last executing test programs: 13.148314506s ago: executing program 2 (id=957): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x8000800, &(0x7f0000000080)) r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0xbf, 0x0, 0x7fff0000}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x0, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000000)={r10, 0xfffffffc}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000180)={r10, @in6={{0xa, 0x4e21, 0x7fffffff, @private1, 0x35}}, 0x7e2, 0x9, 0xffffb246, 0x1, 0x1, 0xffffffff, 0x6}, 0x9c) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xa7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000140)=[{0x45, 0x0, 0x1, 0xe5}, {}, {0x6, 0x80, 0x0, 0x7ffeffff}]}) r11 = syz_io_uring_setup(0x5060, &(0x7f0000000780)={0x0, 0xd756, 0x800, 0x2, 0x203}, &(0x7f0000000040), &(0x7f0000000740)) io_uring_enter(r11, 0x0, 0x0, 0xf, 0x0, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000100)) 9.555112957s ago: executing program 2 (id=969): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@allocspi={0x108, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0xc, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x20000, 0x32}, @in6=@remote, {0x800, 0x0, 0x800000000, 0x0, 0x8, 0x0, 0x0, 0xf}, {0xffffffffffffffff, 0x3, 0xa}, {0x0, 0x21}, 0x70bd28, 0x0, 0xa}, 0x0, 0xfffffffe}, [@tfcpad={0x8, 0x28, 0x7fff}, @proto={0x5, 0x19, 0x33}]}, 0x108}}, 0x0) recvmmsg(r2, &(0x7f0000002880)=[{{&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/242, 0xf2}, {&(0x7f0000000580)=""/215, 0xd7}], 0x2, &(0x7f0000000240)=""/33, 0x21}, 0x7ff}, {{&(0x7f0000000480)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000300)}, 0x8}, {{&(0x7f0000000700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/16, 0x10}], 0x1, &(0x7f0000000900)=""/207, 0xcf}, 0x5}, {{&(0x7f0000000a00)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a80)=""/45, 0x2d}], 0x1, &(0x7f0000000b00)=""/212, 0xd4}, 0xfffffff8}, {{&(0x7f0000000c00)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)}, {&(0x7f0000000cc0)=""/37, 0x25}, {&(0x7f0000000d00)=""/254, 0xfe}, {&(0x7f0000000e00)=""/210, 0xd2}, {&(0x7f0000000f00)=""/62, 0x3e}], 0x5}, 0x8000}, {{&(0x7f0000000fc0)=@pppoe, 0xffffffffffffff4c, &(0x7f0000002240)=[{&(0x7f0000001040)=""/232, 0xe8}, {&(0x7f0000001140)=""/204, 0xcc}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x3, &(0x7f0000002280)=""/157, 0x9d}, 0x1}, {{&(0x7f0000002340)=@can, 0x80, &(0x7f0000002540)=[{&(0x7f00000023c0)=""/86, 0x56}, {&(0x7f0000002440)=""/250, 0xfa}], 0x2, &(0x7f0000002580)=""/68, 0x44}, 0xfff00000}, {{&(0x7f0000002600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002680), 0x0, &(0x7f0000000c80)}, 0x2}, {{&(0x7f0000002700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000280)=[{&(0x7f0000002780)=""/30, 0x1e}], 0x1, &(0x7f0000002800)=""/74, 0x4a}, 0x5}], 0x9, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x8, 0x8, 0x2, 0x3}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000720c0c40ac0553025a650000000109021200010000000009040000"], 0x0) socket(0x2, 0x80805, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r5, &(0x7f0000000000)=0x8, 0x12) close(r5) r6 = openat$cgroup(r3, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.controllers\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, &(0x7f00000002c0)=0x87ffffe, 0x6, 0x0) 9.002149836s ago: executing program 4 (id=974): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/93, 0x5d}], 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000100)=0x4012, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r2, &(0x7f00000008c0)='/', 0x1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x44810) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='source', &(0x7f0000000040)='[:::\x00', 0x0) unshare(0x24020400) unshare(0x22020400) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) recvmsg(0xffffffffffffffff, 0x0, 0x0) 8.909638015s ago: executing program 1 (id=975): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r2 = accept4(r1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000040)="cb", 0xfffffdef) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/45, 0x2d}], 0x1}, 0x10006) r3 = socket(0x1a, 0x2, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000440)={0x0, 0x14, 0x8, "eb9a47809bf87af0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) socket$kcm(0x29, 0x5, 0x0) 8.635376228s ago: executing program 4 (id=976): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffb07, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r1, 0x11a, 0x2, 0x0, &(0x7f0000000340)=0xff89) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) socket(0x10, 0x803, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6.09398785s ago: executing program 4 (id=979): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a", 0x36}], 0x1}}], 0x1, 0xc0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x200, 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88002, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1003fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.658473161s ago: executing program 4 (id=980): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/173, 0xad) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xab020010) socket$nl_generic(0x10, 0x3, 0x10) gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe, 0x0, 0x2}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, &(0x7f0000001600)=""/4089, 0x5, 0x200000000000049a) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000300)={0x2, 0x400}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x10, 0x9, 0x9, 0x0, 0x70bd2a, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x2, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}]}, 0x48}, 0x1, 0x7}, 0x0) 5.32838429s ago: executing program 2 (id=982): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0xf, "e246ebb2e7fab3e16a7cb9fbde7783"}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x4}, &(0x7f00000000c0)=0x8) sendmmsg(r0, &(0x7f00000007c0)=[{{&(0x7f0000000100)=@ethernet={0x6, @multicast}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)="1057c67b43e30a4feb0d1888ae7b5c073071667379482893716335a7d735000686a1dbd8a2b5407863dcb4284ff67cf51b108f2c8c34138b88165feabe4aa140e52e948387e329b97f3a814b5921e6e7abddefb577c82ea40a28e19ffdfc9483964c0112be5b26", 0x67}, {&(0x7f0000000200)="ca4f565049f0aa3006bf4123df7618594f2bf2850a54e7fb031086301a0fc92b86d91fdbcab3b786fc15d154b36562522fbe7b149b7ccad4db412929ec4b1e8eb0e1ded7f3d6f7acde5efa1632b136e11665ab52799c003ddd6b8f3f244e80944ef9dec7057292e501407b711b3d6f0eee29bedc7899ca0b99e7412342b29d77e5d078c1b144bdad665fad2f81101824f4c4daf572cae266da48afedc3ac18e5f2c79e605be6c4814c93375f1acb01bc62e9baaed2678f1d1fe941e31ab2f95691d0a068ba8d93f8e9ecae8bf400854680b76340ac5844c41c9c4d67af29ff19", 0xe0}, {&(0x7f0000000300)="d4ff60d7363f27d4b21bec98c6b1c8fab9d6b82a2570cd68c2f7c67a9545d2daf682bec927fcfcc3be19f7e4a853ca8d691f9706baedf933966292ea7e0f3e5cc70848b57629168fbe08edf16854290d780e7d922d4a1b95afb13cb584b711b0fe982373e8441f16c2ab5cdf643c642f844d55e0014642bf11211cda07cad1d8a12ad21747b1f396207c1d9699cf26ffe04d5cf4b4890c161d2ad00bf6eb4cb4102b6f5a4b41723e4268e3e1add5c1e1e7eaa9f99e01188adfc3b8cb15094902480c590a4db94097", 0xc8}, {&(0x7f0000000400)="9309bb6cd161a1e46fd39f10e0cad3a3bcad076f3239072322990f2ecb88cfcc9af40a733a1d22b56c0b7c904b5291e0e7e73f3234cbf93d81a452c12d66cc89b67fb7ca55373b0fb79db1820bdf0207fab04f5f4357c1062a9098e91690556829b03d1c08dafc0860a4009fb204367cd499d1a2c0095e3ba796e67a2d4622eaa84a68cd88fd08ee764af9b1f9b877882872b3ae4af360ba5a81", 0x9a}], 0x4, &(0x7f0000000500)=[{0x98, 0x1, 0x5, "2e6f75fb037b3d97bc3ca9b493b57975f886e6c188669e8839762a33bd56e2f611cd1b573724b03046481d73ee01c99305e3f1c95a60c9828c223bb46761508cf543368c6a9c2a8e8672928fb498d4bde156d7fdfc2ebd91fa99e27bb59c7ce40c97e7b8487fbcc1c92ee2039a34d6d334ca70141b82fb0843b2abd7c54cabd3d1"}, {0x98, 0x6, 0x1c, "35ec61df63d26a29bfcc63aa05dcab1927a696dca35bed02aef013e56fa946552ab01e00900431e9e226aa03c35d9a090d16bf51234979d9cd30434fbebb81dd85c26890014991ae2aa704bcc3555034e26d62a200c43234e1dd702203b7fa30a2875edf24b672ce6315a50f4fd93bae6820ac8adfcb4f4a84db89cd51a969feab90"}, {0x88, 0x102, 0x69, "41fcd5107cb274e0f41fc83073b785688f845e2aab87f731e7f52c9e21ae9d468067104626322e0d5e0912063811d94c6566f97400de8856a32d47876debaef6be39e62a9de39d19bc0e50da6c0164b35356c64efc5448da4e69fbda5863fe08027a8133c8e9537d2a39accb143a9df78cd677"}, {0xb8, 0x110, 0x7730, "6a1f955b7e65eaf50982842ec00f25ae623300a0295d9b8475f88aa7ee2a1518b6cc948dd4301411b3b6c967b1cacdcc43153ae1eb337845629cfdde44c82ebbfba878d49b7ed9dd01bc88eca3028885ffdcaae3465385609aae6726a1bb824f68dd97157dd6387dad651c9fc09e397f052926d71a77b566dbda44b37e8ec671d9a89964ef570b25c3f91109153633344b5b10b81399ee0d3b42b2d9bd2053f18c8d4ca1f681"}, {0x38, 0x10f, 0xffffffff, "5ccd6bcf368f5baae828e376d98bd1e0c404c416a042ac38aedeb084a4257f5b9689"}], 0x2a8}}], 0x1, 0x4000080) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x4400, 0x0) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x4400, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000840)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000008c0)={r1, 0x20, &(0x7f0000000880)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f0000000900)=0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000008c0)={r1, 0x20, &(0x7f0000000880)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f0000000900)=0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000940), 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000980)={0x525, 0x1, 0x8}) r7 = syz_clone3(&(0x7f0000000b80)={0x100000000, &(0x7f00000009c0), &(0x7f0000000a00)=0x0, &(0x7f0000000a40), {0x5}, &(0x7f0000000a80)=""/102, 0x66, &(0x7f0000000b00)=""/22, &(0x7f0000000b40)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r4}}, 0x58) fcntl$lock(r2, 0x7, &(0x7f0000000c00)={0x0, 0x2, 0x57, 0x10, r8}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000c40)={0x0, @reserved}) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000c40)={0x0, @reserved}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4001) read$FUSE(r3, &(0x7f0000000e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002e80)={0x3, &(0x7f0000002e40)=[{0x6, 0x6, 0x57, 0x2}, {0x2, 0x7f, 0x1, 0x2}, {0x291, 0x8, 0x3, 0xfff}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000005240)='./file0\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fstat(r5, &(0x7f0000005480)) (async) fstat(r5, &(0x7f0000005480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000005840)='./file1\x00', &(0x7f0000005880)) (async) lstat(&(0x7f0000005840)='./file1\x00', &(0x7f0000005880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000002ec0)="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", 0x2000, &(0x7f0000005b40)={&(0x7f0000004ec0)={0x50, 0xfffffffffffffffe, 0x7, {0x7, 0x2b, 0x2b3646b3, 0x400800, 0x3, 0xa, 0x4, 0x7, 0x0, 0x0, 0x40, 0x1}}, &(0x7f0000004f40)={0x18, 0x0, 0x10, {0x10}}, &(0x7f0000004f80)={0x18, 0x0, 0x4, {0x1}}, &(0x7f0000004fc0)={0x18, 0xffffffffffffffda, 0xfffffffffffffff7, {0x3}}, &(0x7f0000005000)={0x18, 0xfffffffffffffffe, 0x8000000000000001, {0x1}}, &(0x7f0000005040)={0x28, 0x0, 0x200, {{0xc, 0x7fff, 0x0, r7}}}, &(0x7f0000005080)={0x60, 0x0, 0x40, {{0x6, 0xfff, 0x400, 0x9a6a, 0xa000000000000000, 0x8, 0x3ff, 0xbbed}}}, &(0x7f0000005100)={0x18, 0xfffffffffffffff5, 0x314, {0x9}}, &(0x7f0000005140)={0x16, 0xfffffffffffffff5, 0x3800000, {')]){,\x00'}}, &(0x7f0000005180)={0x20, 0x0, 0x2, {0x0, 0x19}}, &(0x7f00000051c0)={0x78, 0xffffffffffffffda, 0xa00000000000000, {0xb181, 0x0, 0x0, {0x0, 0x0, 0x1, 0x5, 0x6, 0x886, 0x8, 0xef6, 0x1, 0x9000, 0x2, r9, r10, 0x4, 0xb4}}}, &(0x7f0000005300)={0x90, 0xffffffffffffffda, 0x711, {0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x2, 0x7, {0x3, 0x5, 0x7, 0x9, 0x8001, 0x4, 0x9, 0x6, 0x5, 0x4000, 0x3, r11, r10, 0x5, 0xfffffff7}}}, &(0x7f00000053c0)={0x98, 0x0, 0x51c, [{0xfffffffffffffc00, 0x9, 0x13, 0x5, '/dev/btrfs-control\x00'}, {0x6, 0x3, 0x5, 0xc3, ')\\&*#'}, {0x4, 0x4, 0x1, 0x200, '['}, {0x4, 0x288a88f6, 0x0, 0x2}]}, &(0x7f0000005500)={0x330, 0x0, 0x1bdd32b5, [{{0x0, 0x1, 0xffffffffffff4637, 0x7fff, 0x6, 0x2, {0x2, 0x8, 0x10, 0xffffffffffffffff, 0x2, 0x5e, 0x9, 0x3d, 0x7fffffff, 0x4000, 0x8, r9, r10, 0x8, 0x7}}, {0x4, 0x100, 0x1, 0x7f, '\x00'}}, {{0x2, 0x1, 0x6, 0x1, 0x2, 0x4, {0x0, 0x29, 0x5, 0xfffffffffffffffe, 0x9, 0xd502, 0x4, 0x6, 0xd7, 0x9000, 0x2, r9, r10, 0xffff8f0f, 0x70d}}, {0x1, 0x7, 0x8, 0x1000, '(:,+!(\xe5\''}}, {{0x0, 0x1, 0x5, 0x3, 0x0, 0x8, {0x2, 0x4e, 0x6856, 0x400, 0x101, 0x6, 0x646ee3bd, 0x9, 0x7, 0x4000, 0xfff, r9, r12, 0x30}}, {0x3, 0x1, 0x6, 0x4, '\xbb\xbb\xbb\xbb\xbb\xbb'}}, {{0x3, 0x0, 0x2, 0xe, 0x100, 0x9, {0x4, 0xffff, 0x101, 0x8, 0xcd27, 0x0, 0xf2de, 0x2, 0x304, 0xc000, 0x4, r9, r10, 0x4, 0x3}}, {0x5, 0x4, 0x6, 0x8, '*\'-(}{'}}, {{0x1, 0x1, 0x0, 0x80, 0x8, 0x1, {0x2, 0x5, 0x9, 0x6, 0x800, 0x9, 0x7, 0xfffffffe, 0x4, 0xc000, 0xa, r9, r10, 0x8, 0x80000001}}, {0x3, 0x5, 0x6, 0x0, ']\'/}\xc9,'}}]}, &(0x7f0000005900)={0xa0, 0x0, 0x0, {{0x1, 0x1, 0x9, 0xfffffffffffff0cb, 0x2280, 0xffffffff, {0x5, 0x0, 0x8, 0xffffffff, 0x9, 0x7, 0x0, 0x80000001, 0x6, 0x6000, 0x588, r9, r13, 0x9, 0xfffffc00}}, {0x0, 0x8}}}, &(0x7f00000059c0)={0x20, 0xfffffffffffffffc, 0xffffffff, {0x7, 0x0, 0x80000001, 0x200}}, &(0x7f0000005a00)={0x130, 0xffffffffffffffda, 0x7, {0x3, 0xceb, 0x0, '\x00', {0x10000, 0x3, 0xf, 0x7fff, r9, r10, 0x6000, '\x00', 0x4, 0xb7, 0x906, 0x3, {0x7, 0x2a0}, {0x5, 0x6}, {0x6, 0xca1f}, {0x2, 0x3ff}, 0x8, 0x2, 0x4000, 0xa80}}}}) lstat(&(0x7f0000005c00)='./file0\x00', &(0x7f0000005c40)) write$nci(r3, &(0x7f0000005cc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x8}, 0x3) r14 = dup(r2) stat(&(0x7f0000005d00)='./file0\x00', &(0x7f0000005d40)) (async) stat(&(0x7f0000005d00)='./file0\x00', &(0x7f0000005d40)) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005f80)={0x11, 0x16, &(0x7f0000005dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xad3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x366c0d7d}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x2, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000005e80)='syzkaller\x00', 0xa0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000005ec0)={0x4, 0xe, 0x10001, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000005f00)=[r3], &(0x7f0000005f40)=[{0x5, 0x4, 0xf, 0xb}, {0x4, 0x5, 0x7, 0x2}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000006140)={@cgroup=r3, 0x3, 0x0, 0x5, &(0x7f0000006040)=[0x0], 0x1, 0x0, &(0x7f0000006080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000060c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000006100)=[0x0, 0x0], 0x0}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000006240)={'syztnl1\x00', &(0x7f00000061c0)={'ip6gre0\x00', 0x0, 0x2f, 0x10, 0x8, 0x4, 0x4b, @local, @loopback, 0x8000, 0x0, 0x0, 0x81}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000006180)={@ifindex=r17, r3, 0x2a, 0x0, r15, @void, @value=r2, @void, @void, r16}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000006180)={@ifindex=r17, r3, 0x2a, 0x0, r15, @void, @value=r2, @void, @void, r16}, 0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000006280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x3, 0x3b}, &(0x7f0000006340)=0x90) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000006280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x3, 0x3b}, &(0x7f0000006340)=0x90) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) 4.989505337s ago: executing program 1 (id=984): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) syz_io_uring_setup(0x88f, 0x0, 0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xc12, 0x0, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace(0x10, r7) ptrace(0x420e, r7) fcntl$lock(r5, 0x25, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000020}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20044044) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x8847, 0x2000, {0x0, 0x0, 0x0, r9, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) syz_io_uring_setup(0x1ba1, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.931964662s ago: executing program 2 (id=985): ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000d00)=0x4002, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r4, 0x1, 0x20, 0x6, @local}, 0x14) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f00000007c0)=0x57, 0x4) recvfrom$packet(r3, 0x0, 0x0, 0x2000, 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x53, 0xfffffffffffffffc, 0x0, 0xf2, @scatter={0x7, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f0000000000)=""/37, 0x25}, {&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f00000000c0)=""/52, 0x34}, {0x0}, {0x0}]}, 0x0, &(0x7f0000000800)=""/184, 0x7, 0x10005, 0x0, 0x0}) bind$rds(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, 0xffffffffffffffff, 0x2000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006080)=@delchain={0x3d00, 0x65, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x8, 0xfff2}, {0xb, 0xc}, {0xc, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xf8}}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @filter_kind_options=@f_flow={{0x9}, {0x3c80, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xc}, @TCA_FLOW_ACT={0x3294, 0x9, 0x0, 0x1, [@m_bpf={0x7c, 0x1f, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x89c, 0x4, 0x5, 0x9, 0x7ff}}, @TCA_ACT_BPF_FD={0x8, 0x5, r9}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x10000, 0xfff, 0x5, 0x3, 0x16b}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x10a8, 0x16, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x2cb}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffff9, 0x3ff, 0x0, 0x4, 0xdc}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xe, 0x7, 0x2, 0x7, 0xff}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4de}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x118, 0x19, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x2}, @TCA_CT_ZONE={0x6, 0x4, 0x8001}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8b4}, @TCA_CT_MARK={0x8, 0x5, 0x6}, @TCA_CT_LABELS={0x14, 0x7, "46ce0704beae08ebffffffffffff55c1"}, @TCA_CT_MARK={0x8, 0x5, 0x3}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}]}, {0xac, 0x6, "0237d5edd11c55e8753b3e0c63223dafc5920299125ea7798299bfef3e5a8d4beb027bfeba687eb5e2aa96532a3b320fc7414f453e9bb1f6cce14ffd97a0d330ac193fc5eca48bd120156b7a1e06ac6a2865f8580d726db1b2ea8a76f35486cf294e89adada4ae5001c05727a4e47f2a64642839482643150bdd7596fd62de29c311a0ae64fd8ec442d2369459e79d93b15cb687c06e584df495acd2a56dc0e6e23818d14e830793"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_police={0x1dc0, 0x5, 0x0, 0x0, {{0xb}, {0x1d34, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0x4, 0xa25, 0x0, {0x9, 0x2, 0x6, 0x6, 0xffcc, 0x6}, {0x8, 0x0, 0xff, 0x18, 0xfff, 0xfffff6c4}, 0x205, 0xc8, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xcd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x10000004, 0xff, 0x1, 0x8, {0x2, 0x2, 0x3, 0x3, 0x2a2d, 0x40}, {0x74, 0x2, 0xf801, 0x9, 0x4, 0xfffffff8}, 0x6, 0x3, 0x9}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff3, 0x6, 0x10, 0x2, 0x1, 0x3ff, 0x8ce82, 0xffffc6ee, 0x2, 0x5, 0x5, 0x8, 0x9, 0x0, 0x7, 0x8000, 0x9, 0x3, 0x1, 0x9, 0x2, 0xffff8001, 0x7, 0x1, 0x1, 0xd, 0x0, 0x7, 0x3efe228b, 0x7ff, 0x8, 0x3, 0x9, 0x21, 0x73364a9e, 0x8, 0x2, 0x3, 0x3ec, 0x0, 0x4, 0xde, 0x9, 0x9, 0x8, 0xffffffa9, 0x2, 0x600, 0x800, 0x9, 0xff, 0x8a4, 0x0, 0x4, 0x264, 0x2, 0x4, 0x2, 0x3ff, 0x23, 0x7, 0x6525, 0x12c, 0x40, 0xfdf, 0x5, 0xfffffffa, 0x8, 0x0, 0x52856154, 0x5, 0x9, 0x40, 0x1, 0x2, 0x2, 0x8, 0x9, 0x5, 0x7fff, 0x7ff, 0x8, 0x176b, 0x5, 0x8, 0x3ff, 0x5, 0x8000, 0x7, 0x400, 0x9, 0x8080000, 0x8, 0x1, 0x8, 0x8, 0xd2f, 0x4, 0x9, 0x6, 0x0, 0x7, 0x4c4e, 0xf, 0x7, 0x8001, 0x4, 0x5, 0x0, 0xffffffff, 0x0, 0x343d, 0x7, 0x3, 0x7, 0x2, 0x3, 0x6, 0x3, 0xff, 0x7, 0x1, 0x73f, 0xbae, 0xaf1c, 0xffffff26, 0x32, 0x0, 0x80, 0xe5c3, 0x400, 0x8, 0x3, 0x2df8, 0x200, 0x3, 0x2, 0x100, 0x8, 0x800, 0x7, 0x2, 0xfff, 0xffffff05, 0x6, 0x4, 0x2, 0x3, 0x8, 0x6, 0x3, 0x6, 0xd6b, 0x7, 0xe, 0xffff, 0xfffffff9, 0xffffffff, 0x401, 0x6, 0x16ca, 0x2b, 0x6, 0x5, 0xffffffff, 0xffff38f0, 0x0, 0x7, 0x4, 0x2, 0x7f, 0x2, 0x7ff, 0x1, 0x7, 0x4, 0x80000000, 0xe672, 0xf23d, 0x0, 0x8f8, 0x401, 0x9, 0x401, 0x4, 0xb8, 0x8ee, 0x5, 0x0, 0x5, 0x9, 0x417, 0x9, 0x4, 0x400, 0x7, 0x99, 0x6, 0x5, 0x40, 0x6, 0x0, 0x2, 0x8, 0x2, 0x5, 0x4, 0x77c9, 0x2, 0x7, 0x7, 0x7f, 0x7, 0x7fff, 0x6, 0x6, 0x6, 0x400, 0x7, 0xc, 0x10000, 0x5, 0xfff, 0x800, 0x0, 0xfffffffb, 0x1, 0x100, 0xffffff43, 0x0, 0x3ff, 0x6, 0xd5a, 0xfffffff9, 0x2, 0x9, 0x0, 0x3, 0xe97, 0x1000, 0x6, 0x5, 0x4, 0x2, 0x10001, 0x7, 0x8, 0xd8, 0x7, 0x4, 0x48000, 0x10, 0x9, 0x7, 0x7fa, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x4, 0x800, 0x7352da7c, 0x0, 0x7ff, 0x3, 0xfffffffc, 0x9, 0x6, 0x2, 0x0, 0x8, 0x401, 0x4, 0x9, 0xffff, 0x0, 0x3, 0x9, 0x80, 0x7, 0x34f8, 0x1, 0x8, 0x7fff, 0xf, 0x0, 0xaf, 0x3, 0x1, 0x5, 0xfffffff8, 0x2, 0x4, 0x2, 0x4fb7, 0x5, 0x17, 0x6, 0x0, 0x5, 0x4, 0x2, 0x2e0, 0x80000000, 0x200, 0x3ff, 0x85, 0x4, 0x1, 0xffff, 0x71, 0x8, 0x400, 0x80000001, 0x3, 0x8b, 0x0, 0x0, 0x0, 0x5d9, 0x3000, 0x6, 0x10001, 0x81, 0x3, 0x6, 0x6, 0x10000, 0x1, 0x0, 0x8, 0x9, 0x9, 0x3, 0x7fffffff, 0x8, 0xfffffffc, 0x0, 0x4, 0x3ff, 0x1e, 0xd, 0x7f, 0x7, 0xffffffee, 0x4, 0x8, 0x3, 0x8001, 0x7f, 0x8, 0x400, 0x9, 0x0, 0x401, 0x1, 0x402, 0x401, 0x7830a6df, 0x56, 0xff, 0x4, 0x1ff, 0x3ff, 0xe7d3, 0x9, 0x75a, 0x7, 0x1, 0x2, 0x9, 0x4, 0xffffffff, 0x101, 0x100, 0x6, 0x279b, 0x1000, 0x5, 0x5, 0x7, 0x4, 0x1, 0xff, 0x9, 0x7, 0x9, 0x800, 0xf2b, 0x6, 0x7, 0x46d, 0x3, 0x6, 0x3, 0x10a, 0x3, 0x7, 0x1, 0xfffffff9, 0xf95, 0xffffffff, 0x33, 0x0, 0x3, 0x1, 0x7ff, 0x7, 0x6, 0x2, 0x7f, 0x5, 0x6, 0x71, 0xa, 0x5, 0x8, 0x9ea0, 0x7ff, 0x8, 0x4, 0x8, 0x34, 0x7, 0x0, 0xa, 0xd, 0x5, 0xe, 0x6a, 0x2, 0x0, 0x3, 0x0, 0x2, 0x7, 0x8, 0x7fffffff, 0x5, 0x9, 0x2, 0x9f, 0x6, 0x400, 0x101, 0x8, 0xa, 0x3, 0xf, 0x9, 0x4, 0x7, 0x2, 0x6, 0x7, 0xbe, 0xa4e, 0x3, 0x4, 0xc, 0x6, 0x2, 0x3, 0x2, 0x0, 0xc6, 0x3, 0x3ff, 0xff, 0x4, 0xd, 0x3, 0x4, 0x2, 0xaaec, 0x3, 0x0, 0x2, 0x27, 0xf6b0b39, 0x8, 0x10001, 0x7, 0x3, 0x401, 0x7f, 0x2, 0x4, 0x9, 0x3, 0x9, 0x3, 0x10000, 0x10001, 0x0, 0x6, 0x1e8, 0x6, 0x8000, 0x8, 0x2, 0x8, 0x8000, 0x1ff, 0x8, 0x101, 0x3, 0x1c3b, 0x5d84, 0x9, 0xfffffffc, 0x0, 0xe5000000, 0x3bfb]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xe71, 0x8, 0x3, 0x1, 0x0, 0xffff993f, 0xff, 0x7, 0x667, 0xa56c, 0x9, 0x9, 0x7fffffff, 0x0, 0x4, 0x6, 0x3, 0xd9, 0x6, 0x14df, 0xfffffff7, 0x22d, 0x5, 0x9, 0x2, 0x7fff, 0x2, 0x10000, 0x6b7c5c8a, 0x40, 0xfff, 0xb07c, 0x6, 0x200, 0xb0, 0x5, 0xf, 0x7fff, 0x5, 0x4, 0x9, 0x0, 0xcd8, 0x5, 0x9, 0x4, 0x8, 0xfffffffa, 0x4a7, 0x2, 0x401, 0x2, 0x7, 0x5c, 0xf72, 0x0, 0x4, 0x40000000, 0x2, 0x7, 0x42c, 0x2, 0x9, 0x9, 0xe, 0xfffffff5, 0x10000, 0x9, 0x6, 0x800, 0x915, 0xfffffff8, 0x9, 0x8, 0x333e, 0x80, 0x6, 0x6be, 0x80000000, 0xf, 0x1, 0x7f, 0x7, 0xffff133f, 0x80000000, 0x0, 0x80, 0x6, 0x6, 0xfffffffc, 0x44e5, 0xf98, 0x8, 0x35, 0x1, 0xc, 0x1, 0x7, 0x0, 0x7, 0x6e, 0x5, 0x5f, 0x7, 0x9, 0x897, 0xffffffff, 0x5, 0x4102, 0x0, 0x6, 0x8000, 0x45eb, 0x9, 0x8, 0x3, 0x4, 0x6, 0x8, 0x6dd9, 0x5, 0xa78e, 0x7f2, 0x80, 0x3, 0xff, 0x0, 0x9, 0x7, 0xffffff80, 0x48, 0x4, 0x5, 0x80000000, 0xf, 0x0, 0x610042d8, 0x3, 0x4, 0x6, 0x8, 0x604, 0x8001, 0x5, 0xabc, 0x8, 0x0, 0x80, 0xb4ca, 0x2376, 0x0, 0x2, 0x1, 0xfffffffb, 0x7ff, 0x1, 0x9, 0xffffffff, 0xe, 0x1, 0x3, 0xd, 0x0, 0x4, 0x9, 0x3, 0x2, 0x3, 0xb77b, 0x0, 0x437f9c6a, 0xffffff81, 0x4, 0xfdc3, 0x6de7, 0x5, 0xa6, 0x9, 0x101, 0xffffffff, 0xcf, 0x0, 0xa69, 0x2, 0x7bc1a23c, 0x4, 0x4, 0x80000001, 0x846d, 0x0, 0x2, 0x8, 0x8, 0xe77, 0x8, 0xc, 0x7, 0x6, 0x1, 0x8, 0x1, 0x80000001, 0xfffffffd, 0x3, 0x1, 0xfffffffc, 0x1, 0x4, 0x3, 0x7, 0x2, 0x8, 0x8000, 0xc7, 0x847b, 0x401, 0x8, 0x7f, 0x0, 0x3a, 0x5, 0x8, 0x7, 0x0, 0xa91, 0x8, 0x5, 0x10b, 0xfff, 0x3, 0x1, 0x5, 0x13f, 0x8, 0x3, 0x895bafe, 0x1, 0x2, 0xea8, 0xc979, 0x8000, 0xd1b2, 0x3, 0x7, 0x5, 0x9a2, 0x2, 0xfffffc01, 0x2, 0x1, 0x3ff, 0x5fce, 0x117c, 0x1000, 0x800]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x3, 0x10000, 0x1ee7, 0xae3e, 0x7, 0x4, 0x100, 0xffffffff, 0xffff, 0x7, 0x200, 0x7, 0x0, 0x7fffffff, 0x2, 0xfffeffff, 0xfffffffe, 0x2, 0x100, 0x7de3c92, 0x9, 0x2, 0x52bb, 0xe8d, 0x100, 0x3, 0xda, 0x9, 0x4, 0x2, 0xfff, 0x8, 0x3ff, 0x7, 0x2, 0x8000, 0x8, 0x7, 0xab, 0xfffff0b6, 0x2, 0x800, 0xff, 0xffff, 0x3, 0x5f2a0993, 0x8, 0x1000, 0x100, 0xfffffffc, 0x0, 0x800, 0x9, 0x1, 0x7, 0x0, 0x9, 0xab0, 0x5, 0x1, 0x4, 0x9, 0x6, 0xe7, 0xff, 0x5, 0xfffffffa, 0x2, 0x9, 0xe, 0x3ff, 0x2, 0x207, 0x0, 0x5, 0xfffffffd, 0x3, 0xd, 0x81, 0x4, 0x0, 0x6, 0x1, 0x6, 0x8, 0x0, 0x1, 0x5, 0xfffffff9, 0x2, 0x8d2, 0x7, 0xc, 0xffffffe3, 0x7, 0x0, 0x5, 0x200, 0x81, 0x75f4b2e4, 0x3, 0x9, 0xffff, 0xfffffff8, 0x6, 0x2, 0x4, 0x3, 0xe, 0x101, 0x1, 0x8, 0x8, 0x3aac, 0x6d67, 0x7, 0x1, 0xffffff80, 0x4, 0xa7, 0xff, 0xfffffffc, 0x9, 0x8, 0x2, 0x7, 0x4, 0xe, 0xff, 0x9, 0x3, 0x3, 0x9, 0x6, 0x4, 0xbe0, 0x9, 0x6, 0x74, 0x1400000, 0x10000, 0x80, 0x5098, 0x40, 0x0, 0x6, 0x5af, 0x81, 0xfff, 0x3, 0x40, 0x4, 0x6, 0x5, 0x0, 0x7f, 0x6, 0x10000, 0x5, 0x5, 0x5, 0x4, 0x9, 0x5, 0x0, 0x9, 0x2, 0x6, 0x7, 0xff, 0xe020, 0x0, 0x7fffffff, 0x13d, 0x8, 0x0, 0x7f, 0x7, 0x1, 0x8, 0xb, 0x1000, 0x3, 0x101, 0x5, 0x78, 0xd289, 0xfffffff9, 0x1, 0x2, 0x2, 0x7fffffff, 0x1, 0x1ff, 0x188, 0x3, 0x0, 0x6, 0x3, 0x4, 0x0, 0xffff, 0x0, 0x1, 0x4, 0x665fa6d0, 0x10001, 0x0, 0x10001, 0xb2ad, 0x7f, 0xe2f, 0x6, 0x0, 0x8, 0x200, 0xfffffffa, 0x5, 0xe31, 0xb, 0x1949b5dd, 0x5, 0x8, 0x4, 0x7, 0xfffffffb, 0x3, 0x4, 0xec, 0x10001, 0x7, 0x0, 0x8001, 0x4e, 0x3, 0x10001, 0x6, 0x1, 0xffff955c, 0x5, 0x1, 0x6, 0x100, 0x6, 0x2, 0x6, 0x6, 0x1, 0x1, 0x401, 0x0, 0xff, 0x0, 0xffff, 0x10000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0xe5bd, 0xa4, 0x5, 0x1000, 0x7, 0x5, 0x5, 0xe6cd, 0x5, 0x2, 0x7, 0x401, 0x3, 0x0, 0xd6, 0x8001, 0x2, 0x8, 0xfffffff8, 0x8, 0x4, 0xa, 0x9, 0x6, 0xffffffff, 0x2, 0x6, 0x0, 0x1, 0x8, 0x5, 0x9, 0x2, 0x5, 0xffffffff, 0x3, 0x5, 0x10001, 0x8c, 0x7, 0x5, 0x99b6, 0x7, 0x5, 0x9, 0x6, 0x3, 0x1, 0x30af, 0xfff, 0xffffffff, 0x6c16, 0x8, 0x80000001, 0x3, 0x6a, 0xffff, 0x8, 0x1, 0x44ee, 0x8000, 0xca, 0xa, 0x0, 0x6, 0x7c6, 0xe9, 0x3ff, 0x4, 0x7, 0x6, 0x9, 0x1, 0xe63, 0x7, 0x401, 0x3, 0x4, 0x1, 0x8, 0x6, 0x4, 0x7, 0x5, 0x4, 0x1ff, 0x5, 0xb3, 0xb715, 0x8be, 0x3, 0x631400, 0x5, 0xe22, 0x7ff, 0x0, 0x2, 0xb, 0x4, 0x3, 0xd, 0x6, 0x6123, 0xe, 0x1, 0x711, 0xfffffffc, 0x7, 0x8, 0x6, 0x5, 0x5, 0xfffff81a, 0x1, 0x80000000, 0xde, 0x1, 0x1, 0x9, 0x66, 0xfffffff9, 0x5, 0xe0000, 0x2, 0x80000000, 0xf, 0x0, 0x9e, 0x4, 0x1000, 0x7, 0x6, 0x3, 0x7, 0x4, 0x7, 0x7, 0x7f, 0x4, 0x471bcc85, 0x10001, 0x80000000, 0xae, 0x8, 0x6, 0x1, 0x9, 0x11, 0x2, 0x9, 0x1000, 0x7, 0x4, 0x80000000, 0xfffff099, 0x3aa, 0x7b, 0x1, 0x2, 0xb, 0x401, 0x0, 0x5, 0x3, 0x80000000, 0xfffffffb, 0x3, 0xe1, 0x8, 0x87, 0x7, 0x1ff, 0x4d0, 0x4, 0xb, 0x4, 0x7, 0x2, 0x2, 0x100, 0x8d3f, 0xfbc, 0x1, 0x7dd1, 0x0, 0x7f, 0x3, 0x7fffffff, 0x4, 0x13, 0xa1, 0x7fffffff, 0x0, 0x5, 0x8, 0x1, 0x2, 0x5, 0x6, 0x3, 0x4, 0x401, 0x7fff, 0x6d7, 0x80000001, 0x1, 0x7, 0x81, 0x4, 0x4, 0x6, 0x8001, 0x2, 0x0, 0x3, 0x0, 0x5, 0x6, 0x2, 0xb784, 0x9, 0x100, 0x7, 0x1, 0xffff8001, 0x500, 0x5, 0x9, 0x5, 0x8, 0xfff, 0x8, 0x80000000, 0x0, 0x3, 0xa4, 0x7, 0x6000, 0xffff, 0xfffffffc, 0x9, 0xb, 0x141282a9, 0x8000, 0x72, 0xffffff58, 0x354e, 0x0, 0x2, 0x2, 0x7, 0x5, 0xb34, 0xa1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x8, 0xe, 0x0, 0xa, 0xbded, 0x56, 0x8001, 0x3, 0x5, 0xe7c1, 0x2, 0x2, 0x1, 0x8, 0x10, 0x0, 0x8000, 0x10001, 0x9, 0x0, 0x3, 0x2, 0x6, 0x6, 0x1, 0x10001, 0xa5, 0x5, 0x3ff, 0x5, 0x0, 0x800, 0x9, 0x2, 0x2, 0xd, 0x3, 0x4, 0x1ff, 0xb2e, 0x4, 0x7fff, 0x9, 0x8, 0xc09b, 0x80, 0x6, 0xfffffffa, 0x7, 0x40, 0xe7e8, 0x60b8, 0x6, 0x8, 0x387e, 0x2, 0x80000001, 0x1, 0x0, 0xd82, 0x7fffffff, 0x1ff, 0xfff, 0x5, 0x8, 0xffff, 0xff, 0x2, 0xf, 0x4, 0x4, 0xfff, 0x8, 0x8, 0xe, 0x6, 0x8, 0x2, 0x8, 0x7ff, 0xed51, 0x9, 0xf61d, 0xc, 0x5, 0x0, 0x0, 0xa9f7, 0xfb53, 0xffff, 0x8, 0x2c1, 0xe7, 0x2, 0xfffffff3, 0x6, 0xffff, 0x82, 0x4, 0x80000000, 0x393, 0xb59e5219, 0x1ff, 0x0, 0x1, 0x280445ca, 0x0, 0xfffffff7, 0xfffff577, 0x4, 0x40, 0xb, 0x1, 0xd, 0xffff8000, 0x3, 0x0, 0x5, 0x7, 0xfffffff7, 0x8, 0x10001, 0x1cf2471b, 0xfffffaf6, 0x1ff, 0x2, 0xd, 0x74, 0xb3a, 0x9, 0x6, 0xfffffffb, 0x3, 0x1e, 0x6, 0x400, 0x0, 0x4, 0x2, 0x0, 0x7, 0x0, 0x9, 0x0, 0x6, 0x8, 0x8, 0x7ff, 0x6c4, 0xfffff801, 0x2, 0xffffffff, 0x0, 0x101, 0xc, 0x7ff, 0x2, 0x9, 0xb3, 0x1, 0x5, 0x9, 0x80000001, 0xc4, 0x7ff, 0x1, 0x6e75, 0x4, 0x217c, 0x2, 0x3, 0x9, 0x9, 0x81, 0x1, 0x0, 0x9, 0x200, 0x1, 0x101, 0x8, 0x2, 0xa, 0x4, 0x7fff, 0x0, 0xd, 0x1ff, 0x7, 0x6, 0x3, 0x9, 0x0, 0x4, 0xffff, 0x9, 0x4171, 0x1f4, 0x2, 0x3, 0x7, 0xa, 0x9, 0x2e, 0x0, 0x80, 0x17, 0x9, 0x9, 0x3, 0x5a97, 0x1, 0x8, 0x3, 0x2, 0x8, 0x7dc8, 0x8, 0xb1cd, 0x2000000, 0x8, 0x9, 0x8, 0x5, 0x5, 0x7, 0x72f9, 0xff, 0x7f, 0x1000, 0x8, 0x9, 0x8, 0x285, 0xb, 0x7, 0x0, 0xffffffff, 0xfffffff7, 0x7, 0x8, 0x40, 0x7, 0xd, 0x1, 0x7, 0x80000001, 0x7ffc5d82, 0x1, 0x3, 0x4, 0x9, 0x1, 0x10001, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0x8, 0x2, 0xfffffffb, 0xa, 0xfffffffa, 0xfffffff9, 0x7, 0x7ff, 0xfffffffe, 0xf, 0xfffffff8, 0x3, 0x200000, 0x1ff, 0x6, 0xa, 0x0, 0x7808ba58, 0x9, 0x8, 0x0, 0x7fff, 0xb, 0x8a6, 0x2d7e, 0x6, 0x2, 0x7, 0x7, 0x7cce, 0x7ff, 0x6, 0x1, 0x51, 0xc0000, 0x5, 0x7, 0x2, 0x8, 0x5, 0x80000000, 0xffff, 0x5, 0x1, 0x1, 0x8, 0x1, 0xc, 0x0, 0x7, 0x4, 0x9, 0x4, 0x100, 0x7, 0xb7d, 0xfffffffa, 0x10001, 0x1, 0x7f, 0x0, 0x2, 0x40, 0x401, 0x10000, 0xff, 0x1, 0x52, 0x1ae8, 0xffffffff, 0x9a, 0x401, 0x5, 0x0, 0x8, 0x6, 0xd4, 0x0, 0x800, 0x3, 0x3, 0xae1e, 0x800, 0x5, 0x4, 0x4, 0x8, 0xfffff800, 0x7, 0x8, 0x1, 0x27c5c341, 0x6, 0x1000, 0x7, 0x1, 0x8, 0x3, 0x9, 0xd, 0x2, 0x4, 0x9, 0x6, 0x67, 0xc, 0xf7c, 0x2, 0x1, 0x0, 0x100, 0x8000, 0x401, 0x8000, 0x2b, 0x9, 0x604, 0x2, 0x7, 0x3, 0x7, 0x6, 0x6, 0x0, 0x8, 0x8000, 0x1000, 0x400, 0x7f, 0xfffffffe, 0x8, 0x6, 0x1, 0x8, 0x4, 0x7, 0x7bd, 0x8, 0x1, 0xae, 0x0, 0xffff8000, 0x3, 0x200, 0x7fff, 0x9, 0x3, 0x0, 0x3, 0xe2, 0x8, 0x7fffffff, 0x4, 0x8, 0xffff, 0xc, 0x81, 0x9, 0xb, 0x5, 0x0, 0xd89c, 0x10000, 0x8, 0x9, 0x4000, 0xfffffff4, 0xfffffffc, 0x2, 0xbf, 0x80000000, 0x9, 0xb63d, 0x7, 0x7fff, 0x9, 0xa, 0x1, 0x8000, 0xfffffffa, 0x3, 0x7fffffff, 0x0, 0xf, 0xf8b, 0x0, 0x76f, 0x7, 0x9, 0x6, 0x9, 0xb2, 0x200, 0x7, 0x5a43, 0x1, 0x9, 0x7f, 0x73, 0x51e, 0x3, 0x8d, 0x8, 0x5dc, 0x8f6, 0x1, 0x0, 0x1800000, 0x6, 0x8001, 0x7, 0xe6e, 0x6, 0x40, 0x10000, 0x1, 0x3, 0x6, 0xbb6, 0x3, 0x8, 0x9, 0xdce, 0xfa, 0x401, 0x6, 0x2, 0x7543, 0x100, 0x9, 0x7fff, 0x7, 0x1, 0x0, 0x7, 0x7, 0x3, 0x7f, 0x800, 0x8a07, 0x8000, 0x9, 0x9, 0x57d, 0x3, 0x0, 0x6, 0x4, 0xfffffe00, 0x5, 0x6, 0x4, 0xffff7f29, 0x6, 0x897]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x7fffffff, 0x4ad6, 0xc59bbbca, {0x7, 0x1, 0x3, 0x4, 0x8, 0xffffffff}, {0x4, 0x0, 0xcb8, 0x8, 0x8, 0xffffa4f9}, 0xffff, 0x0, 0x7ff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x62, 0x6, "07826bce920be77d3bad6406a153e423d5ebd7a00ccc7b9264ee875799ccfd4bbd674bdb12e2f2f0c329b94c32ab61d497b82af4793ade92b894c1152f6f03318a6e81d1cc5a2414c16ed7a7de393b541edf4e94f46641b8d2fb564b3138"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x108, 0x1b, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8000, 0x8001, 0x7, 0x7, 0x5}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xe}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xd, 0x7, 0xffffffffffffffff, 0x3, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x81}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}]}, {0x7c, 0x6, "8fa528709711932d57ab99c2f8af46521ab45e50b366578a4989d52307e8b267045bb3fe24135bfda3d48a84da2255e0514fc71a4851672f2527926f41df5529c7453898f7946889aa1aeaf6dac81d4653a3d1aee37092edcd347e337b40e47bc588bd375876858c8ba8a0bfc6bd26f7a5e95c2545b8e00e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0xb4, 0x1e, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x1, 0x40000000, 0x5}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @random="7ab1959b8cd1"}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x25, 0x6, "0753b0da8d1c2d1b2d6aa2b39ff6c85039b9b6bdda40d7840d2682e2dc7b52786e"}, {0xc, 0x7, {0xc26ca921e2a42cda, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0xd8, 0xd, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x8839, 0x3, 0x5200, 0x2}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x7c, 0x6, "13f0d1587a8015503a311bec0cf61c1cef53f433c50b56280ecccc18a73e7a5f4f8820912adf11ccd105437c54f0de9b0be1fb30fb80112ca6c5ddcce3c18dc80df96dbb8da5618901d4fd4912e846e0f4327fc9dc545583b0cc7383edaa8b9db1a3f1d67e2ec79f7af8be30fd81992943d53809fbed7f33"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_FLOW_ACT={0x9d0, 0x9, 0x0, 0x1, [@m_skbedit={0x108, 0x2, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xffff4e93, 0x379a, 0x0, 0x4, 0x8}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xc}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8001}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x6, 0x0, 0x0, 0x2859995d}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x401, 0x6, 0x20000000, 0x57, 0x5b6}}]}, {0x83, 0x6, "0679b208fc6cd87db494dc1442424aec2f9dded129ec362095a5ba8387bc24c3949425a8883431e5f448f70ccd4bf5ec74a074dd825978305e0fd7becedcd35bdeca1002ad42cabdd37556e5076bbe50111578209c6cc6d5afec2ebadad706384a3dd3faac8f2f861d7fc0fa824d99df7a43252fc31b4b77588e3f2e87de11"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0xe0, 0x0, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x1, 0x10000000, 0x8001, 0x4}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x65, 0x2, 0x2, 0x8000, 0x3}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0xff, 0x3, 0x6, 0x8001}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0x0, 0x9, 0x10000}, 0x2, r8}}]}, {0x34, 0x6, "c35b8c1d2bc15f7551f7dbeb68f9af322a7284b69ca7dc657cffe9b0a1399870ab26058f40065b30dda24c3bb18de6a2"}, {0xc}, {0xc}}}, @m_ct={0x110, 0x1a, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x2f}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}, @TCA_CT_LABELS={0x14, 0x7, "bccc3723e98e7de17dafa094bb8ea3c7"}]}, {0x99, 0x6, "c3eb0ef13b3998a8c0a4484c53369868f97b549c28fcb0382c7138125ed6d36a4ecb376b08c54d83ce2b035b3ecfbd8768d4b5237b45541c0ec9a3bd1464ef6cefff5b88fbaea4947273d37fef93efffbd45aba2ca71575718b51ac81ede3067ec3a52d6f0c668150fa4e7e6220ae51c84739d2a942673699184e89dc9d91d74c732fab2c9cebafdc35e1cd9b70ea7b34fe9f458a3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0xf8, 0x20, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}, @TCA_DEF_DATA={0x6, 0x3, '*\x00'}, @TCA_DEF_DATA={0x8, 0x3, '}]/\x00'}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}]}, {0x9d, 0x6, "d46c2d2a48286da2319ccb79cfde4c7ae7a242214480e13b0a9a51c2be5181b40f731a1dea4dd6033f4236e45b9d42f942f6eaa419da9c9ce723e24994b5770b8fd78a336080447d2278197405469f97fe2dd75e96d8da6f0042b04cfc54567a6ebc7c77f6abfcaabd6baac37c4a743c932b9391d70ee97f8ba341240b9369f4053ec9c5cf90e5d3ee28f19020f3b104535a06e78e85d33076"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0xa8, 0x1, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x80000000, 0x0, 0x0, 0x9, 0xceab}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x3d6, 0xfffffffffffffff9, 0x2, 0x3}}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x9, 0x0, 0x8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8000}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}]}, {0x9, 0x6, "5066aa1382"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x98, 0x18, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfffa}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xd}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x1d, 0x6, "d6ea9a4d3730b0e406c541f4cd15bab8f33bc0bdff17ce9f4f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x1a0, 0xa, 0x0, 0x0, {{0x9}, {0x80, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x7, 0x0, 0x1, 0x6}, 0x3}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x5, 0x6, 0x5, 0x1}, 0x3}}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x2, 0x7, 0x4, 0x8}, 0x3}}]}, {0xf7, 0x6, "960f1ca4b0c37b355452f923f283356fc928642ef3d0f77568ec5efb7ee3d1e67014852f8452a4926c417cf2cad00ddb26a5c12a6431156986da795700615a089ed966e8d2192f52e271036b86cac1cf9c172fa0a26753f58e138ad91de671cd3523301d30ce4b2f827f000f97c6fae68d53b35e38f7dbcc4bf26bd43f4d2b77c9675fad48fcee7f88cf37b9c623bdeb37e1c4ac9a007573b091ab09b4d0c30d4f1ca30a9828c374365720912592612911591f388447df33ca1bbd94533f656fb9c9989fe52bca6e574b93d06913729e488de27ccc7d6e6a519668f7ba310aeee613eeaf263f10c892d067ead2c1aa931553a5"}, {0xc}, {0xc, 0x8, {0x3, 0x32bda7451ed9c4f8}}}}, @m_nat={0x120, 0x1, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0xff, 0xfffffffffffffff9, 0x9, 0x3}, @remote, @remote, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x8, 0x0, 0xe, 0xfffffffa}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xea, 0x6, 0x3, 0x6}, @broadcast, @private=0xa010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd, 0x71, 0x0, 0x2a, 0x4}, @private=0xa010100, @private=0x9, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x78, 0x8, 0x3, 0xc00000, 0x4}, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x26}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x7, 0x7, 0x8, 0x4}, @private=0xa010102, @remote}}]}, {0x7, 0x6, "3cc31f"}, {0xc}, {0xc}}}, @m_ctinfo={0xa0, 0x4, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x8, 0x1, 0x8, 0x3}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x79995310}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2f1}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x7fffffff, 0xffffffffffffffff, 0x7f, 0x2}}]}, {0x23, 0x6, "9565cc744f4c082869afa28ef2033de5959a2cb454328b2409f25d7f0f03b1"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x13c, 0x20, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1b1b, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x164d, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1f57, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x484, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x543, 0x20000000}}]}, {0xd1, 0x6, "7252fc910ae1ab956b25152b508cd058cd75c3799953c19173092a09a77b8d6aa84a6e2fcd924eafae114ba70273809a97515ce70a92ba07b19116f973a11b848561731f82915dfdd54b8880dc7809ca904d34829428794fc0f3946ec40918a52a82ee3ede08222250ab4c6711aed7208e7851f8ce98abcc025b06a85b6b72d5170919345074f22e6d0c7801a4bd80187f318aefbfd4d84c716468515b4fc8f4d05711b11a7f8f41bd5b4ce55b9bab29c089a7a2d6f90353e68f4c245197d4d6b88223b2933c4780a3a6ebbfb2"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8bfd}]}}]}, 0x3d00}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9}, {{0x4, 0x1}, {0x2}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008004}, 0x8000) 4.93151317s ago: executing program 3 (id=986): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/93, 0x5d}], 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000100)=0x4012, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r2, &(0x7f00000008c0)='/', 0x1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x44810) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='source', &(0x7f0000000040)='[:::\x00', 0x0) unshare(0x24020400) unshare(0x22020400) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) recvmsg(0xffffffffffffffff, 0x0, 0x0) 4.120733196s ago: executing program 1 (id=987): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0x410001, 0xffffffffffffffff, 0x8, 0x4, 0x200, 0x4, 0xfffffffffffffff9, 0x7fffffff, 0x1}) 3.560024889s ago: executing program 3 (id=988): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r1 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@getchain={0x24, 0x66, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0xc, 0x9}, {0xc, 0xf}, {0x5, 0x7}}}, 0x24}}, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x7, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x400, 0x2}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x5, 0x141101) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @local, r0}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r6, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) dup(r5) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0xfffe, @rand_addr=0x64010101}}, 0x0, 0x0, 0x400, 0x0, 0xf0, 0x0, 0xe}, 0x9c) bind$inet6(r7, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mlockall(0x7) shutdown(r7, 0x2) 3.391581339s ago: executing program 2 (id=989): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffb07, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r1, 0x11a, 0x2, 0x0, &(0x7f0000000340)=0xff89) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) socket(0x10, 0x803, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.122458086s ago: executing program 1 (id=991): unshare(0x70000400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000043959577610705024000bbe18f1f605b7d99360e233bcef2c364751e9a02d3bb2e7d6c199b0900000000000002000007090001"], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4002040) recvmmsg(0xffffffffffffffff, &(0x7f0000006f00), 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x1d16, &(0x7f0000000080)={0x0, 0x310c, 0x1000, 0x3, 0x2b9}) ptrace(0x10, r2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="ff0f00000000000002004e21e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6faf693000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002004e21ac1414233307195996021abb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff00"/412], 0x190) ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={0x0}) r3 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, 0x0, 0x0) r5 = syz_open_dev$rtc(&(0x7f0000000000), 0x4, 0x40400) ioctl$RTC_UIE_ON(r5, 0x7003) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f00000000c0)={0x2, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000002ac0)=[0x0], 0x1}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x0) dup(r7) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r6, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r7}) 3.006525878s ago: executing program 0 (id=992): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x4000000, 0x0, 0x1, 0x100000000, 0xca8}, {0x3}, 0xff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x2, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x4, 0x0, 0x81, 0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 2.722237553s ago: executing program 0 (id=993): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xd2}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) 2.657978279s ago: executing program 3 (id=994): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x9, 0x5, 0x0, 0x4}, {0x8, 0x81, 0xf9, 0x40000}, {0x0, 0x9, 0x5, 0x80}, {0x9, 0x7, 0x5, 0x7}, {0x3, 0x4, 0x1, 0x1ff}, {0x6d44, 0x5, 0x1, 0x8c3c}]}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x3, 0x1100) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0x3, 0x2, 0xce, 0x5}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r1, 0x7, 0x9, &(0x7f0000000100)=""/15, &(0x7f0000000140)=0xf) r2 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r2, &(0x7f00000014c0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/52, 0x34}, {&(0x7f0000001340)=""/177, 0xb1}], 0x4, &(0x7f0000001440)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}, 0x20) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000001500)={[0xd, 0xa, 0x60000000000, 0xe, 0x5, 0x1, 0x3, 0x1, 0x7fff, 0x10001, 0xfffffffffffffbff, 0x7, 0x3, 0x3, 0x100000000, 0x4], 0xffff2000, 0x220000}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setrlimit(0xb, &(0x7f00000015c0)={0x2, 0x1}) syz_open_dev$evdev(&(0x7f0000001600), 0x81, 0x240200) getrlimit(0x7, &(0x7f0000001640)) r10 = socket$packet(0x11, 0x2, 0x300) r11 = accept4(r10, &(0x7f0000001680)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000001700)=0x80, 0x100000) syz_emit_vhci(&(0x7f0000001740)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x65}, "666336074b2d02a05c67c1f6d078c9b0e6305bd56a690733e7a5b48386444ea57f15cad32323fcfe94dee2099d6df0a1a40f6e8990b3611ed4968c36d06c371c1ab562bfb7ed020cda388cd554653daf9e1ece15afed19bd32cfa40e0abe4dfc130319e4f6"}, 0x69) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000001b00)={'sit0\x00', &(0x7f0000001a00)={'tunl0\x00', 0x0, 0x8, 0x88, 0x4, 0x7, {{0x2f, 0x4, 0x1, 0x34, 0xbc, 0x9, 0x0, 0x3, 0x4, 0x0, @loopback, @remote, {[@noop, @generic={0x82, 0xe, "f595360b578fe4815a88b31b"}, @generic={0x88, 0x3, ':'}, @ssrr={0x89, 0xf, 0x1b, [@empty, @loopback, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x11, [@multicast1, @multicast1, @remote, @rand_addr=0x64010101]}, @rr={0x7, 0x1f, 0x5d, [@empty, @broadcast, @remote, @broadcast, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2f}, @private=0xa010100]}, @noop, @timestamp_prespec={0x44, 0x54, 0xe0, 0x3, 0x4, [{@rand_addr=0x64010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x4}, {@loopback, 0x9}, {@multicast1, 0x100}, {@private=0xa010100, 0x4}, {@remote, 0x8f12}, {@private=0xa010100, 0xe3c}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x800}, {@loopback, 0x3}, {@multicast1, 0x3}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x18, 0x31, &(0x7f00000017c0)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x3}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @map_val={0x18, 0x9, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0xffffffff}, @call={0x85, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], &(0x7f0000001980)='syzkaller\x00', 0x10, 0x6, &(0x7f00000019c0)=""/6, 0x40f00, 0x8, '\x00', r12, 0x0, r3, 0x8, &(0x7f0000001b40)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001b80)=[r8, r0, r3, r3], &(0x7f0000001bc0)=[{0x1, 0x2, 0xd, 0x4}], 0x10, 0x6, @void, @value}, 0x94) syz_open_pts(r5, 0x4200) connect$inet(r0, &(0x7f0000001cc0)={0x2, 0x4e23, @multicast2}, 0x10) syz_emit_ethernet(0xa7, &(0x7f0000001d00)={@remote, @link_local, @void, {@mpls_uc={0x8847, {[{0xc000, 0x0, 0x1}, {0x1}, {0x10}, {0x1}], @ipv4=@tipc={{0x16, 0x4, 0x1, 0x9, 0x89, 0x65, 0x0, 0x1, 0x6, 0x0, @multicast1, @multicast1, {[@cipso={0x86, 0xd, 0x2, [{0x1, 0x7, "ffdbd0b871"}]}, @timestamp={0x44, 0xc, 0x62, 0x0, 0x8, [0x8, 0x7]}, @timestamp={0x44, 0xc, 0x60, 0x0, 0x0, [0x8, 0x8]}, @ssrr={0x89, 0x1f, 0x4a, [@multicast2, @rand_addr=0x64010101, @remote, @rand_addr=0x64010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback]}]}}, @payload_mcast={{{{{{0x31, 0x0, 0x0, 0x0, 0x1, 0xb, 0x1, 0x2, 0x101, 0x0, 0x2, 0xf, 0x5, 0x1, 0x6, 0x7, 0x4, 0x4e20, 0x4e21}, 0x4}, 0x4, 0x2}}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, &(0x7f0000001dc0)={0x1, 0x4, [0x169, 0x8c7, 0xace, 0xfffffffe]}) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000001e00)) r13 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r13, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000001e40)={0x3, 'pimreg\x00', {0xeb2}, 0xcb}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e21, 0x5, @mcast2, 0xfff}, @in6={0xa, 0x4e23, 0xfffffffd, @loopback, 0xf}, @in={0x2, 0x4e20, @multicast2}], 0x68) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000001f00)={0x0, 'veth1_to_batadv\x00', {}, 0xffff}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x4000010, r11, 0xe335f000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000020c0)={&(0x7f0000001f40)="b54356090011f9c7143107a96022584ed130d59c3f1a759ce318096a943fc99e2c535af5b276", &(0x7f0000001f80)=""/19, &(0x7f0000001fc0)="82fdddf2014d66f4ba807192a38e54f2af620f453aea42e45b92", &(0x7f0000002000)="c238532429101642796d6e0b2e2513f18fa78817d13446f0d7dce6b9b02e2624b1a8ba41053b32504ce1cb5b9af008fcdbada218b65e7ed085d0c111557a43f773be833e9501842907f97c6b4635dd9688ee4576119263c138305210f8fded0fd618309bfd180b457a7979cb8174022bcd5539905b66293ba681ede6d98b4f2ec77fa0b40342a8fe51f9a96012332f5af6cf5b5231daaed96c9dffd4c6f389373a", 0x5a1f, r7}, 0x38) ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f0000002100)=""/32) getpid() 2.530388022s ago: executing program 1 (id=995): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x22402, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000009040)={0x2b, @empty, 0x4e23, 0x0, 'rr\x00', 0x0, 0x1, 0x26}, 0x2c) r5 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r5], 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000a80), 0x10400, 0x0) socket$packet(0x11, 0xa, 0x300) r6 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000001c0)={r8, 0x1, 0x6, @broadcast}, 0x10) socket(0x200000000000011, 0x2, 0x3) r9 = socket$packet(0x11, 0x2, 0x300) bind$packet(r9, &(0x7f0000000080)={0x11, 0x802, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000802"], 0x0) 2.350276939s ago: executing program 0 (id=996): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0xa0, 0x0, @in={0x2, 0x4e21, @rand_addr=0x74010101}}]}, 0x28}}, 0x0) socketpair(0x13, 0x2, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e978000000000000", @ANYRES8=r5], 0x20}, 0x1, 0x0, 0x0, 0x84854}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x70bd28, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x1, 0x6, 0x8, 0x0, 0x0, [{{r1}, 0xffffffffffff8000}, {{r1}, 0x8}, {{r3}, 0x2}, {{r2}, 0x6}, {{r0}, 0x4395}, {{r4}, 0x8}, {{r5}, 0x200}, {{r1}, 0xf}]}) 1.945356909s ago: executing program 4 (id=997): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xf, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x0, 0x2000000, @mcast1, 0x200d45}}}, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1, 0x2, 0xe37ffffffffffe}) fcntl$lock(r4, 0x6, &(0x7f0000000580)={0x0, 0x0, 0x1, 0x2}) fcntl$lock(r4, 0x6, &(0x7f0000000440)={0x1, 0x1, 0x4000000001, 0x4}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=r3, @ANYBLOB="00f2000000000000240012800b0001006272696467650000140002800800080088a8"], 0x44}}, 0x0) 1.836568993s ago: executing program 0 (id=998): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000000)=r2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8937, &(0x7f0000000000)={'netdevsim0\x00', @random="f2ffff1f1100"}) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r11, 0x2, {0x1, 0x0, 0x5}}, 0x18) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r10) r13 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r13, &(0x7f0000000240)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r13, 0x5101) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x188, 0x4c, 0x1a, 0x0, 0x73, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x128, 0x188, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3893b573a807d00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 1.68942189s ago: executing program 4 (id=999): ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000d00)=0x4002, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r4, 0x1, 0x20, 0x6, @local}, 0x14) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f00000007c0)=0x57, 0x4) recvfrom$packet(r3, 0x0, 0x0, 0x2000, 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x53, 0xfffffffffffffffc, 0x0, 0xf2, @scatter={0x7, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f0000000000)=""/37, 0x25}, {&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f00000000c0)=""/52, 0x34}, {0x0}, {0x0}]}, 0x0, &(0x7f0000000800)=""/184, 0x7, 0x10005, 0x0, 0x0}) bind$rds(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, 0xffffffffffffffff, 0x2000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006080)=@delchain={0x3d00, 0x65, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x8, 0xfff2}, {0xb, 0xc}, {0xc, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xf8}}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @filter_kind_options=@f_flow={{0x9}, {0x3c80, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xc}, @TCA_FLOW_ACT={0x3294, 0x9, 0x0, 0x1, [@m_bpf={0x7c, 0x1f, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x89c, 0x4, 0x5, 0x9, 0x7ff}}, @TCA_ACT_BPF_FD={0x8, 0x5, r9}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x10000, 0xfff, 0x5, 0x3, 0x16b}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x10a8, 0x16, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x2cb}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffff9, 0x3ff, 0x0, 0x4, 0xdc}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xe, 0x7, 0x2, 0x7, 0xff}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4de}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x118, 0x19, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x2}, @TCA_CT_ZONE={0x6, 0x4, 0x8001}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8b4}, @TCA_CT_MARK={0x8, 0x5, 0x6}, @TCA_CT_LABELS={0x14, 0x7, "46ce0704beae08ebffffffffffff55c1"}, @TCA_CT_MARK={0x8, 0x5, 0x3}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}]}, {0xac, 0x6, "0237d5edd11c55e8753b3e0c63223dafc5920299125ea7798299bfef3e5a8d4beb027bfeba687eb5e2aa96532a3b320fc7414f453e9bb1f6cce14ffd97a0d330ac193fc5eca48bd120156b7a1e06ac6a2865f8580d726db1b2ea8a76f35486cf294e89adada4ae5001c05727a4e47f2a64642839482643150bdd7596fd62de29c311a0ae64fd8ec442d2369459e79d93b15cb687c06e584df495acd2a56dc0e6e23818d14e830793"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_police={0x1dc0, 0x5, 0x0, 0x0, {{0xb}, {0x1d34, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0x4, 0xa25, 0x0, {0x9, 0x2, 0x6, 0x6, 0xffcc, 0x6}, {0x8, 0x0, 0xff, 0x18, 0xfff, 0xfffff6c4}, 0x205, 0xc8, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xcd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x10000004, 0xff, 0x1, 0x8, {0x2, 0x2, 0x3, 0x3, 0x2a2d, 0x40}, {0x74, 0x2, 0xf801, 0x9, 0x4, 0xfffffff8}, 0x6, 0x3, 0x9}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff3, 0x6, 0x10, 0x2, 0x1, 0x3ff, 0x8ce82, 0xffffc6ee, 0x2, 0x5, 0x5, 0x8, 0x9, 0x0, 0x7, 0x8000, 0x9, 0x3, 0x1, 0x9, 0x2, 0xffff8001, 0x7, 0x1, 0x1, 0xd, 0x0, 0x7, 0x3efe228b, 0x7ff, 0x8, 0x3, 0x9, 0x21, 0x73364a9e, 0x8, 0x2, 0x3, 0x3ec, 0x0, 0x4, 0xde, 0x9, 0x9, 0x8, 0xffffffa9, 0x2, 0x600, 0x800, 0x9, 0xff, 0x8a4, 0x0, 0x4, 0x264, 0x2, 0x4, 0x2, 0x3ff, 0x23, 0x7, 0x6525, 0x12c, 0x40, 0xfdf, 0x5, 0xfffffffa, 0x8, 0x0, 0x52856154, 0x5, 0x9, 0x40, 0x1, 0x2, 0x2, 0x8, 0x9, 0x5, 0x7fff, 0x7ff, 0x8, 0x176b, 0x5, 0x8, 0x3ff, 0x5, 0x8000, 0x7, 0x400, 0x9, 0x8080000, 0x8, 0x1, 0x8, 0x8, 0xd2f, 0x4, 0x9, 0x6, 0x0, 0x7, 0x4c4e, 0xf, 0x7, 0x8001, 0x4, 0x5, 0x0, 0xffffffff, 0x0, 0x343d, 0x7, 0x3, 0x7, 0x2, 0x3, 0x6, 0x3, 0xff, 0x7, 0x1, 0x73f, 0xbae, 0xaf1c, 0xffffff26, 0x32, 0x0, 0x80, 0xe5c3, 0x400, 0x8, 0x3, 0x2df8, 0x200, 0x3, 0x2, 0x100, 0x8, 0x800, 0x7, 0x2, 0xfff, 0xffffff05, 0x6, 0x4, 0x2, 0x3, 0x8, 0x6, 0x3, 0x6, 0xd6b, 0x7, 0xe, 0xffff, 0xfffffff9, 0xffffffff, 0x401, 0x6, 0x16ca, 0x2b, 0x6, 0x5, 0xffffffff, 0xffff38f0, 0x0, 0x7, 0x4, 0x2, 0x7f, 0x2, 0x7ff, 0x1, 0x7, 0x4, 0x80000000, 0xe672, 0xf23d, 0x0, 0x8f8, 0x401, 0x9, 0x401, 0x4, 0xb8, 0x8ee, 0x5, 0x0, 0x5, 0x9, 0x417, 0x9, 0x4, 0x400, 0x7, 0x99, 0x6, 0x5, 0x40, 0x6, 0x0, 0x2, 0x8, 0x2, 0x5, 0x4, 0x77c9, 0x2, 0x7, 0x7, 0x7f, 0x7, 0x7fff, 0x6, 0x6, 0x6, 0x400, 0x7, 0xc, 0x10000, 0x5, 0xfff, 0x800, 0x0, 0xfffffffb, 0x1, 0x100, 0xffffff43, 0x0, 0x3ff, 0x6, 0xd5a, 0xfffffff9, 0x2, 0x9, 0x0, 0x3, 0xe97, 0x1000, 0x6, 0x5, 0x4, 0x2, 0x10001, 0x7, 0x8, 0xd8, 0x7, 0x4, 0x48000, 0x10, 0x9, 0x7, 0x7fa, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x4, 0x800, 0x7352da7c, 0x0, 0x7ff, 0x3, 0xfffffffc, 0x9, 0x6, 0x2, 0x0, 0x8, 0x401, 0x4, 0x9, 0xffff, 0x0, 0x3, 0x9, 0x80, 0x7, 0x34f8, 0x1, 0x8, 0x7fff, 0xf, 0x0, 0xaf, 0x3, 0x1, 0x5, 0xfffffff8, 0x2, 0x4, 0x2, 0x4fb7, 0x5, 0x17, 0x6, 0x0, 0x5, 0x4, 0x2, 0x2e0, 0x80000000, 0x200, 0x3ff, 0x85, 0x4, 0x1, 0xffff, 0x71, 0x8, 0x400, 0x80000001, 0x3, 0x8b, 0x0, 0x0, 0x0, 0x5d9, 0x3000, 0x6, 0x10001, 0x81, 0x3, 0x6, 0x6, 0x10000, 0x1, 0x0, 0x8, 0x9, 0x9, 0x3, 0x7fffffff, 0x8, 0xfffffffc, 0x0, 0x4, 0x3ff, 0x1e, 0xd, 0x7f, 0x7, 0xffffffee, 0x4, 0x8, 0x3, 0x8001, 0x7f, 0x8, 0x400, 0x9, 0x0, 0x401, 0x1, 0x402, 0x401, 0x7830a6df, 0x56, 0xff, 0x4, 0x1ff, 0x3ff, 0xe7d3, 0x9, 0x75a, 0x7, 0x1, 0x2, 0x9, 0x4, 0xffffffff, 0x101, 0x100, 0x6, 0x279b, 0x1000, 0x5, 0x5, 0x7, 0x4, 0x1, 0xff, 0x9, 0x7, 0x9, 0x800, 0xf2b, 0x6, 0x7, 0x46d, 0x3, 0x6, 0x3, 0x10a, 0x3, 0x7, 0x1, 0xfffffff9, 0xf95, 0xffffffff, 0x33, 0x0, 0x3, 0x1, 0x7ff, 0x7, 0x6, 0x2, 0x7f, 0x5, 0x6, 0x71, 0xa, 0x5, 0x8, 0x9ea0, 0x7ff, 0x8, 0x4, 0x8, 0x34, 0x7, 0x0, 0xa, 0xd, 0x5, 0xe, 0x6a, 0x2, 0x0, 0x3, 0x0, 0x2, 0x7, 0x8, 0x7fffffff, 0x5, 0x9, 0x2, 0x9f, 0x6, 0x400, 0x101, 0x8, 0xa, 0x3, 0xf, 0x9, 0x4, 0x7, 0x2, 0x6, 0x7, 0xbe, 0xa4e, 0x3, 0x4, 0xc, 0x6, 0x2, 0x3, 0x2, 0x0, 0xc6, 0x3, 0x3ff, 0xff, 0x4, 0xd, 0x3, 0x4, 0x2, 0xaaec, 0x3, 0x0, 0x2, 0x27, 0xf6b0b39, 0x8, 0x10001, 0x7, 0x3, 0x401, 0x7f, 0x2, 0x4, 0x9, 0x3, 0x9, 0x3, 0x10000, 0x10001, 0x0, 0x6, 0x1e8, 0x6, 0x8000, 0x8, 0x2, 0x8, 0x8000, 0x1ff, 0x8, 0x101, 0x3, 0x1c3b, 0x5d84, 0x9, 0xfffffffc, 0x0, 0xe5000000, 0x3bfb]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xe71, 0x8, 0x3, 0x1, 0x0, 0xffff993f, 0xff, 0x7, 0x667, 0xa56c, 0x9, 0x9, 0x7fffffff, 0x0, 0x4, 0x6, 0x3, 0xd9, 0x6, 0x14df, 0xfffffff7, 0x22d, 0x5, 0x9, 0x2, 0x7fff, 0x2, 0x10000, 0x6b7c5c8a, 0x40, 0xfff, 0xb07c, 0x6, 0x200, 0xb0, 0x5, 0xf, 0x7fff, 0x5, 0x4, 0x9, 0x0, 0xcd8, 0x5, 0x9, 0x4, 0x8, 0xfffffffa, 0x4a7, 0x2, 0x401, 0x2, 0x7, 0x5c, 0xf72, 0x0, 0x4, 0x40000000, 0x2, 0x7, 0x42c, 0x2, 0x9, 0x9, 0xe, 0xfffffff5, 0x10000, 0x9, 0x6, 0x800, 0x915, 0xfffffff8, 0x9, 0x8, 0x333e, 0x80, 0x6, 0x6be, 0x80000000, 0xf, 0x1, 0x7f, 0x7, 0xffff133f, 0x80000000, 0x0, 0x80, 0x6, 0x6, 0xfffffffc, 0x44e5, 0xf98, 0x8, 0x35, 0x1, 0xc, 0x1, 0x7, 0x0, 0x7, 0x6e, 0x5, 0x5f, 0x7, 0x9, 0x897, 0xffffffff, 0x5, 0x4102, 0x0, 0x6, 0x8000, 0x45eb, 0x9, 0x8, 0x3, 0x4, 0x6, 0x8, 0x6dd9, 0x5, 0xa78e, 0x7f2, 0x80, 0x3, 0xff, 0x0, 0x9, 0x7, 0xffffff80, 0x48, 0x4, 0x5, 0x80000000, 0xf, 0x0, 0x610042d8, 0x3, 0x4, 0x6, 0x8, 0x604, 0x8001, 0x5, 0xabc, 0x8, 0x0, 0x80, 0xb4ca, 0x2376, 0x0, 0x2, 0x1, 0xfffffffb, 0x7ff, 0x1, 0x9, 0xffffffff, 0xe, 0x1, 0x3, 0xd, 0x0, 0x4, 0x9, 0x3, 0x2, 0x3, 0xb77b, 0x0, 0x437f9c6a, 0xffffff81, 0x4, 0xfdc3, 0x6de7, 0x5, 0xa6, 0x9, 0x101, 0xffffffff, 0xcf, 0x0, 0xa69, 0x2, 0x7bc1a23c, 0x4, 0x4, 0x80000001, 0x846d, 0x0, 0x2, 0x8, 0x8, 0xe77, 0x8, 0xc, 0x7, 0x6, 0x1, 0x8, 0x1, 0x80000001, 0xfffffffd, 0x3, 0x1, 0xfffffffc, 0x1, 0x4, 0x3, 0x7, 0x2, 0x8, 0x8000, 0xc7, 0x847b, 0x401, 0x8, 0x7f, 0x0, 0x3a, 0x5, 0x8, 0x7, 0x0, 0xa91, 0x8, 0x5, 0x10b, 0xfff, 0x3, 0x1, 0x5, 0x13f, 0x8, 0x3, 0x895bafe, 0x1, 0x2, 0xea8, 0xc979, 0x8000, 0xd1b2, 0x3, 0x7, 0x5, 0x9a2, 0x2, 0xfffffc01, 0x2, 0x1, 0x3ff, 0x5fce, 0x117c, 0x1000, 0x800]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x3, 0x10000, 0x1ee7, 0xae3e, 0x7, 0x4, 0x100, 0xffffffff, 0xffff, 0x7, 0x200, 0x7, 0x0, 0x7fffffff, 0x2, 0xfffeffff, 0xfffffffe, 0x2, 0x100, 0x7de3c92, 0x9, 0x2, 0x52bb, 0xe8d, 0x100, 0x3, 0xda, 0x9, 0x4, 0x2, 0xfff, 0x8, 0x3ff, 0x7, 0x2, 0x8000, 0x8, 0x7, 0xab, 0xfffff0b6, 0x2, 0x800, 0xff, 0xffff, 0x3, 0x5f2a0993, 0x8, 0x1000, 0x100, 0xfffffffc, 0x0, 0x800, 0x9, 0x1, 0x7, 0x0, 0x9, 0xab0, 0x5, 0x1, 0x4, 0x9, 0x6, 0xe7, 0xff, 0x5, 0xfffffffa, 0x2, 0x9, 0xe, 0x3ff, 0x2, 0x207, 0x0, 0x5, 0xfffffffd, 0x3, 0xd, 0x81, 0x4, 0x0, 0x6, 0x1, 0x6, 0x8, 0x0, 0x1, 0x5, 0xfffffff9, 0x2, 0x8d2, 0x7, 0xc, 0xffffffe3, 0x7, 0x0, 0x5, 0x200, 0x81, 0x75f4b2e4, 0x3, 0x9, 0xffff, 0xfffffff8, 0x6, 0x2, 0x4, 0x3, 0xe, 0x101, 0x1, 0x8, 0x8, 0x3aac, 0x6d67, 0x7, 0x1, 0xffffff80, 0x4, 0xa7, 0xff, 0xfffffffc, 0x9, 0x8, 0x2, 0x7, 0x4, 0xe, 0xff, 0x9, 0x3, 0x3, 0x9, 0x6, 0x4, 0xbe0, 0x9, 0x6, 0x74, 0x1400000, 0x10000, 0x80, 0x5098, 0x40, 0x0, 0x6, 0x5af, 0x81, 0xfff, 0x3, 0x40, 0x4, 0x6, 0x5, 0x0, 0x7f, 0x6, 0x10000, 0x5, 0x5, 0x5, 0x4, 0x9, 0x5, 0x0, 0x9, 0x2, 0x6, 0x7, 0xff, 0xe020, 0x0, 0x7fffffff, 0x13d, 0x8, 0x0, 0x7f, 0x7, 0x1, 0x8, 0xb, 0x1000, 0x3, 0x101, 0x5, 0x78, 0xd289, 0xfffffff9, 0x1, 0x2, 0x2, 0x7fffffff, 0x1, 0x1ff, 0x188, 0x3, 0x0, 0x6, 0x3, 0x4, 0x0, 0xffff, 0x0, 0x1, 0x4, 0x665fa6d0, 0x10001, 0x0, 0x10001, 0xb2ad, 0x7f, 0xe2f, 0x6, 0x0, 0x8, 0x200, 0xfffffffa, 0x5, 0xe31, 0xb, 0x1949b5dd, 0x5, 0x8, 0x4, 0x7, 0xfffffffb, 0x3, 0x4, 0xec, 0x10001, 0x7, 0x0, 0x8001, 0x4e, 0x3, 0x10001, 0x6, 0x1, 0xffff955c, 0x5, 0x1, 0x6, 0x100, 0x6, 0x2, 0x6, 0x6, 0x1, 0x1, 0x401, 0x0, 0xff, 0x0, 0xffff, 0x10000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0xe5bd, 0xa4, 0x5, 0x1000, 0x7, 0x5, 0x5, 0xe6cd, 0x5, 0x2, 0x7, 0x401, 0x3, 0x0, 0xd6, 0x8001, 0x2, 0x8, 0xfffffff8, 0x8, 0x4, 0xa, 0x9, 0x6, 0xffffffff, 0x2, 0x6, 0x0, 0x1, 0x8, 0x5, 0x9, 0x2, 0x5, 0xffffffff, 0x3, 0x5, 0x10001, 0x8c, 0x7, 0x5, 0x99b6, 0x7, 0x5, 0x9, 0x6, 0x3, 0x1, 0x30af, 0xfff, 0xffffffff, 0x6c16, 0x8, 0x80000001, 0x3, 0x6a, 0xffff, 0x8, 0x1, 0x44ee, 0x8000, 0xca, 0xa, 0x0, 0x6, 0x7c6, 0xe9, 0x3ff, 0x4, 0x7, 0x6, 0x9, 0x1, 0xe63, 0x7, 0x401, 0x3, 0x4, 0x1, 0x8, 0x6, 0x4, 0x7, 0x5, 0x4, 0x1ff, 0x5, 0xb3, 0xb715, 0x8be, 0x3, 0x631400, 0x5, 0xe22, 0x7ff, 0x0, 0x2, 0xb, 0x4, 0x3, 0xd, 0x6, 0x6123, 0xe, 0x1, 0x711, 0xfffffffc, 0x7, 0x8, 0x6, 0x5, 0x5, 0xfffff81a, 0x1, 0x80000000, 0xde, 0x1, 0x1, 0x9, 0x66, 0xfffffff9, 0x5, 0xe0000, 0x2, 0x80000000, 0xf, 0x0, 0x9e, 0x4, 0x1000, 0x7, 0x6, 0x3, 0x7, 0x4, 0x7, 0x7, 0x7f, 0x4, 0x471bcc85, 0x10001, 0x80000000, 0xae, 0x8, 0x6, 0x1, 0x9, 0x11, 0x2, 0x9, 0x1000, 0x7, 0x4, 0x80000000, 0xfffff099, 0x3aa, 0x7b, 0x1, 0x2, 0xb, 0x401, 0x0, 0x5, 0x3, 0x80000000, 0xfffffffb, 0x3, 0xe1, 0x8, 0x87, 0x7, 0x1ff, 0x4d0, 0x4, 0xb, 0x4, 0x7, 0x2, 0x2, 0x100, 0x8d3f, 0xfbc, 0x1, 0x7dd1, 0x0, 0x7f, 0x3, 0x7fffffff, 0x4, 0x13, 0xa1, 0x7fffffff, 0x0, 0x5, 0x8, 0x1, 0x2, 0x5, 0x6, 0x3, 0x4, 0x401, 0x7fff, 0x6d7, 0x80000001, 0x1, 0x7, 0x81, 0x4, 0x4, 0x6, 0x8001, 0x2, 0x0, 0x3, 0x0, 0x5, 0x6, 0x2, 0xb784, 0x9, 0x100, 0x7, 0x1, 0xffff8001, 0x500, 0x5, 0x9, 0x5, 0x8, 0xfff, 0x8, 0x80000000, 0x0, 0x3, 0xa4, 0x7, 0x6000, 0xffff, 0xfffffffc, 0x9, 0xb, 0x141282a9, 0x8000, 0x72, 0xffffff58, 0x354e, 0x0, 0x2, 0x2, 0x7, 0x5, 0xb34, 0xa1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x8, 0xe, 0x0, 0xa, 0xbded, 0x56, 0x8001, 0x3, 0x5, 0xe7c1, 0x2, 0x2, 0x1, 0x8, 0x10, 0x0, 0x8000, 0x10001, 0x9, 0x0, 0x3, 0x2, 0x6, 0x6, 0x1, 0x10001, 0xa5, 0x5, 0x3ff, 0x5, 0x0, 0x800, 0x9, 0x2, 0x2, 0xd, 0x3, 0x4, 0x1ff, 0xb2e, 0x4, 0x7fff, 0x9, 0x8, 0xc09b, 0x80, 0x6, 0xfffffffa, 0x7, 0x40, 0xe7e8, 0x60b8, 0x6, 0x8, 0x387e, 0x2, 0x80000001, 0x1, 0x0, 0xd82, 0x7fffffff, 0x1ff, 0xfff, 0x5, 0x8, 0xffff, 0xff, 0x2, 0xf, 0x4, 0x4, 0xfff, 0x8, 0x8, 0xe, 0x6, 0x8, 0x2, 0x8, 0x7ff, 0xed51, 0x9, 0xf61d, 0xc, 0x5, 0x0, 0x0, 0xa9f7, 0xfb53, 0xffff, 0x8, 0x2c1, 0xe7, 0x2, 0xfffffff3, 0x6, 0xffff, 0x82, 0x4, 0x80000000, 0x393, 0xb59e5219, 0x1ff, 0x0, 0x1, 0x280445ca, 0x0, 0xfffffff7, 0xfffff577, 0x4, 0x40, 0xb, 0x1, 0xd, 0xffff8000, 0x3, 0x0, 0x5, 0x7, 0xfffffff7, 0x8, 0x10001, 0x1cf2471b, 0xfffffaf6, 0x1ff, 0x2, 0xd, 0x74, 0xb3a, 0x9, 0x6, 0xfffffffb, 0x3, 0x1e, 0x6, 0x400, 0x0, 0x4, 0x2, 0x0, 0x7, 0x0, 0x9, 0x0, 0x6, 0x8, 0x8, 0x7ff, 0x6c4, 0xfffff801, 0x2, 0xffffffff, 0x0, 0x101, 0xc, 0x7ff, 0x2, 0x9, 0xb3, 0x1, 0x5, 0x9, 0x80000001, 0xc4, 0x7ff, 0x1, 0x6e75, 0x4, 0x217c, 0x2, 0x3, 0x9, 0x9, 0x81, 0x1, 0x0, 0x9, 0x200, 0x1, 0x101, 0x8, 0x2, 0xa, 0x4, 0x7fff, 0x0, 0xd, 0x1ff, 0x7, 0x6, 0x3, 0x9, 0x0, 0x4, 0xffff, 0x9, 0x4171, 0x1f4, 0x2, 0x3, 0x7, 0xa, 0x9, 0x2e, 0x0, 0x80, 0x17, 0x9, 0x9, 0x3, 0x5a97, 0x1, 0x8, 0x3, 0x2, 0x8, 0x7dc8, 0x8, 0xb1cd, 0x2000000, 0x8, 0x9, 0x8, 0x5, 0x5, 0x7, 0x72f9, 0xff, 0x7f, 0x1000, 0x8, 0x9, 0x8, 0x285, 0xb, 0x7, 0x0, 0xffffffff, 0xfffffff7, 0x7, 0x8, 0x40, 0x7, 0xd, 0x1, 0x7, 0x80000001, 0x7ffc5d82, 0x1, 0x3, 0x4, 0x9, 0x1, 0x10001, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0x8, 0x2, 0xfffffffb, 0xa, 0xfffffffa, 0xfffffff9, 0x7, 0x7ff, 0xfffffffe, 0xf, 0xfffffff8, 0x3, 0x200000, 0x1ff, 0x6, 0xa, 0x0, 0x7808ba58, 0x9, 0x8, 0x0, 0x7fff, 0xb, 0x8a6, 0x2d7e, 0x6, 0x2, 0x7, 0x7, 0x7cce, 0x7ff, 0x6, 0x1, 0x51, 0xc0000, 0x5, 0x7, 0x2, 0x8, 0x5, 0x80000000, 0xffff, 0x5, 0x1, 0x1, 0x8, 0x1, 0xc, 0x0, 0x7, 0x4, 0x9, 0x4, 0x100, 0x7, 0xb7d, 0xfffffffa, 0x10001, 0x1, 0x7f, 0x0, 0x2, 0x40, 0x401, 0x10000, 0xff, 0x1, 0x52, 0x1ae8, 0xffffffff, 0x9a, 0x401, 0x5, 0x0, 0x8, 0x6, 0xd4, 0x0, 0x800, 0x3, 0x3, 0xae1e, 0x800, 0x5, 0x4, 0x4, 0x8, 0xfffff800, 0x7, 0x8, 0x1, 0x27c5c341, 0x6, 0x1000, 0x7, 0x1, 0x8, 0x3, 0x9, 0xd, 0x2, 0x4, 0x9, 0x6, 0x67, 0xc, 0xf7c, 0x2, 0x1, 0x0, 0x100, 0x8000, 0x401, 0x8000, 0x2b, 0x9, 0x604, 0x2, 0x7, 0x3, 0x7, 0x6, 0x6, 0x0, 0x8, 0x8000, 0x1000, 0x400, 0x7f, 0xfffffffe, 0x8, 0x6, 0x1, 0x8, 0x4, 0x7, 0x7bd, 0x8, 0x1, 0xae, 0x0, 0xffff8000, 0x3, 0x200, 0x7fff, 0x9, 0x3, 0x0, 0x3, 0xe2, 0x8, 0x7fffffff, 0x4, 0x8, 0xffff, 0xc, 0x81, 0x9, 0xb, 0x5, 0x0, 0xd89c, 0x10000, 0x8, 0x9, 0x4000, 0xfffffff4, 0xfffffffc, 0x2, 0xbf, 0x80000000, 0x9, 0xb63d, 0x7, 0x7fff, 0x9, 0xa, 0x1, 0x8000, 0xfffffffa, 0x3, 0x7fffffff, 0x0, 0xf, 0xf8b, 0x0, 0x76f, 0x7, 0x9, 0x6, 0x9, 0xb2, 0x200, 0x7, 0x5a43, 0x1, 0x9, 0x7f, 0x73, 0x51e, 0x3, 0x8d, 0x8, 0x5dc, 0x8f6, 0x1, 0x0, 0x1800000, 0x6, 0x8001, 0x7, 0xe6e, 0x6, 0x40, 0x10000, 0x1, 0x3, 0x6, 0xbb6, 0x3, 0x8, 0x9, 0xdce, 0xfa, 0x401, 0x6, 0x2, 0x7543, 0x100, 0x9, 0x7fff, 0x7, 0x1, 0x0, 0x7, 0x7, 0x3, 0x7f, 0x800, 0x8a07, 0x8000, 0x9, 0x9, 0x57d, 0x3, 0x0, 0x6, 0x4, 0xfffffe00, 0x5, 0x6, 0x4, 0xffff7f29, 0x6, 0x897]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x7fffffff, 0x4ad6, 0xc59bbbca, {0x7, 0x1, 0x3, 0x4, 0x8, 0xffffffff}, {0x4, 0x0, 0xcb8, 0x8, 0x8, 0xffffa4f9}, 0xffff, 0x0, 0x7ff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x62, 0x6, "07826bce920be77d3bad6406a153e423d5ebd7a00ccc7b9264ee875799ccfd4bbd674bdb12e2f2f0c329b94c32ab61d497b82af4793ade92b894c1152f6f03318a6e81d1cc5a2414c16ed7a7de393b541edf4e94f46641b8d2fb564b3138"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x108, 0x1b, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8000, 0x8001, 0x7, 0x7, 0x5}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xe}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xd, 0x7, 0xffffffffffffffff, 0x3, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x81}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}]}, {0x7c, 0x6, "8fa528709711932d57ab99c2f8af46521ab45e50b366578a4989d52307e8b267045bb3fe24135bfda3d48a84da2255e0514fc71a4851672f2527926f41df5529c7453898f7946889aa1aeaf6dac81d4653a3d1aee37092edcd347e337b40e47bc588bd375876858c8ba8a0bfc6bd26f7a5e95c2545b8e00e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0xb4, 0x1e, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x1, 0x40000000, 0x5}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @random="7ab1959b8cd1"}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x25, 0x6, "0753b0da8d1c2d1b2d6aa2b39ff6c85039b9b6bdda40d7840d2682e2dc7b52786e"}, {0xc, 0x7, {0xc26ca921e2a42cda, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0xd8, 0xd, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x8839, 0x3, 0x5200, 0x2}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x7c, 0x6, "13f0d1587a8015503a311bec0cf61c1cef53f433c50b56280ecccc18a73e7a5f4f8820912adf11ccd105437c54f0de9b0be1fb30fb80112ca6c5ddcce3c18dc80df96dbb8da5618901d4fd4912e846e0f4327fc9dc545583b0cc7383edaa8b9db1a3f1d67e2ec79f7af8be30fd81992943d53809fbed7f33"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_FLOW_ACT={0x9d0, 0x9, 0x0, 0x1, [@m_skbedit={0x108, 0x2, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xffff4e93, 0x379a, 0x0, 0x4, 0x8}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xc}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8001}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x6, 0x0, 0x0, 0x2859995d}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x401, 0x6, 0x20000000, 0x57, 0x5b6}}]}, {0x83, 0x6, "0679b208fc6cd87db494dc1442424aec2f9dded129ec362095a5ba8387bc24c3949425a8883431e5f448f70ccd4bf5ec74a074dd825978305e0fd7becedcd35bdeca1002ad42cabdd37556e5076bbe50111578209c6cc6d5afec2ebadad706384a3dd3faac8f2f861d7fc0fa824d99df7a43252fc31b4b77588e3f2e87de11"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0xe0, 0x0, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x1, 0x10000000, 0x8001, 0x4}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x65, 0x2, 0x2, 0x8000, 0x3}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0xff, 0x3, 0x6, 0x8001}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0x0, 0x9, 0x10000}, 0x2, r8}}]}, {0x34, 0x6, "c35b8c1d2bc15f7551f7dbeb68f9af322a7284b69ca7dc657cffe9b0a1399870ab26058f40065b30dda24c3bb18de6a2"}, {0xc}, {0xc}}}, @m_ct={0x110, 0x1a, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x2f}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}, @TCA_CT_LABELS={0x14, 0x7, "bccc3723e98e7de17dafa094bb8ea3c7"}]}, {0x99, 0x6, "c3eb0ef13b3998a8c0a4484c53369868f97b549c28fcb0382c7138125ed6d36a4ecb376b08c54d83ce2b035b3ecfbd8768d4b5237b45541c0ec9a3bd1464ef6cefff5b88fbaea4947273d37fef93efffbd45aba2ca71575718b51ac81ede3067ec3a52d6f0c668150fa4e7e6220ae51c84739d2a942673699184e89dc9d91d74c732fab2c9cebafdc35e1cd9b70ea7b34fe9f458a3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0xf8, 0x20, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}, @TCA_DEF_DATA={0x6, 0x3, '*\x00'}, @TCA_DEF_DATA={0x8, 0x3, '}]/\x00'}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}]}, {0x9d, 0x6, "d46c2d2a48286da2319ccb79cfde4c7ae7a242214480e13b0a9a51c2be5181b40f731a1dea4dd6033f4236e45b9d42f942f6eaa419da9c9ce723e24994b5770b8fd78a336080447d2278197405469f97fe2dd75e96d8da6f0042b04cfc54567a6ebc7c77f6abfcaabd6baac37c4a743c932b9391d70ee97f8ba341240b9369f4053ec9c5cf90e5d3ee28f19020f3b104535a06e78e85d33076"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0xa8, 0x1, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x80000000, 0x0, 0x0, 0x9, 0xceab}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x3d6, 0xfffffffffffffff9, 0x2, 0x3}}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x9, 0x0, 0x8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8000}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}]}, {0x9, 0x6, "5066aa1382"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x98, 0x18, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfffa}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xd}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x1d, 0x6, "d6ea9a4d3730b0e406c541f4cd15bab8f33bc0bdff17ce9f4f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x1a0, 0xa, 0x0, 0x0, {{0x9}, {0x80, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x7, 0x0, 0x1, 0x6}, 0x3}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x5, 0x6, 0x5, 0x1}, 0x3}}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x2, 0x7, 0x4, 0x8}, 0x3}}]}, {0xf7, 0x6, "960f1ca4b0c37b355452f923f283356fc928642ef3d0f77568ec5efb7ee3d1e67014852f8452a4926c417cf2cad00ddb26a5c12a6431156986da795700615a089ed966e8d2192f52e271036b86cac1cf9c172fa0a26753f58e138ad91de671cd3523301d30ce4b2f827f000f97c6fae68d53b35e38f7dbcc4bf26bd43f4d2b77c9675fad48fcee7f88cf37b9c623bdeb37e1c4ac9a007573b091ab09b4d0c30d4f1ca30a9828c374365720912592612911591f388447df33ca1bbd94533f656fb9c9989fe52bca6e574b93d06913729e488de27ccc7d6e6a519668f7ba310aeee613eeaf263f10c892d067ead2c1aa931553a5"}, {0xc}, {0xc, 0x8, {0x3, 0x32bda7451ed9c4f8}}}}, @m_nat={0x120, 0x1, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0xff, 0xfffffffffffffff9, 0x9, 0x3}, @remote, @remote, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x8, 0x0, 0xe, 0xfffffffa}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xea, 0x6, 0x3, 0x6}, @broadcast, @private=0xa010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd, 0x71, 0x0, 0x2a, 0x4}, @private=0xa010100, @private=0x9, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x78, 0x8, 0x3, 0xc00000, 0x4}, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x26}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x7, 0x7, 0x8, 0x4}, @private=0xa010102, @remote}}]}, {0x7, 0x6, "3cc31f"}, {0xc}, {0xc}}}, @m_ctinfo={0xa0, 0x4, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x8, 0x1, 0x8, 0x3}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x79995310}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2f1}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x7fffffff, 0xffffffffffffffff, 0x7f, 0x2}}]}, {0x23, 0x6, "9565cc744f4c082869afa28ef2033de5959a2cb454328b2409f25d7f0f03b1"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x13c, 0x20, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1b1b, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x164d, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1f57, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x484, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x543, 0x20000000}}]}, {0xd1, 0x6, "7252fc910ae1ab956b25152b508cd058cd75c3799953c19173092a09a77b8d6aa84a6e2fcd924eafae114ba70273809a97515ce70a92ba07b19116f973a11b848561731f82915dfdd54b8880dc7809ca904d34829428794fc0f3946ec40918a52a82ee3ede08222250ab4c6711aed7208e7851f8ce98abcc025b06a85b6b72d5170919345074f22e6d0c7801a4bd80187f318aefbfd4d84c716468515b4fc8f4d05711b11a7f8f41bd5b4ce55b9bab29c089a7a2d6f90353e68f4c245197d4d6b88223b2933c4780a3a6ebbfb2"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8bfd}]}}]}, 0x3d00}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9}, {{0x4, 0x1}, {0x2}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008004}, 0x8000) 1.425541445s ago: executing program 3 (id=1000): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x90ff, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 826.01503ms ago: executing program 1 (id=1001): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0x410001, 0xffffffffffffffff, 0x8, 0x4, 0x200, 0x4, 0xfffffffffffffff9, 0x7fffffff, 0x1}) 624.719782ms ago: executing program 2 (id=1002): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000180), 0x0, 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20050040) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) io_uring_setup(0x194f, &(0x7f0000000a80)={0x0, 0xb8d5, 0x80, 0x3, 0x67}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000280)) r5 = dup2(r4, r4) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000040)=0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r6, 0x5414, &(0x7f0000000040)) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x18000, 0x0, 0x3, 0x2, [0x0], [], [0x0, 0x0, 0x6], [0x7, 0x0, 0xb]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x2, 0xee, 0x20b1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r10}) 624.597171ms ago: executing program 3 (id=1003): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 338.071043ms ago: executing program 3 (id=1004): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2800, 0xa0102}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0xeb}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xffffffff}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010101}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x6c}}, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) 325.771737ms ago: executing program 0 (id=1005): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}, {{0x0, 0x0, 0x0, 0x300, &(0x7f0000000200)=ANY=[], 0x20}}], 0x2, 0x4000000) 0s ago: executing program 0 (id=1006): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xd2}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): =unconfined pid=7941 comm="syz.2.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7af8e969 code=0x7ffc0000 [ 249.903121][ T30] audit: type=1326 audit(1748354240.324:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.2.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc7af8d2d0 code=0x7ffc0000 [ 249.925780][ T43] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 250.043918][ T30] audit: type=1326 audit(1748354240.324:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.2.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc7af8d41f code=0x7ffc0000 [ 250.140906][ T43] usb 1-1: device descriptor read/64, error -71 [ 250.157885][ T30] audit: type=1326 audit(1748354240.324:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.2.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fdc7af8e969 code=0x7ffc0000 [ 250.227937][ T30] audit: type=1326 audit(1748354240.374:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.2.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc7af8d41f code=0x7ffc0000 [ 250.242158][ T7949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.305408][ T30] audit: type=1326 audit(1748354240.374:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.2.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdc7af8d5ca code=0x7ffc0000 [ 250.343906][ T7949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.399583][ T43] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 250.405159][ T7958] FAULT_INJECTION: forcing a failure. [ 250.405159][ T7958] name failslab, interval 1, probability 0, space 0, times 0 [ 250.420852][ T7958] CPU: 0 UID: 0 PID: 7958 Comm: syz.1.601 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 250.420880][ T7958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.420891][ T7958] Call Trace: [ 250.420900][ T7958] [ 250.420908][ T7958] dump_stack_lvl+0x189/0x250 [ 250.420947][ T7958] ? __lock_acquire+0xab9/0xd20 [ 250.420972][ T7958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.421000][ T7958] ? __pfx__printk+0x10/0x10 [ 250.421024][ T7958] ? __lock_acquire+0xab9/0xd20 [ 250.421053][ T7958] should_fail_ex+0x414/0x560 [ 250.421083][ T7958] should_failslab+0xa8/0x100 [ 250.421108][ T7958] kmem_cache_alloc_noprof+0x73/0x3c0 [ 250.421128][ T7958] ? skb_clone+0x212/0x3a0 [ 250.421161][ T7958] skb_clone+0x212/0x3a0 [ 250.421184][ T7958] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 250.421209][ T7958] dev_queue_xmit_nit+0x416/0xcc0 [ 250.421232][ T7958] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 250.421267][ T7958] dev_hard_start_xmit+0x1d5/0x880 [ 250.421272][ T30] audit: type=1326 audit(1748354240.374:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.2.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7af8e969 code=0x7ffc0000 [ 250.421296][ T7958] ? stack_trace_save+0x9c/0xe0 [ 250.421332][ T7958] __dev_queue_xmit+0x1adf/0x3a70 [ 250.421362][ T7958] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 250.421385][ T7958] ? __dev_queue_xmit+0x27e/0x3a70 [ 250.421410][ T7958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.421442][ T7958] ? __pfx___dev_queue_xmit+0x10/0x10 [ 250.421481][ T7958] ? __copy_skb_header+0xa7/0x550 [ 250.421506][ T7958] ? __asan_memcpy+0x40/0x70 [ 250.421552][ T7958] ? skb_clone+0x246/0x3a0 [ 250.421580][ T7958] __netlink_deliver_tap+0x5ad/0x850 [ 250.421613][ T7958] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.421634][ T7958] netlink_deliver_tap+0x19c/0x1b0 [ 250.421655][ T7958] netlink_unicast+0x72f/0x8d0 [ 250.421684][ T7958] netlink_sendmsg+0x805/0xb30 [ 250.421714][ T7958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.421738][ T7958] ? aa_sock_msg_perm+0x94/0x160 [ 250.421762][ T7958] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 250.421778][ T7958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.421799][ T7958] __sock_sendmsg+0x21c/0x270 [ 250.421830][ T7958] ____sys_sendmsg+0x505/0x830 [ 250.421859][ T7958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.421891][ T7958] ? import_iovec+0x74/0xa0 [ 250.421913][ T7958] ___sys_sendmsg+0x21f/0x2a0 [ 250.421947][ T7958] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.422007][ T7958] ? __fget_files+0x2a/0x420 [ 250.422026][ T7958] ? __fget_files+0x3a0/0x420 [ 250.422059][ T7958] __x64_sys_sendmsg+0x19b/0x260 [ 250.422085][ T7958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.422126][ T7958] ? do_syscall_64+0xba/0x220 [ 250.422151][ T7958] do_syscall_64+0xf6/0x220 [ 250.422173][ T7958] ? clear_bhb_loop+0x60/0xb0 [ 250.422196][ T7958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.422213][ T7958] RIP: 0033:0x7f9fcc58e969 [ 250.422231][ T7958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.422246][ T7958] RSP: 002b:00007f9fcd3c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.422267][ T7958] RAX: ffffffffffffffda RBX: 00007f9fcc7b5fa0 RCX: 00007f9fcc58e969 [ 250.422280][ T7958] RDX: 0000000000004080 RSI: 00002000000007c0 RDI: 0000000000000003 [ 250.422292][ T7958] RBP: 00007f9fcd3c2090 R08: 0000000000000000 R09: 0000000000000000 [ 250.422303][ T7958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.422314][ T7958] R13: 0000000000000000 R14: 00007f9fcc7b5fa0 R15: 00007f9fcc8dfa28 [ 250.422343][ T7958] [ 250.423703][ T7949] tipc: Invalid UDP bearer configuration [ 250.569626][ T43] usb 1-1: device descriptor read/64, error -71 [ 250.606847][ T7949] tipc: Enabling of bearer rejected, failed to enable media [ 250.884100][ T7962] xt_hashlimit: max too large, truncated to 1048576 [ 250.893011][ T7962] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 250.988996][ T43] usb usb1-port1: attempt power cycle [ 251.002226][ T7960] netlink: 768 bytes leftover after parsing attributes in process `syz.4.600'. [ 251.429643][ T3079] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 251.509578][ T43] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 251.530999][ T43] usb 1-1: device descriptor read/8, error -71 [ 251.766614][ T7977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.604'. [ 251.786932][ T43] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 251.847090][ T43] usb 1-1: device descriptor read/8, error -71 [ 251.905479][ T7984] openvswitch: netlink: Message has 8 unknown bytes. [ 251.966954][ T43] usb usb1-port1: unable to enumerate USB device [ 252.100225][ T5896] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 252.780145][ T3079] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 252.801315][ T8001] binder: 8000:8001 ioctl c0306201 2000000003c0 returned -14 [ 252.976934][ T3079] usb 2-1: Using ep0 maxpacket: 8 [ 252.990672][ T3079] usb 2-1: no configurations [ 252.997605][ T3079] usb 2-1: can't read configurations, error -22 [ 253.019671][ T3079] usb usb2-port1: attempt power cycle [ 253.199442][ T5885] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 253.392702][ T5885] usb 1-1: device descriptor read/64, error -71 [ 253.489602][ T3079] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 253.526918][ T3079] usb 2-1: Using ep0 maxpacket: 8 [ 253.541432][ T3079] usb 2-1: no configurations [ 253.546229][ T3079] usb 2-1: can't read configurations, error -22 [ 253.669560][ T5885] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 253.689461][ T3079] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 253.710222][ T3079] usb 2-1: Using ep0 maxpacket: 8 [ 253.722797][ T3079] usb 2-1: no configurations [ 253.727445][ T3079] usb 2-1: can't read configurations, error -22 [ 253.734383][ T8006] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003 [ 253.764994][ T3079] usb usb2-port1: unable to enumerate USB device [ 253.799542][ T5885] usb 1-1: device descriptor read/64, error -71 [ 253.833155][ T8006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.877527][ T8006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.943677][ T5885] usb usb1-port1: attempt power cycle [ 253.960121][ T8006] veth0: entered promiscuous mode [ 254.094220][ T8005] veth0: left promiscuous mode [ 254.319484][ T5885] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 254.372485][ T5885] usb 1-1: device descriptor read/8, error -71 [ 254.567987][ T8021] FAULT_INJECTION: forcing a failure. [ 254.567987][ T8021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.570501][ T8018] openvswitch: netlink: Message has 8 unknown bytes. [ 254.587876][ T8021] CPU: 1 UID: 0 PID: 8021 Comm: syz.2.619 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 254.587905][ T8021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.587916][ T8021] Call Trace: [ 254.587925][ T8021] [ 254.587933][ T8021] dump_stack_lvl+0x189/0x250 [ 254.587968][ T8021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.587994][ T8021] ? __pfx__printk+0x10/0x10 [ 254.588026][ T8021] should_fail_ex+0x414/0x560 [ 254.588065][ T8021] _copy_to_user+0x31/0xb0 [ 254.588086][ T8021] simple_read_from_buffer+0xe1/0x170 [ 254.588111][ T8021] proc_fail_nth_read+0x1df/0x250 [ 254.588139][ T8021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.588165][ T8021] ? rw_verify_area+0x258/0x650 [ 254.588183][ T8021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.588208][ T8021] vfs_read+0x1fd/0x980 [ 254.588231][ T8021] ? __pfx___mutex_lock+0x10/0x10 [ 254.588254][ T8021] ? __pfx_vfs_read+0x10/0x10 [ 254.588274][ T8021] ? __fget_files+0x2a/0x420 [ 254.588299][ T8021] ? __fget_files+0x3a0/0x420 [ 254.588318][ T8021] ? __fget_files+0x2a/0x420 [ 254.588347][ T8021] ksys_read+0x145/0x250 [ 254.588370][ T8021] ? __pfx_ksys_read+0x10/0x10 [ 254.588392][ T8021] ? do_syscall_64+0xba/0x220 [ 254.588422][ T8021] do_syscall_64+0xf6/0x220 [ 254.588445][ T8021] ? clear_bhb_loop+0x60/0xb0 [ 254.588468][ T8021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.588485][ T8021] RIP: 0033:0x7fdc7af8d37c [ 254.588502][ T8021] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 254.588518][ T8021] RSP: 002b:00007fdc78df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.588539][ T8021] RAX: ffffffffffffffda RBX: 00007fdc7b1b5fa0 RCX: 00007fdc7af8d37c [ 254.588552][ T8021] RDX: 000000000000000f RSI: 00007fdc78df60a0 RDI: 0000000000000006 [ 254.588564][ T8021] RBP: 00007fdc78df6090 R08: 0000000000000000 R09: 0000000000000000 [ 254.588574][ T8021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.588585][ T8021] R13: 0000000000000000 R14: 00007fdc7b1b5fa0 R15: 00007fdc7b2dfa28 [ 254.588615][ T8021] [ 254.639622][ T5885] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 254.699971][ T8020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.618'. [ 254.949740][ T5885] usb 1-1: device descriptor read/8, error -71 [ 255.059889][ T5885] usb usb1-port1: unable to enumerate USB device [ 255.154962][ T8031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.209272][ T8031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.469675][ T977] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 255.629444][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 255.641326][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.656827][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.668639][ T977] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 255.682528][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.710855][ T977] usb 2-1: config 0 descriptor?? [ 255.875927][ T8036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.888348][ T8036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.947370][ T977] usbhid 2-1:0.0: can't add hid device: -71 [ 255.969035][ T977] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 256.012383][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.018857][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.080859][ T977] usb 2-1: USB disconnect, device number 43 [ 256.600446][ T8049] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003 [ 256.736027][ T8051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.632'. [ 256.849429][ T3079] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 256.905237][ T8057] FAULT_INJECTION: forcing a failure. [ 256.905237][ T8057] name failslab, interval 1, probability 0, space 0, times 0 [ 256.918863][ T8057] CPU: 1 UID: 0 PID: 8057 Comm: syz.1.635 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 256.918892][ T8057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.918905][ T8057] Call Trace: [ 256.918913][ T8057] [ 256.918923][ T8057] dump_stack_lvl+0x189/0x250 [ 256.918962][ T8057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.918991][ T8057] ? __pfx__printk+0x10/0x10 [ 256.919019][ T8057] ? __pfx___might_resched+0x10/0x10 [ 256.919044][ T8057] ? fs_reclaim_acquire+0x7d/0x100 [ 256.919076][ T8057] should_fail_ex+0x414/0x560 [ 256.919107][ T8057] should_failslab+0xa8/0x100 [ 256.919133][ T8057] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 256.919157][ T8057] ? rcu_is_watching+0x15/0xb0 [ 256.919179][ T8057] ? key_alloc+0x34d/0x1080 [ 256.919210][ T8057] kmemdup_noprof+0x2b/0x70 [ 256.919241][ T8057] key_alloc+0x34d/0x1080 [ 256.919281][ T8057] __key_create_or_update+0x8df/0xa30 [ 256.919327][ T8057] ? __pfx___key_create_or_update+0x10/0x10 [ 256.919377][ T8057] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 256.919413][ T8057] key_create_or_update+0x42/0x60 [ 256.919445][ T8057] __se_sys_add_key+0x329/0x400 [ 256.919470][ T8057] ? __pfx___se_sys_add_key+0x10/0x10 [ 256.919497][ T8057] ? do_syscall_64+0xba/0x220 [ 256.919520][ T8057] ? __x64_sys_add_key+0x20/0xc0 [ 256.919542][ T8057] do_syscall_64+0xf6/0x220 [ 256.919566][ T8057] ? clear_bhb_loop+0x60/0xb0 [ 256.919589][ T8057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.919608][ T8057] RIP: 0033:0x7f9fcc58e969 [ 256.919626][ T8057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.919644][ T8057] RSP: 002b:00007f9fcd3c2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 256.919666][ T8057] RAX: ffffffffffffffda RBX: 00007f9fcc7b5fa0 RCX: 00007f9fcc58e969 [ 256.919680][ T8057] RDX: 0000200000000100 RSI: 0000200000002340 RDI: 0000200000000040 [ 256.919694][ T8057] RBP: 00007f9fcd3c2090 R08: ffffffffffffffff R09: 0000000000000000 [ 256.919708][ T8057] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 256.919720][ T8057] R13: 0000000000000000 R14: 00007f9fcc7b5fa0 R15: 00007f9fcc8dfa28 [ 256.919753][ T8057] [ 257.263366][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 257.263386][ T30] audit: type=1326 audit(1748354247.744:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7af8e969 code=0x7ffc0000 [ 257.298526][ T30] audit: type=1326 audit(1748354247.744:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc7af2ab39 code=0x7ffc0000 [ 257.321014][ T30] audit: type=1326 audit(1748354247.744:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc7af2ab39 code=0x7ffc0000 [ 257.343947][ T30] audit: type=1326 audit(1748354247.874:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc7af2ab39 code=0x7ffc0000 [ 257.360627][ T8063] FAULT_INJECTION: forcing a failure. [ 257.360627][ T8063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.379960][ T30] audit: type=1326 audit(1748354247.874:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdc7af8e969 code=0x7ffc0000 [ 257.405184][ T30] audit: type=1326 audit(1748354247.874:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7af8e969 code=0x7ffc0000 [ 257.416720][ T8063] CPU: 0 UID: 0 PID: 8063 Comm: syz.1.637 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 257.416751][ T8063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.416762][ T8063] Call Trace: [ 257.416771][ T8063] [ 257.416780][ T8063] dump_stack_lvl+0x189/0x250 [ 257.416815][ T8063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.416850][ T8063] ? __pfx__printk+0x10/0x10 [ 257.416882][ T8063] should_fail_ex+0x414/0x560 [ 257.416911][ T8063] _copy_to_user+0x31/0xb0 [ 257.416932][ T8063] simple_read_from_buffer+0xe1/0x170 [ 257.416957][ T8063] proc_fail_nth_read+0x1df/0x250 [ 257.416985][ T8063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.417011][ T8063] ? rw_verify_area+0x258/0x650 [ 257.417028][ T8063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.417053][ T8063] vfs_read+0x1fd/0x980 [ 257.417076][ T8063] ? __pfx___mutex_lock+0x10/0x10 [ 257.417099][ T8063] ? __pfx_vfs_read+0x10/0x10 [ 257.417118][ T8063] ? __fget_files+0x2a/0x420 [ 257.417144][ T8063] ? __fget_files+0x3a0/0x420 [ 257.417164][ T8063] ? __fget_files+0x2a/0x420 [ 257.417194][ T8063] ksys_read+0x145/0x250 [ 257.417215][ T8063] ? __pfx_ksys_read+0x10/0x10 [ 257.417237][ T8063] ? do_syscall_64+0xba/0x220 [ 257.417263][ T8063] do_syscall_64+0xf6/0x220 [ 257.417286][ T8063] ? clear_bhb_loop+0x60/0xb0 [ 257.417308][ T8063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.417326][ T8063] RIP: 0033:0x7f9fcc58d37c [ 257.417343][ T8063] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 257.417358][ T8063] RSP: 002b:00007f9fcd3c2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.417380][ T8063] RAX: ffffffffffffffda RBX: 00007f9fcc7b5fa0 RCX: 00007f9fcc58d37c [ 257.417393][ T8063] RDX: 000000000000000f RSI: 00007f9fcd3c20a0 RDI: 0000000000000006 [ 257.417405][ T8063] RBP: 00007f9fcd3c2090 R08: 0000000000000000 R09: 0000000000000000 [ 257.417416][ T8063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.417427][ T8063] R13: 0000000000000000 R14: 00007f9fcc7b5fa0 R15: 00007f9fcc8dfa28 [ 257.417456][ T8063] [ 257.519676][ T5896] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 257.650817][ T3079] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.670883][ T30] audit: type=1326 audit(1748354247.874:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7af8e969 code=0x7ffc0000 [ 257.684824][ T3079] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.697007][ T30] audit: type=1326 audit(1748354247.904:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc7af2ab39 code=0x7ffc0000 [ 257.766892][ T3079] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 257.776452][ T3079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 257.784630][ T30] audit: type=1326 audit(1748354247.904:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc7af2ab39 code=0x7ffc0000 [ 257.790258][ T3079] usb 1-1: SerialNumber: syz [ 257.819475][ T5896] usb 5-1: device descriptor read/64, error -71 [ 257.878487][ T30] audit: type=1326 audit(1748354247.904:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc7af2ab39 code=0x7ffc0000 [ 257.975086][ T8059] fuse: Bad value for 'fd' [ 258.072234][ T5896] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 258.169630][ T8049] veth0: entered promiscuous mode [ 258.177077][ T8048] veth0: left promiscuous mode [ 258.210537][ T3079] usb 1-1: 0:2 : does not exist [ 258.269825][ T5896] usb 5-1: device descriptor read/64, error -71 [ 258.270008][ T3079] usb 1-1: USB disconnect, device number 64 [ 258.400539][ T5896] usb usb5-port1: attempt power cycle [ 258.404748][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.759557][ T5896] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 258.854993][ T5896] usb 5-1: device descriptor read/8, error -71 [ 259.100856][ T5896] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 259.131796][ T5896] usb 5-1: device descriptor read/8, error -71 [ 259.273938][ T5896] usb usb5-port1: unable to enumerate USB device [ 260.329712][ T5878] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 260.525585][ T5878] usb 2-1: config index 0 descriptor too short (expected 55488, got 18) [ 260.704290][ T8091] loop6: detected capacity change from 0 to 524287999 [ 260.713315][ T5878] usb 2-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 260.735862][ T5878] usb 2-1: config 0 has no interfaces? [ 260.744169][ T5878] usb 2-1: New USB device found, idVendor=0006, idProduct=7a05, bcdDevice= 0.00 [ 260.755881][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.975628][ T5878] usb 2-1: Product: syz [ 261.069635][ T5878] usb 2-1: Manufacturer: syz [ 261.074436][ T5878] usb 2-1: SerialNumber: syz [ 261.082770][ T5878] usb 2-1: config 0 descriptor?? [ 261.189557][ T5896] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 261.245123][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 261.339723][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 261.375642][ T5896] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 261.385211][ T5896] usb 5-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 261.396794][ T5896] usb 5-1: config 0 has no interface number 0 [ 261.404471][ T5896] usb 5-1: config 0 interface 110 has no altsetting 0 [ 261.416896][ T5896] usb 5-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=5d.d0 [ 261.426298][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.435155][ T5896] usb 5-1: Product: syz [ 261.439838][ T5896] usb 5-1: Manufacturer: syz [ 261.444706][ T5896] usb 5-1: SerialNumber: syz [ 261.456951][ T5896] usb 5-1: config 0 descriptor?? [ 262.059480][ T8104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.076257][ T8104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.647728][ T977] usb 2-1: USB disconnect, device number 44 [ 263.016816][ T8109] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003 [ 263.688682][ T8111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.651'. [ 263.932047][ T5896] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 264.085410][ T30] kauditd_printk_skb: 392 callbacks suppressed [ 264.085431][ T30] audit: type=1326 audit(1748354254.664:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcc58e969 code=0x7ffc0000 [ 264.478707][ T5896] usb 5-1: USB disconnect, device number 40 [ 264.503758][ T30] audit: type=1326 audit(1748354254.694:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f9fcc58e969 code=0x7ffc0000 [ 264.540634][ T8119] tap0: tun_chr_ioctl cmd 1074025677 [ 264.547324][ T8119] tap0: linktype set to 805 [ 264.813153][ T30] audit: type=1326 audit(1748354254.694:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcc58e969 code=0x7ffc0000 [ 264.909513][ T30] audit: type=1326 audit(1748354254.694:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9fcc58e969 code=0x7ffc0000 [ 265.299502][ T5878] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 265.416252][ T8131] FAULT_INJECTION: forcing a failure. [ 265.416252][ T8131] name failslab, interval 1, probability 0, space 0, times 0 [ 265.592783][ T8131] CPU: 1 UID: 0 PID: 8131 Comm: syz.2.657 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 265.592814][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.592826][ T8131] Call Trace: [ 265.592834][ T8131] [ 265.592843][ T8131] dump_stack_lvl+0x189/0x250 [ 265.592880][ T8131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.592907][ T8131] ? __pfx__printk+0x10/0x10 [ 265.592932][ T8131] ? __pfx___might_resched+0x10/0x10 [ 265.592956][ T8131] ? fs_reclaim_acquire+0x7d/0x100 [ 265.592987][ T8131] should_fail_ex+0x414/0x560 [ 265.593025][ T8131] should_failslab+0xa8/0x100 [ 265.593048][ T8131] __kmalloc_cache_noprof+0x70/0x3d0 [ 265.593069][ T8131] ? rtnl_newlink+0xed/0x1c70 [ 265.593092][ T8131] rtnl_newlink+0xed/0x1c70 [ 265.593109][ T8131] ? kasan_save_track+0x3e/0x80 [ 265.593127][ T8131] ? kasan_save_free_info+0x46/0x50 [ 265.593150][ T8131] ? __kasan_slab_free+0x62/0x70 [ 265.593168][ T8131] ? kmem_cache_free+0x18f/0x400 [ 265.593186][ T8131] ? nlmon_xmit+0xb0/0x100 [ 265.593206][ T8131] ? dev_hard_start_xmit+0x302/0x880 [ 265.593230][ T8131] ? __dev_queue_xmit+0x1adf/0x3a70 [ 265.593255][ T8131] ? __netlink_deliver_tap+0x5ad/0x850 [ 265.593274][ T8131] ? netlink_deliver_tap+0x19c/0x1b0 [ 265.593291][ T8131] ? netlink_unicast+0x72f/0x8d0 [ 265.593304][ T8131] ? netlink_sendmsg+0x805/0xb30 [ 265.593323][ T8131] ? __sock_sendmsg+0x21c/0x270 [ 265.593348][ T8131] ? ____sys_sendmsg+0x505/0x830 [ 265.593369][ T8131] ? ___sys_sendmsg+0x21f/0x2a0 [ 265.593388][ T8131] ? __x64_sys_sendmsg+0x19b/0x260 [ 265.593413][ T8131] ? __pfx_rtnl_newlink+0x10/0x10 [ 265.593464][ T8131] ? kasan_quarantine_put+0xdd/0x220 [ 265.593482][ T8131] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.593510][ T8131] ? nlmon_xmit+0xb0/0x100 [ 265.593530][ T8131] ? kmem_cache_free+0x18f/0x400 [ 265.593557][ T8131] ? __local_bh_enable_ip+0x12d/0x1c0 [ 265.593582][ T8131] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.593603][ T8131] ? __local_bh_enable_ip+0x12d/0x1c0 [ 265.593626][ T8131] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 265.593663][ T8131] ? __lock_acquire+0xab9/0xd20 [ 265.593711][ T8131] ? __pfx_rtnl_newlink+0x10/0x10 [ 265.593730][ T8131] rtnetlink_rcv_msg+0x7cf/0xb70 [ 265.593753][ T8131] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 265.593772][ T8131] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.593796][ T8131] ? ref_tracker_free+0x63a/0x7d0 [ 265.593826][ T8131] ? __copy_skb_header+0xa7/0x550 [ 265.593860][ T8131] netlink_rcv_skb+0x21c/0x490 [ 265.593881][ T8131] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.593903][ T8131] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.593943][ T8131] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.593963][ T8131] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.593989][ T8131] netlink_unicast+0x758/0x8d0 [ 265.594026][ T8131] netlink_sendmsg+0x805/0xb30 [ 265.594057][ T8131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.594081][ T8131] ? aa_sock_msg_perm+0x94/0x160 [ 265.594107][ T8131] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 265.594124][ T8131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.594145][ T8131] __sock_sendmsg+0x21c/0x270 [ 265.594178][ T8131] ____sys_sendmsg+0x505/0x830 [ 265.594208][ T8131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.594242][ T8131] ? import_iovec+0x74/0xa0 [ 265.594265][ T8131] ___sys_sendmsg+0x21f/0x2a0 [ 265.594291][ T8131] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.594353][ T8131] ? __fget_files+0x2a/0x420 [ 265.594375][ T8131] ? __fget_files+0x3a0/0x420 [ 265.594407][ T8131] __x64_sys_sendmsg+0x19b/0x260 [ 265.594434][ T8131] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.594477][ T8131] ? do_syscall_64+0xba/0x220 [ 265.594503][ T8131] do_syscall_64+0xf6/0x220 [ 265.594525][ T8131] ? clear_bhb_loop+0x60/0xb0 [ 265.594549][ T8131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.594567][ T8131] RIP: 0033:0x7fdc7af8e969 [ 265.594585][ T8131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.594601][ T8131] RSP: 002b:00007fdc78dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.594623][ T8131] RAX: ffffffffffffffda RBX: 00007fdc7b1b6080 RCX: 00007fdc7af8e969 [ 265.594637][ T8131] RDX: 000000002400c080 RSI: 0000200000000280 RDI: 0000000000000008 [ 265.594649][ T8131] RBP: 00007fdc78dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 265.594661][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.594672][ T8131] R13: 0000000000000000 R14: 00007fdc7b1b6080 R15: 00007fdc7b2dfa28 [ 265.594702][ T8131] [ 266.054731][ T5878] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.065140][ T5878] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 266.074701][ T5878] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 266.084183][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.233729][ T5878] usb 5-1: config 0 descriptor?? [ 266.295992][ T30] audit: type=1326 audit(1748354256.854:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcaf8e969 code=0x7ffc0000 [ 266.321827][ T30] audit: type=1326 audit(1748354256.854:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcaf8e969 code=0x7ffc0000 [ 266.348346][ T30] audit: type=1326 audit(1748354256.854:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f5dcaf8e969 code=0x7ffc0000 [ 266.377261][ T30] audit: type=1326 audit(1748354256.854:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcaf8e969 code=0x7ffc0000 [ 266.403424][ T30] audit: type=1326 audit(1748354256.854:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcaf8e969 code=0x7ffc0000 [ 266.428699][ T30] audit: type=1326 audit(1748354256.854:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5dcaf8e969 code=0x7ffc0000 [ 266.850054][ T8141] capability: warning: `syz.3.659' uses 32-bit capabilities (legacy support in use) [ 266.950262][ T977] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 267.129642][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 267.242738][ T977] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 267.282728][ T977] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 267.319438][ T977] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 267.343987][ T977] usb 1-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 267.348065][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.660'. [ 267.362839][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.395153][ T977] usb 1-1: Product: syz [ 267.400009][ T8148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.662'. [ 267.429522][ T977] usb 1-1: Manufacturer: syz [ 267.434209][ T977] usb 1-1: SerialNumber: syz [ 267.473991][ T977] ti_usb_3410_5052 1-1:1.0: TI USB 3410 1 port adapter converter detected [ 267.901384][ T5878] usb 5-1: string descriptor 0 read error: -71 [ 267.938608][ T5878] usb 5-1: USB disconnect, device number 41 [ 268.324303][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.477692][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.681431][ T8158] tipc: New replicast peer: 0.0.0.0 [ 268.690168][ T8158] tipc: Enabled bearer , priority 10 [ 268.708915][ T8162] pim6reg: entered allmulticast mode [ 269.279446][ T3079] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 269.442387][ T3079] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 32200, setting to 8 [ 269.510230][ T3079] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 269.604960][ T3079] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.671619][ T3079] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 152, changing to 4 [ 269.754040][ T3079] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 269.820755][ T977] tipc: Node number set to 1074004029 [ 269.952889][ T3079] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.968875][ T977] usb 1-1: USB disconnect, device number 65 [ 270.141174][ T3079] usb 2-1: config 0 descriptor?? [ 270.194183][ T8161] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 270.392831][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.402019][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.921834][ T8185] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003 [ 271.002169][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.032494][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.076610][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.087081][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.209632][ T3079] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 271.225176][ T8188] netlink: 452 bytes leftover after parsing attributes in process `syz.4.671'. [ 271.252195][ T8188] FAULT_INJECTION: forcing a failure. [ 271.252195][ T8188] name failslab, interval 1, probability 0, space 0, times 0 [ 271.283257][ T8188] CPU: 0 UID: 0 PID: 8188 Comm: syz.4.671 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 271.283289][ T8188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.283301][ T8188] Call Trace: [ 271.283310][ T8188] [ 271.283319][ T8188] dump_stack_lvl+0x189/0x250 [ 271.283357][ T8188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.283386][ T8188] ? __pfx__printk+0x10/0x10 [ 271.283414][ T8188] ? __pfx___might_resched+0x10/0x10 [ 271.283438][ T8188] ? fs_reclaim_acquire+0x7d/0x100 [ 271.283470][ T8188] should_fail_ex+0x414/0x560 [ 271.283502][ T8188] should_failslab+0xa8/0x100 [ 271.283527][ T8188] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 271.283550][ T8188] ? __alloc_skb+0x112/0x2d0 [ 271.283579][ T8188] __alloc_skb+0x112/0x2d0 [ 271.283607][ T8188] netlink_ack+0x146/0xa50 [ 271.283627][ T8188] ? __mutex_trylock_common+0x153/0x260 [ 271.283658][ T8188] ? __pfx___mutex_trylock_common+0x10/0x10 [ 271.283698][ T8188] netlink_rcv_skb+0x2a0/0x490 [ 271.283721][ T8188] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 271.283745][ T8188] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.283807][ T8188] ? netlink_deliver_tap+0x2e/0x1b0 [ 271.283827][ T8188] ? netlink_deliver_tap+0x2e/0x1b0 [ 271.283852][ T8188] xfrm_netlink_rcv+0x79/0x90 [ 271.283873][ T8188] netlink_unicast+0x758/0x8d0 [ 271.283906][ T8188] netlink_sendmsg+0x805/0xb30 [ 271.283939][ T8188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.283966][ T8188] ? aa_sock_msg_perm+0x94/0x160 [ 271.283993][ T8188] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 271.284011][ T8188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.284035][ T8188] __sock_sendmsg+0x21c/0x270 [ 271.284070][ T8188] ____sys_sendmsg+0x505/0x830 [ 271.284103][ T8188] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.284139][ T8188] ? import_iovec+0x74/0xa0 [ 271.284164][ T8188] ___sys_sendmsg+0x21f/0x2a0 [ 271.284198][ T8188] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.284268][ T8188] ? __fget_files+0x2a/0x420 [ 271.284290][ T8188] ? __fget_files+0x3a0/0x420 [ 271.284327][ T8188] __x64_sys_sendmsg+0x19b/0x260 [ 271.284356][ T8188] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.284402][ T8188] ? do_syscall_64+0xba/0x220 [ 271.284430][ T8188] do_syscall_64+0xf6/0x220 [ 271.284455][ T8188] ? clear_bhb_loop+0x60/0xb0 [ 271.284480][ T8188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.284500][ T8188] RIP: 0033:0x7fbfd2b8e969 [ 271.284518][ T8188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.284535][ T8188] RSP: 002b:00007fbfd39d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.284559][ T8188] RAX: ffffffffffffffda RBX: 00007fbfd2db5fa0 RCX: 00007fbfd2b8e969 [ 271.284573][ T8188] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 271.284587][ T8188] RBP: 00007fbfd39d5090 R08: 0000000000000000 R09: 0000000000000000 [ 271.284599][ T8188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.284611][ T8188] R13: 0000000000000000 R14: 00007fbfd2db5fa0 R15: 00007fbfd2edfa28 [ 271.284645][ T8188] [ 271.912872][ T3079] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.933901][ T3079] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.963643][ T3079] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 271.978348][ T3079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 272.023125][ T3079] usb 1-1: SerialNumber: syz [ 272.248043][ T8185] veth0: entered promiscuous mode [ 272.263834][ T8184] veth0: left promiscuous mode [ 272.296610][ T3079] usb 1-1: 0:2 : does not exist [ 272.352500][ T3079] usb 1-1: USB disconnect, device number 66 [ 272.413511][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.735610][ T3079] usb 2-1: USB disconnect, device number 45 [ 273.142779][ T5885] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 273.209516][ T3079] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 273.289482][ T5885] usb 1-1: device descriptor read/64, error -71 [ 273.374352][ T3079] usb 2-1: config 1 has an invalid interface number: 33 but max is 2 [ 273.392094][ T3079] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 273.411774][ T3079] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 273.423069][ T3079] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.433130][ T3079] usb 2-1: config 1 has no interface number 0 [ 273.444904][ T3079] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.463317][ T3079] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.483182][ T3079] usb 2-1: Product: syz [ 273.491921][ T3079] usb 2-1: Manufacturer: syz [ 273.499627][ T3079] usb 2-1: SerialNumber: syz [ 273.529432][ T5885] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 273.689485][ T5885] usb 1-1: device descriptor read/64, error -71 [ 273.717673][ T8195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.727290][ T8195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.802173][ T5885] usb usb1-port1: attempt power cycle [ 273.859541][ T43] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 274.009470][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 274.016758][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 274.029084][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 274.038476][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.046589][ T43] usb 5-1: Product: syz [ 274.051156][ T43] usb 5-1: Manufacturer: syz [ 274.055817][ T43] usb 5-1: SerialNumber: syz [ 274.063574][ T43] usb 5-1: config 0 descriptor?? [ 274.074732][ T43] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 274.084290][ T43] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 274.149680][ T5885] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 274.180640][ T5885] usb 1-1: device descriptor read/8, error -71 [ 274.364428][ T43] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 274.439520][ T5885] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 274.470466][ T5885] usb 1-1: device descriptor read/8, error -71 [ 274.589940][ T5885] usb usb1-port1: unable to enumerate USB device [ 274.823365][ T43] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 274.832323][ T43] em28xx 5-1:0.0: board has no eeprom [ 274.909284][ T43] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 274.917556][ T43] em28xx 5-1:0.0: dvb set to bulk mode. [ 274.944087][ T5878] em28xx 5-1:0.0: Binding DVB extension [ 275.067716][ T8214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.078690][ T8214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.091995][ T8214] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 275.099066][ T8214] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 275.123674][ T43] usb 5-1: USB disconnect, device number 42 [ 275.137690][ T43] em28xx 5-1:0.0: Disconnecting em28xx [ 275.283438][ T5878] em28xx 5-1:0.0: Registering input extension [ 275.292933][ T43] em28xx 5-1:0.0: Closing input extension [ 275.333162][ T43] em28xx 5-1:0.0: Freeing device [ 275.659546][ T43] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 275.799444][ T43] usb 5-1: device descriptor read/64, error -71 [ 275.934960][ T3079] usb 2-1: 33:2 : does not exist [ 276.044509][ T3079] usb 2-1: USB disconnect, device number 46 [ 276.069536][ T43] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 276.145449][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.33/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.157633][ T8220] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 276.183542][ T8220] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 276.221984][ T8220] veth1_virt_wifi: entered allmulticast mode [ 276.230003][ T43] usb 5-1: device descriptor read/64, error -71 [ 276.236361][ T8220] veth1_virt_wifi: left allmulticast mode [ 276.339766][ T43] usb usb5-port1: attempt power cycle [ 276.528296][ T8223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.683'. [ 276.699547][ T43] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 276.756335][ T43] usb 5-1: device descriptor read/8, error -71 [ 276.892307][ T8228] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003 [ 276.985729][ T8230] fuse: Unknown parameter 'n' [ 276.999559][ T43] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 277.073548][ T43] usb 5-1: device descriptor read/8, error -71 [ 277.189766][ T3079] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 277.200532][ T43] usb usb5-port1: unable to enumerate USB device [ 277.282250][ T8237] netlink: 52 bytes leftover after parsing attributes in process `syz.1.689'. [ 277.381416][ T3079] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.395224][ T3079] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.425189][ T3079] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 277.439500][ T3079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 277.448431][ T3079] usb 1-1: SerialNumber: syz [ 277.696079][ T8228] veth0: entered promiscuous mode [ 277.728397][ T8227] veth0: left promiscuous mode [ 277.745907][ T3079] usb 1-1: 0:2 : does not exist [ 277.801789][ T3079] usb 1-1: USB disconnect, device number 71 [ 277.938272][ T8249] netlink: 52 bytes leftover after parsing attributes in process `syz.3.694'. [ 277.941776][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.086808][ T8251] loop8: detected capacity change from 0 to 1 [ 278.146618][ T8252] futex_wake_op: syz.1.690 tries to shift op by -33; fix this program [ 278.250973][ T8254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.695'. [ 278.271205][ T8251] Dev loop8: unable to read RDB block 1 [ 278.276947][ T8251] loop8: unable to read partition table [ 278.283152][ T8251] loop8: partition table beyond EOD, truncated [ 278.289493][ T8251] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 278.304325][ T8252] netdevsim netdevsim1: Direct firmware load for . [ 278.304325][ T8252] failed with error -2 [ 278.315881][ T8252] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 278.315881][ T8252] [ 278.617505][ T8260] netlink: 68 bytes leftover after parsing attributes in process `syz.2.697'. [ 278.775717][ T8262] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 279.079188][ T8267] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 279.174056][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 279.174073][ T30] audit: type=1326 audit(1748354269.744:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8269 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feea012ab39 code=0x7ffc0000 [ 279.202757][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.350078][ T30] audit: type=1326 audit(1748354269.744:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8269 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea018e969 code=0x7ffc0000 [ 279.439593][ T30] audit: type=1326 audit(1748354269.744:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8269 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea018e969 code=0x7ffc0000 [ 279.529112][ T30] audit: type=1326 audit(1748354269.794:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8269 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feea012ab39 code=0x7ffc0000 [ 279.551337][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.557839][ T30] audit: type=1326 audit(1748354269.794:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8269 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feea012ab39 code=0x7ffc0000 [ 279.587168][ T30] audit: type=1326 audit(1748354269.794:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8269 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feea012ab39 code=0x7ffc0000 [ 279.615002][ T30] audit: type=1326 audit(1748354269.794:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8269 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feea012ab39 code=0x7ffc0000 [ 279.637517][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.796996][ T30] audit: type=1326 audit(1748354269.804:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8269 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feea012ab39 code=0x7ffc0000 [ 279.819330][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.830145][ T30] audit: type=1326 audit(1748354269.804:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8269 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feea012ab39 code=0x7ffc0000 [ 279.852470][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.863968][ T30] audit: type=1326 audit(1748354269.804:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8269 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feea012ab39 code=0x7ffc0000 [ 279.886334][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.898848][ T8282] netlink: 35 bytes leftover after parsing attributes in process `syz.2.703'. [ 279.909294][ T8270] fuse: Bad value for 'fd' [ 280.029088][ T8285] vcan0: tx drop: invalid da for name 0x0008000000000000 [ 280.248191][ T8288] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 280.254800][ T8288] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 280.288318][ T8288] netlink: 52 bytes leftover after parsing attributes in process `syz.1.706'. [ 280.442897][ T8289] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.452443][ T8289] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.461232][ T8289] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.470338][ T8289] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.582021][ T8296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.709'. [ 280.717530][ T8301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.710'. [ 281.037426][ T8303] kvm: MONITOR instruction emulated as NOP! [ 281.666387][ T8316] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 281.695118][ T8318] FAULT_INJECTION: forcing a failure. [ 281.695118][ T8318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.708690][ T8318] CPU: 0 UID: 0 PID: 8318 Comm: syz.1.716 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 281.708719][ T8318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.708731][ T8318] Call Trace: [ 281.708739][ T8318] [ 281.708747][ T8318] dump_stack_lvl+0x189/0x250 [ 281.708785][ T8318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.708813][ T8318] ? __pfx__printk+0x10/0x10 [ 281.708835][ T8318] ? __might_fault+0xb0/0x130 [ 281.708871][ T8318] should_fail_ex+0x414/0x560 [ 281.708900][ T8318] _copy_from_user+0x2d/0xb0 [ 281.708922][ T8318] ___sys_sendmsg+0x158/0x2a0 [ 281.708951][ T8318] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.709027][ T8318] ? __might_fault+0xb0/0x130 [ 281.709052][ T8318] __sys_sendmmsg+0x227/0x430 [ 281.709084][ T8318] ? __pfx___sys_sendmmsg+0x10/0x10 [ 281.709120][ T8318] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 281.709165][ T8318] ? ksys_write+0x22a/0x250 [ 281.709181][ T8318] ? rcu_is_watching+0x15/0xb0 [ 281.709216][ T8318] __x64_sys_sendmmsg+0xa0/0xc0 [ 281.709244][ T8318] do_syscall_64+0xf6/0x220 [ 281.709267][ T8318] ? clear_bhb_loop+0x60/0xb0 [ 281.709288][ T8318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.709312][ T8318] RIP: 0033:0x7f9fcc58e969 [ 281.709332][ T8318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.709349][ T8318] RSP: 002b:00007f9fcd3c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 281.709371][ T8318] RAX: ffffffffffffffda RBX: 00007f9fcc7b5fa0 RCX: 00007f9fcc58e969 [ 281.709386][ T8318] RDX: 040000000000037c RSI: 0000200000002440 RDI: 0000000000000004 [ 281.709399][ T8318] RBP: 00007f9fcd3c2090 R08: 0000000000000000 R09: 0000000000000000 [ 281.709412][ T8318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.709424][ T8318] R13: 0000000000000000 R14: 00007f9fcc7b5fa0 R15: 00007f9fcc8dfa28 [ 281.709456][ T8318] [ 282.190828][ T8324] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 282.197447][ T8324] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 282.207054][ T8324] netlink: 52 bytes leftover after parsing attributes in process `syz.4.719'. [ 282.541119][ T8331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.082803][ T8354] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 284.144401][ T8354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.154894][ T8354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.510446][ T977] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 284.600216][ T8363] netlink: 52 bytes leftover after parsing attributes in process `syz.3.730'. [ 284.690025][ T3079] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 284.708125][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 284.827008][ T977] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 284.836607][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.864953][ T977] usb 5-1: Product: syz [ 284.910898][ T977] usb 5-1: Manufacturer: syz [ 284.929404][ T977] usb 5-1: SerialNumber: syz [ 284.991228][ T977] usb 5-1: config 0 descriptor?? [ 285.173725][ T3079] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.185649][ T3079] usb 1-1: config 0 has no interface number 0 [ 285.214669][ T3079] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 285.242790][ T977] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 285.254049][ T977] eb 9a 47 80 9b f8 7a f0 [ 285.266564][ T977] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 285.322839][ T3079] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 285.334099][ T3079] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 285.346512][ T3079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.526665][ T3079] usb 1-1: config 0 descriptor?? [ 285.548769][ T8360] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 285.791184][ T3079] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 286.679127][ T977] usb 5-1: USB disconnect, device number 47 [ 286.816190][ T8378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.734'. [ 287.016050][ T8380] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003 [ 287.152965][ T8383] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003 [ 287.493564][ T3079] usb 1-1: USB disconnect, device number 72 [ 287.499575][ T5830] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 287.499721][ T5904] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 287.669675][ T5830] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.704142][ T5830] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.726695][ T5830] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 287.747798][ T5904] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.781266][ T5904] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.789798][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 287.797546][ T5904] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 287.816860][ T5830] usb 5-1: SerialNumber: syz [ 287.831913][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 287.861903][ T5904] usb 2-1: SerialNumber: syz [ 287.862018][ T30] kauditd_printk_skb: 129 callbacks suppressed [ 287.862035][ T30] audit: type=1326 audit(1748354278.444:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.0.738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5dcaf8e969 code=0x0 [ 287.943648][ T8390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.958949][ T8390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.060167][ T8383] veth0: entered promiscuous mode [ 288.080435][ T8382] veth0: left promiscuous mode [ 288.102967][ T5830] usb 5-1: 0:2 : does not exist [ 288.151471][ T8380] veth0: entered promiscuous mode [ 288.171360][ T5830] usb 5-1: USB disconnect, device number 48 [ 288.194142][ T8379] veth0: left promiscuous mode [ 288.224760][ T5904] usb 2-1: 0:2 : does not exist [ 288.268933][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.272013][ T5904] usb 2-1: USB disconnect, device number 47 [ 288.369703][ T6409] udevd[6409]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.929104][ T8410] QAT: failed to copy from user cfg_data. [ 288.963363][ T8410] netlink: 104 bytes leftover after parsing attributes in process `syz.0.747'. [ 289.370252][ T8413] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.748'. [ 289.677252][ T8416] ip6erspan0: entered allmulticast mode [ 289.979427][ T977] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 290.179426][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 290.212080][ T977] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 290.224407][ T977] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 290.235107][ T977] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 290.245474][ T977] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 290.255587][ T977] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 290.265877][ T977] usb 1-1: config 1 interface 0 has no altsetting 0 [ 290.273557][ T977] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 290.283498][ T8424] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 290.290138][ T8424] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 290.304236][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.356001][ T977] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 290.561837][ T977] scsi host1: usb-storage 1-1:1.0 [ 290.719452][ T3079] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 290.753762][ T5904] usb 1-1: USB disconnect, device number 73 [ 290.862340][ T3079] usb 5-1: device descriptor read/64, error -71 [ 291.119489][ T3079] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 291.297510][ T3079] usb 5-1: device descriptor read/64, error -71 [ 291.421440][ T3079] usb usb5-port1: attempt power cycle [ 291.563463][ T8453] FAULT_INJECTION: forcing a failure. [ 291.563463][ T8453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.581809][ T8453] CPU: 0 UID: 0 PID: 8453 Comm: syz.1.761 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 291.581840][ T8453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 291.581860][ T8453] Call Trace: [ 291.581869][ T8453] [ 291.581878][ T8453] dump_stack_lvl+0x189/0x250 [ 291.581916][ T8453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.581945][ T8453] ? __pfx__printk+0x10/0x10 [ 291.581966][ T8453] ? __might_fault+0xb0/0x130 [ 291.582003][ T8453] should_fail_ex+0x414/0x560 [ 291.582034][ T8453] _copy_from_user+0x2d/0xb0 [ 291.582056][ T8453] snd_seq_oss_write+0x515/0x930 [ 291.582096][ T8453] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 291.582118][ T8453] ? common_file_perm+0x199/0x200 [ 291.582148][ T8453] ? security_file_permission+0x75/0x290 [ 291.582175][ T8453] odev_write+0x5a/0x80 [ 291.582201][ T8453] ? __pfx_odev_write+0x10/0x10 [ 291.582228][ T8453] vfs_write+0x27b/0xa90 [ 291.582260][ T8453] ? __pfx_vfs_write+0x10/0x10 [ 291.582288][ T8453] ? __fget_files+0x2a/0x420 [ 291.582314][ T8453] ? __fget_files+0x2a/0x420 [ 291.582336][ T8453] ? __fget_files+0x3a0/0x420 [ 291.582358][ T8453] ? __fget_files+0x2a/0x420 [ 291.582390][ T8453] ksys_write+0x145/0x250 [ 291.582409][ T8453] ? rcu_is_watching+0x15/0xb0 [ 291.582436][ T8453] ? __pfx_ksys_write+0x10/0x10 [ 291.582461][ T8453] ? do_syscall_64+0xba/0x220 [ 291.582491][ T8453] do_syscall_64+0xf6/0x220 [ 291.582516][ T8453] ? clear_bhb_loop+0x60/0xb0 [ 291.582542][ T8453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.582561][ T8453] RIP: 0033:0x7f9fcc58e969 [ 291.582580][ T8453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.582598][ T8453] RSP: 002b:00007f9fcd3c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 291.582621][ T8453] RAX: ffffffffffffffda RBX: 00007f9fcc7b5fa0 RCX: 00007f9fcc58e969 [ 291.582636][ T8453] RDX: 00000000000002a7 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 291.582650][ T8453] RBP: 00007f9fcd3c2090 R08: 0000000000000000 R09: 0000000000000000 [ 291.582663][ T8453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 291.582675][ T8453] R13: 0000000000000000 R14: 00007f9fcc7b5fa0 R15: 00007f9fcc8dfa28 [ 291.582708][ T8453] [ 291.815623][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.990178][ T8458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.762'. [ 291.999473][ T8458] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 292.066157][ T3079] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 292.122308][ T3079] usb 5-1: device descriptor read/8, error -71 [ 292.219854][ T8463] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 292.226359][ T8463] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 292.359456][ T3079] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 292.390980][ T3079] usb 5-1: device descriptor read/8, error -71 [ 292.522760][ T3079] usb usb5-port1: unable to enumerate USB device [ 292.679481][ T5904] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 292.829461][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 292.862525][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 292.895751][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 292.926897][ T8449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.946656][ T8449] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 292.957891][ T5904] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 292.974938][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.985299][ T5904] usb 2-1: Product: syz [ 292.990380][ T5904] usb 2-1: Manufacturer: syz [ 292.994985][ T5904] usb 2-1: SerialNumber: syz [ 293.000612][ T3079] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 293.017434][ T5904] usb 2-1: config 0 descriptor?? [ 293.019593][ T5830] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 293.035614][ T5904] usb 2-1: no audio or video endpoints found [ 293.159559][ T3079] usb 1-1: Using ep0 maxpacket: 32 [ 293.170341][ T3079] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 293.179040][ T3079] usb 1-1: config 0 has no interface number 0 [ 293.195253][ T3079] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 293.199703][ T5830] usb 5-1: device descriptor read/64, error -71 [ 293.214524][ T3079] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.222946][ T3079] usb 1-1: Product: syz [ 293.227475][ T3079] usb 1-1: Manufacturer: syz [ 293.254407][ T3079] usb 1-1: SerialNumber: syz [ 293.260673][ T8466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.274351][ T3079] usb 1-1: config 0 descriptor?? [ 293.280667][ T8466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.291074][ T3079] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 293.309874][ T8466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.322942][ T8466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.357930][ T8466] netlink: 'syz.1.765': attribute type 18 has an invalid length. [ 293.369723][ T8466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.765'. [ 293.454416][ T977] usb 2-1: USB disconnect, device number 48 [ 293.460763][ T5830] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 293.512955][ T3079] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 293.541760][ T3079] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 293.919112][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 293.920136][ T5898] usb 1-1: USB disconnect, device number 74 [ 293.945893][ T5898] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 293.974727][ T5898] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 293.988092][ T5898] quatech2 1-1:0.51: device disconnected [ 294.256887][ T8491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.329631][ T5830] usb 5-1: device descriptor read/64, error -71 [ 294.470442][ T5830] usb usb5-port1: attempt power cycle [ 294.558321][ T8493] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 294.564861][ T8493] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 294.609447][ T5904] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 294.724714][ T8495] use of bytesused == 0 is deprecated and will be removed in the future, [ 294.764206][ T8495] use the actual size instead. [ 294.788046][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.798300][ T5904] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 294.807717][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.818791][ T5904] usb 2-1: config 0 descriptor?? [ 294.819539][ T5830] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 294.873108][ T5830] usb 5-1: Using ep0 maxpacket: 16 [ 294.957803][ T5830] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 294.986408][ T5830] usb 5-1: config 0 has no interface number 0 [ 295.041684][ T5830] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 295.055488][ T8500] xt_CT: No such helper "snmp_trap" [ 295.069584][ T5830] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 295.135597][ T5830] usb 5-1: config 0 interface 41 has no altsetting 0 [ 295.165399][ T5830] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 295.182729][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.199051][ T5830] usb 5-1: Product: syz [ 295.208951][ T5830] usb 5-1: Manufacturer: syz [ 295.223973][ T5830] usb 5-1: SerialNumber: syz [ 295.236295][ T5830] usb 5-1: config 0 descriptor?? [ 295.255478][ T8486] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 295.269083][ T8486] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 295.326368][ T8508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.780'. [ 295.509358][ C0] hrtimer: interrupt took 62575 ns [ 295.538898][ T8486] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 295.547081][ T8486] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 296.146912][ T5830] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 296.201014][ T8517] netlink: 'syz.0.784': attribute type 2 has an invalid length. [ 296.407214][ T8521] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 296.413850][ T8521] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 297.049470][ T977] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 297.179742][ T977] usb 1-1: device descriptor read/64, error -71 [ 297.388826][ T5830] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 297.399731][ T5830] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 297.412448][ T5830] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 297.421281][ T977] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 297.436141][ T5830] usb 5-1: USB disconnect, device number 55 [ 297.584558][ T977] usb 1-1: device descriptor read/64, error -71 [ 297.712505][ T977] usb usb1-port1: attempt power cycle [ 297.875024][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'. [ 297.884271][ T8541] netlink: 'syz.2.795': attribute type 9 has an invalid length. [ 297.884449][ T8542] CIFS: iocharset name too long [ 297.902507][ T8541] macvlan2: entered allmulticast mode [ 297.908256][ T8541] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 297.998175][ T8546] netlink: 252 bytes leftover after parsing attributes in process `syz.4.796'. [ 298.059427][ T977] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 298.088322][ T5904] usbhid 2-1:0.0: can't add hid device: -71 [ 298.108156][ T5904] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 298.123703][ T977] usb 1-1: device descriptor read/8, error -71 [ 298.135300][ T5904] usb 2-1: USB disconnect, device number 49 [ 298.199135][ T8551] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 298.205679][ T8551] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 298.400305][ T977] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 298.430157][ T977] usb 1-1: device descriptor read/8, error -71 [ 298.539745][ T977] usb usb1-port1: unable to enumerate USB device [ 298.609730][ T5904] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 298.772089][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.792057][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 298.822351][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 298.835788][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 298.862776][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 298.890280][ T5904] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 298.902400][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 298.917816][ T5904] usb 2-1: Product: syz [ 298.922369][ T5904] usb 2-1: Manufacturer: syz [ 298.927305][ T5904] usb 2-1: SerialNumber: syz [ 298.937054][ T5904] usb 2-1: config 0 descriptor?? [ 298.992147][ T8569] input: syz1 as /devices/virtual/input/input16 [ 299.197653][ T5904] radio-si470x 2-1:0.0: DeviceID=0xf7d1 ChipID=0xc707 [ 299.447241][ T5904] radio-si470x 2-1:0.0: software version 247, hardware version 209 [ 299.599962][ T5904] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 299.608467][ T5904] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 299.684194][ T5904] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 299.704309][ T5904] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 299.885953][ T5904] usb 2-1: USB disconnect, device number 50 [ 300.528398][ T8591] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 300.534983][ T8591] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 300.625335][ T5898] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 300.739433][ T5904] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 300.928299][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.946004][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.978205][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.986671][ T5898] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 301.003141][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.039161][ T5898] usb 1-1: config 0 descriptor?? [ 301.063451][ T5898] pwc: Askey VC010 type 2 USB webcam detected. [ 301.079546][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 301.090413][ T5904] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 301.112594][ T5904] usb 2-1: config 0 has no interface number 0 [ 301.184286][ T5904] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 301.203456][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.221229][ T5904] usb 2-1: Product: syz [ 301.225782][ T5904] usb 2-1: Manufacturer: syz [ 301.232969][ T5904] usb 2-1: SerialNumber: syz [ 301.263233][ T5904] usb 2-1: config 0 descriptor?? [ 301.283702][ T5904] hub 2-1:0.89: bad descriptor, ignoring hub [ 301.340741][ T5904] hub 2-1:0.89: probe with driver hub failed with error -5 [ 301.355292][ T5904] option 2-1:0.89: GSM modem (1-port) converter detected [ 301.420238][ T5904] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 301.449374][ T8602] netlink: 'syz.3.813': attribute type 32 has an invalid length. [ 301.462325][ T5898] pwc: recv_control_msg error -32 req 02 val 2b00 [ 301.477796][ T5898] pwc: recv_control_msg error -32 req 02 val 2700 [ 301.498504][ T5898] pwc: recv_control_msg error -32 req 02 val 2c00 [ 301.506056][ T5898] pwc: recv_control_msg error -32 req 04 val 1000 [ 301.520434][ T5898] pwc: recv_control_msg error -32 req 04 val 1300 [ 301.538641][ T5898] pwc: recv_control_msg error -32 req 04 val 1400 [ 301.551837][ T5898] pwc: recv_control_msg error -32 req 02 val 2000 [ 301.568666][ T5898] pwc: recv_control_msg error -32 req 02 val 2100 [ 301.574130][ T8589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.587124][ T5898] pwc: recv_control_msg error -32 req 04 val 1500 [ 301.610511][ T5898] pwc: recv_control_msg error -32 req 02 val 2500 [ 301.630183][ T8589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.762162][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 301.825390][ T8585] SET target dimension over the limit! [ 301.834333][ T8585] xt_hashlimit: max too large, truncated to 1048576 [ 301.866485][ T8585] xt_bpf: check failed: parse error [ 301.871597][ T8589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.890018][ T8589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.988021][ T5898] pwc: recv_control_msg error -71 req 02 val 2600 [ 302.041490][ T8616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.051171][ T8616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.102890][ T5898] pwc: recv_control_msg error -71 req 02 val 2900 [ 302.119833][ T5904] usb 2-1: USB disconnect, device number 51 [ 302.132365][ T5898] pwc: recv_control_msg error -71 req 02 val 2800 [ 302.161432][ T5904] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 302.169464][ T5898] pwc: recv_control_msg error -71 req 04 val 1100 [ 302.204007][ T5904] option 2-1:0.89: device disconnected [ 302.314970][ T5898] pwc: recv_control_msg error -71 req 04 val 1200 [ 302.362623][ T5898] pwc: Registered as video103. [ 302.511824][ T5898] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 302.594232][ T5898] usb 1-1: USB disconnect, device number 79 [ 303.527051][ T8606] vivid-004: disconnect [ 303.557485][ T8640] binder: 8637:8640 ioctl c0306201 2000000003c0 returned -14 [ 303.574353][ T8640] netlink: 108 bytes leftover after parsing attributes in process `syz.0.821'. [ 303.799694][ T3079] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 304.054727][ T3079] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.066118][ T3079] usb 2-1: New USB device found, idVendor=046d, idProduct=c08d, bcdDevice= 0.00 [ 304.123128][ T3079] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.146228][ T3079] usb 2-1: config 0 descriptor?? [ 304.615549][ T3079] logitech-hidpp-device 0003:046D:C08D.0008: hidraw0: USB HID v0.00 Device [HID 046d:c08d] on usb-dummy_hcd.1-1/input0 [ 304.832034][ T3079] usb 2-1: USB disconnect, device number 52 [ 304.945898][ T5898] IPVS: starting estimator thread 0... [ 304.960011][ T8655] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 305.001608][ T8653] fido_id[8653]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 305.038435][ T8608] vivid-004: reconnect [ 305.119726][ T8657] IPVS: using max 29 ests per chain, 69600 per kthread [ 305.959475][ T43] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 306.151819][ T43] usb 2-1: config 0 has no interfaces? [ 306.160793][ T43] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 306.171743][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.200034][ T43] usb 2-1: Product: syz [ 306.213236][ T43] usb 2-1: Manufacturer: syz [ 306.235992][ T43] usb 2-1: SerialNumber: syz [ 306.287740][ T43] usb 2-1: config 0 descriptor?? [ 306.546820][ T8676] netlink: 'syz.1.833': attribute type 2 has an invalid length. [ 306.554740][ T8676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.833'. [ 307.191267][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.835'. [ 307.205553][ T8690] FAULT_INJECTION: forcing a failure. [ 307.205553][ T8690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.230496][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.835'. [ 307.251778][ T8690] CPU: 0 UID: 0 PID: 8690 Comm: syz.4.837 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 307.251808][ T8690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.251821][ T8690] Call Trace: [ 307.251829][ T8690] [ 307.251838][ T8690] dump_stack_lvl+0x189/0x250 [ 307.251875][ T8690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.251904][ T8690] ? __pfx__printk+0x10/0x10 [ 307.251926][ T8690] ? __might_fault+0xb0/0x130 [ 307.251961][ T8690] should_fail_ex+0x414/0x560 [ 307.251991][ T8690] _copy_to_iter+0x575/0x16f0 [ 307.252033][ T8690] ? __pfx__copy_to_iter+0x10/0x10 [ 307.252058][ T8690] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 307.252093][ T8690] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 307.252128][ T8690] __skb_datagram_iter+0xf8/0x990 [ 307.252157][ T8690] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 307.252194][ T8690] skb_copy_datagram_iter+0xc5/0x230 [ 307.252226][ T8690] netlink_recvmsg+0x2c9/0xe00 [ 307.252258][ T8690] ? __pfx_netlink_recvmsg+0x10/0x10 [ 307.252284][ T8690] ? __pfx_aa_sk_perm+0x10/0x10 [ 307.252310][ T8690] ? aa_sock_msg_perm+0x94/0x160 [ 307.252336][ T8690] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 307.252353][ T8690] ? security_socket_recvmsg+0x7e/0x2e0 [ 307.252382][ T8690] ? __pfx_netlink_recvmsg+0x10/0x10 [ 307.252405][ T8690] sock_recvmsg+0x22c/0x270 [ 307.252429][ T8690] ____sys_recvmsg+0x1c9/0x460 [ 307.252497][ T8690] ? __pfx_____sys_recvmsg+0x10/0x10 [ 307.252539][ T8690] ? import_iovec+0x74/0xa0 [ 307.252563][ T8690] ___sys_recvmsg+0x1b5/0x510 [ 307.252596][ T8690] ? __pfx____sys_recvmsg+0x10/0x10 [ 307.252650][ T8690] ? __fget_files+0x3a0/0x420 [ 307.252686][ T8690] do_recvmmsg+0x307/0x770 [ 307.252727][ T8690] ? __pfx_do_recvmmsg+0x10/0x10 [ 307.252768][ T8690] ? _copy_from_user+0x94/0xb0 [ 307.252807][ T8690] __x64_sys_recvmmsg+0x1af/0x240 [ 307.252831][ T8690] ? rcu_is_watching+0x15/0xb0 [ 307.252858][ T8690] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 307.252889][ T8690] ? do_syscall_64+0xba/0x220 [ 307.252916][ T8690] do_syscall_64+0xf6/0x220 [ 307.252941][ T8690] ? clear_bhb_loop+0x60/0xb0 [ 307.252965][ T8690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.252984][ T8690] RIP: 0033:0x7fbfd2b8e969 [ 307.253002][ T8690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.253019][ T8690] RSP: 002b:00007fbfd39d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 307.253042][ T8690] RAX: ffffffffffffffda RBX: 00007fbfd2db5fa0 RCX: 00007fbfd2b8e969 [ 307.253057][ T8690] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 307.253071][ T8690] RBP: 00007fbfd39d5090 R08: 0000200000003700 R09: 0000000000000000 [ 307.253084][ T8690] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 307.253097][ T8690] R13: 0000000000000000 R14: 00007fbfd2db5fa0 R15: 00007fbfd2edfa28 [ 307.253129][ T8690] [ 307.543362][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.556344][ T8686] netlink: 'syz.3.835': attribute type 15 has an invalid length. [ 307.587180][ T8694] netlink: 'syz.0.838': attribute type 21 has an invalid length. [ 307.595460][ T8694] netlink: 'syz.0.838': attribute type 1 has an invalid length. [ 307.603694][ T8694] netlink: 144 bytes leftover after parsing attributes in process `syz.0.838'. [ 307.925788][ T30] audit: type=1326 audit(1748354298.504:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.0.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcaf8e969 code=0x7ffc0000 [ 307.948348][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.012885][ T30] audit: type=1326 audit(1748354298.504:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.0.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcaf8e969 code=0x7ffc0000 [ 308.053937][ T8703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.842'. [ 308.064104][ T30] audit: type=1326 audit(1748354298.554:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.0.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5dcaf8e969 code=0x7ffc0000 [ 308.092965][ T30] audit: type=1326 audit(1748354298.554:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.0.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcaf8e969 code=0x7ffc0000 [ 308.115625][ T5898] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 308.192789][ T30] audit: type=1326 audit(1748354298.554:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.0.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcaf8e969 code=0x7ffc0000 [ 308.359537][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 308.377940][ T5898] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 308.392754][ T5898] usb 5-1: config 0 has no interface number 0 [ 308.406686][ T30] audit: type=1326 audit(1748354298.554:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.0.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f5dcaf8e969 code=0x7ffc0000 [ 308.427825][ T5898] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 308.442174][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.502190][ T5898] usb 5-1: Product: syz [ 308.503470][ T30] audit: type=1326 audit(1748354298.554:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.0.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcaf8e969 code=0x7ffc0000 [ 308.512919][ T5898] usb 5-1: Manufacturer: syz [ 308.529859][ T30] audit: type=1326 audit(1748354298.554:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.0.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcaf8e969 code=0x7ffc0000 [ 308.571984][ T43] usb 2-1: USB disconnect, device number 53 [ 308.625335][ T5898] usb 5-1: SerialNumber: syz [ 308.652382][ T5898] usb 5-1: config 0 descriptor?? [ 308.772755][ T8712] loop2: detected capacity change from 0 to 7 [ 308.781106][ T5898] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 308.922579][ T8712] Dev loop2: unable to read RDB block 7 [ 308.938637][ T8712] loop2: unable to read partition table [ 308.945112][ T8712] loop2: partition table beyond EOD, truncated [ 308.951033][ T5898] snd-usb-audio 5-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 308.969282][ T8712] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 309.000977][ T5898] usb 5-1: USB disconnect, device number 56 [ 309.040038][ T43] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 309.104248][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.199391][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 309.214619][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 309.244793][ T43] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 309.261798][ T43] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 309.277799][ T43] usb 2-1: Product: syz [ 309.286194][ T43] usb 2-1: Manufacturer: syz [ 309.296190][ T43] usb 2-1: SerialNumber: syz [ 309.304921][ T43] usb 2-1: config 0 descriptor?? [ 309.318871][ T8716] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 309.341448][ T43] hub 2-1:0.0: bad descriptor, ignoring hub [ 309.348023][ T43] hub 2-1:0.0: probe with driver hub failed with error -5 [ 309.649758][ T43] usb 2-1: USB disconnect, device number 54 [ 310.019437][ T5898] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 310.229631][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 310.249890][ T5898] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 310.271945][ T5898] usb 2-1: string descriptor 0 read error: -22 [ 310.278344][ T5898] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 310.328781][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 310.356450][ T5898] usb 2-1: config 0 descriptor?? [ 310.383642][ T8716] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 310.407994][ T5898] hub 2-1:0.0: bad descriptor, ignoring hub [ 310.425308][ T5898] hub 2-1:0.0: probe with driver hub failed with error -5 [ 310.619469][ T3079] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 310.859519][ T3079] usb 5-1: Using ep0 maxpacket: 8 [ 310.877984][ T3079] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 310.897499][ T3079] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 310.930953][ T3079] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 310.957025][ T3079] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.993446][ T3079] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 311.017044][ T3079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.294992][ T3079] usb 5-1: GET_CAPABILITIES returned 0 [ 311.323075][ T3079] usbtmc 5-1:16.0: can't read capabilities [ 311.515657][ T8737] netlink: 56 bytes leftover after parsing attributes in process `syz.2.854'. [ 312.297397][ T3079] usb 5-1: USB disconnect, device number 57 [ 312.316717][ T30] audit: type=1326 audit(1748354302.894:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.0.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcaf8e969 code=0x7ffc0000 [ 312.317417][ T8749] FAULT_INJECTION: forcing a failure. [ 312.317417][ T8749] name failslab, interval 1, probability 0, space 0, times 0 [ 312.342192][ T30] audit: type=1326 audit(1748354302.894:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.0.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5dcaf8d2d0 code=0x7ffc0000 [ 312.529495][ T8749] CPU: 1 UID: 0 PID: 8749 Comm: syz.0.857 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 312.529524][ T8749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.529535][ T8749] Call Trace: [ 312.529543][ T8749] [ 312.529552][ T8749] dump_stack_lvl+0x189/0x250 [ 312.529591][ T8749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.529620][ T8749] ? __pfx__printk+0x10/0x10 [ 312.529643][ T8749] ? __pfx_snprintf+0x10/0x10 [ 312.529688][ T8749] should_fail_ex+0x414/0x560 [ 312.529718][ T8749] should_failslab+0xa8/0x100 [ 312.529744][ T8749] __kmalloc_noprof+0xcb/0x4f0 [ 312.529765][ T8749] ? aa_label_asxprint+0x70/0x130 [ 312.529789][ T8749] aa_label_asxprint+0x70/0x130 [ 312.529812][ T8749] apparmor_lsmprop_to_secctx+0x9d/0x170 [ 312.529849][ T8749] security_lsmprop_to_secctx+0x96/0x2c0 [ 312.529880][ T8749] audit_log_task_context+0xff/0x240 [ 312.529912][ T8749] ? __pfx_audit_log_task_context+0x10/0x10 [ 312.529941][ T8749] ? __pfx_audit_log_format+0x10/0x10 [ 312.529969][ T8749] ? audit_log_start+0x6bf/0x870 [ 312.530006][ T8749] audit_log_task+0x190/0x3c0 [ 312.530035][ T8749] ? __pfx_audit_log_task+0x10/0x10 [ 312.530061][ T8749] ? kasan_quarantine_put+0xdd/0x220 [ 312.530080][ T8749] ? __pfx_migrate_enable+0x10/0x10 [ 312.530114][ T8749] audit_seccomp+0x86/0x190 [ 312.530144][ T8749] __seccomp_filter+0x9aa/0x1a40 [ 312.530184][ T8749] ? __pfx___seccomp_filter+0x10/0x10 [ 312.530206][ T8749] ? do_raw_spin_lock+0x121/0x290 [ 312.530246][ T8749] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 312.530267][ T8749] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.530291][ T8749] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 312.530311][ T8749] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 312.530341][ T8749] ? __se_sys_ioprio_get+0x25/0xa30 [ 312.530368][ T8749] ? __secure_computing+0xe2/0x2a0 [ 312.530397][ T8749] syscall_trace_enter+0xaa/0x160 [ 312.530421][ T8749] do_syscall_64+0xcf/0x220 [ 312.530446][ T8749] ? clear_bhb_loop+0x60/0xb0 [ 312.530470][ T8749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.530488][ T8749] RIP: 0033:0x7f5dcaf8d37c [ 312.530507][ T8749] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 312.530523][ T8749] RSP: 002b:00007f5dcbd35030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.530546][ T8749] RAX: ffffffffffffffda RBX: 00007f5dcb1b5fa0 RCX: 00007f5dcaf8d37c [ 312.530562][ T8749] RDX: 000000000000000f RSI: 00007f5dcbd350a0 RDI: 0000000000000003 [ 312.530574][ T8749] RBP: 00007f5dcbd35090 R08: 0000000000000000 R09: 0000000000000000 [ 312.530586][ T8749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.530598][ T8749] R13: 0000000000000000 R14: 00007f5dcb1b5fa0 R15: 00007f5dcb2dfa28 [ 312.530630][ T8749] [ 312.814542][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.171743][ T8752] vxcan1: entered allmulticast mode [ 313.187171][ T8752] vxcan1: left allmulticast mode [ 314.879761][ T43] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 315.081319][ T43] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 315.129421][ T43] usb 1-1: config 0 has no interface number 0 [ 315.146100][ T43] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=dd.b8 [ 315.167772][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.195011][ T43] usb 1-1: config 0 descriptor?? [ 315.215585][ T43] lan78xx 1-1:0.168 (unnamed net_device) (uninitialized): USB bus speed not supported [ 315.246005][ T43] lan78xx 1-1:0.168: probe with driver lan78xx failed with error -5 [ 315.437383][ T43] usb 1-1: USB disconnect, device number 80 [ 316.028727][ T8774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.044304][ T8774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.822185][ T8800] input: syz0 as /devices/virtual/input/input18 [ 317.155027][ T8807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.440064][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.446588][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.864010][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 317.864028][ T30] audit: type=1326 audit(1748354308.444:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.4.876" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfd2b8e969 code=0x0 [ 318.456016][ T8812] syz.3.875: vmalloc error: size 16588800, failed to allocated page array size 32400, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 318.506435][ T8831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.523741][ T8812] CPU: 1 UID: 0 PID: 8812 Comm: syz.3.875 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 318.523762][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.523770][ T8812] Call Trace: [ 318.523775][ T8812] [ 318.523780][ T8812] dump_stack_lvl+0x189/0x250 [ 318.523804][ T8812] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 318.523819][ T8812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.523836][ T8812] ? __pfx__printk+0x10/0x10 [ 318.523848][ T8812] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 318.523865][ T8812] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 318.523887][ T8812] warn_alloc+0x214/0x310 [ 318.523907][ T8812] ? __pfx_warn_alloc+0x10/0x10 [ 318.523929][ T8812] ? __get_vm_area_node+0x28f/0x300 [ 318.523944][ T8812] ? vb2_vmalloc_alloc+0xef/0x340 [ 318.523963][ T8812] __vmalloc_node_range_noprof+0x67e/0x1340 [ 318.523997][ T8812] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 318.524015][ T8812] ? __kasan_kmalloc+0x93/0xb0 [ 318.524030][ T8812] vmalloc_user_noprof+0xad/0xf0 [ 318.524045][ T8812] ? vb2_vmalloc_alloc+0xef/0x340 [ 318.524060][ T8812] vb2_vmalloc_alloc+0xef/0x340 [ 318.524075][ T8812] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 318.524091][ T8812] __vb2_queue_alloc+0x9c2/0x15a0 [ 318.524121][ T8812] vb2_core_reqbufs+0xc31/0x1420 [ 318.524146][ T8812] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 318.524166][ T8812] ? __vb2_init_fileio+0x1e8/0xff0 [ 318.524183][ T8812] __vb2_init_fileio+0x318/0xff0 [ 318.524197][ T8812] ? __lock_acquire+0xab9/0xd20 [ 318.524212][ T8812] ? __pfx___mutex_lock+0x10/0x10 [ 318.524234][ T8812] vb2_core_poll+0x4c1/0x840 [ 318.524252][ T8812] vb2_fop_poll+0x168/0x380 [ 318.524267][ T8812] ? __fget_files+0x2a/0x420 [ 318.524281][ T8812] ? __pfx_vb2_fop_poll+0x10/0x10 [ 318.524296][ T8812] v4l2_poll+0x144/0x2c0 [ 318.524311][ T8812] ? __pfx_v4l2_poll+0x10/0x10 [ 318.524324][ T8812] do_sys_poll+0x8c6/0x1070 [ 318.524348][ T8812] ? __pfx_do_sys_poll+0x10/0x10 [ 318.524364][ T8812] ? futex_unqueue+0x22/0x240 [ 318.524386][ T8812] ? __pfx_pollwake+0x10/0x10 [ 318.524438][ T8812] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 318.524479][ T8812] ? set_user_sigmask+0x15b/0x1b0 [ 318.524495][ T8812] ? __pfx_set_user_sigmask+0x10/0x10 [ 318.524517][ T8812] __se_sys_ppoll+0x1ff/0x260 [ 318.524532][ T8812] ? __pfx___se_sys_ppoll+0x10/0x10 [ 318.524549][ T8812] ? do_syscall_64+0xba/0x220 [ 318.524563][ T8812] ? __x64_sys_ppoll+0x20/0xc0 [ 318.524578][ T8812] do_syscall_64+0xf6/0x220 [ 318.524592][ T8812] ? clear_bhb_loop+0x60/0xb0 [ 318.524607][ T8812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.524619][ T8812] RIP: 0033:0x7feea018e969 [ 318.524632][ T8812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.524642][ T8812] RSP: 002b:00007feea0f43038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 318.524660][ T8812] RAX: ffffffffffffffda RBX: 00007feea03b5fa0 RCX: 00007feea018e969 [ 318.524670][ T8812] RDX: 0000200000000140 RSI: 000000000000000a RDI: 0000200000000200 [ 318.524678][ T8812] RBP: 00007feea0210ab1 R08: 0000000000000008 R09: 0000000000000000 [ 318.524685][ T8812] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 318.524692][ T8812] R13: 0000000000000000 R14: 00007feea03b5fa0 R15: 00007feea04dfa28 [ 318.524711][ T8812] [ 318.524716][ T8812] Mem-Info: [ 318.630112][ T8831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.886319][ T8812] active_anon:9672 inactive_anon:0 isolated_anon:0 [ 318.886319][ T8812] active_file:13271 inactive_file:39954 isolated_file:0 [ 318.886319][ T8812] unevictable:768 dirty:130 writeback:0 [ 318.886319][ T8812] slab_reclaimable:10154 slab_unreclaimable:102245 [ 318.886319][ T8812] mapped:31645 shmem:4717 pagetables:1203 [ 318.886319][ T8812] sec_pagetables:3 bounce:0 [ 318.886319][ T8812] kernel_misc_reclaimable:0 [ 318.886319][ T8812] free:1306443 free_pcp:500 free_cma:0 [ 318.978230][ T8812] Node 0 active_anon:38788kB inactive_anon:0kB active_file:53020kB inactive_file:159612kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126516kB dirty:520kB writeback:0kB shmem:17332kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11440kB pagetables:4812kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB [ 319.053092][ T8812] Node 1 active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 319.107011][ T8835] netlink: 'syz.0.882': attribute type 4 has an invalid length. [ 319.109639][ T8812] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 319.148705][ T8812] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 319.155126][ T8812] Node 0 DMA32 free:1293332kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB active_anon:38856kB inactive_anon:0kB active_file:53020kB inactive_file:157800kB unevictable:1536kB writepending:500kB present:3129332kB managed:2561648kB mlocked:0kB bounce:0kB free_pcp:2352kB local_pcp:1304kB free_cma:0kB [ 319.185815][ C1] vkms_vblank_simulate: vblank timer overrun [ 319.236145][ T8812] lowmem_reserve[]: 0 0 1 1 1 [ 319.242081][ T8812] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 319.269525][ C1] vkms_vblank_simulate: vblank timer overrun [ 319.276560][ T8837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.883'. [ 319.282681][ T8812] lowmem_reserve[]: 0 0 0 0 0 [ 319.295633][ T8812] Node 1 Normal free:3917260kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 319.330307][ T8812] lowmem_reserve[]: 0 0 0 0 0 [ 319.335204][ T8812] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 319.354516][ T8812] Node 0 DMA32: 47*4kB (UME) 63*8kB (UME) 60*16kB (UME) 204*32kB (UME) 286*64kB (UME) 61*128kB (UME) 13*256kB (UM) 7*512kB (UM) 6*1024kB (UME) 11*2048kB (UME) 299*4096kB (UM) = 1294580kB [ 319.377391][ T8812] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 319.397639][ T8812] Node 1 Normal: 193*4kB (UME) 51*8kB (UME) 39*16kB (UE) 212*32kB (UME) 107*64kB (UME) 35*128kB (UME) 14*256kB (UME) 9*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 948*4096kB (M) = 3917260kB [ 319.421051][ T8812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 319.448207][ T8812] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 319.458012][ T8812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 319.508510][ T8812] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 319.518653][ T8812] 57939 total pagecache pages [ 319.532814][ T8812] 1 pages in swap cache [ 319.538935][ T8812] Free swap = 124992kB [ 319.545014][ T8812] Total swap = 124996kB [ 319.549985][ T8812] 2097051 pages RAM [ 319.554064][ T8812] 0 pages HighMem/MovableOnly [ 319.558771][ T8812] 424533 pages reserved [ 319.569425][ T8812] 0 pages cma reserved [ 319.635171][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 319.700890][ T8842] netlink: 96 bytes leftover after parsing attributes in process `syz.4.885'. [ 319.734013][ T8842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.885'. [ 319.769385][ T8842] vlan1: entered allmulticast mode [ 319.783994][ T8842] veth0_vlan: entered allmulticast mode [ 320.750186][ T30] audit: type=1326 audit(1748354311.324:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea018e969 code=0x7ffc0000 [ 320.804724][ T30] audit: type=1326 audit(1748354311.334:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea018e969 code=0x7ffc0000 [ 320.855872][ T30] audit: type=1326 audit(1748354311.354:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7feea018e969 code=0x7ffc0000 [ 320.878141][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.027086][ T30] audit: type=1326 audit(1748354311.354:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feea018e9a3 code=0x7ffc0000 [ 321.049111][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.149133][ T30] audit: type=1326 audit(1748354311.354:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feea018e9a3 code=0x7ffc0000 [ 321.309471][ T30] audit: type=1326 audit(1748354311.354:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea018e969 code=0x7ffc0000 [ 321.331768][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.439521][ T30] audit: type=1326 audit(1748354311.364:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea018e969 code=0x7ffc0000 [ 321.550943][ T8877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.560664][ T8877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.396808][ T977] usb 2-1: USB disconnect, device number 55 [ 322.518057][ T8894] futex_wake_op: syz.4.902 tries to shift op by 32; fix this program [ 322.671468][ T5830] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 322.887450][ T5830] usb 1-1: config 0 has an invalid interface number: 95 but max is 0 [ 322.899782][ T5830] usb 1-1: config 0 has no interface number 0 [ 322.917059][ T5830] usb 1-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 322.927198][ T977] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 322.942191][ T5830] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 322.952069][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.970471][ T5830] usb 1-1: Product: syz [ 322.975283][ T5830] usb 1-1: Manufacturer: syz [ 322.985267][ T5830] usb 1-1: SerialNumber: syz [ 323.009443][ T5830] usb 1-1: config 0 descriptor?? [ 323.016085][ T8891] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 323.180552][ T8899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.903'. [ 323.247436][ T5830] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 323.254736][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 323.266740][ T5830] usb 1-1: MIDIStreaming interface descriptor not found [ 323.316892][ T8899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.457434][ T8899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.482453][ T977] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 323.520646][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.568166][ T5830] usb 1-1: USB disconnect, device number 81 [ 323.574472][ T977] usb 5-1: Product: syz [ 323.578700][ T977] usb 5-1: Manufacturer: syz [ 323.609599][ T977] usb 5-1: SerialNumber: syz [ 323.666114][ T6261] udevd[6261]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.691149][ T977] usb 5-1: config 0 descriptor?? [ 324.022593][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.904'. [ 324.698846][ T8921] netlink: 1 bytes leftover after parsing attributes in process `syz.2.909'. [ 324.808634][ T8923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.909'. [ 324.819621][ T5904] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 324.972369][ T8921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.909'. [ 325.004866][ T5904] usb 2-1: config 8 has an invalid interface number: 95 but max is 0 [ 325.014789][ T5904] usb 2-1: config 8 has no interface number 0 [ 325.043698][ T5904] usb 2-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice=29.78 [ 325.068651][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.093691][ T5904] usb 2-1: Product: syz [ 325.111893][ T5904] usb 2-1: Manufacturer: syz [ 325.126988][ T5904] usb 2-1: SerialNumber: syz [ 325.363888][ T5904] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.95/input/input19 [ 325.387347][ T5182] bcm5974 2-1:8.95: could not read from device [ 325.404072][ T5182] bcm5974 2-1:8.95: could not read from device [ 325.420034][ T5904] usb 2-1: USB disconnect, device number 56 [ 325.443267][ T5182] bcm5974 2-1:8.95: could not read from device [ 325.456514][ T5182] bcm5974 2-1:8.95: could not read from device [ 325.814907][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.914'. [ 325.834483][ T977] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 325.849373][ T977] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110 [ 326.115631][ T977] usb 5-1: USB disconnect, device number 58 [ 327.417469][ T8946] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.918'. [ 327.452080][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.918'. [ 327.633000][ T8963] netlink: 136 bytes leftover after parsing attributes in process `syz.1.925'. [ 327.681968][ T8963] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 327.770128][ T8967] futex_wake_op: syz.2.926 tries to shift op by 32; fix this program [ 327.919977][ T8976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.929075][ T8976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.159059][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.929'. [ 328.464078][ T977] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 328.649434][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 328.674466][ T977] usb 5-1: unable to get BOS descriptor or descriptor too short [ 328.689126][ T977] usb 5-1: config 9 has an invalid interface number: 5 but max is 0 [ 328.732221][ T977] usb 5-1: config 9 has no interface number 0 [ 328.754000][ T977] usb 5-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x1, skipping [ 328.766123][ T977] usb 5-1: config 9 interface 5 has no altsetting 0 [ 328.785409][ T977] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 328.799806][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.812167][ T977] usb 5-1: Product: syz [ 328.817889][ T977] usb 5-1: Manufacturer: syz [ 328.870765][ T977] usb 5-1: SerialNumber: syz [ 329.146797][ T977] usb 5-1: USB disconnect, device number 59 [ 329.962792][ T9007] tun0: tun_chr_ioctl cmd 1074025675 [ 329.968423][ T9007] tun0: persist disabled [ 329.982483][ T9007] tun0: tun_chr_ioctl cmd 1074025672 [ 329.988250][ T9007] tun0: ignored: set checksum disabled [ 330.049459][ T5904] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 330.139807][ T977] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 330.202274][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 330.214111][ T5904] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 330.227062][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.236474][ T5904] usb 1-1: Product: syz [ 330.243573][ T5904] usb 1-1: Manufacturer: syz [ 330.248540][ T5904] usb 1-1: SerialNumber: syz [ 330.315931][ T977] usb 5-1: device descriptor read/64, error -71 [ 330.322615][ T5904] usb 1-1: config 0 descriptor?? [ 330.542921][ T9013] bridge_slave_0: left allmulticast mode [ 330.556180][ T9013] bridge_slave_0: left promiscuous mode [ 330.563892][ T9013] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.579473][ T977] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 330.587633][ T9013] bridge_slave_1: left allmulticast mode [ 330.593751][ T9013] bridge_slave_1: left promiscuous mode [ 330.600565][ T9013] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.615612][ T9013] bond0: (slave bond_slave_0): Releasing backup interface [ 330.625940][ T9013] bond0: (slave bond_slave_1): Releasing backup interface [ 330.642342][ T9013] team0: Port device team_slave_0 removed [ 330.655756][ T9013] team0: Port device team_slave_1 removed [ 330.663583][ T9013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.674017][ T9013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.686602][ T9013] batman_adv: batadv0: Removing interface: macvtap1 [ 330.694482][ T9013] batman_adv: batadv0: Interface deactivated: macvtap2 [ 330.702402][ T9013] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 330.709801][ T9013] macvtap2: left allmulticast mode [ 330.716117][ T9013] batman_adv: batadv0: Removing interface: macvtap2 [ 330.739880][ T977] usb 5-1: device descriptor read/64, error -71 [ 330.764322][ T5904] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 330.781563][ T5904] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 330.795700][ T5904] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 330.818251][ T5904] usb 1-1: media controller created [ 330.861898][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 330.871332][ T977] usb usb5-port1: attempt power cycle [ 331.003394][ T9001] team_slave_0: entered promiscuous mode [ 331.009796][ T9001] team_slave_1: entered promiscuous mode [ 331.016265][ T9001] macsec1: entered promiscuous mode [ 331.027099][ T9001] team0: entered promiscuous mode [ 331.058061][ T9001] team0: left promiscuous mode [ 331.066700][ T9001] team_slave_0: left promiscuous mode [ 331.072318][ T9001] team_slave_1: left promiscuous mode [ 331.198947][ T5904] zl10353_read_register: readreg error (reg=127, ret==0) [ 331.211256][ T5904] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 331.220294][ T977] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 331.229248][ T5904] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 331.248380][ T5904] usb 1-1: USB disconnect, device number 82 [ 331.258972][ T977] usb 5-1: device descriptor read/8, error -71 [ 331.347072][ T5904] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 331.477805][ T9025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.945'. [ 331.559428][ T977] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 331.581279][ T977] usb 5-1: device descriptor read/8, error -71 [ 331.699887][ T977] usb usb5-port1: unable to enumerate USB device [ 332.557250][ T9040] loop8: detected capacity change from 0 to 7 [ 332.570387][ T9040] Dev loop8: unable to read RDB block 7 [ 332.579435][ T9040] loop8: unable to read partition table [ 332.589704][ T9040] loop8: partition table beyond EOD, truncated [ 332.653282][ T9040] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 333.341672][ T9057] futex_wake_op: syz.0.956 tries to shift op by 32; fix this program [ 333.497569][ T30] audit: type=1326 audit(1748354324.064:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.957" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc7af8e969 code=0x7ffe0000 [ 333.609710][ T43] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 333.781622][ T43] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 333.829483][ T5878] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 333.852545][ T43] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 333.909194][ T43] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 333.941909][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.973492][ T9059] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 334.025248][ T43] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 334.059621][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 334.117143][ T5878] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 334.141107][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.184281][ T5878] usb 1-1: Product: syz [ 334.239179][ T5878] usb 1-1: Manufacturer: syz [ 334.302795][ T5878] usb 1-1: SerialNumber: syz [ 334.449832][ T5878] usb 1-1: config 0 descriptor?? [ 334.642554][ T30] audit: type=1326 audit(1748354325.224:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.3.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea018e969 code=0x7ffc0000 [ 334.734676][ T5896] usb 5-1: USB disconnect, device number 64 [ 334.789612][ T30] audit: type=1326 audit(1748354325.294:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.3.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feea018e969 code=0x7ffc0000 [ 334.997076][ T30] audit: type=1326 audit(1748354325.294:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.3.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea018e969 code=0x7ffc0000 [ 335.134378][ T30] audit: type=1326 audit(1748354325.294:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.3.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feea018e969 code=0x7ffc0000 [ 335.156685][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.274476][ T30] audit: type=1326 audit(1748354325.334:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.3.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea018e969 code=0x7ffc0000 [ 335.287244][ T9078] batadv_slave_0: entered promiscuous mode [ 335.347173][ T30] audit: type=1326 audit(1748354325.334:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.3.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea018e969 code=0x7ffc0000 [ 335.488203][ T30] audit: type=1326 audit(1748354325.334:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.3.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7feea018e969 code=0x7ffc0000 [ 335.531638][ T30] audit: type=1326 audit(1748354325.334:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.3.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea018e969 code=0x7ffc0000 [ 335.632036][ T30] audit: type=1326 audit(1748354325.334:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.3.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea018e969 code=0x7ffc0000 [ 336.569514][ T5878] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate [ 336.614373][ T5878] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110 [ 336.864423][ T5896] usb 1-1: USB disconnect, device number 83 [ 337.341223][ T9107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.972'. [ 337.999498][ T9124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.022989][ T9124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.139457][ T5878] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 338.279473][ T5896] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 338.298240][ T5878] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 338.310489][ T5878] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 338.321885][ T5878] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 338.350528][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.383826][ T9119] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 338.412110][ T5878] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 338.442341][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 338.450294][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.464764][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.494328][ T5896] usb 1-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 338.521082][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.610198][ T5896] usb 1-1: config 0 descriptor?? [ 338.659501][ T5898] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 338.829559][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 339.016532][ T5898] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 339.121900][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.147155][ T5896] viewsonic 0003:0543:E621.0009: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.0-1/input0 [ 339.168233][ T5898] usb 2-1: Product: syz [ 339.193285][ T5898] usb 2-1: Manufacturer: syz [ 339.215634][ T5898] usb 2-1: SerialNumber: syz [ 339.247828][ T5898] usb 2-1: config 0 descriptor?? [ 339.280130][ T5878] usb 1-1: USB disconnect, device number 84 [ 339.388862][ T43] usb 5-1: USB disconnect, device number 65 [ 339.609512][ T5898] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 339.653905][ T5898] eb 9a 47 80 9b f8 7a f0 [ 339.671921][ T5898] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 339.683640][ T9129] fido_id[9129]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 340.010518][ T5898] usb 2-1: USB disconnect, device number 58 [ 340.834657][ T9105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.884485][ T9139] futex_wake_op: syz.4.980 tries to shift op by 32; fix this program [ 341.353929][ T5878] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 341.481348][ T9155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.984'. [ 341.549471][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 341.698454][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 341.698474][ T30] audit: type=1326 audit(1748354332.234:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea018e969 code=0x7ffc0000 [ 341.776131][ T30] audit: type=1326 audit(1748354332.234:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feea012ab39 code=0x7ffc0000 [ 341.903604][ T30] audit: type=1326 audit(1748354332.234:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7feea018e969 code=0x7ffc0000 [ 342.021726][ T5878] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 342.036402][ T30] audit: type=1326 audit(1748354332.244:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feea012ab39 code=0x7ffc0000 [ 342.064362][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.137488][ T5878] usb 5-1: Product: syz [ 342.138051][ T30] audit: type=1326 audit(1748354332.244:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea018e969 code=0x7ffc0000 [ 342.169599][ T30] audit: type=1326 audit(1748354332.244:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea018e969 code=0x7ffc0000 [ 342.196478][ T30] audit: type=1326 audit(1748354332.244:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feea012ab39 code=0x7ffc0000 [ 342.219462][ T5878] usb 5-1: Manufacturer: syz [ 342.265314][ T30] audit: type=1326 audit(1748354332.244:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feea012ab39 code=0x7ffc0000 [ 342.292060][ T5878] usb 5-1: SerialNumber: syz [ 342.308464][ T30] audit: type=1326 audit(1748354332.244:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feea012ab39 code=0x7ffc0000 [ 342.419970][ T30] audit: type=1326 audit(1748354332.244:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feea012ab39 code=0x7ffc0000 [ 342.513867][ T5878] usb 5-1: config 0 descriptor?? [ 343.295177][ T9177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.445116][ T9177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.041057][ T9191] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003 [ 344.190210][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 344.305522][ T5878] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 344.329380][ T5896] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 344.349394][ T5878] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 344.406769][ T5878] usb 5-1: USB disconnect, device number 66 [ 344.459493][ T9197] netlink: 'syz.4.997': attribute type 8 has an invalid length. [ 344.467372][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.997'. [ 344.493730][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.509120][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 344.530322][ T5896] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 344.549523][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 344.568718][ T5896] usb 2-1: SerialNumber: syz [ 344.813302][ T9191] veth0: entered promiscuous mode [ 344.826004][ T9189] veth0: left promiscuous mode [ 344.872981][ T5896] usb 2-1: 0:2 : does not exist [ 344.878966][ T9210] ip6t_srh: unknown srh invflags 7D00 [ 345.015205][ T5896] usb 2-1: USB disconnect, device number 59 [ 345.586120][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.033653][ T9222] loop2: detected capacity change from 0 to 7 [ 346.063059][ T9222] Dev loop2: unable to read RDB block 7 [ 346.083542][ T9222] loop2: unable to read partition table [ 346.140345][ T9222] loop2: partition table beyond EOD, truncated [ 346.156028][ T9222] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 346.230329][ T31] INFO: task kworker/1:4:5879 blocked for more than 143 seconds. [ 346.243687][ T31] Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 [ 346.318579][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 346.353517][ T31] task:kworker/1:4 state:D stack:21200 pid:5879 tgid:5879 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 346.370968][ T31] Workqueue: usb_hub_wq hub_event [ 346.377384][ T31] Call Trace: [ 346.393990][ T31] [ 346.401285][ T31] __schedule+0x16f5/0x4d00 [ 346.411485][ T31] ? schedule+0x165/0x360 [ 346.420595][ T31] ? __pfx___schedule+0x10/0x10 [ 346.425671][ T31] ? schedule+0x91/0x360 [ 346.431309][ T31] schedule+0x165/0x360 [ 346.435602][ T31] schedule_timeout+0x9a/0x270 [ 346.447293][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 346.454554][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 346.472163][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.477577][ T31] ? wait_for_completion+0x267/0x5d0 [ 346.485438][ T31] wait_for_completion+0x2bf/0x5d0 [ 346.493037][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 346.502348][ T31] i2c_del_adapter+0x581/0x6e0 [ 346.507468][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 346.513711][ T31] ? rcu_is_watching+0x15/0xb0 [ 346.518855][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 346.526564][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 346.532651][ T31] dvb_usb_device_exit+0x1be/0x350 [ 346.537953][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.546320][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 346.557126][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 346.578261][ T31] ? usb_disable_interface+0x31d/0x350 [ 346.598334][ T31] usb_unbind_interface+0x26e/0x8f0 [ 346.622753][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 346.628891][ T31] device_release_driver_internal+0x4d9/0x7c0 [ 346.635725][ T31] bus_remove_device+0x34d/0x410 [ 346.641884][ T31] device_del+0x511/0x8e0 [ 346.646603][ T31] ? __pm_runtime_barrier+0x212/0x460 [ 346.652213][ T31] ? __pfx_device_del+0x10/0x10 [ 346.657261][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 346.662543][ T31] usb_disable_device+0x3e9/0x8a0 [ 346.668402][ T31] usb_disconnect+0x330/0x910 [ 346.674457][ T31] hub_event+0x1cdb/0x4a00 [ 346.679034][ T31] ? do_raw_spin_lock+0x121/0x290 [ 346.695585][ T31] ? register_lock_class+0x51/0x320 [ 346.703388][ T31] ? __pfx_hub_event+0x10/0x10 [ 346.714210][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 346.732955][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 346.747340][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 346.763818][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 346.778971][ T31] process_scheduled_works+0xade/0x17a0 [ 346.784935][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 346.791262][ T31] worker_thread+0x8a0/0xda0 [ 346.796163][ T31] ? __kthread_parkme+0x7b/0x200 [ 346.801359][ T31] kthread+0x70e/0x8a0 [ 346.805568][ T31] ? __pfx_worker_thread+0x10/0x10 [ 346.811557][ T31] ? __pfx_kthread+0x10/0x10 [ 346.816502][ T31] ? __pfx_kthread+0x10/0x10 [ 346.822428][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 346.827865][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.833289][ T31] ? __pfx_kthread+0x10/0x10 [ 346.838188][ T31] ret_from_fork+0x4e/0x80 [ 346.842834][ T31] ? __pfx_kthread+0x10/0x10 [ 346.847628][ T31] ret_from_fork_asm+0x1a/0x30 [ 346.852707][ T31] [ 346.855913][ T31] [ 346.855913][ T31] Showing all locks held in the system: [ 346.885194][ T31] 1 lock held by khungtaskd/31: [ 346.890445][ T31] #0: ffffffff8e13c9a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 346.901741][ T31] 2 locks held by kworker/u8:3/49: [ 346.907105][ T31] #0: ffff8881472bb948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 346.931096][ T31] #1: ffffc90000b97c60 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 346.944567][ T31] 2 locks held by kworker/u8:4/61: [ 346.950356][ T31] #0: ffff8880b8639f58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 346.960717][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 346.972764][ T31] 2 locks held by getty/5585: [ 346.977573][ T31] #0: ffff88803080e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 346.987677][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 346.998178][ T31] 2 locks held by syz-executor/5843: [ 347.007093][ T31] 5 locks held by kworker/1:4/5879: [ 347.014042][ T31] #0: ffff888143e9fd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 347.031795][ T31] #1: ffffc9000491fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 347.044334][ T31] #2: ffff888144ff4198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 347.053734][ T31] #3: ffff88804bd4f198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x910 [ 347.063092][ T31] #4: ffff88804bd48160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 347.075034][ T31] 5 locks held by kworker/u8:8/9023: [ 347.080673][ T31] [ 347.083034][ T31] ============================================= [ 347.083034][ T31] [ 347.092900][ T31] NMI backtrace for cpu 1 [ 347.092916][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 347.092939][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.092950][ T31] Call Trace: [ 347.092959][ T31] [ 347.092966][ T31] dump_stack_lvl+0x189/0x250 [ 347.092998][ T31] ? __wake_up_klogd+0xd9/0x110 [ 347.093030][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.093058][ T31] ? __pfx__printk+0x10/0x10 [ 347.093091][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 347.093125][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 347.093151][ T31] ? _printk+0xcf/0x120 [ 347.093174][ T31] ? __pfx__printk+0x10/0x10 [ 347.093197][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 347.093222][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 347.093256][ T31] watchdog+0xfee/0x1030 [ 347.093281][ T31] ? watchdog+0x1de/0x1030 [ 347.093309][ T31] kthread+0x70e/0x8a0 [ 347.093332][ T31] ? __pfx_watchdog+0x10/0x10 [ 347.093351][ T31] ? __pfx_kthread+0x10/0x10 [ 347.093371][ T31] ? __pfx_kthread+0x10/0x10 [ 347.093389][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 347.093421][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.093444][ T31] ? __pfx_kthread+0x10/0x10 [ 347.093461][ T31] ret_from_fork+0x4e/0x80 [ 347.093482][ T31] ? __pfx_kthread+0x10/0x10 [ 347.093501][ T31] ret_from_fork_asm+0x1a/0x30 [ 347.093536][ T31] [ 347.093544][ T31] Sending NMI from CPU 1 to CPUs 0: [ 347.244549][ C0] NMI backtrace for cpu 0 [ 347.244569][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 347.244588][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.244597][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 347.244621][ C0] Code: 83 d6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 5f 2a 00 f3 0f 1e fa fb f4 58 d6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 347.244636][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 347.244652][ C0] RAX: 7a6ffa1719f58000 RBX: ffffffff8196fea8 RCX: 7a6ffa1719f58000 [ 347.244664][ C0] RDX: 0000000000000001 RSI: ffffffff8d95a9e9 RDI: ffffffff8be24c40 [ 347.244676][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 347.244688][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8f9fc2b0 [ 347.244699][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a48 [ 347.244710][ C0] FS: 0000000000000000(0000) GS:ffff888125c91000(0000) knlGS:0000000000000000 [ 347.244729][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.244741][ C0] CR2: 00007f9fcc780178 CR3: 000000002d0d4000 CR4: 00000000003526f0 [ 347.244758][ C0] Call Trace: [ 347.244768][ C0] [ 347.244775][ C0] default_idle+0x13/0x20 [ 347.244795][ C0] default_idle_call+0x74/0xb0 [ 347.244815][ C0] do_idle+0x1e8/0x510 [ 347.244838][ C0] ? __pfx_do_idle+0x10/0x10 [ 347.244865][ C0] cpu_startup_entry+0x44/0x60 [ 347.244884][ C0] rest_init+0x2de/0x300 [ 347.244904][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 347.244921][ C0] start_kernel+0x478/0x500 [ 347.244944][ C0] x86_64_start_reservations+0x24/0x30 [ 347.244967][ C0] x86_64_start_kernel+0x143/0x1c0 [ 347.244990][ C0] common_startup_64+0x13e/0x147 [ 347.245011][ C0] [ 347.247830][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 347.437756][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 347.449497][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.459838][ T31] Call Trace: [ 347.463147][ T31] [ 347.466095][ T31] dump_stack_lvl+0x99/0x250 [ 347.470708][ T31] ? __asan_memcpy+0x40/0x70 [ 347.475401][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.480615][ T31] ? __pfx__printk+0x10/0x10 [ 347.485286][ T31] panic+0x2db/0x790 [ 347.489309][ T31] ? __pfx_panic+0x10/0x10 [ 347.493751][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 347.499594][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 347.504989][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 347.511178][ T31] watchdog+0x102d/0x1030 [ 347.515531][ T31] ? watchdog+0x1de/0x1030 [ 347.519958][ T31] kthread+0x70e/0x8a0 [ 347.524037][ T31] ? __pfx_watchdog+0x10/0x10 [ 347.528800][ T31] ? __pfx_kthread+0x10/0x10 [ 347.533400][ T31] ? __pfx_kthread+0x10/0x10 [ 347.537982][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 347.543203][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.548579][ T31] ? __pfx_kthread+0x10/0x10 [ 347.553178][ T31] ret_from_fork+0x4e/0x80 [ 347.557772][ T31] ? __pfx_kthread+0x10/0x10 [ 347.562370][ T31] ret_from_fork_asm+0x1a/0x30 [ 347.567163][ T31] [ 347.570531][ T31] Kernel Offset: disabled [ 347.574857][ T31] Rebooting in 86400 seconds..