c8f0e8e9433d05b0deee7d3264de881a578b2123a0111761c772c5ae873876679b28b080fc1075e401c958535b9d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x128, 0xf, 0x0, 0x0, {{0xf}, {0x6c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9d96bcd}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010102}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0x8d, 0x6, "9d4a3d22a57c775ccf3bf68003be1d9df536dea4b0e9339d99e5ddf025ce80fb15915be68d841ceb0a4d429549556b2e4a8a7c796d34d649e357ceab59ca60fad51accbb2c9f21dc0289a8627e2e545f29d7c29d62ee1af6ecffa53a75117204301c9231fd24c1cbb08fcb83a362a363cc89bd0e2d98d3332bbd85e2c9072ce39cd8b81851cd8c68bf"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x10c, 0x1b, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4f, 0x6, 0x20000000, 0x5, 0x650db6f5}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1000, 0x4, 0x0, 0xe, 0x8}, @broadcast, @multicast1, 0xff, 0x1}}]}, {0x94, 0x6, "3badcd0c325393730bcb2cf0b4156660046d9fd630050187006bccaa4aa2c0a8f579416b8d4a7bbb55b01e5ecb78a4562f46ccb05cc6274ac9079ca0c3f540b8197e58b7d055ccbdc9a9574f25cf47b177f6e4e3ccb877a43b04e92b2f82d32cabf0afacc5c329c1103c3eaf0d54b5bc7c89aca07cf65ced0c30eb098a40984ac9c12cedf01ac6774e952de5cd61a65c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0xbc, 0x11, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x2, 0x4, 0x5}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0x4b, 0x6, "8637f8d7eff93bb5136f786888f954892d8a5dc7651aa032d4400be5181fbee2e919b6b1d6b4dc7c686eda34d4f7b5e4f9600c27b92c6b20bf0bd113ff0bdcd3bc6019005ff2ad"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_gact={0xf8, 0x9, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x98b1619309220eef, 0x26d6, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x207e, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffff8, 0x4, 0xffffffffffffffff, 0x9, 0x400}}]}, {0x9c, 0x6, "284a0f83db3138f9545d4894641909f054383f2c182cfaf091f31d97f1f7b7a2781ca756d1ff95f4fe5148dbae68ece2f2f266b10c8e875c451553104473750c11f5009005d0aa6c9ff9289fb113a94ceaffe721f8f4b989a040e9515c5465d7c7e613435e2c8a0663dd9c14119bf12a3ad5f018c10e1475094fd9a8b4c35f285a9f9b2ddd3dbfa1d15316f9ef744f467ee10c3e30672f6c"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x64, 0x1f, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x9, 0x1, 0x5, 0xf}}]}, {0x1d, 0x6, "b5494e637b473092f93c7c7c3842173e6f370197df01af12e5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x8eec}, @TCA_TCINDEX_ACT={0x1ecc, 0x7, [@m_skbmod={0x124, 0x12, 0x0, 0x0, {{0xb}, {0xb8, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="62f4feb86ea8"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x200}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8000, 0x3, 0x1, 0x0, 0x8}, 0x6}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x80, 0x0, 0x1, 0x9}, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x68b, 0x10000007, 0x752e}, 0x1}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}]}, {0x42, 0x6, "e7cd1fbb09cf7fb4ae1f77566817f3b6fa9a027ea6945a9021c7c1bf18a6e5bb68f8ec59c811cc46243b8fc22cda23e33ec7dd45134f036030295853fd68"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x1da4, 0xf, 0x0, 0x0, {{0xb}, {0x1c9c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x3ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfe000000}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8001}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0x0, 0x5, 0x2, 0x586, 0xffd, 0x0, 0x8000, 0x8, 0x86, 0xe, 0xfffffffb, 0x9, 0x2, 0xa2, 0x10, 0x10000, 0xf, 0x10, 0x8, 0x7f, 0x5, 0x7, 0x3, 0x7, 0x8, 0x7, 0x7, 0x5, 0x8bb, 0x3, 0x8a8, 0x8, 0xffff, 0xfff, 0xc61d, 0x3, 0x8, 0x8, 0x1, 0x6, 0x5, 0x5, 0x8, 0x8, 0x3, 0x81, 0x9, 0x5, 0xfffffffd, 0xf, 0x1c000000, 0xe25, 0x2, 0x8a, 0x1, 0x3, 0xe5, 0x2, 0xb, 0xfff, 0x3ed58d4e, 0x2, 0x6, 0x3, 0x4, 0xffffffff, 0x5, 0x6, 0x2, 0xc25, 0x8, 0x1, 0x200, 0x3, 0xffffff47, 0x6, 0xa8a1, 0x80000001, 0x7, 0xca75, 0x5, 0x4, 0x6, 0x10001, 0x42c500, 0x1, 0x6, 0x4, 0x1, 0x3, 0x7, 0x9, 0x44, 0x7, 0x0, 0x1, 0xdf, 0xd724, 0x3, 0x430, 0x8, 0xd2, 0x6, 0x3, 0x7, 0x7, 0x1, 0xffffffff, 0xffff0000, 0x1a37, 0xe, 0x6, 0x8, 0xe5, 0x1, 0x1, 0x4, 0x8000, 0x3, 0xfffffff8, 0xf37, 0x9, 0x80000001, 0x400, 0x10000, 0x101, 0x7, 0x1, 0x200000, 0xa, 0x4, 0x3, 0x8, 0x1, 0x8, 0x4, 0x2, 0x10000, 0xc, 0x8, 0x5, 0x601e, 0x80000000, 0x0, 0xfff, 0x9, 0x2, 0x1, 0xe, 0x101, 0xe13, 0xa6, 0x200, 0xc430, 0x4, 0x80000001, 0x5, 0x0, 0xa598, 0xc, 0x9, 0xfffffff7, 0xe, 0x2, 0x1, 0x80000001, 0x4, 0x1, 0x7f, 0x7, 0x80000000, 0xffffffff, 0x7, 0x7ff, 0x4, 0x4, 0x7, 0x4, 0x7, 0x240000, 0x4, 0x78, 0x9, 0x6, 0x5, 0x1, 0xffffffff, 0x8, 0xf, 0x40000000, 0x9, 0x4, 0x9, 0x4, 0x5, 0x4, 0x3, 0x45, 0x9, 0x1, 0x9aa4, 0x9, 0x4, 0x1, 0x7, 0x6, 0x0, 0x1, 0x0, 0x6, 0x0, 0x7, 0x0, 0x1, 0xe, 0x7f, 0x6, 0xffff, 0x9, 0x261e, 0xfffffffe, 0x2, 0x0, 0x15, 0x9, 0x5, 0x81, 0x7, 0x80000000, 0x9c, 0x71a, 0x1, 0xe3a, 0xfffffffb, 0x1, 0x7ff, 0x7, 0xea, 0x6, 0x3, 0x4, 0x81, 0x6, 0x2, 0x7, 0x0, 0x9, 0x199, 0x6, 0x0, 0x7, 0x7, 0xffff, 0x37, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x7, 0xbcb1, 0x7, 0x9, 0xffffffff, 0x1ce, 0x558, 0x7, 0xfff, 0xb, 0x2, 0x9, 0x7, 0xb5, 0x6, 0x1, 0xfffffffe, 0x8, 0x6, 0x41, 0x7, 0x80, 0xf8000000, 0xffff, 0x6, 0x80, 0x4b4509c7, 0x3, 0x8, 0x9, 0x4, 0x7, 0x9d5f, 0x5, 0x10, 0x0, 0x3, 0xac12664f, 0xfffffffb, 0x1, 0x2, 0x7f, 0x4, 0x9, 0x9, 0x5, 0xffff, 0xd, 0x3, 0x8, 0x0, 0xc35, 0x28, 0xfffffffe, 0x4, 0x5, 0x6, 0x9, 0x9, 0x10, 0xf8, 0x9, 0x0, 0x0, 0x1, 0x5, 0x5, 0x10000, 0xa, 0x9, 0x5, 0x7, 0xf3, 0x10001, 0x5, 0x9229, 0x6, 0x4, 0x5, 0x5, 0x6, 0x2, 0x8, 0x0, 0x6, 0x180500, 0x3, 0x5, 0x4, 0x200, 0x7, 0x3, 0x6, 0x1f4, 0x4, 0xc7, 0xcee, 0x1, 0x1, 0x8, 0x1, 0x9, 0x10001, 0x7, 0xc584, 0x10000, 0x5, 0x5, 0x8013, 0x1, 0x2, 0x78, 0xf5, 0x6, 0x80, 0x9, 0x98b, 0x33f7, 0x1, 0x8c, 0x3b400774, 0xc, 0x4, 0x7, 0x7, 0x7ff, 0x0, 0x2e1, 0x9, 0x3962, 0xf8dd, 0x9, 0xda6, 0x10001, 0x63f2, 0x86, 0x807, 0x2, 0x6, 0x8001, 0x7fffffff, 0x10000, 0x40, 0x3, 0x4, 0x5, 0x9, 0x80, 0x0, 0x1000, 0x4, 0x1, 0x4, 0x9, 0x100, 0x8, 0x8029, 0x0, 0x2, 0x400, 0xdbc9, 0x0, 0xd53, 0x1ff, 0xfffffffa, 0x10000, 0x57ee, 0x0, 0x3, 0x9, 0x9, 0x8, 0x1, 0x2, 0xff, 0x2, 0x2, 0x5, 0xf1, 0x9, 0x8, 0x7, 0x7, 0x7fffffff, 0xf, 0x9, 0x3, 0x357, 0xf9, 0x80, 0x7, 0x3, 0x80, 0x7, 0x8f5, 0xfffffffa, 0x6, 0x0, 0x64, 0x8, 0x9, 0x8, 0xfffffff7, 0x2, 0x4, 0x2, 0x7, 0x1, 0x71, 0xb, 0x0, 0x2, 0x30bb5e27, 0x758c393f, 0x3, 0xfff, 0x5, 0x1, 0x4, 0x0, 0x7, 0x3375, 0xb, 0x6, 0x1, 0x4, 0x5, 0x2, 0xfffffffb, 0x9, 0x4, 0x7, 0x3, 0x3, 0x1, 0xffff, 0xfd, 0x5, 0x1, 0xc3, 0x9, 0x4, 0xf4, 0x3065, 0x4, 0x7, 0x400040, 0x9, 0x2, 0x2, 0x1430c0, 0x4, 0x1c40, 0x9bc, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x79, 0x8, 0xffffffd7, 0x5f8a, 0x1000, 0xce, 0x200, 0x6f62, 0x2, 0x9, 0x5, 0x10001, 0x2, 0x8, 0x400, 0x5, 0x40, 0x2, 0x7, 0x9, 0x8, 0x0, 0xbdd, 0x7f, 0x6, 0xf, 0xfffffc00, 0x10, 0x1, 0x637, 0x1, 0x34, 0x18000, 0x0, 0x7c, 0x1ff, 0x0, 0x4bc8, 0xab, 0x1, 0x7, 0x401, 0xf4d, 0x7, 0x20, 0x7, 0x4, 0x4c2, 0x9b2, 0x0, 0x1, 0x8, 0x45, 0x4, 0xc, 0x101, 0x6, 0x18d0, 0x8, 0xfffffff9, 0x3, 0x1, 0xfffffff8, 0x3c, 0x1, 0x6, 0x1ff, 0x3, 0x0, 0xb, 0x3, 0xa0000000, 0x80000001, 0x2, 0x101, 0x10000, 0xffffffff, 0x2, 0x101, 0x80000000, 0x5, 0x0, 0x10, 0x2, 0x722, 0x0, 0x40, 0x5, 0x4a91, 0x10, 0x8, 0x7, 0x0, 0xeb52, 0x7fffffff, 0xa27, 0x7, 0xc4, 0x7, 0x6, 0x6, 0x3, 0x4, 0x6, 0x4, 0x6, 0x332, 0x2, 0x8100000, 0x8f9, 0x5, 0x7, 0x9, 0x8, 0x6, 0xe, 0x5, 0x1564, 0x8, 0xff, 0x1, 0x6, 0xc8, 0x6ad, 0x5, 0x5, 0xd6b, 0x1, 0x2000000, 0x21, 0x1, 0x6, 0x9, 0x2512, 0x8000, 0x1, 0x3, 0x8, 0x3, 0x2, 0x5, 0x9, 0x8, 0x3a, 0x40, 0x400, 0x7, 0x0, 0x80, 0x101, 0x6ec, 0x7, 0x1, 0x9, 0x4, 0x2, 0xd4, 0x6, 0x6, 0x8, 0xfff, 0xb, 0x36d60000, 0x200, 0xc8d, 0x5, 0x8, 0x69, 0x5, 0x1ff, 0x0, 0x7b, 0x4, 0x200, 0x73a, 0x6, 0xdb98, 0x6, 0x1, 0x200, 0x9, 0x3, 0xe, 0x4, 0x1f44b4f8, 0x3, 0x8, 0x5, 0x7, 0x1, 0x4, 0x6, 0xd, 0x3, 0x5, 0xb7, 0x800, 0xfffff9a0, 0x928a, 0x7, 0x1, 0x10000, 0x0, 0x3ff, 0x7, 0x6, 0x2, 0x4, 0xd, 0x6, 0x8, 0xbdbb, 0x4a0, 0x7fffffff, 0x9405, 0x6, 0x6, 0x8001, 0x3, 0x4, 0x2, 0x8, 0x7, 0x486, 0x4, 0x1f9, 0x43, 0x80000001, 0x1, 0x10000, 0x0, 0x5, 0x6, 0xe, 0x2, 0x5, 0x3, 0x3, 0x79f5, 0x67, 0xe5, 0x5, 0x857f, 0xe1d0, 0x9, 0x1, 0x6, 0x86, 0x5, 0xd0, 0x2, 0x4, 0xb, 0x4, 0x2, 0x42]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}], [@TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x6, 0x421, 0x6fc7ad4b, 0xfff, 0x7, 0x80, 0x4, 0x0, 0x7ff, 0x35, 0x8, 0xffffc7d2, 0x8000000, 0x1, 0x0, 0x3, 0xb34, 0x1, 0x3, 0xfffffff9, 0x1000000, 0xfffffff9, 0x2, 0x7, 0x10001, 0x0, 0x1, 0x2, 0x38, 0x8, 0x1, 0x0, 0x7, 0x3, 0x810, 0x8, 0x4, 0x8, 0x791, 0x8b, 0x2, 0xe9, 0x2, 0x5, 0x1800, 0x6, 0x8, 0x9, 0x1, 0x9, 0x8, 0x5, 0x7, 0xa4, 0x57, 0x3, 0x1ff, 0x0, 0x9, 0x8, 0x101, 0x0, 0x4, 0x2728, 0x0, 0xfffff000, 0x2, 0x7, 0x4, 0x7, 0x10000, 0x5, 0x6bb, 0xfffffff7, 0xac78, 0x7, 0x1, 0x2, 0xf, 0x2, 0x9, 0x26b0, 0x0, 0x7fffffff, 0x59a, 0x5, 0x2, 0x4, 0x5, 0x80000001, 0x7, 0x93fe, 0xd4e, 0x401, 0x6, 0x2, 0x200, 0x6, 0x0, 0xac0, 0x1, 0x1, 0x205, 0x0, 0x7, 0x80000, 0x81, 0x9, 0x1ff, 0x0, 0xb, 0xffff, 0x400, 0x7ff, 0x401, 0x30528fc6, 0x101, 0x8000, 0x3, 0xc5af, 0x7f, 0x7f, 0x8, 0x1d0, 0x1, 0x2, 0xc, 0x5, 0x1ff, 0x66, 0x8, 0x10, 0x6, 0x3, 0x40, 0xc3b1, 0x9a1, 0xbde3, 0xfffffffd, 0x8, 0x8, 0xff, 0x7, 0x1, 0x6, 0xffffffff, 0x2, 0xb57, 0x101, 0x2, 0x5, 0x7f, 0x7, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0xb, 0x8, 0x6, 0x7, 0x4509d4a2, 0xb1d, 0x7, 0x40, 0x200, 0x1, 0xffffffdb, 0x2, 0x1, 0x6, 0x0, 0x7fffffff, 0x3, 0x0, 0xfffffc01, 0x0, 0x0, 0x40, 0xf, 0x17871177, 0xffffffff, 0x0, 0x101, 0x8000, 0xb, 0xb, 0x5, 0x3, 0x3, 0xc00000, 0x2, 0x6, 0xfffffffe, 0x5e2, 0x4, 0x0, 0x6, 0x7f, 0x9, 0x93, 0x1, 0x9, 0x2, 0x6, 0x7, 0x4, 0xad, 0xfe86, 0x5, 0x100, 0x81, 0x3, 0x200, 0x41, 0xfffffffa, 0x2, 0xc1, 0x8448, 0xc7d0, 0x100, 0x2, 0x8, 0xd, 0x5, 0x2, 0x9, 0xfdd9, 0x5, 0xfffffffd, 0x10, 0x5, 0x5, 0x1, 0x5, 0xeab, 0xa593e4, 0x200, 0x2, 0xfffffffc, 0xfff, 0x8, 0x6, 0x8, 0xf56, 0x9, 0x7ff, 0x7, 0x401, 0x40, 0x1, 0x5, 0x9, 0x2df3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x446e, 0xffffffff, 0x2, 0xff, 0x0, 0x2, 0x9, 0x8, 0xf9, 0x1, 0x80, 0xa3, 0xbca5, 0x97, 0xffffffff, 0xc25b, 0x1ff, 0x7, 0x1000, 0x1000, 0x7, 0x25a, 0x0, 0x1, 0xe, 0x6, 0xfffffffe, 0x3, 0x8a1, 0x3, 0x8, 0xc, 0x9, 0x86c, 0x0, 0x5c0000, 0xfff, 0x9, 0x40, 0x528000, 0xfffffff7, 0x67, 0x9, 0x2, 0xbe7, 0x1000, 0x6, 0xc, 0x0, 0x8, 0x401, 0x3, 0xe, 0x2, 0xfffffffc, 0x3, 0x401, 0x7, 0x6, 0x7fff, 0x8ef, 0x4653, 0x1, 0xfffffffe, 0x5, 0x5, 0x1, 0x9, 0x1, 0x80000000, 0x100, 0x8, 0x6, 0x9, 0x3, 0xffffffff, 0x10001, 0x9eef, 0x5f9d, 0xbb39, 0x80, 0xc1e, 0x200, 0x8, 0x800, 0x1, 0x7f, 0x3, 0xb47, 0x2, 0x18d, 0xfffffffe, 0x6, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x6, 0xd, 0x0, 0x10001, 0x6, 0x3, 0x0, 0x9, 0x9, 0x6, 0x800, 0x1, 0x6, 0x2, 0x5, 0xff66, 0x400, 0xa2f, 0xff, 0x5, 0x7, 0x28, 0x6, 0xa, 0x4, 0x0, 0x1, 0xfffffffb, 0x6, 0x10000, 0x5, 0xff, 0x5, 0xfffffffa, 0x80, 0x1, 0x6, 0x7, 0x1, 0x3, 0x3, 0x2, 0x8, 0xd9, 0x8, 0x6, 0x0, 0xc, 0x0, 0x800, 0x7fff, 0x8, 0x7, 0x1, 0x9, 0x2, 0x4, 0x8, 0x7, 0x8f0, 0x96b1, 0xff, 0x6, 0x6, 0xe, 0x80000001, 0x0, 0x3, 0x9, 0xfff, 0x6, 0x4, 0x1, 0x2, 0x0, 0x7fff, 0x400, 0x20, 0xff, 0x98e, 0x10000, 0xffffffff, 0x7, 0xb0, 0x250f, 0x5, 0xb8, 0x800, 0x1, 0xb, 0x6, 0x9, 0xffffff81, 0x3, 0x1, 0xfffffffa, 0xff, 0x4, 0x5, 0x7fff, 0x7ff, 0xe8af, 0x7, 0x101, 0x3, 0xfffffffe, 0x2, 0x40, 0x1000, 0x1, 0x8, 0x9, 0x9, 0x3, 0x8, 0x2, 0x1, 0x0, 0x2, 0xfffffffc, 0xe, 0x2, 0x800, 0x4, 0x4, 0x4c1b, 0xd4, 0x5, 0x811, 0x1f, 0x3, 0x8001, 0x2, 0x9c, 0xd, 0x1000, 0x20, 0xe67, 0xfffffffd, 0x1, 0xffffffc0, 0x4, 0x8a8, 0x404a, 0x18, 0x1, 0x7, 0x4, 0x9, 0x200, 0x8, 0xc0f, 0x10001, 0x4, 0x74, 0x9, 0xd278]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x2, 0x3, 0xfffffff8, 0xfff, 0x5, 0x2, 0x8e46, 0xffffffff, 0x9, 0x4f9, 0x400, 0x2, 0x8, 0x4, 0x0, 0x2, 0x81, 0x0, 0x7, 0x0, 0x8, 0x6, 0xffffffff, 0x5, 0x8, 0xfffffff0, 0x4, 0x4, 0x1, 0x80000001, 0x2, 0x5, 0x800, 0x4, 0x5, 0x2, 0x6, 0x529, 0x7fffffff, 0x2, 0x7, 0x0, 0xc, 0x401, 0xfff, 0x5, 0xfffffffd, 0x3241, 0x2, 0x4, 0x7, 0x200, 0x10, 0x8, 0x7, 0x7, 0x5, 0x8, 0x95, 0x658b, 0x5, 0xe, 0x8, 0xffffffff, 0x2, 0x8, 0x1, 0x1d67, 0x3ff, 0x4, 0x7, 0x9, 0x9, 0x8001, 0x1, 0x8, 0x8, 0x9, 0x3, 0x101, 0x0, 0x2, 0x4, 0x7, 0x8e, 0x4, 0x80, 0x9, 0x1, 0x7f, 0x7fffffff, 0xfffffffa, 0x1fffc000, 0x3, 0x6, 0x2, 0x1ea3f663, 0x9, 0xfffffc73, 0x7, 0xfffffffb, 0x0, 0x4, 0x1c000, 0x9, 0x4, 0x9b, 0x6, 0x10001, 0x6a, 0x54b5a97b, 0x9, 0x6, 0x1, 0x3, 0xe, 0x1, 0x8, 0x9, 0x7ff, 0x2, 0x8, 0x1, 0x7, 0x6, 0x0, 0x10000, 0x400, 0x6, 0x44, 0x16, 0x8, 0x7f, 0x7f, 0x9, 0x9, 0x0, 0x3, 0x500000, 0x3, 0xfffffffb, 0x0, 0xfeb0, 0x4, 0x0, 0x8, 0x9, 0x6, 0x73f, 0x8e6, 0x8, 0x81, 0x10, 0x1, 0xa9cb, 0xffff, 0x8, 0x6, 0x7fffffff, 0x6, 0x9, 0x2, 0xf, 0x8, 0x4, 0x200, 0x4, 0xe01f, 0x4, 0xfff, 0x9, 0x9, 0xfc76, 0x5, 0x6, 0x81, 0x1, 0x9, 0xfffffff9, 0x6, 0xd, 0x7, 0x6, 0x4, 0x800, 0x2, 0x200, 0xffffffff, 0x7, 0x8c4, 0x8d, 0x989, 0x0, 0x4, 0x5, 0xd94, 0x1000, 0x4, 0x8001, 0x0, 0x12, 0xffc00000, 0x1, 0x0, 0x7fffffff, 0x5, 0x5, 0x24c94f07, 0x2, 0x8000, 0xb274, 0x1, 0x2, 0x86e, 0x473a, 0x3ff, 0x800, 0x8, 0x7fffffff, 0x7, 0x69b, 0xc3a, 0x40, 0x6, 0xffffff57, 0x4, 0xe, 0x0, 0xe1, 0x6, 0x3, 0x80000000, 0x0, 0x8, 0x6f, 0x8, 0x8, 0x340c, 0x401, 0x1, 0x10001, 0x1, 0x2, 0x8, 0x4, 0x2fa3, 0x7, 0x2, 0x8, 0x9, 0xffffff81, 0xfffffe00, 0xef5, 0xa7ed, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0x6, 0x3, 0x80, 0x5, 0x1, 0x7ff, 0x1000, 0xffffffff, 0x3, 0x9, 0x6, 0xffff7fff, 0x3, 0x7, 0x1, 0xaa, 0x8000, 0xa, 0x9, 0x3, 0x2, 0x15b, 0x4, 0x2, 0x8b0, 0x1, 0x9, 0x8, 0x9, 0x3, 0x5, 0x6, 0x8, 0xf53, 0x3, 0xfffffff7, 0x2, 0x800, 0x53, 0x8, 0x1, 0x0, 0x5, 0x7fffffff, 0x8, 0x5, 0x7, 0xf3f, 0x3, 0xfffffc01, 0x6, 0x4, 0x9, 0x9, 0x7fffffff, 0x9a5f, 0x8000, 0x170a, 0xa, 0x8a, 0x0, 0x0, 0x1004, 0xc, 0x1da7, 0x1, 0x9, 0x9, 0x3, 0x3, 0x1, 0x5, 0x1b3e26fd, 0x1, 0x6, 0x0, 0x3, 0x3, 0x7, 0x2, 0x8, 0x2, 0x10001, 0xd5, 0x5, 0xfffffff7, 0x3, 0x1, 0x2, 0x7, 0x9, 0xc146, 0x1, 0xfffff800, 0x8, 0x2, 0x2, 0x5, 0x8, 0x100, 0x1, 0x7b787fec, 0x4, 0x1, 0x4, 0x2, 0x7, 0xcbf5, 0x0, 0x1, 0x9, 0x2, 0x8, 0x1, 0x4, 0xd167, 0x6, 0x6fd, 0x3, 0x10001, 0x200, 0x3, 0x1, 0xfffffb76, 0xfff, 0x1a2, 0x6, 0x1, 0x80000001, 0x9, 0x4, 0xfffffff9, 0x9, 0x1, 0x2, 0x4, 0x2, 0x7, 0xd09, 0x9, 0x9, 0x4, 0x5, 0x0, 0x8000, 0x3, 0x3, 0x1, 0x4, 0x0, 0x14b, 0x128, 0x80, 0x4, 0xeac8, 0x8, 0x401, 0xb95c, 0x200, 0x4, 0x37, 0x7, 0x1, 0x2, 0xfffffff9, 0x3, 0x17, 0x101, 0x0, 0x40, 0x2, 0x8, 0x14, 0x1ff, 0xe, 0x7, 0x6, 0x70, 0x5, 0x4a0, 0x8001, 0x3ff, 0x1, 0x9, 0xb8f1b0a5, 0x7ff, 0x10001, 0x9, 0x8, 0x0, 0x8001, 0x40, 0x7, 0x0, 0xe2eb, 0x5, 0x64, 0xfffffffb, 0x1, 0x22da, 0x9, 0x7, 0x6, 0x7, 0x7fffffff, 0x1, 0x8, 0xffffffff, 0x5, 0x8, 0xc, 0x8, 0x5, 0x0, 0x6, 0x6, 0x44, 0x0, 0x440, 0x0, 0x9, 0x3, 0x7f, 0xc, 0x8001, 0x1, 0xa, 0x7aa7, 0x101, 0x34, 0x0, 0x7ff, 0x6, 0x8a5d, 0x40, 0x62, 0x101, 0x3, 0x9, 0x3, 0x9, 0x54, 0x8, 0xeb, 0xd000, 0xe, 0x4, 0xdb51, 0x0, 0x5, 0xffffff80, 0x2, 0x2, 0x32dd]}]]}, {0xdf, 0x6, "c37e30a95a859b2829e03878849acaef3fb43c4c18c836284db8d031b21ab56b5645a4f7c76487d2b258312007ae163988896512c1779d7aeaf2612b8d43689f12cc6a811943c2d9e95c64037be00d237f7477372ff918ad1c023195c6312b61cf110b6d0d01136a8a057dbfe3197cf9a9575ad5c6df4534402dceaf49cda81561104ac725b7f930d571e00bfc3947c51675200ff142c9cc3b015c9bf9d433a9c91acf9a8cb9d8b42aa23ca3428bc32ce4206e7ad7a0dbb86b671cdec8d3b0f6f2ef1d51c6f62e1216ad3ddb445b52fbf4f7c9bd742fa570be6fc6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @f_rsvp={{0x9}, {0x4}}]}, 0x5f48}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x0, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=2485): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) (async) r1 = io_uring_setup(0x30df, &(0x7f0000000000)={0x0, 0x55d0, 0x800, 0x0, 0x1d}) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) (async) sendto$unix(r3, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) (async, rerun: 32) close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) (async) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x40281, 0x88, 0x11}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r5, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000a00)=""/103, 0x67}], 0x2, 0x6bc, 0x803) renameat2(r4, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00', 0x5) (async) r6 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001400010000000000000000001e"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) kernel console output (not intermixed with test programs): 550.243718][ T30] audit: type=1400 audit(1751015778.268:1216): avc: denied { shutdown } for pid=12586 comm="syz.3.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 550.288180][T12585] netlink: 'syz.1.1903': attribute type 6 has an invalid length. [ 550.297450][ T30] audit: type=1400 audit(1751015778.488:1217): avc: denied { read } for pid=12584 comm="syz.1.1903" path="socket:[38054]" dev="sockfs" ino=38054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 550.637387][T12573] overlayfs: failed to resolve './file0': -2 [ 550.968014][ T30] audit: type=1400 audit(1751015779.178:1218): avc: denied { mount } for pid=12602 comm="syz.0.1909" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 552.476045][T12625] lo speed is unknown, defaulting to 1000 [ 552.517280][T12636] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1916'. [ 552.538555][T12633] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1916'. [ 552.726229][ T30] audit: type=1326 audit(1751015780.928:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12637 comm="syz.2.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9f18e929 code=0x7ffc0000 [ 553.506540][ T30] audit: type=1326 audit(1751015780.928:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12637 comm="syz.2.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9f18e929 code=0x7ffc0000 [ 553.598705][T12650] netlink: 'syz.2.1923': attribute type 5 has an invalid length. [ 553.662344][ T30] audit: type=1326 audit(1751015780.928:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12637 comm="syz.2.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1e9f18e929 code=0x7ffc0000 [ 553.834495][ T30] audit: type=1326 audit(1751015780.928:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12637 comm="syz.2.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9f18e929 code=0x7ffc0000 [ 554.535931][ T30] audit: type=1326 audit(1751015780.928:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12637 comm="syz.2.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9f18e929 code=0x7ffc0000 [ 554.567573][ T30] audit: type=1326 audit(1751015780.928:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12637 comm="syz.2.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1e9f18e929 code=0x7ffc0000 [ 554.567614][ T30] audit: type=1326 audit(1751015780.928:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12637 comm="syz.2.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9f18e929 code=0x7ffc0000 [ 554.604142][ T2163] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 554.817162][ T2163] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.832401][ T2163] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 554.861489][ T2163] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 554.877462][T12669] kAFS: No cell specified [ 554.885031][T12669] FAULT_INJECTION: forcing a failure. [ 554.885031][T12669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.898121][T12669] CPU: 1 UID: 0 PID: 12669 Comm: syz.3.1928 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 554.898138][T12669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 554.898144][T12669] Call Trace: [ 554.898148][T12669] [ 554.898152][T12669] dump_stack_lvl+0x16c/0x1f0 [ 554.898173][T12669] should_fail_ex+0x512/0x640 [ 554.898190][T12669] _copy_from_user+0x2e/0xd0 [ 554.898206][T12669] ucma_query+0x91/0x1f0 [ 554.898221][T12669] ? __pfx_ucma_query+0x10/0x10 [ 554.898238][T12669] ? __pfx_ucma_query+0x10/0x10 [ 554.898253][T12669] ucma_write+0x1fb/0x330 [ 554.898267][T12669] ? __pfx_ucma_write+0x10/0x10 [ 554.898281][T12669] ? bpf_lsm_file_permission+0x9/0x10 [ 554.898298][T12669] ? security_file_permission+0x71/0x210 [ 554.898315][T12669] ? rw_verify_area+0xcf/0x680 [ 554.898328][T12669] ? __pfx_ucma_write+0x10/0x10 [ 554.898341][T12669] vfs_write+0x2a0/0x1150 [ 554.898357][T12669] ? __pfx_vfs_write+0x10/0x10 [ 554.898369][T12669] ? find_held_lock+0x2b/0x80 [ 554.898383][T12669] ? __fget_files+0x204/0x3c0 [ 554.898400][T12669] ? __fget_files+0x20e/0x3c0 [ 554.898417][T12669] ksys_write+0x1f8/0x250 [ 554.898430][T12669] ? __pfx_ksys_write+0x10/0x10 [ 554.898447][T12669] do_syscall_64+0xcd/0x4c0 [ 554.898464][T12669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.898476][T12669] RIP: 0033:0x7f7030b8e929 [ 554.898486][T12669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.898497][T12669] RSP: 002b:00007f70319f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 554.898509][T12669] RAX: ffffffffffffffda RBX: 00007f7030db6160 RCX: 00007f7030b8e929 [ 554.898516][T12669] RDX: 0000000000000018 RSI: 00002000000001c0 RDI: 0000000000000009 [ 554.898522][T12669] RBP: 00007f70319f5090 R08: 0000000000000000 R09: 0000000000000000 [ 554.898528][T12669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.898534][T12669] R13: 0000000000000000 R14: 00007f7030db6160 R15: 00007ffed4b78a48 [ 554.898548][T12669] [ 554.985943][T12625] lo speed is unknown, defaulting to 1000 [ 555.117257][ T2163] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 555.126975][ T2163] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.135763][ T2163] usb 1-1: Product: syz [ 555.140078][ T2163] usb 1-1: Manufacturer: syz [ 555.144861][ T2163] usb 1-1: SerialNumber: syz [ 555.215479][ T2163] usb 1-1: bad CDC descriptors [ 555.434976][ T2163] usb 1-1: USB disconnect, device number 65 [ 555.994381][ T5874] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 556.162856][ T5874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.166545][ T5921] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 556.194034][ T5874] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 556.227690][ T5874] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 556.245971][T12690] FAULT_INJECTION: forcing a failure. [ 556.245971][T12690] name failslab, interval 1, probability 0, space 0, times 0 [ 556.263467][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.294003][T12690] CPU: 1 UID: 0 PID: 12690 Comm: syz.0.1936 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 556.294033][T12690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 556.294045][T12690] Call Trace: [ 556.294051][T12690] [ 556.294060][T12690] dump_stack_lvl+0x16c/0x1f0 [ 556.294089][T12690] should_fail_ex+0x512/0x640 [ 556.294110][T12690] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 556.294136][T12690] should_failslab+0xc2/0x120 [ 556.294162][T12690] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 556.294185][T12690] ? __alloc_skb+0x2b2/0x380 [ 556.294212][T12690] __alloc_skb+0x2b2/0x380 [ 556.294234][T12690] ? __pfx___alloc_skb+0x10/0x10 [ 556.294259][T12690] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 556.294293][T12690] netlink_alloc_large_skb+0x69/0x130 [ 556.294312][T12690] netlink_sendmsg+0x6a1/0xdd0 [ 556.294334][T12690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.294362][T12690] ____sys_sendmsg+0xa98/0xc70 [ 556.294380][T12690] ? copy_msghdr_from_user+0x10a/0x160 [ 556.294404][T12690] ? __pfx_____sys_sendmsg+0x10/0x10 [ 556.294434][T12690] ___sys_sendmsg+0x134/0x1d0 [ 556.294459][T12690] ? __pfx____sys_sendmsg+0x10/0x10 [ 556.294481][T12690] ? __lock_acquire+0x622/0x1c90 [ 556.294539][T12690] __sys_sendmsg+0x16d/0x220 [ 556.294564][T12690] ? __pfx___sys_sendmsg+0x10/0x10 [ 556.294604][T12690] do_syscall_64+0xcd/0x4c0 [ 556.294631][T12690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.294650][T12690] RIP: 0033:0x7fd11018e929 [ 556.294665][T12690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.294682][T12690] RSP: 002b:00007fd11101e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.294700][T12690] RAX: ffffffffffffffda RBX: 00007fd1103b5fa0 RCX: 00007fd11018e929 [ 556.294712][T12690] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 556.294723][T12690] RBP: 00007fd11101e090 R08: 0000000000000000 R09: 0000000000000000 [ 556.294733][T12690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.294744][T12690] R13: 0000000000000000 R14: 00007fd1103b5fa0 R15: 00007ffc06dbfe28 [ 556.294768][T12690] [ 556.302770][ T5874] usb 2-1: Product: syz [ 556.345213][T12688] Invalid source name [ 556.356652][ T5874] usb 2-1: Manufacturer: syz [ 556.380659][ T5921] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 556.390126][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1937'. [ 556.418586][T12688] UBIFS error (pid: 12688): cannot open "ubifs", error -22 [ 556.425029][ T5874] usb 2-1: SerialNumber: syz [ 556.565810][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.585008][ T5921] usb 5-1: Product: syz [ 556.591715][ T5921] usb 5-1: Manufacturer: syz [ 556.591846][T12695] netlink: 'syz.0.1938': attribute type 33 has an invalid length. [ 556.604783][ T5921] usb 5-1: SerialNumber: syz [ 556.605282][ T5874] usb 2-1: config 0 descriptor?? [ 556.620274][ T5921] usb 5-1: config 0 descriptor?? [ 556.621868][ T5874] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 556.813926][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 556.860067][ T30] audit: type=1804 audit(1751015785.018:1280): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1938" name="/newroot/393/file0" dev="tmpfs" ino=2120 res=1 errno=0 [ 557.675084][ T5921] usb 5-1: Firmware version (0.0) predates our first public release. [ 557.683206][ T5921] usb 5-1: Please update to version 0.2 or newer [ 557.845065][T12682] ipvlan2: entered promiscuous mode [ 557.850597][T12682] ipvlan2: entered allmulticast mode [ 557.856105][T12682] bridge0: entered allmulticast mode [ 557.863593][T12682] batman_adv: batadv0: Adding interface: ipvlan2 [ 557.881942][T12682] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.949068][T12682] batman_adv: batadv0: Interface activated: ipvlan2 [ 557.956509][T12707] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 557.997679][T12701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1939'. [ 559.017826][ T30] audit: type=1400 audit(1751015787.228:1281): avc: denied { ioctl } for pid=12720 comm="syz.3.1944" path="socket:[38482]" dev="sockfs" ino=38482 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 559.449354][ T5874] usb 2-1: USB disconnect, device number 76 [ 559.521083][ T30] audit: type=1400 audit(1751015787.368:1282): avc: denied { write } for pid=12720 comm="syz.3.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 559.607097][ T2163] usb 5-1: USB disconnect, device number 39 [ 559.839531][T12739] input input37: cannot allocate more than FF_MAX_EFFECTS effects [ 559.848240][ T30] audit: type=1400 audit(1751015788.028:1283): avc: denied { name_connect } for pid=12738 comm="syz.4.1948" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 560.729146][T12751] Invalid ELF header type: 3 != 1 [ 560.738883][ T30] audit: type=1400 audit(1751015788.938:1284): avc: denied { module_load } for pid=12749 comm="syz.2.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 560.782159][T12753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=12753 comm=syz.0.1952 [ 560.796109][T12753] netlink: 'syz.0.1952': attribute type 4 has an invalid length. [ 560.855419][T12756] netlink: 'syz.0.1952': attribute type 4 has an invalid length. [ 562.187271][ C1] sd 0:0:1:0: [sda] tag#6420 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 562.197713][ C1] sd 0:0:1:0: [sda] tag#6420 CDB: Read(6) 08 00 00 00 00 00 00 00 00 00 00 00 [ 562.485890][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.432151][T12798] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1965'. [ 563.441960][ T30] audit: type=1400 audit(1751015791.638:1285): avc: denied { setattr } for pid=12795 comm="syz.4.1966" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 563.509405][T12800] 9pnet_fd: Insufficient options for proto=fd [ 563.884824][ T30] audit: type=1400 audit(1751015792.068:1286): avc: denied { append } for pid=12801 comm="syz.3.1968" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 564.184128][ T5867] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 564.267563][T12814] netlink: 'syz.4.1971': attribute type 33 has an invalid length. [ 564.335280][ T5867] usb 4-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 564.378161][ T30] audit: type=1804 audit(1751015792.578:1287): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1971" name="/newroot/398/file0" dev="tmpfs" ino=2141 res=1 errno=0 [ 564.379230][ T5867] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 564.410297][ T5867] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 564.419600][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.429054][ T5867] usb 4-1: config 0 descriptor?? [ 564.448206][T12815] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 564.457905][T12815] ref_ctr increment failed for inode: 0x85d offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888033be35c0 [ 564.581460][T12806] 9pnet_fd: p9_fd_create_tcp (12806): problem connecting socket to 127.0.0.1 [ 564.754048][ T5808] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 564.934055][ T5808] usb 1-1: Using ep0 maxpacket: 8 [ 564.974753][ T5808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 565.031954][ T5808] usb 1-1: config 7 has an invalid interface number: 194 but max is 0 [ 565.083713][ T5808] usb 1-1: config 7 has no interface number 0 [ 565.171098][ T5808] usb 1-1: New USB device found, idVendor=2019, idProduct=ed18, bcdDevice=ca.21 [ 565.222588][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.293088][ T5808] usb 1-1: Product: syz [ 565.315315][ T5808] usb 1-1: Manufacturer: syz [ 565.333216][ T5808] usb 1-1: SerialNumber: syz [ 565.365991][T12802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1968'. [ 565.377766][ T2163] usb 4-1: USB disconnect, device number 63 [ 565.644015][T12826] ubi31: attaching mtd0 [ 565.653499][T12826] ubi31: scanning is finished [ 565.816916][T12827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1974'. [ 566.405396][T12832] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 566.415947][T12832] team0: Device macvtap1 is already an upper device of the team interface [ 566.652280][T12826] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 566.914857][T12837] ubi31: attaching mtd0 [ 567.081766][T12837] ubi31: scanning is finished [ 567.262545][ T5808] usb 1-1: USB disconnect, device number 66 [ 567.807384][T12847] netlink: 'syz.3.1980': attribute type 33 has an invalid length. [ 567.829182][T12849] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1979'. [ 567.846969][T12837] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 568.039209][ T30] audit: type=1804 audit(1751015796.248:1288): pid=12852 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1980" name="/newroot/394/file0" dev="tmpfs" ino=2100 res=1 errno=0 [ 568.761985][T12837] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 568.810238][T12837] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 568.832050][T12837] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 568.851711][T12837] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 568.858988][T12837] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 568.867243][T12837] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1291830286 [ 568.877863][T12837] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 568.892457][T12850] ubi31: background thread "ubi_bgt31d" started, PID 12850 [ 569.032668][T12860] lo speed is unknown, defaulting to 1000 [ 569.055947][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'. [ 569.777331][T12871] PM: Enabling pm_trace changes system date and time during resume. [ 569.777331][T12871] PM: Correct system time has to be restored manually after resume. [ 569.946197][ T30] audit: type=1400 audit(1751015798.088:1289): avc: denied { ioctl } for pid=12861 comm="syz.4.1984" path="socket:[39970]" dev="sockfs" ino=39970 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 570.207058][ T30] audit: type=1400 audit(1751015798.218:1290): avc: denied { write } for pid=12862 comm="syz.3.1986" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 570.517062][ T30] audit: type=1400 audit(1751015798.718:1291): avc: denied { create } for pid=12880 comm="syz.4.1990" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 570.537422][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.556565][T12887] pim6reg1: entered promiscuous mode [ 570.562020][T12887] pim6reg1: entered allmulticast mode [ 571.163558][T12891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1994'. [ 571.181659][T12893] FAULT_INJECTION: forcing a failure. [ 571.181659][T12893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.206499][T12889] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 571.255752][T12889] kvm: user requested TSC rate below hardware speed [ 571.348356][ T30] audit: type=1400 audit(1751015799.458:1292): avc: denied { create } for pid=12888 comm="syz.1.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 571.370147][T12893] CPU: 0 UID: 0 PID: 12893 Comm: syz.4.1995 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 571.370173][T12893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 571.370184][T12893] Call Trace: [ 571.370189][T12893] [ 571.370195][T12893] dump_stack_lvl+0x16c/0x1f0 [ 571.370222][T12893] should_fail_ex+0x512/0x640 [ 571.370249][T12893] _copy_to_user+0x32/0xd0 [ 571.370275][T12893] simple_read_from_buffer+0xcb/0x170 [ 571.370297][T12893] proc_fail_nth_read+0x197/0x270 [ 571.370318][T12893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.370343][T12893] ? rw_verify_area+0xcf/0x680 [ 571.370362][T12893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.370383][T12893] vfs_read+0x1e1/0xc60 [ 571.370407][T12893] ? __pfx___mutex_lock+0x10/0x10 [ 571.370431][T12893] ? __pfx_vfs_read+0x10/0x10 [ 571.370458][T12893] ? __fget_files+0x20e/0x3c0 [ 571.370488][T12893] ksys_read+0x12a/0x250 [ 571.370508][T12893] ? __pfx_ksys_read+0x10/0x10 [ 571.370536][T12893] do_syscall_64+0xcd/0x4c0 [ 571.370561][T12893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.370579][T12893] RIP: 0033:0x7f5922d8d33c [ 571.370593][T12893] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 571.370610][T12893] RSP: 002b:00007f5923b8e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 571.370627][T12893] RAX: ffffffffffffffda RBX: 00007f5922fb5fa0 RCX: 00007f5922d8d33c [ 571.370638][T12893] RDX: 000000000000000f RSI: 00007f5923b8e0a0 RDI: 0000000000000006 [ 571.370647][T12893] RBP: 00007f5923b8e090 R08: 0000000000000000 R09: 0000000000000000 [ 571.370657][T12893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.370667][T12893] R13: 0000000000000000 R14: 00007f5922fb5fa0 R15: 00007fffe39174e8 [ 571.370689][T12893] [ 571.554819][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.529594][T12860] lo speed is unknown, defaulting to 1000 [ 574.542921][T12937] "syz.4.2004" (12937) uses obsolete ecb(arc4) skcipher [ 574.602607][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2004'. [ 574.918728][T12935] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 575.769419][T12951] random: crng reseeded on system resumption [ 575.789152][ T30] audit: type=1400 audit(1751015803.978:1293): avc: denied { append } for pid=12948 comm="syz.3.2009" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 576.172073][T12959] openvswitch: netlink: Flow key attr not present in new flow. [ 576.464461][ T5874] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 576.676012][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 576.720042][ T30] audit: type=1400 audit(1751015804.928:1294): avc: denied { mount } for pid=12963 comm="syz.4.2013" name="/" dev="autofs" ino=40322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 576.748409][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 576.768067][T12971] netlink: 'syz.1.2015': attribute type 33 has an invalid length. [ 576.806093][ T5874] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 577.073794][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.290741][ T5874] usb 4-1: config 0 descriptor?? [ 578.301233][T12950] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 578.474735][ T7544] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 579.298802][ T5874] usb 4-1: can't set config #0, error -71 [ 579.430128][ T5874] usb 4-1: USB disconnect, device number 64 [ 579.675733][ T30] audit: type=1400 audit(1751015807.888:1295): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 579.695772][ C0] vkms_vblank_simulate: vblank timer overrun [ 579.730073][ T30] audit: type=1800 audit(1751015807.938:1296): pid=12985 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2020" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 579.863020][T12991] netlink: 'syz.1.2022': attribute type 33 has an invalid length. [ 579.934573][ T5808] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 579.967708][ T30] audit: type=1804 audit(1751015808.178:1297): pid=12992 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2022" name="/newroot/415/file0" dev="tmpfs" ino=2242 res=1 errno=0 [ 579.996412][T12992] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 580.005279][T12992] ref_ctr increment failed for inode: 0x8c2 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88801b876b80 [ 580.024037][ T5874] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 580.094103][ T5867] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 580.144519][ T5808] usb 4-1: Using ep0 maxpacket: 8 [ 580.171388][ T5808] usb 4-1: config 162 has an invalid interface number: 166 but max is 0 [ 580.193365][ T5808] usb 4-1: config 162 has no interface number 0 [ 580.202997][ T5808] usb 4-1: config 162 interface 166 has no altsetting 0 [ 580.232039][ T5808] usb 4-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 580.266287][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.289716][ T5808] usb 4-1: Product: syz [ 580.300744][ T5808] usb 4-1: Manufacturer: syz [ 580.312469][ T5808] usb 4-1: SerialNumber: syz [ 580.692569][ T5808] appledisplay 4-1:162.166: Could not find int-in endpoint [ 580.757798][ T5808] usbhid 4-1:162.166: couldn't find an input interrupt endpoint [ 580.788497][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 580.829548][ T5808] usb 4-1: USB disconnect, device number 65 [ 580.974211][T12983] lo speed is unknown, defaulting to 1000 [ 581.232878][ T5874] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 581.247388][ T5874] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 581.263374][ T5874] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 581.273093][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.281301][ T5874] usb 5-1: Product: syz [ 581.285521][ T5874] usb 5-1: Manufacturer: syz [ 581.290124][ T5874] usb 5-1: SerialNumber: syz [ 581.377674][ T5867] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 581.395005][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.414346][ T5867] usb 1-1: Product: syz [ 581.424063][ T5867] usb 1-1: Manufacturer: syz [ 581.436758][ T5867] usb 1-1: SerialNumber: syz [ 581.480659][ T5867] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 581.510719][ T5874] cdc_ncm 5-1:1.0: bind() failure [ 581.530783][ T5821] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 581.573494][ T5874] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 581.655685][ T5874] cdc_ncm 5-1:1.1: bind() failure [ 581.895064][ T5874] usb 5-1: USB disconnect, device number 40 [ 582.216028][ T5808] usb 1-1: USB disconnect, device number 67 [ 582.522865][T12983] lo speed is unknown, defaulting to 1000 [ 582.538053][ T2163] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 582.694816][ T2163] usb 5-1: Using ep0 maxpacket: 8 [ 582.703335][ T2163] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 582.718013][ T2163] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 582.744258][ T2163] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 582.757214][ T2163] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.770486][ T2163] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 582.782232][ T2163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.803808][ T5821] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 582.825837][ T5821] ath9k_htc: Failed to initialize the device [ 582.832438][ T5808] usb 1-1: ath9k_htc: USB layer deinitialized [ 582.846249][T13013] netlink: 'syz.1.2028': attribute type 1 has an invalid length. [ 582.922310][T13015] NILFS (loop1): device size too small [ 582.929540][T13013] 8021q: adding VLAN 0 to HW filter on device bond3 [ 582.957060][T13013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17936 sclass=netlink_route_socket pid=13013 comm=syz.1.2028 [ 583.030683][ T2163] usb 5-1: GET_CAPABILITIES returned 0 [ 583.042259][ T2163] usbtmc 5-1:16.0: can't read capabilities [ 583.078493][T13017] netlink: 'syz.0.2030': attribute type 33 has an invalid length. [ 584.423361][ T2163] usb 5-1: USB disconnect, device number 41 [ 584.866373][T13030] tipc: Started in network mode [ 584.871275][T13030] tipc: Node identity 5, cluster identity 4711 [ 584.888108][T13030] tipc: Node number set to 5 [ 584.929365][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2033'. [ 585.836435][ T5867] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 586.034191][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 586.043847][ T5867] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 586.060733][ T5867] usb 5-1: config 4 has no interface number 0 [ 586.082837][ T5867] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.096506][ T5867] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.106814][ T5867] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 586.120933][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.220589][ T5867] hub 5-1:4.128: USB hub found [ 586.419865][ T5867] hub 5-1:4.128: 2 ports detected [ 586.464381][ T5867] hub 5-1:4.128: Using single TT (err -22) [ 588.314801][ T5867] hub 5-1:4.128: hub_hub_status failed (err = -32) [ 588.332397][ T5867] hub 5-1:4.128: config failed, can't get hub status (err -32) [ 588.424225][ T5867] usb 5-1: USB disconnect, device number 42 [ 588.650797][T13070] geneve3: entered promiscuous mode [ 589.178634][T13082] netlink: 'syz.2.2047': attribute type 11 has an invalid length. [ 589.204015][T13082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2047'. [ 593.134489][T13128] FAULT_INJECTION: forcing a failure. [ 593.134489][T13128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.147863][T13128] CPU: 1 UID: 0 PID: 13128 Comm: syz.3.2064 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 593.147879][T13128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 593.147886][T13128] Call Trace: [ 593.147890][T13128] [ 593.147895][T13128] dump_stack_lvl+0x16c/0x1f0 [ 593.147915][T13128] should_fail_ex+0x512/0x640 [ 593.147932][T13128] _copy_to_user+0x32/0xd0 [ 593.147948][T13128] simple_read_from_buffer+0xcb/0x170 [ 593.147964][T13128] proc_fail_nth_read+0x197/0x270 [ 593.147979][T13128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 593.147993][T13128] ? rw_verify_area+0xcf/0x680 [ 593.148005][T13128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 593.148018][T13128] vfs_read+0x1e1/0xc60 [ 593.148033][T13128] ? __pfx___mutex_lock+0x10/0x10 [ 593.148049][T13128] ? __pfx_vfs_read+0x10/0x10 [ 593.148066][T13128] ? __fget_files+0x20e/0x3c0 [ 593.148085][T13128] ksys_read+0x12a/0x250 [ 593.148097][T13128] ? __pfx_ksys_read+0x10/0x10 [ 593.148111][T13128] ? fput+0x70/0xf0 [ 593.148129][T13128] do_syscall_64+0xcd/0x4c0 [ 593.148146][T13128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.148158][T13128] RIP: 0033:0x7f7030b8d33c [ 593.148168][T13128] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 593.148179][T13128] RSP: 002b:00007f7031a37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 593.148190][T13128] RAX: ffffffffffffffda RBX: 00007f7030db5fa0 RCX: 00007f7030b8d33c [ 593.148197][T13128] RDX: 000000000000000f RSI: 00007f7031a370a0 RDI: 0000000000000009 [ 593.148203][T13128] RBP: 00007f7031a37090 R08: 0000000000000000 R09: 0000000000000000 [ 593.148210][T13128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.148216][T13128] R13: 0000000000000000 R14: 00007f7030db5fa0 R15: 00007ffed4b78a48 [ 593.148229][T13128] [ 593.490245][T13133] netlink: 'syz.1.2066': attribute type 11 has an invalid length. [ 593.518754][T13133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2066'. [ 595.514246][ T5921] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 595.548974][ T30] audit: type=1400 audit(1751015823.758:1298): avc: denied { getopt } for pid=13163 comm="syz.0.2076" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 596.215761][ T5921] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 596.227567][ T5921] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 596.232245][T13177] netlink: 'syz.3.2079': attribute type 1 has an invalid length. [ 596.248528][ T5921] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 596.260045][ T5921] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 596.269726][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.294608][T13157] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 596.449158][T13181] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 596.514570][ T5921] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 596.523349][ T5921] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input39 [ 596.923188][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 596.934154][ T5921] usb 2-1: USB disconnect, device number 77 [ 597.837774][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2089'. [ 597.925411][T13208] PM: Enabling pm_trace changes system date and time during resume. [ 597.925411][T13208] PM: Correct system time has to be restored manually after resume. [ 598.159013][T13203] 9pnet_fd: p9_fd_create_tcp (13203): problem connecting socket to 127.0.0.1 [ 598.164441][T13201] 9pnet_fd: p9_fd_create_tcp (13201): problem connecting socket to 127.0.0.1 [ 598.857505][ T30] audit: type=1400 audit(1751015827.068:1299): avc: denied { read } for pid=13212 comm="syz.4.2091" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 599.104127][T13221] vlan2: entered allmulticast mode [ 599.109363][T13221] veth1: entered allmulticast mode [ 599.341380][T13226] lo speed is unknown, defaulting to 1000 [ 599.529283][ T30] audit: type=1400 audit(1751015827.738:1300): avc: denied { write } for pid=13229 comm="syz.4.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 599.581094][ T30] audit: type=1400 audit(1751015827.768:1301): avc: denied { getopt } for pid=13229 comm="syz.4.2095" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 599.624424][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2096'. [ 600.044274][ T5921] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 600.295091][T13248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2101'. [ 600.335935][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 600.415333][T13249] PM: Enabling pm_trace changes system date and time during resume. [ 600.415333][T13249] PM: Correct system time has to be restored manually after resume. [ 600.656967][ T5921] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 600.673836][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.711377][ T5921] usb 1-1: config 0 descriptor?? [ 601.087507][T13226] lo speed is unknown, defaulting to 1000 [ 601.504144][T13254] 9pnet_fd: p9_fd_create_tcp (13254): problem connecting socket to 127.0.0.1 [ 601.530603][ T5921] glorious 0003:258A:0036.0017: hidraw0: USB HID v0.01 Device [Glorious Model O] on usb-dummy_hcd.0-1/input0 [ 601.618159][ T5921] usb 1-1: USB disconnect, device number 68 [ 601.780142][ T30] audit: type=1400 audit(1751015829.988:1302): avc: denied { mounton } for pid=13261 comm="syz.4.2106" path="/428/bus" dev="tmpfs" ino=2300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 601.884044][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2106'. [ 601.972861][ T30] audit: type=1400 audit(1751015830.108:1303): avc: denied { getopt } for pid=13265 comm="syz.1.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 602.795868][T13270] team0: Port device team_slave_0 removed [ 603.857077][ T30] audit: type=1400 audit(1751015832.058:1304): avc: denied { write } for pid=13287 comm="syz.4.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 604.280497][ T30] audit: type=1400 audit(1751015832.488:1305): avc: denied { create } for pid=13296 comm="syz.2.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 604.346887][ T5867] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 605.050941][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 605.068940][ T30] audit: type=1400 audit(1751015833.278:1306): avc: denied { name_bind } for pid=13305 comm="syz.2.2117" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 605.091023][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.104627][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 605.144158][ T5867] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 605.363345][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.415288][ T5867] usb 5-1: config 0 descriptor?? [ 605.551083][T13321] netlink: 'syz.2.2122': attribute type 33 has an invalid length. [ 606.524507][ T30] audit: type=1804 audit(1751015833.848:1307): pid=13322 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2122" name="/newroot/403/file0" dev="tmpfs" ino=2170 res=1 errno=0 [ 606.564741][T13315] cgroup: fork rejected by pids controller in /syz1 [ 606.617505][ T5867] usb 5-1: can't set config #0, error -71 [ 606.646276][ T5867] usb 5-1: USB disconnect, device number 43 [ 606.678655][T13333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.800441][T13333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.649118][ T30] audit: type=1400 audit(1751015835.858:1308): avc: denied { map } for pid=13325 comm="syz.0.2123" path="socket:[42632]" dev="sockfs" ino=42632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 607.746142][T13438] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2127'. [ 608.196828][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2131'. [ 608.283242][T13452] PM: Enabling pm_trace changes system date and time during resume. [ 608.283242][T13452] PM: Correct system time has to be restored manually after resume. [ 608.444645][ T2163] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 608.456939][ T5894] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 608.615335][ T2163] usb 1-1: Using ep0 maxpacket: 16 [ 608.627508][ T2163] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.638019][ T2163] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 608.663308][ T2163] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 608.679757][ T2163] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.688236][ T2163] usb 1-1: Product: syz [ 608.692420][ T2163] usb 1-1: Manufacturer: syz [ 608.697853][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 608.703381][ T2163] usb 1-1: SerialNumber: syz [ 608.713291][ T5894] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 608.725727][ T5894] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 608.750258][ T5894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 608.760461][ T5894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 608.783681][ T5894] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.819028][ T5894] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 608.828382][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.173216][ T2163] usb 1-1: cannot find UAC_HEADER [ 609.261013][ T5894] usb 3-1: usb_control_msg returned -32 [ 609.324024][ T5894] usbtmc 3-1:16.0: can't read capabilities [ 609.326342][ T2163] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 609.344389][ T2163] usb 1-1: USB disconnect, device number 69 [ 609.482520][ T30] audit: type=1400 audit(1751015837.688:1309): avc: denied { read } for pid=13469 comm="syz.4.2140" path="socket:[43562]" dev="sockfs" ino=43562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 609.543070][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 609.557271][ T30] audit: type=1400 audit(1751015837.768:1310): avc: denied { load_policy } for pid=13469 comm="syz.4.2140" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 609.578168][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 609.581185][T13473] SELinux: failed to load policy [ 609.590767][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 609.607088][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 609.618233][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 609.630975][ T30] audit: type=1400 audit(1751015837.848:1311): avc: denied { mounton } for pid=13474 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 609.672967][T13474] lo speed is unknown, defaulting to 1000 [ 609.783331][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2144'. [ 609.844148][T13304] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 609.892370][T13487] PM: Enabling pm_trace changes system date and time during resume. [ 609.892370][T13487] PM: Correct system time has to be restored manually after resume. [ 610.166389][T13485] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 610.480853][T13481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37648 sclass=netlink_route_socket pid=13481 comm=syz.4.2143 [ 610.508149][T13474] lo speed is unknown, defaulting to 1000 [ 610.659205][T13474] chnl_net:caif_netlink_parms(): no params data found [ 610.714805][T13474] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.722552][T13474] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.728293][T13505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 610.729910][T13474] bridge_slave_0: entered allmulticast mode [ 610.746050][T13474] bridge_slave_0: entered promiscuous mode [ 610.766698][T13474] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.774112][T13474] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.784093][T13474] bridge_slave_1: entered allmulticast mode [ 610.792736][T13474] bridge_slave_1: entered promiscuous mode [ 610.927624][T13474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.940275][T13474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.973415][T13474] team0: Port device team_slave_0 added [ 610.982964][T13474] team0: Port device team_slave_1 added [ 611.039357][T13474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.054575][T13474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.127044][T13474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.134140][T13509] kernel profiling enabled (shift: 17) [ 611.191885][ T30] audit: type=1400 audit(1751015839.398:1312): avc: denied { execute_no_trans } for pid=13506 comm="syz.0.2148" path="/435/file0" dev="tmpfs" ino=2343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 611.204194][T13474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.242134][T13474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.275651][ T5894] usb 3-1: USB disconnect, device number 63 [ 611.338157][T13474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.438544][T13474] hsr_slave_0: entered promiscuous mode [ 611.457207][T13474] hsr_slave_1: entered promiscuous mode [ 611.466191][T13474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 611.490213][T13474] Cannot create hsr debugfs directory [ 611.579034][T13516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 611.614482][ T5921] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 611.684755][ T5823] Bluetooth: hci0: command tx timeout [ 611.777959][ T5921] usb 4-1: config 0 has no interfaces? [ 611.794942][ T5921] usb 4-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 611.806279][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.817877][ T5921] usb 4-1: config 0 descriptor?? [ 611.936006][T13474] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.033425][T13474] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.265455][ T5894] usb 4-1: USB disconnect, device number 66 [ 612.750476][T13474] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.924207][T13531] x_tables: ip_tables: osf match: only valid for protocol 6 [ 613.259486][T13538] netlink: 'syz.4.2157': attribute type 33 has an invalid length. [ 613.269636][T13474] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.290564][T13531] lo speed is unknown, defaulting to 1000 [ 613.407556][ T30] audit: type=1804 audit(1751015841.578:1313): pid=13539 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2157" name="/newroot/441/file0" dev="tmpfs" ino=2368 res=1 errno=0 [ 613.754087][ T5823] Bluetooth: hci0: command tx timeout [ 614.458660][T13474] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 614.531712][T13474] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 614.572804][T13474] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 614.594284][T13474] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 614.674572][ T30] audit: type=1326 audit(1751015842.888:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13548 comm="syz.0.2162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd11018e929 code=0x0 [ 614.807089][T13531] lo speed is unknown, defaulting to 1000 [ 614.900300][ T30] audit: type=1400 audit(1751015843.108:1315): avc: denied { map } for pid=13559 comm="syz.3.2163" path="socket:[43801]" dev="sockfs" ino=43801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 614.961703][ T30] audit: type=1400 audit(1751015843.108:1316): avc: denied { read } for pid=13559 comm="syz.3.2163" path="socket:[43801]" dev="sockfs" ino=43801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 615.016941][T13474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.104131][T13474] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.176236][ T7086] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.183434][ T7086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.259250][T13304] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.266373][T13304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.834318][ T5823] Bluetooth: hci0: command tx timeout [ 616.455298][T13577] netlink: 'syz.0.2167': attribute type 33 has an invalid length. [ 616.872294][ T30] audit: type=1804 audit(1751015844.748:1317): pid=13579 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2167" name="/newroot/441/file0" dev="tmpfs" ino=2375 res=1 errno=0 [ 617.914016][ T5823] Bluetooth: hci0: command tx timeout [ 617.921359][T13474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.107257][T13587] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2170'. [ 618.380826][T13474] veth0_vlan: entered promiscuous mode [ 619.828948][T13474] veth1_vlan: entered promiscuous mode [ 619.994149][T13474] veth0_macvtap: entered promiscuous mode [ 620.003440][T13474] veth1_macvtap: entered promiscuous mode [ 620.063812][T13474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.148185][T13474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.465798][T13474] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.484620][T13474] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.493434][T13474] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.503267][T13474] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.548633][ T30] audit: type=1400 audit(1751015848.758:1318): avc: denied { setattr } for pid=13606 comm="syz.2.2177" name="#50" dev="tmpfs" ino=2220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 620.575354][T13614] bpq0: entered promiscuous mode [ 620.617267][T13617] FAULT_INJECTION: forcing a failure. [ 620.617267][T13617] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 620.684393][T13617] CPU: 1 UID: 0 PID: 13617 Comm: syz.3.2179 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 620.684423][T13617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 620.684434][T13617] Call Trace: [ 620.684441][T13617] [ 620.684448][T13617] dump_stack_lvl+0x16c/0x1f0 [ 620.684486][T13617] should_fail_ex+0x512/0x640 [ 620.684512][T13617] should_fail_alloc_page+0xe7/0x130 [ 620.684540][T13617] prepare_alloc_pages+0x3c2/0x610 [ 620.684563][T13617] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 620.684596][T13617] ? __lock_acquire+0x622/0x1c90 [ 620.684625][T13617] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 620.684663][T13617] ? __lock_acquire+0xb8a/0x1c90 [ 620.684689][T13617] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 620.684711][T13617] ? policy_nodemask+0xea/0x4e0 [ 620.684738][T13617] alloc_pages_mpol+0x1fb/0x550 [ 620.684764][T13617] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 620.684797][T13617] folio_alloc_mpol_noprof+0x36/0x2f0 [ 620.684827][T13617] vma_alloc_folio_noprof+0xed/0x1e0 [ 620.684854][T13617] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 620.684883][T13617] ? rcu_read_unlock+0x2d/0xb0 [ 620.684910][T13617] do_wp_page+0x1e5b/0x4f20 [ 620.684944][T13617] ? __pfx_do_wp_page+0x10/0x10 [ 620.684974][T13617] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 620.685000][T13617] __handle_mm_fault+0x2223/0x5490 [ 620.685027][T13617] ? __pfx___handle_mm_fault+0x10/0x10 [ 620.685047][T13617] ? lock_vma_under_rcu+0x47d/0x970 [ 620.685066][T13617] ? lock_vma_under_rcu+0x47d/0x970 [ 620.685105][T13617] handle_mm_fault+0x589/0xd10 [ 620.685126][T13617] ? __pkru_allows_pkey+0x41/0xb0 [ 620.685152][T13617] do_user_addr_fault+0x60c/0x1370 [ 620.685180][T13617] ? rcu_is_watching+0x12/0xc0 [ 620.685205][T13617] exc_page_fault+0x5c/0xb0 [ 620.685229][T13617] asm_exc_page_fault+0x26/0x30 [ 620.685246][T13617] RIP: 0033:0x7f7030b48475 [ 620.685262][T13617] Code: 0f 1f 44 00 00 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 0d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 fc 00 00 00 a8 01 75 78 31 d2 5b [ 620.685279][T13617] RSP: 002b:00007f7031a35de0 EFLAGS: 00010293 [ 620.685294][T13617] RAX: 0000000000000008 RBX: 00007f70318e7d60 RCX: 0000000000000000 [ 620.685305][T13617] RDX: 0000000000000000 RSI: 00007f7030c4e19e RDI: 00007f70318e7d60 [ 620.685316][T13617] RBP: 00007f7031a35f00 R08: 0000000000000000 R09: 0000000000000005 [ 620.685327][T13617] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f7030c4dd40 [ 620.685337][T13617] R13: 0000000000000016 R14: 00007f7030d84440 R15: 0000000000000000 [ 620.685362][T13617] [ 620.685587][T13617] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 620.769694][T13304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.024316][T13304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.204106][ T2163] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 621.318540][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.328569][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.438920][ T2163] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 621.459063][ T2163] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.535911][ T2163] usb 1-1: Product: syz [ 621.587707][ T2163] usb 1-1: Manufacturer: syz [ 621.666046][ T2163] usb 1-1: SerialNumber: syz [ 621.673231][ T30] audit: type=1400 audit(1751015849.878:1319): avc: denied { mounton } for pid=13474 comm="syz-executor" path="/root/syzkaller.SqWJh7/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 621.717567][ T2163] usb 1-1: config 0 descriptor?? [ 621.744511][ T2163] ch341 1-1:0.0: ch341-uart converter detected [ 621.798451][ T30] audit: type=1400 audit(1751015849.878:1320): avc: denied { mounton } for pid=13474 comm="syz-executor" path="/root/syzkaller.SqWJh7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 621.825234][ C0] vkms_vblank_simulate: vblank timer overrun [ 621.871277][ T30] audit: type=1400 audit(1751015849.878:1321): avc: denied { mounton } for pid=13474 comm="syz-executor" path="/root/syzkaller.SqWJh7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=45099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 622.075414][ T2163] usb 1-1: failed to receive control message: -121 [ 622.082511][ T2163] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 622.328014][ T30] audit: type=1400 audit(1751015849.928:1322): avc: denied { mounton } for pid=13474 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 622.372354][T13644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.399835][T13644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.625510][T13622] ubi: mtd0 is already attached to ubi31 [ 623.702957][T13658] netlink: 'syz.2.2190': attribute type 33 has an invalid length. [ 623.786084][ T30] audit: type=1804 audit(1751015851.988:1323): pid=13660 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2190" name="/newroot/414/file0" dev="tmpfs" ino=2236 res=1 errno=0 [ 623.815122][ T2163] usb 1-1: USB disconnect, device number 70 [ 623.822197][ T2163] ch341 1-1:0.0: device disconnected [ 623.995218][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.564423][ T30] audit: type=1400 audit(1751015852.778:1324): avc: denied { map } for pid=13671 comm="syz.4.2193" path="/dev/sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 624.588343][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.058918][T13672] FAULT_INJECTION: forcing a failure. [ 625.058918][T13672] name failslab, interval 1, probability 0, space 0, times 0 [ 625.092419][T13672] CPU: 0 UID: 0 PID: 13672 Comm: syz.4.2193 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 625.092449][T13672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 625.092459][T13672] Call Trace: [ 625.092466][T13672] [ 625.092473][T13672] dump_stack_lvl+0x16c/0x1f0 [ 625.092504][T13672] should_fail_ex+0x512/0x640 [ 625.092526][T13672] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 625.092552][T13672] should_failslab+0xc2/0x120 [ 625.092577][T13672] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 625.092598][T13672] ? __pfx___might_resched+0x10/0x10 [ 625.092620][T13672] ? __anon_vma_prepare+0xae/0x5e0 [ 625.092646][T13672] __anon_vma_prepare+0xae/0x5e0 [ 625.092671][T13672] __vmf_anon_prepare+0x11c/0x240 [ 625.092700][T13672] __handle_mm_fault+0x1216/0x5490 [ 625.092728][T13672] ? __pfx___handle_mm_fault+0x10/0x10 [ 625.092746][T13672] ? __pfx_mt_find+0x10/0x10 [ 625.092788][T13672] ? find_vma+0xbf/0x140 [ 625.092812][T13672] ? __pfx_find_vma+0x10/0x10 [ 625.092840][T13672] handle_mm_fault+0x589/0xd10 [ 625.092861][T13672] ? __pkru_allows_pkey+0x41/0xb0 [ 625.092889][T13672] do_user_addr_fault+0x7a6/0x1370 [ 625.092917][T13672] ? rcu_is_watching+0x12/0xc0 [ 625.092942][T13672] exc_page_fault+0x5c/0xb0 [ 625.092967][T13672] asm_exc_page_fault+0x26/0x30 [ 625.092985][T13672] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 625.093005][T13672] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 10 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 625.093022][T13672] RSP: 0018:ffffc900100f7c38 EFLAGS: 00050246 [ 625.093037][T13672] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 625.093048][T13672] RDX: fffff5200201ef97 RSI: ffffc900100f7cb0 RDI: 0000200000002000 [ 625.093060][T13672] RBP: 0000200000002000 R08: 0000000000000000 R09: fffff5200201ef96 [ 625.093072][T13672] R10: ffffc900100f7cb7 R11: 0000000000000001 R12: ffffc900100f7cb0 [ 625.093083][T13672] R13: 0000200000002008 R14: 00007ffffffff000 R15: 0000000000000000 [ 625.093109][T13672] _copy_to_user+0xbb/0xd0 [ 625.093136][T13672] msr_read+0x14e/0x250 [ 625.093163][T13672] ? __pfx_msr_read+0x10/0x10 [ 625.093181][T13672] ? bpf_lsm_file_permission+0x9/0x10 [ 625.093207][T13672] ? security_file_permission+0x71/0x210 [ 625.093234][T13672] ? rw_verify_area+0xcf/0x680 [ 625.093252][T13672] ? __pfx_msr_read+0x10/0x10 [ 625.093272][T13672] vfs_read+0x1e1/0xc60 [ 625.093298][T13672] ? __pfx_vfs_read+0x10/0x10 [ 625.093317][T13672] ? find_held_lock+0x2b/0x80 [ 625.093339][T13672] ? __fget_files+0x204/0x3c0 [ 625.093367][T13672] ? __fget_files+0x20e/0x3c0 [ 625.093399][T13672] ksys_read+0x12a/0x250 [ 625.093420][T13672] ? __pfx_ksys_read+0x10/0x10 [ 625.093449][T13672] do_syscall_64+0xcd/0x4c0 [ 625.093474][T13672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.093491][T13672] RIP: 0033:0x7f5922d8e929 [ 625.093505][T13672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.093521][T13672] RSP: 002b:00007f5923b8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 625.093537][T13672] RAX: ffffffffffffffda RBX: 00007f5922fb5fa0 RCX: 00007f5922d8e929 [ 625.093549][T13672] RDX: 0000000000019000 RSI: 0000200000002000 RDI: 0000000000000005 [ 625.093559][T13672] RBP: 00007f5923b8e090 R08: 0000000000000000 R09: 0000000000000000 [ 625.093570][T13672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.093581][T13672] R13: 0000000000000000 R14: 00007f5922fb5fa0 R15: 00007fffe39174e8 [ 625.093605][T13672] [ 625.442021][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.793268][T13679] netlink: 'syz.1.2196': attribute type 33 has an invalid length. [ 625.801343][T13679] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2196'. [ 625.833828][ T30] audit: type=1400 audit(1751015854.038:1325): avc: denied { bind } for pid=13683 comm="syz.3.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 626.079172][T13692] 9pnet_fd: Insufficient options for proto=fd [ 626.709637][T13697] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2202'. [ 627.360782][T13701] block nbd0: not configured, cannot reconfigure [ 629.128559][T13725] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 629.354258][T13729] 9pnet_fd: Insufficient options for proto=fd [ 629.555560][T13734] netlink: 'syz.1.2214': attribute type 12 has an invalid length. [ 629.563426][T13734] netlink: 'syz.1.2214': attribute type 29 has an invalid length. [ 629.611312][ T30] audit: type=1400 audit(1751015857.818:1326): avc: denied { shutdown } for pid=13733 comm="syz.1.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 629.614862][T13734] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2214'. [ 629.999935][ T30] audit: type=1400 audit(1751015857.818:1327): avc: denied { read } for pid=13733 comm="syz.1.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 630.000659][T13734] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2214'. [ 630.323026][ T30] audit: type=1400 audit(1751015858.528:1328): avc: denied { ioctl } for pid=13748 comm="syz.0.2219" path="socket:[45372]" dev="sockfs" ino=45372 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 630.481406][T13754] tipc: Started in network mode [ 630.661025][T13754] tipc: Node identity 5, cluster identity 4711 [ 631.245405][T13754] tipc: Node number set to 5 [ 631.622054][T13772] 9pnet_fd: Insufficient options for proto=fd [ 631.732428][T13776] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2227'. [ 631.874879][T13782] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2227'. [ 632.052063][T13787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2230'. [ 633.221404][T13799] tipc: Started in network mode [ 633.237879][T13799] tipc: Node identity 5, cluster identity 4711 [ 633.323313][T13802] "syz.1.2235" (13802) uses obsolete ecb(arc4) skcipher [ 633.684969][T13799] tipc: Node number set to 5 [ 634.596764][T13815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 634.602385][ T30] audit: type=1400 audit(1751015862.798:1329): avc: denied { listen } for pid=13814 comm="syz.1.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 634.674673][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2244'. [ 635.044775][T13824] netlink: 'syz.2.2245': attribute type 33 has an invalid length. [ 635.126736][ T30] audit: type=1804 audit(1751015863.328:1330): pid=13827 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2245" name="/newroot/423/file0" dev="tmpfs" ino=2284 res=1 errno=0 [ 636.613977][ T5821] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 636.769267][T13819] sctp: [Deprecated]: syz.3.2243 (pid 13819) Use of int in max_burst socket option deprecated. [ 636.769267][T13819] Use struct sctp_assoc_value instead [ 636.920358][ T30] audit: type=1400 audit(1751015865.128:1331): avc: denied { execute } for pid=13836 comm="syz.4.2248" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=46215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 636.950086][T13849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 637.024107][ T5821] usb 2-1: device descriptor read/64, error -71 [ 637.273623][ T5821] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 637.424070][ T5821] usb 2-1: device descriptor read/64, error -71 [ 637.429060][ T5808] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 637.998843][ T5808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 638.013127][ T5808] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 638.023380][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.024188][ T5821] usb usb2-port1: attempt power cycle [ 638.060710][ T5808] usb 1-1: config 0 descriptor?? [ 638.087802][T13862] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2255'. [ 638.283877][ T30] audit: type=1326 audit(1751015866.488:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13851 comm="syz.0.2252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd11018e929 code=0x0 [ 638.394382][ T5821] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 638.415106][ T5821] usb 2-1: device descriptor read/8, error -71 [ 638.421625][ T5808] usbhid 1-1:0.0: can't add hid device: -71 [ 638.441225][ T5808] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 638.458118][ T5808] usb 1-1: USB disconnect, device number 71 [ 639.034247][ T5894] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 639.044080][ T5821] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 639.074703][ T5821] usb 2-1: device descriptor read/8, error -71 [ 639.201098][ T5821] usb usb2-port1: unable to enumerate USB device [ 639.219463][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 639.258784][ T5894] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 639.299961][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 639.333034][ T5894] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 639.369718][ T5894] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 639.395486][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.423815][ T5894] usb 4-1: Product: syz [ 639.457433][ T5894] usb 4-1: Manufacturer: syz [ 639.464037][ T5894] usb 4-1: SerialNumber: syz [ 639.479411][ T5894] usb 4-1: config 0 descriptor?? [ 639.499052][ T5894] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 640.037005][T13897] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 640.069201][T13897] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 640.093204][T13897] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 640.093204][T13897] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 640.133648][T13897] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 640.191163][ T5894] scsi host1: usb-storage 4-1:0.0 [ 640.199307][T13901] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2265'. [ 640.207945][T13897] CUSE: DEVNAME unspecified [ 640.247998][ T5894] usb 4-1: USB disconnect, device number 67 [ 640.679456][T13899] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2265'. [ 640.685720][ T30] audit: type=1326 audit(1751015868.898:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13895 comm="syz.1.2265" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9d3d8e929 code=0x0 [ 641.008640][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2270'. [ 641.274473][ T5921] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 641.407888][ T5808] libceph: connect (1)[c::]:6789 error -101 [ 641.417075][ T5808] libceph: mon0 (1)[c::]:6789 connect error [ 641.457782][T13922] tmpfs: Bad value for 'mpol' [ 641.465049][T13921] vxfs: WRONG superblock magic 00000000 at 1 [ 641.472047][T13921] vxfs: WRONG superblock magic 00000000 at 8 [ 641.484995][ T5921] usb 4-1: device descriptor read/64, error -71 [ 641.506559][T13921] vxfs: can't find superblock. [ 641.629521][T13917] ceph: No mds server is up or the cluster is laggy [ 641.694686][ T5808] libceph: connect (1)[c::]:6789 error -101 [ 641.711141][ T5808] libceph: mon0 (1)[c::]:6789 connect error [ 641.744355][ T5921] usb 4-1: new low-speed USB device number 69 using dummy_hcd [ 641.839606][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 641.915342][T13933] FAULT_INJECTION: forcing a failure. [ 641.915342][T13933] name failslab, interval 1, probability 0, space 0, times 0 [ 641.934129][ T5921] usb 4-1: device descriptor read/64, error -71 [ 641.958657][T13933] CPU: 1 UID: 0 PID: 13933 Comm: syz.1.2273 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 641.958685][T13933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 641.958697][T13933] Call Trace: [ 641.958704][T13933] [ 641.958712][T13933] dump_stack_lvl+0x16c/0x1f0 [ 641.958742][T13933] should_fail_ex+0x512/0x640 [ 641.958765][T13933] ? fs_reclaim_acquire+0xae/0x150 [ 641.958786][T13933] ? tomoyo_encode2+0x100/0x3e0 [ 641.958809][T13933] should_failslab+0xc2/0x120 [ 641.958835][T13933] __kmalloc_noprof+0xd2/0x510 [ 641.958864][T13933] tomoyo_encode2+0x100/0x3e0 [ 641.958891][T13933] tomoyo_encode+0x29/0x50 [ 641.958914][T13933] tomoyo_realpath_from_path+0x18f/0x6e0 [ 641.958940][T13933] ? tomoyo_profile+0x47/0x60 [ 641.958969][T13933] tomoyo_path_number_perm+0x245/0x580 [ 641.958988][T13933] ? tomoyo_path_number_perm+0x237/0x580 [ 641.959012][T13933] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 641.959033][T13933] ? find_held_lock+0x2b/0x80 [ 641.959079][T13933] ? find_held_lock+0x2b/0x80 [ 641.959099][T13933] ? hook_file_ioctl_common+0x145/0x410 [ 641.959132][T13933] ? __fget_files+0x20e/0x3c0 [ 641.959160][T13933] security_file_ioctl+0x9b/0x240 [ 641.959185][T13933] __x64_sys_ioctl+0xb7/0x210 [ 641.959207][T13933] do_syscall_64+0xcd/0x4c0 [ 641.959234][T13933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.959252][T13933] RIP: 0033:0x7fc9d3d8e929 [ 641.959267][T13933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.959290][T13933] RSP: 002b:00007fc9d4ca1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.959309][T13933] RAX: ffffffffffffffda RBX: 00007fc9d3fb5fa0 RCX: 00007fc9d3d8e929 [ 641.959321][T13933] RDX: 00002000000000c0 RSI: 00000000c0686611 RDI: 0000000000000003 [ 641.959332][T13933] RBP: 00007fc9d4ca1090 R08: 0000000000000000 R09: 0000000000000000 [ 641.959344][T13933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.959355][T13933] R13: 0000000000000000 R14: 00007fc9d3fb5fa0 R15: 00007fffdf1b5f78 [ 641.959380][T13933] [ 641.959397][T13933] ERROR: Out of memory at tomoyo_realpath_from_path. [ 642.179114][ T5921] usb usb4-port1: attempt power cycle [ 642.534351][ T5921] usb 4-1: new low-speed USB device number 70 using dummy_hcd [ 642.557103][ T5921] usb 4-1: device descriptor read/8, error -71 [ 642.834580][ T5921] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 642.865988][ T5921] usb 4-1: device descriptor read/8, error -71 [ 642.987470][ T5921] usb usb4-port1: unable to enumerate USB device [ 644.134478][ T5921] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 644.196518][T13957] netlink: 'syz.2.2282': attribute type 2 has an invalid length. [ 644.318124][ T5921] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 644.334194][ T5921] usb 2-1: config 0 has no interface number 0 [ 644.349080][ T5921] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.360842][ T5921] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.420717][ T5921] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 644.444080][ T5922] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 644.466316][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.491616][ T5921] usb 2-1: config 0 descriptor?? [ 644.514237][ T5894] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 644.630832][ T5922] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 644.640294][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.648735][ T5922] usb 1-1: Product: syz [ 644.669962][ T5922] usb 1-1: Manufacturer: syz [ 644.674931][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 644.690493][ T5922] usb 1-1: SerialNumber: syz [ 644.692414][ T5894] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 644.711684][ T5922] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 644.736407][ T5894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 644.742634][ T2163] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 644.758187][ T5894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 644.789406][ T5894] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.821183][ T5894] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 644.840273][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.930194][ T5921] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 644.946637][ T5921] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 645.040361][ T5921] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 645.098724][ T5921] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 645.111306][T13961] usb usb8: usbfs: process 13961 (syz.2.2284) did not claim interface 0 before use [ 645.136401][ T5921] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 645.162987][ T5894] usb 3-1: GET_CAPABILITIES returned 0 [ 645.178354][ T5894] usbtmc 3-1:16.0: can't read capabilities [ 645.192957][ T5921] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 645.223413][ T5921] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 645.251181][ T5921] prodikeys 0003:041E:2801.0018: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1 [ 645.272276][ T5921] hid_prodikeys: hid-prodikeys: failed to find output report [ 645.272276][ T5921] [ 645.290579][ T5921] usb 2-1: USB disconnect, device number 82 [ 645.382893][ T5894] usb 3-1: USB disconnect, device number 64 [ 646.155159][ T2163] usb 1-1: Service connection timeout for: 256 [ 646.308500][ T2163] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 646.392817][ T2163] ath9k_htc: Failed to initialize the device [ 646.406888][ T2163] usb 1-1: ath9k_htc: USB layer deinitialized [ 646.436661][T13977] netlink: 'syz.2.2288': attribute type 33 has an invalid length. [ 646.492988][T13979] netlink: 'syz.1.2289': attribute type 33 has an invalid length. [ 646.735938][ T30] audit: type=1804 audit(1751015874.948:1334): pid=13983 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2288" name="/newroot/438/file0" dev="tmpfs" ino=2363 res=1 errno=0 [ 646.784080][ T30] audit: type=1804 audit(1751015874.978:1335): pid=13981 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2289" name="/newroot/27/file0" dev="tmpfs" ino=174 res=1 errno=0 [ 647.383385][ T5808] usb 1-1: USB disconnect, device number 72 [ 647.426321][T13985] netlink: 'syz.2.2290': attribute type 33 has an invalid length. [ 647.572188][ T30] audit: type=1804 audit(1751015875.698:1336): pid=13988 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2290" name="/newroot/439/file0" dev="tmpfs" ino=2369 res=1 errno=0 [ 648.283989][ T5874] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 648.537713][ T5874] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 648.549372][ T30] audit: type=1400 audit(1751015876.748:1337): avc: denied { map } for pid=13994 comm="syz.2.2294" path="socket:[45871]" dev="sockfs" ino=45871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 648.586874][T14001] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2293'. [ 648.604135][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.633997][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.644044][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 648.668554][ T5874] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 648.677754][ T5874] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 648.685958][ T5874] usb 1-1: Manufacturer: syz [ 648.691926][ T5874] usb 1-1: config 0 descriptor?? [ 648.697284][T14006] netlink: 'syz.3.2295': attribute type 4 has an invalid length. [ 648.739079][T13999] netlink: 'syz.3.2295': attribute type 4 has an invalid length. [ 648.938074][ T30] audit: type=1400 audit(1751015877.148:1338): avc: denied { connect } for pid=14008 comm="syz.3.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 649.120263][ T5874] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 649.151138][ T5874] appleir 0003:05AC:8243.0019: No inputs registered, leaving [ 649.180949][ T5874] appleir 0003:05AC:8243.0019: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 649.583854][ T30] audit: type=1400 audit(1751015877.778:1339): avc: denied { bind } for pid=14016 comm="syz.4.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 649.884569][ T5874] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 650.040082][ T30] audit: type=1400 audit(1751015878.238:1340): avc: denied { write } for pid=14028 comm="syz.1.2302" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 650.375466][ T5874] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 650.409418][ T5874] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 650.447334][ T5874] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 650.465927][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.483616][T14023] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 650.500522][ T5874] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 650.550716][T14040] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.2305'. [ 651.676095][ T5808] usb 1-1: USB disconnect, device number 73 [ 652.003112][T14047] netlink: 'syz.2.2306': attribute type 1 has an invalid length. [ 652.145581][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2306'. [ 652.386981][ T5808] usb 5-1: USB disconnect, device number 44 [ 652.550550][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2309'. [ 652.867542][T14065] nfs: Unknown parameter '' [ 653.625267][ T30] audit: type=1400 audit(1751015881.838:1341): avc: denied { read } for pid=14070 comm="syz.2.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 653.961915][ T5808] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 654.367267][T14080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2315'. [ 654.946071][ T5808] usb 2-1: config 198 descriptor has 1 excess byte, ignoring [ 654.953536][ T5808] usb 2-1: config 198 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 654.989391][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2316'. [ 655.072661][ T5808] usb 2-1: config 198 interface 0 altsetting 0 has an endpoint descriptor with address 0x3A, changing to 0xA [ 655.369521][ T5808] usb 2-1: config 198 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 10 [ 655.406010][ T5808] usb 2-1: config 198 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 655.458825][ T5808] usb 2-1: config 198 descriptor has 1 excess byte, ignoring [ 655.468568][ T5808] usb 2-1: config 198 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 655.520858][ T5808] usb 2-1: config 198 interface 0 altsetting 0 has an endpoint descriptor with address 0x3A, changing to 0xA [ 655.548343][ T5808] usb 2-1: config 198 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 10 [ 655.574068][ T5808] usb 2-1: config 198 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 655.653595][ T5808] usb 2-1: config 198 descriptor has 1 excess byte, ignoring [ 655.715811][ T5808] usb 2-1: config 198 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 655.715968][ T5874] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 655.791626][ T5808] usb 2-1: config 198 interface 0 altsetting 0 has an endpoint descriptor with address 0x3A, changing to 0xA [ 655.881448][ T5808] usb 2-1: config 198 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 10 [ 655.935297][ T5808] usb 2-1: config 198 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 655.954245][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 655.955421][ T5808] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 655.970057][ T5874] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.980205][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=33 [ 655.980269][ T5808] usb 2-1: Product: syz [ 655.980321][ T5808] usb 2-1: Manufacturer: syz [ 655.980353][ T5808] usb 2-1: SerialNumber: syz [ 655.982671][T14074] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 656.008920][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.041279][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 656.073037][ T30] audit: type=1400 audit(1751015884.278:1342): avc: denied { read } for pid=14103 comm="syz.0.2323" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 656.082557][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 656.099369][T14104] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 656.115547][ T30] audit: type=1400 audit(1751015884.278:1343): avc: denied { open } for pid=14103 comm="syz.0.2323" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 656.131171][ T5874] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 656.139809][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.146169][ T30] audit: type=1400 audit(1751015884.358:1344): avc: denied { ioctl } for pid=14103 comm="syz.0.2323" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x3b86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 656.152919][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 656.157555][ T30] audit: type=1400 audit(1751015884.378:1345): avc: denied { mounton } for pid=14103 comm="syz.0.2323" path="/syzcgroup/unified/syz0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 656.187854][ T5874] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 656.231299][ T5874] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 656.242147][ T5874] usb 4-1: Manufacturer: syz [ 656.248298][ T5874] usb 4-1: config 0 descriptor?? [ 656.273043][ T5808] adutux 2-1:198.0: interrupt endpoints not found [ 656.283989][ T5808] usb 2-1: USB disconnect, device number 83 [ 656.771769][ T5922] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 656.785469][ T30] audit: type=1400 audit(1751015884.998:1346): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=33898 daddr=10.128.1.44 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 656.812320][ T5874] rc_core: IR keymap rc-hauppauge not found [ 656.818529][ T5874] Registered IR keymap rc-empty [ 656.823658][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.844016][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.864870][ T5874] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 656.877476][ T5874] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input46 [ 656.890663][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.903646][T14104] orangefs_mount: mount request failed with -4 [ 656.914208][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.945834][ T5922] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 656.954057][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.973105][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.984176][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 656.998371][ T5922] usb 3-1: Product: syz [ 657.002593][ T5922] usb 3-1: Manufacturer: syz [ 657.012737][ T5922] usb 3-1: SerialNumber: syz [ 657.020488][ T30] audit: type=1400 audit(1751015885.228:1347): avc: denied { kexec_image_load } for pid=14115 comm="syz.1.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 657.040751][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 657.054028][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 657.070736][ T5922] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 657.084150][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 657.106370][ T5921] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 657.144883][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 657.284003][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 657.345979][ C1] usb 3-1: ath9k_htc: invalid pkt_len (8008) [ 657.412207][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 657.439111][T14129] netlink: 'syz.1.2329': attribute type 33 has an invalid length. [ 657.480986][ T5874] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 657.600469][T14130] lo speed is unknown, defaulting to 1000 [ 657.947218][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2324'. [ 657.965908][ T5874] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 657.984315][ T5867] usb 3-1: USB disconnect, device number 65 [ 657.990461][ T30] audit: type=1400 audit(1751015886.188:1348): avc: denied { ioctl } for pid=14105 comm="syz.2.2324" path="socket:[46670]" dev="sockfs" ino=46670 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 658.032513][ T5874] usb 4-1: USB disconnect, device number 72 [ 658.074233][T13618] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 658.151935][T14130] lo speed is unknown, defaulting to 1000 [ 658.254125][T13618] usb 5-1: Using ep0 maxpacket: 16 [ 658.457886][ T5921] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 658.718737][ T5921] ath9k_htc: Failed to initialize the device [ 658.728393][ T5867] usb 3-1: ath9k_htc: USB layer deinitialized [ 658.807400][T13618] usb 5-1: config 7 has an invalid interface number: 247 but max is 0 [ 658.825772][T13618] usb 5-1: config 7 has no interface number 0 [ 658.866502][T13618] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 658.884736][T13618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.914111][T13618] usb 5-1: Product: syz [ 658.930456][T13618] usb 5-1: Manufacturer: syz [ 658.953697][T13618] usb 5-1: SerialNumber: syz [ 659.205601][T13618] comedi comedi0: Wrong number of endpoints [ 659.211542][T13618] ni6501 5-1:7.247: driver 'ni6501' failed to auto-configure device. [ 659.233801][T13618] usb 5-1: USB disconnect, device number 45 [ 659.498477][T14153] netlink: 'syz.3.2337': attribute type 33 has an invalid length. [ 659.956044][T14157] syz.2.2336: attempt to access beyond end of device [ 659.956044][T14157] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 659.969774][T14157] hfs: can't find a HFS filesystem on dev nbd2 [ 660.254093][ T5874] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 660.478807][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2338'. [ 660.779151][T14160] PM: Enabling pm_trace changes system date and time during resume. [ 660.779151][T14160] PM: Correct system time has to be restored manually after resume. [ 660.795649][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 660.818135][ T5874] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 660.833383][ T5874] usb 3-1: config 0 has no interface number 0 [ 660.853233][ T5874] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 660.893274][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.913299][T14163] xt_cluster: node mask cannot exceed total number of nodes [ 660.922456][ T5874] usb 3-1: Product: syz [ 660.934241][ T5874] usb 3-1: Manufacturer: syz [ 660.938869][ T5874] usb 3-1: SerialNumber: syz [ 660.972149][T14172] binder: 14164:14172 ioctl c04064a0 200000000700 returned -22 [ 661.051335][ T5874] usb 3-1: config 0 descriptor?? [ 661.059030][ T5874] smsc95xx v2.0.0 [ 661.156965][ T5921] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 661.521793][ T5874] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 661.533222][ T5874] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 661.694233][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 661.701409][ T5921] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 661.709576][ T5921] usb 4-1: config 0 has no interface number 0 [ 661.717913][ T5921] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 661.727804][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.735845][ T5921] usb 4-1: Product: syz [ 661.740061][ T5921] usb 4-1: Manufacturer: syz [ 661.744824][ T5921] usb 4-1: SerialNumber: syz [ 661.754984][ T5921] usb 4-1: config 0 descriptor?? [ 661.784580][ T5808] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 661.800987][T14177] overlayfs: overlapping lowerdir path [ 661.965608][ T5921] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 661.972311][ T5921] usb 4-1: No valid video chain found. [ 661.981191][ T5921] usb 4-1: USB disconnect, device number 73 [ 662.020607][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.031894][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.042639][ T5808] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 662.089627][ T5808] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 662.098929][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.115457][ T5808] usb 2-1: config 0 descriptor?? [ 662.381063][ T30] audit: type=1400 audit(1751015890.288:1349): avc: denied { mount } for pid=14176 comm="syz.4.2343" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 662.577421][ T5808] hid-u2fzero 0003:10C4:8ACF.001A: hidraw0: USB HID v9.9f Device [HID 10c4:8acf] on usb-dummy_hcd.1-1/input0 [ 662.590355][ T5808] hid-u2fzero 0003:10C4:8ACF.001A: U2F Zero LED initialised [ 662.598080][ T5808] hid-u2fzero 0003:10C4:8ACF.001A: U2F Zero RNG initialised [ 662.711061][ T30] audit: type=1400 audit(1751015890.918:1350): avc: denied { read } for pid=14183 comm="syz.4.2344" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 662.737677][ T30] audit: type=1400 audit(1751015890.918:1351): avc: denied { open } for pid=14183 comm="syz.4.2344" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 662.761504][ T30] audit: type=1400 audit(1751015890.918:1352): avc: denied { ioctl } for pid=14183 comm="syz.4.2344" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 662.793039][ T30] audit: type=1400 audit(1751015890.998:1353): avc: denied { append } for pid=14165 comm="syz.1.2340" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 662.817227][T14173] netlink: 'syz.1.2340': attribute type 2 has an invalid length. [ 662.887725][ T30] audit: type=1400 audit(1751015891.098:1354): avc: denied { read } for pid=14185 comm="syz.4.2345" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 662.888435][T14190] orangefs_devreq_open: device cannot be opened in blocking mode [ 662.912364][ T30] audit: type=1400 audit(1751015891.098:1355): avc: denied { open } for pid=14185 comm="syz.4.2345" path="/478/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 663.052913][ T30] audit: type=1400 audit(1751015891.258:1356): avc: denied { ioctl } for pid=14193 comm="syz.3.2348" path="mnt:[4026532810]" dev="nsfs" ino=4026532810 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 663.076710][T14192] syzkaller0: entered promiscuous mode [ 663.085000][T14192] syzkaller0: entered allmulticast mode [ 663.483899][ C1] hrtimer: interrupt took 31719 ns [ 663.903031][ T5874] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 663.938234][T14202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.950358][T13618] usb 2-1: USB disconnect, device number 84 [ 663.953786][T14202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.014119][ T5874] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 664.025490][ T5874] usb 3-1: USB disconnect, device number 66 [ 664.233771][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2352'. [ 664.851368][T14214] PM: Enabling pm_trace changes system date and time during resume. [ 664.851368][T14214] PM: Correct system time has to be restored manually after resume. [ 668.087354][T14242] netlink: 'syz.1.2360': attribute type 1 has an invalid length. [ 668.095507][T14242] netlink: 'syz.1.2360': attribute type 2 has an invalid length. [ 668.106246][T14242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2360'. [ 668.173633][T14243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2360'. [ 668.560638][T14233] : entered promiscuous mode [ 669.732161][T14252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2365'. [ 669.826653][T14256] PM: Enabling pm_trace changes system date and time during resume. [ 669.826653][T14256] PM: Correct system time has to be restored manually after resume. [ 670.658935][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2370'. [ 670.790579][T14273] PM: Enabling pm_trace changes system date and time during resume. [ 670.790579][T14273] PM: Correct system time has to be restored manually after resume. [ 671.182555][T14278] FAULT_INJECTION: forcing a failure. [ 671.182555][T14278] name failslab, interval 1, probability 0, space 0, times 0 [ 671.246718][T14278] CPU: 0 UID: 0 PID: 14278 Comm: syz.2.2372 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 671.246747][T14278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 671.246759][T14278] Call Trace: [ 671.246765][T14278] [ 671.246772][T14278] dump_stack_lvl+0x16c/0x1f0 [ 671.246803][T14278] should_fail_ex+0x512/0x640 [ 671.246826][T14278] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 671.246852][T14278] should_failslab+0xc2/0x120 [ 671.246878][T14278] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 671.246901][T14278] ? __alloc_skb+0x2b2/0x380 [ 671.246928][T14278] __alloc_skb+0x2b2/0x380 [ 671.246957][T14278] ? __pfx___alloc_skb+0x10/0x10 [ 671.246982][T14278] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 671.247018][T14278] netlink_alloc_large_skb+0x69/0x130 [ 671.247037][T14278] netlink_sendmsg+0x6a1/0xdd0 [ 671.247060][T14278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.247087][T14278] ____sys_sendmsg+0xa98/0xc70 [ 671.247107][T14278] ? copy_msghdr_from_user+0x10a/0x160 [ 671.247134][T14278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 671.247164][T14278] ___sys_sendmsg+0x134/0x1d0 [ 671.247190][T14278] ? __pfx____sys_sendmsg+0x10/0x10 [ 671.247212][T14278] ? __lock_acquire+0x622/0x1c90 [ 671.247272][T14278] __sys_sendmsg+0x16d/0x220 [ 671.247296][T14278] ? __pfx___sys_sendmsg+0x10/0x10 [ 671.247336][T14278] do_syscall_64+0xcd/0x4c0 [ 671.247364][T14278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.247382][T14278] RIP: 0033:0x7f1e9f18e929 [ 671.247397][T14278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.247415][T14278] RSP: 002b:00007f1e9ffcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.247433][T14278] RAX: ffffffffffffffda RBX: 00007f1e9f3b5fa0 RCX: 00007f1e9f18e929 [ 671.247446][T14278] RDX: 0000000000000804 RSI: 0000200000000240 RDI: 0000000000000005 [ 671.247457][T14278] RBP: 00007f1e9ffcb090 R08: 0000000000000000 R09: 0000000000000000 [ 671.247467][T14278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.247478][T14278] R13: 0000000000000000 R14: 00007f1e9f3b5fa0 R15: 00007ffc52404298 [ 671.247502][T14278] [ 671.613980][ T30] audit: type=1400 audit(1751015899.818:1357): avc: denied { map } for pid=14281 comm="syz.3.2374" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 671.645329][ T30] audit: type=1400 audit(1751015899.818:1358): avc: denied { execute } for pid=14281 comm="syz.3.2374" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 671.938207][T14295] netlink: 'syz.2.2377': attribute type 33 has an invalid length. [ 672.284628][ T5808] hid-generic 0101:0007:0003.001B: collection stack underflow [ 672.351833][ T5808] hid-generic 0101:0007:0003.001B: item 0 0 0 12 parsing failed [ 672.472395][ T5808] hid-generic 0101:0007:0003.001B: probe with driver hid-generic failed with error -22 [ 672.898074][ T30] audit: type=1400 audit(1751015901.108:1359): avc: denied { connect } for pid=14299 comm="syz.1.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 673.259404][T14314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 673.835048][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 674.345336][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 674.507840][ T9] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 674.518290][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.898819][ T9] usb 2-1: Product: syz [ 674.903032][ T9] usb 2-1: Manufacturer: syz [ 674.907927][ T9] usb 2-1: SerialNumber: syz [ 674.924801][ T9] usb 2-1: config 0 descriptor?? [ 674.980997][ T9] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 085 [ 675.002237][T14330] tipc: Started in network mode [ 675.018422][T14330] tipc: Node identity 00000000000000008, cluster identity 5 [ 677.035225][ T9] (null): failure setting delay to 10us [ 677.091988][ T9] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 677.540078][T14341] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2580 sclass=netlink_xfrm_socket pid=14341 comm=syz.3.2395 [ 677.549019][ T5921] usb 2-1: USB disconnect, device number 85 [ 678.291130][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2404'. [ 678.300777][T14362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2404'. [ 678.436341][T14364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2404'. [ 678.797182][ T5921] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 678.842275][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 678.853133][ T5810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 678.863141][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 678.875281][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 678.882903][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 678.920982][T14366] lo speed is unknown, defaulting to 1000 [ 678.983716][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 679.074827][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.108137][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.125270][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 679.140175][ T5921] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 679.151395][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.163510][T14377] syz.1.2408 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 679.190274][ T5921] usb 5-1: config 0 descriptor?? [ 680.251753][ T5921] hid-multitouch 0003:0457:07DA.001C: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 680.291724][T14366] lo speed is unknown, defaulting to 1000 [ 680.630145][T14412] FAULT_INJECTION: forcing a failure. [ 680.630145][T14412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.643658][T14412] CPU: 0 UID: 0 PID: 14412 Comm: syz.1.2416 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 680.643683][T14412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 680.643691][T14412] Call Trace: [ 680.643696][T14412] [ 680.643700][T14412] dump_stack_lvl+0x16c/0x1f0 [ 680.643719][T14412] should_fail_ex+0x512/0x640 [ 680.643736][T14412] _copy_from_user+0x2e/0xd0 [ 680.643752][T14412] move_addr_to_kernel+0x65/0x170 [ 680.643765][T14412] __copy_msghdr+0x386/0x470 [ 680.643780][T14412] copy_msghdr_from_user+0xc1/0x160 [ 680.643795][T14412] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 680.643817][T14412] ___sys_sendmsg+0xfe/0x1d0 [ 680.643832][T14412] ? __pfx____sys_sendmsg+0x10/0x10 [ 680.643846][T14412] ? __lock_acquire+0x622/0x1c90 [ 680.643900][T14412] __sys_sendmsg+0x16d/0x220 [ 680.643923][T14412] ? __pfx___sys_sendmsg+0x10/0x10 [ 680.643961][T14412] do_syscall_64+0xcd/0x4c0 [ 680.643986][T14412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.644003][T14412] RIP: 0033:0x7fc9d3d8e929 [ 680.644017][T14412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 680.644034][T14412] RSP: 002b:00007fc9d4c80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.644050][T14412] RAX: ffffffffffffffda RBX: 00007fc9d3fb6080 RCX: 00007fc9d3d8e929 [ 680.644061][T14412] RDX: 00000000000000ee RSI: 00002000000001c0 RDI: 0000000000000004 [ 680.644072][T14412] RBP: 00007fc9d4c80090 R08: 0000000000000000 R09: 0000000000000000 [ 680.644083][T14412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.644092][T14412] R13: 0000000000000000 R14: 00007fc9d3fb6080 R15: 00007fffdf1b5f78 [ 680.644113][T14412] [ 680.816425][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.075439][ T5810] Bluetooth: hci3: command tx timeout [ 681.136102][ T5922] usb 5-1: USB disconnect, device number 46 [ 681.189525][T14366] chnl_net:caif_netlink_parms(): no params data found [ 681.314156][ T9] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 681.380701][T14366] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.388543][T14366] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.396779][T14366] bridge_slave_0: entered allmulticast mode [ 681.403526][T14366] bridge_slave_0: entered promiscuous mode [ 681.410956][T14366] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.418557][T14366] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.426026][T14366] bridge_slave_1: entered allmulticast mode [ 681.429790][T14424] random: crng reseeded on system resumption [ 681.433189][T14366] bridge_slave_1: entered promiscuous mode [ 681.466100][ T30] audit: type=1400 audit(1751015909.678:1360): avc: denied { ioctl } for pid=14422 comm="syz.2.2418" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 681.491040][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.500197][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 681.509186][T14366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.520874][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 681.530057][T14366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.540036][ T9] usb 4-1: config 8 has an invalid interface number: 132 but max is 0 [ 681.554355][ T9] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 681.564718][ T9] usb 4-1: config 8 has no interface number 0 [ 681.570898][ T9] usb 4-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 681.584485][ T9] usb 4-1: config 8 interface 132 has no altsetting 0 [ 681.593503][ T9] usb 4-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 681.599162][T14366] team0: Port device team_slave_0 added [ 681.602818][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.617117][ T9] usb 4-1: Product: syz [ 681.621312][ T9] usb 4-1: Manufacturer: syz [ 681.621940][T14366] team0: Port device team_slave_1 added [ 681.626032][ T9] usb 4-1: SerialNumber: syz [ 681.658335][T14366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.675050][T14366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.708191][T14366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.720974][T14366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.731419][T14366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.735623][T14426] FAULT_INJECTION: forcing a failure. [ 681.735623][T14426] name failslab, interval 1, probability 0, space 0, times 0 [ 681.761758][T14366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.771405][T14426] CPU: 0 UID: 0 PID: 14426 Comm: syz.4.2419 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 681.771429][T14426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 681.771442][T14426] Call Trace: [ 681.771448][T14426] [ 681.771454][T14426] dump_stack_lvl+0x16c/0x1f0 [ 681.771482][T14426] should_fail_ex+0x512/0x640 [ 681.771501][T14426] ? fs_reclaim_acquire+0xae/0x150 [ 681.771519][T14426] ? tomoyo_encode2+0x100/0x3e0 [ 681.771539][T14426] should_failslab+0xc2/0x120 [ 681.771561][T14426] __kmalloc_noprof+0xd2/0x510 [ 681.771583][T14426] ? tomoyo_encode2+0x9c/0x3e0 [ 681.771604][T14426] tomoyo_encode2+0x100/0x3e0 [ 681.771628][T14426] tomoyo_encode+0x29/0x50 [ 681.771647][T14426] tomoyo_realpath_from_path+0x18f/0x6e0 [ 681.771674][T14426] tomoyo_path_number_perm+0x245/0x580 [ 681.771691][T14426] ? tomoyo_path_number_perm+0x237/0x580 [ 681.771711][T14426] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 681.771730][T14426] ? find_held_lock+0x2b/0x80 [ 681.771770][T14426] ? find_held_lock+0x2b/0x80 [ 681.771788][T14426] ? hook_file_ioctl_common+0x145/0x410 [ 681.771817][T14426] ? __fget_files+0x20e/0x3c0 [ 681.771847][T14426] security_file_ioctl+0x9b/0x240 [ 681.771869][T14426] __x64_sys_ioctl+0xb7/0x210 [ 681.771888][T14426] do_syscall_64+0xcd/0x4c0 [ 681.771912][T14426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.771928][T14426] RIP: 0033:0x7f5922d8e929 [ 681.771941][T14426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.771956][T14426] RSP: 002b:00007f5923b8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 681.771972][T14426] RAX: ffffffffffffffda RBX: 00007f5922fb5fa0 RCX: 00007f5922d8e929 [ 681.771982][T14426] RDX: 0000200000000200 RSI: 0000000000004605 RDI: 0000000000000003 [ 681.771991][T14426] RBP: 00007f5923b8e090 R08: 0000000000000000 R09: 0000000000000000 [ 681.772001][T14426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.772010][T14426] R13: 0000000000000000 R14: 00007f5922fb5fa0 R15: 00007fffe39174e8 [ 681.772032][T14426] [ 681.772155][T14426] ERROR: Out of memory at tomoyo_realpath_from_path. [ 682.048723][T14366] hsr_slave_0: entered promiscuous mode [ 682.056393][T14366] hsr_slave_1: entered promiscuous mode [ 682.062374][T14366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 682.070255][T14366] Cannot create hsr debugfs directory [ 682.280456][T14432] netlink: 'syz.2.2422': attribute type 33 has an invalid length. [ 682.288576][ T5922] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 682.375494][ T30] audit: type=1804 audit(1751015910.568:1361): pid=14433 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2422" name="/newroot/477/file0" dev="tmpfs" ino=2570 res=1 errno=0 [ 682.464559][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 682.503536][ T5922] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 682.532042][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.562802][ T5922] usb 5-1: Product: syz [ 682.572712][ T5922] usb 5-1: Manufacturer: syz [ 682.591458][ T5922] usb 5-1: SerialNumber: syz [ 682.629468][ T5922] usb 5-1: config 0 descriptor?? [ 682.658956][ T5922] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 682.697188][ T5922] usb 5-1: Detected FT232H [ 683.063741][ T5922] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 683.086069][ T5922] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 683.118323][ T5810] Bluetooth: hci3: command tx timeout [ 683.128079][ T5922] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 683.186332][ T5922] usb 5-1: USB disconnect, device number 47 [ 683.196513][ T5922] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 683.212445][ T5922] ftdi_sio 5-1:0.0: device disconnected [ 683.234258][T14398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 683.263804][T14366] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 683.287238][T14366] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 683.312220][T14366] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 683.325798][T14366] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 683.717191][ T9] usb-storage 4-1:8.132: USB Mass Storage device detected [ 683.785467][ T9] usb-storage 4-1:8.132: Quirks match for vid 07cf pid 1001: a [ 683.829274][T14453] FAULT_INJECTION: forcing a failure. [ 683.829274][T14453] name failslab, interval 1, probability 0, space 0, times 0 [ 683.874722][T14366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.881717][T14453] CPU: 1 UID: 0 PID: 14453 Comm: syz.4.2427 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 683.881744][T14453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 683.881754][T14453] Call Trace: [ 683.881760][T14453] [ 683.881767][T14453] dump_stack_lvl+0x16c/0x1f0 [ 683.881797][T14453] should_fail_ex+0x512/0x640 [ 683.881819][T14453] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 683.881844][T14453] should_failslab+0xc2/0x120 [ 683.881868][T14453] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 683.881891][T14453] ? __alloc_skb+0x2b2/0x380 [ 683.881917][T14453] __alloc_skb+0x2b2/0x380 [ 683.881940][T14453] ? __pfx___alloc_skb+0x10/0x10 [ 683.881965][T14453] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 683.881998][T14453] netlink_alloc_large_skb+0x69/0x130 [ 683.882018][T14453] netlink_sendmsg+0x6a1/0xdd0 [ 683.882039][T14453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.882066][T14453] ____sys_sendmsg+0xa98/0xc70 [ 683.882085][T14453] ? copy_msghdr_from_user+0x10a/0x160 [ 683.882108][T14453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 683.882138][T14453] ___sys_sendmsg+0x134/0x1d0 [ 683.882163][T14453] ? __pfx____sys_sendmsg+0x10/0x10 [ 683.882185][T14453] ? __lock_acquire+0x622/0x1c90 [ 683.882242][T14453] __sys_sendmsg+0x16d/0x220 [ 683.882268][T14453] ? __pfx___sys_sendmsg+0x10/0x10 [ 683.882306][T14453] do_syscall_64+0xcd/0x4c0 [ 683.882333][T14453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.882352][T14453] RIP: 0033:0x7f5922d8e929 [ 683.882367][T14453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.882383][T14453] RSP: 002b:00007f5923b8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 683.882401][T14453] RAX: ffffffffffffffda RBX: 00007f5922fb5fa0 RCX: 00007f5922d8e929 [ 683.882413][T14453] RDX: 0000000000040800 RSI: 0000200000000180 RDI: 0000000000000003 [ 683.882424][T14453] RBP: 00007f5923b8e090 R08: 0000000000000000 R09: 0000000000000000 [ 683.882435][T14453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.882445][T14453] R13: 0000000000000000 R14: 00007f5922fb5fa0 R15: 00007fffe39174e8 [ 683.882469][T14453] [ 683.885658][ T9] usb 4-1: USB disconnect, device number 74 [ 684.101968][T14366] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.444157][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.451295][ T7552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.545501][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.552643][ T7552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.648477][T14468] random: crng reseeded on system resumption [ 685.242225][ T5810] Bluetooth: hci3: command tx timeout [ 685.372116][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.754226][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2435'. [ 685.767534][T14484] netlink: 'syz.2.2435': attribute type 5 has an invalid length. [ 685.797134][T14484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2435'. [ 685.879899][T14366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.954627][ T5922] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 685.964711][T14484] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 685.973605][T14484] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 685.982511][T14484] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 685.991329][T14484] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 686.000434][T14484] geneve0: entered promiscuous mode [ 686.138958][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.477802][T14484] geneve0: entered allmulticast mode [ 686.497501][ T5922] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 686.507085][ T5922] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 686.520483][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.531284][ T5922] usb 4-1: config 0 descriptor?? [ 686.604217][ T5874] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 686.691194][T14366] veth0_vlan: entered promiscuous mode [ 686.698900][T14503] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 686.704004][T14366] veth1_vlan: entered promiscuous mode [ 686.723558][T14503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=14503 comm=syz.4.2438 [ 686.737677][T14366] veth0_macvtap: entered promiscuous mode [ 686.759579][T14366] veth1_macvtap: entered promiscuous mode [ 686.782327][T14366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.801943][T14366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.818874][T14366] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.829144][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 686.836128][T14366] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.845191][T14366] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.855125][T14366] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.867681][ T5874] usb 3-1: config 0 has an invalid interface number: 153 but max is 1 [ 686.885747][ T5874] usb 3-1: config 0 has no interface number 0 [ 686.897505][ T5874] usb 3-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=28.3e [ 686.910680][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.929403][ T5808] usb 4-1: USB disconnect, device number 75 [ 686.934297][ T5874] usb 3-1: config 0 descriptor?? [ 686.955251][T14505] lo speed is unknown, defaulting to 1000 [ 687.047603][ T7544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.064671][T14508] netlink: 'syz.4.2439': attribute type 10 has an invalid length. [ 687.069353][ T7544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.123801][T14508] .: (slave wlan1): Enslaving as an active interface with an up link [ 687.179183][ T964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.206859][ T964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.274647][ T5810] Bluetooth: hci3: command tx timeout [ 687.559287][T14505] lo speed is unknown, defaulting to 1000 [ 689.422542][ T5922] usb 3-1: USB disconnect, device number 67 [ 689.593755][T14536] mkiss: ax0: crc mode is auto. [ 689.894273][ T5922] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 690.324082][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 690.355546][ T5922] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 690.531722][ T5922] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 691.071079][ T5922] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 691.123692][ T5922] usb 5-1: config 1 interface 0 has no altsetting 0 [ 691.197925][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056fc2800: rx timeout, send abort [ 691.229686][ T5922] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 691.331246][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.378968][ T5922] usb 5-1: Product: syz [ 691.383189][ T5922] usb 5-1: Manufacturer: syz [ 691.413545][ T30] audit: type=1804 audit(1751015919.608:1362): pid=14557 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.2454" name="/newroot/484/file1" dev="fuse" ino=1 res=1 errno=0 [ 691.445506][ T5922] usb 5-1: SerialNumber: syz [ 691.504215][ T30] audit: type=1800 audit(1751015919.608:1363): pid=14557 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2454" name="/" dev="fuse" ino=1 res=0 errno=0 [ 691.564022][ T30] audit: type=1800 audit(1751015919.658:1364): pid=14555 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2454" name="/" dev="fuse" ino=1 res=0 errno=0 [ 691.706217][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056fc2800: abort rx timeout. Force session deactivation [ 692.111390][ T5922] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 692.973990][ T5821] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 693.070025][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2460'. [ 693.165190][ T5821] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 693.184302][ T5821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.224974][ T5821] usb 2-1: config 0 has no interface number 0 [ 693.246584][ T5821] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 693.261921][ T5821] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 6779, setting to 64 [ 693.275606][ T5821] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 693.289462][ T5821] usb 2-1: config 0 interface 52 has no altsetting 0 [ 693.344371][ T5821] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 693.373920][ T5821] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 693.399484][ T5821] usb 2-1: Product: syz [ 693.409903][ T5821] usb 2-1: Manufacturer: syz [ 693.420270][ T5821] usb 2-1: SerialNumber: syz [ 693.430873][ T5821] usb 2-1: config 0 descriptor?? [ 693.437635][T14588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2464'. [ 693.507181][T14588] PM: Enabling pm_trace changes system date and time during resume. [ 693.507181][T14588] PM: Correct system time has to be restored manually after resume. [ 693.589263][T14592] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 693.670419][ T5821] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input47 [ 694.448380][ T5922] usb 5-1: USB disconnect, device number 48 [ 695.131069][ T5922] usblp0: removed [ 695.364696][ T5810] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 695.373967][ T5810] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 695.659458][T14621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2476'. [ 695.690526][T14621] PM: Enabling pm_trace changes system date and time during resume. [ 695.690526][T14621] PM: Correct system time has to be restored manually after resume. [ 696.004364][ T5921] usb 2-1: USB disconnect, device number 86 [ 696.004504][ C0] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 696.551085][T14635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2481'. [ 696.577979][ T30] audit: type=1400 audit(1751015924.788:1365): avc: denied { mount } for pid=14632 comm="syz.1.2479" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 696.641281][ T30] audit: type=1400 audit(1751015924.818:1366): avc: denied { associate } for pid=14633 comm="syz.4.2481" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 696.728855][ T30] audit: type=1400 audit(1751015924.918:1367): avc: denied { unmount } for pid=13474 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 696.851989][T14642] openvswitch: netlink: IPv4 tunnel dst address is zero [ 697.510583][T14650] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe03a: 0000 [#1] SMP KASAN NOPTI [ 697.522688][T14650] KASAN: probably user-memory-access in range [0x00000000ffff01d0-0x00000000ffff01d7] [ 697.532215][T14650] CPU: 1 UID: 0 PID: 14650 Comm: syz.1.2485 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 697.544263][T14650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 697.554300][T14650] RIP: 0010:____ip_mc_inc_group+0x128/0x10f0 [ 697.560267][T14650] Code: 1e 98 bb f7 8b 44 24 08 85 c0 0f 85 cd 01 00 00 e8 cd 9c bb f7 4a 8d 1c eb 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 3b 0e 00 00 48 8b 1b 48 85 db 0f 84 38 02 00 00 [ 697.579864][T14650] RSP: 0018:ffffc900030b7ad8 EFLAGS: 00010206 [ 697.585916][T14650] RAX: dffffc0000000000 RBX: 00000000ffff01d0 RCX: ffffffff8a008582 [ 697.593872][T14650] RDX: 000000001fffe03a RSI: ffffffff8a0083a3 RDI: 0000000000000001 [ 697.601830][T14650] RBP: ffff88805d673400 R08: 0000000000000001 R09: 0000000000000000 [ 697.609798][T14650] R10: 0000000000000001 R11: ffffffff8222c814 R12: 00000000020000e0 [ 697.617757][T14650] R13: 000000000000003a R14: 1ffff92000616f5f R15: 00000000fffffff2 [ 697.625724][T14650] FS: 00007fc9d4ca16c0(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 [ 697.634660][T14650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 697.641243][T14650] CR2: 0000200000000180 CR3: 000000004c9da000 CR4: 00000000003526f0 [ 697.649202][T14650] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 697.657155][T14650] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 697.665110][T14650] Call Trace: [ 697.668374][T14650] [ 697.671305][T14650] ? __pfx_____ip_mc_inc_group+0x10/0x10 [ 697.676933][T14650] __ip_mc_join_group+0x451/0x600 [ 697.681945][T14650] do_ip_setsockopt+0x2e65/0x3240 [ 697.686957][T14650] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 697.692327][T14650] ? __pfx_sock_has_perm+0x10/0x10 [ 697.697425][T14650] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 697.703833][T14650] ip_setsockopt+0x59/0xf0 [ 697.708241][T14650] tcp_setsockopt+0xa4/0x100 [ 697.712819][T14650] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 697.718721][T14650] do_sock_setsockopt+0x224/0x470 [ 697.723737][T14650] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 697.729280][T14650] __sys_setsockopt+0x1a0/0x230 [ 697.734119][T14650] __x64_sys_setsockopt+0xbd/0x160 [ 697.739219][T14650] ? do_syscall_64+0x91/0x4c0 [ 697.743885][T14650] ? lockdep_hardirqs_on+0x7c/0x110 [ 697.749069][T14650] do_syscall_64+0xcd/0x4c0 [ 697.753564][T14650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.759440][T14650] RIP: 0033:0x7fc9d3d8e929 [ 697.763837][T14650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.783432][T14650] RSP: 002b:00007fc9d4ca1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 697.791826][T14650] RAX: ffffffffffffffda RBX: 00007fc9d3fb5fa0 RCX: 00007fc9d3d8e929 [ 697.799782][T14650] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000003 [ 697.807737][T14650] RBP: 00007fc9d3e10b39 R08: 000000000000000c R09: 0000000000000000 [ 697.815694][T14650] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 697.823647][T14650] R13: 0000000000000000 R14: 00007fc9d3fb5fa0 R15: 00007fffdf1b5f78 [ 697.831608][T14650] [ 697.834610][T14650] Modules linked in: [ 697.838585][ C1] vkms_vblank_simulate: vblank timer overrun [ 697.846379][T14650] ---[ end trace 0000000000000000 ]--- [ 697.909236][T14650] RIP: 0010:____ip_mc_inc_group+0x128/0x10f0 [ 697.915288][T14650] Code: 1e 98 bb f7 8b 44 24 08 85 c0 0f 85 cd 01 00 00 e8 cd 9c bb f7 4a 8d 1c eb 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 3b 0e 00 00 48 8b 1b 48 85 db 0f 84 38 02 00 00 [ 697.934900][ C1] vkms_vblank_simulate: vblank timer overrun [ 697.983930][T14650] RSP: 0018:ffffc900030b7ad8 EFLAGS: 00010206 [ 697.990048][T14650] RAX: dffffc0000000000 RBX: 00000000ffff01d0 RCX: ffffffff8a008582 [ 698.009232][T14650] RDX: 000000001fffe03a RSI: ffffffff8a0083a3 RDI: 0000000000000001 [ 698.019984][T14650] RBP: ffff88805d673400 R08: 0000000000000001 R09: 0000000000000000 [ 698.029629][T14650] R10: 0000000000000001 R11: ffffffff8222c814 R12: 00000000020000e0 [ 698.040343][T14650] R13: 000000000000003a R14: 1ffff92000616f5f R15: 00000000fffffff2 [ 698.050609][T14650] FS: 00007fc9d4ca16c0(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 [ 698.060019][T14650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 698.068141][T14650] CR2: 00007f8d87380ab8 CR3: 000000004c9da000 CR4: 00000000003526f0 [ 698.076287][T14650] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 698.086567][T14650] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 698.094637][T14650] Kernel panic - not syncing: Fatal exception [ 698.100911][T14650] Kernel Offset: disabled [ 698.105217][T14650] Rebooting in 86400 seconds..