last executing test programs: 3m58.169024192s ago: executing program 0 (id=3731): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001180)={0x24, r5, 0x21, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d, 0x4000}]}, 0x24}, 0x1, 0x0, 0x0, 0x8091}, 0x48080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r5, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x50}}}}, [@NL80211_ATTR_KEY_SEQ={0x6, 0xa, "a954"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "691b9c8a8c"}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x800) get_mempolicy(&(0x7f00000001c0), 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) 3m57.879029469s ago: executing program 0 (id=3732): r0 = socket$inet(0x2, 0x3, 0x6) fcntl$getflags(0xffffffffffffffff, 0x401) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x10000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x321, 0xffff, 0x4c, 0x101, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x35, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m56.347494508s ago: executing program 0 (id=3740): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3m55.290938488s ago: executing program 0 (id=3744): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000080)=0x6e) accept4(r1, &(0x7f0000000240)=@tipc=@name, &(0x7f00000002c0)=0x80, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 3m54.280480322s ago: executing program 0 (id=3751): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x59, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x106b}, 0x6c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000300)=@ethtool_sfeatures}) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@newchain={0x4ddc, 0x64, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff2}, {0x9, 0xfff3}, {0x10, 0x4}}, [@f_rsvp={{0x9}, {0x1c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xe, 0x10}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xb, 0x4}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff3, 0xfff3}}]}}, @f_rsvp={{0x9}, {0x1074, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @empty}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0xfff1}}, @TCA_RSVP_POLICE={0x414, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6f, 0x2, 0x10001, 0xffff, 0x3, 0x6, 0x2, 0x12a, 0x5, 0x40, 0x7, 0x8, 0x10000, 0x12000000, 0x3, 0x17d, 0x5, 0x80000000, 0x8, 0xd, 0x8, 0x1, 0x3, 0x7fffffff, 0xb, 0x6, 0x40, 0x985, 0x1, 0xd, 0x9, 0x8, 0x1, 0x6, 0x101, 0x0, 0x7c71, 0x8, 0x845d, 0x2, 0x200, 0x376, 0x7f, 0x5, 0x1, 0x30, 0x9, 0x0, 0x4, 0x9c, 0x2189, 0x0, 0x40, 0x4, 0x3, 0xb40e, 0x4, 0x80000001, 0x2, 0xfffffff9, 0x0, 0x7f, 0x7, 0x40, 0xdf3, 0x3, 0x7fffffff, 0x7, 0x6, 0x6, 0xffffff80, 0x9, 0x2, 0x100, 0xfffffff7, 0x9, 0xa, 0x9, 0x10001, 0x7, 0xdac0, 0x6, 0x100, 0x8, 0xe, 0x8, 0x3, 0x8000, 0x2, 0x75, 0x9, 0x7fff, 0x5, 0x3dd, 0x6, 0x2, 0x9, 0x0, 0x0, 0x3, 0xf6, 0x90, 0x6, 0x40, 0x3, 0x8, 0x8, 0x1, 0xfc, 0x80000000, 0x4, 0x0, 0x0, 0x5, 0x2000000, 0x5, 0x3, 0x1, 0x8, 0x1ff, 0x401, 0x81, 0x1, 0xe573, 0x62a, 0x7, 0x2, 0xd86, 0x0, 0x6, 0xff, 0x1, 0x8001, 0x6, 0x81, 0x10, 0x101, 0x7, 0x2, 0x2, 0x10, 0x5, 0x8, 0x3ff, 0xffffffff, 0x6, 0x101, 0x5, 0x5, 0xf8000000, 0x1b, 0x0, 0x40, 0x7ff, 0x5, 0x759, 0xff, 0xffff9315, 0xee8, 0xb, 0xaa36, 0xfffffff5, 0x480, 0x7, 0xfffffff7, 0x6ed, 0xfffffff8, 0x6, 0x6, 0x2, 0x1, 0x4, 0x2, 0x8, 0x0, 0x9, 0x7, 0x1, 0x9, 0x4, 0x5, 0x9, 0x3, 0x886, 0x101, 0xffffff12, 0x3, 0x9, 0x0, 0xef, 0xc21d, 0x0, 0x2, 0x5, 0x7fffffff, 0x8001, 0x8, 0x8, 0x2, 0x3, 0xec8, 0xff, 0xfffffff7, 0x9, 0x7ff, 0x8, 0x9, 0x9, 0x2, 0x7, 0x80, 0x9, 0xe, 0xfffffffe, 0x4, 0x93e, 0x5, 0x40, 0x331aa7ca, 0x9, 0x7, 0x7, 0x40, 0x7, 0x4fb, 0xfffffff7, 0x3ff, 0x5, 0x81, 0x1, 0x9, 0xfffffff8, 0x1, 0x6, 0xeb1e, 0x7fffffff, 0xd, 0x1, 0x13b40fba, 0x6, 0x9, 0x9, 0xfff, 0x2, 0x8, 0x8, 0x21, 0x0, 0x1, 0xffffffff, 0x1000, 0x8, 0x2, 0x80, 0x6, 0x5]}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7f, 0x1, 0x6}, {0x4, 0x400, 0x2}, 0x4, 0xa, 0xf7}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0x1000, 0xf}, {0x7, 0x7fff, 0x1}, 0xff, 0x2, 0x10}}, @TCA_RSVP_DST={0x8, 0x2, @loopback}, @TCA_RSVP_ACT={0xbd4, 0x6, [@m_ctinfo={0x174, 0x3, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_ACT={0x18, 0x3, {0x50f7e95c, 0x5, 0x8, 0x5a3, 0x8}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6e6f87c3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7fff, 0x8, 0x20000000, 0x4, 0x7}}]}, {0xf7, 0x6, "a0b064ed7314a2d3a24055e9240411c03d5094f669ca40a96ff021a3eba0c92cfacf5dd4611fd6651bf54cb4bf1ec6497fe654765a54c5014f3d1acd8bc1c7e69d47b2bbd3e91526c83fad5efe60005960cf4c58c28671de8b4ffa4c742fad5bfc56b4fa469f8a7f850f334c54808e31d995c96227aab6419942916db244d25c07881af1b9b3349db9a77d1570508b3adc3b267f9446ee52fd8fcaa087ef5c4635a76372c6b11924e49eded694d4d9b6c79378ac34d9fed0d7f2bc5c7417f1f52a8c80bf4eda39afcc02472f4ecbd26cc80588f04c6201ab151531a5885de9653e55bca7eea48df7b74ca5f2d8236197d6c467"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x14c, 0x1d, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0x1, 0x8, 0xc35}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x31}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x401}]}, {0xf6, 0x6, "e52617b479e463c5c5e1d191ecb3b3b1c1df4bd65f7e73392d2bc2f403d8c9b4f8a14896377825a78f9733f412877608576204b1696047819612ee6288e38bbc1d41d8fee480f1ada44937583e0a7974bc2bc2c24353787972bfef3c685d74fcc71184bffbd3870bc3120fe59d86afd92be0887a1637db6a75fb60b1cd13503a08fbb8ba6e50408b51010fac641164cdfbe2b521bdd0bb30bafcf198315d53d7c27eb17dbca2cfb78186bfe4556ca0473d84fe49769b1169dceca2e51369c542e7e9d50219345f06925d78f96c856523e2278c459c03d20c27b46a06269082d2c268798306dfcacf6ab81dbb96f9f1a25c4f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0x13c, 0x20, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0xeb, 0x6, "ee9c9764b328f70eb00f3e81e2bb5718939d17761c783b538a3ebcaf796cd7283f320dd59c6b2bc2afed5827f8bea0c1529ae7404d8b4d8f29a374bb6086d041ec4dde6605b74a8930cba2a140ae8e155b989a1c0019f4715efd1a4d8ecec5500493da3ef5450136c40fb1e537a635e1284b65358bed142f8a8ef0b11803b1b011536c64e63e7ab00c067bbe2c6fc143dc7f526cbe581c2958189f11f44bc5d5f23a45b564b8a87e768107d5bd71303e47941a7447bf1cdd439bf3504c1aadf1214db31e4f534fdc0ba152d7197ceb6e39e7c36f37b316d135c9a189672357c8f37a88dce031c4"}, {0xc, 0x7, {0x0, 0xac5fbcf488f45591}}, {0xc, 0x8, {0x6, 0x3}}}}, @m_vlan={0x11c, 0xa, 0x0, 0x0, {{0x9}, {0xa4, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x2b7, 0x1, 0x2, 0xc6c1}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfbb, 0x4, 0x1, 0x6589, 0x7fffffff}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x66f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x7ff, 0x0, 0xffff8ff5, 0x8dc6}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x229}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x1, 0x1, 0xf, 0x9}, 0x2}}]}, {0x4d, 0x6, "2cc1f741206f66c087beefacf7c84fa5d5df21a9e5e86b15fdf01d89a1068b5ea13af6d684bf09844a389458fd269108b8ac3c658031547dd3ee42d50aa9d7f1e5402ce9e140b111cc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x124, 0x15, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x10, 0xa, 0x2, 0xffff, 0x9}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xede9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfffc}, @TCA_CTINFO_ACT={0x18, 0x3, {0x21738e5f, 0x7fffffff, 0x2, 0x8001, 0x7}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0xabb, 0x0, 0x80000001, 0x2d766251}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x80000001}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}]}, {0x78, 0x6, "a50e43fcd3d3f0f7adf99e94532152d86c28d0a0723c55ff2ba1192d4cb3830c2719c51d037c437a72b1555aea0ef79c14075339994e7cc46eb2b26abe7646fc317f1ccb9bde79f708436afd829527d277d10b45997f6165ecd5f1388e29fb61a0edaf9c70847759ad55bee156b6d26fa738fb44"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x100, 0x1c, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x2, 0x5, 0x6}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x4b, 0x20000000, 0xcc0e, 0x6}, 0x3a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xa, 0x0, 0xb99d, 0x5}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x3ff, 0xffffffffffffffff, 0x2, 0x712}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xa3e1, 0x7, 0x4, 0x7}, 0xc}}]}, {0x45, 0x6, "137433f5f8ebd62e793c249513d5ef35d489c1b17d42a51b9a67c5427c0f3669fb2fba06fd053d75a45ca0fe0f324baed0a8f9f9f5665eb93303c715dd1b0a10dc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0xe4, 0x3, 0x0, 0x0, {{0x7}, {0x9c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}]}, {0x23, 0x6, "926a31480cfa6104a90c9717d17b42dd509c0e1d90cde5a5c1716d87561f02"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x108, 0x1e, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x81, 0x1, 0x1ff, 0xfffffff8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x37f5, 0x3, 0x7, 0x3}}, @TCA_DEF_DATA={0xa, 0x3, 'wlan1\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'wlan1\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6ba9ee4f, 0x1, 0x7, 0xffff6e78, 0xb06}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x6, 0x0, 0x3, 0x4}}]}, {0x52, 0x6, "dbe9dd203dbed47b83bd64d6b1421a94da0186898ae75474e553932a56573082b1b8c52c5e0003feb8b8870932ce921a989512e58e9171c4529ad25a0c34f97926a734289b6b1e6e83f7ad5942a3"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x134, 0x14, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x81}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}]}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0xc1, 0x6, "a840336a91fb9a5e5a27cdc501aafa8fb3e6e0572d85b8a542ceb4cc2f70f8e153f7c20cd9ee413f083b462f27341c6bd9f1320240b694f9200238953059ecc5aed9b28d4a140e9b68acad267f072dc0b93c6e40b6ce69b04f1c9b2d2a4163eefc7d5abf3f41ed9bf6c689c2b9b84f34a5b3632de165732890576d544297fcabe7b9fde9b778a95b6d9f9034dfe785462da7474c987c2784c7ea98f0455c2c43854ae27874c5fa6ee0127bf1b5726f165b146ebf3d17f7348c519cf072"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x174, 0x6, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x401, 0x4, 0x0, 0xfffffffd}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_SMAC={0xa, 0x4, @random="27ff51afe50d"}, @TCA_IFE_TYPE={0x6, 0x5, 0x858}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0xc5, 0x6, "aa72229f3cd6bc0f64a0ab0a500b8bdaee88e315bb713054e9476eb28dbb08a881ae4b486cbc302c741ce8a58e796c74dc800dafba240ee06e0ed114fcbc31ec0f52db1e1a1aa1fd2158a1854ee1302c4c03a1afa4968a4a8455a5ed863211d7e95141c14b1516194a9aa762b22f1921281cf94d86bf85075eb815965d50fbd191be136de65734b5eaa93c0b6383ba92731f8d0335ef95c91d5753e287ff43b97a5b6d68e56cf94286951db9f02ee7413abc2ca284d65522432a50dabef2399bf0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x4, 0x8001, 0x4e84}, {0xffff, 0x5, 0xc4}, 0xc, 0x2, 0xe}}, @TCA_RSVP_DST={0x8, 0x2, @rand_addr=0x64010100}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xc, 0x9}}]}}, @f_rsvp={{0x9}, {0x14, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x7, 0xf}}, @TCA_RSVP_DST={0x8, 0x2, @private=0xa010101}]}}, @f_rsvp={{0x9}, {0x86c, 0x2, [@TCA_RSVP_POLICE={0x868, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xfffffff9, 0x6, 0x7ff, 0x0, 0x9, 0x8, 0x0, 0x7fff, 0x3, 0x5, 0x5, 0x80000001, 0x8, 0x7, 0x4116bdff, 0x8, 0xaa, 0x40, 0x3, 0x8, 0x9, 0x1, 0x4, 0xf3ad, 0x2, 0x1, 0x7, 0x6, 0x3, 0x7f, 0x7ff, 0x0, 0x4d, 0x6, 0xfffffffc, 0xc620, 0xd19b, 0xc, 0x200, 0x1000, 0xfb3, 0x6, 0x8, 0x9, 0x1000, 0x0, 0x5, 0x72d, 0xee08, 0x7fff, 0x6, 0x2, 0xfa94, 0xb9, 0x8, 0x1bf, 0x6, 0x0, 0x8, 0x6b92, 0x3, 0x2, 0x1, 0x4eb1b656, 0x1000, 0x7, 0x7ff, 0x7, 0x0, 0x7fffffff, 0x5eb, 0x3, 0x3, 0x5, 0x39d4, 0x2, 0xb, 0x1000000, 0x1ff, 0x8001, 0xfffffff1, 0x6085, 0xd, 0x5, 0x77ea, 0xfffffffa, 0x4, 0x472, 0x3b, 0x63, 0x6, 0x42fa, 0x52d, 0xeb, 0x0, 0x6a, 0x6, 0x400, 0x0, 0x7e, 0x3, 0x308d, 0x5, 0x8, 0xc3, 0x0, 0xfffffffd, 0x1, 0xfff, 0x29, 0x9, 0xf7, 0x5, 0x12fe, 0x5, 0x101, 0x7fff, 0x9, 0x1, 0x6, 0xc, 0x81c, 0x0, 0xff, 0xfffffffb, 0x6, 0x4ab6, 0x18, 0xcb, 0x5, 0x7, 0x6, 0x9, 0x81, 0x6, 0x8, 0x3, 0x8, 0xd2, 0xffff1582, 0x0, 0xe, 0x80, 0x3, 0x2, 0x6, 0x400, 0x7, 0x200, 0x28000, 0x9, 0x0, 0x5, 0x6, 0x3, 0x0, 0x8001, 0x7, 0x800, 0xf, 0xe9, 0x3, 0x9, 0x0, 0x2, 0x9, 0x8000, 0x1, 0x1, 0xc2, 0x7, 0x400, 0x80000000, 0x9, 0x79, 0xfffff000, 0x8001, 0x3ff, 0x5, 0x8, 0x9, 0xd, 0x1, 0xfffffe00, 0xd, 0x3, 0x3, 0x5, 0x66, 0x10001, 0xd, 0x0, 0x0, 0x800, 0x89e, 0x9, 0xb, 0x6, 0x10, 0x4, 0xfffffffd, 0x4, 0x2, 0xfff, 0x8, 0xbc36, 0x50a, 0xa, 0x7, 0xfffff000, 0x7, 0x2, 0xfffffff8, 0xbfe, 0x4, 0x2, 0x9, 0x800, 0xff, 0x6, 0x0, 0x7fff, 0xffff, 0x10000, 0x3, 0xc80df79d, 0x3, 0x800, 0x2, 0xffff8000, 0x6, 0x9, 0xea, 0xd, 0x64, 0x1, 0x8, 0x8c, 0xffff, 0x233000, 0x1, 0x10001, 0x7, 0x9, 0x8, 0x7, 0xdc, 0x1, 0x3ff, 0x0, 0x1, 0x3, 0x1, 0x54541b2f, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffff00}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x6, 0xffffffff, 0xfffffffc, {0xf9, 0x0, 0x7, 0x5, 0x4, 0x95}, {0x10, 0x1, 0x0, 0x97, 0xf}, 0xc, 0x0, 0xfffffffb}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x3, 0x95b, 0x2, 0x6, 0x5, 0x5, 0x6, 0xfc1, 0x2, 0x7, 0x3, 0x8000000, 0xfffffffc, 0x81, 0x2, 0x2, 0x9, 0xfe8, 0xfffffff0, 0x515, 0x80, 0x9, 0x0, 0x1000, 0x401, 0x129, 0x80, 0xfffffffb, 0x1401, 0x7fff, 0x3, 0x7f, 0x2, 0x8, 0xff, 0x6, 0xa89e, 0x9, 0x5, 0x31, 0x80, 0x9, 0x5, 0x0, 0x8, 0x3, 0x1, 0x7ff, 0x8, 0x3, 0x2e, 0x7, 0x2, 0x9, 0x7, 0x5, 0x2, 0x0, 0x4, 0x1, 0xff, 0x6, 0x1, 0x101, 0x3, 0x0, 0x6e8f, 0x6, 0xe7, 0x3, 0xb27c, 0x8, 0x4, 0x9, 0x0, 0x1, 0x0, 0x4, 0x7, 0x4, 0x4, 0x9, 0x100, 0x1, 0x0, 0x800, 0x4a6b, 0x8, 0x10, 0x7fffffff, 0x400, 0x7, 0x31, 0x6, 0x9, 0x905, 0x0, 0x9, 0x9, 0x8, 0x0, 0x7, 0x5, 0x4, 0x3, 0xd, 0x0, 0xfffffffd, 0x0, 0x5, 0x9, 0x3, 0x2, 0x1, 0x5, 0x2, 0x0, 0x7, 0x86, 0x8, 0xffffdbf3, 0x8001, 0x7, 0x401, 0x5, 0xffffffff, 0x3ff, 0x9, 0xfffffffa, 0x8000, 0xfff, 0x55, 0xfff, 0x4000000, 0x9, 0x5, 0x8, 0x6, 0x7, 0xffffffc5, 0x2, 0x9, 0x5, 0x2, 0x2, 0xe, 0x3, 0x6, 0x1ecf65b3, 0x1c, 0xfffffff8, 0x7, 0x1, 0x5, 0x2, 0x3, 0x1ff, 0x6606, 0x3, 0x0, 0x1ff, 0x96, 0x5, 0x9, 0x0, 0x7, 0x4, 0xb, 0x9, 0x88e, 0x2, 0x0, 0x3, 0x7, 0x2, 0x7, 0x7, 0x2, 0x8, 0x5, 0x401, 0x4, 0x80, 0x0, 0x9, 0x1, 0x7, 0x569f3702, 0xd5ab, 0x7, 0xfffffffc, 0xfffffffb, 0xf7, 0xb7e, 0x0, 0x2, 0xc, 0x4, 0xfffffff1, 0x3, 0x5, 0x100, 0x9, 0xfffffffe, 0x10001, 0x80000000, 0x6, 0xa8c, 0x4, 0x2, 0x9, 0x8000, 0x6, 0xc84b, 0x40, 0x2, 0x10000, 0x800, 0x0, 0xf6d, 0x9, 0x1, 0x7fffffff, 0x6, 0x61c78bb8, 0xfffffff7, 0x401, 0x5, 0x6, 0x72, 0x4bc5, 0x6, 0x8, 0x6, 0x0, 0x0, 0xfffffff9, 0x2, 0x3, 0x0, 0x7, 0x5, 0x0, 0x3, 0xfffffffd, 0x7fffffff, 0x3, 0x5, 0x7f, 0xf, 0x3, 0x4, 0x9, 0x2, 0x1]}]}]}}, @f_tcindex={{0xc}, {0x514, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_ACT={0x4f8, 0x7, [@m_skbmod={0x1bc, 0x1d, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfff7}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="021824d53c55"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x7, 0x8, 0xffff, 0x9}, 0x5}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xdb, 0x401, 0x1, 0x4, 0x8}, 0x5}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x200000, 0x0, 0x4, 0x422f, 0x9c2}, 0x7}}]}, {0xe9, 0x6, "057beb1627e31d3e23261ce23ae8724e214225a7122e1a93485b25b6a758574e168c343ded27e53c84be630b7d1821cb6d1a4d1a002a0447519f43a607cf1de8ca7d86383f3ca26a0d3d726d7f502137b3c6e9735520de65343ddc3e652e44b4ad93a89f03f65967f6975b1b53b4bf2358e64c5667e74dcf565fa73cf35cc47e984f43cfed179457e92f45009b169709589fad70eba34ee8110a964cc562500dc49c9f3ec51faf497347f835c312cda47f3d7a644626a2d2e1e4677b2d2d070199a999abdfa8e8b1014850a52f3e79746a1e5e19e3dfda19945402f8059630fdd089dbb9e9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x68, 0x2, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xc1, 0x2, 0x4, 0x800, 0xfffffffb}, @empty, @multicast1, 0x0, 0x1}}]}, {0x17, 0x6, "57277f9300ebd9457c7e60cce426fc7a2cb344"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x3}}}}, @m_skbedit={0xa8, 0xa, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xffffff1c, 0x8, 0x8, 0x1, 0x6c10bf2e}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x101, 0x10001, 0x2000000e, 0x200, 0xfffffeff}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0x33, 0x6, "aa95cc4feceee2eafd33a76367f6fb80ff377a65a0dc368adf7021df0826fb3fa03872f6196b36a388f84bc2e863d1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0xe4, 0x1f, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x80000001, 0x1, 0xffff, 0xf}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3aa0}]}, {0x96, 0x6, "d646aa4a4e3d1c952ba597e12e3efac7abd8186037a7ea21e3a5d6ff79942fdea7ec62ce4fe71d935725f26b6725bd76ec4018bb91aacf3a79af5e6ab0a5e84265198c462eb22563c94fbe63423f0c198ca12e3a0d9f9364dd2977d0a4653b94c12c60e29cac6422c6b5a654257708c1bcc7b920e5abd7c2d45186987b96dcdb8f15693e4b262e76f4d90bfa94a3c250fcf8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x144, 0x14, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x51, 0x20000000, 0xffff1175, 0x200}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff9, 0x1, 0x1, 0x2, 0x80000000}, 0xe}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x8515, 0x3, 0x5, 0xd}, 0x13}}]}, {0xc1, 0x6, "91e8e11f64070e575a06d9c3df72f65ce373bb9347e4958909e90c7ffdb0fc97bf003f848c49fa6dfc8cb4c000f8202cac7b4566bc4cd075a9b516798318b128fcc3600888efbe5c92a6669e7ea6fe1bc8985775dcb86ddb1b0be17b6d2c6ff04900c5c282d7f90f6b876f556f8ae00224123658c69403571717d2bca0f466a9266e38fea1d6c8c8f9016f5018f4233bced6b3e5efad3cd866fa6283ff854b72923b186439d2dd574b86898efddad9b189d7a2ffdebe2f9fbee65f66ad"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xf, 0x7}}, @TCA_TCINDEX_FALL_THROUGH={0x8}]}}, @f_rsvp6={{0xa}, {0x514, 0x2, [@TCA_RSVP_ACT={0x4fc, 0x6, [@m_ctinfo={0x44, 0x11, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xd3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0x7, 0x6, "b0b758"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x170, 0x15, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xd8}]}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xd5, 0x6, "9d4d2f6c842195a1aef97750381e0d4af710890cf1a827e9376af5f8fe550d283a0d84cf485f88c88a08a2458afa3f67662974b7d6ec3d282f4e1943b1219beb76c9a9565fd84b555ad30c057ce84a2062d8ca9d3b86a05182cb61bbd94814237cfea067ed9b938481e5a54e70b9e52472d0ee72434b2024b8a961d0eaa37f0f042b85f491cc9fd62a0b58652bb4eb61e2c63eb375db3fc73eae67d0a0888243055923259926a7221e1933277ece62f2ece667a42a29661c29a2fc19f9f5eff149dfe292dee5995ba73582110fb607bafb"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x1b4, 0x4, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffff67f, 0x10000, 0x8, 0x2, 0xc499}, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast2, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x2, 0x2, 0x4, 0x6}, @broadcast, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x0, 0x2, 0xb2, 0x3}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfff, 0x5, 0x1, 0x7, 0x80000001}, @private=0xa010102, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6, 0xffffffffeffffff3, 0x400, 0x4}, @multicast1, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x9, 0x0, 0x0, 0xfffffff8}, @broadcast, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x4, 0x4, 0x9, 0x7}, @remote, @remote, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa7, 0x5, 0x8, 0x8, 0x9}, @remote, @remote, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x75e3, 0x10000000, 0x8, 0xfffffff3}, @loopback, @multicast2, 0xff}}]}, {0x22, 0x6, "8493f74edf600d14b3b7cc49e6ccecb9c3340a86bccf60e5dd7dbe2cb7c5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_skbedit={0x6c, 0x19, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0x35, 0x6, "fc1569178c316330e5f860fa2c3311dc517486b7471a943c72a59a3ccdc44750b69bf4f0cf61dfc1bc0a3d934fb916f7ba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x124, 0x19, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "ba84f9cecd3703069bf8cea31c20291f"}]}, {0xe6, 0x6, "39e22382eaaa0d0e7a2704566e9759b2c311baadda88d08d1e5367fd39af86e87128f591dc5a7744bef525232b7d30a75362bdbdb7b58537fc5f672454b1aac1f80f49a5077c25323f8fc88878e11f0ab05b2de308f7c6d9e554a3affb012d3a81fab05936e63e12b2b4def20e296841a74802ee06ebcccecf36da632669acafd1cdc0f7925a1927f9eb89dc15f735275ab1af57542f704a546b29c477b56a2e092b6e1839f0dc7381111e6d1015db35cf9866ce9f0c2dcd37ad4a2bee5e72ccc14ce08d7d5d2ffd6be0c60ba056a45445cf0f933621be8cd89253ec5e7ba33107b1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_RSVP_DST={0x14, 0x2, @local}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}]}}, @f_rsvp6={{0xa}, {0x27a8, 0x2, [@TCA_RSVP_ACT={0xa4, 0x6, [@m_ife={0x58, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x2d, 0x6, "2122cb586e63fa00f6599b152a39d11a37128c72514e5bcc30099cdf3a4b6172928e0a4ce5436e4f92"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x48, 0x14, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0xffff}]}, {0x15, 0x6, "324708cd405c1edb5fd652c54f2a9840bd"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x5, 0x4f, 0x101}, {0x3ff, 0x7, 0x40}, 0x2f, 0x5, 0x4}}, @TCA_RSVP_ACT={0x26d8, 0x6, [@m_mpls={0x14c, 0x8, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffff7, 0x0, 0x8, 0x9, 0x143f}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9}]}, {0xec, 0x6, "66b3531a350f5dfc5b6947570df34dd2a51436a348b7276e13fb6ee50d08bce6a9470641234627693beab865671ffeb56ed4025ef6b3de1782529ae3023d7157faa125f003fd910c7daa7826afae1b2f617cec39f3f2ab615bebf687eab7c94289595c5987abfb3669abf272f57ee9b749d79d2c2a215aeb6b48aac8d98e40fab82e17e203d0725e907fdc356e337e604094a1351e6f65ee82b9bbb2d7ce061ec0a411010350d08c412df2c38952ec57d612f3df80ef86eaba53b573b0cda3f2f34f5784c7baefb1ecdc9929d3aaec0a18274846c0ce9e3a7a2a6ec5d06efb07f98572e94620343d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x180, 0x1d, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xbc3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7fffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x10001}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9c}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10, 0x1, 0x5, 0x6, 0x7fff}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}]}, {0xf4, 0x6, "9b1e59b0d8870477ffb500c37f182a24fa207b63c6537b69ccfe457e9e1732824dba3b2634818effc54c52e08d41d8223709923164cb31479436c1ef923cb559519d9660567ee00da1c1d8775439c5700fcf1aaa81e385eeae9569bc217d55c1ee5cec08cc0e6eb2a79aff103ee5596cf1abe6e9ebb72d9982689060b03413367bde4aeb827561e9eddc25a15b9db6ee68dce40328fbb6ade2a7dcdb6da6cac75153a72a5ab48f60a6c36a8597c06a0a99a3a9e63c2cf3a4f3ea143e2b0a14ddf6c54de9c1c050a7562005c10752bc9f91d99753afac4748141fd39f09c707826edde4ab57ccffaa8ce840550e44e42c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x4}}}}, @m_ife={0x118, 0x1f, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x3, 0x0, 0x3, 0x7fffffff}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}]}, {0xcb, 0x6, "706b2f22109cf6edf3d3b4cfbc6d62c65c73b0455a57861521d01efb526fc61ca158f20e0dd42bd3e23b6df852f929065c0db0dde1d74dbc482faea3da6819751b91630b9d3e2c5ec4240ab920b0dc145ba1f61056a5b074dbc62b245d3899abb9ed17365071df9a3839d80c88de63f9154cbb5d811bdd09551d0c57f7801227b44f95dd8e837d77a6dfa98e0c17fa5076de1721a24f61e0778c99a5b6bf32b60ace8c808416ea33a8541f683c5638bac7286c23228dc3bce1365b6c5e0bbc18745bcb1179994a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x154, 0x1b, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffff566, 0xda, 0xffffffffffffffff, 0x0, 0x8}, @multicast1, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x0, 0x5, 0x7, 0x74}, @multicast1, @empty, 0xffffffff, 0x1}}]}, {0xd9, 0x6, "21fd50360b24a0c1f690c9f4247b88992d529eecd3f52fd5c7b47f8e86480ea94ce72e15760f958b11603c874005e67b3a85fdf9268aa1b6ee0d88f03f08c48490037ab815ffc9f0c4ff5cc192611ef0f504d6761839b5d891b73dc57bb5945c63a2da93e63b334b4b673ddbd2afd4f79cfdfb244cc02c8d2d266765c872876003fea72cb287d62657900f5860c0ac92614298580a2ba5bb4a046860cc2e896e20b1b82192010d13d7df0e3cafc0eb9729f1a2fe58bdfb4ee6889c6572c76d9805cc1dbc1035508425b0b2b4262b56c8cf55cd3641"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xd4, 0x1d, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x101, 0x16e7, 0x7, 0x8, 0x3}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x70, 0x765d, 0xffffffffffffffff, 0x3d8, 0x7}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0xffffebbf, 0x4, 0xfffffffc, 0x7f}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4c, 0x6, "6a377c84721f6908722bb3f6c28f165aa4ce36ee02eeccc48cb2b8766f2bcdf51c2a7cf5fa72e449a1d7bc86ad138624fd0b87635c17fc42d0e3b8cb6b7bdf8911a36ad2c0de2678"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}, @m_vlan={0x1038, 0x17, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaad}]}, {0x1004, 0x6, "69b602546bc5628531f7579373901c9a0ea52b628115e00152c53675cc2a2649e5c76b6314bace066589ced9016c5ae61ef756bb35caa87e11c6ad8c9ef44ae7e3bfa9a01a991ea69bba70885afacf4c17b80429ed3c2a30bce29398e617e8fd54e4af216af6326d9cfd560e0794194dff4860b52524d1d740a89e04676de17b9a5a7238588f39d281603055f227bb8c36a3fa0bede3c8f68b80da59008fc94f21dec2c86228d0b024045fac5af0f7ab8ece47eb7b6aa3c2e15fd28b3be75912310f983fcb08058c98080db078083245473e2976fc4bf2005f48057ade8a86724ef94684d879a81c2ffb17b1d096b46ed1293e7e77a21d5da8d1c78c62b9b0d12bc33cb058182a67e954bfa5a9e2c8547501bbcf7128d597d6b51d074527b648f0d7758030b857043b2b32a53638bf6b780afb01c6686b6a4288afca8222ffef40195226b66c67c6fce982999a6b6a9be6404143cfa51ec90fca02c6e79cdf4bb6ba4fec97a9a35965f999761b83c1dc354ae1a3d07d934bbd235833e457409ae87db9c93dac2c56f4aa608347df621ad37bffb31a63393d3efb64dbabaac59e6f6341002af9ffe993939cfd1d815b14d1f0abcb28da95f8407e8c643f5fe196be5cc456464315c04e858ab82cb29b384ae46a2e5213e8afcee072442cfc7b52af50b15529f20d8216b9ecd4b1cc8c753f1286f83d4fe9d4e92418422dc69126521aca163bfe5031e3cccfd213c515c8cd6d9320682483a5477365620f7ca3a77aee56d90feab1f745c0844e2ef7c91e2d3217961e214198d1e993688d76807b8945c97c8c22032859efdd2ccb93612a02ffcf6cf961596d9e18f600ef2873d351e994ad09312a4fc0665e76560336eef1e21cd10278abf61e9c6f66a141cca6a4a0adf55e9f83f9d58cfc599f3f3e5f913e39ee93e62a3d1ca236fe7892c746da7c1b1a4d3909d4f7ae84bed57bf6dd57738d2f3c542abbcb262c8215067eaff9811216c15a4832f6968d94f859ace0df1e11e97b181a5568ec8af1260d2e3693bd1cc2be8be66a10ff36646be889b2f6a95b9e38f2e99902f113ed637a1cad5401dae8210eff0dd848d17233247120f49a054681dec03190b5580aba6dd846d766ac5f286db01cad5423de6b42c2ebe6a465522402eb10404b3b63d9b569171874b7f010c63d7193e99a63ff41e452a5c8c3401fa97fabfa217c40e57b658ced3faf278523c843c15dbda0e3b87ce9d50cb806d5dec80005dd6ea39d0c4c27c566624c89597de7215041a59e61ad45b19fa2745ec909c58284567e7b9f2e7f78e465f05afaad27279f3bd169e32dad861bc0eabf6b03199ffa746b5ab5c7ad98a76025d9e0ae8fb4659d4706d6e2b4fada25e29355a605554eca71ec39f3945e98e84f95a76f0fffc86fd1d1882701b192703726f7c8246574dbe20e3187f91637aa859838db7c2d9fef306ebf8fee9effcc03c2b7073f8c64ad11d114bb307cb8f04c89969e0eb71a6e84bd55a6222b4195ff72111d7ffd209850dbe694713b97fa8f45328402ca2c1fed2f662ba82a9e6df440fa9a2796ab2cc82a9067366c70dffe3e6fda6377c9f49005fb4332f98160184b09c90fb627bfcd1d8660f7d72be6c7f086d60ec18a2c9d9a672b7a5addfd806ecbf14ed0b4b9cf1c1edc378a7a1c2e9661f263b560b12112ddca317e47505e51b4684b3f1ea02bf9ddb67e961ac8c91ceabac37ffd70ca6e91a3b88fb578629e84d6cc2b24cb3f89d27d8754a7d08381164f7c9151a869b02a9885d297877b36c0e58cb136c7e86398cf017dcdacbe7130ccc0d3e932b05d050fde6ca366e6dac2f3a7a259220436ed6e886fb0158e5e0be9fdd619f9a66a7df49b4f8ea26c65a4ec07fa420c9492eb8b39e04704538b597c2d7f3384043965998a1b963632812ecb87f4de1983674c137fa905868e0240087270671e5fec9cb05cd072b660ddfea16a19cfd4aefdde421b99a6e08986fc257763da052b0fdf72469c3c7e0bc9dc97165afded0552047f43ee11ce0e46ab3c85386a18b810007081004ebb3bd8160cec8431a0979d776ab7712e6fd58219f829a9fdbf83e476c68b8b4e209ea7e5ebc0a1eea10ed7bbb8691ff10101bc1b6bf71d6dca69a036172e26f71b2f4d8adcd101e8d02409dfa911693887e176e3e70d2bed0730cb9146551d3db86c2974496bbb47558d6624b2a785ccc940c78851a80c40a028da19a269639592a9e404103e4ba18be5e05d11533437dd3713d5b3ecd06a13dd1db9ed3dcc507f2a4b547de1a25a159336c05eafc2c51ccf6b5daaf827e30e8842f63ab17f76084946098094d71d78ef73a8cc2d15c1be3ff77c0c588587549103a4016d5d2ea6539aa37c2297fc2ae111a351adde96cbc33d4ede624379ea1d6c7daca9e15c050e08e1d2d231643243487837ddf1df4df9aab37984b678c2a592e1a96339d146bbde4c29af5169cadc0a446e9db7721611257ef4ad4ace8b3c76023512471d7270ccae6a3bacd63ce6887d6ea2a94226b2903fed9231b20ae201d3102859b997d896de2f272ccc18000e8210dd70e607d456e438c9682c12c31e0add425cfe2f67c49d557dcdd87f29fb57a0f610331814c03381a290f40b3c0f78e2e4eabbb313f8f961652297527776ecbb6b0a790ff15a181550cbd50b7398469fca5229acf6915e054d524ae74576b17faa62950466542f0657aed0c4e36c68431cbbb72d24e3e483079a911be67d8fdee1b5618131ac16d1fb551c006346ab2e6d4415c94df109d6d3405dfd516a7ffd56ae68eb074f1153433a4fc41fdff9d5084fa8402af84b1e92538a26bf84d5fc430a195acdb803c48c895794d9bc7c8b0ada357ee0eebd944eaa38d4de40f5462423162bb91b0933a2a6c58f4de7f9fe6ef0647dfec89d2c72c4d249a7596b8b8156c88f19f28e08d824eb4ffd76d40e9c2c9084aeb942a5d9b70a3be97fd774fd345effeb83309572ea97421f601286c7ee2c62669e9c05838b6018141bb98a4c1c729c2af7df068d522ac81e09bd41d9a9c3e63865a383d098206271974bed25971c69737fe307128df273c25f181ae23ff43ee86b656e52f83ab5a4417ebb775498ef41f997d05372ae6f39a06accab32358bcd852af874556bb03724a45af03360e434aa9c02feb64fe64048a4317cccb6b23111cfa52a61b33f38c8ac26eaca0ee737a604a4a31aa71c2a6485435971b06df57034265c88b338a67d0d2a69a1a5f8bc2fcd1fd8c89455405ced9e27802825349aeedb6507d909d8c51ed7f04d3d5e28b24221e3ea8677dc8803cfc4539d846d661b3d5941eec85a41e572c50e42a2aa2dadefefa84346b1ecb4e9bc1aa6cfcc99ed6b4249277dcb9cceb5300914dff3a68c2f373595431ae72ce1e305b44a3309260632596b2bd6a0199ab1c0b0973d1d9e6decfdabe4817c758d4a23c6832d11d461d4ea0c1c6e1a000f2b165809fe1cec08fe460377c51d2463a53308ace73a5afcf3ebc526e6255cd5d7244127e5e59a7bc44961de487dc36fad19e0577593afea54489e955cf2c74f9411d01c0761172654fb2596aca00cc9e2a1f832cb1c2a0c3e35358d9ab94266f9bbf2e1190b422f7b7889167f51ab7b6f7e6bf2eac506a06035c5e6bfc059434c906c307445ee3215b5ccf8e8d19a2626988e685674d0d5756e1146fcb28546dadead6a3c712aa8c6b0d5c884d7ccf04cfa8d239067c2fc99287c2286a632d80dd24560ebd5cd901207d97464c49b3ca5958713a890d3fff3097f3d9d8672ae37ac94cd3dc111fe2b1ea968a2abaeb5c742445f517fc27824f638946358f072c2a923b1065da6474c6b2c2c7c81a1c7fd5879bea89b216f935f5f17937ea7708017d032a3c741e74f1eb3e32fa467357e9a0a7a8c89696b13e5acd376946be806c98254d6599ac17847bb60f4750daa8e884fb9886ccf6a1e8fb0c9d72b5b841d7b90392c62ed7d7eeda56e2e0485ed992e46c0674404b685e728c03a24ab9caecf629f9d86c70456af1b062e64f1d50f03429d4143eb1993c9f504c195f885f13580c50f5b1873ef1d8a3baa81f5dfb78b4ba3db7197863079e97b4592023691f2f249525d869ac42d7ebc7e73455a5936f87afad9b03298eb10b13a839b8c8ae3f3b0c5eab2b6e979815cc5a0553701d530023458ff6b401ae603aa871d74c409e5ee8cff6eb220683cea811842ac8c6879ef4bf4c9e89073e9f7c94b36d1d112376c6534ca59a529a379ffbf5f8a753462033ccace7341bb498984493e19f52f3247972bf65568bfc92d4feb22b50ccd4cb065aaba6fac8563297bf48538c0e7924ed67574ceb1210675e7fc8e01b725277874865ee06943138b948ada5d12da552ca501bfc8ffe7c5713dfe9358b58e26d8334c711c4cf54478f8f6b385e7e02049fe596a3f14b85fa1a4cd5edb26e9684be1396757a825ab24f5ede8ee9aaa6d64ae1ea113ffba9068ccf10e71b4fce5dd0e58fde6d08a133e7dd8b691eac5666cc0e90cc6e864e4f983d5aac224184c4a2495c02724fbbf7d0e4be73015af3f6d745e00c61c16e26bdb77776a6e512d76564efb07db9d8ac390b3f14f7ed2c864c41884dbf06ae84ebc6488dc675825e0fd3834be62256640ff726d97370a029fc54ec8f992ea24eb3433fe055c3a8e83c75aa31b4ca1542d863f5de45f2f7e530e0cf106dad8b1e0ab1cbc839139a63aeaf7e4082e103999f48e6c0e188758cb3fb56eaeff1c27432ffbbf59f71d54e2b60e6dd3adacba3b05a8e69a2238e2fd31cd0ee963075539ee05a0420e3799a8b6cec488cec58237ccff517b56b72294adcfb7e6454d94d9297bda811de16bd4a8b3d426fa277bcb8d788dbc40179c8264d65c5495eb9042a26fadc5952c63a8b0ab029f8fdd69a58e7c5a9bf8a4de5ba53d09af45af376aff032a9fbb60521bde0ce53140069128fdddad085c619a7fd3dce8c035595a0936d50e4a85774dc33e754b1cc7011b23d158f013bf5b09ebcab0ee1e37e4812ce155a96f6c670d36f8c4b9091378eece7252a7c30f41291a82350dc384898bd546c8ebe94dd81eca47d7f4827ac4d07b2ce1ed8d95c9a60b6fb5518a31d18a38585319e2427b8a94950e29b06948a6ab8c6e15b5882965ec0dad64d59277d90926285ef3686fe948a7ec3dba6ec731d12d733e602aa0856f1d2b9c75aad53b69335b0008a17d30971b0caf202958d9286304d8ed5b730d10d6687cd40ec099b8c921d1434b67f0cfcfd5f2a949da64893856f495a6b57662021beb1758ef7f0d72ec57818460f0c0950d95b2d4f0d42d57e7f2c44928c501397f1fe4ebd06f5e1a0b4e6205423ea9d8d1c3b84a4897d7e1ed67f810ece40dac4a3c3481abfb9ff97c1b152b0ba52e808ad81319f7618f77c886be1eacd58195f88ad61ff6e3c946e9bd15153cb77f687e3de8600f4c1c8937176abc163de3e2ccb3e5ec63128ddfb4bd55e5bba9a444a373b4af97128aaac6ea50ec451b4fe35e07bb9a8d33dbde8a7471f017ad2c47b1c8b077e6a56048840cbe22e6c2f75498f3179320a7dcede9f7d09ad1da70670233ca86e46e2ff89f6a1990fa496f4d8abaae3d509c0924225dd00ab056c41f433b2a80c8fb9f61b0bbf37c2d64229dddbe56b09f13538ed99903cc3f5d2c30c6a3badcda274c0dc468ad39a7f59e8f4df3dbff69c9fda8326810a5b4fc6eb40da61a0c679cfcd7a8c88f7aa2c4a280352659a4db8b3a468fb3fc25739494b8afe9cc11ea518a1c541713ba"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x1090, 0x17, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc55a, 0xe, 0x2, 0x7fffffff, 0x9}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0x6, 0x6, 0x80000000, 0x2}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x10000000, 0x7, 0x6}, 0x1, r5}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x4}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xb, 0x7}}]}}, @f_tcindex={{0xc}, {0x4}}, @f_tcindex={{0xc}, {0x250, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_POLICE={0x10, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}, @TCA_TCINDEX_ACT={0x1b4, 0x7, [@m_simple={0x70, 0x4, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x11c3, 0xb19, 0xffffffffeffffff8, 0x4, 0x1e406}}, @TCA_DEF_DATA={0x6, 0x3, '*\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x6, 0x3, '@\x00'}]}, {0xb, 0x6, "a62ae9f2a09de7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x140, 0x18, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x49, 0x6, {0x6, 'raw\x00', 0xe3, 0x7, "636d7c69e208ee5d5c689df6ac350ba7a6b79fcbffad5874c1f2630d4177c6"}}]}, {0xb9, 0x6, "8e32399a3ea67e80edc68f2e8113843e1aa2a6ccb151f62a966ab6ae370fc7aef812dfebc297f09b3777ffd84acb9b7eafdd10b7e93fa029fb6e5390f61b995eba202152706772d83c01fc4182eeabaf137d0ca1b3e7ff5154c751936769e346a7bd4f0b8ee5d1aeb6a8f4c91a6dc62b38cb889866964b318e07c813b7fccb3cbf61e4c413ba59f76a9b638996f0d509241dd8aab5fd37d54262b86a6f842a613bd853435e74f709a64705566be971bcb18274aca5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_TCINDEX_CLASSID={0x8}, @TCA_TCINDEX_MASK={0x6}, @TCA_TCINDEX_POLICE={0x68, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x86}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x5, 0xfe5b, 0xfb, 0x2, {0x2, 0x1, 0x7, 0x6, 0x4, 0x5f68}, {0x7, 0x0, 0x2, 0x0, 0xba, 0x1}, 0x11c77714, 0x4, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}]}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}]}}]}, 0x4ddc}, 0x1, 0x0, 0x0, 0x1}, 0x810) ioctl(r1, 0x8b19, &(0x7f0000000040)) 3m54.014762273s ago: executing program 0 (id=3752): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, 0x0, 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x6, 0x1, 0xdfffffff, 0x1001, 0x3, 0xfffeffff00000001, 0xd, 0xf22, 0xe}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000340)='./mnt\x00', r2}, 0x5) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffffc}], 0x2, 0x10000, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000280)={0x9, 0x1000, 0x2, 0xffffffffffffffff, 0x4}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(0x0, 0x0) unshare(0x40000080) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x0, 0x5) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) unshare(0x42000080) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) clock_gettime(0x0, &(0x7f0000000240)) r5 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 3m53.724035431s ago: executing program 32 (id=3752): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, 0x0, 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x6, 0x1, 0xdfffffff, 0x1001, 0x3, 0xfffeffff00000001, 0xd, 0xf22, 0xe}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000340)='./mnt\x00', r2}, 0x5) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffffc}], 0x2, 0x10000, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000280)={0x9, 0x1000, 0x2, 0xffffffffffffffff, 0x4}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(0x0, 0x0) unshare(0x40000080) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x0, 0x5) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) unshare(0x42000080) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) clock_gettime(0x0, &(0x7f0000000240)) r5 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 14.139543658s ago: executing program 3 (id=4583): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000140)='A', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x0, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x3}, 0xe) shutdown(r7, 0x1) recvmmsg(r7, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f00000001c0)={0x0, 0x0}) r8 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xe3, 0xe, 0x6e, 0x20, 0x1d50, 0x614d, 0xf9bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x17, 0x72, 0x1, 0xff, 0x37, 0xa2, 0xd, [], [{{0x9, 0x5, 0x2, 0x4, 0x10, 0x5, 0x53, 0xa4}}]}}]}}]}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0xc048aec8, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, 0x1}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b000019000780080003000000000008000200000000000800030000"], 0x7c}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000002c0), 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 12.359933924s ago: executing program 2 (id=4591): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@allocspi={0x114, 0x16, 0x401, 0xfffffffd, 0x0, {{{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0xd0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in6=@mcast2, {0x8000000000000001, 0xfffffffffffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8200000000000}, {0x4, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x8, 0xfffffffd}, [@srcaddr={0x14, 0xd, @in=@private=0xa010102}, @extra_flags={0x8, 0x18, 0x3}]}, 0x114}}, 0x4808) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pidfd_getfd(r3, r4, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000100)={0x40, 0x3, 0x5, 'N\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) 10.91871884s ago: executing program 3 (id=4601): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)='e', 0x1}], 0x1}, 0x40040) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) (fail_nth: 4) 10.299147452s ago: executing program 3 (id=4602): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x7f, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x4b, 0x1ff, 0x6, 0xb0e2, 0x80ffff, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x80}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x18, &(0x7f0000000ac0)=ANY=[@ANYBLOB="188616598c8a694f33617200000000200000969a44000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1}, 0x0, 0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4074) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000010000008e000000c9e70000010000", @ANYBLOB='\x00'/20, @ANYBLOB='\x00'/13], 0x48) ftruncate(0xffffffffffffffff, 0x6) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0xd) 10.031156628s ago: executing program 2 (id=4605): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') move_pages(0x0, 0x2, &(0x7f0000000500)=[&(0x7f0000454000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000000), 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0xffffffde, &(0x7f0000000000), 0x0, 0x0, 0x28, 0x24044000}, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) 9.548407637s ago: executing program 4 (id=4606): r0 = socket$key(0xf, 0x3, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="490000001a08010025bd7000000000000a000000", @ANYRES32=0x0, @ANYBLOB="20008c000e0003000700000000000000fcffffff000000001400010000000000000000000000ffffac1e0001"], 0x44}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x3355, 0x7, '\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x91, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x110000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x17, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e69303, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7ff, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xd, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x9, 0x1, 0xb, 0x1, 0x1, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x7, 0xaad, 0x7, 0x4000000001, 0xc, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) futex_waitv(&(0x7f0000001940)=[{0x8, &(0x7f0000000000)=0x1, 0x82}, {0xf73f, &(0x7f0000000200)=0x10000, 0x2}, {0x7, &(0x7f0000000240)=0x830, 0x82}, {0x0, &(0x7f0000000440)=0xfffffffffffffff8, 0x2}, {0xffffffff00000001, &(0x7f0000000480)=0x4a2d, 0x2}, {0x1, &(0x7f00000004c0)=0x8000, 0x82}, {0x6, &(0x7f0000000500)=0x10001, 0x2}, {0x84f, &(0x7f0000000540)=0x6, 0x80}, {0x8000000000000001, &(0x7f0000000580)=0x3, 0x2}, {0x8, &(0x7f00000005c0)=0xa3, 0x82}, {0x2, &(0x7f0000000600)=0xb0, 0x82}, {0x5, &(0x7f0000000640)=0x1000, 0x82}, {0x7f, &(0x7f0000000680)=0x10, 0x82}, {0xfff, &(0x7f00000006c0)=0x100000001, 0x82}, {0x80000000, &(0x7f0000000700)=0x10, 0x2}, {0xfffffffffffffffc, &(0x7f0000000740)=0x6, 0x2}, {0x9, &(0x7f0000000780)=0x1, 0x2}, {0x5, &(0x7f00000007c0)=0x1, 0x2}, {0xa, &(0x7f0000000800)=0x3d68, 0x82}, {0x4e, &(0x7f0000000840)=0xffffffffffffffc0, 0x2}, {0x1, &(0x7f0000000880)=0x6c23, 0x82}, {0x5ab1effa, &(0x7f00000008c0)=0x8, 0x2}, {0x6, &(0x7f0000000900)=0x8, 0x2}, {0x8000, &(0x7f0000000940)=0x8, 0x82}, {0x9, &(0x7f0000000980)=0x3, 0x82}, {0xf9, &(0x7f00000009c0)=0xae4b, 0x2}, {0xffffffffffffddad, &(0x7f0000000a00), 0x2}, {0x0, &(0x7f0000000a40)=0x1ff, 0x2}, {0x2, &(0x7f0000000f80)=0x10000, 0x2}, {0xffffffffffffff00, &(0x7f0000000fc0)=0x8, 0x2}, {0x7281, &(0x7f0000001000)=0x7ff, 0x82}, {0x5, &(0x7f0000001040), 0x2}, {0x81, &(0x7f0000001080)=0x5, 0x2}, {0x0, &(0x7f00000010c0)=0xd2ee, 0x2}, {0x0, &(0x7f0000001100)=0xfffffffffffeffff, 0x82}, {0x9, &(0x7f0000001140)=0x6, 0x2}, {0x8, &(0x7f0000001180)=0x8, 0x82}, {0x2, &(0x7f00000011c0)=0x2, 0x82}, {0x3ff80000, &(0x7f0000001200)=0xfffffffffffffff8, 0x2}, {0x5, &(0x7f0000001240)=0x3, 0x2}, {0x3, &(0x7f0000001280)=0xfffffffffffffff7, 0x82}, {0x8000000000000001, &(0x7f00000012c0)=0xfff, 0x2373fb48b7c2de3f}, {0x2000000000000000, &(0x7f0000001300)=0x1, 0x2}, {0xf6c, &(0x7f0000001340)=0x8, 0x2}, {0x9, &(0x7f0000001380)=0x81, 0x82}, {0x6, &(0x7f00000013c0)=0x2, 0x2}, {0x8, &(0x7f0000001400)=0x10001, 0xbe8eb8ea087843dc}, {0x1, 0x0, 0x82}, {0x800, &(0x7f0000001480)=0x6, 0x2}, {0x3, &(0x7f00000014c0)=0x3, 0x2}, {0x8, &(0x7f0000001500)=0x7, 0x2}, {0x0, &(0x7f0000001540)=0x77e, 0x82}, {0x5, &(0x7f0000001580)=0x100000001, 0x2}, {0xffffffff, &(0x7f00000015c0)=0x40, 0x2}, {0x7, &(0x7f0000001600)=0x7, 0x82}, {0xf07, &(0x7f0000001640)=0x1, 0x82}, {0xdb2, &(0x7f00000016c0)=0x907c, 0x2}, {0x0, &(0x7f0000001700)=0x6, 0x82}, {0x629, &(0x7f0000001740)=0xc, 0x82}, {0x9, &(0x7f0000001780)=0x9, 0x82}, {0x1, 0x0, 0x2}, {0x7, &(0x7f0000001800)=0x29, 0x2}, {0x10001, &(0x7f0000001880)=0x5, 0x2}, {0x6, &(0x7f00000018c0)=0x4, 0x82}, {0x1, &(0x7f0000001900)=0x7, 0x2}], 0x41, 0x0, &(0x7f0000001f80), 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfff7fffe, 0xbde, 0xb, 0x10000}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x900, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd606ed6c400442fff00000000000000000000000000000000ff020000000000000000000000000001242088a80000fffc00000800000086dd88a888be08000000100800fe0100000000000001080022eb000000042000c000020000000000000000030010080065580000000051b6b827ffb9b3"], 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[], 0x1c}], 0x1}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2140, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0xd8}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x4, 0x9, 0xa0363159, 0x5, 0x5, 0x9, 0x5, 0x7, 0x1, 0x8, 0x0, 0x7}}) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000100)={0x1, 0x1, 0x9, 0x6, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 8.739297553s ago: executing program 2 (id=4609): r0 = socket$key(0xf, 0x3, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="490000001a08010025bd7000000000000a000000", @ANYRES32=0x0, @ANYBLOB="20008c000e0003000700000000000000fcffffff000000001400010000000000000000000000ffffac1e0001"], 0x44}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x3355, 0x7, '\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x91, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x110000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x17, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e69303, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7ff, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xd, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x9, 0x1, 0xb, 0x1, 0x1, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x7, 0xaad, 0x7, 0x4000000001, 0xc, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) futex_waitv(&(0x7f0000001940)=[{0x8, &(0x7f0000000000)=0x1, 0x82}, {0xf73f, &(0x7f0000000200)=0x10000, 0x2}, {0x7, &(0x7f0000000240)=0x830, 0x82}, {0x0, &(0x7f0000000440)=0xfffffffffffffff8, 0x2}, {0xffffffff00000001, &(0x7f0000000480)=0x4a2d, 0x2}, {0x1, &(0x7f00000004c0)=0x8000, 0x82}, {0x6, &(0x7f0000000500)=0x10001, 0x2}, {0x84f, &(0x7f0000000540)=0x6, 0x80}, {0x8000000000000001, &(0x7f0000000580)=0x3, 0x2}, {0x8, &(0x7f00000005c0)=0xa3, 0x82}, {0x2, &(0x7f0000000600)=0xb0, 0x82}, {0x5, &(0x7f0000000640)=0x1000, 0x82}, {0x7f, &(0x7f0000000680)=0x10, 0x82}, {0xfff, &(0x7f00000006c0)=0x100000001, 0x82}, {0x80000000, &(0x7f0000000700)=0x10, 0x2}, {0xfffffffffffffffc, &(0x7f0000000740)=0x6, 0x2}, {0x9, &(0x7f0000000780)=0x1, 0x2}, {0x5, &(0x7f00000007c0)=0x1, 0x2}, {0xa, &(0x7f0000000800)=0x3d68, 0x82}, {0x4e, &(0x7f0000000840)=0xffffffffffffffc0, 0x2}, {0x1, &(0x7f0000000880)=0x6c23, 0x82}, {0x5ab1effa, &(0x7f00000008c0)=0x8, 0x2}, {0x6, &(0x7f0000000900)=0x8, 0x2}, {0x8000, &(0x7f0000000940)=0x8, 0x82}, {0x9, &(0x7f0000000980)=0x3, 0x82}, {0xf9, &(0x7f00000009c0)=0xae4b, 0x2}, {0xffffffffffffddad, &(0x7f0000000a00), 0x2}, {0x0, &(0x7f0000000a40)=0x1ff, 0x2}, {0x2, &(0x7f0000000f80)=0x10000, 0x2}, {0xffffffffffffff00, &(0x7f0000000fc0)=0x8, 0x2}, {0x7281, &(0x7f0000001000)=0x7ff, 0x82}, {0x5, &(0x7f0000001040), 0x2}, {0x81, &(0x7f0000001080)=0x5, 0x2}, {0x0, &(0x7f00000010c0)=0xd2ee, 0x2}, {0x0, &(0x7f0000001100)=0xfffffffffffeffff, 0x82}, {0x9, &(0x7f0000001140)=0x6, 0x2}, {0x8, &(0x7f0000001180)=0x8, 0x82}, {0x2, &(0x7f00000011c0)=0x2, 0x82}, {0x3ff80000, &(0x7f0000001200)=0xfffffffffffffff8, 0x2}, {0x5, &(0x7f0000001240)=0x3, 0x2}, {0x3, &(0x7f0000001280)=0xfffffffffffffff7, 0x82}, {0x8000000000000001, &(0x7f00000012c0)=0xfff, 0x2373fb48b7c2de3f}, {0x2000000000000000, &(0x7f0000001300)=0x1, 0x2}, {0xf6c, 0x0, 0x2}, {0x9, &(0x7f0000001380)=0x81, 0x82}, {0x6, &(0x7f00000013c0)=0x2, 0x2}, {0x8, &(0x7f0000001400)=0x10001, 0xbe8eb8ea087843dc}, {0x1, 0x0, 0x82}, {0x800, &(0x7f0000001480)=0x6, 0x2}, {0x3, 0x0, 0x2}, {0x8, &(0x7f0000001500)=0x7, 0x2}, {0x0, &(0x7f0000001540)=0x77e, 0x82}, {0x5, &(0x7f0000001580)=0x100000001, 0x2}, {0xffffffff, &(0x7f00000015c0)=0x40, 0x2}, {0x7, &(0x7f0000001600)=0x7, 0x82}, {0xf07, &(0x7f0000001640)=0x1, 0x82}, {0x3, &(0x7f0000001680)=0x8, 0x2}, {0xdb2, &(0x7f00000016c0)=0x907c, 0x2}, {0x0, &(0x7f0000001700)=0x6, 0x82}, {0x629, &(0x7f0000001740)=0xc, 0x82}, {0x9, &(0x7f0000001780)=0x9, 0x82}, {0x1, &(0x7f00000017c0)=0x5, 0x2}, {0x7, &(0x7f0000001800)=0x29, 0x2}, {0x10001, &(0x7f0000001880)=0x5, 0x2}], 0x40, 0x0, &(0x7f0000001f80), 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfff7fffe, 0xbde, 0xb, 0x10000}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x900, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd606ed6c400442fff00000000000000000000000000000000ff020000000000000000000000000001242088a80000fffc00000800000086dd88a888be08000000100800fe0100000000000001080022eb000000042000c000020000000000000000030010080065580000000051b6b827ffb9b3"], 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[], 0x1c}], 0x1}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2140, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0xd8}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x4, 0x9, 0xa0363159, 0x5, 0x5, 0x9, 0x5, 0x7, 0x1, 0x8, 0x0, 0x7}}) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000100)={0x1, 0x1, 0x9, 0x6, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 8.678563872s ago: executing program 5 (id=4611): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x71, "649374baf39d83729768ec2241513e67d2919640b407eb37108f0bf45135b386d2d368191ad2c66e5963c49f272d195791f8feb114e3aef39ade059f40fa3bb896be758c405bb9a8f2719cec7ed8700ee4366970f3350520e2f270fe2a3b2865f7d742770f7f82ec339ca9b3253f92f8b9"}, &(0x7f0000000140)=0x79) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000980), &(0x7f00000009c0)=0x30) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x7581, 0xb3e, 0x4}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000340)={r3, 0x7d, 0x8, 0x2, 0x5, 0x4, 0x131, 0x10, {r4, @in6={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}}, 0x44, 0x80000001, 0x101, 0xd8f6, 0x6}}, &(0x7f0000000400)=0xb0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240410500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000048500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r5) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c01fe"], 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='ip6gretap0\x00') 8.024697888s ago: executing program 3 (id=4612): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000ffc000/0x3000)=nil}) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xf000, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x11, r8, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000280)={0x20, r10, &(0x7f0000000480)=[{0x1, 0x1}, {0x0, 0x2}], 0xdeadbeef, 0x8, 0x200000b9}) 7.609698984s ago: executing program 4 (id=4614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$video(0x0, 0x1d24, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/30, 0x1e) r4 = accept(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b04000000fffffff51d41b22ba0a9340002000000040004801000018038a77fc36d617371000000000900010073797a30000000000900020073797a320000000014000000110001000000000000000000f500000a"], 0x68}}, 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f0000001a00)={&(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000380)="5d09a11ccedb8037005290e2050e7e24", 0x10}], 0x1}, 0x4000) 7.54151228s ago: executing program 5 (id=4615): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket(0x2b, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x40, 0x0, @fd_index=0x3, 0x1, 0x0, 0x6, 0x5, 0x1}) ioctl$TCXONC(r3, 0x540a, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "0000000000000c000000000014000808"}}}]}, 0x48}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) sendto$inet6(r5, &(0x7f0000000000)="19", 0x1, 0x80, 0x0, 0x0) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x8000}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000140)={0x1c, r2, 0x200, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x10) r6 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f001"], 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000640)={0x2c, &(0x7f00000000c0)={0x20, 0x18, 0x2, 'Vp'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r6, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x40, 0x5, 0x37, {0x37, 0xf, "1101034d6566d0beca88a7912e4aedab2b5dae18a4a15f3404c74485fe530df1a62d3e9dee6da13b3e2215384feacd8446aad5c4ae"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}}, &(0x7f0000000440)={0x1c, &(0x7f0000000340)={0x0, 0xe, 0xab, "364c2b1ccf68f770d6a0dc9bae7a6350f0b078fd18e53097b1e6ebca33b7fb149dd1ec4427af59a460fe2a12dbd2924b1641fff54aca0a11b4f196f4ee287e8fd9c1c12414723298a4da944e2215d3484d1a786a0cfd3fa7b2e32b4ab2c6f6a9f37685b4eadbb220107f7a419b5bfefeab8d90db08c2efafe6414fbaaa52fe2048f139ed3a226588456ee7e09b0b13789e2d98ef8d7ee694e6a15a9e4288ec507028f39b5abaac20be0a3e"}, &(0x7f0000000b40)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000400)}) 6.611058799s ago: executing program 1 (id=4616): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f00000003c0)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0xfffffffe, 0xbfdffddc}, &(0x7f00000001c0), 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000b40)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000b80)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) r8 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x0, 0x2e0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x35a0}, 0x0, {0x0, r11}}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x1000004}) io_uring_enter(r8, 0x663e, 0x0, 0x2, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) eventfd(0xfffffff9) 5.424030778s ago: executing program 2 (id=4617): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xa, 0x2710, 0x80000, @loopback, 0xf}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x9}, 0xc4) 5.321418218s ago: executing program 4 (id=4618): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x153, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "2edbe9ae"}]}}, 0x0}, 0x0) r1 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000240)={0x14, &(0x7f0000000080)={0x40, 0x22, 0x12, {0x12, 0x6, "6be835bb942b7c5558c46089f6ea6630"}}, &(0x7f0000000140)=ANY=[@ANYBLOB="0003e1000000e1032ace4b355292eb50da11289178f501f16821a4cf51a4d1641921e4690e7f3478d540620dced9ee1a7a583adc6585fcdb4c35d4de76bafc38db15bc90252ffc7aaa4934d2f0607e0b8d407f530be4eccae756aab6d3b055de58fff47fe18bcb087e82ab789f94f8b91556b2477ada4b35550be95cf3a07982bc8e9b9b3f234b53e4b1680b4d2915ec5737b8c3e2bb9cb4c718c13cdd0fe9e5f5b0184b42bba84470034fedd0170c99562b98cfff4db57e0b25e0defd8dbbc6ed9ccb288ed90f3737c66ecd9d7b15cf1853ef115127170e3c00d5d3e3554f5e63d22efdb862"]}, &(0x7f0000000480)={0x34, &(0x7f0000000280)={0x0, 0x15, 0xb3, "8f06a840ac7630efe32f89ee30830d30928ea9fccb3bd6c6e70c4ba943bc4cf3b83aa395ddb486b0c0c952e41acde309af3aff5b782c521ee4c7363bc590c6893053175ed404c83ce4b5ae4a146524866fdd34aed3c44ea8ca4ebc5ceb43e4e59d9c683540965c8fb657d8da4a92b17d5fdd87bfe1f3424f6ee0443786363039d345e52840a7ca15e46244926add5680a2a996617fced0face97a8540aaefba335e1d7c4b00b48ad3dc42e2423fa2092daf404"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000400)={0x40, 0xa0, 0x4, 0x7}, &(0x7f0000000440)={0xc0, 0xa2, 0x2f, "675969afb54ea73122a425e4b5de7d471f7a8a964d4b9c2bfffc9221c404967781ba3f7b318f4379c005bf56437536"}}) 5.259320847s ago: executing program 1 (id=4619): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x15, @empty, 'macvlan1\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, 'caif0\x00'}}, 0x1e) 5.259004801s ago: executing program 2 (id=4620): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f000014e000/0x1000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x0, &(0x7f00000002c0)=[{0x7, 0x0, 0x3}], 0x1, 0x2b2, 0x0, 0x0, 0x0, 0x18}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x7, 0x189c00, 0x22, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8, 0x1000, 0x800}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40, 0x0, {0x0, r7}}) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) 5.152422341s ago: executing program 1 (id=4621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r9, 0x3e}, 0x14, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 4.644888077s ago: executing program 1 (id=4622): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') move_pages(0x0, 0x2, &(0x7f0000000500)=[&(0x7f0000454000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000000), 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0xffffffde, &(0x7f0000000000), 0x0, 0x0, 0x28, 0x24044000}, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) 4.030397627s ago: executing program 2 (id=4623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 3.842597278s ago: executing program 3 (id=4624): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r0, 0x100000000) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffffe]}}) 3.797413215s ago: executing program 5 (id=4625): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="400323"], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="400323"], 0x0, 0x0}) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x8f, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8}, 0x1c) 3.659054894s ago: executing program 1 (id=4626): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x560c, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xa, 0x4e21, 0x80000, @loopback, 0xf}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x9}, 0xc4) 3.640970837s ago: executing program 3 (id=4627): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full', 0x20, 0x2, 0x20, 0x7}, 0x2f) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1, 0x9, 0x10000) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f021}) 3.605953323s ago: executing program 1 (id=4628): r0 = io_uring_setup(0x70c6, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x8000001}) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r2 = socket(0x10, 0x80802, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@bridge_getlink={0x30, 0x12, 0x411, 0x10000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0x1a842629b85be01}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_EXT_MASK={0x8, 0x1d, 0xffffb735}]}, 0x30}}, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @private2, 0x9}, 0x1c) syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="03dd"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x5], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xad53, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x49, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x8, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x400005, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) unshare(0x22020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, r1, 0x0) 3.509575279s ago: executing program 4 (id=4629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$video(0x0, 0x1d24, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/30, 0x1e) r5 = accept(r4, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b04000000fffffff51d41b22ba0a9340002000000040004801000018038a77fc36d617371000000000900010073797a30000000000900020073797a320000000014000000110001000000000000000000f500000a"], 0x68}}, 0x0) r8 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r8, &(0x7f0000001a00)={&(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000380)="5d09a11ccedb8037005290e2050e7e24", 0x10}], 0x1}, 0x4000) 2.08567663s ago: executing program 5 (id=4630): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@loopback, @multicast2}, &(0x7f00000000c0)=0xc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0x11, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x6, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x35, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000580)="b3"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.084888096s ago: executing program 4 (id=4631): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x5, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x0, {@ip4=@empty}}}]}, 0xffffffffffffff94}, 0x1, 0x0, 0x0, 0x2004c844}, 0x4860) 1.934687855s ago: executing program 4 (id=4632): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x52588f2e, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000100000000001c0012800b000100677265746180dd40120002800800fda17fc72cd6e70a001a6f0911a2368a189a36fa74ec78e890fd8d", @ANYRES32=r9, @ANYBLOB="08001f00c5856e99f009"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000b40)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000b80)=0x10) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x9b2, @private0, 0x80400001}}}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 1.201065582s ago: executing program 5 (id=4633): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f000014e000/0x1000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x0, &(0x7f00000002c0)=[{0x7, 0x0, 0x3}], 0x1, 0x2b2, 0x0, 0x0, 0x0, 0x18}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x7, 0x189c00, 0x22, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8, 0x1000, 0x800}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300)={r4, 0x1, 0x6, @random="79afd6bdc87d"}, 0x10) r5 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40, 0x0, {0x0, r8}}) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) 0s ago: executing program 5 (id=4634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2000000, [{0xc0010002, 0x0, 0xffffffffffffffff}]}) kernel console output (not intermixed with test programs): Using ep0 maxpacket: 16 [ 1034.918782][T15625] usb 3-1: USB disconnect, device number 108 [ 1034.939066][T17623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.145678][ T30] audit: type=1326 audit(1764039223.868:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20886 comm="syz.5.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0838f749 code=0x7ffc0000 [ 1035.311071][ T30] audit: type=1326 audit(1764039223.868:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20886 comm="syz.5.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd0832b829 code=0x7ffc0000 [ 1035.384602][ T30] audit: type=1326 audit(1764039223.868:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20886 comm="syz.5.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0838f749 code=0x7ffc0000 [ 1035.407037][ C0] vkms_vblank_simulate: vblank timer overrun [ 1035.470435][T15625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.516546][ T30] audit: type=1326 audit(1764039223.868:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20886 comm="syz.5.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd0832b829 code=0x7ffc0000 [ 1035.539010][ C0] vkms_vblank_simulate: vblank timer overrun [ 1035.545546][ T30] audit: type=1326 audit(1764039223.868:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20886 comm="syz.5.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0838f749 code=0x7ffc0000 [ 1035.568135][ T30] audit: type=1326 audit(1764039223.868:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20886 comm="syz.5.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd0832b829 code=0x7ffc0000 [ 1035.590483][ C0] vkms_vblank_simulate: vblank timer overrun [ 1035.601146][ T30] audit: type=1326 audit(1764039223.868:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20886 comm="syz.5.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0838f749 code=0x7ffc0000 [ 1035.623599][ C0] vkms_vblank_simulate: vblank timer overrun [ 1035.633222][ T30] audit: type=1326 audit(1764039223.868:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20886 comm="syz.5.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd0832b829 code=0x7ffc0000 [ 1035.655554][ C0] vkms_vblank_simulate: vblank timer overrun [ 1035.942400][T20895] FAULT_INJECTION: forcing a failure. [ 1035.942400][T20895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1035.956378][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.007540][T20895] CPU: 1 UID: 0 PID: 20895 Comm: syz.5.4334 Not tainted syzkaller #0 PREEMPT(full) [ 1036.007567][T20895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1036.007579][T20895] Call Trace: [ 1036.007587][T20895] [ 1036.007596][T20895] dump_stack_lvl+0x189/0x250 [ 1036.007625][T20895] ? __pfx____ratelimit+0x10/0x10 [ 1036.007649][T20895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1036.007672][T20895] ? __pfx__printk+0x10/0x10 [ 1036.007692][T20895] ? __might_fault+0xb0/0x130 [ 1036.007726][T20895] should_fail_ex+0x414/0x560 [ 1036.007756][T20895] _copy_from_user+0x2d/0xb0 [ 1036.007777][T20895] __io_prep_rw+0x892/0xe20 [ 1036.007808][T20895] ? __pfx___io_prep_rw+0x10/0x10 [ 1036.007837][T20895] ? __asan_memset+0x22/0x50 [ 1036.007859][T20895] ? blk_start_plug_nr_ios+0x7f/0x1c0 [ 1036.007888][T20895] io_submit_sqes+0x935/0x1e60 [ 1036.007942][T20895] __se_sys_io_uring_enter+0x2df/0x2b20 [ 1036.007985][T20895] ? ksys_write+0x1cb/0x250 [ 1036.008012][T20895] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1036.008034][T20895] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1036.008059][T20895] ? __pfx_vfs_write+0x10/0x10 [ 1036.008085][T20895] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1036.008114][T20895] ? __fget_files+0x3a0/0x420 [ 1036.008139][T20895] ? fput+0xa0/0xd0 [ 1036.008159][T20895] ? ksys_write+0x22a/0x250 [ 1036.008194][T20895] ? __pfx_ksys_write+0x10/0x10 [ 1036.008220][T20895] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1036.008247][T20895] do_syscall_64+0xfa/0xfa0 [ 1036.008270][T20895] ? lockdep_hardirqs_on+0x9c/0x150 [ 1036.008293][T20895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.008311][T20895] ? clear_bhb_loop+0x60/0xb0 [ 1036.008334][T20895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.008352][T20895] RIP: 0033:0x7fcd0838f749 [ 1036.008369][T20895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.008386][T20895] RSP: 002b:00007fcd0923d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1036.008407][T20895] RAX: ffffffffffffffda RBX: 00007fcd085e5fa0 RCX: 00007fcd0838f749 [ 1036.008421][T20895] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1036.008434][T20895] RBP: 00007fcd0923d090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.008446][T20895] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 1036.008458][T20895] R13: 00007fcd085e6038 R14: 00007fcd085e5fa0 R15: 00007fcd0870fa28 [ 1036.008490][T20895] [ 1036.425580][T20890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4332'. [ 1036.594882][T20903] binder: 20902:20903 ioctl c0306201 200000000180 returned -14 [ 1036.993621][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.159554][T20916] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1037.203854][T15625] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1037.300231][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1037.308119][ T5930] usb 2-1: no configurations [ 1037.341354][ T5930] usb 2-1: can't read configurations, error -22 [ 1037.416650][T15625] usb 3-1: Using ep0 maxpacket: 32 [ 1037.426155][T15625] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1037.447914][T15625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.584327][T15625] usb 3-1: config 0 descriptor?? [ 1037.610910][T15625] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1037.823182][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1037.971117][T20931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.973127][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1037.978534][T20931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.010455][T15625] gspca_sunplus: reg_w_riv err -71 [ 1038.016394][T15625] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1038.026971][T15625] usb 3-1: USB disconnect, device number 109 [ 1038.027948][T17623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.108964][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.133664][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.200791][T20931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.214154][T20931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.221845][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1038.360478][T20933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4345'. [ 1038.420290][ T50] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.430611][ T50] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.438822][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1038.448784][ T24] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1038.457172][ T24] usb 6-1: Product: syz [ 1038.463131][ T24] usb 6-1: Manufacturer: syz [ 1038.470112][ T24] usb 6-1: SerialNumber: syz [ 1038.480276][ T50] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.505390][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.518944][ T24] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input57 [ 1038.576925][ T50] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.715476][T20927] FAULT_INJECTION: forcing a failure. [ 1038.715476][T20927] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.759622][T20927] CPU: 0 UID: 0 PID: 20927 Comm: syz.5.4343 Not tainted syzkaller #0 PREEMPT(full) [ 1038.759649][T20927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1038.759661][T20927] Call Trace: [ 1038.759669][T20927] [ 1038.759678][T20927] dump_stack_lvl+0x189/0x250 [ 1038.759713][T20927] ? __pfx____ratelimit+0x10/0x10 [ 1038.759736][T20927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1038.759757][T20927] ? __pfx__printk+0x10/0x10 [ 1038.759781][T20927] ? __pfx___might_resched+0x10/0x10 [ 1038.759800][T20927] ? fs_reclaim_acquire+0x7d/0x100 [ 1038.759829][T20927] should_fail_ex+0x414/0x560 [ 1038.759859][T20927] should_failslab+0xa8/0x100 [ 1038.759880][T20927] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1038.759904][T20927] ? alloc_empty_file+0x55/0x1d0 [ 1038.759922][T20927] ? kernel_text_address+0xa5/0xe0 [ 1038.759950][T20927] alloc_empty_file+0x55/0x1d0 [ 1038.759970][T20927] path_openat+0x107/0x3830 [ 1038.760002][T20927] ? stack_trace_save+0x9c/0xe0 [ 1038.760026][T20927] ? stack_depot_save_flags+0x40/0x860 [ 1038.760051][T20927] ? _parse_integer_limit+0x181/0x1f0 [ 1038.760074][T20927] ? kasan_save_track+0x4f/0x80 [ 1038.760097][T20927] ? getname_flags+0xb8/0x540 [ 1038.760113][T20927] ? do_sys_openat2+0xbc/0x1c0 [ 1038.760131][T20927] ? __x64_sys_openat+0x138/0x170 [ 1038.760150][T20927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.760168][T20927] ? __pfx_path_openat+0x10/0x10 [ 1038.760209][T20927] do_filp_open+0x1fa/0x410 [ 1038.760228][T20927] ? __lock_acquire+0xab9/0xd20 [ 1038.760248][T20927] ? __pfx_do_filp_open+0x10/0x10 [ 1038.760292][T20927] ? _raw_spin_unlock+0x28/0x50 [ 1038.760312][T20927] ? alloc_fd+0x64c/0x6c0 [ 1038.760348][T20927] do_sys_openat2+0x121/0x1c0 [ 1038.760370][T20927] ? __pfx_do_sys_openat2+0x10/0x10 [ 1038.760394][T20927] ? ksys_write+0x22a/0x250 [ 1038.760418][T20927] ? __pfx_ksys_write+0x10/0x10 [ 1038.760443][T20927] __x64_sys_openat+0x138/0x170 [ 1038.760468][T20927] do_syscall_64+0xfa/0xfa0 [ 1038.760490][T20927] ? lockdep_hardirqs_on+0x9c/0x150 [ 1038.760514][T20927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.760531][T20927] ? clear_bhb_loop+0x60/0xb0 [ 1038.760553][T20927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.760570][T20927] RIP: 0033:0x7fcd0838df90 [ 1038.760588][T20927] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1038.760603][T20927] RSP: 002b:00007fcd0923cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1038.760624][T20927] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcd0838df90 [ 1038.760637][T20927] RDX: 0000000000000000 RSI: 00007fcd0923cc10 RDI: 00000000ffffff9c [ 1038.760650][T20927] RBP: 00007fcd0923cc10 R08: 0000000000000000 R09: 0000000000000000 [ 1038.760662][T20927] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1038.760675][T20927] R13: 00007fcd085e6038 R14: 00007fcd085e5fa0 R15: 00007fcd0870fa28 [ 1038.760711][T20927] [ 1039.046652][ C0] vkms_vblank_simulate: vblank timer overrun [ 1039.066768][ T5930] usb 6-1: USB disconnect, device number 23 [ 1039.083261][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.254129][ T5930] appletouch 6-1:1.0: input: appletouch disconnected [ 1039.463332][T15625] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1039.625235][T15625] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1039.636935][T15625] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.686439][T15625] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1039.705473][T15625] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1039.737674][T15625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.793666][T15625] usb 3-1: config 0 descriptor?? [ 1040.115688][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.231267][T15625] hid-steam 0003:28DE:1102.0016: unknown main item tag 0x0 [ 1040.250435][T15625] hid-steam 0003:28DE:1102.0016: unknown main item tag 0x0 [ 1040.266274][T15625] hid-steam 0003:28DE:1102.0016: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 1040.334428][T15625] hid-steam 0003:28DE:1102.0016: Steam Controller 'XXXXXXXXXX' connected [ 1040.363398][T15625] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0016/input/input58 [ 1040.411680][T15625] hid-steam 0003:28DE:1102.0017: unknown main item tag 0x0 [ 1040.473787][T15625] hid-steam 0003:28DE:1102.0017: unknown main item tag 0x0 [ 1040.505471][T15625] hid-steam 0003:28DE:1102.0017: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 1040.533152][ T5828] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1040.733121][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 1040.758961][ T5828] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1040.773533][ T5828] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1040.948533][T20993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4361'. [ 1040.968179][T20993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4361'. [ 1041.018774][ T5828] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1041.061091][ T5828] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1041.143871][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.163019][ T5828] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1041.222282][ T5828] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1041.295132][T20996] FAULT_INJECTION: forcing a failure. [ 1041.295132][T20996] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.307969][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.325343][T20996] CPU: 1 UID: 0 PID: 20996 Comm: syz.3.4363 Not tainted syzkaller #0 PREEMPT(full) [ 1041.325370][T20996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1041.325382][T20996] Call Trace: [ 1041.325390][T20996] [ 1041.325399][T20996] dump_stack_lvl+0x189/0x250 [ 1041.325426][T20996] ? __pfx____ratelimit+0x10/0x10 [ 1041.325451][T20996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1041.325474][T20996] ? __pfx__printk+0x10/0x10 [ 1041.325498][T20996] ? __pfx___might_resched+0x10/0x10 [ 1041.325516][T20996] ? fs_reclaim_acquire+0x7d/0x100 [ 1041.325546][T20996] should_fail_ex+0x414/0x560 [ 1041.325581][T20996] should_failslab+0xa8/0x100 [ 1041.325603][T20996] __kmalloc_noprof+0xcb/0x7f0 [ 1041.325625][T20996] ? tomoyo_encode+0x28b/0x550 [ 1041.325657][T20996] tomoyo_encode+0x28b/0x550 [ 1041.325688][T20996] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1041.325715][T20996] ? tomoyo_domain+0xd9/0x130 [ 1041.325738][T20996] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1041.325761][T20996] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1041.325786][T20996] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1041.325847][T20996] ? __fget_files+0x2a/0x420 [ 1041.325868][T20996] ? __fget_files+0x3a0/0x420 [ 1041.325890][T20996] ? __fget_files+0x2a/0x420 [ 1041.325911][T20996] security_file_ioctl+0xcb/0x2d0 [ 1041.325935][T20996] __se_sys_ioctl+0x47/0x170 [ 1041.325960][T20996] do_syscall_64+0xfa/0xfa0 [ 1041.325983][T20996] ? lockdep_hardirqs_on+0x9c/0x150 [ 1041.326007][T20996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.326025][T20996] ? clear_bhb_loop+0x60/0xb0 [ 1041.326046][T20996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.326064][T20996] RIP: 0033:0x7fce1838f749 [ 1041.326082][T20996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1041.326097][T20996] RSP: 002b:00007fce19231038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1041.326114][T20996] RAX: ffffffffffffffda RBX: 00007fce185e6090 RCX: 00007fce1838f749 [ 1041.326127][T20996] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 1041.326139][T20996] RBP: 00007fce19231090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.326150][T20996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.326161][T20996] R13: 00007fce185e6128 R14: 00007fce185e6090 R15: 00007fce1870fa28 [ 1041.326192][T20996] [ 1041.326216][T20996] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1041.523303][T15625] usb 3-1: reset full-speed USB device number 110 using dummy_hcd [ 1041.586599][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.603155][ T5828] usb 5-1: usb_control_msg returned -32 [ 1041.619207][ T5828] usbtmc 5-1:16.0: can't read capabilities [ 1042.136311][ T855] usb 3-1: USB disconnect, device number 110 [ 1042.171137][ T855] hid-steam 0003:28DE:1102.0016: Steam Controller 'XXXXXXXXXX' disconnected [ 1042.187500][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.286098][T21014] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 1042.294459][T21000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4357'. [ 1042.355940][ T855] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1042.473308][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1042.488601][T15625] usb 5-1: USB disconnect, device number 84 [ 1042.513113][ T855] usb 3-1: Using ep0 maxpacket: 16 [ 1042.520514][ T855] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.563993][ T855] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1042.575223][ T855] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1042.587946][ T855] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1042.603310][ T855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.611650][ T855] usb 3-1: Product: syz [ 1042.616219][ T855] usb 3-1: Manufacturer: syz [ 1042.620846][ T855] usb 3-1: SerialNumber: syz [ 1042.625567][ T5828] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1042.660794][ T24] usb 6-1: device descriptor read/64, error -71 [ 1042.746280][ T855] usb-storage 3-1:1.2: USB Mass Storage device detected [ 1042.783520][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 1042.794807][ T5828] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 1042.825301][ T5828] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.844780][ T855] usb 3-1: USB disconnect, device number 111 [ 1042.858215][ T5828] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1042.890044][ T5828] usb 2-1: config 0 has no interface number 1 [ 1042.903417][ T5828] usb 2-1: config 0 interface 235 altsetting 0 endpoint 0x1 has invalid maxpacket 9216, setting to 64 [ 1042.915828][ T5828] usb 2-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1042.924105][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1042.932085][T17835] udevd[17835]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1042.957649][ T5828] usb 2-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 1042.972994][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.983831][ T5828] usb 2-1: Product: syz [ 1042.988010][ T5828] usb 2-1: Manufacturer: syz [ 1042.992605][ T5828] usb 2-1: SerialNumber: syz [ 1043.028133][T21024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1043.054628][ T5828] usb 2-1: config 0 descriptor?? [ 1043.203252][ T24] usb 6-1: device descriptor read/64, error -71 [ 1043.227994][T17623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.284802][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 1043.284821][ T30] audit: type=1326 audit(1764039232.858:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.4.4373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f198f749 code=0x7ffc0000 [ 1043.323320][ T30] audit: type=1326 audit(1764039232.858:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.4.4373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f198f749 code=0x7ffc0000 [ 1043.350445][ T5828] kaweth 2-1:0.235: Firmware present in device. [ 1043.353548][ T24] usb usb6-port1: attempt power cycle [ 1043.383317][ T30] audit: type=1326 audit(1764039232.858:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.4.4373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f198f749 code=0x7ffc0000 [ 1043.405750][ C0] vkms_vblank_simulate: vblank timer overrun [ 1043.493170][ T30] audit: type=1326 audit(1764039232.858:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.4.4373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f198f749 code=0x7ffc0000 [ 1043.670443][ T30] audit: type=1326 audit(1764039232.858:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.4.4373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f198f749 code=0x7ffc0000 [ 1043.694563][ T30] audit: type=1326 audit(1764039232.858:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.4.4373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f12f198f749 code=0x7ffc0000 [ 1043.722443][ T30] audit: type=1326 audit(1764039232.858:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.4.4373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f198f749 code=0x7ffc0000 [ 1043.785611][ T30] audit: type=1326 audit(1764039232.858:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.4.4373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f198f749 code=0x7ffc0000 [ 1044.118007][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.119807][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1044.128774][ T30] audit: type=1326 audit(1764039232.858:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.4.4373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f198f749 code=0x7ffc0000 [ 1044.211147][ T30] audit: type=1326 audit(1764039232.858:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.4.4373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f12f198f749 code=0x7ffc0000 [ 1044.263491][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.292486][ T24] usb 6-1: device descriptor read/8, error -71 [ 1044.553161][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1044.573908][ T24] usb 6-1: device descriptor read/8, error -71 [ 1044.677373][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.693854][ T24] usb usb6-port1: unable to enumerate USB device [ 1044.743317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.753125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.761442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.136984][T21053] IPVS: set_ctl: invalid protocol: 44 172.20.20.12:21 [ 1045.303325][T17623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.515101][ T5828] kaweth 2-1:0.235: Error reading configuration (-71), no net device created [ 1045.533705][ T5828] kaweth 2-1:0.235: probe with driver kaweth failed with error -5 [ 1045.555920][T21061] tipc: Cannot configure node identity twice [ 1045.593405][T21061] IPVS: set_ctl: invalid protocol: 44 172.20.20.12:21 [ 1045.630534][ T5828] kaweth 2-1:0.0: Firmware present in device. [ 1045.686512][ T5828] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 1045.744572][ T5828] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 1045.811967][ T5828] usb 2-1: USB disconnect, device number 78 [ 1046.312377][T15625] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1046.343312][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.504617][T15625] usb 4-1: Using ep0 maxpacket: 8 [ 1046.717947][T15625] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.728423][T15625] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1046.983481][T15625] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1047.037645][T15625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.139594][T15625] usb 4-1: Product: syz [ 1047.174200][T15625] usb 4-1: Manufacturer: syz [ 1047.237458][T15625] usb 4-1: SerialNumber: syz [ 1047.280152][T15625] usb 4-1: bad CDC descriptors [ 1047.297942][T15625] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 1047.355494][T15625] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 1047.384506][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.104567][T21108] random: crng reseeded on system resumption [ 1048.438519][ T24] net_ratelimit: 1 callbacks suppressed [ 1048.438532][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.693159][T17623] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1048.843144][T17623] usb 6-1: Using ep0 maxpacket: 16 [ 1048.848888][T17623] usb 6-1: too many configurations: 60, using maximum allowed: 8 [ 1048.867135][T17623] usb 6-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 1048.884692][T17623] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 1048.892967][T17623] usb 6-1: Product: syz [ 1048.898216][T17623] usb 6-1: Manufacturer: syz [ 1048.907981][T17623] usb 6-1: SerialNumber: syz [ 1048.936625][T17623] usb 6-1: config 0 descriptor?? [ 1049.020398][T17623] pwc: Philips SPC 880NC USB webcam detected. [ 1049.221755][T17623] pwc: Warning: more than 1 configuration available. [ 1049.230249][T17623] pwc: Failed to set LED on/off time (-71) [ 1049.241718][T17623] pwc: send_video_command error -71 [ 1049.251477][T17623] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1049.277634][ T5895] usb 4-1: USB disconnect, device number 65 [ 1049.364945][T17623] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1049.479244][T15572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.488846][T17623] usb 6-1: USB disconnect, device number 28 [ 1050.213319][T17623] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1050.366567][T17623] usb 3-1: Using ep0 maxpacket: 16 [ 1050.377306][T17623] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 1050.386086][T17623] usb 3-1: config 252 has no interface number 0 [ 1050.392446][T17623] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1050.416457][T17623] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1050.426019][T17623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.435163][T17623] usb 3-1: Product: syz [ 1050.439698][T17623] usb 3-1: Manufacturer: syz [ 1050.450388][T17623] usb 3-1: SerialNumber: syz [ 1050.473372][ T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1050.503649][T15572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.561851][T17623] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1050.644203][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1050.719203][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1050.732454][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1050.742346][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1050.776391][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1050.783351][T15625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.785571][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.805297][ T24] usb 6-1: config 0 descriptor?? [ 1051.024158][T21143] netlink: 'syz.4.4401': attribute type 1 has an invalid length. [ 1051.221295][ T24] plantronics 0003:047F:FFFF.0018: ignoring exceeding usage max [ 1051.305041][ T24] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1051.543578][T15572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.571624][T21153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4399'. [ 1051.627270][ T50] usb 3-1: Failed to submit usb control message: -110 [ 1051.636188][ T50] usb 3-1: unable to send the bmi data to the device: -110 [ 1051.663223][ T50] usb 3-1: unable to get target info from device [ 1051.699190][ T50] usb 3-1: could not get target info (-110) [ 1051.707437][ T50] usb 3-1: could not probe fw (-110) [ 1051.780145][ T24] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 1051.954678][ T24] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1051.971280][ T24] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1051.980067][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1051.989437][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1052.000797][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1052.011205][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1052.026993][ T24] usb 2-1: language id specifier not provided by device, defaulting to English [ 1052.060088][ T24] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1052.069407][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.077671][ T24] usb 2-1: Manufacturer: 躔煟祚肂濬즰 [ 1052.094725][ T24] usb 2-1: config 0 descriptor?? [ 1052.100527][T21148] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1052.112463][ T24] hub 2-1:0.0: bad descriptor, ignoring hub [ 1052.118628][ T24] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1052.135745][ T24] input: 躔煟祚肂濬즰 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input59 [ 1052.325378][ T24] usb 2-1: USB disconnect, device number 79 [ 1052.587612][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.596389][T15625] usb 6-1: reset high-speed USB device number 29 using dummy_hcd [ 1052.758307][T15625] usb 6-1: device descriptor read/64, error -32 [ 1053.023479][T15625] usb 6-1: reset high-speed USB device number 29 using dummy_hcd [ 1053.234723][T15625] usb 6-1: device descriptor read/64, error -32 [ 1053.350898][T21143] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1053.476119][T15625] usb 6-1: reset high-speed USB device number 29 using dummy_hcd [ 1053.533143][T15625] usb 6-1: device descriptor read/8, error -71 [ 1053.586888][ T5930] usb 3-1: USB disconnect, device number 112 [ 1053.623435][T15572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.706592][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.771821][T21168] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1053.829155][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.911864][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 1053.911882][ T30] audit: type=1326 audit(1764039243.488:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21169 comm="syz.4.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12f192b829 code=0x7ffc0000 [ 1054.041605][ T30] audit: type=1326 audit(1764039243.518:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21169 comm="syz.4.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f198f749 code=0x7ffc0000 [ 1054.081210][ T30] audit: type=1326 audit(1764039243.518:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21169 comm="syz.4.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12f192b829 code=0x7ffc0000 [ 1054.104725][ T30] audit: type=1326 audit(1764039243.518:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21169 comm="syz.4.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12f192b829 code=0x7ffc0000 [ 1054.252736][ T30] audit: type=1326 audit(1764039243.518:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21169 comm="syz.4.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f198f749 code=0x7ffc0000 [ 1054.353504][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.361532][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.392294][ T30] audit: type=1326 audit(1764039243.528:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21169 comm="syz.4.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f198f749 code=0x7ffc0000 [ 1054.549694][ T5828] usb 6-1: USB disconnect, device number 29 [ 1054.585625][ T30] audit: type=1326 audit(1764039243.528:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21169 comm="syz.4.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f198f749 code=0x7ffc0000 [ 1054.663743][T15572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.712963][ T30] audit: type=1326 audit(1764039243.528:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21169 comm="syz.4.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12f192b829 code=0x7ffc0000 [ 1054.782066][ T30] audit: type=1326 audit(1764039243.528:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21169 comm="syz.4.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12f192b829 code=0x7ffc0000 [ 1054.813181][ T30] audit: type=1326 audit(1764039243.528:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21169 comm="syz.4.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12f192b829 code=0x7ffc0000 [ 1054.913374][ T5895] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1055.747092][T17623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.803114][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 1055.814341][ T5895] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 1055.900092][ T5895] usb 3-1: config 252 has no interface number 0 [ 1055.953740][ T5895] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1055.991594][ T5895] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1056.030157][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.050524][ T5895] usb 3-1: Product: syz [ 1056.060642][ T5895] usb 3-1: Manufacturer: syz [ 1056.070787][ T5895] usb 3-1: SerialNumber: syz [ 1056.304268][ T5895] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1056.823394][T15572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.086394][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.294459][T21212] FAULT_INJECTION: forcing a failure. [ 1057.294459][T21212] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.383916][ T8217] usb 3-1: Failed to submit usb control message: -110 [ 1057.391153][ T8217] usb 3-1: unable to send the bmi data to the device: -110 [ 1057.400435][T21212] CPU: 1 UID: 0 PID: 21212 Comm: syz.5.4416 Not tainted syzkaller #0 PREEMPT(full) [ 1057.400458][T21212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1057.400470][T21212] Call Trace: [ 1057.400478][T21212] [ 1057.400486][T21212] dump_stack_lvl+0x189/0x250 [ 1057.400515][T21212] ? __pfx____ratelimit+0x10/0x10 [ 1057.400539][T21212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1057.400562][T21212] ? __pfx__printk+0x10/0x10 [ 1057.400582][T21212] ? rcu_is_watching+0x15/0xb0 [ 1057.400603][T21212] ? trace_fib_table_lookup+0x85/0x200 [ 1057.400635][T21212] should_fail_ex+0x414/0x560 [ 1057.400666][T21212] should_failslab+0xa8/0x100 [ 1057.400687][T21212] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1057.400710][T21212] ? __pfx_find_exception+0x10/0x10 [ 1057.400732][T21212] ? dst_alloc+0x105/0x170 [ 1057.400759][T21212] dst_alloc+0x105/0x170 [ 1057.400784][T21212] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 1057.400824][T21212] ? ip_route_output_key_hash+0xc1/0x280 [ 1057.400847][T21212] ip_route_output_key_hash+0x174/0x280 [ 1057.400874][T21212] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1057.400895][T21212] ? stack_trace_save+0x9c/0xe0 [ 1057.400935][T21212] tcp_v4_connect+0x710/0x1a90 [ 1057.400952][T21212] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1057.400975][T21212] ? tcp_sendmsg_fastopen+0x190/0x5e0 [ 1057.401017][T21212] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1057.401046][T21212] __inet_stream_connect+0x2ae/0xe70 [ 1057.401076][T21212] ? __pfx___inet_stream_connect+0x10/0x10 [ 1057.401096][T21212] ? __kasan_kmalloc+0x93/0xb0 [ 1057.401122][T21212] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1057.401155][T21212] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 1057.401187][T21212] tcp_sendmsg_locked+0x4cc9/0x5540 [ 1057.401209][T21212] ? tcp_sendmsg_locked+0x321/0x5540 [ 1057.401244][T21212] ? __lock_acquire+0xab9/0xd20 [ 1057.401273][T21212] ? __lock_acquire+0xab9/0xd20 [ 1057.401303][T21212] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1057.401319][T21212] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1057.401342][T21212] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1057.401374][T21212] tcp_sendmsg+0x2f/0x50 [ 1057.401391][T21212] __sock_sendmsg+0x19c/0x270 [ 1057.401418][T21212] ____sys_sendmsg+0x505/0x830 [ 1057.401444][T21212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1057.401474][T21212] ? import_iovec+0x74/0xa0 [ 1057.401500][T21212] ___sys_sendmsg+0x21f/0x2a0 [ 1057.401524][T21212] ? __pfx____sys_sendmsg+0x10/0x10 [ 1057.401581][T21212] ? __fget_files+0x2a/0x420 [ 1057.401598][T21212] ? __fget_files+0x3a0/0x420 [ 1057.401626][T21212] __x64_sys_sendmsg+0x19b/0x260 [ 1057.401650][T21212] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1057.401680][T21212] ? __pfx_ksys_write+0x10/0x10 [ 1057.401707][T21212] ? do_syscall_64+0xbe/0xfa0 [ 1057.401735][T21212] do_syscall_64+0xfa/0xfa0 [ 1057.401757][T21212] ? lockdep_hardirqs_on+0x9c/0x150 [ 1057.401781][T21212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.401805][T21212] ? clear_bhb_loop+0x60/0xb0 [ 1057.401828][T21212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.401845][T21212] RIP: 0033:0x7fcd0838f749 [ 1057.401862][T21212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1057.401878][T21212] RSP: 002b:00007fcd0923d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1057.401899][T21212] RAX: ffffffffffffffda RBX: 00007fcd085e5fa0 RCX: 00007fcd0838f749 [ 1057.401913][T21212] RDX: 000000003000c0c0 RSI: 0000200000000080 RDI: 0000000000000003 [ 1057.401925][T21212] RBP: 00007fcd0923d090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.401936][T21212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1057.401947][T21212] R13: 00007fcd085e6038 R14: 00007fcd085e5fa0 R15: 00007fcd0870fa28 [ 1057.401977][T21212] [ 1057.833628][T21220] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1057.904042][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.959755][ T8217] usb 3-1: unable to get target info from device [ 1057.979545][ T8217] usb 3-1: could not get target info (-110) [ 1057.987371][ T8217] usb 3-1: could not probe fw (-110) [ 1058.327035][ T24] usb 3-1: USB disconnect, device number 113 [ 1058.995810][T15572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.378153][T21244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4422'. [ 1060.053750][T15572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.104640][T15625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.145475][T21259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4424'. [ 1061.012899][T21269] xt_hashlimit: size too large, truncated to 1048576 [ 1061.083222][T15572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.501219][T21269] PM: Enabling pm_trace changes system date and time during resume. [ 1061.501219][T21269] PM: Correct system time has to be restored manually after resume. [ 1061.803131][T21279] FAULT_INJECTION: forcing a failure. [ 1061.803131][T21279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1061.823202][T21279] CPU: 1 UID: 0 PID: 21279 Comm: syz.5.4430 Not tainted syzkaller #0 PREEMPT(full) [ 1061.823229][T21279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1061.823241][T21279] Call Trace: [ 1061.823249][T21279] [ 1061.823257][T21279] dump_stack_lvl+0x189/0x250 [ 1061.823284][T21279] ? __pfx____ratelimit+0x10/0x10 [ 1061.823307][T21279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1061.823330][T21279] ? __pfx__printk+0x10/0x10 [ 1061.823348][T21279] ? __might_fault+0xb0/0x130 [ 1061.823382][T21279] should_fail_ex+0x414/0x560 [ 1061.823411][T21279] _copy_from_iter+0x1de/0x1790 [ 1061.823438][T21279] ? rcu_is_watching+0x15/0xb0 [ 1061.823462][T21279] ? kmalloc_reserve+0xbd/0x290 [ 1061.823478][T21279] ? __pfx__copy_from_iter+0x10/0x10 [ 1061.823498][T21279] ? __build_skb_around+0x262/0x3f0 [ 1061.823517][T21279] ? netlink_sendmsg+0x642/0xb30 [ 1061.823533][T21279] ? skb_put+0x11b/0x210 [ 1061.823559][T21279] netlink_sendmsg+0x6b2/0xb30 [ 1061.823586][T21279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1061.823606][T21279] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1061.823632][T21279] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1061.823650][T21279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1061.823669][T21279] __sock_sendmsg+0x21c/0x270 [ 1061.823695][T21279] ____sys_sendmsg+0x505/0x830 [ 1061.823721][T21279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1061.823749][T21279] ? import_iovec+0x74/0xa0 [ 1061.823774][T21279] ___sys_sendmsg+0x21f/0x2a0 [ 1061.823797][T21279] ? __pfx____sys_sendmsg+0x10/0x10 [ 1061.823850][T21279] ? __fget_files+0x2a/0x420 [ 1061.823866][T21279] ? __fget_files+0x3a0/0x420 [ 1061.823894][T21279] __x64_sys_sendmsg+0x19b/0x260 [ 1061.823916][T21279] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1061.823945][T21279] ? __pfx_ksys_write+0x10/0x10 [ 1061.823972][T21279] ? do_syscall_64+0xbe/0xfa0 [ 1061.823998][T21279] do_syscall_64+0xfa/0xfa0 [ 1061.824020][T21279] ? lockdep_hardirqs_on+0x9c/0x150 [ 1061.824043][T21279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.824061][T21279] ? clear_bhb_loop+0x60/0xb0 [ 1061.824083][T21279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.824099][T21279] RIP: 0033:0x7fcd0838f749 [ 1061.824116][T21279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1061.824131][T21279] RSP: 002b:00007fcd0923d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1061.824151][T21279] RAX: ffffffffffffffda RBX: 00007fcd085e5fa0 RCX: 00007fcd0838f749 [ 1061.824165][T21279] RDX: 0000000020080050 RSI: 0000200000000c00 RDI: 0000000000000004 [ 1061.824177][T21279] RBP: 00007fcd0923d090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.824188][T21279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.824200][T21279] R13: 00007fcd085e6038 R14: 00007fcd085e5fa0 R15: 00007fcd0870fa28 [ 1061.824230][T21279] [ 1062.111679][T15572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.170373][T21281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.178678][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.192977][T21281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.202377][T21281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.210969][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.464890][T21291] netlink: 'syz.5.4434': attribute type 3 has an invalid length. [ 1062.801807][T21302] xt_hashlimit: size too large, truncated to 1048576 [ 1062.993310][ T5828] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1063.169090][T15572] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1063.186255][ T5828] usb 4-1: Using ep0 maxpacket: 16 [ 1063.253234][ T5828] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 1063.294782][T21312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4438'. [ 1063.370263][ T5828] usb 4-1: config 252 has no interface number 0 [ 1063.386629][T15572] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1063.395883][T15572] usb 3-1: config 7 has an invalid interface number: 112 but max is 0 [ 1063.404939][T15572] usb 3-1: config 7 has no interface number 0 [ 1063.414444][ T5828] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1063.481528][T15572] usb 3-1: config 7 interface 112 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1063.503806][ T5828] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1063.513300][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.530840][ T5828] usb 4-1: Product: syz [ 1063.531359][T15572] usb 3-1: config 7 interface 112 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 1063.564783][ T5828] usb 4-1: Manufacturer: syz [ 1063.573394][T15572] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=d0.57 [ 1063.582821][T15572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.597674][T15572] usb 3-1: Product: syz [ 1063.608162][T15572] usb 3-1: Manufacturer: syz [ 1063.608985][ T5828] usb 4-1: SerialNumber: syz [ 1063.618000][T15572] usb 3-1: SerialNumber: syz [ 1063.636981][T21300] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1063.659765][T21300] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1063.671976][ T5828] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1063.793201][ T24] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1063.932376][T21300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.946495][T21322] FAULT_INJECTION: forcing a failure. [ 1063.946495][T21322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1063.953134][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1063.968835][T21322] CPU: 0 UID: 0 PID: 21322 Comm: syz.1.4441 Not tainted syzkaller #0 PREEMPT(full) [ 1063.968859][T21322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1063.968869][T21322] Call Trace: [ 1063.968874][T21322] [ 1063.968880][T21322] dump_stack_lvl+0x189/0x250 [ 1063.968897][T21322] ? __pfx____ratelimit+0x10/0x10 [ 1063.968912][T21322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1063.968931][T21322] ? __pfx__printk+0x10/0x10 [ 1063.968949][T21322] ? __might_fault+0xb0/0x130 [ 1063.968984][T21322] should_fail_ex+0x414/0x560 [ 1063.969013][T21322] _copy_from_iter+0x1de/0x1790 [ 1063.969031][T21322] ? rcu_is_watching+0x15/0xb0 [ 1063.969045][T21322] ? kmalloc_reserve+0xbd/0x290 [ 1063.969055][T21322] ? __pfx__copy_from_iter+0x10/0x10 [ 1063.969067][T21322] ? __build_skb_around+0x262/0x3f0 [ 1063.969084][T21322] ? netlink_sendmsg+0x642/0xb30 [ 1063.969101][T21322] ? skb_put+0x11b/0x210 [ 1063.969123][T21322] netlink_sendmsg+0x6b2/0xb30 [ 1063.969156][T21322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1063.969174][T21322] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1063.969189][T21322] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1063.969200][T21322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1063.969210][T21322] __sock_sendmsg+0x21c/0x270 [ 1063.969228][T21322] ____sys_sendmsg+0x505/0x830 [ 1063.969253][T21322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1063.969282][T21322] ? import_iovec+0x74/0xa0 [ 1063.969306][T21322] ___sys_sendmsg+0x21f/0x2a0 [ 1063.969328][T21322] ? __pfx____sys_sendmsg+0x10/0x10 [ 1063.969379][T21322] ? __fget_files+0x2a/0x420 [ 1063.969396][T21322] ? __fget_files+0x3a0/0x420 [ 1063.969424][T21322] __x64_sys_sendmsg+0x19b/0x260 [ 1063.969447][T21322] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1063.969470][T21322] ? __pfx_ksys_write+0x10/0x10 [ 1063.969487][T21322] ? do_syscall_64+0xbe/0xfa0 [ 1063.969503][T21322] do_syscall_64+0xfa/0xfa0 [ 1063.969518][T21322] ? lockdep_hardirqs_on+0x9c/0x150 [ 1063.969541][T21322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.969560][T21322] ? clear_bhb_loop+0x60/0xb0 [ 1063.969582][T21322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.969599][T21322] RIP: 0033:0x7fd37e58f749 [ 1063.969613][T21322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1063.969623][T21322] RSP: 002b:00007fd37f435038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1063.969634][T21322] RAX: ffffffffffffffda RBX: 00007fd37e7e5fa0 RCX: 00007fd37e58f749 [ 1063.969642][T21322] RDX: 0000000020044800 RSI: 00002000000006c0 RDI: 0000000000000004 [ 1063.969648][T21322] RBP: 00007fd37f435090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.969655][T21322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.969661][T21322] R13: 00007fd37e7e6038 R14: 00007fd37e7e5fa0 R15: 00007fd37e90fa28 [ 1063.969691][T21322] [ 1064.263759][ T6041] net_ratelimit: 6 callbacks suppressed [ 1064.263775][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.282585][T21300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.320837][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1064.407588][ T24] usb 5-1: config 159 has an invalid interface number: 195 but max is 0 [ 1064.480756][T21300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.504885][T21300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.629583][ T24] usb 5-1: config 159 has no interface number 0 [ 1064.636878][T15572] pn533_usb 3-1:7.112: NFC: Could not find bulk-in or bulk-out endpoint [ 1064.663572][ T24] usb 5-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1064.693879][T15572] usb 3-1: USB disconnect, device number 114 [ 1064.700566][ T24] usb 5-1: config 159 interface 195 has no altsetting 0 [ 1064.721777][ T24] usb 5-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 1064.738237][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.749067][T16152] usb 4-1: Failed to submit usb control message: -110 [ 1064.758393][T16152] usb 4-1: unable to send the bmi data to the device: -110 [ 1064.773498][T16152] usb 4-1: unable to get target info from device [ 1064.784452][ T24] usb 5-1: Product: syz [ 1064.788836][T16152] usb 4-1: could not get target info (-110) [ 1064.803214][ T24] usb 5-1: Manufacturer: syz [ 1064.808231][T16152] usb 4-1: could not probe fw (-110) [ 1064.814068][ T24] usb 5-1: SerialNumber: syz [ 1065.005733][T21332] FAULT_INJECTION: forcing a failure. [ 1065.005733][T21332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1065.067760][T21332] CPU: 0 UID: 0 PID: 21332 Comm: syz.1.4445 Not tainted syzkaller #0 PREEMPT(full) [ 1065.067785][T21332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1065.067796][T21332] Call Trace: [ 1065.067804][T21332] [ 1065.067812][T21332] dump_stack_lvl+0x189/0x250 [ 1065.067841][T21332] ? __pfx____ratelimit+0x10/0x10 [ 1065.067865][T21332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1065.067887][T21332] ? __pfx__printk+0x10/0x10 [ 1065.067906][T21332] ? __might_fault+0xb0/0x130 [ 1065.067940][T21332] should_fail_ex+0x414/0x560 [ 1065.067970][T21332] _copy_from_iter+0x1de/0x1790 [ 1065.067998][T21332] ? rcu_is_watching+0x15/0xb0 [ 1065.068022][T21332] ? kmalloc_reserve+0xbd/0x290 [ 1065.068042][T21332] ? __pfx__copy_from_iter+0x10/0x10 [ 1065.068078][T21332] ? __build_skb_around+0x262/0x3f0 [ 1065.068099][T21332] ? netlink_sendmsg+0x642/0xb30 [ 1065.068116][T21332] ? skb_put+0x11b/0x210 [ 1065.068138][T21332] netlink_sendmsg+0x6b2/0xb30 [ 1065.068165][T21332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1065.068186][T21332] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1065.068212][T21332] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1065.068230][T21332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1065.068248][T21332] __sock_sendmsg+0x21c/0x270 [ 1065.068273][T21332] ____sys_sendmsg+0x505/0x830 [ 1065.068298][T21332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1065.068334][T21332] ? import_iovec+0x74/0xa0 [ 1065.068359][T21332] ___sys_sendmsg+0x21f/0x2a0 [ 1065.068380][T21332] ? __pfx____sys_sendmsg+0x10/0x10 [ 1065.068432][T21332] ? __fget_files+0x2a/0x420 [ 1065.068449][T21332] ? __fget_files+0x3a0/0x420 [ 1065.068476][T21332] __x64_sys_sendmsg+0x19b/0x260 [ 1065.068498][T21332] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1065.068526][T21332] ? __pfx_ksys_write+0x10/0x10 [ 1065.068553][T21332] ? do_syscall_64+0xbe/0xfa0 [ 1065.068580][T21332] do_syscall_64+0xfa/0xfa0 [ 1065.068603][T21332] ? lockdep_hardirqs_on+0x9c/0x150 [ 1065.068626][T21332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.068643][T21332] ? clear_bhb_loop+0x60/0xb0 [ 1065.068665][T21332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.068682][T21332] RIP: 0033:0x7fd37e58f749 [ 1065.068699][T21332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1065.068715][T21332] RSP: 002b:00007fd37f435038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1065.068735][T21332] RAX: ffffffffffffffda RBX: 00007fd37e7e5fa0 RCX: 00007fd37e58f749 [ 1065.068749][T21332] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1065.068761][T21332] RBP: 00007fd37f435090 R08: 0000000000000000 R09: 0000000000000000 [ 1065.068773][T21332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1065.068784][T21332] R13: 00007fd37e7e6038 R14: 00007fd37e7e5fa0 R15: 00007fd37e90fa28 [ 1065.068814][T21332] [ 1065.498822][T15572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.509754][ T24] udl 5-1:159.195: [drm] Unrecognized vendor firmware descriptor [ 1065.556236][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 1065.625521][T15625] usb 4-1: USB disconnect, device number 66 [ 1065.631727][ T24] [drm] Initialized udl 0.0.1 for 5-1:159.195 on minor 2 [ 1065.693242][ T24] [drm] Initialized udl on minor 2 [ 1065.739319][ T24] udl 5-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1065.855766][ T24] udl 5-1:159.195: [drm] Cannot find any crtc or sizes [ 1065.893734][T21347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.902188][T21347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.911853][T21347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.957133][T21347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.958922][T15572] udl 5-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1065.977581][ T24] usb 5-1: USB disconnect, device number 85 [ 1066.011476][T15572] udl 5-1:159.195: [drm] Cannot find any crtc or sizes [ 1066.034247][T21347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.054061][T21347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.070331][T21347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.078898][T21347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.083446][ T5828] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1066.598901][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 1066.688112][ T5930] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1066.763226][ T5828] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.779488][ T5828] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1066.817401][ T5828] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1066.826771][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.841431][ T5828] usb 3-1: Product: syz [ 1066.847221][ T5828] usb 3-1: Manufacturer: syz [ 1066.863349][ T5828] usb 3-1: SerialNumber: syz [ 1066.896225][ T5828] usb 3-1: bad CDC descriptors [ 1066.902200][ T5828] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 1066.913351][ T5930] usb 6-1: device descriptor read/64, error -71 [ 1066.951003][ T5828] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 1067.233124][ T5930] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1067.403269][ T5930] usb 6-1: device descriptor read/64, error -71 [ 1067.438573][T21366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4453'. [ 1067.515798][ T5930] usb usb6-port1: attempt power cycle [ 1067.884039][ T5930] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1067.916273][ T5930] usb 6-1: device descriptor read/8, error -71 [ 1068.027407][T21381] FAULT_INJECTION: forcing a failure. [ 1068.027407][T21381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.043370][T21381] CPU: 0 UID: 0 PID: 21381 Comm: syz.4.4458 Not tainted syzkaller #0 PREEMPT(full) [ 1068.043393][T21381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1068.043404][T21381] Call Trace: [ 1068.043411][T21381] [ 1068.043419][T21381] dump_stack_lvl+0x189/0x250 [ 1068.043446][T21381] ? __pfx____ratelimit+0x10/0x10 [ 1068.043467][T21381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1068.043488][T21381] ? __pfx__printk+0x10/0x10 [ 1068.043507][T21381] ? __might_fault+0xb0/0x130 [ 1068.043536][T21381] should_fail_ex+0x414/0x560 [ 1068.043555][T21381] _copy_from_iter+0x1de/0x1790 [ 1068.043570][T21381] ? rcu_is_watching+0x15/0xb0 [ 1068.043583][T21381] ? kmalloc_reserve+0xbd/0x290 [ 1068.043594][T21381] ? __pfx__copy_from_iter+0x10/0x10 [ 1068.043605][T21381] ? __build_skb_around+0x262/0x3f0 [ 1068.043617][T21381] ? netlink_sendmsg+0x642/0xb30 [ 1068.043626][T21381] ? skb_put+0x11b/0x210 [ 1068.043638][T21381] netlink_sendmsg+0x6b2/0xb30 [ 1068.043653][T21381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1068.043665][T21381] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1068.043680][T21381] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1068.043690][T21381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1068.043701][T21381] __sock_sendmsg+0x21c/0x270 [ 1068.043716][T21381] ____sys_sendmsg+0x505/0x830 [ 1068.043730][T21381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1068.043745][T21381] ? import_iovec+0x74/0xa0 [ 1068.043758][T21381] ___sys_sendmsg+0x21f/0x2a0 [ 1068.043770][T21381] ? __pfx____sys_sendmsg+0x10/0x10 [ 1068.043798][T21381] ? __fget_files+0x2a/0x420 [ 1068.043807][T21381] ? __fget_files+0x3a0/0x420 [ 1068.043822][T21381] __x64_sys_sendmsg+0x19b/0x260 [ 1068.043834][T21381] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1068.043850][T21381] ? __pfx_ksys_write+0x10/0x10 [ 1068.043865][T21381] ? do_syscall_64+0xbe/0xfa0 [ 1068.043883][T21381] do_syscall_64+0xfa/0xfa0 [ 1068.043896][T21381] ? lockdep_hardirqs_on+0x9c/0x150 [ 1068.043913][T21381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.043923][T21381] ? clear_bhb_loop+0x60/0xb0 [ 1068.043935][T21381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.043945][T21381] RIP: 0033:0x7f12f198f749 [ 1068.043956][T21381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1068.043965][T21381] RSP: 002b:00007f12f27a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1068.043976][T21381] RAX: ffffffffffffffda RBX: 00007f12f1be5fa0 RCX: 00007f12f198f749 [ 1068.043984][T21381] RDX: 0000000000008810 RSI: 0000200000000200 RDI: 0000000000000003 [ 1068.043990][T21381] RBP: 00007f12f27a4090 R08: 0000000000000000 R09: 0000000000000000 [ 1068.043997][T21381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1068.044003][T21381] R13: 00007f12f1be6038 R14: 00007f12f1be5fa0 R15: 00007f12f1d0fa28 [ 1068.044019][T21381] [ 1068.673100][ T5930] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1068.729114][ T5930] usb 6-1: device descriptor read/8, error -71 [ 1068.855049][ T5930] usb usb6-port1: unable to enumerate USB device [ 1069.040010][T21391] FAULT_INJECTION: forcing a failure. [ 1069.040010][T21391] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.333141][T21391] CPU: 1 UID: 0 PID: 21391 Comm: syz.1.4462 Not tainted syzkaller #0 PREEMPT(full) [ 1069.333166][T21391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1069.333176][T21391] Call Trace: [ 1069.333183][T21391] [ 1069.333190][T21391] dump_stack_lvl+0x189/0x250 [ 1069.333217][T21391] ? __pfx____ratelimit+0x10/0x10 [ 1069.333239][T21391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1069.333259][T21391] ? __pfx__printk+0x10/0x10 [ 1069.333280][T21391] ? __pfx___might_resched+0x10/0x10 [ 1069.333297][T21391] ? fs_reclaim_acquire+0x7d/0x100 [ 1069.333322][T21391] should_fail_ex+0x414/0x560 [ 1069.333347][T21391] should_failslab+0xa8/0x100 [ 1069.333364][T21391] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1069.333382][T21391] ? __sock_sendmsg+0x19c/0x270 [ 1069.333400][T21391] ? __alloc_skb+0x112/0x2d0 [ 1069.333412][T21391] ? ksys_write+0x145/0x250 [ 1069.333430][T21391] ? do_syscall_64+0xfa/0xfa0 [ 1069.333448][T21391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.333466][T21391] __alloc_skb+0x112/0x2d0 [ 1069.333483][T21391] __ip6_append_data+0x2c16/0x3f30 [ 1069.333523][T21391] ? __pfx_raw6_getfrag+0x10/0x10 [ 1069.333554][T21391] ? __pfx___ip6_append_data+0x10/0x10 [ 1069.333572][T21391] ? __pfx_ip6_mtu+0x10/0x10 [ 1069.333599][T21391] ip6_append_data+0x1c1/0x380 [ 1069.333623][T21391] ? __pfx_raw6_getfrag+0x10/0x10 [ 1069.333641][T21391] rawv6_sendmsg+0x1286/0x1830 [ 1069.333670][T21391] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1069.333693][T21391] ? aa_file_perm+0x13a/0x1550 [ 1069.333718][T21391] ? __pfx_aa_sk_perm+0x10/0x10 [ 1069.333740][T21391] ? sock_rps_record_flow+0x19/0x410 [ 1069.333759][T21391] ? inet_sendmsg+0x2f4/0x370 [ 1069.333773][T21391] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1069.333790][T21391] __sock_sendmsg+0x19c/0x270 [ 1069.333812][T21391] sock_write_iter+0x279/0x360 [ 1069.333833][T21391] ? __pfx_sock_write_iter+0x10/0x10 [ 1069.333859][T21391] ? bpf_lsm_file_permission+0x9/0x20 [ 1069.333874][T21391] ? security_file_permission+0x75/0x290 [ 1069.333897][T21391] vfs_write+0x5c9/0xb30 [ 1069.333919][T21391] ? __pfx_sock_write_iter+0x10/0x10 [ 1069.333937][T21391] ? __pfx_vfs_write+0x10/0x10 [ 1069.333964][T21391] ? __fget_files+0x2a/0x420 [ 1069.333985][T21391] ksys_write+0x145/0x250 [ 1069.334005][T21391] ? __pfx_ksys_write+0x10/0x10 [ 1069.334027][T21391] ? do_syscall_64+0xbe/0xfa0 [ 1069.334049][T21391] do_syscall_64+0xfa/0xfa0 [ 1069.334067][T21391] ? lockdep_hardirqs_on+0x9c/0x150 [ 1069.334093][T21391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.334107][T21391] ? clear_bhb_loop+0x60/0xb0 [ 1069.334124][T21391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.334138][T21391] RIP: 0033:0x7fd37e58f749 [ 1069.334152][T21391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1069.334164][T21391] RSP: 002b:00007fd37f435038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1069.334181][T21391] RAX: ffffffffffffffda RBX: 00007fd37e7e5fa0 RCX: 00007fd37e58f749 [ 1069.334192][T21391] RDX: 00000000000005ac RSI: 00002000000000c0 RDI: 0000000000000003 [ 1069.334208][T21391] RBP: 00007fd37f435090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.334219][T21391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1069.334230][T21391] R13: 00007fd37e7e6038 R14: 00007fd37e7e5fa0 R15: 00007fd37e90fa28 [ 1069.334255][T21391] [ 1069.345375][ T5930] net_ratelimit: 626 callbacks suppressed [ 1069.345392][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.531311][ T6041] usb 3-1: USB disconnect, device number 115 [ 1069.833165][ T24] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1069.862380][T17623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.882786][T15572] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1070.043270][ T24] usb 4-1: device descriptor read/64, error -71 [ 1070.077241][T15572] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.174614][T15572] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1070.193655][T15572] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1070.223004][T15572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.255467][T15572] usb 2-1: config 0 descriptor?? [ 1070.267526][T15572] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1070.276333][T15572] dvb-usb: bulk message failed: -22 (3/0) [ 1070.297468][T15572] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1070.313166][ T24] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1070.349872][T15572] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1070.387442][T15572] usb 2-1: media controller created [ 1070.400868][T15572] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1070.416006][T15572] dvb-usb: bulk message failed: -22 (6/0) [ 1070.447260][T15572] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1070.454498][ T24] usb 4-1: device descriptor read/64, error -71 [ 1070.481795][T15572] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input60 [ 1070.523543][T15572] dvb-usb: schedule remote query interval to 150 msecs. [ 1070.536862][T15572] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1070.567544][ T24] usb usb4-port1: attempt power cycle [ 1070.683110][ T5828] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1070.693398][T15572] dvb-usb: bulk message failed: -22 (1/0) [ 1070.699812][T15572] dvb-usb: error while querying for an remote control event. [ 1070.796355][T21422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.806308][T21423] netlink: 'syz.5.4470': attribute type 10 has an invalid length. [ 1070.835767][T21422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.851556][T21423] team0: Port device dummy0 added [ 1070.934087][T17623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.940594][ T5828] usb 3-1: Using ep0 maxpacket: 16 [ 1070.951671][ T5828] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 1070.961810][T21399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.970264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.979601][ T5828] usb 3-1: config 252 has no interface number 0 [ 1070.992645][T21425] netlink: 'syz.5.4470': attribute type 10 has an invalid length. [ 1070.993173][ T24] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1071.001531][ T5828] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1071.021714][T21399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.031896][T21425] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1071.034002][ T24] usb 4-1: device descriptor read/8, error -71 [ 1071.067506][ T5828] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1071.088206][ T5930] usb 2-1: USB disconnect, device number 80 [ 1071.100066][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.120508][ T5828] usb 3-1: Product: syz [ 1071.134151][ T5930] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1071.148445][ T5828] usb 3-1: Manufacturer: syz [ 1071.169024][ T5828] usb 3-1: SerialNumber: syz [ 1071.183842][ T5895] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1071.291265][T21425] team0: Failed to send options change via netlink (err -105) [ 1071.493253][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 1071.506243][ T24] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1071.513737][ T5895] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1071.528360][ T5895] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 32 [ 1071.558424][T21425] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1071.558791][ T5895] usb 5-1: config 8 has no interface number 0 [ 1071.574995][ T24] usb 4-1: device descriptor read/8, error -71 [ 1071.604244][ T5895] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 1071.631874][ T5828] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1071.666592][T21425] team0: Port device dummy0 removed [ 1071.671756][ T5895] usb 5-1: config 8 interface 24 has no altsetting 0 [ 1071.714212][ T24] usb usb4-port1: unable to enumerate USB device [ 1071.738560][ T5895] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 1071.748067][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.775568][ T5895] usb 5-1: Product: syz [ 1071.780063][T21425] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1071.834168][ T5895] usb 5-1: Manufacturer: syz [ 1071.838835][ T5895] usb 5-1: SerialNumber: syz [ 1071.946599][T15572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.143753][T21424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.162371][T21424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.266776][T21432] usb usb8: usbfs: process 21432 (syz.3.4473) did not claim interface 0 before use [ 1072.425075][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.442521][T21437] fuse: root generation should be zero [ 1072.663397][T16152] usb 3-1: Failed to submit usb control message: -110 [ 1072.670775][T16152] usb 3-1: unable to send the bmi data to the device: -110 [ 1072.683881][T16152] usb 3-1: unable to get target info from device [ 1072.808055][T16152] usb 3-1: could not get target info (-110) [ 1072.818137][T16152] usb 3-1: could not probe fw (-110) [ 1072.903789][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.971005][T21449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4476'. [ 1072.985339][T15572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.998849][ T5828] usb 3-1: USB disconnect, device number 116 [ 1074.955097][ T5895] vmk80xx 5-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 1075.001370][ T5895] usb 5-1: USB disconnect, device number 86 [ 1075.143402][T17623] net_ratelimit: 1 callbacks suppressed [ 1075.143415][T17623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.228550][ T5828] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1075.351359][T21476] xt_hashlimit: max too large, truncated to 1048576 [ 1075.481488][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.496078][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1075.592776][ T5828] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1075.607784][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.639058][ T5828] usb 2-1: Product: syz [ 1075.649087][ T5828] usb 2-1: Manufacturer: syz [ 1075.727015][ T5828] usb 2-1: SerialNumber: syz [ 1075.736940][ T5828] usb 2-1: config 0 descriptor?? [ 1075.896290][ T5895] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1076.074921][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 1076.083181][ T5895] usb 3-1: too many configurations: 60, using maximum allowed: 8 [ 1076.123499][ T5895] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1076.138699][ T5895] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1076.147919][ T855] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1076.173903][T21468] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4479'. [ 1076.196131][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.207769][ T5895] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1076.229405][ T5895] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1076.246213][ T5895] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1076.264757][ T5895] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1076.282325][ T5895] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1076.299498][ T5895] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1076.325057][ T5895] usb 3-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 1076.334820][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 1076.343371][ T5895] usb 3-1: Product: syz [ 1076.347687][ T5895] usb 3-1: Manufacturer: syz [ 1076.352345][ T5895] usb 3-1: SerialNumber: syz [ 1076.359117][ T855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.370260][ T855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.395066][ T5895] usb 3-1: config 0 descriptor?? [ 1076.410369][ T855] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1076.483324][ T855] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1076.493435][ T855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.515005][ T855] usb 4-1: config 0 descriptor?? [ 1076.883144][ T5930] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1076.932665][ T855] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x1 [ 1076.972687][T21491] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1077.106316][ T855] plantronics 0003:047F:FFFF.0019: invalid report_size -348473491 [ 1077.114378][ T855] plantronics 0003:047F:FFFF.0019: item 0 4 1 7 parsing failed [ 1077.122735][ T855] plantronics 0003:047F:FFFF.0019: parse failed [ 1077.129274][ T855] plantronics 0003:047F:FFFF.0019: probe with driver plantronics failed with error -22 [ 1077.140216][T21481] netlink: 666 bytes leftover after parsing attributes in process `'. [ 1077.187656][T21481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.196343][T21481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.223883][T17623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.261764][ T855] usb 4-1: USB disconnect, device number 71 [ 1077.336831][ T5930] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.348266][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1077.416468][ T5930] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1077.429995][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1077.445072][ T5930] usb 5-1: SerialNumber: syz [ 1077.693640][ T5828] usb 2-1: USB disconnect, device number 81 [ 1077.750219][ T5930] usb 5-1: 0:2 : does not exist [ 1077.910084][ T5930] usb 5-1: USB disconnect, device number 87 [ 1078.595759][T15572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.604202][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.653191][ T5930] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1078.735103][T15572] usb 3-1: USB disconnect, device number 117 [ 1078.883315][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 1079.200331][ T5930] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.226811][ T5930] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1079.240032][ T855] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1079.264632][ T5930] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1079.273957][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.281935][ T5930] usb 2-1: Product: syz [ 1079.286245][ T5930] usb 2-1: Manufacturer: syz [ 1079.291086][ T5930] usb 2-1: SerialNumber: syz [ 1079.327906][ T5930] usb 2-1: bad CDC descriptors [ 1079.337757][ T5930] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1079.356964][ T5930] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1079.556881][ T855] usb 6-1: no configurations [ 1079.561999][ T855] usb 6-1: can't read configurations, error -22 [ 1079.721771][ T855] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1079.791025][T15572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.950677][ T855] usb 6-1: no configurations [ 1079.955433][ T855] usb 6-1: can't read configurations, error -22 [ 1079.996176][ T855] usb usb6-port1: attempt power cycle [ 1080.187327][T21529] xt_hashlimit: max too large, truncated to 1048576 [ 1080.423134][ T855] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1080.525103][ T855] usb 6-1: no configurations [ 1080.529911][ T855] usb 6-1: can't read configurations, error -22 [ 1080.667318][ T855] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1080.721680][ T855] usb 6-1: no configurations [ 1080.726804][ T855] usb 6-1: can't read configurations, error -22 [ 1080.754589][ T855] usb usb6-port1: unable to enumerate USB device [ 1080.913898][T15572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.626648][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.943551][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.032587][T21553] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1082.113873][ T6041] usb 2-1: USB disconnect, device number 82 [ 1082.134443][T21555] tipc: Resetting bearer [ 1082.153847][T21555] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1082.210083][ T5828] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1082.504161][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.677360][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1082.696144][ T5828] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1082.708348][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.719631][ T5828] usb 4-1: Product: syz [ 1082.729726][ T5828] usb 4-1: Manufacturer: syz [ 1082.739833][ T5828] usb 4-1: SerialNumber: syz [ 1082.792410][T21563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.801155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.846180][T21562] syzkaller0: entered promiscuous mode [ 1082.851652][T21562] syzkaller0: entered allmulticast mode [ 1082.880582][ T5828] usb 4-1: config 0 descriptor?? [ 1082.984223][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.841678][T21551] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4499'. [ 1084.059824][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.219382][T21584] binder: BINDER_SET_CONTEXT_MGR already set [ 1084.237327][T21584] binder: 21583:21584 ioctl 4018620d 200000004a80 returned -16 [ 1084.283189][ T5930] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1084.434543][ T5930] usb 6-1: no configurations [ 1084.440342][ T5930] usb 6-1: can't read configurations, error -22 [ 1084.583190][ T5930] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1084.764244][ T5930] usb 6-1: no configurations [ 1084.804782][ T5930] usb 6-1: can't read configurations, error -22 [ 1084.864347][ T5930] usb usb6-port1: attempt power cycle [ 1084.928601][T21594] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1085.164301][T21600] trusted_key: syz.2.4515 sent an empty control message without MSG_MORE. [ 1085.175310][T21600] FAULT_INJECTION: forcing a failure. [ 1085.175310][T21600] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1085.193168][T21600] CPU: 1 UID: 0 PID: 21600 Comm: syz.2.4515 Not tainted syzkaller #0 PREEMPT(full) [ 1085.193184][T21600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1085.193191][T21600] Call Trace: [ 1085.193196][T21600] [ 1085.193201][T21600] dump_stack_lvl+0x189/0x250 [ 1085.193221][T21600] ? __pfx____ratelimit+0x10/0x10 [ 1085.193236][T21600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1085.193249][T21600] ? __pfx__printk+0x10/0x10 [ 1085.193261][T21600] ? fs_reclaim_acquire+0x7d/0x100 [ 1085.193280][T21600] should_fail_ex+0x414/0x560 [ 1085.193298][T21600] prepare_alloc_pages+0x213/0x610 [ 1085.193312][T21600] __alloc_frozen_pages_noprof+0x123/0x370 [ 1085.193325][T21600] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1085.193339][T21600] ? policy_nodemask+0x27c/0x720 [ 1085.193349][T21600] ? rcu_is_watching+0x15/0xb0 [ 1085.193362][T21600] alloc_pages_mpol+0x232/0x4a0 [ 1085.193375][T21600] alloc_pages_noprof+0xa9/0x190 [ 1085.193386][T21600] af_alg_sendmsg+0x1445/0x2440 [ 1085.193407][T21600] ? aa_sk_perm+0x81e/0x950 [ 1085.193422][T21600] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 1085.193434][T21600] ? __pfx_aa_sk_perm+0x10/0x10 [ 1085.193445][T21600] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1085.193464][T21600] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1085.193479][T21600] ? aead_sendmsg+0x26/0xf0 [ 1085.193491][T21600] ? __pfx_aead_sendmsg+0x10/0x10 [ 1085.193505][T21600] __sock_sendmsg+0x21c/0x270 [ 1085.193521][T21600] __sys_sendto+0x3bd/0x520 [ 1085.193532][T21600] ? __pfx___sys_sendto+0x10/0x10 [ 1085.193541][T21600] ? count_memcg_event_mm+0x21/0x260 [ 1085.193566][T21600] ? exc_page_fault+0x82/0x100 [ 1085.193582][T21600] ? do_user_addr_fault+0xc85/0x1380 [ 1085.193595][T21600] __x64_sys_sendto+0xde/0x100 [ 1085.193607][T21600] do_syscall_64+0xfa/0xfa0 [ 1085.193620][T21600] ? lockdep_hardirqs_on+0x9c/0x150 [ 1085.193633][T21600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.193643][T21600] ? clear_bhb_loop+0x60/0xb0 [ 1085.193655][T21600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.193665][T21600] RIP: 0033:0x7f8e005915dc [ 1085.193675][T21600] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1085.193684][T21600] RSP: 002b:00007f8e01347ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1085.193696][T21600] RAX: ffffffffffffffda RBX: 00007f8e01347fc0 RCX: 00007f8e005915dc [ 1085.193703][T21600] RDX: 0000000000000020 RSI: 00007f8e01348010 RDI: 0000000000000004 [ 1085.193709][T21600] RBP: 0000000000000000 R08: 00007f8e01347f14 R09: 000000000000000c [ 1085.193716][T21600] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 1085.193722][T21600] R13: 00007f8e01347f68 R14: 00007f8e01348010 R15: 0000000000000000 [ 1085.193738][T21600] [ 1085.471728][ T5930] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1085.613737][ T24] usb 4-1: USB disconnect, device number 72 [ 1085.624267][ T5930] usb 6-1: no configurations [ 1085.628914][ T5930] usb 6-1: can't read configurations, error -22 [ 1085.753137][ T6041] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1085.858236][T21612] netdevsim netdevsim2: Direct firmware load for . [ 1085.858236][T21612] failed with error -2 [ 1085.869170][ T5930] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1085.873210][T21612] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1085.873210][T21612] [ 1085.916676][ T5930] usb 6-1: no configurations [ 1085.921471][ T5930] usb 6-1: can't read configurations, error -22 [ 1085.930180][ T5930] usb usb6-port1: unable to enumerate USB device [ 1085.966100][T21614] vlan2: entered promiscuous mode [ 1085.971451][T21614] vlan2: entered allmulticast mode [ 1085.976666][T21614] hsr_slave_1: entered allmulticast mode [ 1085.985518][ T6041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1085.997820][ T6041] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1086.007055][ T6041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.015395][ T6041] usb 2-1: Product: syz [ 1086.019703][ T6041] usb 2-1: Manufacturer: syz [ 1086.047453][ T6041] usb 2-1: SerialNumber: syz [ 1086.117486][ T24] net_ratelimit: 3 callbacks suppressed [ 1086.117504][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.143762][ T6041] usb 2-1: config 0 descriptor?? [ 1086.732066][T21598] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4514'. [ 1087.084621][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 1087.084638][ T30] audit: type=1326 audit(1764039276.668:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21624 comm="syz.4.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f198f749 code=0x7ffc0000 [ 1087.143562][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.185106][ T30] audit: type=1326 audit(1764039276.698:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21624 comm="syz.4.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f12f198f749 code=0x7ffc0000 [ 1087.210138][ T30] audit: type=1326 audit(1764039276.698:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21624 comm="syz.4.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f198f749 code=0x7ffc0000 [ 1087.236599][T21628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4524'. [ 1087.261737][ T30] audit: type=1326 audit(1764039276.698:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21624 comm="syz.4.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f198f749 code=0x7ffc0000 [ 1087.316794][T21632] team0: Device ipvlan1 failed to register rx_handler [ 1087.349687][T21635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1087.713441][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.124830][ T5828] usb 2-1: USB disconnect, device number 83 [ 1088.183624][T17623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.600721][T21646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4531'. [ 1088.850143][ T30] audit: type=1326 audit(1764039278.428:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21659 comm="syz.3.4536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1838f749 code=0x7ffc0000 [ 1088.983834][ T5828] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1088.998356][ T30] audit: type=1326 audit(1764039278.428:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21659 comm="syz.3.4536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1838f749 code=0x7ffc0000 [ 1089.021552][ T30] audit: type=1326 audit(1764039278.428:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21659 comm="syz.3.4536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fce1838f749 code=0x7ffc0000 [ 1089.046207][ T30] audit: type=1326 audit(1764039278.428:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21659 comm="syz.3.4536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1838f749 code=0x7ffc0000 [ 1089.143858][ T5828] usb 2-1: no configurations [ 1089.148470][ T5828] usb 2-1: can't read configurations, error -22 [ 1089.223375][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.333166][ T5828] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1089.341029][ T855] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1089.425065][T21666] bridge_slave_0: left allmulticast mode [ 1089.430768][T21666] bridge_slave_0: left promiscuous mode [ 1089.439130][T21666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.472297][T21666] bridge_slave_1: left allmulticast mode [ 1089.493646][T21666] bridge_slave_1: left promiscuous mode [ 1089.499732][T21666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.508614][ T5828] usb 2-1: no configurations [ 1089.514219][ T5828] usb 2-1: can't read configurations, error -22 [ 1089.524031][ T5828] usb usb2-port1: attempt power cycle [ 1089.531487][ T855] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1089.540687][ T855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.549606][T21666] bond0: (slave bond_slave_0): Releasing backup interface [ 1089.551373][ T855] usb 4-1: Product: syz [ 1089.561299][ T855] usb 4-1: Manufacturer: syz [ 1089.566245][ T855] usb 4-1: SerialNumber: syz [ 1089.566703][T21666] bond0: (slave bond_slave_1): Releasing backup interface [ 1089.587139][T21666] team0: Port device team_slave_0 removed [ 1089.595768][T21666] team0: Port device team_slave_1 removed [ 1089.597969][ T855] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1089.601960][T21666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.619127][ T5930] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1089.637483][T21666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.654885][T21666] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1089.897165][ T5828] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1089.935299][ T5828] usb 2-1: no configurations [ 1089.939985][ T5828] usb 2-1: can't read configurations, error -22 [ 1090.042847][T21663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.053703][T21663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.083550][ T5895] usb 4-1: USB disconnect, device number 73 [ 1090.099617][ T5828] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1090.154348][ T5828] usb 2-1: no configurations [ 1090.160197][ T5828] usb 2-1: can't read configurations, error -22 [ 1090.168771][ T5828] usb usb2-port1: unable to enumerate USB device [ 1090.267076][T17623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.673502][ T5930] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1090.711326][ T5930] ath9k_htc: Failed to initialize the device [ 1090.743211][ T5895] usb 4-1: ath9k_htc: USB layer deinitialized [ 1090.756762][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.014273][T21702] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1091.030036][ T24] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1091.243138][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1091.303686][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.325010][ T24] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 1091.345086][ T24] usb 5-1: config 0 has no interface number 0 [ 1091.403680][ T24] usb 5-1: config 0 interface 23 has no altsetting 0 [ 1091.435720][ T24] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 1091.455269][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.484043][ T24] usb 5-1: Product: syz [ 1091.491761][ T24] usb 5-1: Manufacturer: syz [ 1091.501026][ T24] usb 5-1: SerialNumber: syz [ 1091.522352][ T24] usb 5-1: config 0 descriptor?? [ 1092.093147][ T5895] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1092.103967][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.263124][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 1092.289420][ T5895] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.368207][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.433676][ T5895] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1092.516545][ T5895] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1092.526592][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.543170][ T5895] usb 2-1: Product: syz [ 1092.547999][ T5895] usb 2-1: Manufacturer: syz [ 1092.554330][ T5895] usb 2-1: SerialNumber: syz [ 1092.578266][ T5895] usb 2-1: bad CDC descriptors [ 1092.595793][ T5895] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1092.605159][ T5895] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1092.717606][T21717] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4551'. [ 1092.921456][T21720] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4552'. [ 1093.323820][T21725] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1093.420247][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.833392][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.944445][ T24] usb 5-1: USB disconnect, device number 88 [ 1094.423338][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.725821][ T5930] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1094.753775][ T24] usb 2-1: USB disconnect, device number 88 [ 1094.883185][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 1094.892546][ T5930] usb 3-1: config 0 has an invalid descriptor of length 61, skipping remainder of the config [ 1094.905229][ T5930] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1094.925627][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1094.945341][ T5930] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1094.959798][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.975509][ T5930] usb 3-1: Product: syz [ 1094.983322][ T5930] usb 3-1: Manufacturer: syz [ 1094.987936][ T5930] usb 3-1: SerialNumber: syz [ 1095.014013][ T5930] usb 3-1: config 0 descriptor?? [ 1095.228342][T21732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.243390][ T6041] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1095.251553][T21732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.272432][ T5930] gs_usb 3-1:0.0: Required endpoints not found [ 1095.301544][ T5930] usb 3-1: USB disconnect, device number 118 [ 1095.415904][ T6041] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.427018][ T6041] usb 4-1: config 0 has no interfaces? [ 1095.432523][ T6041] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1095.441618][ T6041] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.464119][ T6041] usb 4-1: config 0 descriptor?? [ 1095.473848][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.058135][T21766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.149080][T21769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4566'. [ 1096.557019][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.710078][ T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1096.903729][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.983123][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1097.009411][ T24] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 1097.023133][ T24] usb 2-1: config 0 has no interface number 0 [ 1097.092023][ T24] usb 2-1: config 0 interface 23 has no altsetting 0 [ 1097.113270][ T24] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 1097.128772][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.147716][ T24] usb 2-1: Product: syz [ 1097.152944][ T24] usb 2-1: Manufacturer: syz [ 1097.158551][ T24] usb 2-1: SerialNumber: syz [ 1097.179622][ T24] usb 2-1: config 0 descriptor?? [ 1097.631158][T17623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.855693][ T5895] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1097.944600][ T5930] usb 4-1: USB disconnect, device number 74 [ 1098.023501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.417192][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1098.671508][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.680075][T17623] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1098.873171][T17623] usb 6-1: Using ep0 maxpacket: 16 [ 1098.880532][T17623] usb 6-1: config 252 has an invalid interface number: 15 but max is 0 [ 1098.990216][T21800] team0: Device ipvlan1 failed to register rx_handler [ 1099.004000][T17623] usb 6-1: config 252 has no interface number 0 [ 1099.031973][ T24] usb 2-1: USB disconnect, device number 89 [ 1099.038543][ T5895] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1099.047676][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.080136][ T5895] usb 3-1: Product: syz [ 1099.086682][T17623] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1099.103423][ T5895] usb 3-1: Manufacturer: syz [ 1099.122109][ T5895] usb 3-1: SerialNumber: syz [ 1099.254040][ T5895] usb 3-1: config 0 descriptor?? [ 1099.285789][T21802] FAULT_INJECTION: forcing a failure. [ 1099.285789][T21802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1099.306168][T21802] CPU: 0 UID: 0 PID: 21802 Comm: syz.1.4574 Not tainted syzkaller #0 PREEMPT(full) [ 1099.306182][T21802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1099.306191][T21802] Call Trace: [ 1099.306197][T21802] [ 1099.306202][T21802] dump_stack_lvl+0x189/0x250 [ 1099.306220][T21802] ? __pfx____ratelimit+0x10/0x10 [ 1099.306235][T21802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1099.306247][T21802] ? __pfx__printk+0x10/0x10 [ 1099.306258][T21802] ? __might_fault+0xb0/0x130 [ 1099.306277][T21802] should_fail_ex+0x414/0x560 [ 1099.306297][T21802] _copy_from_iter+0x1de/0x1790 [ 1099.306312][T21802] ? rcu_is_watching+0x15/0xb0 [ 1099.306326][T21802] ? kmalloc_reserve+0xbd/0x290 [ 1099.306336][T21802] ? __pfx__copy_from_iter+0x10/0x10 [ 1099.306348][T21802] ? __build_skb_around+0x262/0x3f0 [ 1099.306361][T21802] ? netlink_sendmsg+0x642/0xb30 [ 1099.306371][T21802] ? skb_put+0x11b/0x210 [ 1099.306383][T21802] netlink_sendmsg+0x6b2/0xb30 [ 1099.306398][T21802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1099.306409][T21802] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1099.306425][T21802] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1099.306435][T21802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1099.306445][T21802] __sock_sendmsg+0x21c/0x270 [ 1099.306460][T21802] ____sys_sendmsg+0x505/0x830 [ 1099.306473][T21802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1099.306488][T21802] ? import_iovec+0x74/0xa0 [ 1099.306502][T21802] ___sys_sendmsg+0x21f/0x2a0 [ 1099.306514][T21802] ? __pfx____sys_sendmsg+0x10/0x10 [ 1099.306542][T21802] ? __fget_files+0x2a/0x420 [ 1099.306551][T21802] ? __fget_files+0x3a0/0x420 [ 1099.306565][T21802] __x64_sys_sendmsg+0x19b/0x260 [ 1099.306577][T21802] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1099.306593][T21802] ? __pfx_ksys_write+0x10/0x10 [ 1099.306609][T21802] ? do_syscall_64+0xbe/0xfa0 [ 1099.306624][T21802] do_syscall_64+0xfa/0xfa0 [ 1099.306637][T21802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.306647][T21802] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1099.306657][T21802] ? clear_bhb_loop+0x60/0xb0 [ 1099.306669][T21802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.306678][T21802] RIP: 0033:0x7fd37e58f749 [ 1099.306688][T21802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1099.306698][T21802] RSP: 002b:00007fd37f435038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1099.306710][T21802] RAX: ffffffffffffffda RBX: 00007fd37e7e5fa0 RCX: 00007fd37e58f749 [ 1099.306717][T21802] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 1099.306724][T21802] RBP: 00007fd37f435090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.306731][T21802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1099.306737][T21802] R13: 00007fd37e7e6038 R14: 00007fd37e7e5fa0 R15: 00007fd37e90fa28 [ 1099.306753][T21802] [ 1099.308051][T17623] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1099.760456][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.918403][T17623] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.943523][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.984516][T21783] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4569'. [ 1100.007207][T17623] usb 6-1: Product: syz [ 1100.150568][T17623] usb 6-1: Manufacturer: syz [ 1100.199519][T17623] usb 6-1: SerialNumber: syz [ 1100.279659][T17623] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1101.049200][T17623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.303713][ T8217] usb 6-1: Failed to submit usb control message: -110 [ 1101.312484][ T8217] usb 6-1: unable to send the bmi data to the device: -110 [ 1101.327367][ T8217] usb 6-1: unable to get target info from device [ 1101.334200][T17623] usb 3-1: USB disconnect, device number 119 [ 1101.347235][ T8217] usb 6-1: could not get target info (-110) [ 1101.353697][ T8217] usb 6-1: could not probe fw (-110) [ 1101.395990][T21827] syzkaller0: entered promiscuous mode [ 1101.401662][T21827] syzkaller0: entered allmulticast mode [ 1101.694728][ T5895] usb 6-1: USB disconnect, device number 42 [ 1101.714211][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.121022][T17623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.336042][T21848] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1102.342841][T21848] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1102.367980][T21848] vhci_hcd vhci_hcd.0: Device attached [ 1102.403499][T17623] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1102.533172][ T6041] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1102.573137][T17623] usb 6-1: Using ep0 maxpacket: 32 [ 1102.587724][T17623] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1102.643204][ T5895] usb 42-1: SetAddress Request (2) to port 0 [ 1102.650389][ T5895] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1102.661026][T17623] usb 6-1: config 0 has no interface number 0 [ 1102.689929][T17623] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1102.718273][T17623] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.727811][T17623] usb 6-1: Product: syz [ 1102.732097][T17623] usb 6-1: Manufacturer: syz [ 1102.739285][ T6041] usb 4-1: Using ep0 maxpacket: 32 [ 1102.745863][T17623] usb 6-1: SerialNumber: syz [ 1102.752111][ T6041] usb 4-1: config 0 has an invalid interface number: 23 but max is 0 [ 1102.762230][ T6041] usb 4-1: config 0 has no interface number 0 [ 1102.769289][T17623] usb 6-1: config 0 descriptor?? [ 1102.812108][ T6041] usb 4-1: config 0 interface 23 has no altsetting 0 [ 1102.820313][T17623] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1102.841323][T17623] usb 6-1: selecting invalid altsetting 1 [ 1102.852253][T17623] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1102.861711][ T6041] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 1102.876579][T17623] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1102.888033][ T6041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.898117][ T6041] usb 4-1: Product: syz [ 1102.902724][T17623] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1102.912394][ T6041] usb 4-1: Manufacturer: syz [ 1102.917933][ T6041] usb 4-1: SerialNumber: syz [ 1102.922802][T17623] usb 6-1: media controller created [ 1102.939901][ T6041] usb 4-1: config 0 descriptor?? [ 1102.978761][T17623] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1102.993357][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.024205][T17623] usb 6-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 1103.037056][T17623] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 1103.146730][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.155864][T21849] vhci_hcd: connection reset by peer [ 1103.179705][ T8226] vhci_hcd: stop threads [ 1103.180462][ T30] audit: type=1326 audit(1764039292.758:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21854 comm="syz.2.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0058f749 code=0x7ffc0000 [ 1103.206426][ C0] vkms_vblank_simulate: vblank timer overrun [ 1103.214865][ T8226] vhci_hcd: release socket [ 1103.228408][ T8226] vhci_hcd: disconnect device [ 1103.249077][T17623] DVB: Unable to find symbol mxl5005s_attach() [ 1103.304772][T21858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.322459][T21858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.336837][ T30] audit: type=1326 audit(1764039292.758:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21854 comm="syz.2.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0058f749 code=0x7ffc0000 [ 1103.359334][ C0] vkms_vblank_simulate: vblank timer overrun [ 1103.420854][ T30] audit: type=1326 audit(1764039292.758:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21854 comm="syz.2.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0058f749 code=0x7ffc0000 [ 1103.445007][T17623] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1103.464148][ T30] audit: type=1326 audit(1764039292.758:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21854 comm="syz.2.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0058f749 code=0x7ffc0000 [ 1103.500915][ T30] audit: type=1326 audit(1764039292.798:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21854 comm="syz.2.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f8e0058f749 code=0x7ffc0000 [ 1103.535751][ T30] audit: type=1326 audit(1764039292.798:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21854 comm="syz.2.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0058f749 code=0x7ffc0000 [ 1103.574007][T17623] usb 6-1: USB disconnect, device number 43 [ 1103.601076][ T30] audit: type=1326 audit(1764039292.808:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21854 comm="syz.2.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0058f749 code=0x7ffc0000 [ 1103.625126][ T30] audit: type=1326 audit(1764039292.808:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21854 comm="syz.2.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0058f749 code=0x7ffc0000 [ 1103.650169][ T30] audit: type=1326 audit(1764039292.808:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21854 comm="syz.2.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0058f749 code=0x7ffc0000 [ 1103.710269][ T30] audit: type=1326 audit(1764039292.808:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21854 comm="syz.2.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f8e0058f749 code=0x7ffc0000 [ 1104.063843][T17623] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1104.078603][T21870] io-wq is not configured for unbound workers [ 1104.183452][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.225283][T17623] usb 3-1: Using ep0 maxpacket: 16 [ 1104.236651][T17623] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.248957][T17623] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.260074][T17623] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1104.273329][ T5828] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1104.279459][T17623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.317038][T17623] usb 3-1: config 0 descriptor?? [ 1104.408724][T21873] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4594'. [ 1104.463168][ T5828] usb 6-1: Using ep0 maxpacket: 8 [ 1104.481604][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.502720][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.543392][ T5828] usb 6-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1104.572107][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.617204][ T5828] usb 6-1: config 0 descriptor?? [ 1104.654240][T21879] loop8: detected capacity change from 0 to 7 [ 1104.661848][T21879] Dev loop8: unable to read RDB block 7 [ 1104.668134][T21879] loop8: unable to read partition table [ 1104.674330][T21879] loop8: partition table beyond EOD, truncated [ 1104.680707][T21879] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1104.730535][T21881] syzkaller0: entered promiscuous mode [ 1104.736652][T21881] syzkaller0: entered allmulticast mode [ 1104.745896][T21881] 0: reclassify loop, rule prio 0, protocol 800 [ 1104.764811][T17623] corsair 0003:1B1C:1B02.001A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 1104.982835][T21885] syzkaller0: entered promiscuous mode [ 1104.989183][T21885] syzkaller0: entered allmulticast mode [ 1105.047464][ T5828] uclogic 0003:5543:0004.001B: hidraw1: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.5-1/input0 [ 1105.174540][ T6041] usb 4-1: USB disconnect, device number 75 [ 1105.183196][T21866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.192064][T21866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.218160][T21888] FAULT_INJECTION: forcing a failure. [ 1105.218160][T21888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1105.232757][T17623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.245927][ T5837] usb 3-1: USB disconnect, device number 120 [ 1105.253553][T21888] CPU: 0 UID: 0 PID: 21888 Comm: syz.3.4601 Not tainted syzkaller #0 PREEMPT(full) [ 1105.253576][T21888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1105.253586][T21888] Call Trace: [ 1105.253602][T21888] [ 1105.253609][T21888] dump_stack_lvl+0x189/0x250 [ 1105.253636][T21888] ? __pfx____ratelimit+0x10/0x10 [ 1105.253659][T21888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1105.253681][T21888] ? __pfx__printk+0x10/0x10 [ 1105.253711][T21888] should_fail_ex+0x414/0x560 [ 1105.253743][T21888] _copy_to_user+0x31/0xb0 [ 1105.253766][T21888] simple_read_from_buffer+0xe1/0x170 [ 1105.253796][T21888] proc_fail_nth_read+0x1b3/0x220 [ 1105.253821][T21888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1105.253846][T21888] ? rw_verify_area+0x2a6/0x4d0 [ 1105.253867][T21888] ? __lock_acquire+0xab9/0xd20 [ 1105.253883][T21888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1105.253907][T21888] vfs_read+0x200/0xa30 [ 1105.253930][T21888] ? fdget_pos+0x247/0x320 [ 1105.253949][T21888] ? __pfx___mutex_lock+0x10/0x10 [ 1105.253974][T21888] ? __pfx_vfs_read+0x10/0x10 [ 1105.253998][T21888] ? __fget_files+0x2a/0x420 [ 1105.254019][T21888] ? __fget_files+0x3a0/0x420 [ 1105.254035][T21888] ? __fget_files+0x2a/0x420 [ 1105.254061][T21888] ksys_read+0x145/0x250 [ 1105.254086][T21888] ? __pfx_ksys_read+0x10/0x10 [ 1105.254112][T21888] ? do_syscall_64+0xbe/0xfa0 [ 1105.254140][T21888] do_syscall_64+0xfa/0xfa0 [ 1105.254162][T21888] ? lockdep_hardirqs_on+0x9c/0x150 [ 1105.254186][T21888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.254203][T21888] ? clear_bhb_loop+0x60/0xb0 [ 1105.254224][T21888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.254240][T21888] RIP: 0033:0x7fce1838e15c [ 1105.254256][T21888] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1105.254271][T21888] RSP: 002b:00007fce19252030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1105.254289][T21888] RAX: ffffffffffffffda RBX: 00007fce185e5fa0 RCX: 00007fce1838e15c [ 1105.254302][T21888] RDX: 000000000000000f RSI: 00007fce192520a0 RDI: 0000000000000006 [ 1105.254313][T21888] RBP: 00007fce19252090 R08: 0000000000000000 R09: 0000000000000000 [ 1105.254322][T21888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1105.254331][T21888] R13: 00007fce185e6038 R14: 00007fce185e5fa0 R15: 00007fce1870fa28 [ 1105.254361][T21888] [ 1105.927828][ T5837] usb 6-1: USB disconnect, device number 44 [ 1106.025111][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.264408][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.844265][T21915] FAULT_INJECTION: forcing a failure. [ 1106.844265][T21915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1107.003174][T21915] CPU: 0 UID: 0 PID: 21915 Comm: syz.5.4608 Not tainted syzkaller #0 PREEMPT(full) [ 1107.003199][T21915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1107.003210][T21915] Call Trace: [ 1107.003219][T21915] [ 1107.003227][T21915] dump_stack_lvl+0x189/0x250 [ 1107.003245][T21915] ? __pfx____ratelimit+0x10/0x10 [ 1107.003259][T21915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1107.003271][T21915] ? __pfx__printk+0x10/0x10 [ 1107.003282][T21915] ? __might_fault+0xb0/0x130 [ 1107.003309][T21915] should_fail_ex+0x414/0x560 [ 1107.003339][T21915] _copy_from_iter+0x1de/0x1790 [ 1107.003364][T21915] ? rcu_is_watching+0x15/0xb0 [ 1107.003379][T21915] ? kmalloc_reserve+0xbd/0x290 [ 1107.003389][T21915] ? __pfx__copy_from_iter+0x10/0x10 [ 1107.003401][T21915] ? __build_skb_around+0x262/0x3f0 [ 1107.003415][T21915] ? netlink_sendmsg+0x642/0xb30 [ 1107.003425][T21915] ? skb_put+0x11b/0x210 [ 1107.003436][T21915] netlink_sendmsg+0x6b2/0xb30 [ 1107.003451][T21915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.003470][T21915] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1107.003485][T21915] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1107.003495][T21915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.003506][T21915] __sock_sendmsg+0x21c/0x270 [ 1107.003521][T21915] ____sys_sendmsg+0x505/0x830 [ 1107.003535][T21915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1107.003550][T21915] ? import_iovec+0x74/0xa0 [ 1107.003564][T21915] ___sys_sendmsg+0x21f/0x2a0 [ 1107.003576][T21915] ? __pfx____sys_sendmsg+0x10/0x10 [ 1107.003604][T21915] ? __fget_files+0x2a/0x420 [ 1107.003613][T21915] ? __fget_files+0x3a0/0x420 [ 1107.003628][T21915] __x64_sys_sendmsg+0x19b/0x260 [ 1107.003640][T21915] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1107.003656][T21915] ? __pfx_ksys_write+0x10/0x10 [ 1107.003672][T21915] ? do_syscall_64+0xbe/0xfa0 [ 1107.003688][T21915] do_syscall_64+0xfa/0xfa0 [ 1107.003700][T21915] ? lockdep_hardirqs_on+0x9c/0x150 [ 1107.003714][T21915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.003723][T21915] ? clear_bhb_loop+0x60/0xb0 [ 1107.003736][T21915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.003746][T21915] RIP: 0033:0x7fcd0838f749 [ 1107.003756][T21915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1107.003766][T21915] RSP: 002b:00007fcd0923d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1107.003777][T21915] RAX: ffffffffffffffda RBX: 00007fcd085e5fa0 RCX: 00007fcd0838f749 [ 1107.003785][T21915] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 1107.003792][T21915] RBP: 00007fcd0923d090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.003802][T21915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.003808][T21915] R13: 00007fcd085e6038 R14: 00007fcd085e5fa0 R15: 00007fcd0870fa28 [ 1107.003825][T21915] [ 1107.307445][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.621443][T21922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.630246][T21922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.638696][T21922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.668465][T21922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.702567][T21922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.755700][T21922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.764224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.772645][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.780958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.796815][ T5895] usb 42-1: device descriptor read/8, error -110 [ 1107.847689][T21926] xt_hashlimit: size too large, truncated to 1048576 [ 1108.214383][ T5895] usb usb42-port1: attempt power cycle [ 1108.626419][T21940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1109.169659][ T5895] usb usb42-port1: unable to enumerate USB device [ 1109.511820][T21943] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4614'. [ 1109.553370][ T5837] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1109.913446][ T5837] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.053381][ T5837] usb 6-1: config 0 has no interfaces? [ 1110.083681][ T5837] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1110.113580][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.218193][ T5837] usb 6-1: config 0 descriptor?? [ 1111.073336][ T5895] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1111.152582][T21967] syzkaller0: entered promiscuous mode [ 1111.293264][T21967] syzkaller0: entered allmulticast mode [ 1111.364719][ T5895] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1111.374182][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.391033][ T5895] usb 5-1: config 0 descriptor?? [ 1111.826809][ T5895] kye 0003:0458:0153.001C: collection stack underflow [ 1111.850525][ T5895] kye 0003:0458:0153.001C: item 0 4 0 12 parsing failed [ 1111.877579][ T5895] kye 0003:0458:0153.001C: parse failed [ 1111.897076][ T5895] kye 0003:0458:0153.001C: probe with driver kye failed with error -22 [ 1112.011616][ T5837] usb 5-1: USB disconnect, device number 89 [ 1112.300253][ T5895] usb 6-1: USB disconnect, device number 45 [ 1112.442846][T21980] net_ratelimit: 79 callbacks suppressed [ 1112.442864][T21980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.586375][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.643773][ T5895] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1112.761360][T21992] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4629'. [ 1112.811587][ T5895] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1112.845115][ T6041] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1112.910322][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.920533][ T5895] usb 6-1: Product: syz [ 1112.931431][ T5895] usb 6-1: Manufacturer: syz [ 1112.956643][ T5895] usb 6-1: SerialNumber: syz [ 1112.984223][ T5895] usb 6-1: config 0 descriptor?? [ 1112.992491][ T5895] ch341 6-1:0.0: ch341-uart converter detected [ 1113.096518][ T6041] usb 2-1: Using ep0 maxpacket: 32 [ 1113.119867][ T6041] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1113.128518][ T6041] usb 2-1: config 0 has no interface number 0 [ 1113.134812][ T6041] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1113.167782][ T6041] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1113.177259][ T6041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.185460][ T6041] usb 2-1: Product: syz [ 1113.194364][ T6041] usb 2-1: Manufacturer: syz [ 1113.199226][ T6041] usb 2-1: SerialNumber: syz [ 1113.208427][ T6041] usb 2-1: config 0 descriptor?? [ 1113.251791][ T6041] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1113.271787][ T6041] em28xx 2-1:0.132: Video interface 132 found: [ 1113.424566][ T5895] usb 6-1: failed to send control message: -71 [ 1113.430920][ T5895] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1113.462057][ T5895] usb 6-1: USB disconnect, device number 46 [ 1113.484976][ T5895] ch341 6-1:0.0: device disconnected [ 1113.623465][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.632236][ T6041] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1114.023485][T21997] binder: BINDER_SET_CONTEXT_MGR already set [ 1114.029644][T21997] binder: 21996:21997 ioctl 4018620d 200000004a80 returned -16 [ 1114.047860][ T6041] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1114.060895][ T6041] em28xx 2-1:0.132: board has no eeprom [ 1114.143183][ T6041] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1114.151495][ T6041] em28xx 2-1:0.132: analog set to bulk mode. [ 1114.158344][T17623] em28xx 2-1:0.132: Registering V4L2 extension [ 1114.438665][T22005] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4632'. [ 1114.497726][T22005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4632'. [ 1114.664530][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.718946][T22012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.729582][T22012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.303680][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.303947][T17623] em28xx 2-1:0.132: reading from i2c device at 0x4a failed: couldn't get the received message from the bridge (error=-5) [ 1115.352286][T17623] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1115.399224][T17623] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1115.417601][T17623] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1115.524481][T17623] em28xx 2-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1115.534671][T17623] em28xx 2-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1115.544397][T17623] em28xx 2-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1115.561198][T17623] em28xx 2-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 1115.654983][T17623] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 1115.674008][T17623] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 1115.698629][T17623] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 1115.707818][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.730073][T17623] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 1115.793657][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.799779][T17623] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 1115.801550][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.833294][T17623] em28xx 2-1:0.132: Config register raw data: 0xfffffffb [ 1115.856565][T17623] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1115.867193][T17623] em28xx 2-1:0.132: No AC97 audio processor [ 1116.034707][T17623] usb 2-1: Decoder not found [ 1116.042067][T17623] em28xx 2-1:0.132: failed to create media graph [ 1116.062387][T17623] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1116.127645][T17623] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1116.144997][T22019] ================================================================== [ 1116.153084][T22019] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 1116.160457][T22019] Read of size 8 at addr ffff888029a90740 by task v4l_id/22019 [ 1116.167988][T22019] [ 1116.170303][T22019] CPU: 1 UID: 0 PID: 22019 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1116.170321][T22019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1116.170329][T22019] Call Trace: [ 1116.170337][T22019] [ 1116.170343][T22019] dump_stack_lvl+0x189/0x250 [ 1116.170366][T22019] ? __virt_addr_valid+0x1c8/0x5c0 [ 1116.170386][T22019] ? rcu_is_watching+0x15/0xb0 [ 1116.170401][T22019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1116.170418][T22019] ? rcu_is_watching+0x15/0xb0 [ 1116.170433][T22019] ? lock_release+0x4b/0x3e0 [ 1116.170446][T22019] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1116.170465][T22019] ? __virt_addr_valid+0x1c8/0x5c0 [ 1116.170482][T22019] ? __virt_addr_valid+0x4a5/0x5c0 [ 1116.170499][T22019] print_report+0xca/0x240 [ 1116.170516][T22019] ? v4l2_fh_open+0xac/0x420 [ 1116.170530][T22019] kasan_report+0x118/0x150 [ 1116.170545][T22019] ? v4l2_fh_open+0xac/0x420 [ 1116.170561][T22019] v4l2_fh_open+0xac/0x420 [ 1116.170575][T22019] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1116.170596][T22019] em28xx_v4l2_open+0x157/0x9a0 [ 1116.170620][T22019] v4l2_open+0x1bf/0x3a0 [ 1116.170636][T22019] chrdev_open+0x4cc/0x5e0 [ 1116.170651][T22019] ? __pfx_chrdev_open+0x10/0x10 [ 1116.170664][T22019] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1116.170681][T22019] ? __pfx_chrdev_open+0x10/0x10 [ 1116.170693][T22019] do_dentry_open+0x953/0x13f0 [ 1116.170712][T22019] vfs_open+0x3b/0x340 [ 1116.170725][T22019] ? path_openat+0x2ecd/0x3830 [ 1116.170743][T22019] path_openat+0x2ee5/0x3830 [ 1116.170769][T22019] ? __pfx_path_openat+0x10/0x10 [ 1116.170792][T22019] do_filp_open+0x1fa/0x410 [ 1116.170807][T22019] ? __lock_acquire+0xab9/0xd20 [ 1116.170821][T22019] ? __pfx_do_filp_open+0x10/0x10 [ 1116.170844][T22019] ? _raw_spin_unlock+0x28/0x50 [ 1116.170859][T22019] ? alloc_fd+0x64c/0x6c0 [ 1116.170882][T22019] do_sys_openat2+0x121/0x1c0 [ 1116.170897][T22019] ? __pfx_do_sys_openat2+0x10/0x10 [ 1116.170913][T22019] ? exc_page_fault+0x82/0x100 [ 1116.170932][T22019] ? do_user_addr_fault+0xc85/0x1380 [ 1116.170947][T22019] __x64_sys_openat+0x138/0x170 [ 1116.170969][T22019] do_syscall_64+0xfa/0xfa0 [ 1116.170988][T22019] ? lockdep_hardirqs_on+0x9c/0x150 [ 1116.171006][T22019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.171019][T22019] ? clear_bhb_loop+0x60/0xb0 [ 1116.171035][T22019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.171048][T22019] RIP: 0033:0x7fbfe06a7407 [ 1116.171062][T22019] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1116.171074][T22019] RSP: 002b:00007ffcdf843d30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1116.171090][T22019] RAX: ffffffffffffffda RBX: 00007fbfe0d96880 RCX: 00007fbfe06a7407 [ 1116.171101][T22019] RDX: 0000000000000000 RSI: 00007ffcdf844f1a RDI: ffffffffffffff9c [ 1116.171111][T22019] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1116.171120][T22019] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1116.171128][T22019] R13: 00007ffcdf843f80 R14: 00007fbfe0e9b000 R15: 0000563114e884d8 [ 1116.171145][T22019] [ 1116.171150][T22019] [ 1116.472923][T22019] Allocated by task 17623: [ 1116.477331][T22019] kasan_save_track+0x3e/0x80 [ 1116.482000][T22019] __kasan_kmalloc+0x93/0xb0 [ 1116.486581][T22019] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1116.491941][T22019] em28xx_v4l2_init+0x10b/0x2e70 [ 1116.496861][T22019] em28xx_init_extension+0x120/0x1c0 [ 1116.502148][T22019] process_scheduled_works+0xae1/0x17b0 [ 1116.507678][T22019] worker_thread+0x8a0/0xda0 [ 1116.512252][T22019] kthread+0x711/0x8a0 [ 1116.516307][T22019] ret_from_fork+0x4bc/0x870 [ 1116.520877][T22019] ret_from_fork_asm+0x1a/0x30 [ 1116.525620][T22019] [ 1116.527924][T22019] Freed by task 17623: [ 1116.531973][T22019] kasan_save_track+0x3e/0x80 [ 1116.536637][T22019] __kasan_save_free_info+0x46/0x50 [ 1116.541818][T22019] __kasan_slab_free+0x5c/0x80 [ 1116.546567][T22019] kfree+0x19a/0x6d0 [ 1116.550448][T22019] em28xx_v4l2_init+0x1683/0x2e70 [ 1116.555458][T22019] em28xx_init_extension+0x120/0x1c0 [ 1116.560727][T22019] process_scheduled_works+0xae1/0x17b0 [ 1116.566253][T22019] worker_thread+0x8a0/0xda0 [ 1116.570826][T22019] kthread+0x711/0x8a0 [ 1116.574878][T22019] ret_from_fork+0x4bc/0x870 [ 1116.579449][T22019] ret_from_fork_asm+0x1a/0x30 [ 1116.584193][T22019] [ 1116.586500][T22019] The buggy address belongs to the object at ffff888029a90000 [ 1116.586500][T22019] which belongs to the cache kmalloc-8k of size 8192 [ 1116.600531][T22019] The buggy address is located 1856 bytes inside of [ 1116.600531][T22019] freed 8192-byte region [ffff888029a90000, ffff888029a92000) [ 1116.614483][T22019] [ 1116.616791][T22019] The buggy address belongs to the physical page: [ 1116.623197][T22019] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29a90 [ 1116.631943][T22019] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1116.640424][T22019] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1116.648391][T22019] page_type: f5(slab) [ 1116.652352][T22019] raw: 00fff00000000040 ffff88801a027280 ffffea0001617200 0000000000000005 [ 1116.660916][T22019] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1116.669483][T22019] head: 00fff00000000040 ffff88801a027280 ffffea0001617200 0000000000000005 [ 1116.678134][T22019] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1116.686788][T22019] head: 00fff00000000003 ffffea0000a6a401 00000000ffffffff 00000000ffffffff [ 1116.695437][T22019] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1116.704085][T22019] page dumped because: kasan: bad access detected [ 1116.710483][T22019] page_owner tracks the page as allocated [ 1116.716174][T22019] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 21028, tgid 21027 (syz.4.4373), ts 1043292776754, free_ts 1042945198327 [ 1116.737861][T22019] post_alloc_hook+0x234/0x290 [ 1116.742618][T22019] get_page_from_freelist+0x2365/0x2440 [ 1116.748144][T22019] __alloc_frozen_pages_noprof+0x181/0x370 [ 1116.753933][T22019] alloc_pages_mpol+0x232/0x4a0 [ 1116.758764][T22019] allocate_slab+0x96/0x350 [ 1116.763247][T22019] ___slab_alloc+0xf56/0x1990 [ 1116.767905][T22019] __slab_alloc+0x65/0x100 [ 1116.772305][T22019] __kmalloc_cache_noprof+0x411/0x6f0 [ 1116.777663][T22019] audit_log_d_path+0xb8/0x1a0 [ 1116.782412][T22019] audit_log_d_path_exe+0x42/0x70 [ 1116.787420][T22019] audit_log_task+0x2b3/0x3c0 [ 1116.792084][T22019] audit_seccomp+0x86/0x190 [ 1116.796568][T22019] __seccomp_filter+0xce4/0x1e10 [ 1116.801491][T22019] syscall_trace_enter+0xaa/0x160 [ 1116.806764][T22019] do_syscall_64+0xd3/0xfa0 [ 1116.811255][T22019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.817131][T22019] page last free pid 16029 tgid 16029 stack trace: [ 1116.823612][T22019] __free_frozen_pages+0xbc4/0xd30 [ 1116.828711][T22019] __put_partials+0x146/0x170 [ 1116.833369][T22019] put_cpu_partial+0x1f2/0x2e0 [ 1116.838116][T22019] __slab_free+0x2b9/0x390 [ 1116.842513][T22019] qlist_free_all+0x97/0x140 [ 1116.847089][T22019] kasan_quarantine_reduce+0x148/0x160 [ 1116.852532][T22019] __kasan_slab_alloc+0x22/0x80 [ 1116.857367][T22019] kmem_cache_alloc_noprof+0x367/0x6e0 [ 1116.862810][T22019] vm_area_dup+0x2b/0x680 [ 1116.867118][T22019] dup_mmap+0x903/0x1b10 [ 1116.871349][T22019] copy_mm+0x13c/0x4b0 [ 1116.875399][T22019] copy_process+0x1706/0x3c00 [ 1116.880068][T22019] kernel_clone+0x21e/0x840 [ 1116.884556][T22019] __x64_sys_clone+0x18b/0x1e0 [ 1116.889304][T22019] do_syscall_64+0xfa/0xfa0 [ 1116.893795][T22019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.899668][T22019] [ 1116.901970][T22019] Memory state around the buggy address: [ 1116.907579][T22019] ffff888029a90600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1116.915622][T22019] ffff888029a90680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1116.923680][T22019] >ffff888029a90700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1116.931718][T22019] ^ [ 1116.937848][T22019] ffff888029a90780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1116.945893][T22019] ffff888029a90800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1116.953938][T22019] ================================================================== [ 1116.964203][T17623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.989652][T22019] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1116.996876][T22019] CPU: 1 UID: 0 PID: 22019 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1117.005906][T22019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1117.015950][T22019] Call Trace: [ 1117.019215][T22019] [ 1117.022130][T22019] dump_stack_lvl+0x99/0x250 [ 1117.026714][T22019] ? __asan_memcpy+0x40/0x70 [ 1117.031292][T22019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1117.036476][T22019] ? __pfx__printk+0x10/0x10 [ 1117.041053][T22019] vpanic+0x237/0x6d0 [ 1117.045022][T22019] ? __pfx_vpanic+0x10/0x10 [ 1117.049512][T22019] ? preempt_schedule+0xae/0xc0 [ 1117.054350][T22019] ? __pfx_preempt_schedule+0x10/0x10 [ 1117.059712][T22019] panic+0xb9/0xc0 [ 1117.063419][T22019] ? __pfx_panic+0x10/0x10 [ 1117.067823][T22019] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1117.073703][T22019] ? is_module_address+0x17/0xf0 [ 1117.078630][T22019] ? v4l2_fh_open+0xac/0x420 [ 1117.083206][T22019] check_panic_on_warn+0x89/0xb0 [ 1117.088133][T22019] ? v4l2_fh_open+0xac/0x420 [ 1117.092705][T22019] end_report+0x78/0x160 [ 1117.096933][T22019] kasan_report+0x129/0x150 [ 1117.101421][T22019] ? v4l2_fh_open+0xac/0x420 [ 1117.106003][T22019] v4l2_fh_open+0xac/0x420 [ 1117.110403][T22019] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1117.116375][T22019] em28xx_v4l2_open+0x157/0x9a0 [ 1117.121220][T22019] v4l2_open+0x1bf/0x3a0 [ 1117.125448][T22019] chrdev_open+0x4cc/0x5e0 [ 1117.129847][T22019] ? __pfx_chrdev_open+0x10/0x10 [ 1117.134772][T22019] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1117.141084][T22019] ? __pfx_chrdev_open+0x10/0x10 [ 1117.146004][T22019] do_dentry_open+0x953/0x13f0 [ 1117.150755][T22019] vfs_open+0x3b/0x340 [ 1117.154805][T22019] ? path_openat+0x2ecd/0x3830 [ 1117.159556][T22019] path_openat+0x2ee5/0x3830 [ 1117.164144][T22019] ? __pfx_path_openat+0x10/0x10 [ 1117.169075][T22019] do_filp_open+0x1fa/0x410 [ 1117.173562][T22019] ? __lock_acquire+0xab9/0xd20 [ 1117.178395][T22019] ? __pfx_do_filp_open+0x10/0x10 [ 1117.183413][T22019] ? _raw_spin_unlock+0x28/0x50 [ 1117.188253][T22019] ? alloc_fd+0x64c/0x6c0 [ 1117.192574][T22019] do_sys_openat2+0x121/0x1c0 [ 1117.197237][T22019] ? __pfx_do_sys_openat2+0x10/0x10 [ 1117.202419][T22019] ? exc_page_fault+0x82/0x100 [ 1117.207170][T22019] ? do_user_addr_fault+0xc85/0x1380 [ 1117.212440][T22019] __x64_sys_openat+0x138/0x170 [ 1117.217274][T22019] do_syscall_64+0xfa/0xfa0 [ 1117.221764][T22019] ? lockdep_hardirqs_on+0x9c/0x150 [ 1117.226947][T22019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.232998][T22019] ? clear_bhb_loop+0x60/0xb0 [ 1117.237662][T22019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.243536][T22019] RIP: 0033:0x7fbfe06a7407 [ 1117.247939][T22019] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1117.267526][T22019] RSP: 002b:00007ffcdf843d30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1117.275924][T22019] RAX: ffffffffffffffda RBX: 00007fbfe0d96880 RCX: 00007fbfe06a7407 [ 1117.283880][T22019] RDX: 0000000000000000 RSI: 00007ffcdf844f1a RDI: ffffffffffffff9c [ 1117.291842][T22019] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1117.299795][T22019] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1117.307748][T22019] R13: 00007ffcdf843f80 R14: 00007fbfe0e9b000 R15: 0000563114e884d8 [ 1117.315712][T22019] [ 1117.319064][T22019] Kernel Offset: disabled [ 1117.323366][T22019] Rebooting in 86400 seconds..