last executing test programs: 4m29.69807571s ago: executing program 4 (id=4525): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r1 = epoll_create(0xff9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x9000001c}) r2 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8000100, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="0b845bf5955a8b0025c4f8d207af46117e16ec86001be35e710328de35e156ea29f22ea6e49216aeaf25f3b4592dd0442bb7f26f7aab383ccb62656d67b2ef8ceec372938cab91319db0bae3eafbd7513f5ef8d9afbb6b0f1c406d0c42438c3bfbd2") r3 = syz_io_uring_setup(0x1115, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000000040), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0xd8, 0x10, 0x200, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50002}, [@IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x74, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4c, 0x5, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, {0xa, 0x4, @random="1b03c8122357"}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x5}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0xd8}}, 0x20000012) 4m29.601061699s ago: executing program 4 (id=4526): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x356}, &(0x7f00000008c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x41}, 0x1}) io_uring_enter(r2, 0x70a, 0x41e3, 0x40, 0x0, 0x0) listen(0xffffffffffffffff, 0x1) write$eventfd(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x18, 0x127081) 4m28.795203978s ago: executing program 4 (id=4529): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, 0x0, 0x9e05, 0x0, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0xe0}, 0x14) 4m28.576387972s ago: executing program 4 (id=4530): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x24, 0x3e, 0x107, 0x70bd27, 0x4000, {0x3, 0x7c}, [@nested={0x4, 0x47}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4c010) (fail_nth: 6) 4m28.091868389s ago: executing program 4 (id=4531): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = open(0x0, 0x1850c2, 0x14c) ftruncate(r4, 0x200004) socket$kcm(0xa, 0x2, 0x73) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) openat2(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x3b52c0, 0x0, 0x24}, 0x18) r8 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r8, &(0x7f0000000100)="4a89a7b0f709014fd8cbd67467b3d5a41320d6391b95a5d01653fb0ea5d5c9cc35f72ade64d903938d481ffacc132f7bb43366f188a073f8cd18e001164d9bcb779027ced1e3f236498eff1060868b52f7a29b5f8f7a6be1a85d88bd494ec5a1a5698198fc96679c60e5277556ca854a7e5eaa16cccfb410", 0x78, 0x8000, &(0x7f0000000900)=@in4={0x21, 0x1, 0x2, 0x64, {0x2, 0x4e23, @remote}}, 0x24) ioctl$KVM_CAP_X2APIC_API(r7, 0x4068aea3, 0x0) ioctl$KVM_SIGNAL_MSI(r7, 0x4020aea5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r3, r4, 0x0, 0x80001d00c0d1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030400000000fedbdf2500000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002800128008000100677265001c000280080007000a01010106002000020000000600030081"], 0x48}, 0x1, 0x0, 0x0, 0x40084}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r10, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x3ff, 0x0, 0x22, 0x0, 0x13}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m25.65084216s ago: executing program 4 (id=4545): socket$kcm(0x2, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x2) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/122, 0x7a}, {&(0x7f0000000480)=""/65, 0x41}, {&(0x7f00000005c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/9, 0x9}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000001540)=""/209, 0xd1}], 0x6, &(0x7f00000007c0)=""/105, 0x69}, 0x81}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000006c0)=""/17, 0x11}, {&(0x7f0000000840)=""/2, 0x2}, {&(0x7f0000000880)=""/234, 0xea}, {&(0x7f0000000980)=""/137, 0x89}], 0x4, &(0x7f0000000a80)=""/130, 0x82}, 0x1}, {{0x0, 0x0, &(0x7f0000000f40), 0x0, &(0x7f0000000b40)=""/219, 0xdb}, 0x800}, {{&(0x7f0000001080)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000440)=""/35, 0x23}, {&(0x7f0000001140)=""/138, 0x8a}, {&(0x7f0000001200)=""/220, 0xdc}, {&(0x7f0000001300)=""/104, 0x68}, {&(0x7f0000001380)=""/63, 0x3f}], 0x5, &(0x7f00000030c0)=""/4096, 0x1000}, 0xc006}], 0x4, 0x40002020, &(0x7f0000001fc0)={0x0, 0x3938700}) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000540)={'dvmrp0\x00', 0x40}) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) lremovexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="96656375726974792e5b5e2c2f232800"]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r6, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x7aed979249b5ae9d, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7, 0x1000000000001, 0x800, 0x6}, 0x6}, 0x20, 0x1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006) openat$tcp_mem(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 4m10.185344206s ago: executing program 32 (id=4545): socket$kcm(0x2, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x2) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/122, 0x7a}, {&(0x7f0000000480)=""/65, 0x41}, {&(0x7f00000005c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/9, 0x9}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000001540)=""/209, 0xd1}], 0x6, &(0x7f00000007c0)=""/105, 0x69}, 0x81}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000006c0)=""/17, 0x11}, {&(0x7f0000000840)=""/2, 0x2}, {&(0x7f0000000880)=""/234, 0xea}, {&(0x7f0000000980)=""/137, 0x89}], 0x4, &(0x7f0000000a80)=""/130, 0x82}, 0x1}, {{0x0, 0x0, &(0x7f0000000f40), 0x0, &(0x7f0000000b40)=""/219, 0xdb}, 0x800}, {{&(0x7f0000001080)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000440)=""/35, 0x23}, {&(0x7f0000001140)=""/138, 0x8a}, {&(0x7f0000001200)=""/220, 0xdc}, {&(0x7f0000001300)=""/104, 0x68}, {&(0x7f0000001380)=""/63, 0x3f}], 0x5, &(0x7f00000030c0)=""/4096, 0x1000}, 0xc006}], 0x4, 0x40002020, &(0x7f0000001fc0)={0x0, 0x3938700}) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000540)={'dvmrp0\x00', 0x40}) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) lremovexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="96656375726974792e5b5e2c2f232800"]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r6, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x7aed979249b5ae9d, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7, 0x1000000000001, 0x800, 0x6}, 0x6}, 0x20, 0x1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006) openat$tcp_mem(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 9.25124464s ago: executing program 3 (id=5545): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0), &(0x7f0000000340)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) close(0x3) 7.962429834s ago: executing program 3 (id=5548): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)='>', 0x1}) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004040)=[{{&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)=""/106, 0x6a}, {&(0x7f0000000440)=""/27, 0x1b}, {&(0x7f00000005c0)=""/58, 0x3a}], 0x3, &(0x7f0000000640)=""/194, 0xc2}, 0x9}, {{&(0x7f0000000740)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000002c00)=[{&(0x7f00000007c0)=""/206, 0xce}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/234, 0xea}, {&(0x7f00000019c0)=""/14, 0xe}, {&(0x7f0000001a00)=""/249, 0xf9}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/74, 0x4a}, {&(0x7f0000002b80)=""/88, 0x58}], 0x8, &(0x7f0000002c40)=""/251, 0xfb}, 0x6}, {{&(0x7f0000002d80)=@un=@abs, 0x80, &(0x7f0000004000)=[{&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/41, 0x29}, {&(0x7f0000003e40)=""/212, 0xd4}, {&(0x7f00000040c0)=""/114, 0x72}, {&(0x7f0000003fc0)=""/36, 0x24}], 0x5}, 0x7fffffff}], 0x3, 0x20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x810, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x10000020, 0x200004, 0x0, 0xb49, 0x9, 0x8, 0x3, 0x3}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20048084) write$sndseq(r5, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f00000002c0)={0x10f, @time={0xf2ee}, 0x0, {0x0, 0x2}, 0x2}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000140)=0xfffffdfb) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) unshare(0x78060300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xc0300, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0xbf14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x140488d3}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYRESDEC], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 7.046309097s ago: executing program 0 (id=5552): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc0046209, &(0x7f0000001340)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'wg1\x00'}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2800491, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="acd7"], 0x4, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r7, 0x1, 0x2d, &(0x7f0000000100)=""/152, &(0x7f0000000000)=0x98) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 6.816352301s ago: executing program 3 (id=5555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010900000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000000c0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b8020000180040001006374000028000280080001400000000008000240000000000900010073797a3000000000140000001000010000000000000000000000000a"], 0xe4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002800128008000100687372001c00028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB="0500070003"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002940)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x2281965a7a17aedf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0xffff, 0x3, 0x2, 0xb9c}, {0xfa, 0x0, 0x6, 0x3, 0x2, 0x87d}, 0x80, 0xfffff001, 0xf3f}}, @TCA_TBF_BURST={0x8, 0x6, 0x6}, @TCA_TBF_PRATE64={0xc, 0x5, 0x5a90d3d52efb08c}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="48020000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6], 0x248}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x700, 0x6, 0xfffff4af, 0x3, {{0xe, 0x4, 0x0, 0x34, 0x38, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp_prespec={0x44, 0x24, 0xf2, 0x3, 0xd, [{@broadcast, 0xe06f}, {@empty, 0x1}, {@local, 0xffff8000}, {@private=0xa010101, 0x2}]}]}}}}}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001740)=@delchain={0x3e74, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r12, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3e44, 0x2, [@TCA_CGROUP_POLICE={0xc24, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x65b}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xb, 0x7, 0x4, 0x0, 0x8, 0x7, 0x4, 0x3, 0x2, 0x4, 0x8001, 0xd9b8, 0xe5, 0x8, 0xe1b3, 0x10000, 0x3, 0xfffff696, 0x6c5, 0x1ff, 0x0, 0xfffffffb, 0x4, 0xfffffff9, 0x0, 0xffff1435, 0x28000, 0x4, 0x8001, 0x1000, 0x6, 0x10, 0x2, 0x7ff, 0x4, 0x2, 0x923, 0x9, 0x1ff, 0x7, 0x7827, 0x5, 0x3ff, 0xf372, 0x9, 0xb70, 0x6, 0xe, 0x9, 0x0, 0x280000, 0x8, 0x346, 0x80000000, 0x5, 0x4013, 0xfffffff7, 0x2, 0x3, 0x401, 0x0, 0x2, 0x4, 0xefd4, 0x9, 0x3, 0x7c, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x4, 0x9, 0xfffffff7, 0xfffffffb, 0x6, 0x18c86abf, 0x8000, 0x1, 0x2033, 0x7, 0x8a29, 0xfffffffa, 0x1000000, 0x81, 0xffffff5b, 0x2, 0x0, 0x4, 0x4, 0x4, 0x80000000, 0x7ff, 0x1, 0xca, 0x5, 0x4, 0x81, 0xb, 0x800, 0x7f, 0x9, 0xfff, 0x4, 0x1, 0xf, 0x80000000, 0x0, 0x401, 0x40, 0xd, 0x8, 0x0, 0x8, 0x6, 0x9, 0xdf, 0xf2, 0x1f, 0x2, 0x0, 0x1, 0x100, 0xffffffd4, 0x100, 0x2, 0x1, 0x9, 0x80000001, 0x0, 0x5, 0xa, 0x4, 0xe, 0x1000, 0xb, 0x30, 0x2, 0x3, 0x2, 0x80, 0xffffb9d8, 0x85, 0x5, 0x40f9, 0x7d3b, 0x7, 0x80000000, 0x8, 0xff000000, 0x0, 0xfffffffd, 0x7, 0xfff, 0x9, 0x8, 0x7, 0x80, 0x7837, 0xca3a, 0x2, 0x0, 0xc00000, 0x81000000, 0x8, 0x2, 0x81, 0x0, 0x8, 0x5, 0x0, 0x101, 0x0, 0x5, 0xda, 0x2, 0x3, 0x4, 0x3, 0x1, 0x2, 0x1, 0x96, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0xcfbc, 0xc00000, 0x8, 0xb, 0x2, 0x3eb, 0x8, 0xff, 0xab3, 0x6, 0xc821, 0x3, 0x4, 0xfffffff7, 0x1c2, 0x8, 0x4, 0x6, 0x8, 0x1, 0x2, 0x1ff, 0x101, 0x599d302e, 0x80, 0x99, 0x8001, 0x2a, 0xf5f6, 0x8, 0x907, 0x4, 0xffffffff, 0xffffffff, 0x9, 0x1b0, 0x8deb, 0xd, 0x5, 0xfffeffff, 0x100, 0x5, 0x4, 0x0, 0x4, 0xf3, 0x0, 0x8, 0x4, 0x8, 0x7, 0x300000, 0x6, 0x2, 0xe, 0x30ac, 0x7, 0x4, 0x7, 0x1, 0x9, 0x4, 0x1, 0xffffffff, 0x10, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x10000, 0x1000, 0xffffffff, 0x6, 0x5, 0xffffffff, 0x6, 0x5, 0x5, 0xff8, 0xfffffffe, 0xf850, 0xc, 0x7, 0x2, 0x1, 0x7, 0x9, 0x654, 0x5, 0x5, 0x6, 0xfffffffa, 0x8, 0x5, 0x8, 0x3, 0x40, 0x3, 0x8, 0x2, 0x6, 0x1, 0x4, 0x3, 0x200, 0xfffffffe, 0x1, 0x4, 0xe0c6, 0x2, 0x1, 0x80000001, 0x7, 0x7f, 0x8, 0x0, 0x80000001, 0x9, 0x0, 0x5, 0x9, 0x1, 0x101, 0x400, 0x40, 0xfff, 0x80000001, 0x80000000, 0xbd1, 0x5, 0x3, 0xfffffff8, 0x5, 0x0, 0x3, 0x2, 0x9, 0x101, 0x8, 0x7, 0x800, 0x7ff, 0x6, 0x31be, 0x4, 0x200, 0x7ff, 0x0, 0x2, 0x8, 0x1, 0x3, 0x938, 0x9022, 0xb, 0xc59c, 0x1000, 0x7, 0xee8, 0x40008, 0x2, 0x2, 0x4c, 0x2, 0x8, 0x6, 0x1ff, 0x64, 0xdcf9, 0xf75, 0x8d, 0x9, 0x3, 0xffffffff, 0x3, 0x8001, 0xa59, 0x2, 0xf, 0x3daf, 0x4, 0x3, 0xfffffffe, 0xffffd8d9, 0x1, 0x5a0, 0x5, 0x6, 0x40, 0x20, 0x7, 0x7, 0x7dd6, 0x5, 0x2, 0x6, 0x4, 0x5, 0xd14, 0xf, 0x7, 0xfffff801, 0x3, 0x1, 0x90df, 0x8, 0x3, 0x5, 0xffff, 0xc, 0x401, 0x0, 0x1, 0xc, 0x8c, 0xfff, 0xb, 0x800, 0x3, 0xfffffffd, 0x8, 0x2, 0x1, 0x676, 0x3, 0x8a97, 0x100, 0x9, 0x9, 0x10000, 0xacd0eb62, 0x40, 0x2, 0x400, 0xf, 0x7fffffff, 0x2, 0x7fffffff, 0xdfbe, 0xfffffbff, 0x3698dcf9, 0x0, 0x80, 0x301b6c9d, 0x5a4dd4a2, 0xa8e, 0x6, 0x9, 0x2, 0x4, 0x4, 0x401, 0x10001, 0x7fffffff, 0x7f, 0x3, 0xffffffff, 0x6, 0x0, 0x5, 0x6, 0xb308, 0x54, 0x1000, 0x3d9, 0x2, 0x7d, 0x7, 0x3, 0xfffffffa, 0xef, 0x8, 0x6, 0x3, 0x1, 0xfff, 0xffff0001, 0x81, 0x1, 0x8, 0xfe58b5b, 0x6e3, 0x6, 0x4, 0x2, 0x5, 0xffff, 0x8, 0x6, 0x1, 0x80000001, 0x92a7, 0x10, 0x1, 0x2, 0x6, 0x1, 0x93, 0x44, 0x7, 0x7ff, 0xd2, 0x81, 0x2, 0x7fffffff, 0x1ff, 0x2, 0xa, 0xcf, 0x8, 0xc, 0x5, 0x800, 0x9, 0x5, 0x2, 0xf, 0x8, 0x23, 0x1ff, 0x4, 0x8, 0x558, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x89, 0x7, 0xfde5, 0xf68, 0x7fff, 0x6, 0x1, 0x3ff, 0x4, 0xd, 0x7, 0x8, 0xd, 0x16c, 0xcc2, 0x83, 0x8, 0x6, 0x7, 0xfffffff0, 0x142, 0x4bd0, 0x7ff, 0x4, 0x6, 0x5, 0x6, 0x9, 0x7ff, 0x0, 0x80000001, 0xe7, 0x4, 0x8, 0x0, 0x6, 0x8, 0x1, 0xff000000, 0x4, 0xc, 0x4, 0xf9, 0x9, 0x0, 0x0, 0x100, 0x2, 0x2f14, 0x9, 0x8, 0x8, 0x1, 0x1, 0x9, 0x5, 0x8000, 0x8, 0x6, 0xdee, 0x4, 0xfffffff8, 0x3, 0xff, 0x5, 0x8, 0x2, 0x136f5b8b, 0x1, 0x8e, 0x2, 0xd, 0xa, 0x1, 0x4, 0x4e8, 0x2, 0x8, 0x8, 0x3, 0x7, 0xcc, 0x0, 0x6, 0x2, 0x10001, 0x5, 0xca93, 0x1000, 0x5, 0x4, 0x8, 0xd, 0xffffffff, 0xab8e, 0x9, 0x5, 0x9, 0xfffffffd, 0x2, 0x80000000, 0x9, 0x4, 0x3, 0x5, 0x9b8c, 0x2, 0x1, 0x800, 0x4, 0x0, 0x40, 0x8001, 0x1, 0xc, 0x9d6, 0x4, 0x80000001, 0x7, 0xfffffffa, 0x6, 0x0, 0x401, 0x6, 0x6, 0x3, 0x80, 0x5, 0x5, 0x7, 0x4, 0x4, 0x5, 0x1, 0x2, 0xff, 0x4, 0xb970, 0x81, 0x7, 0x8, 0x1, 0x0, 0xfffffff9, 0x401, 0x4, 0x7, 0x40, 0xff, 0x3, 0x5, 0x5, 0x80000000, 0x0, 0x0, 0x2, 0x0, 0x35e, 0xfff, 0x7fff, 0x10000, 0xe, 0x80000000, 0x7ff80, 0x60b, 0x9, 0xfffffffe, 0x0, 0x0, 0x7, 0x547, 0x457, 0x5, 0x2, 0x10, 0x7, 0x0, 0x1, 0x8, 0x6, 0x7, 0x7d27bc6d, 0xe, 0x4, 0x1000, 0x9, 0xe0, 0x5, 0x10001, 0x2, 0x8, 0x0, 0x10001, 0x2, 0x0, 0x2, 0x1, 0x4, 0x5, 0x4, 0x0, 0x5, 0x2, 0x5, 0x5, 0x89c8, 0x2, 0x7, 0x0, 0x4, 0xf07, 0xf, 0x0, 0xd, 0x6407f341, 0x35, 0x8, 0x3, 0x468, 0xffff4204, 0x1, 0x4, 0x7, 0x7f, 0xfffc, 0xd, 0x7, 0x53, 0x3ff, 0x4, 0x2, 0x6a, 0x1, 0x6, 0x3, 0x7, 0x3, 0x8000, 0xd, 0x4, 0x4, 0xfffffffd, 0xf, 0x0, 0x8, 0x3a, 0xff, 0x2, 0x0, 0x8, 0x4, 0xd, 0x889c, 0x5, 0x7, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}]}, @TCA_CGROUP_ACT={0x310c, 0x1, [@m_tunnel_key={0x1a4, 0x7, 0x0, 0x0, {{0xf}, {0x88, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x4, 0x4, 0xd4, 0x7ff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x29}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}]}, {0xf0, 0x6, "ec842fdee8859c74bba19371a293f8453f455175c4c8ab1b1a0088e80ad16957ed2d9947cc47cd180e8f459786700b800a9707942aafd42934864299a10a2ddd6b4b1625ca34bbbba5707e2fead9ae332a2c47c93375420e1a87e873488426bc90d57c64805abcbd1bfc763a40d877f7dc44ae3cd0ab7fa867b1187b0b43e4369d90e7d5dd061b4315d9877167668bce3f2a483b319e0a1bcfa00f3dbbb393155f75c2779eac4d3c0be255ebc09ebeb586d0be25296d39801c139c57743c5dc36d72836e948a0e12498d3accab2633e017c3130cf0b60d6605164141d7a367e395f34130a98ff5087a767acb"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0xf0, 0xa, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0x9}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xffff}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x400, 0x1, 0x2, 0xc}}]}, {0x8c, 0x6, "8e15bacfcece628cc523b0c79f08eec9f54cefd56e2c0b508dbc1483050b1e62e218804ac9de48fe546cd634408829fd93ec1bf539028d24b1cce8fc2ca0ca48072bbbd16d4530ca80e3476c3ec533c6d1619c7df562fc46c8c9db02304246f538f7716c374a930f0ba6e14514ed36ccad6e15d429038eba22b5a5422d1fa3d68e04178b78f458b2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0xec, 0x18, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0xa7, 0x6, "561d0351482c9063f8e97707cd2de9a47dd910f181559a32ff22017c37c73fb31ffe9789820e3d8d6797a6d9aa5ca249f9dae7e378a89206522762a67378231486c650d9666a21f0d384f0d38e306296571db2da77227658f0cf3eab7b9d92ccf22f7df40b90c788e219435a0f1171dc7141b1c9d70a883227a4ba479c4182470333c94a8adf07518fc715a5774b42dca580b492f2e31ca6d0f645451bcd67a05dfd3b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0x11c, 0x10, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, ']-\x00'}, @TCA_DEF_DATA={0xa, 0x3, '$%[)!\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x6, 0x7, 0xac, 0x8}}, @TCA_DEF_DATA={0xc, 0x3, '.&!{!}}\x00'}]}, {0xb7, 0x6, "39e83534a15de78e1f7497c6ca5a1a74b90bb7f5a0f52f48f52147df6cd45605f9fa14ca4841a0fe64a5e9ea3cb40744c0addc5d6e7c7ab95c1ad896c29cfce5b06572788c28981d3d6c3bbbd430b313a1c318144e39e26b678bc0141115e27dbf89edd42b573d17d2012bd64f03b7182ecf036e6c9832b214acbfe3809f3029d50264a8fde6e8ea26db8474c948217285738ae22132255f5cab78ad2a1e1abd8e93488109247e20101b71c945fa20f9178c8b"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x148, 0x15, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x4, 0x7, 0x0, 0x2}, {0x4, 0x2, 0x7, 0x8}, {0x9, 0x2, 0x9, 0x9}, {0x8, 0xa, 0xf1, 0xfffffffa}, {0xfffa, 0x8, 0xf7, 0x5}, {0x400, 0xff, 0x3, 0x80000000}, {0xbf67, 0x8, 0x9, 0x3}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r11}]}, {0xda, 0x6, "3c08015e34d102ef4f65ee24e159d98fff67817e023acad917671ae7143c522a3ab5e0839c53fda36610268382355d45bf78d62f8a035027b1e95aa550d09689e70ebc03d772771d8fa60d5fbea23b8fa574a5817543e01e5fddc6dc1b9ba025913b56af48e9835e97fd839dc0e4ec915c0b7c03301680f114310c1436681f3539ec480c6c828ee47076bd27e07f69f456c30928fd9de62a7013fa4c0ef5f826a554e1fc40a4daa137c5e93f26eeb2672938f3892339cc92d3657c828e6ccb781cca23d7e60d59989735485b0e348f25519445f09972"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x2994, 0x1f, 0x0, 0x0, {{0xb}, {0x2928, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x21, 0x0, 0x6, 0x5, 0x1, 0x2, 0xf3, 0x6, 0xb350, 0x7, 0x401, 0x6, 0x6, 0x7, 0x7, 0x3, 0x5, 0x5, 0x6, 0x2, 0xb, 0x80000001, 0xfffffff7, 0x2, 0x6, 0x2, 0x80, 0x1ff, 0xf292, 0x643, 0x5, 0x6, 0x40bae6ca, 0x0, 0x7fffffff, 0x5, 0x4, 0x7, 0xda0f, 0x9, 0x3, 0xa2d, 0x3, 0x8, 0x10001, 0x9, 0xfffffff6, 0x5, 0x4, 0x0, 0x1, 0xffffffff, 0x3, 0xfff, 0x0, 0x2, 0x0, 0xe80, 0x0, 0x7b70, 0x8, 0x8, 0x7, 0xffffff12, 0x9, 0x10000, 0x6, 0x8001, 0xfffffff8, 0x0, 0x8, 0x7, 0x4, 0x4, 0x9, 0x8, 0x6, 0x5, 0x7ff, 0x0, 0x3, 0x4, 0x70000000, 0x1000, 0x9, 0x2, 0x8f2, 0x2, 0xfffffffc, 0x8, 0x6, 0x7fff, 0x6, 0x80000001, 0x8, 0x2d, 0x1000, 0x9, 0x1778000, 0x9, 0x8, 0xa, 0x8, 0x7, 0x8, 0x2, 0x9, 0x7, 0x0, 0xff, 0x12, 0x29, 0x4, 0xa, 0x5, 0x62, 0x7fff, 0x3, 0x72c7, 0x7, 0x3, 0x1000, 0xf, 0x2, 0x7b, 0x6, 0x6, 0x1ff, 0x3, 0x9ef0, 0x2ec, 0x6, 0x1, 0x7f, 0x6, 0x5, 0x1ff0, 0x3, 0x1, 0xfff, 0x10000, 0x2, 0x9c9, 0x4, 0xe7c, 0x8, 0x80, 0x7f, 0x7, 0x1, 0x400, 0x9, 0x3, 0x9, 0x1, 0x3, 0x3, 0x3, 0x3, 0x4, 0x9, 0x8000000, 0x7, 0x7, 0x6, 0x10000, 0x27aa, 0x7, 0x5, 0x0, 0x6, 0x6800000, 0x7, 0x6, 0xfffffff9, 0x1, 0x2e, 0x7, 0x8, 0x1, 0x3, 0x1ff, 0x400, 0x5, 0x8, 0x7, 0x6, 0xff, 0x6, 0x1ff, 0xf, 0x40, 0x1, 0x80000001, 0x8a3, 0x2, 0x0, 0x6, 0x7, 0xf, 0x5, 0xffffff9a, 0xff, 0x40, 0x3, 0x1, 0x9, 0x7ef, 0x3ff, 0x10000, 0x4, 0x3, 0x9, 0x10001, 0x0, 0x0, 0x1ff, 0xfffffe10, 0x7fff, 0x9, 0x5, 0x8, 0x7, 0x8, 0x5, 0x3, 0xcf, 0xc, 0x60ab, 0x7fffffff, 0xffffff83, 0x101, 0xf, 0x40, 0x3, 0x54e, 0x8117, 0x0, 0x4, 0x4, 0x6, 0x40, 0x9, 0x2, 0x9, 0x2, 0x4, 0x29, 0x9, 0x5, 0xf0, 0x0, 0xffffff1c, 0x67d85fdc, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x4, 0x5, 0x7, 0x1, 0x8000, 0xfffffff8, 0x6, 0xfff, 0x4, 0x6, 0x6, 0x101, 0x4, 0xfffffffa, 0x400, 0x1, 0x3, 0x800, 0x4, 0xb, 0x0, 0x7ff, 0xbac, 0x6c3, 0xf9, 0x9, 0x4, 0x2, 0x1, 0x6aa, 0x6, 0x100, 0x7, 0xc, 0x1, 0x7, 0x4, 0xc, 0x0, 0xe, 0xcad, 0x1, 0x8, 0x3, 0x2, 0x2, 0x4, 0x3fffc, 0x7f, 0x2e7d, 0x9, 0x3, 0x5, 0x1, 0x1, 0x8, 0x1, 0x0, 0x6a, 0x4, 0xfffffff7, 0x1000, 0xffffffff, 0xf, 0x3, 0x2, 0x800, 0x7, 0x9, 0x122c, 0xff, 0x3, 0x97, 0x1, 0x0, 0x1, 0x8001, 0x8, 0x1eb, 0x6, 0x3ff, 0x7f, 0x8, 0xdaea, 0x9, 0x5, 0xcb, 0x0, 0xfffffff9, 0xd82, 0xffffff7f, 0x8, 0x1, 0xffffffff, 0x2, 0x1, 0x1, 0x6e9, 0xa0, 0x8, 0x1000, 0xf, 0x7, 0xffffffff, 0x7, 0x7, 0x2, 0xa, 0x1, 0x5, 0xf, 0x2519, 0xf4, 0x4, 0x5, 0xc09e, 0x756ddc6e, 0x6, 0x0, 0x400000, 0x2, 0x4, 0xf15d, 0x4, 0x3, 0x3, 0x2, 0x2, 0x1000, 0x5, 0x7, 0x6, 0x9, 0x7, 0xb, 0x5, 0x0, 0x9, 0x81, 0x5, 0x4, 0x10000, 0x2ac208ab, 0x7, 0xfff, 0xb, 0x7, 0x2, 0x4c19, 0x1, 0x8, 0x8, 0x6, 0x7ff, 0x400, 0x339, 0x4, 0xfd17, 0x7, 0x5, 0x2, 0x3, 0x8, 0x4, 0x7ff, 0x9, 0x3, 0x3, 0x5, 0x1, 0x8, 0x8, 0xe, 0x8, 0xffffff00, 0x0, 0x6, 0x7, 0x3, 0xfffffff9, 0x0, 0x0, 0x4, 0xf, 0x800, 0x10001, 0x3, 0x4, 0x9, 0x101, 0x1, 0x4, 0x2094, 0x4a9, 0xffffff5d, 0x6, 0x40, 0x1ff, 0x5, 0x8, 0xfffffffc, 0x7, 0x5, 0x7, 0xfff, 0x7f, 0x92, 0x13, 0x1, 0xf2a60315, 0xb88, 0x7, 0x33, 0x1, 0x5, 0x2, 0x8, 0x25e4, 0x9, 0x6, 0x4, 0x7, 0x11, 0x9, 0x4, 0x7, 0xb5, 0x8, 0x2, 0x9, 0x2, 0x1ff, 0xffffffff, 0x0, 0x3, 0x1012, 0x0, 0x8, 0x4, 0x9, 0xffffff49, 0x9817, 0xfffffffd, 0x3, 0x6, 0x288a, 0x6, 0x1000, 0xc7, 0xaa, 0x2, 0x1000, 0x9, 0x8, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xd, 0x100, 0x800, 0x4, 0x61, 0xd, 0x0, 0x7be32c13, 0x5, 0x0, 0x75f3, 0x5, 0x8, 0x6, 0x1ff, 0x5, 0x2, 0x80000000, 0x7, 0x2, 0x7, 0x1, 0x3, 0x6, 0x9, 0x6f, 0x688a, 0x8000, 0x2, 0x48, 0x401, 0x9, 0x7, 0x7, 0x9035, 0x2, 0x2, 0x8, 0xc, 0x7fff, 0x6, 0x2cf6, 0x6, 0x8, 0x5, 0x0, 0x6, 0xfffffffb, 0x8001, 0x101, 0x8, 0x3, 0x1, 0x2, 0x6, 0xffff0000, 0x5, 0x0, 0x7, 0x1, 0x80000000, 0x6, 0x401, 0x1, 0x5, 0x1, 0x6, 0x8, 0xfd, 0x769f, 0x200, 0x7fff, 0x4, 0x8, 0x902, 0xc9, 0x4, 0xe1, 0x2, 0x7, 0x7, 0x5, 0x3ff, 0x9, 0x8001, 0x10000000, 0x9, 0x101, 0x7fffffff, 0xdcc6, 0x1, 0x101, 0x7, 0x100, 0x8, 0xffffffff, 0x7, 0xd3, 0x10, 0xff, 0x101, 0x6, 0x9, 0x3, 0x10001, 0x25f233f2, 0x1, 0x8, 0x2, 0xfffffffa, 0xff, 0x0, 0x1, 0x2, 0xe, 0x7d, 0x10, 0x971a, 0x8, 0x8bb7, 0x2, 0x5, 0x80000000, 0xfff, 0x6, 0x7, 0x9, 0x6, 0x6, 0x4, 0x5, 0x9, 0x0, 0xfffffe00, 0x91, 0x80000000, 0xe, 0xe, 0x5, 0x53, 0x3, 0x5, 0x8, 0xfffffffc, 0xc4, 0x0, 0x101, 0x4, 0x2, 0xf76, 0x7, 0x6a6, 0xd, 0x5af0, 0x6, 0x1, 0x80, 0xfec, 0x2, 0x6, 0xb03, 0x5, 0x0, 0xf, 0xef7, 0xcc6, 0x6, 0x2, 0x9, 0x7, 0x7fffffff, 0xf, 0x5, 0x9, 0x3, 0x2, 0x8, 0x81, 0x24, 0x8, 0x753, 0x4, 0x2, 0x3, 0xd74b, 0x7c, 0x20, 0x0, 0x401, 0x9, 0x4, 0xb, 0x0, 0x8, 0xff, 0x7, 0xa2, 0x5, 0x1, 0xe, 0x4, 0x28, 0x3ff, 0x4, 0x5, 0x6, 0x6, 0xc6, 0x0, 0x9, 0x4, 0x7ff, 0xce, 0x7, 0x1, 0x0, 0x1, 0x40000, 0xe34, 0x7, 0x6, 0x7, 0x7, 0x6, 0x9, 0x8, 0x8, 0x59c6, 0x4c, 0xbb, 0x124e1800, 0x2, 0x3, 0x7, 0x7ff, 0x7, 0x2, 0x7, 0x8, 0x8, 0x4945b26b, 0x7, 0x80000000, 0x8, 0xec4a, 0x2, 0x14, 0x401, 0xd, 0x8, 0x15e8e4ac, 0x10000, 0x1, 0xcab, 0xc75b]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2c1, 0x4, 0xfffffffe, 0x8, 0x8, 0x80, 0x63a8a7f2, 0x1, 0x5, 0x6, 0x1ff, 0x0, 0x3, 0x80000000, 0x5, 0xd70c, 0x5, 0xffffffff, 0xfffffff7, 0xff800000, 0x2, 0x101, 0x5, 0x1000, 0x5, 0x7ff, 0x6, 0x4c, 0x36000000, 0xc39d, 0xfffffffd, 0x5, 0x4, 0x80000000, 0x8, 0x1, 0x8, 0x7, 0x400, 0x7, 0x2, 0x1000, 0x0, 0x6, 0x9, 0x2, 0x9, 0x5f2d714e, 0x2, 0x2, 0x1, 0x9, 0x800, 0x8, 0xb, 0x2, 0x4, 0x1, 0x3, 0x20, 0x1c, 0x9d0, 0x100, 0x5, 0x8000, 0x1, 0x1, 0xf9, 0x9ae, 0x6, 0x2, 0x80, 0x38a, 0x3, 0xfffffff3, 0x6, 0x1, 0xd, 0x8, 0x0, 0x7, 0x80, 0x7, 0x7, 0x0, 0x80, 0x6, 0x8, 0x5d9044e0, 0x1, 0x6, 0x4204, 0x1, 0x9, 0xb17, 0x6, 0x8, 0x5, 0x21, 0x200, 0xffffff00, 0x2729, 0x1, 0x2, 0x5, 0x6, 0x9, 0x7fffffff, 0x4800, 0x3, 0xfffffff8, 0xb, 0x5, 0xbea0, 0x7, 0xde, 0x800, 0x200, 0x0, 0x8, 0x4, 0xe, 0xfffffff5, 0xffffffff, 0xffffffff, 0x4, 0x4, 0xfffffff7, 0x52, 0x3, 0x6, 0x5, 0xf, 0x5, 0x0, 0x100, 0xc5, 0x3, 0x2, 0x8000, 0x7ff, 0x7, 0x4, 0x0, 0x8, 0x7b, 0x7ff, 0x7, 0xfffffff6, 0x8d, 0x1, 0x3, 0x2, 0xe, 0x7, 0x9, 0x7, 0x5, 0x0, 0x7fff, 0x6, 0x7, 0x4, 0x1000, 0x3f, 0xa7, 0x1, 0xff, 0x8036, 0x9, 0x8000, 0x1da, 0x0, 0xffffff8f, 0x7, 0xff, 0x401, 0x1, 0x48a3, 0x96, 0x6b, 0x2, 0xe4c, 0x73309ad4, 0x2dc, 0x9, 0x40, 0x7f, 0x9, 0x7, 0x2, 0x6, 0x5, 0x7, 0x9, 0xe3c5, 0x5, 0x16fb, 0xeb, 0x401, 0x7, 0x692d, 0xc, 0x387, 0x4, 0x8, 0xffffffa4, 0x0, 0x8, 0x293c, 0x4, 0x4, 0x767, 0xb, 0x1, 0x4, 0x4, 0xa, 0x692, 0x7, 0x4, 0x8, 0x0, 0xffffffe9, 0x7f, 0x8, 0x2, 0xfffffff9, 0xf1f, 0x8, 0x2, 0x0, 0x7, 0x3, 0x81, 0x2, 0x1, 0x22, 0x4, 0xe, 0x1, 0x40, 0x1, 0x2, 0x1, 0x9, 0x6, 0xfffffffe, 0x3, 0xd, 0x1d, 0xfff, 0x5, 0xb, 0xfffffffc, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x35b4, 0x0, 0x4, 0x6, 0x3, 0xb8, 0x1, 0x5, 0x100, 0x4, 0x0, 0x4, 0x0, 0xf, 0x5, 0x5, 0x4, 0x6, 0x9, 0x6, 0x5, 0x10, 0x9, 0x3, 0x7f, 0x0, 0x61f, 0x6, 0x5, 0x0, 0x2, 0x80, 0x9, 0xffff, 0x3, 0x0, 0x7260, 0x8, 0x5, 0x153, 0x9, 0x4, 0x9, 0xfffffffd, 0xed, 0x80000000, 0x4, 0x0, 0xb, 0x800, 0x0, 0xc0000, 0x9, 0xffffffff, 0xfffffff9, 0x8, 0xbeab, 0x8000, 0x8000, 0x0, 0x6, 0xa05, 0x96, 0x5, 0x2, 0x53, 0x6, 0x8000, 0x7, 0x8, 0x4, 0x0, 0x1, 0xfffffffe, 0x2, 0x9, 0x7, 0x9, 0x6, 0x1, 0xf, 0xfffffffa, 0xfffffffd, 0x4, 0x41, 0xfffffffe, 0x2, 0xfff, 0x6, 0x8, 0x9, 0x2, 0x4, 0x9, 0x5, 0x3, 0x9, 0x4, 0x2, 0x7, 0x888, 0x0, 0x2, 0x89a, 0x8, 0x80000001, 0x277e, 0x2, 0x28, 0x9, 0x40, 0x9c4, 0x3, 0x2, 0x7, 0x8001, 0x6, 0x101, 0x9, 0x6131, 0x9, 0x4, 0xffff, 0x6, 0x81, 0x0, 0x2, 0xfffffff7, 0xb44, 0x9, 0x6, 0x3, 0x10001, 0x1, 0xf38a, 0x5, 0xef, 0xd, 0x6, 0x9, 0x7fff, 0x543, 0x4, 0x3, 0x7f5, 0x7, 0xdb, 0x12000000, 0x5, 0xffffffff, 0x4, 0x401, 0x9, 0x6f, 0x7fff, 0x1, 0x7a6, 0x7, 0x1000, 0x4, 0x5, 0x8, 0x101, 0x4, 0x97, 0x6, 0x1, 0xa, 0x8, 0x4, 0x3, 0x3f, 0x2d79, 0x6, 0x7, 0x7ff, 0x80000001, 0x0, 0x97, 0x7, 0x5, 0x101, 0x7, 0x3, 0x81, 0x3, 0x2a6, 0xb82, 0x5, 0x1, 0xfffffffc, 0x0, 0x10000, 0xffffffff, 0xd9a, 0x5, 0xfffffffa, 0x6, 0x5, 0xe, 0x97e4, 0x6, 0xd, 0x9, 0x0, 0x7, 0x1, 0x5, 0x200, 0x7b, 0x401, 0x0, 0x5, 0x5, 0x8, 0x5, 0x7f, 0x9, 0x8, 0x4, 0x2, 0x5, 0xfffffffd, 0x0, 0x22, 0x10000, 0x9, 0x4, 0x9, 0x7, 0x4, 0xfffffff9, 0xa, 0x7, 0x200, 0x852, 0x15, 0x6, 0x1, 0xfec, 0x9757, 0x4, 0x3, 0x0, 0xd7, 0x1, 0x85, 0xc4, 0x10000, 0x0, 0x4, 0x6, 0xfff, 0x8, 0x4, 0x4]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x8, 0x7, 0x452d, {0x5, 0x2, 0x8000, 0x0, 0x2}, {0x21, 0x3, 0x9, 0x3, 0x8, 0x4}, 0x9, 0x7, 0x7ff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x7, 0x1, 0x8, 0x2, 0x0, 0xe, 0x81, 0x4, 0x40, 0xc, 0xfffffffb, 0x9, 0x80000000, 0x1, 0x8, 0x5, 0xfffffffd, 0x4, 0x8, 0xfffffffe, 0x73, 0x5, 0x6, 0x953, 0xffff, 0x9, 0x3, 0xfffffffa, 0x80000000, 0x9, 0x3ff, 0x2, 0xc5f, 0x5, 0x8, 0xff, 0x6, 0x0, 0x6, 0x0, 0x9, 0xc, 0x2, 0x8, 0x7abf36e3, 0x7, 0x8, 0x3, 0x1, 0xf9, 0x4, 0x5, 0x9, 0x8, 0x9, 0xe59, 0x101, 0xfffffff8, 0x55db9914, 0x1000, 0x2, 0x8001, 0x6, 0x3ff, 0x5, 0xb, 0xf500, 0x9, 0x4, 0x8001, 0x98, 0x8000, 0x2, 0x2, 0x1, 0x8, 0xffff8000, 0x0, 0x6, 0x1000, 0x0, 0x2, 0x5, 0x5, 0x40, 0x80000000, 0x3, 0x6, 0x6, 0x0, 0xfffffffd, 0xc, 0x9, 0x50000000, 0x6, 0x8, 0x8, 0xbc1, 0xa7544c1, 0x6, 0x8, 0x2, 0xb, 0x4, 0x8000, 0x2d040b3, 0x7, 0x6, 0xfffff50f, 0x80000000, 0x9, 0x7610, 0x8, 0x6a4, 0x377, 0x1, 0x4, 0x9, 0x7, 0x5, 0x7, 0x42, 0x40, 0x5, 0x40, 0x2, 0x1, 0x3, 0x0, 0x0, 0x1, 0xfff, 0x5, 0x6, 0x3, 0x6bd, 0x2fb, 0x800, 0xa, 0xe, 0xffffff81, 0x77be, 0x7fffffff, 0x811b, 0xfffff86d, 0x2, 0xc, 0x319c, 0x80000001, 0x4, 0xffffc9d9, 0x8, 0x1, 0x8, 0xacd, 0x5, 0x8, 0x7, 0x1ff, 0x1, 0x4, 0x80, 0x9, 0x10000, 0xf6, 0x2, 0x7, 0x7, 0x2, 0x1, 0x9, 0x7f, 0x3, 0x0, 0x7, 0x860, 0x5, 0x3, 0x0, 0x2d, 0x65, 0xa, 0xffffffff, 0x4, 0x0, 0x80, 0x4, 0x5, 0x7, 0x7f, 0x7, 0xa, 0x976, 0x5, 0x7fffffff, 0xdb1, 0x300, 0x1, 0xfffffff9, 0x2, 0x8, 0x1400000, 0x6, 0xffffb4da, 0x1, 0xff, 0x6, 0x7, 0x3, 0x1, 0x2, 0x0, 0x1ad, 0x3dc4, 0x1, 0x1ea, 0x5, 0x4, 0x80000000, 0xb91, 0x7, 0xea30314b, 0x0, 0xa55, 0x100, 0x0, 0x2139, 0xc, 0x9, 0x22f, 0x9, 0x7, 0x2, 0xe, 0x78, 0xcb1, 0xc, 0x9, 0x10001, 0x6, 0x5, 0x7fffffff, 0x7ff, 0xbed, 0x3, 0x9, 0x3979, 0x8, 0x4, 0x7, 0x9e23, 0xffff, 0x0, 0x43, 0x1bda]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x1, 0x3, 0xf811, {0x4, 0x2, 0xff8e, 0x65e, 0xa, 0x4}, {0xb, 0x0, 0x8, 0x5, 0x3, 0x99c}, 0x9, 0x2, 0xb}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x5, 0x8, 0x6, 0x81, 0xc3, 0x8481, 0x8, 0xfffffff9, 0x5, 0x3, 0x7fff, 0x8000, 0x592, 0x8, 0x5, 0x6, 0x8, 0x2, 0x1ff, 0x0, 0xdf, 0x8, 0x3, 0x10000, 0x200, 0x401, 0x894, 0x10, 0x8001, 0x6, 0x0, 0xfffffff9, 0x2, 0x101, 0x67, 0x2, 0x4, 0x91e0, 0x7, 0xfffffffb, 0xd, 0x1ff, 0x431, 0x6, 0x80000001, 0x5, 0xff, 0xc, 0x7fffffff, 0x401, 0x4, 0xff, 0x2, 0xfffffc15, 0x4905, 0x6, 0x9, 0x4, 0x7, 0x3, 0x8, 0x10000, 0x7ff, 0x3, 0x7, 0x6, 0x80000001, 0x1ff, 0x3cf, 0xffff0001, 0x1, 0x0, 0x2, 0x3, 0x7fffffff, 0x8000, 0xfffffff3, 0x70, 0xffffffff, 0x9, 0x2, 0xffffffff, 0x5, 0x5, 0x3, 0x3, 0x9, 0x7, 0x1, 0x0, 0x8, 0xa8, 0xfffffff7, 0x1, 0x3, 0x6, 0x8, 0x23c2, 0x4, 0xfffff322, 0x3, 0x9, 0xffffffff, 0x1, 0x400, 0x62dc, 0x26f8, 0x0, 0x9, 0x6, 0x87, 0x6, 0x4, 0x7fff, 0x6, 0x10001, 0x9, 0x1, 0x867, 0x2d3, 0xccd3, 0x7, 0x3, 0xffffffff, 0x6, 0x4, 0x2, 0x40, 0x4, 0x7, 0x3, 0xfff, 0x1ff, 0xb, 0x1000, 0x4, 0x3, 0x1, 0xffffffff, 0x5, 0x365, 0x1, 0x401, 0x8, 0x2, 0x4, 0x2, 0xa3, 0x3ff, 0x7f, 0x0, 0x7, 0x220b, 0x6, 0xf, 0x3a2, 0x800, 0x0, 0x2, 0x9, 0xd, 0xfffffff7, 0x9, 0x3, 0xd1, 0x9, 0xfffff801, 0x5, 0x2, 0xa3b3, 0x5, 0x1, 0x4, 0x10000000, 0xfffffff8, 0x47ae, 0x2, 0x8, 0x3, 0x7, 0x1dc3, 0x5, 0xfffffff9, 0xd, 0x2, 0x8000, 0x100, 0xffffffff, 0xa12d1c00, 0x6, 0x20, 0x9, 0x8, 0x80000001, 0x6, 0x6, 0xef54000, 0x4, 0xff, 0x10001, 0xabe, 0x2, 0x2, 0x80000000, 0x0, 0x3a, 0x0, 0x8, 0x20, 0x8, 0x539, 0x74d, 0x6, 0xb2, 0x40, 0x7, 0x400, 0x8001, 0x4, 0x7, 0x80, 0x1, 0x401, 0x4, 0x6, 0x7, 0x800, 0x200, 0x8, 0xfffffd70, 0xfd1, 0x7, 0x8, 0x6, 0x9, 0x9, 0x4f, 0x9, 0x8, 0x0, 0x5, 0x2, 0x5, 0x8, 0x5, 0x6, 0x6, 0xb6c, 0x2, 0x0, 0x100, 0x7, 0x1404209f, 0x80000000, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x65e7}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6, 0x7, 0x7, 0x4, 0x2, 0x9, 0x45, 0x6, 0xc0000, 0x7, 0x18f4, 0x2, 0x80000001, 0xffffff11, 0xff, 0x401, 0x93f, 0x3ff, 0x82, 0x1, 0xe, 0x3, 0x9, 0x4, 0xfff, 0xecf, 0xd6c, 0x0, 0x60000, 0x997, 0x8, 0x5, 0x0, 0x0, 0x7, 0x2, 0xa, 0x4, 0x5, 0x5, 0x8, 0x488, 0x0, 0xf0e8, 0x1, 0x7f, 0x7, 0x2, 0x3, 0x6, 0x7fffffff, 0xffffffff, 0x10000, 0x3, 0x1, 0x1, 0x2, 0x1, 0x5, 0x2, 0x7, 0x2, 0x2, 0x9, 0x4, 0x5000, 0x7760, 0x9, 0x4, 0x2, 0x800, 0x1, 0xc, 0x100000, 0x7, 0xb, 0x2, 0xb75, 0x101, 0x3, 0x6, 0x3, 0x8e6, 0x2, 0xfffffff7, 0xc72, 0xe6, 0x99, 0x5, 0xee17, 0x443, 0x80, 0x1, 0x2c00, 0x6, 0x1, 0x4b4, 0x90e, 0xffff, 0x80000001, 0x0, 0x40, 0x8, 0x8, 0xfd1, 0x8001, 0x9, 0x9, 0x8, 0x0, 0x101, 0x8, 0x400, 0x0, 0x51f, 0x515, 0x7fff, 0x5, 0xadb, 0x5, 0xfffffffb, 0xdd6, 0x7f, 0x6, 0xa, 0x9, 0xe, 0x7fff, 0x0, 0xf32c, 0x1, 0x5, 0x7ff, 0xffff8000, 0x1000, 0x9, 0xbc, 0xffffffff, 0x9, 0x6, 0x5, 0x4, 0x3, 0x3, 0x9, 0xfffffff8, 0x1000, 0x4, 0x32b, 0x5, 0x2, 0x0, 0x80a, 0x4, 0x8, 0x6, 0x9, 0x80000000, 0xb0, 0x0, 0x4, 0x10000, 0x6, 0x7, 0xcae, 0x0, 0x6, 0x3, 0x0, 0x3c00000, 0x3, 0x8, 0xfffff801, 0x6, 0x25ddf00e, 0xfffffffd, 0x10001, 0xfff, 0x8, 0x8, 0x6, 0x5d5e805f, 0xdef, 0x2, 0x3, 0x5, 0xaa, 0x4, 0x228, 0x9, 0x4e, 0x7, 0xc, 0x2, 0x7, 0x4, 0x0, 0x7, 0x10000, 0x2, 0x10000, 0x205d, 0x7, 0x9, 0x2, 0x8, 0x3, 0x2092, 0x42, 0x7, 0x1, 0xa7, 0x7, 0x6, 0x80, 0x4, 0x80, 0x8, 0x3, 0x1, 0x200, 0x9, 0x5ba91ae6, 0x9, 0x0, 0x0, 0x4, 0x4, 0x5, 0xffffffff, 0x7, 0x56, 0x6, 0x9, 0x0, 0xc1, 0x1, 0x9, 0x4, 0x6, 0x48000000, 0x3, 0x5, 0x3, 0x2, 0x7f, 0xaf4b, 0x1000, 0x2, 0x1000, 0xf, 0x2, 0x10000, 0x3, 0xf]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0xcd4}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x3, 0x9, 0xb, 0x7f, 0x6, 0x0, 0x2, 0x0, 0x23d8, 0x7, 0x9, 0x6, 0x4, 0xd, 0xf, 0x10000, 0x0, 0xff, 0xb814, 0x0, 0x2, 0x6, 0x4, 0x9, 0x10000, 0x7fffffff, 0x0, 0x10, 0xb53, 0x6c, 0xc43, 0x3, 0x4, 0x7, 0x400, 0x401, 0x4, 0x0, 0x1, 0x0, 0x80, 0x101, 0x2, 0x8, 0x1, 0x800, 0x400, 0x9, 0x1, 0xfffffffe, 0x7f, 0xa2, 0x0, 0x80000000, 0x6, 0x1000, 0x0, 0x51e7fa62, 0x2, 0xfffffe00, 0x8000, 0x2000, 0x0, 0x7, 0x8, 0x3, 0x6, 0x7fffffff, 0x5, 0x7fff, 0x234b5293, 0x8, 0x3, 0xfffffe57, 0x8, 0x3, 0x0, 0x75b04027, 0x9, 0x20000000, 0x3, 0x7, 0x7, 0x1, 0x7, 0x3, 0x80, 0xb8, 0x5, 0x5, 0x1000, 0x92, 0x1, 0xc, 0x9, 0x7, 0x0, 0x7ff, 0xff, 0x1, 0x5, 0x9, 0x81, 0x6, 0x9, 0x5, 0x5, 0x9, 0x5, 0x1, 0xd997, 0x7c, 0x1, 0x7, 0x9, 0x2, 0x4, 0x7, 0x6, 0x40, 0x8, 0xbf, 0x7, 0x5, 0x0, 0x7, 0x4, 0x400, 0x7, 0x3, 0x10, 0x1, 0x8, 0x5, 0x0, 0x10, 0x4, 0xfffffffe, 0x8000, 0x32b, 0xffff0001, 0x2, 0x5, 0x8, 0x9, 0x3, 0x7, 0x2, 0x6, 0x5, 0x9, 0x8, 0x69, 0x8f4, 0x9, 0x0, 0x1, 0x3, 0x7f, 0x6008, 0x6, 0x200, 0x7, 0xff, 0xc, 0x3, 0x3, 0x8, 0x7, 0x3, 0x5a9, 0xfff, 0xf, 0x6, 0x4, 0x1, 0x7, 0xff, 0x5, 0x7, 0x4, 0xfffffff9, 0x3, 0x1, 0xfffffffd, 0x10, 0x9, 0xfffffff8, 0x6, 0xd8d, 0xc, 0x9, 0x10, 0x471, 0x101, 0x84c, 0x593, 0x6a, 0x800, 0xf, 0x9, 0x3, 0xffffffff, 0x200, 0x8000, 0x400, 0x2, 0x0, 0x3, 0x8, 0x2018b15f, 0x1, 0x8001, 0xd3d, 0xf57, 0x2, 0x100, 0x1, 0x495d, 0x88000000, 0x80000001, 0x7cd, 0xffff6a2e, 0x50000000, 0x81, 0x585, 0xfe2, 0xfffff9db, 0x9, 0x0, 0x9, 0x1, 0x9, 0x800, 0x9, 0x2, 0x0, 0x2, 0xd, 0xb, 0x200000, 0x5, 0x0, 0x3, 0x5, 0x13, 0xfffffffb, 0x4, 0x2, 0x8000, 0x4, 0xc879, 0x4, 0xa, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x9, 0x7, 0x6, 0x80000000, 0x3, 0x8, 0x0, 0x0, 0x0, 0x4, 0x8, 0x5, 0x4, 0x7a1b, 0x4, 0x0, 0xff, 0x5, 0x6, 0x4, 0xff, 0x3, 0xc98e, 0x3, 0x0, 0xcf, 0x5, 0x37fa, 0xd, 0x8c2, 0x8, 0x8, 0xffffb5b5, 0x6, 0x2, 0x3, 0x456, 0x7, 0x4, 0x1, 0x2, 0x4772, 0x0, 0x6, 0x0, 0x5, 0x1bdc0, 0x8, 0xc5dc, 0x3, 0x1, 0xfffffff5, 0x4, 0xffffff80, 0x3, 0x4, 0x1d9, 0x5, 0x8b5, 0x2, 0x9, 0xb93, 0x9, 0x43, 0x3, 0x9, 0x81, 0x8, 0xde52, 0xfff, 0x80, 0x7, 0xfffff001, 0x4, 0x6, 0xed8, 0x2000, 0x9, 0x7ff, 0x9, 0x4, 0xb, 0x800, 0x2, 0x8, 0x2, 0x1, 0x0, 0x7, 0x8001, 0x1, 0x9, 0x6, 0x3, 0x18f, 0x606, 0x10, 0x7, 0x7, 0x9fa, 0x5, 0xb70, 0x72, 0x1, 0x7, 0x101, 0x0, 0x4, 0x2, 0xb, 0x0, 0xe, 0x0, 0xffffff66, 0x8, 0x5, 0x3, 0x7935f8d9, 0x400, 0x51, 0x3, 0x1, 0x9, 0x1ff, 0x8, 0xfffffff9, 0x4, 0xff, 0x1, 0x6, 0xce, 0xffffffb7, 0x80000001, 0x5, 0x3, 0x800, 0x9c, 0x7, 0x3, 0x3eed0000, 0x9, 0x5, 0x9, 0x0, 0x1000, 0x10000, 0x9b0, 0x2, 0x6, 0x0, 0x3, 0x9, 0x1, 0x5, 0x7, 0x3ff, 0x3, 0x7fffffff, 0xc49, 0x5, 0x5, 0x3a4, 0x4, 0x6, 0x4a, 0x1, 0x6, 0xb, 0x86d, 0x52f, 0x9, 0x7, 0x5, 0x4, 0x81, 0x6, 0x68c7, 0x1, 0xfffffffb, 0xd, 0xc, 0x0, 0x81, 0x5, 0x2, 0xfffffffe, 0xfffff7c3, 0x6, 0x401, 0x9, 0xe0c8, 0x1, 0x553, 0x81, 0x0, 0x9, 0x6, 0x7, 0x6, 0xb44, 0x9ff, 0x5, 0x0, 0x800, 0x0, 0x6, 0x7, 0xd16, 0x3, 0x9, 0x2, 0xa, 0x9c04, 0x5, 0x4, 0x5, 0x0, 0x8, 0x7ff, 0x1, 0x5, 0x4, 0x987, 0x80, 0xffffffff, 0x0, 0x2, 0x5c, 0x9, 0x10, 0xfffffff8, 0x7e, 0x1, 0x7, 0x8, 0xeb7, 0x1, 0x7, 0x7ff, 0x6, 0xc97, 0x7f, 0x0, 0xd5c, 0x788, 0xc77, 0x2, 0x9, 0x5, 0x0, 0x1dc, 0x6, 0x7, 0x0, 0x6]}]]}, {0x42, 0x6, "60d4049bf91e52c0630741fc3fa9db3dae8af5e9b30d470c17756dc7f763399c14668db194551a20fe79e21e1832266ccde085613101b0af25ab327a13d7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x124, 0x14, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x4, 0x10000000, 0x7, 0x3}, 0x2}}]}, {0xd9, 0x6, "3d043a38a5e019cf1b0b53dd01f78a8e2397c4e02ca5768fa0e797e7770ff889913764211648dfbcb685468f7deb2af7eacf44feb1add51ade0eed9593d9ca22ff8d42e158cdae87df1e12edea6277ea188dcea6287ceac29db9ba2192ec1bceae131aa8702e5d68cde0d7a685bc7272712351b4b1e7da8916a818132cb331982041f2d8dcf142cee1b9242e123252e21b8437db2991dba8a406477b3513a27c2f90fd97172e70fc1cbc937800e5cf44bf9e1f7c313dfaf58dff5d5de6ae736cc889a417ab0003c4a07eba3c3db51d5afe63fdd6ad"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x6c, 0x1, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="e46a70e21373"}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0x81}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_TYPE={0x6, 0x5, 0xffff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}, @TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_EMATCHES={0x10c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee}}, @TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x10, 0x7, 0x3ff}, {{0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0x80}, {0x3, 0x5, 0x3, 0x2, 0x8, 0x1}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3203, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3ff, 0x7, 0x9}, {{0x0, 0x0, 0x1, 0x1}, {0x4}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x17e, 0x8, 0x4}}}, @TCF_EM_CONTAINER={0x38, 0x2, 0x0, 0x0, {{0xdd9a, 0x0, 0xe}, "994177d274fd5b0e16fcbbadc9ad1bfcf3e592c3efd7b0b5ee2ed2521aa9405ee3a4212e1ea267258eec"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x37, 0x1, 0x10}, {0x1, 0x1, 0x7, 0x4, 0x3, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xdd}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x8}, {0x80a, 0x7fff, 0x0, 0x7}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x2}, {0x0, 0x6, 0x5, 0x1, 0x2, 0x3, 0x1}}}]}]}]}}]}, 0x3e74}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r15, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r16, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r16, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="01002abd7000fe", @ANYRES32=r18], 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4c800) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0x22c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 6.502951683s ago: executing program 0 (id=5556): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{&(0x7f0000001a00)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/90, 0x67}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000580)=""/195, 0xc3}, {&(0x7f0000000880)=""/79, 0x4f}, {&(0x7f0000000900)=""/244, 0xf4}, {&(0x7f0000001a80)=""/228, 0xe4}, {&(0x7f0000000b00)=""/15, 0xf}, {&(0x7f0000000b40)=""/111, 0x6f}, {&(0x7f0000000bc0)=""/44, 0x2c}, {&(0x7f0000000480)=""/8, 0x8}], 0x8, &(0x7f0000000c80)=""/112, 0x70}, 0xf35}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000d00)=""/203, 0xd3}, {&(0x7f0000000e00)=""/188, 0xbc}, {&(0x7f0000000ec0)=""/88, 0x58}, {&(0x7f0000000f40)=""/49, 0x31}, {&(0x7f0000000f80)=""/7, 0x7}, {&(0x7f0000000fc0)=""/186, 0xba}, {&(0x7f0000000a00)=""/216, 0xd8}], 0x7, &(0x7f00000011c0)=""/143, 0x8f}, 0x2}, {{&(0x7f0000001280)=@ax25={{0x3, @netrom}, [@rose, @remote, @default, @bcast, @bcast, @bcast, @bcast, @default]}, 0x80, &(0x7f0000001480)=[{&(0x7f0000002500)=""/4088, 0x1000}, {&(0x7f0000001300)=""/210, 0xd2}, {&(0x7f0000001400)=""/19, 0x13}, {&(0x7f0000001440)=""/57, 0x39}], 0x4, &(0x7f00000014c0)=""/70, 0x46}, 0x4}, {{&(0x7f0000001540)=@tipc=@name, 0x80, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/164, 0xa4}, {&(0x7f0000000c00)=""/43, 0x2b}, {&(0x7f00000016c0)=""/187, 0xbb}], 0x3, &(0x7f0000001880)=""/136, 0x8c}, 0x1000}], 0x7fffee4, 0x20000120, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1e3) 6.036922945s ago: executing program 1 (id=5557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r0}, 0x50) (fail_nth: 6) 5.691269235s ago: executing program 1 (id=5558): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7ffeffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) 5.62864403s ago: executing program 5 (id=5559): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r0, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x12141, 0x0) 5.615574019s ago: executing program 2 (id=5560): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3805000000000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x8e, "7a97c6bbd5bbae995151a2d43e82db6f31195959461c5ff6429b1d18798535982694dfad150ba0af8c9d915997fe9cd57a59d2448f657167f9908056ff46b9aee3527f93f70537d7f38a0afecd4fdaec5298d28d55330d2712bea477f8ad9663aa5d9103996f3086eb4c1ed9c9521944ab90f87a480c7a895338dbebeee5d6b599ef8a3e38786c5446d8db6b2fa5"}, &(0x7f0000000200)=0x96) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={r1, 0x100}, 0x8) r2 = socket$kcm(0x10, 0x2, 0x10) rmdir(&(0x7f00000000c0)='./file3\x00') sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 5.44314494s ago: executing program 5 (id=5561): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x194, 0x2d, 0x300, 0x70bd27, 0x25dfcbfc, {0x4}, [@nested={0x180, 0xca, 0x0, 0x1, [@typed={0x73, 0xd1, 0x0, 0x0, @binary="a5c73764e90c0e4eed8d6c9f19ad25d2fd6999b5afa710da6bb8ea48b17e55e1a5af88250c0ed270bbb40d25c43644acb897858c844ce87ce074dcd87357cecb71bb07cf4b8152bfbf7cbf51f4a805290ea847fcf7184508993238f12ea271b85858be451b29c5ba10d363f420aad4"}, @typed={0xc, 0x31, 0x0, 0x0, @u64=0xa0e}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@empty}, @generic="c79ee9aaa10e76425a34d79b86e6060270cbbc5502a7fbbad1cd710570f3a8ebfaceb8d62569331594c6706cc48f3ccdb006779fb13fd28dbdaa78d7279cce75386c194679555500d3688ebf7066ae1f5beafec82104ebe099d7e2ec7355a8364a17c6ca53293490b882e79f10372047467294437e6b30219774510c86a881d5c2a9846f9e2a34d74e2d7f1a772d33791c3bdf5ca74a9380441b2aea344dfb3917e834f7d8ddfc0d59664a65a9cd8378c2b7d8c1d9424f3faea0fcd28a9b5433e6b6a557db584f61f974f7f566af953f8399b57951cf4cac997bfda47271f199ebe82cc0d0d60f49"]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4008090}, 0x200c0084) socket$alg(0x26, 0x5, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x89, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x3, @multicast2}, {0x20000010304, @remote}, 0x2, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 'lo\x00'}) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x3}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x44004}, 0x4044010) 4.911736287s ago: executing program 0 (id=5562): recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000002c0)=""/185, 0xb9}], 0x2}, 0x5}], 0x1, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) (fail_nth: 18) 4.859293907s ago: executing program 2 (id=5563): r0 = syz_usb_connect(0x0, 0x2f5, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010000978347406d040e0a10020000000109021d030100000000090410000c0300000009050000ff033f0602090502"], 0x0) syz_usb_ep_write(r0, 0x2, 0xf, &(0x7f0000000000)="6f671ae0688831289cbb0c48817dd3") 4.728745753s ago: executing program 5 (id=5564): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffe0, 0xffff}}}, 0x24}}, 0x20000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd0}, 0x40010) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card3/oss_mixer\x00', 0x400000, 0x0) 4.651347198s ago: executing program 1 (id=5565): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 4.650057955s ago: executing program 3 (id=5566): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc0046209, &(0x7f0000001340)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'wg1\x00'}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2800491, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="acd7"], 0x4, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r7, 0x1, 0x2d, &(0x7f0000000100)=""/152, &(0x7f0000000000)=0x98) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 4.215029626s ago: executing program 0 (id=5567): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001b00)={0x3, 0x3}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0xffffffffffffffcd, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004001d000000002800001b9653a4000000100000"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r5 = syz_usb_connect(0x3, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x20, 0xa}, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000000)={0x1}) ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, &(0x7f0000000000)) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0x501c4814, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x1947, 0xf}) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000080)=[r4], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x7, 0x0, 0x1, 0xbca6, 0x3}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 4.213763946s ago: executing program 3 (id=5568): flock(0xffffffffffffffff, 0xc) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffff8}]}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x50}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 4.161536839s ago: executing program 5 (id=5569): socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000580)={0x0, 0xbc0d}, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b', @ANYRES32=r0], 0x24}}, 0x0) 4.010645864s ago: executing program 1 (id=5570): syz_80211_join_ibss(&(0x7f00000000c0)='wlan0\x00', &(0x7f0000000100)=@default_ap_ssid, 0x6, 0x2) (fail_nth: 10) 3.620717772s ago: executing program 3 (id=5571): syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x23, 0xf5, 0x8b, 0x20, 0x2040, 0x6500, 0x1c9d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x80, 0x10, 0x0, [{{0x9, 0x4, 0x9c, 0x2, 0x1, 0x18, 0x2, 0xb2, 0x0, [], [{{0x9, 0x5, 0x82, 0x1, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0xa0, 0xad, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x4, 0x8, 0x7}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x5e, 0xe8, 0x7, 0x8, 0xf7}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2409}}, {0xb9, &(0x7f00000002c0)=@string={0xb9, 0x3, "65b067538dfb5872d6bb291ce723468ed49153455f5687c231e6dbb9edfe08f87be4685042b4fb69abddb05033b1507afc0aba93deed880df65f7f24b8116dd3c8b9f6aa8c7e289c42e35d0980b5e59166960cd8ecca1e39aef1f78f19ec66896f7b406ad965f29fe1fb09dfae90d4e6cdb39042545bce0716bdaf4b37eda2690236e87a29562d3b131ab8dd090fe1a8802745cd1af5375d369f6240660c4cb3489841f7dca7827061d81c2515a8e641157cd868a3a64a"}}, {0x36, &(0x7f00000001c0)=@string={0x36, 0x3, "d18394646acebe254047d95bb19eee51bbc14282bf16bff922ea8b14dab32e9ea4520c5fef5d9261920da59ecd3a0ee4e9e74a3d"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x340a}}, {0x9, &(0x7f00000003c0)=@string={0x9, 0x3, "0c5847d8e33e78"}}, {0x94, &(0x7f0000000780)=@string={0x94, 0x3, "ba64cadd471778f27eed8f7c40fee6e3ae33952066efd9ea2a771621d28bbf60bb913dfa176114a9a6d06618f3b7f363e06295f69285d0903daf5223ad69ff565d42def9848a0b40c043bed640c8d7c625eed0cc2468c040e415199acf8ad93b0ccdd927a7cf10ab503ad05a98271d4000ca5c815b18eb23f243439c18b2ca56ef2a69aff6860aa77800f3de67477568b42b"}}]}) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000200), 0x6500) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x2d, 0x301, 0x270bd26, 0x25dfdbfa, {0x6}}, 0x14}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x6490, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0000f5000000000000000000000000000064ace260048c2f01fe880000000000000000000000000001200100000000000000000000000000000c21880b0000000202000002000008000c0086dd080088be0000000210230802010000000000003e080022eb000000032248256102000000fffffffbf587051a08006558000000023b4caef13d37b5aec2969ee8dfb0c61838c8e2779da6255efad50884e77c428f4d86b6e778ee3a1891fedfd7190ffbe3b2e015a550ab6e452b2902440d13bd03605e906d3831f80dd0206c111128aa48442d787c7567db85a59e4ad3cce683b4e10f311b00f815c9ca0df017e1f5fbea8114d1ba6de8010363528577c133ce558e5e5f5bdcb84de895a585525edc929cfa7fcc7c9680b3f037c0659eb1603ad18feb20ffbd689ddb32ebaf48b8003acd66c6bd27bcba284aef84220491b9f9f468dcd85a18625466ea89c06669619527749e024143c8b26e67ae99e7dfcfbce29319044ef1bb29eecac81a47aeaf8af6fb7b9e3f12cd2703a50566b86c041391e05bfe81d6b14d9fa7797e5dcfc41d19260c1a39d48c8d7a11a5645619e2c1bb78dfddb23b88129cfe5d27947881b21b1b4a05ef9940135a9aea70f6633c2d555a4117368ccecfe8b333a9a10a78a0d76549bedd7a1b08f76901369865ca7bdad40ab576acbc6ebe23a0e5636c2941b4f28d5088717bcd59febc6f0b4fb6c5b2e958ce5ce1d8bdc30acfc99b449f06be1a59eaba0d13a0855e387efc64bddb5655d7cd22d97529b8bb6229d822e4340b381c4f212a25bf9a7822dce79c622812837893afa7667128b4e7b40c9b7a54724cde9e8ef2800db8b9009210e092610bf075d3c55691ffef6b4e6a0c670f9a063d0de2fa93c386efc530896aa208cf679c296b26637531cbb2bd3f55a1422d7b08eb39e20b1e5202d1373a2c61c120f237ff5a03c0cf512492d040350e7068ad21bcc69032331a4c7e5902be63f488bc7982643bc1508560a7b528e41db61b9fa8a34c1f53f39461f7daae62dfc9aedc24133bfc142fc9cb8d08e916492be3b4a2b681521dd11a688a2c25cde0aeb88f3ba975c876ab935f58de93881a4b997892fefd1f07501ee8ed0d14d6af02a3661caac723ec062070a5cb498f250e062084ce534289b4facf570536f6bfa698161b6a37501a3fee8aa86839bedc974daa2754320098a96ad47a3a5e753f6acfe3d1ab3a7a464069a35d3f52f0ed722e5c8abcf26a450a8237b0d1ed1c6da1e02af15e0d9f63309eb9da7578426bdcd5362e595127e08bc0214fd5c2d10f9b379558e146524560853c9e929da48df6e894913a419dcb723eb8d32bb82004cb53fcc7260ab74c5b22e41598a1b16deeeb833817c27709e9542b660d6e95e93047fbfba72422d1a0923bda75387d26fce2d4e93e4d0f89a2aadb71f25e03f80ae75b938069bddb2f6d19c6b2c09e4f92c9d4d941980f0989052e49c9d4f7c548a0f4b9aa358aedd738d21b96ae1e4f4fd909b0db87413ef4fd8a71dc63af5aa0e8db2a3a44fffff7731e6f3d69a21f015a8ba46bf2a9cbe799ed4617748975a24a3702f5b113d9556c75a444d6a3154628ea3dbb66488ee7c5"], 0x4c6) write$cgroup_int(r3, &(0x7f0000000000)=0x2b00, 0x12) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03070600b531"], 0x31c8) r6 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000000)=0x200111, 0x7) 3.611879518s ago: executing program 1 (id=5581): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000780)=[{0x200, 0xa00, 0x0, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x0, 0x8000, 0x0, 0x0}], 0x3}) 2.748396046s ago: executing program 2 (id=5572): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0xa, 0x0, 0x88ae9b3599e9e4e, 0x8, 0x8}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1000000003d3a5ee1616a846f5000000"], 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_clone(0x88280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r5, &(0x7f0000000000), 0x100000008) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) syz_clone(0xa0906200, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) fchdir(0xffffffffffffffff) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r7, &(0x7f00000000c0)=""/59, 0x3b) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602fffe00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911043000000000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x28d}], 0x1}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 2.203048635s ago: executing program 2 (id=5573): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{&(0x7f0000001a00)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/90, 0x67}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000580)=""/195, 0xc3}, {&(0x7f0000000880)=""/79, 0x4f}, {&(0x7f0000000900)=""/244, 0xf4}, {&(0x7f0000001a80)=""/228, 0xe4}, {&(0x7f0000000b00)=""/15, 0xf}, {&(0x7f0000000b40)=""/111, 0x6f}, {&(0x7f0000000bc0)=""/44, 0x2c}, {&(0x7f0000000480)=""/8, 0x8}], 0x8, &(0x7f0000000c80)=""/112, 0x70}, 0xf35}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000d00)=""/203, 0xd3}, {&(0x7f0000000e00)=""/188, 0xbc}, {&(0x7f0000000ec0)=""/88, 0x58}, {&(0x7f0000000f40)=""/49, 0x31}, {&(0x7f0000000f80)=""/7, 0x7}, {&(0x7f0000000fc0)=""/186, 0xba}, {&(0x7f0000000a00)=""/216, 0xd8}], 0x7, &(0x7f00000011c0)=""/143, 0x8f}, 0x2}, {{&(0x7f0000001280)=@ax25={{0x3, @netrom}, [@rose, @remote, @default, @bcast, @bcast, @bcast, @bcast, @default]}, 0x80, &(0x7f0000001480)=[{&(0x7f0000002500)=""/4088, 0x1000}, {&(0x7f0000001300)=""/210, 0xd2}, {&(0x7f0000001400)=""/19, 0x13}, {&(0x7f0000001440)=""/57, 0x39}], 0x4, &(0x7f00000014c0)=""/70, 0x46}, 0x4}, {{&(0x7f0000001540)=@tipc=@name, 0x80, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/164, 0xa4}, {&(0x7f0000000c00)=""/43, 0x2b}, {&(0x7f00000016c0)=""/187, 0xbb}], 0x3, &(0x7f0000001880)=""/136, 0x8c}, 0x1000}], 0x7fffee4, 0x20000120, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1e3) 1.887562583s ago: executing program 2 (id=5574): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) close(0x3) 1.20132417s ago: executing program 5 (id=5575): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7ffeffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) 940.703207ms ago: executing program 5 (id=5576): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000cf8bed20d92f25004085ac9d4ca814d329000000010902120001000080000904000001cafb1a0024f6a12863ab0b550109d9ef4c85e5d491285f2acce4c97bb8b6ec39d832ac663c0fba820e"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xe4, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x3c, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x118, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xd4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x20}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}}, 0x244}}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xc0, 0x15, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x4f, 0x8, "d24fb3e712b692d88e7deb4a03e6061349997e88d3bab449e66348a0ee4b9d64ced56eb4583222dd9c28f974d33a43817d8b1a4385d3f3b57676f2f11d287faf8e352f7f76b0b38b61bfae"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x8094) sendto$inet(r2, &(0x7f0000000200)="c4e919b5ccc88d115ea1be32a8e437620738d93dd910da05fd8d121d1f01c46beac00ff539499f804274685dca172d9b00b44707cfb4d94103bd36b7a343f0192643ba65f92746c055afa03669a53b26e0b5a90a2b865e2c01b7526ada06d1d9fa1e26b431fa8592eac88098727e3e49645dcf48274532e93fbd0f47a317890bc8a44f3c1f2f8cb835b9edcb352d", 0x8e, 0x24088804, &(0x7f00000002c0)={0x2, 0x4e22, @loopback}, 0x10) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000040)={0x20, 0x11, 0x8, "ee74246569291ace"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000140), 0x0, 0x2680) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000d240), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x8, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x4, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x10}}}}]}, 0x38}}, 0x0) lseek(r4, 0x3, 0x2) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000080)={0x4, 0x23, 0x3, &(0x7f0000000100)={0x14, "b4f103006a04bc517b54524b00000000001c00"}}) syz_mount_image$fuse(0x0, 0x0, 0x1040002, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f00000000c0)={'erspan0\x00', 0x3}) 886.685295ms ago: executing program 2 (id=5577): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x807, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="97ec62b8f813e511c238d16f8158e92ac217c1cd25b727afc5148f1185b2ee3da4dba55397e3a7e593e7d2c11490c796a5e1936cc7fc06d7aed3e1704b3e7c6ffef01e80e2b94eb1a47b2dcf822516c59fac598d2a2bd2044b5b2cd4ba8fda3f8d142a3deb059267d7ecac86", @ANYRES8=0x0], 0x0}, 0x0) 470.293531ms ago: executing program 1 (id=5578): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x4}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x64040, 0xd0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r6, r6, 0x0, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000000)) syz_80211_join_ibss(&(0x7f00000000c0)='wlan0\x00', &(0x7f0000000100)=@default_ap_ssid, 0x6, 0x2) 110.770506ms ago: executing program 0 (id=5579): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc0046209, &(0x7f0000001340)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'wg1\x00'}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2800491, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="acd7"], 0x4, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r7, 0x1, 0x2d, &(0x7f0000000100)=""/152, &(0x7f0000000000)=0x98) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 0s ago: executing program 0 (id=5580): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8d69cdbd9d470f56c7ae4218d32c5d7fe44d5f0272890f24383fe450fb26ea7dcefadfa5e48e3bcf5693d"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x3000000, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="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", 0x3d5}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)="f0", 0x1}], 0x1}}], 0x2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 1502.629519][T24529] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1502.638057][T24835] gretap1: entered promiscuous mode [ 1502.811414][T24529] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1502.819826][T24529] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1502.834941][T24529] usb 2-1: config 0 has no interfaces? [ 1502.849803][T24529] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1502.869494][T24529] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.891880][T24840] FAULT_INJECTION: forcing a failure. [ 1502.891880][T24840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1502.899300][T24529] usb 2-1: config 0 descriptor?? [ 1502.981405][T24840] CPU: 1 UID: 0 PID: 24840 Comm: syz.0.5182 Not tainted syzkaller #0 PREEMPT(full) [ 1502.981426][T24840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1502.981436][T24840] Call Trace: [ 1502.981442][T24840] [ 1502.981449][T24840] dump_stack_lvl+0x189/0x250 [ 1502.981472][T24840] ? __pfx____ratelimit+0x10/0x10 [ 1502.981489][T24840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1502.981507][T24840] ? __pfx__printk+0x10/0x10 [ 1502.981529][T24840] ? __might_fault+0xb0/0x130 [ 1502.981559][T24840] should_fail_ex+0x414/0x560 [ 1502.981585][T24840] _copy_from_user+0x2d/0xb0 [ 1502.981606][T24840] kstrtouint_from_user+0xc4/0x170 [ 1502.981625][T24840] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1502.981654][T24840] proc_fail_nth_write+0x88/0x200 [ 1502.981672][T24840] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1502.981693][T24840] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1502.981713][T24840] vfs_write+0x27b/0xb30 [ 1502.981742][T24840] ? __pfx_vfs_write+0x10/0x10 [ 1502.981763][T24840] ? __fget_files+0x2a/0x420 [ 1502.981780][T24840] ? __fget_files+0x3a0/0x420 [ 1502.981794][T24840] ? __fget_files+0x2a/0x420 [ 1502.981815][T24840] ksys_write+0x145/0x250 [ 1502.981838][T24840] ? __pfx_ksys_write+0x10/0x10 [ 1502.981861][T24840] ? lockdep_hardirqs_on+0x9c/0x150 [ 1502.981879][T24840] __do_fast_syscall_32+0xb6/0x2b0 [ 1502.981897][T24840] ? lockdep_hardirqs_on+0x9c/0x150 [ 1502.981916][T24840] do_fast_syscall_32+0x34/0x80 [ 1502.981933][T24840] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1502.981950][T24840] RIP: 0023:0xf705e539 [ 1502.981983][T24840] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1502.981998][T24840] RSP: 002b:00000000f542d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1502.982012][T24840] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f542d620 [ 1502.982022][T24840] RDX: 0000000000000001 RSI: 00000000f73f5ff4 RDI: 0000000000000000 [ 1502.982031][T24840] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1502.982039][T24840] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1502.982047][T24840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1502.982067][T24840] [ 1503.161498][T24529] usb 2-1: USB disconnect, device number 9 [ 1503.455957][T24846] netlink: 79 bytes leftover after parsing attributes in process `syz.3.5185'. [ 1503.505199][T24848] syz_tun: entered allmulticast mode [ 1503.568031][T24847] syz_tun: left allmulticast mode [ 1503.679912][T24529] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1503.864311][T24529] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1503.875129][T24529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.879995][T24502] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1503.884497][T24529] usb 2-1: Product: syz [ 1503.895951][T24529] usb 2-1: Manufacturer: syz [ 1503.903341][T24529] usb 2-1: SerialNumber: syz [ 1503.920174][T24529] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1503.945641][T24510] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1503.989587][T24521] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1504.051504][T24502] usb 1-1: config index 0 descriptor too short (expected 797, got 739) [ 1504.069939][T24502] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 1504.089457][T24502] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.100099][T24502] usb 1-1: config 0 has no interface number 0 [ 1504.106321][T24502] usb 1-1: config 0 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1504.122593][T24502] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= 2.10 [ 1504.133458][T24502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.141623][T24521] usb 3-1: Using ep0 maxpacket: 16 [ 1504.157335][T24521] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1504.173140][T24502] usb 1-1: config 0 descriptor?? [ 1504.182909][T24521] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1504.222773][T24521] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1504.233451][T24521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.243113][T24521] usb 3-1: Product: syz [ 1504.247476][T24521] usb 3-1: Manufacturer: syz [ 1504.253441][T24521] usb 3-1: SerialNumber: syz [ 1504.269206][T24521] usb 3-1: config 0 descriptor?? [ 1504.318706][T24521] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1504.335520][T24521] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1504.447004][T24502] (null): keene_cmd_main failed (-71) [ 1504.495009][T24502] video4linux radio48: keene_cmd_main failed (-71) [ 1504.520955][T24502] radio-keene 1-1:0.16: V4L2 device registered as radio48 [ 1504.577077][T24502] usb 1-1: USB disconnect, device number 126 [ 1504.797669][T24517] usb 2-1: USB disconnect, device number 10 [ 1504.943299][T24521] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1504.953298][T24521] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1505.084617][T24510] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1505.159865][T24510] ath9k_htc: Failed to initialize the device [ 1505.221618][T24517] usb 2-1: ath9k_htc: USB layer deinitialized [ 1505.587794][T24882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5194'. [ 1505.629671][T24521] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1505.637711][T24521] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1505.652891][T24521] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1505.664301][T24521] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1505.877537][T24885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5194'. [ 1507.243451][T24521] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1507.261450][T24907] netlink: 79 bytes leftover after parsing attributes in process `syz.3.5198'. [ 1507.535704][T24521] usb 3-1: USB disconnect, device number 2 [ 1508.010754][T24510] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1508.179557][T24510] usb 4-1: Using ep0 maxpacket: 16 [ 1508.196006][T24510] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1508.206901][T24510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.217685][T24510] usb 4-1: Product: syz [ 1508.231094][T24510] usb 4-1: Manufacturer: syz [ 1508.236213][T24510] usb 4-1: SerialNumber: syz [ 1508.267799][T24510] usb 4-1: config 0 descriptor?? [ 1508.559602][T24521] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1508.689637][T24521] usb 2-1: device descriptor read/64, error -71 [ 1508.728108][T24510] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1508.741373][T24510] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1508.762333][T24510] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1508.810935][T24510] usb 4-1: media controller created [ 1508.924360][T24510] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1508.955740][T24521] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1508.989884][T24510] zl10353_read_register: readreg error (reg=127, ret==0) [ 1508.997311][T24510] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1509.010888][T24510] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1509.036196][T24510] usb 4-1: USB disconnect, device number 124 [ 1509.036397][T24931] gretap1: entered promiscuous mode [ 1509.053812][T24933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5208'. [ 1509.120190][T24521] usb 2-1: device descriptor read/64, error -71 [ 1509.166727][T24510] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1509.240591][T24521] usb usb2-port1: attempt power cycle [ 1509.276946][T24937] netlink: 71 bytes leftover after parsing attributes in process `syz.2.5209'. [ 1509.579670][T24521] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1509.625154][T24949] macvlan5: entered promiscuous mode [ 1509.724972][T24521] usb 2-1: device descriptor read/8, error -71 [ 1509.829988][T24510] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1509.953927][T24955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5212'. [ 1509.989539][T24521] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1510.011714][T24510] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1510.042631][T24510] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1510.050350][T24521] usb 2-1: device descriptor read/8, error -71 [ 1510.089807][T24510] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1510.157122][T24510] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1510.169937][T24521] usb usb2-port1: unable to enumerate USB device [ 1510.219793][T24510] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.247099][T24510] usb 3-1: config 0 descriptor?? [ 1510.698060][T24510] plantronics 0003:047F:FFFF.0059: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1511.718545][T24981] gretap1: entered promiscuous mode [ 1512.029596][T24510] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1512.189649][T24509] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 1512.214385][T24510] usb 4-1: config index 0 descriptor too short (expected 797, got 739) [ 1512.234256][T24510] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 1512.253966][T24510] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.297772][T24510] usb 4-1: config 0 has no interface number 0 [ 1512.315623][T24510] usb 4-1: config 0 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1512.349682][T24509] usb 3-1: device descriptor read/64, error -32 [ 1512.377118][T24510] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= 2.10 [ 1512.406338][T24510] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.433667][T24510] usb 4-1: config 0 descriptor?? [ 1512.589696][T24509] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 1512.699255][T24510] (null): keene_cmd_main failed (-71) [ 1512.710957][T24510] video4linux radio48: keene_cmd_main failed (-71) [ 1512.748409][T24509] usb 3-1: device descriptor read/64, error -32 [ 1512.765068][T24510] radio-keene 4-1:0.16: V4L2 device registered as radio48 [ 1512.811974][T24510] usb 4-1: USB disconnect, device number 125 [ 1513.029697][T24509] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 1513.075116][T24509] usb 3-1: device descriptor read/8, error -32 [ 1513.154018][T24521] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1513.329481][T24521] usb 6-1: Using ep0 maxpacket: 16 [ 1513.339279][T24521] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1513.353554][T24521] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.379920][T24521] usb 6-1: Product: syz [ 1513.402836][T24521] usb 6-1: Manufacturer: syz [ 1513.435307][T24521] usb 6-1: SerialNumber: syz [ 1513.450841][T24521] usb 6-1: config 0 descriptor?? [ 1513.862987][T24521] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1513.875331][T24521] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1513.890613][T24521] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1513.905036][T24521] usb 6-1: media controller created [ 1513.982872][T24529] usb 3-1: USB disconnect, device number 3 [ 1514.111301][T24521] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1514.190150][T24521] zl10353_read_register: readreg error (reg=127, ret==0) [ 1514.207040][T24521] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1514.227653][T24521] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1514.249995][T25016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5228'. [ 1514.270065][T24521] usb 6-1: USB disconnect, device number 25 [ 1514.394255][T25022] FAULT_INJECTION: forcing a failure. [ 1514.394255][T25022] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.447778][T25022] CPU: 0 UID: 0 PID: 25022 Comm: syz.1.5231 Not tainted syzkaller #0 PREEMPT(full) [ 1514.447806][T25022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1514.447824][T25022] Call Trace: [ 1514.447832][T25022] [ 1514.447842][T25022] dump_stack_lvl+0x189/0x250 [ 1514.447871][T25022] ? __pfx____ratelimit+0x10/0x10 [ 1514.447894][T25022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1514.447918][T25022] ? __pfx__printk+0x10/0x10 [ 1514.447951][T25022] ? __pfx___might_resched+0x10/0x10 [ 1514.447969][T25022] ? fs_reclaim_acquire+0x7d/0x100 [ 1514.447993][T25022] should_fail_ex+0x414/0x560 [ 1514.448027][T25022] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 1514.448050][T25022] should_failslab+0xa8/0x100 [ 1514.448082][T25022] __kvmalloc_node_noprof+0x161/0x5f0 [ 1514.448111][T25022] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 1514.448140][T25022] rhashtable_init_noprof+0x4ee/0xbb0 [ 1514.448171][T25022] rhltable_init_noprof+0x1e/0x60 [ 1514.448196][T25022] nf_tables_newtable+0x68f/0x1890 [ 1514.448262][T25022] nfnetlink_rcv+0x112f/0x2520 [ 1514.448340][T25022] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1514.448388][T25022] ? ref_tracker_free+0x63a/0x7d0 [ 1514.448438][T25022] ? __netlink_deliver_tap+0x807/0x850 [ 1514.448460][T25022] ? netlink_deliver_tap+0x2e/0x1b0 [ 1514.448500][T25022] netlink_unicast+0x82f/0x9e0 [ 1514.448540][T25022] ? __pfx_netlink_unicast+0x10/0x10 [ 1514.448574][T25022] ? netlink_sendmsg+0x642/0xb30 [ 1514.448593][T25022] ? skb_put+0x11b/0x210 [ 1514.448620][T25022] netlink_sendmsg+0x805/0xb30 [ 1514.448653][T25022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1514.448678][T25022] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1514.448701][T25022] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1514.448722][T25022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1514.448746][T25022] __sock_sendmsg+0x219/0x270 [ 1514.448780][T25022] sock_sendmsg+0x158/0x230 [ 1514.448812][T25022] ? __pfx_sock_sendmsg+0x10/0x10 [ 1514.448883][T25022] ? __asan_memset+0x22/0x50 [ 1514.448926][T25022] ? iov_iter_bvec+0xb8/0x180 [ 1514.448957][T25022] splice_to_socket+0x8ff/0xf10 [ 1514.449015][T25022] ? __pfx_splice_to_socket+0x10/0x10 [ 1514.449075][T25022] ? get_pid_task+0x20/0x1f0 [ 1514.449121][T25022] ? bpf_lsm_file_permission+0x9/0x20 [ 1514.449147][T25022] ? security_file_permission+0x75/0x290 [ 1514.449179][T25022] ? rw_verify_area+0x255/0x4d0 [ 1514.449211][T25022] ? __pfx_splice_to_socket+0x10/0x10 [ 1514.449241][T25022] do_splice+0xc79/0x1660 [ 1514.449302][T25022] ? __pfx_do_splice+0x10/0x10 [ 1514.449346][T25022] __se_sys_splice+0x2e1/0x460 [ 1514.449386][T25022] ? __pfx___se_sys_splice+0x10/0x10 [ 1514.449427][T25022] ? __ia32_sys_splice+0x21/0xf0 [ 1514.449464][T25022] __do_fast_syscall_32+0xb6/0x2b0 [ 1514.449487][T25022] ? lockdep_hardirqs_on+0x9c/0x150 [ 1514.449506][T25022] do_fast_syscall_32+0x34/0x80 [ 1514.449524][T25022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1514.449543][T25022] RIP: 0023:0xf7ff1539 [ 1514.449557][T25022] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1514.449570][T25022] RSP: 002b:00000000f54c555c EFLAGS: 00000206 ORIG_RAX: 0000000000000139 [ 1514.449587][T25022] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1514.449597][T25022] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000047fe2 [ 1514.449606][T25022] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1514.449614][T25022] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1514.449623][T25022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1514.449646][T25022] [ 1515.206886][T24521] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1515.609488][T24521] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1515.771496][T24521] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1515.771533][T24521] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1515.771563][T24521] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 1515.771592][T24521] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1515.771622][T24521] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1515.833242][T24521] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1515.833267][T24521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1515.833282][T24521] usb 6-1: SerialNumber: syz [ 1515.836559][T25025] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1515.836700][T25025] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1516.404766][T25038] netlink: 184 bytes leftover after parsing attributes in process `syz.5.5232'. [ 1516.989502][T24509] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1517.141451][T24509] usb 2-1: config index 0 descriptor too short (expected 797, got 739) [ 1517.197241][T24509] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 1517.211150][T24509] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.221877][T24509] usb 2-1: config 0 has no interface number 0 [ 1517.229998][T24509] usb 2-1: config 0 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1517.249011][T24509] usb 2-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1517.267168][T24509] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= 2.10 [ 1517.276510][T24509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.288564][T24509] usb 2-1: config 0 descriptor?? [ 1517.504884][T24509] (null): keene_cmd_main failed (-71) [ 1517.524048][T24509] video4linux radio48: keene_cmd_main failed (-71) [ 1517.540921][T24509] radio-keene 2-1:0.16: V4L2 device registered as radio48 [ 1517.580517][T24509] usb 2-1: USB disconnect, device number 15 [ 1517.817950][T25055] netlink: 71 bytes leftover after parsing attributes in process `syz.3.5240'. [ 1518.409488][T24529] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1518.579623][T24529] usb 2-1: Using ep0 maxpacket: 16 [ 1518.590479][T24529] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1518.600001][T24529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.612966][T24529] usb 2-1: Product: syz [ 1518.619196][T24529] usb 2-1: Manufacturer: syz [ 1518.626457][T24529] usb 2-1: SerialNumber: syz [ 1518.719298][T24529] usb 2-1: config 0 descriptor?? [ 1518.760458][T24502] usb 6-1: USB disconnect, device number 26 [ 1519.125355][T25070] macvlan3: entered promiscuous mode [ 1519.150230][T24529] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1519.161414][T24529] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1519.180397][T24529] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1519.198338][T24529] usb 2-1: media controller created [ 1519.230074][T24529] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1519.303808][T25073] netlink: 71 bytes leftover after parsing attributes in process `syz.5.5246'. [ 1519.820622][T24529] zl10353_read_register: readreg error (reg=127, ret==0) [ 1519.839574][T24529] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1519.863385][T24529] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1519.917876][T24529] usb 2-1: USB disconnect, device number 16 [ 1519.976666][T24529] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1520.099852][T25098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5248'. [ 1520.280717][T25105] gretap1: entered promiscuous mode [ 1520.929495][T24529] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1521.119689][T24529] usb 1-1: Using ep0 maxpacket: 8 [ 1521.202082][T24529] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1521.249534][T24529] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.257602][T24529] usb 1-1: Product: syz [ 1521.374097][T24529] usb 1-1: Manufacturer: syz [ 1521.389729][T24529] usb 1-1: SerialNumber: syz [ 1521.402624][T24529] usb 1-1: config 0 descriptor?? [ 1521.420605][T24529] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1521.433332][T24529] dvb-usb: bulk message failed: -22 (2/0) [ 1521.452964][T24529] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1521.472223][T24529] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1521.483448][T24529] usb 1-1: media controller created [ 1521.523709][T24529] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1521.976068][T24529] cxusb: set interface failed [ 1521.986790][T24529] dvb-usb: bulk message failed: -22 (1/0) [ 1522.118299][T24529] DVB: Unable to find symbol mt352_attach() [ 1522.132851][T24529] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1522.218836][T25134] netlink: 71 bytes leftover after parsing attributes in process `syz.2.5264'. [ 1522.319541][T24529] rc_core: IR keymap rc-dvico-portable not found [ 1522.325932][T24529] Registered IR keymap rc-empty [ 1522.502299][T24529] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1522.519062][T24529] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input139 [ 1522.536780][T24529] dvb-usb: schedule remote query interval to 100 msecs. [ 1522.554913][T24529] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1522.574979][T24529] usb 1-1: USB disconnect, device number 127 [ 1522.701634][T24529] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1522.718008][T17119] udevd[17119]: setting owner of /dev/bus/usb/001/127 to uid=0, gid=0 failed: No such file or directory [ 1522.769754][T24521] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1522.929971][T24521] usb 4-1: Using ep0 maxpacket: 8 [ 1522.972258][T24521] usb 4-1: config 162 has an invalid interface number: 246 but max is 1 [ 1523.001413][T24521] usb 4-1: config 162 has an invalid interface number: 245 but max is 1 [ 1523.012883][T24521] usb 4-1: config 162 has no interface number 0 [ 1523.021432][T24521] usb 4-1: config 162 has no interface number 1 [ 1523.035784][T24521] usb 4-1: config 162 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1523.092591][T24521] usb 4-1: config 162 interface 245 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1523.123256][T24521] usb 4-1: config 162 interface 245 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1523.152255][T24521] usb 4-1: config 162 interface 245 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1523.172556][T24521] usb 4-1: config 162 interface 245 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1523.198131][T24521] usb 4-1: config 162 interface 245 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1523.231444][T24521] usb 4-1: config 162 interface 246 has no altsetting 0 [ 1523.241329][T24521] usb 4-1: config 162 interface 245 has no altsetting 0 [ 1523.252894][T24521] usb 4-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=5f.2c [ 1523.263565][T24521] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.274041][T24521] usb 4-1: Product: syz [ 1523.280683][T24521] usb 4-1: Manufacturer: syz [ 1523.286534][T24521] usb 4-1: SerialNumber: syz [ 1524.512452][T24521] Bluetooth: failed to set interface 0, alt 0 -22 [ 1524.518988][T24521] btusb 4-1:162.245: probe with driver btusb failed with error -22 [ 1524.546369][T24521] usb 4-1: USB disconnect, device number 126 [ 1524.586430][T25163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5269'. [ 1524.879324][T25171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5269'. [ 1527.138124][T25200] netlink: 79 bytes leftover after parsing attributes in process `syz.2.5280'. [ 1529.117893][T25231] loop8: detected capacity change from 0 to 8 [ 1529.159792][T17119] Dev loop8: unable to read RDB block 8 [ 1529.181825][T17119] loop8: unable to read partition table [ 1529.201254][T17119] loop8: partition table beyond EOD, truncated [ 1529.404900][T25231] Dev loop8: unable to read RDB block 8 [ 1529.451451][T25231] loop8: unable to read partition table [ 1529.538716][T25231] loop8: partition table beyond EOD, truncated [ 1529.582228][T25231] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1529.585993][T25235] dvmrp0: entered allmulticast mode [ 1529.727234][T25239] netlink: 79 bytes leftover after parsing attributes in process `syz.3.5291'. [ 1529.902626][T25228] dvmrp0: left allmulticast mode [ 1530.329822][T24529] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1530.339137][T25237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5290'. [ 1530.368253][T25237] openvswitch: netlink: Flow key attr not present in new flow. [ 1530.502409][T24529] usb 1-1: device descriptor read/64, error -71 [ 1530.759596][T24529] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1530.894416][T24529] usb 1-1: device descriptor read/64, error -71 [ 1531.020083][T24529] usb usb1-port1: attempt power cycle [ 1531.045230][T25269] syzkaller0: entered promiscuous mode [ 1531.053886][T25269] syzkaller0: entered allmulticast mode [ 1531.294798][T25252] pim6reg: entered allmulticast mode [ 1531.369923][T24529] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1531.390342][T24529] usb 1-1: device descriptor read/8, error -71 [ 1531.646134][T24529] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1531.681224][T24529] usb 1-1: device descriptor read/8, error -71 [ 1531.801512][T24510] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1531.809751][T24529] usb usb1-port1: unable to enumerate USB device [ 1531.879571][T24509] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1531.992517][T24510] usb 6-1: config index 0 descriptor too short (expected 797, got 739) [ 1532.001032][T24510] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 1532.009915][T24510] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.021604][T24510] usb 6-1: config 0 has no interface number 0 [ 1532.027802][T24510] usb 6-1: config 0 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1532.039153][T24510] usb 6-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1532.055397][T24509] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1532.068872][T24510] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= 2.10 [ 1532.079074][T24509] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1532.090328][T24510] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.102475][T24509] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 1532.114267][T24509] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1532.126003][T24510] usb 6-1: config 0 descriptor?? [ 1532.146628][T24509] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1532.194745][T16648] cgroup: fork rejected by pids controller in /syz2 [ 1532.209768][T24509] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1532.218895][T24509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1532.259018][T24509] usb 2-1: SerialNumber: syz [ 1532.297937][T25277] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1532.306800][T25277] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1532.352237][T24510] (null): keene_cmd_main failed (-71) [ 1532.382590][T24510] video4linux radio48: keene_cmd_main failed (-71) [ 1532.391892][T24510] radio-keene 6-1:0.16: V4L2 device registered as radio48 [ 1532.466839][T24510] usb 6-1: USB disconnect, device number 27 [ 1532.686252][T25289] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5305'. [ 1533.651874][ T7448] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1533.664761][ T7448] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1533.673750][ T7448] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1533.687431][ T7448] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1533.697599][ T7448] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1534.125106][T25301] chnl_net:caif_netlink_parms(): no params data found [ 1534.155988][T25310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5314'. [ 1534.512878][T25301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.568427][T25301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.592957][T25301] bridge_slave_0: entered allmulticast mode [ 1534.634781][T25301] bridge_slave_0: entered promiscuous mode [ 1534.650950][T25301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.666139][T25301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.682593][T25301] bridge_slave_1: entered allmulticast mode [ 1534.715650][T24510] usb 2-1: USB disconnect, device number 17 [ 1534.760631][T25301] bridge_slave_1: entered promiscuous mode [ 1535.096416][T25301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1535.118080][T25337] binder: 25333:25337 ioctl 4018620d 0 returned -22 [ 1535.143418][T25337] binder: 25333:25337 ioctl c0306201 0 returned -14 [ 1535.148235][T25301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1535.203142][T25337] binder: 25333:25337 unknown command 0 [ 1535.244798][T25337] binder: 25333:25337 ioctl c0306201 80000140 returned -22 [ 1535.259795][T24510] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1535.366341][T25301] team0: Port device team_slave_0 added [ 1535.386381][T25301] team0: Port device team_slave_1 added [ 1535.422122][T24510] usb 4-1: config index 0 descriptor too short (expected 797, got 739) [ 1535.454017][T24510] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 1535.472450][T24510] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.488238][T24510] usb 4-1: config 0 has no interface number 0 [ 1535.500458][T24510] usb 4-1: config 0 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1535.518455][T24509] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1535.546784][T24510] usb 4-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1535.576721][T24510] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= 2.10 [ 1535.597221][T24510] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.662499][T24510] usb 4-1: config 0 descriptor?? [ 1535.668921][T25301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.710110][T25301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1535.719833][T24509] usb 1-1: Using ep0 maxpacket: 8 [ 1535.736600][ T7448] Bluetooth: hci4: command tx timeout [ 1535.753693][T25301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1535.791131][T25301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1535.798194][T25301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1535.830212][T24509] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1535.839840][T25301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1535.917542][T24509] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1535.944627][T24509] usb 1-1: string descriptor 0 read error: -22 [ 1535.993081][T24509] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1536.027806][T24510] (null): keene_cmd_main failed (-71) [ 1536.066881][T24509] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.077149][T24510] video4linux radio48: keene_cmd_main failed (-71) [ 1536.084197][T24510] radio-keene 4-1:0.16: V4L2 device registered as radio48 [ 1536.092596][T25301] hsr_slave_0: entered promiscuous mode [ 1536.118998][T24509] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1536.128338][T24510] usb 4-1: USB disconnect, device number 127 [ 1536.140787][T24509] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1536.151849][T25301] hsr_slave_1: entered promiscuous mode [ 1536.160539][T25301] debugfs: 'hsr0' already exists in 'hsr' [ 1536.166829][T24509] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1536.174103][T25301] Cannot create hsr debugfs directory [ 1536.180811][T24509] usb 1-1: media controller created [ 1536.204825][T24509] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1536.209563][T24521] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1536.399567][T24521] usb 2-1: Using ep0 maxpacket: 32 [ 1536.417528][T24521] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 1536.439716][T24521] usb 2-1: config 0 has no interface number 0 [ 1536.446269][T24521] usb 2-1: config 0 interface 113 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 1536.459745][T24521] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f [ 1536.469962][T24521] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.478093][T24521] usb 2-1: Product: syz [ 1536.483070][T24521] usb 2-1: Manufacturer: syz [ 1536.487720][T24521] usb 2-1: SerialNumber: syz [ 1536.496219][T24521] usb 2-1: config 0 descriptor?? [ 1536.502265][T25349] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1536.928417][T25352] syz_tun: entered allmulticast mode [ 1536.984609][T25351] syz_tun: left allmulticast mode [ 1537.199102][T25301] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.211493][T25301] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1537.400662][T24509] zl10353_read_register: readreg error (reg=127, ret==0) [ 1537.424404][T25301] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.467003][T25301] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1537.680161][T25301] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.725818][T25301] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1537.799782][ T7448] Bluetooth: hci4: command tx timeout [ 1537.940316][T25301] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.969551][T25301] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1538.080184][T25361] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1538.159588][T24521] net1080 2-1:0.113 usb0: register 'net1080' at usb-dummy_hcd.1-1, NetChip TurboCONNECT, c6:04:28:d9:5e:fa [ 1538.410060][T24521] usb 1-1: USB disconnect, device number 6 [ 1538.741878][T25301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1538.817764][T25301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1538.867738][T25301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1538.877659][T25367] netlink: 'syz.0.5329': attribute type 1 has an invalid length. [ 1538.912319][T25301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1538.968568][T25367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5329'. [ 1538.999853][T24510] usb 2-1: USB disconnect, device number 18 [ 1539.007921][T24510] net1080 2-1:0.113 usb0: unregister 'net1080' usb-dummy_hcd.1-1, NetChip TurboCONNECT [ 1539.187299][T25301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1539.213183][T24509] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1539.239331][T25301] 8021q: adding VLAN 0 to HW filter on device team0 [ 1539.267625][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.274886][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1539.300493][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.307750][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1539.310601][T24529] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1539.361350][T24509] usb 6-1: device descriptor read/64, error -71 [ 1539.474176][T25301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1539.491556][T24529] usb 1-1: device descriptor read/64, error -71 [ 1539.577349][T25301] veth0_vlan: entered promiscuous mode [ 1539.605131][T25301] veth1_vlan: entered promiscuous mode [ 1539.613674][T24509] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1539.673072][T25301] veth0_macvtap: entered promiscuous mode [ 1539.688649][T25301] veth1_macvtap: entered promiscuous mode [ 1539.740580][T25301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1539.748191][T25301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1539.757075][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.757299][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.757357][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.757396][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.766659][T24529] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1539.766817][T24509] usb 6-1: device descriptor read/64, error -71 [ 1539.870699][T24509] usb usb6-port1: attempt power cycle [ 1539.890174][T24529] usb 1-1: device descriptor read/64, error -71 [ 1539.890254][ T7448] Bluetooth: hci4: command tx timeout [ 1540.007420][T24529] usb usb1-port1: attempt power cycle [ 1540.045741][ T3591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1540.045766][ T3591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.185040][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1540.185058][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.250836][T24509] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1540.276581][T24509] usb 6-1: device descriptor read/8, error -71 [ 1540.342187][T24529] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1540.363183][T24529] usb 1-1: device descriptor read/8, error -71 [ 1540.509538][T24509] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1540.531863][T24509] usb 6-1: device descriptor read/8, error -71 [ 1540.599992][T24529] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1540.620369][T24529] usb 1-1: device descriptor read/8, error -71 [ 1540.640151][T24509] usb usb6-port1: unable to enumerate USB device [ 1540.733000][T24529] usb usb1-port1: unable to enumerate USB device [ 1541.705007][T25428] syz_tun: entered allmulticast mode [ 1541.779939][T24502] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1541.807576][T25426] syz_tun: left allmulticast mode [ 1541.960169][ T7448] Bluetooth: hci4: command tx timeout [ 1541.961830][T24502] usb 3-1: config index 0 descriptor too short (expected 797, got 739) [ 1542.003428][T24502] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 1542.003461][T24502] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1542.003484][T24502] usb 3-1: config 0 has no interface number 0 [ 1542.003529][T24502] usb 3-1: config 0 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1542.003553][T24502] usb 3-1: config 0 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1542.003576][T24502] usb 3-1: config 0 interface 16 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1542.003637][T24502] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= 2.10 [ 1542.003661][T24502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.037770][T24502] usb 3-1: config 0 descriptor?? [ 1542.241971][T24509] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1542.248915][T24502] (null): keene_cmd_main failed (-71) [ 1542.293814][T24502] video4linux radio48: keene_cmd_main failed (-71) [ 1542.293861][T24502] radio-keene 3-1:0.16: V4L2 device registered as radio48 [ 1542.340422][T24502] usb 3-1: USB disconnect, device number 4 [ 1542.439852][T24509] usb 2-1: Using ep0 maxpacket: 32 [ 1542.465686][T24509] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.465723][T24509] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1542.465765][T24509] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1542.465797][T24509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.468841][T24509] usb 2-1: config 0 descriptor?? [ 1542.520428][T24509] hub 2-1:0.0: USB hub found [ 1542.778537][T24509] hub 2-1:0.0: 1 port detected [ 1543.421463][T24509] hub 2-1:0.0: activate --> -90 [ 1543.842196][T24529] usb 2-1: USB disconnect, device number 19 [ 1544.173744][T25459] syz_tun: entered allmulticast mode [ 1544.269851][T25459] dvmrp1: entered allmulticast mode [ 1544.407054][T25458] syz_tun: left allmulticast mode [ 1545.339493][T24502] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1545.559860][T24502] usb 6-1: device descriptor read/64, error -71 [ 1545.799912][T25481] qrtr: Invalid version 5 [ 1545.849900][T24502] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1546.039672][T24502] usb 6-1: device descriptor read/64, error -71 [ 1546.159849][T24502] usb usb6-port1: attempt power cycle [ 1546.189490][T24509] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1546.432261][T24517] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1546.499567][T24502] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1546.510466][T24509] usb 1-1: Using ep0 maxpacket: 32 [ 1546.545288][T24509] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1546.553098][T24510] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1546.585471][T24509] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 1546.590346][T24502] usb 6-1: device descriptor read/8, error -71 [ 1546.602974][T24509] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.617846][T24509] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1546.628826][T24509] usb 1-1: config 128 has no interface number 0 [ 1546.655342][T24509] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 55, changing to 9 [ 1546.655914][T24517] usb 2-1: config index 0 descriptor too short (expected 797, got 739) [ 1546.700150][T24517] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 1546.716918][T24517] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.738071][T24517] usb 2-1: config 0 has no interface number 0 [ 1546.766762][T24509] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 8496, setting to 1024 [ 1546.768236][T24517] usb 2-1: config 0 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1546.794505][T24509] usb 1-1: config 128 interface 127 has no altsetting 0 [ 1546.833573][T24517] usb 2-1: config 0 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1546.867774][T24517] usb 2-1: config 0 interface 16 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1546.881673][T24502] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1546.909826][T24510] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1546.923384][T24510] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1546.934587][T24509] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1546.935750][T24517] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= 2.10 [ 1546.945185][T24509] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.960514][T24502] usb 6-1: device descriptor read/8, error -71 [ 1546.961642][T24510] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1546.976488][T24509] usb 1-1: Product: syz [ 1546.981069][T24510] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.989679][T24509] usb 1-1: Manufacturer: syz [ 1546.999578][T24509] usb 1-1: SerialNumber: syz [ 1547.021688][T24517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.080077][T24502] usb usb6-port1: unable to enumerate USB device [ 1547.094602][T24517] usb 2-1: config 0 descriptor?? [ 1547.285319][T25487] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1547.307380][T24510] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1547.366680][T24517] (null): keene_cmd_main failed (-71) [ 1547.379295][T24517] video4linux radio48: keene_cmd_main failed (-71) [ 1547.386697][T24517] radio-keene 2-1:0.16: V4L2 device registered as radio48 [ 1547.412859][T24517] usb 2-1: USB disconnect, device number 20 [ 1547.629782][T24529] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1547.780003][T24529] usb 6-1: device descriptor read/64, error -71 [ 1548.019522][T24529] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1548.778838][T25511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5355'. [ 1550.400161][T25521] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5359'. [ 1550.837633][T24529] usb 3-1: USB disconnect, device number 5 [ 1551.406887][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.413350][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.556693][T25537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5365'. [ 1551.690504][T24509] usb 1-1: USB disconnect, device number 11 [ 1551.776692][T17119] udevd[17119]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1551.853093][ T5234] Dev loop6: unable to read RDB block 1 [ 1551.853143][ T5234] loop6: unable to read partition table [ 1551.853360][ T5234] loop6: partition table beyond EOD, truncated [ 1551.869523][T24529] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1552.090965][T24529] usb 3-1: config index 0 descriptor too short (expected 797, got 739) [ 1552.115504][T24529] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 1552.126428][T24529] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.138266][T24529] usb 3-1: config 0 has no interface number 0 [ 1552.145396][T24529] usb 3-1: config 0 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1552.156915][T24529] usb 3-1: config 0 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1552.171752][T24529] usb 3-1: config 0 interface 16 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1552.224253][T24529] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= 2.10 [ 1552.236491][T24529] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.276490][T24529] usb 3-1: config 0 descriptor?? [ 1552.355852][T25568] FAULT_INJECTION: forcing a failure. [ 1552.355852][T25568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1552.370200][T25568] CPU: 1 UID: 0 PID: 25568 Comm: syz.5.5373 Not tainted syzkaller #0 PREEMPT(full) [ 1552.370232][T25568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1552.370248][T25568] Call Trace: [ 1552.370257][T25568] [ 1552.370267][T25568] dump_stack_lvl+0x189/0x250 [ 1552.370298][T25568] ? __pfx____ratelimit+0x10/0x10 [ 1552.370319][T25568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1552.370338][T25568] ? __pfx__printk+0x10/0x10 [ 1552.370377][T25568] should_fail_ex+0x414/0x560 [ 1552.370418][T25568] _copy_to_user+0x31/0xb0 [ 1552.370449][T25568] simple_read_from_buffer+0xe1/0x170 [ 1552.370480][T25568] proc_fail_nth_read+0x1b3/0x220 [ 1552.370501][T25568] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1552.370526][T25568] ? rw_verify_area+0x2a6/0x4d0 [ 1552.370556][T25568] ? __lock_acquire+0xab9/0xd20 [ 1552.370585][T25568] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1552.370613][T25568] vfs_read+0x200/0xa30 [ 1552.370634][T25568] ? fdget_pos+0x247/0x320 [ 1552.370651][T25568] ? __pfx___mutex_lock+0x10/0x10 [ 1552.370670][T25568] ? __pfx_vfs_read+0x10/0x10 [ 1552.370703][T25568] ? __fget_files+0x2a/0x420 [ 1552.370728][T25568] ? __fget_files+0x3a0/0x420 [ 1552.370747][T25568] ? __fget_files+0x2a/0x420 [ 1552.370785][T25568] ksys_read+0x145/0x250 [ 1552.370816][T25568] ? __pfx_ksys_read+0x10/0x10 [ 1552.370849][T25568] ? lockdep_hardirqs_on+0x9c/0x150 [ 1552.370879][T25568] __do_fast_syscall_32+0xb6/0x2b0 [ 1552.370905][T25568] ? lockdep_hardirqs_on+0x9c/0x150 [ 1552.370932][T25568] do_fast_syscall_32+0x34/0x80 [ 1552.370954][T25568] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1552.370973][T25568] RIP: 0023:0xf701e539 [ 1552.370988][T25568] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1552.371007][T25568] RSP: 002b:00000000f540e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1552.371031][T25568] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f540e620 [ 1552.371046][T25568] RDX: 000000000000000f RSI: 00000000f73b5ff4 RDI: 0000000000000000 [ 1552.371060][T25568] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1552.371072][T25568] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1552.371085][T25568] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1552.371114][T25568] [ 1552.634035][T24529] (null): keene_cmd_main failed (-71) [ 1552.661927][T24529] video4linux radio48: keene_cmd_main failed (-71) [ 1552.733460][T24529] radio-keene 3-1:0.16: V4L2 device registered as radio48 [ 1552.768777][ T30] audit: type=1326 audit(1759023746.972:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.3.5371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 1552.798008][T25571] syz_tun: entered allmulticast mode [ 1552.828418][T24529] usb 3-1: USB disconnect, device number 6 [ 1552.846635][ T30] audit: type=1326 audit(1759023746.972:6341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.3.5371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 1552.869042][ T30] audit: type=1326 audit(1759023746.992:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.3.5371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 1552.932254][ T30] audit: type=1326 audit(1759023746.992:6343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.3.5371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 1553.005761][ T30] audit: type=1326 audit(1759023746.992:6344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.3.5371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 1553.010633][T25569] syz_tun: left allmulticast mode [ 1553.052743][ T30] audit: type=1326 audit(1759023747.022:6345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.3.5371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 1553.085375][ T30] audit: type=1326 audit(1759023747.022:6346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.3.5371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 1553.118879][ T30] audit: type=1326 audit(1759023747.022:6347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.3.5371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 1553.141500][ T30] audit: type=1326 audit(1759023747.022:6348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.3.5371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 1553.164830][ T30] audit: type=1326 audit(1759023747.022:6349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.3.5371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 1553.186929][ C0] vkms_vblank_simulate: vblank timer overrun [ 1553.470176][T24529] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1553.683988][T25584] CUSE: info not properly terminated [ 1553.789488][T24529] usb 2-1: Using ep0 maxpacket: 8 [ 1553.797059][T24529] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1553.807271][T24529] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1553.817483][T24529] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 1553.834605][T24529] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1553.852899][T24529] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1553.981955][T24529] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1554.011139][T24529] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.014217][T25595] pim6reg1: entered promiscuous mode [ 1554.034808][T25595] pim6reg1: entered allmulticast mode [ 1554.264928][T24529] usb 2-1: usb_control_msg returned -71 [ 1554.272851][T24529] usbtmc 2-1:16.0: can't read capabilities [ 1554.324538][T24529] usb 2-1: USB disconnect, device number 21 [ 1554.969977][T24517] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1555.152102][T24517] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1555.174020][T24517] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1555.214703][T24517] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1555.224290][T24517] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1555.248932][T24517] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1555.268194][T24517] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1555.284195][T24517] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1555.321586][T24517] usb 3-1: Product: syz [ 1555.340280][T24517] usb 3-1: Manufacturer: syz [ 1555.375697][T24517] cdc_wdm 3-1:1.0: skipping garbage [ 1555.407442][T24517] cdc_wdm 3-1:1.0: skipping garbage [ 1555.421972][T25624] FAULT_INJECTION: forcing a failure. [ 1555.421972][T25624] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.436078][T25624] CPU: 0 UID: 0 PID: 25624 Comm: syz.3.5389 Not tainted syzkaller #0 PREEMPT(full) [ 1555.436108][T25624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1555.436122][T25624] Call Trace: [ 1555.436132][T25624] [ 1555.436141][T25624] dump_stack_lvl+0x189/0x250 [ 1555.436173][T25624] ? __pfx____ratelimit+0x10/0x10 [ 1555.436198][T25624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1555.436226][T25624] ? __pfx__printk+0x10/0x10 [ 1555.436263][T25624] ? __pfx___might_resched+0x10/0x10 [ 1555.436290][T25624] should_fail_ex+0x414/0x560 [ 1555.436330][T25624] should_failslab+0xa8/0x100 [ 1555.436369][T25624] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1555.436401][T25624] ? __alloc_skb+0x112/0x2d0 [ 1555.436431][T25624] __alloc_skb+0x112/0x2d0 [ 1555.436460][T25624] netlink_sendmsg+0x5c6/0xb30 [ 1555.436496][T25624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1555.436524][T25624] ? __import_iovec+0x5d4/0x7f0 [ 1555.436551][T25624] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1555.436576][T25624] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1555.436601][T25624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1555.436626][T25624] __sock_sendmsg+0x219/0x270 [ 1555.436676][T25624] ____sys_sendmsg+0x505/0x830 [ 1555.436710][T25624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1555.436755][T25624] ___sys_sendmsg+0x21f/0x2a0 [ 1555.436791][T25624] ? __pfx____sys_sendmsg+0x10/0x10 [ 1555.436856][T25624] ? __fget_files+0x2a/0x420 [ 1555.436875][T25624] ? __fget_files+0x3a0/0x420 [ 1555.436906][T25624] __sys_sendmsg+0x164/0x220 [ 1555.436935][T25624] ? __pfx___sys_sendmsg+0x10/0x10 [ 1555.436981][T25624] ? lockdep_hardirqs_on+0x9c/0x150 [ 1555.437008][T25624] __do_fast_syscall_32+0xb6/0x2b0 [ 1555.437034][T25624] ? lockdep_hardirqs_on+0x9c/0x150 [ 1555.437061][T25624] do_fast_syscall_32+0x34/0x80 [ 1555.437086][T25624] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1555.437112][T25624] RIP: 0023:0xf7fa4539 [ 1555.437130][T25624] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1555.437150][T25624] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1555.437172][T25624] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001200 [ 1555.437187][T25624] RDX: 0000000000000854 RSI: 0000000000000000 RDI: 0000000000000000 [ 1555.437200][T25624] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1555.437213][T25624] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1555.437225][T25624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1555.437255][T25624] [ 1555.689167][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.022085][T24517] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1556.028063][T24517] cdc_wdm 3-1:1.0: Unknown control protocol [ 1556.189604][T25629] FAULT_INJECTION: forcing a failure. [ 1556.189604][T25629] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.213793][T25629] CPU: 1 UID: 0 PID: 25629 Comm: syz.1.5392 Not tainted syzkaller #0 PREEMPT(full) [ 1556.213824][T25629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1556.213838][T25629] Call Trace: [ 1556.213847][T25629] [ 1556.213858][T25629] dump_stack_lvl+0x189/0x250 [ 1556.213890][T25629] ? __pfx____ratelimit+0x10/0x10 [ 1556.213914][T25629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1556.213941][T25629] ? __pfx__printk+0x10/0x10 [ 1556.213975][T25629] ? __pfx___might_resched+0x10/0x10 [ 1556.213997][T25629] ? fs_reclaim_acquire+0x7d/0x100 [ 1556.214023][T25629] should_fail_ex+0x414/0x560 [ 1556.214061][T25629] should_failslab+0xa8/0x100 [ 1556.214096][T25629] __kmalloc_noprof+0xcb/0x4f0 [ 1556.214125][T25629] ? tomoyo_encode+0x28b/0x550 [ 1556.214153][T25629] tomoyo_encode+0x28b/0x550 [ 1556.214184][T25629] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1556.214210][T25629] ? tomoyo_domain+0xd9/0x130 [ 1556.214240][T25629] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1556.214271][T25629] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1556.214307][T25629] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1556.214359][T25629] ? __lock_acquire+0xab9/0xd20 [ 1556.214414][T25629] ? __fget_files+0x2a/0x420 [ 1556.214438][T25629] ? __fget_files+0x3a0/0x420 [ 1556.214456][T25629] ? __fget_files+0x2a/0x420 [ 1556.214480][T25629] security_file_ioctl_compat+0xcb/0x2d0 [ 1556.214515][T25629] __ia32_compat_sys_ioctl+0x128/0x840 [ 1556.214547][T25629] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1556.214576][T25629] ? __fget_files+0x3a0/0x420 [ 1556.214603][T25629] ? fput+0xa0/0xd0 [ 1556.214645][T25629] ? ksys_write+0x22a/0x250 [ 1556.214686][T25629] ? lockdep_hardirqs_on+0x9c/0x150 [ 1556.214722][T25629] __do_fast_syscall_32+0xb6/0x2b0 [ 1556.214750][T25629] ? lockdep_hardirqs_on+0x9c/0x150 [ 1556.214777][T25629] do_fast_syscall_32+0x34/0x80 [ 1556.214805][T25629] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1556.214833][T25629] RIP: 0023:0xf7ff1539 [ 1556.214854][T25629] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1556.214874][T25629] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1556.214898][T25629] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 1556.214914][T25629] RDX: 0000000080002040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1556.214928][T25629] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1556.214941][T25629] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1556.214954][T25629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1556.214987][T25629] [ 1556.217405][T25629] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1556.256801][T24529] usb 3-1: USB disconnect, device number 7 [ 1557.449639][T24529] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1557.699548][T24529] usb 4-1: Using ep0 maxpacket: 32 [ 1557.706550][T24529] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 1557.715001][T24529] usb 4-1: config 1 has no interface number 0 [ 1557.826920][T24529] usb 4-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1557.850250][T24529] usb 4-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1557.866650][T25656] syz_tun: entered allmulticast mode [ 1557.877094][T24529] usb 4-1: config 1 interface 236 has no altsetting 0 [ 1557.886061][T24529] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 1557.900929][T24529] usb 4-1: config 1 has no interface number 0 [ 1557.941801][T24529] usb 4-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1557.957439][T25653] syz_tun: left allmulticast mode [ 1557.962979][T25658] netlink: 'syz.2.5399': attribute type 10 has an invalid length. [ 1557.970948][T24529] usb 4-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1557.998470][T25658] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1558.019835][T24529] usb 4-1: config 1 interface 236 has no altsetting 0 [ 1558.043518][T24529] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1558.052661][T24529] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.078871][T24529] usb 4-1: Product: syz [ 1558.105470][T24529] usb 4-1: Manufacturer: syz [ 1558.129499][T24529] usb 4-1: SerialNumber: syz [ 1558.160468][T24529] ti_usb_3410_5052 4-1:1.236: TI USB 5052 2 port adapter converter detected [ 1558.495272][T25671] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1558.509909][T25638] netlink: 'syz.3.5391': attribute type 1 has an invalid length. [ 1558.599772][T24521] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1558.659450][T24517] usb 4-1: USB disconnect, device number 2 [ 1558.755215][T24521] usb 6-1: Using ep0 maxpacket: 32 [ 1558.774335][T24521] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1558.787786][T24521] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1558.799625][T24529] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1558.803212][T24521] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1558.818913][T24521] usb 6-1: Product: syz [ 1558.825536][T24521] usb 6-1: Manufacturer: syz [ 1558.839159][T24521] usb 6-1: SerialNumber: syz [ 1558.854438][T24521] usb 6-1: config 0 descriptor?? [ 1558.893072][T25667] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1558.968478][T24529] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1558.978571][T24529] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.004093][T25663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5400'. [ 1559.006659][T24529] usb 3-1: Product: syz [ 1559.026460][T24529] usb 3-1: Manufacturer: syz [ 1559.048395][T24529] usb 3-1: SerialNumber: syz [ 1559.329546][T24517] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1559.478630][T24529] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1559.522560][T24529] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1559.533836][T24517] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.562550][T24529] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1559.599073][T24517] usb 2-1: config 0 has no interfaces? [ 1559.603927][T24529] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1559.606618][T24517] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1559.635270][T24517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.656984][T24517] usb 2-1: config 0 descriptor?? [ 1559.722069][T24529] usb 3-1: USB disconnect, device number 8 [ 1560.164570][T25681] FAULT_INJECTION: forcing a failure. [ 1560.164570][T25681] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.178679][T25681] CPU: 0 UID: 0 PID: 25681 Comm: syz.3.5406 Not tainted syzkaller #0 PREEMPT(full) [ 1560.178708][T25681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1560.178723][T25681] Call Trace: [ 1560.178732][T25681] [ 1560.178741][T25681] dump_stack_lvl+0x189/0x250 [ 1560.178777][T25681] ? __pfx____ratelimit+0x10/0x10 [ 1560.178802][T25681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1560.178828][T25681] ? __pfx__printk+0x10/0x10 [ 1560.178865][T25681] ? __pfx___might_resched+0x10/0x10 [ 1560.178892][T25681] should_fail_ex+0x414/0x560 [ 1560.178930][T25681] should_failslab+0xa8/0x100 [ 1560.178976][T25681] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1560.179008][T25681] ? __alloc_skb+0x112/0x2d0 [ 1560.179036][T25681] __alloc_skb+0x112/0x2d0 [ 1560.179065][T25681] netlink_sendmsg+0x5c6/0xb30 [ 1560.179099][T25681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1560.179125][T25681] ? __import_iovec+0x5d4/0x7f0 [ 1560.179152][T25681] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1560.179176][T25681] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1560.179200][T25681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1560.179226][T25681] __sock_sendmsg+0x219/0x270 [ 1560.179271][T25681] ____sys_sendmsg+0x505/0x830 [ 1560.179306][T25681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1560.179351][T25681] ___sys_sendmsg+0x21f/0x2a0 [ 1560.179382][T25681] ? __pfx____sys_sendmsg+0x10/0x10 [ 1560.179445][T25681] ? __fget_files+0x2a/0x420 [ 1560.179464][T25681] ? __fget_files+0x3a0/0x420 [ 1560.179492][T25681] __sys_sendmsg+0x164/0x220 [ 1560.179524][T25681] ? __pfx___sys_sendmsg+0x10/0x10 [ 1560.179568][T25681] ? lockdep_hardirqs_on+0x9c/0x150 [ 1560.179596][T25681] __do_fast_syscall_32+0xb6/0x2b0 [ 1560.179615][T25681] ? lockdep_hardirqs_on+0x9c/0x150 [ 1560.179633][T25681] do_fast_syscall_32+0x34/0x80 [ 1560.179651][T25681] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1560.179669][T25681] RIP: 0023:0xf7fa4539 [ 1560.179682][T25681] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1560.179695][T25681] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1560.179710][T25681] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1560.179721][T25681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1560.179729][T25681] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1560.179738][T25681] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1560.179746][T25681] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1560.179767][T25681] [ 1561.205411][T24529] usb 6-1: USB disconnect, device number 38 [ 1561.606384][T25712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5413'. [ 1561.616893][T25712] netlink: 'syz.0.5413': attribute type 30 has an invalid length. [ 1561.717687][T25716] CUSE: info not properly terminated [ 1561.760763][T25718] FAULT_INJECTION: forcing a failure. [ 1561.760763][T25718] name failslab, interval 1, probability 0, space 0, times 0 [ 1561.796736][T25718] CPU: 0 UID: 0 PID: 25718 Comm: syz.2.5418 Not tainted syzkaller #0 PREEMPT(full) [ 1561.796761][T25718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1561.796772][T25718] Call Trace: [ 1561.796779][T25718] [ 1561.796787][T25718] dump_stack_lvl+0x189/0x250 [ 1561.796813][T25718] ? __pfx____ratelimit+0x10/0x10 [ 1561.796832][T25718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1561.796871][T25718] ? __pfx__printk+0x10/0x10 [ 1561.796900][T25718] ? __pfx___might_resched+0x10/0x10 [ 1561.796921][T25718] should_fail_ex+0x414/0x560 [ 1561.796952][T25718] should_failslab+0xa8/0x100 [ 1561.796979][T25718] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1561.797005][T25718] ? __alloc_skb+0x112/0x2d0 [ 1561.797039][T25718] __alloc_skb+0x112/0x2d0 [ 1561.797061][T25718] netlink_sendmsg+0x5c6/0xb30 [ 1561.797089][T25718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1561.797111][T25718] ? __import_iovec+0x5d4/0x7f0 [ 1561.797134][T25718] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1561.797154][T25718] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1561.797174][T25718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1561.797196][T25718] __sock_sendmsg+0x219/0x270 [ 1561.797225][T25718] ____sys_sendmsg+0x505/0x830 [ 1561.797252][T25718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1561.797289][T25718] ___sys_sendmsg+0x21f/0x2a0 [ 1561.797313][T25718] ? __pfx____sys_sendmsg+0x10/0x10 [ 1561.797365][T25718] ? __fget_files+0x2a/0x420 [ 1561.797380][T25718] ? __fget_files+0x3a0/0x420 [ 1561.797405][T25718] __sys_sendmsg+0x164/0x220 [ 1561.797430][T25718] ? __pfx___sys_sendmsg+0x10/0x10 [ 1561.797467][T25718] ? lockdep_hardirqs_on+0x9c/0x150 [ 1561.797490][T25718] __do_fast_syscall_32+0xb6/0x2b0 [ 1561.797512][T25718] ? lockdep_hardirqs_on+0x9c/0x150 [ 1561.797535][T25718] do_fast_syscall_32+0x34/0x80 [ 1561.797557][T25718] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1561.797581][T25718] RIP: 0023:0xf7f17539 [ 1561.797598][T25718] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1561.797615][T25718] RSP: 002b:00000000f540655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1561.797635][T25718] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1561.797647][T25718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1561.797658][T25718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1561.797667][T25718] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1561.797689][T25718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1561.797713][T25718] [ 1561.840323][T25722] loop7: detected capacity change from 0 to 7 [ 1562.040721][ T127] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1562.327308][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1562.327328][ T30] audit: type=1326 audit(1759023756.552:6373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25719 comm="syz.0.5417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1562.349531][T24521] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1562.356228][T24510] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1562.390037][ T30] audit: type=1326 audit(1759023756.602:6374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25719 comm="syz.0.5417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1562.393050][T25733] syz_tun: entered allmulticast mode [ 1562.472559][T25731] syz_tun: left allmulticast mode [ 1562.486074][ T30] audit: type=1326 audit(1759023756.602:6375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25719 comm="syz.0.5417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1562.530006][T24521] usb 3-1: Using ep0 maxpacket: 32 [ 1562.547733][T24521] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1562.568762][ T30] audit: type=1326 audit(1759023756.602:6376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25719 comm="syz.0.5417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1562.604256][T24521] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1562.612414][T24529] usb 2-1: USB disconnect, device number 22 [ 1562.627743][T24510] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1562.628597][T24521] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1562.655859][T24510] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.669859][ T30] audit: type=1326 audit(1759023756.602:6377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25719 comm="syz.0.5417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1562.699050][T24521] usb 3-1: Product: syz [ 1562.702212][T24510] usb 4-1: config 0 descriptor?? [ 1562.710948][T24521] usb 3-1: Manufacturer: syz [ 1562.715600][T24521] usb 3-1: SerialNumber: syz [ 1562.752821][T24521] usb 3-1: config 0 descriptor?? [ 1562.759839][T25730] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1562.874872][ T30] audit: type=1326 audit(1759023756.602:6378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25719 comm="syz.0.5417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1562.915582][T24510] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1562.959105][T24510] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1562.973481][ T30] audit: type=1326 audit(1759023756.602:6379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25719 comm="syz.0.5417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1562.987339][T24529] usb 3-1: USB disconnect, device number 9 [ 1562.996673][ T30] audit: type=1326 audit(1759023756.602:6380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25719 comm="syz.0.5417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1563.024190][ T30] audit: type=1326 audit(1759023756.602:6381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25719 comm="syz.0.5417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1563.068075][T24510] [drm] Initialized udl on minor 2 [ 1563.108419][T25722] Dev loop7: unable to read RDB block 7 [ 1563.200254][ T30] audit: type=1326 audit(1759023756.602:6382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25719 comm="syz.0.5417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 1563.222756][T25722] loop7: unable to read partition table [ 1563.236593][T25722] loop7: partition table beyond EOD, truncated [ 1563.553582][T25722] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1563.862034][T24521] IPVS: starting estimator thread 0... [ 1563.932713][T24510] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1563.962256][T25745] IPVS: using max 26 ests per chain, 62400 per kthread [ 1563.984271][T24510] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1563.988332][T25749] bridge0: entered promiscuous mode [ 1564.024246][T25749] macvlan2: entered promiscuous mode [ 1564.036953][T24529] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1564.046873][T24510] usb 4-1: USB disconnect, device number 3 [ 1564.067570][T24529] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1564.179931][T25751] FAULT_INJECTION: forcing a failure. [ 1564.179931][T25751] name failslab, interval 1, probability 0, space 0, times 0 [ 1564.236863][T25751] CPU: 0 UID: 0 PID: 25751 Comm: syz.5.5430 Not tainted syzkaller #0 PREEMPT(full) [ 1564.236893][T25751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1564.236908][T25751] Call Trace: [ 1564.236917][T25751] [ 1564.236927][T25751] dump_stack_lvl+0x189/0x250 [ 1564.236958][T25751] ? __pfx____ratelimit+0x10/0x10 [ 1564.236983][T25751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1564.237008][T25751] ? __pfx__printk+0x10/0x10 [ 1564.237044][T25751] ? __pfx___might_resched+0x10/0x10 [ 1564.237064][T25751] ? fs_reclaim_acquire+0x7d/0x100 [ 1564.237089][T25751] should_fail_ex+0x414/0x560 [ 1564.237127][T25751] should_failslab+0xa8/0x100 [ 1564.237161][T25751] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1564.237189][T25751] ? getname_flags+0xb8/0x540 [ 1564.237214][T25751] getname_flags+0xb8/0x540 [ 1564.237240][T25751] path_removexattrat+0x151/0x690 [ 1564.237269][T25751] ? __pfx_path_removexattrat+0x10/0x10 [ 1564.237293][T25751] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1564.237318][T25751] ? __pfx_vfs_write+0x10/0x10 [ 1564.237381][T25751] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1564.237411][T25751] __ia32_sys_removexattr+0x61/0x70 [ 1564.237436][T25751] __do_fast_syscall_32+0xb6/0x2b0 [ 1564.237462][T25751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1564.237490][T25751] do_fast_syscall_32+0x34/0x80 [ 1564.237515][T25751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1564.237540][T25751] RIP: 0023:0xf701e539 [ 1564.237558][T25751] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1564.237577][T25751] RSP: 002b:00000000f540e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000eb [ 1564.237599][T25751] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080000080 [ 1564.237615][T25751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1564.237627][T25751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1564.237640][T25751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1564.237653][T25751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1564.237683][T25751] [ 1564.749275][T25759] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20004 [ 1564.819198][T25757] CUSE: info not properly terminated [ 1564.969475][T24510] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1565.119612][T24510] usb 6-1: Using ep0 maxpacket: 32 [ 1565.127143][T24510] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1565.146057][T24510] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1565.168773][T24510] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1565.189641][T24510] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1565.208897][T24510] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.221137][T24510] usb 6-1: config 0 descriptor?? [ 1565.227093][T25764] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1565.237312][T24510] hub 6-1:0.0: USB hub found [ 1565.472651][T24510] hub 6-1:0.0: config failed, hub has too many ports! (err -19) [ 1565.811180][T25796] FAULT_INJECTION: forcing a failure. [ 1565.811180][T25796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1565.844217][T25796] CPU: 0 UID: 0 PID: 25796 Comm: syz.2.5441 Not tainted syzkaller #0 PREEMPT(full) [ 1565.844251][T25796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1565.844265][T25796] Call Trace: [ 1565.844274][T25796] [ 1565.844283][T25796] dump_stack_lvl+0x189/0x250 [ 1565.844315][T25796] ? __pfx____ratelimit+0x10/0x10 [ 1565.844339][T25796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1565.844365][T25796] ? __pfx__printk+0x10/0x10 [ 1565.844398][T25796] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1565.844425][T25796] ? __might_fault+0xb0/0x130 [ 1565.844464][T25796] should_fail_ex+0x414/0x560 [ 1565.844502][T25796] _copy_from_user+0x2d/0xb0 [ 1565.844532][T25796] vmemdup_user+0x59/0xd0 [ 1565.844557][T25796] setxattr_copy+0x15b/0x1d0 [ 1565.844594][T25796] io_setxattr_prep+0x1f0/0x330 [ 1565.844630][T25796] io_submit_sqes+0x914/0x1d30 [ 1565.844697][T25796] __se_sys_io_uring_enter+0x2df/0x2b20 [ 1565.844752][T25796] ? ksys_write+0x1cb/0x250 [ 1565.844784][T25796] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1565.844815][T25796] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1565.844841][T25796] ? __pfx_vfs_write+0x10/0x10 [ 1565.844872][T25796] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1565.844902][T25796] ? __fget_files+0x3a0/0x420 [ 1565.844931][T25796] ? fput+0xa0/0xd0 [ 1565.844961][T25796] ? ksys_write+0x22a/0x250 [ 1565.845000][T25796] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 1565.845037][T25796] __do_fast_syscall_32+0xb6/0x2b0 [ 1565.845063][T25796] ? lockdep_hardirqs_on+0x9c/0x150 [ 1565.845110][T25796] do_fast_syscall_32+0x34/0x80 [ 1565.845137][T25796] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1565.845164][T25796] RIP: 0023:0xf7f17539 [ 1565.845183][T25796] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1565.845204][T25796] RSP: 002b:00000000f540655c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 1565.845227][T25796] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000047bc [ 1565.845243][T25796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1565.845256][T25796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1565.845269][T25796] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1565.845283][T25796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1565.845315][T25796] [ 1566.236943][T24510] hid-generic 0003:046D:C314.005A: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.5-1/input0 [ 1566.345667][T25805] FAULT_INJECTION: forcing a failure. [ 1566.345667][T25805] name failslab, interval 1, probability 0, space 0, times 0 [ 1566.378634][T25805] CPU: 1 UID: 0 PID: 25805 Comm: syz.1.5444 Not tainted syzkaller #0 PREEMPT(full) [ 1566.378665][T25805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1566.378680][T25805] Call Trace: [ 1566.378689][T25805] [ 1566.378698][T25805] dump_stack_lvl+0x189/0x250 [ 1566.378732][T25805] ? __pfx____ratelimit+0x10/0x10 [ 1566.378757][T25805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1566.378784][T25805] ? __pfx__printk+0x10/0x10 [ 1566.378822][T25805] ? __pfx___might_resched+0x10/0x10 [ 1566.378849][T25805] should_fail_ex+0x414/0x560 [ 1566.378900][T25805] should_failslab+0xa8/0x100 [ 1566.378942][T25805] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1566.378973][T25805] ? __alloc_skb+0x112/0x2d0 [ 1566.379003][T25805] __alloc_skb+0x112/0x2d0 [ 1566.379031][T25805] netlink_sendmsg+0x5c6/0xb30 [ 1566.379066][T25805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1566.379093][T25805] ? __import_iovec+0x5d4/0x7f0 [ 1566.379119][T25805] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1566.379142][T25805] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1566.379166][T25805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1566.379192][T25805] __sock_sendmsg+0x219/0x270 [ 1566.379229][T25805] ____sys_sendmsg+0x505/0x830 [ 1566.379262][T25805] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1566.379307][T25805] ___sys_sendmsg+0x21f/0x2a0 [ 1566.379336][T25805] ? __pfx____sys_sendmsg+0x10/0x10 [ 1566.379402][T25805] ? __fget_files+0x2a/0x420 [ 1566.379421][T25805] ? __fget_files+0x3a0/0x420 [ 1566.379450][T25805] __sys_sendmsg+0x164/0x220 [ 1566.379478][T25805] ? __pfx___sys_sendmsg+0x10/0x10 [ 1566.379521][T25805] ? lockdep_hardirqs_on+0x9c/0x150 [ 1566.379547][T25805] __do_fast_syscall_32+0xb6/0x2b0 [ 1566.379573][T25805] ? lockdep_hardirqs_on+0x9c/0x150 [ 1566.379601][T25805] do_fast_syscall_32+0x34/0x80 [ 1566.379626][T25805] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1566.379651][T25805] RIP: 0023:0xf7ff1539 [ 1566.379671][T25805] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1566.379690][T25805] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1566.379712][T25805] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1566.379727][T25805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1566.379739][T25805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1566.379752][T25805] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1566.379764][T25805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1566.379795][T25805] [ 1566.630997][ C1] vkms_vblank_simulate: vblank timer overrun [ 1567.189750][T24521] usb 6-1: USB disconnect, device number 39 [ 1567.283587][T25823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5447'. [ 1567.995317][T25831] fuse: Unknown parameter 'vdOCr) ^TԱր#5IkK}kq0x0000000000000008' [ 1569.239446][T24510] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1569.429443][T24510] usb 2-1: Using ep0 maxpacket: 16 [ 1569.435531][T24510] usb 2-1: no configurations [ 1569.440716][T24510] usb 2-1: can't read configurations, error -22 [ 1569.579534][T24510] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1569.729875][T24510] usb 2-1: Using ep0 maxpacket: 16 [ 1569.739980][T24510] usb 2-1: no configurations [ 1569.745750][T24510] usb 2-1: can't read configurations, error -22 [ 1569.764072][T24510] usb usb2-port1: attempt power cycle [ 1570.119767][T24510] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1570.160282][T24510] usb 2-1: Using ep0 maxpacket: 16 [ 1570.166013][T24510] usb 2-1: no configurations [ 1570.176035][T24510] usb 2-1: can't read configurations, error -22 [ 1570.319492][T24510] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1570.374728][T24510] usb 2-1: Using ep0 maxpacket: 16 [ 1570.390945][T24510] usb 2-1: no configurations [ 1570.409943][T24510] usb 2-1: can't read configurations, error -22 [ 1570.419906][T24510] usb usb2-port1: unable to enumerate USB device [ 1570.669858][T24503] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1570.906717][T24503] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1570.939469][T24503] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1571.022190][T24503] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1571.058409][T24503] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.104349][T25870] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1571.155364][T24503] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1573.519279][T25923] netlink: 'syz.1.5473': attribute type 6 has an invalid length. [ 1573.528245][T25923] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5473'. [ 1573.771910][T25922] macvlan5: entered promiscuous mode [ 1574.230969][T25934] FAULT_INJECTION: forcing a failure. [ 1574.230969][T25934] name failslab, interval 1, probability 0, space 0, times 0 [ 1574.254256][T24521] usb 4-1: USB disconnect, device number 4 [ 1574.287300][T25934] CPU: 1 UID: 0 PID: 25934 Comm: syz.1.5476 Not tainted syzkaller #0 PREEMPT(full) [ 1574.287321][T25934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1574.287331][T25934] Call Trace: [ 1574.287337][T25934] [ 1574.287344][T25934] dump_stack_lvl+0x189/0x250 [ 1574.287367][T25934] ? __pfx____ratelimit+0x10/0x10 [ 1574.287385][T25934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1574.287403][T25934] ? __pfx__printk+0x10/0x10 [ 1574.287429][T25934] ? __pfx___might_resched+0x10/0x10 [ 1574.287447][T25934] should_fail_ex+0x414/0x560 [ 1574.287474][T25934] should_failslab+0xa8/0x100 [ 1574.287498][T25934] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1574.287521][T25934] ? __alloc_skb+0x112/0x2d0 [ 1574.287537][T25934] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1574.287557][T25934] __alloc_skb+0x112/0x2d0 [ 1574.287577][T25934] netlink_dump+0x1b7/0xe90 [ 1574.287597][T25934] ? __netlink_lookup+0xbd/0x810 [ 1574.287617][T25934] ? __pfx_netlink_dump+0x10/0x10 [ 1574.287630][T25934] ? __netlink_lookup+0x752/0x810 [ 1574.287659][T25934] ? netlink_lookup+0x30/0x200 [ 1574.287674][T25934] ? netlink_lookup+0x30/0x200 [ 1574.287687][T25934] ? netlink_lookup+0x30/0x200 [ 1574.287706][T25934] __netlink_dump_start+0x5cb/0x7e0 [ 1574.287727][T25934] unix_diag_handler_dump+0x199/0x920 [ 1574.287756][T25934] ? __pfx_unix_diag_handler_dump+0x10/0x10 [ 1574.287774][T25934] ? __pfx_unix_diag_dump+0x10/0x10 [ 1574.287794][T25934] ? sock_diag_lock_handler+0x19/0x290 [ 1574.287809][T25934] ? sock_diag_lock_handler+0x19/0x290 [ 1574.287828][T25934] sock_diag_rcv_msg+0x4c9/0x600 [ 1574.287846][T25934] netlink_rcv_skb+0x205/0x470 [ 1574.287863][T25934] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1574.287879][T25934] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1574.287904][T25934] ? netlink_deliver_tap+0x2e/0x1b0 [ 1574.287926][T25934] netlink_unicast+0x82f/0x9e0 [ 1574.287956][T25934] ? __pfx_netlink_unicast+0x10/0x10 [ 1574.287982][T25934] ? netlink_sendmsg+0x642/0xb30 [ 1574.287997][T25934] ? skb_put+0x11b/0x210 [ 1574.288024][T25934] netlink_sendmsg+0x805/0xb30 [ 1574.288048][T25934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1574.288067][T25934] ? __import_iovec+0x5d4/0x7f0 [ 1574.288085][T25934] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1574.288103][T25934] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1574.288120][T25934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1574.288137][T25934] __sock_sendmsg+0x219/0x270 [ 1574.288163][T25934] ____sys_sendmsg+0x505/0x830 [ 1574.288187][T25934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1574.288218][T25934] ___sys_sendmsg+0x21f/0x2a0 [ 1574.288239][T25934] ? __pfx____sys_sendmsg+0x10/0x10 [ 1574.288285][T25934] ? __fget_files+0x2a/0x420 [ 1574.288298][T25934] ? __fget_files+0x3a0/0x420 [ 1574.288319][T25934] __sys_sendmsg+0x164/0x220 [ 1574.288340][T25934] ? __pfx___sys_sendmsg+0x10/0x10 [ 1574.288372][T25934] ? lockdep_hardirqs_on+0x9c/0x150 [ 1574.288390][T25934] __do_fast_syscall_32+0xb6/0x2b0 [ 1574.288409][T25934] ? lockdep_hardirqs_on+0x9c/0x150 [ 1574.288428][T25934] do_fast_syscall_32+0x34/0x80 [ 1574.288446][T25934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1574.288464][T25934] RIP: 0023:0xf7ff1539 [ 1574.288477][T25934] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1574.288491][T25934] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1574.288508][T25934] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800002c0 [ 1574.288518][T25934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1574.288527][T25934] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1574.288536][T25934] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1574.288545][T25934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1574.288566][T25934] [ 1574.657300][ C1] vkms_vblank_simulate: vblank timer overrun [ 1575.637534][T25960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5483'. [ 1575.637563][T25960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5483'. [ 1576.562476][T25969] tipc: Can't bind to reserved service type 1 [ 1576.866264][T25975] netlink: 'syz.1.5488': attribute type 46 has an invalid length. [ 1576.866295][T25975] netlink: 212868 bytes leftover after parsing attributes in process `syz.1.5488'. [ 1577.387563][T25985] syz_tun: entered allmulticast mode [ 1577.435208][T25984] syz_tun: left allmulticast mode [ 1578.754794][T26017] netlink: 87 bytes leftover after parsing attributes in process `syz.2.5501'. [ 1578.766543][T24529] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1578.847557][T26020] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.5502'. [ 1579.076184][T24529] usb 4-1: config index 0 descriptor too short (expected 797, got 739) [ 1579.106683][T24529] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 1579.152403][T24529] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.176496][T24529] usb 4-1: config 0 has no interface number 0 [ 1579.192719][T26031] fuse: Bad value for 'group_id' [ 1579.204030][T26031] fuse: Bad value for 'group_id' [ 1579.209289][T24529] usb 4-1: config 0 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1579.241211][T24529] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1579.268577][T24529] usb 4-1: config 0 interface 16 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1579.282277][T24529] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= 2.10 [ 1579.294827][T24529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.305584][T24529] usb 4-1: config 0 descriptor?? [ 1579.365725][T26034] netlink: 'syz.5.5507': attribute type 46 has an invalid length. [ 1579.373951][T26034] netlink: 212868 bytes leftover after parsing attributes in process `syz.5.5507'. [ 1579.524586][T24529] (null): keene_cmd_main failed (-71) [ 1579.544110][T24529] video4linux radio48: keene_cmd_main failed (-71) [ 1579.551670][T24529] radio-keene 4-1:0.16: V4L2 device registered as radio48 [ 1579.570697][T24529] usb 4-1: USB disconnect, device number 5 [ 1579.808988][T26037] FAULT_INJECTION: forcing a failure. [ 1579.808988][T26037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1579.822617][T26037] CPU: 0 UID: 0 PID: 26037 Comm: syz.1.5509 Not tainted syzkaller #0 PREEMPT(full) [ 1579.822646][T26037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1579.822660][T26037] Call Trace: [ 1579.822669][T26037] [ 1579.822691][T26037] dump_stack_lvl+0x189/0x250 [ 1579.822720][T26037] ? __pfx____ratelimit+0x10/0x10 [ 1579.822743][T26037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1579.822767][T26037] ? __pfx__printk+0x10/0x10 [ 1579.822796][T26037] ? __might_fault+0xb0/0x130 [ 1579.822835][T26037] should_fail_ex+0x414/0x560 [ 1579.822896][T26037] _copy_from_user+0x2d/0xb0 [ 1579.822926][T26037] kvm_arch_vcpu_ioctl+0x91f/0x2a80 [ 1579.822959][T26037] ? __lock_acquire+0xab9/0xd20 [ 1579.823000][T26037] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1579.823046][T26037] ? __lock_acquire+0xab9/0xd20 [ 1579.823091][T26037] ? __lock_acquire+0xab9/0xd20 [ 1579.823144][T26037] ? is_bpf_text_address+0x26/0x2b0 [ 1579.823182][T26037] ? is_bpf_text_address+0x292/0x2b0 [ 1579.823212][T26037] ? is_bpf_text_address+0x26/0x2b0 [ 1579.823253][T26037] ? unwind_get_return_address+0x4d/0x90 [ 1579.823278][T26037] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1579.823304][T26037] ? arch_stack_walk+0xfc/0x150 [ 1579.823349][T26037] ? __lock_acquire+0xab9/0xd20 [ 1579.823389][T26037] ? __mutex_trylock_common+0x153/0x260 [ 1579.823416][T26037] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1579.823438][T26037] ? security_file_ioctl_compat+0xcb/0x2d0 [ 1579.823468][T26037] ? __do_fast_syscall_32+0xb6/0x2b0 [ 1579.823497][T26037] ? rcu_is_watching+0x15/0xb0 [ 1579.823519][T26037] ? trace_contention_end+0x39/0x120 [ 1579.823555][T26037] ? __mutex_lock+0x335/0x1350 [ 1579.823592][T26037] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 1579.823621][T26037] ? __pfx___mutex_lock+0x10/0x10 [ 1579.823651][T26037] ? kasan_quarantine_put+0xdd/0x220 [ 1579.823688][T26037] kvm_vcpu_ioctl+0x74d/0xe90 [ 1579.823720][T26037] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1579.823743][T26037] ? do_vfs_ioctl+0xbe8/0x1430 [ 1579.823771][T26037] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1579.823810][T26037] ? __lock_acquire+0xab9/0xd20 [ 1579.823858][T26037] kvm_vcpu_compat_ioctl+0x203/0x390 [ 1579.823896][T26037] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1579.823923][T26037] ? __fget_files+0x3a0/0x420 [ 1579.823940][T26037] ? __fget_files+0x2a/0x420 [ 1579.823962][T26037] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1579.823992][T26037] __ia32_compat_sys_ioctl+0x540/0x840 [ 1579.824021][T26037] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1579.824047][T26037] ? __fget_files+0x3a0/0x420 [ 1579.824072][T26037] ? fput+0xa0/0xd0 [ 1579.824094][T26037] ? ksys_write+0x22a/0x250 [ 1579.824130][T26037] ? lockdep_hardirqs_on+0x9c/0x150 [ 1579.824155][T26037] __do_fast_syscall_32+0xb6/0x2b0 [ 1579.824180][T26037] ? lockdep_hardirqs_on+0x9c/0x150 [ 1579.824205][T26037] do_fast_syscall_32+0x34/0x80 [ 1579.824228][T26037] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1579.824253][T26037] RIP: 0023:0xf7ff1539 [ 1579.824270][T26037] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1579.824288][T26037] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1579.824309][T26037] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004040aea0 [ 1579.824322][T26037] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1579.824334][T26037] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1579.824346][T26037] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1579.824357][T26037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1579.824386][T26037] [ 1580.274325][T26044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.348891][T26044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1580.500303][T24517] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1580.555051][T26059] gretap1: entered promiscuous mode [ 1580.574614][T26058] loop4: detected capacity change from 0 to 7 [ 1580.639663][T24517] usb 1-1: device descriptor read/64, error -71 [ 1580.647559][T26057] hsr0: entered promiscuous mode [ 1580.656566][T26057] macsec1: entered allmulticast mode [ 1580.667754][T26058] Dev loop4: unable to read RDB block 7 [ 1580.692498][T26058] loop4: unable to read partition table [ 1580.722829][T26057] hsr0: entered allmulticast mode [ 1580.753605][T26057] hsr_slave_0: entered allmulticast mode [ 1580.759324][T26057] hsr_slave_1: entered allmulticast mode [ 1580.767382][T26058] loop4: partition table beyond EOD, truncated [ 1580.793603][T26058] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1580.889451][T24517] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 1581.160189][T24517] usb 1-1: device descriptor read/64, error -71 [ 1581.313588][T24517] usb usb1-port1: attempt power cycle [ 1581.739480][T24517] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1581.770306][T24517] usb 1-1: device descriptor read/8, error -71 [ 1582.089501][T24517] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1582.115441][T24517] usb 1-1: device descriptor read/8, error -71 [ 1582.229714][T24517] usb usb1-port1: unable to enumerate USB device [ 1582.679971][T24503] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1582.849515][T24503] usb 2-1: Using ep0 maxpacket: 32 [ 1582.856785][T24503] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 1582.868797][T24503] usb 2-1: config 0 has no interface number 0 [ 1582.899834][T24503] usb 2-1: config 0 interface 156 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1582.919174][T24503] usb 2-1: config 0 interface 156 has no altsetting 0 [ 1582.963150][T24503] usb 2-1: New USB device found, idVendor=2040, idProduct=6500, bcdDevice=1c.9d [ 1582.976812][T24503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.989713][T24503] usb 2-1: Product: syz [ 1582.994088][T24503] usb 2-1: Manufacturer: syz [ 1583.002314][T24503] usb 2-1: SerialNumber: syz [ 1583.017030][T24503] usb 2-1: config 0 descriptor?? [ 1583.071494][T24517] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1583.079286][T24521] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1583.242176][T24521] usb 6-1: config index 0 descriptor too short (expected 797, got 739) [ 1583.253744][T24517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1583.270272][T26082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1583.286409][T24521] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 1583.296068][T24517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1583.300459][T26082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1583.316762][T24521] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.329899][T24517] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1583.348932][T24521] usb 6-1: config 0 has no interface number 0 [ 1583.366743][T24517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.375414][T24521] usb 6-1: config 0 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1583.429095][T24517] usb 4-1: config 0 descriptor?? [ 1583.434259][T24521] usb 6-1: config 0 interface 16 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1583.450068][T24521] usb 6-1: config 0 interface 16 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1583.464300][T24502] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1583.478970][T24521] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= 2.10 [ 1583.491557][T24521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.513438][T24521] usb 6-1: config 0 descriptor?? [ 1583.650195][T24502] usb 1-1: Using ep0 maxpacket: 32 [ 1583.657497][T24502] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.673418][T24502] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1583.687481][T24502] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1583.701166][T24502] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.709328][T24502] usb 1-1: Product: syz [ 1583.717799][T24502] usb 1-1: Manufacturer: syz [ 1583.725329][T24502] usb 1-1: SerialNumber: syz [ 1583.749276][T24521] (null): keene_cmd_main failed (-71) [ 1583.776776][T24521] video4linux radio48: keene_cmd_main failed (-71) [ 1583.804422][T24521] radio-keene 6-1:0.16: V4L2 device registered as radio48 [ 1583.817139][T24521] usb 6-1: USB disconnect, device number 40 [ 1584.013653][T26097] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5527'. [ 1584.096939][T24517] kone 0003:1E7D:2CED.005B: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 1584.180195][T24502] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1584.278697][T24502] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1584.315100][T24502] usb 1-1: USB disconnect, device number 16 [ 1584.432308][T17108] udevd[17108]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1584.572659][T24521] usb 4-1: USB disconnect, device number 6 [ 1586.065712][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1586.065731][ T30] audit: type=1326 audit(1759023780.292:6400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26138 comm="syz.1.5537" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1586.107168][T24503] em28xx 2-1:0.156: New device syz syz @ 480 Mbps (2040:6500, interface 156, class 156) [ 1586.124024][T24503] em28xx 2-1:0.156: Video interface 156 found: isoc [ 1586.131485][ T30] audit: type=1326 audit(1759023780.292:6401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26138 comm="syz.1.5537" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1586.154972][ T30] audit: type=1326 audit(1759023780.292:6402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26138 comm="syz.1.5537" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1586.196678][ T30] audit: type=1326 audit(1759023780.292:6403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26138 comm="syz.1.5537" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1586.231286][T24503] em28xx 2-1:0.156: unknown em28xx chip ID (0) [ 1586.238895][ T30] audit: type=1326 audit(1759023780.302:6404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26138 comm="syz.1.5537" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1586.261155][ C1] vkms_vblank_simulate: vblank timer overrun [ 1586.269334][T26141] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5538'. [ 1586.285269][ T30] audit: type=1326 audit(1759023780.302:6405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26138 comm="syz.1.5537" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1586.329210][T24503] em28xx 2-1:0.156: reading from i2c device at 0xa0 failed (error=-5) [ 1586.349465][T24503] em28xx 2-1:0.156: board has no eeprom [ 1586.376700][ T30] audit: type=1326 audit(1759023780.302:6406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26138 comm="syz.1.5537" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1586.398819][ C1] vkms_vblank_simulate: vblank timer overrun [ 1586.432535][ T30] audit: type=1326 audit(1759023780.302:6407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26138 comm="syz.1.5537" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1586.458798][ T30] audit: type=1326 audit(1759023780.302:6408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26138 comm="syz.1.5537" exe="/root/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1586.480987][ C1] vkms_vblank_simulate: vblank timer overrun [ 1586.487387][T24503] em28xx 2-1:0.156: Identified as Hauppauge WinTV HVR 900 (card=10) [ 1586.495748][T24503] em28xx 2-1:0.156: analog set to isoc mode. [ 1586.506751][T24517] em28xx 2-1:0.156: Registering V4L2 extension [ 1586.523370][T24503] usb 2-1: USB disconnect, device number 27 [ 1586.556163][T24503] em28xx 2-1:0.156: Disconnecting em28xx [ 1586.615857][ T30] audit: type=1326 audit(1759023780.302:6409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26138 comm="syz.1.5537" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1587.140751][T24517] em28xx 2-1:0.156: Config register raw data: 0xffffffed [ 1587.168681][T24517] em28xx 2-1:0.156: AC97 chip type couldn't be determined [ 1587.185786][T24517] em28xx 2-1:0.156: No AC97 audio processor [ 1587.210489][T24517] em28xx 2-1:0.156: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 1587.223511][T24517] em28xx 2-1:0.156: Binding DVB extension [ 1587.232951][T24517] em28xx 2-1:0.156: no endpoint for DVB mode and transfer type 0 [ 1587.244338][T24517] em28xx 2-1:0.156: failed to pre-allocate USB transfer buffers for DVB. [ 1587.261548][T24517] em28xx 2-1:0.156: Registering input extension [ 1587.270228][T24503] em28xx 2-1:0.156: Closing input extension [ 1587.308670][T24503] em28xx 2-1:0.156: Freeing device [ 1587.468909][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.672239][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.484488][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.588235][T26187] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5550'. [ 1588.732263][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.192652][ T37] bridge_slave_1: left allmulticast mode [ 1589.240212][ T37] bridge_slave_1: left promiscuous mode [ 1589.268208][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.339110][ T37] bridge_slave_0: left allmulticast mode [ 1589.349496][ T37] bridge_slave_0: left promiscuous mode [ 1589.375747][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.678286][T26207] fuse: Bad value for 'group_id' [ 1589.725135][T26207] fuse: Bad value for 'group_id' [ 1590.238690][ T37] dvmrp1 (unregistering): left allmulticast mode [ 1590.337702][T26222] FAULT_INJECTION: forcing a failure. [ 1590.337702][T26222] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.351255][T26222] CPU: 1 UID: 0 PID: 26222 Comm: syz.1.5557 Not tainted syzkaller #0 PREEMPT(full) [ 1590.351284][T26222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1590.351297][T26222] Call Trace: [ 1590.351306][T26222] [ 1590.351316][T26222] dump_stack_lvl+0x189/0x250 [ 1590.351346][T26222] ? __pfx____ratelimit+0x10/0x10 [ 1590.351371][T26222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1590.351397][T26222] ? __pfx__printk+0x10/0x10 [ 1590.351452][T26222] ? __pfx___might_resched+0x10/0x10 [ 1590.351471][T26222] ? fs_reclaim_acquire+0x7d/0x100 [ 1590.351498][T26222] should_fail_ex+0x414/0x560 [ 1590.351538][T26222] should_failslab+0xa8/0x100 [ 1590.351573][T26222] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 1590.351603][T26222] ? __d_alloc+0x36/0x7a0 [ 1590.351632][T26222] __d_alloc+0x36/0x7a0 [ 1590.351662][T26222] d_alloc_pseudo+0x21/0xc0 [ 1590.351688][T26222] alloc_file_pseudo+0xcc/0x210 [ 1590.351716][T26222] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1590.351755][T26222] anon_inode_getfd+0xca/0x1b0 [ 1590.351783][T26222] map_create+0x10a2/0x14d0 [ 1590.351818][T26222] ? security_bpf+0x7e/0x300 [ 1590.351853][T26222] __sys_bpf+0x60f/0x870 [ 1590.351884][T26222] ? __pfx___sys_bpf+0x10/0x10 [ 1590.351929][T26222] ? ksys_write+0x22a/0x250 [ 1590.351972][T26222] __ia32_sys_bpf+0x7c/0x90 [ 1590.352007][T26222] __do_fast_syscall_32+0xb6/0x2b0 [ 1590.352035][T26222] ? lockdep_hardirqs_on+0x9c/0x150 [ 1590.352064][T26222] do_fast_syscall_32+0x34/0x80 [ 1590.352090][T26222] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1590.352116][T26222] RIP: 0023:0xf7ff1539 [ 1590.352137][T26222] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1590.352157][T26222] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1590.352180][T26222] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 1590.352195][T26222] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1590.352208][T26222] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1590.352220][T26222] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1590.352233][T26222] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1590.352265][T26222] [ 1590.356412][T26205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5554'. [ 1590.629728][T26209] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 1590.842896][T26231] netlink: 'syz.2.5560': attribute type 6 has an invalid length. [ 1590.921439][T26234] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5560'. [ 1591.334363][T26213] kthread_run failed with err -4 [ 1591.449739][T26237] syz_tun: entered allmulticast mode [ 1591.476685][T26232] syz_tun: left allmulticast mode [ 1591.723036][T26259] FAULT_INJECTION: forcing a failure. [ 1591.723036][T26259] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.776569][T26266] fuse: Bad value for 'group_id' [ 1591.788244][T26266] fuse: Bad value for 'group_id' [ 1591.807685][T26259] CPU: 1 UID: 0 PID: 26259 Comm: syz.0.5562 Not tainted syzkaller #0 PREEMPT(full) [ 1591.807721][T26259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1591.807735][T26259] Call Trace: [ 1591.807743][T26259] [ 1591.807752][T26259] dump_stack_lvl+0x189/0x250 [ 1591.807781][T26259] ? __pfx____ratelimit+0x10/0x10 [ 1591.807821][T26259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1591.807847][T26259] ? __pfx__printk+0x10/0x10 [ 1591.807879][T26259] ? __pfx___might_resched+0x10/0x10 [ 1591.807900][T26259] ? fs_reclaim_acquire+0x7d/0x100 [ 1591.807930][T26259] should_fail_ex+0x414/0x560 [ 1591.807966][T26259] should_failslab+0xa8/0x100 [ 1591.808001][T26259] __kmalloc_noprof+0xcb/0x4f0 [ 1591.808030][T26259] ? iovec_from_user+0x87/0x250 [ 1591.808063][T26259] iovec_from_user+0x87/0x250 [ 1591.808095][T26259] __import_iovec+0x163/0x7f0 [ 1591.808133][T26259] import_iovec+0x74/0xa0 [ 1591.808166][T26259] get_compat_msghdr+0x37e/0x4a0 [ 1591.808198][T26259] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1591.808225][T26259] ? rcu_is_watching+0x15/0xb0 [ 1591.808245][T26259] ? ___sys_recvmsg+0x1c4/0x510 [ 1591.808280][T26259] ___sys_recvmsg+0x17f/0x510 [ 1591.808314][T26259] ? __pfx____sys_recvmsg+0x10/0x10 [ 1591.808367][T26259] ? __fget_files+0x3a0/0x420 [ 1591.808398][T26259] do_recvmmsg+0x36a/0x770 [ 1591.808434][T26259] ? __pfx_do_recvmmsg+0x10/0x10 [ 1591.808474][T26259] ? __pfx_vfs_write+0x10/0x10 [ 1591.808519][T26259] __sys_recvmmsg+0x19d/0x280 [ 1591.808556][T26259] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1591.808582][T26259] ? ksys_write+0x22a/0x250 [ 1591.808620][T26259] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1591.808652][T26259] __do_fast_syscall_32+0xb6/0x2b0 [ 1591.808678][T26259] ? lockdep_hardirqs_on+0x9c/0x150 [ 1591.808706][T26259] do_fast_syscall_32+0x34/0x80 [ 1591.808738][T26259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1591.808764][T26259] RIP: 0023:0xf705e539 [ 1591.808782][T26259] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1591.808801][T26259] RSP: 002b:00000000f544e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1591.808823][T26259] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1591.808838][T26259] RDX: 0000000000000220 RSI: 0000000000000100 RDI: 0000000000000000 [ 1591.808851][T26259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1591.808864][T26259] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1591.808877][T26259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1591.808908][T26259] [ 1592.111269][T26268] netlink: 87 bytes leftover after parsing attributes in process `syz.1.5565'. [ 1592.189562][T24503] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1592.347909][T24503] usb 3-1: config index 0 descriptor too short (expected 797, got 739) [ 1592.356355][T24503] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 1592.375070][T24503] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1592.385722][ T37] hsr_slave_0: left promiscuous mode [ 1592.389596][T24503] usb 3-1: config 0 has no interface number 0 [ 1592.397364][ T37] hsr_slave_1: left promiscuous mode [ 1592.397776][T24503] usb 3-1: config 0 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1592.403959][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1592.423425][T24503] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1592.436296][T26278] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5568'. [ 1592.448837][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1592.457204][T24503] usb 3-1: config 0 interface 16 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1592.470544][T26283] FAULT_INJECTION: forcing a failure. [ 1592.470544][T26283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1592.470579][T26283] CPU: 0 UID: 0 PID: 26283 Comm: syz.1.5570 Not tainted syzkaller #0 PREEMPT(full) [ 1592.470604][T26283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1592.470618][T26283] Call Trace: [ 1592.470627][T26283] [ 1592.470636][T26283] dump_stack_lvl+0x189/0x250 [ 1592.470668][T26283] ? __pfx____ratelimit+0x10/0x10 [ 1592.470692][T26283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1592.470718][T26283] ? __pfx__printk+0x10/0x10 [ 1592.470748][T26283] ? __might_fault+0xb0/0x130 [ 1592.470790][T26283] should_fail_ex+0x414/0x560 [ 1592.470837][T26283] _copy_from_user+0x2d/0xb0 [ 1592.470867][T26283] __sys_sendto+0x25c/0x520 [ 1592.470896][T26283] ? __pfx___sys_sendto+0x10/0x10 [ 1592.470936][T26283] ? __might_fault+0xb0/0x130 [ 1592.470991][T26283] __ia32_compat_sys_socketcall+0x71c/0x9c0 [ 1592.471020][T26283] ? __fget_files+0x3a0/0x420 [ 1592.471045][T26283] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 1592.471075][T26283] ? fput+0xa0/0xd0 [ 1592.471098][T26283] ? ksys_write+0x22a/0x250 [ 1592.471137][T26283] ? lockdep_hardirqs_on+0x9c/0x150 [ 1592.471169][T26283] __do_fast_syscall_32+0xb6/0x2b0 [ 1592.471202][T26283] ? lockdep_hardirqs_on+0x9c/0x150 [ 1592.471235][T26283] do_fast_syscall_32+0x34/0x80 [ 1592.471267][T26283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1592.471296][T26283] RIP: 0023:0xf7ff1539 [ 1592.471319][T26283] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1592.471341][T26283] RSP: 002b:00000000f54e53f0 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 1592.471368][T26283] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54e5404 [ 1592.471386][T26283] RDX: 0000000000000000 RSI: 00000000f54e5550 RDI: 00000000f7485ff4 [ 1592.471403][T26283] RBP: 00000000f54e5550 R08: 0000000000000000 R09: 0000000000000000 [ 1592.471418][T26283] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1592.471434][T26283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1592.471469][T26283] [ 1592.494879][T26278] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 1592.564019][T24503] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= 2.10 [ 1592.581532][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1592.594536][T24503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.733342][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1592.760695][T24503] usb 3-1: config 0 descriptor?? [ 1592.782785][ T37] veth1_macvtap: left promiscuous mode [ 1592.788370][ T37] veth0_macvtap: left promiscuous mode [ 1592.799253][ T37] veth1_vlan: left promiscuous mode [ 1592.808061][ T37] veth0_vlan: left promiscuous mode [ 1592.813632][T24517] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1592.979128][T24503] (null): keene_cmd_main failed (-71) [ 1593.002665][T24503] video4linux radio48: keene_cmd_main failed (-71) [ 1593.009238][T24503] radio-keene 3-1:0.16: V4L2 device registered as radio48 [ 1593.032586][T24517] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1593.041829][T24521] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1593.055674][T24517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.080388][T24503] usb 3-1: USB disconnect, device number 10 [ 1593.092593][T24517] usb 1-1: config 0 descriptor?? [ 1593.145559][T24517] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1593.179543][T24509] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1593.230930][T24521] usb 2-1: Using ep0 maxpacket: 16 [ 1593.240793][T24521] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.253453][T24521] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1593.265678][T24521] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1593.284952][T24521] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.297098][T24521] usb 2-1: Product: syz [ 1593.303790][T24517] gspca_spca508: reg_read err -32 [ 1593.309034][T24521] usb 2-1: Manufacturer: syz [ 1593.315023][T24517] gspca_spca508: reg_read err -32 [ 1593.320267][T24521] usb 2-1: SerialNumber: syz [ 1593.329855][T24509] usb 4-1: Using ep0 maxpacket: 32 [ 1593.339300][T24521] usb 2-1: config 0 descriptor?? [ 1593.344495][T24509] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 1593.344522][T24509] usb 4-1: config 0 has no interface number 0 [ 1593.344566][T24509] usb 4-1: config 0 interface 156 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1593.374185][T24509] usb 4-1: config 0 interface 156 has no altsetting 0 [ 1593.400421][T24509] usb 4-1: New USB device found, idVendor=2040, idProduct=6500, bcdDevice=1c.9d [ 1593.417058][T24509] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.430738][T24509] usb 4-1: Product: syz [ 1593.434929][T24509] usb 4-1: Manufacturer: syz [ 1593.444052][T24509] usb 4-1: SerialNumber: syz [ 1593.467878][T24509] usb 4-1: config 0 descriptor?? [ 1593.744340][T26292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1593.768153][T26292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1593.831252][T24517] gspca_spca508: reg_read err -110 [ 1593.848428][T24517] gspca_spca508: reg_read err -32 [ 1593.872946][T24517] gspca_spca508: reg_read err -32 [ 1593.892138][T24517] gspca_spca508: reg write: error -32 [ 1593.897814][T24517] spca508 1-1:0.0: probe with driver spca508 failed with error -32 [ 1594.185212][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1594.248790][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1595.089144][T26273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5569'. [ 1595.693040][T24517] usb 1-1: USB disconnect, device number 17 [ 1595.779491][T24529] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1595.789612][T24521] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1595.834787][T24510] usb 2-1: USB disconnect, device number 28 [ 1595.939697][T24521] usb 6-1: Using ep0 maxpacket: 32 [ 1595.942876][T24529] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1595.945980][T24521] usb 6-1: too many configurations: 168, using maximum allowed: 8 [ 1595.962853][T24529] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1596.000032][T24529] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.021025][T24521] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1596.041560][T24521] usb 6-1: can't read configurations, error -61 [ 1596.050971][T24529] usb 3-1: config 0 descriptor?? [ 1596.189840][T24521] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1596.270729][T26337] fuse: Bad value for 'group_id' [ 1596.276084][T26337] fuse: Bad value for 'group_id' [ 1596.349645][T24521] usb 6-1: Using ep0 maxpacket: 32 [ 1596.361063][T24521] usb 6-1: too many configurations: 168, using maximum allowed: 8 [ 1596.387777][T24521] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1596.402944][T24521] usb 6-1: can't read configurations, error -61 [ 1596.420646][T24521] usb usb6-port1: attempt power cycle [ 1596.431643][T26338] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1596.478475][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1596.489223][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1596.507904][T24529] usbhid 3-1:0.0: can't add hid device: -71 [ 1596.520921][T24529] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1596.540000][T24520] ------------[ cut here ]------------ [ 1596.543407][T24529] usb 3-1: USB disconnect, device number 11 [ 1596.546075][T24520] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1596.562930][T24520] WARNING: CPU: 1 PID: 24520 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 1596.573092][T24520] Modules linked in: [ 1596.577530][T24520] CPU: 1 UID: 0 PID: 24520 Comm: kworker/1:14 Not tainted syzkaller #0 PREEMPT(full) [ 1596.587138][T24520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1596.597277][T24520] Workqueue: mld mld_ifc_work [ 1596.602071][T24520] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 1596.608356][T24520] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 40 92 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 92 63 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 1596.628038][T24520] RSP: 0018:ffffc9000c1c64d8 EFLAGS: 00010246 [ 1596.634189][T24520] RAX: 3d8f9c5fd8a7db00 RBX: 000000000000000c RCX: ffff88802ecc9e00 [ 1596.642262][T24520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1596.650304][T24520] RBP: dffffc0000000000 R08: ffffc9000c1c6207 R09: 1ffff92001838c40 [ 1596.658341][T24520] R10: dffffc0000000000 R11: fffff52001838c41 R12: ffff888063073ca8 [ 1596.666399][T24520] R13: 0000000000000000 R14: ffff88805ea28e40 R15: ffff88805ea2b0d8 [ 1596.674436][T24520] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 1596.683439][T24520] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1596.690274][T24520] CR2: 000055f6be892008 CR3: 000000000df36000 CR4: 00000000003526f0 [ 1596.698287][T24520] Call Trace: [ 1596.701652][T24520] [ 1596.704647][T24520] rate_control_send_low+0x194/0x7a0 [ 1596.710005][T24520] rate_control_get_rate+0x20b/0x5d0 [ 1596.715339][T24520] ieee80211_tx_h_rate_ctrl+0xb32/0x1780 [ 1596.721151][T24520] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1596.727296][T24520] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 1596.733603][T24520] invoke_tx_handlers_late+0xb6/0x1820 [ 1596.739208][T24520] ? ieee80211_tx_h_select_key+0xd1b/0x19f0 [ 1596.745196][T24520] ieee80211_tx_dequeue+0x308e/0x4360 [ 1596.750745][T24520] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 1596.753041][T26344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5580'. [ 1596.756603][T24520] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1596.756675][T24520] ieee80211_handle_wake_tx_queue+0x125/0x2a0 [ 1596.777084][T24520] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 1596.783745][T24520] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1596.789136][T24520] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1596.794952][T24520] ? do_raw_spin_unlock+0x122/0x240 [ 1596.800224][T24520] ieee80211_queue_skb+0x1a2e/0x21c0 [ 1596.805571][T24520] ieee80211_tx+0x297/0x420 [ 1596.810143][T24520] ? __pfx_ieee80211_tx+0x10/0x10 [ 1596.815237][T24520] ? ieee80211_xmit+0x315/0x400 [ 1596.820153][T24520] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 1596.826154][T24520] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 1596.832386][T24520] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 1596.838843][T24520] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 1596.845170][T24520] ieee80211_subif_start_xmit+0xe0/0x510 [ 1596.850885][T24520] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 1596.857171][T24520] ? __pfx_netif_skb_features+0x10/0x10 [ 1596.862787][T24520] ? call_rcu+0x6ff/0x9c0 [ 1596.867146][T24520] ? __lock_acquire+0xab9/0xd20 [ 1596.872111][T24520] dev_hard_start_xmit+0x2d7/0x830 [ 1596.877302][T24520] __dev_queue_xmit+0x1b8d/0x3b50 [ 1596.882376][T24520] ? register_lock_class+0x51/0x320 [ 1596.887620][T24520] ? __dev_queue_xmit+0x27b/0x3b50 [ 1596.892810][T24520] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1596.898207][T24520] ? read_seqbegin+0x122/0x250 [ 1596.903024][T24520] ? neigh_resolve_output+0x438/0x750 [ 1596.908424][T24520] ? lockdep_hardirqs_on+0x9c/0x150 [ 1596.913679][T24520] ? read_seqbegin+0x1ac/0x250 [ 1596.918470][T24520] ? __pfx_read_seqbegin+0x10/0x10 [ 1596.923627][T24520] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1596.929020][T24520] ? eth_header+0x11b/0x200 [ 1596.933606][T24520] ? __asan_memcpy+0x40/0x70 [ 1596.938266][T24520] ip6_finish_output2+0x11fe/0x16a0 [ 1596.943532][T24520] ? ip6_finish_output2+0x701/0x16a0 [ 1596.948855][T24520] ? ip6_mtu+0x7d/0x3f0 [ 1596.953082][T24520] ? __pfx_ip6_finish_output2+0x10/0x10 [ 1596.958661][T24520] ? ip6_mtu+0x7d/0x3f0 [ 1596.962864][T24520] ? ip6_mtu+0x321/0x3f0 [ 1596.967153][T24520] ? ip6_finish_output+0x2ef/0x4e0 [ 1596.972357][T24520] NF_HOOK+0x9e/0x380 [ 1596.976368][T24520] ? __pfx_NF_HOOK+0x10/0x10 [ 1596.981020][T24520] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 1596.986854][T24520] ? do_raw_spin_unlock+0x122/0x240 [ 1596.992112][T24520] ? icmp6_dst_alloc+0x3a5/0x420 [ 1596.997120][T24520] ? icmp6_dst_alloc+0x3a5/0x420 [ 1597.002113][T24520] mld_sendpack+0x800/0xd80 [ 1597.006677][T24520] ? mld_sendpack+0x1de/0xd80 [ 1597.011417][T24520] ? __pfx_mld_sendpack+0x10/0x10 [ 1597.016482][T24520] mld_ifc_work+0x83e/0xd60 [ 1597.021064][T24520] ? _raw_spin_unlock_irq+0x23/0x50 [ 1597.026292][T24520] ? process_scheduled_works+0x9ef/0x17b0 [ 1597.032052][T24520] process_scheduled_works+0xade/0x17b0 [ 1597.037656][T24520] ? __pfx_process_scheduled_works+0x10/0x10 [ 1597.043703][T24520] worker_thread+0x8a0/0xda0 [ 1597.048355][T24520] kthread+0x711/0x8a0 [ 1597.052488][T24520] ? __pfx_worker_thread+0x10/0x10 [ 1597.057622][T24520] ? __pfx_kthread+0x10/0x10 [ 1597.062267][T24520] ? _raw_spin_unlock_irq+0x23/0x50 [ 1597.067493][T24520] ? lockdep_hardirqs_on+0x9c/0x150 [ 1597.072739][T24520] ? __pfx_kthread+0x10/0x10 [ 1597.077365][T24520] ret_from_fork+0x439/0x7d0 [ 1597.082008][T24520] ? __pfx_ret_from_fork+0x10/0x10 [ 1597.087136][T24520] ? __switch_to_asm+0x39/0x70 [ 1597.091955][T24520] ? __switch_to_asm+0x33/0x70 [ 1597.096749][T24520] ? __pfx_kthread+0x10/0x10 [ 1597.101397][T24520] ret_from_fork_asm+0x1a/0x30 [ 1597.106217][T24520] [ 1597.109261][T24520] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1597.116564][T24520] CPU: 1 UID: 0 PID: 24520 Comm: kworker/1:14 Not tainted syzkaller #0 PREEMPT(full) [ 1597.126123][T24520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1597.136199][T24520] Workqueue: mld mld_ifc_work [ 1597.140946][T24520] Call Trace: [ 1597.144247][T24520] [ 1597.147188][T24520] dump_stack_lvl+0x99/0x250 [ 1597.151802][T24520] ? __asan_memcpy+0x40/0x70 [ 1597.156415][T24520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1597.161631][T24520] ? __pfx__printk+0x10/0x10 [ 1597.166262][T24520] vpanic+0x281/0x750 [ 1597.170286][T24520] ? __pfx__printk+0x10/0x10 [ 1597.174893][T24520] ? __pfx_vpanic+0x10/0x10 [ 1597.179426][T24520] ? is_bpf_text_address+0x292/0x2b0 [ 1597.184765][T24520] panic+0xb9/0xc0 [ 1597.188517][T24520] ? __pfx_panic+0x10/0x10 [ 1597.192980][T24520] __warn+0x31b/0x4b0 [ 1597.196990][T24520] ? __rate_control_send_low+0x5df/0x820 [ 1597.202649][T24520] ? __rate_control_send_low+0x5df/0x820 [ 1597.208312][T24520] report_bug+0x2be/0x4f0 [ 1597.212663][T24520] ? __rate_control_send_low+0x5df/0x820 [ 1597.218321][T24520] ? __rate_control_send_low+0x5df/0x820 [ 1597.223985][T24520] ? __rate_control_send_low+0x5e1/0x820 [ 1597.229649][T24520] handle_bug+0x84/0x160 [ 1597.233929][T24520] exc_invalid_op+0x1a/0x50 [ 1597.238563][T24520] asm_exc_invalid_op+0x1a/0x20 [ 1597.243456][T24520] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 1597.249719][T24520] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 40 92 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 92 63 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 1597.269356][T24520] RSP: 0018:ffffc9000c1c64d8 EFLAGS: 00010246 [ 1597.275452][T24520] RAX: 3d8f9c5fd8a7db00 RBX: 000000000000000c RCX: ffff88802ecc9e00 [ 1597.283442][T24520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1597.291445][T24520] RBP: dffffc0000000000 R08: ffffc9000c1c6207 R09: 1ffff92001838c40 [ 1597.299433][T24520] R10: dffffc0000000000 R11: fffff52001838c41 R12: ffff888063073ca8 [ 1597.307459][T24520] R13: 0000000000000000 R14: ffff88805ea28e40 R15: ffff88805ea2b0d8 [ 1597.315488][T24520] ? __rate_control_send_low+0x5de/0x820 [ 1597.321163][T24520] rate_control_send_low+0x194/0x7a0 [ 1597.326496][T24520] rate_control_get_rate+0x20b/0x5d0 [ 1597.331827][T24520] ieee80211_tx_h_rate_ctrl+0xb32/0x1780 [ 1597.337510][T24520] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1597.343628][T24520] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 1597.349891][T24520] invoke_tx_handlers_late+0xb6/0x1820 [ 1597.355396][T24520] ? ieee80211_tx_h_select_key+0xd1b/0x19f0 [ 1597.361361][T24520] ieee80211_tx_dequeue+0x308e/0x4360 [ 1597.366804][T24520] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 1597.372553][T24520] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1597.377969][T24520] ieee80211_handle_wake_tx_queue+0x125/0x2a0 [ 1597.384075][T24520] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 1597.390669][T24520] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1597.396055][T24520] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1597.401806][T24520] ? do_raw_spin_unlock+0x122/0x240 [ 1597.407023][T24520] ieee80211_queue_skb+0x1a2e/0x21c0 [ 1597.412356][T24520] ieee80211_tx+0x297/0x420 [ 1597.416891][T24520] ? __pfx_ieee80211_tx+0x10/0x10 [ 1597.421979][T24520] ? ieee80211_xmit+0x315/0x400 [ 1597.426850][T24520] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 1597.432862][T24520] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 1597.439057][T24520] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 1597.445500][T24520] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 1597.451769][T24520] ieee80211_subif_start_xmit+0xe0/0x510 [ 1597.457448][T24520] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 1597.463714][T24520] ? __pfx_netif_skb_features+0x10/0x10 [ 1597.469277][T24520] ? call_rcu+0x6ff/0x9c0 [ 1597.473635][T24520] ? __lock_acquire+0xab9/0xd20 [ 1597.478693][T24520] dev_hard_start_xmit+0x2d7/0x830 [ 1597.483871][T24520] __dev_queue_xmit+0x1b8d/0x3b50 [ 1597.488935][T24520] ? register_lock_class+0x51/0x320 [ 1597.494157][T24520] ? __dev_queue_xmit+0x27b/0x3b50 [ 1597.499327][T24520] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1597.504739][T24520] ? read_seqbegin+0x122/0x250 [ 1597.509524][T24520] ? neigh_resolve_output+0x438/0x750 [ 1597.514917][T24520] ? lockdep_hardirqs_on+0x9c/0x150 [ 1597.520157][T24520] ? read_seqbegin+0x1ac/0x250 [ 1597.524961][T24520] ? __pfx_read_seqbegin+0x10/0x10 [ 1597.530085][T24520] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1597.535481][T24520] ? eth_header+0x11b/0x200 [ 1597.540003][T24520] ? __asan_memcpy+0x40/0x70 [ 1597.544619][T24520] ip6_finish_output2+0x11fe/0x16a0 [ 1597.549853][T24520] ? ip6_finish_output2+0x701/0x16a0 [ 1597.555166][T24520] ? ip6_mtu+0x7d/0x3f0 [ 1597.559365][T24520] ? __pfx_ip6_finish_output2+0x10/0x10 [ 1597.564926][T24520] ? ip6_mtu+0x7d/0x3f0 [ 1597.569108][T24520] ? ip6_mtu+0x321/0x3f0 [ 1597.573374][T24520] ? ip6_finish_output+0x2ef/0x4e0 [ 1597.578520][T24520] NF_HOOK+0x9e/0x380 [ 1597.582517][T24520] ? __pfx_NF_HOOK+0x10/0x10 [ 1597.587130][T24520] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 1597.592959][T24520] ? do_raw_spin_unlock+0x122/0x240 [ 1597.598185][T24520] ? icmp6_dst_alloc+0x3a5/0x420 [ 1597.603146][T24520] ? icmp6_dst_alloc+0x3a5/0x420 [ 1597.608119][T24520] mld_sendpack+0x800/0xd80 [ 1597.612659][T24520] ? mld_sendpack+0x1de/0xd80 [ 1597.617353][T24520] ? __pfx_mld_sendpack+0x10/0x10 [ 1597.622415][T24520] mld_ifc_work+0x83e/0xd60 [ 1597.626942][T24520] ? _raw_spin_unlock_irq+0x23/0x50 [ 1597.632161][T24520] ? process_scheduled_works+0x9ef/0x17b0 [ 1597.637935][T24520] process_scheduled_works+0xade/0x17b0 [ 1597.643518][T24520] ? __pfx_process_scheduled_works+0x10/0x10 [ 1597.649529][T24520] worker_thread+0x8a0/0xda0 [ 1597.654170][T24520] kthread+0x711/0x8a0 [ 1597.658272][T24520] ? __pfx_worker_thread+0x10/0x10 [ 1597.663398][T24520] ? __pfx_kthread+0x10/0x10 [ 1597.668008][T24520] ? _raw_spin_unlock_irq+0x23/0x50 [ 1597.673213][T24520] ? lockdep_hardirqs_on+0x9c/0x150 [ 1597.678433][T24520] ? __pfx_kthread+0x10/0x10 [ 1597.683041][T24520] ret_from_fork+0x439/0x7d0 [ 1597.687641][T24520] ? __pfx_ret_from_fork+0x10/0x10 [ 1597.693133][T24520] ? __switch_to_asm+0x39/0x70 [ 1597.697909][T24520] ? __switch_to_asm+0x33/0x70 [ 1597.702693][T24520] ? __pfx_kthread+0x10/0x10 [ 1597.707330][T24520] ret_from_fork_asm+0x1a/0x30 [ 1597.712161][T24520] [ 1597.715508][T24520] Kernel Offset: disabled [ 1597.719837][T24520] Rebooting in 86400 seconds..