last executing test programs: 3m42.838413127s ago: executing program 3 (id=3979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000140)="02", 0x1}], 0x1}}], 0x33, 0x20048040) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000100)=0x3) close_range(r1, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x338, 0x150, 0x150, 0xfeffffff, 0x150, 0xa8, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xa8, 0xe000000}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1d, @rand_addr=0x64010101, @multicast1, @port=0x4e23, @gre_key=0x1}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000002000f030000000000003404000001ed0a0014040000170000801c400000000000007b0a00fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000010101010000000000000000020000001800018006000340000000000c000280050001002f0000000c0019800820010005000000"], 0x38}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd0900008400000001000000", @ANYRES32, @ANYBLOB="f4ffff4996ffffff40e2ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syncfs(r5) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x20005, r5, 0x4}, 0x38) 3m41.92166631s ago: executing program 3 (id=3982): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r6, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000000c0)=0x4) close(r6) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 3m40.126298589s ago: executing program 3 (id=3985): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x2) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000011000000040000002b00000000000007180000000000000029"], 0x30}, 0x0) 3m39.803945059s ago: executing program 3 (id=3988): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f0000000080)='./file0/file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') lseek(r6, 0xf3, 0x2) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="900000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e657665000060000280050004000100000014000700000000000000000000000800000000010800010002000000050009000100000005000c0001000000050008"], 0x90}}, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) write$evdev(r10, &(0x7f0000000100)=[{{}, 0x12, 0x4, 0x4}], 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000002680)={0x15, 0x110, 0xfa00, {r11, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e20, @local}, @ib={0x1b, 0x0, 0x8, {"00000000000000000000000000008001"}, 0x80000001, 0x2, 0x3}}}, 0x118) 3m39.483140043s ago: executing program 3 (id=3991): unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) open$dir(0x0, 0x10000, 0x102) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8, 0xa00}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r1}, &(0x7f0000000180)=0x8) 3m39.007500312s ago: executing program 3 (id=3993): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x12381) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg(r2, &(0x7f00000003c0)={&(0x7f0000001040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x1, {0xa, 0x4e23, 0x9f22, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x80, &(0x7f0000000540)}, 0x20000080) 3m38.354186797s ago: executing program 32 (id=3993): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x12381) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg(r2, &(0x7f00000003c0)={&(0x7f0000001040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x1, {0xa, 0x4e23, 0x9f22, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x80, &(0x7f0000000540)}, 0x20000080) 11.140841017s ago: executing program 1 (id=4698): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056", 0x5, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) io_cancel(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e40)={0x4c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x4c}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) memfd_secret(0x0) r4 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f0000001080)=""/4125, 0x80000000, 0x101d}, 0x0) rt_sigqueueinfo(r4, 0x21, &(0x7f00000002c0)={0xb, 0x4}) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) 8.81175518s ago: executing program 1 (id=4712): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffbfffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000240)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000140)=0xc7, 0x12) writev(r2, &(0x7f0000004900), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, 0x0, 0x0) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x38, 0x4c00}, 0x0) connect$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e27, @local}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) syz_open_procfs(0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'geneve0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000001000000400000004000000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000002c00009f1d3e0fed829de100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) 8.465520873s ago: executing program 5 (id=4714): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000c40)={0x2000000b}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r6, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000000c0)=0x4) close(r6) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 7.964545579s ago: executing program 4 (id=4715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000140)="02", 0x1}], 0x1}}], 0x33, 0x20048040) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000100)=0x3) close_range(r3, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x338, 0x150, 0x150, 0xfeffffff, 0x150, 0xa8, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xa8, 0xe000000}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1d, @rand_addr=0x64010101, @multicast1, @port=0x4e23, @gre_key=0x1}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) ioctl$TIOCMGET(r4, 0x541e, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0x0, 0x0}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000010101010000000000000000020000001800018006000340000000000c000280050001002f0000000c0019800820010005000000"], 0x38}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd0900008400000001000000", @ANYRES32, @ANYBLOB="f4ffff4996ffffff40e2ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syncfs(r7) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x20005, r7, 0x4}, 0x38) 6.642589798s ago: executing program 0 (id=4718): r0 = io_uring_setup(0x5ef3, &(0x7f00000002c0)={0x0, 0xe6c, 0x2, 0x1, 0x8000001}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449, 0x1}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000000c0)={{@host}, @host, 0x0, 0x0, 0x1, 0x4}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x0, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000000c0)={{@host}, @host, 0x0, 0x0, 0x1, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) close_range(r0, 0xffffffffffffffff, 0x0) 6.446657952s ago: executing program 0 (id=4719): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x801, 0x0, 0x10, 0x0, 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340040003c0007010000000000000000017c00000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32=r3, @ANYBLOB="2bb1f3c88a4f"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)=0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 6.397809043s ago: executing program 5 (id=4720): timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x5c00, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 6.042149013s ago: executing program 2 (id=4721): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffbfffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000240)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000140)=0xc7, 0x12) writev(r2, &(0x7f0000004900), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, 0x0, 0x0) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x38, 0x4c00}, 0x0) connect$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e27, @local}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) syz_open_procfs(0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'geneve0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000001000000400000004000000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000002c00009f1d3e0fed829de100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) 5.907638453s ago: executing program 5 (id=4722): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056", 0x5, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) io_cancel(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e40)={0x4c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x4c}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) memfd_secret(0x0) r4 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f0000001080)=""/4125, 0x80000000, 0x101d}, 0x0) rt_sigqueueinfo(r4, 0x21, &(0x7f00000002c0)={0xb, 0x4}) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) 4.847633652s ago: executing program 4 (id=4723): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, 0x0, &(0x7f0000000200)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000240)={0x0, 0xc}, 0x8) syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x400000) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000280)={@loopback, @rand_addr, 0x0}, &(0x7f00000002c0)=0xc) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r8}, 0x14) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x6}, 0x0) sync() socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 4.176931227s ago: executing program 1 (id=4724): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x7ec}, @cpuid={0x2, 0x18, {0x4, 0xc0}}, @cpuid={0x2, 0x18, {0x7ff}}, @code={0x1, 0x7e, {"b9a20a00000f3264670f01c2c74424003a010000c74424028dc20000ff1c24b9800000c00f3235004000000f30b8010000000f01c1f3410f09b9800000c00f3235001000000f30c744240020000000c7442402b5802cb9ff2c24410f215b66baf80cb820643c8fef66bafc0ced"}}, @uexit={0x0, 0x18, 0x4}, @cpuid={0x2, 0x18, {0x4, 0x7}}, @code={0x1, 0x6d, {"0f20e035000010000f22e0660fc737b805000000b9070000000f01d966b8ad000f00d06566460f3881570141c781889f0000010000002636470f01cf48b88d530000000000000f23d00f21f835100000060f23f80f784b842e460f08"}}, @code={0x1, 0x72, {"66baf80cb87ca22985ef66bafc0cb825490000efb9800000c00f3235004000000f3066b85d008ee03e0f3266ba420066b8d01166ef660fc770b348b872000000000000000f23c80f21f8350c0040000f23f8c4032d184100e82e400f060fc72463"}}, @code={0x1, 0x64, {"46a46765450f01c2f30f7eea66b8f9000f00d8c4e1a172d500660f38813648b8db356e31000000000f23c00f21f835010005000f23f80f5854b60066baf80cb8223c228aef66bafc0cb01eee66baa000b000ee"}}], 0x269}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0xffffffa8, &(0x7f0000000280)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48000) (async) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) syz_open_dev$video(&(0x7f00000002c0), 0x86e9, 0x8100) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0xc0041) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040800}, 0x44c40) (async) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x34, 0x22, 0x3e, 0x10, 0x5ac, 0x274, 0xf9c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x45, 0x0, 0x1, 0x3, 0x63, 0x2, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}]}}]}}]}}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) (async) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f00000003c0)="ff071d6ce89d96666b", 0x9}, {0x0, 0x3f}], 0x2) (async) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 3.910216844s ago: executing program 1 (id=4725): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x60042, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_cmd={0xf, 0x6, 0x4, 0x0, 0xfd, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x3, 0x3}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002540)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0d0000024600010000000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x6, 0xa9613, 0x17e5e9}) r7 = syz_io_uring_setup(0x70f1, &(0x7f0000000c00)={0x0, 0x0, 0x2}, &(0x7f0000001080), &(0x7f0000000600)) io_uring_enter(r7, 0x12ed, 0x10a5, 0x3, &(0x7f0000000040)={[0xce]}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) syz_usb_connect(0x4, 0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="12110000124c2520cc172010bfb40102030109021200010000000053d94500"], 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002140)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x1dd8a0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffb96}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008680)="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", 0x2000, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, 0x0) 3.030804182s ago: executing program 5 (id=4726): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$iommufd(0xffffffffffffff9c, 0x0, 0x64c842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="d4e7db1d52d52f023458b201056f6c20ef", 0x11, 0x8940, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff0000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}]}}]}]}]}}]}, 0x74}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000002080)=ANY=[@ANYBLOB="10050000", @ANYRES16=0x0, @ANYBLOB="020029bd7000ffdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="740102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004003c06000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="a00102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYBLOB="74000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004400040002000e010500000008007f0404000000150001ad02000000080008010100000005000109070000000b00080400100000b707009d01000000ff032606010100003c00010024000100656e61626c656400000000000000000000000000000000000000000000000000050003000600000004000400080006", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000400b003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c000028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="3c80010024000100656e61626c65640000000000000000000000000000000000000000000000894fda46c968e0a0b40000050003000600000004080006", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="b4000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004003fc1000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000700000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040003000000"], 0x510}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) 2.781712012s ago: executing program 5 (id=4727): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x21) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$printer(r2, 0x0, 0x0) (rerun: 32) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000400)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x1330, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) (async) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2f) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) madvise(&(0x7f0000b32000/0x3000)=nil, 0x3000, 0x11) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@setneightbl={0x2c, 0x43, 0x4, 0x70bd27, 0x25dfdbfd, {0x7}, [@NDTA_THRESH2={0x8, 0x3, 0x7fffffff}, @NDTA_THRESH3={0x8, 0x4, 0x7}, @NDTA_THRESH1={0x8, 0x2, 0x1}]}, 0x2c}}, 0x0) 2.722568841s ago: executing program 0 (id=4728): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$packet(0x11, 0xa, 0x300) socket$inet_udp(0x2, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) socket$inet6(0xa, 0x3, 0x3) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300000a0000000000000000000000030006000000000002000000e000000900000000000000000200010000000000000005070000004003000500000000000200d83456557b31c64913e152d089ff12fb00897f000001000000000000a8de"], 0x50}}, 0x0) 2.449782217s ago: executing program 0 (id=4729): r0 = io_uring_setup(0x5ef3, &(0x7f00000002c0)={0x0, 0xe6c, 0x2, 0x1, 0x8000001}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449, 0x1}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000000c0)={{@host}, @host, 0x0, 0x0, 0x1, 0x4}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x0, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000000c0)={{@host}, @host, 0x0, 0x0, 0x1, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) close_range(r0, 0xffffffffffffffff, 0x0) 2.261367572s ago: executing program 0 (id=4730): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x80000002, 0x12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sched_setattr(0x0, 0x0, 0x0) 2.088655528s ago: executing program 2 (id=4731): socket$packet(0x11, 0x2, 0x300) syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x20800) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat\x00') socket$inet(0x2, 0x4000000000000001, 0x0) inotify_init() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x1, r2, 0x1}) inotify_init() openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x3, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.03426152s ago: executing program 4 (id=4732): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000500000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000106ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x20000000) 1.962379508s ago: executing program 0 (id=4733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000140)="02", 0x1}], 0x1}}], 0x33, 0x20048040) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000100)=0x3) close_range(r3, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x338, 0x150, 0x150, 0xfeffffff, 0x150, 0xa8, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xa8, 0xe000000}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1d, @rand_addr=0x64010101, @multicast1, @port=0x4e23, @gre_key=0x1}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) ioctl$TIOCMGET(r4, 0x541e, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0x0, 0x0}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000010101010000000000000000020000001800018006000340000000000c000280050001002f0000000c0019800820010005000000"], 0x38}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd0900008400000001000000", @ANYRES32, @ANYBLOB="f4ffff4996ffffff40e2ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syncfs(r7) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x20005, r7, 0x4}, 0x38) 1.779925705s ago: executing program 4 (id=4734): r0 = syz_io_uring_setup(0x48a5, &(0x7f0000000080)={0x0, 0x9e92, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0xa, 0x4, 0x0, 0x6, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = eventfd2(0x0, 0x0) readv(r7, &(0x7f0000000500)=[{&(0x7f0000000380)=""/95, 0x5f}], 0x1) write$eventfd(r7, &(0x7f0000000280)=0x9, 0x8) ioctl$BINDER_GET_EXTENDED_ERROR(r6, 0xc00c6211, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r6, 0xc00c6211, &(0x7f0000000080)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001000010002000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="82e300000200000018001680140001801000060009649bd9148431c41e4b11320800200004000000140003006261746164765f736c6176655f30"], 0x54}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) 1.595702504s ago: executing program 2 (id=4735): fanotify_init(0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$nullb(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000009000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 1.246309908s ago: executing program 2 (id=4736): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (async, rerun: 64) r2 = fanotify_init(0x200, 0x0) (rerun: 64) fanotify_mark(r2, 0x1, 0x8000003, r0, 0x0) (async) tee(r1, r0, 0x3, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f0000000100)={0x8}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_NEWSETELEM={0x20, 0x1e, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r6 = dup(r4) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x1000, 0x4) 899.395674ms ago: executing program 2 (id=4737): r0 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x8}) (fail_nth: 5) 755.216379ms ago: executing program 1 (id=4738): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) r1 = syz_open_pts(r0, 0x42) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x38011, r3, 0x9988000) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000001c0)={0x401, 0x8, 0x1, 0xddda}) 463.362797ms ago: executing program 4 (id=4739): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$packet(0x11, 0xa, 0x300) socket$inet_udp(0x2, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) socket$inet6(0xa, 0x3, 0x3) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300000a0000000000000000000000030006000000000002000000e000000900000000000000000200010000000000000005070000004003000500000000000200d83456557b31c64913e152d089ff12fb00897f000001000000000000a8de"], 0x50}}, 0x0) 398.161781ms ago: executing program 2 (id=4740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xf3c, 0x181000) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffc, 0x7, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000480)="79562b5a4269bc", 0x0, 0x0, 0x10, 0x0, 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000400)={0x24, &(0x7f0000000300)={0x20, 0x8, 0xd6, {0xd6, 0x3, "b1ba0586f1e42fed21fcb418d0024f2958191b866df67a65e42909f85817e902e10f176d2a6942c3984215dbfdc0877f3b2bffb7c877fb093165050464b6fbcaaf29d726c37b1960d79c279c5e9e042834aa0617d0da2e7035c444ace55fd6603046c68278b2357bd6711db8ad85b4413b3c65c5424b2b75d844da1555a5f4db2bc30456bdaf4da11e949842fdbe21b2193ff82a168a836bca9e9010d91ea96f5eae123b4de2220030ade95bb3539a613a674fd9122fc868b4afd6fa04d6ab68900d5f214af8788111920c86dbf036c05c8afeb4"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41a}}, &(0x7f0000000740)=ANY=[@ANYBLOB="0022170092f96eba988a565bd161dc700900000000002077f72f2ec6b55b67f68741"], &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x3, 0x1, {0x22, 0xcb5}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000f40)=ANY=[@ANYBLOB="4005850000007b73d1ece07ac92f6a8c80ebd7a6f2b72c542547fcf5030077274b3f895813017e914c578a4900fcb0b2b7b2ac045e87e52489322bd098d426f2b9ab697776f9549332ddf1297433956ef2b8aa1ee04aa16183e2e72cb83a77b8fb4781dbb96f8894891dc6c295bdedf139f1bca7f7c6442f2ada0b6ec6ab3a4a59af0c3dc92ceadde623bd40a116298156799899743446d89754a3ec4f4efa9e74436015c73fc87520a34a6e1edae3fc542d1eacb9d714fd3d469fdcbc50f8dec718398a2c2d3a544c874b062f95dbb19c15d29e15ce3d4c5075d487cec8"], &(0x7f0000000440)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000640)={0x20, 0x1, 0x3b, "9345dbe9e31913aff5a7a0835bed8137245fb6b00d18fc5d3a5a0ef76b725b574d4104e45a39f3b5aab17c27644ec6e7ed17316be70e7a6a67b7fd"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x40}}) syz_usb_disconnect(r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=@newtaction={0x4bb8, 0x30, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{0x2820, 0x1, [@m_skbedit={0x10c, 0x0, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}]}, {0xcd, 0x6, "59cf9324e333520eb574de7c1478c9e5d08275114ab446540307238edbb6d1500ab72de2cc8dd88fe0c7d5eb2e3e90a20201ee7e03f172bf08e03fa0c86151133c38c659aba2ea3e9eafda24a380c805f89f07459105c7abef1720a81b15b6da5f668318a26048277e8144f93e43d31b66d31dc156cb620eb8912754a582988f0731fd01c90b2dee0ddc1e1ea5905751b3bbdbb02c3f95adaae4a53fc71edd54728c7277a6bf37d9a36e6d51a419cd752db751eeb55469c9cdca000dbecebaac6d4816e8a83fd418a9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x1eb8, 0x7, 0x0, 0x0, {{0xb}, {0x1d9c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x40, 0x5, 0x8, 0x8, 0x3ff, 0x8, 0x1, 0x7, 0x800, 0x9, 0x700, 0x9, 0x7, 0x2, 0x7f, 0x2, 0x1c2305ca, 0xfffffffc, 0x4, 0x3, 0x3, 0xffffffad, 0x3, 0x80, 0x3, 0xfffffff7, 0x0, 0x2669, 0x0, 0x3, 0x3, 0x6, 0x6, 0x7, 0x9, 0x3, 0x4, 0x2, 0x0, 0x4, 0x7fff, 0x6, 0x4, 0x34, 0x6, 0xfff, 0x10, 0x7, 0x8d, 0xfffffff8, 0x2, 0x6, 0x0, 0x7, 0xffffffff, 0xcd, 0x0, 0x400, 0x8, 0x400, 0xd, 0x99, 0x80000001, 0x80000000, 0x3, 0x6, 0x4, 0x200, 0x101, 0x1ff, 0x3, 0x15, 0xff, 0x8, 0x7, 0xb, 0x8, 0x58, 0x3, 0x5, 0x0, 0x400, 0x510, 0x7fffffff, 0x5b3c, 0x5, 0x6, 0x1, 0x800, 0xf, 0x2000000, 0x9, 0xc09, 0x1, 0x1000, 0x6, 0x4, 0x401, 0x473d, 0x4, 0x10000, 0x7, 0x7, 0x401, 0x7fff, 0x80, 0x9ad, 0xfffffff3, 0x1, 0x7, 0x6, 0x1, 0xf, 0x9, 0x4, 0xf, 0x3, 0x7, 0x1, 0x80000001, 0x8, 0x2, 0xffff, 0x2cd, 0x7, 0x3, 0x8, 0x4, 0x7232, 0x46e, 0x3, 0x1, 0x3, 0x80000000, 0x89f, 0x2, 0xd, 0x5, 0x5, 0x0, 0x874, 0x1c, 0xa9, 0x1, 0x5, 0x16, 0x4, 0x7, 0x8e62, 0xa, 0xd, 0x8, 0x0, 0x1ff, 0x2, 0xbff2, 0x1, 0x10, 0x1ff, 0x1, 0x10, 0x81, 0x6, 0x47f8, 0x9, 0x34e, 0x48d8, 0x43f9, 0x0, 0x0, 0xff, 0x32f02f37, 0x4, 0x800000, 0x0, 0xfff, 0x0, 0xf8a, 0x100, 0xffff2615, 0x8, 0x401, 0x1, 0x6, 0x764, 0x18, 0xfffffffe, 0x2e, 0xfffffff8, 0x6, 0x7ff, 0x80000000, 0x1, 0x0, 0x6, 0x8, 0x4, 0x9, 0x87a, 0x5, 0x6, 0x2, 0xfff, 0x128e, 0x3, 0x9, 0x1, 0x7fffffff, 0xfffffffc, 0x4, 0xc22, 0x4f, 0x7, 0x5, 0x7, 0xfffffffe, 0x401, 0x7, 0x8, 0x1, 0x7ff, 0x3, 0x9, 0x3, 0x4, 0x4b, 0xffff, 0x1000, 0x2, 0x3d9, 0x7f, 0x4000000, 0x3, 0x800, 0x0, 0xffffc1d2, 0x620, 0x6, 0x5, 0x7, 0x1, 0x9, 0x7fffffff, 0x81, 0x8, 0x3, 0x6, 0x8, 0x6, 0x2, 0x2, 0x9fb8, 0x6, 0x8, 0xffff0aad]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x3ff, 0x142, 0x2ef, 0x0, 0x8, 0xc1, 0x9, 0x6, 0x7, 0x60, 0x6, 0x8bf, 0x80000001, 0xfffffff7, 0xff, 0xfe08, 0x40, 0x0, 0x6, 0x0, 0x868f, 0x6, 0x7, 0x3, 0x5, 0x2, 0xf7, 0x2, 0x1, 0xd, 0x7fffffff, 0x3, 0x4, 0x8, 0x0, 0x0, 0xffff, 0x1, 0x7, 0x1, 0x4, 0x8, 0x7, 0x0, 0x7, 0x5, 0x2, 0x8, 0x401, 0x7, 0xe9e00000, 0x2, 0xfffffff8, 0x1, 0xad, 0x3, 0x6, 0x7, 0x9, 0x40, 0x1, 0x9ef, 0x6, 0x200, 0x44, 0xea, 0x139e, 0x9, 0x8c, 0x1, 0xa, 0x7, 0xa137, 0x400, 0x5, 0xff, 0x1ff, 0x7, 0x9, 0x6, 0x7, 0x6, 0xc2b, 0x7fff, 0xd0, 0x3, 0xfffffffb, 0x8, 0xa, 0x1, 0x8, 0x1ff, 0x6, 0x10001, 0x7, 0x6, 0xffffffc4, 0x4, 0x3a, 0x81, 0x2, 0xfffffffe, 0x81, 0x8, 0x8, 0xb7b, 0x7, 0x81, 0x5b97, 0x1, 0x8, 0xe, 0x200, 0x7, 0x3, 0x5, 0x7, 0xcaa6, 0x8, 0x3ff, 0x7, 0x9, 0x3, 0xa, 0xffffffff, 0x0, 0x2, 0x8, 0x7, 0x8, 0x3, 0x3, 0x7f, 0x4, 0x1, 0x9, 0x4, 0x3, 0x7d6, 0x65000000, 0xd, 0x2, 0x7f, 0x5, 0x1d7b, 0x52, 0x3, 0x4, 0x5, 0x100, 0x2, 0x732, 0xffffffff, 0xfffffff7, 0xac, 0x4, 0x5d, 0x5, 0xfa4a, 0x6, 0x7fffffff, 0x4, 0x4, 0xa6e, 0x6, 0xf21, 0x99d3, 0x1, 0x6, 0x9, 0x400, 0x1, 0x6f2, 0xfffff218, 0xb, 0xffffffff, 0x8, 0x1, 0xac2, 0x7, 0x21d7, 0x3ff, 0x10000, 0xe, 0x3, 0xd, 0x7d79, 0x7, 0x8, 0x8, 0x4, 0x401, 0x6, 0x80, 0x1, 0x4db1d433, 0x7, 0x8000, 0xe, 0x9, 0x7fffffff, 0xc5, 0x6, 0xff, 0xfffffff9, 0x4, 0x8, 0xc1, 0x7, 0x2, 0x4, 0x1103, 0x49, 0x5, 0x4, 0xf5, 0x10001, 0x2, 0x57, 0x0, 0xdd, 0x7, 0xfffffe2a, 0x4, 0x1000, 0x1, 0x4, 0xdf35, 0x6, 0xd, 0x5, 0x1, 0x7, 0x5, 0x3, 0xf, 0xb, 0xc, 0x8001, 0x1, 0x6, 0x101, 0x0, 0x7, 0x4, 0x4, 0x2, 0x8, 0x1, 0x438, 0x2, 0x1d962c59, 0x1d1, 0xf8a5, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xff, 0x7, 0xbc2, 0xfff, 0x1, 0x1, 0x6, 0x3, 0x1, 0x5, 0xe0, 0x1, 0x7, 0x2, 0x1, 0x80000001, 0x5, 0x3, 0x7f, 0x79, 0x80000000, 0x174b, 0x2, 0x3, 0x1, 0xfff, 0x6, 0xffff, 0x0, 0xffffffff, 0x7, 0x6, 0x7, 0x6, 0x2, 0x1, 0xa, 0x5, 0x9, 0xf786, 0x5, 0x4, 0x8000, 0x80000001, 0x3ff, 0x3, 0x4, 0x8, 0xe, 0x2, 0x55bfadbe, 0x9, 0x7, 0xa1e, 0x8001, 0x80, 0x0, 0x1, 0x2, 0x5, 0xffff6673, 0x200, 0xff, 0x13, 0x80000001, 0x3, 0x7fff, 0x6, 0x7, 0x7, 0x4, 0x7, 0x2, 0x5, 0xf85, 0x4, 0x2, 0x1, 0x7ff, 0x2, 0xddd, 0x7, 0x6, 0x7fffffff, 0x4, 0x6, 0x6, 0x63, 0xd, 0x80000000, 0x80, 0x8, 0x5e, 0xd12b, 0x3b, 0x4c9, 0xc84, 0x0, 0xdf46, 0x46, 0x8, 0xf, 0x401, 0x25, 0x1, 0xffffffff, 0x100, 0x8, 0x3, 0x0, 0x4, 0xfffffff7, 0x80000001, 0x2, 0xe, 0x6, 0x3c6e, 0x8, 0x7, 0xff, 0x9, 0x8, 0x6, 0x0, 0x5, 0x5, 0x8, 0x3, 0x415, 0x10, 0x40, 0xd, 0x0, 0x1000, 0xbd93, 0x3, 0x9, 0x1, 0xc, 0x7fffffff, 0x800, 0x0, 0xffff, 0x2, 0x8, 0xff, 0xe1, 0x3, 0x6, 0x1ff, 0x7f, 0x1, 0x9, 0x2, 0x4, 0x6889001, 0xff, 0xbeb7, 0x1, 0x9, 0x1, 0x1, 0x0, 0xe, 0x747, 0x0, 0x100, 0xd55, 0x4, 0x4, 0x4, 0x4, 0x93, 0x4, 0x2, 0x3, 0x0, 0xffffffff, 0xffffffff, 0x2, 0x46, 0x3, 0xfffffff7, 0xf4a, 0x7, 0xa, 0x2, 0x3, 0x7, 0x5, 0x7, 0x7fffffff, 0x0, 0x6, 0x66, 0x5, 0x80000000, 0xff, 0x0, 0x80, 0x400, 0x8001, 0x8, 0xfffffff7, 0x1, 0x1000, 0x5, 0x0, 0xa7f5, 0xc64d, 0xe, 0x3c, 0x9, 0xfffffff8, 0x934e, 0x100, 0x4, 0x3ff, 0x101, 0x10001, 0x6, 0x173e, 0x1731, 0x1ff, 0xe, 0xd795, 0x8, 0x101, 0xffff8000, 0x7, 0xcfb4, 0x4, 0x100, 0x3, 0x7f, 0x8, 0x5, 0xa, 0x2, 0x9, 0x3, 0x7fff, 0x7, 0x5dca, 0x7, 0x4, 0xc5a, 0xff8000, 0x8001, 0x0, 0x5, 0x80000000, 0x5, 0x401, 0xe]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x37d9, 0x3, 0x3, 0x9, 0x1000, 0x80, 0x1, 0x1000, 0x9, 0x9, 0x7, 0x7ff, 0x8, 0x9, 0xcec, 0x4, 0x7670, 0x4, 0x101, 0xfffffffb, 0x7fff, 0x1, 0x8001, 0x6, 0x400, 0x6, 0x9, 0x4, 0xaff, 0x3, 0x8, 0x9b, 0x101, 0x6, 0x5, 0x3, 0x40, 0x7, 0xa, 0x81, 0xfff, 0xe5fa, 0x9, 0x1, 0x3, 0x4f306d97, 0x5, 0x80000001, 0x7fff, 0x4, 0x80000000, 0x9, 0x4, 0x2, 0x9, 0x44, 0x20004, 0xfffffffb, 0x6, 0x2d51f35a, 0xe90eb9b, 0xfffffe00, 0x1, 0x3, 0xffffff7f, 0xe, 0x401, 0x7, 0x7192791d, 0x10000, 0x1, 0x8, 0x2, 0x7, 0x8, 0x419, 0xce, 0x9, 0x2, 0x3, 0x8, 0x8, 0x7, 0x2, 0x7, 0x7f, 0x0, 0x2e8, 0x2, 0xffff7f1e, 0x7, 0x27, 0x1ff, 0x100, 0x200, 0x10, 0x4, 0x1ff, 0x6, 0x10000, 0x4, 0xfffffffa, 0x9, 0xff, 0xffffff4f, 0x8, 0x4, 0x400, 0x3, 0x7, 0x0, 0x5, 0x54ae, 0x6, 0x4, 0xcf7, 0x6, 0x2d78, 0x9, 0x9, 0x3, 0x9, 0x0, 0x9, 0x1, 0x7, 0x7fffffff, 0x4, 0x6, 0x1000, 0x1, 0xf, 0x16c, 0xcad, 0x9b, 0x6, 0xffffffc0, 0xbcfa, 0x7, 0x7506, 0x3, 0xffff7fff, 0x9, 0x40, 0x2, 0xf, 0x7aa, 0x1, 0x1ff, 0x9, 0x7, 0x7, 0xfffffffb, 0xf, 0x1, 0xd, 0x9, 0x7fffffff, 0x9, 0x5, 0x7, 0x8000, 0x7ff, 0x80000000, 0x5, 0xd6, 0xfffffffb, 0xfffffffb, 0x8, 0x4, 0x7000000, 0x6, 0x6, 0x5, 0x7, 0x88b, 0x9, 0x5, 0x3, 0x8, 0x9e, 0xfffffffa, 0x800, 0x4, 0x7fff, 0xfffffffe, 0x8, 0xfffffffd, 0x975, 0x3, 0x6, 0x7, 0x101, 0x18e, 0x8000, 0x79, 0x9, 0x1000, 0x6, 0x9, 0xfff, 0x5, 0x93, 0x5, 0x9, 0x65, 0x6, 0xffffffff, 0x2, 0x8f4, 0x81, 0xfffffffc, 0x80000001, 0x10, 0x100, 0x7, 0x800, 0x1, 0x142a15a2, 0x5, 0x390, 0xe, 0x2, 0x6e, 0xffff, 0x7, 0x31a, 0x7fff, 0x2, 0x374, 0xa149, 0x2, 0xb, 0x934b, 0x800, 0xfffffe01, 0x5, 0x2, 0xfff, 0xe, 0x7, 0x3, 0xa, 0x10000, 0x8000, 0x3, 0x0, 0x200, 0x6, 0xfffffffa, 0xfffffffc, 0x9f57, 0xf, 0x8001, 0x6, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x5, 0xfffffc00, 0x5, 0x7fffffff, {0x2, 0x1, 0x101, 0x5, 0x1, 0x1}, {0x40, 0x2, 0x3, 0xd0, 0x5, 0x2}, 0x0, 0x6, 0x8}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x5d7, 0x8, 0x1, 0xf, 0x9, 0x2, 0x8e, 0x101, 0x8, 0x0, 0x1, 0x2, 0x3, 0x1ff, 0x7ff, 0x5, 0x405d, 0x0, 0x2d33, 0xd, 0x5, 0x0, 0x0, 0x1, 0xb484, 0x101, 0x9, 0x0, 0x852, 0x6, 0x6, 0x80000001, 0x6, 0x8, 0x3, 0x4722, 0x10, 0x0, 0x80000000, 0x0, 0x6, 0xffffffff, 0x80000001, 0x1935, 0x41c, 0xde, 0xe, 0x9, 0x4, 0x5, 0x9, 0x164, 0x7fffffff, 0x5, 0x0, 0x6, 0x10000, 0x7, 0x8000, 0xa, 0x9, 0x1, 0x3, 0xffff, 0x1, 0x5, 0xffffff64, 0x3, 0x2, 0x83a, 0x333d, 0x5, 0x0, 0x0, 0x8, 0x5, 0x3, 0x0, 0x800, 0x44, 0x6, 0x7, 0x3, 0x7f, 0x2, 0x9, 0x9, 0xffff6d5e, 0x5, 0x1000, 0x100, 0xab, 0x2, 0x570, 0x1, 0x0, 0x3, 0x9, 0x6, 0x0, 0x2, 0x6, 0x6, 0x4, 0x9, 0x3, 0x0, 0x2, 0x8, 0x6, 0x26d0e51f, 0x6, 0xfb1, 0xcd, 0x0, 0xa, 0x63aa, 0x8, 0x7fff, 0x7, 0x8, 0x8, 0xffff, 0xfffff816, 0x8, 0xcf02, 0x7, 0x7, 0x9, 0x8f8, 0xea, 0x92, 0x5, 0x92, 0x7, 0x2d, 0x9, 0x2, 0x81, 0x7, 0x8, 0x3, 0x1ff, 0x8, 0x0, 0x0, 0x1000, 0x9, 0x1, 0x0, 0xe7, 0x3, 0x6, 0x9, 0x3, 0x7fff, 0x7, 0x7, 0x7fff, 0x4, 0x1, 0x5e34, 0x8, 0x3, 0x0, 0x0, 0x3, 0x8, 0x6, 0xffffffff, 0x10001, 0x4, 0x7fffffff, 0x4, 0x400, 0x4, 0x7, 0x9, 0x7, 0x200, 0x3, 0x7, 0x7, 0x3, 0xe, 0x6, 0x2, 0x5, 0x8001, 0x7f, 0xc1b2, 0x6, 0x3, 0x8, 0x1ffc00, 0x6, 0x0, 0x4, 0x10001, 0x9, 0x0, 0x2, 0x5, 0x8, 0xe0af, 0x9, 0x6, 0x5, 0x0, 0x7fc000, 0x0, 0x81, 0x80, 0x0, 0x9c, 0xffffffff, 0x8, 0x54d, 0x9, 0x1, 0x1, 0x3ed590c9, 0x0, 0xf, 0xdc, 0x3, 0x7, 0xb5, 0xff, 0x4, 0x2, 0x101, 0x8, 0x80000000, 0xe, 0x4, 0x2, 0x4, 0x9, 0xfffffffa, 0x1, 0x9, 0x101, 0x1, 0x401, 0x6, 0x9, 0xfffffffa, 0x0, 0x0, 0x8, 0x6, 0x200, 0x2, 0xfff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffeffff}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc4, 0x6, 0x8, 0x3, 0x1, 0x8, 0x9, 0x200, 0x10000, 0xffff8001, 0x3, 0x0, 0x2, 0x101, 0x8, 0x7, 0xf, 0x1, 0x2, 0x5, 0x6, 0x4, 0x28000000, 0x7, 0x5f27, 0x1700000, 0x692c, 0x8, 0x1ff, 0x1, 0x2, 0x1000, 0xc1db, 0x3, 0x5, 0xf, 0x5, 0x7, 0x1000, 0x5, 0x1, 0xa6, 0x9, 0x6, 0x6, 0x10000, 0x100, 0x8000, 0x9, 0x7666b3a8, 0x400, 0xffff, 0x7ff, 0x4, 0xb1b3, 0x3ff, 0x6, 0xffffff8b, 0xfffffffa, 0x81, 0x796, 0x3, 0x6, 0xfffffff7, 0x2, 0x9, 0x4, 0xffff0000, 0xfffffff9, 0xfffffffc, 0x8, 0x2, 0x499, 0x5, 0x9, 0xce, 0x6, 0x8, 0x290, 0x8001, 0x2, 0x0, 0x9, 0x6, 0x9, 0x51, 0x401, 0x401, 0x6, 0x400, 0x0, 0x1, 0x5, 0x5a941b22, 0x7, 0x7, 0x2, 0x2b58, 0x0, 0x2, 0x9, 0x800, 0x1, 0xc, 0x6, 0x4, 0xffff, 0x9, 0x1, 0xa8, 0x401, 0x4, 0xff, 0x7ff, 0x4, 0x8, 0x3, 0xfffffffe, 0x2, 0x1000, 0x6, 0xfabe, 0x4, 0x6, 0x400, 0x0, 0x4, 0x9, 0x1ba, 0x3, 0x1d, 0x4, 0x0, 0xa, 0x7f, 0x7, 0x3ff, 0xfff, 0xa6, 0x0, 0x0, 0x6, 0x1, 0x7ff, 0x6d8c, 0x76, 0x7, 0x2, 0x5a9, 0x8, 0x9, 0x4d, 0xfffffff8, 0xff, 0x1, 0x80000000, 0x10000, 0x1, 0xc0bd, 0x10000, 0xa, 0x7, 0x989, 0x1, 0x0, 0x3, 0x1, 0xdff8, 0x8, 0xcd, 0x8, 0xffff, 0x9, 0xe9, 0x9a, 0x4, 0x4, 0x6, 0x2, 0x3, 0xf1, 0xfff, 0x3, 0x2, 0x8, 0x7, 0x9, 0x2b, 0x7, 0xe8b1, 0xff, 0x8001, 0x10001, 0x1, 0x1, 0x3, 0x5, 0x42, 0x101, 0x1, 0x10000, 0xb, 0x70, 0x8c, 0x9, 0x10000, 0xce, 0x9, 0x5, 0x9, 0xd, 0x9, 0xff, 0x3ff, 0x8, 0x9, 0x200, 0x6, 0x0, 0x800, 0x0, 0x3, 0x20000000, 0xfffffff8, 0x6, 0x4, 0x1ff, 0x5, 0x2, 0x2, 0x4, 0xb, 0x10000, 0x8, 0x7, 0x400, 0x2, 0xb, 0x3ff, 0x4a, 0x8, 0x6, 0x7fef, 0x0, 0xfff, 0x1f, 0xc, 0x0, 0x7, 0x31, 0x400, 0x8, 0xf, 0x0, 0xfffffff9, 0xad5]}], [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x9, 0xff, 0x6, 0x2, 0x80000001, 0x5, 0xffff, 0x4, 0x8, 0x1, 0x3, 0x6, 0x6, 0x0, 0x7831, 0x80000001, 0x8, 0x45, 0x100, 0x2, 0x8, 0x400, 0xbee, 0x0, 0x8, 0x7f, 0x0, 0x3, 0x3, 0x1, 0x1, 0x7fff, 0x871, 0xfffffffe, 0x6, 0xffff, 0xffffffff, 0x6, 0xb, 0xff90, 0x3, 0x2, 0x2, 0x1, 0x7, 0x7fffffff, 0x3, 0xfffffffb, 0x602, 0x3, 0x3, 0x4, 0x9, 0x7, 0x0, 0x6, 0xfffffffe, 0x1d, 0xffffffb3, 0x1, 0xe1f4, 0x1000, 0xe7a, 0x1, 0xbaeb, 0xf, 0x4, 0x1000, 0x5, 0x1, 0x81, 0x1, 0x7fff, 0x140000, 0x8, 0x10000, 0x5, 0x3, 0x7f, 0x7, 0x4, 0x7ff, 0x8, 0x9, 0x658, 0x8, 0x2022, 0x0, 0x18000000, 0x80, 0x70f7, 0x2, 0x1, 0x3, 0x6, 0x5, 0x800, 0x100, 0x0, 0x5, 0x9, 0x8, 0x4, 0x2, 0xf29, 0x5, 0x814, 0x3, 0x20, 0x1, 0x3c1, 0x4, 0x0, 0x5, 0x9, 0x6, 0xc06, 0x2, 0x3, 0x9d64, 0x1, 0x10000, 0x8, 0x6, 0x6, 0x40, 0x6, 0x0, 0x401, 0x2, 0x3, 0x3, 0x1ff, 0xffffffc0, 0x0, 0xf9ca, 0x4, 0x6, 0x81, 0xfffffff7, 0x8, 0xc0e, 0xc59, 0x0, 0x4, 0x7fff, 0x8, 0x1, 0x4, 0x9, 0xffffff81, 0x6, 0x6, 0xfffffff7, 0xf, 0x9, 0xfffffff8, 0x0, 0xff, 0x9, 0x0, 0x4, 0x7693db5e, 0xc, 0x40, 0x5, 0x7, 0x1, 0x3, 0x7, 0x0, 0x3, 0x629e0834, 0x8001, 0x21, 0xa8ee, 0xb0, 0xa, 0xdfa, 0x7ff, 0x1d5, 0x0, 0x4829131a, 0x28, 0x200, 0x1, 0x7fff, 0x4, 0xc0000000, 0x3, 0x8, 0xfffffffd, 0x200, 0xfffffff2, 0x8, 0x5, 0xf, 0x5, 0x144d, 0x1000, 0x71c0, 0x6, 0xd, 0x8, 0x4, 0x7, 0x9, 0x1a, 0x3, 0x0, 0x1, 0x5, 0x9, 0x5, 0x3, 0x10000, 0x3, 0x0, 0x7, 0x5, 0x7fffffff, 0x3ff, 0x5, 0x7, 0x7f5b, 0x10, 0x400, 0xe, 0x10001, 0x69, 0xa57a, 0x7fffffff, 0x0, 0x5, 0x6, 0xf, 0x6, 0xd248, 0x0, 0x4, 0xbc5, 0x8000, 0x2, 0x81, 0x4a6, 0x5, 0x3ff, 0x6, 0x8, 0x80000001, 0x8, 0x8, 0x7, 0x5, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7f}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0xfffffffd, 0x3, 0x0, {0x6, 0x0, 0xff2a, 0x8fb, 0xfff, 0x401}, {0xfc, 0x2, 0x6, 0x9, 0x6, 0x9}, 0x9, 0x0, 0x9}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7d65993b, 0x4, 0x6, 0x4, 0x7ff, {0x6, 0x0, 0x4d2, 0x1, 0x4, 0x1}, {0x1, 0x1, 0x1, 0x2, 0x6a, 0x200}, 0x7fff, 0x9, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffe}]]}, {0xf1, 0x6, "2bc5c450c1425d465e648e8d965deb118d05563565888134075e941c8aa86d3b14cc65049d8c9b29e63d5c5f6f675eea0bd0d5b4e5ea54e6cb3ac205647edd65bdf3cf411de46deabdddedb401c1ebfc9231d516c012a5d613b76963253bc3fb86717e709f4010284cb7534702bc6341002d59895f919360507c57db70cdc8c9a07da095f1d83d8c39795235c98e3cb7ab22ef7eebd5133dd67e7d97aba858077ae53aca6d753a0e91140978aea7ea92e6a94a9b4cad11f0b25357612fe844bc6c6e9fc3b24fd24beba5f1b07167ea7d8acef3393988fc01509a946f2026ac6d2850760519bc41464329101924"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0xf8, 0x15, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xfff, 0x7, 0x1000, 0xffff}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x5, 0x3, 0x100}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x3, 0x5, 0x3}, 0x9}}]}, {0x71, 0x6, "ba6818542487e42f5c966c864d154fbfb0d56db2c9f62ca9695690e26d913fb2880c6d86162e8dfb9cd08df46d8d81c39f747fc19afbcce872bd39dcee179c67ec64cc6a1f72f830f1dce94561d72af456984b30274caa4f6d703d0a2ab5fbc8ea1331b85c5eaa838ea9b4b2c9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xcc, 0x8, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x6e, 0x6, "6bb35eea3b8e67ff54bf69a014c8e235c2564d14c1b9c77e4b55f7fbe225cbc242b832a382bfa66530bcc42bbecbbd53ef5168eae9ff248fbddf2dc3a3e5b3647b624e163db3ec1bf72e2b9755cd55e572e0c18d6c82465fbb26d3673fd0d705ba2730dad40182ada267"}, {0xc}, {0xc}}}, @m_gact={0x1b0, 0xc, 0x0, 0x0, {{0x9}, {0xd0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x24, 0x80000001, 0x1, 0x8, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x0, 0x5, 0x101, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x20f8, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x9, 0x4, 0x3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x25d6, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x2, 0x8000, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000000, 0x0, 0x0, 0xff, 0xdd}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x200, 0xffffffffffffffff, 0x6, 0xfffffff9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x2, 0x1, 0x7, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1e07}}]}, {0xb5, 0x6, "f92ff8e703fabe945812350e91b9badb8a18dd0b46479a197d80f69b3d3886dfd808790e085b361899b7517817c78532d7f4ffe50df72b61dd803ad9bf567dbc1ea2f425636d42efead1d1329e6f71601c047be0c04efb2f572bf98780453422d9fccd85e7dbe9d7cf0027815af90300c194deb63fbe79cae95fbb00aecfdafa4812e82fff05fb808065f1fc4c121d847071658632e0287f838f0e5f2a58cbc2a5f90fbe1dead457d055bc9eee298ffaf7"}, {0xc, 0x7, {0x1, 0xc04ed24c94516c6c}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x16c, 0x7, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x8, 0x3, 0xc0, 0x8}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7ff}]}, {0xfd, 0x6, "9f99b2cae17938a6ca037d085de49230aae9dc5cb8c63b1f51b8777c0f0569c3fbaf370e7f5ffe634ef58bb1af24e2377d15c23c11b63ffb72985571a50fcbb356f48cb62c674393c35c962710f27eae98d892e36177bf0b818077a26a030ad049ee330e784123ab92bdd1f1b106fbb81d9500d92fe9c59f94038cbd29ce5f55ca3d00602884b478086324e51d3fbc6fac9dcb04d9b7679c84e8928c79552064b4ef854e6b24e413b98cb11a4fe4791fcd0d99658e38d7325cb772fa3eac113ac6558e65c286f0c261293e031f60924ec6db4b8853ee5df29d1166763074b6e001f8309cef1a45f51fee2f8d3930254d4a9348920bb10cf33a"}, {0xc}, {0xc}}}, @m_csum={0x11c, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x101, 0xffff, 0x10000000, 0x8001, 0xff}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xffffff07, 0x1, 0x7bf, 0xe095}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x6b7a, 0x4, 0x200, 0xfffffffc}, 0x3e}}]}, {0x9c, 0x6, "6ca67d0ee8519550ecb9f400a8186f506cb1b0a259a9abfbe1c7a0606dfe1fdf648e5ebce91fc49ed06114f2d0b908ba80a2ab47cd40f541c5c98b3be330c4a1a083eddb3458376656bef54f789399581752e53ff5ae0610e471aa22f296be5e593b3f599cb89fa18772f29260f842ccad7387e864ccf84e138e1b7d531e7064c77b267f07e5644cf473b461f1f9b78d70ac69701e6c5328"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x178, 0x11, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1ff, 0xd81, 0x0, 0x8, 0x4f2}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xc895, 0x7, 0x0, 0xda6d}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x101, 0x20000000, 0x21f6}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x7, 0x4, 0x7, 0x4}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xeb58, 0x0, 0x10000000, 0x3, 0x3}, 0x50}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x10000000, 0x8, 0xffffffff}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x80000001, 0x5, 0x3, 0x1}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x7, 0x7, 0x4, 0x39}, 0x1b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x6, 0x1, 0x7fff}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x10000000, 0x2, 0x3}, 0x34}}]}, {0x32, 0x6, "dfc6a3f2f8a9d034ee2fa979f1c2cd2e2e7afa8ed731753dd201f775075285946a2c1f5c4d12e50534e2d94e826a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0xe4, 0x14, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS={0x54, 0x4, [{0x7, 0x9, 0xff, 0xc1}, {0xf5, 0x0, 0x4, 0x8}, {0x700, 0x0, 0xa1, 0x4}, {0x20ab, 0x9, 0x8, 0x9}, {0x3ff, 0xa, 0x81, 0x2}, {0x2, 0x0, 0x8, 0x8}, {0x80, 0xfe, 0x9, 0x1}, {0x3, 0x3, 0x81, 0x5}, {0x800, 0x6d, 0x0, 0x7fff}, {0x4335, 0xe, 0x3, 0x4}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x1, 0x6, 0x4, 0x82}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x6, 0x2, 0x9, 0x4}}]}, {0x2f, 0x6, "916608d1631a2cc65449c1c0701798d21a129da8f2f5c293f58d44c6e5109d435cdaf16b90a9d51093e487"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x480, 0x1, [@m_ife={0xb0, 0x1f, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x8, 0x0, 0x6}, 0x1}}]}, {0x6a, 0x6, "7389eb5af85fd9e855437ec46adc3641c1250a4938f5d8c5ea9030ad0a188fbe19024727c642f93f96289df4f7f504049dcc74e3f915e2488e8074714fc2217893e1bf5f51d5989d65b703fb5f024a4843d18f003e13e84079bc3d2e7dce240bb74bd8162775"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x3}}}}, @m_csum={0x18c, 0x16, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x826, 0x8, 0x8000, 0x8}, 0x5b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1ff, 0x0, 0x5, 0x0, 0x9}, 0x74}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x81, 0x9, 0x4, 0x3ff, 0x1}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8001, 0x10000000, 0x3, 0x100}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x75, 0xf5a9, 0x0, 0x7, 0x9}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x2, 0x5f2, 0x9}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x8, 0x8, 0x4, 0x8001}, 0x63}}]}, {0x9b, 0x6, "8f764a4fad4bd492c93523c372c3631ff4634736babf181194b6fa9e6808d386062b0f5f7a78bd4b0801ce9b67956e3989ceaa23f384924b023dd66cbe22fe5b5d05cec36bdea14e1a39e144c1fcca68a8834b1bcd4445abe7f75b3ffeb4c523b9a1be37a5d1cb537a9d8a5a31b99c5e28bff6ab99f8a79b376356a8687e2164bf82e996a8ccc58727bfd2d0377ed55525fe392e8b2308"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x5c, 0x18, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}, {0x27, 0x6, "4801cef7e2288b39e3ec94f03f06c940f5d42fcc2385f5b4de8e91bc7385320ef1f200"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x108, 0x4, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe, 0x3, 0xffffffffffffffff, 0x2, 0x4}, 0xe}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xac2, 0x8, 0x0, 0x7, 0x7f}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x37d03a92, 0x6, 0x5, 0x401, 0x200}, 0x27}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x7, 0x6, 0x8}, 0x3b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x58, 0x982b42dac69273e3, 0x4, 0x2}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x200, 0x20000000, 0x8000, 0x7}, 0x37}}]}, {0x34, 0x6, "24a01186b8db45c333bbd0f6db2ed57d0af76af9f066e922c3c520e745d53810ccc7e3820c78204103fa368afdc76cd9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ife={0xdc, 0x19, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x200, 0x1, 0x0, 0x9}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x64, 0x6, "7aa032463dd2ccebb2322069d63bcb93e7126b5ce80805a2882b1bc44905679d6b346c862c6bab603d420db19468d0ca973e13452cda2d65d5e9b7eb2a96fa445c8ce5282678c821f9a1d65e01ed5e27d902213e7954d59a62ccc9f2314a65ac"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x5b4, 0x1, [@m_simple={0x110, 0x3, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '%\x00'}, @TCA_DEF_DATA={0x8, 0x3, '*\\^\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xa3e, 0x7, 0x8, 0x6eab, 0x80000000}}, @TCA_DEF_PARMS={0x18, 0x2, {0xf1cc, 0x8, 0x1, 0x2, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x3, 0xffffffffeffffff7, 0x2, 0x1}}, @TCA_DEF_DATA={0x7, 0x3, '-+\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x100, 0xff, 0x10000000, 0x5, 0x10001}}, @TCA_DEF_DATA={0x6, 0x3, ':\x00'}]}, {0x61, 0x6, "08bb2aaa8277f647a9cde4e8ed7937f6eb767ef8235ff7f06ffd8f7c3afb8deb2d479cf1b71b2510f316c3fd46517d46a3e8163a51324826ca50ed79510d045d53e56a15eaf3054eb0a8198f1e3f80f53ec775625bd275e7ce1a9ddb80"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0xc4, 0x10, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'u32\x00'}, @TCA_DEF_DATA={0x8, 0x3, ',@-\x00'}]}, {0x86, 0x6, "b86857bb9c48a2ed9791b951e5546089710b5a1f18995c71ad6d001a9ec861a951a086a5cffac240aea968d1cfc953e431aa727151e58376c1e53c7ecd03759c521840fc370b1660d68ed849b92807a1dc5b0ca9784b8604d59c7101c9a3458df79535aa16b08009b07bd48ca352d37e839aac8a13b4b803f61aa62ff97159b24751"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0xb8, 0x20, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0x81, 0x6, "ff4ad212f27c64bd1afe64b37d5adfeae19bfd911b28b324b1bcbc458d6c130dd315fd8cc91752aa532ac869cf8ae0bae1f53535c8f79a176187749f803e50f2a6458c0e21cea406e6e0c115896af0a7aac9cd1f3a3438a67416b29a516a8ac93389a42fa5c1b8d6a262ca09353ecbc6867e70888dcc15883c0f7f3ef5"}, {0xc, 0x7, {0x7aa938d971a52868}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0xec, 0x8, 0x0, 0x0, {{0xc}, {0x4}, {0xbf, 0x6, "749d811e0854da1de5862ba7d51e6ea231de49530ba1a5b024e1aa2e2b3ea9919983f2eeee2d18b1b03faaf4ae0e3c697c9fff142cd97f585536a8e9f9b29c2e1d225d6cd821e8600d6424c58a886aecdd048a5e3d3dc705137c0e2d01d45ad54b63cdec084c9b8a5fe89c8c3a796ec8a3e9492d0d2ebfebeb148fd66a69571ca3871eb28f8c7d6d8ea09562eaae7c1d2aef1060145a25958bb5240632b9ad96d9515268ab8d83ff7ec50f0bf35013991dad452e78d6b820b877f5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x108, 0x6, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x0, 0x7ff}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x6, 0xffffffffffffffff, 0x0, 0x2}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x401, 0x0, 0xffffffff, 0x9}, 0x4}}]}, {0x81, 0x6, "51d59ab12348c2b826384b60a30aae85f04e025b0e8f3c04b6d55ca73bcb1579d3cb2a2bf565c8933e79affd4e5cd588322893199cb2da5f8f5f0b05537ce8122f9a85cffa42af58b6b1b36848b7ee76f22445645f3cc08a10c89518b95f1d187c68a78d000f6e0ceee9b0110cac16fa6fb94dd3fc5180a2e27c8d9e06"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x130, 0x2, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x40, 0x2, 0xbc, 0x5}]}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x0, 0x9, 0xe, 0x266239b6}, {0x401, 0x94, 0x1, 0x1f7}, {0xb2, 0x8, 0x1, 0x10000}, {0x9, 0x6, 0x7, 0x20796dd2}, {0x0, 0x3, 0x5, 0x1}]}]}, {0xce, 0x6, "3f57cee420e9752299f601f903a6558600f2bd9a3b6df384d08fdbe7d5ef3425e30c370ab56b32bfe16a1c11c4c156f1326cabd74beaf964225232cde5bc66b2d49b2fcf5af70279867b7603339ef6d7ff6389ceed318312ef88b467c94b293ea4f16f4119c6a5f05c59ee962b7aa9590658c1bd311b9fb3ddf0ee5b9bd142224ba416331e505eae7828bb25a5a7ea1491f022e56bd7d1f846f27b575baeeda92393fc0b70032d3dc424d5f419db7d4668807a3e717cd0394c2af2a954ebd63c5843daea04d1617df6b6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x46c, 0x1, [@m_ife={0xd0, 0x8, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x200, 0x4, 0x0, 0x990}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xa}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x5}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x40, 0x6, "88656c71c69763d0f838e6a0c7f7cb7a0d38134764884fbf0db842194bcdfab1b76d3c0e06d70479d0225b122222070070bb243eb5945ef4bd11e270"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x15c, 0x1e, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x34, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x830}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xffff}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6b48}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}]}]}, {0xfd, 0x6, "27edcc088f5eb7d6d98375af70de25ca6b0768c977a30e1a42cc38d1301d459f58c27552b4fc3c69966484a097f6e9f5e6a3147c25e9771f84ac83f53ff6cadc53a58be23202314b785652d20d18415346b5cb89b40570f156322a8a5c7855250c26de40f17a641a6435c65fd40aa009f4c23db64e6b522a6d1a258187eb312772548b36f3209bb05ef64bfa54f7b39867e7bbc796bb2d8032fda02cb5ae5f43e4f0f57980833a5fe433b8c92bbdc5efc879805354a693075fc2306d78246c71c97755dbcfa8eda8b058ee01c924929182ca2ab2dd20ba542c1f09408fe180cff304dbc881d47a3dee5507cd0d4b18ffc160ed673d3d5a3460"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0xf8, 0x4, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe, 0x6, 0x5, 0x0, 0x38}, 0x5}}]}, {0xac, 0x6, "07f01830e0573059de905871d098a345998cf13fb1d2e0d4602244e9bcee4890f8271ee99040b32314a8857c67ffc2714caaa5a9ce5e88cf143841c025496a3c305dce869baaa55e840fac33d460c069792fcbb7b4007d5cf578fd77ad65c9f5c3cc34b00232c39c862cdee56f3668cbccc6ccf25175afb9b62967c2a1299c632206286c13ecb119b27099bc5d00fac32e230bbcf5701d38f24f69785eb23d9bf71b137e06422386"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x144, 0xa, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0xb, 0x5, 0x2214fb35, 0x7}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x2, 0x4, 0x3e09, 0x81}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x8, 0x80, 0x4, 0x8}, {0x8001, 0x2, 0x26, 0x1}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xb3, 0x6, "2ffa546cb9706eb227a288d425baee02e9aa74a27d97dd01bcf33dba79d672bf8f048241bcc7d926d04ee9498c5bc3d577915f5f34886277a8bc941055b3932b16ded352b09e9e6befef962d0c11807fe8118cfe8a7d826bc60eced0926b904039be45be957718de8e378c459aacb4fb81515c9ce61cc6b850492bc776b1e818806280c84e74b554d43a6fb03964ffb38b64bcbcab6270ee3dfa9c2cd095601f5beb97fb2e1b91f1511047aecb9f76"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, {0x14e4, 0x1, [@m_xt={0x278, 0x20, 0x0, 0x0, {{0x7}, {0x158, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x127, 0x6, {0x5, 'nat\x00', 0x6, 0x8001, "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"}}]}, {0xf9, 0x6, "63d68bdd6806c3b3dc23f63a5831e59410f5c9c70917ef2a1d86372de0d651e2dc975b25000847a5fdea0c2b39a9039f6db39271c833715a25b1ad4db826334313db87088ab772e19dcd9e929047fc59610954b6cbe5f56ae8d2a31c7d96e56e5cbd4b3a4b433ec0bbb9f03bc3b7e604bff8283a91569e28c1a28765f7dbaa1ec75b8f6dcc834875fe902f9a6510a6d2464c834d98d1b07777f3e51dfbdf5565f6e9f790088f83f256f5557aa4326e54442c5308f47c619cbad5c1b162ad5e878e5d568470f3258d76cf9c652233a5f92ac485df2892ad3f9d51f55d751eb65c4a7104b312e54ea962d0cf598d878b3a20d58dc9a6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x7}}}}, @m_skbedit={0x154, 0x1c, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xfff9}}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb, 0x0, 0x6, 0x4, 0xc}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x400, 0x4, 0x13f7, 0x7}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb376}]}, {0xcf, 0x6, "6016229a5abd935171a608bb08dc4012ca1b810fe66653c6eac1e5b694bb6d12f2bf2167d3c7a851472003601d1828ce2d2761e490aaf82120afffc18187c9f699994b5467ae69f04762e3a6012a408ba8d81d581b6a59e48d2c1a81997cdc32867fa20a6707274ecb644248c2aea9933ae409bb2fe189dd3c2b35181e806b1e9a487111815c6ee71e7d822f01c2fd3c6b98ae3382aca2cbae9ff5d910dfc231f7ac73bab7f99e3d8842bc6efdec11d0250ed6e27571d506256de8742acc2fdc748eeebcfcd161e5915292"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x1}}}}, @m_mirred={0x1f0, 0x13, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x8, 0x3, 0x3, 0x400}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xbf, 0x5, 0x5, 0x46, 0x1}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xd, 0x10000000, 0xd71, 0x8}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10, 0x4a9, 0x1, 0x0, 0x1}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x4, 0x6, 0x2, 0xe7c6}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xa, 0x3, 0x7, 0xfffff800}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0xa69, 0x2, 0x9, 0x3}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x634c, 0x6, 0x8, 0x6}, 0x3, r4}}]}, {0xc2, 0x6, "041367fd5089195c3f81a3067d77a249644d02f30c4613e0df8255b46985d07b853517bbfa87cdb55105475faefbb508065319cd184f3c59824b41fe5e5250b9ce441a347d8355dda21508f8b4aa12c128b8f9df138f746b6480cc9f6918a69ed580ae7b539695a303f7c31ce8a74726fd87f6686b300231fd45a983d5567f830aadd01fe87c52cd4541219fcee2ad5e5ab975c5f74bf7f054ca570edb38653a7457d95061b21071286edd9519d282aa5896819b28f8cebc005cde8ac345"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0xf24, 0x1b, 0x0, 0x0, {{0xa}, {0xecc, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x90, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x0, 0xffff06de, 0x2, 0x10, 0xffffffff}, 0x6, 0xf7, [{0x7, 0x7, 0x5, 0x0, 0xb2, 0xf9b98c35}]}, [{0xf, 0x2, 0xdf48, 0x2, 0xf4b, 0x5}, {0x4c7, 0x2, 0x10, 0xfffffe00, 0x21e8, 0x1}, {0x0, 0x7, 0x80000000, 0x401, 0xfffffff8, 0x7f}, {0x0, 0xfffffff9, 0xffff, 0x9, 0x4, 0x5}, {0x4, 0x2c, 0xffff0001, 0x6, 0x10001, 0x3}, {0x7ff, 0xffff, 0x3, 0xd, 0x2, 0x7}, {0x23, 0x0, 0x55ea, 0x6f, 0x1, 0x4}, {0x8001, 0x3, 0x4, 0x6, 0x7, 0x2}, {0x100, 0x5, 0x7, 0x8, 0x2, 0x5}, {0x8, 0x8, 0x6, 0x8, 0x1, 0x3}, {0xfea, 0xd, 0x4, 0x7, 0x7, 0x3}, {0x5d9, 0x100, 0x7, 0xfffffff4, 0x6ce2, 0x6}, {0x9a1, 0x45dd1159, 0x4, 0x9, 0x9, 0x80000001}, {0xbb63, 0x8, 0x3, 0x0, 0x8c, 0x3d}, {0xffffffff, 0x7, 0x5, 0x0, 0x401, 0x9}, {0x6, 0x1, 0x3, 0x82, 0x1000, 0x100}, {0x277b, 0x3, 0xffffffff, 0xffffffff, 0x0, 0x9}, {0x1000, 0x0, 0x800, 0x3f4d1665, 0x9, 0xfffffff7}, {0x3, 0x5, 0x7fff, 0x100, 0x4}, {0xb70, 0x9, 0x80, 0x800, 0x4, 0x8f6}, {0x6, 0x5, 0x3d6, 0x80000001, 0x6, 0x87}, {0x3, 0x7, 0x8, 0x8, 0x1000, 0xbcf}, {0x8, 0x1ff, 0xfffffffd, 0xffff, 0x7ff, 0x8}, {0xa4, 0x5, 0x143, 0x1ff, 0x24, 0x3}, {0xd8, 0x5, 0x2, 0x1, 0x5, 0x10000}, {0x4, 0x0, 0x6, 0x7, 0x6, 0x1000}, {0x8, 0x2, 0x80, 0x0, 0x10}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x1}, {0x8, 0x5, 0xfffffc01, 0x4, 0x6, 0xffff561b}, {0x3, 0x10001, 0xd, 0x1, 0xffff0029, 0x8}, {0xfffffffb, 0x9ee, 0x8, 0x4, 0x9, 0x80000000}, {0xfffffffc, 0xfff, 0x7fff, 0x6, 0x80000001, 0x5}, {0x81, 0xbf69, 0x8, 0x0, 0x2, 0x9}, {0xda, 0x215, 0x800, 0x6, 0x8, 0xe}, {0x3, 0x101, 0x80000000, 0x0, 0x7ff, 0xfffffff5}, {0x3ff, 0x6, 0xfffffffa, 0x6, 0x10001, 0x3ff}, {0xffffffb3, 0xffffff7f, 0x5, 0x7, 0x4, 0x9}, {0xffffff7a, 0xa, 0xfffff800, 0x1, 0x5, 0x7}, {0x6, 0x4, 0x3, 0x2, 0x9, 0x100}, {0x6, 0x6, 0x268, 0x39, 0xc, 0x9}, {0x8000, 0x6, 0x2, 0x4, 0x0, 0x1}, {0x6, 0x8, 0x1f, 0x2, 0xc, 0x80000001}, {0x100, 0x2, 0x4, 0x200, 0x6, 0x401}, {0x5, 0xecb, 0x0, 0x3, 0x8, 0x4}, {0x1, 0x98a6, 0xe67, 0x49, 0x2c, 0x7f}, {0xa9b, 0x88, 0x2, 0xfffffff7, 0x7, 0x2}, {0xe, 0xfffffffd, 0x5, 0x3, 0x3, 0x3}, {0x4, 0x7, 0x2ff, 0x653a, 0x4, 0x7}, {0x3, 0x0, 0xec, 0x5, 0x3, 0x8}, {0x84, 0x5, 0x40, 0xffff2562, 0x9, 0x1}, {0xc23, 0x10000, 0x7fff, 0x5, 0x81, 0x6}, {0x3, 0x1, 0x1ff, 0x1ff, 0xfffffbff, 0x3}, {0x81, 0x400, 0x3, 0x4, 0x4, 0x5}, {0x4, 0x6, 0x2, 0x8, 0x2, 0x8}, {0x4, 0x3, 0x807f, 0x5, 0x4, 0x8}, {0x3ff, 0x82, 0x4, 0x7ff, 0x8, 0x1}, {0x4, 0xff0, 0xb, 0x9, 0x0, 0xc86}, {0x3, 0x5, 0xb, 0x7f, 0x4, 0xbfe}, {0x10001, 0x8a94, 0x80, 0xe6e, 0x9}, {0x5, 0xf, 0x7f, 0x5f, 0x6, 0x7}, {0xa, 0x6, 0x3, 0x3, 0x1, 0x101}, {0xed, 0x4, 0x6, 0xa6f, 0x7, 0x2}, {0x12a34356, 0x7fff, 0x8001, 0x1, 0x0, 0x9}, {0x4d, 0x8001, 0xe, 0x3, 0x8, 0x6}, {0x7fff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x2}, {0x7f, 0x2, 0x3603, 0xfffffffd, 0xd4, 0x3}, {0xf, 0x6, 0x8, 0x3, 0x2}, {0x4, 0x3, 0x4, 0x9, 0x80000000, 0xffff}, {0xc, 0x7, 0x9, 0x5, 0x5, 0x800}, {0x8, 0xa3c, 0x8001, 0xa, 0x8, 0x3}, {0x8, 0x6, 0x10000, 0x2, 0x3, 0x3}, {0x6, 0x6, 0x101, 0x5, 0x2140, 0x85}, {0x7, 0x37d2, 0x80, 0x9, 0xfff}, {0x2, 0x7ff, 0xfb8, 0x9, 0x6, 0x4}, {0x5, 0x3, 0x9, 0x5, 0x3, 0x2}, {0x9, 0x10, 0x9, 0x492e, 0x8000, 0x674}, {0x384, 0x96ad, 0x1, 0x6d, 0x7, 0xf0d}, {0x400, 0x401, 0x1, 0xc, 0x0, 0xfffffff2}, {0xff, 0x7ff, 0x8001, 0x89, 0x7f, 0xfffffffe}, {0x100, 0x6, 0xbb4, 0x9, 0x8, 0x8}, {0x7, 0xa08, 0x1, 0x6ba, 0x0, 0x7e000}, {0x8, 0x1000, 0x400, 0x5, 0x7ff, 0x9}, {0x3, 0x4, 0x5, 0x1, 0x794, 0x1}, {0x2, 0x7, 0x4, 0xffff3fea, 0x8, 0xfff}, {0x50, 0xa, 0xe6, 0x1, 0x5e946902, 0xfffffff8}, {0x7, 0x0, 0x7fffffff, 0x4, 0x81c3, 0x6}, {0x7, 0xe, 0x1, 0x1, 0xffff, 0x5}, {0x6, 0x9, 0x100, 0xa76, 0x6, 0x9}, {0xf, 0x5, 0x8, 0x401, 0x4, 0x6}, {0x5, 0x9e7b, 0x401, 0x1, 0xb28, 0x2800000}, {0xffff, 0x2, 0x8, 0x7, 0x6, 0x7}, {0x48000, 0x3, 0x8001, 0xfffffffc, 0x8b7f, 0x9ae1}, {0xffff, 0x4, 0x3, 0x3, 0x3ff}, {0x99, 0x4, 0xfffffffb, 0x10, 0x6, 0x7}, {0x401, 0x8, 0x7, 0x3ff, 0x2, 0x9}, {0x7, 0x7, 0x1, 0x8ab, 0xffff, 0x54}, {0x6, 0x0, 0x101, 0xa790, 0x3ac5}, {0x6, 0xa8b, 0x0, 0x5, 0x1e, 0xd9}, {0x7, 0xc, 0x12c, 0x1, 0x3, 0xe1a}, {0x3, 0x4, 0x2157, 0x0, 0x8, 0x400}, {0x1, 0x1ff, 0x3, 0xc624, 0x0, 0xffffffff}, {0xa, 0x5, 0xfffffffc, 0x5, 0x10, 0x6fd00}, {0x7, 0x7, 0x1, 0x6, 0x7fffffff, 0x8}, {0x3, 0x6, 0x6940, 0x2, 0xfffffffe, 0x7}, {0x6, 0x0, 0x40, 0x3, 0x1, 0xffff7fff}, {0x3, 0x8, 0x3, 0x3, 0x38, 0x78135ce9}, {0x2, 0x3, 0x5, 0x3, 0x5, 0xfffffffc}, {0x2, 0x4, 0x10, 0x3, 0x4, 0x98a3}, {0xc60, 0x7, 0x10, 0x9, 0xa58}, {0x4, 0x7fffffff, 0x3, 0x800, 0xbfcb, 0xfffffffb}, {0xb, 0x7fffffff, 0x7, 0x10001, 0x1ff, 0xe}, {0x8, 0x8, 0x0, 0x9, 0x800, 0x9}, {0x2, 0x5, 0x7f, 0x3, 0x6, 0x4}, {0x9, 0x124c719, 0xb, 0x40, 0xffffbc5a}, {0x2, 0xe4, 0x8580, 0x1c9a, 0x80000001, 0xa4}, {0x8, 0xffffffff, 0x0, 0x1000, 0x7800000, 0x2}, {0x9, 0x8, 0x6, 0xffffffff, 0x7, 0x7}, {0xa4, 0x8, 0x7f, 0x4d16, 0x4, 0x9c}, {0xb, 0xa, 0x1ea, 0x0, 0x0, 0x6}, {0x10, 0xffffffe0, 0x9, 0x774034c4, 0x10, 0x6}, {0x9, 0x32cf6796, 0xa32, 0x7, 0x2, 0x1ff}, {0x2, 0x1000, 0xf9, 0xfff, 0x0, 0x7f}, {0x400, 0x40, 0x81, 0x4, 0x0, 0x4}, {0x3, 0xf7e, 0x36d9, 0x5, 0x9, 0x8}, {0x9, 0x3, 0x4, 0x3, 0x3, 0x2}, {0x5, 0x29, 0x8, 0xd, 0x8, 0xfffffffd}, {0x102, 0x8, 0x6, 0x2, 0x1, 0x1}, {0x6, 0x2736, 0x8001, 0x8000, 0x0, 0x5}], [{0x6}, {0x7}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x997c79dac43770a0}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x6}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x4}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x217b27c509d70b3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x4}, {0x3, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x6}, {0x3, 0x1}, {0x2}, {0x1}, {0x5}, {0x5}, {0x5}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x97ca815828887cdf}, {0x3, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x1}]}}]}, {0x2e, 0x6, "0bd25ddc3b092ec0a84297278858c0ec9139ffd8718acd070f68bb8d964ec568e89cb6a2ac589d943778"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x4bb8}}, 0x20000800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x2, 0x2, 0x4, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) 244.151013ms ago: executing program 1 (id=4741): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x101}}, 0x0, 0x3bab}, &(0x7f0000000140)=0x90) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x1) ftruncate(r4, 0xffff) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) r5 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000280)={0x40002006}) io_setup(0x1, &(0x7f0000000b80)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) 102.516768ms ago: executing program 5 (id=4742): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, 0x0, &(0x7f0000000200)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000240)={0x0, 0xc}, 0x8) syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x400000) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000280)={@loopback, @rand_addr, 0x0}, &(0x7f00000002c0)=0xc) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r8}, 0x14) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x6}, 0x0) sync() socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 0s ago: executing program 4 (id=4743): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000005000000000000000104004e200023b0"], 0x0) kernel console output (not intermixed with test programs): T5911] usb 1-1: device descriptor read/64, error -71 [ 1356.973232][T16053] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1356.990189][T16053] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.055370][T16053] usb 6-1: config 0 descriptor?? [ 1357.108771][ T5911] usb 1-1: new low-speed USB device number 67 using dummy_hcd [ 1357.269843][ T5904] usb 3-1: usb_control_msg returned -32 [ 1357.286168][ T5904] usbtmc 3-1:16.0: can't read capabilities [ 1357.316550][ T5911] usb 1-1: device descriptor read/64, error -71 [ 1357.432139][ T5911] usb usb1-port1: attempt power cycle [ 1357.597560][T16053] redragon 0003:0C45:760B.0022: hidraw0: USB HID v0.02 Device [HID 0c45:760b] on usb-dummy_hcd.5-1/input0 [ 1357.815932][T16053] usb 6-1: USB disconnect, device number 7 [ 1357.848481][T21638] fido_id[21638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1357.867300][ T5911] usb 1-1: new low-speed USB device number 68 using dummy_hcd [ 1357.909826][ T5911] usb 1-1: device descriptor read/8, error -71 [ 1358.156336][ T5911] usb 1-1: new low-speed USB device number 69 using dummy_hcd [ 1358.197102][ T5911] usb 1-1: device descriptor read/8, error -71 [ 1358.316869][ T5911] usb usb1-port1: unable to enumerate USB device [ 1358.742456][T21651] netlink: 'syz.5.4276': attribute type 1 has an invalid length. [ 1358.786329][ T5911] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 1358.872150][T21643] IPVS: You probably need to specify IP address on multicast interface. [ 1358.881191][T21643] IPVS: Error connecting to the multicast addr [ 1358.948542][ T5911] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1358.966349][ T5911] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1358.991765][ T5911] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1359.068124][ T5911] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1359.079949][ T5911] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1359.093918][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1359.104066][ T5911] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1359.159416][ T5911] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1359.169460][ T5911] usb 5-1: Product: syz [ 1359.173871][ T5911] usb 5-1: Manufacturer: syz [ 1359.181010][ T5911] usb 5-1: SerialNumber: syz [ 1359.194125][T21583] usb 3-1: USB disconnect, device number 27 [ 1359.199685][ T5911] usb 5-1: config 0 descriptor?? [ 1359.216803][T21649] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1359.317280][ T5911] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1359.361668][ T5911] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1359.727680][T21666] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1359.855641][T21663] netlink: 136 bytes leftover after parsing attributes in process `syz.5.4277'. [ 1360.286533][T21583] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1360.460348][T21583] usb 2-1: Using ep0 maxpacket: 16 [ 1360.468537][T21583] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1360.478431][T21583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.554447][T21583] usb 2-1: config 0 descriptor?? [ 1360.655651][T21583] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1361.592212][T11866] usb 5-1: USB disconnect, device number 71 [ 1361.613529][T21668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.631188][T11866] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1361.688022][T21668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.716624][T21583] gspca_sonixj: reg_w1 err -71 [ 1363.722081][T21583] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1363.792044][T21583] usb 2-1: USB disconnect, device number 53 [ 1364.438410][T21700] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4289'. [ 1364.458880][T21700] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4289'. [ 1365.026549][T16053] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1365.328152][T21720] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4292'. [ 1365.338890][T16053] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1365.356520][T16053] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1365.369724][T16053] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1365.382075][T16053] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1365.589690][T16053] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1365.605231][T16053] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1365.622622][T16053] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1365.835609][T16053] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1365.890030][T16053] usb 1-1: Product: syz [ 1365.894465][T16053] usb 1-1: Manufacturer: syz [ 1365.925046][T16053] usb 1-1: SerialNumber: syz [ 1365.983291][T16053] usb 1-1: config 0 descriptor?? [ 1366.030079][T21708] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1366.053997][T16053] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1366.091590][T16053] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1366.106670][T21583] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1366.270923][T21583] usb 3-1: device descriptor read/64, error -71 [ 1366.441949][T21744] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1366.587098][T21583] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1366.855697][T21583] usb 3-1: device descriptor read/64, error -71 [ 1366.967339][T21583] usb usb3-port1: attempt power cycle [ 1367.346725][T21583] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1367.377621][T21583] usb 3-1: device descriptor read/8, error -71 [ 1367.656519][T21583] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1367.680025][T21583] usb 3-1: device descriptor read/8, error -71 [ 1367.828684][T21583] usb usb3-port1: unable to enumerate USB device [ 1367.839146][T16053] usb 1-1: USB disconnect, device number 70 [ 1367.865737][T16053] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1368.537558][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1368.544137][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.936591][ T5904] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1368.956492][T16053] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1369.141864][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 1369.161565][T16053] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.175978][ T5904] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 1369.193616][T16053] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1369.225322][ T5904] usb 3-1: config 0 has no interface number 0 [ 1369.247336][ T5904] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1369.252853][T16053] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1369.276404][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.286889][ T5904] usb 3-1: Product: syz [ 1369.291213][ T5904] usb 3-1: Manufacturer: syz [ 1369.294540][T16053] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.296035][ T5904] usb 3-1: SerialNumber: syz [ 1369.425924][T16053] usb 6-1: config 0 descriptor?? [ 1369.531261][ T5911] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1369.728532][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.740049][ T5911] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1369.753887][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.913257][ T5904] usb 3-1: config 0 descriptor?? [ 1369.918522][ T5911] usb 1-1: config 0 descriptor?? [ 1369.931070][ T5904] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1370.305012][ T5911] usbhid 1-1:0.0: can't add hid device: -71 [ 1370.312895][ T5911] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1370.321394][T16053] uclogic 0003:5543:0042.0023: No inputs registered, leaving [ 1370.338681][ T5911] usb 1-1: USB disconnect, device number 71 [ 1370.345217][T16053] uclogic 0003:5543:0042.0023: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.5-1/input0 [ 1370.847946][T11866] usb 6-1: USB disconnect, device number 8 [ 1371.080377][T21787] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1371.125748][T21787] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1371.255341][ T5904] gspca_topro: reg_w err -71 [ 1371.286589][ T5904] gspca_topro: Sensor soi763a [ 1371.306626][ T5904] usb 3-1: USB disconnect, device number 32 [ 1371.646565][T11866] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 1371.808429][T11866] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1371.834370][T11866] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1371.853487][T14380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1371.865521][T11866] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1371.899850][T14380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.901391][T11866] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1371.944692][T11866] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1371.963932][T11866] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1371.977144][T11866] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1372.033634][T11866] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1372.055259][T11866] usb 1-1: Product: syz [ 1372.065831][T11866] usb 1-1: Manufacturer: syz [ 1372.082974][T11866] usb 1-1: SerialNumber: syz [ 1372.111351][T11866] usb 1-1: config 0 descriptor?? [ 1372.130052][T21792] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1372.155385][T11866] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1372.188154][T11866] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1372.650348][T21816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.707595][T21816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.876768][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1373.166965][T21825] netem: change failed [ 1374.563390][ T30] audit: type=1326 audit(1749166125.412:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21836 comm="syz.4.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8cad8e929 code=0x7ffc0000 [ 1374.646026][ T5904] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1374.695463][ T30] audit: type=1326 audit(1749166125.412:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21836 comm="syz.4.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fa8cad8e929 code=0x7ffc0000 [ 1374.795519][ T30] audit: type=1326 audit(1749166125.422:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21836 comm="syz.4.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8cad8e929 code=0x7ffc0000 [ 1375.107626][ T5904] usb 3-1: config 0 has no interfaces? [ 1375.154578][ T9] usb 1-1: USB disconnect, device number 72 [ 1375.161870][ T5904] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1375.257982][ T9] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1375.287599][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.324276][ T30] audit: type=1326 audit(1749166125.422:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21836 comm="syz.4.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8cad8e929 code=0x7ffc0000 [ 1375.350826][ T5904] usb 3-1: Product: syz [ 1375.374858][ T5904] usb 3-1: Manufacturer: syz [ 1375.407257][ T5904] usb 3-1: SerialNumber: syz [ 1375.701239][ T9] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1375.926508][ T5904] usb 3-1: config 0 descriptor?? [ 1376.006035][ T9] usb 1-1: device descriptor read/64, error -71 [ 1376.356322][ T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1376.526363][ T9] usb 1-1: device descriptor read/64, error -71 [ 1376.665498][ T9] usb usb1-port1: attempt power cycle [ 1377.066063][ T9] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1377.111012][ T9] usb 1-1: device descriptor read/8, error -71 [ 1377.356338][ T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1377.378209][ T9] usb 1-1: device descriptor read/8, error -71 [ 1377.514951][ T9] usb usb1-port1: unable to enumerate USB device [ 1377.646453][ T5904] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1377.801672][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1377.812581][ T5904] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1377.827940][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.859028][ T5904] usb 2-1: config 0 descriptor?? [ 1377.932211][ T9] usb 3-1: USB disconnect, device number 33 [ 1378.601436][ T5904] lg-g15 0003:046D:C222.0024: unbalanced delimiter at end of report description [ 1378.704666][ T5904] lg-g15 0003:046D:C222.0024: probe with driver lg-g15 failed with error -22 [ 1378.761168][T21863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4336'. [ 1378.803637][T21863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4336'. [ 1378.906598][ T9] usb 2-1: USB disconnect, device number 54 [ 1380.168163][ T9] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 1380.240250][T21892] gretap0: entered promiscuous mode [ 1380.247488][T21892] gretap0: left promiscuous mode [ 1380.633984][ T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1380.642929][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1380.695997][ T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1380.741137][ T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1380.755058][ T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1380.775641][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1380.823647][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1380.834758][ T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1380.855053][ T9] usb 5-1: Product: syz [ 1380.994493][ T9] usb 5-1: Manufacturer: syz [ 1381.010820][ T9] usb 5-1: SerialNumber: syz [ 1381.070196][ T9] usb 5-1: config 0 descriptor?? [ 1381.093434][T21886] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1381.132028][ T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1381.379352][ T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1382.608552][T21904] trusted_key: encrypted_key: master key parameter '' is invalid [ 1382.842526][ T30] audit: type=1326 audit(1749166133.772:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21906 comm="syz.5.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597f58e929 code=0x7ffc0000 [ 1382.883175][ T30] audit: type=1326 audit(1749166133.772:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21906 comm="syz.5.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f597f58e929 code=0x7ffc0000 [ 1382.953931][T21914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1382.987411][ T30] audit: type=1326 audit(1749166133.772:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21906 comm="syz.5.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597f58e929 code=0x7ffc0000 [ 1383.040753][ T30] audit: type=1326 audit(1749166133.772:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21906 comm="syz.5.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f597f58e929 code=0x7ffc0000 [ 1383.126701][ T5904] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1383.149371][ T30] audit: type=1326 audit(1749166133.772:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21906 comm="syz.5.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597f58e929 code=0x7ffc0000 [ 1383.226527][T11866] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1383.259057][ T30] audit: type=1326 audit(1749166133.772:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21906 comm="syz.5.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f597f58e929 code=0x7ffc0000 [ 1383.282547][ T5904] usb 2-1: device descriptor read/64, error -71 [ 1383.378582][ T30] audit: type=1326 audit(1749166133.822:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21906 comm="syz.5.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597f58e929 code=0x7ffc0000 [ 1383.472948][T21785] usb 5-1: USB disconnect, device number 72 [ 1383.483000][T21785] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1383.497110][T11866] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.523313][ T30] audit: type=1326 audit(1749166133.822:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21906 comm="syz.5.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597f58e929 code=0x7ffc0000 [ 1383.548466][T11866] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1383.574671][ T5904] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1383.602793][T11866] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1383.621820][ T30] audit: type=1326 audit(1749166133.962:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21906 comm="syz.5.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f597f58e929 code=0x7ffc0000 [ 1383.645414][T11866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.712769][ T30] audit: type=1326 audit(1749166133.962:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21906 comm="syz.5.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597f58e929 code=0x7ffc0000 [ 1383.783090][ T5904] usb 2-1: device descriptor read/64, error -71 [ 1383.829822][T11866] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1383.946857][ T5904] usb usb2-port1: attempt power cycle [ 1383.963581][T11866] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1384.079001][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1384.144755][T21914] vlan0: entered promiscuous mode [ 1384.153267][T21914] bond0: (slave vlan0): Opening slave failed [ 1384.356484][ T5904] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1384.448053][ T5904] usb 2-1: device descriptor read/8, error -71 [ 1384.706445][ T5904] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1384.740544][ T5904] usb 2-1: device descriptor read/8, error -71 [ 1384.862387][ T5904] usb usb2-port1: unable to enumerate USB device [ 1384.873316][T21931] syzkaller1: entered promiscuous mode [ 1384.895708][T21931] syzkaller1: entered allmulticast mode [ 1386.227437][T21945] netem: incorrect ge model size [ 1386.246412][T21945] netem: change failed [ 1386.456669][ T5904] usb 3-1: USB disconnect, device number 34 [ 1387.136349][ T5904] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1387.319246][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1387.365958][ T5904] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 1387.392583][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1387.481686][ T5904] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 1387.524487][ T5904] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 1387.534280][T16875] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 1387.543870][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.561516][ T5904] usb 3-1: Product: syz [ 1387.578248][ T5904] usb 3-1: Manufacturer: syz [ 1387.593072][ T5904] usb 3-1: SerialNumber: syz [ 1387.620196][ T5904] usb 3-1: config 0 descriptor?? [ 1387.634568][ T5904] kvaser_usb 3-1:0.0: error -EMSGSIZE: Cannot get software info [ 1387.649650][ T5904] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1387.701154][T16875] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1387.709991][T16875] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1387.721731][T16875] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1387.733416][T16875] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1387.745040][T16875] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1387.759057][T16875] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1387.894163][T16875] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1387.941051][T16875] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1387.956446][T16875] usb 2-1: Product: syz [ 1387.960854][T16875] usb 2-1: Manufacturer: syz [ 1387.966867][T16875] usb 2-1: SerialNumber: syz [ 1387.986803][T16875] usb 2-1: config 0 descriptor?? [ 1388.043276][T21957] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1388.064740][T16875] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1388.076999][ T9] usb 3-1: USB disconnect, device number 35 [ 1388.127786][T16875] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1388.418037][ T5904] usb 2-1: USB disconnect, device number 59 [ 1388.505622][ T5904] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1388.728876][T16875] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 1388.866420][T16875] usb 3-1: device descriptor read/64, error -71 [ 1388.905344][T21978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.931117][T21978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.072424][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1389.106319][T16875] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 1389.142823][T21989] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4366'. [ 1389.256338][T16875] usb 3-1: device descriptor read/64, error -71 [ 1389.256406][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1389.283364][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1389.299077][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1389.308591][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.317247][T16062] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1389.340340][ T9] usb 6-1: config 0 descriptor?? [ 1389.380983][T16875] usb usb3-port1: attempt power cycle [ 1389.487511][T16062] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 1389.499091][T16062] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1389.532312][T16062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1389.546543][T16062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1389.560208][T16062] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1389.608514][T16062] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1389.621880][T16062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.630613][ T9] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1389.645713][T16062] usb 5-1: config 0 descriptor?? [ 1389.746467][T16875] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 1389.779432][T16875] usb 3-1: device descriptor read/8, error -71 [ 1390.072153][T16062] plantronics 0003:047F:FFFF.0025: reserved main item tag 0xd [ 1390.083135][T16062] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 1390.116840][T16875] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 1390.136774][T16062] plantronics 0003:047F:FFFF.0025: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1390.163113][T16875] usb 3-1: device descriptor read/8, error -71 [ 1390.175913][ T5904] usb 6-1: USB disconnect, device number 10 [ 1390.437369][T16875] usb usb3-port1: unable to enumerate USB device [ 1392.236061][T16062] usb 5-1: USB disconnect, device number 73 [ 1392.276383][T22019] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1392.298494][T22021] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4372'. [ 1392.358664][T22021] tipc: Started in network mode [ 1392.380952][T22021] tipc: Node identity 0000000000002d210000000000000001, cluster identity 4711 [ 1392.405724][T22021] tipc: Enabling of bearer rejected, failed to enable media [ 1393.666425][ T9] IPVS: starting estimator thread 0... [ 1393.776710][T22037] IPVS: using max 28 ests per chain, 67200 per kthread [ 1394.706342][T11866] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1394.868428][T11866] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1394.899988][T11866] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1394.925193][T11866] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1394.949193][T11866] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1394.962978][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1394.962998][ T30] audit: type=1804 audit(1749166145.882:2618): pid=22052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4381" name="/newroot/306/file1" dev="fuse" ino=1 res=1 errno=0 [ 1394.990994][T11866] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1395.004912][T11866] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1395.015457][T11866] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1395.024927][T11866] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1395.033993][T11866] usb 2-1: Product: syz [ 1395.043738][T11866] usb 2-1: Manufacturer: syz [ 1395.048638][T11866] usb 2-1: SerialNumber: syz [ 1395.067758][T11866] usb 2-1: config 0 descriptor?? [ 1395.073837][T22041] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1395.096605][T11866] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1395.137468][T11866] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1396.809596][T22082] CUSE: DEVNAME unspecified [ 1397.443512][T22085] binder: 22084:22085 ioctl c00c620f 200000000180 returned -22 [ 1397.460460][T22085] binder: 22084:22085 ioctl c0306201 200000001040 returned -14 [ 1397.494923][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-1) [ 1397.505602][T16053] usb 2-1: USB disconnect, device number 60 [ 1397.538304][T16053] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1398.757493][T22101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4391'. [ 1400.091278][T22113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4395'. [ 1400.100821][T22113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4395'. [ 1400.302474][T22117] vlan0: entered allmulticast mode [ 1400.311085][T22117] batadv0: entered allmulticast mode [ 1400.506303][T11866] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1400.696472][T11866] usb 2-1: Using ep0 maxpacket: 32 [ 1400.712296][T11866] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1400.761866][T11866] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1400.813697][T11866] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1400.827545][T22128] netlink: 576 bytes leftover after parsing attributes in process `syz.2.4401'. [ 1400.840687][T11866] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1400.863680][T11866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.897638][T11866] usb 2-1: config 0 descriptor?? [ 1401.150856][T11866] usbhid 2-1:0.0: can't add hid device: -71 [ 1401.193607][T11866] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1401.202766][T16875] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1401.217042][T11866] usb 2-1: USB disconnect, device number 61 [ 1401.383136][T16875] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1401.396645][T16875] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1401.418294][T16875] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1401.456282][T16875] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1401.496148][T16875] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1401.524527][T16875] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1401.543836][T16875] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1401.554143][T16875] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1401.572572][T16875] usb 6-1: Product: syz [ 1401.635509][T16875] usb 6-1: Manufacturer: syz [ 1401.655843][T16875] usb 6-1: SerialNumber: syz [ 1401.697441][T16875] usb 6-1: config 0 descriptor?? [ 1401.794197][T22130] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1401.804440][T16875] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1401.826760][T16875] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1401.966613][ T9] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1402.226484][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1402.253771][ T9] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 32 [ 1402.290999][ T9] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 1402.326506][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1402.349524][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1402.360419][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.368972][ T9] usb 1-1: Product: syz [ 1402.373596][ T9] usb 1-1: Manufacturer: syz [ 1402.379693][ T9] usb 1-1: SerialNumber: syz [ 1402.410979][T22137] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1402.431171][T22137] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1402.705346][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1402.840043][ T9] usb 1-1: USB disconnect, device number 77 [ 1404.044297][ T9] usb 6-1: USB disconnect, device number 11 [ 1404.061094][ T9] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1404.680866][T22176] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4410'. [ 1405.049544][T22182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4412'. [ 1408.271391][T22206] loop4: detected capacity change from 0 to 524255232 [ 1408.679199][T22209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4418'. [ 1408.745774][T22209] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4418'. [ 1408.978953][T22209] vlan3: entered allmulticast mode [ 1409.166000][T22211] syz.5.4419 (22211): drop_caches: 2 [ 1409.522822][T22222] binder: 22221:22222 ioctl c018620c 200000000380 returned -22 [ 1409.556545][ T9] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1409.763819][T16875] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1409.764342][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1409.803142][ T9] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 32 [ 1409.820825][ T9] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 1409.830987][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1409.842035][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1409.866032][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.902468][ T9] usb 1-1: Product: syz [ 1409.907003][ T9] usb 1-1: Manufacturer: syz [ 1409.912685][ T9] usb 1-1: SerialNumber: syz [ 1409.922652][T16875] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1409.932927][T16875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.941744][T16875] usb 3-1: Product: syz [ 1409.944484][T22213] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1409.956352][T16875] usb 3-1: Manufacturer: syz [ 1409.962373][T16875] usb 3-1: SerialNumber: syz [ 1409.971552][T16875] usb 3-1: config 0 descriptor?? [ 1409.977706][T22213] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1410.030962][T16875] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 1410.051818][T16875] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1410.080419][T16875] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1410.205869][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1410.236731][T16875] usb 3-1: USB disconnect, device number 40 [ 1410.254722][ T9] usb 1-1: USB disconnect, device number 78 [ 1410.693687][T22240] FAULT_INJECTION: forcing a failure. [ 1410.693687][T22240] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.715222][T22240] CPU: 1 UID: 0 PID: 22240 Comm: syz.5.4429 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1410.715254][T22240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1410.715268][T22240] Call Trace: [ 1410.715277][T22240] [ 1410.715287][T22240] dump_stack_lvl+0x189/0x250 [ 1410.715327][T22240] ? __pfx____ratelimit+0x10/0x10 [ 1410.715357][T22240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1410.715389][T22240] ? __pfx__printk+0x10/0x10 [ 1410.715418][T22240] ? ref_tracker_alloc+0x318/0x460 [ 1410.715452][T22240] should_fail_ex+0x414/0x560 [ 1410.715486][T22240] should_failslab+0xa8/0x100 [ 1410.715513][T22240] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1410.715535][T22240] ? skb_clone+0x212/0x3a0 [ 1410.715565][T22240] skb_clone+0x212/0x3a0 [ 1410.715594][T22240] __netlink_deliver_tap+0x404/0x850 [ 1410.715630][T22240] ? netlink_deliver_tap+0x2e/0x1b0 [ 1410.715654][T22240] netlink_deliver_tap+0x19c/0x1b0 [ 1410.715678][T22240] netlink_unicast+0x72f/0x8d0 [ 1410.715722][T22240] netlink_sendmsg+0x805/0xb30 [ 1410.715754][T22240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1410.715781][T22240] ? aa_sock_msg_perm+0x94/0x160 [ 1410.715813][T22240] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1410.715841][T22240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1410.715864][T22240] __sock_sendmsg+0x21c/0x270 [ 1410.715897][T22240] ____sys_sendmsg+0x505/0x830 [ 1410.715927][T22240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1410.715962][T22240] ? import_iovec+0x74/0xa0 [ 1410.715989][T22240] ___sys_sendmsg+0x21f/0x2a0 [ 1410.716016][T22240] ? __pfx____sys_sendmsg+0x10/0x10 [ 1410.716079][T22240] ? __fget_files+0x2a/0x420 [ 1410.716103][T22240] ? __fget_files+0x3a0/0x420 [ 1410.716140][T22240] __x64_sys_sendmsg+0x19b/0x260 [ 1410.716171][T22240] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1410.716212][T22240] ? __pfx_ksys_write+0x10/0x10 [ 1410.716231][T22240] ? rcu_is_watching+0x15/0xb0 [ 1410.716255][T22240] ? do_syscall_64+0xbe/0x3b0 [ 1410.716287][T22240] do_syscall_64+0xfa/0x3b0 [ 1410.716313][T22240] ? lockdep_hardirqs_on+0x9c/0x150 [ 1410.716340][T22240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.716361][T22240] ? clear_bhb_loop+0x60/0xb0 [ 1410.716387][T22240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.716407][T22240] RIP: 0033:0x7f597f58e929 [ 1410.716427][T22240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1410.716445][T22240] RSP: 002b:00007f598035c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1410.716466][T22240] RAX: ffffffffffffffda RBX: 00007f597f7b5fa0 RCX: 00007f597f58e929 [ 1410.716482][T22240] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1410.716496][T22240] RBP: 00007f598035c090 R08: 0000000000000000 R09: 0000000000000000 [ 1410.716509][T22240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1410.716522][T22240] R13: 0000000000000000 R14: 00007f597f7b5fa0 R15: 00007f597f8dfa28 [ 1410.716555][T22240] [ 1411.539023][T13213] Bluetooth: hci4: command 0x0406 tx timeout [ 1411.800002][T22247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4430'. [ 1411.996838][T22247] vlan2: entered promiscuous mode [ 1412.746292][T16875] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 1412.918904][T16875] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1412.928842][T16875] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1412.941977][T16875] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1412.961433][T16875] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1413.031834][T16875] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1413.047192][T16875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1413.079392][T16875] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1413.089124][T16875] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1413.098175][T16875] usb 1-1: Product: syz [ 1413.103517][T16875] usb 1-1: Manufacturer: syz [ 1413.110555][T16875] usb 1-1: SerialNumber: syz [ 1413.184900][T16875] usb 1-1: config 0 descriptor?? [ 1413.335961][T22266] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1413.392594][T16875] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1413.516460][T16062] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1413.548086][T16875] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1413.708852][T16062] usb 3-1: config 0 has no interfaces? [ 1413.724709][T16062] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1413.735134][T16062] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.751286][T16062] usb 3-1: Product: syz [ 1413.760322][T16062] usb 3-1: Manufacturer: syz [ 1413.774141][T16062] usb 3-1: SerialNumber: syz [ 1413.846879][T16062] usb 3-1: config 0 descriptor?? [ 1413.930428][T22260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4434'. [ 1413.992668][T22262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4434'. [ 1414.245050][T22286] sg_write: data in/out 830110031/475 bytes for SCSI command 0x0-- guessing data in; [ 1414.245050][T22286] program syz.4.4440 not setting count and/or reply_len properly [ 1414.265378][T22286] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4440'. [ 1414.275219][T22286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4440'. [ 1414.295564][T22286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4440'. [ 1414.476357][T22274] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 1414.487774][T14378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1414.495649][T14378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1415.106441][T16053] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1415.299593][T16053] usb 5-1: Using ep0 maxpacket: 32 [ 1415.314714][T16053] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.362006][T16053] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1415.374109][T16053] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.385421][T16053] usb 5-1: Product: syz [ 1415.399815][T16053] usb 5-1: Manufacturer: syz [ 1415.424579][T16053] usb 5-1: SerialNumber: syz [ 1415.440802][T16053] usb 5-1: config 0 descriptor?? [ 1415.464230][T16053] etas_es58x 5-1:0.0: Starting syz syz (Serial Number syz) [ 1415.557302][T16053] usb 1-1: USB disconnect, device number 79 [ 1415.581009][T16053] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1415.791274][T22308] FAULT_INJECTION: forcing a failure. [ 1415.791274][T22308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1415.846409][T22308] CPU: 1 UID: 0 PID: 22308 Comm: syz.1.4445 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1415.846444][T22308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1415.846458][T22308] Call Trace: [ 1415.846468][T22308] [ 1415.846478][T22308] dump_stack_lvl+0x189/0x250 [ 1415.846520][T22308] ? __pfx____ratelimit+0x10/0x10 [ 1415.846551][T22308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1415.846587][T22308] ? __pfx__printk+0x10/0x10 [ 1415.846751][T22308] ? __might_fault+0xb0/0x130 [ 1415.846788][T22308] should_fail_ex+0x414/0x560 [ 1415.846826][T22308] _copy_from_user+0x2d/0xb0 [ 1415.846852][T22308] ___sys_sendmsg+0x158/0x2a0 [ 1415.846877][T22308] ? __pfx____sys_sendmsg+0x10/0x10 [ 1415.846935][T22308] ? __fget_files+0x2a/0x420 [ 1415.846955][T22308] ? __fget_files+0x3a0/0x420 [ 1415.846983][T22308] __x64_sys_sendmsg+0x19b/0x260 [ 1415.847003][T22308] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1415.847029][T22308] ? __pfx_ksys_write+0x10/0x10 [ 1415.847044][T22308] ? rcu_is_watching+0x15/0xb0 [ 1415.847064][T22308] ? do_syscall_64+0xbe/0x3b0 [ 1415.847097][T22308] do_syscall_64+0xfa/0x3b0 [ 1415.847121][T22308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.847137][T22308] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1415.847154][T22308] ? clear_bhb_loop+0x60/0xb0 [ 1415.847174][T22308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.847190][T22308] RIP: 0033:0x7f211798e929 [ 1415.847206][T22308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1415.847220][T22308] RSP: 002b:00007f2118756038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1415.847238][T22308] RAX: ffffffffffffffda RBX: 00007f2117bb5fa0 RCX: 00007f211798e929 [ 1415.847251][T22308] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1415.847262][T22308] RBP: 00007f2118756090 R08: 0000000000000000 R09: 0000000000000000 [ 1415.847273][T22308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1415.847283][T22308] R13: 0000000000000000 R14: 00007f2117bb5fa0 R15: 00007f2117cdfa28 [ 1415.847307][T22308] [ 1416.265542][T16053] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1416.311347][T16875] usb 3-1: USB disconnect, device number 41 [ 1416.547320][T16053] usb 1-1: config 0 has no interfaces? [ 1416.653330][T16053] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1416.685730][T16053] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.706361][ T5904] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1416.729521][T16053] usb 1-1: Product: syz [ 1416.752703][T16053] usb 1-1: Manufacturer: syz [ 1416.780690][T16053] usb 1-1: SerialNumber: syz [ 1416.822033][T16053] usb 1-1: config 0 descriptor?? [ 1416.880695][ T5904] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1416.944561][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.023859][ T5904] usb 2-1: Product: syz [ 1417.036465][ T5904] usb 2-1: Manufacturer: syz [ 1417.047036][ T5904] usb 2-1: SerialNumber: syz [ 1417.095077][ T5904] usb 2-1: config 0 descriptor?? [ 1417.125511][ T5904] hso 2-1:0.0: Not our interface [ 1417.131922][ T5904] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1417.335069][T22310] netlink: 'syz.1.4447': attribute type 2 has an invalid length. [ 1417.355633][T22310] lm;Ê-: entered promiscuous mode [ 1417.375126][T16062] usb 2-1: USB disconnect, device number 62 [ 1418.021091][T22324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4453'. [ 1418.104437][T22324] vlan0: entered promiscuous mode [ 1418.421820][ T5904] usb 5-1: USB disconnect, device number 74 [ 1418.970476][T11866] usb 1-1: USB disconnect, device number 80 [ 1418.976996][ T5904] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1419.188746][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1419.230983][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1419.248467][ T5904] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1419.285035][ T5904] usb 5-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 1419.318926][ T5904] usb 5-1: Manufacturer: syz [ 1419.334746][ T5904] usb 5-1: config 0 descriptor?? [ 1419.391594][ T5904] hub 5-1:0.0: USB hub found [ 1419.586389][ T5904] hub 5-1:0.0: 1 port detected [ 1420.218339][ T5904] hub 5-1:0.0: activate --> -90 [ 1420.580733][T22365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4463'. [ 1420.638540][ T5904] usb 5-1-port1: cannot reset (err = -71) [ 1420.640265][ T9] usb 5-1: USB disconnect, device number 75 [ 1420.649535][ T5904] usb 5-1-port1: attempt power cycle [ 1420.660521][T22361] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4460'. [ 1420.970544][ T30] audit: type=1326 audit(1749166171.902:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22371 comm="syz.1.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211798e929 code=0x7ffc0000 [ 1421.091132][ T30] audit: type=1326 audit(1749166171.902:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22371 comm="syz.1.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f211798e929 code=0x7ffc0000 [ 1421.166968][ T30] audit: type=1326 audit(1749166171.902:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22371 comm="syz.1.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211798e929 code=0x7ffc0000 [ 1421.338030][T22377] vlan0: entered allmulticast mode [ 1421.460423][ T30] audit: type=1326 audit(1749166171.902:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22371 comm="syz.1.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f211798e929 code=0x7ffc0000 [ 1421.484612][ C1] vkms_vblank_simulate: vblank timer overrun [ 1421.514787][ T30] audit: type=1326 audit(1749166171.902:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22371 comm="syz.1.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211798e929 code=0x7ffc0000 [ 1421.538432][ C1] vkms_vblank_simulate: vblank timer overrun [ 1421.546955][ T30] audit: type=1326 audit(1749166171.902:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22371 comm="syz.1.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f211798e929 code=0x7ffc0000 [ 1421.569862][ C1] vkms_vblank_simulate: vblank timer overrun [ 1421.578420][ T30] audit: type=1326 audit(1749166171.932:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22371 comm="syz.1.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211798e929 code=0x7ffc0000 [ 1421.601001][ C1] vkms_vblank_simulate: vblank timer overrun [ 1421.609634][ T30] audit: type=1326 audit(1749166171.932:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22371 comm="syz.1.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211798e929 code=0x7ffc0000 [ 1421.634410][ T30] audit: type=1326 audit(1749166172.052:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22371 comm="syz.1.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f211798e929 code=0x7ffc0000 [ 1421.690223][T16875] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1421.708950][ T30] audit: type=1326 audit(1749166172.052:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22371 comm="syz.1.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211798e929 code=0x7ffc0000 [ 1421.859482][T22386] program syz.2.4470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1421.871917][T16875] usb 5-1: config 0 has no interfaces? [ 1421.883145][T16875] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1421.893181][T16875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.901708][T16875] usb 5-1: Product: syz [ 1421.907622][T16875] usb 5-1: Manufacturer: syz [ 1421.922566][T16875] usb 5-1: SerialNumber: syz [ 1421.960937][T16875] usb 5-1: config 0 descriptor?? [ 1422.461102][T16875] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1422.771270][T16875] usb 3-1: config 0 has no interfaces? [ 1422.785788][T16875] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1422.797344][T16875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.805827][T16875] usb 3-1: Product: syz [ 1422.816002][T16875] usb 3-1: Manufacturer: syz [ 1422.821078][T16875] usb 3-1: SerialNumber: syz [ 1422.834569][T16875] usb 3-1: config 0 descriptor?? [ 1423.486427][T16053] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1423.586648][T22414] input: syz0 as /devices/virtual/input/input83 [ 1424.338536][T16053] usb 1-1: config 0 has no interfaces? [ 1424.437617][T16053] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1424.483429][T16053] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.493644][T16053] usb 1-1: Product: syz [ 1424.501383][T16053] usb 1-1: Manufacturer: syz [ 1424.508019][T16053] usb 1-1: SerialNumber: syz [ 1424.520680][T16053] usb 1-1: config 0 descriptor?? [ 1425.053331][T22407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.066887][T22407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.352937][T16062] usb 3-1: USB disconnect, device number 42 [ 1425.500825][T22416] netlink: 'syz.2.4479': attribute type 11 has an invalid length. [ 1425.560219][T22416] netlink: 'syz.2.4479': attribute type 11 has an invalid length. [ 1425.560329][T22416] netlink: 'syz.2.4479': attribute type 11 has an invalid length. [ 1425.560429][T22416] netlink: 'syz.2.4479': attribute type 11 has an invalid length. [ 1425.560534][T22416] netlink: 'syz.2.4479': attribute type 11 has an invalid length. [ 1425.562645][T22416] netlink: 'syz.2.4479': attribute type 11 has an invalid length. [ 1425.562791][T22416] netlink: 'syz.2.4479': attribute type 11 has an invalid length. [ 1425.562897][T22416] netlink: 'syz.2.4479': attribute type 11 has an invalid length. [ 1425.563001][T22416] netlink: 'syz.2.4479': attribute type 11 has an invalid length. [ 1425.563102][T22416] netlink: 'syz.2.4479': attribute type 11 has an invalid length. [ 1425.714166][T22421] program syz.5.4480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1425.834670][T16062] usb 5-1: USB disconnect, device number 80 [ 1425.835546][T22418] tty tty2: ldisc open failed (-12), clearing slot 1 [ 1426.589471][T22436] input: syz0 as /devices/virtual/input/input84 [ 1426.916031][T16062] usb 1-1: USB disconnect, device number 81 [ 1428.126333][T16875] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1428.417161][T22454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4491'. [ 1428.448693][T16875] usb 3-1: config 0 has no interfaces? [ 1428.479218][T16875] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1428.517337][T16875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.556151][T16875] usb 3-1: Product: syz [ 1428.560515][T16875] usb 3-1: Manufacturer: syz [ 1428.565247][T16875] usb 3-1: SerialNumber: syz [ 1428.686388][T16062] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1428.725665][T16875] usb 3-1: config 0 descriptor?? [ 1428.864999][T16062] usb 2-1: Using ep0 maxpacket: 16 [ 1428.874029][T16062] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1428.909310][T16062] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1428.936738][T16062] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1428.951979][T16062] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1428.976754][T16062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.039062][T16062] usb 2-1: config 0 descriptor?? [ 1429.261078][T22454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.583305][T22454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1429.844167][T16062] hid (null): global environment stack underflow [ 1429.909760][T16062] hid (null): usage index exceeded [ 1429.934521][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1429.941209][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1430.170813][T22468] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4494'. [ 1430.192846][T22468] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4494'. [ 1430.400451][T22467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.433904][T22472] netlink: 'syz.0.4496': attribute type 1 has an invalid length. [ 1430.612231][T22467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.718363][ T5911] usb 3-1: USB disconnect, device number 43 [ 1430.943254][T22479] loop6: detected capacity change from 0 to 7 [ 1430.971115][T22479] Dev loop6: unable to read RDB block 7 [ 1430.991871][T22479] loop6: AHDI p1 p2 p3 [ 1431.072310][T22479] loop6: partition table partially beyond EOD, truncated [ 1431.107929][T22467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.125687][T22479] loop6: p1 start 926365495 is beyond EOD, truncated [ 1431.144193][T22479] loop6: p2 size 116 extends beyond EOD, truncated [ 1431.154790][T22467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.211019][T22467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.275503][T22467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.381758][T22484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4500'. [ 1431.390976][T22484] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4500'. [ 1431.483417][T22484] vlan0: entered allmulticast mode [ 1431.496965][T22484] macvtap0: entered allmulticast mode [ 1431.682840][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1432.024423][T22491] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4503'. [ 1432.196620][T16875] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1432.359992][T16875] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1432.370064][T16875] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1432.422994][T16875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1432.439783][T16875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1432.453721][T16875] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1432.473895][T16875] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1432.491237][T16875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.505676][T16875] usb 3-1: config 0 descriptor?? [ 1432.566551][ T5904] usb 2-1: USB disconnect, device number 63 [ 1432.669450][ T5911] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 1432.870176][ T5911] usb 6-1: device descriptor read/64, error -71 [ 1432.928071][T16875] plantronics 0003:047F:FFFF.0027: reserved main item tag 0xd [ 1432.990836][T16875] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 1433.012771][T16875] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1433.286556][ T5911] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 1433.511086][ T5911] usb 6-1: device descriptor read/64, error -71 [ 1433.629786][ T5911] usb usb6-port1: attempt power cycle [ 1433.756430][T16062] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1434.272086][ T5911] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 1434.304150][T22513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1434.330075][T22513] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1434.365882][ T5911] usb 6-1: device descriptor read/8, error -71 [ 1434.392118][T16062] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1434.405940][T16062] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1434.477902][T16062] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1434.719627][T16062] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1434.778598][T16062] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.836556][ T5911] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 1434.858999][ T5911] usb 6-1: device descriptor read/8, error -71 [ 1434.871778][T16062] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1434.892204][T16062] usb 1-1: invalid MIDI out EP 0 [ 1434.950182][T16053] usb 3-1: USB disconnect, device number 44 [ 1434.976663][ T5911] usb usb6-port1: unable to enumerate USB device [ 1435.290902][T16062] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1435.991188][T22529] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4514'. [ 1436.038443][T22530] vivid-000: disconnect [ 1436.045912][T22526] vivid-000: reconnect [ 1436.206498][ T5904] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1436.382350][ T5904] usb 6-1: config 0 has no interfaces? [ 1436.397374][ T5904] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1436.406881][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.416566][ T5904] usb 6-1: Product: syz [ 1436.436593][ T5904] usb 6-1: Manufacturer: syz [ 1436.441585][ T5904] usb 6-1: SerialNumber: syz [ 1436.479083][ T5904] usb 6-1: config 0 descriptor?? [ 1436.746543][T16062] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1436.766331][T16053] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1436.916745][T16062] usb 2-1: Using ep0 maxpacket: 8 [ 1436.923984][T16062] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1436.933587][T16062] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1436.949286][T16053] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1436.983930][T16053] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.010098][T16062] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1437.041452][T16053] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1437.073686][T16062] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1437.104239][T16053] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1437.119047][T16062] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1437.138755][T16053] usb 5-1: Manufacturer: syz [ 1437.430753][T16053] usb 5-1: config 0 descriptor?? [ 1437.443312][T16062] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1437.540759][T16062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.668546][T16053] rc_core: IR keymap rc-hauppauge not found [ 1437.674665][T16053] Registered IR keymap rc-empty [ 1437.687238][T16053] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1437.716287][T16875] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1437.726622][T16053] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input86 [ 1437.776828][T16062] usb 2-1: GET_CAPABILITIES returned 0 [ 1437.782482][T16062] usbtmc 2-1:16.0: can't read capabilities [ 1437.816713][ T5904] usb 1-1: USB disconnect, device number 82 [ 1437.825547][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 1437.836141][T22497] delete_channel: no stack [ 1437.867213][T16053] usb 5-1: USB disconnect, device number 81 [ 1437.886531][T16875] usb 3-1: Using ep0 maxpacket: 16 [ 1437.897677][T16875] usb 3-1: config 0 has no interfaces? [ 1437.905995][T16875] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1437.971020][T16875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.996779][T16062] usb 2-1: USB disconnect, device number 64 [ 1438.048817][T16875] usb 3-1: config 0 descriptor?? [ 1438.326367][T16875] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 1438.498650][T16875] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1438.508916][T16875] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1438.535775][T16875] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1438.555672][T16875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.826275][T16875] usb 1-1: GET_CAPABILITIES returned 0 [ 1438.835207][T16875] usbtmc 1-1:16.0: can't read capabilities [ 1439.176609][T16875] usb 6-1: USB disconnect, device number 16 [ 1439.229773][T16053] usb 1-1: USB disconnect, device number 83 [ 1439.443815][T22566] vivid-000: disconnect [ 1439.461473][T22562] vivid-000: reconnect [ 1439.873596][T22572] input: syz1 as /devices/virtual/input/input87 [ 1440.479719][T16875] usb 3-1: USB disconnect, device number 45 [ 1440.542219][T22588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4529'. [ 1440.709866][T22590] FAULT_INJECTION: forcing a failure. [ 1440.709866][T22590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1440.756027][T22590] CPU: 1 UID: 0 PID: 22590 Comm: syz.5.4532 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1440.756058][T22590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1440.756073][T22590] Call Trace: [ 1440.756082][T22590] [ 1440.756092][T22590] dump_stack_lvl+0x189/0x250 [ 1440.756130][T22590] ? __pfx____ratelimit+0x10/0x10 [ 1440.756163][T22590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1440.756194][T22590] ? __pfx__printk+0x10/0x10 [ 1440.756216][T22590] ? __might_fault+0xb0/0x130 [ 1440.756250][T22590] should_fail_ex+0x414/0x560 [ 1440.756283][T22590] _copy_from_user+0x2d/0xb0 [ 1440.756313][T22590] kstrtouint_from_user+0xc4/0x170 [ 1440.756346][T22590] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1440.756395][T22590] proc_fail_nth_write+0x88/0x240 [ 1440.756422][T22590] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1440.756455][T22590] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1440.756482][T22590] vfs_write+0x27e/0xa90 [ 1440.756513][T22590] ? __pfx_vfs_write+0x10/0x10 [ 1440.756535][T22590] ? __fget_files+0x2a/0x420 [ 1440.756565][T22590] ? __fget_files+0x3a0/0x420 [ 1440.756587][T22590] ? __fget_files+0x2a/0x420 [ 1440.756620][T22590] ksys_write+0x145/0x250 [ 1440.756639][T22590] ? __fget_files+0x3a0/0x420 [ 1440.756665][T22590] ? __pfx_ksys_write+0x10/0x10 [ 1440.756690][T22590] ? do_syscall_64+0xbe/0x3b0 [ 1440.756723][T22590] do_syscall_64+0xfa/0x3b0 [ 1440.756749][T22590] ? lockdep_hardirqs_on+0x9c/0x150 [ 1440.756775][T22590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.756796][T22590] ? clear_bhb_loop+0x60/0xb0 [ 1440.756822][T22590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.756842][T22590] RIP: 0033:0x7f597f58d3df [ 1440.756861][T22590] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1440.756880][T22590] RSP: 002b:00007f598035c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1440.756902][T22590] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f597f58d3df [ 1440.756916][T22590] RDX: 0000000000000001 RSI: 00007f598035c0a0 RDI: 0000000000000004 [ 1440.756928][T22590] RBP: 00007f598035c090 R08: 0000000000000000 R09: 0000000000000000 [ 1440.756941][T22590] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1440.756952][T22590] R13: 0000000000000000 R14: 00007f597f7b5fa0 R15: 00007f597f8dfa28 [ 1440.756983][T22590] [ 1440.993176][ C1] vkms_vblank_simulate: vblank timer overrun [ 1441.556695][T16062] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1441.719019][T16062] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1441.753206][T16062] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1441.804924][T16062] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1441.814843][T16062] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.858964][T22602] vivid-000: disconnect [ 1441.861729][T16062] usb 6-1: Product: syz [ 1441.871877][T16062] usb 6-1: Manufacturer: syz [ 1441.886351][T16062] usb 6-1: SerialNumber: syz [ 1441.887136][T22600] vivid-000: reconnect [ 1441.915592][T16062] usb 6-1: config 0 descriptor?? [ 1441.949730][T16062] usb 6-1: selecting invalid altsetting 0 [ 1442.202967][T22596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.253288][T22596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.303113][T16053] usb 6-1: USB disconnect, device number 17 [ 1442.459750][T22610] FAULT_INJECTION: forcing a failure. [ 1442.459750][T22610] name failslab, interval 1, probability 0, space 0, times 0 [ 1442.473402][T22610] CPU: 0 UID: 0 PID: 22610 Comm: syz.2.4540 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1442.473432][T22610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1442.473446][T22610] Call Trace: [ 1442.473455][T22610] [ 1442.473465][T22610] dump_stack_lvl+0x189/0x250 [ 1442.473504][T22610] ? __pfx____ratelimit+0x10/0x10 [ 1442.473534][T22610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1442.473566][T22610] ? __pfx__printk+0x10/0x10 [ 1442.473592][T22610] ? __pfx___might_resched+0x10/0x10 [ 1442.473613][T22610] ? fs_reclaim_acquire+0x7d/0x100 [ 1442.473644][T22610] should_fail_ex+0x414/0x560 [ 1442.473678][T22610] should_failslab+0xa8/0x100 [ 1442.473704][T22610] __kmalloc_noprof+0xcb/0x4f0 [ 1442.473725][T22610] ? tomoyo_encode+0x28b/0x550 [ 1442.473761][T22610] tomoyo_encode+0x28b/0x550 [ 1442.473798][T22610] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1442.473841][T22610] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1442.473867][T22610] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1442.473895][T22610] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1442.473940][T22610] ? __pfx___schedule+0x10/0x10 [ 1442.473979][T22610] ? __lock_acquire+0xab9/0xd20 [ 1442.474037][T22610] ? __fget_files+0x2a/0x420 [ 1442.474075][T22610] ? __fget_files+0x2a/0x420 [ 1442.474098][T22610] ? __fget_files+0x3a0/0x420 [ 1442.474120][T22610] ? __fget_files+0x2a/0x420 [ 1442.474149][T22610] security_file_ioctl+0xcb/0x2d0 [ 1442.474247][T22610] __se_sys_ioctl+0x47/0x170 [ 1442.474282][T22610] do_syscall_64+0xfa/0x3b0 [ 1442.474311][T22610] ? lockdep_hardirqs_on+0x9c/0x150 [ 1442.474337][T22610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.474358][T22610] ? clear_bhb_loop+0x60/0xb0 [ 1442.474384][T22610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.474405][T22610] RIP: 0033:0x7fee6c78e929 [ 1442.474425][T22610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1442.474442][T22610] RSP: 002b:00007fee6a5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1442.474465][T22610] RAX: ffffffffffffffda RBX: 00007fee6c9b5fa0 RCX: 00007fee6c78e929 [ 1442.474481][T22610] RDX: 0000200000000000 RSI: 00000000c008561b RDI: 0000000000000003 [ 1442.474495][T22610] RBP: 00007fee6a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1442.474509][T22610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1442.474521][T22610] R13: 0000000000000000 R14: 00007fee6c9b5fa0 R15: 00007fee6cadfa28 [ 1442.474554][T22610] [ 1442.474578][T22610] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1442.566388][ T5904] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 1442.756910][T16053] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1442.936868][T16053] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1442.958101][T16053] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1442.985067][ T5904] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1442.990432][T16053] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1443.004692][ T5904] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1443.023997][T16053] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1443.030814][ T5904] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1443.042080][T16053] usb 6-1: Product: syz [ 1443.042114][T16053] usb 6-1: Manufacturer: syz [ 1443.042130][T16053] usb 6-1: SerialNumber: syz [ 1443.057958][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.066306][T22616] FAULT_INJECTION: forcing a failure. [ 1443.066306][T22616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1443.067317][T16053] usb 6-1: config 0 descriptor?? [ 1443.086361][T22616] CPU: 1 UID: 0 PID: 22616 Comm: syz.2.4542 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1443.086389][T22616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1443.086402][T22616] Call Trace: [ 1443.086411][T22616] [ 1443.086419][T22616] dump_stack_lvl+0x189/0x250 [ 1443.086457][T22616] ? __pfx____ratelimit+0x10/0x10 [ 1443.086484][T22616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1443.086514][T22616] ? __pfx__printk+0x10/0x10 [ 1443.086532][T22616] ? __might_fault+0xb0/0x130 [ 1443.086558][T22616] should_fail_ex+0x414/0x560 [ 1443.086589][T22616] fpu__restore_sig+0x1bb/0x1100 [ 1443.086620][T22616] ? __lock_acquire+0xab9/0xd20 [ 1443.086654][T22616] ? __pfx_fpu__restore_sig+0x10/0x10 [ 1443.086735][T22616] __ia32_sys_rt_sigreturn+0x661/0x7b0 [ 1443.086764][T22616] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1443.086800][T22616] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 1443.086859][T22616] ? __task_pid_nr_ns+0x28/0x470 [ 1443.086888][T22616] ? do_syscall_64+0xbe/0x3b0 [ 1443.086921][T22616] do_syscall_64+0xfa/0x3b0 [ 1443.086951][T22616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.086970][T22616] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1443.086991][T22616] ? clear_bhb_loop+0x60/0xb0 [ 1443.087016][T22616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.087036][T22616] RIP: 0033:0x7fee6c78e927 [ 1443.087055][T22616] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1443.087073][T22616] RSP: 002b:00007fee6a5f6038 EFLAGS: 00000246 [ 1443.087093][T22616] RAX: 0000000000000147 RBX: 00007fee6c9b5fa0 RCX: 00007fee6c78e929 [ 1443.087109][T22616] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 1443.087122][T22616] RBP: 00007fee6a5f6090 R08: 0000000000000004 R09: 0000000000000001 [ 1443.087146][T22616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1443.087158][T22616] R13: 0000000000000000 R14: 00007fee6c9b5fa0 R15: 00007fee6cadfa28 [ 1443.087189][T22616] [ 1443.096659][T16053] usb 6-1: selecting invalid altsetting 0 [ 1443.291279][ T5904] usb 1-1: GET_CAPABILITIES returned 0 [ 1443.351467][ T5904] usbtmc 1-1:16.0: can't read capabilities [ 1443.359355][T22621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1443.525325][ T5904] usb 1-1: USB disconnect, device number 84 [ 1443.616634][T16053] usb 6-1: USB disconnect, device number 18 [ 1443.716315][T16875] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1443.878970][T16875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1443.896564][T16875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1443.907512][T16875] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1443.925183][T16875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.955339][T16875] usb 3-1: config 0 descriptor?? [ 1444.186029][T22624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1444.227864][T22624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1444.422716][T16053] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 1444.596390][T16875] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 1444.607199][T16875] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 1444.650549][T16875] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 1444.658529][T16875] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 1444.669298][T16875] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 1444.704323][T16875] cm6533_jd 0003:0D8C:0022.0028: No inputs registered, leaving [ 1444.734437][T16875] cm6533_jd 0003:0D8C:0022.0028: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1444.756711][T16053] usb 6-1: device descriptor read/64, error -71 [ 1444.811258][T16062] usb 3-1: USB disconnect, device number 46 [ 1445.030521][T16053] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 1445.071637][T22637] fido_id[22637]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1445.200128][T16053] usb 6-1: device descriptor read/64, error -71 [ 1445.316896][T16053] usb usb6-port1: attempt power cycle [ 1445.998614][T16053] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 1446.097087][T16053] usb 6-1: device descriptor read/8, error -71 [ 1446.306322][T11866] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1446.442750][T16053] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 1446.475374][T11866] usb 3-1: config 0 has no interfaces? [ 1446.502630][T11866] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1446.512611][T11866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.527041][T11866] usb 3-1: Product: syz [ 1446.560484][T11866] usb 3-1: Manufacturer: syz [ 1446.569120][T16053] usb 6-1: device descriptor read/8, error -71 [ 1446.575686][T11866] usb 3-1: SerialNumber: syz [ 1446.586323][T16875] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 1446.625909][T11866] usb 3-1: config 0 descriptor?? [ 1446.726662][T16053] usb usb6-port1: unable to enumerate USB device [ 1446.749416][T16875] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1446.761666][T16875] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1446.781363][T16875] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1446.853363][T16875] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1446.877598][T16875] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1446.958819][T16875] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1447.019623][T16875] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1447.061330][T16875] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1447.072954][T16875] usb 2-1: Product: syz [ 1447.139217][T16875] usb 2-1: Manufacturer: syz [ 1447.163567][T16875] usb 2-1: SerialNumber: syz [ 1447.233397][T16875] usb 2-1: config 0 descriptor?? [ 1447.260168][T22653] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1447.283188][T16875] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1447.356869][T16875] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1448.783145][T16875] usb 3-1: USB disconnect, device number 47 [ 1449.296583][T16875] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1449.476579][T16875] usb 3-1: Using ep0 maxpacket: 32 [ 1449.486362][T16875] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1449.495655][T16875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.536430][T16053] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 1449.624538][T16875] usb 3-1: config 0 descriptor?? [ 1449.650396][T16875] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1449.710344][T16053] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1449.747704][T16053] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1449.799735][T16053] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1449.848591][T16053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.102488][T16053] usb 1-1: GET_CAPABILITIES returned 0 [ 1450.161575][T16053] usbtmc 1-1:16.0: can't read capabilities [ 1450.344023][T21583] usb 1-1: USB disconnect, device number 85 [ 1450.777087][T16875] gspca_sunplus: reg_w_riv err -110 [ 1450.782486][T16875] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 1451.810098][T22691] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1310921447 (41949486304 ns) > initial count (14193788608 ns). Using initial count to start timer. [ 1451.997364][T11939] usb 2-1: USB disconnect, device number 65 [ 1452.015456][T11939] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1453.010447][T16875] usb 3-1: USB disconnect, device number 48 [ 1454.149598][T16875] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1454.332844][T16875] usb 5-1: config 0 has no interfaces? [ 1454.387072][T16875] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1454.410085][T11939] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 1454.541438][T16875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.561335][T16875] usb 5-1: Product: syz [ 1454.576331][T16875] usb 5-1: Manufacturer: syz [ 1454.597995][T11939] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1454.615727][T16875] usb 5-1: SerialNumber: syz [ 1454.636621][T11939] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1454.640169][T16875] usb 5-1: config 0 descriptor?? [ 1454.799105][T11939] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1454.829258][T11939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.906285][T21583] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1455.110945][T21583] usb 1-1: Using ep0 maxpacket: 32 [ 1455.119872][T21583] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 1455.128753][T21583] usb 1-1: config 0 has no interface number 0 [ 1455.135332][T21583] usb 1-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1455.248160][T22716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1455.268453][T11939] usb 2-1: GET_CAPABILITIES returned 0 [ 1455.274024][T11939] usbtmc 2-1:16.0: can't read capabilities [ 1455.286468][T21583] usb 1-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1455.351211][T22716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1455.354762][T21583] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1455.413324][T16053] usb 2-1: USB disconnect, device number 66 [ 1455.459384][T21583] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1455.485578][T21583] usb 1-1: config 0 interface 219 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1455.502795][T21583] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1455.519019][T21583] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.536483][T21583] usb 1-1: Product: syz [ 1455.544565][T21583] usb 1-1: Manufacturer: syz [ 1455.562704][T21583] usb 1-1: SerialNumber: syz [ 1455.607414][T21583] usb 1-1: config 0 descriptor?? [ 1455.627006][T22729] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1455.627150][T11939] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1455.809142][T11939] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1455.820592][T11939] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1455.854644][T21583] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz) [ 1455.895073][T21583] usb 1-1: USB disconnect, device number 86 [ 1455.904269][T11939] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1455.959936][T11939] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1456.025665][T11939] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1456.079421][T11939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1456.105200][T11939] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1456.115360][T11939] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1456.130726][T11939] usb 3-1: Product: syz [ 1456.154048][T11939] usb 3-1: Manufacturer: syz [ 1456.191965][T11939] usb 3-1: SerialNumber: syz [ 1456.224580][T11939] usb 3-1: config 0 descriptor?? [ 1456.260343][T22734] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1456.280083][T11939] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1456.330860][T11939] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1456.621434][T22742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1456.796403][T11939] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1456.978413][T11939] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1456.988320][T11939] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1457.011142][T16053] usb 5-1: USB disconnect, device number 82 [ 1457.109243][T11939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1457.135051][T11939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1457.145992][T11939] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1457.161865][T11939] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1457.171844][T11939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.243313][T11939] usb 2-1: config 0 descriptor?? [ 1457.316746][T21583] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1457.468873][T21583] usb 1-1: config 0 has no interfaces? [ 1457.478729][T21583] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1457.488815][T21583] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.503424][T21583] usb 1-1: Product: syz [ 1457.516809][T21583] usb 1-1: Manufacturer: syz [ 1457.532050][T21583] usb 1-1: SerialNumber: syz [ 1457.561544][T21583] usb 1-1: config 0 descriptor?? [ 1457.676056][T11939] plantronics 0003:047F:FFFF.0029: reserved main item tag 0xd [ 1457.714395][T11939] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 1457.763702][T11939] plantronics 0003:047F:FFFF.0029: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1457.796093][T22748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.817094][T22748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1457.833655][T22756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4583'. [ 1458.402067][T11939] usb 3-1: USB disconnect, device number 49 [ 1458.429705][T11939] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1458.649418][T22780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4585'. [ 1459.563651][T16053] usb 2-1: USB disconnect, device number 67 [ 1460.000377][T16875] usb 1-1: USB disconnect, device number 87 [ 1460.071481][T22800] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4591'. [ 1460.144031][T22800] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1460.283102][T22798] could not allocate digest TFM handle poly1305-simd [ 1461.451540][T22817] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1461.458716][T22817] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1461.486678][T22817] vhci_hcd vhci_hcd.0: Device attached [ 1461.595616][T22821] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4598'. [ 1461.605073][T16875] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1461.766637][T21583] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1461.796500][T11866] usb 42-1: SetAddress Request (2) to port 0 [ 1461.805186][T16875] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1461.815409][T11866] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1461.833468][T16875] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1461.915864][T16875] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1461.947492][T21583] usb 5-1: Using ep0 maxpacket: 8 [ 1461.960717][T16875] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1461.988015][T21583] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1462.013034][T21583] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.026270][T16875] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1462.056954][T21583] usb 5-1: config 0 has no interface number 0 [ 1462.070927][T16875] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1462.081940][T21583] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1462.096879][T21583] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1462.112787][T16875] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1462.125742][T21583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.141646][T16875] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1462.157036][T21583] usb 5-1: config 0 descriptor?? [ 1462.168103][T16875] usb 2-1: Product: syz [ 1462.181849][T16875] usb 2-1: Manufacturer: syz [ 1462.203494][T16875] usb 2-1: SerialNumber: syz [ 1462.224726][T16875] usb 2-1: config 0 descriptor?? [ 1462.242418][T22815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1462.256302][T16875] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1462.281694][T16875] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1462.385608][T21583] usb 5-1: Can not set alternate setting to 1, error: -71 [ 1462.399956][T22818] vhci_hcd: connection reset by peer [ 1462.419401][T21583] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1462.439752][T14378] vhci_hcd: stop threads [ 1462.449502][T14378] vhci_hcd: release socket [ 1462.466725][T21583] usb 5-1: USB disconnect, device number 83 [ 1462.488900][T16053] usb 2-1: USB disconnect, device number 68 [ 1462.499910][T16053] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1462.517866][T14378] vhci_hcd: disconnect device [ 1463.002257][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1463.002283][ T30] audit: type=1326 audit(1749166213.932:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22830 comm="syz.4.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8cad8e929 code=0x7ffc0000 [ 1463.046388][T21583] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1463.067338][ T30] audit: type=1326 audit(1749166213.962:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22830 comm="syz.4.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fa8cad8e929 code=0x7ffc0000 [ 1463.138319][ T30] audit: type=1326 audit(1749166213.962:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22830 comm="syz.4.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8cad8e929 code=0x7ffc0000 [ 1463.174974][T22835] FAULT_INJECTION: forcing a failure. [ 1463.174974][T22835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1463.188871][ T30] audit: type=1326 audit(1749166213.962:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22830 comm="syz.4.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8cad8e929 code=0x7ffc0000 [ 1463.220335][T22835] CPU: 0 UID: 0 PID: 22835 Comm: syz.4.4605 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1463.220366][T22835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1463.220379][T22835] Call Trace: [ 1463.220388][T22835] [ 1463.220397][T22835] dump_stack_lvl+0x189/0x250 [ 1463.220436][T22835] ? __pfx____ratelimit+0x10/0x10 [ 1463.220464][T22835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1463.220497][T22835] ? __pfx__printk+0x10/0x10 [ 1463.220519][T22835] ? __might_fault+0xb0/0x130 [ 1463.220550][T22835] should_fail_ex+0x414/0x560 [ 1463.220581][T22835] _copy_from_user+0x2d/0xb0 [ 1463.220604][T22835] video_usercopy+0x354/0x14f0 [ 1463.220634][T22835] ? __pfx___video_do_ioctl+0x10/0x10 [ 1463.220655][T22835] ? __pfx_video_usercopy+0x10/0x10 [ 1463.220683][T22835] ? __fget_files+0x2a/0x420 [ 1463.220708][T22835] ? __fget_files+0x2a/0x420 [ 1463.220728][T22835] ? __fget_files+0x3a0/0x420 [ 1463.220753][T22835] v4l2_ioctl+0x18d/0x1e0 [ 1463.220783][T22835] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1463.220812][T22835] __se_sys_ioctl+0xfc/0x170 [ 1463.220853][T22835] do_syscall_64+0xfa/0x3b0 [ 1463.220877][T22835] ? lockdep_hardirqs_on+0x9c/0x150 [ 1463.220903][T22835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.220922][T22835] ? clear_bhb_loop+0x60/0xb0 [ 1463.220946][T22835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.220966][T22835] RIP: 0033:0x7fa8cad8e929 [ 1463.220986][T22835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1463.221000][T22835] RSP: 002b:00007fa8cbc6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1463.221017][T22835] RAX: ffffffffffffffda RBX: 00007fa8cafb5fa0 RCX: 00007fa8cad8e929 [ 1463.221028][T22835] RDX: 0000200000000000 RSI: 00000000c008561b RDI: 0000000000000003 [ 1463.221038][T22835] RBP: 00007fa8cbc6a090 R08: 0000000000000000 R09: 0000000000000000 [ 1463.221047][T22835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1463.221056][T22835] R13: 0000000000000000 R14: 00007fa8cafb5fa0 R15: 00007fa8cb0dfa28 [ 1463.221079][T22835] [ 1463.228996][ T30] audit: type=1326 audit(1749166213.962:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22830 comm="syz.4.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8cad8e929 code=0x7ffc0000 [ 1463.470463][ T30] audit: type=1326 audit(1749166213.962:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22830 comm="syz.4.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa8cad8e929 code=0x7ffc0000 [ 1463.494006][ T30] audit: type=1326 audit(1749166213.962:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22830 comm="syz.4.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8cad8e929 code=0x7ffc0000 [ 1463.518228][T21583] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1463.536251][T21583] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1463.554533][T21583] usb 3-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 1463.563941][ T30] audit: type=1326 audit(1749166213.962:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22830 comm="syz.4.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa8cad8e929 code=0x7ffc0000 [ 1463.596274][T21583] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.635200][ T30] audit: type=1326 audit(1749166213.972:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22830 comm="syz.4.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8cad8e929 code=0x7ffc0000 [ 1463.664846][ T30] audit: type=1326 audit(1749166213.972:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22830 comm="syz.4.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8cad8e929 code=0x7ffc0000 [ 1463.689852][T21583] usb 3-1: config 0 descriptor?? [ 1463.907835][T16875] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1464.086556][T16875] usb 2-1: Using ep0 maxpacket: 8 [ 1464.111049][T16875] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1464.190200][T16875] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.223506][T16875] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1464.235060][T21583] hid-alps 0003:044E:1215.002A: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.2-1/input0 [ 1464.252496][T16875] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1464.291538][T16875] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1464.380399][T16875] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1464.419671][T11939] usb 3-1: USB disconnect, device number 50 [ 1464.502304][T16875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.543120][T16875] usbtmc 2-1:16.0: bulk endpoints not found [ 1464.619609][T22849] fido_id[22849]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1465.028768][T22858] input: syz0 as /devices/virtual/input/input89 [ 1466.826798][T16875] usb 2-1: USB disconnect, device number 69 [ 1466.886476][T22880] vhci_hcd vhci_hcd.0: port 0 already used [ 1467.028457][T11866] usb 42-1: device descriptor read/8, error -110 [ 1467.257919][T22885] bridge1: entered promiscuous mode [ 1467.479841][T11866] usb usb42-port1: attempt power cycle [ 1468.091990][T11866] usb usb42-port1: unable to enumerate USB device [ 1468.856687][T11939] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1469.071055][T11939] usb 5-1: config 0 has no interfaces? [ 1469.093876][T11939] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1469.104405][T11939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.113080][T11939] usb 5-1: Product: syz [ 1469.117788][T11939] usb 5-1: Manufacturer: syz [ 1469.122619][T11939] usb 5-1: SerialNumber: syz [ 1469.137269][T11939] usb 5-1: config 0 descriptor?? [ 1469.262597][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1469.262618][ T30] audit: type=1326 audit(1749166220.192:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22904 comm="syz.0.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ce38e929 code=0x7ffc0000 [ 1469.362560][ T30] audit: type=1326 audit(1749166220.192:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22904 comm="syz.0.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ce38e929 code=0x7ffc0000 [ 1469.398923][ T30] audit: type=1326 audit(1749166220.192:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22904 comm="syz.0.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fd0ce38e929 code=0x7ffc0000 [ 1469.494598][ T30] audit: type=1326 audit(1749166220.192:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22904 comm="syz.0.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ce38e929 code=0x7ffc0000 [ 1469.529088][ T30] audit: type=1326 audit(1749166220.192:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22904 comm="syz.0.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0ce38e929 code=0x7ffc0000 [ 1469.559779][ T30] audit: type=1326 audit(1749166220.192:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22904 comm="syz.0.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ce38e929 code=0x7ffc0000 [ 1469.583771][ T30] audit: type=1326 audit(1749166220.192:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22904 comm="syz.0.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd0ce38e929 code=0x7ffc0000 [ 1469.663715][ T30] audit: type=1326 audit(1749166220.192:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22904 comm="syz.0.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ce38e929 code=0x7ffc0000 [ 1469.705841][ T30] audit: type=1326 audit(1749166220.202:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22904 comm="syz.0.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ce38e929 code=0x7ffc0000 [ 1469.746658][ T30] audit: type=1326 audit(1749166220.202:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22904 comm="syz.0.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd0ce38e929 code=0x7ffc0000 [ 1469.896377][T21785] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1470.058724][T21785] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1470.070759][T21785] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1470.085680][T21785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1470.101323][T21785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1470.121614][T21785] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1470.145928][T21785] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1470.158853][T21785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.225275][T21785] usb 1-1: config 0 descriptor?? [ 1470.663418][T21785] plantronics 0003:047F:FFFF.002B: reserved main item tag 0xd [ 1470.704189][T21785] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 1470.742262][T21785] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1471.058023][T21785] usb 5-1: USB disconnect, device number 84 [ 1471.351719][T22914] loop6: detected capacity change from 0 to 63 [ 1471.369193][ T5851] buffer_io_error: 6 callbacks suppressed [ 1471.369207][ T5851] Buffer I/O error on dev loop6, logical block 0, async page read [ 1471.390365][ T5851] Buffer I/O error on dev loop6, logical block 0, async page read [ 1471.399893][ T5851] Buffer I/O error on dev loop6, logical block 0, async page read [ 1471.408619][ T5851] Buffer I/O error on dev loop6, logical block 0, async page read [ 1471.419830][ T5851] Buffer I/O error on dev loop6, logical block 0, async page read [ 1471.946693][T16053] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1472.106523][T16053] usb 2-1: device descriptor read/64, error -71 [ 1472.356419][T16053] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1472.507228][T16053] usb 2-1: device descriptor read/64, error -71 [ 1472.597480][T16875] usb 1-1: USB disconnect, device number 88 [ 1472.616929][T16053] usb usb2-port1: attempt power cycle [ 1472.676741][T21785] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1472.926440][T21785] usb 5-1: Using ep0 maxpacket: 32 [ 1473.082783][T22955] ip6gre1: entered promiscuous mode [ 1473.089388][T22955] ip6gre1: entered allmulticast mode [ 1473.198753][T16053] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1473.303173][T16053] usb 2-1: device descriptor read/8, error -71 [ 1473.363296][T21785] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1473.400474][T21785] usb 5-1: config 253 has an invalid interface number: 202 but max is 0 [ 1473.642948][T21785] usb 5-1: config 253 has no interface number 0 [ 1473.656637][T16053] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1473.691927][T16053] usb 2-1: device descriptor read/8, error -71 [ 1473.707343][T21785] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1473.736242][T21785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.775437][T21785] usb 5-1: Product: syz [ 1473.786261][T21785] usb 5-1: Manufacturer: syz [ 1473.805776][T21785] usb 5-1: SerialNumber: syz [ 1473.837235][T16053] usb usb2-port1: unable to enumerate USB device [ 1473.886368][T16875] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1474.058952][T16875] usb 1-1: config 0 has no interfaces? [ 1474.074710][T16875] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1474.084624][T16875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.104688][T21785] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1474.114663][T16875] usb 1-1: Product: syz [ 1474.119026][T16875] usb 1-1: Manufacturer: syz [ 1474.124176][T16875] usb 1-1: SerialNumber: syz [ 1474.129250][T14672] usb 5-1: Failed to submit usb control message: -71 [ 1474.135327][T21785] usb 5-1: USB disconnect, device number 85 [ 1474.144283][T16875] usb 1-1: config 0 descriptor?? [ 1474.190432][T14672] usb 5-1: unable to send the bmi data to the device: -71 [ 1474.246074][T14672] usb 5-1: unable to get target info from device [ 1474.264057][T14672] usb 5-1: could not get target info (-71) [ 1474.270504][T14672] usb 5-1: could not probe fw (-71) [ 1474.520000][T22968] netlink: 136 bytes leftover after parsing attributes in process `syz.5.4642'. [ 1475.143921][T22981] Cannot find add_set index 0 as target [ 1475.236446][T21785] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1475.399623][T21785] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.414649][T21785] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1475.485614][T21785] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1475.495638][T21785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1475.504406][T21785] usb 2-1: SerialNumber: syz [ 1476.161074][T21785] usb 2-1: 0:2 : does not exist [ 1476.296705][T16053] usb 1-1: USB disconnect, device number 89 [ 1476.423941][T21785] usb 2-1: USB disconnect, device number 74 [ 1476.512737][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1476.956905][T16053] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1477.118590][T16053] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1477.138753][T16053] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1477.207220][T16053] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1477.227907][T16053] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1477.251216][T16053] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1477.287397][T11939] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1477.308162][T16053] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1477.324542][T16053] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1477.350858][T16053] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1477.369946][T16053] usb 6-1: Product: syz [ 1477.374412][T16053] usb 6-1: Manufacturer: syz [ 1477.381856][T16053] usb 6-1: SerialNumber: syz [ 1477.401269][T16053] usb 6-1: config 0 descriptor?? [ 1477.409562][T22997] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1477.422393][T16053] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1477.513832][T16053] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1477.534418][T11939] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1477.597730][T11939] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1477.691564][T21785] usb 6-1: USB disconnect, device number 23 [ 1477.709572][T21785] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1477.726066][T11939] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1477.749053][T11939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.110911][T11939] usb 2-1: GET_CAPABILITIES returned 0 [ 1478.123395][T11939] usbtmc 2-1:16.0: can't read capabilities [ 1478.355170][T21785] usb 2-1: USB disconnect, device number 75 [ 1478.660442][T23014] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4656'. [ 1479.614939][T23031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4660'. [ 1481.013001][T23049] input: syz0 as /devices/virtual/input/input91 [ 1482.279808][T23059] FAULT_INJECTION: forcing a failure. [ 1482.279808][T23059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1482.344973][T23059] CPU: 1 UID: 0 PID: 23059 Comm: syz.5.4669 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1482.344998][T23059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1482.345008][T23059] Call Trace: [ 1482.345016][T23059] [ 1482.345024][T23059] dump_stack_lvl+0x189/0x250 [ 1482.345053][T23059] ? __pfx____ratelimit+0x10/0x10 [ 1482.345083][T23059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1482.345110][T23059] ? __pfx__printk+0x10/0x10 [ 1482.345129][T23059] ? get_sigframe+0x596/0x7d0 [ 1482.345153][T23059] should_fail_ex+0x414/0x560 [ 1482.345178][T23059] _copy_to_user+0x31/0xb0 [ 1482.345196][T23059] copy_siginfo_to_user+0x22/0xc0 [ 1482.345212][T23059] x64_setup_rt_frame+0x776/0xd40 [ 1482.345253][T23059] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1482.345281][T23059] arch_do_signal_or_restart+0x3d7/0x750 [ 1482.345305][T23059] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1482.345336][T23059] ? exit_to_user_mode_loop+0x40/0x110 [ 1482.345361][T23059] exit_to_user_mode_loop+0x75/0x110 [ 1482.345383][T23059] do_syscall_64+0x2bd/0x3b0 [ 1482.345404][T23059] ? lockdep_hardirqs_on+0x9c/0x150 [ 1482.345423][T23059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.345437][T23059] ? clear_bhb_loop+0x60/0xb0 [ 1482.345455][T23059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.345470][T23059] RIP: 0033:0x7f597f58e927 [ 1482.345485][T23059] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1482.345511][T23059] RSP: 002b:00007f598035c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 1482.345528][T23059] RAX: 0000000000000147 RBX: 00007f597f7b5fa0 RCX: 00007f597f58e929 [ 1482.345540][T23059] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 1482.345549][T23059] RBP: 00007f598035c090 R08: 0000000000000004 R09: 0000000000000001 [ 1482.345559][T23059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1482.345568][T23059] R13: 0000000000000000 R14: 00007f597f7b5fa0 R15: 00007f597f8dfa28 [ 1482.345590][T23059] [ 1483.367476][T23072] netlink: 'syz.4.4672': attribute type 1 has an invalid length. [ 1483.786110][T23081] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1483.807886][T23081] FAULT_INJECTION: forcing a failure. [ 1483.807886][T23081] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.821160][T23081] CPU: 0 UID: 0 PID: 23081 Comm: syz.4.4675 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1483.821188][T23081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1483.821201][T23081] Call Trace: [ 1483.821210][T23081] [ 1483.821219][T23081] dump_stack_lvl+0x189/0x250 [ 1483.821256][T23081] ? __pfx____ratelimit+0x10/0x10 [ 1483.821286][T23081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1483.821319][T23081] ? __pfx__printk+0x10/0x10 [ 1483.821348][T23081] ? __pfx___might_resched+0x10/0x10 [ 1483.821367][T23081] ? fs_reclaim_acquire+0x7d/0x100 [ 1483.821397][T23081] should_fail_ex+0x414/0x560 [ 1483.821431][T23081] should_failslab+0xa8/0x100 [ 1483.821456][T23081] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1483.821480][T23081] ? __alloc_skb+0x112/0x2d0 [ 1483.821505][T23081] __alloc_skb+0x112/0x2d0 [ 1483.821529][T23081] netlink_ack+0x146/0xa50 [ 1483.821548][T23081] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1483.821578][T23081] ? ref_tracker_free+0x63a/0x7d0 [ 1483.821605][T23081] ? __copy_skb_header+0xa7/0x550 [ 1483.821631][T23081] ? __pfx_ref_tracker_free+0x10/0x10 [ 1483.821672][T23081] netlink_rcv_skb+0x28c/0x470 [ 1483.821694][T23081] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1483.821727][T23081] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1483.821762][T23081] ? netlink_deliver_tap+0x2e/0x1b0 [ 1483.821783][T23081] ? netlink_deliver_tap+0x2e/0x1b0 [ 1483.821810][T23081] netlink_unicast+0x75b/0x8d0 [ 1483.821852][T23081] netlink_sendmsg+0x805/0xb30 [ 1483.821893][T23081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1483.821917][T23081] ? aa_sock_msg_perm+0x94/0x160 [ 1483.821945][T23081] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1483.821978][T23081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1483.822001][T23081] __sock_sendmsg+0x21c/0x270 [ 1483.822032][T23081] ____sys_sendmsg+0x505/0x830 [ 1483.822061][T23081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1483.822093][T23081] ? import_iovec+0x74/0xa0 [ 1483.822119][T23081] ___sys_sendmsg+0x21f/0x2a0 [ 1483.822144][T23081] ? __pfx____sys_sendmsg+0x10/0x10 [ 1483.822206][T23081] ? __fget_files+0x2a/0x420 [ 1483.822230][T23081] ? __fget_files+0x3a0/0x420 [ 1483.822265][T23081] __x64_sys_sendmsg+0x19b/0x260 [ 1483.822292][T23081] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1483.822326][T23081] ? __pfx_ksys_write+0x10/0x10 [ 1483.822344][T23081] ? rcu_is_watching+0x15/0xb0 [ 1483.822370][T23081] ? do_syscall_64+0xbe/0x3b0 [ 1483.822405][T23081] do_syscall_64+0xfa/0x3b0 [ 1483.822432][T23081] ? lockdep_hardirqs_on+0x9c/0x150 [ 1483.822458][T23081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.822479][T23081] ? clear_bhb_loop+0x60/0xb0 [ 1483.822504][T23081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.822525][T23081] RIP: 0033:0x7fa8cad8e929 [ 1483.822562][T23081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1483.822581][T23081] RSP: 002b:00007fa8cbc6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1483.822603][T23081] RAX: ffffffffffffffda RBX: 00007fa8cafb5fa0 RCX: 00007fa8cad8e929 [ 1483.822619][T23081] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000003 [ 1483.822632][T23081] RBP: 00007fa8cbc6a090 R08: 0000000000000000 R09: 0000000000000000 [ 1483.822645][T23081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1483.822658][T23081] R13: 0000000000000000 R14: 00007fa8cafb5fa0 R15: 00007fa8cb0dfa28 [ 1483.822690][T23081] [ 1486.045112][T23112] FAULT_INJECTION: forcing a failure. [ 1486.045112][T23112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1486.063872][T23112] CPU: 1 UID: 0 PID: 23112 Comm: syz.2.4683 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1486.063905][T23112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1486.063919][T23112] Call Trace: [ 1486.063929][T23112] [ 1486.063940][T23112] dump_stack_lvl+0x189/0x250 [ 1486.063979][T23112] ? __pfx____ratelimit+0x10/0x10 [ 1486.064007][T23112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1486.064040][T23112] ? __pfx__printk+0x10/0x10 [ 1486.064076][T23112] should_fail_ex+0x414/0x560 [ 1486.064111][T23112] _copy_to_user+0x31/0xb0 [ 1486.064137][T23112] simple_read_from_buffer+0xe1/0x170 [ 1486.064166][T23112] proc_fail_nth_read+0x1df/0x250 [ 1486.064197][T23112] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1486.064226][T23112] ? rw_verify_area+0x258/0x650 [ 1486.064259][T23112] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1486.064286][T23112] vfs_read+0x200/0x980 [ 1486.064318][T23112] ? __pfx___mutex_lock+0x10/0x10 [ 1486.064353][T23112] ? __pfx_vfs_read+0x10/0x10 [ 1486.064378][T23112] ? __fget_files+0x2a/0x420 [ 1486.064407][T23112] ? __fget_files+0x3a0/0x420 [ 1486.064430][T23112] ? __fget_files+0x2a/0x420 [ 1486.064464][T23112] ksys_read+0x145/0x250 [ 1486.064482][T23112] ? __fget_files+0x2a/0x420 [ 1486.064507][T23112] ? __pfx_ksys_read+0x10/0x10 [ 1486.064543][T23112] ? do_syscall_64+0xbe/0x3b0 [ 1486.064576][T23112] do_syscall_64+0xfa/0x3b0 [ 1486.064604][T23112] ? lockdep_hardirqs_on+0x9c/0x150 [ 1486.064631][T23112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.064656][T23112] ? clear_bhb_loop+0x60/0xb0 [ 1486.064682][T23112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.064702][T23112] RIP: 0033:0x7fee6c78d33c [ 1486.064722][T23112] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1486.064741][T23112] RSP: 002b:00007fee6a5f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1486.064763][T23112] RAX: ffffffffffffffda RBX: 00007fee6c9b5fa0 RCX: 00007fee6c78d33c [ 1486.064779][T23112] RDX: 000000000000000f RSI: 00007fee6a5f60a0 RDI: 0000000000000004 [ 1486.064793][T23112] RBP: 00007fee6a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1486.064806][T23112] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1486.064820][T23112] R13: 0000000000000000 R14: 00007fee6c9b5fa0 R15: 00007fee6cadfa28 [ 1486.064854][T23112] [ 1486.302338][ C1] vkms_vblank_simulate: vblank timer overrun [ 1487.080113][T23135] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4682'. [ 1488.477778][T11866] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1488.636275][T11866] usb 3-1: Using ep0 maxpacket: 32 [ 1488.643776][T11866] usb 3-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.655309][T11866] usb 3-1: config 21 has 0 interfaces, different from the descriptor's value: 1 [ 1488.668478][T11866] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1488.678626][T11866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.687348][T11866] usb 3-1: Product: syz [ 1488.696557][T11866] usb 3-1: Manufacturer: syz [ 1488.706575][T11866] usb 3-1: SerialNumber: syz [ 1489.064599][T23142] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1489.141906][T23142] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1489.239749][T23142] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1490.321901][T23160] program syz.1.4695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1491.174481][T23164] netlink: 'syz.1.4697': attribute type 1 has an invalid length. [ 1491.372264][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1491.379179][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.541184][T11866] usb 3-1: USB disconnect, device number 51 [ 1491.957162][T23175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4701'. [ 1491.970097][T23175] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4701'. [ 1491.991932][T23175] vlan0: entered allmulticast mode [ 1492.807704][T23191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4705'. [ 1493.201834][T23196] netlink: 'syz.5.4708': attribute type 1 has an invalid length. [ 1493.862836][T23203] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4711'. [ 1493.976345][T11866] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1494.167576][T11866] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1494.209889][T23208] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1494.238681][T11866] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.256836][T11866] usb 1-1: config 220 has no interface number 2 [ 1494.263335][T11866] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1494.323520][T11866] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1494.367375][T16053] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1494.396092][T11866] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1494.439265][T11866] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1494.640837][T16053] usb 2-1: config 0 has no interfaces? [ 1494.670581][T16053] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1494.686917][T11866] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1494.696397][T16053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.704815][T16053] usb 2-1: Product: syz [ 1494.727106][T16053] usb 2-1: Manufacturer: syz [ 1494.732653][T16053] usb 2-1: SerialNumber: syz [ 1494.760034][T16053] usb 2-1: config 0 descriptor?? [ 1494.795480][T11866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.876478][T11866] usb 1-1: Product: syz [ 1494.881123][T11866] usb 1-1: Manufacturer: syz [ 1494.886002][T11866] usb 1-1: SerialNumber: syz [ 1495.077533][T23222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4715'. [ 1495.109871][T23200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.181639][T23200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.211168][T11866] usb 1-1: selecting invalid altsetting 0 [ 1495.222004][T11866] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1495.244695][T11866] usb 1-1: No valid video chain found. [ 1495.289463][T11866] usb 1-1: selecting invalid altsetting 0 [ 1495.338479][T11866] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1495.377601][T11866] usb 1-1: USB disconnect, device number 90 [ 1496.207266][T23233] netlink: 'syz.2.4717': attribute type 13 has an invalid length. [ 1497.066580][T11866] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1497.358439][T11866] usb 3-1: config 0 has no interfaces? [ 1497.433681][T11866] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1497.453736][T11866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.566532][T11866] usb 3-1: Product: syz [ 1497.585277][T11866] usb 3-1: Manufacturer: syz [ 1497.806495][T11866] usb 3-1: SerialNumber: syz [ 1497.857789][T11866] usb 3-1: config 0 descriptor?? [ 1498.349148][T16053] usb 2-1: USB disconnect, device number 76 [ 1498.529009][T23255] netlink: 'syz.1.4724': attribute type 2 has an invalid length. [ 1498.542884][T23255] netlink: 'syz.1.4724': attribute type 8 has an invalid length. [ 1498.551203][T23255] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4724'. [ 1499.704644][T23265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4726'. [ 1500.106554][T21785] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 1500.290714][T21785] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1500.343338][T21785] usb 2-1: config 0 has no interface number 0 [ 1500.370646][T21785] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1500.413540][T21785] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1500.428426][T16053] usb 3-1: USB disconnect, device number 52 [ 1500.476606][T21785] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1500.536037][T21785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.575851][T21785] usb 2-1: config 0 descriptor?? [ 1500.607141][T23260] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1500.642169][T21785] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1500.888305][T21785] usb 2-1: USB disconnect, device number 77 [ 1500.999101][T23290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4733'. [ 1501.062383][T23292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4735'. [ 1501.101191][T23292] vlan0: entered promiscuous mode [ 1501.171570][T23293] binder: 23288:23293 ioctl c00c6211 0 returned -14 [ 1501.827984][T23300] FAULT_INJECTION: forcing a failure. [ 1501.827984][T23300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1501.872481][T23300] CPU: 0 UID: 0 PID: 23300 Comm: syz.2.4737 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1501.872514][T23300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1501.872527][T23300] Call Trace: [ 1501.872537][T23300] [ 1501.872547][T23300] dump_stack_lvl+0x189/0x250 [ 1501.872586][T23300] ? __pfx____ratelimit+0x10/0x10 [ 1501.872615][T23300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1501.872647][T23300] ? __pfx__printk+0x10/0x10 [ 1501.872683][T23300] should_fail_ex+0x414/0x560 [ 1501.872717][T23300] _copy_to_user+0x31/0xb0 [ 1501.872742][T23300] simple_read_from_buffer+0xe1/0x170 [ 1501.872772][T23300] proc_fail_nth_read+0x1df/0x250 [ 1501.872801][T23300] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1501.872830][T23300] ? rw_verify_area+0x258/0x650 [ 1501.872862][T23300] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1501.872889][T23300] vfs_read+0x200/0x980 [ 1501.872915][T23300] ? __pfx___mutex_lock+0x10/0x10 [ 1501.872945][T23300] ? __pfx_vfs_read+0x10/0x10 [ 1501.872966][T23300] ? __fget_files+0x2a/0x420 [ 1501.872995][T23300] ? __fget_files+0x3a0/0x420 [ 1501.873018][T23300] ? __fget_files+0x2a/0x420 [ 1501.873051][T23300] ksys_read+0x145/0x250 [ 1501.873070][T23300] ? __fget_files+0x3a0/0x420 [ 1501.873102][T23300] ? __pfx_ksys_read+0x10/0x10 [ 1501.873128][T23300] ? do_syscall_64+0xbe/0x3b0 [ 1501.873161][T23300] do_syscall_64+0xfa/0x3b0 [ 1501.873187][T23300] ? lockdep_hardirqs_on+0x9c/0x150 [ 1501.873213][T23300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.873235][T23300] ? clear_bhb_loop+0x60/0xb0 [ 1501.873260][T23300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.873280][T23300] RIP: 0033:0x7fee6c78d33c [ 1501.873300][T23300] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1501.873319][T23300] RSP: 002b:00007fee6a5f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1501.873342][T23300] RAX: ffffffffffffffda RBX: 00007fee6c9b5fa0 RCX: 00007fee6c78d33c [ 1501.873358][T23300] RDX: 000000000000000f RSI: 00007fee6a5f60a0 RDI: 0000000000000004 [ 1501.873371][T23300] RBP: 00007fee6a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1501.873383][T23300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1501.873395][T23300] R13: 0000000000000000 R14: 00007fee6c9b5fa0 R15: 00007fee6cadfa28 [ 1501.873427][T23300] [ 1502.648929][T21785] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1502.887396][ T31] INFO: task kworker/1:3:5888 blocked for more than 143 seconds. [ 1502.944167][ T31] Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 [ 1502.955761][T21785] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1502.960426][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1502.987089][ T31] task:kworker/1:3 state:D stack:20664 pid:5888 tgid:5888 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 1503.017424][T21785] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1503.017439][ T31] Workqueue: usb_hub_wq hub_event [ 1503.047606][ T31] Call Trace: [ 1503.054639][ T31] [ 1503.062314][ T31] __schedule+0x16f5/0x4d00 [ 1503.070806][ T31] ? schedule+0x165/0x360 [ 1503.082605][ T31] ? __pfx___schedule+0x10/0x10 [ 1503.114805][ T31] ? schedule+0x91/0x360 [ 1503.274198][T21785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1503.310008][ T31] schedule+0x165/0x360 [ 1503.314080][T21785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1503.314629][ T31] schedule_preempt_disabled+0x13/0x30 [ 1503.371983][T21785] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1503.372022][ T31] __mutex_lock+0x724/0xe80 [ 1503.395674][T21785] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1503.411073][T21785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.422408][ T31] ? __mutex_lock+0x51b/0xe80 [ 1503.437812][ T31] ? hub_event+0x21cb/0x4a00 [ 1503.451685][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1503.456979][T21785] usb 3-1: config 0 descriptor?? [ 1503.493851][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1503.513941][ T31] hub_event+0x21cb/0x4a00 [ 1503.534107][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1503.559352][ T31] ? __pfx_hub_event+0x10/0x10 [ 1503.579459][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1503.595237][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1503.612308][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1503.638882][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1503.664120][ T31] process_scheduled_works+0xae1/0x17b0 [ 1503.681526][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1503.702400][ T31] worker_thread+0x8a0/0xda0 [ 1503.720272][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1503.745724][ T31] ? __kthread_parkme+0x7b/0x200 [ 1503.764582][ T31] kthread+0x70e/0x8a0 [ 1503.790212][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1503.809535][ T31] ? __pfx_kthread+0x10/0x10 [ 1503.823704][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1503.844605][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1503.870284][ T31] ? __pfx_kthread+0x10/0x10 [ 1503.877416][T21785] plantronics 0003:047F:FFFF.002C: reserved main item tag 0xd [ 1503.883676][ T31] ret_from_fork+0x3f9/0x770 [ 1503.898718][T21785] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 1503.918634][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1503.936769][ T31] ? __switch_to_asm+0x39/0x70 [ 1503.944912][ T31] ? __switch_to_asm+0x33/0x70 [ 1503.957616][T21785] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1503.991347][ T31] ? __pfx_kthread+0x10/0x10 [ 1504.003490][ T31] ret_from_fork_asm+0x1a/0x30 [ 1504.014461][ T31] [ 1504.025655][ T31] [ 1504.025655][ T31] Showing all locks held in the system: [ 1504.046606][ T31] 1 lock held by khungtaskd/31: [ 1504.100823][ T31] #0: ffffffff8e13f060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1504.111573][ T31] 3 locks held by kworker/u8:6/1110: [ 1504.118117][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1504.132468][ T31] #1: ffffc90003d6fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1504.163531][ T31] #2: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1504.180424][ T31] 2 locks held by getty/5596: [ 1504.185953][ T31] #0: ffff888026cdf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1504.196597][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1504.208002][ T31] 5 locks held by kworker/1:3/5888: [ 1504.214731][ T31] #0: ffff888020ec1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1504.292207][ T31] #1: ffffc90004eafbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1504.366294][ T31] #2: ffff888028f9f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1504.383075][ T31] #3: ffff888146bc7510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 1504.394021][ T31] #4: ffff888145bfc568 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 1504.408364][ T31] 5 locks held by kworker/1:7/5915: [ 1504.413785][ T31] #0: ffff888020ec1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1504.427075][ T31] #1: ffffc90004fc7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1504.444201][ T31] #2: ffff888146b3a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1504.454630][ T31] #3: ffff888146b3d510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 1504.467583][ T31] #4: ffff888145bfc568 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 1504.480094][ T31] 2 locks held by syz.5.4742/23308: [ 1504.485889][ T31] #0: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1504.497047][ T31] #1: ffffffff8e144b78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1504.511160][ T31] 1 lock held by syz.5.4742/23313: [ 1504.518107][ T31] [ 1504.552057][ T31] ============================================= [ 1504.552057][ T31] [ 1504.591309][ T31] NMI backtrace for cpu 1 [ 1504.591331][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1504.591351][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1504.591361][ T31] Call Trace: [ 1504.591369][ T31] [ 1504.591378][ T31] dump_stack_lvl+0x189/0x250 [ 1504.591408][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1504.591431][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1504.591456][ T31] ? __pfx__printk+0x10/0x10 [ 1504.591484][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1504.591506][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1504.591522][ T31] ? _printk+0xcf/0x120 [ 1504.591543][ T31] ? __pfx__printk+0x10/0x10 [ 1504.591563][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1504.591596][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1504.591617][ T31] watchdog+0xfee/0x1030 [ 1504.591653][ T31] ? watchdog+0x1de/0x1030 [ 1504.591682][ T31] kthread+0x70e/0x8a0 [ 1504.591706][ T31] ? __pfx_watchdog+0x10/0x10 [ 1504.591728][ T31] ? __pfx_kthread+0x10/0x10 [ 1504.591748][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1504.591768][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1504.591787][ T31] ? __pfx_kthread+0x10/0x10 [ 1504.591806][ T31] ret_from_fork+0x3f9/0x770 [ 1504.591831][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1504.591866][ T31] ? __switch_to_asm+0x39/0x70 [ 1504.591884][ T31] ? __switch_to_asm+0x33/0x70 [ 1504.591899][ T31] ? __pfx_kthread+0x10/0x10 [ 1504.591918][ T31] ret_from_fork_asm+0x1a/0x30 [ 1504.591948][ T31] [ 1504.591955][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1504.753804][ C0] NMI backtrace for cpu 0 [ 1504.753823][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1504.753851][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1504.753863][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1504.753912][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 85 22 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1504.753928][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 1504.753945][ C0] RAX: b0852ed05c515300 RBX: ffffffff81976058 RCX: b0852ed05c515300 [ 1504.753959][ C0] RDX: 0000000000000001 RSI: ffffffff8d97cb85 RDI: ffffffff8be28340 [ 1504.753972][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 1504.753985][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa100f0 [ 1504.753999][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 1504.754010][ C0] FS: 0000000000000000(0000) GS:ffff888125c55000(0000) knlGS:0000000000000000 [ 1504.754025][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1504.754037][ C0] CR2: 0000200000301030 CR3: 000000007482e000 CR4: 00000000003526f0 [ 1504.754053][ C0] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 1504.754064][ C0] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1504.754075][ C0] Call Trace: [ 1504.754085][ C0] [ 1504.754093][ C0] default_idle+0x13/0x20 [ 1504.754119][ C0] default_idle_call+0x74/0xb0 [ 1504.754145][ C0] do_idle+0x1e8/0x510 [ 1504.754167][ C0] ? __pfx_do_idle+0x10/0x10 [ 1504.754191][ C0] cpu_startup_entry+0x44/0x60 [ 1504.754208][ C0] rest_init+0x2de/0x300 [ 1504.754223][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1504.754322][ C0] start_kernel+0x47d/0x500 [ 1504.754350][ C0] x86_64_start_reservations+0x24/0x30 [ 1504.754378][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1504.754405][ C0] common_startup_64+0x13e/0x147 [ 1504.754434][ C0] [ 1504.986911][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1504.993938][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1505.005622][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1505.015817][ T31] Call Trace: [ 1505.019244][ T31] [ 1505.022573][ T31] dump_stack_lvl+0x99/0x250 [ 1505.027409][ T31] ? __asan_memcpy+0x40/0x70 [ 1505.032094][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1505.037462][ T31] ? __pfx__printk+0x10/0x10 [ 1505.042114][ T31] panic+0x2db/0x790 [ 1505.046144][ T31] ? __pfx_panic+0x10/0x10 [ 1505.050617][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1505.056465][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1505.061882][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1505.068198][ T31] watchdog+0x102d/0x1030 [ 1505.072657][ T31] ? watchdog+0x1de/0x1030 [ 1505.077112][ T31] kthread+0x70e/0x8a0 [ 1505.081256][ T31] ? __pfx_watchdog+0x10/0x10 [ 1505.086051][ T31] ? __pfx_kthread+0x10/0x10 [ 1505.090681][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1505.096088][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1505.101398][ T31] ? __pfx_kthread+0x10/0x10 [ 1505.106014][ T31] ret_from_fork+0x3f9/0x770 [ 1505.110640][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1505.115874][ T31] ? __switch_to_asm+0x39/0x70 [ 1505.120660][ T31] ? __switch_to_asm+0x33/0x70 [ 1505.126143][ T31] ? __pfx_kthread+0x10/0x10 [ 1505.130850][ T31] ret_from_fork_asm+0x1a/0x30 [ 1505.135748][ T31] [ 1505.139120][ T31] Kernel Offset: disabled [ 1505.143522][ T31] Rebooting in 86400 seconds..