last executing test programs: 8.535887436s ago: executing program 0 (id=4438): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0xc0182) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x2e, 0xb5, 0xbd, 0x40, 0xc45, 0x6025, 0x4112, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9, 0xd7, 0x40}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004640)={{0x14}, [@NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000040), &(0x7f00000001c0)) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="03c6622d4da45ba48971bed4882da6830572e7b1856ba958bfeea1c842c126c19d85039d41f716ef37722a2bd2c81ec982ab7f257beb321233c5855a498bb22e7e64101aa4386aa2ca27b2a858d115fb"], 0xb) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) 8.062548668s ago: executing program 3 (id=4441): r0 = socket$inet6(0xa, 0x6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6, 0xfc, 0x0, 0x7ffffdbf}, {0x9, 0x0, 0x3, 0x6}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, r3}, 0xc) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d312"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0x4008af13, &(0x7f0000000200)) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="a1", 0x1}, {&(0x7f0000000280)="5991f1eb35b0cc", 0x7}], 0x2}}], 0x1, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000240)=""/6, 0x6, 0x2040, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, 0x20) ioctl$KVM_RUN(r6, 0xae80, 0x0) brk(0x0) syz_usb_connect(0x0, 0x6ac, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, 0x0, 0x0) 7.449648513s ago: executing program 1 (id=4444): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x20000000000000c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 7.3519139s ago: executing program 1 (id=4445): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000001200)='net/fib_trie\x00') openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) epoll_create1(0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e4"], 0x20) 7.337636119s ago: executing program 1 (id=4446): syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (fail_nth: 3) 7.297526966s ago: executing program 1 (id=4447): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xfdfdffff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0x2a}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000003a000b0000000000000000000100000018000080130003"], 0x2c}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000080)=ANY=[]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$inet6(0xa, 0x800, 0x2d5) gettid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r9, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r9, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001080)=ANY=[@ANYBLOB="120100000575c820490d00702f260102030109021200010000008309040000000e01"], 0x0) 7.052052708s ago: executing program 0 (id=4448): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x10000, 0x0, 0x6}, 0x20) 7.007565029s ago: executing program 0 (id=4449): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="24be649f255eab1ea6", 0x9}, {&(0x7f0000000240)="26352b81d5c99dc6d06c2821ad533b895ae6dc1cd5d90ac1dbdf90ad60db42a99734b8ba687dcdf2ee1639bd98ec3ef0c9755e44ad6f1b946f3bc7057ee709102b3351d6446b1c71f8534a38297b0801b4478e1053f44a2ef0a6c748d6ae7047ef54b32f549d09f938b9f2bfcbaee738526c1e6a50cf4afb1596c9346cffa7553ef27ab6314d602724df2ce9e0b7a675b792d73a3faad43a2aee73bef4bcd2cb9d2fc14614d09e3a814427bff3bbc07c5e0108fffff07519921622a3143743ba0a9cc5216bb5481a8a8b90d0c2cf42fccf5478b6ac1ce9e67c7ead6912cfb9b16581251fd93ba1d7af88", 0xea}], 0x2}}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e80)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0x1e, 0xf}]}}}]}, 0x3c}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getenv(0x4201, r6, 0x0, &(0x7f0000000040)) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r7, 0x0, 0x4ffe1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 5.979899541s ago: executing program 1 (id=4452): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x424c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x11, 0x8, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x5113, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4$alg(r5, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c00000012009702000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="a15b36da00"/20], 0x2c}}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r8 = open_tree(r7, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) r12 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r12, 0x10e, 0x4, 0x0, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r13}}) io_uring_enter(r9, 0x46f6, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) 5.092356283s ago: executing program 1 (id=4453): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x0, 0x2}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x10000, 0x0, 0x6}, 0x20) 5.036323786s ago: executing program 2 (id=4454): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.771050452s ago: executing program 2 (id=4455): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) close_range(0xffffffffffffffff, r1, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"63dd039678ac318531cb0000b1b000"}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000180)=0xe3b) ioctl$PPPIOCSCOMPRESS(r0, 0x400c744d) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x113, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0x32}, @in=@dev, {0x100000000}, {}, {0x0, 0x0, 0x80}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x4}}]}, 0x140}}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x100, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x9d}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x2000000000000089}, 0x0) r6 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) r7 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r7, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r6, r6}, &(0x7f0000000040)=""/224, 0xe0, &(0x7f00000001c0)={&(0x7f0000000380)={'sha512-generic\x00'}}) syz_usb_connect(0x5, 0x37a, &(0x7f0000000680)={{0x12, 0x1, 0x51, 0x4b, 0xc7, 0x80, 0x30, 0x403, 0xb812, 0x2a37, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x368, 0x1, 0x1, 0x9, 0x80, 0x3, [{{0x9, 0x4, 0x48, 0x7, 0x6, 0xb, 0x5f, 0x1e, 0xc, [@generic={0xa1, 0x15, "5b7c23ed7e89990c1dcad6dd6a57613e1b42e1ffb31e674de824caf88d9c262efd928e6bef8b8309e3f75fe95357b72e52b0e90d3c426d918080b85371d1fa7fdab037b34db200fb2390596eb62e9490189bb354ec4d1f78d5fea4fae53c50b72f8ab309fcf2732994093be68ab3d64f3e7322d96bacdecdc8ec7e0f05e56ae652184b081046685bf8a3f2377a7ea1c05d8ea71fb8c86a7929b8c57d23e45c"}, @hid_hid={0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0x54d}}], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x9, 0x3, 0x3, [@generic={0x99, 0x21, "37a1d7f69c67f53c5d823ac99948411ba285b9a05505f3eac8a97e3eb48c64c07e5b8d647132237d076b0c9fd92ed27262762ca66453fb6cab4e2676d19f320711010c843b223a73fa8e7a59374acbf11c42df755cd6ab56eadca0c580d799cd978095704c39ff7e84f4b1d7f15dd109e7b61e71f17253518e088e5a03dca9a8e0b9d538b8727279384428b85bf1ecc7c5e34a74afab08"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x101}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0x6, 0x6, [@generic={0xba, 0x0, "4efffd2a93dd12d43871988a626b80e26ae7891d69deb9fafb42375970c272d3e2e26e72dd60dba773461b06d8218edc215b1bcf3b34c5cc235c76191337476955b95e28f9a40b33aeef9428ca654ac29eeb8354e52dacbb40f55fdc15e9ceb56aef4ad1d873f3a80783def2a542567c975c8eedffe1fe0c2a9d7d3cd83ad514f5113fe850e8415c24bb0f1f807dfaa7f1d9fbbe5f89fc2cfc09a345b80f7f55e044166bd4de11b525314561a7de2dfb482708a3e53c884e"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x20, 0x8c, 0x2, 0x3}}, {{0x9, 0x5, 0xb, 0x3, 0x40, 0x4, 0xd, 0xde, [@generic={0xdb, 0x21, "88a26dbe648e8c05332fe38fec12c3553a4d1ca268dcb6cf1daee94191f533ec67dafc46fee7f5e086f50ea9af3695ac4d8e4d40a64d5ab7782b86ec2a39d9e531a2832b34d7b7049ddb18d971c5ef880e82c8a1235cd0b1d1d4f15457844505d59d0bcef56557fbaef684d8f49e29f1ab6ad60cef3ade0e3751a6b00c3ff85dde40e077151da5048b830f7a6ebc67762cb216deed503799813e49e919c63cc3935eb45fb48ef017c5b222836d9be3155e9fa4cf461134332c9d5201810dff6dab9e354a4a8f84bae06e81f5dd89092edc283efe02153d0249"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x83, 0x3, 0x4, [@generic={0x3a, 0x10, "86522edc572a07da7ad3eb794178a577d600063d78589beadeff8a1a1e97915214e4c53b6f333ad9a21068cf6a1bdec75b3c06712c8815d2"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x8000}]}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x4, 0xf9, 0x5}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x4, 0x0, 0x4, 0x20}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000280)=@string={0x4, 0x3, "2eaa"}}, {0xf9, &(0x7f00000003c0)=@string={0xf9, 0x3, "2746e744e10c6fcfe577a2c80c512206d2602f7818c3ee18b8121f429457fda45bfc999d164956ba21371d47bbcbf27e1b6dc47927405e3af91269ecc9ee627f9f2acb424f9eba064d74d32a5cd7573ac00a7e5f33e8108309a42c43f84dc28bb024ad14239a4abb72895b6314de0144fa1df4086ba70525ddd7d7fb9c9727ce9f714750ca2accb87a71cdf0b51dff1f1b27357740b6a7a2e46fba026ccce4e6eae481d137c942ee79be15a88b2a3aa8fc6cbfb3470fead088e9352c9ca3acc64e3ca3db7e816ac7b2f0339dc852082656078c3a04d17dd0e78f41b1177de074ce9aac5eef84424e264fb12a540118ce92f6fcd9b1ecf5"}}, {0x4a, &(0x7f0000000300)=@string={0x4a, 0x3, "080cb1601fa39cf6d017b9d1cffb20fe60337ae13ac451b63a47636b7ddcfc7bbcab7b13b23d373c6852a1fd500ab8cf4fd4505b839cdc11b333ee5a45a44797b5783268abcd84a2"}}, {0xe2, &(0x7f0000000a40)=@string={0xe2, 0x3, "375b53058f2a2513fede2bf7dd8ed2cb00965698f8bb6d9860ae4ea5441c43b0a6f62dc4064c2f364e59f85fb31e059ce10a51419de83020235cf30a81e5086f4923cbb62a5e56da8236e9ded46e9c46ecbe25f20f9af333a67c0bd29f8e056c8089dac9ae55ffef19cb92cebd1b71cad0e81c8305fd25223ee4642a1d0ff10d0142d1167aa237e16dd4352d9265300221236d776b6270f5c0236a01600e834213185683daeffc5495bd77c38faf65b7f73db1226376e12086d97d377d42ae397a8c24687920a0e658b841abc8acfb1b2b327dd39a22a7702ecb3b3d2aa8fc9f"}}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4.683548065s ago: executing program 3 (id=4456): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x351042, 0x45, 0x6}, 0x18) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) (async) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x351042, 0x45, 0x6}, 0x18) (async) 4.502062568s ago: executing program 3 (id=4457): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000001200)='net/fib_trie\x00') openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff00000000300000009f328517ec8e0000069078000000000000000000104e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70c2000190780000020405a001000000"], 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) epoll_create1(0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) socket$tipc(0x1e, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904861c"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x2000) syz_usb_disconnect(r1) 3.75504473s ago: executing program 4 (id=4458): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf020000000000007b9af8ff00000000b609080089ffffff7baaf0ff00000000bf8700000000000007090000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600020076000000bf980000000000007e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.4239599s ago: executing program 4 (id=4459): unshare(0x40600) rename(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x14020000) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000000fc0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000001000)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0x40305829, &(0x7f0000000000)=ANY=[@ANYBLOB="07000200000000000000000000000000000000000002"]) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000f80)={0xbc, 0x2, 0x1, "26b7ceea6635bae65ceb94823a32967ecec75ba94c84da08fd1b316f98c739e4", 0x34324948}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@bridge_dellink={0x34, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newnexthop={0x2c, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x1}]}, 0x2c}}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB="128b000000004625eb10b4000000000000000000", @ANYRES32=r9, @ANYRES32, @ANYBLOB="030000000500"/28], 0x50) 3.320553869s ago: executing program 4 (id=4460): r0 = open(&(0x7f0000000100)='./file0\x00', 0x40, 0x0) r1 = timerfd_create(0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x800001, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="2c726b6f746d6f64653d2032f422573d303030303030303030303030303030303031303069643d01810e65aaa611a2d2da1bdca6fb9f16b9f5fa0719461f036647", @ANYRES64=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = socket(0x23, 0x80000, 0x0) clock_settime(0x0, &(0x7f0000001000)={0xffffffffffffffff}) getsockopt$bt_hci(r4, 0x84, 0x72, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r9 = inotify_init1(0x80800) r10 = inotify_add_watch(r4, &(0x7f00000010c0)='./file0\x00', 0xb0000040) inotify_rm_watch(r9, r10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r8, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r13, @ANYRESOCT=r10], 0x6c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001040), r4) r14 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r14, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0xa}, 0x1c) bind$inet(r4, &(0x7f0000001180)={0x2, 0x5e22, @empty}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) shutdown(r5, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0x44, 0x4, 0x450, 0xffffffff, 0x0, 0x2c0, 0x1f4, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0, @mcast1, [], [], 'netdevsim0\x00', 'veth0_vlan\x00'}, 0x203, 0x1d0, 0x1f4, 0x8502, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@local, @mcast1, [], [], 'veth0_to_batadv\x00', 'veth1_macvtap\x00'}, 0x0, 0xa4, 0xc8}, @common=@unspec=@CLASSIFY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4ac) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xcf543737ff523749}}, 0x50) 2.933793381s ago: executing program 0 (id=4461): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000005940)='./file0\x00', &(0x7f0000005980), &(0x7f00000059c0)=@v2={0x5}, 0x9, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002200)={0x2020, 0x0, 0x0}, 0x2020) chdir(&(0x7f0000004340)='./file0\x00') write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x21, 0x0, 0x1003104, 0x0, 0x1, 0x1}}, 0x50) read$FUSE(r2, &(0x7f0000008780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f00000063c0)={0x10, 0x0, r4}, 0x10) read$FUSE(r2, &(0x7f0000004380)={0x2020, 0x0, 0x0}, 0x2020) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) write$FUSE_ENTRY(r2, &(0x7f0000000080)={0x90, 0x0, r5, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xc000}}}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRESDEC=r0, @ANYBLOB="200001"], 0x38}}, 0x4000000) 2.698789762s ago: executing program 3 (id=4462): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000006], 0xdddd1000, 0x8340}) io_uring_setup(0x6c2b, &(0x7f0000000080)) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r9}, 0x18) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$can_j1939(0x1d, 0x2, 0x7) r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r13, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r13, 0x40585414, &(0x7f0000000140)) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={0x1d, r9, 0x3}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=@newtfilter={0x6380, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r14, {}, {0x0, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_basic={{0xa}, {0x5934, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_BASIC_ACT={0x5e8, 0x3, [@m_simple={0x11c, 0x0, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, '/dev/kvm\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xd7, 0x6, "d07b69066df9b5bdb44fa3c6341d843cb8af9c13e4e338354be0d10f64c2a21a7a3f65dd0a71d6fe7da873415036b8bea2d0af4dca12f5c83faa64469181760ea31129f3505537c34a03455655e8673a9f1b78652787b31bb1fd365260307c083afff519a9790f0ed6962f3f8aad2c5821a1a81223a0025278663e1c8a0b2d90295b254118d7794714aac5525bcc98ac8f47dad0e45a1605cb1113782c3a33e04eadcb6774582645d01ccc82afeb27008912f9464d6ea46bf3d37c2563a5cd3936dc76b3b79e7a8a8e914cd233a71309643c35"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x78, 0xb, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x25, 0x6, "f59facd14f88c3e739cf97b5092586aa102b4e53a91b13556087b2de9647e5323b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x25c, 0x4, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffc, 0x6259ce3a, 0x6, 0x8, 0x7}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x21c, 0x9, 0x6, 0x1000, 0x6279}, @loopback, @rand_addr=0x64010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0x10000003, 0x5, 0x1ff}, @empty, @private=0xa010100, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x880, 0x2, 0x1, 0x1, 0xab51}, @private=0xa010100, @private=0xa010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x3, 0x5, 0x800}, @multicast1, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x5, 0x3, 0x7ff}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x9, 0x0, 0x5, 0x5}, @dev={0xac, 0x14, 0x14, 0x25}, @remote, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x8, 0x10000000, 0x4, 0x7ff}, @broadcast, @broadcast, 0xffffffff}}]}, {0xf1, 0x6, "e526d57e41159b443bfc435b2d2b2b33a524d2945536d8b6105ec61b8b9e82e5689e78d176d4b9289e60b1d705639c54e825d4b9939619c4e50ad236726b823714ccd604fa7dd560222a63f066fd5f73c46bc413064270fba8037bb1c72c1ea1be554bf93f60288d0194e53db8be2f48d758577042392cc057067493050c81a33696f9d8b83565fcd427a4f0643b85fc5f9ecd9c944c231f49edcf04477ced9b321861c01769dc753010c2fbcd384aabd4308be5fffadc1890317f461c18ff574673de72b51ba460766983e10e2f21d8389ef78fe411eb078044363d10fcd1094e822831b5ccd7baf70bb140b8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x1f4, 0x4, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x7fffffff, 0x8, 0x7, 0x5}, @broadcast, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x5, 0x10000000, 0x1e19d4e2, 0x8}, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xaa7, 0x3, 0x10000000, 0x39c, 0x1000}, @loopback, @multicast2, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xefe, 0x0, 0x5, 0x9}, @local, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3ff, 0x1, 0x7, 0x7}, @remote, @multicast2, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0xff, 0x8, 0x81, 0x8b}, @multicast2, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x0, 0x4, 0x1, 0x1000}, @multicast2, @remote, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe, 0xf8, 0x5, 0x1, 0x7}, @multicast1, @local, 0xffffffff}}]}, {0x8c, 0x6, "3b2dfecd22726a2459ef9f8dc6ce08ead0aeb9d328f8bec214f063b832b26f23f1380088b6f9fd7371aef181b1839d1cb1036ea7c0fe62705a2b14a46f0a97737eb1767bbbb5c204af2d9fe464764d0cf1358fe053fad6368fa15c918ca86ee94f78620e5f51d8ec4e7e61e3d021318ebf414de50a5fcb114eb1a2223fcdefead32ef17faea86f37"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_ACT={0x50fc, 0x3, [@m_ctinfo={0x80, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x0, 0x6a, 0xfffffffa}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x13}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}]}, {0x2c, 0x6, "b285916c13d1254c8546298a5aa2d7239e35be22b10c71260ea492bc267642cbdfe6dc073c70aa59"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x3f1c, 0x1a, 0x0, 0x0, {{0xb}, {0x3e80, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x7, 0xaa4c, 0x100, 0x8000, {0x5, 0x0, 0x0, 0x2091, 0x3, 0x2}, {0xa, 0x2, 0xff, 0xf, 0x1, 0x6f}, 0x4, 0x1, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x7, 0x0, 0x2, 0x9, 0x6, 0x80000001, 0x2, 0x842b, 0x0, 0x3, 0x0, 0x6, 0x6, 0x5, 0x8, 0x7fff, 0x8, 0x1, 0x5, 0x3ff, 0x1, 0x5, 0x2808, 0x7ff, 0x7, 0x7, 0x1, 0x4, 0x5, 0x1, 0xfce, 0x4, 0x85a6, 0x6, 0x1, 0x80000001, 0x400, 0x200, 0x0, 0xffff, 0x8001, 0x8001, 0x5, 0x2, 0x40, 0x10, 0x4, 0x9, 0x6, 0x6, 0x1, 0x4, 0x4b45a9ec, 0x3a88, 0x7, 0x7, 0x1ff, 0xffff, 0x3ab, 0x3, 0x3, 0x6, 0x120000, 0xd, 0x1, 0x401, 0xfffffffa, 0x3ff, 0x10000, 0xfffffffb, 0x8, 0x1ff, 0x5, 0x9, 0xc, 0x569, 0xd, 0x0, 0x0, 0x1, 0x3, 0x7, 0x40000000, 0x1000, 0x3, 0x6, 0x7, 0xfffffffd, 0x1, 0x7, 0x7fff, 0x507cc8f3, 0xffff, 0x6, 0x7, 0x1, 0x0, 0x9, 0x8, 0x6, 0x2, 0x9, 0x6, 0x8, 0x7f, 0x0, 0x3, 0x8, 0x1, 0x3, 0x4, 0x2, 0x9, 0x80000000, 0x4, 0xb, 0x1800, 0x8001, 0x1, 0x4, 0x2, 0xfffffff9, 0x3ff, 0x5, 0xb7e, 0xd3, 0x3, 0x1ff, 0x5, 0x13e, 0x8, 0x7, 0x7, 0x200, 0x382a000, 0xaabf, 0x1, 0x800, 0x4, 0x1, 0x0, 0x2, 0x5, 0x9, 0xb4, 0x7, 0x6, 0x1, 0x4, 0x9, 0x1, 0x8000000, 0x0, 0x4, 0x1, 0x80000001, 0x100, 0x1, 0x40, 0x4, 0x7, 0x6, 0x7, 0x100, 0x42, 0x7fffffff, 0x0, 0x5, 0x1000, 0x10000, 0x1, 0x5, 0x24, 0x1, 0x9, 0x2, 0x6, 0x10000, 0x4458, 0x5, 0x81, 0x4, 0x7, 0x200, 0x0, 0x1, 0xffff7fff, 0x6, 0x32, 0xb3, 0x67, 0x9, 0x1, 0x4, 0xd, 0x5, 0x5, 0x7, 0xed40, 0x2, 0x40, 0x1000, 0x5, 0x101, 0x3b87, 0x7, 0x4, 0xffffffff, 0x8, 0xe, 0x6, 0x504, 0x7, 0x8, 0x7, 0x2, 0x9, 0x2, 0x8, 0x6, 0x6, 0xfffffff9, 0x9, 0x7fffffff, 0x2, 0x7, 0x10, 0x3, 0x8, 0x1, 0x2, 0x5, 0x3, 0x1000, 0x2, 0x0, 0x800, 0x8, 0x0, 0x3, 0x317c, 0x8, 0x5, 0x116e0000, 0x6, 0x2, 0x4, 0x7, 0x401, 0x2, 0x81, 0x10000, 0x0, 0x80, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0xa2d, 0x0, 0x1, {0xe5, 0x1, 0x9, 0xff, 0x2, 0x1000}, {0x7, 0x0, 0xb513, 0x0, 0x9, 0xff}, 0x4, 0x4, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x100}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x80, 0xf98b, 0x3, {0x0, 0x3, 0x0, 0xd5f, 0x5, 0x3dc400}, {0x8, 0x1, 0x3, 0x9, 0xf29d, 0x10000}, 0x0, 0x9, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffff00, 0x0, 0x8, 0x4, 0x8, 0x5, 0x30eb, 0x7, 0x3, 0xa000, 0x8, 0x0, 0x8, 0xfffffff8, 0x9, 0x6, 0x9, 0x5, 0x4, 0x7fff, 0x1, 0xfffffffe, 0x0, 0x54d7, 0xfffffffc, 0x6, 0x6, 0x5, 0x8, 0x10000000, 0x7, 0x3309e7ad, 0x8000000, 0xd1, 0x400, 0x2, 0x7275, 0x80, 0x177, 0xfffffffb, 0x100, 0x0, 0xffff7fff, 0x80000001, 0x5, 0xd, 0x6, 0xfffffffc, 0xf59, 0xfff, 0x6, 0xb56, 0x12, 0x4, 0xeb8, 0xa, 0x10000, 0x2, 0x4, 0x6bac, 0x1, 0x2, 0x0, 0x8, 0x9, 0x1ff, 0x5db, 0x1, 0x9, 0x7, 0x4b39707f, 0x10, 0x5, 0x1, 0x10, 0x10000, 0x5, 0x4, 0xe00, 0x3, 0x101, 0x3, 0x4, 0xffffffff, 0x8, 0x7, 0x3, 0xc, 0xc83, 0x3, 0x5aee, 0x6, 0x8, 0x3ff, 0x6ac, 0x1, 0xfffffff9, 0x7f, 0x8, 0x8001, 0x8000, 0x5b98, 0xffff, 0x8, 0x8, 0x81, 0x0, 0x2, 0x9, 0x9, 0x2, 0x3ff, 0x3, 0x400, 0x0, 0x4, 0xffff, 0x10001, 0xc36, 0x3, 0x3, 0x4, 0x7, 0xfe, 0x3, 0x9, 0x0, 0x1, 0x80, 0x200, 0x5, 0x7, 0x40, 0xb3, 0x9, 0x4, 0x1, 0x7, 0x4ec, 0x4, 0x1ff, 0x14, 0x5511, 0xff, 0x2, 0x3, 0x2, 0x800, 0x3, 0x0, 0x0, 0xe, 0x0, 0x7fff, 0x0, 0xf3a, 0x401, 0xfffffe00, 0x8, 0x6, 0xfffffffe, 0x1, 0x5, 0x5, 0x5, 0x4, 0xfffffffb, 0x3ff, 0x4, 0x7, 0x2, 0x1, 0xffffff00, 0x1, 0x9d, 0x1, 0x6, 0x9, 0xae, 0xffffffff, 0x6, 0x2, 0x51, 0x6, 0x7ff, 0x82c, 0x252, 0x6, 0x8, 0xfffffffd, 0x5, 0x5, 0x0, 0x2, 0x30beb731, 0x5, 0x30000, 0x2, 0xf3c8, 0x5, 0x1, 0x27a1, 0x20, 0x80000001, 0x7f, 0x9, 0xe029, 0x4, 0x4, 0x280000, 0x6, 0x9, 0x0, 0x8, 0x5, 0xe, 0x1, 0x5, 0x0, 0x3fa8d419, 0xffff0000, 0x3, 0x7, 0xfffffffb, 0x2, 0x43b3, 0x8, 0x9d, 0x7fff, 0x8, 0x1, 0x0, 0x646, 0x0, 0x1, 0x8001, 0x9, 0x9, 0x7, 0x2, 0x6e92, 0x6, 0x7, 0x3, 0x10000, 0x0, 0x2, 0x6, 0xc, 0x0, 0xaeff, 0x5a84, 0x0, 0xccb, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x40, 0x7, 0xe, 0x1, 0x1000, 0xdea, 0x9, 0x214, 0x4, 0x40, 0x5, 0x6, 0x4, 0x2, 0x2, 0x800, 0x1000, 0x4, 0x3, 0x4, 0x4, 0x8, 0x7f, 0x7, 0x0, 0x1000000, 0x1, 0xffffffff, 0x0, 0x7, 0x101, 0x3, 0xfff, 0x5, 0x0, 0x0, 0x3670f8a1, 0x8, 0x7, 0x4, 0x401, 0x4, 0x2, 0x5, 0x8, 0x5, 0x10001, 0x7, 0x96, 0xcb, 0x200, 0x1, 0x2, 0x3c5, 0x5, 0x0, 0x6a6b, 0x1000, 0xffffffff, 0x7, 0x1, 0xf, 0x4ba2, 0x1, 0x5, 0x3, 0x77217f28, 0x21, 0xffff, 0xf95, 0x200, 0x0, 0xe0000000, 0x5, 0x4, 0xe01, 0x3, 0x0, 0x1, 0x7, 0x7, 0x40, 0xffff, 0x4, 0x7, 0x8, 0x40000, 0x0, 0x6, 0x7fff, 0x5d35, 0x5, 0x800, 0x4, 0x7, 0xc, 0x2, 0xfff, 0x800, 0xda07, 0x80000000, 0xd773, 0x0, 0xfb, 0x3, 0x7, 0x349, 0x80000000, 0x2, 0x9, 0x6, 0x9, 0x93ca, 0x400, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x6, 0x3, 0xffffff7b, 0x9, 0x200, 0x2, 0x0, 0x6, 0x540, 0x101, 0x4, 0xb0, 0x7, 0x7, 0xfffff2e0, 0x4, 0x2, 0x762, 0xfff, 0xfffffff9, 0x4, 0x0, 0x160000, 0xee36, 0x7, 0x2, 0x9, 0x2, 0x6, 0x80, 0x6, 0xd5a4, 0x7, 0xffffffff, 0x6f6, 0xff, 0xfffffffc, 0xa, 0x7fffffff, 0x5, 0xfff, 0x9, 0x200, 0x200, 0xe3b, 0x6, 0x9, 0x6759, 0x5, 0x1, 0x22, 0x2, 0xff, 0x0, 0x80000001, 0x7ff, 0xf9d, 0x2, 0x2, 0xc, 0x0, 0x2, 0xc48, 0xf, 0x5, 0x2, 0x1ff, 0x3, 0x4, 0x7, 0x3, 0x3, 0xc, 0x4, 0x30, 0x80a7, 0x401, 0x8000, 0x6, 0x6, 0x2, 0x5c0a, 0xc3, 0x76, 0x2, 0x10, 0x7f, 0x7, 0x3, 0x0, 0xd7, 0x0, 0x8, 0x6, 0x0, 0x9, 0x8, 0x8, 0x2, 0x5, 0x7, 0x9, 0x8000, 0x1, 0xe, 0x1, 0x9, 0x401, 0x5, 0x0, 0x6, 0x4, 0x4, 0xfffffffd, 0x101, 0x6, 0xffffffff, 0x2, 0x146c, 0x10, 0x4, 0x6, 0xba3, 0x7, 0x1, 0x2, 0x1, 0x4, 0xffffffff, 0x1, 0xffffffff, 0x800, 0x3, 0x3, 0xb2f, 0x7e49, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xacd}, @TCA_POLICE_RATE={0x404, 0x2, [0x63e, 0xfb5c, 0x678, 0x6, 0x6, 0x3, 0x7, 0x1, 0x6, 0x10001, 0xffffffff, 0x9, 0x5, 0x40, 0xc, 0x600000, 0x8, 0x3ab, 0x6, 0x2, 0x9, 0x1, 0x9, 0x4, 0x8, 0xfffffff9, 0x3, 0x9, 0x4, 0x1ff, 0x7f653b35, 0xffffff80, 0x5, 0xaf, 0x200, 0x0, 0xfff, 0x9947, 0x9, 0x7, 0x6, 0x80000001, 0x5, 0x7fffffff, 0x80000001, 0x7, 0x1, 0x9, 0xe313, 0xfffffff9, 0x2, 0xfff, 0x800, 0x6, 0x1, 0xca, 0xa, 0x7f, 0x5, 0x8, 0x5, 0x9, 0x7, 0x81, 0xfffffffa, 0x6, 0x3, 0x90e0, 0x40, 0x4, 0x1800, 0x2, 0x4, 0xe9, 0x80, 0x3ff, 0x2, 0x6, 0x2, 0x10000, 0xe8, 0x40, 0xb, 0x3, 0x0, 0x3, 0x8, 0x0, 0x1, 0x10001, 0x3, 0x8, 0x101, 0x6, 0x101, 0x7da2, 0x7, 0xfa7, 0x3, 0x80000000, 0x3, 0xfff, 0x7, 0xfffffff9, 0xdc2c, 0xa, 0x0, 0x3, 0x5, 0x7, 0x9, 0xd, 0x10000, 0x5, 0x663, 0x2b4c0000, 0x7d1, 0x8, 0x400, 0x8, 0x5, 0x7, 0x8001, 0x1000, 0x98f1, 0x9, 0x2, 0xc690000, 0x0, 0x6, 0x4, 0x699a, 0x6, 0xa, 0x3, 0xd, 0x3, 0x7, 0x1550, 0x3, 0x9, 0x3c, 0x2, 0x1000, 0x10, 0x8, 0x0, 0x3, 0x9, 0x10001, 0xfffffffe, 0x401, 0x0, 0xfffffff7, 0xdf, 0x7, 0x4, 0x9, 0x7fff, 0x1, 0x7, 0x7, 0x4, 0x49, 0x81, 0xfffffffe, 0x400, 0x8, 0x2, 0x40, 0xf1, 0x0, 0x3, 0x9, 0xfffffffe, 0x794, 0xfffffffc, 0x1, 0x5, 0xa, 0x5, 0x3, 0xff, 0x3, 0x7, 0xfff, 0x80000001, 0x0, 0x6, 0xfffffff7, 0x4, 0x80000001, 0x80, 0x0, 0x8, 0x7, 0x8, 0x8, 0xfffffffc, 0x0, 0x3, 0x10, 0x2, 0xdc93, 0x2, 0x4, 0x10001, 0x4, 0xa35, 0x1, 0x5, 0x1, 0x187, 0x6, 0x100, 0x8, 0x8, 0xffffffff, 0x2, 0x4, 0x5, 0x0, 0x1000, 0x4, 0x100, 0xe299, 0x0, 0xff, 0xc8, 0x81, 0x5, 0x6, 0x800, 0x7f, 0x100, 0xc452, 0x2f87, 0x8001, 0x80, 0x0, 0x6, 0x10001, 0xa, 0x5347, 0xb83, 0x16, 0x0, 0x22, 0x7ff, 0x6, 0x2, 0x3ff, 0x6, 0x7, 0xc, 0x6b]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x5, 0x3, 0x0, 0x1, 0x3748, 0xfffffc00, 0x1ff, 0x4, 0x1, 0x9, 0x8, 0x9, 0x3, 0x8, 0x3, 0x3ff, 0x7, 0x9, 0x6, 0x0, 0xec2, 0x4, 0x4, 0x1, 0x7ff, 0xfcd3, 0xffff, 0xb0, 0x4, 0x8, 0xffff, 0x4, 0x3, 0x8000, 0xf10, 0x2, 0x1c00000, 0x200, 0x5, 0xffffffff, 0x1, 0x42, 0x1, 0x7, 0xb192, 0x3, 0x8, 0x2, 0xee98, 0x9, 0x7fffffff, 0x1, 0x5, 0x1, 0x9, 0x0, 0xe0, 0xfffff801, 0x4, 0x8, 0x5, 0x7, 0x348c68ff, 0x7, 0x9, 0x7f, 0x864, 0xff, 0xffffffff, 0x3c, 0x10, 0x5, 0xfffffffd, 0xd, 0xfff, 0x7fff, 0x3ff, 0x5, 0x81, 0x2eb6, 0xe0e3, 0x200, 0x8, 0x6, 0xce5ee4f, 0x2, 0x8ff8, 0x10001, 0xb, 0xc5, 0x8, 0x9, 0x7, 0x7, 0xffff, 0x6, 0x3, 0x5, 0x7f, 0x200, 0x1, 0x0, 0x3, 0x478, 0x6, 0x7fffffff, 0x1ff, 0x4, 0x2, 0xd1600000, 0x1, 0x1afa, 0x3ff, 0x401, 0x100, 0x12, 0x81, 0xe, 0x0, 0xffff5d57, 0x7, 0x6, 0x1, 0x6, 0x3, 0x22, 0x6, 0x57, 0x80000001, 0x5, 0x8, 0x6, 0x7, 0x7, 0x4, 0x10, 0x0, 0x800, 0x3, 0x1, 0x0, 0x4, 0x2ab2, 0x1e8756f0, 0xa, 0x10, 0xfffffe01, 0x0, 0x0, 0x5, 0x6a90, 0x10, 0x4e, 0x0, 0x101, 0x9, 0x7, 0x56, 0x6, 0x10, 0x19a, 0x1, 0x1, 0x1ff, 0xa, 0x400000, 0x9147206, 0x7, 0x6, 0x10000, 0x2, 0x0, 0x6, 0x32e8, 0x80, 0x6, 0x9, 0x9, 0x5, 0xfff, 0x7fffffff, 0x3, 0x0, 0x8, 0x80000000, 0x2, 0x1, 0x5, 0x5, 0x7, 0x3, 0x7, 0x7, 0xf2c, 0x3, 0x2, 0x1, 0x7fffffff, 0x200, 0x2, 0x3, 0x68b3, 0x0, 0x7, 0x8, 0xfffffff8, 0x7, 0x8, 0x6, 0xd8e, 0x800, 0x7, 0x10001, 0xfffffff5, 0x2, 0x80, 0x80000001, 0xd, 0xb0, 0x4, 0x7, 0x3ff, 0x5, 0x9, 0xe3, 0x0, 0x6, 0xfffffff9, 0xfffffff5, 0x3, 0x3ff, 0xfffffff6, 0xc, 0x43f, 0x1, 0x200000, 0x7, 0x9, 0x7fff, 0x4, 0xffffffff, 0x2, 0x4, 0x2, 0x5, 0x0, 0x7fff, 0x8000, 0x6, 0x2, 0x10001, 0x4, 0x10000, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x2, 0x401, 0x8, 0x7, 0x7, 0x6, 0xfffffffe, 0x5394, 0x9, 0x7a, 0x4, 0x6, 0x5, 0x3, 0x3, 0x8, 0x8, 0x8, 0x4, 0x6, 0x7, 0x3, 0x4, 0x6, 0xff, 0x6, 0x6, 0x7, 0x88, 0xfffffffe, 0x2, 0x5e34, 0x3, 0x2, 0x2, 0x4e9, 0x9, 0x1, 0xe9, 0x4, 0x1, 0x0, 0xffffff77, 0x4, 0x5, 0x1, 0x0, 0x44, 0x7fff, 0x3, 0x4, 0x8, 0x4af5, 0x2, 0xf, 0x10, 0x2, 0x2, 0xe, 0x9, 0x8, 0x1, 0x7, 0xfffffff7, 0x8, 0x81, 0x1, 0x9, 0x7, 0x3, 0xce, 0x3, 0x6, 0xba, 0x1000, 0x10, 0x3, 0x380000, 0x9, 0x6, 0x0, 0x6a, 0x4, 0xfffff7c2, 0x47c0, 0x7, 0x2, 0x100000, 0x2, 0xe, 0x2, 0x5, 0x1, 0x5, 0x5a, 0x79, 0x1, 0xd5b, 0x5, 0x2, 0xe9, 0xffffff00, 0x7, 0x10000, 0x4d1, 0x3, 0x3e24, 0x400, 0x5, 0x0, 0x7f, 0x7, 0x0, 0x47c0, 0x2, 0x10, 0x4, 0x101, 0x4, 0x3, 0x10001, 0x233a8446, 0x69db, 0xb31, 0x100, 0x0, 0x9, 0x8, 0x4, 0xffffffff, 0xffff0001, 0x401, 0x5, 0x800, 0x3, 0x4, 0xd, 0xa23, 0x0, 0x5788, 0xf23b, 0x3, 0x4, 0x7, 0x6, 0x6, 0x1, 0xf, 0x7, 0xe, 0x81, 0x7, 0x2, 0x8, 0x8, 0x0, 0x6d2, 0xe3, 0x40, 0x3, 0x6, 0x6e0, 0x2, 0x5, 0x4, 0x1, 0xc, 0x10, 0x800, 0x5, 0x7f, 0x2, 0x5, 0x7, 0x0, 0x4, 0x2, 0x7, 0x7, 0x7fffffff, 0x1b, 0x7, 0x8, 0x0, 0xf, 0x2, 0x8000, 0x4, 0x0, 0x0, 0xfffffff1, 0x2, 0x4, 0x80000001, 0x0, 0x400, 0x6, 0x6, 0x94a, 0xaa6, 0x8, 0x90a4499, 0x0, 0x8, 0xb0, 0x2, 0x0, 0x8001, 0xf62, 0x101, 0xfffffff0, 0x6, 0x3, 0x9, 0x993b, 0x6, 0x2, 0xe4c8, 0xd, 0x3e, 0x9, 0xfffffff9, 0x0, 0x9, 0x1, 0xf5, 0xc, 0x200, 0x2, 0x8001, 0x9, 0x1, 0x8a6, 0x9, 0x1, 0x2, 0x7, 0xfff, 0xe, 0x5, 0x3, 0x7, 0xd, 0x4, 0x1, 0x2, 0xfffffffc, 0x81, 0x8000, 0x2, 0x8000, 0xf7, 0x5, 0x1, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x80000001, 0x1, 0x6, 0x7ff, 0x40000000, 0x80000001, 0x2, 0xdc0a, 0x1, 0x7, 0x2, 0x1, 0x6, 0x7, 0x8, 0xffff, 0x6, 0x81, 0xda8, 0x4, 0x1, 0xa1f, 0x5af1508a, 0x4, 0x8, 0x80000001, 0x9, 0x3, 0x61d, 0x0, 0x3ec, 0x101, 0x5, 0x7, 0x9d19, 0x2, 0x7, 0xfffffff9, 0x45, 0x1, 0x4, 0x400, 0x2, 0x1, 0x380, 0x2, 0x40, 0x0, 0x46, 0xd, 0x6, 0x7, 0x1ff, 0x4, 0x10, 0x4, 0x2, 0x9, 0xbcb00000, 0x401, 0xf41d, 0x6, 0x6, 0x0, 0x4, 0x1000000, 0xd, 0x9, 0x4, 0x1, 0x7, 0x8, 0x2, 0xa6b1, 0x9, 0x0, 0x18, 0x4, 0x1c58, 0x6, 0x3, 0x1858, 0x3, 0x5, 0x5, 0x7, 0xb, 0x442b, 0x5, 0x2, 0xc3, 0x7, 0x6, 0x305, 0x2, 0x4, 0x2, 0xa19, 0x5, 0x4, 0x4, 0x8000, 0x18b53c13, 0x10001, 0x7, 0xffff, 0x3da0df6b, 0x59b, 0x10, 0x7ff, 0x470, 0xfa0, 0x6, 0x8, 0x7266, 0x1, 0x4, 0x0, 0xe, 0x5619, 0xd1f1, 0x80, 0x3, 0xb5, 0x7, 0x1, 0x80000001, 0x200, 0x6, 0x0, 0x6b380ae5, 0x3, 0x400, 0x6, 0x6, 0x5, 0x7, 0x2, 0xffff, 0xfffffff6, 0x9, 0x2, 0x0, 0x1, 0x3, 0xa44, 0xfff, 0x3, 0x1, 0x6, 0x8, 0x80000000, 0x8, 0x401, 0x8, 0xfffffff8, 0x3, 0xb, 0xd76e, 0x7, 0x3f8000, 0x200, 0x1, 0x8, 0x2, 0x390, 0x0, 0x10001, 0xb, 0x5, 0x43c, 0x92, 0x3, 0x10d5, 0x6d6979cc, 0x7, 0x3, 0xb7, 0x4, 0x1, 0xffff, 0x5, 0x7f, 0x6, 0x4, 0x1, 0x65b, 0x7, 0x4, 0x4, 0x100, 0x5, 0xffff, 0x0, 0x1ff, 0x80, 0x2, 0x5d, 0xa0, 0x2, 0x1ceb, 0x7, 0x5, 0x1, 0x1, 0x8, 0x101, 0x8000, 0xf2, 0x4, 0x115d, 0x1, 0x0, 0x4, 0x3, 0x63f, 0x8001, 0x6, 0x9, 0x101, 0x9, 0x12, 0xfff, 0x4, 0x1, 0xe4e, 0x2, 0xd, 0x80, 0x2, 0xffffffff, 0x0, 0xd4, 0x9, 0x0, 0xfffffff8, 0x8, 0x2, 0x3, 0x4, 0x31a, 0x8000, 0x0, 0x2, 0x2, 0xfffffbdd, 0x0, 0x9, 0x1, 0xc, 0x3, 0x67, 0x6, 0x101, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x0, 0xffffffff, 0x1f91, 0xd91, 0x57, 0xfffffffc, 0xb, 0x7, 0x0, 0x0, 0x7f, 0x3, 0x906, 0x2e5be5bc, 0x9, 0x4, 0x9, 0xf35, 0x81, 0x85f7, 0x2, 0x2, 0x5, 0x401, 0x6, 0x3, 0x7, 0x2, 0x3, 0x9, 0x7f, 0x2, 0x1, 0x1, 0x8000000, 0x5, 0x0, 0x7, 0x100, 0x4, 0x1ff, 0x3, 0x6, 0xbbb5, 0x1000, 0x8, 0x41b9, 0x100, 0x5, 0xf67, 0x3, 0x0, 0x1ff, 0x0, 0x1, 0x7, 0x5, 0x4, 0x4, 0x9, 0x9, 0xf, 0xfffffff7, 0x7, 0xb, 0x4, 0x6, 0x3, 0x6, 0x800, 0x100, 0x6, 0x3, 0x3, 0xfd, 0x2, 0xea, 0x2, 0x80000000, 0x0, 0x2, 0xbe, 0x51, 0x9, 0x2, 0x0, 0x671b, 0xffff8001, 0x8, 0x40, 0x6, 0x2, 0x3, 0xfffffffc, 0x6, 0x2, 0x0, 0x0, 0x401, 0x5, 0x3, 0x5, 0x8, 0xb, 0x8, 0x800, 0xc, 0x100, 0x5, 0x401, 0xffffffff, 0x6, 0x0, 0x7, 0x1000, 0x8001, 0x8, 0xc, 0xfffffffd, 0xf, 0x6, 0x8, 0x4, 0x7, 0x3, 0x1db9, 0x10000000, 0xb, 0x6, 0x4, 0xe, 0xfffffff8, 0x4, 0xa632, 0xffff, 0x6, 0x2, 0xe16d, 0x2, 0x200, 0xfffffffd, 0x4e, 0x6, 0x7, 0x2334, 0x5, 0x401, 0x6, 0x4, 0x1000, 0x0, 0x7, 0x0, 0x8, 0x0, 0x3, 0x4, 0x2, 0xffffff6e, 0xc02, 0x5, 0x8001, 0x9, 0x80000001, 0x0, 0x7fffffff, 0x3, 0x401, 0xb09, 0x1, 0x68, 0xae7a, 0x4, 0x3, 0x1, 0x0, 0x4, 0x8, 0x3ff, 0x3b, 0x9, 0x7fffffff, 0x9, 0x6, 0x8, 0x4, 0x8, 0xff, 0x10, 0x1, 0x200, 0xf4bf, 0x8, 0xc1, 0x5, 0x4, 0x2, 0xa, 0x3, 0xc, 0x7, 0xb987, 0x0, 0xbc, 0x0, 0xf, 0xd, 0x2eb0, 0xb3e0, 0xf, 0x800, 0x8, 0x77, 0xfffffffc, 0x7ff, 0x7, 0xffff, 0x1, 0x3, 0x7fffffff, 0x10001, 0x4, 0x9, 0x5, 0x180000, 0x0, 0x8, 0x40, 0xe7, 0x40, 0x2, 0x1, 0x5, 0x10, 0x4, 0xb4, 0x1, 0x8, 0x1, 0x4, 0x1, 0x6, 0xd9, 0x5, 0x5, 0x80, 0x0, 0x5, 0xfffffff8, 0x0, 0x4, 0xc9, 0x80000000, 0xc720000, 0xbcf]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x2, 0x9, 0x2, 0x7, 0x3, 0x400, 0x10000, 0x6128, 0x5, 0x2, 0x0, 0x1, 0x1, 0x7, 0x81, 0x2, 0x10001, 0x3, 0x10, 0x5, 0x5d3, 0x9, 0x0, 0xfffffff6, 0xfffffc01, 0x6c, 0x292e, 0x80000000, 0xba3a, 0xe, 0x5, 0x3fbe54dd, 0xd63, 0x100, 0x1, 0x90000, 0x1, 0x9, 0x9, 0xfff, 0x5, 0x6, 0x10001, 0x1, 0x6, 0x7ff, 0x8, 0x1, 0x80, 0x2, 0x3, 0x80000001, 0x1, 0x7ff, 0x51, 0x1, 0x6, 0x3ff, 0x80000000, 0xffff, 0x1, 0x5, 0x90, 0x3, 0x3, 0x3, 0x6, 0x80000000, 0x3, 0x11, 0x8000, 0x9, 0xa, 0x1d, 0x0, 0x5, 0xd6, 0x7fff, 0xecf, 0x4, 0x100, 0x4, 0x1, 0xab37, 0x8001, 0x22, 0x9, 0xcaa, 0xe, 0x2, 0x792, 0x5, 0x9, 0x0, 0x1, 0x200, 0x1, 0x5, 0xf7, 0x8, 0x101, 0x8, 0x3, 0x6188, 0x53, 0x1, 0x4, 0x5, 0x0, 0x9, 0x6, 0x5, 0x6, 0x3, 0x0, 0x5b88, 0xe, 0xff, 0x4, 0x1, 0x3, 0x7f, 0x9, 0x8, 0x2, 0x6, 0x2, 0x9, 0x1, 0x3bf7, 0x4030, 0xffffff4b, 0x5, 0x200, 0xe031, 0x3, 0x400, 0x10000, 0x0, 0x0, 0xe, 0xe30, 0x2, 0x100, 0xff, 0x9, 0x8, 0x8001, 0x5, 0x3, 0x2, 0x2, 0x5, 0x0, 0x6, 0x4, 0x5, 0xffff0000, 0x8, 0x10000, 0xfffff46f, 0x1, 0x40, 0x8000, 0x9, 0x1, 0x7, 0x6, 0x40, 0x0, 0x8, 0x0, 0x1ff, 0xaf, 0xa84d, 0xb, 0x0, 0x2, 0x5, 0xf4, 0x3, 0x6, 0x17a1, 0x3, 0x6, 0x2, 0x7, 0x4, 0x7, 0xdb44, 0x7c, 0x25, 0x1, 0xb364, 0x2, 0xbfd, 0x1000, 0xf, 0x1, 0x91, 0x7, 0x4, 0xea42, 0xffff, 0x4ec, 0xd, 0x29, 0x0, 0x5, 0x101, 0xfffffff7, 0x80, 0x0, 0x9, 0x3, 0x4, 0x200, 0x3, 0x1, 0x7ff, 0x100, 0x0, 0x8, 0x5, 0x3, 0x5, 0x8, 0x401, 0x7, 0x1, 0x1, 0x8, 0x8, 0x6, 0x1, 0xd9, 0xbe3, 0xfffffff8, 0x0, 0xb400, 0x9, 0x0, 0x2000000, 0x101, 0xe, 0x4, 0x800, 0x6, 0x8, 0x400, 0xe03, 0x9, 0xac, 0x8, 0x10000]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xbe}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff, 0x80, 0xb3f6, 0x4, 0x88, 0x0, 0x4, 0x7, 0x6, 0xa320000, 0x8, 0xe, 0xe3, 0x1, 0x1, 0x7, 0x8, 0x6e, 0x1, 0x200, 0x3b, 0x7, 0x8000, 0x4, 0x4, 0x7, 0x6, 0xe, 0x3, 0x4, 0x4, 0x3, 0x0, 0x1, 0x64, 0xffff5158, 0x0, 0x40, 0x7076, 0x3ff, 0x4, 0x200, 0x7ff, 0x7fff, 0xa92, 0xb6, 0x6, 0x10, 0x8, 0x3, 0x7fff, 0x8001, 0xffffffff, 0x8, 0x4, 0x7f, 0x8, 0x2c1, 0x10001, 0x9, 0xe, 0x1, 0x5, 0x80000000, 0x69, 0x3, 0xffff2d0e, 0x6, 0xfffffffa, 0xf4c, 0x21, 0x7ff, 0xcf, 0x7fffffff, 0xfffffffa, 0xfffffff9, 0x4, 0x5, 0x92e, 0x5, 0x4af, 0x3, 0xffffffe6, 0x5, 0x5, 0x0, 0x6, 0x6, 0x200, 0x3, 0x4, 0x8, 0x8, 0xfffffffa, 0x9, 0x101, 0xf54, 0x7ff, 0x1, 0x7ff, 0xa, 0x9dd20000, 0xfff, 0x2, 0xb9, 0x6, 0xf, 0x3, 0x7, 0x4, 0x7, 0x3, 0x5, 0x5, 0x4, 0x400, 0x8, 0x9, 0xc, 0x40, 0xd4ba, 0x2000000, 0x1, 0x0, 0x6, 0x7fffffff, 0x4, 0x100, 0x7, 0x401, 0x4, 0x7fffffff, 0x38e, 0x7, 0x81, 0x101, 0x8000, 0x7, 0x101, 0x9, 0xffffff01, 0xff2, 0x7, 0x149d, 0x2, 0xfffffff6, 0x89, 0x10001, 0x0, 0x2, 0x8, 0x8, 0x2, 0x8, 0x6c38, 0x635d, 0x5, 0x5, 0x1, 0x3, 0x7, 0x9, 0x8d1, 0x10, 0x1ff, 0x7fff, 0x2, 0x0, 0xb, 0x7fffffff, 0x69b1, 0x7fff, 0x7, 0x3, 0x0, 0x24, 0x7, 0x2, 0x4, 0x7fff, 0x5, 0x9, 0xfffffffb, 0xfffffff8, 0x2, 0x7, 0x3, 0x3, 0x2, 0x9, 0x6, 0x200, 0x2, 0x1, 0x5, 0x4, 0x7f, 0xfffffffa, 0x8, 0x0, 0x200, 0x85, 0x7fff, 0x3ff, 0x401, 0xe1, 0x7, 0x5, 0x7f, 0x4, 0x2, 0xfffffffc, 0x227, 0x5, 0x2, 0x7f, 0x7, 0x4, 0x80000001, 0xfffffff8, 0x400, 0xe9, 0x3, 0xa66, 0x2, 0x101, 0x8, 0xdb000000, 0x4, 0xffffffff, 0xdaef, 0x401, 0x9, 0x0, 0x2a04, 0xfffff801, 0x0, 0x6cea90eb, 0x8001, 0x5, 0x642f6a96, 0x80, 0x80000001, 0x1000000, 0x8, 0x0, 0x68109bee, 0xfe1d, 0x7, 0x1, 0x7, 0x7, 0x101, 0x87d7, 0x8, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x14000000000000}], [@TCA_POLICE_RATE={0x404, 0x2, [0xe3, 0x7, 0x0, 0xb, 0x8, 0x2, 0x5a4, 0x6, 0xad02, 0xe75, 0x10001, 0x7, 0x0, 0x3ff, 0xd, 0x8, 0x5, 0x81, 0x428b6708, 0x7f, 0x5, 0x5, 0x0, 0x8, 0x80000001, 0x8, 0x8, 0x9, 0x8, 0x9, 0x7fff, 0x11b2af54, 0x1, 0x40, 0xfffffff8, 0x6, 0xd, 0x2, 0x6, 0x164, 0x9, 0x9, 0x8, 0xfffffff8, 0xffff, 0x3, 0x9, 0x3, 0x6, 0x401, 0x1, 0x13b20a7c, 0x7ff, 0xdb, 0x10000, 0x6, 0x3, 0xf042, 0x81, 0x6, 0x49d, 0x3, 0x5, 0x3, 0x8, 0x6, 0x6, 0x20000002, 0x0, 0x2, 0x0, 0x4, 0x7, 0x6, 0x7fff, 0x8, 0x24, 0xffffa7f6, 0x1ff, 0xffffffff, 0x54, 0x8, 0x0, 0x5, 0xffff, 0x9, 0x0, 0x72, 0x0, 0x6, 0x3, 0x5, 0xca8, 0xe757, 0xe, 0x3, 0x7fffffff, 0x2, 0x9, 0xfffeffff, 0x7, 0x3ff, 0x7, 0x7ea, 0x8, 0x4, 0x3, 0xff, 0xfffffffb, 0x0, 0xa12164da, 0xf2, 0x7, 0x7, 0xf9, 0x1, 0xa, 0x7ff, 0x72d, 0x1, 0x10, 0xb4, 0x7d1, 0x80000000, 0x3ff, 0x1000, 0x3, 0x101, 0x3, 0x6, 0x2bf, 0xfffffffb, 0x3, 0x7, 0x4, 0x9, 0x0, 0x9, 0x4, 0x8, 0x0, 0xb, 0xfffffffa, 0xa, 0x12da, 0x0, 0x1, 0x4, 0x7b5d, 0x6, 0x5, 0x20, 0x7, 0x0, 0x9, 0x1, 0x0, 0x101, 0x7, 0x9, 0xffffffff, 0x3, 0x0, 0x0, 0x2, 0x200, 0xe53, 0x1ff, 0x80, 0x4, 0xa9, 0x32, 0x2, 0xffffffff, 0x6, 0x8b, 0x7ff, 0x7344052c, 0xfffffffd, 0x81, 0xa0000, 0x7, 0x5, 0x4, 0x2, 0xea0, 0xa1, 0x4, 0x39, 0x8, 0x0, 0x8, 0x10, 0x7, 0xfffffffc, 0xd, 0x2, 0x0, 0x9, 0x4, 0x200, 0x2, 0x81, 0x80, 0x4, 0x0, 0x2, 0x4, 0x401, 0xfffffffb, 0x0, 0xfffff87c, 0x2, 0x1, 0x3, 0xfffffff5, 0x8, 0x2, 0x2, 0x2, 0x10001, 0xe, 0x1, 0x7, 0xa593, 0xd, 0xe9e, 0x2, 0x6, 0x3, 0x9, 0x6, 0x7f, 0x9, 0xa, 0x3c, 0x80000001, 0x7, 0x2, 0x9, 0x6, 0x9, 0x6, 0xb9, 0x9, 0x3ff, 0x30000000, 0x2, 0x2, 0xbdf2, 0x8, 0x5, 0xfffffffc, 0x31, 0x9, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf4, 0x6, 0x6, 0x4000, 0x7fff, 0x800, 0x3, 0x1, 0x7, 0x81ef, 0x9, 0x9bd3, 0x400, 0x7d8, 0x80000000, 0x1, 0x5, 0x3, 0x9, 0xea, 0x6d, 0xe8, 0x6, 0x99, 0x633, 0x3, 0x2, 0x2, 0x81, 0xe66, 0x7, 0x5, 0x8, 0x8efae2a7, 0x7ecb002d, 0x7, 0x6, 0x7, 0xfffffffe, 0x4, 0x6, 0x10, 0x5, 0x10, 0x398fe070, 0x5, 0x8001, 0x3, 0x5, 0x7, 0x5, 0x10001, 0x101, 0x4, 0x5, 0xfff, 0x7ff, 0x10001, 0x12, 0x8, 0x4, 0x9, 0x10, 0x30d6, 0x7f, 0xd, 0xfffffffa, 0xdb5a, 0x400, 0x3b3, 0x80000001, 0xfd7, 0x6, 0x3, 0xfffffff7, 0x57e, 0x7, 0x10, 0xce, 0x9, 0xfffffffe, 0xd, 0xfffffff7, 0x5, 0x5, 0x82, 0x6, 0xffff, 0x6, 0x88d5, 0x0, 0xffff7fff, 0x4, 0x5, 0x400, 0x2, 0xffffffff, 0xc, 0x912, 0xc, 0x8001, 0x1, 0x96, 0x281, 0x0, 0x8, 0x4, 0x9, 0x4, 0x1ff0, 0x5, 0x1, 0x8, 0x7, 0x4, 0x7, 0x7, 0x8, 0xf8a, 0x7, 0x4, 0x7, 0x7, 0x400, 0xfffffffd, 0x7, 0xfffff801, 0x4ce, 0xf2d0, 0x5, 0x2e690250, 0x8, 0x7, 0x4, 0x10000, 0x7f, 0x2, 0x9, 0x9, 0x80, 0x2, 0x117, 0x3, 0x3, 0x65d11046, 0xfffffff7, 0x4, 0x0, 0x6, 0x9, 0x7fffffff, 0x10000, 0x5, 0x53d, 0x9, 0x63, 0x4, 0x6b3, 0x9, 0x52b, 0xffffffff, 0x8, 0x1, 0x2, 0x9, 0xfffffffc, 0x5, 0x4, 0x1, 0x9, 0xff, 0x3, 0x806, 0x10001, 0x7, 0x6, 0xa, 0x81, 0x4, 0x1, 0x3, 0xd, 0xfffff060, 0x6, 0xd8ca, 0x8, 0x6, 0x8, 0x401, 0xc50, 0x1800000, 0xb1dc, 0x3, 0xc, 0x5, 0x9, 0x8, 0x6, 0xdb68, 0x5, 0x0, 0x8, 0x2, 0xded0, 0x364f, 0x8, 0x3, 0x3, 0x9, 0x7, 0x5, 0x80, 0x1, 0x6, 0x9, 0x2, 0x9, 0x80000000, 0x7, 0x771, 0x5, 0x8001, 0x6, 0x7ff, 0x600, 0xf77e, 0x6, 0x6, 0x8, 0x6, 0x7ff, 0x0, 0x5, 0x7, 0x4, 0x1, 0xe40b, 0x9, 0x2, 0x0, 0x7, 0x8, 0x3, 0x8, 0x0, 0x2, 0x1000, 0xa0000000, 0x100, 0x6, 0x9, 0x4, 0x9, 0x4, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x3, 0x2a, 0x7, {0x3, 0x1, 0xf155, 0x3, 0x9, 0x1}, {0x7, 0x2, 0x400, 0x100, 0x5, 0x80}, 0x0, 0x7872, 0x1ff}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7ea, 0x2d, 0x1, 0x9, 0x8000, 0x7, 0x3, 0xffff, 0xfffffffb, 0x1, 0x8, 0x2, 0x4, 0x3, 0xd, 0x5, 0x1, 0x9, 0x5, 0x3, 0xffff, 0x9, 0xffff, 0x5, 0xfd46, 0x9, 0x8001, 0x100, 0x4, 0xabbd, 0x4, 0x7, 0xea, 0x57, 0x8, 0xc, 0x167e, 0x9, 0x2, 0xfffffffa, 0x3, 0x3, 0x8, 0x0, 0x7, 0x2, 0xffff, 0xef, 0xfffffffd, 0x0, 0x8, 0x7, 0x2, 0x8001, 0x8, 0x3, 0x7, 0x9c, 0x0, 0x9, 0x1, 0xffff, 0x7fffffff, 0x1, 0x7f, 0x8, 0x9, 0x0, 0x90, 0x7ff, 0x8, 0x6, 0x55600, 0x81, 0xc5ac, 0x3ff, 0x8, 0x0, 0x6, 0x6, 0xe, 0xffff, 0x80000001, 0xe0000, 0x4, 0xee2, 0x3, 0x2b5, 0x80000000, 0x4, 0x5bc, 0x3, 0xe9c4, 0x3, 0x6, 0x2, 0xffff0000, 0xfffffff9, 0x2, 0xffffffff, 0x10, 0xf9ab, 0x4, 0xb4f, 0x4, 0x1, 0x0, 0x9, 0x6, 0x7, 0x1, 0x6, 0x6, 0x0, 0x7, 0x4, 0x5, 0x10, 0x0, 0x2, 0xe000, 0x8, 0xffff8000, 0x8, 0x7, 0x7, 0x5, 0xd1, 0x6, 0xa, 0x0, 0x80000001, 0x7, 0x7d, 0x9, 0xf, 0x8, 0x5, 0xccf, 0x6, 0xffff, 0xe, 0x200, 0x4, 0x9, 0x1, 0x351, 0x9, 0xc, 0xffffffff, 0x8, 0x0, 0x8000, 0x7, 0x40, 0x8000, 0xfffffffd, 0xfffffffa, 0x2, 0x72, 0xb, 0x100, 0x5, 0x6, 0xfffffff2, 0x1, 0x3, 0x7, 0x7, 0x756, 0xffffffff, 0x2, 0x5, 0x800, 0x8, 0x4, 0x5, 0x401, 0x4, 0x9, 0xf6, 0x3ff, 0xc40, 0x1, 0x10000, 0x19bc, 0x40, 0x2, 0x6, 0x10, 0x9, 0x3, 0x2, 0x401, 0xb8d8, 0x40, 0xffffff8d, 0x8a90, 0xffff, 0x10000, 0x10000, 0x2, 0x4, 0x7ff, 0xdc6, 0x2, 0xdc1, 0x3, 0x9, 0x5, 0x8, 0x3, 0x9, 0x1f, 0x6a8, 0xfffffffb, 0x16c0, 0x8, 0x2, 0x7, 0x10, 0x9, 0x7f, 0x5, 0x1, 0x6, 0xcf, 0xe686, 0x3, 0x1, 0x8, 0x6, 0xc9, 0x7, 0x5172, 0x6, 0x5, 0x3, 0x40, 0x6, 0x2e4, 0x2, 0x5, 0xd00, 0x5, 0x7, 0x3, 0xf, 0x4e, 0x5, 0x1, 0x10, 0xf, 0x3, 0x18000000, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc78, 0x8, 0x0, 0x9, 0x700, {0x6, 0x0, 0x746, 0x4, 0x800, 0x1}, {0x6, 0x1, 0xf, 0x8, 0x691a, 0x5}, 0x8, 0x7, 0x400}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0xfb4cb89225ba1b94, 0xfffffffc, 0x2, 0x4, {0xfa, 0x0, 0x3, 0x7, 0x8001, 0x9}, {0xc0, 0x3, 0xc24, 0x1000, 0xfffd, 0x1}, 0xd7, 0x800, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x69d1, 0x3, 0x200, 0x2, 0x56, 0x4, 0x80000000, 0x8, 0x8, 0x167, 0x9, 0x5, 0x4, 0x1, 0x8, 0x1, 0x8, 0x0, 0x3, 0xc853, 0xb, 0x81, 0x8, 0x2, 0x6, 0x7, 0x6, 0x9, 0x67, 0x923a, 0x5, 0x2, 0x4, 0x80000001, 0xe, 0x1, 0x80000000, 0x7ff, 0xffffffff, 0xd5c, 0x4, 0x7, 0x0, 0x7fffffff, 0x5, 0x7fff, 0x8, 0xffff, 0x9, 0x6, 0x400, 0x81, 0x7b, 0x7f, 0x7, 0x8, 0xfffffff7, 0x2, 0x1, 0x5, 0x8001, 0xff, 0x80bb, 0x2, 0x9, 0x800, 0x387c, 0x6, 0x5, 0x9a, 0x3, 0x4, 0x400, 0x4a, 0x7, 0x4, 0xf00, 0x0, 0xbcbb, 0x800, 0x8, 0x643, 0x401, 0x1b, 0xe772, 0x3, 0x1, 0x2, 0x0, 0x0, 0x4, 0x0, 0x539, 0x57e5, 0xdc6, 0x5, 0x81, 0x3, 0x4, 0x8, 0x2, 0x8001, 0x4, 0x40000, 0x3, 0x8, 0x0, 0x2, 0x6, 0x2, 0x100, 0x6, 0x7ff, 0x0, 0x8, 0x80, 0x2, 0x0, 0x2, 0x8, 0x1, 0x15eb, 0x8, 0x5b32, 0x3, 0x7f, 0x3, 0x621f1e8d, 0x9, 0xffffffff, 0x4, 0x2, 0x7, 0x1, 0x2, 0x8, 0x400, 0x200, 0x4, 0x8, 0x0, 0x7, 0x5, 0x92, 0xd7, 0x8, 0x2, 0x1, 0x8, 0x5, 0xffff3b2e, 0x6fbf, 0x1, 0xfffff000, 0x9, 0xe, 0x1, 0x3, 0x3, 0x4c3d, 0x8, 0x5, 0x4, 0x0, 0x4, 0x1, 0x1, 0x77, 0x9b, 0x80000001, 0x8000, 0x5, 0x2, 0x80000001, 0x8, 0x10, 0xfff, 0x400, 0x9, 0x9, 0x0, 0xeb, 0x101, 0x1, 0x4, 0x9efd, 0xb8, 0xb1b, 0x6, 0xb179, 0x9, 0x3, 0x0, 0x3ff, 0x0, 0x9, 0x5, 0x5, 0x15f, 0x5, 0x3, 0xa, 0xb, 0x9, 0xbae, 0x3, 0x2, 0x2, 0x80000000, 0x57eba166, 0x8, 0x1, 0x7fff, 0x3f3, 0x0, 0x6, 0x8, 0x9, 0x5, 0x7, 0x1, 0x6, 0x8, 0xffff9fcf, 0x343, 0xfffffff7, 0x6, 0x3, 0x8b5b, 0x4, 0x80, 0x6, 0x9, 0x316d, 0x4, 0x4bb, 0x6, 0x6, 0x1000, 0x1, 0x74c, 0xf, 0x0, 0xa, 0x6, 0x5, 0xa, 0x1, 0xffffff80, 0xada0, 0xd, 0x2, 0x1c52, 0xa, 0xffffffff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xd65}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x3b4, 0x1, 0x6, 0x5, 0x9, 0x5, 0x43, 0x3, 0x3, 0x10001, 0x6, 0x9, 0x1, 0x2, 0x8, 0x5, 0x3, 0x4, 0xffff16ad, 0x1, 0xb, 0x600, 0x6, 0x1, 0x2, 0x3, 0x2, 0x6da04eb9, 0x7, 0x8, 0x80000000, 0x5, 0x1, 0x3, 0x8001, 0x9, 0x8, 0x400, 0x9, 0x8b, 0x6, 0x0, 0x7, 0x1b22, 0x0, 0x1ff, 0xd42, 0x7fffffff, 0x7fff, 0xf, 0xff, 0xe, 0x3, 0x0, 0x2, 0x7, 0x2, 0x1, 0x9, 0x4f, 0x8000, 0x9, 0xb53b, 0x8, 0x9, 0x7fffffff, 0xe8e, 0x8, 0x3, 0x2, 0x1ff, 0x8, 0x6, 0x1a89, 0x4, 0xc, 0xb8b, 0x2, 0x4, 0x4, 0x9, 0xed4, 0xfff, 0x5, 0x0, 0x4, 0x9, 0x3, 0x0, 0xff, 0x4, 0x6, 0x5, 0xe, 0xff, 0x101, 0x0, 0x8, 0x5, 0xc, 0x2, 0x6, 0x10, 0x6, 0xc043, 0x0, 0x100, 0x3, 0x1000, 0x0, 0x10001, 0x1, 0x1, 0x1ff, 0xff, 0x643f, 0x8, 0xd6, 0x5, 0x3, 0x9, 0x4, 0x1, 0x9, 0x8b, 0xd, 0x3, 0x0, 0x1, 0x7fff, 0x4, 0x2000400, 0x1ff, 0x6, 0x3ff, 0xd0, 0x5, 0x8, 0x7fffffff, 0x0, 0x1000, 0x55c, 0xa, 0x4, 0x7b, 0x7, 0xfd8, 0x3, 0x800, 0x3, 0x2, 0x2, 0x7, 0x6, 0x1, 0x1, 0x284, 0x8f, 0xa5a, 0x6, 0x20f, 0x20000000, 0x0, 0x1, 0x3, 0x5, 0x5f, 0xff, 0x0, 0x8, 0x4a, 0x8, 0x7, 0x6, 0x8, 0x2, 0x1, 0x0, 0x8, 0x400, 0x2, 0x18, 0x8, 0x76d4527d, 0x6, 0x1ff, 0x20000000, 0xf, 0x1, 0xffffffff, 0x7, 0xefb, 0x6230, 0x9, 0x7a98, 0x5, 0x2, 0xac1, 0x6, 0x4, 0x46, 0xee, 0x8b8f, 0x9, 0x0, 0x5, 0x2, 0x1a66b5a1, 0x7, 0x3, 0x542, 0x8001, 0x96, 0xffffffff, 0x4, 0x8, 0x51c, 0xd64, 0xe6, 0xcd7c, 0x0, 0xfffff0ec, 0x8, 0x1000, 0x200, 0x7, 0x0, 0x2, 0x7, 0x1000, 0x72, 0x1, 0xc80a, 0x1000, 0x5, 0x5, 0x9, 0xff, 0x7d, 0x4, 0x1, 0x8, 0xe, 0x2, 0x8, 0x9, 0x5, 0x4c300000, 0xe7e7, 0x2, 0x1, 0x8, 0x2, 0xe3, 0x9]}]]}, {0x74, 0x6, "22b5679d4dfad608d0b305ec1509d7ac041f67f12881180a792844990013e8fcfbc198a9d37d9d977a7a25dcd7b837d39ef3e3d892047d52f87f7efa9a66205a63639bed17daeb3fc149bbb1568851cb2e497c3aebcd31f72af1d35e4f091499c1710a41fc73777c9871698727ef0162"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0xfc, 0xe, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x40}]}, {0xc6, 0x6, "05ef68de7910189bb73915d85887ff0719172dc6c31e9c2b5923554c5ac166a567ab5cc4d7533c491f068098558bae5c3b5b3df6e5a31ad8c8c83eeac3a76247a03e8e6433f18ed18c3a6e73309ffc8e81e91c2427574cec7b27a2006c4bc310ae5a333d3a5f3a5efe0a1de6f0d7000d778213d9e2aa71a47a77be219c37c6f2ed64c9aea63dcf4aa1443066ff8474b83bcba19f699c19d3c097a1707d9e6cc5be01d1db8f848e3284a484a6f5f85512ae29962b50ab74cd216b559ad92484a7f24f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x1060, 0x1a, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0xc8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x98}}, @TCA_EMATCH_TREE_LIST={0x84, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9}, {{0x2, 0x0, 0x0, 0x1}, {0x3}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x3}, {0x64, 0x5, 0x9, 0xc, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8001, 0x3, 0x5}, {0x2, 0x67ed, 0x8b, 0xfffffffd}}}, @TCF_EM_CONTAINER={0x38, 0x3, 0x0, 0x0, {{0xff7f, 0x0, 0xf4f3}, "55f143f03cdf9849a41c35216366321947a6e3a8128a9a569dc2bf94aab2b727f40b554b3e63df2b30a1"}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x101}, {0x5, 0x4, 0x1, "d36b7af7"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x45}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0x5}}, @TCA_BASIC_EMATCHES={0xf8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0xc8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x9, 0x9, 0x8}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x80, 0x7, 0x2}, {{}, {0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x4, 0x8, 0x4}, {0x4}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x200, 0x3, 0x9}, {0x2, 0x8, 0x6, 0x5}}}, @TCF_EM_IPT={0x60, 0x3, 0x0, 0x0, {{0x4, 0x9, 0x3}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x31, 0x5, "91e1adfc3615834e27a037fdd69d2c3573975e7cc93764ec3fb3aeeff7d66d384e54e4683453ebc24bf4090b7b"}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xa0, 0x8, 0x1}, {0x0, 0x1, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x7, 0xb}}, @TCA_BASIC_EMATCHES={0x74, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0xffc0, 0x9, 0x3}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0xd, 0x5, "accd98c79cfd26a0d3"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6540}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x101}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0xad, 0x8}}, @filter_kind_options=@f_basic={{0xa}, {0x9e8, 0x2, [@TCA_BASIC_POLICE={0x87c, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf6b, 0x20000000, 0x63, 0x7fff, 0x4, {0x8, 0x1, 0x2, 0x4, 0x4, 0x2}, {0x8, 0x1, 0x4, 0x32ca, 0x582b, 0x2}, 0xdb, 0x8c, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x4, 0x8, 0x7, 0x5000000, 0x6, 0x9, 0x7fff, 0x5, 0x37, 0x7fffffff, 0x1000, 0x5, 0x401, 0x101, 0x9, 0xffffffff, 0xe0, 0x10000, 0xd, 0x1, 0x7, 0x2, 0x2, 0x2, 0x240000, 0xa, 0x9, 0x9, 0x2, 0x3, 0x9, 0xffff0001, 0x5, 0x80000001, 0x6, 0x800, 0x8, 0x6, 0x1, 0x79, 0x2, 0x4, 0x5, 0x301, 0x100, 0x3ff, 0x1, 0x6707, 0x5, 0x200, 0x40, 0x6, 0x3, 0x9, 0x10000, 0xfc0b, 0x7, 0x200, 0x8, 0x3, 0x8001, 0x0, 0x3, 0x200, 0x12, 0x401, 0x6, 0x2ae, 0x4, 0xfffffff7, 0x1, 0x66, 0x6, 0x10001, 0x7fffffff, 0x1da8, 0x3, 0x30, 0x2, 0x1, 0xcf78, 0x3, 0x6, 0x6, 0x4, 0x4, 0x2, 0x7, 0x7, 0x81, 0x4, 0x9, 0x400, 0xff, 0x0, 0x1, 0x8, 0xfffffffb, 0x80000001, 0x7, 0x7fff, 0xa, 0x3f, 0x5, 0x5, 0x9, 0x80000000, 0x100, 0xfffffff7, 0x1, 0xff, 0x9, 0x498af301, 0x3, 0x7, 0x80000001, 0x7, 0x7, 0x8, 0x4, 0x3, 0x9, 0x7, 0x7, 0xc, 0x6, 0x7fff, 0x3, 0x3, 0x1, 0x80, 0x80000001, 0x10, 0x6, 0x9, 0x9, 0x2, 0x7d2b, 0xad1f, 0x4, 0xffffffff, 0xf9, 0x0, 0x10000, 0xe7, 0x4, 0x1, 0x5, 0x1ff, 0x4, 0xf, 0x5, 0x5, 0xfffff95d, 0x0, 0x368, 0x6, 0x2, 0x2, 0x9, 0x0, 0x1, 0x8000, 0x3, 0x1, 0x8001, 0x4, 0x5, 0x5, 0xfffff801, 0xffffffff, 0x4, 0xb29, 0x4, 0x100, 0x9, 0xce, 0x49d2, 0x9, 0x7, 0x3276bf66, 0x9, 0x3, 0x3d, 0x80000000, 0xb, 0x9, 0x9, 0x80000000, 0x7, 0x5, 0xb5e, 0x0, 0x8, 0x1, 0xc00000, 0x8db, 0x200, 0x9, 0x5, 0x1, 0x2, 0xc, 0x8, 0x1, 0x9, 0x6, 0x9, 0x6, 0x5, 0x80000001, 0x6, 0x4, 0x3, 0x2, 0x7f5, 0xdddc, 0x4, 0xfffffc01, 0x6, 0xbaa, 0x4, 0x1, 0x7, 0x4, 0xffffffff, 0x40, 0x2, 0x6df, 0x1, 0x7, 0x9, 0x9f, 0x2000, 0xd6, 0x77ac, 0xff, 0x4, 0x4, 0x8, 0x1, 0xe03, 0xfffffffa, 0x80, 0xb00000, 0x1, 0x6, 0xb3, 0x5, 0x45, 0xd, 0x2b, 0x3, 0x0, 0x200]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x7, 0xfffffff7, 0x8, 0x401, 0x5, 0x901c, 0x7fff, 0x2, 0xf9c0, 0x0, 0xe562, 0xfffffffa, 0x6, 0x7e1, 0xb, 0x8000, 0x4, 0x0, 0x800, 0x6, 0x10001, 0x822f, 0x7, 0xa, 0x6, 0x7, 0x3, 0x0, 0x10, 0x3, 0x2299, 0x391f95d, 0x1d1b7fc3, 0x5, 0x2, 0x6, 0x7, 0xb, 0xf819, 0x2e, 0x7d6, 0x6, 0x2, 0x6, 0xfffffffb, 0x2, 0x4, 0x2, 0x5c, 0xffff, 0xa096, 0x80, 0x5, 0x1, 0x3ff, 0x0, 0x401, 0x100, 0xff, 0x9, 0xffffffc0, 0xa894, 0xffff100d, 0x3, 0x27, 0x100, 0x6, 0x6, 0x7, 0x7, 0x2, 0x0, 0xec5, 0x5, 0x4, 0x74, 0x0, 0x0, 0x23ec, 0x0, 0xfffffff7, 0x400, 0x8, 0x3, 0x100, 0x79a, 0x7, 0x0, 0x6, 0x4, 0x20200000, 0x8, 0x3, 0x1, 0x543, 0x80, 0x7, 0x2cbf, 0x1, 0x100, 0x1, 0x3, 0x6, 0xffff, 0xe, 0xe, 0x1, 0xffffffff, 0x1000, 0x200, 0xff, 0xfffffffc, 0x54, 0x8, 0x4, 0x6, 0x81, 0x2, 0x8, 0x6, 0x8d1, 0xffffff99, 0x7fff, 0x0, 0x7fff, 0x24e1, 0x0, 0x6, 0x8, 0x0, 0x5, 0x0, 0x0, 0xea9, 0xdf, 0x8, 0x9, 0x3, 0x5, 0xfffffffa, 0x5, 0x7f, 0xa97, 0x5, 0x1, 0x2, 0x2, 0x2, 0x7fff, 0x4, 0x5e, 0x4, 0x9331, 0x800, 0x40, 0x8, 0x81, 0x9, 0x600000, 0xe, 0x5, 0x8, 0x6, 0xff, 0xd9, 0x2, 0x4, 0x9, 0xd09d, 0x1800000, 0x5, 0x4, 0xf, 0x7fffffff, 0x0, 0x6, 0xf8, 0x6, 0x14d4, 0x4, 0xbf9, 0x50, 0x5, 0x3, 0xfc7b, 0x9, 0x5, 0x1, 0x9, 0xfff, 0x82, 0x3, 0xb, 0x5, 0x3, 0x5, 0x1, 0x10001, 0x1, 0x3, 0x4, 0x5, 0x6, 0x0, 0xb4, 0x4, 0xffff0001, 0xfff, 0x5, 0x4, 0xd861, 0xfffffff8, 0x8, 0x9, 0x2, 0x8b6, 0xffffff2d, 0x1, 0x7fff, 0xecd6, 0xffffffff, 0x2, 0x2, 0x5, 0x5, 0x6, 0x3, 0xfe4, 0x4, 0x6, 0x1b, 0x6, 0xbb, 0x8, 0x100, 0x96a, 0x4, 0xffffff9f, 0x2, 0x0, 0x4, 0x9, 0xde6, 0x0, 0x78, 0x800, 0x6, 0xa, 0x0, 0x10001, 0x2, 0x7, 0xdd65, 0x5, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0x5}}, @TCA_BASIC_EMATCHES={0x158, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0xfff8}, {0x9, 0x4, 0x1, 0x5, 0xf, 0x1, 0x2}}}, @TCF_EM_IPT={0x74, 0x2, 0x0, 0x0, {{0x0, 0x9, 0xff}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x1c, 0x5, "0368966d0b4a2a985dff00e0a83e38f132c94af231bb376c"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xf670, 0x8, 0x200}, {0x3, 0x2, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xe6, 0x3, 0xa84}, {0x80000000, 0x0, 0xf5aa, 0x8}}}, @TCF_EM_META={0x74, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_VAR="f3f7804d941f6b", @TCF_META_TYPE_VAR="3fb52040", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="768f61", @TCF_META_TYPE_VAR="8db408386a", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='Q', @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR='X', @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="5a0751dd61b3", @TCF_META_TYPE_VAR="cd5338218d92c0de"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe336}, {0x10, 0x7, 0x1}}}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="df7784ec2f"]}]}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0x9}, {0x100, 0x9, 0x2, "569adb6b380196b033"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0xb}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x6380}, 0x1, 0xf0ffffffffffff}, 0x0) 2.319364406s ago: executing program 4 (id=4463): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) 2.146440649s ago: executing program 4 (id=4464): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001800010000000000000000008020000000110005"], 0x24}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r2, r1, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88040000160001002bbd7000fddbdf2500000000000000000000ffff64010101ac1414150000000000000000000000004e2000004e2107ff020020a033000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000004d4330000007f000001000000000000000000000000040000000000000001000000000000800900000000000000000000000000000007000000000000000000000000000000070000000000000008000000000000009bffffffffffffff04000000000000000700000000000000000000000000008002000000000000000200000025bd700000000000020002080000000000000000040000000800000008001d00ffff"], 0x488}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000240)={0x101fd, 0x0, 0x3000, 0x2000, &(0x7f0000462000/0x2000)=nil}) (rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x38c, 0xffffffff, 0x280, 0x37c, 0x280, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@nfacct={{0x44}, {'syz0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xcc}, @common=@inet=@SET1={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, [], [], 'team_slave_1\x00', 'syzkaller1\x00'}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3e8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r9, &(0x7f0000000100)=[{&(0x7f0000000600)=""/56, 0x38}], 0x1, 0x3c, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000200)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.887942413s ago: executing program 0 (id=4465): io_uring_setup(0x30d3, &(0x7f0000000340)={0x0, 0x0, 0x20}) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback, 0x9}}}, 0x104) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet(r1, &(0x7f00000008c0), 0x0, 0x4000800, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) openat$dsp(0xffffffffffffff9c, 0x0, 0x2401, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x19) r4 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x100000, 0x249}, &(0x7f0000000180)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x4d10, 0x2, 0x2, 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102373, 0x18fe5}], 0x1, 0x0, 0x0) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x0, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xb}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) 1.801330446s ago: executing program 4 (id=4466): r0 = socket$inet6(0xa, 0x6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6, 0xfc, 0x0, 0x7ffffdbf}, {0x9, 0x0, 0x3, 0x6}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, r3}, 0xc) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d312"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0x4008af13, &(0x7f0000000200)) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="a1", 0x1}, {&(0x7f0000000280)="5991f1eb35b0cc", 0x7}], 0x2}}], 0x1, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000240)=""/6, 0x6, 0x2040, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, 0x20) ioctl$KVM_RUN(r6, 0xae80, 0x0) brk(0x0) syz_usb_connect(0x0, 0x6ac, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, 0x0, 0x0) 1.620863365s ago: executing program 0 (id=4467): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5c}, {0x6, 0x0, 0x0, 0x7ffffffb}]}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r1 = syz_io_uring_setup(0x4e5f, &(0x7f0000000580)={0x0, 0x2506, 0x10100, 0x400, 0x276}, &(0x7f0000000180)=0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x25dfdbfb, {0xc}, [@NDA_DST_MAC={0xa, 0x1, @dev}]}, 0x28}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="181600000000000000000000000000001801000020207025"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000c40)=ANY=[@ANYBLOB="02002302230102090500000010000020d3ad"]) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$inet(0xa, 0x801, 0x84) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000100), 0x4) listen(r7, 0x100000001) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x0, 0x0, 0xf, 0x20, 0xfd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x8, 0x30}, 0xe) syz_io_uring_submit(r2, 0x0, 0x0) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800) preadv(r9, &(0x7f0000002e80)=[{&(0x7f0000002a40)=""/137, 0x89}], 0x1, 0x0, 0x6ca) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) io_uring_enter(r1, 0x13a0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000140)={0x6, 0x2023}) 1.583285228s ago: executing program 3 (id=4468): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) (async) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async, rerun: 32) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0xf84}, 0x1c) (async, rerun: 32) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="39000000140081ae00003c000500218311001fa2660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb301000000dbb7d553b4e92155", 0x39}], 0x1}, 0x20000050) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000008004e00004c0800000000069078ac14b71400ac1e00018917f400000000ffffffff0000000000000000000000440805020000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) (async, rerun: 64) r5 = userfaultfd(0x1) (rerun: 64) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) r8 = syz_open_dev$vbi(&(0x7f0000001580), 0x2, 0x2) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f00000000c0)=0x5) (async) ioctl$VIDIOC_DQBUF(r8, 0xc0585611, &(0x7f0000001640)=@multiplanar_fd={0x2, 0xa, 0x4, 0x10000, 0x8, {}, {0x7, 0x8, 0x6, 0x5, 0x9, 0x6, "6bf0e737"}, 0x80000001, 0x4, {0x0}, 0x4}) (async, rerun: 64) futex(&(0x7f0000000200), 0x88, 0x0, 0x0, 0x0, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r10, @ANYBLOB="08000a00d4"], 0x44}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ef969f31a5354f38000000", @ANYRES16=r7, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="080026008509000005002400160000000a0018000303030303030000"], 0x38}}, 0x40840) 1.193735026s ago: executing program 2 (id=4470): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}}, 0x0) (fail_nth: 3) 1.032054728s ago: executing program 2 (id=4471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f787900000000"], 0xcc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, 'z?\x00', 0x10, 0x21, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "dba20d", 0x0, "0600"}}}}}}}, 0x0) 639.709175ms ago: executing program 2 (id=4472): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x44, 0x61, 0xa3, 0x40, 0x525, 0xa4a0, 0x304b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x10, 0x4, 0x1, 0x55, 0x89, 0xec, 0x5, [], [{{0x9, 0x5, 0xa, 0x3, 0x8, 0x10, 0x10, 0x1}}]}}]}}]}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x11, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@remote, @private=0xa010102}, 0xc) unshare(0x2a020400) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000eda88900"/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000003"], 0x1c) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0xe6, &(0x7f0000000300)="1af9ff001900000062fffb5d2ac6ad6b5a0708f937b64826b5254148cbf5fea906e581", 0x23) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="2300000001000300469e89b1ae17872d87085b5744eef7c51ecffad9a589627f04e7e94098f0dad277d30202b15b0632a862a1609f6d2c5e792fef6615d9493ddb7522063a09de98397915bc424a44466b76a1b4ba9bfdfbb822e59254972d04b8d9f99270d7b36c7748a6dba75ec04e2ac8ed7c426d1a14a5838174d425a476b63df9f9"], 0x8) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0x8) (async) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x22, 0x0, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x4, &(0x7f0000001940), 0x4) (async) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) (rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x118, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x104, 0x6, "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"}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x160}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async, rerun: 32) syz_usb_disconnect(r0) (async, rerun: 32) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/kexec_crash_size', 0x149a82, 0x63) bpf$ENABLE_STATS(0x20, &(0x7f0000000400), 0x4) write$binfmt_elf64(r9, &(0x7f00000008c0)=ANY=[@ANYRESOCT, @ANYRESHEX=r9, @ANYRES16=r1, @ANYBLOB="fa2f1019294e17725172f1aee5488fde40897db9a6e18caaa28906fefe5f4108dd10e28c6e1d54d48ab9de7921301499359edcfbb821163183663ff5920c254430cfeee9e427b27fc180a5b217b6732175c45eb90a8d1d", @ANYRES8, @ANYRES16=r5], 0xc63b9e35) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r10, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r10, 0x0, 0x0) 113.582274ms ago: executing program 2 (id=4473): r0 = open(&(0x7f0000000100)='./file0\x00', 0x40, 0x0) r1 = timerfd_create(0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x800001, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="2c726b6f746d6f64653d2032f422573d303030303030303030303030303030303031303069643d01810e65aaa611a2d2da1bdca6fb9f16b9f5fa0719461f036647", @ANYRES64=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = socket(0x23, 0x80000, 0x0) clock_settime(0x0, &(0x7f0000001000)={0xffffffffffffffff}) getsockopt$bt_hci(r4, 0x84, 0x72, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r9 = inotify_init1(0x80800) r10 = inotify_add_watch(r4, &(0x7f00000010c0)='./file0\x00', 0xb0000040) inotify_rm_watch(r9, r10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r8, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r13, @ANYRESOCT=r10], 0x6c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001040), r4) r14 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r14, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0xa}, 0x1c) bind$inet(r4, &(0x7f0000001180)={0x2, 0x5e22, @empty}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) shutdown(r5, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0x44, 0x4, 0x450, 0xffffffff, 0x0, 0x2c0, 0x1f4, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0, @mcast1, [], [], 'netdevsim0\x00', 'veth0_vlan\x00'}, 0x203, 0x1d0, 0x1f4, 0x8502, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@local, @mcast1, [], [], 'veth0_to_batadv\x00', 'veth1_macvtap\x00'}, 0x0, 0xa4, 0xc8}, @common=@unspec=@CLASSIFY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4ac) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xcf543737ff523749}}, 0x50) 0s ago: executing program 3 (id=4474): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x28}}, 0xfffffffffffffe14) listen(r0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x129) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c) listen(r5, 0x101) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) write$binfmt_elf32(r6, &(0x7f0000003580)=ANY=[], 0x390) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) ppoll(&(0x7f0000000040)=[{r0, 0x3046}, {0xffffffffffffffff, 0x8786}, {0xffffffffffffffff, 0x3040}, {r5, 0x1040}, {r3, 0x2010}, {0xffffffffffffffff, 0x2614}, {r1, 0x21d}, {r4, 0x44}], 0x8, &(0x7f0000000180), &(0x7f00000001c0)={[0xc47]}, 0x8) getsockopt$bt_hci(r7, 0x0, 0x1, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x17, 0x0, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r8, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c2337", 0x89}, {&(0x7f0000000d40)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb65e44d4957b00ed35a858d44b25d5b8dad1be420467333d9ce17dddc425dad69c4c9395a5c170170a4fa63091786e2a563e3d5982a73c15edf854046e1a33b2728e74c856a58ba74c80f4f4166ac51d720f507c2c205ef5a04370c77928dfde47e15d5330", 0x169}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef304ed0ffedd061941d9d022b25a4b9632856295fe", 0xf2}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{0x0}], 0x1}}], 0x2, 0x0) kernel console output (not intermixed with test programs): e/Google Compute Engine, BIOS Google 09/13/2024 [ 1134.497071][T21552] Call Trace: [ 1134.500463][T21552] [ 1134.503421][T21552] dump_stack_lvl+0x241/0x360 [ 1134.508133][T21552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1134.513357][T21552] ? __pfx__printk+0x10/0x10 [ 1134.517961][T21552] ? __kmalloc_node_noprof+0xb7/0x440 [ 1134.523338][T21552] ? __pfx___might_resched+0x10/0x10 [ 1134.528711][T21552] should_fail_ex+0x3b0/0x4e0 [ 1134.533389][T21552] should_failslab+0xac/0x100 [ 1134.538065][T21552] __kmalloc_node_noprof+0xdf/0x440 [ 1134.543263][T21552] ? __vmalloc_node_range_noprof+0x5c3/0x13f0 [ 1134.549332][T21552] __vmalloc_node_range_noprof+0x5c3/0x13f0 [ 1134.555309][T21552] ? mark_lock+0x9a/0x360 [ 1134.559650][T21552] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1134.565981][T21552] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 1134.571541][T21552] __vmalloc_noprof+0x79/0x90 [ 1134.576231][T21552] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 1134.581772][T21552] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 1134.587140][T21552] ? bpf_prog_alloc+0x28/0x1b0 [ 1134.591906][T21552] bpf_prog_alloc+0x3a/0x1b0 [ 1134.596505][T21552] bpf_prog_load+0x7f7/0x20f0 [ 1134.601273][T21552] ? __pfx_bpf_prog_load+0x10/0x10 [ 1134.606382][T21552] ? __pfx___might_resched+0x10/0x10 [ 1134.611687][T21552] ? __might_fault+0xc6/0x120 [ 1134.616373][T21552] __sys_bpf+0x4ee/0x810 [ 1134.620632][T21552] ? __pfx___sys_bpf+0x10/0x10 [ 1134.625398][T21552] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1134.631750][T21552] __ia32_sys_bpf+0x7c/0x90 [ 1134.636367][T21552] __do_fast_syscall_32+0xb4/0x110 [ 1134.641665][T21552] ? exc_page_fault+0x590/0x8c0 [ 1134.646526][T21552] do_fast_syscall_32+0x34/0x80 [ 1134.651384][T21552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1134.657711][T21552] RIP: 0023:0xf7fc6579 [ 1134.661776][T21552] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1134.681388][T21552] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1134.689805][T21552] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000840 [ 1134.697776][T21552] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 1134.705754][T21552] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1134.713741][T21552] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1134.721722][T21552] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1134.729707][T21552] [ 1134.757347][ T5240] Bluetooth: hci3: command tx timeout [ 1134.767587][T21552] syz.3.4285: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1134.802555][T21552] CPU: 0 UID: 0 PID: 21552 Comm: syz.3.4285 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1134.813375][T21552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1134.823477][T21552] Call Trace: [ 1134.826779][T21552] [ 1134.829735][T21552] dump_stack_lvl+0x241/0x360 [ 1134.834441][T21552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1134.839664][T21552] ? __pfx__printk+0x10/0x10 [ 1134.844296][T21552] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1134.850741][T21552] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1134.856409][ T2636] usb 2-1: device descriptor read/64, error -71 [ 1134.857337][T21552] warn_alloc+0x278/0x410 [ 1134.868341][T21552] ? __pfx___might_resched+0x10/0x10 [ 1134.873757][T21552] ? __pfx_warn_alloc+0x10/0x10 [ 1134.878641][T21552] ? rcu_is_watching+0x15/0xb0 [ 1134.883523][T21552] ? trace_kmalloc+0x1f/0xd0 [ 1134.888145][T21552] ? __vmalloc_node_range_noprof+0x5c3/0x13f0 [ 1134.894262][T21552] __vmalloc_node_range_noprof+0x691/0x13f0 [ 1134.900188][T21552] ? mark_lock+0x9a/0x360 [ 1134.904580][T21552] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1134.910945][T21552] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 1134.916529][T21552] __vmalloc_noprof+0x79/0x90 [ 1134.921320][T21552] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 1134.926903][T21552] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 1134.932304][T21552] ? bpf_prog_alloc+0x28/0x1b0 [ 1134.937098][T21552] bpf_prog_alloc+0x3a/0x1b0 [ 1134.941702][T21552] bpf_prog_load+0x7f7/0x20f0 [ 1134.946384][T21552] ? __pfx_bpf_prog_load+0x10/0x10 [ 1134.951487][T21552] ? __pfx___might_resched+0x10/0x10 [ 1134.956772][T21552] ? __might_fault+0xc6/0x120 [ 1134.961436][T21552] __sys_bpf+0x4ee/0x810 [ 1134.965663][T21552] ? __pfx___sys_bpf+0x10/0x10 [ 1134.970422][T21552] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1134.976747][T21552] __ia32_sys_bpf+0x7c/0x90 [ 1134.981244][T21552] __do_fast_syscall_32+0xb4/0x110 [ 1134.986354][T21552] ? exc_page_fault+0x590/0x8c0 [ 1134.991190][T21552] do_fast_syscall_32+0x34/0x80 [ 1134.996031][T21552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1135.002355][T21552] RIP: 0023:0xf7fc6579 [ 1135.006419][T21552] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1135.026045][T21552] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1135.034539][T21552] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000840 [ 1135.042520][T21552] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 1135.050494][T21552] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1135.058473][T21552] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1135.066458][T21552] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1135.074517][T21552] [ 1135.105886][T21552] Mem-Info: [ 1135.109921][T21552] active_anon:5122 inactive_anon:0 isolated_anon:0 [ 1135.109921][T21552] active_file:21393 inactive_file:38658 isolated_file:0 [ 1135.109921][T21552] unevictable:768 dirty:361 writeback:0 [ 1135.109921][T21552] slab_reclaimable:9848 slab_unreclaimable:109030 [ 1135.109921][T21552] mapped:26121 shmem:1271 pagetables:811 [ 1135.109921][T21552] sec_pagetables:0 bounce:0 [ 1135.109921][T21552] kernel_misc_reclaimable:0 [ 1135.109921][T21552] free:1312060 free_pcp:4418 free_cma:0 [ 1135.196133][ T2636] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1135.241585][T21552] Node 0 active_anon:20304kB inactive_anon:0kB active_file:85492kB inactive_file:154560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104404kB dirty:1444kB writeback:0kB shmem:3548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11340kB pagetables:3188kB sec_pagetables:0kB all_unreclaimable? no [ 1135.305621][T21491] chnl_net:caif_netlink_parms(): no params data found [ 1135.325679][T21552] Node 1 active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1135.358572][ T2636] usb 2-1: device descriptor read/64, error -71 [ 1135.399836][T21552] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1135.441576][T21552] lowmem_reserve[]: 0 2465 2466 0 0 [ 1135.447134][T18437] hsr_slave_0: left promiscuous mode [ 1135.458150][T21552] Node 0 DMA32 free:1316196kB boost:10240kB min:44440kB low:52988kB high:61536kB reserved_highatomic:0KB active_anon:20364kB inactive_anon:0kB active_file:85492kB inactive_file:153724kB unevictable:1536kB writepending:1440kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:3064kB local_pcp:1432kB free_cma:0kB [ 1135.490336][T21552] lowmem_reserve[]: 0 0 0 0 0 [ 1135.495116][T21552] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1135.522961][T21552] lowmem_reserve[]: 0 0 0 0 0 [ 1135.528141][T21552] Node 1 Normal free:3914456kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14672kB local_pcp:10240kB free_cma:0kB [ 1135.557829][T13257] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1135.565475][T21552] lowmem_reserve[]: 0 0 0 0 0 [ 1135.571798][T21552] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 1135.577342][T21575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.584768][T21552] Node 0 [ 1135.594628][ T2636] usb usb2-port1: attempt power cycle [ 1135.594939][T18437] hsr_slave_1: left promiscuous mode [ 1135.597755][T21552] DMA32: 2009*4kB (UME) 2888*8kB (UME) 3866*16kB (UME) 686*32kB (UME) 760*64kB (UME) 598*128kB (UME) 331*256kB (UM) 106*512kB (UME) 68*1024kB (U) 16*2048kB (U) 204*4096kB (UM) = 1317124kB [ 1135.627597][T21552] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1135.639374][T21552] Node 1 Normal: 166*4kB (UM) 54*8kB (UME) 29*16kB (UME) 192*32kB (UME) 81*64kB (UME) 43*128kB (UME) 25*256kB (UME) 7*512kB (UM) 5*1024kB (UME) 7*2048kB (UME) 944*4096kB (UM) = 3914456kB [ 1135.658494][T21552] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1135.658603][T18437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1135.668446][T21552] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1135.676644][T18437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.685178][T21552] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1135.705076][T21552] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1135.714572][T21552] 61322 total pagecache pages [ 1135.719361][T21552] 0 pages in swap cache [ 1135.723537][T21552] Free swap = 124376kB [ 1135.727810][T21552] Total swap = 124996kB [ 1135.731983][T21552] 2097051 pages RAM [ 1135.735824][T21552] 0 pages HighMem/MovableOnly [ 1135.737497][T13257] usb 1-1: Using ep0 maxpacket: 16 [ 1135.740584][T21552] 427076 pages reserved [ 1135.750114][T21552] 0 pages cma reserved [ 1135.758006][T13257] usb 1-1: config 5 has an invalid interface number: 20 but max is 2 [ 1135.766698][T13257] usb 1-1: config 5 has an invalid interface number: 180 but max is 2 [ 1135.774896][T13257] usb 1-1: config 5 has an invalid interface number: 156 but max is 2 [ 1135.788263][T21575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.817788][T18437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1135.825255][T18437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.847831][T13257] usb 1-1: config 5 has an invalid interface descriptor of length 5, skipping [ 1135.866734][T13257] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1135.885223][T13257] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.902442][T18437] veth1_macvtap: left promiscuous mode [ 1135.906117][T13257] usb 1-1: config 5 has no interface number 0 [ 1135.908294][T18437] veth0_macvtap: left promiscuous mode [ 1135.914196][T13257] usb 1-1: config 5 has no interface number 1 [ 1135.931274][T18437] veth1_vlan: left promiscuous mode [ 1135.934957][T13257] usb 1-1: config 5 has no interface number 2 [ 1135.938276][T18437] veth0_vlan: left promiscuous mode [ 1135.942853][T13257] usb 1-1: config 5 interface 20 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1135.998523][T13257] usb 1-1: config 5 interface 20 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1136.020596][T13257] usb 1-1: config 5 interface 180 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1136.042632][T13257] usb 1-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1136.056382][ T2636] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1136.064467][T13257] usb 1-1: config 5 interface 180 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1136.079361][ T2636] usb 2-1: device descriptor read/8, error -71 [ 1136.090550][T13257] usb 1-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1136.102924][T13257] usb 1-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1136.114023][T13257] usb 1-1: config 5 interface 156 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1136.127523][T13257] usb 1-1: config 5 interface 20 has no altsetting 0 [ 1136.134246][T13257] usb 1-1: config 5 interface 180 has no altsetting 0 [ 1136.142635][T13257] usb 1-1: config 5 interface 156 has no altsetting 0 [ 1136.154772][T13257] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=8b.dd [ 1136.164181][T13257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.174602][T13257] usb 1-1: Product: syz [ 1136.184468][T13257] usb 1-1: Manufacturer: syz [ 1136.199110][T13257] usb 1-1: SerialNumber: syz [ 1136.326212][ T2636] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1136.357001][ T2636] usb 2-1: device descriptor read/8, error -71 [ 1136.476890][T13257] usb 1-1: USB disconnect, device number 56 [ 1136.477928][ T2636] usb usb2-port1: unable to enumerate USB device [ 1136.777991][ T5240] Bluetooth: hci3: command tx timeout [ 1137.023493][T18437] team0 (unregistering): Port device team_slave_1 removed [ 1137.083169][T18437] team0 (unregistering): Port device team_slave_0 removed [ 1137.426260][T16746] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1137.628062][T16746] usb 1-1: config 0 has an invalid interface number: 154 but max is 0 [ 1137.636909][T16746] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.648307][T16746] usb 1-1: config 0 has no interface number 0 [ 1137.654448][T16746] usb 1-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 1137.672539][T16746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.693874][T16746] usb 1-1: config 0 descriptor?? [ 1137.702444][T16746] qmi_wwan 1-1:0.154: bogus CDC Union: master=0, slave=0 [ 1137.709783][T16746] qmi_wwan 1-1:0.154: probe with driver qmi_wwan failed with error -22 [ 1137.951173][T16592] usb 1-1: USB disconnect, device number 57 [ 1138.058774][T21491] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.076356][T21491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.085280][T21607] FAULT_INJECTION: forcing a failure. [ 1138.085280][T21607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1138.103702][T21491] bridge_slave_0: entered allmulticast mode [ 1138.117105][T21607] CPU: 0 UID: 0 PID: 21607 Comm: syz.1.4294 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1138.122534][T21491] bridge_slave_0: entered promiscuous mode [ 1138.127899][T21607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1138.127914][T21607] Call Trace: [ 1138.127922][T21607] [ 1138.127930][T21607] dump_stack_lvl+0x241/0x360 [ 1138.127956][T21607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1138.127974][T21607] ? __pfx__printk+0x10/0x10 [ 1138.128000][T21607] ? __pfx_lock_release+0x10/0x10 [ 1138.144616][T21491] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.147210][T21607] should_fail_ex+0x3b0/0x4e0 [ 1138.147248][T21607] _copy_from_user+0x2f/0xe0 [ 1138.160392][T21491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.165035][T21607] get_old_timespec32+0x113/0x280 [ 1138.165074][T21607] ? __pfx_get_old_timespec32+0x10/0x10 [ 1138.170566][T21491] bridge_slave_1: entered allmulticast mode [ 1138.177165][T21607] ? __fget_files+0x3f3/0x470 [ 1138.177196][T21607] __sys_recvmmsg+0xfc/0x270 [ 1138.177218][T21607] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1138.177243][T21607] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1138.177263][T21607] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1138.177296][T21607] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 1138.177321][T21607] __do_fast_syscall_32+0xb4/0x110 [ 1138.177340][T21607] ? exc_page_fault+0x590/0x8c0 [ 1138.177368][T21607] do_fast_syscall_32+0x34/0x80 [ 1138.177387][T21607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1138.177407][T21607] RIP: 0023:0xf73bd579 [ 1138.177425][T21607] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1138.177442][T21607] RSP: 002b:00000000f568556c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1138.177464][T21607] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200037c0 [ 1138.177479][T21607] RDX: 00000000000003b4 RSI: 0000000000000000 RDI: 0000000020003700 [ 1138.177492][T21607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1138.177505][T21607] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1138.177517][T21607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1138.177541][T21607] [ 1138.391621][T21491] bridge_slave_1: entered promiscuous mode [ 1138.496732][ T5300] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1138.571395][T21491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.588675][T21491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.692943][T21491] team0: Port device team_slave_0 added [ 1138.715828][ T5300] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1138.758444][T21491] team0: Port device team_slave_1 added [ 1138.766529][ T5300] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1138.791955][ T5300] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1138.811982][ T5300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.847027][T21605] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1138.856515][ T5240] Bluetooth: hci3: command tx timeout [ 1138.875177][T21491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1138.891563][ T5300] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1138.915124][T21491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1138.995203][T21491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1139.047890][T21491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1139.073713][T21491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1139.149974][T21491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1139.189888][ T46] usb 4-1: USB disconnect, device number 14 [ 1139.246195][ T2636] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1139.298836][T21491] hsr_slave_0: entered promiscuous mode [ 1139.319103][T21491] hsr_slave_1: entered promiscuous mode [ 1139.335754][T21491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1139.353238][T21491] Cannot create hsr debugfs directory [ 1139.446129][ T2636] usb 1-1: Using ep0 maxpacket: 32 [ 1139.458155][ T2636] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1139.492514][ T2636] usb 1-1: config 0 has no interface number 0 [ 1139.501385][ T2636] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1139.513419][ T2636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.541512][ T2636] usb 1-1: Product: syz [ 1139.550661][ T2636] usb 1-1: Manufacturer: syz [ 1139.569477][ T2636] usb 1-1: SerialNumber: syz [ 1139.610282][ T2636] usb 1-1: config 0 descriptor?? [ 1139.628574][ T2636] smsc95xx v2.0.0 [ 1139.632399][ T2636] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1139.643474][ T2636] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 1139.744088][T21648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.781263][T21648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.947270][T16746] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1140.126788][T16746] usb 2-1: Using ep0 maxpacket: 16 [ 1140.150088][T16746] usb 2-1: config 5 has an invalid interface number: 20 but max is 2 [ 1140.164831][T16746] usb 2-1: config 5 has an invalid interface number: 180 but max is 2 [ 1140.197208][T16746] usb 2-1: config 5 has an invalid interface number: 156 but max is 2 [ 1140.215995][T16746] usb 2-1: config 5 has an invalid interface descriptor of length 5, skipping [ 1140.236419][T16746] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1140.245146][T16746] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.300635][T16746] usb 2-1: config 5 has no interface number 0 [ 1140.316289][T16746] usb 2-1: config 5 has no interface number 1 [ 1140.343098][T16746] usb 2-1: config 5 has no interface number 2 [ 1140.353729][T16746] usb 2-1: config 5 interface 20 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1140.386301][T16746] usb 2-1: config 5 interface 20 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1140.416347][T16746] usb 2-1: config 5 interface 180 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1140.446321][T16746] usb 2-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1140.479425][T16746] usb 2-1: config 5 interface 180 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1140.506620][T16746] usb 2-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1140.517074][T21491] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1140.526141][T16746] usb 2-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1140.544976][T16746] usb 2-1: config 5 interface 156 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1140.545789][T21491] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1140.573064][T16746] usb 2-1: config 5 interface 20 has no altsetting 0 [ 1140.580125][T13257] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1140.590725][T21491] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1140.595145][T16746] usb 2-1: config 5 interface 180 has no altsetting 0 [ 1140.613213][T21491] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1140.628613][T16746] usb 2-1: config 5 interface 156 has no altsetting 0 [ 1140.654538][T16746] usb 2-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=8b.dd [ 1140.674303][T16746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.702955][T16746] usb 2-1: Product: syz [ 1140.711442][T16746] usb 2-1: Manufacturer: syz [ 1140.716468][T13257] usb 4-1: device descriptor read/64, error -71 [ 1140.733025][T16746] usb 2-1: SerialNumber: syz [ 1140.784467][T21491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1140.832433][T21491] 8021q: adding VLAN 0 to HW filter on device team0 [ 1140.861126][T18430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.868302][T18430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1140.895092][T18430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.902312][T18430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1140.940619][ T5240] Bluetooth: hci3: command tx timeout [ 1140.967160][T13257] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1141.029151][T16746] usb 2-1: USB disconnect, device number 23 [ 1141.095787][T21491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1141.147449][T13257] usb 4-1: device descriptor read/64, error -71 [ 1141.204856][T21491] veth0_vlan: entered promiscuous mode [ 1141.228872][T21491] veth1_vlan: entered promiscuous mode [ 1141.256500][T13257] usb usb4-port1: attempt power cycle [ 1141.261870][T21491] veth0_macvtap: entered promiscuous mode [ 1141.291703][T21491] veth1_macvtap: entered promiscuous mode [ 1141.320391][T21491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1141.346232][T21491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.366537][T21491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1141.388085][T21491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.405941][T21491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1141.429160][T21491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.448906][T21491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1141.469584][T21491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.485544][T21491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1141.508728][T21491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.532108][T21491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1141.549280][T21491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.565614][T21491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1141.586111][T21491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.606134][T13257] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1141.608829][T21491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1141.647716][T13257] usb 4-1: device descriptor read/8, error -71 [ 1141.659944][T21491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1141.670925][T21491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.710208][T21491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1141.750626][T21491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.767004][T21491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1141.816678][T21491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.828396][T21491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1141.840874][T21491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.851091][T21491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1141.862105][T21491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.872786][T21491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1141.883690][T21491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.905373][T13257] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1141.915144][T21705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.932764][T21491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1141.954726][T13257] usb 4-1: device descriptor read/8, error -71 [ 1141.962375][T21491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.984516][T21491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1141.984950][T21705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.015961][T21491] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.027973][T21491] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.036816][ T25] usb 1-1: USB disconnect, device number 58 [ 1142.050218][T21491] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.066471][T13257] usb usb4-port1: unable to enumerate USB device [ 1142.076449][T21491] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.275470][T16644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.290153][T16644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.315204][T18437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.337583][T18437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.430712][T21726] veth0_to_batadv: entered promiscuous mode [ 1142.438725][T21726] veth0_to_batadv: entered allmulticast mode [ 1142.503539][T21728] FAULT_INJECTION: forcing a failure. [ 1142.503539][T21728] name failslab, interval 1, probability 0, space 0, times 0 [ 1142.525389][T21728] CPU: 1 UID: 0 PID: 21728 Comm: syz.4.4272 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1142.536297][T21728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1142.546354][T21728] Call Trace: [ 1142.549633][T21728] [ 1142.552560][T21728] dump_stack_lvl+0x241/0x360 [ 1142.557245][T21728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1142.562440][T21728] ? __pfx__printk+0x10/0x10 [ 1142.567034][T21728] ? ref_tracker_alloc+0x332/0x490 [ 1142.572144][T21728] should_fail_ex+0x3b0/0x4e0 [ 1142.576826][T21728] ? skb_clone+0x20c/0x390 [ 1142.581239][T21728] should_failslab+0xac/0x100 [ 1142.585915][T21728] ? skb_clone+0x20c/0x390 [ 1142.590326][T21728] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1142.595699][T21728] skb_clone+0x20c/0x390 [ 1142.599941][T21728] __netlink_deliver_tap+0x3cc/0x7c0 [ 1142.605236][T21728] ? netlink_deliver_tap+0x2e/0x1b0 [ 1142.610523][T21728] netlink_deliver_tap+0x19d/0x1b0 [ 1142.615637][T21728] netlink_unicast+0x7c4/0x990 [ 1142.620409][T21728] ? __pfx_netlink_unicast+0x10/0x10 [ 1142.625695][T21728] ? __virt_addr_valid+0x183/0x530 [ 1142.630806][T21728] ? __check_object_size+0x48e/0x900 [ 1142.636094][T21728] netlink_sendmsg+0x8e4/0xcb0 [ 1142.640863][T21728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1142.646141][T21728] ? __mutex_trylock_common+0x183/0x2e0 [ 1142.651691][T21728] ? aa_sock_msg_perm+0x91/0x160 [ 1142.656629][T21728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1142.661908][T21728] __sock_sendmsg+0x221/0x270 [ 1142.666587][T21728] sock_sendmsg+0x134/0x200 [ 1142.671095][T21728] ? __pfx_sock_sendmsg+0x10/0x10 [ 1142.676130][T21728] ? iov_iter_bvec+0x4e/0x180 [ 1142.680808][T21728] splice_to_socket+0xa10/0x10b0 [ 1142.685834][T21728] ? __pfx_lock_release+0x10/0x10 [ 1142.690963][T21728] ? __pfx_splice_to_socket+0x10/0x10 [ 1142.696370][T21728] ? __lock_acquire+0x1384/0x2050 [ 1142.701417][T21728] ? bpf_lsm_file_permission+0x9/0x10 [ 1142.706786][T21728] ? security_file_permission+0x74/0x280 [ 1142.712421][T21728] ? rw_verify_area+0x1c3/0x6f0 [ 1142.717277][T21728] ? __pfx_splice_to_socket+0x10/0x10 [ 1142.722652][T21728] do_splice+0xd68/0x18e0 [ 1142.726986][T21728] ? __pfx_lock_release+0x10/0x10 [ 1142.732043][T21728] ? vfs_write+0x7bf/0xc90 [ 1142.736459][T21728] ? pipe_clear_nowait+0x196/0x220 [ 1142.741567][T21728] ? __pfx_do_splice+0x10/0x10 [ 1142.746358][T21728] __se_sys_splice+0x331/0x4a0 [ 1142.751121][T21728] ? __pfx___se_sys_splice+0x10/0x10 [ 1142.756404][T21728] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1142.762992][T21728] ? __ia32_sys_splice+0x21/0xf0 [ 1142.767929][T21728] __do_fast_syscall_32+0xb4/0x110 [ 1142.773034][T21728] ? exc_page_fault+0x590/0x8c0 [ 1142.777974][T21728] do_fast_syscall_32+0x34/0x80 [ 1142.782822][T21728] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1142.789144][T21728] RIP: 0023:0xf7f12579 [ 1142.793210][T21728] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1142.812902][T21728] RSP: 002b:00000000f567556c EFLAGS: 00000206 ORIG_RAX: 0000000000000139 [ 1142.821315][T21728] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1142.829282][T21728] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 000000000004ffe6 [ 1142.837259][T21728] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1142.845256][T21728] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1142.853218][T21728] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1142.861199][T21728] [ 1143.027961][T21734] FAULT_INJECTION: forcing a failure. [ 1143.027961][T21734] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.058672][T21734] CPU: 1 UID: 0 PID: 21734 Comm: syz.2.4310 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1143.069494][T21734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1143.079583][T21734] Call Trace: [ 1143.082879][T21734] [ 1143.085810][T21734] dump_stack_lvl+0x241/0x360 [ 1143.090492][T21734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1143.095693][T21734] ? __pfx__printk+0x10/0x10 [ 1143.100288][T21734] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 1143.105747][T21734] ? __pfx___might_resched+0x10/0x10 [ 1143.111033][T21734] should_fail_ex+0x3b0/0x4e0 [ 1143.115713][T21734] should_failslab+0xac/0x100 [ 1143.120393][T21734] ? ucma_alloc_ctx+0x4b/0x2c0 [ 1143.125156][T21734] __kmalloc_cache_noprof+0x6c/0x2c0 [ 1143.130447][T21734] ucma_alloc_ctx+0x4b/0x2c0 [ 1143.135035][T21734] ucma_create_id+0x237/0x500 [ 1143.139718][T21734] ? __might_fault+0xaa/0x120 [ 1143.144390][T21734] ? __pfx_ucma_create_id+0x10/0x10 [ 1143.149848][T21734] ? __might_fault+0xc6/0x120 [ 1143.154521][T21734] ? __pfx_ucma_create_id+0x10/0x10 [ 1143.159715][T21734] ucma_write+0x2d9/0x420 [ 1143.164040][T21734] ? end_current_label_crit_section+0x151/0x180 [ 1143.170309][T21734] ? __pfx_ucma_write+0x10/0x10 [ 1143.175158][T21734] ? bpf_lsm_file_permission+0x9/0x10 [ 1143.180529][T21734] ? security_file_permission+0x74/0x280 [ 1143.186168][T21734] ? rw_verify_area+0x1c3/0x6f0 [ 1143.191026][T21734] vfs_writev+0x5a9/0xba0 [ 1143.195360][T21734] ? __pfx_ucma_write+0x10/0x10 [ 1143.200210][T21734] ? __pfx_vfs_writev+0x10/0x10 [ 1143.205073][T21734] ? fdget_pos+0x19a/0x320 [ 1143.209485][T21734] do_writev+0x1b1/0x350 [ 1143.213729][T21734] ? __pfx_do_writev+0x10/0x10 [ 1143.218501][T21734] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1143.225094][T21734] ? lockdep_hardirqs_on+0x99/0x150 [ 1143.230291][T21734] __do_fast_syscall_32+0xb4/0x110 [ 1143.235397][T21734] ? exc_page_fault+0x590/0x8c0 [ 1143.240246][T21734] do_fast_syscall_32+0x34/0x80 [ 1143.245088][T21734] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1143.251412][T21734] RIP: 0023:0xf749d579 [ 1143.255476][T21734] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1143.275176][T21734] RSP: 002b:00000000f578656c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1143.283607][T21734] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 1143.291574][T21734] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 1143.299625][T21734] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1143.307586][T21734] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1143.315555][T21734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1143.323711][T21734] [ 1143.500156][T21739] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4313'. [ 1143.767611][ T29] audit: type=1326 audit(1728119120.252:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21745 comm="syz.4.4316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 1143.801770][T21761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.823465][ T29] audit: type=1326 audit(1728119120.252:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21745 comm="syz.4.4316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 1143.887046][T21761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.906188][ T29] audit: type=1326 audit(1728119120.252:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21745 comm="syz.4.4316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 1143.976803][ T29] audit: type=1326 audit(1728119120.252:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21745 comm="syz.4.4316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 1144.006394][ T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1144.018241][ T29] audit: type=1326 audit(1728119120.252:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21745 comm="syz.4.4316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 1144.053757][ T29] audit: type=1326 audit(1728119120.252:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21745 comm="syz.4.4316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 1144.105651][ T29] audit: type=1326 audit(1728119120.252:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21745 comm="syz.4.4316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 1144.154988][ T29] audit: type=1326 audit(1728119120.252:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21745 comm="syz.4.4316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 1144.217491][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 1144.232972][ T25] usb 4-1: config 5 has an invalid interface number: 20 but max is 2 [ 1144.237428][ T29] audit: type=1326 audit(1728119120.292:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21745 comm="syz.4.4316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 1144.242145][ T25] usb 4-1: config 5 has an invalid interface number: 180 but max is 2 [ 1144.318700][ T29] audit: type=1326 audit(1728119120.292:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21745 comm="syz.4.4316" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 1144.342150][ T25] usb 4-1: config 5 has an invalid interface number: 156 but max is 2 [ 1144.370880][ T25] usb 4-1: config 5 has an invalid interface descriptor of length 5, skipping [ 1144.386803][ T25] usb 4-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1144.396505][ T25] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.407600][ T25] usb 4-1: config 5 has no interface number 0 [ 1144.413751][ T25] usb 4-1: config 5 has no interface number 1 [ 1144.419940][ T25] usb 4-1: config 5 has no interface number 2 [ 1144.426414][ T25] usb 4-1: config 5 interface 20 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1144.437374][ T25] usb 4-1: config 5 interface 20 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1144.448276][ T25] usb 4-1: config 5 interface 180 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1144.459895][ T25] usb 4-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1144.461198][T21781] FAULT_INJECTION: forcing a failure. [ 1144.461198][T21781] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.470835][ T25] usb 4-1: config 5 interface 180 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1144.470864][ T25] usb 4-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1144.470899][ T25] usb 4-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1144.470922][ T25] usb 4-1: config 5 interface 156 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1144.470950][ T25] usb 4-1: config 5 interface 20 has no altsetting 0 [ 1144.470968][ T25] usb 4-1: config 5 interface 180 has no altsetting 0 [ 1144.470987][ T25] usb 4-1: config 5 interface 156 has no altsetting 0 [ 1144.490313][ T25] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=8b.dd [ 1144.534938][T21788] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 1144.537836][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.537864][ T25] usb 4-1: Product: syz [ 1144.537880][ T25] usb 4-1: Manufacturer: syz [ 1144.537894][ T25] usb 4-1: SerialNumber: syz [ 1144.577268][T21781] CPU: 1 UID: 0 PID: 21781 Comm: syz.0.4320 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1144.604700][T21781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1144.614772][T21781] Call Trace: [ 1144.618057][T21781] [ 1144.620985][T21781] dump_stack_lvl+0x241/0x360 [ 1144.625662][T21781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1144.630855][T21781] ? __pfx__printk+0x10/0x10 [ 1144.635463][T21781] ? fs_reclaim_acquire+0x93/0x140 [ 1144.640591][T21781] ? __pfx___might_resched+0x10/0x10 [ 1144.645890][T21781] should_fail_ex+0x3b0/0x4e0 [ 1144.650580][T21781] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1144.656304][T21781] should_failslab+0xac/0x100 [ 1144.660979][T21781] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1144.666701][T21781] __kmalloc_noprof+0xd8/0x400 [ 1144.671491][T21781] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1144.677063][T21781] tomoyo_path_number_perm+0x23a/0x880 [ 1144.682535][T21781] ? tomoyo_path_number_perm+0x208/0x880 [ 1144.688177][T21781] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1144.694246][T21781] ? __pfx_lock_acquire+0x10/0x10 [ 1144.699295][T21781] ? __fget_files+0x29/0x470 [ 1144.703884][T21781] ? __fget_files+0x3f3/0x470 [ 1144.708572][T21781] security_file_ioctl_compat+0xc6/0x2a0 [ 1144.714218][T21781] __se_compat_sys_ioctl+0xd6/0xc90 [ 1144.719505][T21781] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 1144.725313][T21781] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1144.731293][T21781] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1144.737623][T21781] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1144.744215][T21781] ? lockdep_hardirqs_on+0x99/0x150 [ 1144.749415][T21781] __do_fast_syscall_32+0xb4/0x110 [ 1144.754526][T21781] ? exc_page_fault+0x590/0x8c0 [ 1144.759374][T21781] do_fast_syscall_32+0x34/0x80 [ 1144.764218][T21781] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1144.770537][T21781] RIP: 0023:0xf7f92579 [ 1144.774596][T21781] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1144.794631][T21781] RSP: 002b:00000000f571656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1144.803044][T21781] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000008208ae63 [ 1144.811024][T21781] RDX: 0000000020000740 RSI: 0000000000000000 RDI: 0000000000000000 [ 1144.818991][T21781] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1144.826955][T21781] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1144.834917][T21781] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1144.842895][T21781] [ 1144.859619][T21781] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1145.176334][ T25] usb 4-1: USB disconnect, device number 19 [ 1145.406617][T21821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.477054][T21821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.656283][ T5240] Bluetooth: hci3: command tx timeout [ 1145.760185][ T5234] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1145.922572][ T5234] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1145.933343][ T5234] usb 1-1: New USB device strings: Mfr=210, Product=154, SerialNumber=3 [ 1145.942085][ T5234] usb 1-1: Product: syz [ 1145.948375][ T5234] usb 1-1: Manufacturer: syz [ 1145.953152][ T5234] usb 1-1: SerialNumber: syz [ 1145.963385][ T5234] usb 1-1: config 0 descriptor?? [ 1146.086956][T13257] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1146.256434][T13257] usb 4-1: Using ep0 maxpacket: 16 [ 1146.271172][T13257] usb 4-1: config 0 has no interfaces? [ 1146.291892][T13257] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1146.301679][T13257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.310511][T13257] usb 4-1: Product: syz [ 1146.315128][T13257] usb 4-1: Manufacturer: syz [ 1146.320549][T13257] usb 4-1: SerialNumber: syz [ 1146.330487][T13257] usb 4-1: config 0 descriptor?? [ 1146.381196][T21823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.410662][T21823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.553439][T21828] tipc: Started in network mode [ 1146.556111][ T46] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1146.565037][T21828] tipc: Node identity 7f000001, cluster identity 4711 [ 1146.587383][T21828] tipc: Enabled bearer , priority 10 [ 1146.618961][ T25] usb 4-1: USB disconnect, device number 20 [ 1146.729611][ T5234] usb 1-1: Firmware version (0.0) predates our first public release. [ 1146.735421][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 1146.746539][ T46] usb 2-1: config 5 has an invalid interface number: 20 but max is 2 [ 1146.746541][ T5234] usb 1-1: Please update to version 0.2 or newer [ 1146.746567][ T46] usb 2-1: config 5 has an invalid interface number: 180 but max is 2 [ 1146.766859][ T5234] usb 1-1: Firmware: build öhjÜÀâ [ 1146.779251][ T46] usb 2-1: config 5 has an invalid interface number: 156 but max is 2 [ 1146.789153][ T46] usb 2-1: config 5 has an invalid interface descriptor of length 5, skipping [ 1146.799726][ T46] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1146.808568][ T46] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.821611][ T46] usb 2-1: config 5 has no interface number 0 [ 1146.846126][ T46] usb 2-1: config 5 has no interface number 1 [ 1146.869359][ T46] usb 2-1: config 5 has no interface number 2 [ 1146.878648][ T46] usb 2-1: config 5 interface 20 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1146.906183][ T46] usb 2-1: config 5 interface 20 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1146.926095][ T46] usb 2-1: config 5 interface 180 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1146.947580][ T46] usb 2-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1146.976116][ T46] usb 2-1: config 5 interface 180 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1146.996102][ T46] usb 2-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1147.016138][ T46] usb 2-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1147.050540][ T46] usb 2-1: config 5 interface 156 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1147.068262][ T46] usb 2-1: config 5 interface 20 has no altsetting 0 [ 1147.075212][ T46] usb 2-1: config 5 interface 180 has no altsetting 0 [ 1147.105294][ T46] usb 2-1: config 5 interface 156 has no altsetting 0 [ 1147.138861][ T46] usb 2-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=8b.dd [ 1147.149317][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.167963][ T46] usb 2-1: Product: syz [ 1147.175824][ T46] usb 2-1: Manufacturer: syz [ 1147.194362][ T46] usb 2-1: SerialNumber: syz [ 1147.307192][ T5234] usb 1-1: USB disconnect, device number 59 [ 1147.317843][T19002] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1147.338702][T19002] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1147.348773][T19002] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1147.358044][T19002] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1147.369354][T19002] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1147.377476][T19002] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1147.512695][ T46] usb 2-1: USB disconnect, device number 24 [ 1147.708008][ T5234] tipc: Node number set to 2130706433 [ 1147.812052][T21860] chnl_net:caif_netlink_parms(): no params data found [ 1147.937433][T21860] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.954908][T21860] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.966484][T21860] bridge_slave_0: entered allmulticast mode [ 1147.973165][T21860] bridge_slave_0: entered promiscuous mode [ 1148.003813][T21860] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.021267][T21860] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.036401][T21860] bridge_slave_1: entered allmulticast mode [ 1148.053807][T21860] bridge_slave_1: entered promiscuous mode [ 1148.097092][ T2636] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1148.109546][T21860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1148.131346][T21860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1148.198090][T21860] team0: Port device team_slave_0 added [ 1148.218289][T21860] team0: Port device team_slave_1 added [ 1148.256238][ T2636] usb 4-1: Using ep0 maxpacket: 16 [ 1148.277136][ T2636] usb 4-1: config 5 has an invalid interface number: 20 but max is 2 [ 1148.296252][ T2636] usb 4-1: config 5 has an invalid interface number: 180 but max is 2 [ 1148.305700][ T2636] usb 4-1: config 5 has an invalid interface number: 156 but max is 2 [ 1148.315203][ T2636] usb 4-1: config 5 has an invalid interface descriptor of length 5, skipping [ 1148.316938][T21860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1148.324179][ T2636] usb 4-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1148.342826][T21860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1148.356121][ T2636] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.369657][T21860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1148.392613][ T2636] usb 4-1: config 5 has no interface number 0 [ 1148.407945][T21860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.415056][T21860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1148.415672][ T2636] usb 4-1: config 5 has no interface number 1 [ 1148.450316][ T2636] usb 4-1: config 5 has no interface number 2 [ 1148.456848][ T2636] usb 4-1: config 5 interface 20 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1148.467900][ T2636] usb 4-1: config 5 interface 20 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1148.469301][T21860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.478888][ T2636] usb 4-1: config 5 interface 180 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1148.478919][ T2636] usb 4-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1148.478947][ T2636] usb 4-1: config 5 interface 180 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1148.478969][ T2636] usb 4-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1148.478998][ T2636] usb 4-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1148.479020][ T2636] usb 4-1: config 5 interface 156 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1148.479047][ T2636] usb 4-1: config 5 interface 20 has no altsetting 0 [ 1148.565677][ T46] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1148.577044][ T2636] usb 4-1: config 5 interface 180 has no altsetting 0 [ 1148.584130][ T2636] usb 4-1: config 5 interface 156 has no altsetting 0 [ 1148.605681][ T2636] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=8b.dd [ 1148.614961][ T2636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.624247][ T2636] usb 4-1: Product: syz [ 1148.628511][ T2636] usb 4-1: Manufacturer: syz [ 1148.633122][ T2636] usb 4-1: SerialNumber: syz [ 1148.734041][T18437] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.746624][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 1148.754966][ T46] usb 2-1: config 0 has no interfaces? [ 1148.769809][ T46] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1148.795903][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.800337][T21891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.819681][T21860] hsr_slave_0: entered promiscuous mode [ 1148.825372][ T46] usb 2-1: Product: syz [ 1148.825514][T21891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.832563][ T46] usb 2-1: Manufacturer: syz [ 1148.842917][T21860] hsr_slave_1: entered promiscuous mode [ 1148.849723][ T46] usb 2-1: SerialNumber: syz [ 1148.863257][T21860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1148.898089][T21860] Cannot create hsr debugfs directory [ 1148.907920][ T46] usb 2-1: config 0 descriptor?? [ 1148.926003][ T2636] usb 4-1: USB disconnect, device number 21 [ 1149.000087][T18437] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.024159][T21891] tipc: Started in network mode [ 1149.029430][T21891] tipc: Node identity 7f000001, cluster identity 4711 [ 1149.049224][T21891] tipc: Enabled bearer , priority 10 [ 1149.092815][T21895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4348'. [ 1149.133025][T18437] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.164677][ T5300] usb 2-1: USB disconnect, device number 25 [ 1149.218487][T18437] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.333438][T18437] bridge_slave_1: left allmulticast mode [ 1149.344875][T18437] bridge_slave_1: left promiscuous mode [ 1149.354800][T18437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.365443][T18437] bridge_slave_0: left allmulticast mode [ 1149.371424][T18437] bridge_slave_0: left promiscuous mode [ 1149.378314][T18437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.416414][ T5240] Bluetooth: hci3: command tx timeout [ 1149.872806][T21907] FAULT_INJECTION: forcing a failure. [ 1149.872806][T21907] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1149.916667][T21907] CPU: 0 UID: 0 PID: 21907 Comm: syz.1.4352 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1149.927487][T21907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1149.937589][T21907] Call Trace: [ 1149.940894][T21907] [ 1149.943842][T21907] dump_stack_lvl+0x241/0x360 [ 1149.948547][T21907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1149.953769][T21907] ? __pfx__printk+0x10/0x10 [ 1149.958398][T21907] should_fail_ex+0x3b0/0x4e0 [ 1149.963110][T21907] prepare_alloc_pages+0x1da/0x5d0 [ 1149.968260][T21907] __alloc_pages_noprof+0x166/0x6c0 [ 1149.973487][T21907] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1149.979245][T21907] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1149.984848][T21907] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1149.990898][T21907] ? alloc_pages_noprof+0xef/0x170 [ 1149.996045][T21907] af_alg_sendmsg+0x1420/0x2650 [ 1150.000949][T21907] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 1150.006183][T21907] ? __pfx_aa_sk_perm+0x10/0x10 [ 1150.011060][T21907] ? __might_fault+0xaa/0x120 [ 1150.015762][T21907] ? __pfx_lock_release+0x10/0x10 [ 1150.020819][T21907] ? aa_sock_msg_perm+0x91/0x160 [ 1150.025788][T21907] ? skcipher_sendmsg+0x28/0xf0 [ 1150.030665][T21907] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 1150.036063][T21907] __sock_sendmsg+0x221/0x270 [ 1150.040777][T21907] ____sys_sendmsg+0x52a/0x7e0 [ 1150.045565][T21907] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1150.050966][T21907] __sys_sendmmsg+0x4a8/0x730 [ 1150.055675][T21907] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1150.060891][T21907] ? __pfx_lock_acquire+0x10/0x10 [ 1150.065934][T21907] ? get_pid_task+0x23/0x1f0 [ 1150.070535][T21907] ? __pfx_lock_release+0x10/0x10 [ 1150.075585][T21907] ? kstrtouint_from_user+0x128/0x190 [ 1150.081008][T21907] ? ksys_write+0x229/0x2b0 [ 1150.085560][T21907] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1150.087733][ T5300] tipc: Node number set to 2130706433 [ 1150.091559][T21907] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1150.102904][T21907] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1150.109289][T21907] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1150.114873][T21907] __do_fast_syscall_32+0xb4/0x110 [ 1150.120021][T21907] ? exc_page_fault+0x590/0x8c0 [ 1150.124901][T21907] do_fast_syscall_32+0x34/0x80 [ 1150.129777][T21907] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1150.136136][T21907] RIP: 0023:0xf73bd579 [ 1150.140246][T21907] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1150.160053][T21907] RSP: 002b:00000000f568556c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1150.168498][T21907] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020006dc0 [ 1150.176590][T21907] RDX: 0000000000000002 RSI: 0000000000000851 RDI: 0000000000000000 [ 1150.184671][T21907] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1150.192758][T21907] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1150.201190][T21907] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1150.209199][T21907] [ 1150.265504][T21913] FAULT_INJECTION: forcing a failure. [ 1150.265504][T21913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1150.279305][T21913] CPU: 0 UID: 0 PID: 21913 Comm: syz.0.4354 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1150.290112][T21913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1150.300207][T21913] Call Trace: [ 1150.303594][T21913] [ 1150.306545][T21913] dump_stack_lvl+0x241/0x360 [ 1150.311237][T21913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1150.316430][T21913] ? __pfx__printk+0x10/0x10 [ 1150.321035][T21913] should_fail_ex+0x3b0/0x4e0 [ 1150.325730][T21913] strncpy_from_user+0x36/0x250 [ 1150.330604][T21913] getname_flags+0xf1/0x540 [ 1150.335119][T21913] user_path_at+0x24/0x60 [ 1150.339480][T21913] path_removexattr+0x124/0x3a0 [ 1150.344452][T21913] ? __pfx_path_removexattr+0x10/0x10 [ 1150.349843][T21913] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1150.355479][T21913] ? __pfx_vfs_write+0x10/0x10 [ 1150.360254][T21913] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1150.366586][T21913] __ia32_sys_removexattr+0x5f/0x70 [ 1150.371786][T21913] __do_fast_syscall_32+0xb4/0x110 [ 1150.376891][T21913] ? exc_page_fault+0x590/0x8c0 [ 1150.381742][T21913] do_fast_syscall_32+0x34/0x80 [ 1150.386590][T21913] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1150.392927][T21913] RIP: 0023:0xf7f92579 [ 1150.396990][T21913] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1150.416590][T21913] RSP: 002b:00000000f571656c EFLAGS: 00000206 ORIG_RAX: 00000000000000eb [ 1150.425002][T21913] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00000000200000c0 [ 1150.432968][T21913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1150.440934][T21913] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1150.448900][T21913] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1150.456877][T21913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1150.464853][T21913] [ 1150.512740][T21916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.547473][T21916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.627660][T18437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1150.675522][T18437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1150.708083][T18437] bond0 (unregistering): Released all slaves [ 1150.996314][ T46] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1151.176774][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 1151.196768][ T46] usb 1-1: config 5 has an invalid interface number: 20 but max is 2 [ 1151.208482][ T46] usb 1-1: config 5 has an invalid interface number: 180 but max is 2 [ 1151.241303][ T46] usb 1-1: config 5 has an invalid interface number: 156 but max is 2 [ 1151.276630][ T46] usb 1-1: config 5 has an invalid interface descriptor of length 5, skipping [ 1151.308201][T18437] hsr_slave_0: left promiscuous mode [ 1151.318567][ T46] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1151.335281][T18437] hsr_slave_1: left promiscuous mode [ 1151.343749][ T46] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.362031][T18437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1151.377638][ T46] usb 1-1: config 5 has no interface number 0 [ 1151.388552][ T46] usb 1-1: config 5 has no interface number 1 [ 1151.390690][T18437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1151.400362][ T46] usb 1-1: config 5 has no interface number 2 [ 1151.427127][T18437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1151.429310][ T46] usb 1-1: config 5 interface 20 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1151.455251][T18437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1151.481012][ T46] usb 1-1: config 5 interface 20 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1151.496311][ T5240] Bluetooth: hci3: command tx timeout [ 1151.496827][ T46] usb 1-1: config 5 interface 180 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1151.523996][ T46] usb 1-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1151.546806][T18437] veth1_macvtap: left promiscuous mode [ 1151.552375][T18437] veth0_macvtap: left promiscuous mode [ 1151.558044][T18437] veth1_vlan: left promiscuous mode [ 1151.563806][T18437] veth0_vlan: left promiscuous mode [ 1151.565817][ T5300] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1151.579798][ T46] usb 1-1: config 5 interface 180 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1151.604059][ T46] usb 1-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1151.619740][ T46] usb 1-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1151.630634][ T46] usb 1-1: config 5 interface 156 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1151.644201][ T46] usb 1-1: config 5 interface 20 has no altsetting 0 [ 1151.651054][ T46] usb 1-1: config 5 interface 180 has no altsetting 0 [ 1151.658144][ T46] usb 1-1: config 5 interface 156 has no altsetting 0 [ 1151.843460][ T46] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=8b.dd [ 1151.853090][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.862853][ T5300] usb 2-1: device descriptor read/64, error -71 [ 1151.869374][ T46] usb 1-1: Product: syz [ 1151.875007][ T46] usb 1-1: Manufacturer: syz [ 1151.882074][ T46] usb 1-1: SerialNumber: syz [ 1152.126243][ T5300] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1152.184783][ T46] usb 1-1: USB disconnect, device number 60 [ 1152.278949][ T5300] usb 2-1: device descriptor read/64, error -71 [ 1152.400690][ T5300] usb usb2-port1: attempt power cycle [ 1152.460603][T18437] team0 (unregistering): Port device team_slave_1 removed [ 1152.519919][T18437] team0 (unregistering): Port device team_slave_0 removed [ 1152.769471][ T5300] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1152.818741][ T5300] usb 2-1: device descriptor read/8, error -71 [ 1153.096205][ T5300] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1153.127574][ T5300] usb 2-1: device descriptor read/8, error -71 [ 1153.253894][ T5300] usb usb2-port1: unable to enumerate USB device [ 1153.266664][ T46] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1153.391989][T21860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1153.419401][T21860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1153.466128][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 1153.474112][T21860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1153.504869][ T46] usb 1-1: config 5 has an invalid interface number: 20 but max is 2 [ 1153.515220][ T46] usb 1-1: config 5 has an invalid interface number: 180 but max is 2 [ 1153.527753][T21860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1153.556410][ T46] usb 1-1: config 5 has an invalid interface number: 156 but max is 2 [ 1153.573049][ T46] usb 1-1: config 5 has an invalid interface descriptor of length 5, skipping [ 1153.576973][ T5240] Bluetooth: hci3: command tx timeout [ 1153.631426][ T46] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1153.691722][ T46] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.734925][ T46] usb 1-1: config 5 has no interface number 0 [ 1153.753449][ T46] usb 1-1: config 5 has no interface number 1 [ 1153.764862][ T46] usb 1-1: config 5 has no interface number 2 [ 1153.779415][ T46] usb 1-1: config 5 interface 20 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1153.800763][ T46] usb 1-1: config 5 interface 20 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1153.843125][ T46] usb 1-1: config 5 interface 180 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1153.868293][ T46] usb 1-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1153.885352][T21860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.893905][ T46] usb 1-1: config 5 interface 180 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1153.913082][T21979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4364'. [ 1153.925655][ T46] usb 1-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1153.938643][ T46] usb 1-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1153.943469][T21860] 8021q: adding VLAN 0 to HW filter on device team0 [ 1153.956754][ T46] usb 1-1: config 5 interface 156 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1153.970426][ T5300] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1153.984230][T18427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.989445][ T46] usb 1-1: config 5 interface 20 has no altsetting 0 [ 1153.991393][T18427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.005842][ T46] usb 1-1: config 5 interface 180 has no altsetting 0 [ 1154.013163][ T46] usb 1-1: config 5 interface 156 has no altsetting 0 [ 1154.025658][ T46] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=8b.dd [ 1154.037782][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.046909][ T46] usb 1-1: Product: syz [ 1154.051246][ T46] usb 1-1: Manufacturer: syz [ 1154.055947][ T46] usb 1-1: SerialNumber: syz [ 1154.065907][T18430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.073158][T18430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.136642][ T5300] usb 4-1: device descriptor read/64, error -71 [ 1154.169446][T21860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1154.208972][T21860] veth0_vlan: entered promiscuous mode [ 1154.221519][T21860] veth1_vlan: entered promiscuous mode [ 1154.259172][T21860] veth0_macvtap: entered promiscuous mode [ 1154.270460][T21860] veth1_macvtap: entered promiscuous mode [ 1154.288318][T21860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.305166][T21860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.318566][T21860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.333905][ T46] usb 1-1: USB disconnect, device number 61 [ 1154.338571][T21860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.352228][T21860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.364372][T21860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.375496][T21860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.386661][ T5300] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1154.414246][T21860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.424389][T21860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.442461][T21860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.453211][T21860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.463908][T21860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.482564][T21860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.493247][T21860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.506846][T21860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1154.529952][ T5300] usb 4-1: device descriptor read/64, error -71 [ 1154.534136][T21860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.554067][T21860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.578446][T21860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.581740][T21984] fuse: Bad value for 'rootmode' [ 1154.598957][T21860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.615513][T21860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.636481][T21860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.647092][T21860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.656559][ T5300] usb usb4-port1: attempt power cycle [ 1154.657981][T21860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.673431][T21860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.689365][T21860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.701788][T21860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.712708][T21860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.722741][T21860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.735735][T21860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.800435][T21860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1154.829838][T21860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.844336][T21860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.853301][T21860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.869288][T21988] input: syz1 as /devices/virtual/input/input23 [ 1154.880992][T21860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.996233][ T5300] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1155.019120][ T5300] usb 4-1: device descriptor read/8, error -71 [ 1155.032823][T18430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.055627][T18430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.085576][T18418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.112084][T18418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.286321][ T5300] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1155.327486][ T5300] usb 4-1: device descriptor read/8, error -71 [ 1155.436415][T16592] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1155.445006][ T5300] usb usb4-port1: unable to enumerate USB device [ 1155.607666][T16592] usb 2-1: Using ep0 maxpacket: 16 [ 1155.634701][T16592] usb 2-1: config 5 has an invalid interface number: 20 but max is 2 [ 1155.664990][ T5240] Bluetooth: hci3: command tx timeout [ 1155.668848][T16592] usb 2-1: config 5 has an invalid interface number: 180 but max is 2 [ 1155.746351][T16592] usb 2-1: config 5 has an invalid interface number: 156 but max is 2 [ 1155.768003][T16592] usb 2-1: config 5 has an invalid interface descriptor of length 5, skipping [ 1155.791866][T16592] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1155.808822][T16592] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.831103][T16592] usb 2-1: config 5 has no interface number 0 [ 1155.843315][T16592] usb 2-1: config 5 has no interface number 1 [ 1155.854532][T16592] usb 2-1: config 5 has no interface number 2 [ 1155.875440][T16592] usb 2-1: config 5 interface 20 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1155.916742][T16592] usb 2-1: config 5 interface 20 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1155.946147][ T5300] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1155.955558][T16592] usb 2-1: config 5 interface 180 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1156.003009][T16592] usb 2-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1156.024519][T16592] usb 2-1: config 5 interface 180 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1156.037117][T16592] usb 2-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1156.064279][T16592] usb 2-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1156.078317][T16592] usb 2-1: config 5 interface 156 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1156.091968][T16592] usb 2-1: config 5 interface 20 has no altsetting 0 [ 1156.099150][T16592] usb 2-1: config 5 interface 180 has no altsetting 0 [ 1156.106478][T16592] usb 2-1: config 5 interface 156 has no altsetting 0 [ 1156.116220][ T5300] usb 1-1: device descriptor read/64, error -71 [ 1156.124175][T16592] usb 2-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=8b.dd [ 1156.133962][T16592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.142664][T16592] usb 2-1: Product: syz [ 1156.148766][T16592] usb 2-1: Manufacturer: syz [ 1156.153407][T16592] usb 2-1: SerialNumber: syz [ 1156.366497][ T5300] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1156.443304][T16592] usb 2-1: USB disconnect, device number 30 [ 1156.559396][ T5300] usb 1-1: device descriptor read/64, error -71 [ 1156.592594][T22016] fuse: Unknown parameter 'f‡<0x0000000000000003' [ 1156.678374][ T5300] usb usb1-port1: attempt power cycle [ 1156.840939][T22025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4376'. [ 1156.869616][T22027] input: syz1 as /devices/virtual/input/input24 [ 1157.036184][ T5300] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1157.066426][ T5300] usb 1-1: device descriptor read/8, error -71 [ 1157.316196][ T5300] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1157.336225][T13257] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1157.354148][ T5300] usb 1-1: device descriptor read/8, error -71 [ 1157.466453][ T5300] usb usb1-port1: unable to enumerate USB device [ 1157.498725][T13257] usb 5-1: Using ep0 maxpacket: 16 [ 1157.520072][T13257] usb 5-1: config 5 has an invalid interface number: 20 but max is 2 [ 1157.536408][T13257] usb 5-1: config 5 has an invalid interface number: 180 but max is 2 [ 1157.565204][T13257] usb 5-1: config 5 has an invalid interface number: 156 but max is 2 [ 1157.585379][T13257] usb 5-1: config 5 has an invalid interface descriptor of length 5, skipping [ 1157.603719][T13257] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1157.615003][T13257] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.635638][T13257] usb 5-1: config 5 has no interface number 0 [ 1157.661560][T22053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.667030][T13257] usb 5-1: config 5 has no interface number 1 [ 1157.679845][T22053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.696628][T13257] usb 5-1: config 5 has no interface number 2 [ 1157.703407][T13257] usb 5-1: config 5 interface 20 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1157.716284][T13257] usb 5-1: config 5 interface 20 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1157.731167][T13257] usb 5-1: config 5 interface 180 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1157.738478][T22056] FAULT_INJECTION: forcing a failure. [ 1157.738478][T22056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1157.774103][T13257] usb 5-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1157.795455][T13257] usb 5-1: config 5 interface 180 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1157.798550][T22059] FAULT_INJECTION: forcing a failure. [ 1157.798550][T22059] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.821015][T13257] usb 5-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1157.832845][T13257] usb 5-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1157.847717][T13257] usb 5-1: config 5 interface 156 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1157.863544][T13257] usb 5-1: config 5 interface 20 has no altsetting 0 [ 1157.866155][T22056] CPU: 1 UID: 0 PID: 22056 Comm: syz.1.4385 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1157.870735][T13257] usb 5-1: config 5 interface 180 has no altsetting 0 [ 1157.880990][T22056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1157.881012][T22056] Call Trace: [ 1157.881022][T22056] [ 1157.881031][T22056] dump_stack_lvl+0x241/0x360 [ 1157.881059][T22056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1157.881077][T22056] ? __pfx__printk+0x10/0x10 [ 1157.881106][T22056] ? snprintf+0xda/0x120 [ 1157.881128][T22056] should_fail_ex+0x3b0/0x4e0 [ 1157.881155][T22056] _copy_to_user+0x2f/0xb0 [ 1157.881178][T22056] simple_read_from_buffer+0xca/0x150 [ 1157.881208][T22056] proc_fail_nth_read+0x1e9/0x250 [ 1157.881236][T22056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1157.881263][T22056] ? rw_verify_area+0x55e/0x6f0 [ 1157.881287][T22056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1157.881314][T22056] vfs_read+0x201/0xbc0 [ 1157.906295][T13257] usb 5-1: config 5 interface 156 has no altsetting 0 [ 1157.908948][T22056] ? __pfx_lock_release+0x10/0x10 [ 1157.908990][T22056] ? __pfx_vfs_read+0x10/0x10 [ 1157.909022][T22056] ? __fget_files+0x3f3/0x470 [ 1157.919821][T13257] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=8b.dd [ 1157.922994][T22056] ? fdget_pos+0x24e/0x320 [ 1157.936117][T13257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.937503][T22056] ksys_read+0x183/0x2b0 [ 1157.942804][T13257] usb 5-1: Product: syz [ 1157.948112][T22056] ? __pfx_ksys_read+0x10/0x10 [ 1157.948137][T22056] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1157.948165][T22056] ? lockdep_hardirqs_on+0x99/0x150 [ 1157.948191][T22056] __do_fast_syscall_32+0xb4/0x110 [ 1157.948210][T22056] ? exc_page_fault+0x590/0x8c0 [ 1157.948237][T22056] do_fast_syscall_32+0x34/0x80 [ 1157.948256][T22056] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1157.963389][T13257] usb 5-1: Manufacturer: syz [ 1157.969483][T22056] RIP: 0023:0xf73bd579 [ 1157.969506][T22056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1157.969523][T22056] RSP: 002b:00000000f56a65a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1157.969545][T22056] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f56a6620 [ 1157.969560][T22056] RDX: 000000000000000f RSI: 00000000f73abff4 RDI: 0000000000000000 [ 1157.969572][T22056] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1157.969584][T22056] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1157.969597][T22056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1157.969623][T22056] [ 1158.036237][T22059] CPU: 1 UID: 0 PID: 22059 Comm: syz.3.4386 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1158.038653][T13257] usb 5-1: SerialNumber: syz [ 1158.042207][T22059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1158.158793][T22059] Call Trace: [ 1158.162090][T22059] [ 1158.165050][T22059] dump_stack_lvl+0x241/0x360 [ 1158.169751][T22059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1158.175052][T22059] ? __pfx__printk+0x10/0x10 [ 1158.179720][T22059] ? __kmalloc_noprof+0xb0/0x400 [ 1158.184715][T22059] ? __pfx___might_resched+0x10/0x10 [ 1158.190034][T22059] should_fail_ex+0x3b0/0x4e0 [ 1158.194849][T22059] ? io_alloc_page_table+0x96/0x120 [ 1158.200083][T22059] should_failslab+0xac/0x100 [ 1158.204789][T22059] ? io_alloc_page_table+0x96/0x120 [ 1158.210020][T22059] __kmalloc_noprof+0xd8/0x400 [ 1158.214829][T22059] io_alloc_page_table+0x96/0x120 [ 1158.219878][T22059] io_rsrc_data_alloc+0x9a/0x270 [ 1158.224896][T22059] io_sqe_buffers_register+0x1d6/0x750 [ 1158.230473][T22059] ? __se_sys_io_uring_register+0x1ee/0x1780 [ 1158.236507][T22059] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 1158.242512][T22059] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1158.248161][T22059] ? __fget_files+0x29/0x470 [ 1158.252774][T22059] __se_sys_io_uring_register+0x97d/0x1780 [ 1158.258665][T22059] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1158.264921][T22059] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1158.271541][T22059] ? lockdep_hardirqs_on+0x99/0x150 [ 1158.276753][T22059] __do_fast_syscall_32+0xb4/0x110 [ 1158.281881][T22059] ? exc_page_fault+0x590/0x8c0 [ 1158.286754][T22059] do_fast_syscall_32+0x34/0x80 [ 1158.291642][T22059] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1158.297987][T22059] RIP: 0023:0xf7fc6579 [ 1158.302064][T22059] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1158.321697][T22059] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 00000000000001ab [ 1158.330186][T22059] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 1158.338202][T22059] RDX: 00000000200002c0 RSI: 000000000000011a RDI: 0000000000000000 [ 1158.346185][T22059] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1158.354158][T22059] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1158.362131][T22059] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1158.370133][T22059] [ 1158.509011][T13257] usb 5-1: USB disconnect, device number 51 [ 1158.673704][T22071] IPv6: NLM_F_CREATE should be specified when creating new route [ 1158.696787][ T5236] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1158.825023][T22077] FAULT_INJECTION: forcing a failure. [ 1158.825023][T22077] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.849242][T22077] CPU: 0 UID: 0 PID: 22077 Comm: syz.2.4393 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1158.860054][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1158.870131][T22077] Call Trace: [ 1158.873421][T22077] [ 1158.876363][T22077] dump_stack_lvl+0x241/0x360 [ 1158.881062][T22077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1158.886466][T22077] ? __pfx__printk+0x10/0x10 [ 1158.891098][T22077] ? __kmalloc_noprof+0xb0/0x400 [ 1158.896083][T22077] ? __pfx___might_resched+0x10/0x10 [ 1158.901404][T22077] should_fail_ex+0x3b0/0x4e0 [ 1158.906109][T22077] ? iovec_from_user+0x87/0x240 [ 1158.910987][T22077] should_failslab+0xac/0x100 [ 1158.915693][T22077] ? iovec_from_user+0x87/0x240 [ 1158.920564][T22077] __kmalloc_noprof+0xd8/0x400 [ 1158.925352][T22077] iovec_from_user+0x87/0x240 [ 1158.930052][T22077] __import_iovec+0x132/0x820 [ 1158.934767][T22077] import_iovec+0xeb/0x120 [ 1158.939216][T22077] get_compat_msghdr+0x500/0x730 [ 1158.944182][T22077] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1158.949713][T22077] ? __fget_files+0x3f3/0x470 [ 1158.954432][T22077] do_recvmmsg+0x514/0xad0 [ 1158.958872][T22077] ? mark_lock+0x9a/0x360 [ 1158.963233][T22077] ? __lock_acquire+0x1384/0x2050 [ 1158.968292][T22077] ? __pfx_do_recvmmsg+0x10/0x10 [ 1158.973294][T22077] ? get_old_timespec32+0x18b/0x280 [ 1158.978526][T22077] ? __fget_files+0x3f3/0x470 [ 1158.983231][T22077] __sys_recvmmsg+0x13e/0x270 [ 1158.987928][T22077] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1158.993148][T22077] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1158.998392][ T25] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1158.999491][T22077] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 1159.013371][T22077] __do_fast_syscall_32+0xb4/0x110 [ 1159.018519][T22077] ? exc_page_fault+0x590/0x8c0 [ 1159.023414][T22077] do_fast_syscall_32+0x34/0x80 [ 1159.028279][T22077] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1159.034637][T22077] RIP: 0023:0xf749d579 [ 1159.038724][T22077] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1159.058358][T22077] RSP: 002b:00000000f578656c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1159.066822][T22077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200037c0 [ 1159.074822][T22077] RDX: 00000000000003b4 RSI: 0000000000000000 RDI: 0000000020003700 [ 1159.082815][T22077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1159.090809][T22077] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1159.098808][T22077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1159.106820][T22077] [ 1159.109956][ T5300] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1159.109970][ C0] vkms_vblank_simulate: vblank timer overrun [ 1159.134845][ T5236] usb 2-1: Using ep0 maxpacket: 32 [ 1159.155767][ T5236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.175817][ T5236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.196114][ T5236] usb 2-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 1159.205673][ T5236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.216444][ T5236] usb 2-1: config 0 descriptor?? [ 1159.217970][ T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1159.256374][ T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1159.291847][ T25] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1159.303662][ T5300] usb 1-1: Using ep0 maxpacket: 16 [ 1159.324126][ T5300] usb 1-1: device descriptor read/all, error -61 [ 1159.344200][ T25] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1159.362549][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1159.372122][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.390760][ T25] usb 4-1: Product: syz [ 1159.400887][ T25] usb 4-1: Manufacturer: syz [ 1159.413565][ T25] usb 4-1: SerialNumber: syz [ 1159.469776][ T5300] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1159.551467][T22087] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4397'. [ 1159.616133][ T5300] usb 1-1: device descriptor read/64, error -71 [ 1159.650609][ T25] usb 4-1: USB disconnect, device number 26 [ 1159.678768][ T5236] wacom 0003:056A:00F0.0013: hidraw0: USB HID v0.00 Device [HID 056a:00f0] on usb-dummy_hcd.1-1/input0 [ 1159.692503][T19306] udevd[19306]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1159.757213][ T5300] usb usb1-port1: attempt power cycle [ 1159.936927][T22090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4387'. [ 1159.948345][T22090] netlink: 'syz.1.4387': attribute type 13 has an invalid length. [ 1159.969385][T22090] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1159.978793][T22090] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1159.987735][T22090] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1159.996499][T22090] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1160.000417][T22091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.007506][T22090] vxlan0: entered promiscuous mode [ 1160.030275][T22091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.136337][ T5300] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1160.169088][ T5300] usb 1-1: device descriptor read/8, error -71 [ 1160.416919][ T5300] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1160.467665][ T5300] usb 1-1: device descriptor read/8, error -71 [ 1160.477397][T22101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.488450][T22101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.586596][ T5300] usb usb1-port1: unable to enumerate USB device [ 1160.626877][ T25] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1160.766131][ T25] usb 4-1: device descriptor read/64, error -71 [ 1161.018337][ T25] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1161.158241][ T25] usb 4-1: device descriptor read/64, error -71 [ 1161.236160][T13257] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 1161.266708][ T25] usb usb4-port1: attempt power cycle [ 1161.369438][T13257] usb 5-1: device descriptor read/64, error -71 [ 1161.436106][ T5300] usb 2-1: USB disconnect, device number 31 [ 1161.606297][T13257] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 1161.607920][ T25] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1161.647001][ T25] usb 4-1: device descriptor read/8, error -71 [ 1161.746214][T13257] usb 5-1: device descriptor read/64, error -71 [ 1161.861619][T13257] usb usb5-port1: attempt power cycle [ 1161.896249][ T25] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1161.936194][ T5300] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1161.944842][ T25] usb 4-1: device descriptor read/8, error -71 [ 1161.973254][T22121] fuse: Unknown parameter 'u\‘Áb' [ 1162.069700][ T25] usb usb4-port1: unable to enumerate USB device [ 1162.096899][ T5300] usb 2-1: Using ep0 maxpacket: 16 [ 1162.112983][ T5300] usb 2-1: config 5 has an invalid interface number: 20 but max is 2 [ 1162.121418][ T5300] usb 2-1: config 5 has an invalid interface number: 180 but max is 2 [ 1162.129979][ T5300] usb 2-1: config 5 has an invalid interface number: 156 but max is 2 [ 1162.138401][ T5300] usb 2-1: config 5 has an invalid interface descriptor of length 5, skipping [ 1162.147870][ T5300] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1162.156880][ T5300] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.167198][ T5300] usb 2-1: config 5 has no interface number 0 [ 1162.173306][ T5300] usb 2-1: config 5 has no interface number 1 [ 1162.179838][ T5300] usb 2-1: config 5 has no interface number 2 [ 1162.186268][ T5300] usb 2-1: config 5 interface 20 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1162.197301][ T5300] usb 2-1: config 5 interface 20 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1162.206254][T13257] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 1162.208287][ T5300] usb 2-1: config 5 interface 180 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1162.230609][ T5300] usb 2-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1162.242170][ T5300] usb 2-1: config 5 interface 180 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1162.252954][ T5300] usb 2-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1162.263945][ T5300] usb 2-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1162.273288][T13257] usb 5-1: device descriptor read/8, error -71 [ 1162.274948][ T5300] usb 2-1: config 5 interface 156 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1162.294316][ T5300] usb 2-1: config 5 interface 20 has no altsetting 0 [ 1162.301106][ T5300] usb 2-1: config 5 interface 180 has no altsetting 0 [ 1162.308234][ T5300] usb 2-1: config 5 interface 156 has no altsetting 0 [ 1162.342943][ T5300] usb 2-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=8b.dd [ 1162.352320][ T5300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.360656][ T5300] usb 2-1: Product: syz [ 1162.364839][ T5300] usb 2-1: Manufacturer: syz [ 1162.376518][ T5300] usb 2-1: SerialNumber: syz [ 1162.509985][T22130] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4410'. [ 1162.519959][T13257] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 1162.546913][T13257] usb 5-1: device descriptor read/8, error -71 [ 1162.630245][ T5300] usb 2-1: USB disconnect, device number 32 [ 1162.662508][T13257] usb usb5-port1: unable to enumerate USB device [ 1162.869505][T22133] netlink: 'syz.2.4411': attribute type 4 has an invalid length. [ 1163.019111][T22136] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4412'. [ 1163.028533][T22136] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4412'. [ 1163.369781][T22140] FAULT_INJECTION: forcing a failure. [ 1163.369781][T22140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1163.383680][T22140] CPU: 1 UID: 0 PID: 22140 Comm: syz.3.4414 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1163.394486][T22140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1163.404572][T22140] Call Trace: [ 1163.407870][T22140] [ 1163.410822][T22140] dump_stack_lvl+0x241/0x360 [ 1163.415532][T22140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1163.420755][T22140] ? __pfx__printk+0x10/0x10 [ 1163.425384][T22140] ? snprintf+0xda/0x120 [ 1163.429658][T22140] should_fail_ex+0x3b0/0x4e0 [ 1163.434375][T22140] _copy_to_user+0x2f/0xb0 [ 1163.438826][T22140] simple_read_from_buffer+0xca/0x150 [ 1163.444236][T22140] proc_fail_nth_read+0x1e9/0x250 [ 1163.449282][T22140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1163.455025][T22140] ? rw_verify_area+0x55e/0x6f0 [ 1163.459890][T22140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1163.465469][T22140] vfs_read+0x201/0xbc0 [ 1163.469651][T22140] ? __pfx_lock_release+0x10/0x10 [ 1163.474708][T22140] ? __pfx_vfs_read+0x10/0x10 [ 1163.479411][T22140] ? __fget_files+0x3f3/0x470 [ 1163.484104][T22140] ? fdget_pos+0x24e/0x320 [ 1163.488528][T22140] ksys_read+0x183/0x2b0 [ 1163.492779][T22140] ? __pfx_ksys_read+0x10/0x10 [ 1163.497548][T22140] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1163.504151][T22140] ? lockdep_hardirqs_on+0x99/0x150 [ 1163.509358][T22140] __do_fast_syscall_32+0xb4/0x110 [ 1163.514479][T22140] ? exc_page_fault+0x590/0x8c0 [ 1163.519340][T22140] do_fast_syscall_32+0x34/0x80 [ 1163.524197][T22140] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1163.530532][T22140] RIP: 0023:0xf7fc6579 [ 1163.534606][T22140] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1163.554213][T22140] RSP: 002b:00000000f57465a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1163.562634][T22140] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f5746620 [ 1163.570610][T22140] RDX: 000000000000000f RSI: 00000000f744bff4 RDI: 0000000000000000 [ 1163.578592][T22140] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1163.586584][T22140] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1163.594568][T22140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1163.602561][T22140] [ 1164.006238][T13257] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1164.075706][T22161] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4418'. [ 1164.161156][T22158] cannot load conntrack support for proto=3 [ 1164.166393][T13257] usb 1-1: Using ep0 maxpacket: 16 [ 1164.180929][T13257] usb 1-1: config 5 has an invalid interface number: 20 but max is 2 [ 1164.200030][T13257] usb 1-1: config 5 has an invalid interface number: 180 but max is 2 [ 1164.220225][T13257] usb 1-1: config 5 has an invalid interface number: 156 but max is 2 [ 1164.247413][T13257] usb 1-1: config 5 has an invalid interface descriptor of length 5, skipping [ 1164.266177][T13257] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1164.275714][T13257] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.301278][T13257] usb 1-1: config 5 has no interface number 0 [ 1164.315668][T13257] usb 1-1: config 5 has no interface number 1 [ 1164.323903][T13257] usb 1-1: config 5 has no interface number 2 [ 1164.340418][T13257] usb 1-1: config 5 interface 20 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1164.355874][T13257] usb 1-1: config 5 interface 20 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1164.377699][T13257] usb 1-1: config 5 interface 180 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1164.401483][T13257] usb 1-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1164.423444][T13257] usb 1-1: config 5 interface 180 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1164.445491][T13257] usb 1-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1164.468011][T13257] usb 1-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1164.488409][T13257] usb 1-1: config 5 interface 156 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1164.511814][T13257] usb 1-1: config 5 interface 20 has no altsetting 0 [ 1164.523087][T13257] usb 1-1: config 5 interface 180 has no altsetting 0 [ 1164.535492][T13257] usb 1-1: config 5 interface 156 has no altsetting 0 [ 1164.554941][T13257] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=8b.dd [ 1164.574534][T13257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.585332][T13257] usb 1-1: Product: syz [ 1164.592932][T13257] usb 1-1: Manufacturer: syz [ 1164.603047][T13257] usb 1-1: SerialNumber: syz [ 1164.902152][T13257] usb 1-1: USB disconnect, device number 70 [ 1165.079217][T22183] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4427'. [ 1165.112012][T22186] FAULT_INJECTION: forcing a failure. [ 1165.112012][T22186] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.124791][T22186] CPU: 1 UID: 0 PID: 22186 Comm: syz.4.4428 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1165.135550][T22186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1165.145690][T22186] Call Trace: [ 1165.148964][T22186] [ 1165.151890][T22186] dump_stack_lvl+0x241/0x360 [ 1165.156583][T22186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1165.161903][T22186] ? __pfx__printk+0x10/0x10 [ 1165.166540][T22186] should_fail_ex+0x3b0/0x4e0 [ 1165.171239][T22186] ? dst_alloc+0x12b/0x190 [ 1165.175656][T22186] should_failslab+0xac/0x100 [ 1165.180349][T22186] ? dst_alloc+0x12b/0x190 [ 1165.184792][T22186] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1165.190182][T22186] dst_alloc+0x12b/0x190 [ 1165.194419][T22186] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 1165.200512][T22186] ip_route_output_key_hash+0x193/0x2b0 [ 1165.206084][T22186] ? ip_route_output_key_hash+0xdf/0x2b0 [ 1165.211729][T22186] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1165.217805][T22186] ? stack_trace_save+0x118/0x1d0 [ 1165.222852][T22186] ? __pfx_stack_trace_save+0x10/0x10 [ 1165.228244][T22186] tcp_v4_connect+0x6df/0x1ba0 [ 1165.233016][T22186] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1165.236291][T16746] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1165.238205][T22186] __inet_stream_connect+0x262/0xf30 [ 1165.251111][T22186] ? __pfx___inet_stream_connect+0x10/0x10 [ 1165.256966][T22186] ? __kasan_kmalloc+0x98/0xb0 [ 1165.261750][T22186] ? tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 1165.267124][T22186] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 1165.272699][T22186] tcp_sendmsg_fastopen+0x3a2/0x5d0 [ 1165.277911][T22186] tcp_sendmsg_locked+0x4a23/0x50a0 [ 1165.283103][T22186] ? __lock_acquire+0x1384/0x2050 [ 1165.288161][T22186] ? mark_lock+0x9a/0x360 [ 1165.292595][T22186] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1165.298590][T22186] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1165.304917][T22186] ? lockdep_hardirqs_on+0x99/0x150 [ 1165.310123][T22186] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1165.315673][T22186] ? __local_bh_enable_ip+0x168/0x200 [ 1165.321043][T22186] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1165.326252][T22186] tcp_sendmsg+0x30/0x50 [ 1165.330514][T22186] __sock_sendmsg+0x1a6/0x270 [ 1165.335209][T22186] __sys_sendto+0x39b/0x4f0 [ 1165.339722][T22186] ? __pfx___sys_sendto+0x10/0x10 [ 1165.344761][T22186] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1165.350424][T22186] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1165.356786][T22186] __ia32_sys_sendto+0xdd/0x100 [ 1165.361653][T22186] __do_fast_syscall_32+0xb4/0x110 [ 1165.366864][T22186] ? exc_page_fault+0x590/0x8c0 [ 1165.371742][T22186] do_fast_syscall_32+0x34/0x80 [ 1165.376609][T22186] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1165.382945][T22186] RIP: 0023:0xf749d579 [ 1165.387016][T22186] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1165.387688][T16746] usb 2-1: device descriptor read/64, error -71 [ 1165.406626][T22186] RSP: 002b:00000000f578656c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1165.406659][T22186] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1165.406672][T22186] RDX: 0000000000000000 RSI: 00000000200007fd RDI: 0000000020e68000 [ 1165.406685][T22186] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 1165.406697][T22186] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1165.406709][T22186] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1165.406734][T22186] [ 1165.546260][T16592] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1165.706678][T16592] usb 4-1: Using ep0 maxpacket: 16 [ 1165.708386][T16746] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1165.717732][T16592] usb 4-1: config 5 has an invalid interface number: 20 but max is 2 [ 1165.726279][ T5285] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1165.737157][T16592] usb 4-1: config 5 has an invalid interface number: 180 but max is 2 [ 1165.765660][T16592] usb 4-1: config 5 has an invalid interface number: 156 but max is 2 [ 1165.776904][T16592] usb 4-1: config 5 has an invalid interface descriptor of length 5, skipping [ 1165.785806][T16592] usb 4-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1165.795035][T16592] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.806997][T16592] usb 4-1: config 5 has no interface number 0 [ 1165.813114][T16592] usb 4-1: config 5 has no interface number 1 [ 1165.820266][T16592] usb 4-1: config 5 has no interface number 2 [ 1165.826583][T16592] usb 4-1: config 5 interface 20 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1165.834548][T22197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4432'. [ 1165.837542][T16592] usb 4-1: config 5 interface 20 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1165.837587][T16592] usb 4-1: config 5 interface 180 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1165.837616][T16592] usb 4-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1165.837639][T16592] usb 4-1: config 5 interface 180 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1165.837663][T16592] usb 4-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1165.837710][T16592] usb 4-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1165.837732][T16592] usb 4-1: config 5 interface 156 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1165.837760][T16592] usb 4-1: config 5 interface 20 has no altsetting 0 [ 1165.837780][T16592] usb 4-1: config 5 interface 180 has no altsetting 0 [ 1165.837799][T16592] usb 4-1: config 5 interface 156 has no altsetting 0 [ 1165.859281][T16592] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=8b.dd [ 1165.869919][T16746] usb 2-1: device descriptor read/64, error -71 [ 1165.890480][T16592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.918695][ T5285] usb 5-1: config 0 has an invalid interface number: 190 but max is 0 [ 1165.940669][T16592] usb 4-1: Product: syz [ 1165.956177][ T5285] usb 5-1: config 0 has no interface number 0 [ 1165.970334][T16592] usb 4-1: Manufacturer: syz [ 1165.992030][ T5285] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0900, bcdDevice=38.c0 [ 1166.005253][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.013927][ T5285] usb 5-1: Product: syz [ 1166.016286][T16592] usb 4-1: SerialNumber: syz [ 1166.019091][T16746] usb usb2-port1: attempt power cycle [ 1166.029126][ T5285] usb 5-1: Manufacturer: syz [ 1166.033749][ T5285] usb 5-1: SerialNumber: syz [ 1166.043734][ T5285] usb 5-1: config 0 descriptor?? [ 1166.052675][ T5285] option 5-1:0.190: GSM modem (1-port) converter detected [ 1166.195296][T22203] FAULT_INJECTION: forcing a failure. [ 1166.195296][T22203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.225198][T22203] CPU: 1 UID: 0 PID: 22203 Comm: syz.0.4434 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1166.236029][T22203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1166.246109][T22203] Call Trace: [ 1166.249410][T22203] [ 1166.252360][T22203] dump_stack_lvl+0x241/0x360 [ 1166.257066][T22203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1166.262292][T22203] ? __pfx__printk+0x10/0x10 [ 1166.266922][T22203] should_fail_ex+0x3b0/0x4e0 [ 1166.269235][T22190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.271610][T22203] __kvm_read_guest_page+0x187/0x220 [ 1166.285319][T22203] kvm_vcpu_read_guest+0x88/0x100 [ 1166.290375][T22203] read_emulate+0x2b/0x50 [ 1166.294736][T22203] emulator_read_write_onepage+0x634/0x9f0 [ 1166.300578][T22203] ? read_prepare+0xb3/0x100 [ 1166.305197][T22203] emulator_read_write+0x1ee/0x5a0 [ 1166.310340][T22203] ? __pfx_emulator_read_emulated+0x10/0x10 [ 1166.316265][T22203] segmented_read+0x254/0x3e0 [ 1166.320965][T22203] ? __lock_acquire+0x1384/0x2050 [ 1166.326030][T22203] ? __pfx_segmented_read+0x10/0x10 [ 1166.331256][T22203] x86_emulate_insn+0x764/0x3af0 [ 1166.336224][T22203] ? fpu_swap_kvm_fpstate+0x82/0x460 [ 1166.341519][T22203] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1166.347233][T22203] ? complete_emulated_mmio+0x18e/0x780 [ 1166.352798][T22203] x86_emulate_instruction+0xcb1/0x1910 [ 1166.358337][T22203] ? __pfx_complete_emulated_mmio+0x10/0x10 [ 1166.364216][T22203] kvm_arch_vcpu_ioctl_run+0x12ab/0x19d0 [ 1166.366150][T16746] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1166.370450][T22203] ? kvm_arch_vcpu_ioctl_run+0x1c9/0x19d0 [ 1166.383700][T22203] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1166.389706][T22203] ? __mutex_trylock_common+0x183/0x2e0 [ 1166.395269][T22203] ? __pfx___might_resched+0x10/0x10 [ 1166.396904][T16746] usb 2-1: device descriptor read/8, error -71 [ 1166.400546][T22203] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1166.400580][T22203] ? rcu_is_watching+0x15/0xb0 [ 1166.417420][T22203] ? trace_contention_end+0x3c/0x120 [ 1166.422696][T22203] ? __mutex_lock+0x2ef/0xd70 [ 1166.427363][T22203] ? kvm_vcpu_ioctl+0x1da/0xea0 [ 1166.432205][T22203] ? __pfx___mutex_lock+0x10/0x10 [ 1166.437327][T22203] ? kfree+0x1a0/0x440 [ 1166.441424][T22203] kvm_vcpu_ioctl+0x91a/0xea0 [ 1166.446139][T22203] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1166.451371][T22203] ? tomoyo_path_number_perm+0x208/0x880 [ 1166.457044][T22203] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1166.463061][T22203] ? __pfx_lock_acquire+0x10/0x10 [ 1166.468130][T22203] kvm_vcpu_compat_ioctl+0x23f/0x450 [ 1166.473445][T22203] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1166.479281][T22203] ? __fget_files+0x3f3/0x470 [ 1166.483986][T22203] __se_compat_sys_ioctl+0x510/0xc90 [ 1166.489295][T22203] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 1166.495128][T22203] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1166.501139][T22203] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1166.507498][T22203] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1166.514123][T22203] ? lockdep_hardirqs_on+0x99/0x150 [ 1166.519353][T22203] __do_fast_syscall_32+0xb4/0x110 [ 1166.524488][T22203] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1166.530675][T22203] ? lockdep_hardirqs_on+0x99/0x150 [ 1166.535908][T22203] do_fast_syscall_32+0x34/0x80 [ 1166.540793][T22203] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1166.547158][T22203] RIP: 0023:0xf7f92579 [ 1166.551266][T22203] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1166.570994][T22203] RSP: 002b:00000000f571656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1166.579449][T22203] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 1166.587444][T22203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1166.595438][T22203] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1166.603427][T22203] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1166.611392][T22203] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1166.619378][T22203] [ 1166.633695][T22190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.653136][T16592] usb 4-1: USB disconnect, device number 31 [ 1166.654058][T16746] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1166.708286][T16746] usb 2-1: device descriptor read/8, error -71 [ 1166.762290][ T5285] usb 5-1: USB disconnect, device number 56 [ 1166.773848][ T5285] option 5-1:0.190: device disconnected [ 1166.841346][T16746] usb usb2-port1: unable to enumerate USB device [ 1167.106174][ T2636] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1167.196775][T22227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.205520][T22227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.268736][ T2636] usb 1-1: New USB device found, idVendor=0c45, idProduct=6025, bcdDevice=41.12 [ 1167.278250][ T2636] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.298495][ T2636] usb 1-1: config 0 descriptor?? [ 1167.314160][ T2636] hub 1-1:0.0: bad descriptor, ignoring hub [ 1167.322437][ T2636] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1167.335172][ T2636] gspca_main: sonixb-2.14.0 probing 0c45:6025 [ 1167.482779][T22234] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4442'. [ 1167.705090][T22237] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4443'. [ 1167.721314][T22217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4438'. [ 1167.734982][ T5240] Bluetooth: hci4: SCO packet for unknown connection handle 710 [ 1167.736236][T16592] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1167.866368][ T2636] usb 1-1: USB disconnect, device number 71 [ 1167.926761][T16592] usb 4-1: Using ep0 maxpacket: 16 [ 1167.933505][T16592] usb 4-1: device descriptor read/all, error -61 [ 1168.076339][T16592] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1168.104010][T22246] program syz.1.4447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1168.216173][T16592] usb 4-1: device descriptor read/64, error -71 [ 1168.337168][T16592] usb usb4-port1: attempt power cycle [ 1168.362033][ T2636] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1168.526883][ T2636] usb 2-1: Using ep0 maxpacket: 32 [ 1168.541519][ T2636] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 1168.553008][ T2636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.565002][ T2636] usb 2-1: Product: syz [ 1168.569741][ T2636] usb 2-1: Manufacturer: syz [ 1168.578660][ T2636] usb 2-1: SerialNumber: syz [ 1168.585061][ T2636] usb 2-1: config 0 descriptor?? [ 1168.593937][ T2636] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 1168.626209][ T46] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1168.642567][ T2636] usb 2-1: Found UVC 0.00 device syz (0d49:7000) [ 1168.657447][ T2636] usb 2-1: No valid video chain found. [ 1168.703840][T16592] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1168.727659][T16592] usb 4-1: device descriptor read/8, error -71 [ 1168.798249][ T5234] usb 2-1: USB disconnect, device number 37 [ 1168.801310][ T46] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1168.818774][ T46] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1168.830779][ T46] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1168.849720][ T46] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1168.860351][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.883421][T22250] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1168.996183][T16592] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1169.026146][T16592] usb 4-1: device descriptor read/8, error -71 [ 1169.149303][T16592] usb usb4-port1: unable to enumerate USB device [ 1169.296218][T16746] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1169.446155][T16746] usb 5-1: Using ep0 maxpacket: 16 [ 1169.470842][T16746] usb 5-1: config 5 has an invalid interface number: 20 but max is 2 [ 1169.566875][T16746] usb 5-1: config 5 has an invalid interface number: 180 but max is 2 [ 1169.575237][T16746] usb 5-1: config 5 has an invalid interface number: 156 but max is 2 [ 1169.584586][T16746] usb 5-1: config 5 has an invalid interface descriptor of length 5, skipping [ 1169.632028][T16746] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1169.641057][T16746] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.651464][T16746] usb 5-1: config 5 has no interface number 0 [ 1169.657917][T16746] usb 5-1: config 5 has no interface number 1 [ 1169.664231][T16746] usb 5-1: config 5 has no interface number 2 [ 1169.670498][T16746] usb 5-1: config 5 interface 20 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1169.681899][T16746] usb 5-1: config 5 interface 20 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1169.699314][T16746] usb 5-1: config 5 interface 180 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1170.111006][T16746] usb 5-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1170.124315][T16746] usb 5-1: config 5 interface 180 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1170.135300][T16746] usb 5-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1170.146566][T16746] usb 5-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1170.157541][T16746] usb 5-1: config 5 interface 156 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1170.171009][T16746] usb 5-1: config 5 interface 20 has no altsetting 0 [ 1170.178628][T16746] usb 5-1: config 5 interface 180 has no altsetting 0 [ 1170.185558][T16746] usb 5-1: config 5 interface 156 has no altsetting 0 [ 1170.215523][T16746] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=8b.dd [ 1170.267131][T16746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.275314][T16746] usb 5-1: Product: syz [ 1170.279780][T16746] usb 5-1: Manufacturer: syz [ 1170.293808][T16746] usb 5-1: SerialNumber: syz [ 1170.569000][T16746] usb 5-1: USB disconnect, device number 57 [ 1170.927170][T22276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.951194][T22276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.266855][ T5234] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1171.277732][T22280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4449'. [ 1171.296947][T22280] netlink: 'syz.0.4449': attribute type 30 has an invalid length. [ 1171.449147][ T5234] usb 4-1: config 0 has an invalid interface number: 134 but max is 0 [ 1171.462302][ T5234] usb 4-1: config 0 has no interface number 0 [ 1171.475610][ T5234] usb 4-1: config 0 interface 134 has no altsetting 0 [ 1171.492957][ T5234] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1171.508608][ T5234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.525852][ T5234] usb 4-1: Product: syz [ 1171.539677][ T5234] usb 4-1: Manufacturer: syz [ 1171.550479][ T5234] usb 4-1: SerialNumber: syz [ 1171.578982][ T5234] usb 4-1: config 0 descriptor?? [ 1171.846901][ T5234] usb 4-1: USB disconnect, device number 36 [ 1172.176797][T22287] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4460'. [ 1173.238600][ T46] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 1173.248113][ T46] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input28 [ 1173.280299][ T46] usb 1-1: USB disconnect, device number 72 [ 1173.286360][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1173.384192][T22300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4464'. [ 1173.445386][T22301] netlink: 908 bytes leftover after parsing attributes in process `syz.4.4464'. [ 1173.469875][T22300] binder: 22299:22300 ioctl 4020ae46 20000240 returned -22 [ 1173.480278][T22300] binder: 22299:22300 ioctl 4020ae46 20000240 returned -22 [ 1173.499135][T22300] binder: 22299:22300 ioctl 4020ae46 20000240 returned -22 [ 1173.506750][T22300] binder: 22299:22300 ioctl 4020ae46 20000240 returned -22 [ 1173.530363][T22300] binder: 22299:22300 ioctl 4020ae46 20000240 returned -22 [ 1173.844503][T18427] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.921619][T22310] af_packet: tpacket_rcv: packet too big, clamped from 57 to 4294967272. macoff=96 [ 1173.992073][T18427] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.046341][T16746] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1174.226187][T16746] usb 5-1: Using ep0 maxpacket: 16 [ 1174.401648][T18427] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.469165][T22317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4471'. [ 1174.502334][T22317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4471'. [ 1174.526487][T16746] usb 5-1: config 5 has an invalid interface number: 20 but max is 2 [ 1174.534640][T16746] usb 5-1: config 5 has an invalid interface number: 180 but max is 2 [ 1174.557344][T16746] usb 5-1: config 5 has an invalid interface number: 156 but max is 2 [ 1174.575792][T16746] usb 5-1: config 5 has an invalid interface descriptor of length 5, skipping [ 1174.604503][T16746] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1174.646136][T16746] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.705721][T16746] usb 5-1: config 5 has no interface number 0 [ 1174.713645][T16746] usb 5-1: config 5 has no interface number 1 [ 1174.726225][T16746] usb 5-1: config 5 has no interface number 2 [ 1174.746815][T16746] usb 5-1: config 5 interface 20 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1174.786812][T18427] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.806374][T16746] usb 5-1: config 5 interface 20 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1174.812781][T19002] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1174.827977][T19002] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1174.829032][T16746] usb 5-1: config 5 interface 180 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1174.838399][T19002] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1174.855751][T19002] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1174.863418][T19002] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1174.871042][T19002] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1174.918401][T22322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.936185][T16746] usb 5-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1174.966254][T16746] usb 5-1: config 5 interface 180 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1174.996156][T16746] usb 5-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1175.016222][T16746] usb 5-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1175.036106][T16746] usb 5-1: config 5 interface 156 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1175.059582][T16746] usb 5-1: config 5 interface 20 has no altsetting 0 [ 1175.076275][T16746] usb 5-1: config 5 interface 180 has no altsetting 0 [ 1175.093569][T16746] usb 5-1: config 5 interface 156 has no altsetting 0 [ 1175.167599][T22322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.226643][T16746] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=8b.dd [ 1175.251010][T16746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.266922][T16746] usb 5-1: Product: syz [ 1175.275974][T16746] usb 5-1: Manufacturer: syz [ 1175.280789][T16746] usb 5-1: SerialNumber: syz [ 1175.439671][T18427] bridge_slave_1: left allmulticast mode [ 1175.445363][T18427] bridge_slave_1: left promiscuous mode [ 1175.483035][T22331] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4473'. [ 1175.502697][T18427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.533695][T18427] bridge_slave_0: left allmulticast mode [ 1175.543022][T18427] bridge_slave_0: left promiscuous mode [ 1175.551094][T18427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.886304][T19002] Bluetooth: hci4: command tx timeout [ 1182.039019][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.053421][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.043277][ T5240] Bluetooth: hci4: command tx timeout [ 1191.587287][T19002] Bluetooth: hci4: command tx timeout [ 1205.711291][ T5240] Bluetooth: hci4: command tx timeout [ 1244.625044][T13387] Bluetooth: hci2: command 0x0406 tx timeout [ 1280.195264][ T5243] Bluetooth: hci1: command tx timeout [ 1306.808329][ T5240] Bluetooth: hci3: command 0x0406 tx timeout [ 1310.863481][ T5236] usb 5-1: USB disconnect, device number 58 [ 1319.448794][T18999] Bluetooth: hci4: command 0x0406 tx timeout [ 1339.816503][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1339.822841][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1339.837423][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1339.843748][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1340.216259][ T30] INFO: task dhcpcd:4899 blocked for more than 150 seconds. [ 1340.223614][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1340.356147][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1340.364875][ T30] task:dhcpcd state:D stack:23480 pid:4899 tgid:4899 ppid:1 flags:0x00000002 [ 1340.566078][ T30] Call Trace: [ 1340.569420][ T30] [ 1340.572369][ T30] __schedule+0x1895/0x4b30 [ 1340.676162][ T30] ? __pfx___schedule+0x10/0x10 [ 1340.681087][ T30] ? __pfx_lock_release+0x10/0x10 [ 1340.826084][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1340.831622][ T30] ? schedule+0x90/0x320 [ 1340.835904][ T30] schedule+0x14b/0x320 [ 1341.036144][ T30] schedule_preempt_disabled+0x13/0x30 [ 1341.041682][ T30] __mutex_lock+0x6a7/0xd70 [ 1341.176231][ T30] ? __mutex_lock+0x52a/0xd70 [ 1341.180988][ T30] ? vlan_ioctl_handler+0x112/0x9d0 [ 1341.296173][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1341.301276][ T30] ? __might_fault+0xc6/0x120 [ 1341.305978][ T30] vlan_ioctl_handler+0x112/0x9d0 [ 1341.421821][ T30] ? sock_ioctl+0x661/0x8e0 [ 1341.536156][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1341.541791][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1341.696173][ T30] sock_ioctl+0x680/0x8e0 [ 1341.700667][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 1341.705559][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 1341.906820][ T30] __se_sys_ioctl+0xf9/0x170 [ 1341.911494][ T30] do_syscall_64+0xf3/0x230 [ 1342.016213][ T30] ? clear_bhb_loop+0x35/0x90 [ 1342.020970][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.156214][ T30] RIP: 0033:0x7f790f8fed49 [ 1342.160702][ T30] RSP: 002b:00007ffeec75bf98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1347.059154][ T30] RAX: ffffffffffffffda RBX: 0000560385b981d0 RCX: 00007f790f8fed49 [ 1347.067284][ T30] RDX: 00007ffeec75bfa0 RSI: 0000000000008982 RDI: 0000000000000011 [ 1347.075292][ T30] RBP: 0000000000000002 R08: 0000000000000008 R09: 0000000000000000 [ 1347.083393][ T30] R10: 00007ffeec76c620 R11: 0000000000000246 R12: 00007ffeec75bfa0 [ 1347.091506][ T30] R13: 00007ffeec75c060 R14: 0000560385b981d0 R15: 0000560385cc8c50 [ 1347.099610][ T30] [ 1347.102684][ T30] INFO: task kworker/1:7:16592 blocked for more than 157 seconds. [ 1347.115732][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1347.123705][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1347.132506][ T30] task:kworker/1:7 state:D stack:21552 pid:16592 tgid:16592 ppid:2 flags:0x00004000 [ 1347.142886][ T30] Workqueue: events switchdev_deferred_process_work [ 1347.150830][ T30] Call Trace: [ 1347.154162][ T30] [ 1347.157183][ T30] __schedule+0x1895/0x4b30 [ 1347.161734][ T30] ? __pfx___schedule+0x10/0x10 [ 1347.166707][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1347.172715][ T30] ? __pfx_lock_release+0x10/0x10 [ 1347.184375][ T30] ? kick_pool+0x1bd/0x620 [ 1347.330580][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1347.335858][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1347.416142][ T30] ? schedule+0x90/0x320 [ 1347.420464][ T30] schedule+0x14b/0x320 [ 1347.424662][ T30] schedule_preempt_disabled+0x13/0x30 [ 1347.508394][ T30] __mutex_lock+0x6a7/0xd70 [ 1347.512973][ T30] ? __mutex_lock+0x52a/0xd70 [ 1347.538133][ T5285] usb 3-1: USB disconnect, device number 25 [ 1347.588442][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 1347.594757][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1347.656203][ T30] ? process_scheduled_works+0x976/0x1850 [ 1347.706198][ T30] switchdev_deferred_process_work+0xe/0x20 [ 1347.724984][ T30] process_scheduled_works+0xa63/0x1850 [ 1347.772989][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1347.815271][ T30] ? assign_work+0x364/0x3d0 [ 1347.873347][ T5285] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1347.915086][ T30] worker_thread+0x870/0xd30 [ 1347.946358][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1347.952326][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1348.026153][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1348.031346][ T30] kthread+0x2f0/0x390 [ 1348.035464][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1348.126163][ T30] ? __pfx_kthread+0x10/0x10 [ 1348.130823][ T30] ret_from_fork+0x4b/0x80 [ 1348.135271][ T30] ? __pfx_kthread+0x10/0x10 [ 1348.226287][ T30] ret_from_fork_asm+0x1a/0x30 [ 1348.231139][ T30] [ 1348.316137][ T30] INFO: task kworker/u8:26:18437 blocked for more than 158 seconds. [ 1348.324269][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1348.386398][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1348.395120][ T30] task:kworker/u8:26 state:D stack:21264 pid:18437 tgid:18437 ppid:2 flags:0x00004000 [ 1348.629693][ T5285] ftdi_sio 3-1:0.0: device disconnected [ 1348.766191][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 1348.772255][ T30] Call Trace: [ 1348.775553][ T30] [ 1348.796705][ T30] __schedule+0x1895/0x4b30 [ 1348.801307][ T30] ? __pfx___schedule+0x10/0x10 [ 1348.866139][ T30] ? __pfx_lock_release+0x10/0x10 [ 1348.871260][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1348.945701][ T30] ? kthread_data+0x52/0xd0 [ 1348.994162][ T30] ? schedule+0x90/0x320 [ 1349.006108][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1349.011304][ T30] ? schedule+0x90/0x320 [ 1349.015616][ T30] schedule+0x14b/0x320 [ 1349.092944][ T30] schedule_preempt_disabled+0x13/0x30 [ 1349.126170][ T30] __mutex_lock+0x6a7/0xd70 [ 1349.130743][ T30] ? mark_lock+0x9a/0x360 [ 1349.135107][ T30] ? __mutex_lock+0x52a/0xd70 [ 1349.216144][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 1349.221337][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1349.276213][ T30] addrconf_dad_work+0xd0/0x16f0 [ 1349.281246][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1349.356130][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1349.362634][ T30] ? process_scheduled_works+0x976/0x1850 [ 1349.436273][ T30] process_scheduled_works+0xa63/0x1850 [ 1349.441923][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1349.486373][ T30] ? assign_work+0x364/0x3d0 [ 1349.491044][ T30] worker_thread+0x870/0xd30 [ 1349.495680][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1349.553543][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1349.586148][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1349.591351][ T30] kthread+0x2f0/0x390 [ 1349.595489][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1349.619903][ T30] ? __pfx_kthread+0x10/0x10 [ 1349.624607][ T30] ret_from_fork+0x4b/0x80 [ 1349.634496][ T30] ? __pfx_kthread+0x10/0x10 [ 1349.668172][T18999] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1349.678462][T18999] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1349.686929][T18999] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1349.694823][T18999] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1349.702514][T18999] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1349.710635][T18999] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1349.773844][ T30] ret_from_fork_asm+0x1a/0x30 [ 1349.779492][ T30] SYZFAIL: failed to send rpc fd=3 want=712 sent=0 n=-1 (errno 32: Broken pipe) [ 1349.909899][ T30] INFO: task syz-executor:22323 blocked for more than 160 seconds. [ 1349.924555][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1349.932977][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1349.942200][ T30] task:syz-executor state:D stack:21440 pid:22323 tgid:22323 ppid:22313 flags:0x20000000 [ 1349.952483][ T30] Call Trace: [ 1349.955783][ T30] [ 1349.958802][ T30] __schedule+0x1895/0x4b30 [ 1349.963375][ T30] ? __pfx___schedule+0x10/0x10 [ 1349.968458][ T30] ? __pfx_lock_release+0x10/0x10 [ 1349.973536][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1349.979187][ T30] ? schedule+0x90/0x320 [ 1349.983470][ T30] schedule+0x14b/0x320 [ 1349.987780][ T30] schedule_preempt_disabled+0x13/0x30 [ 1349.993268][ T30] __mutex_lock+0x6a7/0xd70 [ 1349.997874][ T30] ? __mutex_lock+0x52a/0xd70 [ 1350.002582][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1350.007805][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1350.012963][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1350.018629][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 1350.023788][ T30] ? __lock_acquire+0x1384/0x2050 [ 1350.029725][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1350.035414][ T30] netlink_rcv_skb+0x1e3/0x430 [ 1350.040473][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1350.046789][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1350.052276][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1350.057592][ T30] netlink_unicast+0x7f6/0x990 [ 1350.062400][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1350.067897][ T30] ? __virt_addr_valid+0x183/0x530 [ 1350.073042][ T30] ? __check_object_size+0x48e/0x900 [ 1350.078514][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 1350.083337][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1350.088753][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 1350.093722][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1350.099512][ T30] __sock_sendmsg+0x221/0x270 [ 1350.104286][ T30] __sys_sendto+0x39b/0x4f0 [ 1350.108892][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 1350.113974][ T30] ? __might_fault+0xaa/0x120 [ 1350.119353][ T30] ? fd_install+0x35c/0x5d0 [ 1350.123917][ T30] ? __might_fault+0xc6/0x120 [ 1350.129418][ T30] __se_compat_sys_socketcall+0xb18/0x1430 [ 1350.135376][ T30] ? __pfx___se_compat_sys_socketcall+0x10/0x10 [ 1350.141820][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1350.148494][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1350.153725][ T30] __do_fast_syscall_32+0xb4/0x110 [ 1350.158926][ T30] ? exc_page_fault+0x590/0x8c0 [ 1350.163814][ T30] do_fast_syscall_32+0x34/0x80 [ 1350.168766][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1350.175197][ T30] RIP: 0023:0xf7f21579 [ 1350.179384][ T30] RSP: 002b:00000000f750f850 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 1350.187942][ T30] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f750f864 [ 1350.195950][ T30] RDX: 0000000000000000 RSI: 00000000f7f14568 RDI: 00000000f73abff4 [ 1350.204247][ T30] RBP: 00000000f7f14568 R08: 0000000000000000 R09: 0000000000000000 [ 1350.212642][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1350.221919][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1350.230001][ T30] [ 1350.233073][ T30] INFO: task syz.2.4473:22331 blocked for more than 160 seconds. [ 1350.241248][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1350.248956][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.