last executing test programs: 2m42.743969595s ago: executing program 4 (id=654): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 2m41.779081412s ago: executing program 4 (id=656): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) 2m41.447990467s ago: executing program 4 (id=657): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) shutdown(r1, 0x0) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) r2 = accept$packet(r0, &(0x7f0000000000), &(0x7f0000000140)=0x14) setsockopt$packet_int(r2, 0x107, 0xb, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000300), 0xd) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x38, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) 2m38.81349542s ago: executing program 4 (id=660): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000034d20d403a092726c0c9010203da0c00000000000000000904b7000038061300"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[], 0x0) 2m35.836008894s ago: executing program 3 (id=674): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 64) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000280)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xd, 'veth1_to_batadv\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffeffa, 0x0) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$P9_RLERRORu(r8, 0x0, 0x18) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000003147df800000000fedbdf250900020073797b300000000008004100736977001400330076657468305f6d616376746170000000"], 0x38}}, 0x0) (async) io_setup(0x9, &(0x7f0000000400)) 2m35.711309396s ago: executing program 4 (id=675): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x100000}}}}]}, 0x44}}, 0x44080) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0x0, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x4000) 2m35.313775143s ago: executing program 4 (id=677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) socket$kcm(0x2, 0xa, 0x2) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 2m35.133336441s ago: executing program 3 (id=678): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) io_setup(0x104, &(0x7f0000000180)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(r1, 0x3, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r0, &(0x7f0000000000)="de", 0xfdef}]) 2m34.953275765s ago: executing program 3 (id=680): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) openat$snapshot(0xffffff9c, &(0x7f0000000880), 0x20840, 0x0) 2m34.594187879s ago: executing program 3 (id=681): syz_emit_ethernet(0x2a7, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004100)}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x1f, &(0x7f0000000280)=ANY=[@ANYBLOB="180000005e82240b00000000b5b1000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018000000e3010000000000000180000085100000faffffff185500000a000000000000000000000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet_sctp(0x2, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x0, 0x82, 0x1f) unshare(0x8020680) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400001028000701000000000000000001000000197ceec263381fe5dbb4f31bc00d2a0d7e0da08c1d5b5fe530c1e4363b2e5987a6f1c1d4c9719f5e"], 0x14}}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 2m32.695026785s ago: executing program 3 (id=687): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = open(&(0x7f0000001200)='./bus\x00', 0x400101042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0xfffffc01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0) accept(r4, &(0x7f0000000140)=@can, &(0x7f0000000200)=0x80) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='u\x80\x05fs\x00') mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@random={'os2.', 'ubifs\x00'}, &(0x7f0000000240)=""/171, 0xab) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m31.481839084s ago: executing program 3 (id=691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) socket$kcm(0x2, 0xa, 0x2) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 2m20.220732246s ago: executing program 32 (id=677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) socket$kcm(0x2, 0xa, 0x2) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 2m15.901980427s ago: executing program 33 (id=691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) socket$kcm(0x2, 0xa, 0x2) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 15.652151582s ago: executing program 0 (id=1209): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000004c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000780)='cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x7) 14.59572219s ago: executing program 0 (id=1213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0x94}}, 0x0) 14.048700364s ago: executing program 0 (id=1216): syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1}}}, 0x4) io_setup(0x2, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x98, 0x11e0, 0x0, 0xffffffff, 0xffffffff, 0x12b8, 0x12b8, 0x12b8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x3}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x189182, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r3, 0x0, &(0x7f0000772000/0x1000)=nil, 0x1000, 0x3}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x749bc}) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) preadv(r5, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/15, 0xf}], 0x1, 0x8001, 0x8) io_setup(0x401, &(0x7f00000001c0)=0x0) io_pgetevents(r6, 0x4, 0x4a6d730c7316a803, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0), 0x8}) io_setup(0xb999, &(0x7f00000002c0)) io_submit(r6, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000180)=""/195, 0xc3}], 0x2}, 0x40000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201020076d57840110f0020d7611c0203010902f40001000000000904"], 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0xb, 0x7, 0xaf, &(0x7f0000000700)}) 10.296538677s ago: executing program 1 (id=1229): socket$netlink(0x10, 0x3, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) syz_80211_join_ibss(0x0, &(0x7f0000000140)=@random="8969245434f0", 0x6, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0xa0000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x10000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 9.732939956s ago: executing program 1 (id=1231): setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000819e0ee1d6e6d4287e9ed0defc7a58d7e8aa2c649a95543f8ce8e8631430c7299f028d28a6aae179659813382afcfbea72d57e96c10393ad22b2dd79f68c2d11aa4dbf121d0b35e4bbcd18f737eaa49921574a638597318bfd715eb1584e1016c7fd37381a62d2b7a3dc05a34d50dbb6018f784d5a666bd23185f30c938c38888df431ad048318dac1a951abc213db"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4f}, {0x4}, {0xc}, {0xc, 0x9, {0x47, 0x2}}}}]}]}, 0x48}}, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000240)=0x800, 0xb4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 9.731660454s ago: executing program 6 (id=1232): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x1004, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x87}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0)={'#! ', './file0', [], 0xa, "b0bb28f4592f0355d8f341a3aa93bf1110f0caf78c56b8195602210bc3eedd4153e95c9e25342a25f7c112f1775d627ed08a6eb561ab443903c27f47"}, 0xfffffd7a) sendfile(r0, r5, &(0x7f0000000240)=0x2, 0x8001) 9.541157665s ago: executing program 5 (id=1233): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000000000000ffffffff0700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000005c0)="63ecedae46dc7634cb41c9f7b943", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$vim2m(&(0x7f0000000680), 0x10007fffffff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000340)={0x0, 0x4005, 0x1, {0x1, @win={{}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x8, 0xfffffff0, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x37], [0x7], 0x1}}, 0xfffffffd}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000240)={0x1, 0x0, &(0x7f00000001c0)=[0x0]}) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x1, 0x8b}, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000098f4bf20422cf816127dff02030109021b00010000000009045800016fe4140009051a004000000010"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000a0def772e84f359cf88dcb7200"], 0x50) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYRES64=r7], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000f0793b10d10501200009013ae7010902120001000000000904"], 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x30000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r5) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES32=r14], 0x20}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x13, r10, 0x354d7000) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x3) 8.536676102s ago: executing program 0 (id=1234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000faff0100f5ff0000000000000000000a50000000010a0b040000000000000000020000002400080000000180070001006353000014000280080004400000000508000240000000040900010073797a30"], 0x78}}, 0x4040) 6.887051216s ago: executing program 2 (id=1235): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={0x3, @null, 0xee00}) bind$ax25(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @null, 0x5}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xf, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x4000}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (fail_nth: 2) 6.749159241s ago: executing program 1 (id=1236): r0 = socket$kcm(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setregid(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) setresuid(0xee01, 0xee01, 0x0) r4 = geteuid() setresuid(r4, 0x0, r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r6 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000001c0)={0x6, {{0xa, 0x4e20, 0x889, @mcast2, 0x2}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=@newtfilter={0x6d4c, 0x2c, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xe, 0xfff1}, {0xfff2, 0xfff3}, {0x4, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @filter_kind_options=@f_fw={{0x7}, {0x1160, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_CLASSID={0x8, 0x1, {0x5}}, @TCA_FW_ACT={0x3ec, 0x4, [@m_connmark={0x178, 0xa, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf12, 0x6, 0x10000000, 0x1000, 0x4}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x7, 0xfffffffff7fffffc, 0x2, 0xffffffff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x2, 0x6, 0x8, 0x1000}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x8000, 0x20000000, 0x101, 0xb4}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2a5, 0x0, 0x8, 0x101}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x3, 0xddf, 0x34c}, 0x95a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x4, 0xc, 0x4}, 0x7ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2fd, 0x6, 0xb2f9, 0x4dc3}, 0xe}}]}, {0x66, 0x6, "4d77e9f5dbb184eee9bd983ff9ad5d0859b78796193ee0b4db5ce516eaa989181e667c985a84d3189f92a48dd6cf677b6d9d028f0130647af3f5161f6886e6afd2bb10f575fe263836d2b86add01fb3ee545220a496c6a9fc9f6d3a45794b3495637"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x154, 0x7, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0xfca1, 0x8, 0xfffffffb, 0x4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xa6}]}, {0xef, 0x6, "1aae7c7acab82c2373658c72ab8af819fb1003a61873d8e14c6c9fbff1a1db36cd4da4ffc39b610deaadd349d615524e439d4bdd961eef191be08730d084b2be324cb8f3516ee03b54c944c6fabfb2f1ad93eca15a4be5d67fd617e0553a6acd17567e2a9595f5b704fa05ba1e96de4bd4c773a6ca0d95a23308a2e1d76dff0ee1c5cc331c965c661f406cd9148bd17dde3b7b96c985a4dd2a0da331d7a4d5d7469236f23e85280ce66900a5a8c16b52b736348d3bf525914bf922d2c05253fd31c49350912752365530ab64262019035e451fa5b37f5b67b7a5910ffcea4c2ae32d8d627adbede9944bbf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x11c, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0xed, 0x6, "71c168316b1b9c89dd68cac6ff60579652866c3815c7cf81706f3ceb7e27e5a5fc76e93834a41bc2ea254a374f76d9fc1638107245285b0ea816e98ee39d1c9aa8f3f3dbe3fa34ed47479d958e121f29b99eaf1a23a4ad76ceaef74a0536d03e7e29e9363437ab88302d2ca28a315667b2ae2c0e16dfe93b17dabbd3a0aff458c771c4177440dbc6de3f5480ad785f1a10e47740902213aea690417faac0df0dcc1f51dae9c810512edf4574321f94cae0823eeac6f007e8eb504f1309aee4e21d9dd579de7a7d2e49490126d8a43885f8192442060389790ab49b4d44af15deed1ea4325309c6a387"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x6}}}}]}, @TCA_FW_POLICE={0x498, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xc5, 0x0, 0x3, 0x5, 0x1, {0x8, 0x2, 0x4, 0x2, 0x6fab, 0x54}, {0x0, 0x0, 0x6, 0x0, 0x3, 0xffff}, 0x3, 0x44e4, 0x8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1e0}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1900d031, 0xffffffffffffffff, 0x2, 0x8, 0x59, {0xf, 0x1, 0x1, 0xd0, 0xcf, 0x3}, {0x4, 0x2, 0x2f, 0x8, 0x40}, 0x1, 0x200, 0xb}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x9, 0x401, 0x8302, 0x4, 0x926e, 0xf, 0x9, 0x1, 0x0, 0x5, 0xeb, 0x6, 0x1, 0x2, 0x3, 0x6, 0x4, 0x3000, 0x1, 0x2ae1d1d9, 0x9, 0x2, 0x38000000, 0x1, 0x3, 0x0, 0x8, 0x2, 0x31a9, 0x2, 0x20000000, 0x7f, 0xe, 0x7, 0x7, 0x0, 0x3, 0x3, 0x7, 0x10001, 0xfde, 0x9, 0x6, 0xc, 0x45, 0x2, 0x10, 0x80, 0x40, 0x9, 0x28b3, 0x9, 0x2, 0x3, 0xffffff2a, 0x800, 0x2, 0x8, 0x3be, 0xff, 0x7, 0x5, 0x81, 0x0, 0x140000, 0x9, 0x3, 0x8001, 0x6, 0x5, 0x3, 0x3, 0x8, 0x1, 0x100, 0x3, 0xbfe, 0x6, 0x6, 0x6, 0x2, 0x400, 0x1, 0x823, 0x3, 0xd, 0x55, 0x5, 0x9, 0x9, 0x74, 0x6, 0x5aea, 0x7, 0xa09, 0x7, 0x5, 0x7f, 0x485a, 0x0, 0x168f26e3, 0xc, 0x7f, 0x6, 0x80000001, 0x400, 0x4, 0xb, 0xfffffff8, 0x1, 0x8d2, 0x5, 0x2, 0x3, 0xbbe3, 0x101, 0x7, 0x6, 0x0, 0x40b3, 0x7fff, 0x8, 0x0, 0xffffffff, 0x9, 0xff, 0xffffffff, 0x20, 0x4, 0xa, 0x3, 0x9, 0x80000000, 0x8001, 0x8, 0xa, 0x5, 0x6, 0x4, 0x5, 0xfff, 0x7, 0x9, 0xffffff3b, 0x81, 0xa, 0x10001, 0x9, 0x7, 0x8, 0x4, 0x2, 0x1ff, 0x0, 0xffffffb5, 0x3, 0x1ff, 0x8, 0x7, 0x6, 0x3, 0x10000, 0x62, 0x3, 0x8, 0x8, 0xfffffff8, 0x4, 0xb, 0x5, 0x0, 0xfffffff7, 0x7fff000, 0x5, 0x8, 0x0, 0x1, 0xfffffff7, 0x3, 0x81, 0x2eb2, 0x8, 0xeed, 0x5, 0x6, 0x8, 0x7, 0x5, 0x4, 0x1ff, 0x3c3, 0x4, 0x0, 0xfff, 0xb9, 0x2, 0xff, 0x8, 0x4e, 0x1, 0x7, 0x8, 0x9, 0x6, 0x3, 0x4, 0x7, 0x1, 0x7, 0x27b, 0x456, 0x4, 0x8, 0xa2a, 0x4, 0x6, 0xa, 0x7, 0xb843, 0x1, 0xffffe000, 0x2, 0x0, 0x3, 0x400, 0x1ff, 0x4, 0x3ff, 0xa, 0x5, 0xffff, 0x7, 0x6, 0xffffffff, 0x423, 0x0, 0xe, 0x4e9, 0xff, 0xa12, 0xa13, 0x6, 0xfffffff8, 0x4, 0x0, 0x10, 0x2, 0x3ff, 0x80, 0x1, 0x3, 0x8, 0x6f81, 0x8, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}, @TCA_FW_ACT={0x800, 0x4, [@m_ctinfo={0xdc, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0xa5, 0x6, "00fbc8f56b4d23f7d3943f83a8b598c9e938018886252f4142f5bb802b77e2d9ad400d581c175963b0e9edf3be7e8e0a43f325c90ca5718bdcaebed471c9d23379f3a13c5e5766c0ac8c1ba3051d386fe862aafa8e6b770bbbcb21e52ab5facdc963194758b8a3bcf5721867f1049151515aaee4922865bf4b04686fb01a44cbc0926fd5dc1caea0f3c1e882a97956032ee8bb330a5a2552b5b9245df93703ab4f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0x178, 0x5, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x3, 0x6, 0x100, 0x7fffffff}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "48fec0991fa4c8c44cb0d1aebda59564"}, @TCA_CT_PARMS={0x18, 0x1, {0xddb, 0xfffffffc, 0x6, 0x0, 0x8}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xffffffff}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1}, @TCA_CT_MARK={0x8, 0x5, 0x3ff}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0xc5, 0x6, "5d153813361f819e50e998c3a0ef2aa347a4cac7294359782770db2f2337abcae11fa401041ff07c277688618db7d0e0aeecf41ad58f86207ba08ed5309f7fb8e9cf465407faf31138c7a90b067d2cde3bfe68ee972a9d63e4d206766a3bea2d327e2b11335f8b89dd2e35c247d77d128b098f97df178eef7e29bcc2b1ae7bbb2d05220fcc239b220c7d221d4cf5e7cf9461219558fe88ab6cd3ace9c02e8ebcfd481e0e2bf6aff7aae77d3525d0b8d5de9c344589b81eeb898242948e1c6d517b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x13c, 0xe, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x10000000, 0x7fff, 0x5, 0x30, {0xf, 0x2, 0x7, 0x1, 0x0, 0x31f2}, {0xa, 0x0, 0xb, 0x317b, 0x2, 0x7}, 0x3, 0x57}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE64={0xc}]]}, {0xac, 0x6, "4964884dccac0d65337902ed1d18ad983a5ff0fb2d0b5325f935e3e713109d0ef6e549fa0d3f9b302c6590ffabf43bb879a1be77f34369d65445c42891d7da27f91325aeca339b019033de5e86194bd45fd648d41b910e7eb77a891f752c7c334b54ef6b8893126cf5e3845b8440b4d5badd6ca4062c3839082cb9846159d2e2313a7e8adacc4a801bacd527aaac7daba16b8a4c1edc134fc14b1c8646c880f1881860782672762a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x50, 0x11, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x24, 0x6, "c32b01a69f8e58b29ee0b8358cac1baf3cec964d5f6dae4ac08cc4c86805dd54"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x168, 0x13, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xca22}, @TCA_IFE_TYPE={0x6, 0x5, 0x2f}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_PRIO={0x8, 0x3, @val=0x5435c844}, @IFE_META_PRIO={0x8, 0x3, @val=0xffffc0e7}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7fff}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffffd}]}]}, {0xdd, 0x6, "121037a4f44c88b6e78e9d6657e32246da7f51e32a3975351e15033b4991e97be3e3a5978f9c88c4c7c57e49711f8273cd5ff661043d44daa2bcbb435136d4131b4335cf7690c109c1eb9cdc1341391414b1cffcdba5c2acd16b0197773310818b2c6dc03235e6c74deff62c66158d2bc8fe261cd985f6d53fcd6a6f3cb5baa2626dcd424bee6f3f49da400b69094fb1ef638ae2ef6ca70f0b5857f8f202674bc641fbc51afffc6ec70dbccaa1529fa8917f5ce371aedc18c00ab55abfe114aebb54d8b59d6422c13e9a89e3abb3584d9583b75843517a759c"}, {0xc}, {0xc, 0x8, {0x0, 0x6}}}}, @m_bpf={0x108, 0x18, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x9, 0xc9, 0x2, 0xffffffff}, {0xf, 0x4, 0x8, 0x5}, {0x3, 0xc, 0x9, 0xb}, {0x1ff, 0x5, 0x0, 0x5}, {0x1, 0x6, 0x9, 0x2}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0xa9, 0x6, "8de3a50db2a3375c8e5a33c849bcfb8bd524d07fa64b8b8c458ed6a90b8cad01177bb552c37439d3254a5c26270b2f0bd0d596435b3067d73ae11924661282dfb84bb2dff58399bbca756d39459d700f5a575d33d1496203e5b55993e0dda28ab2d886511ca38aeabc4eb4df27028b6814fc4771ab651f5680ddd8aac79bd8a974eddc3fc88f8a1e20ae8a88d444dcff920d8489302aa633c0256b2f8c6a82efe118b1358f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x1ac, 0x17, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0xb, 0x0, 0x4, 0x3e54}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x40, 0x1, 0x7, 0xe7bb, 0x3}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x6, 0x1, 0x0, 0x7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x7, 0x4, 0x254, 0x7fff}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x5, 0x5, 0x5, 0x3}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x101, 0x3, 0x7, 0xffff}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf31, 0xa0, 0x3, 0xa, 0x1}, 0x3, r7}}]}, {0x9d, 0x6, "a3e62876ea86efdc716c38f3b1fd658b118a6f3c52c60bf9d13b9e1b2b716d062236f8bc7cb800bd611853eeb4adbd26a3988051aa7b4f4967f00f4dbe006fc358a2ffd39ac57d0f38ab1cadfc80dae3cf716deae1020bd0261824b8c8e89565a142b303f33659c71750fcc5e2b5163831141ce93717ea92070523034a35620fdcd8244b53ad0643dd73836c21813fd11efe52b1344463d723"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FW_ACT={0xbc, 0x4, [@m_ct={0xb8, 0x13, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010102}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}]}, {0x4b, 0x6, "3e8d0636147ece3d54d29550bc8b0826be9319982e618b7fba1d701354040abaa3f23ec08de6c8e54bc93f89a7c9c7f7566418d34e06881c08d07b1a5d510d61158cabd1e0394c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x5}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x5b98, 0x2, [@TCA_MATCHALL_ACT={0x5b8c, 0x2, [@m_pedit={0x3bb8, 0x19, 0x0, 0x0, {{0xa}, {0x3b34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x5, 0xfffffff5, 0x10000000, 0x6, 0x6}, 0x2, 0x6, [{0x1, 0x6c237af3, 0xc50, 0x3, 0x7fff, 0x9}, {0x6, 0x6, 0xc567, 0x80000001, 0x1, 0x2}, {0x0, 0x0, 0x8, 0x9, 0x5, 0x8}, {0x9, 0xfffffff9, 0x3, 0x5, 0x9, 0x5}, {0x6, 0x7, 0xe, 0x3, 0x5, 0xbed}, {0x3, 0x80, 0x7, 0x8, 0x8, 0x7}, {0x401, 0x289, 0x5, 0x3, 0x40, 0xb}]}, [{0x8, 0x7412, 0x5, 0x2, 0x2d0, 0x2}, {0x2, 0x10001, 0x80000000, 0x7, 0x4, 0x1}, {0x3ff, 0x10001, 0x3ae, 0x2, 0x6, 0x3}, {0x1, 0x53d50, 0x100, 0xa, 0x4058, 0x101}, {0x5, 0x0, 0x7ff, 0x8aca, 0x401, 0x525b}, {0x8000, 0x0, 0x8, 0xc3, 0x6, 0x7fffffff}, {0x5a, 0x2, 0x4, 0x10, 0x7ff, 0x6}, {0x8, 0x5, 0x2, 0x2e407038, 0x3, 0xd}, {0x2, 0x5, 0x1, 0x6, 0x3, 0x3}, {0x5, 0x3, 0x9, 0x7ff, 0x2}, {0x1d33, 0x4, 0x589, 0x1, 0x10000, 0x2}, {0x80, 0x80, 0x1, 0x4, 0xc, 0x6}, {0x9, 0x0, 0x5, 0xe0, 0xbd, 0xfffffa02}, {0x4e3, 0x6, 0x9, 0x1, 0x2, 0xfba}, {0x62fc, 0x4, 0x73, 0x3, 0x7, 0x3}, {0x33cb, 0x10, 0x4, 0x5, 0x7, 0x7d47}, {0x3, 0x10000, 0x1, 0x12, 0xb, 0x3}, {0x1, 0x37, 0x6, 0x0, 0x800, 0xff9c}, {0x1, 0xfffffff9, 0x200, 0x0, 0x0, 0x5}, {0x8, 0x1, 0x7f, 0x9, 0x8, 0xfffffff7}, {0xfa5, 0x3475aba0, 0x3b, 0x2f512952, 0x9, 0x4}, {0x0, 0x297, 0x8, 0x8, 0x120000, 0x2}, {0xf9ee, 0x1, 0x2, 0x9, 0xbc, 0x6}, {0x6, 0xb07, 0x4, 0x8, 0x40, 0x3}, {0xffff, 0x7, 0x6a04, 0x1, 0xfffffffc, 0x7fff}, {0x2, 0x0, 0x1, 0x9, 0xfffffffc, 0x8}, {0x6, 0x100, 0xd, 0x10, 0x3, 0x7ff}, {0xffffffff, 0xfdc, 0x1, 0x1000, 0x800, 0x81}, {0xffffd0bd, 0x200, 0x9, 0xb, 0x8, 0x6}, {0x8, 0x80000000, 0x1, 0x5, 0x10000, 0xf}, {0x8, 0x9, 0x6, 0x400, 0xf7bb, 0x40}, {0x9, 0x1, 0x3, 0x44, 0xed40, 0x401}, {0xa0b, 0x8001, 0x10, 0x46d, 0x10001, 0x6000}, {0x1, 0x0, 0x9, 0xff, 0x7, 0x3}, {0x7, 0x0, 0x0, 0xfff, 0x6, 0x800}, {0x1f88, 0x7fff, 0x10000, 0x10000, 0x400, 0x7}, {0xc61, 0x4, 0x2, 0x6, 0x7, 0x5}, {0x0, 0x7ff, 0x8000, 0x0, 0x4, 0x100}, {0x3, 0x7, 0x8514, 0x40, 0x7fffffff, 0xfffffffb}, {0x60cd, 0xe, 0x5, 0xcd, 0x3, 0xc83}, {0x5, 0x2, 0x2, 0x4, 0x3, 0x3}, {0xc, 0x3, 0x7ff, 0x400, 0x2, 0xffff}, {0x8001, 0x3, 0x3, 0x9, 0x0, 0x9}, {0x4, 0x7, 0x81, 0x1, 0x6, 0x7}, {0xffffffff, 0x1, 0xa, 0x7, 0x670d, 0x8}, {0x5, 0x1, 0x81, 0x7, 0xa51, 0x6}, {0xffff5c0c, 0x3, 0x3, 0x1ff, 0x8001}, {0x7, 0x5, 0x2, 0x1, 0x1000, 0x4}, {0x0, 0xfffffff1, 0xfffffffd, 0x3, 0x2, 0xc70}, {0x3, 0x0, 0xe5a7, 0x1, 0x10, 0xfffffffc}, {0x2, 0x7, 0xffffffff, 0x9, 0xfff, 0x7}, {0x2, 0x3, 0xb5ba, 0x8, 0x0, 0x5}, {0xf9ac, 0x0, 0x7, 0x9, 0x5, 0x8}, {0x2, 0x9, 0x4, 0x8, 0x0, 0xb2f}, {0x2, 0x81, 0x0, 0x209, 0xca7, 0x26}, {0x1, 0x8, 0x7, 0x81, 0x590a, 0x7}, {0x200, 0x7, 0x2862, 0x6, 0x0, 0xc}, {0x101, 0xf, 0x3ff, 0x1, 0x0, 0x7}, {0x2, 0x1c6, 0x2, 0x6d0c, 0x5, 0x9ff}, {0x16a, 0x7, 0x9, 0x2, 0x8, 0x7}, {0x9, 0xa, 0xfffffffd, 0x6, 0x5, 0x66aa9629}, {0xa, 0x0, 0x1ff, 0xd16, 0x4, 0x7f}, {0x7fffffff, 0x8, 0x0, 0x850, 0x1, 0xfffffffb}, {0x7f, 0x4, 0x5, 0x0, 0xf, 0x3893}, {0x0, 0x6, 0x2, 0x1, 0x4, 0x9}, {0xd3b, 0x28, 0x0, 0x9, 0xb, 0x7fff}, {0x3, 0x4d32, 0x3ff, 0x6, 0x0, 0x9}, {0x1, 0x0, 0x0, 0x4, 0x4, 0x3}, {0x5, 0x4, 0x7, 0x23e1, 0x8, 0x5}, {0x80000000, 0x0, 0xffff, 0x6, 0x5, 0x8}, {0x7, 0x80000000, 0xf, 0x6, 0x6, 0x13}, {0xffffffff, 0xc, 0x6, 0x9, 0x3, 0xb10}, {0x1, 0x0, 0x4, 0x100, 0x2, 0xd}, {0xa, 0x8, 0x401, 0x5, 0x1, 0x9}, {0x9, 0x7, 0xe39a, 0x1, 0xfff, 0x2685eabc}, {0x9, 0x6, 0x0, 0x9, 0xffff8001, 0x8}, {0xffffffc0, 0x0, 0x81, 0x7ff, 0x8, 0x3}, {0x2, 0x0, 0x2, 0x1, 0x9100, 0x5}, {0xffc8, 0x8, 0x7, 0x80000000, 0x5}, {0xe, 0x59, 0xffffffff, 0x662a, 0xc38d1e4, 0x6}, {0x18000, 0x1, 0xc, 0xfffffff9, 0x2}, {0xa, 0x81f, 0x6, 0x4, 0xce84}, {0x7, 0x3, 0x10, 0x7, 0x1000, 0x5}, {0x1, 0xaf, 0x38d, 0x20, 0xfffffffc, 0x2}, {0x3, 0x4, 0x4, 0x5, 0x10001, 0xb4eb}, {0x9, 0xb, 0x5, 0x2, 0xb0, 0x7ff}, {0x4, 0x3, 0x7, 0x8, 0x6, 0xff}, {0xb2d, 0xffffffff, 0x9, 0x8, 0x6, 0x8}, {0x1, 0x6, 0x0, 0x5, 0x5, 0x3}, {0x7, 0x6, 0xffff9f00, 0x0, 0x0, 0x3}, {0x0, 0xfffffffa, 0x5, 0x2, 0xf22, 0x9}, {0x6, 0x10001, 0x9, 0xd5e, 0x5, 0x10001}, {0x101, 0x5, 0x86d7, 0x7, 0x4, 0xd400}, {0x3ff, 0x8, 0x9, 0x6, 0x10001, 0x800}, {0x2, 0x5a, 0xd, 0x7, 0x9, 0xc}, {0x1, 0x9, 0xffffffff, 0x0, 0xf1, 0x80000001}, {0x80, 0x5, 0xf, 0x10001, 0x7, 0x6}, {0x1, 0x101, 0xc00000, 0xfffffffe, 0x8, 0x9}, {0x9, 0x3, 0x0, 0xffff8001, 0x5, 0xfffffffe}, {0x8, 0x1, 0x96, 0x7, 0x6, 0x6}, {0x6, 0x4, 0x6, 0x1, 0x20000000, 0x1}, {0x1, 0x9, 0x8, 0x6, 0x1, 0x10001}, {0xfffffc01, 0xfffffff8, 0xffffffff, 0xffffff20, 0x6, 0x4a}, {0x2, 0x49c, 0x1709, 0x9, 0x7, 0x9}, {0x8, 0x6, 0x4, 0x314, 0x7, 0x5}, {0xf4b5, 0x6, 0x5, 0x6, 0xffff, 0x10}, {0x3, 0x9, 0x1, 0x7, 0x6, 0xfffffffd}, {0x10001, 0xf, 0x2, 0xd, 0x5, 0x3}, {0x9, 0x0, 0x7, 0x4, 0x9, 0xfffffff9}, {0x10001, 0x410a765e, 0x7, 0xde5a, 0x6, 0x9}, {0x8, 0x300000, 0x6, 0x8, 0x9, 0x3}, {0xc15, 0xc, 0x9, 0x4, 0x8, 0x6}, {0xf9cf, 0x4, 0x5, 0x82f, 0x4, 0x98f}, {0x80000001, 0x7f, 0xcf60, 0x0, 0x4, 0x8}, {0x5, 0x0, 0x9, 0x4, 0x0, 0x401}, {0x100, 0xc002, 0x3, 0x3, 0x6, 0x47c29cdf}, {0x9, 0x6, 0x4, 0xfffffffb, 0xb, 0xfffffff9}, {0x80, 0x4, 0xfffffffa, 0x7ff, 0xe, 0xd76}, {0x400, 0x80, 0x80, 0x4, 0x19, 0x101}, {0x10000, 0x83efc5c4, 0x7, 0x8f, 0x10000, 0x10}, {0x1, 0x1, 0x2ec3, 0xe5fd202, 0x5, 0x3}, {0x9, 0x4, 0x4, 0x9, 0x1000, 0x8}, {0x7, 0x16ff799c, 0x6, 0x5, 0x195a, 0x5}, {0x1, 0x2, 0x3, 0x6, 0x667a, 0xa}, {0x94d, 0xb, 0x6, 0x5, 0x6, 0xfff}, {0x5, 0x2, 0xee7, 0x0, 0xdc0, 0x2}, {0x2, 0xfef, 0x4, 0x3, 0x9, 0x606593e9}, {0x10000, 0x5, 0x52b, 0xffffffff, 0xf, 0x6}], [{}, {0x3}, {0x3, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0xad29fd1634956bd7}, {0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2}, {0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x8b3c397c04af1be1}, {0x2}, {}, {0x4}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x5f527b5f19e306b3}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x5}, {}, {0x5, 0x3}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {}, {0x4}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x3}, {0x1e4f4141965a0bf6}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x6, 0x1}, {0x5}, {0x1}, {}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x0, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x8, 0x6, 0x4, 0x2, 0xc}, 0x2, 0xf, [{0x37, 0x0, 0x4, 0x8718, 0x7, 0x5}, {0xff, 0x2, 0xd058, 0x4, 0x1, 0x5}]}, [{0x5, 0x840, 0x7, 0x24, 0x0, 0x9}, {0x10000, 0x10000, 0x5, 0x6, 0x0, 0x2}, {0x6, 0x206, 0x1, 0x9, 0x2, 0x4}, {0x0, 0x2, 0x5, 0x858, 0x3, 0x4}, {0xfffffa62, 0xffff, 0x7f, 0x8, 0x7fff, 0xff}, {0xa013, 0x9, 0x7, 0x0, 0x195, 0x6}, {0x8, 0x1, 0xde4c, 0x8000, 0x3, 0x9}, {0x5, 0x3, 0x80000000, 0x1, 0x3}, {0x903, 0x7, 0xf2, 0x7, 0x5, 0x42}, {0x1, 0x8, 0x3, 0x5, 0x3, 0xca}, {0x4, 0x5, 0x400, 0x5, 0x4, 0xfffffffa}, {0x0, 0xfff, 0x4, 0x2, 0x2, 0x1800000}, {0x5, 0x9, 0x1, 0x401, 0x7, 0x8}, {0x0, 0x1, 0xfffffffb, 0xd, 0x6, 0x7}, {0x2, 0x9, 0x5, 0x7fff, 0x4, 0x2}, {0xd, 0x8, 0x1, 0x0, 0x7, 0x7ff}, {0x1, 0xfffffffd, 0x5, 0x391b5245, 0x10}, {0x7b3872d1, 0x6, 0x8000, 0x1, 0x8, 0x3}, {0x0, 0x6, 0x3, 0x0, 0x10001, 0xff}, {0x7, 0x5, 0x7, 0x5a2d2f4a, 0xfff, 0x4}, {0xfffffff8, 0x8, 0x200, 0x8000000, 0x3, 0x4}, {0xda, 0xc, 0x6, 0x9a, 0x9, 0x7}, {0xfff, 0x7, 0xf89, 0xff, 0x8, 0x80000000}, {0x2, 0x8, 0x4, 0x55cee5a9, 0x5, 0x2}, {0x1ff, 0x4, 0x1, 0x7f, 0x7, 0x7}, {0x9, 0xf4f, 0x7f, 0x7, 0x5, 0x7}, {0x3, 0xd, 0x7, 0xb90, 0x1ff, 0x74}, {0x7, 0x6, 0xffffff7f, 0x3c5, 0x6, 0x1}, {0xbd6, 0x0, 0x10000, 0xa, 0x3, 0x9}, {0x0, 0x8, 0x0, 0x0, 0x101, 0x2}, {0xaa38, 0x2, 0x7, 0x8, 0xc, 0x5}, {0xff, 0x0, 0x53, 0x9d, 0x2, 0x7}, {0x1, 0x9, 0xa, 0x8001, 0x3, 0x7}, {0x8, 0xae, 0x3, 0x401, 0x0, 0x401}, {0x3ff, 0x1, 0x4, 0xffff, 0x70b, 0x822d}, {0xff, 0x2, 0x700, 0x7, 0x8, 0x1}, {0x8, 0x800, 0x1, 0x6, 0x7, 0x8}, {0xb, 0xffffffff, 0x5, 0x8, 0x3, 0x8}, {0x1, 0x40, 0x0, 0x0, 0x1c0000, 0x6}, {0x5d7, 0x8, 0x8, 0x6, 0x80, 0xffff}, {0xffffffff, 0x5, 0x278, 0xfffffffb, 0x9, 0x1157}, {0xc, 0x7fffffff, 0x6, 0x6, 0x8000000, 0x9}, {0x4, 0x0, 0xfffffffe, 0x5, 0x7000000, 0x9}, {0xa, 0x9, 0x1, 0xfffff010, 0xfffffffc, 0x3}, {0x3, 0xd1, 0xfffffffa, 0xe8, 0xfffffffb, 0xa143}, {0xa, 0x1, 0x6, 0x6, 0x8, 0x10000}, {0x7ff, 0x10000, 0xfffffff9, 0x6, 0x101, 0x9}, {0x9, 0x0, 0x6, 0x7fff, 0xfffff870, 0x7}, {0xeda, 0x6, 0x2, 0xfffffff7, 0xa865, 0x23}, {0x2c, 0x10000, 0x81, 0x8, 0x8001, 0xfff}, {0x4, 0xfffffffe, 0x40, 0x4, 0x2, 0x6}, {0x8, 0x0, 0xde3, 0x0, 0x59, 0x2}, {0x10, 0x3, 0x5, 0x5, 0xe, 0x6}, {0x3, 0x8, 0x4, 0x4, 0xbd0, 0xd90e}, {0x2, 0x2f, 0x200, 0x5, 0xd, 0xd}, {0x8, 0x3e, 0x2, 0x1000, 0xffff8000, 0x401}, {0x5, 0x4, 0x1, 0x7, 0x0, 0x3}, {0x3, 0x9, 0xfffffffc, 0x1, 0x80000001, 0x9}, {0xdb, 0x7, 0x2, 0x47, 0x7}, {0x2, 0xf7, 0xffffffff, 0xffffde6b, 0x5, 0x8001}, {0x92, 0x5, 0x6, 0xf, 0xfffffff8, 0x3}, {0x2, 0xf, 0xd04, 0x1ff, 0x10, 0xe}, {0x6, 0x8, 0x2, 0x6, 0x7, 0x3}, {0x1000, 0xa, 0x3ff, 0x2, 0x9, 0xffffffff}, {0xffff7f66, 0x7, 0x401, 0x1, 0x3, 0xa}, {0x3, 0x4, 0x3, 0x0, 0x80000000, 0x1}, {0xa3f, 0x7fffffff, 0x1148, 0x4, 0x1, 0xf}, {0x1000, 0xe, 0x3, 0x9, 0x8, 0x9}, {0x1, 0xfffffff9, 0x7, 0x4fc2b38, 0x1, 0x5}, {0xffffffff, 0x1, 0xffffffff, 0x4, 0x1, 0xf41c}, {0x4, 0x0, 0x4, 0x1, 0x0, 0x1}, {0x8590, 0x0, 0x7, 0x82e1, 0xffffffff, 0x9}, {0xd3d0, 0x27, 0x4, 0x500, 0x2, 0x3}, {0xa, 0x7ff, 0x26, 0x6, 0x200, 0x2}, {0x3, 0x7, 0x8, 0x1, 0x0, 0x1}, {0x5, 0xfff, 0x5, 0x3b7, 0x61, 0x87fe}, {0xc, 0x7fffffff, 0x7, 0x1, 0xfffff801, 0x2}, {0x8, 0x5, 0xffff, 0x43, 0x2, 0x5}, {0x7, 0x200, 0xb, 0x7, 0x8001, 0x400}, {0x3, 0x8, 0x12f0, 0x9e, 0x4, 0x200}, {0xfffffffd, 0x1, 0x9, 0x2, 0x8, 0x2}, {0x1, 0x9, 0x4, 0x5, 0x8, 0x1}, {0x3, 0x4, 0x3, 0x4, 0xe5, 0xefe9}, {0x7ff, 0x3, 0x5, 0x80, 0x9, 0xffffffff}, {0x8, 0x7, 0xd, 0x7, 0x2, 0x4}, {0x9, 0xffffffcd, 0xfffffff9, 0x4, 0x7e, 0x2}, {0x7, 0x100, 0xa, 0x400, 0x6, 0x9}, {0x72d19707, 0x6, 0x1, 0x8001, 0x79, 0x1}, {0x7fffffff, 0x8, 0xfffffff7, 0x0, 0x1c6, 0x7}, {0x4, 0x6, 0x7f, 0x1, 0x0, 0x4}, {0x2, 0x7, 0xc8, 0x3, 0x3, 0x6}, {0x4, 0x8, 0xed, 0x7, 0x5, 0x6}, {0x101, 0x7, 0xfffffff7, 0xffffff4b, 0x2, 0x7}, {0x9, 0x1, 0x1, 0x4, 0x3, 0x2}, {0xffffffff, 0x9, 0x2, 0xb5b2, 0x1, 0x5}, {0x5, 0x4, 0x7ff, 0x34beb62d, 0x6, 0x6}, {0xfffffffd, 0x14, 0x2, 0x8, 0x1, 0x120}, {0x69, 0x0, 0x5, 0x1, 0x6c, 0x6}, {0x7ff, 0x7, 0x6, 0x1, 0x3}, {0x1ff, 0xf, 0x2, 0x5, 0xfd6, 0x7}, {0x6, 0x400, 0xffff1b0e, 0x7fffffff, 0x0, 0x5}, {0x7f, 0x1, 0x2, 0x7fff, 0xffff, 0xad}, {0x7, 0x6, 0x10000, 0xb, 0x6, 0xe}, {0x4, 0x7, 0x8, 0x1ff, 0x6, 0x800}, {0x6, 0x8, 0x2, 0x6, 0x6, 0xffffffff}, {0x9, 0x6, 0x72, 0x0, 0x401, 0x9}, {0x8e1, 0x2, 0xb, 0x25, 0xa}, {0x0, 0x0, 0xfffffffe, 0x4, 0x5, 0x1}, {0x7, 0x419, 0xffff0f44, 0x2ce19c65, 0x3ff}, {0x6, 0x2, 0x7, 0xd6, 0x1, 0x8}, {0x8, 0x9, 0x4, 0x7fffffff, 0x10, 0x6}, {0x2, 0x2, 0xd0, 0x592e05d7, 0x9, 0x8}, {0x6, 0x232000, 0xe, 0x1, 0xffff8001, 0x5}, {0xa545, 0x2, 0x4, 0x1, 0x10000, 0x3}, {0x3ff, 0x2, 0x4, 0x5, 0x5, 0xf}, {0x3ff, 0x8, 0x8, 0x5, 0x5}, {0x6, 0x4, 0x8, 0x1, 0x7, 0x3}, {0x8, 0x5, 0x80000000, 0x1, 0xfffffff5, 0x5}, {0x6, 0x5, 0x1, 0x5, 0x101, 0x4}, {0xfffff9dc, 0x80, 0x80000001, 0x8, 0x9}, {0x6, 0xc, 0x9, 0xec7, 0xfffffff8, 0x5685}, {0x43bd, 0xb7, 0x1, 0x5, 0x2, 0x4}, {0x1, 0x470, 0x0, 0x3, 0x0, 0x401}, {0x1, 0x80000000, 0xffffffff, 0x93, 0x101, 0x8}, {0x1, 0x100, 0x400, 0x8, 0x7ff, 0x8}, {0x6, 0x1000, 0x3ff, 0x3ff, 0x7, 0x4}, {0x80, 0x800, 0x80000001, 0x7fff, 0x5, 0x8}, {0x18000000, 0x0, 0x2, 0x7ff, 0x6511, 0x7fffffff}], [{0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x4}, {0x5}, {0x5}, {0x3, 0x1}, {}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x2}, {0x3, 0xbc945fa37581007c}, {0x2}, {0x7, 0x1}, {0x6, 0x1}, {0x2}, {0x1}, {0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x60dab1e9ca45f8ab}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}, {0x2}, {0x3}, {0x3}, {0x2}, {0x0, 0x1}, {0x3}, {0x5}, {0x4}, {0x3}, {0x5, 0x1}, {0x5}, {0x989809dd36472820, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}]}}, @TCA_PEDIT_KEYS_EX={0xf4, 0x5, 0x0, 0x1, [{0x4}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0x80, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x8001, 0x9, 0x1, 0x1, 0x5}, 0x3, 0x0, [{0x8, 0x0, 0x5, 0x800, 0xf, 0x9}, {0x4, 0x5, 0x4, 0x8, 0x0, 0xf}, {0x1, 0x2, 0xffff, 0x8, 0xcbf, 0x2}, {0x8, 0x10, 0x2, 0x7, 0x3bf, 0x5}]}, [{0xe, 0x0, 0x5, 0x0, 0xdd, 0x1}, {0x7, 0x80, 0xfff, 0xdf4, 0xc21e, 0x2}, {0x2, 0x5, 0x4, 0x0, 0x0, 0x5}, {0x1, 0x9, 0x9, 0xfff, 0x4, 0x101}, {0xff, 0x9, 0xf, 0x1, 0x7, 0x8}, {0x4, 0x8, 0x8, 0x0, 0x0, 0x6}, {0x3, 0x0, 0x843, 0x0, 0xffffffa9, 0x6}, {0x6, 0x1, 0x7f, 0x1, 0x80000000, 0x2}, {0x9, 0xfffff3b1, 0x7fffffff, 0x5, 0x7fffffff, 0xd92}, {0x2, 0x1e, 0xffff9aaf, 0x2, 0x4, 0x7}, {0x1000, 0x6, 0x200, 0x9, 0x3, 0x5}, {0x1000, 0x6, 0x9, 0x9, 0xf, 0x9}, {0x6de7, 0xfb, 0xa82b, 0x8, 0x8, 0xa1d}, {0x7f8f252c, 0x0, 0x8, 0x401, 0x0, 0xffffffff}, {0x2, 0x3, 0x8001, 0x9, 0x5, 0xe}, {0xff, 0x3c05c573, 0x6, 0x1, 0x3, 0x7}, {0x9, 0x0, 0x2, 0x1, 0x7, 0x10}, {0x5, 0x101, 0x3, 0x5, 0x4ff, 0xfffffffe}, {0xe0, 0x8000, 0xd2, 0x9, 0x183, 0x8}, {0x0, 0x7, 0xfffff26b, 0x9, 0xffffffd8, 0x8}, {0x5, 0x7, 0x0, 0x5, 0x1, 0x8}, {0x3, 0x9, 0x1d79e2a2, 0x944, 0x5, 0xb726}, {0xfffffffd, 0x0, 0xfffffffd, 0x3, 0x8}, {0x227, 0x7, 0x2eba, 0x81, 0x2, 0xc5}, {0x1c000000, 0x401, 0x0, 0xf3, 0x7ff, 0x6}, {0x5a, 0x9, 0x7, 0x2, 0x44e07da8, 0x80000001}, {0x0, 0xfff, 0x3ee07903, 0x8, 0x4, 0x2a95}, {0x8, 0x3, 0xc, 0x4b, 0x39400, 0x9d9}, {0x3, 0x34f366ef, 0xd000, 0x5, 0x2000}, {0x1, 0x8, 0x3, 0x1, 0x8, 0x9}, {0x4, 0x5, 0x49, 0x1, 0x2, 0x9}, {0x4b1c64ed, 0x20000, 0x8, 0x9, 0x7, 0xf898}, {0x101, 0xa3e, 0x6, 0x3, 0x1}, {0x8, 0x400, 0x3, 0x1, 0x2, 0xfa}, {0x4, 0x2, 0xffffff5c, 0xd, 0x8, 0x9}, {0xfffff72e, 0x8, 0x8, 0xfc66, 0x4, 0x4}, {0xffff, 0x9, 0x5, 0x4, 0x8, 0x8}, {0x6, 0xa6, 0xfffffffd, 0x1, 0x6, 0x5}, {0x3, 0x8, 0x262, 0x3, 0x3, 0x800}, {0x2, 0x6, 0x10, 0xabd, 0x7ff, 0x4}, {0x2, 0x3aee1994, 0x4, 0x5, 0x1, 0xe59}, {0xc7, 0x0, 0x2, 0x8, 0x8, 0x7}, {0xfff, 0xa, 0x40, 0x3, 0x2, 0x81}, {0xffff, 0xff00000, 0x4, 0x3, 0x3, 0x8}, {0xa0, 0x4, 0x9, 0x9, 0x80000000}, {0x133, 0x80, 0x9, 0xfffffc4a, 0x5, 0xfffffe01}, {0x4, 0x3, 0x9, 0x10001, 0x3, 0x1}, {0xdc0, 0x0, 0x3, 0x3, 0x2, 0x9}, {0x8000, 0x1, 0x2301, 0x6, 0x1, 0x1}, {0x7c, 0x9, 0x81, 0xc, 0x9, 0x1}, {0x3ff, 0x0, 0x1, 0x6, 0x8, 0x80}, {0x1, 0x10001, 0xb, 0x5, 0x3, 0x8}, {0xf0, 0xd7, 0x5, 0x8, 0x7, 0x7}, {0xf, 0x3436b0ff, 0x80, 0xb, 0xfffffff7, 0x1}, {0xfffffff1, 0x2, 0xdf, 0x10001, 0x217, 0x7ff}, {0x9, 0xfe81, 0xfff, 0x6, 0x2, 0x3}, {0x1000, 0xa13, 0xfffff045, 0x40, 0x0, 0x3}, {0xffff8001, 0x7, 0x6, 0x8000, 0x101, 0x9}, {0x9, 0x5, 0x2, 0xd, 0x800, 0x7}, {0x0, 0x0, 0x5, 0x9, 0x5, 0x4}, {0x7fffffff, 0x9, 0x5, 0x81, 0x7fff, 0x3}, {0x2, 0x1ca, 0xfb3, 0x80, 0x8000, 0x101}, {0x908c, 0x4, 0xf, 0xf916, 0x2, 0xffffffff}, {0xd, 0x9e, 0x6, 0x0, 0xc2, 0x2}, {0x0, 0xf6d, 0x100, 0xd, 0x400, 0x4}, {0x7, 0x40, 0xd, 0x3, 0x7, 0xc}, {0x6, 0xfffeffff, 0x401, 0x611c, 0x6, 0xdca2}, {0x9, 0x4, 0x0, 0x4, 0x3, 0x1}, {0x8, 0x8, 0x1, 0x4, 0x0, 0x1}, {0x9, 0xf, 0x0, 0x4, 0x80, 0x8000}, {0x80000000, 0x7f, 0x1, 0x4, 0x3, 0x1}, {0x1173, 0x4, 0xfff, 0x462, 0x1, 0x200}, {0x3, 0x2, 0x3, 0x7, 0x8, 0xffffffff}, {0x4709e2d5, 0x7fff, 0x5, 0x5, 0xffff, 0xfffffffb}, {0xe, 0x1ff, 0x0, 0x80000001, 0x4, 0x9}, {0x4, 0x9, 0xe9, 0x5, 0x200, 0x5}, {0x7, 0xe, 0x8, 0x9, 0xeb87, 0x6}, {0x7, 0x3, 0x9, 0x2, 0x4, 0x8}, {0x2, 0x94, 0x6, 0x1, 0xfcba57aa, 0x5b8c51c7}, {0x4, 0x8, 0x81, 0x10000, 0x5, 0xa5}, {0x8, 0x1, 0x7, 0x8, 0x7, 0x80}, {0x3, 0xfffeffff, 0x6, 0x9, 0x200, 0x6}, {0xe, 0xfffffbff, 0x2, 0x0, 0x5, 0x1}, {0x9, 0xe55, 0x4, 0x618a, 0xfb0a, 0x8001}, {0x7, 0x4, 0xe, 0x2, 0x7fff, 0x6}, {0x8, 0x6, 0x81, 0x6, 0x6}, {0xd70b2bc9, 0xffff, 0xe, 0x2, 0x7, 0x7c4}, {0x4, 0xff, 0x7fff, 0x4, 0x7, 0x70a0}, {0x7, 0xd, 0x7fffffff, 0xfffff783, 0x7, 0x5}, {0x2, 0x0, 0x1ff, 0x1000, 0x8, 0x5}, {0x3, 0x8, 0x4, 0x10001, 0x2, 0x5}, {0x2, 0xb40, 0x7, 0x6, 0x800, 0xffffcbc5}, {0x5, 0x60c, 0x1ff, 0x7, 0x3, 0x6}, {0x3, 0x2, 0x9, 0xffff5bff, 0x5, 0x3c3}, {0xd, 0xba5, 0x6, 0x2, 0x5, 0x50}, {0x7, 0x6, 0x7ff, 0x982d, 0x4, 0x1}, {0xdb9f, 0x8000, 0x6, 0xfffffffc, 0x1, 0x3}, {0x7f, 0x927, 0x2, 0x19b, 0x8001, 0x6}, {0x0, 0x2, 0xbd0, 0xffffffff, 0x100}, {0x6, 0xffffffff, 0x401, 0x8, 0x9}, {0xffffff4f, 0x8, 0x400, 0x3, 0xff, 0x6}, {0x57, 0x2, 0x6, 0x9, 0x40b0, 0xffffffff}, {0x5, 0xb, 0x3, 0x6, 0x3, 0x7f}, {0x5, 0x0, 0x9, 0x4fe, 0x8000, 0x5a4f2366}, {0x6, 0x1, 0x6, 0xe, 0xde, 0x4}, {0x80000001, 0x94a, 0x33a, 0x1ff, 0x9, 0xe8}, {0xa8e, 0x0, 0xe37, 0x2a5, 0xdc, 0x8}, {0x3ff, 0x9, 0x7ce, 0x3, 0x0, 0x2}, {0x3, 0x3, 0x5, 0xba67, 0x5, 0x7}, {0x0, 0x1, 0x0, 0x4, 0x400, 0x8}, {0xfffffff9, 0x8, 0x3, 0x0, 0x8, 0x5}, {0x200, 0x5, 0x4, 0x81, 0xad, 0xfff}, {0x7, 0xa, 0xc0, 0x0, 0x4, 0x401}, {0x8, 0x4, 0x3, 0x70e, 0x13df, 0xfffffffa}, {0xf6b, 0x2, 0x5, 0x2, 0x8, 0x6b}, {0x87b, 0x4, 0x6, 0x1, 0x2, 0x7}, {0x9ec7, 0x5, 0x2, 0x7, 0x3, 0x6}, {0x1, 0xfffffffc, 0x1, 0x1000, 0x8ab, 0x4}, {0x4f9, 0x6, 0xa6, 0x0, 0x8, 0xffffffff}, {0x7f, 0x50, 0x1000, 0x1000, 0x2, 0x1}, {0xea, 0x4, 0x2, 0x0, 0x9, 0x80}, {0xffff0000, 0x94, 0x313, 0x4250, 0x9a, 0x3}, {0xe, 0xfff, 0x6, 0x7, 0x400080, 0xffffffff}, {0x7, 0xce1, 0x3, 0x1, 0x2}, {0x2, 0xf11, 0x40, 0x8, 0x9, 0xfffffffd}, {0xeaec, 0x8, 0x4, 0x3, 0x2, 0x2}, {0x5, 0x2, 0x2e, 0x7, 0x2, 0x400}, {0x4, 0x7fffffff, 0x4, 0x4, 0x3, 0x7}], [{}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x5}, {0x6}, {0x1}, {0x1}, {0x2}, {0x1}, {0x5}, {0x6}, {0x3}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x7}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x7}, {0x5, 0x1}, {0x3, 0xf10095615d1bdc07}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x243bcf8aaf4f446a}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x2}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x2}, {0x5, 0x1}, {0x2}, {}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}]}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1, 0x4, 0x10000000, 0xffff, 0x7fffffff}, 0x7, 0x36}, [{0x3, 0x1, 0xfffffffd, 0xef000000, 0x10000, 0xa2a8}, {0x9, 0x80000000, 0x5, 0x5, 0x100, 0x8}, {0x4, 0x6, 0x10001, 0x3d9d, 0x3, 0x691}, {0x101, 0x401, 0x7ff, 0xd5f6, 0x1ff, 0x8a6}, {0x1ff, 0x2318, 0x165c, 0x7, 0x4d4c, 0x8}, {0x10001, 0xffffffff, 0xfff, 0x1, 0x4, 0x5}, {0xbcf, 0xe45, 0x4, 0x8000, 0x0, 0xef}, {0x2e, 0x2, 0x8, 0x3c9c, 0x1ff, 0x6}, {0x401, 0x9, 0x0, 0x3, 0x4, 0xf}, {0x7, 0x8, 0x14448a71, 0xc, 0x7fff, 0x4}, {0x8, 0x5, 0xee4, 0x7fffffff, 0x9, 0x7fffffff}, {0xe70, 0xa0c1, 0x7, 0x3, 0xffffffff, 0x1}, {0xba, 0x2, 0x6, 0x9, 0x4000000, 0x4e8c}, {0x43, 0x0, 0x0, 0x8001, 0x6c, 0x8}, {0x6a000, 0x4, 0xd, 0x6, 0x2, 0x3}, {0x200, 0x9, 0xfffffff3, 0xffffffff, 0xb846, 0x6b7}, {0x8, 0x2, 0x2, 0x0, 0x7, 0x1ff}, {0xff, 0x6, 0x6, 0x8, 0x800, 0x1}, {0x8, 0x6, 0x6, 0x6, 0x8001, 0x5}, {0xd44, 0x3, 0x2, 0x62f, 0x4, 0x7}, {0x4, 0x8, 0x9, 0x7, 0xffff, 0x9}, {0xe394, 0x80000001, 0xfffffffb, 0x1, 0x8001, 0x6ea5}, {0xee9, 0x8, 0xfffff801, 0x3, 0x2, 0x4607}, {0xfffffff9, 0x4, 0x101, 0x3, 0x5, 0x79}, {0x8, 0x400, 0x3, 0x3d11, 0x2, 0xffffffad}, {0x9, 0xfffff70d, 0x6, 0x401, 0x8, 0xe8}, {0x7, 0x7ff, 0xaca8, 0x7, 0x2}, {0x4, 0x8, 0xd5, 0xffff5d2e, 0x6, 0x200}, {0x800, 0x9, 0xcbca, 0x6, 0x9, 0x1ff}, {0x380, 0x248, 0x3, 0x8ca, 0x6, 0x100}, {0x101, 0x1, 0x7cc, 0x200, 0x8, 0x100}, {0x5, 0xffffff81, 0x80, 0x9, 0x2}, {0xc, 0x7fff, 0x5c0b, 0x2, 0x800, 0x8}, {0x6, 0xf, 0x8, 0x9, 0x8000, 0x5}, {0x1, 0xc65, 0x0, 0x5, 0xc480, 0x8}, {0x0, 0x4d2a, 0xe16, 0x7fffffff, 0x2, 0x401}, {0xb, 0x2, 0x9, 0x8000, 0x7fffffff, 0x3}, {0x21c, 0xfffffffe, 0x7, 0x3, 0x0, 0x7}, {0x9, 0x31, 0x5, 0xc88f, 0x81, 0x4}, {0x4, 0x7, 0x6, 0x7, 0x7, 0x1}, {0xbb3, 0xb7, 0x4, 0x3, 0x6, 0x2}, {0x9, 0x4, 0x7a7, 0x9, 0x3ff, 0xffff}, {0x5, 0x6, 0x5, 0x100, 0x9, 0xc}, {0x6, 0x80000000, 0x5, 0xfffffbff, 0xd85, 0xf754}, {0x36, 0x0, 0x101, 0x0, 0x1, 0x3}, {0x4, 0x8, 0x101, 0x4, 0x40, 0x9}, {0x6, 0x101, 0x3, 0x80000001, 0x300, 0x8}, {0x4a, 0x2, 0x5, 0xfff, 0x4, 0x6}, {0x4, 0x3d6, 0x2, 0xbbc, 0x200, 0xe}, {0x7ff, 0xeb, 0x8, 0xffffffe6, 0x401, 0x4}, {0x3, 0xf2, 0x7, 0x8, 0x8, 0x4000}, {0x3, 0x4, 0x4, 0x9, 0x870, 0x6}, {0x2, 0xfffeffff, 0x2, 0x8, 0x1000, 0x9}, {0x1, 0x7, 0x5, 0x6, 0x960, 0x255}, {0xe, 0x7, 0x3, 0x2, 0x1ff, 0x1a}, {0xf, 0x0, 0x9, 0x1, 0xffffffc0, 0xfff}, {0x400, 0xffffffff, 0x6000000, 0x9, 0x1, 0xd}, {0x0, 0x200, 0x3, 0x80, 0xfcf, 0x3}, {0xfff, 0x8, 0x1, 0x9, 0x94, 0x8}, {0xa2fa, 0x10000, 0xb21, 0xfffffffb, 0x2, 0xffffffff}, {0x4, 0x2, 0x8001, 0x6, 0x5b, 0x80000001}, {0x3, 0xadc7, 0xfff, 0x9, 0x9, 0x9}, {0x8, 0x2, 0x80000000, 0x0, 0x7, 0x6d4}, {0x1000, 0x1, 0x8, 0x0, 0x7f, 0xdc}, {0x0, 0x9, 0x2, 0x7b5, 0xf, 0x570}, {0x1000, 0x6, 0x8, 0x64f, 0x1000, 0x2}, {0x100, 0xffffffff, 0x3, 0x4, 0x401, 0x175f}, {0x7, 0x4, 0x1, 0x8, 0x5, 0x1}, {0x7fff, 0x8, 0x4, 0xf, 0x2, 0x1a2e}, {0xfffffffd, 0xc, 0x4, 0x2e5, 0x4, 0x5}, {0xffffffff, 0x81, 0xffffffff, 0x7, 0x8, 0x6}, {0x7, 0x7, 0x9, 0x4000000, 0x1, 0xd19d}, {0x4, 0x3, 0x65a, 0xbf02, 0x9, 0x9}, {0xff, 0x9, 0x6, 0x0, 0x4f, 0xfffff000}, {0x7, 0xba, 0xd4, 0x6, 0x35c, 0x3fb}, {0xfffffffd, 0xdced, 0x1, 0x3ff, 0x0, 0x81}, {0x1000, 0x5, 0xf96, 0x7ff, 0x9, 0x2}, {0x7ff, 0x9, 0x9, 0x0, 0x9e2, 0x7}, {0x2ca, 0x0, 0x400, 0x2, 0x7, 0x2}, {0x7, 0x5, 0xc, 0xfffffffc, 0x200, 0x4}, {0x52a5, 0x9, 0xc, 0xf, 0x0, 0x38c}, {0xe, 0x0, 0x1, 0x2, 0x7ff, 0x1}, {0xb, 0x5, 0xffffff81, 0x8, 0x73a3cdee}, {0x7, 0x7, 0x4e, 0x1ff, 0xd400000, 0x7}, {0x7f, 0x7, 0x1, 0x3, 0xfa, 0x1ff}, {0x8000, 0x7, 0xa, 0x1, 0x40, 0x80000000}, {0x0, 0x620e, 0x9, 0xa8000000, 0x9, 0x1}, {0x2, 0x8, 0x10, 0x9, 0x6, 0x1}, {0x1, 0x6, 0x6, 0xf, 0x800, 0x5}, {0x10, 0x4, 0x7, 0x7, 0xfffffffa, 0x8}, {0x8000, 0x5, 0x0, 0xdd, 0x0, 0x3a5}, {0x0, 0x4, 0x7, 0x0, 0x81, 0x8}, {0x7fffffff, 0x5, 0xfffffff9, 0xf3e, 0x7, 0x200}, {0x431, 0x0, 0xc00, 0x6, 0x3, 0xa}, {0x80000000, 0x9, 0x7f, 0x8, 0x0, 0x7fff}, {0x6, 0xffffff01, 0x2959, 0xfffffe01, 0x1, 0xfffffffa}, {0x8, 0x28e2, 0x6, 0x84f30330, 0x81, 0x3}, {0x9, 0x80000001, 0x5, 0x80, 0x4, 0xe0}, {0xffffffff, 0x0, 0x1fc, 0x4, 0x8, 0x9}, {0x9, 0x4, 0x4, 0x3ff, 0x3, 0xd3a}, {0x9, 0x400, 0x7, 0x7, 0x7d2, 0xd}, {0x4, 0x1, 0x4, 0x7, 0x928f, 0x2}, {0x90000, 0x7ff, 0x50f5, 0x1, 0x80000001, 0x1}, {0x6, 0x9, 0x8, 0x6, 0xd2, 0x401}, {0x3, 0x7, 0x54f5b5c4, 0x2, 0x7, 0x8}, {0x2, 0x7, 0xa, 0x7, 0xd5, 0x10000000}, {0x6, 0x1, 0x5, 0x3ff, 0x7fffffff, 0x5}, {0x7, 0x5, 0x5, 0x3, 0x1e7, 0x3}, {0x6, 0x9, 0xea, 0x7fff, 0x4, 0xa}, {0x4, 0x2, 0x9, 0x2, 0x1, 0x6}, {0x3, 0x3, 0x5, 0x6, 0x8872, 0x101}, {0x2c, 0xffffffff, 0x5, 0x6, 0x4, 0x1ff}, {0xe36, 0xa, 0x1, 0x1000, 0x8, 0x7f}, {0x36, 0x7ff, 0xc44c, 0xa, 0xfffff710, 0x9}, {0x4, 0x4, 0x0, 0x5, 0xbfe, 0x7e}, {0x0, 0x7, 0x2, 0x9, 0x1, 0x8eee}, {0x5, 0xf18, 0x4, 0x40, 0x3}, {0x3978583e, 0x2, 0x4a1, 0x9, 0x0, 0xece4}, {0x4, 0x8, 0x0, 0x8, 0xfff, 0x2}, {0xffffffff, 0x4, 0x8, 0x3, 0x0, 0x4}, {0xff, 0x8000, 0x7, 0x7f, 0x8001, 0x40}, {0x4, 0x81, 0x9, 0xaf7f, 0x0, 0x3}, {0x4, 0x8870, 0x6, 0x1, 0x417, 0xfffffffe}, {0x4, 0x4, 0x3, 0x1, 0x5, 0x7ff}, {0x56, 0xd3ce, 0x7ff, 0x1, 0x58, 0x3}, {0x2, 0x8, 0x0, 0x9, 0x9, 0x8a1e}, {0x45, 0x0, 0x6, 0x4, 0x0, 0x8}, {0xe69f, 0x8, 0x2, 0x10000, 0x0, 0x7}], [{0x4}, {0x7, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x38041335e81f43ea}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x46159309d9d86a9a, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x5dc7cd88b59d49fd}, {0x1}, {0x6}, {}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x6a7a7c837981e6de, 0x1}, {0x5, 0x1}, {0x5, 0x98df0d5678c6e35e}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x3}, {0x1}, {}, {0x4, 0x1}, {0x3}, {0x0, 0x181810b01e2cc7eb}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x5}, {0x1}, {0x6}, {}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}], 0x1}}]}, {0x5b, 0x6, "50ffad703f9354af2f2a4423c2b8d1cf0603299473da959bb7933e710c0a1bc9fc22cd01b3e83e7c9fb90ee89bb9abe322f0b3094b249ed876666365cffbf09a8c6fb14bdb95afcabddce22b17268a0d08c4d3798bcfbf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0xfc8, 0x1a, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x605a}]}, {0xf84, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_bpf={0x94, 0x17, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x44, 0x4, [{0x8, 0x5, 0x6, 0x2}, {0x7ff, 0x9b, 0x4, 0x10001}, {0x7, 0x2, 0x1, 0xf}, {0x4, 0x8f, 0xf8, 0x4}, {0xeb, 0x2, 0x2, 0x3}, {0x3, 0x3, 0x71, 0xa5a}, {0x7f, 0x8, 0xed, 0xfffffffe}, {0x7, 0x8, 0x85, 0x3}]}]}, {0x25, 0x6, "9214c01fe8714cd5fa49083a551dbf4e61ff86c2f682dffca6955e99fd2b7594a9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0xc30, 0x9, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0xc00, 0x6, "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"}, {0xc, 0x7, {0x1, 0x238ac41f74b70f6c}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x120, 0x3, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x5, 0x10000000, 0x8000, 0x5}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x1, 0x80000001, 0x28}, 0x6e}}]}, {0xbb, 0x6, "20359755c91fc4d4525a8d64196b25436875d44b5f8dab165d62c0ecf92fe75cbd79185910484fabca905c3c73af55f89cc9843d9d0ae8dde44e3d8659004d9178280792c5e94d2e21af82a3110ad0824fd3c7ace87f79cd95ab800d0b1560e847e1e86846b2b3a99d13ddca07a50ec0b2efdf145dbe9c6947b9711e0bae271a322349397a0f455e2fec1c8ef9de26535842f883293bd2f2e05050c01fe0a3e6be3691a15c0bc236b6a809ce46b0754a5914671df3c1ed"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x11c, 0x19, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x91, 0x0, 0x4701, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xb, 0x5, 0x7, 0x5}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x7, 0x9, 0x822}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x7, 0x1, 0x4, 0x9}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf9c0, 0x1, 0x0, 0x40, 0x7}, 0x3}}]}, {0x5d, 0x6, "fab775af74e3e93e5e458d9ad14a428f63b2ac3440f4e1d5cccacbae778493c843e6f55a9b234a9f9c11ecbed9cf07d43d3604af665c308a04c164dc5a87924f10779a2e27ca0708304526119955f8231a058b57244ed2a410"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0xcc, 0x2, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1aa, 0x8, 0x7, 0x8, 0x3}, 0x4}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x71, 0x6, "304b0b98662f224ab1bd5fa30656679434c7cb654089da30f8a389e067c56ffa072d9b4a1050870c55546c33fb9a95dd256850ded0fb92a0017ba8e64dcf294461ad51925ed0c44eda08c56f94c38c241c7c1e3c2d5605c51a5bb50386a4561f26de33cc6a4580ca36b123fad9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x3c, 0x4, 0x0, 0x0, {{0x7}, {0x4}, {0x14, 0x6, "8f15eaa70196a5a6e851d0f52bbb3eae"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0xfffc}}]}}, @TCA_RATE={0x6, 0x5, {0x26, 0xe}}]}, 0x6d4c}}, 0x84) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600053582c137153e370c0c188008ac0f000300", 0x33fe0}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) r9 = eventfd2(0x0, 0x0) poll(&(0x7f0000000080)=[{r9}], 0x1, 0xda90) 6.748192908s ago: executing program 6 (id=1237): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[], 0x6c}}, 0x2404c844) r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x80d0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 6.351497663s ago: executing program 0 (id=1238): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x3a0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x40, 0x3, 0x2e, "ba0d1f976a6c3b99533131b4d4f821ba761a124f70b30a342872a5fd0a64d7c5327db164e67efdfd8ad9ad5e72a4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @random="e6796c9e0472"}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x5c}}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = accept$nfc_llcp(r5, &(0x7f00000007c0), &(0x7f0000000080)=0x60) sendmmsg(r6, &(0x7f0000000780)=[{{&(0x7f0000000200)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="a4b0a9937a508f2e124a955abf4f7265e115cddd37c8cba2cbf13c72e7c3e58a178ff7a742960e2a4f47fe66b0b7053bbf674df3cb88724db7ca7d93ebab6b97bacca2837ea520d1a25a89c9157f2bb7f96267f6542c147a12ae4b0c7a162f5fd534027ecc980583f0a502f72fda0fb9061632f6bb73444a786ce266d75193ab47e755896f51bd03328229ece10f12bfd0f4133118e1bd5782", 0x99}, {&(0x7f0000000340)="a0a1fc83181c6b77e69949a17810637aa4a84c139bc3615276ba099d197b7e69e9aa8d014c3292a8209093e3230f716ec2f97e65e52e4a220e884459ead4cc6fbec0b0cd40ce12c15d9569e5186a17161fb5148fb9288fb2b8e2ef9a77c17fb4a4f158a6585c3d50b0ddb578439f82d3096903f0e3dd65ab5808d58d445585d8560be79d06da88881c99f85216f242ca923b5f88ddd081e2f42261875e9cd7e9c93ce7e3d10dec4a80", 0xa9}, {&(0x7f0000000440)="e872b3a2303a3a1fb7a9506734a9fd237199d5bffd502b51d19e06637e26c3cb870e994136f7ad22d065d14e1d7296c45d6bae325aedde775209ea415fa2f0935ace1d6dda92f2419152d9a272579ef74ea1140146a0339d93a46592f37620b13ce4cfb010f231c805bd638ec0d1713de85b682cb336a9f3f3584eeeeeb644bbff9af4c1224239d3f0997a4d96a01e6d341cb8c4c53f732e79c89a72c09ba769b75b11ebb36899bae6731494516a3a869b0d32de9673ed8c05573b73e1558487c13ebd2454ca883912a006dff9b888bd104b", 0xd2}], 0x3, &(0x7f0000000580)=[{0xd8, 0x0, 0x5, "2935922aceaa7217be1ae229e73ba85f10dd91359e52496577789ffafda77a54803f24d8bb846243e97c91520dd48d59348d905e0dd4ded0613ccbb7c3d7106e07f4940f6fb60c679e7b3d2c4ac88ebcc38181041c82c5b2c80d13e52b9de60b5bd15ee960289edfa0fdb6c9d1f0a85ed8610818452aac0d33d6574892294051d86b2a8072572d00fb9bbabe08f0335f88f149c6405206fd073b2f27c65461e2eb539807c2f0b009254e09613201bc27e100cb13b5ed80bb4522ea9e54a450f05e089ad4d8ff4422"}, {0xc0, 0x6, 0xb2b, "ecb1d751eafa2e9a0cb396fe87d686e287895066a9b22deaf39e023fa7a6cee2cbd56ca44927708d9babcd81baccf616c478cb8a78322120b03e9d9598f452db9beb412a7f787893cd54137726fc474a2e0c72f42a3081ea971f3bd435e4153161dcbe80392d6e0785172ddc0797fa62feb7bc350c94d48d511c66f3df4ba0f60cbde7ef2698d6249ddf81ff8e14bd64a4609633aa013646b3fc82e3449b9bd143faabcbeb7d0e23a4d81a117a924352"}, {0x38, 0x11, 0x40, "97687bacc329cb075f1ae081d37842f9ca27417463236cce5659a2be8ab2cc911dad85e63a43"}], 0x1d0}}], 0x1, 0x20008000) 6.332492426s ago: executing program 6 (id=1239): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008048}], 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) acct(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0000000000020000000']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES32=r5], 0x20}}, 0x0) 6.059759946s ago: executing program 6 (id=1240): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 5.950910036s ago: executing program 5 (id=1241): syz_open_dev$sndctrl(&(0x7f0000000100), 0x8, 0xc400) socket$inet(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$caif_seqpacket(0x25, 0x5, 0x5) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = semget$private(0x0, 0x4000000009, 0x82) semctl$IPC_SET(r2, 0x0, 0x1, 0x0) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x300000000000000}, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 5.702074457s ago: executing program 2 (id=1242): socket$netlink(0x10, 0x3, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) syz_80211_join_ibss(0x0, &(0x7f0000000140)=@random="8969245434f0", 0x6, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0xa0000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x10000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 5.66171809s ago: executing program 6 (id=1243): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc", 0x13}], 0x1}, 0x8014) recvmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000014c0)=""/4097, 0x1001}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90424fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90524fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_usbip_server_init(0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e0c092f20"], 0xf) 5.058692642s ago: executing program 2 (id=1244): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x8000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x30, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)=0x6) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x88602, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0xc0844123, &(0x7f0000000300)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffc34) socketpair(0x1e, 0x1, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) 5.00015865s ago: executing program 5 (id=1245): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0, 0xffffffffffffffff, 0x0, 0x8c}, 0x18) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002380), 0x181000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000004000)) read$char_usb(r0, &(0x7f00000001c0)=""/221, 0xdd) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='zonefs\x00', 0x0, 0x0) 3.493650619s ago: executing program 2 (id=1246): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) listen(0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r7) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r7) 3.490856327s ago: executing program 5 (id=1247): setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000819e0ee1d6e6d4287e9ed0defc7a58d7e8aa2c649a95543f8ce8e8631430c7299f028d28a6aae179659813382afcfbea72d57e96c10393ad22b2dd79f68c2d11aa4dbf121d0b35e4bbcd18f737eaa49921574a638597318bfd715eb1584e1016c7fd37381a62d2b7a3dc05a34d50dbb6018f784d5a666bd23185f30c938c38888df431ad048318dac1a951abc213db"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4f}, {0x4}, {0xc}, {0xc, 0x9, {0x47, 0x2}}}}]}]}, 0x48}}, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000240)=0x800, 0xb4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 3.25827675s ago: executing program 2 (id=1248): syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x2, 0x10010, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) (fail_nth: 28) 2.907919446s ago: executing program 1 (id=1249): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000c89000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) 2.369434627s ago: executing program 0 (id=1250): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, 0x0) read$hidraw(r5, 0x0, 0x49) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x1068) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bind$inet(r3, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='ufs\x00', 0x8403, 0x0) 2.368843153s ago: executing program 1 (id=1251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f00000003c0)=@ax25={{0x3, @netrom}, [@bcast, @default, @default, @netrom, @rose, @netrom, @remote, @netrom]}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)=""/42, 0x2a}], 0x1, &(0x7f0000001840)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/118, 0x76}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/159, 0x9f}, {&(0x7f00000004c0)=""/56, 0x38}], 0x4, &(0x7f0000000700)=""/34, 0x22}, 0x800}], 0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000018440000feffffff000000000000000018630000060000000000000002000000187158e1aa00000002000000044bff0108000000185800000500000000010400000000000000000015d55747ce67dfaf6998d9f2c380e3f0e502f3608df15a12ed987daf88f0c15869ff6197a0c5524e42efe4298eed8d7bea13148679b4ec4e0ee443b3dd168eaea324d37cf51a381038fda74c07273716f637a46e92082fb58e0590742f9b7c95f7de681578d57dd6b5b35834df958c6855b72b762022b3f3b5ebe3a8916f001dbc2338126bb5e30bd84dc9ea"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x4, 0x33565348, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6}}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000001800)) 2.301905237s ago: executing program 2 (id=1252): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0xa, 0x29) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x9427a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018001000000000"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x75) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendmmsg$inet6(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000020c0)="1c226d", 0x3}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r3, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000000080104000000000000000000000000060002400000000004000480050003001100005a390001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.298900194s ago: executing program 5 (id=1253): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[], 0x6c}}, 0x2404c844) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001a000100000000000000000002000000000000000000000008000100ac1414aa080002006401010108000300"], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x80d0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 2.222302699s ago: executing program 5 (id=1254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8}]}}]}, 0x3c}}, 0x0) (fail_nth: 2) 46.105118ms ago: executing program 6 (id=1255): socket$netlink(0x10, 0x3, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) syz_80211_join_ibss(0x0, &(0x7f0000000140)=@random="8969245434f0", 0x6, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0xa0000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x10000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 0s ago: executing program 1 (id=1256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000ff0f000009"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0xe4, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack_expect\x00') r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendto$inet(r4, &(0x7f0000000340)="801a9757a51f148ac68eaa89f60440ad9b06c9def5b220492c99afe0ca2a2422495f23c909102febb01b70fdd12a2dc21ad5662a27c8f0691ac7d95b81fd80fae4295e9225e45ab8d8c82a2a56ef67a7a9a86e7f975f842e3d687c9e8c1cb9e21843cc56431b60c31aefdd0d66bea6bf81a22184eecb54333086d131bab873c842b61cdc1994a228fae0994a3b1e81f7f33b6268b7fb9ec525990e8a755cd5", 0x9f, 0x40000, &(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000002ffffffffffff86dd60010035002406fffc0200000000000000fe8000000000000000000000000000000100014068000000730003486400000000004e2231751fc74a89fda6cba2800560630874f67f2f8e6a1abb4dbda1654493ea1d9b49037e5310cc019a8db37ba61722ddd9e62eb54735e1f414aed7d03a27d90c4a3f3130e2435b4e92af9b359c44b61f528ec0b1cf", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000390780000"], 0x0) write$fb(r4, &(0x7f0000000040)="cdaa17fe02770a657358ccf7", 0xc) kernel console output (not intermixed with test programs): 35f80 R15: 00007ffe270f3b68 [ 259.231678][ T8150] [ 260.321134][ T8160] hsr_slave_0 (unregistering): left promiscuous mode [ 260.652177][ T8175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.634'. [ 260.664484][ T7096] vhci_hcd: vhci_device speed not set [ 261.131052][ T8190] FAULT_INJECTION: forcing a failure. [ 261.131052][ T8190] name failslab, interval 1, probability 0, space 0, times 0 [ 261.160321][ T8190] CPU: 0 UID: 0 PID: 8190 Comm: syz.3.638 Not tainted 6.12.0-rc7-syzkaller #0 [ 261.169327][ T8190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 261.179415][ T8190] Call Trace: [ 261.182730][ T8190] [ 261.185958][ T8190] dump_stack_lvl+0x241/0x360 [ 261.190692][ T8190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.195935][ T8190] ? __pfx__printk+0x10/0x10 [ 261.200578][ T8190] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 261.206078][ T8190] ? __pfx___might_resched+0x10/0x10 [ 261.211401][ T8190] should_fail_ex+0x3b0/0x4e0 [ 261.216113][ T8190] should_failslab+0xac/0x100 [ 261.220825][ T8190] ? __request_module+0x2b9/0x650 [ 261.225904][ T8190] __kmalloc_cache_noprof+0x6c/0x2c0 [ 261.231219][ T8190] __request_module+0x2b9/0x650 [ 261.236111][ T8190] ? crypto_alg_mod_lookup+0x85/0x760 [ 261.241514][ T8190] ? __pfx___request_module+0x10/0x10 [ 261.246912][ T8190] ? __up_read+0x2c2/0x6b0 [ 261.251383][ T8190] ? __pfx___up_read+0x10/0x10 [ 261.256180][ T8190] ? __asan_memset+0x23/0x50 [ 261.260813][ T8190] ? crypto_alg_lookup+0x2dc/0x360 [ 261.265955][ T8190] crypto_alg_mod_lookup+0xa2/0x760 [ 261.271181][ T8190] crypto_type_has_alg+0x2c/0x60 [ 261.276152][ T8190] xfrm_aalg_get_byid+0x1ef/0x280 [ 261.281215][ T8190] pfkey_add+0xe8c/0x3030 [ 261.285594][ T8190] ? __pfx_pfkey_add+0x10/0x10 [ 261.290401][ T8190] ? pfkey_broadcast+0x45/0x400 [ 261.295372][ T8190] ? pfkey_broadcast+0x3e3/0x400 [ 261.300345][ T8190] pfkey_sendmsg+0xbcc/0x1050 [ 261.305067][ T8190] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 261.310253][ T8190] ? __might_fault+0xaa/0x120 [ 261.314969][ T8190] ? __pfx_lock_release+0x10/0x10 [ 261.320018][ T8190] ? __import_iovec+0x590/0x870 [ 261.324912][ T8190] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 261.330045][ T8190] __sock_sendmsg+0x221/0x270 [ 261.334742][ T8190] ____sys_sendmsg+0x52a/0x7e0 [ 261.339537][ T8190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.344860][ T8190] __sys_sendmsg+0x292/0x380 [ 261.349481][ T8190] ? __pfx___sys_sendmsg+0x10/0x10 [ 261.354628][ T8190] ? __pfx_vfs_write+0x10/0x10 [ 261.359444][ T8190] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 261.365803][ T8190] ? do_syscall_64+0x100/0x230 [ 261.370595][ T8190] ? do_syscall_64+0xb6/0x230 [ 261.375297][ T8190] do_syscall_64+0xf3/0x230 [ 261.379843][ T8190] ? clear_bhb_loop+0x35/0x90 [ 261.384542][ T8190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.390457][ T8190] RIP: 0033:0x7f6c2e57e719 [ 261.394890][ T8190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.414516][ T8190] RSP: 002b:00007f6c2f456038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.422951][ T8190] RAX: ffffffffffffffda RBX: 00007f6c2e735f80 RCX: 00007f6c2e57e719 [ 261.430933][ T8190] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 261.438917][ T8190] RBP: 00007f6c2f456090 R08: 0000000000000000 R09: 0000000000000000 [ 261.446903][ T8190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.454887][ T8190] R13: 0000000000000000 R14: 00007f6c2e735f80 R15: 00007ffc1d2a4008 [ 261.462890][ T8190] [ 261.871870][ T5882] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 262.142362][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 262.338703][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 262.493594][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 262.503929][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 262.518321][ T5882] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 262.528220][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.541689][ T5882] usb 3-1: config 0 descriptor?? [ 263.238335][ T8216] erspan0: left allmulticast mode [ 263.248368][ T8216] erspan0: left promiscuous mode [ 263.257224][ T8216] bridge0: port 3(erspan0) entered disabled state [ 263.335655][ T5882] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 263.354562][ T5882] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 263.369018][ T8216] bridge_slave_0: left allmulticast mode [ 263.626754][ T8216] bridge_slave_0: left promiscuous mode [ 263.798884][ T8216] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.850974][ T8216] bridge_slave_1: left allmulticast mode [ 263.879021][ T8216] bridge_slave_1: left promiscuous mode [ 263.885660][ T8216] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.920762][ T8216] bond0: (slave bond_slave_0): Releasing backup interface [ 263.944941][ T8216] bond0: (slave bond_slave_1): Releasing backup interface [ 264.004060][ T8216] team0: Port device team_slave_0 removed [ 264.026953][ T8216] team0: Port device team_slave_1 removed [ 264.033748][ T8216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.041242][ T8216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.054693][ T8216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.062744][ T8216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.108210][ T8217] team0: Mode changed to "loadbalance" [ 264.993968][ T5883] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 265.056325][ T5882] usb 3-1: USB disconnect, device number 25 [ 265.183827][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 265.199830][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 265.223894][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 265.982066][ T5883] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 265.991692][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.000050][ T5883] usb 4-1: Product: syz [ 266.004275][ T5883] usb 4-1: Manufacturer: syz [ 266.008936][ T5883] usb 4-1: SerialNumber: syz [ 266.017490][ T5883] usb 4-1: config 0 descriptor?? [ 266.025357][ T5883] usb 4-1: no audio or video endpoints found [ 266.980642][ T5924] usb 4-1: USB disconnect, device number 19 [ 267.201494][ T8254] overlayfs: overlapping lowerdir path [ 269.185139][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.192697][ T8265] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.257423][ T8265] infiniband syz0: set down [ 269.474535][ T8265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.523376][ T8265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.472352][ T8265] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.491317][ T8265] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.501285][ T8265] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.510370][ T8265] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.560846][ T8265] netdevsim netdevsim2 netdevsim0: unset [1, 2] type 2 family 0 port 39360 - 0 [ 270.570520][ T8265] netdevsim netdevsim2 netdevsim1: unset [1, 2] type 2 family 0 port 39360 - 0 [ 270.579512][ T8265] netdevsim netdevsim2 netdevsim2: unset [1, 2] type 2 family 0 port 39360 - 0 [ 270.588668][ T8265] netdevsim netdevsim2 netdevsim3: unset [1, 2] type 2 family 0 port 39360 - 0 [ 270.598403][ T8265] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 40068 - 0 [ 270.608403][ T8265] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 40068 - 0 [ 270.617439][ T8265] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 40068 - 0 [ 270.626676][ T8265] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 40068 - 0 [ 270.639304][ T8281] netlink: 36 bytes leftover after parsing attributes in process `syz.3.664'. [ 270.655371][ T8289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.662661][ T8289] IPv6: NLM_F_CREATE should be set when creating new route [ 270.669970][ T8289] IPv6: NLM_F_CREATE should be set when creating new route [ 270.683900][ T7096] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 270.865307][ T7096] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 270.893834][ T7096] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 270.948332][ T7096] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 270.989164][ T8301] overlayfs: overlapping lowerdir path [ 270.993918][ T7096] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 271.061926][ T7096] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 271.106900][ T7096] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.185581][ T7096] usb 1-1: config 0 descriptor?? [ 271.736501][ T7096] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 271.763606][ T7096] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 273.033945][ T8332] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 273.049227][ T8332] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 273.095814][ T8332] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 273.887819][ T25] usb 1-1: USB disconnect, device number 22 [ 274.011322][ T8340] netlink: 'syz.1.683': attribute type 10 has an invalid length. [ 274.029316][ T8340] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 274.045252][ T8340] team0: Device netdevsim0 failed to register rx_handler [ 274.693790][ T5883] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 274.825349][ T8351] x_tables: ip_tables: osf match: only valid for protocol 6 [ 274.876701][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 275.084077][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 275.090199][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 275.097721][ T5883] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 275.106253][ T5883] usb 2-1: config 0 has no interface number 0 [ 275.114335][ T5883] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 275.153987][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 275.205817][ T5883] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 275.227665][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 275.256046][ T5883] usb 2-1: Product: syz [ 275.271399][ T5883] usb 2-1: SerialNumber: syz [ 275.374746][ T5883] usb 2-1: config 0 descriptor?? [ 275.420180][ T5883] cm109 2-1:0.8: invalid payload size 239, expected 4 [ 275.427830][ T5883] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input11 [ 276.345897][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 276.353412][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.360619][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.367834][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.375080][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.382568][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.389772][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.397209][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.404637][ T5883] usb 2-1: USB disconnect, device number 26 [ 276.410643][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.410674][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 276.428330][ T5883] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 277.393243][ T8373] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 277.403723][ T8375] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 277.404011][ T8373] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 277.409877][ T8375] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 277.421232][ T8373] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 277.437944][ T8373] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 277.447513][ T8373] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 277.453532][ T8373] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 277.723841][ T5883] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 277.940543][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.954762][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 277.970501][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 277.981869][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.016760][ T5883] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.031587][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.041975][ T5883] usb 1-1: config 0 descriptor?? [ 278.825983][ T5883] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 278.835752][ T5883] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 279.135982][ T8455] x_tables: ip_tables: osf match: only valid for protocol 6 [ 279.499895][ T8463] delete_channel: no stack [ 280.349931][ T8484] UBIFS error (pid: 8484): cannot open "/dev/sg0", error -22 [ 280.351959][ T8484] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 280.396940][ T25] usb 1-1: USB disconnect, device number 23 [ 280.538739][ T8486] mmap: syz.0.704 (8486): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 280.617450][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 280.658097][ T8497] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 280.993941][ T25] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 281.145266][ T8504] syz.2.711: attempt to access beyond end of device [ 281.145266][ T8504] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 281.264027][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 281.323308][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.386331][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.484946][ T25] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 281.544328][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.634830][ T25] usb 2-1: config 0 descriptor?? [ 282.046464][ T25] kye 0003:0458:5015.0015: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 282.059844][ T25] kye 0003:0458:5015.0015: hidraw0: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 282.070874][ T25] kye 0003:0458:5015.0015: tablet-enabling feature report not found [ 282.078976][ T25] kye 0003:0458:5015.0015: tablet enabling failed [ 283.220572][ T8493] ebt_among: dst integrity fail: 19d [ 283.227549][ T5883] usb 2-1: USB disconnect, device number 27 [ 283.523972][ T5880] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 283.685533][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 283.697306][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 283.708495][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 283.718641][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 283.732160][ T5880] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.741269][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.751808][ T5880] usb 3-1: config 0 descriptor?? [ 284.067839][ T8519] x_tables: ip_tables: osf match: only valid for protocol 6 [ 284.426557][ T5880] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 284.436523][ T5880] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 284.673616][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.720'. [ 285.099775][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 285.114751][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 285.123581][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 285.134027][ T8535] FAULT_INJECTION: forcing a failure. [ 285.134027][ T8535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.147996][ T8535] CPU: 0 UID: 0 PID: 8535 Comm: syz.1.721 Not tainted 6.12.0-rc7-syzkaller #0 [ 285.156877][ T8535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 285.167023][ T8535] Call Trace: [ 285.170297][ T8535] [ 285.173219][ T8535] dump_stack_lvl+0x241/0x360 [ 285.177895][ T8535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.183087][ T8535] ? __pfx__printk+0x10/0x10 [ 285.187686][ T8535] ? snprintf+0xda/0x120 [ 285.191933][ T8535] should_fail_ex+0x3b0/0x4e0 [ 285.196618][ T8535] _copy_to_user+0x31/0xb0 [ 285.201044][ T8535] simple_read_from_buffer+0xca/0x150 [ 285.206453][ T8535] proc_fail_nth_read+0x1e9/0x250 [ 285.211478][ T8535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 285.217022][ T8535] ? rw_verify_area+0x55e/0x6f0 [ 285.221868][ T8535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 285.227511][ T8535] vfs_read+0x1fc/0xb70 [ 285.231683][ T8535] ? fdget_pos+0x24e/0x320 [ 285.236117][ T8535] ? __pfx_vfs_read+0x10/0x10 [ 285.240803][ T8535] ? __fget_files+0x3f3/0x470 [ 285.245487][ T8535] ? fdget_pos+0x24e/0x320 [ 285.249943][ T8535] ksys_read+0x183/0x2b0 [ 285.254201][ T8535] ? __pfx_ksys_read+0x10/0x10 [ 285.258965][ T8535] ? do_syscall_64+0x100/0x230 [ 285.263822][ T8535] ? do_syscall_64+0xb6/0x230 [ 285.268516][ T8535] do_syscall_64+0xf3/0x230 [ 285.273102][ T8535] ? clear_bhb_loop+0x35/0x90 [ 285.277790][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.283692][ T8535] RIP: 0033:0x7f152b57d15c [ 285.288117][ T8535] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 285.307729][ T8535] RSP: 002b:00007f152c29b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 285.316145][ T8535] RAX: ffffffffffffffda RBX: 00007f152b735f80 RCX: 00007f152b57d15c [ 285.324140][ T8535] RDX: 000000000000000f RSI: 00007f152c29b0a0 RDI: 0000000000000009 [ 285.332119][ T8535] RBP: 00007f152c29b090 R08: 0000000000000000 R09: 0000000000000000 [ 285.340123][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.348111][ T8535] R13: 0000000000000000 R14: 00007f152b735f80 R15: 00007ffcef28c038 [ 285.356527][ T8535] [ 285.386519][ T25] usb 3-1: USB disconnect, device number 26 [ 288.102318][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.137525][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.156676][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.197599][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.239682][ T5847] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 288.266035][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.477600][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.492293][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.507533][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.592116][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.657583][ T5837] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 288.686081][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 289.393886][ T5883] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 289.397286][ T8564] chnl_net:caif_netlink_parms(): no params data found [ 289.509422][ T8564] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.519302][ T8564] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.526935][ T8564] bridge_slave_0: entered allmulticast mode [ 289.534433][ T8564] bridge_slave_0: entered promiscuous mode [ 289.544155][ T8564] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.552776][ T8564] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.560446][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 289.567497][ T8564] bridge_slave_1: entered allmulticast mode [ 289.577455][ T5883] usb 3-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 289.583861][ T5924] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 289.592864][ T5883] usb 3-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d [ 289.607162][ T8564] bridge_slave_1: entered promiscuous mode [ 289.614808][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.639275][ T5883] quatech2 3-1:24.0: Quatech 2nd gen USB to Serial Driver converter detected [ 289.661740][ T8564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.675433][ T8564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.716788][ T8564] team0: Port device team_slave_0 added [ 289.725883][ T8564] team0: Port device team_slave_1 added [ 289.750936][ T8564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.758015][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.758056][ T5924] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 289.758079][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.764998][ T5924] usb 2-1: config 0 descriptor?? [ 289.790511][ T8564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.824325][ T8564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.837104][ T8564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.844270][ T8564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.870155][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.877730][ T8564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.918331][ T5883] usb 3-1: qt2_attach - failed to power on unit: -71 [ 289.926220][ T5883] quatech2 3-1:24.0: probe with driver quatech2 failed with error -71 [ 289.937406][ T5883] usb 3-1: USB disconnect, device number 27 [ 289.952009][ T8564] hsr_slave_0: entered promiscuous mode [ 289.962826][ T8564] hsr_slave_1: entered promiscuous mode [ 289.972788][ T8564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.980683][ T8564] Cannot create hsr debugfs directory [ 290.136116][ T8564] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 290.164702][ T8564] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 290.189343][ T8564] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 290.202658][ T8564] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 290.236788][ T8564] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.244177][ T8564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.251692][ T8564] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.258910][ T8564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.272988][ T5924] aquacomputer_d5next 0003:0C70:F00B.0017: hidraw0: USB HID v0.00 Device [HID 0c70:f00b] on usb-dummy_hcd.1-1/input0 [ 290.289341][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.306021][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.504046][ T5924] usb 2-1: USB disconnect, device number 28 [ 290.565983][ T8564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.626916][ T8564] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.650808][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.658200][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.676050][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.683265][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.774153][ T7096] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 290.944058][ T5847] Bluetooth: hci5: command tx timeout [ 290.956451][ T7096] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.987453][ T7096] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 291.014523][ T7096] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 291.024892][ T7096] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 291.033533][ T8564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.047001][ T7096] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.767290][ T7096] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.784657][ T7096] usb 3-1: config 0 descriptor?? [ 291.926802][ T8606] Bluetooth: MGMT ver 1.23 [ 292.105947][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 292.116875][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 292.125521][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 292.135597][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 292.144693][ T5837] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 292.152621][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 292.200778][ T8614] wireguard0: entered promiscuous mode [ 292.206738][ T8614] wireguard0: entered allmulticast mode [ 292.218261][ T7096] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 292.231279][ T7096] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 292.388015][ T8564] veth0_vlan: entered promiscuous mode [ 292.429616][ T8564] veth1_vlan: entered promiscuous mode [ 292.480727][ T8624] overlayfs: failed to resolve './file0': -2 [ 292.512676][ T8564] veth0_macvtap: entered promiscuous mode [ 292.535556][ T8564] veth1_macvtap: entered promiscuous mode [ 292.600248][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.613044][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.623162][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.638614][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.648909][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.659773][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.673620][ T8564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.694067][ T7096] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 292.715614][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.727047][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.737055][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.748369][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.758679][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.775376][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.788447][ T8564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.816683][ T8564] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.826391][ T8564] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.836018][ T8564] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.845082][ T8564] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.856079][ T7096] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 292.866235][ T7096] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 292.890707][ T7096] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 292.901774][ T7096] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 292.925365][ T7096] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.967777][ T7096] usb 1-1: config 0 descriptor?? [ 292.997125][ T5847] Bluetooth: hci5: command tx timeout [ 293.008020][ T8611] chnl_net:caif_netlink_parms(): no params data found [ 293.015298][ T5924] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 293.022956][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.045473][ T5882] usb 3-1: USB disconnect, device number 28 [ 293.047955][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.102902][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.111084][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.168072][ T8611] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.174000][ T5924] usb 2-1: device descriptor read/64, error -71 [ 293.175563][ T8611] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.194173][ T8611] bridge_slave_0: entered allmulticast mode [ 293.201153][ T8611] bridge_slave_0: entered promiscuous mode [ 293.209030][ T8611] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.216526][ T8611] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.224128][ T8611] bridge_slave_1: entered allmulticast mode [ 293.231629][ T8611] bridge_slave_1: entered promiscuous mode [ 293.241423][ T8621] 9pnet_fd: Insufficient options for proto=fd [ 293.253622][ T5883] usb 1-1: USB disconnect, device number 24 [ 293.283153][ T8611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.297002][ T8611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.358818][ T8611] team0: Port device team_slave_0 added [ 293.419498][ T5924] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 293.433893][ T8611] team0: Port device team_slave_1 added [ 293.490813][ T8611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.506003][ T8611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.541751][ T8611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.554681][ T8611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.561652][ T8611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.587863][ T8611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.219787][ T5847] Bluetooth: hci6: command tx timeout [ 294.319883][ T5924] usb 2-1: device descriptor read/64, error -71 [ 294.367116][ T8611] hsr_slave_0: entered promiscuous mode [ 294.385273][ T8611] hsr_slave_1: entered promiscuous mode [ 294.391891][ T8611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.399900][ T8611] Cannot create hsr debugfs directory [ 294.434482][ T5924] usb usb2-port1: attempt power cycle [ 294.443861][ T8650] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 294.623092][ T8611] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 294.632975][ T8611] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 294.643436][ T8611] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 294.653350][ T8611] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 294.683786][ T5883] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 294.731387][ T8611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.749491][ T8611] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.764738][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.771896][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.780156][ T5924] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 294.800351][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.807559][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.817986][ T5924] usb 2-1: device descriptor read/8, error -71 [ 294.856447][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 294.869484][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.894562][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.921019][ T5883] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 294.933147][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.951912][ T5883] usb 1-1: config 0 descriptor?? [ 295.084082][ T5847] Bluetooth: hci5: command tx timeout [ 295.199150][ T8655] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 295.208621][ T5924] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 295.305651][ T5924] usb 2-1: device descriptor read/8, error -71 [ 295.385583][ T1328] Bluetooth: hci7: Frame reassembly failed (-84) [ 295.427322][ T5924] usb usb2-port1: unable to enumerate USB device [ 295.958413][ T8611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.275325][ T5143] Bluetooth: hci6: command tx timeout [ 296.846103][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.755'. [ 297.154082][ T968] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 297.154167][ T5837] Bluetooth: hci5: command tx timeout [ 297.175972][ T8611] veth0_vlan: entered promiscuous mode [ 297.294079][ T5847] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 297.751478][ T8611] veth1_vlan: entered promiscuous mode [ 297.911501][ T5883] usbhid 1-1:0.0: can't add hid device: -71 [ 297.920849][ T8611] veth0_macvtap: entered promiscuous mode [ 297.921982][ T5883] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 297.937231][ T5883] usb 1-1: USB disconnect, device number 25 [ 297.959277][ T8611] veth1_macvtap: entered promiscuous mode [ 297.980563][ T8611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.028670][ T8611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.745113][ T8704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.759'. [ 298.918125][ T5847] Bluetooth: hci6: command tx timeout [ 298.977346][ T968] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 298.989014][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 298.991243][ T8611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.010906][ T8611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.022519][ T8611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.240535][ T8611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.251378][ T8611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.272543][ T8611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.292919][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 299.315726][ T8611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.323445][ T968] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 299.355468][ T8611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.367919][ T8708] netlink: 'syz.2.760': attribute type 4 has an invalid length. [ 299.383273][ T8708] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.760'. [ 299.392823][ T968] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.413520][ T8611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.433742][ T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.452442][ T8708] netlink: 'syz.2.760': attribute type 4 has an invalid length. [ 299.466055][ T8611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.477989][ T968] usb 2-1: config 0 descriptor?? [ 299.487393][ T8708] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.760'. [ 299.517437][ T8611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.533768][ T8611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.544409][ T8708] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 299.544430][ T8611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.544462][ T8611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.551018][ T8708] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 299.561213][ T8611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.581111][ T8708] vhci_hcd vhci_hcd.0: Device attached [ 299.610399][ T8611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.622094][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 299.647496][ T8611] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.657243][ T8611] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.668678][ T8611] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.677834][ T8611] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.710832][ T8712] vhci_hcd: connection closed [ 299.711166][ T2981] vhci_hcd: stop threads [ 299.720846][ T2981] vhci_hcd: release socket [ 299.743825][ T2981] vhci_hcd: disconnect device [ 299.784927][ T5883] vhci_hcd: vhci_device speed not set [ 299.866364][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.892817][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.913307][ T968] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 299.939595][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.942072][ T968] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 299.960928][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.980017][ T8721] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 299.989861][ T8721] openvswitch: netlink: Actions may not be safe on all matching packets [ 299.999646][ T8721] FAULT_INJECTION: forcing a failure. [ 299.999646][ T8721] name failslab, interval 1, probability 0, space 0, times 0 [ 300.012559][ T8721] CPU: 0 UID: 0 PID: 8721 Comm: syz.0.763 Not tainted 6.12.0-rc7-syzkaller #0 [ 300.021436][ T8721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 300.031494][ T8721] Call Trace: [ 300.034783][ T8721] [ 300.037732][ T8721] dump_stack_lvl+0x241/0x360 [ 300.042435][ T8721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.047651][ T8721] ? __pfx__printk+0x10/0x10 [ 300.052241][ T8721] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 300.058237][ T8721] ? __pfx___might_resched+0x10/0x10 [ 300.063555][ T8721] should_fail_ex+0x3b0/0x4e0 [ 300.068236][ T8721] should_failslab+0xac/0x100 [ 300.072924][ T8721] ? __alloc_skb+0x1c3/0x440 [ 300.077514][ T8721] kmem_cache_alloc_node_noprof+0x71/0x320 [ 300.083328][ T8721] __alloc_skb+0x1c3/0x440 [ 300.087758][ T8721] ? __pfx___alloc_skb+0x10/0x10 [ 300.092708][ T8721] ? netlink_ack_tlv_len+0x6e/0x200 [ 300.097933][ T8721] netlink_ack+0x13f/0xa30 [ 300.102380][ T8721] ? __pfx_lock_acquire+0x10/0x10 [ 300.107426][ T8721] ? __pfx_ovs_flow_cmd_set+0x10/0x10 [ 300.112824][ T8721] netlink_rcv_skb+0x262/0x430 [ 300.117602][ T8721] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.122657][ T8721] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.127969][ T8721] ? __netlink_deliver_tap+0x77e/0x7c0 [ 300.133458][ T8721] genl_rcv+0x28/0x40 [ 300.137459][ T8721] netlink_unicast+0x7f6/0x990 [ 300.142231][ T8721] ? __pfx_netlink_unicast+0x10/0x10 [ 300.147514][ T8721] ? __virt_addr_valid+0x183/0x530 [ 300.152630][ T8721] ? __check_object_size+0x48e/0x900 [ 300.157925][ T8721] netlink_sendmsg+0x8e4/0xcb0 [ 300.162697][ T8721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.167994][ T8721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.173301][ T8721] __sock_sendmsg+0x221/0x270 [ 300.177980][ T8721] ____sys_sendmsg+0x52a/0x7e0 [ 300.182749][ T8721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.188058][ T8721] __sys_sendmsg+0x292/0x380 [ 300.192656][ T8721] ? __pfx___sys_sendmsg+0x10/0x10 [ 300.197787][ T8721] ? __pfx_vfs_write+0x10/0x10 [ 300.202587][ T8721] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 300.208921][ T8721] ? do_syscall_64+0x100/0x230 [ 300.213691][ T8721] ? do_syscall_64+0xb6/0x230 [ 300.218378][ T8721] do_syscall_64+0xf3/0x230 [ 300.222903][ T8721] ? clear_bhb_loop+0x35/0x90 [ 300.227601][ T8721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.233505][ T8721] RIP: 0033:0x7f96d577e719 [ 300.237940][ T8721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.257655][ T8721] RSP: 002b:00007f96d3bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.266075][ T8721] RAX: ffffffffffffffda RBX: 00007f96d5936058 RCX: 00007f96d577e719 [ 300.274059][ T8721] RDX: 000000000000c000 RSI: 0000000020000000 RDI: 000000000000000a [ 300.282046][ T8721] RBP: 00007f96d3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 300.290023][ T8721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.298002][ T8721] R13: 0000000000000000 R14: 00007f96d5936058 R15: 00007ffe270f3b68 [ 300.305986][ T8721] [ 300.391708][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.766'. [ 300.457665][ T8728] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 301.024107][ T5847] Bluetooth: hci6: command tx timeout [ 301.371999][ T5928] usb 2-1: USB disconnect, device number 33 [ 301.846740][ T8745] overlayfs: missing 'lowerdir' [ 303.137643][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.6.777'. [ 303.405058][ T8765] netlink: 'syz.5.778': attribute type 12 has an invalid length. [ 303.412880][ T8765] netlink: 197276 bytes leftover after parsing attributes in process `syz.5.778'. [ 303.609284][ T8771] netlink: 'syz.1.779': attribute type 4 has an invalid length. [ 303.623558][ T8771] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.779'. [ 303.635049][ T8771] netlink: 'syz.1.779': attribute type 4 has an invalid length. [ 303.644727][ T8771] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.779'. [ 303.909679][ T8771] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 303.916345][ T8771] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 303.925902][ T8771] vhci_hcd vhci_hcd.0: Device attached [ 304.115368][ T968] vhci_hcd: vhci_device speed not set [ 304.173933][ T8775] vhci_hcd: connection closed [ 304.183947][ T968] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 304.210179][ T69] vhci_hcd: stop threads [ 304.235823][ T69] vhci_hcd: release socket [ 304.240796][ T69] vhci_hcd: disconnect device [ 304.905264][ T968] usb 35-1: enqueue for inactive port 0 [ 305.002769][ T968] vhci_hcd: vhci_device speed not set [ 306.603435][ T5881] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 307.686271][ T8822] netlink: 48 bytes leftover after parsing attributes in process `syz.0.796'. [ 308.514288][ T5881] usb 7-1: device not accepting address 2, error -71 [ 309.628304][ T5928] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 310.508345][ T8854] netlink: 'syz.1.805': attribute type 4 has an invalid length. [ 310.531514][ T8854] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.805'. [ 310.552316][ T8854] netlink: 'syz.1.805': attribute type 4 has an invalid length. [ 310.566164][ T8854] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.805'. [ 310.587784][ T8854] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 310.594452][ T8854] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 310.604078][ T8854] vhci_hcd vhci_hcd.0: Device attached [ 310.812178][ T7096] vhci_hcd: vhci_device speed not set [ 310.834433][ T8861] overlayfs: missing 'lowerdir' [ 310.883775][ T7096] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 311.133886][ T8857] vhci_hcd: connection closed [ 311.151975][ T7363] vhci_hcd: stop threads [ 311.168284][ T7363] vhci_hcd: release socket [ 311.186810][ T7363] vhci_hcd: disconnect device [ 313.863252][ T8909] netlink: 48 bytes leftover after parsing attributes in process `syz.1.819'. [ 316.263867][ T7096] vhci_hcd: vhci_device speed not set [ 316.335119][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.834'. [ 317.188557][ T8971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.843'. [ 317.932884][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.944903][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.958294][ T8974] netlink: 164 bytes leftover after parsing attributes in process `syz.1.846'. [ 318.104001][ T5928] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 318.294692][ T5928] usb 7-1: device descriptor read/64, error -71 [ 318.573897][ T5928] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 318.703784][ T5928] usb 7-1: device descriptor read/64, error -71 [ 318.877302][ T5928] usb usb7-port1: attempt power cycle [ 319.300736][ T5928] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 319.882848][ T5928] usb 7-1: device descriptor read/8, error -71 [ 320.135175][ T5928] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 320.191130][ T8998] syz.5.853: attempt to access beyond end of device [ 320.191130][ T8998] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 320.218017][ T5928] usb 7-1: device descriptor read/8, error -71 [ 320.351610][ T5928] usb usb7-port1: unable to enumerate USB device [ 320.420728][ T9007] overlayfs: missing 'lowerdir' [ 321.345801][ T9015] 9pnet_fd: Insufficient options for proto=fd [ 322.023794][ T9021] bond0: (slave tunl0): Error: Device can not be enslaved while up [ 322.160516][ T9025] bridge_slave_0: left allmulticast mode [ 322.187647][ T9025] bridge_slave_0: left promiscuous mode [ 322.193424][ T9025] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.214103][ T5882] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 322.256205][ T9025] bridge_slave_1: left allmulticast mode [ 322.262078][ T9025] bridge_slave_1: left promiscuous mode [ 322.268643][ T9025] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.291032][ T9025] bond0: (slave bond_slave_0): Releasing backup interface [ 322.309393][ T9025] bond0: (slave bond_slave_1): Releasing backup interface [ 322.374352][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 322.385453][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.404339][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.413420][ T9025] team0: Port device team_slave_0 removed [ 322.421758][ T5882] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 322.435078][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.449472][ T9025] team0: Port device team_slave_1 removed [ 322.454669][ T5882] usb 1-1: config 0 descriptor?? [ 322.456607][ T9025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.469205][ T9025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.478954][ T9025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.487263][ T9025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.590034][ T9030] bridge_slave_0: left allmulticast mode [ 322.602891][ T9030] bridge_slave_0: left promiscuous mode [ 322.633411][ T9030] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.690182][ T9030] bridge_slave_1: left allmulticast mode [ 322.709289][ T9030] bridge_slave_1: left promiscuous mode [ 322.731568][ T9030] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.777729][ T9030] bond0: (slave bond_slave_0): Releasing backup interface [ 322.816422][ T9030] bond0: (slave bond_slave_1): Releasing backup interface [ 322.889318][ T5882] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.001A/input/input12 [ 322.993968][ T9030] team0: Port device team_slave_0 removed [ 323.176418][ T9030] team0: Port device team_slave_1 removed [ 323.182794][ T9030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.204640][ T5882] appleir 0003:05AC:8241.001A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 323.225369][ T9030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.236810][ T9030] bond1: (slave gretap1): Releasing active interface [ 323.245871][ T9030] batman_adv: batadv0: Removing interface: erspan1 [ 324.249252][ T968] usb 1-1: reset high-speed USB device number 26 using dummy_hcd [ 324.866282][ T9062] overlayfs: missing 'lowerdir' [ 326.303862][ T5881] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 326.459069][ T5881] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.481830][ T5881] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 326.493808][ T9082] vivid-000: ================= START STATUS ================= [ 326.501742][ T9082] vivid-000: Generate PTS: true [ 326.508993][ T9082] vivid-000: Generate SCR: true [ 326.514360][ T9082] tpg source WxH: 3840x2160 (R'G'B) [ 326.519627][ T9082] tpg field: 1 [ 326.523016][ T9082] tpg crop: 3840x2160@0x0 [ 326.856315][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 326.915487][ T9079] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 326.948082][ T9079] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 327.046031][ T9079] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 327.052289][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 327.079346][ T9079] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 327.088646][ T9087] loop8: detected capacity change from 0 to 7 [ 327.098190][ T9082] tpg compose: 3840x2160@0x0 [ 327.102860][ T9082] tpg colorspace: 8 [ 327.128114][ T9087] Dev loop8: unable to read RDB block 7 [ 327.134221][ T9087] loop8: AHDI p4 [ 327.140886][ T9079] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 327.156062][ T9087] loop8: partition table partially beyond EOD, truncated [ 327.168504][ T5881] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 327.177980][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.181839][ T9082] tpg transfer function: 0/0 [ 327.186036][ T5881] usb 7-1: Product: syz [ 327.186059][ T5881] usb 7-1: Manufacturer: syz [ 327.186085][ T5881] usb 7-1: SerialNumber: syz [ 327.204960][ T9082] tpg quantization: 0/0 [ 327.209149][ T9082] tpg RGB range: 0/2 [ 327.213073][ T9082] vivid-000: ================== END STATUS ================== [ 327.403923][ T7096] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 328.475705][ T7096] usb 6-1: device descriptor read/64, error -71 [ 328.498436][ T5882] usb 1-1: USB disconnect, device number 26 [ 328.568035][ T5881] cdc_ncm 7-1:1.0: bind() failure [ 328.612583][ T5881] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 328.651347][ T5881] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 328.688151][ T5881] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 328.727305][ T9112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.745026][ T5881] usb 7-1: USB disconnect, device number 8 [ 328.768251][ T9112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.815850][ T9112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.850815][ T9112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.910597][ T9112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.925387][ T9112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.942621][ T9112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.031670][ T9112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.045185][ T9112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.061420][ T9112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.076566][ T5837] Bluetooth: hci6: command 0x0c1a tx timeout [ 329.082972][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 329.089833][ T5881] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 329.131793][ T7096] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 329.312136][ T7096] usb 6-1: device descriptor read/64, error -71 [ 329.667038][ T7096] usb usb6-port1: attempt power cycle [ 329.908943][ T5881] usb 7-1: Using ep0 maxpacket: 32 [ 329.915839][ T5881] usb 7-1: config 0 has an invalid interface number: 126 but max is 0 [ 329.924160][ T5881] usb 7-1: config 0 has no interface number 0 [ 329.931285][ T5881] usb 7-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 329.941550][ T5881] usb 7-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 329.951723][ T5881] usb 7-1: config 0 interface 126 has no altsetting 0 [ 329.999918][ T5881] usb 7-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 330.030314][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.043773][ T5881] usb 7-1: Product: syz [ 330.048014][ T5881] usb 7-1: Manufacturer: syz [ 330.073127][ T5881] usb 7-1: SerialNumber: syz [ 330.087057][ T5881] usb 7-1: config 0 descriptor?? [ 330.123158][ T9111] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 330.144045][ T9111] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 331.164225][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 331.170750][ T5837] Bluetooth: hci6: command 0x0c1a tx timeout [ 331.684848][ T9141] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 331.715717][ T9141] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 331.898340][ T5881] ir_usb 7-1:0.126: IR Dongle converter detected [ 331.905462][ T5881] usb 7-1: IRDA class descriptor not found, device not bound [ 331.983774][ T5881] usb 7-1: USB disconnect, device number 9 [ 333.253826][ T7096] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 333.268448][ T9162] x_tables: ip_tables: osf match: only valid for protocol 6 [ 333.383805][ T7096] usb 3-1: device descriptor read/64, error -71 [ 333.650399][ T9180] netlink: 'syz.0.906': attribute type 4 has an invalid length. [ 333.661155][ T9180] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.906'. [ 333.676930][ T9180] netlink: 'syz.0.906': attribute type 4 has an invalid length. [ 333.686044][ T9180] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.906'. [ 333.730631][ T9180] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 333.737297][ T9180] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 333.754472][ T9184] netlink: 'syz.1.907': attribute type 2 has an invalid length. [ 333.762253][ T9184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.907'. [ 333.781409][ T7096] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 333.795445][ T5143] Bluetooth: hci6: command 0x0c1a tx timeout [ 333.953903][ T7096] usb 3-1: device descriptor read/64, error -71 [ 333.964157][ T9180] vhci_hcd vhci_hcd.0: Device attached [ 334.099748][ T9169] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 334.209134][ T5924] vhci_hcd: vhci_device speed not set [ 334.246663][ T7096] usb usb3-port1: attempt power cycle [ 334.323512][ T9169] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 334.333887][ T5924] usb 33-1: new full-speed USB device number 5 using vhci_hcd [ 334.431255][ T9182] vhci_hcd: connection reset by peer [ 334.442655][ T3557] vhci_hcd: stop threads [ 334.447221][ T3557] vhci_hcd: release socket [ 334.451719][ T3557] vhci_hcd: disconnect device [ 334.571661][ T9194] netlink: del zone limit has 4 unknown bytes [ 334.583135][ T9194] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 334.601891][ T9194] openvswitch: netlink: Actions may not be safe on all matching packets [ 334.697106][ T7096] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 334.736160][ T7096] usb 3-1: device descriptor read/8, error -71 [ 335.551227][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 335.583743][ T7096] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 335.662088][ T7096] usb 3-1: device descriptor read/8, error -71 [ 335.814418][ T7096] usb usb3-port1: unable to enumerate USB device [ 336.387402][ T5847] Bluetooth: hci6: command 0x0c1a tx timeout [ 337.199707][ T5882] IPVS: starting estimator thread 0... [ 337.206276][ T9221] x_tables: ip_tables: osf match: only valid for protocol 6 [ 337.271561][ T9223] netlink: 32 bytes leftover after parsing attributes in process `syz.1.913'. [ 337.321286][ T9223] netlink: 32 bytes leftover after parsing attributes in process `syz.1.913'. [ 337.333960][ T29] audit: type=1326 audit(1731420764.107:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9200 comm="syz.1.913" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f152b57e719 code=0x0 [ 337.400453][ T9228] IPVS: using max 19 ests per chain, 45600 per kthread [ 337.600305][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 338.445454][ T5847] Bluetooth: hci6: command 0x0c1a tx timeout [ 338.465083][ T9252] netlink: 'syz.2.927': attribute type 4 has an invalid length. [ 338.472779][ T9252] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.927'. [ 338.533847][ T9252] netlink: 'syz.2.927': attribute type 4 has an invalid length. [ 338.567947][ T9252] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.927'. [ 338.944544][ T9252] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 338.951194][ T9252] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 339.024649][ T9252] vhci_hcd vhci_hcd.0: Device attached [ 339.054377][ T9259] vhci_hcd: connection closed [ 339.058087][ T3557] vhci_hcd: stop threads [ 339.083891][ T3557] vhci_hcd: release socket [ 339.090572][ T3557] vhci_hcd: disconnect device [ 339.333333][ T9265] FAULT_INJECTION: forcing a failure. [ 339.333333][ T9265] name failslab, interval 1, probability 0, space 0, times 0 [ 339.368830][ T9265] CPU: 0 UID: 0 PID: 9265 Comm: syz.5.932 Not tainted 6.12.0-rc7-syzkaller #0 [ 339.377802][ T9265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 339.387892][ T9265] Call Trace: [ 339.391187][ T9265] [ 339.394142][ T9265] dump_stack_lvl+0x241/0x360 [ 339.398868][ T9265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.405057][ T9265] ? __pfx__printk+0x10/0x10 [ 339.409680][ T9265] ? __kmalloc_node_track_caller_noprof+0xb2/0x440 [ 339.416233][ T9265] ? __pfx___might_resched+0x10/0x10 [ 339.421551][ T9265] should_fail_ex+0x3b0/0x4e0 [ 339.426237][ T9265] should_failslab+0xac/0x100 [ 339.430960][ T9265] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 339.437298][ T9265] ? kasprintf+0xd5/0x120 [ 339.441632][ T9265] kvasprintf+0xdf/0x190 [ 339.445874][ T9265] ? __kmalloc_noprof+0x1fc/0x400 [ 339.450913][ T9265] ? nla_strdup+0x9c/0x140 [ 339.455337][ T9265] ? nf_tables_newset+0x17b2/0x2ee0 [ 339.460539][ T9265] ? __pfx_kvasprintf+0x10/0x10 [ 339.465411][ T9265] ? ____sys_sendmsg+0x52a/0x7e0 [ 339.470351][ T9265] kasprintf+0xd5/0x120 [ 339.474511][ T9265] ? __pfx_kasprintf+0x10/0x10 [ 339.479290][ T9265] nf_tables_set_alloc_name+0x111/0x730 [ 339.484870][ T9265] ? nla_strdup+0x9c/0x140 [ 339.489285][ T9265] ? rcu_is_watching+0x15/0xb0 [ 339.494046][ T9265] ? __pfx_nf_tables_set_alloc_name+0x10/0x10 [ 339.500119][ T9265] ? __asan_memcpy+0x40/0x70 [ 339.504710][ T9265] ? nla_strdup+0xb7/0x140 [ 339.509134][ T9265] nf_tables_newset+0x17d3/0x2ee0 [ 339.514175][ T9265] ? __pfx_nf_tables_newset+0x10/0x10 [ 339.519554][ T9265] ? __pfx_lock_release+0x10/0x10 [ 339.524591][ T9265] ? __nla_parse+0x40/0x60 [ 339.529008][ T9265] nfnetlink_rcv+0x14dc/0x2ab0 [ 339.533798][ T9265] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 339.538938][ T9265] ? netlink_deliver_tap+0x2e/0x1b0 [ 339.544140][ T9265] ? skb_clone+0x240/0x390 [ 339.548556][ T9265] ? __pfx_lock_release+0x10/0x10 [ 339.554112][ T9265] ? netlink_deliver_tap+0x2e/0x1b0 [ 339.559308][ T9265] netlink_unicast+0x7f6/0x990 [ 339.564072][ T9265] ? __pfx_netlink_unicast+0x10/0x10 [ 339.569354][ T9265] ? __virt_addr_valid+0x183/0x530 [ 339.574640][ T9265] ? __check_object_size+0x48e/0x900 [ 339.579929][ T9265] netlink_sendmsg+0x8e4/0xcb0 [ 339.584701][ T9265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.590006][ T9265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.595286][ T9265] __sock_sendmsg+0x221/0x270 [ 339.599961][ T9265] ____sys_sendmsg+0x52a/0x7e0 [ 339.604735][ T9265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.610296][ T9265] __sys_sendmsg+0x292/0x380 [ 339.614893][ T9265] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.620018][ T9265] ? __pfx_vfs_write+0x10/0x10 [ 339.624806][ T9265] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 339.631139][ T9265] ? do_syscall_64+0x100/0x230 [ 339.635912][ T9265] ? do_syscall_64+0xb6/0x230 [ 339.640622][ T9265] do_syscall_64+0xf3/0x230 [ 339.645142][ T9265] ? clear_bhb_loop+0x35/0x90 [ 339.649827][ T9265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.655724][ T9265] RIP: 0033:0x7feba977e719 [ 339.660136][ T9265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.679747][ T9265] RSP: 002b:00007febaa556038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.688165][ T9265] RAX: ffffffffffffffda RBX: 00007feba9935f80 RCX: 00007feba977e719 [ 339.696133][ T9265] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 339.704104][ T9265] RBP: 00007febaa556090 R08: 0000000000000000 R09: 0000000000000000 [ 339.712071][ T9265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 339.720050][ T9265] R13: 0000000000000000 R14: 00007feba9935f80 R15: 00007ffcc9698788 [ 339.728038][ T9265] [ 339.750940][ T5924] vhci_hcd: vhci_device speed not set [ 340.511121][ T9275] binder: 9274:9275 ioctl c0306201 20000380 returned -14 [ 340.688701][ T9281] overlay: Unknown parameter '/' [ 342.493886][ T5882] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 342.631829][ T9309] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 342.650587][ T9310] netlink: 32 bytes leftover after parsing attributes in process `syz.2.943'. [ 342.665700][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 342.683777][ T5882] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 342.691836][ T9310] netlink: 32 bytes leftover after parsing attributes in process `syz.2.943'. [ 342.727191][ T9309] 9pnet: Could not find request transport: 0xffffffffffffffff [ 342.763813][ T29] audit: type=1326 audit(1731420769.537:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9296 comm="syz.2.943" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7de297e719 code=0x0 [ 343.703777][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 343.713481][ T5882] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 343.740049][ T5882] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 343.763849][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.781586][ T5882] usb 1-1: Product: syz [ 343.781602][ T5882] usb 1-1: Manufacturer: syz [ 343.781612][ T5882] usb 1-1: SerialNumber: syz [ 343.784692][ T5882] usb 1-1: config 0 descriptor?? [ 343.789904][ T5882] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 343.992541][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.944'. [ 344.144677][ T5882] ums-isd200 1-1:0.0: probe with driver ums-isd200 failed with error -22 [ 344.213104][ T9302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.213282][ T9302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.834141][ T5924] usb 1-1: USB disconnect, device number 27 [ 345.595710][ T9349] ip6t_srh: unknown srh invflags 7D00 [ 346.097583][ T9353] binder: 9352:9353 ioctl c0306201 200003c0 returned -14 [ 350.255212][ T9398] netlink: 'syz.5.972': attribute type 24 has an invalid length. [ 350.499416][ T9397] netlink: 32 bytes leftover after parsing attributes in process `syz.6.970'. [ 350.518050][ T9397] netlink: 32 bytes leftover after parsing attributes in process `syz.6.970'. [ 350.608951][ T29] audit: type=1326 audit(1731420777.337:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9390 comm="syz.6.970" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd47c17e719 code=0x0 [ 350.629873][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.286898][ T9410] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 351.322555][ T9401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.973'. [ 351.332021][ T9410] macvtap1: entered promiscuous mode [ 351.338339][ T9410] macvtap1: entered allmulticast mode [ 351.343992][ T9410] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 353.535431][ T5882] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 354.473724][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 354.541571][ T5882] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 354.550037][ T5882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.377090][ T5882] usb 1-1: config 0 has no interface number 0 [ 356.216768][ T5882] usb 1-1: New USB device found, idVendor=456d, idProduct=3a16, bcdDevice= b.3b [ 356.226058][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.236731][ T5882] usb 1-1: Product: syz [ 356.253845][ T5882] usb 1-1: Manufacturer: syz [ 356.258507][ T5882] usb 1-1: SerialNumber: syz [ 356.266143][ T5882] usb 1-1: config 0 descriptor?? [ 356.481026][ T7096] usb 1-1: USB disconnect, device number 28 [ 359.537910][ T9490] team0: Mode changed to "loadbalance" [ 359.736021][ T9494] netlink: 32 bytes leftover after parsing attributes in process `syz.0.993'. [ 359.745100][ T9494] netlink: 32 bytes leftover after parsing attributes in process `syz.0.993'. [ 359.984107][ T29] audit: type=1326 audit(1731420786.557:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9477 comm="syz.0.993" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96d577e719 code=0x0 [ 363.761190][ T9521] netlink: 'syz.0.1007': attribute type 1 has an invalid length. [ 364.127155][ T9537] netlink: zone id is out of range [ 364.132517][ T9537] netlink: zone id is out of range [ 364.138173][ T9537] netlink: del zone limit has 4 unknown bytes [ 364.147320][ T9537] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 364.156582][ T9537] openvswitch: netlink: Actions may not be safe on all matching packets [ 364.274165][ T9539] netlink: 'syz.6.1008': attribute type 4 has an invalid length. [ 364.330287][ T9539] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.1008'. [ 364.352584][ T9539] netlink: 'syz.6.1008': attribute type 4 has an invalid length. [ 364.664113][ T9539] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.1008'. [ 365.129960][ T9547] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 365.136725][ T9547] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 365.239619][ T9547] vhci_hcd vhci_hcd.0: Device attached [ 365.276525][ T5847] Bluetooth: hci6: unexpected event for opcode 0x202f [ 365.296668][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1015'. [ 365.351481][ T9567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1017'. [ 365.364862][ T9567] syz_tun: entered promiscuous mode [ 365.377382][ T9554] vhci_hcd: connection closed [ 365.377782][ T12] vhci_hcd: stop threads [ 365.414346][ T9567] syz_tun: left promiscuous mode [ 365.419656][ T12] vhci_hcd: release socket [ 365.433800][ T7096] vhci_hcd: vhci_device speed not set [ 365.443217][ T12] vhci_hcd: disconnect device [ 365.495529][ T7096] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 365.515532][ T7096] usb 45-1: enqueue for inactive port 0 [ 365.584654][ T9573] team0: No ports can be present during mode change [ 365.593940][ T7096] vhci_hcd: vhci_device speed not set [ 366.014606][ T9584] program syz.2.1021 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.061796][ T9585] netlink: 'syz.0.1019': attribute type 4 has an invalid length. [ 366.118184][ T9585] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1019'. [ 366.146753][ T9586] netlink: 'syz.0.1019': attribute type 4 has an invalid length. [ 366.154750][ T9586] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1019'. [ 366.175810][ T9585] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 366.182480][ T9585] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 366.938478][ T9585] vhci_hcd vhci_hcd.0: Device attached [ 368.095691][ T5924] vhci_hcd: vhci_device speed not set [ 368.726883][ T9588] vhci_hcd: connection closed [ 368.825960][ T5924] usb 33-1: new full-speed USB device number 6 using vhci_hcd [ 368.862461][ T9599] overlay: ./bus is not a directory [ 368.890450][ T11] vhci_hcd: stop threads [ 368.895178][ T11] vhci_hcd: release socket [ 368.899677][ T11] vhci_hcd: disconnect device [ 370.879448][ T9635] FAULT_INJECTION: forcing a failure. [ 370.879448][ T9635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.913692][ T9635] CPU: 1 UID: 0 PID: 9635 Comm: syz.6.1036 Not tainted 6.12.0-rc7-syzkaller #0 [ 370.922696][ T9635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 370.932770][ T9635] Call Trace: [ 370.936056][ T9635] [ 370.938987][ T9635] dump_stack_lvl+0x241/0x360 [ 370.943683][ T9635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.948891][ T9635] ? __pfx__printk+0x10/0x10 [ 370.953512][ T9635] ? snprintf+0xda/0x120 [ 370.957760][ T9635] should_fail_ex+0x3b0/0x4e0 [ 370.962443][ T9635] _copy_to_user+0x31/0xb0 [ 370.966860][ T9635] simple_read_from_buffer+0xca/0x150 [ 370.972264][ T9635] proc_fail_nth_read+0x1e9/0x250 [ 370.977326][ T9635] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.982884][ T9635] ? rw_verify_area+0x55e/0x6f0 [ 370.987738][ T9635] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.993287][ T9635] vfs_read+0x1fc/0xb70 [ 370.997450][ T9635] ? fdget_pos+0x24e/0x320 [ 371.001869][ T9635] ? __pfx_vfs_read+0x10/0x10 [ 371.006553][ T9635] ? __fget_files+0x3f3/0x470 [ 371.011240][ T9635] ? fdget_pos+0x24e/0x320 [ 371.015661][ T9635] ksys_read+0x183/0x2b0 [ 371.019910][ T9635] ? __pfx_ksys_read+0x10/0x10 [ 371.024680][ T9635] ? do_syscall_64+0x100/0x230 [ 371.029449][ T9635] ? do_syscall_64+0xb6/0x230 [ 371.034135][ T9635] do_syscall_64+0xf3/0x230 [ 371.038642][ T9635] ? clear_bhb_loop+0x35/0x90 [ 371.043415][ T9635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.049312][ T9635] RIP: 0033:0x7fd47c17d15c [ 371.053737][ T9635] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 371.073374][ T9635] RSP: 002b:00007fd47a5f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 371.081803][ T9635] RAX: ffffffffffffffda RBX: 00007fd47c335f80 RCX: 00007fd47c17d15c [ 371.089777][ T9635] RDX: 000000000000000f RSI: 00007fd47a5f60a0 RDI: 0000000000000005 [ 371.097838][ T9635] RBP: 00007fd47a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 371.105813][ T9635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.113780][ T9635] R13: 0000000000000000 R14: 00007fd47c335f80 R15: 00007fff8a600c18 [ 371.121763][ T9635] [ 371.184114][ T968] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 371.351468][ T9639] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1039'. [ 371.381072][ T9637] netlink: 16034 bytes leftover after parsing attributes in process `syz.1.1037'. [ 372.400754][ T9637] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1037'. [ 372.424840][ T968] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 372.440070][ T968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 372.470330][ T968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 372.498623][ T968] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 372.518968][ T968] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 372.521170][ T9637] netlink: 16034 bytes leftover after parsing attributes in process `syz.1.1037'. [ 372.538651][ T9649] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x34324142, 8, 0, 0, 0) [ 372.559277][ T968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.571439][ T968] usb 6-1: config 0 descriptor?? [ 372.647863][ T9659] ERROR: device name not specified. [ 372.965118][ T9669] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1047'. [ 373.004802][ T968] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 373.037843][ T968] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 373.116138][ T9674] xt_hashlimit: max too large, truncated to 1048576 [ 373.163751][ T7096] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 373.202044][ T9678] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1052'. [ 373.407319][ T25] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 373.435602][ T7096] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.446154][ T7096] usb 1-1: config 0 has no interfaces? [ 373.451668][ T7096] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.461015][ T7096] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.478521][ T7096] usb 1-1: config 0 descriptor?? [ 373.631900][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 374.122693][ T25] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 374.133829][ T25] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 374.360104][ T5924] vhci_hcd: vhci_device speed not set [ 374.383371][ T25] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 374.397527][ T25] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 374.418743][ T25] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 374.429376][ T25] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 374.462555][ T25] usb 2-1: string descriptor 0 read error: -22 [ 374.475635][ T25] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 375.136747][ T968] usb 6-1: USB disconnect, device number 5 [ 375.153877][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.175820][ T25] adutux 2-1:168.0: interrupt endpoints not found [ 375.192475][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 375.201910][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1056'. [ 375.227509][ T9692] netlink: 'syz.2.1056': attribute type 6 has an invalid length. [ 375.239474][ T9692] netlink: 'syz.2.1056': attribute type 6 has an invalid length. [ 376.034408][ T29] audit: type=1326 audit(1731420802.437:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9696 comm="syz.5.1057" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feba977e719 code=0x0 [ 376.217426][ T9701] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1057'. [ 376.226519][ T9701] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1057'. [ 376.280548][ T968] usb 2-1: USB disconnect, device number 35 [ 376.334231][ T25] usb 1-1: USB disconnect, device number 29 [ 376.873430][ T9712] netlink: 'syz.6.1061': attribute type 1 has an invalid length. [ 376.911029][ T9712] __nla_validate_parse: 1 callbacks suppressed [ 376.911043][ T9712] netlink: 9336 bytes leftover after parsing attributes in process `syz.6.1061'. [ 376.973810][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1061'. [ 377.101917][ T9720] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1063'. [ 378.146163][ T5882] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 378.321963][ T5882] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 378.537121][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 378.728883][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 378.745600][ T5882] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 378.765782][ T5882] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 378.788412][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.838676][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.845204][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.939329][ T9741] loop8: detected capacity change from 0 to 7 [ 378.969896][ T9741] Dev loop8: unable to read RDB block 7 [ 378.991984][ T5882] usb 7-1: config 0 descriptor?? [ 378.998268][ T9741] loop8: unable to read partition table [ 379.008329][ T9741] loop8: partition table beyond EOD, truncated [ 379.094440][ T9746] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1069'. [ 379.103525][ T9746] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1069'. [ 379.198340][ T29] audit: type=1326 audit(1731420805.907:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.5.1069" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feba977e719 code=0x0 [ 379.712231][ T9741] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 379.712231][ T9741] ) failed (rc=-5) [ 379.952480][ T5882] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 379.962061][ T5882] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 380.427323][ T9760] ubi0: attaching mtd0 [ 380.440779][ T9760] ubi0: scanning is finished [ 380.445757][ T9760] ubi0: empty MTD device detected [ 380.504678][ T9761] befs: (nullb0): No write support. Marking filesystem read-only [ 380.517353][ T9761] befs: (nullb0): invalid magic header [ 381.024936][ T9760] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 381.140331][ T5881] usb 7-1: USB disconnect, device number 10 [ 381.205013][ T9770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1076'. [ 381.351408][ T9774] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1077'. [ 381.768526][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1082'. [ 381.843923][ T25] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 382.003716][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 382.011194][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.013945][ T5881] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 382.021555][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 382.042295][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 382.052151][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 382.061988][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 382.082357][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 382.092780][ T25] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 382.100914][ T25] usb 3-1: Manufacturer: syz [ 382.112518][ T25] usb 3-1: config 0 descriptor?? [ 382.190489][ T5881] usb 7-1: config 16 has an invalid interface number: 140 but max is 1 [ 382.201604][ T5881] usb 7-1: config 16 has an invalid interface number: 54 but max is 1 [ 382.210229][ T5881] usb 7-1: config 16 has no interface number 0 [ 382.216615][ T968] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 382.226518][ T5881] usb 7-1: config 16 has no interface number 1 [ 382.233250][ T5881] usb 7-1: config 16 interface 140 has no altsetting 0 [ 382.240870][ T5881] usb 7-1: config 16 interface 54 has no altsetting 0 [ 382.248021][ T5881] usb 7-1: New USB device found, idVendor=19d2, idProduct=0128, bcdDevice=6e.46 [ 382.259568][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.375609][ T968] usb 2-1: config 0 has an invalid interface number: 112 but max is 0 [ 382.389697][ T968] usb 2-1: config 0 has an invalid descriptor of length 250, skipping remainder of the config [ 382.400670][ T968] usb 2-1: config 0 has no interface number 0 [ 382.407084][ T968] usb 2-1: config 0 interface 112 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 382.424254][ T25] rc_core: IR keymap rc-hauppauge not found [ 382.430192][ T25] Registered IR keymap rc-empty [ 382.442874][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 382.443822][ T968] usb 2-1: New USB device found, idVendor=2386, idProduct=e76d, bcdDevice=d8.4c [ 382.461289][ T968] usb 2-1: New USB device strings: Mfr=165, Product=42, SerialNumber=119 [ 382.470968][ T968] usb 2-1: Product: syz [ 382.477589][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 382.481684][ T968] usb 2-1: Manufacturer: syz [ 382.497551][ T5881] usb 7-1: string descriptor 0 read error: -71 [ 382.519047][ T5881] option 7-1:16.140: GSM modem (1-port) converter detected [ 382.548971][ T968] usb 2-1: SerialNumber: syz [ 382.560026][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 382.565639][ T968] usb 2-1: config 0 descriptor?? [ 382.578328][ T5881] usb 7-1: USB disconnect, device number 11 [ 382.587885][ T5881] option 7-1:16.140: device disconnected [ 382.588409][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 382.620548][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 382.665434][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 382.694501][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 382.716878][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 382.753822][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 382.782096][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 382.817036][ T968] usb 2-1: USB disconnect, device number 36 [ 382.824144][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 382.844046][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 382.876017][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 382.893798][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 382.924620][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 382.956078][ T25] mceusb 3-1:0.0: Registered ￿ with mce emulator interface version 1 [ 382.968338][ T29] audit: type=1326 audit(1731420809.757:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9776 comm="syz.2.1079" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7de297e719 code=0x0 [ 382.973674][ T25] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 383.618312][ T9802] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 383.679123][ T9802] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 383.714538][ T9820] FAULT_INJECTION: forcing a failure. [ 383.714538][ T9820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.728556][ T9802] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 383.788358][ T9802] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 383.808938][ T9820] CPU: 1 UID: 0 PID: 9820 Comm: syz.6.1092 Not tainted 6.12.0-rc7-syzkaller #0 [ 383.817930][ T9820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 383.828017][ T9820] Call Trace: [ 383.831328][ T9820] [ 383.834267][ T9820] dump_stack_lvl+0x241/0x360 [ 383.838955][ T9820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.844162][ T9820] ? __pfx__printk+0x10/0x10 [ 383.848780][ T9820] ? __pfx_lock_release+0x10/0x10 [ 383.853837][ T9820] should_fail_ex+0x3b0/0x4e0 [ 383.858546][ T9820] _copy_from_user+0x2f/0xc0 [ 383.863157][ T9820] copy_msghdr_from_user+0xae/0x680 [ 383.868379][ T9820] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 383.874228][ T9820] __sys_sendmmsg+0x36d/0x730 [ 383.878940][ T9820] ? __pfx___sys_sendmmsg+0x10/0x10 [ 383.884170][ T9820] ? __pfx_lock_release+0x10/0x10 [ 383.889221][ T9820] ? kstrtouint_from_user+0x128/0x190 [ 383.894643][ T9820] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 383.900586][ T9820] ? ksys_write+0x229/0x2b0 [ 383.905126][ T9820] ? __pfx_lock_release+0x10/0x10 [ 383.910200][ T9820] ? vfs_write+0x730/0xd30 [ 383.914660][ T9820] ? __mutex_unlock_slowpath+0x21d/0x750 [ 383.920337][ T9820] ? __fget_files+0x3f3/0x470 [ 383.925056][ T9820] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 383.931066][ T9820] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 383.937422][ T9820] ? do_syscall_64+0x100/0x230 [ 383.942217][ T9820] __x64_sys_sendmmsg+0xa0/0xb0 [ 383.947111][ T9820] do_syscall_64+0xf3/0x230 [ 383.951649][ T9820] ? clear_bhb_loop+0x35/0x90 [ 383.956356][ T9820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.962280][ T9820] RIP: 0033:0x7fd47c17e719 [ 383.966721][ T9820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.986356][ T9820] RSP: 002b:00007fd47a5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 383.994809][ T9820] RAX: ffffffffffffffda RBX: 00007fd47c335f80 RCX: 00007fd47c17e719 [ 384.002812][ T9820] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 384.010828][ T9820] RBP: 00007fd47a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 384.018822][ T9820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.026818][ T9820] R13: 0000000000000000 R14: 00007fd47c335f80 R15: 00007fff8a600c18 [ 384.034830][ T9820] [ 384.736271][ T9837] netlink: 'syz.1.1094': attribute type 4 has an invalid length. [ 384.743320][ T5924] usb 3-1: USB disconnect, device number 33 [ 384.765997][ T9837] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1094'. [ 384.808647][ T9837] netlink: 'syz.1.1094': attribute type 4 has an invalid length. [ 384.832931][ T9837] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1094'. [ 384.849350][ T9847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.874080][ T9837] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 384.880896][ T9837] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 384.929343][ T9837] vhci_hcd vhci_hcd.0: Device attached [ 385.053222][ T9853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1101'. [ 385.105719][ T968] vhci_hcd: vhci_device speed not set [ 385.111555][ T9848] vhci_hcd: connection closed [ 385.114398][ T1328] vhci_hcd: stop threads [ 385.124833][ T1328] vhci_hcd: release socket [ 385.135351][ T1328] vhci_hcd: disconnect device [ 385.173751][ T5924] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 385.173794][ T968] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 385.210063][ T968] usb 35-1: enqueue for inactive port 0 [ 385.273769][ T5881] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 385.284042][ T968] vhci_hcd: vhci_device speed not set [ 385.353949][ T5924] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 385.442275][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.579641][ T5924] usb 3-1: config 0 descriptor?? [ 385.655414][ T5924] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 385.991251][ T5924] gp8psk: usb in 128 operation failed. [ 386.033955][ T5924] gp8psk: usb in 137 operation failed. [ 386.049987][ T5924] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 386.069895][ T5924] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 386.081188][ T5924] usb 3-1: USB disconnect, device number 34 [ 386.189323][ T5881] usb 6-1: config 0 has an invalid interface number: 112 but max is 0 [ 386.198423][ T5881] usb 6-1: config 0 has an invalid descriptor of length 250, skipping remainder of the config [ 386.233842][ T5881] usb 6-1: config 0 has no interface number 0 [ 386.250533][ T5881] usb 6-1: config 0 interface 112 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 386.315685][ T5881] usb 6-1: New USB device found, idVendor=2386, idProduct=e76d, bcdDevice=d8.4c [ 386.326760][ T5881] usb 6-1: New USB device strings: Mfr=165, Product=42, SerialNumber=119 [ 386.335302][ T5881] usb 6-1: Product: syz [ 386.339483][ T5881] usb 6-1: Manufacturer: syz [ 386.344275][ T5881] usb 6-1: SerialNumber: syz [ 387.167899][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1104'. [ 387.176991][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1104'. [ 387.203999][ T9872] netlink: 'syz.6.1104': attribute type 6 has an invalid length. [ 387.215542][ T9872] netlink: 'syz.6.1104': attribute type 6 has an invalid length. [ 387.267873][ T5881] usb 6-1: config 0 descriptor?? [ 387.515514][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 387.526639][ T5881] usb 6-1: USB disconnect, device number 6 [ 388.786308][ T9] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 388.796941][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 389.193948][ T9] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 389.203058][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.216109][ T9] usb 2-1: config 0 descriptor?? [ 389.343241][ T9] usb 2-1: string descriptor 0 read error: -71 [ 389.374332][ T9] usb 2-1: USB disconnect, device number 37 [ 390.123271][ T5924] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 390.290473][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.400934][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.656277][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 390.669388][ T5924] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 390.678516][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.689218][ T5924] usb 3-1: config 0 descriptor?? [ 390.921178][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1124'. [ 391.295373][ T5924] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 391.302842][ T5924] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 391.310330][ T5924] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 391.317827][ T5924] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 391.325603][ T5924] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 391.333033][ T5924] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 391.340760][ T5924] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 391.352127][ T5924] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 391.359726][ T5924] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 391.367663][ T5924] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 391.375134][ T5924] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 391.383095][ T5924] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 391.394022][ T5924] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 391.457171][ T9944] bond0: entered promiscuous mode [ 391.475781][ T9944] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 391.487934][ T5924] usb 3-1: USB disconnect, device number 35 [ 391.505714][ T9944] bond0: left promiscuous mode [ 391.773947][ T5833] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 392.874111][ T5833] usb 2-1: config 0 has an invalid interface number: 112 but max is 0 [ 392.882347][ T5833] usb 2-1: config 0 has an invalid descriptor of length 250, skipping remainder of the config [ 392.893190][ T5833] usb 2-1: config 0 has no interface number 0 [ 393.438983][ T5833] usb 2-1: config 0 interface 112 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 393.519721][ T5833] usb 2-1: New USB device found, idVendor=2386, idProduct=e76d, bcdDevice=d8.4c [ 393.533676][ T5833] usb 2-1: New USB device strings: Mfr=165, Product=42, SerialNumber=119 [ 393.579920][ T5833] usb 2-1: Product: syz [ 393.618952][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 393.628069][ T5833] usb 2-1: Manufacturer: syz [ 393.632688][ T5833] usb 2-1: SerialNumber: syz [ 393.643907][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1136'. [ 393.674586][ T5833] usb 2-1: config 0 descriptor?? [ 393.679685][ T9964] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1136'. [ 394.093923][ T5833] usb 2-1: USB disconnect, device number 38 [ 395.379918][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 395.388391][ T9995] FAULT_INJECTION: forcing a failure. [ 395.388391][ T9995] name failslab, interval 1, probability 0, space 0, times 0 [ 395.454113][ T9995] CPU: 0 UID: 0 PID: 9995 Comm: syz.5.1145 Not tainted 6.12.0-rc7-syzkaller #0 [ 395.463106][ T9995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 395.473165][ T9995] Call Trace: [ 395.476439][ T9995] [ 395.479363][ T9995] dump_stack_lvl+0x241/0x360 [ 395.484038][ T9995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.489224][ T9995] ? __pfx__printk+0x10/0x10 [ 395.493824][ T9995] ? __kmalloc_noprof+0xb0/0x400 [ 395.498781][ T9995] ? __pfx___might_resched+0x10/0x10 [ 395.504092][ T9995] ? __mutex_lock+0x2ef/0xd70 [ 395.508799][ T9995] should_fail_ex+0x3b0/0x4e0 [ 395.513500][ T9995] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 395.519772][ T9995] should_failslab+0xac/0x100 [ 395.524479][ T9995] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 395.530746][ T9995] __kmalloc_noprof+0xd8/0x400 [ 395.535536][ T9995] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 395.541723][ T9995] genl_rcv_msg+0x802/0xec0 [ 395.546251][ T9995] ? mark_lock+0x9a/0x360 [ 395.550612][ T9995] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.555693][ T9995] ? __pfx_lock_acquire+0x10/0x10 [ 395.560745][ T9995] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 395.566840][ T9995] ? __pfx___might_resched+0x10/0x10 [ 395.572159][ T9995] netlink_rcv_skb+0x1e3/0x430 [ 395.576947][ T9995] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.582001][ T9995] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 395.587328][ T9995] ? __netlink_deliver_tap+0x77e/0x7c0 [ 395.592821][ T9995] genl_rcv+0x28/0x40 [ 395.596825][ T9995] netlink_unicast+0x7f6/0x990 [ 395.601613][ T9995] ? __pfx_netlink_unicast+0x10/0x10 [ 395.606933][ T9995] netlink_sendmsg+0x8e4/0xcb0 [ 395.611747][ T9995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.617080][ T9995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.622392][ T9995] __sock_sendmsg+0x221/0x270 [ 395.627096][ T9995] ____sys_sendmsg+0x52a/0x7e0 [ 395.631894][ T9995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.637226][ T9995] __sys_sendmsg+0x292/0x380 [ 395.641867][ T9995] ? __pfx___sys_sendmsg+0x10/0x10 [ 395.647016][ T9995] ? __pfx_vfs_write+0x10/0x10 [ 395.651830][ T9995] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 395.658196][ T9995] ? do_syscall_64+0x100/0x230 [ 395.662989][ T9995] ? do_syscall_64+0xb6/0x230 [ 395.667704][ T9995] do_syscall_64+0xf3/0x230 [ 395.672235][ T9995] ? clear_bhb_loop+0x35/0x90 [ 395.676946][ T9995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.682867][ T9995] RIP: 0033:0x7feba977e719 [ 395.687309][ T9995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.706946][ T9995] RSP: 002b:00007febaa556038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.715428][ T9995] RAX: ffffffffffffffda RBX: 00007feba9935f80 RCX: 00007feba977e719 [ 395.723415][ T9995] RDX: 0000000024040840 RSI: 0000000020000540 RDI: 0000000000000003 [ 395.731385][ T9995] RBP: 00007febaa556090 R08: 0000000000000000 R09: 0000000000000000 [ 395.739355][ T9995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.747322][ T9995] R13: 0000000000000000 R14: 00007feba9935f80 R15: 00007ffcc9698788 [ 395.755306][ T9995] [ 396.956393][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1149'. [ 396.965701][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1148'. [ 397.048043][T10011] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1149'. [ 398.693813][ T5833] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 398.701603][ T5924] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 398.863699][ T5833] usb 6-1: Using ep0 maxpacket: 16 [ 398.870736][ T5924] usb 3-1: config 0 has an invalid interface number: 112 but max is 0 [ 398.880884][ T5833] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.901487][ T5924] usb 3-1: config 0 has an invalid descriptor of length 250, skipping remainder of the config [ 398.916033][ T5833] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 398.927596][ T5924] usb 3-1: config 0 has no interface number 0 [ 398.936032][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.946073][ T5924] usb 3-1: config 0 interface 112 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 398.962866][ T5833] usb 6-1: Product: syz [ 398.971876][ T5833] usb 6-1: Manufacturer: syz [ 398.979764][ T5833] usb 6-1: SerialNumber: syz [ 398.987704][ T5924] usb 3-1: New USB device found, idVendor=2386, idProduct=e76d, bcdDevice=d8.4c [ 399.000781][ T5833] usb 6-1: config 0 descriptor?? [ 399.008327][ T5924] usb 3-1: New USB device strings: Mfr=165, Product=42, SerialNumber=119 [ 399.021631][ T5833] port100 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 399.031013][ T5924] usb 3-1: Product: syz [ 399.037660][ T5924] usb 3-1: Manufacturer: syz [ 399.045519][ T5924] usb 3-1: SerialNumber: syz [ 399.051731][ T5924] usb 3-1: config 0 descriptor?? [ 399.239077][ T968] usb 6-1: USB disconnect, device number 7 [ 399.293367][ T5924] usb 3-1: USB disconnect, device number 36 [ 399.791206][T10046] trusted_key: encrypted_key: key trusted:syz not found [ 401.491933][T10057] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1162'. [ 402.337994][T10081] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1169'. [ 402.347159][T10081] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1169'. [ 402.369248][ T29] audit: type=1326 audit(1731420829.157:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10075 comm="syz.6.1169" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd47c17e719 code=0x0 [ 402.957878][T10084] netlink: zone id is out of range [ 402.963125][T10084] netlink: zone id is out of range [ 402.969702][T10084] netlink: zone id is out of range [ 402.997654][T10084] netlink: del zone limit has 4 unknown bytes [ 403.009427][T10084] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 403.018604][T10084] openvswitch: netlink: Actions may not be safe on all matching packets [ 404.001876][ T968] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 404.054575][T10094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.871421][T10114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1179'. [ 404.881133][T10114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1179'. [ 405.009581][T10120] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1181'. [ 405.285001][T10127] xt_l2tp: invalid flags combination: 0 [ 407.494219][T10149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.234697][T10163] netlink: 'syz.2.1190': attribute type 12 has an invalid length. [ 408.242623][T10163] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.1190'. [ 408.692053][ T9] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 409.233303][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 409.287117][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 409.319083][ T9] usb 2-1: config 2 has an invalid interface number: 8 but max is 1 [ 409.341026][ T9] usb 2-1: config 2 has an invalid interface number: 3 but max is 1 [ 409.351388][ T9] usb 2-1: config 2 has no interface number 0 [ 409.360215][ T9] usb 2-1: config 2 has no interface number 1 [ 409.369130][ T9] usb 2-1: config 2 interface 8 has no altsetting 0 [ 409.399163][ T9] usb 2-1: New USB device found, idVendor=1199, idProduct=9051, bcdDevice=17.eb [ 409.437479][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.467231][ T9] usb 2-1: Product: syz [ 409.493967][ T9] usb 2-1: Manufacturer: syz [ 409.512268][ T9] usb 2-1: SerialNumber: syz [ 409.801465][ T9] usb 2-1: Could not set interface, error -71 [ 409.816113][ T9] usb 2-1: USB disconnect, device number 39 [ 411.234102][T10194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.153080][T10215] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 413.161512][T10215] openvswitch: netlink: Actions may not be safe on all matching packets [ 413.799240][T10226] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.491538][T10242] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1219'. [ 414.500685][T10242] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1219'. [ 414.521891][ T29] audit: type=1326 audit(1731420841.307:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10235 comm="syz.6.1219" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd47c17e719 code=0x0 [ 414.542894][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.627301][T10261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.757772][T10263] netlink: zone id is out of range [ 416.764660][T10263] netlink: zone id is out of range [ 416.766473][ T5881] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 416.770183][T10263] netlink: zone id is out of range [ 416.783874][T10263] netlink: del zone limit has 4 unknown bytes [ 417.139200][T10263] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 417.154294][T10263] openvswitch: netlink: Actions may not be safe on all matching packets [ 417.253835][ T5881] usb 1-1: config index 0 descriptor too short (expected 244, got 18) [ 417.268261][ T5881] usb 1-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 417.277604][ T5881] usb 1-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 417.319331][ T5881] usb 1-1: Product: syz [ 417.323545][ T5881] usb 1-1: Manufacturer: syz [ 417.343532][ T5881] usb 1-1: SerialNumber: syz [ 417.355136][ T5881] usb 1-1: config 0 descriptor?? [ 417.372036][ T5881] ldusb 1-1:0.0: Interrupt in endpoint not found [ 418.078162][ T5881] usb 1-1: USB disconnect, device number 30 [ 420.557615][T10286] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1231'. [ 420.566685][T10286] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1231'. [ 420.960027][ T29] audit: type=1326 audit(1731420847.367:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10280 comm="syz.1.1231" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f152b57e719 code=0x0 [ 420.965517][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'. [ 421.047618][T10298] FAULT_INJECTION: forcing a failure. [ 421.047618][T10298] name failslab, interval 1, probability 0, space 0, times 0 [ 421.060643][T10298] CPU: 1 UID: 0 PID: 10298 Comm: syz.2.1235 Not tainted 6.12.0-rc7-syzkaller #0 [ 421.069692][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 421.079778][T10298] Call Trace: [ 421.083078][T10298] [ 421.086023][T10298] dump_stack_lvl+0x241/0x360 [ 421.090725][T10298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.095946][T10298] ? __pfx__printk+0x10/0x10 [ 421.100563][T10298] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 421.106484][T10298] ? __pfx___might_resched+0x10/0x10 [ 421.111803][T10298] should_fail_ex+0x3b0/0x4e0 [ 421.116517][T10298] should_failslab+0xac/0x100 [ 421.121206][T10298] __kmalloc_cache_node_noprof+0x74/0x300 [ 421.126925][T10298] ? __get_vm_area_node+0x113/0x270 [ 421.132123][T10298] __get_vm_area_node+0x113/0x270 [ 421.137177][T10298] __vmalloc_node_range_noprof+0x3a6/0x13f0 [ 421.143073][T10298] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 421.148621][T10298] ? mark_lock+0x9a/0x360 [ 421.152964][T10298] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 421.159305][T10298] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 421.164852][T10298] __vmalloc_noprof+0x79/0x90 [ 421.169528][T10298] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 421.175070][T10298] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 421.180439][T10298] ? bpf_prog_alloc+0x28/0x1b0 [ 421.185201][T10298] bpf_prog_alloc+0x3a/0x1b0 [ 421.189786][T10298] bpf_prog_load+0x7f7/0x20f0 [ 421.194473][T10298] ? __pfx_bpf_prog_load+0x10/0x10 [ 421.199583][T10298] ? __pfx___might_resched+0x10/0x10 [ 421.204883][T10298] ? __might_fault+0xc6/0x120 [ 421.209558][T10298] __sys_bpf+0x4ee/0x810 [ 421.213818][T10298] ? __pfx___sys_bpf+0x10/0x10 [ 421.218607][T10298] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 421.224601][T10298] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 421.230964][T10298] ? do_syscall_64+0x100/0x230 [ 421.235752][T10298] __x64_sys_bpf+0x7c/0x90 [ 421.240200][T10298] do_syscall_64+0xf3/0x230 [ 421.244724][T10298] ? clear_bhb_loop+0x35/0x90 [ 421.249428][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.255343][T10298] RIP: 0033:0x7f7de297e719 [ 421.259763][T10298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.279367][T10298] RSP: 002b:00007f7de3732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 421.287786][T10298] RAX: ffffffffffffffda RBX: 00007f7de2b36058 RCX: 00007f7de297e719 [ 421.295756][T10298] RDX: 0000000000000094 RSI: 0000000020000080 RDI: 0000000000000005 [ 421.303735][T10298] RBP: 00007f7de3732090 R08: 0000000000000000 R09: 0000000000000000 [ 421.311712][T10298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.319721][T10298] R13: 0000000000000000 R14: 00007f7de2b36058 R15: 00007ffd993a73e8 [ 421.327705][T10298] [ 421.330754][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.337629][T10298] syz.2.1235: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 421.354164][T10298] CPU: 1 UID: 0 PID: 10298 Comm: syz.2.1235 Not tainted 6.12.0-rc7-syzkaller #0 [ 421.363218][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 421.373302][T10298] Call Trace: [ 421.376602][T10298] [ 421.379549][T10298] dump_stack_lvl+0x241/0x360 [ 421.384264][T10298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.389500][T10298] ? __pfx__printk+0x10/0x10 [ 421.394133][T10298] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 421.400586][T10298] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 421.407126][T10298] warn_alloc+0x278/0x410 [ 421.411497][T10298] ? __pfx_warn_alloc+0x10/0x10 [ 421.416383][T10298] ? __get_vm_area_node+0x113/0x270 [ 421.421612][T10298] ? __get_vm_area_node+0x261/0x270 [ 421.426848][T10298] __vmalloc_node_range_noprof+0x3cb/0x13f0 [ 421.432774][T10298] ? mark_lock+0x9a/0x360 [ 421.437180][T10298] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 421.443543][T10298] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 421.449113][T10298] __vmalloc_noprof+0x79/0x90 [ 421.453820][T10298] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 421.459394][T10298] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 421.464791][T10298] ? bpf_prog_alloc+0x28/0x1b0 [ 421.469585][T10298] bpf_prog_alloc+0x3a/0x1b0 [ 421.474204][T10298] bpf_prog_load+0x7f7/0x20f0 [ 421.478920][T10298] ? __pfx_bpf_prog_load+0x10/0x10 [ 421.484231][T10298] ? __pfx___might_resched+0x10/0x10 [ 421.489556][T10298] ? __might_fault+0xc6/0x120 [ 421.494266][T10298] __sys_bpf+0x4ee/0x810 [ 421.498532][T10298] ? __pfx___sys_bpf+0x10/0x10 [ 421.503334][T10298] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 421.509345][T10298] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 421.515700][T10298] ? do_syscall_64+0x100/0x230 [ 421.520500][T10298] __x64_sys_bpf+0x7c/0x90 [ 421.524945][T10298] do_syscall_64+0xf3/0x230 [ 421.529481][T10298] ? clear_bhb_loop+0x35/0x90 [ 421.532632][T10307] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1238'. [ 421.534165][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.534192][T10298] RIP: 0033:0x7f7de297e719 [ 421.534210][T10298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.534225][T10298] RSP: 002b:00007f7de3732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 421.534246][T10298] RAX: ffffffffffffffda RBX: 00007f7de2b36058 RCX: 00007f7de297e719 [ 421.534260][T10298] RDX: 0000000000000094 RSI: 0000000020000080 RDI: 0000000000000005 [ 421.534272][T10298] RBP: 00007f7de3732090 R08: 0000000000000000 R09: 0000000000000000 [ 421.534290][T10298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.613720][T10298] R13: 0000000000000000 R14: 00007f7de2b36058 R15: 00007ffd993a73e8 [ 421.621739][T10298] [ 421.624792][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.631516][T10298] Mem-Info: [ 421.634904][T10298] active_anon:365 inactive_anon:4071 isolated_anon:0 [ 421.634904][T10298] active_file:15874 inactive_file:39086 isolated_file:0 [ 421.634904][T10298] unevictable:768 dirty:169 writeback:0 [ 421.634904][T10298] slab_reclaimable:10933 slab_unreclaimable:109681 [ 421.634904][T10298] mapped:28606 shmem:1782 pagetables:792 [ 421.634904][T10298] sec_pagetables:0 bounce:0 [ 421.634904][T10298] kernel_misc_reclaimable:0 [ 421.634904][T10298] free:1304117 free_pcp:574 free_cma:0 [ 421.680170][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.686902][T10298] Node 0 active_anon:1460kB inactive_anon:16784kB active_file:63376kB inactive_file:156344kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115120kB dirty:676kB writeback:0kB shmem:6292kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11140kB pagetables:3068kB sec_pagetables:0kB all_unreclaimable? no [ 421.719413][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.726367][T10298] Node 1 active_anon:0kB inactive_anon:0kB active_file:120kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 421.756631][T10298] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 421.783676][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.789775][T10298] lowmem_reserve[]: 0 2465 2466 0 0 [ 421.795266][T10298] Node 0 DMA32 free:1290816kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1456kB inactive_anon:17548kB active_file:62588kB inactive_file:156292kB unevictable:1536kB writepending:676kB present:3129332kB managed:2552504kB mlocked:0kB bounce:0kB free_pcp:2092kB local_pcp:952kB free_cma:0kB [ 421.825982][T10298] lowmem_reserve[]: 0 0 0 0 0 [ 421.830740][T10298] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:788kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 421.857686][T10298] lowmem_reserve[]: 0 0 0 0 0 [ 421.862454][T10298] Node 1 Normal free:3910376kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:120kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 421.892076][T10298] lowmem_reserve[]: 0 0 0 0 0 [ 421.896907][T10298] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 421.909698][T10298] Node 0 DMA32: 9*4kB (UE) 22*8kB (UME) 550*16kB (UM) 495*32kB (UME) 243*64kB (UME) 25*128kB (UM) 29*256kB (UME) 18*512kB (UME) 15*1024kB (UM) 11*2048kB (UM) 290*4096kB (UM) = 1285972kB [ 421.928385][T10298] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 421.939986][T10298] Node 1 Normal: 198*4kB (UME) 54*8kB (UME) 44*16kB (UME) 199*32kB (UME) 102*64kB (UME) 34*128kB (UME) 12*256kB (UME) 6*512kB (UM) 6*1024kB (UME) 4*2048kB (UME) 945*4096kB (M) = 3910376kB [ 421.958929][T10298] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 421.968594][T10298] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 421.978790][T10298] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 421.988813][T10298] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 421.998152][T10298] 58118 total pagecache pages [ 422.002822][T10298] 1 pages in swap cache [ 422.007003][T10298] Free swap = 124672kB [ 422.011144][T10298] Total swap = 124996kB [ 422.015358][T10298] 2097051 pages RAM [ 422.019149][T10298] 0 pages HighMem/MovableOnly [ 422.023838][T10298] 427073 pages reserved [ 422.027977][T10298] 0 pages cma reserved [ 422.103947][ T5881] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 422.257987][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 422.269158][ T5881] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 422.640606][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 422.650507][ T5881] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 422.660397][ T5881] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 422.670691][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.736508][ T5881] usb 1-1: config 0 descriptor?? [ 422.797147][T10327] syz.5.1245: attempt to access beyond end of device [ 422.797147][T10327] nbd5: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 422.881105][T10329] netlink: 'syz.6.1243': attribute type 4 has an invalid length. [ 422.893357][T10327] hfsplus: unable to find HFS+ superblock [ 422.912880][T10331] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.1236'. [ 422.947958][T10330] /dev/nbd5: Can't open blockdev [ 422.971672][T10329] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.1243'. [ 422.990555][ T5881] hdpvr 1-1:0.0: firmware version 0xd dated jl;S11!vOp [ 422.990555][ T5881] 4(r [ 422.990555][ T5881] d2}d~٭^r [ 423.010625][T10333] netlink: 'syz.6.1243': attribute type 4 has an invalid length. [ 423.065468][T10333] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.1243'. [ 424.168216][ T5881] hdpvr 1-1:0.0: device init failed [ 424.173515][ T5881] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 424.203436][ T5881] usb 1-1: USB disconnect, device number 31 [ 424.273874][T10329] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 424.280532][T10329] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 424.322590][T10329] vhci_hcd vhci_hcd.0: Device attached [ 424.393880][T10335] vhci_hcd: connection closed [ 424.394341][ T3557] vhci_hcd: stop threads [ 424.413065][ T3557] vhci_hcd: release socket [ 424.421654][ T3557] vhci_hcd: disconnect device [ 424.599017][T10343] FAULT_INJECTION: forcing a failure. [ 424.599017][T10343] name failslab, interval 1, probability 0, space 0, times 0 [ 424.613826][T10343] CPU: 0 UID: 0 PID: 10343 Comm: syz.2.1248 Not tainted 6.12.0-rc7-syzkaller #0 [ 424.622899][T10343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 424.632963][T10343] Call Trace: [ 424.636259][T10343] [ 424.639205][T10343] dump_stack_lvl+0x241/0x360 [ 424.643912][T10343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.649134][T10343] ? __pfx__printk+0x10/0x10 [ 424.653745][T10343] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 424.659224][T10343] ? __pfx___might_resched+0x10/0x10 [ 424.664571][T10343] should_fail_ex+0x3b0/0x4e0 [ 424.669279][T10343] should_failslab+0xac/0x100 [ 424.673983][T10343] ? get_mountpoint+0x20b/0x440 [ 424.678860][T10343] __kmalloc_cache_noprof+0x6c/0x2c0 [ 424.684175][T10343] get_mountpoint+0x20b/0x440 [ 424.688878][T10343] attach_recursive_mnt+0x1aa/0x1c50 [ 424.694181][T10343] ? get_mountpoint+0x1c0/0x440 [ 424.699063][T10343] ? __pfx_attach_recursive_mnt+0x10/0x10 [ 424.704802][T10343] ? get_mountpoint+0x1c0/0x440 [ 424.709690][T10343] ? do_lock_mount+0x328/0x3a0 [ 424.714491][T10343] do_new_mount+0x801/0xb40 [ 424.719035][T10343] ? __pfx_do_new_mount+0x10/0x10 [ 424.724099][T10343] __se_sys_mount+0x2d6/0x3c0 [ 424.728805][T10343] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 424.734814][T10343] ? __pfx___se_sys_mount+0x10/0x10 [ 424.740046][T10343] ? do_syscall_64+0x100/0x230 [ 424.744838][T10343] ? __x64_sys_mount+0x20/0xc0 [ 424.749632][T10343] do_syscall_64+0xf3/0x230 [ 424.754164][T10343] ? clear_bhb_loop+0x35/0x90 [ 424.758869][T10343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.764789][T10343] RIP: 0033:0x7f7de297e719 [ 424.769225][T10343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.788861][T10343] RSP: 002b:00007f7de3753038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 424.797316][T10343] RAX: ffffffffffffffda RBX: 00007f7de2b35f80 RCX: 00007f7de297e719 [ 424.805322][T10343] RDX: 0000000020000000 RSI: 00000000200001c0 RDI: 0000000000000000 [ 424.813327][T10343] RBP: 00007f7de3753090 R08: 0000000000000000 R09: 0000000000000000 [ 424.821329][T10343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 424.829333][T10343] R13: 0000000000000000 R14: 00007f7de2b35f80 R15: 00007ffd993a73e8 [ 424.837355][T10343] [ 424.923354][T10346] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1247'. [ 424.932535][T10346] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1247'. [ 425.110889][ T29] audit: type=1326 audit(1731420851.747:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10339 comm="syz.5.1247" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feba977e719 code=0x0 [ 425.499450][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1253'. [ 427.404858][T10366] FAULT_INJECTION: forcing a failure. [ 427.404858][T10366] name failslab, interval 1, probability 0, space 0, times 0 [ 427.418053][T10366] CPU: 0 UID: 0 PID: 10366 Comm: syz.5.1254 Not tainted 6.12.0-rc7-syzkaller #0 [ 427.427116][T10366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 427.437196][T10366] Call Trace: [ 427.440483][T10366] [ 427.443413][T10366] dump_stack_lvl+0x241/0x360 [ 427.448096][T10366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.453294][T10366] ? __pfx__printk+0x10/0x10 [ 427.457890][T10366] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 427.463875][T10366] ? __pfx___might_resched+0x10/0x10 [ 427.469195][T10366] should_fail_ex+0x3b0/0x4e0 [ 427.473875][T10366] should_failslab+0xac/0x100 [ 427.478562][T10366] ? __alloc_skb+0x1c3/0x440 [ 427.483151][T10366] kmem_cache_alloc_node_noprof+0x71/0x320 [ 427.488958][T10366] __alloc_skb+0x1c3/0x440 [ 427.493374][T10366] ? __pfx___alloc_skb+0x10/0x10 [ 427.498337][T10366] ? netlink_autobind+0xd6/0x2f0 [ 427.503270][T10366] ? netlink_autobind+0x2b0/0x2f0 [ 427.508307][T10366] netlink_sendmsg+0x638/0xcb0 [ 427.513076][T10366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.518368][T10366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.523688][T10366] __sock_sendmsg+0x221/0x270 [ 427.528378][T10366] ____sys_sendmsg+0x52a/0x7e0 [ 427.533173][T10366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.538468][T10366] __sys_sendmsg+0x292/0x380 [ 427.543141][T10366] ? __pfx___sys_sendmsg+0x10/0x10 [ 427.548261][T10366] ? __pfx_vfs_write+0x10/0x10 [ 427.553064][T10366] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 427.559393][T10366] ? do_syscall_64+0x100/0x230 [ 427.564156][T10366] ? do_syscall_64+0xb6/0x230 [ 427.568832][T10366] do_syscall_64+0xf3/0x230 [ 427.573334][T10366] ? clear_bhb_loop+0x35/0x90 [ 427.578011][T10366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.583908][T10366] RIP: 0033:0x7feba977e719 [ 427.588319][T10366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.607918][T10366] RSP: 002b:00007febaa535038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.616342][T10366] RAX: ffffffffffffffda RBX: 00007feba9936058 RCX: 00007feba977e719 [ 427.624313][T10366] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 427.632311][T10366] RBP: 00007febaa535090 R08: 0000000000000000 R09: 0000000000000000 [ 427.640540][T10366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.648505][T10366] R13: 0000000000000000 R14: 00007feba9936058 R15: 00007ffcc9698788 [ 427.656484][T10366] [ 428.114286][ T30] INFO: task syz.3.691:8371 blocked for more than 144 seconds. [ 428.122465][ T30] Not tainted 6.12.0-rc7-syzkaller #0 [ 428.406197][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1252'. [ 428.511282][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.573811][ T30] task:syz.3.691 state:D stack:23360 pid:8371 tgid:8370 ppid:5829 flags:0x00004004 [ 428.637028][ T30] Call Trace: [ 428.650909][ T30] [ 428.674344][ T30] __schedule+0x17fa/0x4bd0 [ 428.692524][ T30] ? __pfx___schedule+0x10/0x10 [ 428.703270][ T30] ? __pfx_lock_release+0x10/0x10 [ 428.721995][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 428.733153][ T30] ? schedule+0x90/0x320 [ 428.744884][ T30] schedule+0x14b/0x320 [ 428.756079][ T30] schedule_preempt_disabled+0x13/0x30 [ 428.792577][ T30] __mutex_lock+0x6a7/0xd70 [ 428.803671][ T30] ? __mutex_lock+0x52a/0xd70 [ 428.810807][ T30] ? nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 428.828682][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 428.840938][ T30] ? __asan_memset+0x23/0x50 [ 428.848407][ T30] ? netlink_unicast+0x7f6/0x990 [ 428.853450][ T30] ? netlink_sendmsg+0x8e4/0xcb0 [ 428.858608][ T30] ? __sock_sendmsg+0x221/0x270 [ 428.863563][ T30] ? __sys_sendmsg+0x292/0x380 [ 428.876277][ T30] nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 428.898942][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 428.911630][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 428.925107][ T30] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 428.939332][ T30] ? __nla_parse+0x40/0x60 [ 428.948443][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 428.961724][ T30] genl_rcv_msg+0xb14/0xec0 [ 428.972707][ T30] ? mark_lock+0x9a/0x360 [ 428.979294][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.984559][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 428.989750][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 428.996121][ T30] ? __pfx___might_resched+0x10/0x10 [ 429.001595][ T30] netlink_rcv_skb+0x1e3/0x430 [ 429.006486][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.011675][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.017153][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 429.022796][ T30] genl_rcv+0x28/0x40 [ 429.026909][ T30] netlink_unicast+0x7f6/0x990 [ 429.031771][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 429.038697][ T30] ? __virt_addr_valid+0x183/0x530 [ 429.043983][ T30] ? __check_object_size+0x48e/0x900 [ 429.049504][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 429.054529][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.060012][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.065528][ T30] __sock_sendmsg+0x221/0x270 [ 429.070386][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 429.075481][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.080961][ T30] __sys_sendmsg+0x292/0x380 [ 429.085703][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 429.091045][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 429.097591][ T30] ? do_syscall_64+0x100/0x230 [ 429.102751][ T30] ? do_syscall_64+0xb6/0x230 [ 429.110806][ T30] do_syscall_64+0xf3/0x230 [ 429.121048][ T30] ? clear_bhb_loop+0x35/0x90 [ 429.129564][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.135713][ T30] RIP: 0033:0x7f6c2e57e719 [ 429.140291][ T30] RSP: 002b:00007f6c2f456038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.148951][ T30] RAX: ffffffffffffffda RBX: 00007f6c2e735f80 RCX: 00007f6c2e57e719 [ 429.164873][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 429.172975][ T30] RBP: 00007f6c2e5f1616 R08: 0000000000000000 R09: 0000000000000000 [ 429.188878][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.199236][ T30] R13: 0000000000000000 R14: 00007f6c2e735f80 R15: 00007ffc1d2a4008 [ 429.211104][ T30] [ 429.214484][ T30] [ 429.214484][ T30] Showing all locks held in the system: [ 429.308395][ T30] 1 lock held by khungtaskd/30: [ 429.313409][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 429.323654][ T30] 5 locks held by kworker/u8:9/3557: [ 429.329084][ T30] 2 locks held by getty/5582: [ 429.333953][ T30] #0: ffff88814d57b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 429.343816][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 429.354070][ T30] 2 locks held by syz.4.677/8326: [ 429.359102][ T30] #0: ffffffff8fd271d0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 429.367477][ T30] #1: ffffffff8ec178e8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 429.377966][ T30] 2 locks held by syz.3.691/8371: [ 429.383010][ T30] #0: ffffffff8fd271d0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 429.391333][ T30] #1: ffffffff8ec178e8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 429.401771][ T30] [ 429.407687][ T30] ============================================= [ 429.407687][ T30] [ 429.416307][ T30] NMI backtrace for cpu 1 [ 429.420640][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller #0 [ 429.429390][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 429.439442][ T30] Call Trace: [ 429.442714][ T30] [ 429.445647][ T30] dump_stack_lvl+0x241/0x360 [ 429.450337][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.455542][ T30] ? __pfx__printk+0x10/0x10 [ 429.460147][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 429.465101][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 429.470570][ T30] ? _printk+0xd5/0x120 [ 429.474726][ T30] ? __pfx__printk+0x10/0x10 [ 429.479330][ T30] ? __wake_up_klogd+0xcc/0x110 [ 429.484222][ T30] ? __pfx__printk+0x10/0x10 [ 429.488831][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 429.493880][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 429.499908][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 429.505895][ T30] watchdog+0xff4/0x1040 [ 429.510146][ T30] ? watchdog+0x1ea/0x1040 [ 429.514574][ T30] ? __pfx_watchdog+0x10/0x10 [ 429.519252][ T30] kthread+0x2f0/0x390 [ 429.523325][ T30] ? __pfx_watchdog+0x10/0x10 [ 429.528002][ T30] ? __pfx_kthread+0x10/0x10 [ 429.532588][ T30] ret_from_fork+0x4b/0x80 [ 429.537006][ T30] ? __pfx_kthread+0x10/0x10 [ 429.541588][ T30] ret_from_fork_asm+0x1a/0x30 [ 429.546360][ T30] [ 429.549796][ T30] Sending NMI from CPU 1 to CPUs 0: [ 429.555077][ C0] NMI backtrace for cpu 0 [ 429.555090][ C0] CPU: 0 UID: 0 PID: 3557 Comm: kworker/u8:9 Not tainted 6.12.0-rc7-syzkaller #0 [ 429.555108][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 429.555119][ C0] Workqueue: bat_events batadv_nc_worker [ 429.555139][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x11/0x90 [ 429.555162][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 65 48 8b 14 25 80 d7 03 00 <65> 8b 05 80 f9 6e 7e 25 00 01 ff 00 74 10 3d 00 01 00 00 75 5b 83 [ 429.555175][ C0] RSP: 0018:ffffc9000cbbfb50 EFLAGS: 00000246 [ 429.555188][ C0] RAX: 0000000000000001 RBX: ffff888034c91680 RCX: ffff88803293bc00 [ 429.555203][ C0] RDX: ffff88803293bc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 429.555214][ C0] RBP: ffff88807d76d428 R08: ffffffff8b88ab31 R09: 1ffffffff2853100 [ 429.555225][ C0] R10: dffffc0000000000 R11: fffffbfff2853101 R12: ffff888065f60cc0 [ 429.555237][ C0] R13: 0000000000000285 R14: 0000000000000001 R15: dffffc0000000000 [ 429.555248][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 429.555261][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 429.555272][ C0] CR2: 00007f96d5909178 CR3: 000000002a202000 CR4: 00000000003526f0 [ 429.555287][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 429.555296][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 429.555306][ C0] Call Trace: [ 429.555312][ C0] [ 429.555319][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 429.555340][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 429.555362][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 429.555381][ C0] ? nmi_handle+0x2a/0x5a0 [ 429.555404][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 429.555429][ C0] ? nmi_handle+0x14f/0x5a0 [ 429.555443][ C0] ? nmi_handle+0x2a/0x5a0 [ 429.555459][ C0] ? __sanitizer_cov_trace_const_cmp4+0x11/0x90 [ 429.555477][ C0] ? default_do_nmi+0x63/0x160 [ 429.555498][ C0] ? exc_nmi+0x123/0x1f0 [ 429.555517][ C0] ? end_repeat_nmi+0xf/0x53 [ 429.555535][ C0] ? batadv_nc_worker+0x101/0x610 [ 429.555551][ C0] ? __sanitizer_cov_trace_const_cmp4+0x11/0x90 [ 429.555570][ C0] ? __sanitizer_cov_trace_const_cmp4+0x11/0x90 [ 429.555588][ C0] ? __sanitizer_cov_trace_const_cmp4+0x11/0x90 [ 429.555607][ C0] [ 429.555612][ C0] [ 429.555617][ C0] batadv_nc_worker+0x101/0x610 [ 429.555631][ C0] ? batadv_nc_worker+0xcb/0x610 [ 429.555646][ C0] ? process_scheduled_works+0x976/0x1850 [ 429.555666][ C0] process_scheduled_works+0xa63/0x1850 [ 429.555696][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 429.555719][ C0] ? assign_work+0x364/0x3d0 [ 429.555739][ C0] worker_thread+0x870/0xd30 [ 429.555764][ C0] ? __kthread_parkme+0x169/0x1d0 [ 429.555786][ C0] ? __pfx_worker_thread+0x10/0x10 [ 429.555804][ C0] kthread+0x2f0/0x390 [ 429.555818][ C0] ? __pfx_worker_thread+0x10/0x10 [ 429.555836][ C0] ? __pfx_kthread+0x10/0x10 [ 429.555851][ C0] ret_from_fork+0x4b/0x80 [ 429.555869][ C0] ? __pfx_kthread+0x10/0x10 [ 429.555883][ C0] ret_from_fork_asm+0x1a/0x30 [ 429.555909][ C0] [ 429.556734][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 429.870673][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller #0 [ 429.879438][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 429.889511][ T30] Call Trace: [ 429.892797][ T30] [ 429.895728][ T30] dump_stack_lvl+0x241/0x360 [ 429.900421][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.905625][ T30] ? __pfx__printk+0x10/0x10 [ 429.910224][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 429.916225][ T30] ? vscnprintf+0x5d/0x90 [ 429.920553][ T30] panic+0x349/0x880 [ 429.924458][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 429.930623][ T30] ? __pfx_panic+0x10/0x10 [ 429.935040][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 429.940425][ T30] ? __irq_work_queue_local+0x137/0x410 [ 429.945974][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 429.951354][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 429.957513][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 429.963699][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 429.969878][ T30] watchdog+0x1033/0x1040 [ 429.974214][ T30] ? watchdog+0x1ea/0x1040 [ 429.978643][ T30] ? __pfx_watchdog+0x10/0x10 [ 429.983318][ T30] kthread+0x2f0/0x390 [ 429.987390][ T30] ? __pfx_watchdog+0x10/0x10 [ 429.992078][ T30] ? __pfx_kthread+0x10/0x10 [ 429.996669][ T30] ret_from_fork+0x4b/0x80 [ 430.001102][ T30] ? __pfx_kthread+0x10/0x10 [ 430.005706][ T30] ret_from_fork_asm+0x1a/0x30 [ 430.010503][ T30] [ 430.013692][ T30] Kernel Offset: disabled [ 430.018024][ T30] Rebooting in 86400 seconds..