last executing test programs: 14.030487989s ago: executing program 4 (id=573): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = epoll_create1(0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000140), 0x5b89, 0x103000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) 10.790802691s ago: executing program 4 (id=582): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x14, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x100000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086412, &(0x7f0000000040)) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) munlockall() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f00000000c0)=[@acquire_done={0x40106309, 0x1}, @dead_binder_done], 0x86, 0x0, &(0x7f0000000300)="23441348b83043b334186bb3a25986b97eacff6f6d79e6d54ead36aa4a777248f281687c45fc698930bf0f313eb8c7de762a05b3401830ca6df36bc339f44878700fd9a48ffb8e9ca63d7f61a128a4c5c8a7983df5e21e96a2b4ae56a6b7c612efade194c0ea07cac3452d581aeff87f72c09396033f446ec8c2356940c0a612cb5825df935a"}) 8.079632273s ago: executing program 1 (id=592): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = epoll_create1(0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000140), 0x5b89, 0x103000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) 8.015278554s ago: executing program 4 (id=593): eventfd2(0x0, 0x800) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000, 0x2000000}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd, 0x0, {}, 0xf0000, 0x8, 0x0, {0x0, r3}}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, {0x0, r3}}) socket$kcm(0xa, 0x3, 0x87) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000130726bd70000000000000000000000000000000ffffe0000002ac14141b0000000000000000000000004e23000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac1414330000000000000000000000000000000000000000000000000000000008000000000000000a00000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fcffffffffffffff0c00008742f99b000200000028bd7000000000000a0004cb00000000"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1000, 0x20, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000140)='./file0\x00', 0xee00, r6) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) (fail_nth: 2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 5.354158521s ago: executing program 3 (id=604): r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001480)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001600)=ANY=[@ANYBLOB="0100000000002000000000ff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000300200000400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1bc, 0x0, 0x11, 0x148, 0x11, 0x0, 0x184, 0x2a8, 0x2a8, 0x90, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @rand_addr=0x64010100, 0xff, 0xff000000, 'veth1_to_bond\x00', 'wlan0\x00', {}, {}, 0x88, 0x2}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0xe}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x218) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaac6eb8947e4e4080045000070006736e9e331451e8fd29084ea00004001907864010100ac1414aa0bba907803000000b88f04c7fc4425770990adfa450000000000000000890000000000000a010100862a00000003060d5e0000006ed00000000b5d0019b66053001296e9ef265861db849800000000000000831300ac14140100000000"], 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty, 0x1000002}, 0x1c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001280)={0x0, 0x94, "49408d288d380103bcdfb7fb387712929ec9291a88c55b9449da6ca875b0fab66b0a3224697bbf4d5501e5000fcf2851629069e070351c99dad6cf60167e3431f1fa363db441df26658fcd94e5872fc0d9a5793976ba9483f9acf79a719fa48aeb2988332a4eabd68f192b9a660bbc9b92f9baca21a64a80e0a02605173ad5799852ba017a46099a8d2dd8a0b4eed7b32fb2e364"}, &(0x7f0000001340)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001400)={r6, 0x48, &(0x7f0000001380)=[@in6={0xa, 0x4e21, 0xfff, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x77e}, @in6={0xa, 0x4e24, 0x81, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x8000}, @in={0x2, 0x4e22, @local}]}, &(0x7f0000001440)=0xc) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c00)={'ip6_vti0\x00', &(0x7f0000000b80)={'syztnl0\x00', r2, 0x29, 0x0, 0x5, 0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x3}, @local, 0x7, 0x20, 0x6, 0x5fa7}}) sendmmsg$inet(r5, &(0x7f0000001200)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000480)="bc22a54df8bb8fcb57d9047b63a21a50b9540988104b342ce6d812aa402eec61b08addcd1322af476492f930a8252079a48c6a6b1cf510ec109c4f172b1bb100f1459805cd77b095d215f0bc50bab8e9c91907b1bebfc3b2ea00477e0e81d41bb60b37c3067f52d9c62f66e5716601f0b319a7dfb23e7a4c9441cf", 0x7b}, {&(0x7f0000000600)="0d888011696df0cd6c81d47e4f0e18d7d1897e9d6799f38a6440749491c7f7f276b0250333b19259b70c637f2a5978770456c8a6d3848bac42a1af835fe2c209500842990886241ae7760937db2e0c42f1fbabf311942bda2a525067f847818b768aa21795d0", 0x66}], 0x2, &(0x7f0000000680)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r2, @loopback, @local}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r2, @rand_addr=0x64010100, @multicast2}}}, @ip_ttl={{0x10, 0x0, 0x2, 0xfffffffc}}, @ip_ttl={{0x10, 0x0, 0x2, 0x30f3}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x2}}], 0x78}}, {{&(0x7f0000000380)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000700)="6906defecc1e243220ab5194407daa3b4ca13e0cc6969acb4efa9744f2985cfa4909df852dc2d52bc66b15f14fa2dc34c01501bab4947a3a4e2c373f158a972357bd2724146310b7ab70e8f99a5d4cb607e153904adce65d83c194116172666d64837e8a4bd742863fde23e73a732f5b0d4b4e5e07f2a4e96f3a7ecd5974a88bdc15ec4dd0de3f9ec255f1c14ca067a77fe8a3c39a243e4223ff211b1169a9129409697f41becf6ef1832c924233458ced4ee871eea2c790a3a3d53ba1e29fd4464d729ee3dc9d946cabaf270633b6dc0e0ef3e5122cb178aac35caf27e7d8ba8369c66f23", 0xe5}, {&(0x7f0000000800)="aa12e541c098dd5df5a0db355a38a01ec2c49ea45ac92a21f236409a79fd919bc7ffca5743d01f1e2dec87cdb7d31800009b8694c5fdcdd96215898fb84152bc719bf3", 0x43}, {&(0x7f0000000880)="f035fec46d82a07d7b29354f7b60267b89b4466a552fa6164505171b405aee5cee291c88654c458d079c22168cdd09876de8061f0c6e414ace2bf5888f0cc2f7457b5d20d4384334a05c8df09ce2abec5d30a38b5acf3223a9b0203340fd20333bd8f2c286524fc0915945a108303b9835a97722610ad123a550ab90f0ef88923e2862a3224051ca3d6dd58b76b7f782a8da1db546dae89fc7cac355352ff2ae451fff9fc5e9a23aa44367f0365b69a7e33a3bf1d0fd351b6f4a8031e876", 0xbe}, {&(0x7f0000000940)="0f96b27609611f8288543f3ebf6c12e944553c2166ace5dbb7b492603550f999b23d28585f25be13662c817db8b77ab56222221cc28b9886f5570a39d272c7f133d7d5f43aadf15bb8a7be6da0b1a015c2245df5deecd55c0f82ba1a72f9c2830ebe898a021e3d2521e076441d95cf415830fb87316b69bf274774abcd5ab4c2ba8a442cd305db151c268ccd81a41ef18e853da501fb186066c8a3e2ec8587211d45a5460e64ad5df7dd58725587b756929519e69ab55f783dc92e9ba28d884f3d8acab2abe7b880281140a25162eeffa2ace02d6d1793517c4bf872b12a27deb5256c134ecc8c88370441228fa39b3a22", 0xf1}, {&(0x7f0000000a40)="95c7e2d8669959b283fbd14e6222dfb56a22745e924aa24cf9e041b08519ff32b8c7318d730b81d280f3b19fd6933dae100873757f5a8acd0118f0cedfffafc63b3bc2527f12dba884eb6e57c47016082fee3d1131b9b3ba61ba4b81749d9e451811413406ca8dff2e398ffd0a63ff934f178cf41fd3205f743c23e37544fe230400b0d8ec21abcd87eeb4ee6f44b7c93e05846ac0c2ce0971ca288d25d014d4e415579886b719dfa0409453f053f2bf467f774195b5440308680e3b67889bd5ed24a9b275131db260b276e1721bfb662b28bcfb9b54560ca529fb71555c9739f3f6b5e475b1a04c6549a7695d", 0xed}, {&(0x7f0000000400)="70a2b7f0df6de8db1d9e885781417f3c4571763ca86a443e42", 0x19}], 0x6, &(0x7f0000000c40)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r2, @multicast2, @private=0xa010100}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@cipso={0x86, 0x25, 0x0, [{0x0, 0xc, "293c408383049e62fe82"}, {0x5, 0xa, "d91896afcf3d38d4"}, {0x6, 0x9, "7fc5986975e006"}]}, @lsrr={0x83, 0x13, 0x5c, [@empty, @remote, @multicast1, @multicast2]}, @noop, @timestamp_addr={0x44, 0xc, 0xe0, 0x1, 0x9, [{@multicast2, 0x7}]}, @timestamp={0x44, 0xc, 0x9e, 0x0, 0x3, [0x9, 0xf]}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r2, @broadcast, @local}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x10000}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r7, @broadcast, @empty}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xb4, [@dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @rand_addr=0x64010100, @private=0xa010101]}, @generic={0x43, 0x4, "4317"}, @timestamp={0x44, 0x8, 0x3e, 0x0, 0x2, [0x2]}]}}}], 0xe4}}, {{&(0x7f0000000d40)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000d80)="4279f71f5d5cea", 0x7}, {&(0x7f0000000dc0)="6c5a604b4d46a01323cb32e37b31cb726bab35b2a8f0d234af9b0a93b031751759cc6ed8c407d50a1889401de0f86790f5956db3aa729e337f356ea03cb6d6d064d8990b159429e117234ff3596787269a906891e8bc3375855e5bc7b930f80340dd60c30a77dacd4553f2203e60bb77e098e83810fa59e4af44f321af6161f814179fa30336ed3ebadf28fc1e6313c936e13256ffa7a6121971ee8fe611850f6f6c809667918823e11f6386d82a89e259ae008bca98d3fd8659", 0xba}, {&(0x7f0000000e80)="272e39fc74b24aa6458137b33e4c3cdb8b8d04acf67db19769eb5b58496d12e8c0c99dca2b26862383a276972bd59b2ee982960dc74c1007b4efd3378fd2ea4864923066e4985b60e07286b839e13ccf1664fef9a9b0b9876b4f419d12e7625e41b64f5cf239fc76b2130dc6842728fdc45bb157dc4f737727065842e18ddca99e8441a88c443df1e3462eed40e5ccb00b369c69ce4e7912cf05711729501e9cec1dc73ad8dbc5197a1fd5a0d75e0722d1570daae814f48d93bde41bb19415f590a740dd20cedb7cb9ac8d3a5fb2caf8d0fffe565ddab3ba08a48ca13fe2cc13", 0xe0}, {&(0x7f0000000f80)="428bb8bdd1c072a3b394a9a9eb4c0d4b5ff042f1a6a7d7addd7160b8de5078d2b305cadc118de8a3b48424298bda1741d7f09ffb163931d971fb6e400bedf82f317e8a6595db79eb7ec0a25ac7e35a520808fa31572d85209989af10d21d84eb1821504e2ec0363fa897349190e58b1abe07d868", 0x74}, {&(0x7f0000001000)="4f217e34f9aed95c2f54ee457e508cb8f385b48852d064d2ed7f2d3147ed4dfdd999ba49b3e813b8b15baff324f56183788ca4d26f2e5ac823688db07c44335c3d4d4a9ccf4df4c5a3f7c9199bc0b2e3283d4a0dcb4f675f89736f8a84b5ebafce71aa6a0f3997e8b0d919c1d9fc639dd56e5bce740e5c219dd54ad3784d1bed2cc2a900ef80cfa164d6ef69ef48e3e9bbb0f0333b349a559105ab1ca17a0436f8020f5b63dae44f4d28bfb44c6881741c00d0929e1899c8596b9b3edad76b7198e8a7a6d48aedd32b597794a2320377ebb89af88da41eb62f1163d58a0d3ced92", 0xe1}, {&(0x7f0000001100)="896c4df3cabe889f62c3df506640fc10873b5cffde9918ad1ae602bdbd99e50615b8be1e878f7052", 0x28}], 0x6, &(0x7f00000011c0)=[@ip_retopts={{0x10, 0x0, 0x7, {[@end]}}}], 0x10}}], 0x3, 0x2081) getsockopt$bt_hci(r5, 0x11a, 0x2, 0x0, 0x0) syz_io_uring_setup(0x6608, &(0x7f0000000040)={0x0, 0x91b5, 0x8, 0x0, 0x3e6}, &(0x7f00000000c0), &(0x7f0000000100)) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 5.243213574s ago: executing program 0 (id=606): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0), 0x8) sendto$inet6(r0, &(0x7f0000000280)="6cd95d21ea298c74d20e4d7e1df7c02c05ecf4816ef15ce93deb6b2362704ce2ca13994adf0400c2900b9b908f499b871272d88d8fda0c7fa6f9ee409547cb524a26b691d974e47af7c6bbb8bce58060cee26b7a092238039cd5a55d07dfba473f", 0x61, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.123389925s ago: executing program 2 (id=607): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r0 = epoll_create(0x2f8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x2}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="6cd95d21ea298c74d20e4d7e1df7c02c05ecf4816ef15ce93deb6b2362704ce2ca13994adf0400c2900b9b908f499b871272d88d8fda0c7fa6f9ee409547cb524a26b691d974e47af7c6bbb8bce58060cee26b7a092238039cd5a55d07dfba473f", 0x61, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.11574248s ago: executing program 0 (id=608): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122e", 0x3d, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5}, 0x18) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r7, 0x2) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000480)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a010000000000fff5dd0000000800030006010000418e01400004fcff3e1a0c16ef7e1ac617b18164d3", 0x58}], 0x1) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={0x0}}, 0xee) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x270, 0x24, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0xfff3, 0x3}, {0x2, 0xa}}, [@TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x200, 0x2, {{0x4a, [0x9, 0xb, 0xb, 0x5, 0x3, 0x9, 0x1, 0x4, 0x7, 0x7, 0x6, 0x0, 0xe, 0x9, 0x4, 0x5], 0x1, [0x8, 0x9, 0x5, 0x5ec4, 0x101, 0x0, 0xb, 0x7, 0xfffd, 0xf8, 0xc, 0x5d, 0x2, 0xfff, 0x2, 0x8001], [0x0, 0x7, 0xfffd, 0x1b, 0x7, 0x2, 0x3dc, 0x68a, 0x2, 0xc000, 0x4, 0xae50, 0x45b, 0x7, 0x40]}, [@TCA_MQPRIO_MAX_RATE64={0x88, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x5}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0xfffffffffffffffe}, {0xc, 0x4, 0x5}, {0xc}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0xf47}, {0xc}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x7}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x7c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x5}, {0xc, 0x4, 0xc}, {0xc, 0x4, 0xffffffffffffffff}, {0xc, 0x4, 0xfffffffffffffff7}, {0xc}, {0xc, 0x4, 0xf}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x40}, {0xc}]}, @TCA_MQPRIO_MAX_RATE64={0x58, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x6}, {0xc}, {0xc, 0x4, 0x1b}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0x101}, {0xc, 0x4, 0x6}]}, @TCA_MQPRIO_MAX_RATE64={0x34, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x80000000}, {0xc, 0x4, 0xbea}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x6}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x14, 0x2, 0x300, 0x1, 0x2, 0x101, 0x45a5, 0x6}}, {0x10, 0x2, [0x8000, 0x6, 0x2, 0x8001, 0x7fff, 0x401]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}]}, 0x270}, 0x1, 0x0, 0x0, 0x17}, 0x44800) recvmsg$kcm(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r5, 0x3, {0x3, 0xff, 0x4}, 0xfd}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r5, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20003, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 5.006111187s ago: executing program 2 (id=609): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x6, 0x2) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r5, 0x1, 0x100000000000000) read$FUSE(r4, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82187202, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write(r2, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x121142, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="001200000200"/16], 0x10}}, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x11) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r8}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000e700"/20, @ANYRES32=0x0, @ANYBLOB="00000000f5ffffffbfffffff00000000000000a6060782a27ce7ef9fb11e2e5e1a5ebde8de839fc17774", @ANYRES32, @ANYRES32, @ANYRESOCT=r9], 0x50) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x10, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@deltclass={0x2c, 0x29, 0x100, 0x70bd2b, 0x25dfdbbe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x3}, {0x4, 0x2}, {0x2, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc005}, 0x9a930a61d9f567d6) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002380)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, 0x0, {0x6, 0xf}, {}, {0x4, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x880) r12 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x0) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_control_io(r12, &(0x7f0000000140)={0x18, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.972692709s ago: executing program 1 (id=610): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x3, 0x6) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xfff1}, {0x0, 0x9}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xff, [0x0, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0xfc], 0x0, [0x4, 0xa, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="08005e8004000100"], 0x24}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="02002abd7000fedbdf2545000000"], 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x4040001) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000008340)=ANY=[@ANYBLOB="20002200780001070000000008002500e000000200"/32], 0x20}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)="0e", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a020", 0x1c}], 0x2}}], 0x2, 0x4048884) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000200)=ANY=[@ANYBLOB="080705c8fe0bba65ab3a0ff634a659de7f1ad77d2506aa713952c47e1657703b8c710ccfa06907bb95cc"], 0x5, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$rdma_cm(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r10, 0x5411, &(0x7f0000000040)) 4.733686766s ago: executing program 3 (id=611): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) r4 = syz_io_uring_setup(0xdaa, &(0x7f0000000340)={0x0, 0x4, 0x400, 0x1000, 0x2000}, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_enter(r4, 0x1, 0xffffffff, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001080)={0xf, {"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", 0x1000}}, 0x1006) sendmmsg$inet6(r5, &(0x7f0000003bc0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000140)}, {&(0x7f0000000400)="66380aca3ab76e237a136ad78759048469bb59f2fa2ec3ff05a500cc711ecd1f5ef692116a800e7cb79e940731ef5cf1609b4348a068263adcab54a3c0dd59463520128669a334b1ae7a992f3e71429604d5543af6aad1d60e8b61906fed21053cc7242c021e826ba9ce89df4e78dfab8de60aedf7c9d280b917d1e534e41ff38e103a9626cf9b2bf1d9cd0ca4f0cccb", 0x90}, {&(0x7f0000000240)="5ab4509172326d04edb0207534f997ab421157a77b74437a14c351dcb86dba249c8c6c704da0ef214fd6ed124f", 0x2d}, {&(0x7f00000002c0)}, {&(0x7f0000000580)}, {0x0}, {&(0x7f0000000680)="6387b6ff919c76786e7869de6ae431b7c12bcd47784b70f3a5881cb1779309547cca0bf89fe26596", 0x28}, {&(0x7f00000006c0)="de8be3f8e375552c302507568aff90588e716c86781ef234e03c251c1a837c2e902d481db263799eca7e92233e28185e7bdf5e3e696e3fc728adf9945bd0dcf7c12405c60380fa84ddbff8b467b933f56033f192128a33412f51a647f93b2f98c5946fe9f0f24da7432c059d1acb97f97a385fd04b8e384e7a27c4236949fddd52dfa69782408e", 0x87}, {&(0x7f0000000780)="5bfd41d290d92dd48ca8ceae67d1540c0adde438b279c1a3c1357de9e88cf6260fd396f264c513008a4adb1ff02723a477cea1aff7324eb8dc0fcf3619bb48f1ab4693f5e902896c12b3c082cc380de9b7cc5b665175d8af448c62680523e3c4297fbd98fd57b5998b5640603fc9430f1a40e2781115915dd6eaa9af5ffbf9c00e2f6e91b42276", 0x87}], 0x9, &(0x7f0000000900)}}, {{&(0x7f0000000940)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x4}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000980)="7e0d783387b54770b2b8d55cf1459787517d712a7f528f6b4385dbf4a2aa2cee1f0fe375c810f8e61f6b4255feb6978258897fdd6a484d986e11647512e29510bc3f05e4c0be968e9982bcaa960794dc2322e0beaefb962e095b5ace26b12850303b45", 0x63}, {&(0x7f0000000a00)="a1047661558d3672e34b32b137c9ae3afc045c402189832193d38c284547e3dfc5b718e9945133261237d4727e4c858e8b24762ed49ddd6d245771ad8d03a2c2b4db06c33055c8b0e94ec5199b2f1cc79fa0d599e06fbee5d23c30f7bc27d44e3527313b27f82600bd3b9ad02198d022907400c9068ac1eb376fae5d06ac87698ef178336083ef5faac4e2dd10036500e4e431cf58f9b07467", 0x99}, {&(0x7f0000000ac0)}, {&(0x7f0000000b40)="f8530739cf560e03e7454a08acd9e90daff3dd0fb473c7148b3886589d72ced8030a243b9d4438583d8f1c0260b4bda71e769f736cae89fa9cfcdb3a48a4d8b8a3346f70244d36db4b411ffc7dc0d9dc533ea3d3f6286d481df420f88cc53e471976f0d795e8f7387ce5f6966e3c77501a2542d8c309b50159767abfd2a6eac0bd92675866ca004ab5110311e13722d1d7b3b03a20e7312fbd8d753e3b8b05e86a745a6eac884ce7a3816ec49af14c0de06170847459ee82c7a1913f21271c0b8d718ae64a3a", 0xc6}], 0x4}}, {{&(0x7f0000000c80)={0xa, 0x4e21, 0x59132a5d, @mcast2, 0x38dc}, 0x1c, &(0x7f0000000e40)}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000ec0)="99c63438b2d3f1fa909dd67eb6f8285ea42e2bbef19fe9dcf724634d2d3b0d5223fde0a125ddfabf00bba0b15866244ec29763057f02400920683c77cc6d31a1dafd63c6bef172b601fbcc5797c59f9a91f45fe5e946dcbc963f2d90be9003a975dbe717c2df7d3f91dc00ed4d44abbf9dcf0da4b6e5f17ff8181349bb0339", 0x7f}, {&(0x7f0000000f40)="b6bf7adf76fcffd60c8ee53ca623d172d9ddfe4b80e455f222b2ac5e49c3110fb049070ae4475e58098abb30d6e87d6181a7cdaca6fc37259decb4a6568ee113225805d5406fc94e848f69148d8fa125455a589972afcb1881875531a81ca7d4fc175e8933b56d2c3d364f225af49ff28d3909a1872157f6ff3967c30ba3b902caf0c4302de6e5519b10902a7951776f25c0baf34f22e47b50dd45d0628fbf5c9a8649b15c3662f29c1d29e35979eddc36a34b9b3904a863b05fdbf1f73701e40133a15ccfaf5d3a69eb728a0162c7d9f9464af7d7661c8749a0f674ab8c27bc975feeef6325dbc8b7d3fa", 0xeb}, {&(0x7f0000001040)="17af4946921f8bae2a81", 0xa}, {&(0x7f00000030c0)="e9afbe548479bb7766a8196ece9b2a0ace71be8ad9fdb60fe1f09dc281a185cc66e97616d93765e76accc18689c90316aff866c9b0370b2c677024e3517eb7b38f788a7e412699845b66f6a61a3c968813a80260910eaa3d9c4f7dd1dbd7c2d980f41e1796ebc5e34f9901c1408a53c695846cd430e5c6c798ba29bf0cdab16de77478d202da7bd21f", 0x89}, {&(0x7f0000003180)="8d7931c31c3eafa67c252a70aea04150d86d1904e300d4f4a2273ea0d925a42b5fa2", 0x22}, {&(0x7f00000031c0)="7482db609a855fd2773099b46e88c2fb4f9bb258c969d7f5cbb434fdda6c8c3a5d260a9b28fc12ab193cf16804f20600991fd24fba537a88fed8cb5a4a3f16e50f08a2d2ea824730f5aa09464dbf3c0690a5fbd0214cb53d56c482dbdfa220e6dc003d040732377c7b4cb3b70bae483588213b17c1c6cf5f5db5f4fc27975d80168d7379f2961029a82e769c08685d7227fd3d54839d1c406333a6929d6fb0b2a9", 0xa1}, {&(0x7f0000003340)="18f888ddfcb5228056992673df16498e9271de6204de0179827353b2", 0x1c}, {&(0x7f0000003380)="33ae63d35826bd4ec0dbd0c5df6b58d0c57a151efcaec072eec19527b792de1e3586270341f2a1b91eab0c3ab7de7f4dd35e542935534279f518ec99b16b6005934e617dc270ab55c9fd3ae798f8d57823a0fd5d3c", 0x55}, {&(0x7f0000003440)="b99b4fa3ef1e5baa0a3ad7c0506949ba90c6558a7edc5b82de425ff4de0a38fa88802feeb07360223e2a8200b995096ff488d1c2a4c91c150ef49dc364e31d3a6cf96eb4aae0a6668c174b0bce234e4ca284ecb97c798b00f1ac93", 0x5b}], 0x9}}, {{&(0x7f00000035c0)={0xa, 0x4e23, 0x1, @remote, 0x9}, 0x1c, &(0x7f00000038c0)=[{&(0x7f0000003600)="92946e66b7ad21864afcf3b7ac93a1fc1af0c3994b9113aac9a2cba10dc68522e2e42455de30cecf0dda21a0128c7dbb8bd58165a506e86fce97ef693c76d315a39ada2d60ef034ac22ded73e96892a40bc80b11786919a3c92eb47c6f33aa02f59a42bfb6945444287cea3c2cbb86380685dd0bd174cbe8c393a782de36ad38c10dcb2e895df2a7fb", 0x89}, {&(0x7f00000036c0)="163b3ac1273d44a7e872c4c8bfe9c330fe84d9bebe4cfc1d3b9f0b929024e20d0d2fbd90111b80a448680c6d1b8de2e2014686bef8f8d2182edf0d747cb6ab6116bbcaf40f176ed91c10d53ded0f99e28fb767ffe4252240fdec77e92090272fa47d684e0a708d3c1a8a043c9de8d3dd01bb8f432ed8a66eb7ad018fd1d5e21ac8005be26453693c20e580804aefe125d94c173866cfd448bb69bf4581a6a5dbdf394d452cbb6e042257668fc4e16017d072e0aa58d84a3097e007b283d791ffe54b64b0697f91964cbdb892267dda9ec5becf386a83dc8e85876581f5bf55fb03e84ec6ce23256df18c7fb094078e04", 0xf0}, {&(0x7f00000037c0)="ae007d4f", 0x4}, {&(0x7f0000003800)="b9c1dd980fe83e95b9596d86b147274b39a8e84ec1467498e78eaef1a2038b1d49679f8c81631c1db32a075636278cc1", 0x30}, {&(0x7f0000003880)="ccd07e0baa985bcc4973a08ba9622a65c9b6fd5b6b429921bce79855db7d0c12bfb256efe9c13cb9da2bca9063c7cf401e", 0x31}], 0x5, &(0x7f0000003900)=[@hoplimit={{0x10, 0x29, 0x34, 0x2}}, @hoplimit_2292={{0x10}}, @rthdr_2292={{0x64, 0x29, 0x39, {0x2f, 0xa, 0x1, 0x9, 0x0, [@remote, @empty, @private1, @mcast1, @mcast2]}}}, @rthdrdstopts={{0xcc, 0x29, 0x37, {0x0, 0x16, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x40, 0x9c, "5fa90693823c1086d969b46cd40b953b887be8ed0bdaa3a79c1ea8f09307f9c3ab3cfd24d44c66e9611bfab7ffd2fc36b565c4977ee4abdde804062a2c3cd2d76d8d3fb8d8d0a0a6115e6eed927e13cbeadda96af72b0d177bfa9b7170047c10f09f46e1df1851c843ebcbe4f8d1b343c165e1bfac2478c7433d6f1f85c2ce04ec307242edd78a97474e67608fc0c67d0252c1f1b38c18d956ecde64"}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x8}]}}}, @dstopts_2292={{0xdc, 0x29, 0x4, {0x84, 0x18, '\x00', [@pad1, @ra={0x5, 0x2, 0x8efc}, @calipso={0x7, 0x30, {0x2, 0xa, 0x4, 0x9, [0x3, 0xf56, 0x100000000, 0x9, 0x8]}}, @generic={0x8, 0x7f, "7c23a5944231418e76b873526536b320e16ed3488013dc4997e34af3ebe40e155ca52bac385d1c49d41e956fdad92deda21840ca4d22ab16884677813bc49fd9cb5ec0d5b6d331b14e12847949951ebaef478c41711da96aac216f8a06bbc25a3def83fe0dd4d388f4d82c9213ff6f9f4a9a72b0f9fb2d52920a9fa01f7182"}, @ra={0x5, 0x2, 0x200}, @pad1, @pad1]}}}], 0x22c}}], 0x5, 0x4001c00) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) flistxattr(r2, &(0x7f00000004c0)=""/135, 0x87) 4.642407719s ago: executing program 4 (id=612): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000640)={{0xb, 0x2, 0x81, 0x5, 'syz1\x00', 0xb}, 0x0, [0x2, 0x10e8af, 0x1, 0xcc0, 0xe, 0x101, 0x80, 0xa6da, 0x2, 0x1, 0x10000009, 0x8, 0x8, 0xfffefff7, 0x8, 0x10, 0x10000005, 0x4, 0x40f, 0x1080, 0x962, 0x2, 0x1, 0x400, 0x7fffffff, 0xc360, 0x80000001, 0x6, 0x60e3, 0x8a81, 0x10000008, 0x10000, 0x7, 0x9, 0x107430, 0x2, 0x2, 0x60a, 0x1, 0x3, 0x8, 0x5, 0x8001, 0x8, 0x9, 0x1, 0x2, 0x0, 0xffff1688, 0x2, 0x0, 0x4, 0x9000, 0xe93, 0x4, 0x7ff, 0x7, 0x81, 0x50a, 0x0, 0x6, 0x7ff, 0x1000, 0xffffffff, 0xfffffffc, 0x5, 0x7a, 0x2, 0x9, 0x2, 0x3, 0x7, 0x1000ac, 0x7, 0x7, 0x4, 0x8000, 0x9, 0x4, 0x7, 0x10, 0x7, 0x5, 0x0, 0x0, 0x40, 0x2, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x100004, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x0, 0x5, 0x4, 0xe, 0x1, 0x2cd, 0x9, 0xc, 0x4, 0x1, 0x2, 0x3ce, 0xa, 0x8, 0x9, 0x0, 0x106, 0xfffffff7, 0xffffbf90, 0x0, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xffffffff, 0x73938332, 0x7763]}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x7}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) move_mount(r2, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x7, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x401) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f00000000c0)={0x8, 0x5, 0x2}) 4.476180688s ago: executing program 4 (id=613): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f0000000d80)={0x3fffffff, 0x100, "6a3ce4ab8ed6c54797be28dc6b7dcc8d5eba4a0f1dea455e02c75ec18cfcdbf4", 0x0, 0xffffffff, 0x40000, 0x5, 0x90}) syz_open_dev$vbi(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a31000000002800048024000180090001006d6574610003000014000280080002400000000208000340000000160900020073790000140000001100010000000000000000000100000a00"/132], 0x84}, 0x1, 0x0, 0x0, 0x8800}, 0x24000000) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="fa82", 0xff80}], 0x1}, 0x20000000) write$sysctl(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$vbi(0x0, 0x0, 0x2) r9 = syz_open_dev$vcsn(&(0x7f0000000d00), 0xdd, 0x121800) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r3, &(0x7f0000000cc0)={0x2001}) ioctl$VIDIOC_G_SLICED_VBI_CAP(r8, 0xc0745645, &(0x7f0000000540)={0x1d2, [0x4, 0x7, 0x3, 0x58d6, 0xff, 0x4, 0xe98, 0xffff, 0x4371, 0xc14, 0x0, 0x1, 0xe, 0x8d26, 0xffff, 0x40, 0x3, 0x9, 0x7, 0x4, 0x10, 0x6, 0x101, 0xff, 0xf, 0x40, 0x3, 0x6, 0x9, 0x1, 0x2, 0xff, 0x6, 0x1000, 0xf, 0x1, 0x7f, 0x8, 0x13d8, 0x4, 0xc, 0x7, 0x8, 0x1, 0x7f, 0x5, 0x49, 0x6], 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b700990000000800a0000200000008009f0001000000"], 0x3c}}, 0x0) 4.427155339s ago: executing program 1 (id=614): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122e", 0x3d, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5}, 0x18) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r7, 0x2) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000480)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a010000000000fff5dd0000000800030006010000418e01400004fcff3e1a0c16ef7e1ac617b18164d3", 0x58}], 0x1) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={0x0}}, 0xee) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x270, 0x24, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0xfff3, 0x3}, {0x2, 0xa}}, [@TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x200, 0x2, {{0x4a, [0x9, 0xb, 0xb, 0x5, 0x3, 0x9, 0x1, 0x4, 0x7, 0x7, 0x6, 0x0, 0xe, 0x9, 0x4, 0x5], 0x1, [0x8, 0x9, 0x5, 0x5ec4, 0x101, 0x0, 0xb, 0x7, 0xfffd, 0xf8, 0xc, 0x5d, 0x2, 0xfff, 0x2, 0x8001], [0x0, 0x7, 0xfffd, 0x1b, 0x7, 0x2, 0x3dc, 0x68a, 0x2, 0xc000, 0x4, 0xae50, 0x45b, 0x7, 0x40]}, [@TCA_MQPRIO_MAX_RATE64={0x88, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x5}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0xfffffffffffffffe}, {0xc, 0x4, 0x5}, {0xc}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0xf47}, {0xc}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x7}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x7c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x5}, {0xc, 0x4, 0xc}, {0xc, 0x4, 0xffffffffffffffff}, {0xc, 0x4, 0xfffffffffffffff7}, {0xc}, {0xc, 0x4, 0xf}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x40}, {0xc}]}, @TCA_MQPRIO_MAX_RATE64={0x58, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x6}, {0xc}, {0xc, 0x4, 0x1b}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0x101}, {0xc, 0x4, 0x6}]}, @TCA_MQPRIO_MAX_RATE64={0x34, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x80000000}, {0xc, 0x4, 0xbea}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x6}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x14, 0x2, 0x300, 0x1, 0x2, 0x101, 0x45a5, 0x6}}, {0x10, 0x2, [0x8000, 0x6, 0x2, 0x8001, 0x7fff, 0x401]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}]}, 0x270}, 0x1, 0x0, 0x0, 0x17}, 0x44800) recvmsg$kcm(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r5, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20003, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x45c0, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 3.675097544s ago: executing program 0 (id=615): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122e", 0x3d, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5}, 0x18) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r7, 0x2) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000480)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a010000000000fff5dd0000000800030006010000418e01400004fcff3e1a0c16ef7e1ac617b18164d3", 0x58}], 0x1) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={0x0}}, 0xee) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x270, 0x24, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0xfff3, 0x3}, {0x2, 0xa}}, [@TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x200, 0x2, {{0x4a, [0x9, 0xb, 0xb, 0x5, 0x3, 0x9, 0x1, 0x4, 0x7, 0x7, 0x6, 0x0, 0xe, 0x9, 0x4, 0x5], 0x1, [0x8, 0x9, 0x5, 0x5ec4, 0x101, 0x0, 0xb, 0x7, 0xfffd, 0xf8, 0xc, 0x5d, 0x2, 0xfff, 0x2, 0x8001], [0x0, 0x7, 0xfffd, 0x1b, 0x7, 0x2, 0x3dc, 0x68a, 0x2, 0xc000, 0x4, 0xae50, 0x45b, 0x7, 0x40]}, [@TCA_MQPRIO_MAX_RATE64={0x88, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x5}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0xfffffffffffffffe}, {0xc, 0x4, 0x5}, {0xc}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0xf47}, {0xc}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x7}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x7c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x5}, {0xc, 0x4, 0xc}, {0xc, 0x4, 0xffffffffffffffff}, {0xc, 0x4, 0xfffffffffffffff7}, {0xc}, {0xc, 0x4, 0xf}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x40}, {0xc}]}, @TCA_MQPRIO_MAX_RATE64={0x58, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x6}, {0xc}, {0xc, 0x4, 0x1b}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0x101}, {0xc, 0x4, 0x6}]}, @TCA_MQPRIO_MAX_RATE64={0x34, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x80000000}, {0xc, 0x4, 0xbea}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x6}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x14, 0x2, 0x300, 0x1, 0x2, 0x101, 0x45a5, 0x6}}, {0x10, 0x2, [0x8000, 0x6, 0x2, 0x8001, 0x7fff, 0x401]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}]}, 0x270}, 0x1, 0x0, 0x0, 0x17}, 0x44800) recvmsg$kcm(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r5, 0x3, {0x3, 0xff, 0x4}, 0xfd}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r5, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x45c0, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 2.516241932s ago: executing program 3 (id=616): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}]}, 0x4c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000000200)=""/212, 0xd4}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/70, 0x46}], 0x6, &(0x7f0000000380)=""/14, 0xe}, 0x7}], 0x1, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2000000000000009, 0x8, 0x0, 0x4}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$ttynull(0xffffff9c, 0x0, 0x200, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000000)) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x191c) 2.035964062s ago: executing program 1 (id=617): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x14, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x100000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086412, &(0x7f0000000040)) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) munlockall() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f00000000c0)=[@acquire_done={0x40106309, 0x1}, @dead_binder_done], 0x86, 0x0, &(0x7f0000000300)="23441348b83043b334186bb3a25986b97eacff6f6d79e6d54ead36aa4a777248f281687c45fc698930bf0f313eb8c7de762a05b3401830ca6df36bc339f44878700fd9a48ffb8e9ca63d7f61a128a4c5c8a7983df5e21e96a2b4ae56a6b7c612efade194c0ea07cac3452d581aeff87f72c09396033f446ec8c2356940c0a612cb5825df935a"}) 1.855638134s ago: executing program 2 (id=618): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x402, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@gettaction={0x14, 0x32, 0x605, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4000040) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0xd) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000005e40)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000e70000", @ANYRES16=r3, @ANYBLOB="21008d000000fbdbdf25030000000c0001800600010008000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)={0x50000011}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}}, 0x0) 1.853845825s ago: executing program 0 (id=619): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = epoll_create(0x2f8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2}) sendto$inet6(r0, &(0x7f0000000280)="6cd95d21ea298c74d20e4d7e1df7c02c05ecf4816ef15ce93deb6b2362704ce2ca13994adf0400c2900b9b908f499b871272d88d8fda0c7fa6f9ee409547cb524a26b691d974e47af7c6bbb8bce58060cee26b7a092238039cd5a55d07dfba473f", 0x61, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.790355072s ago: executing program 4 (id=620): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = epoll_create1(0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000140), 0x5b89, 0x103000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {}, 0x1}, 0x18) r4 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) 1.680831457s ago: executing program 2 (id=621): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122e", 0x3d, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5}, 0x18) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r7, 0x2) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000480)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a010000000000fff5dd0000000800030006010000418e01400004fcff3e1a0c16ef7e1ac617b18164d3", 0x58}], 0x1) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={0x0}}, 0xee) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x270, 0x24, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0xfff3, 0x3}, {0x2, 0xa}}, [@TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x200, 0x2, {{0x4a, [0x9, 0xb, 0xb, 0x5, 0x3, 0x9, 0x1, 0x4, 0x7, 0x7, 0x6, 0x0, 0xe, 0x9, 0x4, 0x5], 0x1, [0x8, 0x9, 0x5, 0x5ec4, 0x101, 0x0, 0xb, 0x7, 0xfffd, 0xf8, 0xc, 0x5d, 0x2, 0xfff, 0x2, 0x8001], [0x0, 0x7, 0xfffd, 0x1b, 0x7, 0x2, 0x3dc, 0x68a, 0x2, 0xc000, 0x4, 0xae50, 0x45b, 0x7, 0x40]}, [@TCA_MQPRIO_MAX_RATE64={0x88, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x5}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0xfffffffffffffffe}, {0xc, 0x4, 0x5}, {0xc}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0xf47}, {0xc}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x7}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x7c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x5}, {0xc, 0x4, 0xc}, {0xc, 0x4, 0xffffffffffffffff}, {0xc, 0x4, 0xfffffffffffffff7}, {0xc}, {0xc, 0x4, 0xf}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x40}, {0xc}]}, @TCA_MQPRIO_MAX_RATE64={0x58, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x6}, {0xc}, {0xc, 0x4, 0x1b}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0x101}, {0xc, 0x4, 0x6}]}, @TCA_MQPRIO_MAX_RATE64={0x34, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x80000000}, {0xc, 0x4, 0xbea}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x6}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x14, 0x2, 0x300, 0x1, 0x2, 0x101, 0x45a5, 0x6}}, {0x10, 0x2, [0x8000, 0x6, 0x2, 0x8001, 0x7fff, 0x401]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}]}, 0x270}, 0x1, 0x0, 0x0, 0x17}, 0x44800) recvmsg$kcm(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r5, 0x3, {0x3, 0xff, 0x4}, 0xfd}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r5, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x45c0, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 1.598889145s ago: executing program 0 (id=622): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x10}, [], {0x4, 0x6}}, 0x24, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x0, 0x0, 0x3, 0x41, 0x400200cc0, 0xffd, 0x8, 0x6, 0x4, 0x0, 0x5, 0x0, 0x6b, 0x400], 0xeeee8000, 0x2011c0}) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x40, r6, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0xc040) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x4, 0x4, 0x47c, 0xffffffff, 0x0, 0x224, 0x2ec, 0xfeffffff, 0xffffffff, 0x3b4, 0x3b4, 0x3b4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x200, 0x224, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x9, 0x26], 0xfffffe00, 0x10, 0x1, [@mcast1, @local, @mcast1, @private2, @empty, @private2, @remote, @mcast2, @local, @dev={0xfe, 0x80, '\x00', 0x12}, @private0, @private1, @empty, @local, @loopback, @private1], 0xc}}, @common=@ipv6header={{0x24}, {0x10, 0x16, 0x1}}]}, @common=@unspec=@AUDIT={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x9, 0xbf}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x224}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d8) 1.047674877s ago: executing program 3 (id=623): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000640)={{0xb, 0x2, 0x81, 0x5, 'syz1\x00', 0xb}, 0x0, [0x2, 0x10e8af, 0x1, 0xcc0, 0xe, 0x101, 0x80, 0xa6da, 0x2, 0x1, 0x10000009, 0x8, 0x8, 0xfffefff7, 0x8, 0x10, 0x10000005, 0x4, 0x40f, 0x1080, 0x962, 0x2, 0x1, 0x400, 0x7fffffff, 0xc360, 0x80000001, 0x6, 0x60e3, 0x8a81, 0x10000008, 0x10000, 0x7, 0x9, 0x107430, 0x2, 0x2, 0x60a, 0x1, 0x3, 0x8, 0x5, 0x8001, 0x8, 0x9, 0x1, 0x2, 0x0, 0xffff1688, 0x2, 0x0, 0x4, 0x9000, 0xe93, 0x4, 0x7ff, 0x7, 0x81, 0x50a, 0x0, 0x6, 0x7ff, 0x1000, 0xffffffff, 0xfffffffc, 0x5, 0x7a, 0x2, 0x9, 0x2, 0x3, 0x7, 0x1000ac, 0x7, 0x7, 0x4, 0x8000, 0x9, 0x4, 0x7, 0x10, 0x7, 0x5, 0x0, 0x0, 0x40, 0x2, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x100004, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x0, 0x5, 0x4, 0xe, 0x1, 0x2cd, 0x9, 0xc, 0x4, 0x1, 0x2, 0x3ce, 0xa, 0x8, 0x9, 0x0, 0x106, 0xfffffff7, 0xffffbf90, 0x0, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xffffffff, 0x73938332, 0x7763]}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x7}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) move_mount(r2, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x7, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x401) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f00000000c0)={0x8, 0x5, 0x2}) 983.490618ms ago: executing program 1 (id=624): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1920) 850.691613ms ago: executing program 0 (id=625): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000200)=[{0x1900, 0x4000, 0x0, &(0x7f0000000240)}], 0x1}) 506.071715ms ago: executing program 3 (id=626): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000240)={0x8, @vbi}) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000003c0)) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0xb, 0x100}) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, [0x0], [0x8, 0xffffffff], [], [0x0, 0x6, 0xfffffffffffffffc]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000040)={r11}) close_range(r6, 0xffffffffffffffff, 0x0) sendto$l2tp6(r3, &(0x7f0000000000)='Z', 0x1, 0x40, &(0x7f00000000c0)={0xa, 0x0, 0x91, @private2, 0x7f800000}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20800084}, 0xc, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x49d0, 0x2c, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x6}, {0x10, 0xfffa}, {0xfff3, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x4388, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5, 0x1}}, @TCA_ROUTE4_ACT={0x4350, 0x6, [@m_tunnel_key={0xa4, 0x3, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x22, 0x6, "b449f328dedc1a0230d86a97556c32dc1e3d4fa377d09cd788ce0ae16e60"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x104, 0x10, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x437a, 0x6, 0x8001, 0xffc00000}}, @TCA_DEF_DATA={0x8, 0x3, '!(\'\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x52a, 0x2, 0x6, 0x3, 0x4}}, @TCA_DEF_DATA={0x11, 0x3, '/dev/video36\x00'}, @TCA_DEF_DATA={0x11, 0x3, '/dev/video36\x00'}, @TCA_DEF_DATA={0x7, 0x3, '#! '}]}, {0x70, 0x6, "6356a23ef3bf76c4dbc0e0265e0196270952fe2e47f37500126c60212440935244a11cc8d5a20ff3e98e98bd35012b4f43c0542a429d6589410ebc15a2b11d4558bda9081804a0a023ec930d29af23542bd85219af36b7bde4810a50d39cbd9eb462d5cf87d105c8b508670f"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x1c4, 0xf, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x491793cb, 0xffffffffffffffff, 0x4, 0x2}, 0x1, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xbb, 0x2, 0x4, 0xfffff001, 0x6}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0x4, 0x0, 0xffffffff, 0xffffebf2}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x6, 0x10000000, 0x80, 0x8000000}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x3, 0x1, 0x3, 0x8}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x20, 0x3, 0x10000000, 0x6, 0x8}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x101, 0x9, 0x7, 0x100, 0x4}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1, 0xffffffffffffffff, 0x2, 0xde8}, 0x3, r5}}]}, {0x97, 0x6, "4b19549675033c1fdc227b6d45312ddd3fd241f89f384e7b298b381990eedd73a2619be6b83ec3507f45f5bd6478349b94c0e5dd56c59745ba2db8898e02e0e6a8bcabd42f185b2c937228ca0477cbb6446ee075316f140898e4a9f1a49d84d186a2d157c6fd8f79892ec9b6a463a315b8404390ace484eef2f6c9a5305075a3a5ff65d3a5a79d155aab59362efc7e18c5701c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x3e14, 0x1e, 0x0, 0x0, {{0xb}, {0x2de8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xcce, 0x4, 0x2, 0x6, 0x3, 0x3, 0x4, 0x8, 0xffff, 0x663, 0x0, 0x3, 0xffffffff, 0x5, 0x9c7b, 0x1, 0x10001, 0x5, 0x2, 0x2, 0x80, 0xfffffffb, 0x4, 0x9, 0x0, 0x5, 0x4, 0x15c2, 0x7, 0x4, 0x9, 0x2, 0x0, 0xfffffffc, 0x2, 0x67a, 0xbc, 0x1000, 0x3ff, 0x200, 0x5, 0xf719, 0xd, 0x9, 0x4, 0x8, 0x6, 0xfffffffe, 0x23150, 0x9, 0xa, 0x100, 0x5, 0x8ed0, 0x9, 0x9, 0x1, 0x2000000, 0x8, 0x6, 0x0, 0x4, 0x1, 0x7c8, 0x1ff, 0x2, 0x1000, 0x500000, 0x9, 0xd9, 0x0, 0xd88, 0x7, 0x2, 0x2, 0xffffffff, 0xdde2, 0x79a, 0x5, 0x2, 0x9, 0x80000001, 0x81, 0x7, 0x4, 0x1ff, 0x61e87598, 0xa, 0x4, 0x8, 0x7, 0x7fff, 0x9, 0x69ce, 0x8, 0x54d3, 0xb35, 0xeb7, 0x9, 0x1, 0x1, 0x2, 0x34b, 0x80000001, 0x2, 0x2, 0x0, 0x8, 0x7, 0x7, 0x1000, 0x7fff, 0x400, 0x2, 0x0, 0x1, 0xfffffff7, 0x10, 0x8, 0x7, 0xa, 0x6, 0xc8e, 0x1, 0xc, 0x9, 0xfffffff9, 0x4, 0x6, 0x4, 0xff, 0x3, 0xe, 0x7, 0x3, 0xffff, 0x401, 0xfffffffe, 0x8, 0xf, 0x1, 0x9, 0xc65, 0xffff, 0xffffffff, 0xffc, 0x10, 0x401, 0xffff, 0x9, 0xa0, 0x3cc74f4c, 0x81, 0xa, 0x5e0, 0x5, 0xff, 0x6, 0x4, 0xc11e, 0x400, 0x10001, 0xfeee, 0x0, 0xafa, 0x642, 0x5, 0x2, 0x25ba, 0x3, 0x7fff, 0x4, 0x100, 0x2, 0xa808, 0x80000001, 0xffffffff, 0x401, 0x3c, 0x65f, 0x9, 0x72, 0x5, 0x1b, 0x5, 0xfcb, 0x3, 0x4, 0x7, 0x1, 0x4, 0x9, 0xe, 0x7, 0xea, 0x4ae3, 0x2, 0xffff, 0x9f, 0xf, 0x4, 0x8000, 0x2, 0xc, 0x4, 0x200, 0xc3, 0x81, 0xc0, 0x1, 0x4800000, 0x1000, 0xffffff81, 0xffffffff, 0x7fffffff, 0x0, 0x2272, 0xc, 0x6, 0xce, 0x2, 0x3, 0x37a, 0xc, 0xf09, 0x5, 0x1bb7, 0xfffffeff, 0x0, 0x5, 0x5, 0xfa, 0x10000, 0xae, 0x1ff, 0x401, 0x0, 0xfffff21f, 0x7f, 0x8, 0xc, 0xffffffff, 0x6, 0xc, 0x7ff, 0x50ac, 0xfffff3c4, 0x1, 0x0, 0x8000, 0xe, 0x1, 0xb, 0x9, 0xc, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xcb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x51, 0x8, 0x1, 0xa81, 0x8, 0x400, 0x0, 0x0, 0x800, 0x834, 0x4, 0xff, 0x0, 0x401, 0x7f, 0x6, 0x1, 0x3, 0x101, 0x88, 0xfffffff9, 0x3ff, 0xda860000, 0x3, 0x2, 0x96, 0x0, 0x31b, 0xf31b, 0x7f, 0x8, 0xd, 0x6, 0x1, 0x15, 0x5d65, 0x4, 0x6, 0x80000001, 0x80000000, 0x8, 0x5, 0x80000000, 0x7f, 0x7, 0x8f, 0xc, 0x1000, 0x2, 0x10001, 0x9, 0x6, 0x5, 0x5, 0x3, 0x6, 0x3, 0x8, 0x4, 0x784c, 0x6, 0x2, 0x4, 0x6e66, 0x0, 0x7fffffff, 0x6, 0x30, 0x0, 0xffffffff, 0x4, 0x5d1ba06e, 0x9, 0x5, 0x4a7, 0x8, 0x5, 0x79, 0x6, 0x400, 0x6, 0x6, 0x1, 0x8, 0x2, 0x3, 0x8, 0xc, 0x0, 0x3, 0x30000000, 0x9, 0x2bc, 0xffffffff, 0x2, 0x0, 0x1f, 0x1e2c, 0x1, 0x8001, 0x6ef, 0x3, 0x3, 0x5, 0x1, 0x6, 0xfffffff8, 0x7, 0x90, 0x978, 0x3ff, 0x80000001, 0xd, 0x200, 0xfffffffb, 0x7, 0x56b, 0x1, 0x7, 0x80, 0x7f, 0x5, 0x0, 0x1, 0x100, 0x0, 0x6, 0x6, 0x7ff, 0x9, 0x7, 0x0, 0xffffffff, 0x3, 0x4, 0xdd, 0x7, 0x6, 0xffff8000, 0x3, 0x2, 0x5, 0x0, 0x4, 0xb, 0x8e6, 0x6, 0xffff0001, 0x7, 0x140, 0x4c, 0x5, 0xe85, 0xf7d, 0x7ff, 0xecb, 0x7, 0x8001, 0x1000, 0x1d5, 0x6, 0x1, 0xfffffff7, 0xd797, 0xfff, 0xfffffffa, 0x0, 0x2, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x54, 0x10001, 0x9, 0xffffffff, 0x4, 0x8, 0xf7, 0x4, 0x6, 0x4, 0x0, 0x2, 0x9, 0xf, 0xfffffffa, 0x80000000, 0x80000001, 0x5, 0x3, 0xffffffff, 0x4, 0x5, 0xf63, 0x8001, 0x9, 0x3, 0x100000, 0x1ff, 0x0, 0xff8, 0x0, 0x7f, 0x800, 0x7, 0xfffffe01, 0x859, 0x4c, 0x9, 0xac, 0x7, 0x1, 0x8000, 0x2, 0x5, 0x100, 0x8, 0x38000000, 0x2, 0x81, 0x4, 0x389, 0xb6c, 0x957b, 0x7, 0x6, 0xe0, 0x0, 0x4, 0x80, 0x40, 0x7, 0x4, 0x3, 0x6, 0x10000, 0xfffffff7, 0xfffffffb, 0x8, 0x9, 0x6, 0x5, 0x7, 0x8d, 0x0, 0x1, 0x3, 0x8, 0xffff, 0x8, 0xfffff001, 0xfdf6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x88d, 0x0, 0x800, 0x2, 0x889, 0xff, 0x7143, 0x8, 0x8, 0x3ff, 0x7f, 0x9, 0x80000000, 0x0, 0x7ff, 0x1ff, 0xd4, 0x6, 0xb7c, 0x3, 0x0, 0x4, 0x0, 0x4, 0x9, 0x8, 0x2, 0x8000, 0x4, 0x0, 0x8, 0x9, 0x3, 0xb0, 0x7fff, 0x7fffffff, 0x4, 0x0, 0x10001, 0x81, 0x3, 0x101, 0x9, 0x2, 0x7fff8, 0x3, 0x4, 0x38, 0x3, 0x9, 0x5, 0xfffffffe, 0x56f1, 0x9, 0x9, 0x8, 0xfcb8, 0x9, 0x1, 0x422c, 0xf0f, 0x8, 0x4, 0x5, 0xffff7fff, 0x0, 0x6, 0x2, 0x3, 0x9, 0xf, 0x6, 0x10, 0x3, 0xd6d8, 0xf9, 0x2, 0x5, 0x9, 0x8, 0x1, 0xfffffffe, 0x0, 0x2, 0x4b, 0x2, 0x4, 0x3, 0x0, 0x5, 0x2, 0x5, 0x1b, 0x2, 0xffffff64, 0x8, 0x5, 0x8, 0x200, 0xd, 0x1, 0x0, 0x2ef, 0x67c7b89a, 0x8, 0x1ff, 0x8000, 0x9, 0xc48, 0x9, 0x80000000, 0x5, 0x59, 0x4f, 0x5, 0xd5, 0x5, 0x7, 0x0, 0x9, 0x9, 0x81, 0xffff, 0x5, 0x1, 0x2, 0x57ab, 0x5, 0x8, 0x6, 0xd, 0xff, 0x6, 0x7, 0x12, 0x100, 0xfff, 0xff, 0x5, 0x4, 0xe2, 0x8001, 0x8, 0x332, 0x6, 0x9a, 0x1, 0x0, 0x9, 0x0, 0x69b9, 0x3ff, 0x4, 0x8, 0x2, 0x5b, 0x3ff, 0x7, 0x9, 0x4, 0x45d4, 0x6, 0x7, 0xc9d, 0x2, 0x101, 0x0, 0xf, 0x5, 0x8001, 0x5, 0xff, 0x8, 0x118b, 0x401, 0x80000001, 0xaa2, 0x4, 0xca0, 0x8, 0x80000001, 0xa, 0x2, 0x118, 0x8, 0x9, 0x83, 0x5, 0x3ff, 0x43ab, 0xa3d, 0x7, 0x5, 0x937, 0x1, 0x7, 0x71f1, 0x8, 0xe1a, 0x7ff, 0x8, 0x10001, 0xffffffff, 0x6, 0x240, 0x0, 0x4, 0x5, 0x7, 0x5, 0x9, 0xc, 0x6, 0x1, 0x100, 0x2, 0xad6, 0x800, 0x5, 0x0, 0x100, 0xe, 0x5, 0x400, 0x4, 0xc53, 0x8, 0x6, 0x7ff, 0x5, 0xe, 0x200, 0x2f3, 0x2, 0x5, 0x9, 0x8, 0x101, 0x4f2, 0x9ed9, 0x1000, 0xb25d, 0x40, 0x8, 0x1, 0x1ff, 0x81, 0x0, 0x9, 0xc91, 0x400, 0x8, 0x536a, 0xd7, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb}, @TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xe8ab, 0x10001, 0x1, 0x1000, 0x8000, 0x1, 0x80, 0x9, 0x3, 0x1df, 0xfff, 0x1, 0x80000001, 0x0, 0x9, 0x4, 0x1, 0x2, 0x800, 0x1, 0x90e, 0x0, 0x7, 0x66, 0x8, 0xe8a9, 0x469, 0xff, 0xfffff001, 0x0, 0x8, 0x50, 0x1, 0x2, 0x7d7, 0x3, 0xfff000, 0x5, 0x1, 0xe1, 0x5, 0xf93, 0x9, 0x8, 0x8, 0xc, 0x1, 0x4, 0x1000, 0x71, 0x5, 0x101, 0x80000000, 0x2722, 0x9eb6, 0x2a1f, 0x6, 0x40, 0x4, 0x6, 0x1006, 0xfffffffa, 0x4, 0xfffffffc, 0xfff, 0x1, 0x7d, 0x2, 0x2, 0x5b86, 0x7ec9, 0x3, 0x9, 0x3, 0x2, 0x1000, 0x6, 0xffff, 0x101, 0x6, 0x6, 0x1fffc, 0x2, 0x1000, 0xfffffff9, 0x9, 0x1f, 0x7ff, 0x7f, 0x50e, 0x44, 0x8000000, 0xa, 0x2, 0x3b, 0x6, 0x1, 0x10000, 0x3, 0xd0cb, 0x8000, 0x1, 0x8, 0x2, 0x8, 0x3, 0x10, 0x8, 0x6, 0x5, 0xfffffffe, 0x0, 0x3, 0x2, 0x7ff, 0xffffffff, 0x200, 0x2, 0x80000000, 0x4, 0x5, 0x9, 0x1, 0x7, 0x1, 0x5, 0x2e, 0x7, 0x1, 0x6, 0x8000, 0x1ff, 0x0, 0x9, 0xffffffff, 0x64, 0x40, 0x4, 0x7457, 0x10001, 0x58f, 0xfbef, 0x4, 0xcc, 0x2, 0x1, 0xffff68f5, 0xa, 0x2, 0x3, 0x74, 0x8, 0x4, 0x3, 0x10000, 0x3, 0xa, 0xe, 0x395a, 0x9, 0x2, 0x49, 0x0, 0x7, 0x4000, 0x5f, 0x5, 0xfffff9ef, 0x85ef, 0x1, 0xa, 0x8, 0x9, 0x0, 0x99, 0x9, 0x84, 0x8, 0x567, 0x5, 0x10, 0x7fff, 0x6, 0x8, 0x6, 0x1, 0x772d, 0x1, 0x8, 0x2, 0x7fff, 0x3, 0xfff, 0x9, 0x7ff, 0x6, 0x629, 0x1, 0xda2, 0x2, 0xd2f, 0xfffffffb, 0xa1f, 0xb4b, 0x6, 0x8001, 0x8, 0x9, 0x5, 0x1, 0x7, 0x6, 0x1, 0x9, 0x9, 0xb, 0x7, 0x6d, 0x9, 0x3b60, 0x0, 0xc9c, 0x6, 0x6af, 0x3, 0x7, 0x337, 0x4, 0x0, 0x2, 0x3, 0x2, 0x5, 0x7f, 0x1a4a, 0x9, 0x0, 0x2, 0x1, 0x7f, 0x401, 0x1, 0x8, 0x0, 0x2, 0x1ff, 0xff, 0x8001, 0x10, 0x6, 0x6, 0x1, 0x6, 0x8, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x1, 0x101, 0xc, {0x7, 0x0, 0x2, 0x908b, 0x1, 0xa}, {0x63, 0x2, 0x6, 0x5, 0x9, 0xf}, 0x0, 0x0, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x2, 0x7, 0x7, 0x7, 0x3, 0x8c20, 0x8, 0x5, 0x3f46, 0x7, 0x7, 0x3, 0x7, 0xffff, 0x0, 0x400, 0x4, 0x0, 0x6, 0x6, 0x40, 0xd68, 0x8cae, 0x3ff, 0xd9, 0x4, 0x2, 0x6, 0x2d0, 0x1, 0x9, 0xc6c, 0x9, 0x55c4, 0x7fff, 0x119, 0x9, 0x401, 0x80, 0x7, 0x6, 0x2, 0x6a2, 0x7f, 0x8, 0x0, 0x8, 0x7, 0x8, 0x0, 0x2ddb, 0x4000000, 0x9, 0xab, 0x1, 0xf, 0x6, 0x80, 0x4, 0xe38, 0x401, 0xfff, 0x2, 0x0, 0x3c0a, 0xffffffff, 0x9, 0x9, 0x7, 0x5, 0x7a0, 0x0, 0x6, 0x7, 0x3ff, 0x8, 0x9, 0x5, 0x7f, 0x7fff, 0x2, 0xe, 0x3, 0x2, 0x0, 0x5, 0x6fc5, 0x6, 0x0, 0x9, 0x7ff, 0x8, 0x8, 0x80000001, 0x0, 0xe, 0x7, 0x8, 0x7, 0x6, 0x3ae, 0xb, 0x0, 0x8775, 0xfffffe01, 0x1, 0x8, 0x1, 0x8, 0x1, 0x3, 0xe, 0x101, 0xffffffff, 0xdf9, 0x6275, 0x0, 0x9, 0x100, 0x5, 0x7f, 0x2c00000, 0x4, 0x5, 0x681, 0x5, 0x3e, 0x6, 0x7fff, 0x632, 0x3ff, 0x8, 0xcda3, 0x913, 0x5, 0xfffffffb, 0x73b2, 0x190000, 0x4, 0xf3, 0x3ff, 0x10000, 0x7, 0x4de, 0x6, 0x4, 0x9, 0x1, 0x7f, 0x79c4, 0x6, 0x93, 0xaec6, 0x9, 0xfffffff9, 0x78400000, 0x8000000, 0x6, 0x1, 0x0, 0x6b, 0x8, 0x8, 0x400, 0x2, 0x8, 0x1, 0x3d, 0x5, 0xc468e2b3, 0x6, 0x1, 0x80000000, 0x89, 0x1, 0x9a4d, 0x7, 0x7, 0x6, 0xd7c8, 0x10, 0x7, 0xfffffffd, 0x7, 0x400, 0x9, 0x8000, 0x4, 0x0, 0xbb4, 0x3, 0x10000, 0x9b9, 0x7, 0xda3, 0x198, 0x7, 0x100, 0x8f44, 0x1, 0x2, 0x60000, 0xfffffeff, 0x2, 0x2, 0x9b51, 0x7, 0x8, 0x3, 0x4, 0x401, 0x1, 0x1, 0x70, 0xfffffff8, 0x100, 0x0, 0x1, 0x6, 0xffff0460, 0x5, 0x5, 0x9, 0x3, 0x6, 0x3, 0x5, 0x2, 0xe, 0xe5ae, 0x10, 0x4, 0x1, 0xcc, 0x8, 0x0, 0x5, 0xe3, 0xfffffc81, 0x51, 0x8, 0x10, 0x5, 0x5, 0x200, 0x1, 0x7, 0x7, 0x400, 0xa, 0xc, 0x24f, 0x3, 0x3, 0x200]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x6, 0x5, 0x0, 0x4, 0x3fd8f8d5, 0x6, 0x40, 0x0, 0xe4, 0x10000, 0x7, 0x9, 0x2, 0x5, 0x3, 0x8, 0x6, 0x9, 0x7, 0x9, 0xfffffff8, 0x1, 0x8001, 0x2, 0x9, 0xfffffffc, 0x344e, 0x7, 0x80000001, 0xb96, 0xfffffffd, 0x1203, 0x5, 0x7, 0x400, 0x5, 0x2, 0x6, 0x5, 0x2f84b18e, 0xb12, 0x1, 0x10, 0x33, 0x9, 0x40008000, 0x7, 0x5, 0x1000, 0x5, 0x0, 0x4, 0x7, 0x3, 0x4, 0xffffffff, 0x904, 0x5, 0x2, 0xa, 0x2, 0x7fffffff, 0x8, 0xf97, 0xcb, 0x5, 0x7eb4, 0x7, 0xff, 0x8, 0x0, 0x0, 0x7, 0xffff, 0xffffffff, 0x9, 0x0, 0x4, 0x3ff, 0x320, 0x8, 0x500000, 0x8, 0x9, 0x3, 0x100, 0x7fff, 0xfffffffe, 0x50, 0x1403, 0x40, 0xbfb, 0x4, 0xc, 0x1, 0x6, 0x5, 0x1, 0x10001, 0x6, 0x3, 0x1, 0x2, 0x3de7, 0x8, 0x10001, 0x401, 0x100, 0x9, 0x0, 0x8001, 0xffff, 0x80000000, 0x8, 0x5, 0x9dfc, 0x3, 0x8, 0x0, 0xff, 0x2, 0x2, 0x6a, 0xbe, 0x0, 0x7, 0x6, 0xffffffff, 0x200, 0xfffffff9, 0x5, 0x7fff, 0x4, 0x8, 0x6, 0x4, 0x9, 0x9, 0x9, 0xbc, 0x80, 0x80000000, 0x2, 0x2, 0x3, 0x1000, 0x6, 0x1, 0x3, 0x0, 0x9, 0x7, 0x5, 0x7ff, 0x7, 0x7, 0x8, 0x4, 0x8, 0x9, 0x3ff, 0x100, 0x5, 0x2c65, 0x9, 0x1, 0xb68f, 0x4, 0x9, 0x8, 0x4, 0x1, 0x4, 0x6, 0x1ff, 0x8, 0xf, 0x8001, 0xf249, 0x5, 0xfffffffe, 0x1000, 0x8, 0x5, 0x2, 0x0, 0x1, 0x5, 0x7fff, 0xcf3, 0x0, 0x7, 0x2a, 0x9, 0x6, 0x4, 0x3, 0xfffffffb, 0x2, 0x80000001, 0x9, 0x3, 0x6, 0x61, 0xfffffffd, 0x7, 0x7, 0x1f26c28a, 0x480, 0x8, 0x8, 0x0, 0x6, 0x0, 0x0, 0x3, 0x2, 0x0, 0x3ff, 0x70f5, 0x5, 0x100, 0x80000000, 0xfffff000, 0xd094, 0x5, 0x8, 0xd3, 0x4, 0x68, 0x7, 0x2, 0x7fffffff, 0x7, 0x1, 0x6, 0x2, 0x6, 0x401, 0x5, 0x20000000, 0x401, 0x81, 0x8, 0x8, 0xbf, 0x5, 0xfffffff8, 0x1ff, 0x1, 0x0, 0x6, 0x1, 0x6, 0xfff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0xa, 0x0, 0x10001, 0x6, 0x7ff, 0x370c6c7f, 0x2, 0x17f, 0xd, 0x5, 0x8, 0x3, 0x7f, 0x6, 0x4, 0x3, 0xfffffffe, 0x10, 0xc, 0x5, 0x5, 0x9, 0x0, 0x0, 0x2, 0x800, 0x80000001, 0x8001, 0x2, 0xe, 0x10000, 0xffffff0d, 0xf, 0xa, 0x80, 0x7, 0x4, 0x2, 0x9, 0x3, 0x7fffffff, 0x4aaa, 0x4, 0xfffffe01, 0x7, 0xae, 0x3, 0x1000, 0xd, 0xe355, 0x9, 0x0, 0x1, 0xffff, 0x4, 0xfe, 0x200, 0xffff, 0x7, 0xfffffff7, 0xfd, 0x2d, 0xa21, 0x2, 0xa, 0x800, 0x10000, 0x1, 0x7, 0x1ff, 0x10, 0x9, 0x3ff, 0x2a0, 0x0, 0x4, 0xd9, 0xde76, 0x4, 0x8, 0xffffffff, 0x8, 0x6, 0x3, 0x7, 0x7fffffff, 0xfffffffd, 0x8, 0x80, 0x7, 0x101, 0x5, 0x18, 0x2, 0x81, 0x1, 0x4caa0766, 0x9, 0x281b476, 0x2, 0x4, 0x2, 0x3, 0x3d, 0x0, 0x1, 0x1d3f, 0xf, 0x1, 0x1, 0x6413c456, 0x14000, 0xe, 0x4, 0x5dd, 0x800, 0xefa, 0x0, 0x6, 0x6, 0x8, 0x6, 0x4, 0x2, 0x1, 0x9, 0x80000000, 0x1ff, 0x2dde, 0x1, 0x8001, 0x2, 0x6, 0x7, 0x5, 0x7, 0x10001, 0x0, 0x400, 0x10001, 0x3ef, 0x10001, 0x5, 0x8, 0x2, 0x8001, 0x800, 0x3b7b9d32, 0x400, 0x8000, 0x1, 0x9, 0x7, 0x62, 0x3, 0x5, 0x4, 0x2, 0x8, 0xfd, 0x0, 0x5e01, 0x1, 0x401, 0x43, 0x800, 0x7fffffff, 0x0, 0x100, 0x0, 0xfffffeff, 0x9, 0x3, 0x4, 0x1, 0x8, 0x1, 0x6, 0xa, 0x0, 0x0, 0x7, 0xca, 0x1, 0xf, 0x4, 0x612, 0x1, 0x10, 0x3, 0xeac6, 0x4, 0x5, 0x9, 0xffff, 0x2, 0x8, 0x3afc, 0x80, 0x3, 0x8, 0x25, 0x1ff, 0x0, 0x593, 0x8000, 0x6, 0x9, 0x2, 0xa57, 0x3, 0xb, 0x6, 0x5, 0xe, 0x2, 0x6, 0x1ea5, 0x4, 0x200, 0x3891dc5e, 0x3, 0x4, 0x4a, 0x8, 0x5, 0x0, 0x8, 0x2, 0x4, 0x80000000, 0x1, 0x2, 0x10001, 0x1, 0x4e19521e, 0x80b7, 0x7, 0x9, 0x4, 0xe, 0x55b, 0x0, 0x2, 0xeaa6, 0x8000, 0xfff, 0x5, 0x8001, 0xd81d, 0x10, 0x3, 0x2, 0x7, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3ff, 0x3, 0xfffffff9, 0x7, 0x5, 0x1, 0xfffffffc, 0xfff, 0x9, 0xaf8, 0xb, 0x926, 0x1, 0x9, 0x3, 0x1, 0x7f, 0xd96f, 0x5, 0x88d, 0x0, 0x1, 0xc, 0xfffffff3, 0x5, 0xfff, 0x8000, 0xfffffaff, 0x3, 0x1, 0x1, 0xfffffff9, 0xf6, 0x800, 0x7fff, 0x9, 0x9, 0x7, 0xe, 0x0, 0x2, 0x3, 0x4, 0xff, 0x9, 0x7577, 0x4, 0x1a00000, 0x0, 0xffffffff, 0x8, 0x9, 0x8001, 0xfe, 0x2, 0x1ff, 0x7, 0xff, 0x80000000, 0x3, 0xd105, 0x492, 0x2, 0x2, 0x9, 0xd, 0x1, 0x2, 0xbf76, 0x1, 0x800, 0x4, 0xfffff801, 0x2, 0x9, 0x0, 0x4, 0x2, 0xc, 0xfffffffa, 0x0, 0x3, 0x3, 0x7c66, 0xe542, 0x8, 0x0, 0x8, 0xc, 0xecfa, 0x5, 0x1, 0x8, 0x5, 0x6, 0x9, 0x3004, 0x8, 0xfffffff7, 0x7, 0x7, 0x3, 0x9caa, 0xb, 0x0, 0x6, 0x3ff, 0x0, 0x7fff, 0x5, 0x1, 0x4, 0x6, 0xfffffff9, 0x8, 0x5f5, 0x3, 0x4, 0x40, 0xffffffff, 0xa, 0x1, 0x9, 0xc, 0x6, 0x80, 0x8, 0x3, 0x6, 0x9655, 0x6, 0x200, 0x7ff, 0x0, 0x9, 0x5, 0xfffff471, 0x3, 0x1950, 0x1ff, 0x2, 0xd14, 0xffffffff, 0x80000000, 0x4, 0x6, 0x4, 0x2, 0x8, 0x101, 0x401, 0x5, 0xc749, 0x3, 0xf9, 0x8, 0x40, 0x3, 0x3, 0x8, 0x3, 0x2, 0x9, 0xac1, 0xe, 0xc, 0x3, 0x6, 0xfffffffc, 0x1, 0x6, 0x80, 0x1, 0xde8b, 0x5, 0x400, 0x4, 0x3, 0x3, 0x80000001, 0x6, 0x7, 0xc69cf0a, 0x3, 0x9000000, 0x2, 0xe, 0xe93, 0xfff, 0x4, 0x7fffffff, 0x3, 0x8, 0x6, 0x1, 0x2, 0x2c4c, 0x80000001, 0x4, 0x3, 0xffff, 0xf02, 0x5, 0xff, 0x4, 0x7fffffff, 0x9, 0x5, 0x81, 0x5, 0x0, 0x6, 0x0, 0x3f, 0x2, 0x5, 0xffff0001, 0x5, 0x8, 0x8, 0xffffffc0, 0x8, 0x40000, 0x5, 0x6, 0xf4, 0x9, 0x0, 0xfff, 0x9, 0xfffffff9, 0x32e, 0x368, 0xcea, 0x8, 0x0, 0xffffffff, 0x0, 0x1, 0x6, 0x7fff, 0x8, 0x6, 0x0, 0x4, 0x2, 0x9d, 0x7, 0x0, 0x5, 0x5, 0x5e, 0x73, 0x9, 0x800]}, @TCA_POLICE_RATE={0x404, 0x2, [0xed, 0x9, 0xffff, 0x9, 0x4, 0x7fff, 0x1, 0xfffffffa, 0x7, 0x9, 0x1ff, 0x1000, 0x9, 0x7, 0x80000000, 0x8001, 0x0, 0x53, 0x9, 0x2, 0x9, 0x6, 0x3, 0x8, 0x2, 0xff, 0x8, 0x6, 0x1, 0xffffffff, 0xfffffff7, 0xc1a, 0x1, 0x2, 0x99, 0x5, 0x2b1, 0x6, 0x7, 0x9, 0x4, 0x71, 0x8, 0x8, 0x4, 0x27, 0x4, 0x2, 0x79, 0x1, 0x0, 0x75, 0x401, 0x2, 0x1, 0xb, 0x9, 0x4, 0x5, 0xffff, 0x402, 0x9, 0x1, 0x7, 0x6, 0x8, 0x7, 0x1, 0x4, 0x80, 0x2, 0x5a, 0x4, 0x3, 0x0, 0x1, 0xff, 0x5, 0x5, 0x9, 0x2, 0x4, 0xa650, 0xaf, 0x7f, 0x5, 0x6, 0xffffffff, 0x200, 0x6, 0x1ff, 0x1, 0xb34, 0xfffffffe, 0x5, 0x3, 0x4, 0x81, 0x1, 0x4, 0x6, 0x40, 0x8, 0x7, 0x0, 0x800000, 0xc6d, 0x1, 0x0, 0x7734, 0x5, 0x3, 0x0, 0x27ec, 0x1, 0x10, 0x0, 0x5f, 0x2, 0x40, 0x5, 0xdcf, 0xffff, 0x9, 0x6, 0x5, 0x400, 0x209, 0x0, 0x2, 0xc80, 0x2, 0xe, 0x9, 0x2, 0x0, 0x64f44b8b, 0x8, 0x8000, 0x76c, 0x0, 0x5, 0x8, 0x18000, 0xffffffff, 0x1, 0x6, 0x3, 0x1ff, 0x745b, 0xffffffff, 0x6, 0x0, 0x9, 0x81, 0x454, 0x80000000, 0x3ff, 0x101, 0xb6, 0x7, 0x8, 0x10, 0x401, 0xffffffff, 0x3, 0x8, 0x5, 0x1000, 0x0, 0x100, 0x7, 0xfffff604, 0x9, 0x3ff, 0x8, 0xf95d, 0x5, 0xffffff01, 0x2c, 0x3, 0x3, 0x2, 0x3, 0x6, 0x5, 0x0, 0x10, 0x6, 0x2, 0x3, 0x4, 0x5, 0x7, 0x7, 0x3, 0x1c72, 0x6, 0x2, 0x8, 0xba8, 0x43, 0x3, 0x6d165a85, 0x8, 0x5, 0x2, 0x6, 0xb979, 0x1, 0xced8, 0x10, 0xfffffff7, 0x2, 0x5, 0x5, 0x5, 0x2, 0xbc96, 0x1, 0x8, 0x3, 0x7, 0x18d509b2, 0x1, 0x7, 0xfffffffd, 0x7, 0x9, 0x3, 0xb, 0x8, 0x9, 0xfffffffa, 0xfffffff7, 0x10, 0x100, 0xffff, 0x1, 0x300, 0xa7a, 0x4, 0x2, 0x3, 0x400, 0x7f, 0x5, 0x8, 0x0, 0x9, 0x1, 0x5, 0x4, 0x7, 0x8, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}], [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x3, 0x7c, 0x1, 0x3, 0x60b, 0x3, 0x8, 0x4, 0x3f26, 0x0, 0x6, 0xc1f, 0x7, 0x3, 0x2, 0x1000, 0xb, 0xffff, 0x0, 0x1ff, 0x700000, 0x6, 0x2, 0x6, 0x8, 0x18a, 0x4, 0x2, 0x0, 0x1, 0x2, 0x0, 0x4c6, 0x8001, 0x4, 0x5, 0xe7f, 0x9, 0x8, 0x1, 0xc7, 0x7, 0xfffffff9, 0x401, 0x5, 0x400, 0x1, 0x7, 0x3, 0x0, 0x3, 0x4, 0x3, 0xfffff000, 0xf, 0x2, 0x99c3, 0xab, 0xfff, 0xf, 0xfffffff9, 0x6, 0x5, 0x1, 0x6, 0x7, 0x401, 0x7, 0x1, 0x9, 0x6, 0x8, 0x7ac, 0x7fffffff, 0xfffffff9, 0x8, 0x0, 0x3ff, 0xf17c, 0x7ff, 0x8, 0x5a2, 0x2, 0x3, 0x1, 0x0, 0x3, 0xbc9, 0x3, 0x5, 0x0, 0xb7d0, 0xffff8001, 0x1, 0x7, 0x5, 0x6, 0x0, 0xd4c6, 0x0, 0x0, 0x8, 0x6, 0x9a, 0x5, 0x8000000, 0x66d0, 0x9, 0x4, 0x7, 0x5, 0xf, 0x3, 0xffffffff, 0xcef9, 0x1329, 0x74d8, 0x9, 0x3ff, 0x1, 0x8af, 0xfffffffa, 0x1, 0x7, 0x7fffffff, 0x4, 0x3bb, 0x8, 0x7, 0x9105, 0x1, 0x0, 0x101, 0x3, 0x1, 0x5, 0x3, 0xe8180000, 0xaaa, 0x6, 0x4, 0xb, 0x44a4c110, 0x3, 0x3ff, 0x9, 0x0, 0x10000, 0x5, 0x8, 0x4, 0x7d, 0x7, 0xfffffffc, 0x6, 0x6, 0x3, 0x1, 0x8000, 0x80000000, 0x80000000, 0xc1, 0x800, 0x9, 0x7, 0x8, 0x7, 0xfffffffe, 0x5, 0xb, 0x1000, 0x4, 0x13, 0xa74d, 0xe1d3, 0x4f, 0x9, 0x80000000, 0x4, 0x8, 0x8000, 0x2, 0x6, 0x0, 0xffffffa9, 0x2, 0xad7d, 0x4, 0xfe000000, 0x7219, 0x29, 0x208, 0xa0f2, 0x6, 0x6, 0x6, 0x0, 0x7, 0x10, 0x40, 0x7fffffff, 0x8, 0x40, 0xfff, 0x3, 0x5, 0x8, 0x53, 0x76, 0x0, 0x0, 0xff, 0x65fd, 0x3b2, 0x800, 0xc, 0x1000, 0xac40, 0xfffffffb, 0x3, 0x10001, 0x4, 0x2, 0xd, 0x5, 0x101, 0xe50, 0x1, 0xcb14, 0x1b, 0x6, 0x8, 0x0, 0x3ff, 0x3fc0000, 0x5, 0xfffffffa, 0xbd4, 0x2, 0xfffffff8, 0x9, 0xffffffff, 0xfffeffff, 0x12eb, 0x1, 0x1, 0x8, 0x422, 0xfffffffe, 0x3, 0x1, 0xff, 0x3, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf0}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x24, 0x1, 0x6, 0x6, 0x8000, 0x7, 0x0, 0xa, 0x4, 0x7, 0x3c0fb90, 0x8001, 0x2e58, 0x1, 0x1, 0x0, 0xffff5c06, 0x7d0e, 0x6, 0x229c07f0, 0xfff, 0x1c000000, 0xf, 0x1, 0x7, 0x20, 0x2, 0x3, 0x8, 0x3fc, 0xff, 0x868, 0x0, 0x3, 0x9, 0xb75, 0xad, 0x7, 0x9, 0x1, 0x84b1, 0x2, 0x0, 0x4, 0x1, 0x3, 0x400, 0x7, 0x7, 0x4, 0x7, 0x4eca, 0x54, 0x4, 0x4, 0x7ff, 0x24e, 0x40, 0x0, 0x8, 0xcc, 0x206, 0x4, 0x7, 0x7, 0x1c74, 0x9, 0x85df, 0x8, 0x2, 0x8, 0x4, 0x4, 0x2, 0x20000, 0x0, 0x8, 0x7, 0x3, 0x4, 0x5, 0x1, 0x7, 0x4, 0xe, 0x6, 0x3, 0x4, 0xbd9, 0x6, 0x5, 0x6, 0xff, 0x6, 0x9, 0x4, 0x9, 0x10, 0x401, 0xe2d7, 0xff, 0xa5e, 0x642, 0x4, 0x6, 0x3, 0x82f6, 0x76f7, 0x400, 0xfffffff8, 0x2, 0xd2ab, 0x0, 0x9, 0xf3, 0x3, 0x3, 0x8, 0xfffffffa, 0x1, 0xd, 0xd6, 0x0, 0xd50, 0x0, 0x7d28, 0x10000, 0x966, 0x3e, 0x274, 0x2, 0x2, 0x30ee, 0x81, 0x4, 0x1000, 0xf, 0x6, 0xfff, 0x5, 0x6, 0x0, 0x0, 0x8, 0x1e9, 0x10, 0x1000, 0x9, 0x5, 0xa0, 0x70a, 0x1, 0x4, 0xba, 0x10001, 0x4, 0x2, 0x5, 0x0, 0x5, 0x4, 0x401, 0x4, 0x6, 0x8, 0x2, 0xffffff52, 0x100, 0x0, 0x3, 0x7f, 0xffffffff, 0x10, 0x3b5a, 0x100, 0x9, 0x8, 0x40, 0x15, 0x7ff, 0x8000, 0x7, 0xc4be, 0x4, 0x2, 0x1, 0x9, 0x6c9c, 0xfffffbff, 0x8000, 0x8, 0x649d, 0x2, 0x5, 0x4e, 0x5, 0x10000, 0x3, 0x8, 0x3, 0x9, 0xc03, 0x4, 0x3, 0x10000, 0x10, 0x8, 0x3, 0x2, 0xa6f7, 0x6, 0x7, 0x200, 0x2, 0x3, 0x81, 0xffff0001, 0xda9d, 0x7fffffff, 0x1, 0x40, 0x80000000, 0x2, 0x0, 0xb2d6, 0x0, 0xffff, 0x2397, 0x7491, 0x7, 0x2, 0x2, 0x2, 0x10, 0x10000, 0x3, 0x4, 0x9, 0x1000, 0x2, 0x3, 0x3ff, 0xfffffc00, 0xf74, 0x1, 0x1ff, 0x378, 0x9, 0x0, 0x8, 0x7, 0xffff646e, 0xe, 0x7, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0x4e4, 0x0, 0x1, {0x61, 0x1, 0x8000, 0x1000, 0x9, 0x4}, {0xed, 0x2, 0x800, 0x40, 0xfffc, 0x90}, 0x7, 0xcff, 0x1}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x5, 0x0, 0x1, {0x9, 0x0, 0x5, 0x1, 0x5, 0x1ff}, {0xfe, 0x3, 0x4, 0x1000, 0x93, 0x3}, 0xfffffffc, 0x5, 0x4}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x88, 0x1d, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_LABEL={0x8, 0x5, 0x7277a}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}]}, {0x43, 0x6, "4d528fd6d57b0a23a91efcb3da67c6aa8df23f1c878f0c26e246503cd87348d544872b00f8029fc2672a7d876894d2f28cb9d23da7219fa43282bc231ae6d9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x144, 0xb, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x7d59}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8d3fb}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffffe, 0x5, 0x8, 0x3, 0x4}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7f}]}, {0xd3, 0x6, "d5901ca75679d5e38bbbbaf5f296932d987b03ab731c550404d3ae2c4b229e780a8be8744bea02dfab96ba343ad1f8517fbb614ca4e6ba748e7d2d8e5ff69d1458b3f4e02c6584e7c7ba8ce2ec5fd4657da2f27cbaeb84d63b0e754391853461a50839b062da586ab69a6c673ed262c735107bf0c9459556b8b78e4e31e5cdefc0f453989d6307c43aa39ccd4bd9b8329d84a4bde87919b1d38e4aba7675bce4d2a92db1f0442cc8dcd030aac7b691aa7aed0a7b0313b0d3f2444affe3753debfd5a5c020d05edfd7c74b28af9e1dc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_ROUTE4_POLICE={0x14, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x46e4575d}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x95}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_ACT={0x4}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x5f0, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_ACT={0x2f4, 0x2, [@m_sample={0x40, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xbc59}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xe8, 0x1f, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x4, 0x63000000, 0xffffffffffffffff, 0x3, 0xffff0a81}, 0xd}}]}, {0x9b, 0x6, "3551cdda03cf810ea68b250b552b64f66f84204dc113f224c876bae40b4d7c9800cab14ee7f277d4a139fd566802a942c94de828b09df866d3c84814ccc4200570e4b0c331c16d17255e801fcab07861e9b06b19b569976d435c2c4add9d02039d71becfacb967c2ed521cd4a5d9f8f83dc61e63569cbe56d8ed7e8749df114e27963b82e5f47ead9afa3da64d55cc01b83411845790f9"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0xa0, 0xe, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x5f, 0x6, "aabd5ce81fb027cbb774377b70de504fcc434cb3202193e424df46b5bde5a85572f993c85209d053a5559ff382f5f69e52e0a590499ee8537f6f7722ed1333ac5f7b180ec96aa376926292bdd6522b901ede6574f6b1aba80bafe8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_mpls={0x128, 0x18, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}]}, {0xf3, 0x6, "b80a056373458c04dce83dc65ce854fc8c5586c1c3b8b762065dabf3f5b04a87eb402030146c905cda825e2ec8d0359e029518673048f3be74f6e102e8a1464dfb086e30f8b8dc96fe64b059a2fbf83ce7e045396c7cf3103cbe54e68b7e7b3a285abcb3d19aac77b75f0584ae856cb8f6048652732f38b847e631d4b7194552fd77dbaeda9338bbe622a687066600807c7c1cdbb06011952b850e5cd22da3264f65b4f905fe64b7cad2e6bc64129282f65a4f78e8a948bd29ec2ee1f5212e1d03dd7a54a6e58d6709915ef00df88e32756f0e26666615c40f8c6fbfc01ff95dc208f9ac92f8c82ac211a16102ab43"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_ACT={0x2ec, 0x2, [@m_skbmod={0x80, 0x4, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x6, 0x9, 0x2, 0x7, 0x400}, 0x8}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="ce8070ea255e"}]}, {0x19, 0x6, "acfeaa9749484e08e898794bf1d3830ad24d1f17db"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_nat={0x130, 0xe, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3, 0x10000000, 0x4}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x18}, 0xffffff00}}]}, {0xdd, 0x6, "fd6f48bc9f5d0a428f43e1a4d907f497d616b0a9814ff48a9818f050db0dbe9b0d601ee55706fc08c5f418a68f223f78dac58f9d60ea3e44ac5afae5bc683f895fb6df55896c4135056fc6e8a6f36cc68003987f854790e8111bb086f8d38b025fa32f63ada34af87e7ab852725b92ec45d5a38faa5b310353dae1b5c642d0626310803ce589657f6396f1fb272b055358788e24fe3f9304185ba2dd2f2f3a1d3009da460be0273070efe6a5ea46e495cd4ed6405b61d70e2da4fcf6c9a9b925b7afea3eaef4ac8e9b65ea8807f5a3a48ce7e8591410cb65c1"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0x138, 0xa, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xec, 0x6, "064dcd82cf2d0bbd6d12ccd48187654f4139d69ccd894af3e2066f6e6c9b47bf138341fd76d7ebd54ad86e9d9ae545aecc8f430dd3eab6f7e3f2e787fea5576dec13487062aa4dc0dac147f06fc6eeb8d745f1bbc3e3c6d638a0234d4e82bce7815d49edff5eced46d7ec9273361ac72c77b62ee73610384d33293952571abb09f25438e530a4b765ac400859be550828f2de3d6366fbaa752aa9237774915e085de65d4655f379cfc67fd375e4dbd24af1a9d987ef6a4256ab110bd3e096bfa659bafdddf36bc788b93d6a965254ad37ecbdb0b8cf648bf1c7c06e713a160954b9b16567cb4d0fe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @TCA_RATE={0x6, 0x5, {0x44, 0x7f}}, @TCA_CHAIN={0x8, 0xb, 0x7fffffff}]}, 0x49d0}, 0x1, 0x0, 0x0, 0x20048015}, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x87, 0x1, 0x5, 0x1, 0x8000, 0xdcb5}}, {0x4}}]}]}, 0x48}}, 0x880) 357.612154ms ago: executing program 2 (id=627): syz_open_dev$sndctrl(0x0, 0x0, 0x0) unshare(0x24060400) socket$inet6(0xa, 0x3, 0x5) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xa2c25) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r3, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast2}}}}]}]}, 0x6c}}, 0x0) 77.762048ms ago: executing program 2 (id=628): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x6, 0x2) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r5, 0x1, 0x100000000000000) read$FUSE(r4, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82187202, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write(r2, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x121142, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="001200000200"/16], 0x10}}, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x11) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r8}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000e700"/20, @ANYRES32=0x0, @ANYBLOB="00000000f5ffffffbfffffff00000000000000a6060782a27ce7ef9fb11e2e5e1a5ebde8de839fc17774", @ANYRES32, @ANYRES32, @ANYRESOCT=r9], 0x50) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x10, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@deltclass={0x2c, 0x29, 0x100, 0x70bd2b, 0x25dfdbbe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x3}, {0x4, 0x2}, {0x2, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc005}, 0x9a930a61d9f567d6) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002380)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, 0x0, {0x6, 0xf}, {}, {0x4, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x880) r12 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x0) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_control_io(r12, &(0x7f0000000140)={0x18, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 71.504513ms ago: executing program 1 (id=629): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002700), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) (async) r2 = dup(r1) fstat(r2, &(0x7f0000000240)) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000080)={0x5, 0x0, 0x4, {0x2, 0x2, 0x7, 0x6}}) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x10, &(0x7f0000000000), 0x8) r4 = inotify_init1(0x0) ioctl$int_in(r4, 0x541b, &(0x7f0000000c00)) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x8000f28, 0x8) (async) splice(r7, 0x0, r9, 0x0, 0x8000f28, 0x8) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @address_request}}}}, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r11, 0x331, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r11, 0x331, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x0) splice(r8, 0x0, r6, 0x0, 0x6, 0xa) close_range(r6, 0xffffffffffffffff, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r5, 0x4068aea3, &(0x7f0000000000)={0xed, 0x0, 0x4}) 0s ago: executing program 3 (id=630): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents(r0, &(0x7f00000000c0)=""/20, 0x14) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000200)=[{0x1ff, 0x4000, 0x0, &(0x7f0000000240)}], 0x1}) kernel console output (not intermixed with test programs): [ 169.561525][ T5878] usb 4-1: Manufacturer: syz [ 169.583460][ T5878] usb 4-1: SerialNumber: syz [ 169.930480][ T7054] netlink: 'syz.0.294': attribute type 13 has an invalid length. [ 170.004203][ T7051] bond1 (unregistering): Released all slaves [ 170.115787][ T5878] usb 4-1: USB disconnect, device number 12 [ 170.142209][ T6083] udevd[6083]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.476510][ T5878] usb 3-1: USB disconnect, device number 10 [ 170.613700][ T7054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.802671][ T7067] netlink: 32 bytes leftover after parsing attributes in process `syz.2.297'. [ 170.837923][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'. [ 170.968462][ T30] audit: type=1326 audit(1761613395.229:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.1.296" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe6539 code=0x0 [ 171.849363][ T7078] FAULT_INJECTION: forcing a failure. [ 171.849363][ T7078] name failslab, interval 1, probability 0, space 0, times 0 [ 171.862388][ T7078] CPU: 1 UID: 0 PID: 7078 Comm: syz.1.301 Not tainted syzkaller #0 PREEMPT(full) [ 171.862403][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 171.862410][ T7078] Call Trace: [ 171.862415][ T7078] [ 171.862420][ T7078] dump_stack_lvl+0x189/0x250 [ 171.862437][ T7078] ? __pfx____ratelimit+0x10/0x10 [ 171.862449][ T7078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.862461][ T7078] ? __pfx__printk+0x10/0x10 [ 171.862474][ T7078] ? __pfx___might_resched+0x10/0x10 [ 171.862486][ T7078] should_fail_ex+0x414/0x560 [ 171.862503][ T7078] should_failslab+0xa8/0x100 [ 171.862513][ T7078] kmem_cache_alloc_node_noprof+0x77/0x710 [ 171.862527][ T7078] ? __alloc_skb+0x112/0x2d0 [ 171.862544][ T7078] __alloc_skb+0x112/0x2d0 [ 171.862559][ T7078] netlink_ack+0x146/0xa50 [ 171.862582][ T7078] netlink_rcv_skb+0x28c/0x470 [ 171.862595][ T7078] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.862607][ T7078] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 171.862621][ T7078] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.862639][ T7078] ? bpf_lsm_capable+0x9/0x20 [ 171.862651][ T7078] ? security_capable+0x7e/0x2e0 [ 171.862666][ T7078] nfnetlink_rcv+0x282/0x2590 [ 171.862680][ T7078] ? __dev_queue_xmit+0x27b/0x3b50 [ 171.862691][ T7078] ? __dev_queue_xmit+0x1d79/0x3b50 [ 171.862700][ T7078] ? kasan_save_track+0x3e/0x80 [ 171.862713][ T7078] ? __kasan_slab_alloc+0x6c/0x80 [ 171.862730][ T7078] ? __dev_queue_xmit+0x27b/0x3b50 [ 171.862746][ T7078] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 171.862757][ T7078] ? __pfx___dev_queue_xmit+0x10/0x10 [ 171.862774][ T7078] ? ref_tracker_free+0x63a/0x7d0 [ 171.862789][ T7078] ? __asan_memcpy+0x40/0x70 [ 171.862801][ T7078] ? __pfx_ref_tracker_free+0x10/0x10 [ 171.862809][ T7078] ? __skb_clone+0x63/0x7a0 [ 171.862820][ T7078] ? __skb_clone+0x483/0x7a0 [ 171.862832][ T7078] ? skb_clone+0x246/0x3a0 [ 171.862844][ T7078] ? __netlink_deliver_tap+0x807/0x850 [ 171.862857][ T7078] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.862874][ T7078] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.862891][ T7078] netlink_unicast+0x82f/0x9e0 [ 171.862907][ T7078] ? __pfx_netlink_unicast+0x10/0x10 [ 171.862921][ T7078] ? netlink_sendmsg+0x642/0xb30 [ 171.862928][ T7078] ? skb_put+0x11b/0x210 [ 171.862938][ T7078] netlink_sendmsg+0x805/0xb30 [ 171.862950][ T7078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.862960][ T7078] ? __import_iovec+0x5d4/0x7f0 [ 171.862970][ T7078] ? aa_sock_msg_perm+0xf1/0x1d0 [ 171.862984][ T7078] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 171.862993][ T7078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.863001][ T7078] __sock_sendmsg+0x21c/0x270 [ 171.863015][ T7078] ____sys_sendmsg+0x505/0x830 [ 171.863026][ T7078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.863046][ T7078] ___sys_sendmsg+0x21f/0x2a0 [ 171.863057][ T7078] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.863082][ T7078] ? __fget_files+0x2a/0x420 [ 171.863090][ T7078] ? __fget_files+0x3a0/0x420 [ 171.863103][ T7078] __sys_sendmsg+0x164/0x220 [ 171.863113][ T7078] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.863126][ T7078] ? __pfx_ksys_write+0x10/0x10 [ 171.863140][ T7078] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 171.863153][ T7078] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.863166][ T7078] __do_fast_syscall_32+0xb6/0x2b0 [ 171.863179][ T7078] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.863192][ T7078] do_fast_syscall_32+0x34/0x80 [ 171.863205][ T7078] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.863216][ T7078] RIP: 0023:0xf7fe6539 [ 171.863225][ T7078] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 171.863233][ T7078] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 171.863245][ T7078] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 171.863251][ T7078] RDX: 0000000000004800 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.863257][ T7078] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.863262][ T7078] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 171.863267][ T7078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.863281][ T7078] [ 172.823680][ T5899] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 174.295484][ T7118] fuse: Bad value for 'fd' [ 174.561826][ T7123] usb usb8: usbfs: process 7123 (syz.0.312) did not claim interface 0 before use [ 174.916133][ T7109] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.923004][ T7109] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 174.930908][ T7109] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 174.938072][ T7109] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 174.948758][ T7109] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 175.203626][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 175.365803][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 175.373600][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 175.388761][ T9] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 175.398007][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.409556][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.420241][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.441691][ T9] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 175.450957][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.461439][ T9] usb 4-1: config 0 descriptor?? [ 175.480558][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 175.491980][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 175.511502][ T5184] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 175.556950][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.567677][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.577142][ T5184] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 175.589489][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 175.602143][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 175.610557][ T10] usb 1-1: SerialNumber: syz [ 175.615335][ T6370] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 175.637051][ T5184] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 175.648563][ T5184] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 175.657703][ T5184] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 175.668172][ T5184] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 175.694828][ T7121] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 175.718596][ T9] usb 4-1: USB disconnect, device number 14 [ 175.842715][ T10] usb 1-1: 0:2 : does not exist [ 175.862274][ T10] usb 1-1: unit 5 not found! [ 175.896767][ T10] usb 1-1: USB disconnect, device number 13 [ 175.933151][ T7144] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.940744][ T6083] udevd[6083]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.986859][ T7144] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 176.177834][ T7150] netlink: 'syz.2.321': attribute type 17 has an invalid length. [ 176.228781][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 176.318919][ T7150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.343843][ T7150] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.387438][ T7150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.665029][ T7166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.676074][ T7166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.777581][ T5920] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 176.823527][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 176.943715][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.949915][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 176.951410][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 176.974020][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 176.974560][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.992643][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 177.063705][ T5920] usb 4-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 177.065439][ T7172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.328'. [ 177.078573][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 177.078625][ T5920] usb 4-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 177.078649][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.081455][ T5920] usb 4-1: config 0 descriptor?? [ 177.087915][ T5149] Bluetooth: hci4: command 0x0c1a tx timeout [ 177.098491][ T5920] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 177.111451][ T9] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 177.155129][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.225470][ T9] usb 1-1: config 0 descriptor?? [ 178.345632][ T7182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.371542][ T7182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.766209][ T982] usb 4-1: USB disconnect, device number 15 [ 179.882692][ T7198] program syz.1.333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.954070][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 179.974191][ T9] asix 1-1:0.0: probe with driver asix failed with error -71 [ 180.015343][ T9] usb 1-1: USB disconnect, device number 14 [ 180.355452][ T7206] netlink: 294 bytes leftover after parsing attributes in process `syz.0.336'. [ 180.364953][ T7206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.430710][ T7217] FAULT_INJECTION: forcing a failure. [ 181.430710][ T7217] name failslab, interval 1, probability 0, space 0, times 0 [ 181.471714][ T7217] CPU: 1 UID: 0 PID: 7217 Comm: syz.1.341 Not tainted syzkaller #0 PREEMPT(full) [ 181.471744][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.471755][ T7217] Call Trace: [ 181.471763][ T7217] [ 181.471773][ T7217] dump_stack_lvl+0x189/0x250 [ 181.471805][ T7217] ? __pfx____ratelimit+0x10/0x10 [ 181.471828][ T7217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.471854][ T7217] ? __pfx__printk+0x10/0x10 [ 181.471880][ T7217] ? __pfx___might_resched+0x10/0x10 [ 181.471906][ T7217] should_fail_ex+0x414/0x560 [ 181.471941][ T7217] should_failslab+0xa8/0x100 [ 181.471962][ T7217] kmem_cache_alloc_node_noprof+0x77/0x710 [ 181.471989][ T7217] ? __alloc_skb+0x112/0x2d0 [ 181.472023][ T7217] __alloc_skb+0x112/0x2d0 [ 181.472056][ T7217] netlink_ack+0x146/0xa50 [ 181.472091][ T7217] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 181.472117][ T7217] ? ref_tracker_free+0x63a/0x7d0 [ 181.472135][ T7217] ? __asan_memcpy+0x40/0x70 [ 181.472159][ T7217] ? __pfx_ref_tracker_free+0x10/0x10 [ 181.472176][ T7217] ? __skb_clone+0x63/0x7a0 [ 181.472206][ T7217] netlink_rcv_skb+0x28c/0x470 [ 181.472235][ T7217] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 181.472264][ T7217] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 181.472305][ T7217] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.472342][ T7217] netlink_unicast+0x82f/0x9e0 [ 181.472377][ T7217] ? __pfx_netlink_unicast+0x10/0x10 [ 181.472405][ T7217] ? netlink_sendmsg+0x642/0xb30 [ 181.472421][ T7217] ? skb_put+0x11b/0x210 [ 181.472443][ T7217] netlink_sendmsg+0x805/0xb30 [ 181.472471][ T7217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.472491][ T7217] ? __import_iovec+0x5d4/0x7f0 [ 181.472512][ T7217] ? aa_sock_msg_perm+0xf1/0x1d0 [ 181.472541][ T7217] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.472561][ T7217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.472579][ T7217] __sock_sendmsg+0x21c/0x270 [ 181.472608][ T7217] ____sys_sendmsg+0x505/0x830 [ 181.472635][ T7217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.472672][ T7217] ___sys_sendmsg+0x21f/0x2a0 [ 181.472696][ T7217] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.472753][ T7217] ? __fget_files+0x2a/0x420 [ 181.472770][ T7217] ? __fget_files+0x3a0/0x420 [ 181.472799][ T7217] __sys_sendmsg+0x164/0x220 [ 181.472822][ T7217] ? __pfx___sys_sendmsg+0x10/0x10 [ 181.472851][ T7217] ? __pfx_ksys_write+0x10/0x10 [ 181.472881][ T7217] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 181.472908][ T7217] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.472936][ T7217] __do_fast_syscall_32+0xb6/0x2b0 [ 181.472962][ T7217] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.472991][ T7217] do_fast_syscall_32+0x34/0x80 [ 181.473017][ T7217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.473040][ T7217] RIP: 0023:0xf7fe6539 [ 181.473056][ T7217] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 181.473074][ T7217] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 181.473104][ T7217] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800012c0 [ 181.473118][ T7217] RDX: 0000000000000880 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.473129][ T7217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.473140][ T7217] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 181.473151][ T7217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.473182][ T7217] [ 182.104171][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'. [ 182.503485][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 182.669869][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 182.687972][ T10] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 182.688322][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.345'. [ 182.724475][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 182.741276][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.782313][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 182.826390][ T7237] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 182.852762][ T7234] vxlan0: entered promiscuous mode [ 182.859529][ T10] usb 1-1: invalid MIDI out EP 0 [ 183.023094][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.054020][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.249945][ T10] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 183.333706][ T5920] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 183.356087][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.402337][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.574521][ T5920] usb 2-1: config 0 has no interfaces? [ 183.584780][ T5920] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 183.624481][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.659512][ T5920] usb 2-1: Product: syz [ 183.701850][ T5920] usb 2-1: Manufacturer: syz [ 183.758335][ T5920] usb 2-1: SerialNumber: syz [ 183.847779][ T5920] usb 2-1: config 0 descriptor?? [ 184.355239][ T7239] loop6: detected capacity change from 0 to 524288000 [ 184.423532][ T7239] support for the xor transformation has been removed. [ 185.169798][ T7256] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 185.176697][ T7256] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 185.232358][ T7258] vhci_hcd: connection closed [ 185.239715][ T7256] vhci_hcd vhci_hcd.0: Device attached [ 185.298143][ T50] vhci_hcd: stop threads [ 185.310447][ T50] vhci_hcd: release socket [ 185.350154][ T50] vhci_hcd: disconnect device [ 185.485997][ T7265] FAULT_INJECTION: forcing a failure. [ 185.485997][ T7265] name failslab, interval 1, probability 0, space 0, times 0 [ 185.544303][ T9] usb 1-1: USB disconnect, device number 15 [ 185.553444][ T7265] CPU: 0 UID: 0 PID: 7265 Comm: syz.2.351 Not tainted syzkaller #0 PREEMPT(full) [ 185.553468][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 185.553478][ T7265] Call Trace: [ 185.553484][ T7265] [ 185.553491][ T7265] dump_stack_lvl+0x189/0x250 [ 185.553511][ T7265] ? __pfx____ratelimit+0x10/0x10 [ 185.553524][ T7265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.553536][ T7265] ? __pfx__printk+0x10/0x10 [ 185.553548][ T7265] ? __pfx___might_resched+0x10/0x10 [ 185.553558][ T7265] ? fs_reclaim_acquire+0x7d/0x100 [ 185.553575][ T7265] should_fail_ex+0x414/0x560 [ 185.553595][ T7265] should_failslab+0xa8/0x100 [ 185.553609][ T7265] __kmalloc_noprof+0xcb/0x7f0 [ 185.553624][ T7265] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 185.553640][ T7265] ? __local_bh_enable_ip+0x12d/0x1c0 [ 185.553656][ T7265] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 185.553675][ T7265] genl_family_rcv_msg_doit+0xb8/0x300 [ 185.553694][ T7265] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 185.553714][ T7265] ? apparmor_capable+0x137/0x1b0 [ 185.553728][ T7265] ? bpf_lsm_capable+0x9/0x20 [ 185.553742][ T7265] ? security_capable+0x7e/0x2e0 [ 185.553769][ T7265] genl_rcv_msg+0x60e/0x790 [ 185.553787][ T7265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.553800][ T7265] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 185.553812][ T7265] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 185.553822][ T7265] ? __pfx_nl80211_post_doit+0x10/0x10 [ 185.553835][ T7265] ? __asan_memcpy+0x40/0x70 [ 185.553850][ T7265] ? __pfx_ref_tracker_free+0x10/0x10 [ 185.553866][ T7265] netlink_rcv_skb+0x208/0x470 [ 185.553883][ T7265] ? __lock_acquire+0xab9/0xd20 [ 185.553896][ T7265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.553911][ T7265] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.553940][ T7265] ? down_read+0x1ad/0x2e0 [ 185.553959][ T7265] genl_rcv+0x28/0x40 [ 185.553972][ T7265] netlink_unicast+0x82f/0x9e0 [ 185.553994][ T7265] ? __pfx_netlink_unicast+0x10/0x10 [ 185.554014][ T7265] ? netlink_sendmsg+0x642/0xb30 [ 185.554026][ T7265] ? skb_put+0x11b/0x210 [ 185.554040][ T7265] netlink_sendmsg+0x805/0xb30 [ 185.554057][ T7265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.554069][ T7265] ? __import_iovec+0x5d4/0x7f0 [ 185.554083][ T7265] ? aa_sock_msg_perm+0xf1/0x1d0 [ 185.554101][ T7265] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.554112][ T7265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.554123][ T7265] __sock_sendmsg+0x21c/0x270 [ 185.554141][ T7265] ____sys_sendmsg+0x505/0x830 [ 185.554155][ T7265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.554172][ T7265] ___sys_sendmsg+0x21f/0x2a0 [ 185.554183][ T7265] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.554209][ T7265] ? __fget_files+0x2a/0x420 [ 185.554218][ T7265] ? __fget_files+0x3a0/0x420 [ 185.554232][ T7265] __sys_sendmsg+0x164/0x220 [ 185.554242][ T7265] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.554256][ T7265] ? __pfx_ksys_write+0x10/0x10 [ 185.554270][ T7265] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 185.554283][ T7265] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.554298][ T7265] __do_fast_syscall_32+0xb6/0x2b0 [ 185.554311][ T7265] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.554324][ T7265] do_fast_syscall_32+0x34/0x80 [ 185.554337][ T7265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.554348][ T7265] RIP: 0023:0xf7f74539 [ 185.554357][ T7265] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 185.554366][ T7265] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 185.554377][ T7265] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 185.554384][ T7265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.554389][ T7265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.554394][ T7265] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 185.554400][ T7265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.554414][ T7265] [ 187.001219][ T982] usb 2-1: USB disconnect, device number 18 [ 187.147447][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 187.359133][ T7268] could not allocate digest TFM handle  [ 187.865675][ T7281] sctp: [Deprecated]: syz.3.354 (pid 7281) Use of int in maxseg socket option. [ 187.865675][ T7281] Use struct sctp_assoc_value instead [ 188.011940][ T7292] netlink: 32 bytes leftover after parsing attributes in process `syz.0.357'. [ 188.047921][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 188.315228][ T7296] program syz.4.358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.023005][ T7309] hub 1-0:1.0: USB hub found [ 189.031776][ T7309] hub 1-0:1.0: 1 port detected [ 189.077128][ T7309] binder: 7303:7309 ioctl c0306201 800001c0 returned -22 [ 189.463301][ T7311] netlink: 'syz.1.363': attribute type 3 has an invalid length. [ 189.537155][ T7311] kvm: emulating exchange as write [ 190.187218][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'. [ 190.490778][ T7328] process 'syz.2.369' launched '/dev/fd/4' with NULL argv: empty string added [ 190.646659][ T9] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 190.866015][ T9] usb 2-1: config 0 has no interfaces? [ 190.871600][ T9] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 190.901881][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.954775][ T9] usb 2-1: config 0 descriptor?? [ 191.189538][ T7346] FAULT_INJECTION: forcing a failure. [ 191.189538][ T7346] name failslab, interval 1, probability 0, space 0, times 0 [ 191.255674][ T7346] CPU: 1 UID: 0 PID: 7346 Comm: syz.0.373 Not tainted syzkaller #0 PREEMPT(full) [ 191.255705][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 191.255717][ T7346] Call Trace: [ 191.255726][ T7346] [ 191.255734][ T7346] dump_stack_lvl+0x189/0x250 [ 191.255767][ T7346] ? __pfx____ratelimit+0x10/0x10 [ 191.255792][ T7346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.255818][ T7346] ? __pfx__printk+0x10/0x10 [ 191.255845][ T7346] ? __pfx___might_resched+0x10/0x10 [ 191.255872][ T7346] should_fail_ex+0x414/0x560 [ 191.255907][ T7346] should_failslab+0xa8/0x100 [ 191.255940][ T7346] kmem_cache_alloc_node_noprof+0x77/0x710 [ 191.255968][ T7346] ? __alloc_skb+0x112/0x2d0 [ 191.256003][ T7346] __alloc_skb+0x112/0x2d0 [ 191.256050][ T7346] netlink_ack+0x146/0xa50 [ 191.256098][ T7346] netlink_rcv_skb+0x28c/0x470 [ 191.256126][ T7346] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.256150][ T7346] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 191.256180][ T7346] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 191.256222][ T7346] ? bpf_lsm_capable+0x9/0x20 [ 191.256245][ T7346] ? security_capable+0x7e/0x2e0 [ 191.256280][ T7346] nfnetlink_rcv+0x282/0x2590 [ 191.256309][ T7346] ? __dev_queue_xmit+0x27b/0x3b50 [ 191.256333][ T7346] ? __dev_queue_xmit+0x1d79/0x3b50 [ 191.256353][ T7346] ? kasan_save_track+0x3e/0x80 [ 191.256379][ T7346] ? __kasan_slab_alloc+0x6c/0x80 [ 191.256415][ T7346] ? __dev_queue_xmit+0x27b/0x3b50 [ 191.256451][ T7346] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 191.256477][ T7346] ? __pfx___dev_queue_xmit+0x10/0x10 [ 191.256513][ T7346] ? ref_tracker_free+0x63a/0x7d0 [ 191.256533][ T7346] ? __asan_memcpy+0x40/0x70 [ 191.256557][ T7346] ? __pfx_ref_tracker_free+0x10/0x10 [ 191.256573][ T7346] ? __skb_clone+0x63/0x7a0 [ 191.256597][ T7346] ? __skb_clone+0x483/0x7a0 [ 191.256631][ T7346] ? skb_clone+0x246/0x3a0 [ 191.256656][ T7346] ? __netlink_deliver_tap+0x807/0x850 [ 191.256683][ T7346] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.256719][ T7346] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.256758][ T7346] netlink_unicast+0x82f/0x9e0 [ 191.256794][ T7346] ? __pfx_netlink_unicast+0x10/0x10 [ 191.256822][ T7346] ? netlink_sendmsg+0x642/0xb30 [ 191.256838][ T7346] ? skb_put+0x11b/0x210 [ 191.256860][ T7346] netlink_sendmsg+0x805/0xb30 [ 191.256889][ T7346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.256910][ T7346] ? __import_iovec+0x5d4/0x7f0 [ 191.256941][ T7346] ? aa_sock_msg_perm+0xf1/0x1d0 [ 191.256972][ T7346] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 191.256991][ T7346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.257011][ T7346] __sock_sendmsg+0x21c/0x270 [ 191.257041][ T7346] ____sys_sendmsg+0x505/0x830 [ 191.257082][ T7346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.257120][ T7346] ___sys_sendmsg+0x21f/0x2a0 [ 191.257143][ T7346] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.257202][ T7346] ? __fget_files+0x2a/0x420 [ 191.257220][ T7346] ? __fget_files+0x3a0/0x420 [ 191.257249][ T7346] __sys_sendmsg+0x164/0x220 [ 191.257272][ T7346] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.257300][ T7346] ? __pfx_ksys_write+0x10/0x10 [ 191.257331][ T7346] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 191.257359][ T7346] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.257386][ T7346] __do_fast_syscall_32+0xb6/0x2b0 [ 191.257414][ T7346] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.257443][ T7346] do_fast_syscall_32+0x34/0x80 [ 191.257470][ T7346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.257493][ T7346] RIP: 0023:0xf7f62539 [ 191.257511][ T7346] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 191.257529][ T7346] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 191.257552][ T7346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 191.257566][ T7346] RDX: 0000000004000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.257579][ T7346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.257591][ T7346] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 191.257602][ T7346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.257634][ T7346] [ 191.978383][ T7355] FAULT_INJECTION: forcing a failure. [ 191.978383][ T7355] name failslab, interval 1, probability 0, space 0, times 0 [ 192.025209][ T7355] CPU: 0 UID: 0 PID: 7355 Comm: syz.0.376 Not tainted syzkaller #0 PREEMPT(full) [ 192.025240][ T7355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 192.025253][ T7355] Call Trace: [ 192.025261][ T7355] [ 192.025269][ T7355] dump_stack_lvl+0x189/0x250 [ 192.025302][ T7355] ? __pfx____ratelimit+0x10/0x10 [ 192.025327][ T7355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.025354][ T7355] ? __pfx__printk+0x10/0x10 [ 192.025382][ T7355] ? __pfx___might_resched+0x10/0x10 [ 192.025403][ T7355] ? fs_reclaim_acquire+0x7d/0x100 [ 192.025438][ T7355] should_fail_ex+0x414/0x560 [ 192.025474][ T7355] should_failslab+0xa8/0x100 [ 192.025496][ T7355] kmem_cache_alloc_node_noprof+0x77/0x710 [ 192.025524][ T7355] ? __alloc_skb+0x112/0x2d0 [ 192.025560][ T7355] __alloc_skb+0x112/0x2d0 [ 192.025595][ T7355] sctp_packet_transmit+0x2cc/0x2bb0 [ 192.025634][ T7355] ? sctp_outq_flush+0xbef/0x3140 [ 192.025662][ T7355] ? sctp_outq_flush+0xbef/0x3140 [ 192.025682][ T7355] ? sctp_outq_flush+0xbef/0x3140 [ 192.025705][ T7355] sctp_outq_flush+0xecb/0x3140 [ 192.025726][ T7355] ? sctp_outq_flush+0xbef/0x3140 [ 192.025748][ T7355] ? sctp_make_heartbeat+0x389/0x470 [ 192.025782][ T7355] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 192.025813][ T7355] ? __pfx_sctp_outq_flush+0x10/0x10 [ 192.025843][ T7355] ? sctp_outq_tail+0x612/0x8c0 [ 192.025864][ T7355] ? sctp_do_8_2_transport_strike+0x5b5/0x8b0 [ 192.025889][ T7355] ? sctp_outq_uncork+0x4d/0xa0 [ 192.025913][ T7355] sctp_do_sm+0x5332/0x5a20 [ 192.025946][ T7355] ? arch_stack_walk+0xfc/0x150 [ 192.025984][ T7355] ? __pfx_sctp_do_sm+0x10/0x10 [ 192.026003][ T7355] ? stack_trace_save+0x9c/0xe0 [ 192.026089][ T7355] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 192.026127][ T7355] sctp_apply_peer_addr_params+0xdf/0x1880 [ 192.026166][ T7355] sctp_setsockopt_peer_addr_params+0x678/0x940 [ 192.026202][ T7355] sctp_setsockopt+0x709/0x1200 [ 192.026230][ T7355] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 192.026260][ T7355] do_sock_setsockopt+0x17c/0x1b0 [ 192.026287][ T7355] __ia32_sys_setsockopt+0x13f/0x1b0 [ 192.026314][ T7355] __do_fast_syscall_32+0xb6/0x2b0 [ 192.026342][ T7355] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.026372][ T7355] do_fast_syscall_32+0x34/0x80 [ 192.026399][ T7355] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.026423][ T7355] RIP: 0023:0xf7f62539 [ 192.026441][ T7355] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 192.026459][ T7355] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 192.026481][ T7355] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000084 [ 192.026495][ T7355] RDX: 0000000000000009 RSI: 00000000800001c0 RDI: 000000000000009c [ 192.026508][ T7355] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.026520][ T7355] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 192.026532][ T7355] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.026565][ T7355] [ 192.334295][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.797057][ T43] usb 2-1: USB disconnect, device number 19 [ 193.400597][ T7371] xt_connbytes: Forcing CT accounting to be enabled [ 194.041551][ T7383] TCP: TCP_TX_DELAY enabled [ 194.153954][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.163859][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.223010][ T7386] netlink: 'syz.0.383': attribute type 17 has an invalid length. [ 194.334820][ T7386] netlink: 'syz.0.383': attribute type 27 has an invalid length. [ 196.673943][ T43] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 196.760219][ T7421] xt_connbytes: Forcing CT accounting to be enabled [ 196.809727][ T7421] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 196.883799][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 196.917973][ T43] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 196.943134][ T43] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.046892][ T30] audit: type=1326 audit(1761613421.309:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 197.068523][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.088204][ T43] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.153850][ T43] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 197.211966][ T43] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.331344][ T43] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 197.401822][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.401829][ T30] audit: type=1326 audit(1761613421.309:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 197.401880][ T30] audit: type=1326 audit(1761613421.309:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 197.453779][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.691312][ T30] audit: type=1326 audit(1761613421.309:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 197.837772][ T43] usb 2-1: usb_control_msg returned -32 [ 197.844717][ T43] usbtmc 2-1:16.0: can't read capabilities [ 198.020509][ T30] audit: type=1326 audit(1761613421.309:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 198.086793][ T30] audit: type=1326 audit(1761613421.309:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 198.110569][ T30] audit: type=1326 audit(1761613421.309:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 198.138002][ T30] audit: type=1326 audit(1761613421.309:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 198.165782][ T30] audit: type=1326 audit(1761613421.309:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 198.200829][ T7444] usbtmc 2-1:16.0: usb_bulk_msg returned -71 [ 198.366178][ T30] audit: type=1326 audit(1761613421.309:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 198.409614][ T43] usb 2-1: USB disconnect, device number 20 [ 198.916854][ T7460] FAULT_INJECTION: forcing a failure. [ 198.916854][ T7460] name failslab, interval 1, probability 0, space 0, times 0 [ 198.930312][ T7460] CPU: 0 UID: 0 PID: 7460 Comm: syz.3.398 Not tainted syzkaller #0 PREEMPT(full) [ 198.930340][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 198.930353][ T7460] Call Trace: [ 198.930361][ T7460] [ 198.930370][ T7460] dump_stack_lvl+0x189/0x250 [ 198.930403][ T7460] ? __pfx____ratelimit+0x10/0x10 [ 198.930428][ T7460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.930455][ T7460] ? __pfx__printk+0x10/0x10 [ 198.930479][ T7460] ? __lock_acquire+0xab9/0xd20 [ 198.930508][ T7460] should_fail_ex+0x414/0x560 [ 198.930543][ T7460] should_failslab+0xa8/0x100 [ 198.930565][ T7460] kmem_cache_alloc_noprof+0x74/0x6e0 [ 198.930593][ T7460] ? sctp_get_port_local+0x6d3/0x1680 [ 198.930617][ T7460] sctp_get_port_local+0x6d3/0x1680 [ 198.930649][ T7460] ? __pfx_sctp_get_port_local+0x10/0x10 [ 198.930672][ T7460] ? sctp_bind_addr_match+0x28b/0x2b0 [ 198.930704][ T7460] sctp_do_bind+0x4ea/0x940 [ 198.930737][ T7460] sctp_connect_new_asoc+0x25c/0x690 [ 198.930771][ T7460] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 198.930798][ T7460] ? __local_bh_enable_ip+0x12d/0x1c0 [ 198.930829][ T7460] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 198.930850][ T7460] ? security_sctp_bind_connect+0x7e/0x2e0 [ 198.930878][ T7460] sctp_sendmsg+0x155c/0x2810 [ 198.930930][ T7460] ? __pfx_sctp_sendmsg+0x10/0x10 [ 198.930964][ T7460] ? aa_sk_perm+0x81e/0x950 [ 198.930996][ T7460] ? __pfx_aa_sk_perm+0x10/0x10 [ 198.931027][ T7460] ? sock_rps_record_flow+0x19/0x410 [ 198.931060][ T7460] ? inet_sendmsg+0x2f4/0x370 [ 198.931093][ T7460] __sock_sendmsg+0x19c/0x270 [ 198.931122][ T7460] __sys_sendto+0x3bd/0x520 [ 198.931154][ T7460] ? __pfx___sys_sendto+0x10/0x10 [ 198.931179][ T7460] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 198.931217][ T7460] ? __fget_files+0x3a0/0x420 [ 198.931246][ T7460] ? ksys_write+0x22a/0x250 [ 198.931270][ T7460] ? exc_page_fault+0x82/0x100 [ 198.931294][ T7460] ? __pfx_ksys_write+0x10/0x10 [ 198.931325][ T7460] __ia32_sys_sendto+0xdd/0x100 [ 198.931358][ T7460] __do_fast_syscall_32+0xb6/0x2b0 [ 198.931384][ T7460] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.931414][ T7460] do_fast_syscall_32+0x34/0x80 [ 198.931441][ T7460] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.931465][ T7460] RIP: 0023:0xf7f42539 [ 198.931483][ T7460] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 198.931501][ T7460] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 198.931523][ T7460] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000840 [ 198.931538][ T7460] RDX: 0000000000000001 RSI: 0000000004065851 RDI: 0000000080000340 [ 198.931551][ T7460] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 198.931564][ T7460] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 198.931576][ T7460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.931609][ T7460] [ 199.223625][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.427310][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 199.597049][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'. [ 199.603443][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 199.622849][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 199.653645][ T9] usb 5-1: can't read configurations, error -61 [ 199.863491][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 200.033224][ T7482] macsec1: entered promiscuous mode [ 200.053980][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 200.063775][ T7482] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 200.067186][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 200.086637][ T7482] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 200.087916][ T9] usb 5-1: can't read configurations, error -61 [ 200.126776][ T9] usb usb5-port1: attempt power cycle [ 200.154159][ T5899] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 200.354901][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 200.378569][ T5899] usb 4-1: config 7 has an invalid interface number: 160 but max is 1 [ 200.407939][ T5899] usb 4-1: config 7 has an invalid interface number: 37 but max is 1 [ 200.457886][ T5899] usb 4-1: config 7 has no interface number 0 [ 200.478468][ T5899] usb 4-1: config 7 has no interface number 1 [ 200.485043][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 200.502998][ T5899] usb 4-1: config 7 interface 37 has no altsetting 0 [ 200.529474][ T5899] usb 4-1: New USB device found, idVendor=12d1, idProduct=da18, bcdDevice= e.3c [ 200.542285][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.568777][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 200.576760][ T5899] usb 4-1: Product: syz [ 200.587672][ T5899] usb 4-1: Manufacturer: syz [ 200.601603][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 200.609459][ T5899] usb 4-1: SerialNumber: syz [ 200.635453][ T9] usb 5-1: can't read configurations, error -61 [ 200.784123][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 200.824269][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 200.831243][ T7476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.853492][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 200.869402][ T7476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.877798][ T9] usb 5-1: can't read configurations, error -61 [ 200.896106][ T9] usb usb5-port1: unable to enumerate USB device [ 200.908387][ T7476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.951257][ T7476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.969861][ T7501] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 200.990193][ T7476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.051042][ T7476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.094493][ T7476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.132775][ T7476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.175631][ T7507] FAULT_INJECTION: forcing a failure. [ 201.175631][ T7507] name failslab, interval 1, probability 0, space 0, times 0 [ 201.182202][ T7476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.226218][ T7476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.233551][ T7507] CPU: 0 UID: 0 PID: 7507 Comm: syz.2.408 Not tainted syzkaller #0 PREEMPT(full) [ 201.233578][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.233589][ T7507] Call Trace: [ 201.233597][ T7507] [ 201.233605][ T7507] dump_stack_lvl+0x189/0x250 [ 201.233635][ T7507] ? __pfx____ratelimit+0x10/0x10 [ 201.233658][ T7507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.233683][ T7507] ? __pfx__printk+0x10/0x10 [ 201.233707][ T7507] ? __pfx___might_resched+0x10/0x10 [ 201.233726][ T7507] ? fs_reclaim_acquire+0x7d/0x100 [ 201.233757][ T7507] should_fail_ex+0x414/0x560 [ 201.233789][ T7507] should_failslab+0xa8/0x100 [ 201.233809][ T7507] __kmalloc_noprof+0xcb/0x7f0 [ 201.233834][ T7507] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 201.233856][ T7507] ? __local_bh_enable_ip+0x12d/0x1c0 [ 201.233881][ T7507] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 201.233918][ T7507] genl_family_rcv_msg_doit+0xb8/0x300 [ 201.233947][ T7507] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 201.233977][ T7507] ? apparmor_capable+0x137/0x1b0 [ 201.233999][ T7507] ? bpf_lsm_capable+0x9/0x20 [ 201.234020][ T7507] ? security_capable+0x7e/0x2e0 [ 201.234050][ T7507] genl_rcv_msg+0x60e/0x790 [ 201.234078][ T7507] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.234098][ T7507] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 201.234115][ T7507] ? __pfx_nl80211_del_station+0x10/0x10 [ 201.234134][ T7507] ? __pfx_nl80211_post_doit+0x10/0x10 [ 201.234154][ T7507] ? __asan_memcpy+0x40/0x70 [ 201.234176][ T7507] ? __pfx_ref_tracker_free+0x10/0x10 [ 201.234202][ T7507] netlink_rcv_skb+0x208/0x470 [ 201.234227][ T7507] ? __lock_acquire+0xab9/0xd20 [ 201.234244][ T7507] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.234268][ T7507] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.234313][ T7507] ? down_read+0x1ad/0x2e0 [ 201.234341][ T7507] genl_rcv+0x28/0x40 [ 201.234360][ T7507] netlink_unicast+0x82f/0x9e0 [ 201.234394][ T7507] ? __pfx_netlink_unicast+0x10/0x10 [ 201.234421][ T7507] ? netlink_sendmsg+0x642/0xb30 [ 201.234435][ T7507] ? skb_put+0x11b/0x210 [ 201.234456][ T7507] netlink_sendmsg+0x805/0xb30 [ 201.234483][ T7507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.234502][ T7507] ? __import_iovec+0x5d4/0x7f0 [ 201.234522][ T7507] ? aa_sock_msg_perm+0xf1/0x1d0 [ 201.234549][ T7507] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 201.234571][ T7507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.234589][ T7507] __sock_sendmsg+0x21c/0x270 [ 201.234616][ T7507] ____sys_sendmsg+0x505/0x830 [ 201.234642][ T7507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.234677][ T7507] ___sys_sendmsg+0x21f/0x2a0 [ 201.234699][ T7507] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.234755][ T7507] ? __fget_files+0x2a/0x420 [ 201.234771][ T7507] ? __fget_files+0x3a0/0x420 [ 201.234799][ T7507] __sys_sendmsg+0x164/0x220 [ 201.234820][ T7507] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.234847][ T7507] ? __pfx_ksys_write+0x10/0x10 [ 201.234876][ T7507] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 201.234901][ T7507] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.234934][ T7507] __do_fast_syscall_32+0xb6/0x2b0 [ 201.234959][ T7507] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.234985][ T7507] do_fast_syscall_32+0x34/0x80 [ 201.235009][ T7507] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.235031][ T7507] RIP: 0023:0xf7f74539 [ 201.235047][ T7507] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 201.235063][ T7507] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 201.235083][ T7507] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 201.235096][ T7507] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.235107][ T7507] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.235117][ T7507] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 201.235127][ T7507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.235157][ T7507] [ 201.916846][ T5899] huawei_cdc_ncm 4-1:7.160: CDC Union missing and no IAD found [ 201.943455][ T5899] huawei_cdc_ncm 4-1:7.160: bind() failure [ 202.005676][ T5899] usb 4-1: USB disconnect, device number 16 [ 202.706320][ T5878] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 202.863578][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 202.889803][ T5878] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 202.918185][ T5878] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00 [ 202.937610][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.979041][ T5878] usb 5-1: config 0 descriptor?? [ 203.143524][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 203.318247][ T9] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 203.372344][ T9] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 203.394990][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 203.407035][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.425987][ T5878] hid (null): invalid report_count 43536 [ 203.456710][ T5878] hid-generic 0003:FFFF:FFFF.0002: unknown main item tag 0x6 [ 203.469493][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 203.493563][ T5878] hid-generic 0003:FFFF:FFFF.0002: unknown main item tag 0x0 [ 203.514888][ T5878] hid-generic 0003:FFFF:FFFF.0002: unknown main item tag 0x0 [ 203.542874][ T5878] hid-generic 0003:FFFF:FFFF.0002: unknown main item tag 0x0 [ 203.581232][ T9] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 203.627275][ T5878] hid-generic 0003:FFFF:FFFF.0002: unknown main item tag 0x5 [ 203.640361][ T5878] hid-generic 0003:FFFF:FFFF.0002: invalid report_count 43536 [ 203.642490][ T7554] input: syz1 as /devices/virtual/input/input12 [ 203.649989][ T5878] hid-generic 0003:FFFF:FFFF.0002: item 0 2 1 9 parsing failed [ 203.838746][ T5878] hid-generic 0003:FFFF:FFFF.0002: probe with driver hid-generic failed with error -22 [ 204.370487][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'. [ 205.697218][ T5899] usb 5-1: USB disconnect, device number 12 [ 205.856580][ T7534] delete_channel: no stack [ 205.865368][ T5878] usb 1-1: USB disconnect, device number 16 [ 205.925590][ T7588] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 206.366587][ T7596] netlink: 60 bytes leftover after parsing attributes in process `syz.4.428'. [ 207.303988][ T5878] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 207.500969][ T5878] usb 3-1: unable to get BOS descriptor or descriptor too short [ 207.524609][ T5878] usb 3-1: not running at top speed; connect to a high speed hub [ 207.541995][ T5878] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 207.563322][ T5878] usb 3-1: Duplicate descriptor for config 5 interface 0 altsetting 0, skipping [ 207.604819][ T5878] usb 3-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 207.655085][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.691452][ T5878] usb 3-1: Product: syz [ 207.710229][ T5878] usb 3-1: Manufacturer: syz [ 207.736447][ T5878] usb 3-1: SerialNumber: syz [ 208.536803][ T7655] netlink: 'syz.0.443': attribute type 72 has an invalid length. [ 208.549422][ T7655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.443'. [ 208.693585][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 209.108089][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 209.127388][ T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 209.144177][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.252318][ T9] usb 4-1: config 0 descriptor?? [ 209.473202][ T7653] loop7: detected capacity change from 0 to 16384 [ 209.915631][ T7667] loop7: detected capacity change from 16384 to 0 [ 209.975373][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 210.002890][ T5878] usb 3-1: USB disconnect, device number 12 [ 210.018827][ T9] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 210.040100][ T9] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 210.053639][ T6083] udevd[6083]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.056311][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 211.235991][ T43] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 211.413741][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 211.419179][ T5899] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 211.428290][ T43] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 211.446011][ T43] usb 3-1: config 0 has no interface number 0 [ 211.456181][ T43] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 211.465446][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.486409][ T43] usb 3-1: Product: syz [ 211.490618][ T43] usb 3-1: Manufacturer: syz [ 211.504075][ T43] usb 3-1: SerialNumber: syz [ 211.520858][ T43] usb 3-1: config 0 descriptor?? [ 211.530555][ T43] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 211.540478][ T43] usb 3-1: selecting invalid altsetting 1 [ 211.546737][ T43] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 211.559016][ T43] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 211.580939][ T43] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 211.612741][ T43] usb 3-1: media controller created [ 211.631612][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.652736][ T5899] usb 2-1: config 0 has no interfaces? [ 211.654913][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 211.669180][ T5899] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.670700][ T7701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.459'. [ 211.689986][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.699768][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.714861][ T5899] usb 2-1: config 0 descriptor?? [ 211.729239][ T7688] FAULT_INJECTION: forcing a failure. [ 211.729239][ T7688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.762085][ T7688] CPU: 0 UID: 0 PID: 7688 Comm: syz.2.454 Not tainted syzkaller #0 PREEMPT(full) [ 211.762116][ T7688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 211.762129][ T7688] Call Trace: [ 211.762137][ T7688] [ 211.762147][ T7688] dump_stack_lvl+0x189/0x250 [ 211.762181][ T7688] ? __pfx____ratelimit+0x10/0x10 [ 211.762207][ T7688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.762234][ T7688] ? __pfx__printk+0x10/0x10 [ 211.762256][ T7688] ? __might_fault+0xb0/0x130 [ 211.762296][ T7688] should_fail_ex+0x414/0x560 [ 211.762331][ T7688] _copy_from_user+0x2d/0xb0 [ 211.762358][ T7688] compat_i2cdev_ioctl+0x197/0x5c0 [ 211.762392][ T7688] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 211.762420][ T7688] ? __fget_files+0x3a0/0x420 [ 211.762440][ T7688] ? __fget_files+0x2a/0x420 [ 211.762462][ T7688] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 211.762490][ T7688] __ia32_compat_sys_ioctl+0x543/0x840 [ 211.762521][ T7688] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 211.762548][ T7688] ? __fget_files+0x3a0/0x420 [ 211.762574][ T7688] ? fput+0xa0/0xd0 [ 211.762597][ T7688] ? ksys_write+0x22a/0x250 [ 211.762627][ T7688] ? __pfx_ksys_write+0x10/0x10 [ 211.762666][ T7688] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 211.762694][ T7688] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.762722][ T7688] __do_fast_syscall_32+0xb6/0x2b0 [ 211.762750][ T7688] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.762780][ T7688] do_fast_syscall_32+0x34/0x80 [ 211.762806][ T7688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.762831][ T7688] RIP: 0023:0xf7f74539 [ 211.762850][ T7688] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 211.762868][ T7688] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 211.762891][ T7688] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 211.762904][ T7688] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.762917][ T7688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.762928][ T7688] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 211.762940][ T7688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.762973][ T7688] [ 211.987796][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.078474][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 212.119303][ T5878] usb 2-1: USB disconnect, device number 21 [ 212.126093][ T43] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 212.126250][ T43] zl10353_read_register: readreg error (reg=127, ret==-32) [ 212.127354][ T43] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 212.312987][ T43] usb 3-1: USB disconnect, device number 13 [ 212.713943][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 212.713963][ T30] audit: type=1326 audit(1761613436.969:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 212.843294][ T30] audit: type=1326 audit(1761613436.969:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=13 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 212.911030][ T30] audit: type=1326 audit(1761613436.969:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 212.950587][ T30] audit: type=1326 audit(1761613436.969:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 212.972305][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.032663][ T30] audit: type=1326 audit(1761613436.979:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 213.054753][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.235583][ T30] audit: type=1326 audit(1761613436.979:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 213.322411][ T30] audit: type=1326 audit(1761613436.979:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 213.396979][ T30] audit: type=1326 audit(1761613436.979:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 213.419491][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.426768][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 213.436322][ T7749] netlink: 32 bytes leftover after parsing attributes in process `syz.4.470'. [ 213.770116][ T7751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.472'. [ 213.815947][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.470'. [ 213.918466][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 213.930918][ T10] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 213.960104][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 213.986325][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.059677][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.071679][ T10] usb 3-1: invalid MIDI out EP 0 [ 214.264387][ T10] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 214.299308][ T7709] udevd[7709]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.689204][ T7762] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.475'. [ 215.013752][ T7769] netlink: 32 bytes leftover after parsing attributes in process `syz.1.476'. [ 215.114987][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 215.426304][ T5878] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 215.625399][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 215.638817][ T5878] usb 1-1: unable to get BOS descriptor or descriptor too short [ 215.658893][ T5878] usb 1-1: config 8 has an invalid interface number: 238 but max is 2 [ 215.687132][ T5878] usb 1-1: config 8 has an invalid interface number: 230 but max is 2 [ 215.714496][ T5878] usb 1-1: config 8 has no interface number 0 [ 215.732609][ T5878] usb 1-1: config 8 has no interface number 1 [ 215.770572][ T5878] usb 1-1: config 8 interface 238 has no altsetting 0 [ 215.809217][ T5878] usb 1-1: config 8 interface 230 has no altsetting 0 [ 215.830973][ T5878] usb 1-1: config 8 interface 2 has no altsetting 0 [ 215.869399][ T5878] usb 1-1: New USB device found, idVendor=0582, idProduct=0050, bcdDevice=b3.d9 [ 215.880565][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.917768][ T5878] usb 1-1: Product: syz [ 216.045030][ T5899] usb 3-1: USB disconnect, device number 14 [ 216.094481][ T5878] usb 1-1: Manufacturer: syz [ 216.180577][ T5878] usb 1-1: SerialNumber: syz [ 216.619713][ T5878] usb 1-1: selecting invalid altsetting 0 [ 216.706272][ T5878] usb 1-1: USB disconnect, device number 17 [ 216.814520][ T985] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 216.976623][ T6083] udevd[6083]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.238/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.064030][ T985] usb 3-1: Using ep0 maxpacket: 32 [ 217.085041][ T985] usb 3-1: config 0 has an invalid interface number: 233 but max is 0 [ 217.097267][ T985] usb 3-1: config 0 has no interface number 0 [ 217.116134][ T985] usb 3-1: New USB device found, idVendor=1608, idProduct=0302, bcdDevice=d3.4f [ 217.129813][ T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.213479][ T985] usb 3-1: Product: syz [ 217.217695][ T985] usb 3-1: Manufacturer: syz [ 217.242741][ T985] usb 3-1: SerialNumber: syz [ 217.277433][ T985] usb 3-1: config 0 descriptor?? [ 217.297300][ T7799] netlink: 76 bytes leftover after parsing attributes in process `syz.3.486'. [ 217.312488][ T985] io_ti 3-1:0.233: required endpoints missing [ 217.524034][ T7789] ipt_ECN: cannot use operation on non-tcp rule [ 217.872369][ T7804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.149313][ T7804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.415359][ T7808] netlink: 32 bytes leftover after parsing attributes in process `syz.4.488'. [ 218.521998][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'. [ 219.650038][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 219.907664][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'. [ 220.104740][ T7833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.495'. [ 220.385494][ T7828] macvlan2: entered promiscuous mode [ 220.399397][ T7828] macvlan2: entered allmulticast mode [ 220.408552][ T7828] bond1: (slave macvlan2): Opening slave failed [ 220.470764][ T5940] usb 3-1: USB disconnect, device number 15 [ 220.844411][ T7846] FAULT_INJECTION: forcing a failure. [ 220.844411][ T7846] name failslab, interval 1, probability 0, space 0, times 0 [ 220.923010][ T7846] CPU: 0 UID: 0 PID: 7846 Comm: syz.2.499 Not tainted syzkaller #0 PREEMPT(full) [ 220.923040][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 220.923058][ T7846] Call Trace: [ 220.923064][ T7846] [ 220.923070][ T7846] dump_stack_lvl+0x189/0x250 [ 220.923092][ T7846] ? __pfx____ratelimit+0x10/0x10 [ 220.923108][ T7846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.923124][ T7846] ? __pfx__printk+0x10/0x10 [ 220.923140][ T7846] ? __pfx___might_resched+0x10/0x10 [ 220.923152][ T7846] ? fs_reclaim_acquire+0x7d/0x100 [ 220.923173][ T7846] should_fail_ex+0x414/0x560 [ 220.923195][ T7846] should_failslab+0xa8/0x100 [ 220.923209][ T7846] __kmalloc_noprof+0xcb/0x7f0 [ 220.923225][ T7846] ? tomoyo_encode+0x28b/0x550 [ 220.923247][ T7846] tomoyo_encode+0x28b/0x550 [ 220.923264][ T7846] tomoyo_realpath_from_path+0x58d/0x5d0 [ 220.923285][ T7846] tomoyo_check_open_permission+0x1c1/0x3b0 [ 220.923297][ T7846] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 220.923308][ T7846] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 220.923319][ T7846] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 220.923348][ T7846] ? lockref_get+0x15/0x60 [ 220.923369][ T7846] ? tomoyo_file_open+0x165/0x220 [ 220.923387][ T7846] security_file_open+0xb1/0x270 [ 220.923405][ T7846] do_dentry_open+0x384/0x13f0 [ 220.923426][ T7846] ? vfs_open+0x31/0x340 [ 220.923446][ T7846] vfs_open+0x3b/0x340 [ 220.923459][ T7846] ? path_openat+0x2ecd/0x3830 [ 220.923481][ T7846] path_openat+0x2ee5/0x3830 [ 220.923545][ T7846] ? __pfx_path_openat+0x10/0x10 [ 220.923583][ T7846] do_filp_open+0x1fa/0x410 [ 220.923600][ T7846] ? __lock_acquire+0xab9/0xd20 [ 220.923617][ T7846] ? __pfx_do_filp_open+0x10/0x10 [ 220.923653][ T7846] ? _raw_spin_unlock+0x28/0x50 [ 220.923671][ T7846] ? alloc_fd+0x64c/0x6c0 [ 220.923703][ T7846] do_sys_openat2+0x121/0x1c0 [ 220.923724][ T7846] ? __pfx_do_sys_openat2+0x10/0x10 [ 220.923742][ T7846] ? ksys_write+0x22a/0x250 [ 220.923764][ T7846] ? __pfx_ksys_write+0x10/0x10 [ 220.923795][ T7846] __ia32_compat_sys_openat+0x131/0x160 [ 220.923824][ T7846] __do_fast_syscall_32+0xb6/0x2b0 [ 220.923853][ T7846] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.923884][ T7846] do_fast_syscall_32+0x34/0x80 [ 220.923910][ T7846] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.923934][ T7846] RIP: 0023:0xf7f74539 [ 220.923952][ T7846] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 220.923969][ T7846] RSP: 002b:00000000f5466100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 220.923991][ T7846] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5466150 [ 220.924005][ T7846] RDX: 0000000000145703 RSI: 0000000000000000 RDI: 00000000f7405ff4 [ 220.924018][ T7846] RBP: 0000000000145703 R08: 0000000000000000 R09: 0000000000000000 [ 220.924030][ T7846] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 220.924041][ T7846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.924070][ T7846] [ 221.223590][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.243581][ T7846] ERROR: Out of memory at tomoyo_realpath_from_path. [ 221.652471][ T43] IPVS: starting estimator thread 0... [ 221.753823][ T7856] IPVS: using max 24 ests per chain, 57600 per kthread [ 221.911058][ T7864] netlink: 32 bytes leftover after parsing attributes in process `syz.1.503'. [ 221.949321][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 222.067272][ T7867] netlink: 32 bytes leftover after parsing attributes in process `syz.4.504'. [ 222.096077][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.504'. [ 222.613021][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.506'. [ 223.167068][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 224.095478][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 224.610909][ T7901] FAULT_INJECTION: forcing a failure. [ 224.610909][ T7901] name failslab, interval 1, probability 0, space 0, times 0 [ 224.669138][ T7901] CPU: 1 UID: 0 PID: 7901 Comm: syz.0.515 Not tainted syzkaller #0 PREEMPT(full) [ 224.669169][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 224.669181][ T7901] Call Trace: [ 224.669189][ T7901] [ 224.669198][ T7901] dump_stack_lvl+0x189/0x250 [ 224.669230][ T7901] ? __pfx____ratelimit+0x10/0x10 [ 224.669254][ T7901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.669281][ T7901] ? __pfx__printk+0x10/0x10 [ 224.669309][ T7901] ? __pfx___might_resched+0x10/0x10 [ 224.669329][ T7901] ? fs_reclaim_acquire+0x7d/0x100 [ 224.669364][ T7901] should_fail_ex+0x414/0x560 [ 224.669400][ T7901] should_failslab+0xa8/0x100 [ 224.669432][ T7901] __kmalloc_noprof+0xcb/0x7f0 [ 224.669459][ T7901] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 224.669484][ T7901] ? rcu_is_watching+0x15/0xb0 [ 224.669515][ T7901] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 224.669548][ T7901] genl_family_rcv_msg_doit+0xb8/0x300 [ 224.669588][ T7901] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 224.669617][ T7901] ? apparmor_capable+0x137/0x1b0 [ 224.669637][ T7901] ? bpf_lsm_capable+0x9/0x20 [ 224.669656][ T7901] ? security_capable+0x7e/0x2e0 [ 224.669687][ T7901] genl_rcv_msg+0x60e/0x790 [ 224.669718][ T7901] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.669740][ T7901] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 224.669769][ T7901] ? __asan_memcpy+0x40/0x70 [ 224.669794][ T7901] ? __pfx_ref_tracker_free+0x10/0x10 [ 224.669823][ T7901] netlink_rcv_skb+0x208/0x470 [ 224.669858][ T7901] ? __lock_acquire+0xab9/0xd20 [ 224.669888][ T7901] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.669915][ T7901] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 224.669968][ T7901] ? down_read+0x1ad/0x2e0 [ 224.670000][ T7901] genl_rcv+0x28/0x40 [ 224.670021][ T7901] netlink_unicast+0x82f/0x9e0 [ 224.670060][ T7901] ? __pfx_netlink_unicast+0x10/0x10 [ 224.670090][ T7901] ? netlink_sendmsg+0x642/0xb30 [ 224.670108][ T7901] ? skb_put+0x11b/0x210 [ 224.670140][ T7901] netlink_sendmsg+0x805/0xb30 [ 224.670172][ T7901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.670195][ T7901] ? __import_iovec+0x5d4/0x7f0 [ 224.670218][ T7901] ? aa_sock_msg_perm+0xf1/0x1d0 [ 224.670250][ T7901] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 224.670270][ T7901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.670290][ T7901] __sock_sendmsg+0x21c/0x270 [ 224.670321][ T7901] ____sys_sendmsg+0x505/0x830 [ 224.670350][ T7901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.670400][ T7901] ___sys_sendmsg+0x21f/0x2a0 [ 224.670425][ T7901] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.670486][ T7901] ? __fget_files+0x2a/0x420 [ 224.670506][ T7901] ? __fget_files+0x3a0/0x420 [ 224.670536][ T7901] __sys_sendmsg+0x164/0x220 [ 224.670554][ T7901] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.670572][ T7901] ? __pfx_ksys_write+0x10/0x10 [ 224.670593][ T7901] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 224.670611][ T7901] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.670628][ T7901] __do_fast_syscall_32+0xb6/0x2b0 [ 224.670645][ T7901] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.670663][ T7901] do_fast_syscall_32+0x34/0x80 [ 224.670679][ T7901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.670694][ T7901] RIP: 0023:0xf7f62539 [ 224.670706][ T7901] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 224.670717][ T7901] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 224.670732][ T7901] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140 [ 224.670741][ T7901] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.670752][ T7901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.670762][ T7901] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 224.670773][ T7901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.670812][ T7901] [ 225.057794][ T5878] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 225.213471][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 225.266037][ T5878] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 225.297965][ T5878] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 225.343769][ T5878] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.378295][ T5878] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 225.389353][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 225.408923][ T5878] usb 5-1: Product: syz [ 225.541083][ T7908] hub 1-0:1.0: USB hub found [ 225.556090][ T5878] usb 5-1: Manufacturer: syz [ 225.632463][ T5878] usb 5-1: SerialNumber: syz [ 225.662880][ T5878] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input13 [ 225.682490][ T7908] hub 1-0:1.0: 1 port detected [ 225.872813][ T5878] usb 5-1: USB disconnect, device number 13 [ 225.903018][ T7709] udevd[7709]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 225.918205][ T5878] appletouch 5-1:1.0: input: appletouch disconnected [ 226.033467][ T5940] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 226.243535][ T5940] usb 1-1: device descriptor read/64, error -71 [ 226.471852][ T7918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.519'. [ 226.584106][ T5940] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 226.670485][ T7920] bond1 (unregistering): Released all slaves [ 226.733659][ T5940] usb 1-1: device descriptor read/64, error -71 [ 226.846677][ T5940] usb usb1-port1: attempt power cycle [ 227.017304][ T7931] netlink: 'syz.2.524': attribute type 13 has an invalid length. [ 227.204124][ T5940] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 227.228706][ T5940] usb 1-1: device descriptor read/8, error -71 [ 227.374892][ T985] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 227.473526][ T10] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 227.481153][ T5940] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 227.510666][ T5940] usb 1-1: device descriptor read/8, error -71 [ 227.536824][ T985] usb 3-1: Using ep0 maxpacket: 8 [ 227.544715][ T985] usb 3-1: config 162 has an invalid interface number: 197 but max is 0 [ 227.565374][ T985] usb 3-1: config 162 has no interface number 0 [ 227.572013][ T985] usb 3-1: config 162 interface 197 altsetting 4 endpoint 0x86 has invalid maxpacket 1024, setting to 64 [ 227.586147][ T985] usb 3-1: config 162 interface 197 has no altsetting 0 [ 227.595983][ T985] usb 3-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 227.605994][ T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.615113][ T985] usb 3-1: Product: syz [ 227.619727][ T985] usb 3-1: Manufacturer: syz [ 227.625875][ T5940] usb usb1-port1: unable to enumerate USB device [ 227.633814][ T10] usb 5-1: Invalid ep0 maxpacket: 16 [ 227.642391][ T985] usb 3-1: SerialNumber: syz [ 227.764435][ T10] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 227.774101][ T43] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 227.913632][ T43] usb 1-1: device descriptor read/64, error -71 [ 227.923624][ T10] usb 5-1: Invalid ep0 maxpacket: 16 [ 227.929290][ T10] usb usb5-port1: attempt power cycle [ 228.064782][ T7933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.074319][ T7933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.109515][ T985] usb 3-1: USB disconnect, device number 16 [ 228.130349][ T7949] fuse: Bad value for 'fd' [ 228.174219][ T43] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 228.283831][ T10] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 228.306145][ T10] usb 5-1: Invalid ep0 maxpacket: 16 [ 228.443521][ T10] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 228.466705][ T10] usb 5-1: Invalid ep0 maxpacket: 16 [ 228.472319][ T10] usb usb5-port1: unable to enumerate USB device [ 228.884029][ T7957] FAULT_INJECTION: forcing a failure. [ 228.884029][ T7957] name failslab, interval 1, probability 0, space 0, times 0 [ 228.899646][ T7957] CPU: 1 UID: 0 PID: 7957 Comm: syz.0.534 Not tainted syzkaller #0 PREEMPT(full) [ 228.899675][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 228.899685][ T7957] Call Trace: [ 228.899692][ T7957] [ 228.899701][ T7957] dump_stack_lvl+0x189/0x250 [ 228.899728][ T7957] ? __pfx____ratelimit+0x10/0x10 [ 228.899749][ T7957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.899770][ T7957] ? __pfx__printk+0x10/0x10 [ 228.899788][ T7957] ? __pfx___might_resched+0x10/0x10 [ 228.899806][ T7957] ? fs_reclaim_acquire+0x7d/0x100 [ 228.899835][ T7957] should_fail_ex+0x414/0x560 [ 228.899863][ T7957] should_failslab+0xa8/0x100 [ 228.899881][ T7957] kmem_cache_alloc_noprof+0x74/0x6e0 [ 228.899903][ T7957] ? skb_clone+0x212/0x3a0 [ 228.899925][ T7957] skb_clone+0x212/0x3a0 [ 228.899940][ T7957] ? nfnetlink_rcv+0x4ba/0x2590 [ 228.899964][ T7957] nfnetlink_rcv+0x4ec/0x2590 [ 228.899987][ T7957] ? __dev_queue_xmit+0x27b/0x3b50 [ 228.900006][ T7957] ? __dev_queue_xmit+0x1d79/0x3b50 [ 228.900022][ T7957] ? kasan_save_track+0x3e/0x80 [ 228.900043][ T7957] ? __kasan_slab_alloc+0x6c/0x80 [ 228.900073][ T7957] ? __dev_queue_xmit+0x27b/0x3b50 [ 228.900100][ T7957] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 228.900135][ T7957] ? ref_tracker_free+0x63a/0x7d0 [ 228.900151][ T7957] ? __asan_memcpy+0x40/0x70 [ 228.900181][ T7957] ? __pfx_ref_tracker_free+0x10/0x10 [ 228.900194][ T7957] ? __skb_clone+0x63/0x7a0 [ 228.900214][ T7957] ? __skb_clone+0x483/0x7a0 [ 228.900236][ T7957] ? skb_clone+0x246/0x3a0 [ 228.900255][ T7957] ? __netlink_deliver_tap+0x807/0x850 [ 228.900279][ T7957] ? netlink_deliver_tap+0x2e/0x1b0 [ 228.900318][ T7957] netlink_unicast+0x82f/0x9e0 [ 228.900346][ T7957] ? __pfx_netlink_unicast+0x10/0x10 [ 228.900370][ T7957] ? netlink_sendmsg+0x642/0xb30 [ 228.900382][ T7957] ? skb_put+0x11b/0x210 [ 228.900400][ T7957] netlink_sendmsg+0x805/0xb30 [ 228.900422][ T7957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.900439][ T7957] ? __import_iovec+0x5d4/0x7f0 [ 228.900464][ T7957] ? aa_sock_msg_perm+0xf1/0x1d0 [ 228.900489][ T7957] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 228.900505][ T7957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.900520][ T7957] __sock_sendmsg+0x21c/0x270 [ 228.900543][ T7957] ____sys_sendmsg+0x505/0x830 [ 228.900564][ T7957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.900594][ T7957] ___sys_sendmsg+0x21f/0x2a0 [ 228.900612][ T7957] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.900658][ T7957] ? __fget_files+0x2a/0x420 [ 228.900672][ T7957] ? __fget_files+0x3a0/0x420 [ 228.900696][ T7957] __sys_sendmsg+0x164/0x220 [ 228.900715][ T7957] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.900738][ T7957] ? __pfx_ksys_write+0x10/0x10 [ 228.900763][ T7957] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 228.900786][ T7957] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.900809][ T7957] __do_fast_syscall_32+0xb6/0x2b0 [ 228.900832][ T7957] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.900854][ T7957] do_fast_syscall_32+0x34/0x80 [ 228.900876][ T7957] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.900895][ T7957] RIP: 0023:0xf7f62539 [ 228.900910][ T7957] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 228.900924][ T7957] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 228.900943][ T7957] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000580 [ 228.900955][ T7957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.900963][ T7957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.900973][ T7957] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 228.900982][ T7957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.901007][ T7957] [ 229.599815][ T7969] netlink: 'syz.3.538': attribute type 9 has an invalid length. [ 229.608201][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 229.627571][ T7969] hsr0: entered promiscuous mode [ 229.633971][ T7969] macvlan2: entered promiscuous mode [ 229.639628][ T7969] macvlan2: entered allmulticast mode [ 229.646925][ T7969] hsr0: entered allmulticast mode [ 229.652080][ T7969] hsr_slave_0: entered allmulticast mode [ 229.672725][ T7969] hsr_slave_1: entered allmulticast mode [ 229.753449][ T43] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 230.074633][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 230.892477][ T43] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 230.953691][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.986814][ T43] usb 1-1: config 0 descriptor?? [ 231.048937][ T7981] FAULT_INJECTION: forcing a failure. [ 231.048937][ T7981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.138545][ T7981] CPU: 1 UID: 0 PID: 7981 Comm: syz.3.541 Not tainted syzkaller #0 PREEMPT(full) [ 231.138581][ T7981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 231.138595][ T7981] Call Trace: [ 231.138604][ T7981] [ 231.138613][ T7981] dump_stack_lvl+0x189/0x250 [ 231.138647][ T7981] ? __pfx____ratelimit+0x10/0x10 [ 231.138670][ T7981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.138697][ T7981] ? __pfx__printk+0x10/0x10 [ 231.138720][ T7981] ? __might_fault+0xb0/0x130 [ 231.138764][ T7981] should_fail_ex+0x414/0x560 [ 231.138800][ T7981] _copy_from_user+0x2d/0xb0 [ 231.138826][ T7981] input_event_from_user+0xf9/0x280 [ 231.138854][ T7981] ? __pfx_input_event_from_user+0x10/0x10 [ 231.138885][ T7981] ? input_inject_event+0xb6/0x340 [ 231.138918][ T7981] evdev_write+0x2a6/0x480 [ 231.138950][ T7981] ? __pfx_evdev_write+0x10/0x10 [ 231.138994][ T7981] ? bpf_lsm_file_permission+0x9/0x20 [ 231.139016][ T7981] ? security_file_permission+0x75/0x290 [ 231.139042][ T7981] ? rw_verify_area+0x255/0x4d0 [ 231.139066][ T7981] ? __lock_acquire+0xab9/0xd20 [ 231.139082][ T7981] ? __pfx_evdev_write+0x10/0x10 [ 231.139107][ T7981] vfs_write+0x27e/0xb30 [ 231.139144][ T7981] ? __pfx_vfs_write+0x10/0x10 [ 231.139174][ T7981] ? __fget_files+0x2a/0x420 [ 231.139197][ T7981] ? __fget_files+0x2a/0x420 [ 231.139214][ T7981] ? __fget_files+0x3a0/0x420 [ 231.139230][ T7981] ? __fget_files+0x2a/0x420 [ 231.139256][ T7981] ksys_write+0x145/0x250 [ 231.139281][ T7981] ? exc_page_fault+0x82/0x100 [ 231.139306][ T7981] ? __pfx_ksys_write+0x10/0x10 [ 231.139337][ T7981] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 231.139365][ T7981] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.139394][ T7981] __do_fast_syscall_32+0xb6/0x2b0 [ 231.139422][ T7981] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.139451][ T7981] do_fast_syscall_32+0x34/0x80 [ 231.139477][ T7981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.139500][ T7981] RIP: 0023:0xf7f42539 [ 231.139517][ T7981] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 231.139535][ T7981] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 231.139557][ T7981] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 231.139571][ T7981] RDX: 0000000000000918 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.139583][ T7981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 231.139594][ T7981] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 231.139605][ T7981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.139637][ T7981] [ 231.436083][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 231.444919][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 231.454756][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 231.462007][ T43] usb 1-1: media controller created [ 231.477089][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.725437][ T43] az6027: usb out operation failed. (-71) [ 231.732536][ T43] az6027: usb out operation failed. (-71) [ 231.746664][ T43] stb0899_attach: Driver disabled by Kconfig [ 231.752750][ T43] az6027: no front-end attached [ 231.752750][ T43] [ 231.769841][ T43] az6027: usb out operation failed. (-71) [ 231.783604][ T43] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 231.803906][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 231.840749][ T43] dvb-usb: schedule remote query interval to 400 msecs. [ 231.860345][ T43] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 231.874694][ T43] usb 1-1: USB disconnect, device number 24 [ 231.913646][ T5878] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 232.015535][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 232.023272][ T43] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 232.085289][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 232.148357][ T7992] FAULT_INJECTION: forcing a failure. [ 232.148357][ T7992] name failslab, interval 1, probability 0, space 0, times 0 [ 232.161863][ T7992] CPU: 1 UID: 0 PID: 7992 Comm: syz.2.546 Not tainted syzkaller #0 PREEMPT(full) [ 232.161893][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 232.161906][ T7992] Call Trace: [ 232.161914][ T7992] [ 232.161923][ T7992] dump_stack_lvl+0x189/0x250 [ 232.161956][ T7992] ? __pfx____ratelimit+0x10/0x10 [ 232.161981][ T7992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.162008][ T7992] ? __pfx__printk+0x10/0x10 [ 232.162044][ T7992] should_fail_ex+0x414/0x560 [ 232.162080][ T7992] should_failslab+0xa8/0x100 [ 232.162102][ T7992] __kmalloc_cache_noprof+0x6f/0x6f0 [ 232.162128][ T7992] ? do_raw_spin_lock+0x121/0x290 [ 232.162153][ T7992] ? tipc_group_create_member+0x60/0x540 [ 232.162192][ T7992] tipc_group_create_member+0x60/0x540 [ 232.162231][ T7992] tipc_nametbl_build_group+0x2f0/0x4d0 [ 232.162251][ T7992] ? tipc_nametbl_build_group+0x2e/0x4d0 [ 232.162280][ T7992] tipc_sk_join+0x397/0x6b0 [ 232.162305][ T7992] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.162336][ T7992] ? __pfx_tipc_sk_join+0x10/0x10 [ 232.162374][ T7992] tipc_setsockopt+0x735/0x970 [ 232.162404][ T7992] ? __pfx_tipc_setsockopt+0x10/0x10 [ 232.162437][ T7992] ? __fget_files+0x2a/0x420 [ 232.162454][ T7992] ? aa_sock_opt_perm+0xff/0x1b0 [ 232.162487][ T7992] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 232.162507][ T7992] ? __pfx_tipc_setsockopt+0x10/0x10 [ 232.162531][ T7992] do_sock_setsockopt+0x17c/0x1b0 [ 232.162557][ T7992] __ia32_sys_setsockopt+0x13f/0x1b0 [ 232.162584][ T7992] __do_fast_syscall_32+0xb6/0x2b0 [ 232.162612][ T7992] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.162643][ T7992] do_fast_syscall_32+0x34/0x80 [ 232.162669][ T7992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.162691][ T7992] RIP: 0023:0xf7f74539 [ 232.162709][ T7992] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 232.162727][ T7992] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 232.162750][ T7992] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000010f [ 232.162764][ T7992] RDX: 0000000000000087 RSI: 0000000080000100 RDI: 0000000000000010 [ 232.162777][ T7992] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.162789][ T7992] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 232.162801][ T7992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.162832][ T7992] [ 232.404391][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.454510][ T5878] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 232.463151][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.483672][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.496887][ T5878] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.742033][ T8002] FAULT_INJECTION: forcing a failure. [ 232.742033][ T8002] name failslab, interval 1, probability 0, space 0, times 0 [ 232.764790][ T5878] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 232.770587][ T8002] CPU: 1 UID: 0 PID: 8002 Comm: syz.3.548 Not tainted syzkaller #0 PREEMPT(full) [ 232.770608][ T8002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 232.770617][ T8002] Call Trace: [ 232.770624][ T8002] [ 232.770630][ T8002] dump_stack_lvl+0x189/0x250 [ 232.770668][ T8002] ? __pfx____ratelimit+0x10/0x10 [ 232.770693][ T8002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.770711][ T8002] ? __pfx__printk+0x10/0x10 [ 232.770730][ T8002] ? __pfx___might_resched+0x10/0x10 [ 232.770744][ T8002] ? fs_reclaim_acquire+0x7d/0x100 [ 232.770771][ T8002] should_fail_ex+0x414/0x560 [ 232.770803][ T8002] should_failslab+0xa8/0x100 [ 232.770823][ T8002] __kmalloc_noprof+0xcb/0x7f0 [ 232.770847][ T8002] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 232.770870][ T8002] ? __local_bh_enable_ip+0x12d/0x1c0 [ 232.770894][ T8002] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 232.770924][ T8002] genl_family_rcv_msg_doit+0xb8/0x300 [ 232.770953][ T8002] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 232.770983][ T8002] ? apparmor_capable+0x137/0x1b0 [ 232.771005][ T8002] ? bpf_lsm_capable+0x9/0x20 [ 232.771026][ T8002] ? security_capable+0x7e/0x2e0 [ 232.771057][ T8002] genl_rcv_msg+0x60e/0x790 [ 232.771084][ T8002] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.771104][ T8002] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 232.771121][ T8002] ? __pfx_nl80211_new_station+0x10/0x10 [ 232.771140][ T8002] ? __pfx_nl80211_post_doit+0x10/0x10 [ 232.771160][ T8002] ? __asan_memcpy+0x40/0x70 [ 232.771182][ T8002] ? __pfx_ref_tracker_free+0x10/0x10 [ 232.771208][ T8002] netlink_rcv_skb+0x208/0x470 [ 232.771232][ T8002] ? __lock_acquire+0xab9/0xd20 [ 232.771251][ T8002] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.771274][ T8002] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 232.771319][ T8002] ? down_read+0x1ad/0x2e0 [ 232.771348][ T8002] genl_rcv+0x28/0x40 [ 232.771366][ T8002] netlink_unicast+0x82f/0x9e0 [ 232.771400][ T8002] ? __pfx_netlink_unicast+0x10/0x10 [ 232.771427][ T8002] ? netlink_sendmsg+0x642/0xb30 [ 232.771440][ T8002] ? skb_put+0x11b/0x210 [ 232.771462][ T8002] netlink_sendmsg+0x805/0xb30 [ 232.771488][ T8002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.771508][ T8002] ? __import_iovec+0x5d4/0x7f0 [ 232.771528][ T8002] ? aa_sock_msg_perm+0xf1/0x1d0 [ 232.771555][ T8002] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 232.771578][ T8002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.771596][ T8002] __sock_sendmsg+0x21c/0x270 [ 232.771623][ T8002] ____sys_sendmsg+0x505/0x830 [ 232.771648][ T8002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.771691][ T8002] ___sys_sendmsg+0x21f/0x2a0 [ 232.771712][ T8002] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.771768][ T8002] ? __fget_files+0x2a/0x420 [ 232.771784][ T8002] ? __fget_files+0x3a0/0x420 [ 232.771811][ T8002] __sys_sendmsg+0x164/0x220 [ 232.771832][ T8002] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.771860][ T8002] ? __pfx_ksys_write+0x10/0x10 [ 232.771888][ T8002] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 232.771914][ T8002] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.771940][ T8002] __do_fast_syscall_32+0xb6/0x2b0 [ 232.771965][ T8002] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.771991][ T8002] do_fast_syscall_32+0x34/0x80 [ 232.772015][ T8002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.772037][ T8002] RIP: 0023:0xf7f42539 [ 232.772054][ T8002] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 232.772069][ T8002] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 232.772090][ T8002] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001080 [ 232.772104][ T8002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.772114][ T8002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.772124][ T8002] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 232.772135][ T8002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.772164][ T8002] [ 233.175138][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.189648][ T5878] usb 5-1: config 0 descriptor?? [ 233.223663][ T5878] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 233.249822][ T5184] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 233.266624][ T5184] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 233.336837][ T5184] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 233.457303][ T7709] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 233.470848][ T5184] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 233.471047][ T8010] sctp: [Deprecated]: syz.0.552 (pid 8010) Use of int in max_burst socket option. [ 233.471047][ T8010] Use struct sctp_assoc_value instead [ 233.503814][ T7983] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 233.520398][ T5184] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 233.535268][ T5878] usb 5-1: USB disconnect, device number 18 [ 233.643429][ T5899] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 233.805207][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.816117][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.829577][ T5899] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 233.838975][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.850089][ T5899] usb 3-1: config 0 descriptor?? [ 234.136459][ T30] audit: type=1326 audit(1761613458.399:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 234.174192][ T30] audit: type=1326 audit(1761613458.419:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 234.200879][ T30] audit: type=1326 audit(1761613458.419:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 234.243591][ T30] audit: type=1326 audit(1761613458.419:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=320 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 234.283702][ T30] audit: type=1326 audit(1761613458.419:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 234.329110][ T30] audit: type=1326 audit(1761613458.419:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 234.368635][ T30] audit: type=1326 audit(1761613458.419:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 234.477251][ T30] audit: type=1326 audit(1761613458.419:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 234.785951][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 234.796572][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 234.827586][ T5899] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 234.837372][ T5899] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 234.843424][ T30] audit: type=1326 audit(1761613458.419:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 234.845168][ T5899] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 234.873581][ T5878] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 234.876506][ T5899] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 234.890969][ T5899] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 234.955302][ T5899] megaworld 0003:07B5:0312.0003: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.2-1/input0 [ 234.987400][ T5899] megaworld 0003:07B5:0312.0003: no inputs found [ 235.053589][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 235.080846][ T5878] usb 5-1: config 0 interface 0 has no altsetting 0 [ 235.096319][ T5878] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 235.106384][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.127374][ T5878] usb 5-1: Product: syz [ 235.198514][ T5878] usb 5-1: Manufacturer: syz [ 235.214877][ T5878] usb 5-1: SerialNumber: syz [ 235.224051][ T10] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 235.287537][ T5878] usb 5-1: config 0 descriptor?? [ 235.375232][ T10] usb 2-1: device descriptor read/64, error -71 [ 235.623870][ T10] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 235.707570][ T5878] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 235.763594][ T10] usb 2-1: device descriptor read/64, error -71 [ 235.878842][ T10] usb usb2-port1: attempt power cycle [ 236.224538][ T10] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 236.273506][ T43] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 236.292947][ T10] usb 2-1: device descriptor read/8, error -71 [ 236.325179][ T5899] usb 5-1: USB disconnect, device number 19 [ 236.434685][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 236.445415][ T43] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 236.459037][ T43] usb 1-1: config 0 has no interfaces? [ 236.469158][ T43] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 236.479386][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.488869][ T43] usb 1-1: Product: syz [ 236.493215][ T43] usb 1-1: Manufacturer: syz [ 236.500490][ T43] usb 1-1: SerialNumber: syz [ 236.514821][ T43] usb 1-1: config 0 descriptor?? [ 236.543533][ T10] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 236.565704][ T10] usb 2-1: device descriptor read/8, error -71 [ 236.674127][ T10] usb usb2-port1: unable to enumerate USB device [ 236.803017][ T10] usb 3-1: USB disconnect, device number 17 [ 237.221965][ T8077] FAULT_INJECTION: forcing a failure. [ 237.221965][ T8077] name failslab, interval 1, probability 0, space 0, times 0 [ 237.274388][ T8077] CPU: 1 UID: 0 PID: 8077 Comm: syz.4.566 Not tainted syzkaller #0 PREEMPT(full) [ 237.274429][ T8077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 237.274442][ T8077] Call Trace: [ 237.274450][ T8077] [ 237.274460][ T8077] dump_stack_lvl+0x189/0x250 [ 237.274493][ T8077] ? __pfx____ratelimit+0x10/0x10 [ 237.274518][ T8077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.274545][ T8077] ? __pfx__printk+0x10/0x10 [ 237.274568][ T8077] ? __pfx___might_resched+0x10/0x10 [ 237.274591][ T8077] ? fs_reclaim_acquire+0x7d/0x100 [ 237.274628][ T8077] should_fail_ex+0x414/0x560 [ 237.274661][ T8077] ? __pfx_sock_alloc_inode+0x10/0x10 [ 237.274686][ T8077] should_failslab+0xa8/0x100 [ 237.274707][ T8077] ? __pfx_sock_alloc_inode+0x10/0x10 [ 237.274730][ T8077] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 237.274759][ T8077] ? sock_alloc_inode+0x28/0xc0 [ 237.274787][ T8077] ? __pfx_sock_alloc_inode+0x10/0x10 [ 237.274811][ T8077] sock_alloc_inode+0x28/0xc0 [ 237.274834][ T8077] alloc_inode+0x6a/0x1b0 [ 237.274865][ T8077] do_accept+0x111/0x680 [ 237.274899][ T8077] ? __pfx_do_accept+0x10/0x10 [ 237.274951][ T8077] __sys_accept4+0x11c/0x1c0 [ 237.274983][ T8077] ? __pfx___sys_accept4+0x10/0x10 [ 237.275011][ T8077] ? __pfx_ksys_write+0x10/0x10 [ 237.275046][ T8077] __ia32_sys_accept4+0x9a/0xb0 [ 237.275077][ T8077] __do_fast_syscall_32+0xb6/0x2b0 [ 237.275105][ T8077] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.275136][ T8077] do_fast_syscall_32+0x34/0x80 [ 237.275162][ T8077] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.275185][ T8077] RIP: 0023:0xf7fd4539 [ 237.275203][ T8077] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 237.275220][ T8077] RSP: 002b:00000000f54a555c EFLAGS: 00000206 ORIG_RAX: 000000000000016c [ 237.275243][ T8077] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 237.275257][ T8077] RDX: 0000000080000080 RSI: 0000000000080800 RDI: 0000000000000000 [ 237.275297][ T8077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 237.275310][ T8077] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 237.275321][ T8077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 237.275353][ T8077] [ 237.519647][ T5899] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 237.693661][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 237.703169][ T5899] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 237.712530][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.720663][ T5899] usb 3-1: Product: syz [ 237.725046][ T5899] usb 3-1: Manufacturer: syz [ 237.729736][ T5899] usb 3-1: SerialNumber: syz [ 237.740154][ T5899] usb 3-1: config 0 descriptor?? [ 237.748513][ T5899] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 238.573460][ T5878] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 238.723468][ T5878] usb 5-1: Using ep0 maxpacket: 8 [ 238.730772][ T5878] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 238.742394][ T5878] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 238.754427][ T5878] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.764981][ T5878] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.779168][ T8071] xt_TCPMSS: Only works on TCP SYN packets [ 238.786453][ T5878] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.804626][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.866054][ T5899] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 238.886671][ T10] usb 3-1: USB disconnect, device number 18 [ 238.993133][ T8099] netlink: 'syz.1.574': attribute type 21 has an invalid length. [ 239.001374][ T8099] netlink: 152 bytes leftover after parsing attributes in process `syz.1.574'. [ 239.014609][ T8099] xt_NFQUEUE: number of queues (65297) out of range (got 111634) [ 239.024844][ T5878] usb 5-1: GET_CAPABILITIES returned 0 [ 239.030546][ T5878] usbtmc 5-1:16.0: can't read capabilities [ 239.074192][ T10] usb 1-1: USB disconnect, device number 25 [ 239.683527][ T5878] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 239.785021][ T8117] netlink: 36 bytes leftover after parsing attributes in process `syz.0.578'. [ 239.813310][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.578'. [ 239.823011][ T8117] bridge0: port 3(batadv0) entered disabled state [ 239.853985][ T8117] bridge_slave_1: left allmulticast mode [ 239.869030][ T5878] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 239.880714][ T8117] bridge_slave_1: left promiscuous mode [ 239.893502][ T5878] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 239.905751][ T5878] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 239.915187][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.935395][ T5878] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 239.943737][ T5878] usb 2-1: invalid MIDI out EP 0 [ 239.970429][ T5878] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 240.004868][ T8117] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.155187][ T6084] udevd[6084]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.169205][ T8117] bridge_slave_0: left allmulticast mode [ 240.194349][ T8117] bridge_slave_0: left promiscuous mode [ 240.211302][ T8120] fuse: Bad value for 'fd' [ 240.274372][ T8117] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.466332][ T8124] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 241.472483][ T5878] usb 5-1: USB disconnect, device number 20 [ 241.549161][ T8124] kvm: pic: level sensitive irq not supported [ 241.556170][ T8124] kvm: pic: non byte read [ 241.586334][ T8124] kvm: pic: level sensitive irq not supported [ 241.586428][ T8124] kvm: pic: non byte read [ 241.629011][ T8124] kvm: pic: level sensitive irq not supported [ 241.629156][ T8124] kvm: pic: non byte read [ 241.796147][ T30] audit: type=1326 audit(1761613466.059:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 241.954756][ T30] audit: type=1326 audit(1761613466.089:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 241.990838][ T8134] FAULT_INJECTION: forcing a failure. [ 241.990838][ T8134] name failslab, interval 1, probability 0, space 0, times 0 [ 242.068832][ T8134] CPU: 1 UID: 0 PID: 8134 Comm: syz.2.583 Not tainted syzkaller #0 PREEMPT(full) [ 242.068851][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 242.068860][ T8134] Call Trace: [ 242.068868][ T8134] [ 242.068875][ T8134] dump_stack_lvl+0x189/0x250 [ 242.068901][ T8134] ? __pfx____ratelimit+0x10/0x10 [ 242.068923][ T8134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.068947][ T8134] ? __pfx__printk+0x10/0x10 [ 242.068962][ T8134] ? __pfx___might_resched+0x10/0x10 [ 242.068975][ T8134] ? fs_reclaim_acquire+0x7d/0x100 [ 242.068997][ T8134] should_fail_ex+0x414/0x560 [ 242.069019][ T8134] should_failslab+0xa8/0x100 [ 242.069033][ T8134] kmem_cache_alloc_noprof+0x74/0x6e0 [ 242.069052][ T8134] ? skb_clone+0x212/0x3a0 [ 242.069080][ T8134] skb_clone+0x212/0x3a0 [ 242.069098][ T8134] ? nfnetlink_rcv+0x4ba/0x2590 [ 242.069126][ T8134] nfnetlink_rcv+0x4ec/0x2590 [ 242.069155][ T8134] ? __dev_queue_xmit+0x27b/0x3b50 [ 242.069178][ T8134] ? __dev_queue_xmit+0x1d79/0x3b50 [ 242.069196][ T8134] ? kasan_save_track+0x3e/0x80 [ 242.069217][ T8134] ? __kasan_slab_alloc+0x6c/0x80 [ 242.069240][ T8134] ? __dev_queue_xmit+0x27b/0x3b50 [ 242.069285][ T8134] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 242.069328][ T8134] ? ref_tracker_free+0x63a/0x7d0 [ 242.069345][ T8134] ? __asan_memcpy+0x40/0x70 [ 242.069360][ T8134] ? __pfx_ref_tracker_free+0x10/0x10 [ 242.069370][ T8134] ? __skb_clone+0x63/0x7a0 [ 242.069385][ T8134] ? __skb_clone+0x483/0x7a0 [ 242.069487][ T8134] ? skb_clone+0x246/0x3a0 [ 242.069508][ T8134] ? __netlink_deliver_tap+0x807/0x850 [ 242.069531][ T8134] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.069566][ T8134] netlink_unicast+0x82f/0x9e0 [ 242.069592][ T8134] ? __pfx_netlink_unicast+0x10/0x10 [ 242.069606][ T8134] ? netlink_sendmsg+0x642/0xb30 [ 242.069613][ T8134] ? skb_put+0x11b/0x210 [ 242.069623][ T8134] netlink_sendmsg+0x805/0xb30 [ 242.069636][ T8134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.069649][ T8134] ? __import_iovec+0x5d4/0x7f0 [ 242.069666][ T8134] ? aa_sock_msg_perm+0xf1/0x1d0 [ 242.069688][ T8134] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 242.069703][ T8134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.069717][ T8134] __sock_sendmsg+0x21c/0x270 [ 242.069737][ T8134] ____sys_sendmsg+0x505/0x830 [ 242.069749][ T8134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.069766][ T8134] ___sys_sendmsg+0x21f/0x2a0 [ 242.069781][ T8134] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.069823][ T8134] ? __fget_files+0x2a/0x420 [ 242.069838][ T8134] ? __fget_files+0x3a0/0x420 [ 242.069865][ T8134] __sys_sendmsg+0x164/0x220 [ 242.069883][ T8134] ? __pfx___sys_sendmsg+0x10/0x10 [ 242.069906][ T8134] ? __pfx_ksys_write+0x10/0x10 [ 242.069931][ T8134] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 242.069953][ T8134] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.069976][ T8134] __do_fast_syscall_32+0xb6/0x2b0 [ 242.069998][ T8134] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.070021][ T8134] do_fast_syscall_32+0x34/0x80 [ 242.070049][ T8134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.070073][ T8134] RIP: 0023:0xf7f74539 [ 242.070088][ T8134] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 242.070101][ T8134] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 242.070120][ T8134] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 242.070135][ T8134] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.070148][ T8134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.070160][ T8134] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 242.070172][ T8134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.070205][ T8134] [ 242.441331][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.930523][ T30] audit: type=1326 audit(1761613466.089:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 242.984733][ T30] audit: type=1326 audit(1761613466.089:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 243.011095][ T30] audit: type=1326 audit(1761613466.089:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 243.069384][ T982] usb 2-1: USB disconnect, device number 26 [ 243.106422][ T30] audit: type=1326 audit(1761613466.089:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 243.231255][ T30] audit: type=1326 audit(1761613466.089:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 243.278628][ T30] audit: type=1326 audit(1761613466.089:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 243.381854][ T30] audit: type=1326 audit(1761613466.089:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 243.447849][ T30] audit: type=1326 audit(1761613466.089:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 243.618873][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'. [ 243.877175][ T8160] batman_adv: batadv0: Adding interface: gretap1 [ 243.893183][ T8160] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.953299][ T8160] batman_adv: batadv0: Interface activated: gretap1 [ 244.164129][ T982] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 244.332827][ T8167] syzkaller1: entered promiscuous mode [ 244.338614][ T8167] syzkaller1: entered allmulticast mode [ 244.350045][ T8167] FAULT_INJECTION: forcing a failure. [ 244.350045][ T8167] name failslab, interval 1, probability 0, space 0, times 0 [ 244.374153][ T8167] CPU: 1 UID: 0 PID: 8167 Comm: syz.4.593 Not tainted syzkaller #0 PREEMPT(full) [ 244.374183][ T8167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 244.374195][ T8167] Call Trace: [ 244.374203][ T8167] [ 244.374212][ T8167] dump_stack_lvl+0x189/0x250 [ 244.374245][ T8167] ? __pfx____ratelimit+0x10/0x10 [ 244.374270][ T8167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.374297][ T8167] ? __pfx__printk+0x10/0x10 [ 244.374321][ T8167] ? __pfx___might_resched+0x10/0x10 [ 244.374343][ T8167] ? fs_reclaim_acquire+0x7d/0x100 [ 244.374378][ T8167] should_fail_ex+0x414/0x560 [ 244.374422][ T8167] should_failslab+0xa8/0x100 [ 244.374445][ T8167] __kmalloc_noprof+0xcb/0x7f0 [ 244.374471][ T8167] ? io_cache_alloc_new+0x40/0x100 [ 244.374501][ T8167] io_cache_alloc_new+0x40/0x100 [ 244.374525][ T8167] __io_prep_rw+0x23f/0xe20 [ 244.374561][ T8167] ? __pfx___io_prep_rw+0x10/0x10 [ 244.374587][ T8167] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 244.374612][ T8167] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 244.374641][ T8167] ? percpu_counter_add_batch+0x190/0x1e0 [ 244.374673][ T8167] io_prep_read+0x33/0x110 [ 244.374696][ T8167] ? io_task_refs_refill+0xbb/0x180 [ 244.374722][ T8167] io_submit_sqes+0x935/0x1e60 [ 244.374783][ T8167] __se_sys_io_uring_enter+0x2df/0x2b20 [ 244.374832][ T8167] ? ksys_write+0x1cb/0x250 [ 244.374864][ T8167] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 244.374888][ T8167] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 244.374916][ T8167] ? __pfx_vfs_write+0x10/0x10 [ 244.374946][ T8167] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 244.374977][ T8167] ? __fget_files+0x3a0/0x420 [ 244.375005][ T8167] ? fput+0xa0/0xd0 [ 244.375027][ T8167] ? ksys_write+0x22a/0x250 [ 244.375056][ T8167] ? __pfx_ksys_write+0x10/0x10 [ 244.375087][ T8167] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 244.375115][ T8167] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 244.375145][ T8167] __do_fast_syscall_32+0xb6/0x2b0 [ 244.375173][ T8167] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.375203][ T8167] do_fast_syscall_32+0x34/0x80 [ 244.375249][ T8167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.375273][ T8167] RIP: 0023:0xf7fd4539 [ 244.375291][ T8167] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 244.375309][ T8167] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 244.375332][ T8167] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000048e9 [ 244.375347][ T8167] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 244.375359][ T8167] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.375370][ T8167] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 244.375382][ T8167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.375427][ T8167] [ 244.665946][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.806310][ T982] usb 1-1: Using ep0 maxpacket: 32 [ 244.816388][ T982] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.06 [ 244.826131][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.834205][ T982] usb 1-1: Product: syz [ 244.838513][ T982] usb 1-1: Manufacturer: syz [ 244.843219][ T982] usb 1-1: SerialNumber: syz [ 244.851575][ T982] usb 1-1: config 0 descriptor?? [ 244.859057][ T982] ums_eneub6250 1-1:0.0: USB Mass Storage device detected [ 244.914461][ T5940] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 244.944240][ T5920] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 245.063443][ T5940] usb 5-1: device descriptor read/64, error -71 [ 245.103531][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 245.111042][ T5920] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 245.140914][ T5920] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 245.172354][ T5920] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.191335][ T5920] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.231756][ T5920] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.256359][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.268034][ T8183] FAULT_INJECTION: forcing a failure. [ 245.268034][ T8183] name failslab, interval 1, probability 0, space 0, times 0 [ 245.285812][ T8183] CPU: 1 UID: 0 PID: 8183 Comm: syz.2.597 Not tainted syzkaller #0 PREEMPT(full) [ 245.285840][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 245.285853][ T8183] Call Trace: [ 245.285861][ T8183] [ 245.285870][ T8183] dump_stack_lvl+0x189/0x250 [ 245.285904][ T8183] ? __pfx____ratelimit+0x10/0x10 [ 245.285929][ T8183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.285955][ T8183] ? __pfx__printk+0x10/0x10 [ 245.285982][ T8183] ? __pfx___might_resched+0x10/0x10 [ 245.286002][ T8183] ? fs_reclaim_acquire+0x7d/0x100 [ 245.286038][ T8183] should_fail_ex+0x414/0x560 [ 245.286074][ T8183] should_failslab+0xa8/0x100 [ 245.286097][ T8183] __kmalloc_noprof+0xcb/0x7f0 [ 245.286124][ T8183] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 245.286149][ T8183] ? __local_bh_enable_ip+0x12d/0x1c0 [ 245.286177][ T8183] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 245.286210][ T8183] genl_family_rcv_msg_doit+0xb8/0x300 [ 245.286243][ T8183] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 245.286276][ T8183] ? apparmor_capable+0x137/0x1b0 [ 245.286301][ T8183] ? bpf_lsm_capable+0x9/0x20 [ 245.286324][ T8183] ? security_capable+0x7e/0x2e0 [ 245.286358][ T8183] genl_rcv_msg+0x60e/0x790 [ 245.286389][ T8183] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.286411][ T8183] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 245.286431][ T8183] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 245.286448][ T8183] ? __pfx_nl80211_post_doit+0x10/0x10 [ 245.286479][ T8183] ? __asan_memcpy+0x40/0x70 [ 245.286504][ T8183] ? __pfx_ref_tracker_free+0x10/0x10 [ 245.286533][ T8183] netlink_rcv_skb+0x208/0x470 [ 245.286560][ T8183] ? __lock_acquire+0xab9/0xd20 [ 245.286580][ T8183] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.286605][ T8183] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 245.286657][ T8183] ? down_read+0x1ad/0x2e0 [ 245.286689][ T8183] genl_rcv+0x28/0x40 [ 245.286709][ T8183] netlink_unicast+0x82f/0x9e0 [ 245.286747][ T8183] ? __pfx_netlink_unicast+0x10/0x10 [ 245.286776][ T8183] ? netlink_sendmsg+0x642/0xb30 [ 245.286793][ T8183] ? skb_put+0x11b/0x210 [ 245.286816][ T8183] netlink_sendmsg+0x805/0xb30 [ 245.286846][ T8183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.286868][ T8183] ? __import_iovec+0x5d4/0x7f0 [ 245.286890][ T8183] ? aa_sock_msg_perm+0xf1/0x1d0 [ 245.286920][ T8183] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.286939][ T8183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.286959][ T8183] __sock_sendmsg+0x21c/0x270 [ 245.286989][ T8183] ____sys_sendmsg+0x505/0x830 [ 245.287017][ T8183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.287057][ T8183] ___sys_sendmsg+0x21f/0x2a0 [ 245.287081][ T8183] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.287145][ T8183] ? __fget_files+0x2a/0x420 [ 245.287163][ T8183] ? __fget_files+0x3a0/0x420 [ 245.287194][ T8183] __sys_sendmsg+0x164/0x220 [ 245.287218][ T8183] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.287250][ T8183] ? __pfx_ksys_write+0x10/0x10 [ 245.287287][ T8183] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 245.287315][ T8183] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.287345][ T8183] __do_fast_syscall_32+0xb6/0x2b0 [ 245.287373][ T8183] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.287403][ T8183] do_fast_syscall_32+0x34/0x80 [ 245.287431][ T8183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.287462][ T8183] RIP: 0023:0xf7f74539 [ 245.287480][ T8183] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 245.287498][ T8183] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 245.287521][ T8183] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 245.287535][ T8183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.287547][ T8183] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.287558][ T8183] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 245.287570][ T8183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.287604][ T8183] [ 245.681679][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.688357][ T5940] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 245.739856][ T5920] usb 2-1: GET_CAPABILITIES returned 0 [ 245.745947][ T5920] usbtmc 2-1:16.0: can't read capabilities [ 245.755401][ T982] usb 1-1: USB disconnect, device number 26 [ 245.832776][ T5940] usb 5-1: device descriptor read/64, error -71 [ 245.873086][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.599'. [ 245.945345][ T5940] usb usb5-port1: attempt power cycle [ 246.216383][ T8201] netlink: 32 bytes leftover after parsing attributes in process `syz.0.602'. [ 246.283680][ T5940] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 246.304546][ T5940] usb 5-1: device descriptor read/8, error -71 [ 246.543600][ T5940] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 246.564120][ T5940] usb 5-1: device descriptor read/8, error -71 [ 246.674084][ T5940] usb usb5-port1: unable to enumerate USB device [ 247.302910][ T5878] usb 2-1: USB disconnect, device number 27 [ 247.402374][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 247.540175][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 247.923675][ T5878] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 248.073510][ T5878] usb 3-1: device descriptor read/64, error -71 [ 248.607767][ T5878] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 248.661751][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'. [ 248.853791][ T5878] usb 3-1: device descriptor read/64, error -71 [ 248.973868][ T5878] usb usb3-port1: attempt power cycle [ 249.298746][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 249.323431][ T5878] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 249.356079][ T5878] usb 3-1: device descriptor read/8, error -71 [ 249.367004][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.613'. [ 249.693726][ T5878] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 249.814226][ T5878] usb 3-1: device descriptor read/8, error -71 [ 250.112006][ T5878] usb usb3-port1: unable to enumerate USB device [ 251.045502][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.621'. [ 251.903547][ T5878] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 252.029216][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 252.049558][ T8287] tipc: Started in network mode [ 252.055441][ T8287] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 252.073495][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 252.084862][ T5878] usb 1-1: unable to get BOS descriptor or descriptor too short [ 252.091167][ T8287] tipc: Enabling of bearer rejected, failed to enable media [ 252.127296][ T5878] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 252.135670][ T5878] usb 1-1: config 4 has no interface number 0 [ 252.221791][ T5878] usb 1-1: config 4 interface 30 has no altsetting 0 [ 252.257683][ T5878] usb 1-1: string descriptor 0 read error: -22 [ 252.274251][ T5878] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 252.293418][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.320129][ T5878] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 252.332625][ T5878] dw2102: su3000_power_ctrl: 1, initialized 0 [ 252.340381][ T5878] dvb-usb: bulk message failed: -22 (2/0) [ 252.365228][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 252.382685][ T5878] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 252.394996][ T8292] sctp: [Deprecated]: syz.1.629 (pid 8292) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.394996][ T8292] Use struct sctp_sack_info instead [ 252.397822][ T5878] usb 1-1: media controller created [ 252.417482][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 252.426644][ T5878] dw2102: i2c transfer failed. [ 252.431845][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 252.437693][ T5878] dw2102: i2c transfer failed. [ 252.442574][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 252.450395][ T5878] dw2102: i2c transfer failed. [ 252.455659][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 252.461597][ T5878] dw2102: i2c transfer failed. [ 252.468194][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 252.474301][ T5878] dw2102: i2c transfer failed. [ 252.479097][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 252.481335][ T8297] capability: warning: `syz.1.629' uses deprecated v2 capabilities in a way that may be insecure [ 252.484947][ T5878] dw2102: i2c transfer failed. [ 252.484986][ T5878] dvb-usb: MAC address: 02:02:02:02:02:02 [ 252.512449][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.551321][ T8280] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 252.563445][ T8280] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 252.571986][ T8280] CPU: 1 UID: 0 PID: 8280 Comm: syz.0.625 Not tainted syzkaller #0 PREEMPT(full) [ 252.581395][ T8280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 252.591643][ T8280] RIP: 0010:su3000_i2c_transfer+0x1ad/0x1040 [ 252.597623][ T8280] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 bd 98 78 fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 5f 09 00 00 0f b6 1b 48 8b 44 24 38 42 [ 252.617227][ T8280] RSP: 0018:ffffc9001b6ef8c8 EFLAGS: 00010202 [ 252.623406][ T8280] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 252.632098][ T8280] RDX: ffffffff87ad2095 RSI: ffffffff8ee81bb0 RDI: 0000000000001900 [ 252.640094][ T8280] RBP: 0000000000000000 R08: ffff88802ad1bc80 R09: 0000000000000002 [ 252.648076][ T8280] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 252.656049][ T8280] R13: 1ffff1100c521488 R14: 0000000000000001 R15: ffff88806290a448 [ 252.664117][ T8280] FS: 0000000000000000(0000) GS:ffff88812623e000(0063) knlGS:00000000f5456b40 [ 252.673143][ T8280] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 252.679736][ T8280] CR2: 000000000c3da017 CR3: 000000007f46e000 CR4: 00000000003526f0 [ 252.687816][ T8280] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 252.695899][ T8280] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 252.703900][ T8280] Call Trace: [ 252.707198][ T8280] [ 252.710226][ T8280] __i2c_transfer+0x874/0x2170 [ 252.715199][ T8280] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.720410][ T8280] ? __pfx___i2c_transfer+0x10/0x10 [ 252.725803][ T8280] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 252.731204][ T8280] ? i2c_transfer+0x120/0x3a0 [ 252.735911][ T8280] i2c_transfer+0x25b/0x3a0 [ 252.740429][ T8280] ? __pfx_i2c_transfer+0x10/0x10 [ 252.745464][ T8280] ? _copy_from_user+0x94/0xb0 [ 252.750236][ T8280] i2cdev_ioctl_rdwr+0x460/0x740 [ 252.755192][ T8280] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 252.760316][ T8280] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 252.765953][ T8280] ? __fget_files+0x3a0/0x420 [ 252.770892][ T8280] ? __fget_files+0x2a/0x420 [ 252.775495][ T8280] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 252.781065][ T8280] __ia32_compat_sys_ioctl+0x543/0x840 [ 252.786545][ T8280] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 252.792546][ T8280] ? __se_sys_futex_time32+0x360/0x3e0 [ 252.798020][ T8280] ? __pfx_do_sys_openat2+0x10/0x10 [ 252.803231][ T8280] ? rcu_is_watching+0x15/0xb0 [ 252.808002][ T8280] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 252.815036][ T8280] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.820331][ T8280] __do_fast_syscall_32+0xb6/0x2b0 [ 252.825458][ T8280] do_fast_syscall_32+0x34/0x80 [ 252.830323][ T8280] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.836656][ T8280] RIP: 0023:0xf7f62539 [ 252.840730][ T8280] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 252.860416][ T8280] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 252.868836][ T8280] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 252.876820][ T8280] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.884968][ T8280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.893324][ T8280] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 252.901306][ T8280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.909286][ T8280] [ 252.912308][ T8280] Modules linked in: [ 252.916329][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.922934][ T8280] ---[ end trace 0000000000000000 ]--- [ 252.929950][ T8280] RIP: 0010:su3000_i2c_transfer+0x1ad/0x1040 [ 252.936208][ T8280] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 bd 98 78 fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 5f 09 00 00 0f b6 1b 48 8b 44 24 38 42 [ 252.956743][ T8280] RSP: 0018:ffffc9001b6ef8c8 EFLAGS: 00010202 [ 252.962990][ T8280] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 252.973380][ T8280] RDX: ffffffff87ad2095 RSI: ffffffff8ee81bb0 RDI: 0000000000001900 [ 252.981491][ T8280] RBP: 0000000000000000 R08: ffff88802ad1bc80 R09: 0000000000000002 [ 252.981512][ T8280] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 252.981525][ T8280] R13: 1ffff1100c521488 R14: 0000000000000001 R15: ffff88806290a448 [ 252.981539][ T8280] FS: 0000000000000000(0000) GS:ffff88812613e000(0063) knlGS:00000000f5456b40 [ 252.981555][ T8280] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 253.021587][ T8280] CR2: 0000000000000000 CR3: 000000007f46e000 CR4: 00000000003526f0 [ 253.030031][ T8280] Kernel panic - not syncing: Fatal exception [ 253.036262][ T8280] Kernel Offset: disabled [ 253.040579][ T8280] Rebooting in 86400 seconds..