last executing test programs: 2m21.275056131s ago: executing program 4 (id=500): futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 2m20.633334776s ago: executing program 4 (id=504): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000280)={0x9, 0x9, 0xfffe, 0x80, 0xf, "bc949f860697f1a5e5010000002106001da040"}) write$UHID_INPUT(r1, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006) pipe(&(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f00000010c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(&(0x7f00000000c0)=[{r5, 0xe7d4c009da6c1985}], 0x1, 0x6) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="3d00000000000000000065531ebe454cad3a0b733e1d16873fec124ad225d543d59b0f27ef152dfd8ee4f947df0c834b8e9313e3394fabcc08e95897545f725f89d1a1e2aff88ce4c2b061ea5872c5642fb7e9c34ce4617ae48740de1bce9d634d43e55e39500f1865b459d37b417883", @ANYBLOB="449ef757473c9dd4569f2baf831ec49d255a6712065c341b84f95756578009eabebf5cfcc924976d34d7f1768a872dc701ead61063b6c417d397bb8b11b2a53d14bf221626862324ee3e1719d862cd9486a4d090f029eed3d116562e70c72ebd888e9d9300621ce9c1066856c1fa0ce24a02e5e5f16fec34a63b439b1dcaf44f2a08f64f1399652e8958630700115a5ece9e7f02032644401760674f23ffa6cfa9dc8663210945d50bacac0895692e842039844a40fb4fba859d91f95adb82264ad4209b979d9c2a57e5a125a99320e4d864d517fe0898ecfba613bff6dafd54782c6812d4b4e71100e1c6500d1a3456dabf679dee1a13a6003d721ce59dd5b24404a8312f1910a3d25c3de8c98872e5dbc1046fd888972465751540ffe3409222952fe78c7fc4a7e68a3e372e55b55324d3598ddd5fb68d024e7eb0eb5e5d04aeb7e03f768d3cb4134be91e7d1a351fa5607c674453eb96d20e03eb48465e7168fc187ef5c05a4ee62babae65938d68c9bff5563069ed8a759a53490192ad557f4eac35ec3fbc32ef56e8f15f5edd3459818835ba504c532f52e270fef6becccae03c7c2c8e64b9ed4381f4465184b5baefb7c8d1103c2ccf454a27a8f61d795887fe7f9ddb44c4cdeaf0aedf8971e2d41b52544508ea6f0dc45fc146c15cb1d3611e587c5227563148534dca69191a6a006c54241e860de644b76160350a4a84d84d4b9735fa1f2a4ccb0530c8d7255d100c9289c66e701632e50e8aac386a72c084b4d0c3e009eacaa5cc2ac32f25f39d79b6276b9b924449d7821d8c8f05623d390de6b1dbf7058686521d9d5a2b54866e38f947a50a5ab1f214123bda7abd9db7c3a4e2284135fdbe86090de484cbcf0f1edb29dcdf473e82032f6f7e4c2825bcbf7ac8d622616710ded02e5aae40555e0fecb15690c9abe1f9a4049cf1f37c97aebbde743a92476bbbd3cb8a45719a712ca61b6136cf4472f2bb740e0d445782b72aedfafe32389b0c22b4d9677b3d6cefee8910ea0011860d79d4d89bebcb6b66edaa3774c770cc60d3a1202a4f5363217fc0923eb79997764d7039c3f7f0638d5e6af492b9934c4cca8fba2b8408228e47e7f07fbdbb4526e1b3ef22f97eaca32f25f1c655b8578fa2ab9110ce48d783bd68afdcb0fd899ca72717a8525cb04d6b0e7c9b730b9ae59c51e26ac5cadb2728fa58dc3578a26cf0f2509e2ffdb79e520aea7866979abc9d8521b63bc10c904c3b078db74a3ebe694aa00719fab79b9ea0d0c3698675b059e4c3a32081b29a1f3055d871e017fc3d2e3208662095d49d28656adcb2c95f14d92342526fe4dc02a67547499532b401313cf342891966ed006948627bf2d88649ddd7cc39aeb32018786f9985819c9fd00a58b52873582fabbbff40e802e56c5708321c730026b639fe67c6aae1ca56926dea0b8bcf90b0e47a8082388eddc8d226f3b2afb8349e9b96c3d803baf443e80912b28287bf698babbe69ad6a25af5296c43d4cd3f1ac1995fe8ab4799d51fe5d6471eda153d5e4bfe124034b5406c04281a8beb0d56bf21b63e02a6cfb1aa79c67421316725d22198228007ed335c818aeae3c8f4064c17a01aa4ca62568d5f09476bf75dc542d45f1585c176881996f94a592b1df073932150c4108923ce8ea26e0598e994bfa285a5ff73334999759868ed5598f1b4232bf1ccec7dc9aee53e1df0a3389be2ae8aa45071b3cc2e6b508c351a8f58fc9e0b187e47f2148049605fd89f9297bf73adad6aa6351cbf97e4bae14375f09853b85aa21e2a6ea0949fcafb422bb042b7490ae3265b496e0d8df857db876ab111a4ac4f42b4a51d6df6a4b3566e3229899c8fb7310dda91c4f84501e7276497a76accfefbbe4fa88ed828fa9b2c19ce38e5d6f57144d3e7129acb7d50f20146823777bbc7998c43f833a720b4c0f3f6085d5f62c77378bd4d2206f64a15d5a4da2d73e6d265f8725ea122d5ae0be665687d0b902dc48d0f9e6bfdc4e423245040af5efe1f9be909841c1f055e01dee84d5a620a726a5e41f52b0f0bb80b693a4d65dd202642327ea3589834673ab9906bb9956b78a6561bba58fa2eb9b80c5c5b89ff583c6858662eece027aed4695608c4a38fc94d8060ba8b686b023185ad0d0abbaeda6a17ffd02e56c43e8d4876ff017387480f6800d4b9b6b939024617972be26e0e667e6d3d41b689ee3a577155a7cc6b7cdb1942eaeaca4fae887fb9a07334e7c10afadb47405adc377a121047ab694d2d5283b02bb09f68fcf69fb9b4b540751226bdfac5b34388765bf048fe8a6b00999416aeb3335e92b40eaaad5235dd8b121ba1f94e684a3f7240be9060c0c85a993d6b11de9285e004c8cd8fc55118433a02d462d5e57ac7da2181705e62ff93a36ff7ed219ea80a02b4c0f0ae7b5d18da3414c818694c3062eddd9ad27fe5e50d599eb3f98e4c61387d86c140765e5fddcf23a514f1c4f18c8efad0ab610fc0cec471ff5f79361b45af57fc875998c418fd1c1f131880f14496f12822b2fa3ed224038d98491bbc5d20417ba2f0ce6ff501be5d3ef2ba69f1c4e4f4a24b7c6421da94e9bdb976c1193736e57c7e16045d915b62a33ab359d23637f3574deddb2cedba92cff2319e42380275d8a25d87679bf3184fe6abd184bd394702cf9866d06b84bb88ce0b2f1fd10d01fdaad9bdb53eb184a557f6a4f0e6283439d1fd1e98ecad76f1936a3156d6d855fb2dcfc418d8d5f9e9f78d111c2e9706759c5699980df9e6fda162dbb9eb7803b7c61eb72d3fb3f020c8cf5ccb06aac94dfdee149c52e151fa2f6f96464882b7b85666c85b05cbed652c53fa6d1ed2ff4e4c168c145adec20112c6a914b0ef4b700a5f2f5ca7cdf60b7e7e941d1487a546f9641b3e774f013a1214390cbdd13e9e0fe3108114a2a6d6308d72f716c0bd25386c37064b2d78a6391174120e11307e9193b8cc7a30b3c6ade125a5729d3fba1ffdef51ee0205ee0ba5c58b57d344fe12fcc84534ed9ab126b6602b9aaf01775c299596df9cd7d206afe4d3dac4d072e52da6dd4ec8c20d3f47f959674262b9ba065688ce71ac6f7f97a53d709fd8b77eb9ce1993b7e4c75c6fa1ab78f72ff1646aed169c8901aa89507a07abd84bbbb60178b04608bfaa4139d927ba34669e12c6b85b43de67338f6b736b75a3fd0f2b88f0204e5c2fca345ed1d704d8e37880a10005b617aa7feb0c68b33aae9850569f408ef8cda4a78bdaa0caa6313dae6f9e028f4494ff94b3788148de152610a4023e4f433f677a86427716ea58b3be83f4f07a1fd8ac351291b5e08de8013383983a0639f0326a6b2aadf31cdecca18e62627d3e69902d0cb936c50d7f249942d416dc6dfd152e6f0cea5c8c800607f851deec58b275e3dcd303907d16520235bc1e97452cdbca8c60a1a9c8cf772bef494f716228767b74006130905cbed0cfce53e7d42124e722c979db7563f7169549d6abd43687e6f8fab1d9adeecfc24efbd28919b4d8f8466ae52740f2db0b542cd1d44501817db56049aa34bc221177c08be70cc883bf2a345c5983b9eddefc3a11dcddb54dc32475b5b8bf6ad4014844b9d8ebbff1a20d0c18875a411424a6f0274e78efbb560a57948c32b9e903cd26cb323344c5b854104387e3a763140eb8ae8120953986ea2c98bfa992110a155c4ff6460d4dc8890d0ed4c37d264d4a0fac84d50c015531044f6ed2685ed6f0bdbf1a4b24750eab90d64b4ca2c61dfd5e028e2b7f272732a809a83dbb2e15eb18d2f39f0f98b6614fca2a513a3b8a6e7cc269b4cdc304ebf082afcaf94e08cfa805c9b225ff246c99a5d3cdd006dedeaf2031f9ea0f208cf854d1beba620a136d9f1b997ee7ae9d59264c88bf561bebe482a215e186dfa82b3ecffc1165b028fafa209d070ec0c5aec9b0fc9765ec17ce594a68a937f346cf61dce96c615c98ca43b594b27caa22d6112ebfef5c487c356b5661ed5a8b028703c46f95fcda362fa07d57389a0c9fe38f4ec0a9580bda75720f109a784513c77bc92be0a68e9cfee8ecdd505f7de5cc039d989d1a91ab1552060df08d28c4f1c049735bdd8cdc8a8ea54289b39d2fd1dee5901016ce74f33d03bf3ac928772ce9b45062c36a203b9d45cd82f9bd79b9bee3f0e179a20adb92f2cc3b34ab4827205802526dcf12a8730c69f7383e2f99f39f8e979adc7b221534234252fbdd935eb352f26949b2e58b8e2f0f087e2d6754d151b4b25a6be259f7ce0f52c471a0f99352dab18bd80a7bd7cee1bc133049d4f78f734d5509787c6c59138282c136df6a0dbb7835aa7bb63d7b8d806accc0aad730d07306a67f7627ec2c996594d4afcf0d7fa1ab345ebe751b3ad5a0e5e7be44c74a91410717f3f58ee8b64f7ce98dc40ae2bacfcc566c7ed79459a27970210f7309bfa2b8bedbb6922b1383e3ab74b2f86c9e52d664fe4db60f928a24ed891a8a9780847d03d907850ddfbdf4c46e01af7913d3f54025704874f32d38caa4cd5bc386c222cebccdeaf719d3ea0279688611fb9efe4ad1d90009f3cdb856fbf3c528afa7cecf2d48087b4c69326ef8d607ed6e9b8a2a3c5068a850fe9ca3eeab5619006697b573b70d56264b16371f829c8fcaad734ed5e90756b5c4044bcb5add9e6520089a7430a591f69813c2e9aff0dd8c0cfd0f322e824837ff1c770aad3a048a56d4cabda0178abe0d5321925991a2ea9664358b0f96c3cb36cebb21387e539b9d9fc6f0c466920a8dcc14a7ba662cfaca4bf13890fc9da97bee469a8a6b70cec29e1590c5280f87a071eb5d0a6be456487d0c6470791ec53659f4ca249254b51a8831cb502b008a951138b1e8b07771c6a41d8120301f1a7f9174032ebaf784ee49674f461ac0ca16e4b483c0be024223c10bbb9a1e4a650f9feda001f590a3a6a45040efc98d32b8cf88907f5fa2a58c325d747fc1bc187c3b115488e61eabe39ec73dfb8b21d0d81b76584f1e19833092350b413a07139ff4d51b10741621c5890631a2144c020deb3493cdbd3b5d77c87ba6ee27ddc02622076278379ba9f72f12336570d54415827b2a5d9f934e3d4c6058ecaf2ff8eb74a7f2e41e53fd5678be3d491ef9984cd7b85e74133fef73a80baecfb612b54ac7a11c372da3820442b86d81b48f107aa2cda09835d3a6794e44431c52b87a54611cb28deaeeeafcb7e334409d02746a1b09b3d7a4440fe96936b6d69b00a1608ccf8d792351c878de98130018e66e97592f481e0165b74134b5e626da7463338715b3f6da7db50ad29cb24dc531de58ab14a0987e93f38a0ba29e06ef6c1767a648931b06d02722800b54f98da17a0d309912f401f9e2a123c44786608e4f1992b043b40294eba60f5ef2f63853dafda26e3da1226fa520105adf31bc0809ca64d72868f65ce32c46f5c3af69743702952add6a55a62724216b62ac0dc1c3d0c961267076a009e5f2b0176642d56b0f12943a9f63d8f160955e9734afd4bd9c8893132c12785ff81e2c4c4461acbad90db1411d14a9a07f0374d6efd9fc7e3ce1bd7ada9cb02a8b43fbe46a9700c5cd75f3765420d5755f3242e2db14584933253c32323b4fd19fb06a0b1d78a58e7d852479e3a62e1c047a07391fadc2625cede3a9a38ed0384566d57b1e366214d51ed4101fdb20b62207371d3b5c9a68384d754932fd23be8bbbd702c90779f128905821539288a6cb40013b8518a8111b8143c7ddfb86e83c08730a52472a9533ce1680f1b644b8acb1baf91140ad537adb4", @ANYBLOB=',\x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0xc0000400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1}, 0x94) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRESOCT=0x0, @ANYRESOCT=r2], 0x54}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x24000025}, 0x4800) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) 2m16.945607419s ago: executing program 4 (id=507): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x3, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x5, 0x0) setresuid(0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xe}}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x9, 0x4}, {0x0, 0x2}, {0x8, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000080) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000002200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000c36a00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r8, 0x2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x3) r9 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x53, 0x3, 0x74, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x10, 0x700, 0xe3e1, 0xcfe}}) 2m13.600267704s ago: executing program 4 (id=510): r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x800, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, 0xee00, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='map_files\x00') lseek(r1, 0xffffffffffffffff, 0x2) getdents(r1, &(0x7f0000000c80)=""/4096, 0x1000) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/69, 0x45}], 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r2, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) quotactl_fd$Q_QUOTAON(r0, 0x0, 0x0, &(0x7f0000000380)='./file1\x00') sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140ff"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000200)="a7", 0x1, 0x65bd1d9c775add9d, &(0x7f0000000040)={0xa, 0x4e24, 0xfff, @mcast1, 0xc5f}, 0x1c) ptrace(0x10, r3) ptrace$ARCH_MAP_VDSO_64(0x1e, r3, 0x90002, 0x2003) shutdown(r2, 0x1) r6 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e22, 0x8021, @empty}, 0x1c) sendto$inet6(r6, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$l2tp6(r6, 0x0, 0x0, 0x4000, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0x4c08, 0x0) 2m12.435607967s ago: executing program 4 (id=517): capset(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=0xffffffffffffffff, 0x4) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a01020000000000000000010020000900030073797a31000000000900010073797a31"], 0xa8}}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r12, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) setsockopt(r12, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000100", 0x8) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff0700000056c6518e2ebd0e8ae14da84a35596496df3f8916cd468847295799b8599c25207e8ceb844fa10d7830eb5ad5397549d89de5b75d806e7c8aadf2a452da494ce31b31697f24e2e0d682402e0a10f6c86a185ef53cbbcd62de3d05f9902d38c1827016b8260874c6aa73e4a4f9344fbb686b0b568ea8a9bd14cc6d4de703368f06b00399280b2a04d3346581aa3b3519aefc2a", @ANYBLOB="95b977ff8b7ef6d68a4f77f90cf842ad4eed2cd9c86920ac17060ad0c4f262701e68d553e310b5b179f38599daa901658ca4034016937ac7b263909685eda7f004c5815372811491adebc06e9b5b0520e8deca65917ae0980071202b1d9f59f913fba2718db61191697dae10e7e46ad7fca2cb6b5d0fb14137951d590b59d4b824c2c17088d5db73f05aacd65b7608cf07016264d4252fdf819112bf2ddfe7d7546b33835a4acc6cd5c2c7c9b30005c6419147019695deafc5fb89cab17cc3d1f34165bdb52f608658805e4411", @ANYRES64=0x0, @ANYRES32=r12, @ANYBLOB="01010100ffffffff00000000002b8d8a3150029c8edd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaa34aaaaaaaaaaaa884800000000000000ea4c4913e1000180c41b8ffa6c415c7dbc0515b698c00db61d68eb6f977df4dfcd8681d2cf750e5d8e5e17afc982c9060ad5773822e5f9d5936b1d3e4a3d2835faf2577da515e996e0004552b2eaf0e463569f13ffcf9eef46f7e21ec93104b372fead32fe40f483a9a3447b0d16069967c2cd685945b58f2be0d4763d9f4e95b24f39bf07193de85c1c21738aa19a1b2e7c0c4cb13d8c63be86f33a8080aa5b6304db61777ff1e04bc71653ab58fa8d796736de7e356c327d22a100a6ef"], &(0x7f00000007c0)={0x1, 0x800, [0xe0e, 0xd2e, 0x32b, 0xb4f]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x8000, 0x8, 0xfffffffb, 0x943d, {{0x1b, 0x4, 0x0, 0x1e, 0x6c, 0x65, 0x0, 0xad, 0x2f, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x44, 0xda, 0x1, 0x2, [{@loopback, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x18}, 0xd}, {@remote, 0xf7cf}, {@multicast1, 0xd08e}, {@loopback, 0x80}, {@rand_addr=0x64010102, 0x800}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x800}]}, @end, @noop, @timestamp={0x44, 0x10, 0xde, 0x0, 0x2, [0xfffffffe, 0x800, 0x6]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x6, 0x6, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x80, 0x3, 0x65e}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x19c, r4, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x19c}}, 0x800) 2m7.27266576s ago: executing program 4 (id=530): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xb02, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)=0x1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000140)) bind$nfc_llcp(r3, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x81, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x1) landlock_create_ruleset(&(0x7f00000000c0)={0x3564}, 0x18, 0x0) landlock_restrict_self(r5, 0xe) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r6, &(0x7f0000000640)=@file={0x1}, 0x6e) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r8, 0x0, 0x0) close(r4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 2m5.430553903s ago: executing program 32 (id=530): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xb02, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)=0x1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000140)) bind$nfc_llcp(r3, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x81, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x1) landlock_create_ruleset(&(0x7f00000000c0)={0x3564}, 0x18, 0x0) landlock_restrict_self(r5, 0xe) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r6, &(0x7f0000000640)=@file={0x1}, 0x6e) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r8, 0x0, 0x0) close(r4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 7.02728901s ago: executing program 2 (id=860): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) (fail_nth: 5) 6.931420114s ago: executing program 3 (id=861): bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$proc_mixer(r0, &(0x7f0000000100)=[{'RECLEV', @val={' \'', 'Capture Volume'}}, {'SYNTH', @void}], 0x33) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) 6.815036083s ago: executing program 0 (id=862): syz_usb_connect(0x0, 0x1a2, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b6a57e4086805b0bc5e10102030109029001020000000009040000020e0100000a2401002200020102092100000001220000090500000000000000a7008d566539461c701919d99a91c3af134dfaf61ea66b8f08810855d90c55c91f11c4a6d847caf7b449c6c760e60f6b890d99ed23074bf2538ca7bba727dfe7c00b90d0bc7f2da56768ed5ce8df38c07183564831596fd52da49a92adafa6277df5a120c898fc51ca04089f110dfbe1b258e9b9a83bf95fb0a4a24ca6acae78e1c291f671fcdca77c7128d319f7a4b51bbc2ed4", @ANYBLOB="12aa85"], 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000020c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file0\x00'}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 6.789106525s ago: executing program 1 (id=863): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, [@printk={@llx, {0x3, 0x3, 0x3, 0xa, 0x0, 0xfe00}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000000bed000007"], 0x31) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)=[@nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0x100000, 0x90d1}}, @cpuid={0x64, 0x18, {0x8d, 0x466e}}, @nested_vmresume={0x130, 0x18, 0x1}, @set_irq_handler={0xc8, 0x20, {0x15, 0x2}}, @nested_amd_vmload={0x182, 0x18}, @uexit={0x0, 0x18, 0x400}, @set_irq_handler={0xc8, 0x20, {0xec}}, @nested_vmresume={0x130, 0x18, 0x80000000}], 0xf0}) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x38, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@dstopts={0x88}]}}}}}}}, 0x0) (async) setpriority(0x1, 0x0, 0x8000000000000000) (async) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000440)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) 6.634715651s ago: executing program 1 (id=864): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x4e22, 0x0, @private0, 0x5}, 0x0, {[0x400000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2]}}, 0x5c) sendmmsg$alg(r1, &(0x7f0000000540), 0x0, 0x84) r3 = socket(0xa, 0x3, 0xff) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r4) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000080)=0x408002, 0x4) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000000)=0x5, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x2208}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) recvmmsg(r3, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/127, 0x7f}, 0xfffffff3}], 0x1, 0x4160, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9, 0x2}, 0xe) 6.342819211s ago: executing program 1 (id=866): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x400bd) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0x81, 0x80, 0x20203843, 0x3, [0x2], [0x810000, 0x2, 0x0, 0x10], [0x2, 0x20, 0x80, 0x46], [0x8ac2, 0x2, 0x3]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r4, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1384], 0x568) sendfile(r0, r0, 0x0, 0x2) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000600)) 6.237411355s ago: executing program 3 (id=868): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) (fail_nth: 7) 5.998178353s ago: executing program 3 (id=870): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=@newtfilter={0x3480, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3450, 0x2, [@TCA_CGROUP_ACT={0x3408, 0x1, [@m_tunnel_key={0x94, 0x7, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x9, 0xffffffffffffffff, 0x6, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x20, 0x6, "4631dc16d74eb6a3aa9f8256724bf086709bf86ac86c4dba8469fa92"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0xac, 0x1a, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xd}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xe4c, 0x3, 0x0, 0x7f, 0x433}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffffe1, 0xe07c, 0x4, 0x2, 0x7fff}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}]}, {0x1f, 0x6, "7f808b6d6f0421dce353fc1c4ec9061352edca361483fb0ea3cd43"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x3c, 0x0, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x8001}]}, {0xc, 0x6, "543ae5862fca6a0c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x234, 0x16, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff8, 0x6, 0x8, 0x4, 0xfffffbff}, @local, @rand_addr=0x64010101, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x2dc, 0x0, 0x4, 0x4}, @dev={0xac, 0x14, 0x14, 0x35}, @multicast2, 0x7f, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x4, 0x0, 0x8000}, @dev={0xac, 0x14, 0x14, 0x22}, @multicast2, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x5, 0x8, 0x9, 0x4}, @local, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff9, 0x4, 0x2, 0x9, 0x2}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x4, 0x0, 0x2}, @local, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x99a, 0x90c3, 0x1, 0x400, 0x9a}, @loopback, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x25, 0x10, 0x3, 0x4, 0xc48c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x1}}]}, {0xca, 0x6, "5dcd16fa614d62dc65309153978421596bbe3c044cfd52ea3ea8318053cd2580d49fe78ee740f02956ac5231899f875c05d662e4cd9696b3609a0d620d191347da54b30017c9614c9461b95089af01eba4d5ab5c5c8270a8223fb87572c83c17c3a533ca0e0caabf2151af5ccedc0975f7c880f5e6d404d034e2f5c7596acc0fcdb1c88357bd28f78cb62f1dedc68011dce08602f141c291a8c254bd5f29e6d7f7c631e1fd2f5166d37adcf3b48f5491e670b1aeeb1670124500fd19b24e3d71e1d1c7f0972d"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x10c, 0x8, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xc00000, 0x0, 0x4, 0x9}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000000, 0x572, 0x8, 0x6, 0x7ff}, 0x6}}]}, {0xa2, 0x6, "7a72cea93f8e792111b521b52fe9f0e7d24768c9685fd61b61c3e541b3d899cadf65be27110a4476c3fc33c45be9c71626aaa0a5cede8e618b944dff6f1061955de8412c05434e3d24759f30adce8944c2cf0f64426a4b72d15d1568f3a54ff14653f36e41f8851bce842bb7ee7d767db6498b69a0ddf146e1478fa13648be68e61fc82be6295e52b773d39727f797f23b248dd2fc75aae28292bba2c788"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x1dd0, 0x6, 0x0, 0x0, {{0xb}, {0x1cd0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xa463, 0x10, 0x9, 0x5a4, 0x5, 0x0, 0x8, 0x1000, 0x7, 0x100, 0x8, 0x9, 0x4, 0x0, 0xab60, 0xf9d, 0x4, 0x1, 0x5, 0x4, 0x3, 0x6, 0x751, 0x5, 0xffffffb8, 0x7fff, 0x6, 0x2, 0xc1e, 0x2, 0x5, 0x6, 0x9, 0x800, 0x1, 0x80, 0x1, 0x54, 0xffff, 0x5, 0x4, 0x40000000, 0x7fff, 0x3, 0x90e, 0x2, 0xd, 0x3, 0x3, 0xf, 0xb3d, 0x7, 0xcb00, 0x2, 0x80000001, 0x4, 0x2, 0xe, 0x8, 0xff, 0x7fff, 0x7fff, 0x6, 0xad, 0x40, 0x6, 0x7, 0xfffffffd, 0x1ff, 0xd, 0x4, 0x33, 0xffffff01, 0x81, 0x7, 0x9, 0x1, 0x5, 0xffffffff, 0x10000, 0x2, 0x5ea6, 0x8, 0xffffffba, 0x5, 0x5, 0x7ff, 0x2, 0x1ff, 0xfffff1d6, 0x4, 0xb, 0x1, 0xfffffffb, 0x6, 0xc0000000, 0x1000, 0x9, 0x2ec, 0xfffff3d0, 0xb25, 0x5, 0x1, 0x8, 0xfffff306, 0x6, 0x7, 0x6, 0x9e9d, 0x8, 0x8, 0x1, 0x7, 0x3, 0x10, 0x3, 0x2, 0x2, 0x2, 0x7, 0x7, 0x0, 0x5, 0x3, 0x1, 0x4, 0x2, 0x80000000, 0x0, 0x7, 0xc7, 0xb9, 0x80000000, 0x400, 0x14c, 0xf, 0x80000000, 0x9, 0xffffff01, 0xff, 0x3, 0x8, 0x7f, 0x0, 0x8674, 0x1, 0x3, 0x2, 0x40, 0x8, 0x10001, 0x3, 0x80000001, 0x3d4, 0xfffffffd, 0x6, 0x5, 0x81, 0x80, 0x9, 0x3, 0xff, 0xb6f, 0x1, 0x8, 0x8, 0x8, 0x6, 0x5, 0x10, 0x3, 0x8, 0x200, 0x8, 0xaa, 0x0, 0x1, 0x4, 0x0, 0x9, 0x8, 0x7, 0x3, 0xe, 0x5, 0x9, 0x57f79323, 0x8000, 0x87f, 0x5c, 0xa, 0x8, 0x3, 0x1ff, 0x3, 0x2, 0xe629, 0x6, 0x3, 0x0, 0x8, 0x7, 0x2, 0x5, 0x1, 0x3, 0x6, 0x8, 0x0, 0x5, 0x9, 0xaac, 0x8, 0x9, 0x1, 0x4e937e3b, 0x3, 0x10, 0x10000, 0x1000, 0x10000, 0xff, 0x1ff, 0x4, 0xfffffe01, 0xdc9, 0x9, 0x2, 0x3, 0x4, 0x10000, 0x4, 0xfffffff8, 0x1c00, 0x8, 0xf97, 0x8001, 0x7, 0x4, 0xc, 0x2, 0x4, 0x5, 0x2, 0x80000001, 0x7b24, 0x7, 0xb8ad, 0x1c, 0x5, 0x0, 0x8, 0x7fff, 0x1, 0xbe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9c1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc8c9}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x9, 0x0, 0xfffffff8, 0x6, 0xeb, 0x49, 0x3, 0x8, 0x6, 0x47, 0x8, 0x1, 0x2, 0x2, 0xfffffff7, 0xfffffffe, 0x5, 0x6, 0x3, 0xd34, 0x0, 0x7, 0x4d2f, 0x5, 0x9, 0x2, 0x2, 0x0, 0xf, 0x4, 0x6, 0x8001, 0x5b, 0x1000, 0x9a, 0x200, 0x2, 0xff, 0x7, 0x10001, 0x4e, 0xa2ca, 0x4, 0x5, 0x14, 0x308, 0xa, 0x0, 0x2, 0x7, 0xaf, 0x4, 0x8, 0xd3ce, 0x9, 0x5626, 0x5, 0x1, 0x0, 0x2, 0xb, 0x9, 0x0, 0xc, 0x4, 0x7b, 0x8, 0x9, 0x81, 0x1, 0xffff, 0x0, 0x6, 0x9, 0x10, 0xd258, 0xfff, 0x2, 0x80000000, 0xc, 0x18735c50, 0xa, 0x1, 0x7, 0x0, 0x7f1, 0x80000000, 0x80000001, 0x8, 0xbeee, 0x9, 0x6, 0x100, 0xa, 0x4, 0x3, 0xf6, 0x5, 0x8, 0x7, 0xf, 0x10000, 0x3ff, 0x0, 0x8, 0x10001, 0x9, 0x2, 0x0, 0x2, 0x200, 0x757, 0x6, 0x3, 0x8, 0xffffffff, 0x2, 0x8c, 0x7, 0x2, 0x180, 0x7fff, 0x9, 0x4, 0xf, 0x6, 0x3, 0x659, 0x4, 0x1, 0xffff, 0x3, 0x0, 0xffffffff, 0xef, 0x1, 0x6, 0x8000, 0x200, 0xab, 0x9, 0x0, 0x5, 0x40, 0x9, 0x9f7, 0x6, 0x0, 0x2, 0xffffffff, 0x0, 0x8001, 0x3ff, 0xc85, 0xff, 0x3, 0xc6, 0x5, 0x8, 0x6, 0x80, 0xde, 0x5, 0x5, 0x9, 0x40, 0x8, 0x1, 0x59d, 0xe, 0x3e, 0x9, 0x0, 0x3, 0x800, 0x7, 0x81, 0x5a3, 0x5, 0x5, 0x8000, 0x400, 0x5, 0x3, 0x3, 0x7fff, 0xfffffff7, 0x5, 0x100, 0x0, 0x9db, 0x6, 0x5, 0x78eb, 0xfffffffc, 0x81, 0x9, 0x8, 0x401, 0x7, 0xd317, 0x0, 0xef5, 0x3, 0xaa9, 0x8001, 0x7fff, 0x6, 0x0, 0x7, 0x0, 0x7, 0x1, 0xd482, 0x0, 0x10001, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x2c, 0x9, 0x6e, 0x4, 0x2, 0x101, 0xaa, 0x2761, 0xfffffffc, 0x3, 0x200, 0x4, 0x1, 0x0, 0xc9c2, 0xe, 0x28a7917d, 0x3, 0x6a, 0x0, 0x3, 0x5, 0x4, 0x8, 0x8, 0x8, 0x7ff, 0x9, 0x5, 0xffff, 0x8d, 0xf, 0xd2000000, 0x1b6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x3, 0xd, 0x800, 0xff, 0x10001, 0x2, 0x5, 0x1111, 0x6, 0x8, 0x2, 0x1, 0x5, 0x9, 0xe, 0x7, 0x5, 0x8001, 0x10000, 0x0, 0x80, 0x2, 0x4, 0x6, 0x4e63, 0x3, 0x2, 0x0, 0x5, 0x4, 0x38a, 0x1, 0x1, 0x6, 0x8, 0x4, 0x9, 0x0, 0x5, 0x178f, 0x10000, 0x4, 0xde2, 0x4, 0xd, 0x3, 0x8, 0x1, 0xfffffffc, 0xd7, 0x4, 0x7, 0x5, 0x40000000, 0x4, 0x7, 0x1, 0x0, 0x5, 0x0, 0xdbea, 0x8, 0x4a, 0x3ff, 0x3, 0x7, 0x3, 0xff, 0x2, 0xa, 0x5, 0x7ff, 0x1, 0x39, 0xf4, 0x2, 0x0, 0xe0, 0x2, 0x100, 0x1, 0x392, 0x80000000, 0x7fffffff, 0x1, 0x0, 0x9, 0x0, 0x9, 0xb9, 0x7, 0x9, 0x2, 0x5bb, 0xcd8, 0x3, 0x79, 0x200, 0x4, 0x6, 0x6, 0xad04, 0x200000, 0x2, 0x200, 0xffffffc8, 0x7b13, 0x0, 0x2, 0x3ff, 0xba, 0x6, 0xbcff, 0x7, 0x5, 0x4, 0x800, 0x141e, 0x7, 0x1, 0x0, 0x4, 0x7, 0x22, 0x100, 0x80, 0x2000, 0x473f, 0x8, 0xd1, 0x5, 0x4, 0x9, 0x982, 0x5, 0x1, 0x4, 0x2, 0x6, 0x2a, 0x0, 0x3, 0x1000000, 0x2, 0x4, 0x3, 0x401, 0x8, 0x5, 0x3, 0x1, 0xfffffff8, 0xe, 0x80000000, 0x1, 0xfffffff8, 0x7ff, 0x4, 0x6, 0x1, 0xe2, 0x9, 0x7, 0x2, 0x6, 0x70c, 0x800, 0x2, 0x8, 0x2, 0xf, 0xaa66, 0x2, 0x7f, 0x6, 0x4, 0x6, 0xfffffff7, 0x6, 0x55d, 0x9, 0x60, 0x4821, 0xc, 0xc, 0x7, 0xe, 0x7, 0x7, 0x18000000, 0x8, 0x4303, 0x3, 0x1d600000, 0x49, 0x401, 0x2, 0x6, 0x0, 0x4, 0x4, 0x7, 0x6, 0x3, 0xb4de, 0x3, 0x1, 0x8f, 0x4, 0xfffffff8, 0x9, 0x0, 0x0, 0x9, 0x5, 0x3ff, 0x1ff, 0x0, 0x9, 0xe6d, 0xbe, 0x7fffffff, 0x5, 0x9, 0x80000001, 0xa73, 0x6, 0x0, 0x800, 0x7, 0xa, 0x2, 0x10, 0xa, 0x2, 0x86d, 0x6, 0x5, 0x8, 0x708, 0x4, 0x841f, 0x5, 0x7, 0x80, 0x3d4f, 0x1, 0x3, 0x1, 0x1, 0x7, 0xfff, 0x6, 0x0, 0xe624]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0x5, 0x9, 0xd, {0xa, 0x2, 0x7, 0x7, 0xae, 0x4}, {0x3, 0x0, 0xb, 0x1ff, 0xc, 0x6}, 0x10, 0xae, 0xfa}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x22}], [@TCA_POLICE_RATE={0x404, 0x2, [0x652755c0, 0x3, 0x803, 0x2, 0x6, 0x401, 0x5d, 0x5, 0x8, 0x2, 0x2, 0x80, 0x1, 0x3, 0x2, 0x8, 0x80000001, 0x7fff, 0x3, 0x66a, 0x7, 0x2, 0x2, 0x2, 0x7, 0x5, 0x10000, 0x7, 0xffffffff, 0x4, 0x3, 0x7fff, 0x1, 0x8, 0x6, 0x0, 0x7e2d, 0x1, 0x1, 0x0, 0x18000, 0x1, 0xa66f, 0x2, 0x4, 0x8, 0x912c, 0xd, 0x67f, 0x9, 0x3, 0x6, 0x8, 0x0, 0x3, 0x0, 0x100, 0x40, 0x0, 0x4, 0x9, 0x3, 0x200, 0x5b, 0x4, 0x0, 0x7f, 0x0, 0x0, 0x1c3f, 0x5, 0x80000000, 0x40, 0x1, 0x6, 0x1, 0x8, 0x1677, 0x9, 0x7, 0x2, 0x5, 0x8, 0x4, 0x4, 0x2, 0x4, 0x10000, 0x40, 0x35, 0x7, 0x7, 0xc, 0x0, 0x0, 0x8, 0x8, 0x0, 0xb0, 0x4, 0x0, 0x6, 0x60, 0x6, 0x94, 0x401, 0x2, 0xffffffff, 0x1, 0x4, 0x1ff, 0x0, 0x0, 0xe810, 0x1, 0x7, 0x3, 0x5, 0x45, 0x5, 0x7fff, 0x40000000, 0x5, 0x6, 0x5, 0x10000, 0x5ec, 0x1, 0x7fffffff, 0x4ba1c912, 0xc, 0xc9a, 0x51, 0xfffffff0, 0xffff, 0x7fffffff, 0x9, 0x10000, 0x9, 0x5, 0x30, 0x3ff, 0x8, 0x2, 0x8, 0xfffff800, 0x3, 0x8, 0x7ff, 0xfff, 0x7, 0xa83, 0x4, 0x8, 0x7fffffff, 0x2, 0x0, 0x6, 0xc9, 0x10, 0x6, 0x8, 0x5, 0x0, 0x6, 0x2, 0x6, 0x24c8, 0x0, 0x3, 0x3, 0x3, 0xd2e0, 0x1, 0x0, 0x5, 0x40, 0x2, 0x3, 0xbaa, 0x7, 0xb4c6, 0x8, 0x1, 0x4, 0x6, 0x6, 0x10000, 0x0, 0x1ff, 0x9ba8, 0x8, 0x6, 0x5f, 0x100, 0x1, 0x0, 0x9, 0x7, 0xb, 0x8001, 0x9, 0x9, 0x7, 0x7, 0x9, 0x8, 0x4, 0x9, 0x7, 0xf6d, 0x2, 0x5, 0x800, 0x81, 0x1, 0xfffffff9, 0x10001, 0x3, 0x1000000, 0x0, 0x86, 0xfffffff2, 0x8, 0x6, 0x8, 0x2, 0x6, 0x40, 0x6, 0xfffffbff, 0xc, 0x7, 0x6, 0x5, 0x400, 0x7fffffff, 0x3, 0xd32, 0x4, 0x6, 0x6, 0x7, 0x7, 0x2, 0x4, 0x3, 0x7, 0x4, 0x2, 0x9, 0x1, 0x5, 0xe, 0xe, 0xf253]}, @TCA_POLICE_RATE={0x404, 0x2, [0xee58, 0x5, 0x6, 0x6, 0x7, 0x3, 0x1, 0x4, 0x8, 0x7, 0x7, 0x6, 0x1, 0x3, 0x3, 0x4, 0x6, 0x7, 0x0, 0x8, 0x6, 0x4, 0x9c0d, 0x7, 0x400, 0x38000000, 0xfffffffd, 0x103, 0x991, 0xcd5, 0xfffffffe, 0xd16e, 0x7fffffff, 0x4, 0x8000, 0x8001, 0x2, 0x4, 0x6, 0x72, 0x28347f00, 0x7, 0x7b62, 0x100, 0x7035e138, 0x2, 0x7, 0x9d, 0xd7c, 0x0, 0x1ed3e, 0x100, 0x3, 0x7fff, 0x800, 0xc, 0x834daa75, 0x3, 0x4, 0x2, 0x1, 0x7, 0x9, 0x7, 0x8, 0xff, 0x4, 0xdea4, 0x8, 0x0, 0x49b1, 0x6, 0x8000, 0x1ab34e33, 0x6, 0x1, 0x58, 0x9, 0x4, 0x9, 0x9, 0x9, 0x4, 0x9, 0xffff, 0x660, 0x8001, 0x1, 0x8000, 0x74, 0x3, 0x5, 0x4, 0x19, 0x6, 0xf3, 0x6, 0x800, 0x8, 0x9, 0xfffffffb, 0x614, 0x1, 0x1, 0x5, 0x2, 0xa, 0x8, 0x4, 0x10, 0x7, 0x593dee6d, 0xfffffffa, 0xd, 0x6, 0x101, 0x9, 0x1, 0xe, 0x8001, 0x0, 0x6, 0xff, 0x2, 0xe1fe, 0x40, 0x7, 0x8, 0x2fe21b6, 0x1, 0x4, 0x80, 0x200, 0x1, 0x5, 0xff, 0x7, 0x2, 0x81, 0x10000, 0xfffffff9, 0x4, 0x5, 0x9, 0x4, 0x7fffffff, 0x2, 0x3, 0x1, 0x54, 0x8000000, 0x9, 0x248, 0x7ff, 0x1, 0x8001, 0xfffffffe, 0xe, 0x1, 0x7bc, 0x55cd, 0x9, 0x25a, 0x74c, 0x0, 0x0, 0x5, 0x1, 0xa12, 0x6, 0x6, 0x707c, 0x1, 0x1, 0x2, 0x1, 0xc0, 0x4, 0x3, 0x1, 0x10001, 0x4, 0xc, 0x7360ba36, 0x8, 0x5, 0x8, 0xcef8, 0x3, 0x3c6e4b3, 0x100, 0x0, 0x401, 0x10, 0x16, 0xf8, 0x3, 0x8, 0x6, 0x40, 0x8, 0xa7, 0x694, 0x4, 0x1, 0x5, 0xa, 0x38, 0x60fc, 0x100, 0x1, 0x8c, 0x4, 0x7, 0xe, 0x6, 0x7fffffff, 0x9, 0x7fe8, 0x10000, 0x3, 0x9c, 0x9, 0x6, 0x7, 0x1fe00000, 0x5, 0x60, 0xffffffff, 0x3ff, 0x9, 0xe3, 0x7, 0x10, 0x2, 0x9, 0x5, 0xffffffff, 0x10000, 0x2, 0xff, 0x5, 0x4, 0x6, 0x2, 0x0, 0xfffffffa, 0x1, 0x2, 0x200, 0x8f, 0x800, 0x8, 0xacb7, 0xfdb7, 0x9835]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x0, 0x80000001, 0x10001, 0x9, 0x8, 0x8000, 0x5, 0x5, 0x5, 0x7, 0xffff, 0xfffffffc, 0x1, 0x71, 0x8e, 0x0, 0x40000000, 0x1, 0xfffffff6, 0x7ff, 0x8, 0x5, 0x7, 0xc, 0x8, 0x9, 0xfffffffe, 0xc, 0x0, 0x7fff, 0x2, 0x9, 0x1, 0x100, 0x9, 0x5, 0xfffffff9, 0x6, 0xff, 0x2, 0x800, 0xe6, 0x7, 0x1, 0x0, 0x5, 0x1d46, 0x8, 0x9, 0x1, 0x81, 0x5, 0x1, 0x9, 0x9, 0xe11, 0x3, 0x1ff, 0xa85, 0x5, 0x3, 0x5, 0xa266, 0x0, 0x3, 0xf, 0xba6, 0x80000001, 0x8, 0x101, 0xffff4dc9, 0x8, 0x3, 0x70, 0x3, 0x10, 0x5d3, 0x1, 0x5, 0x4, 0xef, 0x1ff, 0xa, 0x5, 0x0, 0x10, 0xff, 0x9, 0xcd6, 0xca4, 0x2, 0x4, 0x12a20000, 0xa7, 0x8, 0x7, 0xf665, 0xfffffffd, 0xffffffff, 0x100, 0x0, 0x0, 0xfffff88e, 0xfffffff7, 0xfffffff7, 0x1ff, 0xd8c2, 0x6, 0x1, 0x1, 0x99, 0x7, 0x2, 0x40c3cee8, 0x0, 0xa026, 0x0, 0x891, 0x10, 0xfffff4f7, 0x6, 0xffff, 0x0, 0x6, 0x8, 0x6, 0x49b, 0x7, 0x1, 0x3, 0x5, 0xffff, 0x7, 0x9, 0x200, 0x80000001, 0xfffffff9, 0x9, 0x5, 0x1, 0x2, 0x8, 0x9, 0x311f84a5, 0xfc, 0xb, 0x6, 0x5, 0x5, 0x8, 0x2, 0x6, 0xc, 0xfffffff9, 0x6, 0xcde, 0x71, 0xffffffff, 0x0, 0x200, 0x1, 0x92, 0x7, 0x9, 0x4, 0x5b, 0x6, 0x3, 0x9, 0x2, 0x679, 0x25f5, 0x8, 0x8, 0x7, 0x5135, 0x9, 0x1, 0x101, 0x7, 0x5, 0x3ff, 0x2000, 0xfffffff8, 0x2, 0x1, 0x1, 0x3, 0x6, 0xe8, 0xfffffffc, 0xffffff5b, 0xb0c, 0x400, 0x7, 0xd, 0x7, 0xd, 0x9, 0x2, 0x7, 0x6, 0x6, 0xbc58, 0x8, 0x2, 0xfffffffb, 0xb, 0xffff98d5, 0xc, 0x4, 0x4, 0x83e, 0x7, 0x5, 0x8001, 0x6, 0x8, 0x1, 0x4, 0x76, 0x4, 0x8, 0x0, 0x2, 0x76b562bd, 0x8000000, 0xffffe538, 0x5, 0x5, 0x6, 0x6, 0xe, 0xc8, 0x931c, 0x9, 0x5, 0xf575, 0x2, 0x9, 0x8, 0x100, 0x9, 0x7, 0x80000000, 0x80, 0x7, 0x400, 0x4, 0x5, 0x5, 0x6a, 0x0, 0xffff, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x43aa}, @TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x979, 0x6, 0x4, 0x81, 0x8, 0x3, 0xfffff000, 0x0, 0x80, 0x80000, 0x6, 0x881, 0x5a55, 0xed4, 0x6, 0xffff7fff, 0x3, 0x200, 0xaf8, 0x2, 0x297, 0x1, 0x100, 0x2, 0x4, 0x3, 0x9, 0xfffff000, 0x3, 0xd4d7, 0xca36, 0x2, 0x3, 0x0, 0x2, 0x7, 0x4, 0x2, 0x0, 0x2, 0x81, 0x0, 0x7, 0x1e37, 0x8, 0x15, 0xe6, 0x80, 0x7, 0xff, 0x86, 0x0, 0x200, 0xfff, 0x4, 0x2, 0x1, 0x9, 0x9, 0x4, 0x81, 0x8000000, 0x10, 0x3, 0x3, 0x50fb, 0x81, 0x1eac, 0x5a1, 0x3, 0x0, 0x6, 0x1, 0x0, 0x10, 0x0, 0xe5, 0x3, 0xf, 0x9, 0xb4, 0x7fff, 0x1, 0xff, 0x7, 0x2, 0x8, 0x3, 0x3, 0xe84d, 0x1, 0x9, 0x6, 0x6, 0x1000, 0x3, 0x2695d18c, 0x9, 0x1, 0xffffffff, 0x6883, 0x2, 0x2, 0x7ff, 0xea9, 0xffff, 0xb, 0x1, 0x0, 0x9, 0x1f0, 0x4cb, 0x60000, 0x9, 0x101, 0xa, 0x7, 0x8, 0x2, 0xaf, 0xfffffffe, 0x8, 0x200, 0x0, 0x4, 0x7fff, 0x80000000, 0xffff, 0xe, 0x9, 0x2, 0x5, 0x3, 0x7, 0x8, 0xb, 0x4, 0x800, 0x8, 0xb6, 0x9, 0x9, 0x81, 0x400, 0x7fff, 0x4, 0x2, 0x9, 0x2, 0x10000, 0xe, 0x3, 0x3, 0x0, 0x9, 0x8, 0x9, 0xfaff, 0xd, 0x8, 0x1e0, 0xd3, 0x7, 0xd, 0xf4, 0x0, 0x800, 0x3, 0x3, 0x1ff, 0xb6, 0x4, 0x1000, 0x8, 0xb, 0xfffffff9, 0x9866, 0x2, 0x4, 0x4f, 0x9, 0xfff, 0x3, 0x10, 0x800, 0xffffffff, 0x9, 0x4, 0xfffffff3, 0x3, 0x4, 0x200, 0xffff, 0x2, 0x82e, 0xb, 0x96a3, 0x80000001, 0x9f, 0x5, 0x3, 0x6, 0x53c7, 0xfffffff7, 0x5, 0x3, 0x24000, 0xfffffffd, 0x331e, 0x9, 0x8, 0x73c, 0x8, 0x6e, 0x9, 0x7, 0x8001, 0x8, 0xb6, 0x5, 0x401, 0xfffffffa, 0x3, 0x40000, 0x400, 0x4, 0x9, 0x2, 0x1, 0x57e38262, 0xcc8, 0x3, 0x6, 0xfe7, 0xb, 0xb47, 0xfffffff8, 0xff, 0x7, 0x7, 0x3, 0x4, 0x8, 0x3, 0x0, 0x5, 0x4, 0x100, 0xc9, 0x400, 0x4, 0x4, 0x8, 0x2, 0x6, 0xa]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffb}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6b7}]]}, {0xd7, 0x6, "dc29888e110d36a6b313dbe1418ad2cf06b7961e6e8d91e526770728d945e713976474cfa7598b2f016c5e348f27b9b8b05ecf18bd4b20ce148a9399312a45da0b8f975ce888627cc6ee01a149fd1ddd7da622e13584762ddea5a299dfbd7b8bfb606d0fa36e67091881245c81dba45daec79d6bef682719735d356c0e74a20c811990fea0a7c79eeaf95b9640cf4fbfebf19e61ea793b62eb98ccebba77bd22d7a27b4d856b33fbed7926b83a331aa9331625512717ae816149b67e1c9100a39468af004fe9cfb89e16f7dbed173ba937fef9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xcc, 0x12, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ce5, 0x6, 0x3, 0xd, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x9, 0x3, 0x46bf, 0xe0f}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1ff, 0x7, 0x81, 0x6}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x600000, 0x1, 0x7, 0x5, 0x3}, 0x4, r1}}]}, {0x1f, 0x6, "26871296514f63c43a804aca10a0253899c4cc3582493201081e4a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x3}}}}, @m_mpls={0xbc, 0x12, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x8a}]}, {0x87, 0x6, "381b27a751adc446891ef006523800cb5a19a5e4cfbe660fb435971d7678aab043080413a189edd521f028ead140620cdcebc1ba44450fea8a8b0c03780bc97f63a8dc17202d8b5d5fcb2f82320179edaa3ab5bfcb5b889583421ca5b73dd0eeb4179ea2e0cb1b3129af4d853ecbcba8698481d7da01e17dd712e386b2323cf1353114"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_pedit={0xf4c, 0x14, 0x0, 0x0, {{0xa}, {0xe78, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x4, 0x7f, 0x6, 0x200, 0x80}, 0xa, 0x7, [{0x4, 0x5, 0x3, 0x0, 0x0, 0xa}, {0x8, 0x4, 0x1, 0x5, 0xffffffff, 0x81}]}, [{0x7f, 0xfffffff7, 0x1000, 0xff, 0x2, 0xc0000000}, {0xb, 0x80, 0xc066, 0x7fffffff, 0x96d0, 0xce73}, {0x5, 0x5, 0x4, 0x6, 0x1ff}, {0x0, 0x3, 0x6, 0x7, 0x3, 0xdfeb}, {0x5, 0x600, 0x2, 0x3, 0xdb87, 0x6}, {0x8, 0x200, 0x1, 0x6, 0x2, 0x1000}, {0x2, 0x0, 0x0, 0x8, 0x7, 0x3928}, {0x1ff, 0xa8f, 0xf9c, 0x2, 0x3ff, 0x2}, {0x8, 0x500000, 0x4, 0x2, 0x3, 0x4a}, {0x5, 0x4, 0x7d9, 0x7ff, 0x6, 0x9}, {0x100, 0x7, 0x8, 0x8, 0x2, 0x2}, {0x8, 0x136, 0x1, 0x9, 0x40, 0x2}, {0x9, 0x43, 0x2, 0xfffffff9, 0xfffffff1, 0x7}, {0x1, 0xfff, 0x6, 0xe, 0x5, 0x4}, {0x3, 0x8, 0x5, 0x0, 0x2, 0x33}, {0xffffffff, 0x80, 0x19, 0x6, 0x2dedbc04, 0x7}, {0x9, 0xffffffff, 0x5, 0x5, 0x0, 0x1ff}, {0x0, 0x9, 0x4, 0x2, 0x7}, {0x4f70b79c, 0xd5e, 0x2, 0x9, 0x2, 0x9}, {0x5, 0x7ff, 0xb290e79a, 0x0, 0x9, 0xa878}, {0x3, 0x8e70, 0x4, 0x7, 0x7fffffff, 0x8a6036a}, {0x0, 0x2, 0xfac, 0x4, 0x4, 0x4}, {0x0, 0x5, 0x1ff, 0x33, 0xa, 0x8}, {0xa, 0xffc00000, 0x5, 0x2, 0x6, 0x8}, {0x2, 0xd, 0x2, 0x6}, {0x1, 0x8498e23, 0x0, 0x5, 0x4, 0x9}, {0x9, 0x8, 0x8, 0x3, 0xffff, 0x6}, {0x40, 0x4, 0x8, 0x1, 0xe, 0x9}, {0xfffffff7, 0x2, 0x9, 0x8, 0x4, 0x1}, {0x5, 0x5, 0x64a, 0x5, 0x3, 0x1000}, {0x6, 0xd, 0x4, 0xa616, 0x2, 0x3}, {0x4, 0xe, 0xea, 0xa, 0x38, 0x6}, {0x6, 0x5, 0x240e, 0x5, 0x6, 0x8}, {0x7, 0x10, 0x7, 0x3, 0x1}, {0xfffffffa, 0x2, 0x4, 0x2, 0xffff, 0x4}, {0x3a9, 0x3, 0x9, 0x5, 0x2, 0xfffffffc}, {0x2, 0x6, 0xa2, 0x2, 0x4, 0x6}, {0x9, 0x1, 0x1, 0xbb84, 0x342, 0x5}, {0x5c9, 0x6, 0x1d4, 0xc, 0x3, 0x1}, {0x10001, 0x7, 0x0, 0x1, 0x3, 0x81}, {0x2c, 0x6, 0x1ff00, 0x0, 0x5, 0x9}, {0x8, 0x2, 0x5, 0x1, 0x1, 0x6}, {0x2, 0x8, 0x6ab60c6, 0x4, 0x9468, 0x7}, {0x0, 0x3, 0xc, 0x2, 0xb}, {0x10, 0xd, 0x7fffffff, 0xfff, 0x400, 0x6}, {0x40, 0x8, 0x6b05, 0x3, 0x8b6b}, {0x3, 0x6, 0x0, 0x1e, 0x0, 0x90}, {0x6, 0x9, 0x6, 0xb031, 0x0, 0x3}, {0xffffff06, 0x0, 0x1, 0x4, 0x2, 0x2}, {0xd, 0x0, 0x4, 0x8, 0x9, 0x8}, {0x5, 0x7, 0xc, 0x3, 0x8}, {0x8, 0x10001, 0x0, 0x1, 0x400, 0x8728}, {0x8, 0x4, 0x2, 0x7, 0x9, 0x5}, {0x8, 0x40, 0x7, 0xd7, 0x8000, 0x4}, {0x8000, 0xff, 0x4, 0x7, 0x0, 0x5}, {0x7, 0x4, 0x7ff, 0x1, 0x7fff, 0x8b5}, {0x9, 0x3, 0x1000, 0xffffd7b6, 0x58, 0x4}, {0x2, 0x4, 0x8bf4, 0x5, 0x8, 0x3}, {0x1, 0x9, 0x9, 0x4, 0x1, 0x597}, {0x9, 0x9, 0x8, 0x7, 0x7fffffff, 0x2}, {0xfffffffd, 0x8, 0x9, 0x10001, 0x6, 0x8}, {0x362, 0x7, 0x5, 0x4, 0x2, 0x7}, {0x1000, 0x100, 0x400, 0x0, 0x4, 0x3}, {0x800, 0x80000000, 0x0, 0x8000, 0xffff, 0xfff}, {0xce8f, 0x8, 0x4, 0x3, 0xe471, 0x80000001}, {0xf4e, 0xa, 0x46a, 0xd4fc, 0x5, 0x2}, {0xbb, 0x7e, 0xffffffff, 0xc06, 0x2, 0x5}, {0x2, 0xfff, 0x70, 0x8, 0x4, 0xfa6}, {0x8, 0x7, 0x2, 0x9, 0x4, 0x7fffffff}, {0x10000, 0xf, 0xffffe000, 0x981, 0x7, 0x6}, {0x0, 0x3f61, 0x7822, 0x5, 0x1ff, 0xdbc}, {0x800, 0x9, 0x9, 0x7, 0x6, 0x2}, {0x5, 0xffffd38a, 0x0, 0x54, 0x9, 0x6}, {0x1, 0x9, 0x5, 0xfffffffd, 0x3, 0x7fff}, {0x800, 0xe5ab, 0x1, 0x3, 0x40, 0x23d}, {0x8, 0xd60, 0xffffffff, 0x9, 0x5, 0x9}, {0xffff, 0x6, 0x1, 0x6, 0x5, 0x8}, {0xc563, 0x3577, 0x9, 0x17e, 0x7, 0x1ff}, {0x92, 0xfc, 0x5, 0x4, 0x2, 0x5}, {0xcf07, 0x7, 0x0, 0x6, 0x10000}, {0xffff8000, 0x9, 0x2ab, 0xff31, 0x1, 0xc}, {0x2, 0x0, 0x40, 0x7, 0x5, 0xf}, {0xd, 0x5, 0x9, 0x1, 0x36, 0x1}, {0x8, 0x80, 0x9, 0x5, 0x800, 0x9}, {0xfff, 0x3ff, 0xfffffffa, 0x6, 0x0, 0x9}, {0x0, 0x401, 0x5, 0xa, 0x0, 0x5}, {0x3, 0x2, 0x31, 0x200, 0x45c, 0x3ff}, {0x3, 0x80000001, 0x3, 0x2, 0xfffff800, 0xffffffff}, {0x2, 0x5, 0x47ba2e92, 0xff, 0x6, 0x4}, {0x80000000, 0x6, 0x101, 0x2, 0x0, 0x2}, {0x7fff, 0x0, 0x3, 0x7, 0x0, 0x1}, {0x0, 0x7, 0x40, 0x6, 0x0, 0x1b21}, {0xfffffffe, 0x5, 0xf, 0x8df3, 0xd218, 0xffff}, {0x2, 0x280, 0x2, 0x0, 0x1, 0x3}, {0x8, 0x9, 0x3, 0x3, 0x3, 0x9}, {0xfffffffa, 0x72, 0xa, 0x7, 0x5, 0x7fffffff}, {0x7, 0x9, 0x8, 0x8, 0x9, 0x7ea}, {0x7fff, 0x401, 0x6, 0x0, 0x9, 0x2}, {0x8, 0xa, 0x8, 0x8, 0x10, 0x3}, {0x1a27c0, 0xe46b, 0x0, 0x79, 0x5, 0x10}, {0x5, 0xfffffffc, 0x2e9, 0x3, 0x7fff, 0x6}, {0xa7c, 0x7, 0x5, 0x5, 0x6c1e0000, 0xb}, {0x4, 0x9c, 0x955f, 0x0, 0xfffffffc}, {0x5, 0xfffffffe, 0x9, 0xe1d, 0x56f3, 0x524}, {0x5460, 0x5fe9, 0x3, 0x1ff, 0x400, 0xc9d9}, {0x28, 0x7, 0x4, 0x8, 0x0, 0x455}, {0x3, 0xffffff7f, 0x2, 0x80, 0xfffffff6, 0x3}, {0x2edd76ad, 0x8, 0x8, 0x30, 0x0, 0x9}, {0x80, 0x1, 0xb, 0x6, 0x10000, 0x1}, {0x0, 0x5, 0xf, 0x4, 0x6e3, 0x80000000}, {0x1ff, 0x1f, 0xfffffffc, 0xff, 0x8, 0x3}, {0x9, 0x8, 0xd6, 0xa6, 0x4, 0x4}, {0x6, 0x0, 0x7, 0x0, 0x10001, 0x3}, {0x0, 0x2, 0x1, 0xfffffffc, 0x937, 0x1000000}, {0x0, 0x401, 0x3, 0x9, 0x12, 0x6}, {0x7, 0x81, 0x8, 0xff, 0x0, 0x7}, {0x4, 0x5, 0x46d, 0xffffffff, 0xc00000}, {0xe, 0x5, 0xe3b, 0x6fdd66a9, 0x6, 0x10000}, {0x550a, 0xfff, 0x0, 0x5, 0x9, 0x7ff}, {0x0, 0x5f7e60d9, 0x0, 0xb7a1, 0x1}, {0x9, 0x8, 0xbdf, 0x9, 0x7, 0xdb}, {0x8000, 0x401, 0xffff, 0x1, 0x4, 0x661}, {0x5, 0xffff0001, 0x62, 0x1, 0x5e45, 0x8}, {0x9, 0xffffff00, 0x9, 0x9, 0x8, 0x7fc7}, {0x1, 0x8, 0x0, 0x7f, 0x5, 0x438}, {0xfffffff5, 0xfffffffd, 0x6, 0xb, 0x8, 0x83d}, {0x7fff, 0xc00a, 0x4, 0xc, 0x9, 0x9}, {0x7fff, 0x5, 0x4, 0x1, 0x9, 0x4}], [{0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0xbd40362088dfd249}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x64267df803207b04}, {0x3}, {0x4}, {0x4}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x2}, {0x5}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x4}, {0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x7, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x6}, {0x1, 0x1}, {0x3}, {0x2}, {0x5}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0xe2caa2d46a0cad38}, {0x4, 0x1}, {0x3, 0x1}, {}, {0xefe39077f73736eb, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x3}, {0x2, 0x1}, {}, {0x2}, {0x5}, {}, {0x8}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x24, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x4}]}]}, {0xaa, 0x6, "ec17c0f1080905e82f8bd4ccc15566db2616471b2f34bc83e663fc6a604853db0108876fd8502e37bb7bbb584f8d11661441016ceba289927b76ad1b5fefd7989a8b17b19006e57adea73f2ab3b6cfd8b464dd1aab57c328b5550595c927b48781d01379a882ddc2476afd382cfdc2e4b41fb66254b6bd368c01de24f5a9731cccdc56600fa92024332051863963bb3084e3ee9f030b80e2ad711e7e12102ce325198d38bfe8"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xa4, 0x1, 0x0, 0x0, {{0x9}, {0x78, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x10000, 0x7, 0x5}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xe9, 0x0, 0x8, 0x0, 0x4}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x350}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x80000001, 0x4, 0x0, 0x0, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7fff, 0x20000000, 0x5, 0x6, 0x919, {0x3, 0x0, 0x2, 0x0, 0x40, 0x80}, {0x8, 0x0, 0x9, 0x401, 0x6, 0xf5}, 0x4253, 0xa34, 0xa724}}]}, @TCA_CGROUP_ACT={0x4}]}}]}, 0x3480}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) 5.859741969s ago: executing program 3 (id=872): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f00000001c0)=[{0xc, 0x5}]}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000000000008500000004"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000000000008500000004"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r2, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3}) syz_usb_connect$cdc_ncm(0x2, 0x204, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) 5.750994364s ago: executing program 2 (id=873): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xea7fc}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) (fail_nth: 7) 5.529323815s ago: executing program 2 (id=875): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) socket(0x1, 0x803, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x50, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x298}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x50}}, 0x0) 5.493382942s ago: executing program 0 (id=876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x40880) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[], 0xa4}}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'team_slave_1\x00', 0x1000}) 5.230503875s ago: executing program 0 (id=878): timer_create(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0xb0a8, 0x80, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffffff01, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0xf5) 5.230324774s ago: executing program 2 (id=879): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x28, 0x5, 0x0) getsockopt(r0, 0x28, 0x8, 0x0, 0x0) 5.229743029s ago: executing program 5 (id=880): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x9, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_usb_connect(0x0, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000480902120001000000000904000000ef"], 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000580)={0x28, 0x5, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6148ec1d}) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000200)=""/24, &(0x7f0000000680)=0x18) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000693c1e10cd060202043e010203010902240001000000000904230002722f680009057a43ff0346090509050e"], 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) clock_getres(0x8, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000030426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88801e80500180012800e0001007769726567756172640000000300000008001f0005000000"], 0x40}}, 0x440088c4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x25dfdbfd, {{@in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x100, 0x0, 0x0, 0x6, 0xa, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@loopback, 0x6c, 0x0, 0x0, 0x0, 0xa, 0x8}]}]}, 0xa0}}, 0x40000) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) syz_usb_connect$uac2(0x1, 0xcb, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0xfe, 0x0, 0x8, {0x8, 0xb, 0x2, 0x2, 0x1, 0xb, 0x20, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x8, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7, 0x1, 0x6, {0x8, 0x25, 0x1, 0x80, 0x30, 0xe, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x61, 0x4, 0x4, 0x2, 'U', '->1'}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x4, 0x4, 0x9, "03cd9e1fe0"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x6, 0x9, "4f8393c3c188844c"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x81, 0xffff, 0x48, 0x2}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0x8, 0x0, "eb9cec6f56251849"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xf, 0x2, 0x0, 0x1, "cc6d39"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x5, 0xad, {0x8, 0x25, 0x1, 0x2, 0x3, 0xff, 0x48e}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0xf, 0x2, 0xff, 0x8, 0x8}, 0x26, &(0x7f0000000180)={0x5, 0xf, 0x26, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0x10, 0x1, 0xc18, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x18, 0xff, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x4a, 0x1, 0x104}]}, 0x4, [{0x6, &(0x7f00000001c0)=@string={0x6, 0x3, "7eefc7ab"}}, {0x5, &(0x7f0000000780)=@string={0x5, 0x3, "a8daea"}}, {0xef, &(0x7f0000000240)=@string={0xef, 0x3, "9f4221702dc73c8c78c82a8cba25d93767f6b883a0acecc67e4194181846369bd97ed79db6a8d81e71184d910165bafd24551a3247f02321e3581d9664e39fd8448b01e885147c916e6a01542b4f7caa5f927187322aa0840146c01cd3e00ddccdbfa277b6380cfd5ddce2f90be01bc4301150474952a06bc57b48aad3c13623b41c34f37e8194c52c63fbb0a19fd639ee75ee0381cbcba4fe11ca9ff4b6b3034fbc94f85e548134c4187f6b93158ca351e6f3cb920efcb95d35650aeb73f5c2ee235550d1f650bd1fd5719f9997471be7fe21325236387556f7a829356bc5df8a31c7f18cb31159e39edc5350"}}, {0x72, &(0x7f0000000680)=ANY=[]}]}) 5.012812731s ago: executing program 2 (id=881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x39) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r3, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000140)=0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000000427bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4509020001c106002400128009000100626f6e64000000911400028008000a00010000000800140001000000"], 0x44}, 0x1, 0x0, 0x0, 0x6}, 0x0) 4.508713885s ago: executing program 0 (id=882): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=@newtfilter={0x3480, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3450, 0x2, [@TCA_CGROUP_ACT={0x3408, 0x1, [@m_tunnel_key={0x94, 0x7, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x9, 0xffffffffffffffff, 0x6, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x20, 0x6, "4631dc16d74eb6a3aa9f8256724bf086709bf86ac86c4dba8469fa92"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0xac, 0x1a, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xd}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xe4c, 0x3, 0x0, 0x7f, 0x433}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffffe1, 0xe07c, 0x4, 0x2, 0x7fff}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}]}, {0x1f, 0x6, "7f808b6d6f0421dce353fc1c4ec9061352edca361483fb0ea3cd43"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x3c, 0x0, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x8001}]}, {0xc, 0x6, "543ae5862fca6a0c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x234, 0x16, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff8, 0x6, 0x8, 0x4, 0xfffffbff}, @local, @rand_addr=0x64010101, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x2dc, 0x0, 0x4, 0x4}, @dev={0xac, 0x14, 0x14, 0x35}, @multicast2, 0x7f, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x4, 0x0, 0x8000}, @dev={0xac, 0x14, 0x14, 0x22}, @multicast2, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x5, 0x8, 0x9, 0x4}, @local, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff9, 0x4, 0x2, 0x9, 0x2}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x4, 0x0, 0x2}, @local, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x99a, 0x90c3, 0x1, 0x400, 0x9a}, @loopback, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x25, 0x10, 0x3, 0x4, 0xc48c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x1}}]}, {0xca, 0x6, "5dcd16fa614d62dc65309153978421596bbe3c044cfd52ea3ea8318053cd2580d49fe78ee740f02956ac5231899f875c05d662e4cd9696b3609a0d620d191347da54b30017c9614c9461b95089af01eba4d5ab5c5c8270a8223fb87572c83c17c3a533ca0e0caabf2151af5ccedc0975f7c880f5e6d404d034e2f5c7596acc0fcdb1c88357bd28f78cb62f1dedc68011dce08602f141c291a8c254bd5f29e6d7f7c631e1fd2f5166d37adcf3b48f5491e670b1aeeb1670124500fd19b24e3d71e1d1c7f0972d"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x10c, 0x8, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xc00000, 0x0, 0x4, 0x9}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000000, 0x572, 0x8, 0x6, 0x7ff}, 0x6}}]}, {0xa2, 0x6, "7a72cea93f8e792111b521b52fe9f0e7d24768c9685fd61b61c3e541b3d899cadf65be27110a4476c3fc33c45be9c71626aaa0a5cede8e618b944dff6f1061955de8412c05434e3d24759f30adce8944c2cf0f64426a4b72d15d1568f3a54ff14653f36e41f8851bce842bb7ee7d767db6498b69a0ddf146e1478fa13648be68e61fc82be6295e52b773d39727f797f23b248dd2fc75aae28292bba2c788"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x1dd0, 0x6, 0x0, 0x0, {{0xb}, {0x1cd0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xa463, 0x10, 0x9, 0x5a4, 0x5, 0x0, 0x8, 0x1000, 0x7, 0x100, 0x8, 0x9, 0x4, 0x0, 0xab60, 0xf9d, 0x4, 0x1, 0x5, 0x4, 0x3, 0x6, 0x751, 0x5, 0xffffffb8, 0x7fff, 0x6, 0x2, 0xc1e, 0x2, 0x5, 0x6, 0x9, 0x800, 0x1, 0x80, 0x1, 0x54, 0xffff, 0x5, 0x4, 0x40000000, 0x7fff, 0x3, 0x90e, 0x2, 0xd, 0x3, 0x3, 0xf, 0xb3d, 0x7, 0xcb00, 0x2, 0x80000001, 0x4, 0x2, 0xe, 0x8, 0xff, 0x7fff, 0x7fff, 0x6, 0xad, 0x40, 0x6, 0x7, 0xfffffffd, 0x1ff, 0xd, 0x4, 0x33, 0xffffff01, 0x81, 0x7, 0x9, 0x1, 0x5, 0xffffffff, 0x10000, 0x2, 0x5ea6, 0x8, 0xffffffba, 0x5, 0x5, 0x7ff, 0x2, 0x1ff, 0xfffff1d6, 0x4, 0xb, 0x1, 0xfffffffb, 0x6, 0xc0000000, 0x1000, 0x9, 0x2ec, 0xfffff3d0, 0xb25, 0x5, 0x1, 0x8, 0xfffff306, 0x6, 0x7, 0x6, 0x9e9d, 0x8, 0x8, 0x1, 0x7, 0x3, 0x10, 0x3, 0x2, 0x2, 0x2, 0x7, 0x7, 0x0, 0x5, 0x3, 0x1, 0x4, 0x2, 0x80000000, 0x0, 0x7, 0xc7, 0xb9, 0x80000000, 0x400, 0x14c, 0xf, 0x80000000, 0x9, 0xffffff01, 0xff, 0x3, 0x8, 0x7f, 0x0, 0x8674, 0x1, 0x3, 0x2, 0x40, 0x8, 0x10001, 0x3, 0x80000001, 0x3d4, 0xfffffffd, 0x6, 0x5, 0x81, 0x80, 0x9, 0x3, 0xff, 0xb6f, 0x1, 0x8, 0x8, 0x8, 0x6, 0x5, 0x10, 0x3, 0x8, 0x200, 0x8, 0xaa, 0x0, 0x1, 0x4, 0x0, 0x9, 0x8, 0x7, 0x3, 0xe, 0x5, 0x9, 0x57f79323, 0x8000, 0x87f, 0x5c, 0xa, 0x8, 0x3, 0x1ff, 0x3, 0x2, 0xe629, 0x6, 0x3, 0x0, 0x8, 0x7, 0x2, 0x5, 0x1, 0x3, 0x6, 0x8, 0x0, 0x5, 0x9, 0xaac, 0x8, 0x9, 0x1, 0x4e937e3b, 0x3, 0x10, 0x10000, 0x1000, 0x10000, 0xff, 0x1ff, 0x4, 0xfffffe01, 0xdc9, 0x9, 0x2, 0x3, 0x4, 0x10000, 0x4, 0xfffffff8, 0x1c00, 0x8, 0xf97, 0x8001, 0x7, 0x4, 0xc, 0x2, 0x4, 0x5, 0x2, 0x80000001, 0x7b24, 0x7, 0xb8ad, 0x1c, 0x5, 0x0, 0x8, 0x7fff, 0x1, 0xbe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9c1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc8c9}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x9, 0x0, 0xfffffff8, 0x6, 0xeb, 0x49, 0x3, 0x8, 0x6, 0x47, 0x8, 0x1, 0x2, 0x2, 0xfffffff7, 0xfffffffe, 0x5, 0x6, 0x3, 0xd34, 0x0, 0x7, 0x4d2f, 0x5, 0x9, 0x2, 0x2, 0x0, 0xf, 0x4, 0x6, 0x8001, 0x5b, 0x1000, 0x9a, 0x200, 0x2, 0xff, 0x7, 0x10001, 0x4e, 0xa2ca, 0x4, 0x5, 0x14, 0x308, 0xa, 0x0, 0x2, 0x7, 0xaf, 0x4, 0x8, 0xd3ce, 0x9, 0x5626, 0x5, 0x1, 0x0, 0x2, 0xb, 0x9, 0x0, 0xc, 0x4, 0x7b, 0x8, 0x9, 0x81, 0x1, 0xffff, 0x0, 0x6, 0x9, 0x10, 0xd258, 0xfff, 0x2, 0x80000000, 0xc, 0x18735c50, 0xa, 0x1, 0x7, 0x0, 0x7f1, 0x80000000, 0x80000001, 0x8, 0xbeee, 0x9, 0x6, 0x100, 0xa, 0x4, 0x3, 0xf6, 0x5, 0x8, 0x7, 0xf, 0x10000, 0x3ff, 0x0, 0x8, 0x10001, 0x9, 0x2, 0x0, 0x2, 0x200, 0x757, 0x6, 0x3, 0x8, 0xffffffff, 0x2, 0x8c, 0x7, 0x2, 0x180, 0x7fff, 0x9, 0x4, 0xf, 0x6, 0x3, 0x659, 0x4, 0x1, 0xffff, 0x3, 0x0, 0xffffffff, 0xef, 0x1, 0x6, 0x8000, 0x200, 0xab, 0x9, 0x0, 0x5, 0x40, 0x9, 0x9f7, 0x6, 0x0, 0x2, 0xffffffff, 0x0, 0x8001, 0x3ff, 0xc85, 0xff, 0x3, 0xc6, 0x5, 0x8, 0x6, 0x80, 0xde, 0x5, 0x5, 0x9, 0x40, 0x8, 0x1, 0x59d, 0xe, 0x3e, 0x9, 0x0, 0x3, 0x800, 0x7, 0x81, 0x5a3, 0x5, 0x5, 0x8000, 0x400, 0x5, 0x3, 0x3, 0x7fff, 0xfffffff7, 0x5, 0x100, 0x0, 0x9db, 0x6, 0x5, 0x78eb, 0xfffffffc, 0x81, 0x9, 0x8, 0x401, 0x7, 0xd317, 0x0, 0xef5, 0x3, 0xaa9, 0x8001, 0x7fff, 0x6, 0x0, 0x7, 0x0, 0x7, 0x1, 0xd482, 0x0, 0x10001, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x2c, 0x9, 0x6e, 0x4, 0x2, 0x101, 0xaa, 0x2761, 0xfffffffc, 0x3, 0x200, 0x4, 0x1, 0x0, 0xc9c2, 0xe, 0x28a7917d, 0x3, 0x6a, 0x0, 0x3, 0x5, 0x4, 0x8, 0x8, 0x8, 0x7ff, 0x9, 0x5, 0xffff, 0x8d, 0xf, 0xd2000000, 0x1b6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x3, 0xd, 0x800, 0xff, 0x10001, 0x2, 0x5, 0x1111, 0x6, 0x8, 0x2, 0x1, 0x5, 0x9, 0xe, 0x7, 0x5, 0x8001, 0x10000, 0x0, 0x80, 0x2, 0x4, 0x6, 0x4e63, 0x3, 0x2, 0x0, 0x5, 0x4, 0x38a, 0x1, 0x1, 0x6, 0x8, 0x4, 0x9, 0x0, 0x5, 0x178f, 0x10000, 0x4, 0xde2, 0x4, 0xd, 0x3, 0x8, 0x1, 0xfffffffc, 0xd7, 0x4, 0x7, 0x5, 0x40000000, 0x4, 0x7, 0x1, 0x0, 0x5, 0x0, 0xdbea, 0x8, 0x4a, 0x3ff, 0x3, 0x7, 0x3, 0xff, 0x2, 0xa, 0x5, 0x7ff, 0x1, 0x39, 0xf4, 0x2, 0x0, 0xe0, 0x2, 0x100, 0x1, 0x392, 0x80000000, 0x7fffffff, 0x1, 0x0, 0x9, 0x0, 0x9, 0xb9, 0x7, 0x9, 0x2, 0x5bb, 0xcd8, 0x3, 0x79, 0x200, 0x4, 0x6, 0x6, 0xad04, 0x200000, 0x2, 0x200, 0xffffffc8, 0x7b13, 0x0, 0x2, 0x3ff, 0xba, 0x6, 0xbcff, 0x7, 0x5, 0x4, 0x800, 0x141e, 0x7, 0x1, 0x0, 0x4, 0x7, 0x22, 0x100, 0x80, 0x2000, 0x473f, 0x8, 0xd1, 0x5, 0x4, 0x9, 0x982, 0x5, 0x1, 0x4, 0x2, 0x6, 0x2a, 0x0, 0x3, 0x1000000, 0x2, 0x4, 0x3, 0x401, 0x8, 0x5, 0x3, 0x1, 0xfffffff8, 0xe, 0x80000000, 0x1, 0xfffffff8, 0x7ff, 0x4, 0x6, 0x1, 0xe2, 0x9, 0x7, 0x2, 0x6, 0x70c, 0x800, 0x2, 0x8, 0x2, 0xf, 0xaa66, 0x2, 0x7f, 0x6, 0x4, 0x6, 0xfffffff7, 0x6, 0x55d, 0x9, 0x60, 0x4821, 0xc, 0xc, 0x7, 0xe, 0x7, 0x7, 0x18000000, 0x8, 0x4303, 0x3, 0x1d600000, 0x49, 0x401, 0x2, 0x6, 0x0, 0x4, 0x4, 0x7, 0x6, 0x3, 0xb4de, 0x3, 0x1, 0x8f, 0x4, 0xfffffff8, 0x9, 0x0, 0x0, 0x9, 0x5, 0x3ff, 0x1ff, 0x0, 0x9, 0xe6d, 0xbe, 0x7fffffff, 0x5, 0x9, 0x80000001, 0xa73, 0x6, 0x0, 0x800, 0x7, 0xa, 0x2, 0x10, 0xa, 0x2, 0x86d, 0x6, 0x5, 0x8, 0x708, 0x4, 0x841f, 0x5, 0x7, 0x80, 0x3d4f, 0x1, 0x3, 0x1, 0x1, 0x7, 0xfff, 0x6, 0x0, 0xe624]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0x5, 0x9, 0xd, {0xa, 0x2, 0x7, 0x7, 0xae, 0x4}, {0x3, 0x0, 0xb, 0x1ff, 0xc, 0x6}, 0x10, 0xae, 0xfa}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x22}], [@TCA_POLICE_RATE={0x404, 0x2, [0x652755c0, 0x3, 0x803, 0x2, 0x6, 0x401, 0x5d, 0x5, 0x8, 0x2, 0x2, 0x80, 0x1, 0x3, 0x2, 0x8, 0x80000001, 0x7fff, 0x3, 0x66a, 0x7, 0x2, 0x2, 0x2, 0x7, 0x5, 0x10000, 0x7, 0xffffffff, 0x4, 0x3, 0x7fff, 0x1, 0x8, 0x6, 0x0, 0x7e2d, 0x1, 0x1, 0x0, 0x18000, 0x1, 0xa66f, 0x2, 0x4, 0x8, 0x912c, 0xd, 0x67f, 0x9, 0x3, 0x6, 0x8, 0x0, 0x3, 0x0, 0x100, 0x40, 0x0, 0x4, 0x9, 0x3, 0x200, 0x5b, 0x4, 0x0, 0x7f, 0x0, 0x0, 0x1c3f, 0x5, 0x80000000, 0x40, 0x1, 0x6, 0x1, 0x8, 0x1677, 0x9, 0x7, 0x2, 0x5, 0x8, 0x4, 0x4, 0x2, 0x4, 0x10000, 0x40, 0x35, 0x7, 0x7, 0xc, 0x0, 0x0, 0x8, 0x8, 0x0, 0xb0, 0x4, 0x0, 0x6, 0x60, 0x6, 0x94, 0x401, 0x2, 0xffffffff, 0x1, 0x4, 0x1ff, 0x0, 0x0, 0xe810, 0x1, 0x7, 0x3, 0x5, 0x45, 0x5, 0x7fff, 0x40000000, 0x5, 0x6, 0x5, 0x10000, 0x5ec, 0x1, 0x7fffffff, 0x4ba1c912, 0xc, 0xc9a, 0x51, 0xfffffff0, 0xffff, 0x7fffffff, 0x9, 0x10000, 0x9, 0x5, 0x30, 0x3ff, 0x8, 0x2, 0x8, 0xfffff800, 0x3, 0x8, 0x7ff, 0xfff, 0x7, 0xa83, 0x4, 0x8, 0x7fffffff, 0x2, 0x0, 0x6, 0xc9, 0x10, 0x6, 0x8, 0x5, 0x0, 0x6, 0x2, 0x6, 0x24c8, 0x0, 0x3, 0x3, 0x3, 0xd2e0, 0x1, 0x0, 0x5, 0x40, 0x2, 0x3, 0xbaa, 0x7, 0xb4c6, 0x8, 0x1, 0x4, 0x6, 0x6, 0x10000, 0x0, 0x1ff, 0x9ba8, 0x8, 0x6, 0x5f, 0x100, 0x1, 0x0, 0x9, 0x7, 0xb, 0x8001, 0x9, 0x9, 0x7, 0x7, 0x9, 0x8, 0x4, 0x9, 0x7, 0xf6d, 0x2, 0x5, 0x800, 0x81, 0x1, 0xfffffff9, 0x10001, 0x3, 0x1000000, 0x0, 0x86, 0xfffffff2, 0x8, 0x6, 0x8, 0x2, 0x6, 0x40, 0x6, 0xfffffbff, 0xc, 0x7, 0x6, 0x5, 0x400, 0x7fffffff, 0x3, 0xd32, 0x4, 0x6, 0x6, 0x7, 0x7, 0x2, 0x4, 0x3, 0x7, 0x4, 0x2, 0x9, 0x1, 0x5, 0xe, 0xe, 0xf253]}, @TCA_POLICE_RATE={0x404, 0x2, [0xee58, 0x5, 0x6, 0x6, 0x7, 0x3, 0x1, 0x4, 0x8, 0x7, 0x7, 0x6, 0x1, 0x3, 0x3, 0x4, 0x6, 0x7, 0x0, 0x8, 0x6, 0x4, 0x9c0d, 0x7, 0x400, 0x38000000, 0xfffffffd, 0x103, 0x991, 0xcd5, 0xfffffffe, 0xd16e, 0x7fffffff, 0x4, 0x8000, 0x8001, 0x2, 0x4, 0x6, 0x72, 0x28347f00, 0x7, 0x7b62, 0x100, 0x7035e138, 0x2, 0x7, 0x9d, 0xd7c, 0x0, 0x1ed3e, 0x100, 0x3, 0x7fff, 0x800, 0xc, 0x834daa75, 0x3, 0x4, 0x2, 0x1, 0x7, 0x9, 0x7, 0x8, 0xff, 0x4, 0xdea4, 0x8, 0x0, 0x49b1, 0x6, 0x8000, 0x1ab34e33, 0x6, 0x1, 0x58, 0x9, 0x4, 0x9, 0x9, 0x9, 0x4, 0x9, 0xffff, 0x660, 0x8001, 0x1, 0x8000, 0x74, 0x3, 0x5, 0x4, 0x19, 0x6, 0xf3, 0x6, 0x800, 0x8, 0x9, 0xfffffffb, 0x614, 0x1, 0x1, 0x5, 0x2, 0xa, 0x8, 0x4, 0x10, 0x7, 0x593dee6d, 0xfffffffa, 0xd, 0x6, 0x101, 0x9, 0x1, 0xe, 0x8001, 0x0, 0x6, 0xff, 0x2, 0xe1fe, 0x40, 0x7, 0x8, 0x2fe21b6, 0x1, 0x4, 0x80, 0x200, 0x1, 0x5, 0xff, 0x7, 0x2, 0x81, 0x10000, 0xfffffff9, 0x4, 0x5, 0x9, 0x4, 0x7fffffff, 0x2, 0x3, 0x1, 0x54, 0x8000000, 0x9, 0x248, 0x7ff, 0x1, 0x8001, 0xfffffffe, 0xe, 0x1, 0x7bc, 0x55cd, 0x9, 0x25a, 0x74c, 0x0, 0x0, 0x5, 0x1, 0xa12, 0x6, 0x6, 0x707c, 0x1, 0x1, 0x2, 0x1, 0xc0, 0x4, 0x3, 0x1, 0x10001, 0x4, 0xc, 0x7360ba36, 0x8, 0x5, 0x8, 0xcef8, 0x3, 0x3c6e4b3, 0x100, 0x0, 0x401, 0x10, 0x16, 0xf8, 0x3, 0x8, 0x6, 0x40, 0x8, 0xa7, 0x694, 0x4, 0x1, 0x5, 0xa, 0x38, 0x60fc, 0x100, 0x1, 0x8c, 0x4, 0x7, 0xe, 0x6, 0x7fffffff, 0x9, 0x7fe8, 0x10000, 0x3, 0x9c, 0x9, 0x6, 0x7, 0x1fe00000, 0x5, 0x60, 0xffffffff, 0x3ff, 0x9, 0xe3, 0x7, 0x10, 0x2, 0x9, 0x5, 0xffffffff, 0x10000, 0x2, 0xff, 0x5, 0x4, 0x6, 0x2, 0x0, 0xfffffffa, 0x1, 0x2, 0x200, 0x8f, 0x800, 0x8, 0xacb7, 0xfdb7, 0x9835]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x0, 0x80000001, 0x10001, 0x9, 0x8, 0x8000, 0x5, 0x5, 0x5, 0x7, 0xffff, 0xfffffffc, 0x1, 0x71, 0x8e, 0x0, 0x40000000, 0x1, 0xfffffff6, 0x7ff, 0x8, 0x5, 0x7, 0xc, 0x8, 0x9, 0xfffffffe, 0xc, 0x0, 0x7fff, 0x2, 0x9, 0x1, 0x100, 0x9, 0x5, 0xfffffff9, 0x6, 0xff, 0x2, 0x800, 0xe6, 0x7, 0x1, 0x0, 0x5, 0x1d46, 0x8, 0x9, 0x1, 0x81, 0x5, 0x1, 0x9, 0x9, 0xe11, 0x3, 0x1ff, 0xa85, 0x5, 0x3, 0x5, 0xa266, 0x0, 0x3, 0xf, 0xba6, 0x80000001, 0x8, 0x101, 0xffff4dc9, 0x8, 0x3, 0x70, 0x3, 0x10, 0x5d3, 0x1, 0x5, 0x4, 0xef, 0x1ff, 0xa, 0x5, 0x0, 0x10, 0xff, 0x9, 0xcd6, 0xca4, 0x2, 0x4, 0x12a20000, 0xa7, 0x8, 0x7, 0xf665, 0xfffffffd, 0xffffffff, 0x100, 0x0, 0x0, 0xfffff88e, 0xfffffff7, 0xfffffff7, 0x1ff, 0xd8c2, 0x6, 0x1, 0x1, 0x99, 0x7, 0x2, 0x40c3cee8, 0x0, 0xa026, 0x0, 0x891, 0x10, 0xfffff4f7, 0x6, 0xffff, 0x0, 0x6, 0x8, 0x6, 0x49b, 0x7, 0x1, 0x3, 0x5, 0xffff, 0x7, 0x9, 0x200, 0x80000001, 0xfffffff9, 0x9, 0x5, 0x1, 0x2, 0x8, 0x9, 0x311f84a5, 0xfc, 0xb, 0x6, 0x5, 0x5, 0x8, 0x2, 0x6, 0xc, 0xfffffff9, 0x6, 0xcde, 0x71, 0xffffffff, 0x0, 0x200, 0x1, 0x92, 0x7, 0x9, 0x4, 0x5b, 0x6, 0x3, 0x9, 0x2, 0x679, 0x25f5, 0x8, 0x8, 0x7, 0x5135, 0x9, 0x1, 0x101, 0x7, 0x5, 0x3ff, 0x2000, 0xfffffff8, 0x2, 0x1, 0x1, 0x3, 0x6, 0xe8, 0xfffffffc, 0xffffff5b, 0xb0c, 0x400, 0x7, 0xd, 0x7, 0xd, 0x9, 0x2, 0x7, 0x6, 0x6, 0xbc58, 0x8, 0x2, 0xfffffffb, 0xb, 0xffff98d5, 0xc, 0x4, 0x4, 0x83e, 0x7, 0x5, 0x8001, 0x6, 0x8, 0x1, 0x4, 0x76, 0x4, 0x8, 0x0, 0x2, 0x76b562bd, 0x8000000, 0xffffe538, 0x5, 0x5, 0x6, 0x6, 0xe, 0xc8, 0x931c, 0x9, 0x5, 0xf575, 0x2, 0x9, 0x8, 0x100, 0x9, 0x7, 0x80000000, 0x80, 0x7, 0x400, 0x4, 0x5, 0x5, 0x6a, 0x0, 0xffff, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x43aa}, @TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x979, 0x6, 0x4, 0x81, 0x8, 0x3, 0xfffff000, 0x0, 0x80, 0x80000, 0x6, 0x881, 0x5a55, 0xed4, 0x6, 0xffff7fff, 0x3, 0x200, 0xaf8, 0x2, 0x297, 0x1, 0x100, 0x2, 0x4, 0x3, 0x9, 0xfffff000, 0x3, 0xd4d7, 0xca36, 0x2, 0x3, 0x0, 0x2, 0x7, 0x4, 0x2, 0x0, 0x2, 0x81, 0x0, 0x7, 0x1e37, 0x8, 0x15, 0xe6, 0x80, 0x7, 0xff, 0x86, 0x0, 0x200, 0xfff, 0x4, 0x2, 0x1, 0x9, 0x9, 0x4, 0x81, 0x8000000, 0x10, 0x3, 0x3, 0x50fb, 0x81, 0x1eac, 0x5a1, 0x3, 0x0, 0x6, 0x1, 0x0, 0x10, 0x0, 0xe5, 0x3, 0xf, 0x9, 0xb4, 0x7fff, 0x1, 0xff, 0x7, 0x2, 0x8, 0x3, 0x3, 0xe84d, 0x1, 0x9, 0x6, 0x6, 0x1000, 0x3, 0x2695d18c, 0x9, 0x1, 0xffffffff, 0x6883, 0x2, 0x2, 0x7ff, 0xea9, 0xffff, 0xb, 0x1, 0x0, 0x9, 0x1f0, 0x4cb, 0x60000, 0x9, 0x101, 0xa, 0x7, 0x8, 0x2, 0xaf, 0xfffffffe, 0x8, 0x200, 0x0, 0x4, 0x7fff, 0x80000000, 0xffff, 0xe, 0x9, 0x2, 0x5, 0x3, 0x7, 0x8, 0xb, 0x4, 0x800, 0x8, 0xb6, 0x9, 0x9, 0x81, 0x400, 0x7fff, 0x4, 0x2, 0x9, 0x2, 0x10000, 0xe, 0x3, 0x3, 0x0, 0x9, 0x8, 0x9, 0xfaff, 0xd, 0x8, 0x1e0, 0xd3, 0x7, 0xd, 0xf4, 0x0, 0x800, 0x3, 0x3, 0x1ff, 0xb6, 0x4, 0x1000, 0x8, 0xb, 0xfffffff9, 0x9866, 0x2, 0x4, 0x4f, 0x9, 0xfff, 0x3, 0x10, 0x800, 0xffffffff, 0x9, 0x4, 0xfffffff3, 0x3, 0x4, 0x200, 0xffff, 0x2, 0x82e, 0xb, 0x96a3, 0x80000001, 0x9f, 0x5, 0x3, 0x6, 0x53c7, 0xfffffff7, 0x5, 0x3, 0x24000, 0xfffffffd, 0x331e, 0x9, 0x8, 0x73c, 0x8, 0x6e, 0x9, 0x7, 0x8001, 0x8, 0xb6, 0x5, 0x401, 0xfffffffa, 0x3, 0x40000, 0x400, 0x4, 0x9, 0x2, 0x1, 0x57e38262, 0xcc8, 0x3, 0x6, 0xfe7, 0xb, 0xb47, 0xfffffff8, 0xff, 0x7, 0x7, 0x3, 0x4, 0x8, 0x3, 0x0, 0x5, 0x4, 0x100, 0xc9, 0x400, 0x4, 0x4, 0x8, 0x2, 0x6, 0xa]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffb}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6b7}]]}, {0xd7, 0x6, "dc29888e110d36a6b313dbe1418ad2cf06b7961e6e8d91e526770728d945e713976474cfa7598b2f016c5e348f27b9b8b05ecf18bd4b20ce148a9399312a45da0b8f975ce888627cc6ee01a149fd1ddd7da622e13584762ddea5a299dfbd7b8bfb606d0fa36e67091881245c81dba45daec79d6bef682719735d356c0e74a20c811990fea0a7c79eeaf95b9640cf4fbfebf19e61ea793b62eb98ccebba77bd22d7a27b4d856b33fbed7926b83a331aa9331625512717ae816149b67e1c9100a39468af004fe9cfb89e16f7dbed173ba937fef9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xcc, 0x12, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ce5, 0x6, 0x3, 0xd, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x9, 0x3, 0x46bf, 0xe0f}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1ff, 0x7, 0x81, 0x6}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x600000, 0x1, 0x7, 0x5, 0x3}, 0x4, r1}}]}, {0x1f, 0x6, "26871296514f63c43a804aca10a0253899c4cc3582493201081e4a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x3}}}}, @m_mpls={0xbc, 0x12, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x8a}]}, {0x87, 0x6, "381b27a751adc446891ef006523800cb5a19a5e4cfbe660fb435971d7678aab043080413a189edd521f028ead140620cdcebc1ba44450fea8a8b0c03780bc97f63a8dc17202d8b5d5fcb2f82320179edaa3ab5bfcb5b889583421ca5b73dd0eeb4179ea2e0cb1b3129af4d853ecbcba8698481d7da01e17dd712e386b2323cf1353114"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_pedit={0xf4c, 0x14, 0x0, 0x0, {{0xa}, {0xe78, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x4, 0x7f, 0x6, 0x200, 0x80}, 0xa, 0x7, [{0x4, 0x5, 0x3, 0x0, 0x0, 0xa}, {0x8, 0x4, 0x1, 0x5, 0xffffffff, 0x81}]}, [{0x7f, 0xfffffff7, 0x1000, 0xff, 0x2, 0xc0000000}, {0xb, 0x80, 0xc066, 0x7fffffff, 0x96d0, 0xce73}, {0x5, 0x5, 0x4, 0x6, 0x1ff}, {0x0, 0x3, 0x6, 0x7, 0x3, 0xdfeb}, {0x5, 0x600, 0x2, 0x3, 0xdb87, 0x6}, {0x8, 0x200, 0x1, 0x6, 0x2, 0x1000}, {0x2, 0x0, 0x0, 0x8, 0x7, 0x3928}, {0x1ff, 0xa8f, 0xf9c, 0x2, 0x3ff, 0x2}, {0x8, 0x500000, 0x4, 0x2, 0x3, 0x4a}, {0x5, 0x4, 0x7d9, 0x7ff, 0x6, 0x9}, {0x100, 0x7, 0x8, 0x8, 0x2, 0x2}, {0x8, 0x136, 0x1, 0x9, 0x40, 0x2}, {0x9, 0x43, 0x2, 0xfffffff9, 0xfffffff1, 0x7}, {0x1, 0xfff, 0x6, 0xe, 0x5, 0x4}, {0x3, 0x8, 0x5, 0x0, 0x2, 0x33}, {0xffffffff, 0x80, 0x19, 0x6, 0x2dedbc04, 0x7}, {0x9, 0xffffffff, 0x5, 0x5, 0x0, 0x1ff}, {0x0, 0x9, 0x4, 0x2, 0x7}, {0x4f70b79c, 0xd5e, 0x2, 0x9, 0x2, 0x9}, {0x5, 0x7ff, 0xb290e79a, 0x0, 0x9, 0xa878}, {0x3, 0x8e70, 0x4, 0x7, 0x7fffffff, 0x8a6036a}, {0x0, 0x2, 0xfac, 0x4, 0x4, 0x4}, {0x0, 0x5, 0x1ff, 0x33, 0xa, 0x8}, {0xa, 0xffc00000, 0x5, 0x2, 0x6, 0x8}, {0x2, 0xd, 0x2, 0x6}, {0x1, 0x8498e23, 0x0, 0x5, 0x4, 0x9}, {0x9, 0x8, 0x8, 0x3, 0xffff, 0x6}, {0x40, 0x4, 0x8, 0x1, 0xe, 0x9}, {0xfffffff7, 0x2, 0x9, 0x8, 0x4, 0x1}, {0x5, 0x5, 0x64a, 0x5, 0x3, 0x1000}, {0x6, 0xd, 0x4, 0xa616, 0x2, 0x3}, {0x4, 0xe, 0xea, 0xa, 0x38, 0x6}, {0x6, 0x5, 0x240e, 0x5, 0x6, 0x8}, {0x7, 0x10, 0x7, 0x3, 0x1}, {0xfffffffa, 0x2, 0x4, 0x2, 0xffff, 0x4}, {0x3a9, 0x3, 0x9, 0x5, 0x2, 0xfffffffc}, {0x2, 0x6, 0xa2, 0x2, 0x4, 0x6}, {0x9, 0x1, 0x1, 0xbb84, 0x342, 0x5}, {0x5c9, 0x6, 0x1d4, 0xc, 0x3, 0x1}, {0x10001, 0x7, 0x0, 0x1, 0x3, 0x81}, {0x2c, 0x6, 0x1ff00, 0x0, 0x5, 0x9}, {0x8, 0x2, 0x5, 0x1, 0x1, 0x6}, {0x2, 0x8, 0x6ab60c6, 0x4, 0x9468, 0x7}, {0x0, 0x3, 0xc, 0x2, 0xb}, {0x10, 0xd, 0x7fffffff, 0xfff, 0x400, 0x6}, {0x40, 0x8, 0x6b05, 0x3, 0x8b6b}, {0x3, 0x6, 0x0, 0x1e, 0x0, 0x90}, {0x6, 0x9, 0x6, 0xb031, 0x0, 0x3}, {0xffffff06, 0x0, 0x1, 0x4, 0x2, 0x2}, {0xd, 0x0, 0x4, 0x8, 0x9, 0x8}, {0x5, 0x7, 0xc, 0x3, 0x8}, {0x8, 0x10001, 0x0, 0x1, 0x400, 0x8728}, {0x8, 0x4, 0x2, 0x7, 0x9, 0x5}, {0x8, 0x40, 0x7, 0xd7, 0x8000, 0x4}, {0x8000, 0xff, 0x4, 0x7, 0x0, 0x5}, {0x7, 0x4, 0x7ff, 0x1, 0x7fff, 0x8b5}, {0x9, 0x3, 0x1000, 0xffffd7b6, 0x58, 0x4}, {0x2, 0x4, 0x8bf4, 0x5, 0x8, 0x3}, {0x1, 0x9, 0x9, 0x4, 0x1, 0x597}, {0x9, 0x9, 0x8, 0x7, 0x7fffffff, 0x2}, {0xfffffffd, 0x8, 0x9, 0x10001, 0x6, 0x8}, {0x362, 0x7, 0x5, 0x4, 0x2, 0x7}, {0x1000, 0x100, 0x400, 0x0, 0x4, 0x3}, {0x800, 0x80000000, 0x0, 0x8000, 0xffff, 0xfff}, {0xce8f, 0x8, 0x4, 0x3, 0xe471, 0x80000001}, {0xf4e, 0xa, 0x46a, 0xd4fc, 0x5, 0x2}, {0xbb, 0x7e, 0xffffffff, 0xc06, 0x2, 0x5}, {0x2, 0xfff, 0x70, 0x8, 0x4, 0xfa6}, {0x8, 0x7, 0x2, 0x9, 0x4, 0x7fffffff}, {0x10000, 0xf, 0xffffe000, 0x981, 0x7, 0x6}, {0x0, 0x3f61, 0x7822, 0x5, 0x1ff, 0xdbc}, {0x800, 0x9, 0x9, 0x7, 0x6, 0x2}, {0x5, 0xffffd38a, 0x0, 0x54, 0x9, 0x6}, {0x1, 0x9, 0x5, 0xfffffffd, 0x3, 0x7fff}, {0x800, 0xe5ab, 0x1, 0x3, 0x40, 0x23d}, {0x8, 0xd60, 0xffffffff, 0x9, 0x5, 0x9}, {0xffff, 0x6, 0x1, 0x6, 0x5, 0x8}, {0xc563, 0x3577, 0x9, 0x17e, 0x7, 0x1ff}, {0x92, 0xfc, 0x5, 0x4, 0x2, 0x5}, {0xcf07, 0x7, 0x0, 0x6, 0x10000}, {0xffff8000, 0x9, 0x2ab, 0xff31, 0x1, 0xc}, {0x2, 0x0, 0x40, 0x7, 0x5, 0xf}, {0xd, 0x5, 0x9, 0x1, 0x36, 0x1}, {0x8, 0x80, 0x9, 0x5, 0x800, 0x9}, {0xfff, 0x3ff, 0xfffffffa, 0x6, 0x0, 0x9}, {0x0, 0x401, 0x5, 0xa, 0x0, 0x5}, {0x3, 0x2, 0x31, 0x200, 0x45c, 0x3ff}, {0x3, 0x80000001, 0x3, 0x2, 0xfffff800, 0xffffffff}, {0x2, 0x5, 0x47ba2e92, 0xff, 0x6, 0x4}, {0x80000000, 0x6, 0x101, 0x2, 0x0, 0x2}, {0x7fff, 0x0, 0x3, 0x7, 0x0, 0x1}, {0x0, 0x7, 0x40, 0x6, 0x0, 0x1b21}, {0xfffffffe, 0x5, 0xf, 0x8df3, 0xd218, 0xffff}, {0x2, 0x280, 0x2, 0x0, 0x1, 0x3}, {0x8, 0x9, 0x3, 0x3, 0x3, 0x9}, {0xfffffffa, 0x72, 0xa, 0x7, 0x5, 0x7fffffff}, {0x7, 0x9, 0x8, 0x8, 0x9, 0x7ea}, {0x7fff, 0x401, 0x6, 0x0, 0x9, 0x2}, {0x8, 0xa, 0x8, 0x8, 0x10, 0x3}, {0x1a27c0, 0xe46b, 0x0, 0x79, 0x5, 0x10}, {0x5, 0xfffffffc, 0x2e9, 0x3, 0x7fff, 0x6}, {0xa7c, 0x7, 0x5, 0x5, 0x6c1e0000, 0xb}, {0x4, 0x9c, 0x955f, 0x0, 0xfffffffc}, {0x5, 0xfffffffe, 0x9, 0xe1d, 0x56f3, 0x524}, {0x5460, 0x5fe9, 0x3, 0x1ff, 0x400, 0xc9d9}, {0x28, 0x7, 0x4, 0x8, 0x0, 0x455}, {0x3, 0xffffff7f, 0x2, 0x80, 0xfffffff6, 0x3}, {0x2edd76ad, 0x8, 0x8, 0x30, 0x0, 0x9}, {0x80, 0x1, 0xb, 0x6, 0x10000, 0x1}, {0x0, 0x5, 0xf, 0x4, 0x6e3, 0x80000000}, {0x1ff, 0x1f, 0xfffffffc, 0xff, 0x8, 0x3}, {0x9, 0x8, 0xd6, 0xa6, 0x4, 0x4}, {0x6, 0x0, 0x7, 0x0, 0x10001, 0x3}, {0x0, 0x2, 0x1, 0xfffffffc, 0x937, 0x1000000}, {0x0, 0x401, 0x3, 0x9, 0x12, 0x6}, {0x7, 0x81, 0x8, 0xff, 0x0, 0x7}, {0x4, 0x5, 0x46d, 0xffffffff, 0xc00000}, {0xe, 0x5, 0xe3b, 0x6fdd66a9, 0x6, 0x10000}, {0x550a, 0xfff, 0x0, 0x5, 0x9, 0x7ff}, {0x0, 0x5f7e60d9, 0x0, 0xb7a1, 0x1}, {0x9, 0x8, 0xbdf, 0x9, 0x7, 0xdb}, {0x8000, 0x401, 0xffff, 0x1, 0x4, 0x661}, {0x5, 0xffff0001, 0x62, 0x1, 0x5e45, 0x8}, {0x9, 0xffffff00, 0x9, 0x9, 0x8, 0x7fc7}, {0x1, 0x8, 0x0, 0x7f, 0x5, 0x438}, {0xfffffff5, 0xfffffffd, 0x6, 0xb, 0x8, 0x83d}, {0x7fff, 0xc00a, 0x4, 0xc, 0x9, 0x9}, {0x7fff, 0x5, 0x4, 0x1, 0x9, 0x4}], [{0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0xbd40362088dfd249}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x64267df803207b04}, {0x3}, {0x4}, {0x4}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x2}, {0x5}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x4}, {0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x7, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x6}, {0x1, 0x1}, {0x3}, {0x2}, {0x5}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0xe2caa2d46a0cad38}, {0x4, 0x1}, {0x3, 0x1}, {}, {0xefe39077f73736eb, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x3}, {0x2, 0x1}, {}, {0x2}, {0x5}, {}, {0x8}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x24, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x4}]}]}, {0xaa, 0x6, "ec17c0f1080905e82f8bd4ccc15566db2616471b2f34bc83e663fc6a604853db0108876fd8502e37bb7bbb584f8d11661441016ceba289927b76ad1b5fefd7989a8b17b19006e57adea73f2ab3b6cfd8b464dd1aab57c328b5550595c927b48781d01379a882ddc2476afd382cfdc2e4b41fb66254b6bd368c01de24f5a9731cccdc56600fa92024332051863963bb3084e3ee9f030b80e2ad711e7e12102ce325198d38bfe8"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xa4, 0x1, 0x0, 0x0, {{0x9}, {0x78, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x10000, 0x7, 0x5}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xe9, 0x0, 0x8, 0x0, 0x4}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x350}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x80000001, 0x4, 0x0, 0x0, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7fff, 0x20000000, 0x5, 0x6, 0x919, {0x3, 0x0, 0x2, 0x0, 0x40, 0x80}, {0x8, 0x0, 0x9, 0x401, 0x6, 0xf5}, 0x4253, 0xa34, 0xa724}}]}, @TCA_CGROUP_ACT={0x4}]}}]}, 0x3480}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) 4.282464553s ago: executing program 2 (id=883): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x8, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffffffff, @empty, 0xa09b}, {0xa, 0x4e21, 0x8000009, @mcast1}, r2, 0x4040099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f0000000000000000000000001000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00*'], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0xc61, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x0, 0x20002f7}) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x8004) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000003c0)=@add_del={0x2, &(0x7f0000000380)='pimreg1\x00'}) 4.255827789s ago: executing program 3 (id=884): syz_clone(0x204100, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000180), 0x401, 0x2400) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000080)={0xd927adf1f4a76bcd, 0x0, {0x1, 0x6f0d203, 0x301d, 0x8, 0x3, 0x6, 0x2, 0x6}}) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000200)={0x0, 0x2f, 0xb7, {0xb7, 0x2, "0d2de2d2bd056d83d9aa5cbb99f9d16ea82d826124e6d812e1ad8aa892c316df8ed428fdd4fcadf294032783f79073c851fecea854b982fbd8ae2c45a8319224573191dc988659979e3ee3d8028293a859be7ebac9b61f3aae12aeac441868a795399d368b5cf064051a304200018f1c7802a24f5ea1410d7a946c7fecd0af4ea46bb7f7df6f0b792feff63fea29fa7beac86bb6d0a55ecc5d2811fea49942dbd7e1136c75b68ffa3e8994e8b6d62c634459d8af62"}}, &(0x7f0000000000)={0x0, 0x3, 0x9, @string={0x9, 0x3, "5adb30f6e6ec17"}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x60, 0x2, 0x3b, "d6a819ec", "4f2ce27e"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xce, 0x0, 0x1, 0xc, 0xc6, 0xf, 0x8}}}, &(0x7f0000000ac0)={0x84, &(0x7f00000005c0)={0x20, 0x6, 0xf9, "4b78e3b53934bd0540681fea8102bbd7fe567177a699270a3e6565dc7aee720424b63c7e240e6b2faa575ba2f627a5d26465412c4f45daaddb95cce527cc5f34415692578419525aa84fbb5f5c55ea28c665b796f93ff5de248b47fc77dc1d03a19cb76ae6f63d46e3972a4c4f9a0243fcfd1ef82d2237d319cf36b77d0e931537d9504ce56e16ece35902589f94d5f8f54cd9b04e228131620b0d08a086e2a274510691401cf709d809ad24965735c42aabaa6d182e94d116eb144486e22ab32a14b2b53c056f4917ad4d818e821b0b10c8a498dc1c603d82df70f36e419f746f403a0293f6f74d5d8f05d973dbeb4bd057d49c30500f57cb"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x200, 0x80}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0xfffb}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000880)={0x40, 0xb, 0x2, "1eb3"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000900)={0x40, 0x13, 0x6, @local}, &(0x7f0000000940)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000980)={0x40, 0x19, 0x2, "3693"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0xdf}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0xff}}) 4.195550239s ago: executing program 5 (id=885): r0 = gettid() r1 = getpgid(r0) rt_tgsigqueueinfo(r1, r0, 0x5, &(0x7f0000000200)={0x5, 0x8}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000080)={@none}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f00000000c0)={@none, 0x0, 0x6, 0x5, 0xfff8, 0x5, "154847f0270e369426554b90e1b9d7a05bc67ce79902f7365b07839bcc421880dc5373dd3182d66d6fd3507dba164b32fa1496feba9d18379378f5b6af673c3ab13e60a3524e3a5d29c649d096337af4aaefc8bcf28e2a2843e646618f27d7b8fce1e19c3afff2c594d6618e2d974cdacdaa7262e22045e66c4b2195e48d804e"}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0xfff, 0x0) 4.033293062s ago: executing program 0 (id=886): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c"], 0x340a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b60, 0x0, 0xfffffffffffffdfd) (fail_nth: 2) 2.690013851s ago: executing program 5 (id=887): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c"], 0x340a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b60, 0x0, 0xfffffffffffffdfd) 2.581348589s ago: executing program 5 (id=888): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x40880) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2d, 0x2, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x11d, 0x1, 0x0, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='lp', 0x2) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9", 0x11}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dba", 0x4}], 0x1}}], 0x2, 0x80) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r2], 0xa4}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 2.545701346s ago: executing program 0 (id=889): socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 64) r2 = socket$key(0xf, 0x3, 0x2) (rerun: 64) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) (async, rerun: 32) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002"], 0x0) epoll_create1(0x80000) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000006000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, 0x0, 0x7}, 0xffffff0b) (rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000540)=""/229, 0xe5}], 0x1, 0xa3, 0x0) r4 = io_uring_setup(0x165e, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="006232ff54e0000000", @ANYRES16=r6, @ANYBLOB="831026bd7000fcdb9f251600000018000180140002006e657464657673696d3000000000000005000300000000000500020000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000004) (async) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (async) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x410000, 0x0) 1.874064025s ago: executing program 5 (id=890): r0 = request_key(&(0x7f0000000300)='syzkaller\x00', 0x0, &(0x7f00000005c0)='(\x00', 0xfffffffffffffff9) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x2014800, 0x0) acct(0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='lp', 0x2) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (fail_nth: 1) socket(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x37, 0x37, 0x33, 0x38, 0x66, 0x35, 0x39, 0x7, 0x35, 0x37, 0x34, 0x35, 0x32, 0x32, 0x65, 0x36]}, &(0x7f00000000c0)={0x0, "a1322e09beb6b531148a09697601003c769da4040325798eece2121066c0a8346413afd744554464c8e2315deb30f766f02dd25f941e926d77c2eb5b12dbe79c", 0x17}, 0x48, r0) r7 = socket(0x10, 0xe, 0x9) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000cab000)) 1.831211341s ago: executing program 1 (id=891): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x28, 0x5, 0x0) getsockopt(r0, 0x28, 0x8, 0x0, 0x0) 793.788981ms ago: executing program 5 (id=892): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x10, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c984) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x28, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000f2b000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) listen(r4, 0x3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x9c, &(0x7f0000000880)={@local, @local, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x1, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x86, 0x65, 0x0, 0xf, 0x6, 0x0, @broadcast, @local}, {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x2, 0xffff, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0x4}]}}, {"c214d520b7fbade4cac7761b07336f67095457f799a4caf8502b6a9561c4067432fb8e7cae0ab4eff64e6e0133bbeaad4585a90370eb751d889f5fac306a68359419edb2951ad3314530329e5b000000000000000000"}}}}}}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r8, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x57, [0x6, 0xc95a, 0xfffffff8, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0x80000001, 0x7, 0x7, 0x8000, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0x7fff, 0x2, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8efd, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x80000001, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2c, 0xe, 0xffffffff, 0x78, 0xea5, 0x2, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400003, 0xff, 0x1005, 0x7ff, 0x9, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x5, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c9b690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x1, 0x9, 0x5, 0x7fff, 0x0, 0x2, 0xa, 0x3, 0x5, 0x5, 0x0, 0x41f3, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x101, 0x3, 0x1000200, 0x80, 0x3, 0x4, 0x6, 0x1, 0xa2, 0x6, 0x53cf697b, 0x8, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x4, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x0, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x8, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x5, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x205, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x5, 0x100, 0x9602, 0x6, 0x3, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 672.782088ms ago: executing program 1 (id=893): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x10, 0x16, 0x0, 0x1, [@typed={0xb, 0x2a, 0x0, 0x0, @binary="f4f7599e9ddc2a"}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) (fail_nth: 7) 10.816674ms ago: executing program 1 (id=894): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0xffffffff, 0x4) r1 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x40, 0x55, 0x7, 0xfff00000}, {0x16, 0x0, 0x0, 0x40000000}]}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "1edefda9e4135c4b7abef89b614c021e0a1f80765ce02a410eadf085209da1f9447bb2ee96fd32fd8c21514b76573c75880fda819985cfc772d18ad714dac5d8", 0x19}, 0x48, 0xfffffffffffffffd) keyctl$read(0xb, r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000340)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="495300f8000000000000670000020c0006000000000024000000040042"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x408d6, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket(0xa, 0x802, 0x0) syz_clone3(&(0x7f0000000880)={0x200000000, &(0x7f0000000500), &(0x7f0000000540), &(0x7f00000005c0)=0x0, {0x1}, &(0x7f0000000600)=""/89, 0x59, &(0x7f00000007c0)=""/97, &(0x7f0000000840)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x7}, 0x58) sched_setscheduler(r9, 0x1, &(0x7f0000000900)=0x80000000) setsockopt$inet_int(r8, 0x29, 0x18, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2d, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r1, &(0x7f00000003c0)="11b718e75e6bab57cd4a229561cde7fa2109387df5f8bc2d463ec6b59cd7d0f428be451755d892d36328f9782e6ac0a9b04fffc9f9d7eb751570ebd8040d2b20e683da18cc88d8381c32f547a701f29c4a469e0b8946adc61e", 0x59, 0x88000, &(0x7f00000004c0)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x69}, 0x1c) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) getresuid(&(0x7f0000000140), &(0x7f00000001c0)=0x0, &(0x7f0000000280)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x38, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@typed={0x8, 0x11e, 0x0, 0x0, @uid=r11}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @typed={0x8, 0xba, 0x0, 0x0, @fd=r7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 0s ago: executing program 3 (id=895): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x7000000) fcntl$setpipe(r3, 0x407, 0x100004) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) read(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): em tag 0x0 [ 285.728591][ T5910] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 285.917213][ T5910] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 285.985747][ T7701] pim6reg: entered allmulticast mode [ 286.269729][ T36] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 286.314866][ T36] usb 1-1: USB disconnect, device number 15 [ 286.404859][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 286.490891][ T10] usb 3-1: USB disconnect, device number 16 [ 286.511812][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 286.520247][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 286.530980][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.553910][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 286.685174][ T7720] fido_id[7720]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 286.902528][ T1283] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.055778][ T7732] siw: device registration error -23 [ 287.188879][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 288.013699][ T5920] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 288.109144][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.109179][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 288.111676][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 288.111788][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 288.111801][ T10] usb 2-1: Product: syz [ 288.111809][ T10] usb 2-1: Manufacturer: syz [ 288.111818][ T10] usb 2-1: SerialNumber: syz [ 288.186173][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.186203][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 288.186275][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 288.194374][ T5920] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 288.194403][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.194421][ T5920] usb 1-1: Product: syz [ 288.194434][ T5920] usb 1-1: Manufacturer: syz [ 288.194447][ T5920] usb 1-1: SerialNumber: syz [ 288.216393][ T5920] usb 1-1: config 0 descriptor?? [ 288.231659][ T5920] uvcvideo 1-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 288.231692][ T5920] uvcvideo 1-1:0.0: No valid video chain found. [ 289.501462][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 289.714518][ T60] Bluetooth: hci4: command tx timeout [ 290.062469][ T5882] usb 1-1: USB disconnect, device number 16 [ 291.663676][ T36] usb 2-1: USB disconnect, device number 22 [ 291.778184][ T1283] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.796101][ T60] Bluetooth: hci4: command tx timeout [ 292.108825][ T7721] lo speed is unknown, defaulting to 1000 [ 292.989011][ T7763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.546'. [ 293.306527][ T7772] siw: device registration error -23 [ 293.874613][ T60] Bluetooth: hci4: command tx timeout [ 293.923595][ T37] audit: type=1326 audit(1774307470.849:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7776 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc51f15c799 code=0x7ffc0000 [ 293.923650][ T37] audit: type=1326 audit(1774307470.849:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7776 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc51f15c799 code=0x7ffc0000 [ 293.923694][ T37] audit: type=1326 audit(1774307470.849:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7776 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc51f15c799 code=0x7ffc0000 [ 294.334870][ T7775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.546'. [ 294.339324][ T7775] nbd: nbd64 already in use [ 294.347449][ T7781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.546'. [ 294.347479][ T7781] nbd: nbd64 already in use [ 294.503382][ T1283] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.563754][ T5884] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 294.565976][ T5882] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 294.693979][ T5884] usb 1-1: device descriptor read/64, error -71 [ 294.719165][ T5882] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 294.719233][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.722464][ T5882] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 294.722496][ T5882] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 294.722517][ T5882] usb 2-1: Manufacturer: syz [ 294.824802][ T5882] usb 2-1: config 0 descriptor?? [ 294.934142][ T5884] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 294.953606][ T5882] rc_core: IR keymap rc-hauppauge not found [ 294.953628][ T5882] Registered IR keymap rc-empty [ 294.957976][ T5882] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 294.961601][ T5882] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18 [ 295.025191][ T7073] udevd[7073]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 295.063751][ T5884] usb 1-1: device descriptor read/64, error -71 [ 295.181037][ T5884] usb usb1-port1: attempt power cycle [ 295.255383][ C1] igorplugusb 2-1:0.0: receive overflow invalid: 189 [ 295.462394][ T5920] usb 2-1: USB disconnect, device number 23 [ 295.543695][ T5884] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 295.574933][ T5884] usb 1-1: device descriptor read/8, error -71 [ 295.792346][ T7721] chnl_net:caif_netlink_parms(): no params data found [ 295.815377][ T5884] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 295.837408][ T5884] usb 1-1: device descriptor read/8, error -71 [ 295.947052][ T5884] usb usb1-port1: unable to enumerate USB device [ 295.953958][ T60] Bluetooth: hci4: command tx timeout [ 295.981002][ T1283] bridge_slave_1: left allmulticast mode [ 295.981198][ T1283] bridge_slave_1: left promiscuous mode [ 295.982189][ T1283] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.184473][ T1283] bridge_slave_0: left allmulticast mode [ 296.184503][ T1283] bridge_slave_0: left promiscuous mode [ 296.184743][ T1283] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.415640][ T7822] netlink: 104 bytes leftover after parsing attributes in process `syz.3.556'. [ 297.542066][ T7835] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 297.788352][ T7837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.046046][ T7847] siw: device registration error -23 [ 298.237301][ T5884] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 298.739420][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.739488][ T5884] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 298.739512][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.787918][ T5884] usb 3-1: config 0 descriptor?? [ 298.811866][ T5884] pwc: Askey VC010 type 2 USB webcam detected. [ 298.986945][ T7850] netlink: 'syz.1.563': attribute type 2 has an invalid length. [ 299.182068][ T7855] [U]  [ 299.182086][ T7855] [U] K{ [ 299.182106][ T7855] [U] t 1ŠFfˊ`GJgo/mC [ 299.182259][ T7855] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 299.214582][ T7855] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 299.215091][ T7855] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 299.215447][ T7855] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 299.215906][ T7855] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 299.215933][ T7855] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 299.216223][ T7855] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 299.217614][ T7855] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 299.217677][ T7855] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 299.218016][ T7855] [U] 22Ʃx?0;3u [ 299.218199][ T7855] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 299.218328][ T7855] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 299.218360][ T7855] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 299.218380][ T7855] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 299.218481][ T7855] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 299.218527][ T7855] [U] ec [ 299.218541][ T7855] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 299.221200][ T5884] pwc: recv_control_msg error -32 req 02 val 2b00 [ 299.232497][ T5884] pwc: recv_control_msg error -32 req 02 val 2700 [ 299.253741][ T5884] pwc: recv_control_msg error -32 req 02 val 2c00 [ 299.571811][ T5884] pwc: recv_control_msg error -32 req 04 val 1000 [ 299.721160][ T7857] netlink: 60 bytes leftover after parsing attributes in process `syz.3.565'. [ 300.078510][ T7854] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 300.300052][ T5884] pwc: recv_control_msg error -32 req 04 val 1300 [ 300.548875][ T5884] pwc: recv_control_msg error -32 req 04 val 1400 [ 300.550203][ T5884] pwc: recv_control_msg error -32 req 02 val 2000 [ 300.550777][ T5884] pwc: recv_control_msg error -32 req 02 val 2100 [ 300.564944][ T5884] pwc: recv_control_msg error -32 req 04 val 1500 [ 300.566842][ T5884] pwc: recv_control_msg error -32 req 02 val 2500 [ 300.583606][ T5884] pwc: recv_control_msg error -32 req 02 val 2400 [ 300.794956][ T5884] pwc: recv_control_msg error -71 req 02 val 2900 [ 300.797468][ T5884] pwc: recv_control_msg error -71 req 02 val 2800 [ 300.798210][ T5884] pwc: recv_control_msg error -71 req 04 val 1100 [ 300.798694][ T5884] pwc: recv_control_msg error -71 req 04 val 1200 [ 300.850530][ T5884] pwc: Registered as video103. [ 300.917251][ T5884] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 300.987292][ T5884] usb 3-1: USB disconnect, device number 17 [ 301.446104][ T1283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.544536][ T1283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.586829][ T1283] bond0 (unregistering): Released all slaves [ 301.615300][ T1283] bond1 (unregistering): Released all slaves [ 301.869293][ T7850] !: entered promiscuous mode [ 302.088379][ T7721] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.088672][ T7721] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.089000][ T7721] bridge_slave_0: entered allmulticast mode [ 302.092368][ T7721] bridge_slave_0: entered promiscuous mode [ 302.130080][ T7721] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.130304][ T7721] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.130532][ T7721] bridge_slave_1: entered allmulticast mode [ 302.156416][ T7721] bridge_slave_1: entered promiscuous mode [ 302.427734][ T7860] syz.3.566 (7860): drop_caches: 3 [ 302.626110][ T7721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.669197][ T7721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.948913][ T7868] syz.2.567 (7868): drop_caches: 3 [ 303.491610][ T7896] siw: device registration error -23 [ 304.346892][ T7884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.571'. [ 304.613974][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 304.686336][ T7721] team0: Port device team_slave_0 added [ 304.748130][ T7721] team0: Port device team_slave_1 added [ 304.883668][ T7913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.579'. [ 304.993722][ T809] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 305.031851][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'. [ 305.037100][ T7921] netlink: 52 bytes leftover after parsing attributes in process `syz.1.580'. [ 305.145745][ T809] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 305.145810][ T809] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 305.145835][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.235762][ T809] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 305.525506][ T7721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.525526][ T7721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.525556][ T7721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.531341][ T7721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.531359][ T7721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.531387][ T7721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.963913][ T1283] hsr_slave_0: left promiscuous mode [ 306.012779][ T1283] hsr_slave_1: left promiscuous mode [ 306.014788][ T1283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.014897][ T1283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.083260][ T1283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.083279][ T1283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.342497][ T809] stv0680 1-1:4.0: last error: 50, command = 0x65 [ 306.845682][ T809] usb 1-1: USB disconnect, device number 21 [ 306.972350][ T1283] veth1_macvtap: left promiscuous mode [ 306.972601][ T1283] veth0_macvtap: left promiscuous mode [ 306.972844][ T1283] veth1_vlan: left promiscuous mode [ 306.973069][ T1283] veth0_vlan: left promiscuous mode [ 307.853622][ T809] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 307.903650][ T10] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 308.021390][ T809] usb 1-1: unable to get BOS descriptor or descriptor too short [ 308.023096][ T809] usb 1-1: config 3 has an invalid interface number: 4 but max is 0 [ 308.023121][ T809] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 308.023140][ T809] usb 1-1: config 3 has no interface number 0 [ 308.023190][ T809] usb 1-1: config 3 interface 4 altsetting 184 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.023214][ T809] usb 1-1: config 3 interface 4 altsetting 184 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 308.023243][ T809] usb 1-1: config 3 interface 4 has no altsetting 0 [ 308.031343][ T809] usb 1-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=7a.1f [ 308.031372][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.031496][ T809] usb 1-1: Product: syz [ 308.031510][ T809] usb 1-1: Manufacturer: syz [ 308.031523][ T809] usb 1-1: SerialNumber: syz [ 308.061865][ T10] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 308.061949][ T10] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 308.061969][ T10] usb 4-1: Product: syz [ 308.061981][ T10] usb 4-1: Manufacturer: syz [ 308.062151][ T10] usb 4-1: SerialNumber: syz [ 308.133673][ T10] usb 4-1: config 0 descriptor?? [ 308.410657][ T7917] syz.2.581 (7917): drop_caches: 3 [ 308.616985][ T809] radio-si470x 1-1:3.4: could not find interrupt in endpoint [ 308.617088][ T809] radio-si470x 1-1:3.4: probe with driver radio-si470x failed with error -5 [ 308.617675][ T809] usbhid 1-1:3.4: couldn't find an input interrupt endpoint [ 308.641261][ T809] usb 1-1: USB disconnect, device number 22 [ 308.918376][ T1283] team0 (unregistering): Port device team_slave_1 removed [ 308.974790][ T1283] team0 (unregistering): Port device team_slave_0 removed [ 309.093582][ T5884] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 309.246418][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.246458][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.246482][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 309.246529][ T5884] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 309.246554][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.353136][ T5884] usb 2-1: config 0 descriptor?? [ 309.778550][ T5884] hid_parser_main: 5 callbacks suppressed [ 309.778578][ T5884] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 309.778613][ T5884] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 309.778639][ T5884] kovaplus 0003:1E7D:2D50.000C: item fetching failed at offset 2/5 [ 309.779475][ T5884] kovaplus 0003:1E7D:2D50.000C: parse failed [ 309.779548][ T5884] kovaplus 0003:1E7D:2D50.000C: probe with driver kovaplus failed with error -22 [ 310.002185][ T5963] usb 2-1: USB disconnect, device number 24 [ 310.003072][ T10] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 310.031130][ T10] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 310.031230][ T10] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 310.031314][ T10] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 310.129838][ T7990] netlink: 32 bytes leftover after parsing attributes in process `syz.0.596'. [ 310.179488][ T10] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -8 [ 310.223082][ T7721] hsr_slave_0: entered promiscuous mode [ 310.228620][ T7721] hsr_slave_1: entered promiscuous mode [ 310.231824][ T7721] debugfs: 'hsr0' already exists in 'hsr' [ 310.231847][ T7721] Cannot create hsr debugfs directory [ 310.271871][ T5882] usb 4-1: USB disconnect, device number 22 [ 310.838985][ T7955] syz.3.588 (7955) used greatest stack depth: 17824 bytes left [ 310.839224][ T7959] syz.3.588 (7959) used greatest stack depth: 16632 bytes left [ 311.153860][ T809] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 311.318724][ T809] usb 3-1: config 0 has no interfaces? [ 311.331395][ T809] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 311.331445][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.331484][ T809] usb 3-1: Product: syz [ 311.331516][ T809] usb 3-1: Manufacturer: syz [ 311.331530][ T809] usb 3-1: SerialNumber: syz [ 311.355887][ T7721] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 311.358202][ T809] usb 3-1: config 0 descriptor?? [ 311.767438][ T809] usb 3-1: USB disconnect, device number 18 [ 311.915889][ T7721] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 312.253021][ T7721] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 312.255968][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 312.255994][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 312.333947][ T7721] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 313.570278][ T7721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.672372][ T7721] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.716470][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.716628][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.771510][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.771685][ T6003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.817343][ T8071] misc userio: The device must be registered before sending interrupts [ 314.838292][ T8071] misc userio: The device must be registered before sending interrupts [ 314.897983][ T8076] netlink: 'syz.2.614': attribute type 22 has an invalid length. [ 314.898006][ T8076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.614'. [ 314.989388][ T7721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.074191][ T5884] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 315.242553][ T5884] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 315.242620][ T5884] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 315.242646][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.270160][ T8085] netlink: 'syz.3.616': attribute type 8 has an invalid length. [ 315.313975][ T809] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 315.349314][ T5884] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 315.467084][ T809] usb 1-1: Using ep0 maxpacket: 8 [ 315.471199][ T809] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 315.471219][ T809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.471230][ T809] usb 1-1: config 0 has no interface number 0 [ 315.471260][ T809] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 315.471275][ T809] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 315.471289][ T809] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 315.471302][ T809] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 315.471315][ T809] usb 1-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 315.506860][ T809] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 315.506890][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.506908][ T809] usb 1-1: Product: syz [ 315.506920][ T809] usb 1-1: Manufacturer: syz [ 315.506933][ T809] usb 1-1: SerialNumber: syz [ 315.556709][ T809] usb 1-1: config 0 descriptor?? [ 315.558261][ T8080] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 315.783237][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.794542][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.607674][ T5884] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 316.607701][ T5884] stv0680 2-1:4.0: Could not get descriptor 0200 [ 316.608153][ T5884] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 316.608171][ T5884] stv0680 2-1:4.0: last error: 107, command = 0x7 [ 316.713895][ T5884] usb 2-1: USB disconnect, device number 25 [ 317.050762][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'. [ 317.236979][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.237087][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.741752][ T7721] veth0_vlan: entered promiscuous mode [ 317.832962][ T7721] veth1_vlan: entered promiscuous mode [ 318.947982][ T7721] veth0_macvtap: entered promiscuous mode [ 319.070863][ T7721] veth1_macvtap: entered promiscuous mode [ 319.281873][ T7721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.649399][ T7721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.693060][ T809] usb 1-1: NFC: intf ffff8880347e5000 id ffffffff8e756020 [ 319.766342][ T6003] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.766603][ T6003] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.766641][ T6003] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.766679][ T6003] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.820854][ T809] nfcmrvl 1-1:0.122: NFC: registered with nci successfully [ 319.923790][ T809] usb 1-1: USB disconnect, device number 23 [ 319.927420][ T809] usb 1-1: NFC: intf ffff8880347e5000 [ 320.184477][ T8145] FAULT_INJECTION: forcing a failure. [ 320.184477][ T8145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.184518][ T8145] CPU: 0 UID: 0 PID: 8145 Comm: syz.3.626 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 320.184546][ T8145] Tainted: [L]=SOFTLOCKUP [ 320.184565][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 320.184578][ T8145] Call Trace: [ 320.184587][ T8145] [ 320.184595][ T8145] dump_stack_lvl+0xe8/0x150 [ 320.184632][ T8145] should_fail_ex+0x46b/0x600 [ 320.184664][ T8145] _copy_to_user+0x31/0xb0 [ 320.184696][ T8145] simple_read_from_buffer+0xe1/0x170 [ 320.184728][ T8145] proc_fail_nth_read+0x1be/0x230 [ 320.184755][ T8145] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 320.184783][ T8145] ? rw_verify_area+0x2ac/0x4e0 [ 320.184812][ T8145] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 320.184838][ T8145] vfs_read+0x212/0xa80 [ 320.184878][ T8145] ? __pfx_vfs_read+0x10/0x10 [ 320.184911][ T8145] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 320.184945][ T8145] ? lockdep_hardirqs_on+0x7a/0x110 [ 320.184976][ T8145] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 320.185008][ T8145] ? mutex_lock_nested+0x152/0x1d0 [ 320.185032][ T8145] ? fdget_pos+0x252/0x320 [ 320.185068][ T8145] ksys_read+0x156/0x270 [ 320.185102][ T8145] ? __pfx_ksys_read+0x10/0x10 [ 320.185146][ T8145] do_syscall_64+0x14d/0xf80 [ 320.185165][ T8145] ? trace_irq_disable+0x3b/0x150 [ 320.185189][ T8145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.185211][ T8145] ? clear_bhb_loop+0x40/0x90 [ 320.185234][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.185255][ T8145] RIP: 0033:0x7f1d0bb6cfce [ 320.185275][ T8145] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 320.185292][ T8145] RSP: 002b:00007f1d09e05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 320.185315][ T8145] RAX: ffffffffffffffda RBX: 00007f1d09e066c0 RCX: 00007f1d0bb6cfce [ 320.185330][ T8145] RDX: 000000000000000f RSI: 00007f1d09e060a0 RDI: 0000000000000004 [ 320.185343][ T8145] RBP: 00007f1d09e06090 R08: 0000000000000000 R09: 0000000000000000 [ 320.185357][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.185369][ T8145] R13: 00007f1d0be26038 R14: 00007f1d0be25fa0 R15: 00007ffe3facc4b8 [ 320.185402][ T8145] [ 321.403648][ T5882] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 321.564550][ T1283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.564573][ T1283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.593079][ T5882] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 321.593140][ T5882] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 321.593164][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.908084][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.908107][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.990463][ T8165] netlink: 64 bytes leftover after parsing attributes in process `syz.1.631'. [ 323.009620][ T5882] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 324.035550][ T5882] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 324.035578][ T5882] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 324.044031][ T5882] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 324.044056][ T5882] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 324.098400][ T5882] usb 4-1: USB disconnect, device number 23 [ 326.889528][ T8200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.503602][ T5884] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 328.528351][ T5963] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 329.272518][ T5963] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 329.272586][ T5963] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 329.272610][ T5963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.311181][ T5963] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 329.489623][ T8220] Dead loop on virtual device ip6_vti0, fix it urgently! [ 329.551472][ T8220] netlink: 320 bytes leftover after parsing attributes in process `syz.5.646'. [ 329.600938][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.600974][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.600998][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 329.601141][ T5884] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 329.601167][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.626909][ T5884] usb 4-1: config 0 descriptor?? [ 330.885926][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 330.888417][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 330.890435][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 330.891653][ T5884] usbhid 4-1:0.0: can't add hid device: -32 [ 330.893266][ T5884] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 331.043691][ T5963] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 331.043719][ T5963] stv0680 3-1:4.0: Could not get descriptor 0200 [ 331.044164][ T5963] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 331.044182][ T5963] stv0680 3-1:4.0: last error: 107, command = 0x7 [ 331.168548][ T5884] usb 4-1: USB disconnect, device number 24 [ 331.230356][ T5963] usb 3-1: USB disconnect, device number 19 [ 331.274899][ T8240] netlink: 'syz.0.651': attribute type 8 has an invalid length. [ 331.583517][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.650'. [ 332.466763][ T8260] siw: device registration error -23 [ 333.739456][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 333.739646][ T8266] FAULT_INJECTION: forcing a failure. [ 333.739646][ T8266] name failslab, interval 1, probability 0, space 0, times 0 [ 333.739690][ T8266] CPU: 1 UID: 0 PID: 8266 Comm: syz.2.659 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 333.739718][ T8266] Tainted: [L]=SOFTLOCKUP [ 333.739726][ T8266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 333.739738][ T8266] Call Trace: [ 333.739747][ T8266] [ 333.739756][ T8266] dump_stack_lvl+0xe8/0x150 [ 333.739795][ T8266] should_fail_ex+0x46b/0x600 [ 333.739827][ T8266] should_failslab+0xa8/0x100 [ 333.739851][ T8266] kmem_cache_alloc_noprof+0x87/0x680 [ 333.739882][ T8266] ? skb_clone+0x212/0x3a0 [ 333.739911][ T8266] skb_clone+0x212/0x3a0 [ 333.739938][ T8266] __netlink_deliver_tap+0x404/0x850 [ 333.739981][ T8266] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.740008][ T8266] netlink_deliver_tap+0x19c/0x1b0 [ 333.740037][ T8266] netlink_dump+0x926/0xe80 [ 333.740078][ T8266] ? __pfx_netlink_dump+0x10/0x10 [ 333.740102][ T8266] ? do_raw_spin_lock+0x12b/0x2f0 [ 333.740148][ T8266] ? lockdep_hardirqs_on+0x7a/0x110 [ 333.740192][ T8266] __netlink_dump_start+0x5cb/0x7e0 [ 333.740229][ T8266] rtnetlink_rcv_msg+0xa3a/0xbe0 [ 333.740260][ T8266] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 333.740284][ T8266] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 333.740312][ T8266] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.740338][ T8266] ? ref_tracker_free+0x673/0x820 [ 333.740365][ T8266] ? __pfx_rtnl_dumpit+0x10/0x10 [ 333.740393][ T8266] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 333.740416][ T8266] ? __skb_clone+0x63/0x7a0 [ 333.740446][ T8266] netlink_rcv_skb+0x232/0x4b0 [ 333.740475][ T8266] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.740505][ T8266] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.740547][ T8266] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.740584][ T8266] netlink_unicast+0x831/0x9f0 [ 333.740620][ T8266] ? __pfx_netlink_unicast+0x10/0x10 [ 333.740648][ T8266] ? netlink_sendmsg+0x650/0xb40 [ 333.740686][ T8266] ? skb_put+0x11b/0x210 [ 333.740721][ T8266] netlink_sendmsg+0x813/0xb40 [ 333.740760][ T8266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.740791][ T8266] ? unwind_get_return_address+0x4d/0x90 [ 333.740818][ T8266] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.740853][ T8266] ____sys_sendmsg+0x94c/0x9c0 [ 333.740882][ T8266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.740915][ T8266] ? import_iovec+0x73/0xa0 [ 333.740950][ T8266] ___sys_sendmsg+0x2a5/0x360 [ 333.740979][ T8266] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.741042][ T8266] ? __fget_files+0x2a/0x420 [ 333.741066][ T8266] ? __fget_files+0x3a6/0x420 [ 333.741103][ T8266] __x64_sys_sendmsg+0x1c3/0x2a0 [ 333.741128][ T8266] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.741160][ T8266] ? __pfx_ksys_write+0x10/0x10 [ 333.741204][ T8266] do_syscall_64+0x14d/0xf80 [ 333.741224][ T8266] ? trace_irq_disable+0x3b/0x150 [ 333.741248][ T8266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.741289][ T8266] ? clear_bhb_loop+0x40/0x90 [ 333.741317][ T8266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.741338][ T8266] RIP: 0033:0x7f73370bc799 [ 333.741359][ T8266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.741377][ T8266] RSP: 002b:00007f7335316028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.741400][ T8266] RAX: ffffffffffffffda RBX: 00007f7337335fa0 RCX: 00007f73370bc799 [ 333.741415][ T8266] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 333.741427][ T8266] RBP: 00007f7335316090 R08: 0000000000000000 R09: 0000000000000000 [ 333.741440][ T8266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.741453][ T8266] R13: 00007f7337336038 R14: 00007f7337335fa0 R15: 00007ffefede3468 [ 333.741488][ T8266] [ 335.863620][ T5884] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 335.949824][ T8291] netlink: 28 bytes leftover after parsing attributes in process `syz.5.665'. [ 335.971057][ T8291] netlink: 28 bytes leftover after parsing attributes in process `syz.5.665'. [ 336.023699][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 336.026288][ T5884] usb 4-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 336.026317][ T5884] usb 4-1: config 239 has 1 interface, different from the descriptor's value: 3 [ 336.029845][ T5884] usb 4-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 336.029877][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.029897][ T5884] usb 4-1: Product: syz [ 336.029912][ T5884] usb 4-1: Manufacturer: syz [ 336.029927][ T5884] usb 4-1: SerialNumber: syz [ 336.374124][ T5884] usb 4-1: unit 2 not found! [ 336.647277][ T5884] usb 4-1: USB disconnect, device number 25 [ 336.818191][ T6827] udevd[6827]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:239.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.050866][ T8297] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 337.053346][ T8297] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 337.622094][ T8297] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 337.622191][ T8297] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 337.738429][ T8317] siw: device registration error -23 [ 338.483706][ T60] Bluetooth: hci0: command 0x0401 tx timeout [ 338.639069][ T8297] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 338.639169][ T8297] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 338.716046][ T8297] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 338.736770][ T8297] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 338.736874][ T8297] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 338.834081][ T8297] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 338.834177][ T8297] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 338.915060][ T8297] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 338.954168][ T8337] netlink: 'syz.2.673': attribute type 1 has an invalid length. [ 338.954193][ T8337] netlink: 'syz.2.673': attribute type 4 has an invalid length. [ 338.954207][ T8337] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.673'. [ 339.363646][ T809] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 339.633753][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 339.641080][ T8347] netlink: 28 bytes leftover after parsing attributes in process `syz.5.676'. [ 339.645252][ T5884] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 339.645538][ T809] usb 2-1: device descriptor read/all, error -71 [ 339.661529][ T8347] FAULT_INJECTION: forcing a failure. [ 339.661529][ T8347] name failslab, interval 1, probability 0, space 0, times 0 [ 339.661564][ T8347] CPU: 1 UID: 0 PID: 8347 Comm: syz.5.676 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 339.661589][ T8347] Tainted: [L]=SOFTLOCKUP [ 339.661596][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.661606][ T8347] Call Trace: [ 339.661614][ T8347] [ 339.661622][ T8347] dump_stack_lvl+0xe8/0x150 [ 339.661655][ T8347] should_fail_ex+0x46b/0x600 [ 339.661683][ T8347] should_failslab+0xa8/0x100 [ 339.661704][ T8347] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 339.661731][ T8347] ? __alloc_skb+0x1d0/0x7d0 [ 339.661762][ T8347] ? lockdep_hardirqs_on+0x7a/0x110 [ 339.661800][ T8347] __alloc_skb+0x1d0/0x7d0 [ 339.661829][ T8347] netlink_sendmsg+0x5d4/0xb40 [ 339.661863][ T8347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.661895][ T8347] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.661924][ T8347] ____sys_sendmsg+0x94c/0x9c0 [ 339.661948][ T8347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.661976][ T8347] ? import_iovec+0x73/0xa0 [ 339.662006][ T8347] ___sys_sendmsg+0x2a5/0x360 [ 339.662030][ T8347] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.662095][ T8347] __sys_sendmmsg+0x282/0x4e0 [ 339.662120][ T8347] ? __pfx___sys_sendmmsg+0x10/0x10 [ 339.662147][ T8347] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 339.662184][ T8347] ? ksys_write+0x248/0x270 [ 339.662212][ T8347] ? __pfx_ksys_write+0x10/0x10 [ 339.662243][ T8347] __x64_sys_sendmmsg+0xa0/0xc0 [ 339.662264][ T8347] do_syscall_64+0x14d/0xf80 [ 339.662281][ T8347] ? trace_irq_disable+0x3b/0x150 [ 339.662301][ T8347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.662320][ T8347] ? clear_bhb_loop+0x40/0x90 [ 339.662343][ T8347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.662361][ T8347] RIP: 0033:0x7fdf27cdc799 [ 339.662386][ T8347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.662403][ T8347] RSP: 002b:00007fdf25f36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 339.662425][ T8347] RAX: ffffffffffffffda RBX: 00007fdf27f55fa0 RCX: 00007fdf27cdc799 [ 339.662438][ T8347] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 339.662450][ T8347] RBP: 00007fdf25f36090 R08: 0000000000000000 R09: 0000000000000000 [ 339.662463][ T8347] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000001 [ 339.662474][ T8347] R13: 00007fdf27f56038 R14: 00007fdf27f55fa0 R15: 00007fff1fc42a48 [ 339.662504][ T8347] [ 339.803928][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 339.806158][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.806193][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.806230][ T5884] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 339.806255][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.827078][ T5884] usb 4-1: config 0 descriptor?? [ 339.848721][ T5884] hub 4-1:0.0: USB hub found [ 340.055554][ T5884] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 340.180535][ T5884] usbhid 4-1:0.0: can't add hid device: -71 [ 340.180680][ T5884] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 340.305832][ T8356] FAULT_INJECTION: forcing a failure. [ 340.305832][ T8356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.305859][ T8356] CPU: 1 UID: 0 PID: 8356 Comm: syz.5.678 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 340.305877][ T8356] Tainted: [L]=SOFTLOCKUP [ 340.305882][ T8356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 340.305888][ T8356] Call Trace: [ 340.305894][ T8356] [ 340.305899][ T8356] dump_stack_lvl+0xe8/0x150 [ 340.305921][ T8356] should_fail_ex+0x46b/0x600 [ 340.305940][ T8356] _copy_to_user+0x31/0xb0 [ 340.305958][ T8356] simple_read_from_buffer+0xe1/0x170 [ 340.305976][ T8356] proc_fail_nth_read+0x1be/0x230 [ 340.305992][ T8356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.306008][ T8356] ? rw_verify_area+0x2ac/0x4e0 [ 340.306024][ T8356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.306039][ T8356] vfs_read+0x212/0xa80 [ 340.306059][ T8356] ? __pfx_vfs_read+0x10/0x10 [ 340.306077][ T8356] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 340.306095][ T8356] ? lockdep_hardirqs_on+0x7a/0x110 [ 340.306112][ T8356] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 340.306129][ T8356] ? mutex_lock_nested+0x152/0x1d0 [ 340.306143][ T8356] ? fdget_pos+0x252/0x320 [ 340.306162][ T8356] ksys_read+0x156/0x270 [ 340.306180][ T8356] ? __pfx_ksys_read+0x10/0x10 [ 340.306202][ T8356] do_syscall_64+0x14d/0xf80 [ 340.306218][ T8356] ? trace_irq_disable+0x3b/0x150 [ 340.306232][ T8356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.306244][ T8356] ? clear_bhb_loop+0x40/0x90 [ 340.306258][ T8356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.306270][ T8356] RIP: 0033:0x7fdf27c9cfce [ 340.306282][ T8356] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 340.306292][ T8356] RSP: 002b:00007fdf25f35fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 340.306307][ T8356] RAX: ffffffffffffffda RBX: 00007fdf25f366c0 RCX: 00007fdf27c9cfce [ 340.306316][ T8356] RDX: 000000000000000f RSI: 00007fdf25f360a0 RDI: 0000000000000041 [ 340.306323][ T8356] RBP: 00007fdf25f36090 R08: 0000000000000000 R09: 0000000000000000 [ 340.306331][ T8356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.306338][ T8356] R13: 00007fdf27f56038 R14: 00007fdf27f55fa0 R15: 00007fff1fc42a48 [ 340.306357][ T8356] [ 340.308595][ T5884] usb 4-1: USB disconnect, device number 26 [ 340.526150][ T60] Bluetooth: hci0: command 0x0401 tx timeout [ 340.683736][ T60] Bluetooth: hci2: command 0x2016 tx timeout [ 340.770692][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 340.924165][ T60] Bluetooth: hci4: command 0x0c1a tx timeout [ 341.084075][ T36] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 341.252717][ T36] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 341.252751][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.456073][ T37] audit: type=1800 audit(1774307518.409:583): pid=8375 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.680" name="/" dev="fuse" ino=1 res=0 errno=0 [ 341.474193][ T36] usb 4-1: config 0 descriptor?? [ 342.098936][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 342.322875][ T36] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 342.551628][ T8366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.578199][ T8366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.765082][ T60] Bluetooth: hci2: command 0x2016 tx timeout [ 342.858908][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 343.005896][ T60] Bluetooth: hci4: command 0x0c1a tx timeout [ 347.255592][ T60] Bluetooth: hci2: command 0x2016 tx timeout [ 347.255649][ T60] Bluetooth: hci4: command 0x0c1a tx timeout [ 347.604012][ T36] [drm:udl_init] *ERROR* Selecting channel failed [ 347.710532][ T36] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 347.710559][ T36] [drm] Initialized udl on minor 2 [ 347.793750][ T36] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 347.794761][ T36] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 347.985938][ T36] usb 4-1: USB disconnect, device number 27 [ 347.988450][ T5884] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 347.989018][ T5884] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 347.989257][ T5884] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 348.163299][ T8404] netlink: 60 bytes leftover after parsing attributes in process `syz.0.686'. [ 349.433233][ T8411] netlink: 36 bytes leftover after parsing attributes in process `syz.0.689'. [ 349.913677][ T36] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 350.066259][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.066282][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.066295][ T36] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 350.066321][ T36] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 350.066335][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.072875][ T37] audit: type=1804 audit(1774307527.029:584): pid=8422 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.692" name="/newroot/150/file0" dev="tmpfs" ino=802 res=1 errno=0 [ 350.136420][ T36] usb 1-1: config 0 descriptor?? [ 350.582787][ T36] kovaplus 0003:1E7D:2D50.000D: unknown main item tag 0x0 [ 350.582830][ T36] kovaplus 0003:1E7D:2D50.000D: unknown main item tag 0x0 [ 350.582856][ T36] kovaplus 0003:1E7D:2D50.000D: item fetching failed at offset 2/5 [ 350.584379][ T36] kovaplus 0003:1E7D:2D50.000D: parse failed [ 350.584450][ T36] kovaplus 0003:1E7D:2D50.000D: probe with driver kovaplus failed with error -22 [ 350.773541][ T37] audit: type=1804 audit(1774307527.729:585): pid=8420 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.692" name="/newroot/150/file0" dev="tmpfs" ino=802 res=1 errno=0 [ 350.821685][ T6563] usb 1-1: USB disconnect, device number 24 [ 354.734552][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 354.946256][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.704'. [ 355.953708][ T36] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 358.225673][ T36] usb 1-1: device descriptor read/all, error -71 [ 359.016213][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 359.176082][ T10] usb 6-1: config 4 has an invalid interface number: 220 but max is 0 [ 359.176115][ T10] usb 6-1: config 4 has no interface number 0 [ 359.176149][ T10] usb 6-1: config 4 interface 220 has no altsetting 0 [ 359.177776][ T10] usb 6-1: New USB device found, idVendor=4408, idProduct=3533, bcdDevice=2b.e8 [ 359.177805][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 359.177825][ T10] usb 6-1: SerialNumber: syz [ 359.558130][ T8511] FAULT_INJECTION: forcing a failure. [ 359.558130][ T8511] name failslab, interval 1, probability 0, space 0, times 0 [ 359.558235][ T8511] CPU: 1 UID: 0 PID: 8511 Comm: syz.1.716 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 359.558265][ T8511] Tainted: [L]=SOFTLOCKUP [ 359.558272][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 359.558284][ T8511] Call Trace: [ 359.558291][ T8511] [ 359.558300][ T8511] dump_stack_lvl+0xe8/0x150 [ 359.558337][ T8511] should_fail_ex+0x46b/0x600 [ 359.558369][ T8511] should_failslab+0xa8/0x100 [ 359.558392][ T8511] __kmalloc_cache_noprof+0x84/0x690 [ 359.558426][ T8511] ? rtnl_newlink+0x136/0x1be0 [ 359.558459][ T8511] rtnl_newlink+0x136/0x1be0 [ 359.558498][ T8511] ? __pfx_rtnl_newlink+0x10/0x10 [ 359.558530][ T8511] ? finish_task_switch+0x240/0x920 [ 359.558555][ T8511] ? lockdep_hardirqs_on+0x7a/0x110 [ 359.558590][ T8511] ? rcu_is_watching+0x15/0xb0 [ 359.558642][ T8511] ? trace_sched_exit_tp+0x3a/0x150 [ 359.558667][ T8511] ? __schedule+0x1569/0x5240 [ 359.558720][ T8511] ? irqentry_exit+0x59e/0x620 [ 359.558749][ T8511] ? rcu_is_watching+0x15/0xb0 [ 359.558772][ T8511] ? __pfx___schedule+0x10/0x10 [ 359.558811][ T8511] ? __lock_acquire+0x6b5/0x2cf0 [ 359.558835][ T8511] ? lockdep_hardirqs_on+0x7a/0x110 [ 359.558865][ T8511] ? irqentry_exit+0x59e/0x620 [ 359.558894][ T8511] ? rcu_is_watching+0x15/0xb0 [ 359.558946][ T8511] ? __pfx_rtnl_newlink+0x10/0x10 [ 359.558974][ T8511] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 359.559006][ T8511] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 359.559032][ T8511] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 359.559057][ T8511] ? ref_tracker_free+0x673/0x820 [ 359.559082][ T8511] ? __copy_skb_header+0xa3/0x4a0 [ 359.559104][ T8511] ? __pfx_ref_tracker_free+0x10/0x10 [ 359.559129][ T8511] ? __skb_clone+0x63/0x7a0 [ 359.559159][ T8511] netlink_rcv_skb+0x232/0x4b0 [ 359.559189][ T8511] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 359.559219][ T8511] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 359.559268][ T8511] netlink_unicast+0x831/0x9f0 [ 359.559303][ T8511] ? __pfx_netlink_unicast+0x10/0x10 [ 359.559329][ T8511] ? netlink_sendmsg+0x650/0xb40 [ 359.559349][ T8511] ? skb_put+0x11b/0x210 [ 359.559376][ T8511] netlink_sendmsg+0x813/0xb40 [ 359.559397][ T8511] ? irqentry_exit+0x59e/0x620 [ 359.559420][ T8511] ? rcu_is_watching+0x15/0xb0 [ 359.559447][ T8511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.559479][ T8511] ? ____sys_sendmsg+0x931/0x9c0 [ 359.559505][ T8511] ____sys_sendmsg+0x94c/0x9c0 [ 359.559530][ T8511] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.559560][ T8511] ? import_iovec+0x73/0xa0 [ 359.559591][ T8511] ___sys_sendmsg+0x2a5/0x360 [ 359.559635][ T8511] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.559695][ T8511] ? __fget_files+0x2a/0x420 [ 359.559720][ T8511] ? __fget_files+0x3a6/0x420 [ 359.559754][ T8511] __x64_sys_sendmsg+0x1c3/0x2a0 [ 359.559777][ T8511] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.559824][ T8511] do_syscall_64+0x14d/0xf80 [ 359.559843][ T8511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.559864][ T8511] ? clear_bhb_loop+0x40/0x90 [ 359.559887][ T8511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.559907][ T8511] RIP: 0033:0x7f960af6c799 [ 359.559927][ T8511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.559943][ T8511] RSP: 002b:00007f96091c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.559976][ T8511] RAX: ffffffffffffffda RBX: 00007f960b1e5fa0 RCX: 00007f960af6c799 [ 359.559999][ T8511] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000a [ 359.560012][ T8511] RBP: 00007f96091c6090 R08: 0000000000000000 R09: 0000000000000000 [ 359.560024][ T8511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.560036][ T8511] R13: 00007f960b1e6038 R14: 00007f960b1e5fa0 R15: 00007ffc2d18e808 [ 359.560066][ T8511] [ 359.702823][ T10] uvcvideo 6-1:4.220: Found UVC 0.00 device (4408:3533) [ 359.702858][ T10] uvcvideo 6-1:4.220: No valid video chain found. [ 359.766774][ T10] usb 6-1: USB disconnect, device number 2 [ 360.708592][ T5798] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 361.376860][ T8533] netlink: 36 bytes leftover after parsing attributes in process `syz.5.723'. [ 362.273653][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 362.552923][ T5920] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 362.558457][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.558491][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.558515][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 362.558557][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 362.558580][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.574579][ T10] usb 6-1: config 0 descriptor?? [ 363.385106][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 363.388879][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 363.388973][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 363.394013][ T5920] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 363.394101][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.394123][ T5920] usb 3-1: Product: syz [ 363.394138][ T5920] usb 3-1: Manufacturer: syz [ 363.394152][ T5920] usb 3-1: SerialNumber: syz [ 363.420889][ T5920] usb 3-1: config 0 descriptor?? [ 363.592004][ T5920] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 363.592042][ T5920] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 363.691757][ T10] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0 [ 363.691797][ T10] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0 [ 363.691823][ T10] kovaplus 0003:1E7D:2D50.000E: item fetching failed at offset 2/5 [ 363.693264][ T10] kovaplus 0003:1E7D:2D50.000E: parse failed [ 363.693411][ T10] kovaplus 0003:1E7D:2D50.000E: probe with driver kovaplus failed with error -22 [ 363.868301][ T10] usb 6-1: USB disconnect, device number 3 [ 364.304277][ T5920] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 364.305948][ T5920] em28xx 3-1:0.0: Config register raw data: 0xa1 [ 364.305970][ T5920] em28xx 3-1:0.0: I2S Audio (1 sample rate(s)) [ 364.305985][ T5920] em28xx 3-1:0.0: No AC97 audio processor [ 364.523697][ T8567] netlink: 'syz.1.734': attribute type 1 has an invalid length. [ 364.750685][ T5920] usb 3-1: USB disconnect, device number 20 [ 364.953767][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 365.116490][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 365.118950][ T10] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 365.122065][ T10] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 365.122095][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.122116][ T10] usb 6-1: Product: syz [ 365.122131][ T10] usb 6-1: Manufacturer: syz [ 365.122146][ T10] usb 6-1: SerialNumber: syz [ 365.179240][ T10] usb 6-1: config 0 descriptor?? [ 365.431183][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.431715][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.440651][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 365.440712][ T10] usb 6-1: setting power ON [ 365.441348][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 365.488139][ T8582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.740'. [ 365.507886][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 365.509148][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 365.509264][ T10] usb 6-1: media controller created [ 365.586877][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 365.656848][ T10] usb 6-1: selecting invalid altsetting 6 [ 365.656886][ T10] usb 6-1: digital interface selection failed (-22) [ 365.656905][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 365.658224][ T10] usb 6-1: setting power OFF [ 365.660553][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 365.660578][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 365.660591][ T10] (NULL device *): no alternate interface [ 365.701577][ T8582] veth3: entered promiscuous mode [ 365.701605][ T8582] veth3: entered allmulticast mode [ 365.773426][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 365.794137][ T10] usb 6-1: USB disconnect, device number 4 [ 366.174098][ T8594] [U]  [ 366.174113][ T8594] [U] K{ [ 366.174130][ T8594] [U] t 1ŠFfˊ`GJgo/mC [ 366.174179][ T8594] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 366.174224][ T8594] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 366.174394][ T8594] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 366.174517][ T8594] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 366.174562][ T8594] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 366.174587][ T8594] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 366.174640][ T8594] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 366.174924][ T8594] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 366.174981][ T8594] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 366.175001][ T8594] [U] 22Ʃx?0;3u [ 366.175088][ T8594] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 366.175129][ T8594] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 366.175157][ T8594] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 366.175176][ T8594] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 366.175212][ T8594] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 366.175266][ T8594] [U] ec [ 366.175279][ T8594] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 366.596952][ T8598] netlink: 60 bytes leftover after parsing attributes in process `syz.5.744'. [ 366.964067][ T8593] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 366.969480][ T8597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.745'. [ 367.566607][ T8600] loop5: detected capacity change from 0 to 7 [ 367.573346][ T8600] Dev loop5: unable to read RDB block 7 [ 367.573397][ T8600] loop5: unable to read partition table [ 367.593109][ T8600] loop5: partition table beyond EOD, truncated [ 367.593135][ T8600] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 368.089222][ T5920] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 368.653651][ T5884] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 368.755859][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.755896][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.755921][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 368.755966][ T5920] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 368.755990][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.811492][ T5920] usb 3-1: config 0 descriptor?? [ 368.841149][ T5884] usb 6-1: Using ep0 maxpacket: 8 [ 368.845515][ T5884] usb 6-1: unable to get BOS descriptor or descriptor too short [ 368.847139][ T5884] usb 6-1: config 0 has an invalid interface number: 115 but max is 0 [ 368.847166][ T5884] usb 6-1: config 0 has no interface number 0 [ 368.847200][ T5884] usb 6-1: config 0 interface 115 has no altsetting 0 [ 368.882949][ T5884] usb 6-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=18.00 [ 368.882975][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.882995][ T5884] usb 6-1: Product: syz [ 368.883010][ T5884] usb 6-1: Manufacturer: syz [ 368.883024][ T5884] usb 6-1: SerialNumber: syz [ 368.925595][ T5884] usb 6-1: config 0 descriptor?? [ 369.223061][ T5920] kovaplus 0003:1E7D:2D50.000F: unknown main item tag 0x0 [ 369.223102][ T5920] kovaplus 0003:1E7D:2D50.000F: unknown main item tag 0x0 [ 369.223129][ T5920] kovaplus 0003:1E7D:2D50.000F: item fetching failed at offset 2/5 [ 369.383223][ T5920] kovaplus 0003:1E7D:2D50.000F: parse failed [ 369.383280][ T5920] kovaplus 0003:1E7D:2D50.000F: probe with driver kovaplus failed with error -22 [ 369.391018][ T5884] gspca_main: t613-2.14.0 probing 17a1:0128 [ 369.409715][ T5884] gspca_t613: unknown sensor 0000 [ 369.410379][ T5884] t613 6-1:0.115: probe with driver t613 failed with error -22 [ 369.487465][ T8626] siw: device registration error -23 [ 369.531388][ T5884] usb 6-1: USB disconnect, device number 5 [ 370.610996][ T5920] usb 3-1: USB disconnect, device number 21 [ 370.822406][ T8636] [U]  [ 370.822423][ T8636] [U] K{ [ 370.822443][ T8636] [U] t 1ŠFfˊ`GJgo/mC [ 370.822492][ T8636] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 370.822538][ T8636] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 370.822619][ T8636] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 370.822750][ T8636] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 370.822797][ T8636] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 370.822822][ T8636] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 370.822873][ T8636] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 370.823158][ T8636] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 370.823227][ T8636] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 370.823248][ T8636] [U] 22Ʃx?0;3u [ 370.823341][ T8636] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 370.823386][ T8636] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 370.823416][ T8636] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 371.124047][ T8636] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 371.124097][ T8636] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 371.124142][ T8636] [U] ec [ 371.124156][ T8636] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 371.292491][ T8638] netlink: 60 bytes leftover after parsing attributes in process `syz.3.757'. [ 371.639357][ T8635] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 372.027645][ T6563] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 372.177240][ T6563] usb 1-1: Using ep0 maxpacket: 16 [ 372.183403][ T6563] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.199262][ T6563] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 372.199300][ T6563] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 372.199322][ T6563] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 372.199347][ T6563] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.202670][ T6563] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 372.202701][ T6563] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 372.202722][ T6563] usb 1-1: Manufacturer: syz [ 372.290262][ T6563] usb 1-1: config 0 descriptor?? [ 373.173521][ T6563] rc_core: IR keymap rc-hauppauge not found [ 373.173555][ T6563] Registered IR keymap rc-empty [ 373.173737][ T6563] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 373.194416][ T6563] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 373.227653][ T6563] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 373.250610][ T6563] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input20 [ 373.430735][ T6563] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 373.453822][ T6563] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 373.482394][ T6563] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 373.494810][ T6563] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 373.513660][ T6563] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 373.531164][ T8641] i2c i2c-0: dtv_property_process_set: SET cmd 0x00002000 undefined [ 373.533753][ T6563] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 373.555863][ T6563] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 373.573636][ T6563] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 373.593642][ T6563] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 373.623891][ T6563] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 373.663037][ T6563] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 373.663067][ T6563] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 373.734586][ T6563] usb 1-1: USB disconnect, device number 27 [ 374.047695][ T8674] FAULT_INJECTION: forcing a failure. [ 374.047695][ T8674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.047736][ T8674] CPU: 1 UID: 0 PID: 8674 Comm: syz.3.769 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 374.047765][ T8674] Tainted: [L]=SOFTLOCKUP [ 374.047772][ T8674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.047785][ T8674] Call Trace: [ 374.047793][ T8674] [ 374.047803][ T8674] dump_stack_lvl+0xe8/0x150 [ 374.047840][ T8674] should_fail_ex+0x46b/0x600 [ 374.047874][ T8674] _copy_to_user+0x31/0xb0 [ 374.047907][ T8674] simple_read_from_buffer+0xe1/0x170 [ 374.047940][ T8674] proc_fail_nth_read+0x1be/0x230 [ 374.047969][ T8674] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 374.047998][ T8674] ? rw_verify_area+0x2ac/0x4e0 [ 374.048029][ T8674] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 374.048056][ T8674] vfs_read+0x212/0xa80 [ 374.048095][ T8674] ? __pfx_vfs_read+0x10/0x10 [ 374.048129][ T8674] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 374.048169][ T8674] ? lockdep_hardirqs_on+0x7a/0x110 [ 374.048201][ T8674] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 374.048247][ T8674] ? mutex_lock_nested+0x152/0x1d0 [ 374.048271][ T8674] ? fdget_pos+0x252/0x320 [ 374.048308][ T8674] ksys_read+0x156/0x270 [ 374.048341][ T8674] ? __pfx_ksys_read+0x10/0x10 [ 374.048385][ T8674] do_syscall_64+0x14d/0xf80 [ 374.048404][ T8674] ? trace_irq_disable+0x3b/0x150 [ 374.048429][ T8674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.048451][ T8674] ? clear_bhb_loop+0x40/0x90 [ 374.048476][ T8674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.048497][ T8674] RIP: 0033:0x7f1d0bb6cfce [ 374.048517][ T8674] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 374.048535][ T8674] RSP: 002b:00007f1d09e05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 374.048559][ T8674] RAX: ffffffffffffffda RBX: 00007f1d09e066c0 RCX: 00007f1d0bb6cfce [ 374.048574][ T8674] RDX: 000000000000000f RSI: 00007f1d09e060a0 RDI: 0000000000000004 [ 374.048596][ T8674] RBP: 00007f1d09e06090 R08: 0000000000000000 R09: 0000000000000000 [ 374.048609][ T8674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.048621][ T8674] R13: 00007f1d0be26038 R14: 00007f1d0be25fa0 R15: 00007ffe3facc4b8 [ 374.048656][ T8674] [ 374.385783][ T8678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.771'. [ 374.408027][ T8680] [U]  [ 374.408044][ T8680] [U] K{ [ 374.408061][ T8680] [U] t 1ŠFfˊ`GJgo/mC [ 374.408112][ T8680] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 374.408159][ T8680] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 374.408246][ T8680] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 374.408375][ T8680] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 374.408423][ T8680] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 374.408448][ T8680] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 374.408513][ T8680] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 374.408807][ T8680] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 374.408868][ T8680] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 374.408889][ T8680] [U] 22Ʃx?0;3u [ 374.408982][ T8680] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 374.409025][ T8680] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 374.409055][ T8680] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 374.409074][ T8680] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 374.409112][ T8680] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 374.409155][ T8680] [U] ec [ 374.409170][ T8680] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 374.773594][ T5920] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 374.817399][ T8687] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 374.817435][ T8687] [U] TsHϿ@ćfϜ{x!BJK, B [ 374.817446][ T8687] [U] K{ [ 374.817464][ T8687] [U] t 1ŠFfˊ`GJgo/mC [ 374.817527][ T8687] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 374.817574][ T8687] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 374.817657][ T8687] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 374.817788][ T8687] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 374.817836][ T8687] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 374.817862][ T8687] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 374.817918][ T8687] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 374.818214][ T8687] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 374.818273][ T8687] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 374.818294][ T8687] [U] 22Ʃx?0;3u [ 374.818386][ T8687] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 374.818432][ T8687] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 374.818462][ T8687] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 374.818490][ T8687] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 374.818528][ T8687] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 374.818571][ T8687] [U] ec [ 374.818585][ T8687] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 374.928527][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.928567][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.928591][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 374.928637][ T5920] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 374.928661][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.942493][ T5920] usb 2-1: config 0 descriptor?? [ 375.285348][ T8692] netlink: 60 bytes leftover after parsing attributes in process `syz.3.774'. [ 376.097205][ T5920] kovaplus 0003:1E7D:2D50.0010: unknown main item tag 0x0 [ 376.097244][ T5920] kovaplus 0003:1E7D:2D50.0010: unknown main item tag 0x0 [ 376.097271][ T5920] kovaplus 0003:1E7D:2D50.0010: item fetching failed at offset 2/5 [ 376.098120][ T5920] kovaplus 0003:1E7D:2D50.0010: parse failed [ 376.098194][ T5920] kovaplus 0003:1E7D:2D50.0010: probe with driver kovaplus failed with error -22 [ 376.294864][ T5920] usb 2-1: USB disconnect, device number 28 [ 376.756740][ T8698] netlink: 60 bytes leftover after parsing attributes in process `syz.5.772'. [ 376.906764][ T8679] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 378.547054][ T8715] FAULT_INJECTION: forcing a failure. [ 378.547054][ T8715] name failslab, interval 1, probability 0, space 0, times 0 [ 378.547105][ T8715] CPU: 1 UID: 0 PID: 8715 Comm: syz.1.778 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 378.547134][ T8715] Tainted: [L]=SOFTLOCKUP [ 378.547142][ T8715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 378.547154][ T8715] Call Trace: [ 378.547162][ T8715] [ 378.547171][ T8715] dump_stack_lvl+0xe8/0x150 [ 378.547209][ T8715] should_fail_ex+0x46b/0x600 [ 378.547247][ T8715] should_failslab+0xa8/0x100 [ 378.547271][ T8715] __kmalloc_cache_noprof+0x84/0x690 [ 378.547304][ T8715] ? resv_map_alloc+0x51/0x2e0 [ 378.547337][ T8715] resv_map_alloc+0x51/0x2e0 [ 378.547369][ T8715] hugetlbfs_get_inode+0x68/0x690 [ 378.547411][ T8715] hugetlb_file_setup+0x21d/0x630 [ 378.547446][ T8715] ksys_mmap_pgoff+0x22e/0x720 [ 378.547478][ T8715] ? __x64_sys_mmap+0x7f/0x140 [ 378.547523][ T8715] do_syscall_64+0x14d/0xf80 [ 378.547542][ T8715] ? trace_irq_disable+0x3b/0x150 [ 378.547565][ T8715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.547587][ T8715] ? clear_bhb_loop+0x40/0x90 [ 378.547613][ T8715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.547634][ T8715] RIP: 0033:0x7f960af6c799 [ 378.547654][ T8715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.547672][ T8715] RSP: 002b:00007f96091a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 378.547693][ T8715] RAX: ffffffffffffffda RBX: 00007f960b1e6090 RCX: 00007f960af6c799 [ 378.547709][ T8715] RDX: 0000000004000002 RSI: 0000000000c00000 RDI: 0000200000400000 [ 378.547723][ T8715] RBP: 00007f96091a5090 R08: ffffffffffffffff R09: 0000000000000000 [ 378.547737][ T8715] R10: 000000000005d031 R11: 0000000000000246 R12: 0000000000000001 [ 378.547750][ T8715] R13: 00007f960b1e6128 R14: 00007f960b1e6090 R15: 00007ffc2d18e808 [ 378.547784][ T8715] [ 378.687726][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.687807][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.063628][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 379.233573][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 379.238001][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.238029][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 379.251308][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 379.251342][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.251363][ T10] usb 4-1: Product: syz [ 379.251378][ T10] usb 4-1: Manufacturer: syz [ 379.251392][ T10] usb 4-1: SerialNumber: syz [ 379.556297][ T10] usb 4-1: 0:2 : does not exist [ 379.584059][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 379.592988][ T8723] FAULT_INJECTION: forcing a failure. [ 379.592988][ T8723] name failslab, interval 1, probability 0, space 0, times 0 [ 379.593027][ T8723] CPU: 1 UID: 0 PID: 8723 Comm: syz.1.784 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 379.593057][ T8723] Tainted: [L]=SOFTLOCKUP [ 379.593064][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 379.593076][ T8723] Call Trace: [ 379.593084][ T8723] [ 379.593093][ T8723] dump_stack_lvl+0xe8/0x150 [ 379.593130][ T8723] should_fail_ex+0x46b/0x600 [ 379.593163][ T8723] should_failslab+0xa8/0x100 [ 379.593186][ T8723] __kmalloc_noprof+0xdf/0x7b0 [ 379.593218][ T8723] ? tomoyo_encode+0x28b/0x550 [ 379.593249][ T8723] tomoyo_encode+0x28b/0x550 [ 379.593279][ T8723] tomoyo_mount_permission+0x3a2/0x9d0 [ 379.593306][ T8723] ? stack_depot_save_flags+0x33/0x810 [ 379.593331][ T8723] ? terminate_walk+0x3d7/0x510 [ 379.593356][ T8723] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 379.593379][ T8723] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 379.593474][ T8723] security_sb_mount+0xe4/0x320 [ 379.593506][ T8723] path_mount+0xbc/0x10e0 [ 379.593527][ T8723] ? user_path_at+0xd4/0x160 [ 379.593560][ T8723] ? user_path_at+0xd4/0x160 [ 379.593589][ T8723] __se_sys_mount+0x31d/0x420 [ 379.593620][ T8723] ? __pfx___se_sys_mount+0x10/0x10 [ 379.593652][ T8723] ? __x64_sys_mount+0x20/0xc0 [ 379.593681][ T8723] do_syscall_64+0x14d/0xf80 [ 379.593701][ T8723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.593722][ T8723] ? clear_bhb_loop+0x40/0x90 [ 379.593748][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.593769][ T8723] RIP: 0033:0x7f960af6c799 [ 379.593789][ T8723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.593807][ T8723] RSP: 002b:00007f96091c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 379.593829][ T8723] RAX: ffffffffffffffda RBX: 00007f960b1e5fa0 RCX: 00007f960af6c799 [ 379.593845][ T8723] RDX: 0000200000000000 RSI: 0000200000000440 RDI: 000020000000f0ff [ 379.593859][ T8723] RBP: 00007f96091c6090 R08: 0000000000000000 R09: 0000000000000000 [ 379.593872][ T8723] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 379.593884][ T8723] R13: 00007f960b1e6038 R14: 00007f960b1e5fa0 R15: 00007ffc2d18e808 [ 379.593916][ T8723] [ 379.942908][ T10] usb 4-1: USB disconnect, device number 28 [ 380.139543][ T6827] udevd[6827]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 380.213560][ T5884] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 380.375066][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 380.382592][ T5884] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 380.382627][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.397732][ T5884] usb 2-1: config 0 descriptor?? [ 380.431407][ T5884] pwc: Logitech QuickCam Zoom USB webcam detected. [ 380.431426][ T5884] pwc: Warning: more than 1 configuration available. [ 380.654864][ T5884] pwc: Failed to set LED on/off time (-71) [ 380.655334][ T5884] pwc: send_video_command error -71 [ 380.655348][ T5884] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 380.655480][ T5884] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 380.670911][ T5884] usb 2-1: USB disconnect, device number 29 [ 380.938500][ T8736] netlink: 36 bytes leftover after parsing attributes in process `syz.3.788'. [ 381.643666][ T5963] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 381.713681][ T6563] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 381.799925][ T5963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.799963][ T5963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.799987][ T5963] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 381.800031][ T5963] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 381.800054][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.859936][ T5963] usb 4-1: config 0 descriptor?? [ 381.861416][ T8748] netlink: 36 bytes leftover after parsing attributes in process `syz.0.791'. [ 381.890428][ T6563] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 381.890464][ T6563] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.921379][ T6563] usb 6-1: config 0 descriptor?? [ 382.721290][ T6563] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 382.925409][ T5963] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 382.929409][ T5963] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 382.931219][ T5963] kovaplus 0003:1E7D:2D50.0011: item fetching failed at offset 2/5 [ 382.932151][ T5963] kovaplus 0003:1E7D:2D50.0011: parse failed [ 382.932226][ T5963] kovaplus 0003:1E7D:2D50.0011: probe with driver kovaplus failed with error -22 [ 382.992459][ T8742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.019276][ T8742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.112893][ T5963] usb 4-1: USB disconnect, device number 29 [ 384.188413][ T8758] netlink: set zone limit has 4 unknown bytes [ 387.047746][ T6563] [drm:udl_init] *ERROR* Selecting channel failed [ 387.773588][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 387.829225][ T6563] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 387.829253][ T6563] [drm] Initialized udl on minor 2 [ 387.856800][ T6563] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 387.857935][ T6563] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 387.882247][ T5855] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 387.897761][ T5855] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 387.899175][ T5855] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 387.937381][ T6563] usb 6-1: USB disconnect, device number 6 [ 388.254809][ T8770] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 388.255810][ T8770] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 388.256108][ T8770] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 388.256398][ T8770] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 388.256689][ T8770] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 388.303564][ T5963] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 388.415954][ T8780] Smack: duplicate mount options [ 388.456101][ T5963] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 388.456166][ T5963] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 388.456191][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.480118][ T5963] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 389.433851][ T5855] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 389.583770][ T5855] usb 6-1: device descriptor read/64, error -71 [ 389.806227][ T5963] stv0680 4-1:4.0: last error: 50, command = 0x65 [ 389.833634][ T5855] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 389.963563][ T5855] usb 6-1: device descriptor read/64, error -71 [ 390.064049][ T5963] usb 4-1: USB disconnect, device number 30 [ 390.080405][ T5855] usb usb6-port1: attempt power cycle [ 390.283548][ T5798] Bluetooth: hci4: command 0x0c1a tx timeout [ 390.283598][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 390.283631][ T5798] Bluetooth: hci2: command 0x2016 tx timeout [ 390.283663][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 390.283694][ T5798] Bluetooth: hci0: command 0x0401 tx timeout [ 390.353081][ T8784] syz.0.803 (8784): drop_caches: 3 [ 390.423592][ T5855] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 390.444956][ T5855] usb 6-1: device descriptor read/8, error -71 [ 390.693617][ T5855] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 390.714508][ T5855] usb 6-1: device descriptor read/8, error -71 [ 390.824065][ T5855] usb usb6-port1: unable to enumerate USB device [ 392.126141][ T8825] netlink: 20 bytes leftover after parsing attributes in process `syz.3.815'. [ 394.153563][ T5963] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 394.317339][ T5963] usb 1-1: config 5 has an invalid interface number: 223 but max is 1 [ 394.317371][ T5963] usb 1-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 394.317401][ T5963] usb 1-1: config 5 has an invalid interface number: 155 but max is 1 [ 394.317424][ T5963] usb 1-1: config 5 has no interface number 0 [ 394.317441][ T5963] usb 1-1: config 5 has no interface number 1 [ 394.317508][ T5963] usb 1-1: config 5 interface 223 has no altsetting 0 [ 394.317527][ T5963] usb 1-1: config 5 interface 155 has no altsetting 0 [ 394.326036][ T5963] usb 1-1: New USB device found, idVendor=0411, idProduct=0005, bcdDevice=a9.d3 [ 394.326065][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.326083][ T5963] usb 1-1: Product: Н [ 394.326096][ T5963] usb 1-1: Manufacturer: 鲨㸫혏ၖ﫴僴奧⋕ꂮᤰ魪퟇䩁ꭶ艎牘鮛効Ꮷꬍ㻳្ꨡᎋ쑁錄掰ﭹ㶘윀鄚 [ 394.326113][ T5963] usb 1-1: SerialNumber: ㍔ᒒቍ푷潇⻰벳ꗹ腮ƭ摽ㆈᆰ荻솃ꇽ詑쬧꠆쀸㨙圀㊁쪤ꝃ춸䟕竚梆퀊闛䛛挠髠솃抁綺⸊쏹竘魯샶ᚋ떝꣩일㐞຿즉됤구횼鬣躉햌证酗繍奯㫒爖⼚둑Ꝇ繿䂺烔육﹞릥䵦ꡠ❁Ơ畕℆쯢緞瓈砃亸귣㞿ꍬꍋ엑靄ᓔ谵岫–홄洞䶎歚瑋嘭ᓼ鼬勬跿䟙ḕﰙ饂郲ｔ [ 395.973624][ T5855] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 396.166001][ T5855] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 396.166032][ T5855] usb 3-1: config 0 has no interface number 0 [ 396.170760][ T5855] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 396.170791][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.170812][ T5855] usb 3-1: Product: syz [ 396.170827][ T5855] usb 3-1: Manufacturer: syz [ 396.170842][ T5855] usb 3-1: SerialNumber: syz [ 396.257081][ T5855] usb 3-1: config 0 descriptor?? [ 396.289865][ T5855] usb 3-1: selecting invalid altsetting 1 [ 396.290912][ T5855] dvb_ttusb_budget: ttusb_init_controller: error [ 396.290929][ T5855] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 396.321585][ T8845] A link change request failed with some changes committed already. Interface 1 may have been left with an inconsistent configuration, please check. [ 396.338987][ T8863] A link change request failed with some changes committed already. Interface 1 may have been left with an inconsistent configuration, please check. [ 396.479335][ T8860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.825'. [ 396.649641][ T8870] netlink: 337 bytes leftover after parsing attributes in process `syz.5.828'. [ 396.736043][ T5855] DVB: Unable to find symbol stv0299_attach() [ 396.757091][ T5875] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 396.843208][ T5855] DVB: Unable to find symbol tda8083_attach() [ 396.843224][ T5855] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 396.866219][ T5855] usb 3-1: USB disconnect, device number 22 [ 396.937272][ T5875] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 396.937358][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.056752][ T5963] pegasus 1-1:5.223: Missing or invalid endpoints [ 397.072837][ T5875] usb 2-1: config 0 descriptor?? [ 397.123066][ T5963] pegasus 1-1:5.155: Missing or invalid endpoints [ 397.239435][ T8876] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.830'. [ 397.289463][ T5963] usb 1-1: USB disconnect, device number 28 [ 397.306667][ T5875] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 397.513227][ T8867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.526406][ T8867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.961847][ T8867] netlink: set zone limit has 4 unknown bytes [ 397.991763][ T5875] [drm:udl_init] *ERROR* Selecting channel failed [ 398.032680][ T5875] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 398.032697][ T5875] [drm] Initialized udl on minor 2 [ 398.047565][ T5875] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 398.048057][ T5875] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 398.051678][ T809] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 398.054469][ T809] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 398.054691][ T809] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 398.117367][ T5875] usb 2-1: USB disconnect, device number 31 [ 398.641802][ T8888] netlink: 28 bytes leftover after parsing attributes in process `syz.5.834'. [ 398.684769][ T8890] netlink: 165 bytes leftover after parsing attributes in process `syz.0.835'. [ 398.685500][ T8890] FAULT_INJECTION: forcing a failure. [ 398.685500][ T8890] name failslab, interval 1, probability 0, space 0, times 0 [ 398.685538][ T8890] CPU: 0 UID: 0 PID: 8890 Comm: syz.0.835 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 398.685566][ T8890] Tainted: [L]=SOFTLOCKUP [ 398.685574][ T8890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.685587][ T8890] Call Trace: [ 398.685596][ T8890] [ 398.685605][ T8890] dump_stack_lvl+0xe8/0x150 [ 398.685643][ T8890] should_fail_ex+0x46b/0x600 [ 398.685678][ T8890] should_failslab+0xa8/0x100 [ 398.685702][ T8890] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 398.685731][ T8890] ? __alloc_skb+0x1d0/0x7d0 [ 398.685758][ T8890] ? lockdep_hardirqs_on+0x7a/0x110 [ 398.685797][ T8890] __alloc_skb+0x1d0/0x7d0 [ 398.685834][ T8890] xfrm_alloc_compat+0x1a6/0x16f0 [ 398.685874][ T8890] ? xfrm_get_translator+0x1b/0x240 [ 398.685905][ T8890] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 398.685938][ T8890] xfrm_nlmsg_multicast+0xda/0x1f0 [ 398.685969][ T8890] xfrm_send_policy_notify+0xb54/0x1bf0 [ 398.686009][ T8890] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 398.686051][ T8890] ? km_policy_notify+0x28/0x200 [ 398.686087][ T8890] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 398.686114][ T8890] km_policy_notify+0x121/0x200 [ 398.686140][ T8890] ? km_policy_notify+0x28/0x200 [ 398.686171][ T8890] km_policy_expired+0xc5/0x120 [ 398.686199][ T8890] ? __pfx_xfrm_policy_bysel_ctx+0x10/0x10 [ 398.686227][ T8890] ? __pfx_km_policy_expired+0x10/0x10 [ 398.686263][ T8890] ? __lock_acquire+0x6b5/0x2cf0 [ 398.686291][ T8890] xfrm_add_pol_expire+0x526/0x950 [ 398.686328][ T8890] ? __pfx_xfrm_add_pol_expire+0x10/0x10 [ 398.686361][ T8890] ? safesetid_security_capable+0xa9/0x1a0 [ 398.686401][ T8890] ? __nla_parse+0x40/0x60 [ 398.686436][ T8890] xfrm_user_rcv_msg+0x746/0xb20 [ 398.686472][ T8890] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 398.686498][ T8890] ? is_bpf_text_address+0x26/0x2b0 [ 398.686574][ T8890] ? __lock_acquire+0x6b5/0x2cf0 [ 398.686603][ T8890] ? __lock_acquire+0x6b5/0x2cf0 [ 398.686633][ T8890] netlink_rcv_skb+0x232/0x4b0 [ 398.686663][ T8890] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 398.686694][ T8890] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 398.686738][ T8890] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 398.686771][ T8890] ? mutex_lock_nested+0x152/0x1d0 [ 398.686796][ T8890] ? xfrm_netlink_rcv+0x6a/0x90 [ 398.686828][ T8890] xfrm_netlink_rcv+0x79/0x90 [ 398.686857][ T8890] netlink_unicast+0x831/0x9f0 [ 398.686893][ T8890] ? __pfx_netlink_unicast+0x10/0x10 [ 398.686922][ T8890] ? netlink_sendmsg+0x650/0xb40 [ 398.686948][ T8890] ? skb_put+0x11b/0x210 [ 398.686984][ T8890] netlink_sendmsg+0x813/0xb40 [ 398.687024][ T8890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.687055][ T8890] ? unwind_get_return_address+0x4d/0x90 [ 398.687090][ T8890] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 398.687125][ T8890] ____sys_sendmsg+0x94c/0x9c0 [ 398.687155][ T8890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.687188][ T8890] ? import_iovec+0x73/0xa0 [ 398.687224][ T8890] ___sys_sendmsg+0x2a5/0x360 [ 398.687253][ T8890] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.687320][ T8890] ? __fget_files+0x2a/0x420 [ 398.687344][ T8890] ? __fget_files+0x3a6/0x420 [ 398.687384][ T8890] __x64_sys_sendmsg+0x1c3/0x2a0 [ 398.687410][ T8890] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.687445][ T8890] ? __pfx_ksys_write+0x10/0x10 [ 398.687491][ T8890] do_syscall_64+0x14d/0xf80 [ 398.687510][ T8890] ? trace_irq_disable+0x3b/0x150 [ 398.687534][ T8890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.687555][ T8890] ? clear_bhb_loop+0x40/0x90 [ 398.687583][ T8890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.687605][ T8890] RIP: 0033:0x7fc51f15c799 [ 398.687626][ T8890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.687644][ T8890] RSP: 002b:00007fc51d3b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.687668][ T8890] RAX: ffffffffffffffda RBX: 00007fc51f3d5fa0 RCX: 00007fc51f15c799 [ 398.687683][ T8890] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 398.687697][ T8890] RBP: 00007fc51d3b6090 R08: 0000000000000000 R09: 0000000000000000 [ 398.687710][ T8890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.687723][ T8890] R13: 00007fc51f3d6038 R14: 00007fc51f3d5fa0 R15: 00007ffd64958c78 [ 398.687760][ T8890] [ 399.306851][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.836'. [ 399.326783][ T8850] syz.3.824 (8850): drop_caches: 3 [ 400.163553][ T5884] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 400.393604][ T5884] usb 1-1: device descriptor read/64, error -71 [ 400.635392][ T5884] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 400.783606][ T5884] usb 1-1: device descriptor read/64, error -71 [ 400.894033][ T5884] usb usb1-port1: attempt power cycle [ 401.243619][ T5884] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 401.264773][ T5884] usb 1-1: device descriptor read/8, error -71 [ 401.714066][ T5884] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 401.762287][ T5884] usb 1-1: device descriptor read/8, error -71 [ 401.872386][ T8930] syz.1.847 (8930): drop_caches: 3 [ 401.883575][ T5884] usb usb1-port1: unable to enumerate USB device [ 402.483556][ T6563] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 402.637021][ T37] audit: type=1326 audit(1774307579.579:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8953 comm="syz.5.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf27cdc799 code=0x7ffc0000 [ 402.637078][ T37] audit: type=1326 audit(1774307579.599:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8953 comm="syz.5.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf27cdc799 code=0x7ffc0000 [ 402.640999][ T6563] usb 2-1: unable to get BOS descriptor or descriptor too short [ 402.674251][ T6563] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 245, changing to 7 [ 402.678046][ T6563] usb 2-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 402.678086][ T6563] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.678108][ T6563] usb 2-1: Product: syz [ 402.678123][ T6563] usb 2-1: Manufacturer: syz [ 402.678139][ T6563] usb 2-1: SerialNumber: syz [ 402.754851][ T37] audit: type=1326 audit(1774307579.719:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8953 comm="syz.5.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf27cdc799 code=0x7ffc0000 [ 402.754911][ T37] audit: type=1326 audit(1774307579.719:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8953 comm="syz.5.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf27cdc799 code=0x7ffc0000 [ 402.754958][ T37] audit: type=1326 audit(1774307579.719:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8953 comm="syz.5.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf27cdc799 code=0x7ffc0000 [ 402.761335][ T37] audit: type=1326 audit(1774307579.719:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8953 comm="syz.5.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf27cdc799 code=0x7ffc0000 [ 402.761391][ T37] audit: type=1326 audit(1774307579.719:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8953 comm="syz.5.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf27cdc799 code=0x7ffc0000 [ 402.761435][ T37] audit: type=1326 audit(1774307579.719:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8953 comm="syz.5.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf27cdc799 code=0x7ffc0000 [ 402.762881][ T37] audit: type=1326 audit(1774307579.719:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8953 comm="syz.5.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf27c9cfce code=0x7ffc0000 [ 402.762932][ T37] audit: type=1326 audit(1774307579.719:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8953 comm="syz.5.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdf27c9cfce code=0x7ffc0000 [ 402.984701][ T8948] loop3: detected capacity change from 0 to 7 [ 402.997093][ T8948] Dev loop3: unable to read RDB block 7 [ 402.997130][ T8948] loop3: AHDI p3 p4 [ 402.997162][ T8948] loop3: partition table partially beyond EOD, truncated [ 402.997470][ T8948] loop3: p3 start 1702000233 is beyond EOD, truncated [ 403.607932][ T6563] usb 2-1: USB disconnect, device number 32 [ 403.770532][ T7073] udevd[7073]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 403.878777][ T8965] 9p: Bad value for 'rfdno' [ 403.917698][ T8968] nfs: Unknown parameter 'smackfsfloor&' [ 403.988135][ T8970] FAULT_INJECTION: forcing a failure. [ 403.988135][ T8970] name failslab, interval 1, probability 0, space 0, times 0 [ 403.988174][ T8970] CPU: 1 UID: 0 PID: 8970 Comm: syz.2.860 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 403.988202][ T8970] Tainted: [L]=SOFTLOCKUP [ 403.988210][ T8970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.988222][ T8970] Call Trace: [ 403.988231][ T8970] [ 403.988240][ T8970] dump_stack_lvl+0xe8/0x150 [ 403.988277][ T8970] should_fail_ex+0x46b/0x600 [ 403.988319][ T8970] should_failslab+0xa8/0x100 [ 403.988344][ T8970] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 403.988380][ T8970] ? __kernfs_new_node+0xa9/0x960 [ 403.988413][ T8970] kstrdup+0x42/0x100 [ 403.988443][ T8970] __kernfs_new_node+0xa9/0x960 [ 403.988472][ T8970] ? vsnprintf+0xdf1/0xee0 [ 403.988504][ T8970] ? __pfx___kernfs_new_node+0x10/0x10 [ 403.988529][ T8970] ? kernfs_root+0x1c/0x230 [ 403.988562][ T8970] ? kernfs_root+0x1c/0x230 [ 403.988586][ T8970] ? kernfs_root+0x1c/0x230 [ 403.988618][ T8970] kernfs_new_node+0x102/0x210 [ 403.988652][ T8970] __kernfs_create_file+0x4b/0x2e0 [ 403.988688][ T8970] cgroup_addrm_files+0x8c4/0xc30 [ 403.988732][ T8970] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 403.988766][ T8970] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 403.988800][ T8970] ? lockdep_hardirqs_on+0x7a/0x110 [ 403.988859][ T8970] css_populate_dir+0x124/0x3d0 [ 403.988889][ T8970] ? cgroup_apply_control_enable+0x749/0xaa0 [ 403.988920][ T8970] cgroup_apply_control_enable+0x583/0xaa0 [ 403.988972][ T8970] cgroup_apply_control+0x9b/0x730 [ 403.989002][ T8970] ? __pfx_cgroup_apply_control+0x10/0x10 [ 403.989034][ T8970] ? css_next_child+0xbd/0x220 [ 403.989062][ T8970] ? css_next_descendant_pre+0x194/0x260 [ 403.989096][ T8970] ? cgroup_save_control+0x2db/0x350 [ 403.989128][ T8970] cgroup_subtree_control_write+0xabf/0x10a0 [ 403.989171][ T8970] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 403.989198][ T8970] ? kernfs_root+0x1c/0x230 [ 403.989220][ T8970] ? kernfs_root+0x1c/0x230 [ 403.989246][ T8970] ? kernfs_root+0x1ea/0x230 [ 403.989269][ T8970] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 403.989306][ T8970] cgroup_file_write+0x36f/0x790 [ 403.989338][ T8970] ? __pfx_cgroup_file_write+0x10/0x10 [ 403.989361][ T8970] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 403.989393][ T8970] ? lockdep_hardirqs_on+0x7a/0x110 [ 403.989436][ T8970] ? __pfx_cgroup_file_write+0x10/0x10 [ 403.989457][ T8970] kernfs_fop_write_iter+0x3b0/0x540 [ 403.989496][ T8970] vfs_write+0x629/0xba0 [ 403.989538][ T8970] ? __pfx_vfs_write+0x10/0x10 [ 403.989572][ T8970] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 403.989605][ T8970] ? lockdep_hardirqs_on+0x7a/0x110 [ 403.989638][ T8970] ? mutex_lock_nested+0x152/0x1d0 [ 403.989661][ T8970] ? fdget_pos+0x252/0x320 [ 403.989699][ T8970] ksys_write+0x156/0x270 [ 403.989733][ T8970] ? __pfx_ksys_write+0x10/0x10 [ 403.989780][ T8970] do_syscall_64+0x14d/0xf80 [ 403.989799][ T8970] ? trace_irq_disable+0x3b/0x150 [ 403.989823][ T8970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.989845][ T8970] ? clear_bhb_loop+0x40/0x90 [ 403.989873][ T8970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.989894][ T8970] RIP: 0033:0x7f73370bc799 [ 403.989916][ T8970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.989934][ T8970] RSP: 002b:00007f7335316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 403.989958][ T8970] RAX: ffffffffffffffda RBX: 00007f7337335fa0 RCX: 00007f73370bc799 [ 403.989973][ T8970] RDX: 0000000000000008 RSI: 0000200000000040 RDI: 0000000000000005 [ 403.989986][ T8970] RBP: 00007f7335316090 R08: 0000000000000000 R09: 0000000000000000 [ 403.990004][ T8970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.990018][ T8970] R13: 00007f7337336038 R14: 00007f7337335fa0 R15: 00007ffefede3468 [ 403.990054][ T8970] [ 403.991638][ T8970] cgroup: cgroup_addrm_files: failed to add cpus, err=-12 [ 404.333018][ T8980] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.864'. [ 404.335507][ T8980] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 404.373836][ T5875] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 404.537779][ T5875] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.537808][ T5875] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 404.537862][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 404.546227][ T5875] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 404.546259][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.546278][ T5875] usb 1-1: Product: syz [ 404.546290][ T5875] usb 1-1: Manufacturer: syz [ 404.546304][ T5875] usb 1-1: SerialNumber: syz [ 404.565674][ T5875] usb 1-1: config 0 descriptor?? [ 404.618121][ T5875] uvcvideo 1-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 404.618144][ T5875] uvcvideo 1-1:0.0: No valid video chain found. [ 404.741319][ T8989] FAULT_INJECTION: forcing a failure. [ 404.741319][ T8989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.741362][ T8989] CPU: 0 UID: 0 PID: 8989 Comm: syz.3.868 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 404.741391][ T8989] Tainted: [L]=SOFTLOCKUP [ 404.741398][ T8989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 404.741410][ T8989] Call Trace: [ 404.741419][ T8989] [ 404.741428][ T8989] dump_stack_lvl+0xe8/0x150 [ 404.741467][ T8989] should_fail_ex+0x46b/0x600 [ 404.741501][ T8989] _copy_from_user+0x2d/0xb0 [ 404.741533][ T8989] copy_folio_from_user+0x1e3/0x320 [ 404.741574][ T8989] mfill_atomic_copy+0x102a/0x1460 [ 404.741595][ T8989] ? unwind_get_return_address+0x4d/0x90 [ 404.741634][ T8989] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 404.741671][ T8989] userfaultfd_ioctl+0x2dea/0x54d0 [ 404.741700][ T8989] ? kasan_save_track+0x4f/0x80 [ 404.741727][ T8989] ? kasan_save_track+0x3e/0x80 [ 404.741773][ T8989] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 404.741832][ T8989] ? kasan_quarantine_put+0xbb/0x1f0 [ 404.741872][ T8989] ? tomoyo_path_number_perm+0x219/0x630 [ 404.741907][ T8989] ? tomoyo_path_number_perm+0x219/0x630 [ 404.741943][ T8989] ? do_vfs_ioctl+0x117b/0x1540 [ 404.741967][ T8989] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 404.741988][ T8989] ? __pfx_smack_log+0x10/0x10 [ 404.742015][ T8989] ? smk_access+0x14c/0x4e0 [ 404.742049][ T8989] ? smk_tskacc+0x311/0x3a0 [ 404.742080][ T8989] ? smack_file_ioctl+0x2c2/0x360 [ 404.742110][ T8989] ? __pfx_smack_file_ioctl+0x10/0x10 [ 404.742156][ T8989] ? __fget_files+0x2a/0x420 [ 404.742178][ T8989] ? __fget_files+0x3a6/0x420 [ 404.742201][ T8989] ? __fget_files+0x2a/0x420 [ 404.742229][ T8989] ? bpf_lsm_file_ioctl+0x9/0x20 [ 404.742251][ T8989] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 404.742278][ T8989] __se_sys_ioctl+0xff/0x170 [ 404.742313][ T8989] do_syscall_64+0x14d/0xf80 [ 404.742333][ T8989] ? trace_irq_disable+0x3b/0x150 [ 404.742357][ T8989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.742379][ T8989] ? clear_bhb_loop+0x40/0x90 [ 404.742404][ T8989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.742424][ T8989] RIP: 0033:0x7f1d0bbac799 [ 404.742446][ T8989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.742464][ T8989] RSP: 002b:00007f1d09e06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.742488][ T8989] RAX: ffffffffffffffda RBX: 00007f1d0be25fa0 RCX: 00007f1d0bbac799 [ 404.742503][ T8989] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 404.742516][ T8989] RBP: 00007f1d09e06090 R08: 0000000000000000 R09: 0000000000000000 [ 404.742528][ T8989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.742541][ T8989] R13: 00007f1d0be26038 R14: 00007f1d0be25fa0 R15: 00007ffe3facc4b8 [ 404.742576][ T8989] [ 404.793307][ T5875] usb 1-1: USB disconnect, device number 33 [ 405.295768][ T9002] ip6erspan0: entered promiscuous mode [ 405.473752][ T5875] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 405.686482][ T5875] usb 4-1: unable to get BOS descriptor or descriptor too short [ 405.688544][ T5875] usb 4-1: not running at top speed; connect to a high speed hub [ 405.690088][ T5875] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.690113][ T5875] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 405.690165][ T5875] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 405.693252][ T5875] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.693282][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.693303][ T5875] usb 4-1: Product: syz [ 405.693318][ T5875] usb 4-1: Manufacturer: syz [ 405.693332][ T5875] usb 4-1: SerialNumber: syz [ 405.859788][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.880'. [ 406.596799][ T5875] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 406.596855][ T5875] cdc_ncm 4-1:1.0: bind() failure [ 406.663956][ T5875] usb 4-1: USB disconnect, device number 31 [ 407.106078][ T9037] FAULT_INJECTION: forcing a failure. [ 407.106078][ T9037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.106116][ T9037] CPU: 0 UID: 0 PID: 9037 Comm: syz.0.886 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 407.106144][ T9037] Tainted: [L]=SOFTLOCKUP [ 407.106152][ T9037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.106164][ T9037] Call Trace: [ 407.106174][ T9037] [ 407.106182][ T9037] dump_stack_lvl+0xe8/0x150 [ 407.106221][ T9037] should_fail_ex+0x46b/0x600 [ 407.106256][ T9037] _copy_from_user+0x2d/0xb0 [ 407.106287][ T9037] kstrtouint_from_user+0xd6/0x180 [ 407.106318][ T9037] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 407.106362][ T9037] ? __lock_acquire+0x6b5/0x2cf0 [ 407.106395][ T9037] proc_fail_nth_write+0x8e/0x210 [ 407.106422][ T9037] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 407.106455][ T9037] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 407.106482][ T9037] vfs_write+0x2a3/0xba0 [ 407.106525][ T9037] ? __pfx_vfs_write+0x10/0x10 [ 407.106558][ T9037] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 407.106592][ T9037] ? lockdep_hardirqs_on+0x7a/0x110 [ 407.106625][ T9037] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 407.106656][ T9037] ? mutex_lock_nested+0x152/0x1d0 [ 407.106681][ T9037] ? fdget_pos+0x252/0x320 [ 407.106719][ T9037] ksys_write+0x156/0x270 [ 407.106753][ T9037] ? __pfx_ksys_write+0x10/0x10 [ 407.106798][ T9037] do_syscall_64+0x14d/0xf80 [ 407.106817][ T9037] ? trace_irq_disable+0x3b/0x150 [ 407.106841][ T9037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.106863][ T9037] ? clear_bhb_loop+0x40/0x90 [ 407.106890][ T9037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.106911][ T9037] RIP: 0033:0x7fc51f11cfce [ 407.106931][ T9037] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 407.106949][ T9037] RSP: 002b:00007fc51d3b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 407.106972][ T9037] RAX: ffffffffffffffda RBX: 00007fc51d3b66c0 RCX: 00007fc51f11cfce [ 407.106987][ T9037] RDX: 0000000000000001 RSI: 00007fc51d3b60a0 RDI: 0000000000000005 [ 407.107001][ T9037] RBP: 00007fc51d3b6090 R08: 0000000000000000 R09: 0000000000000000 [ 407.107014][ T9037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.107027][ T9037] R13: 00007fc51f3d6038 R14: 00007fc51f3d5fa0 R15: 00007ffd64958c78 [ 407.107063][ T9037] [ 407.569031][ T5855] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 407.702691][ T36] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 407.863590][ T5855] usb 3-1: Using ep0 maxpacket: 8 [ 407.867356][ T5855] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 407.867385][ T5855] usb 3-1: config 179 has no interface number 0 [ 407.867437][ T5855] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 407.867522][ T5855] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 407.867552][ T5855] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 407.867580][ T5855] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 407.867608][ T5855] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 407.867711][ T5855] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 407.867735][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.037026][ T9030] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 408.181740][ T36] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 408.181762][ T36] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 408.181774][ T36] usb 4-1: Product: syz [ 408.181782][ T36] usb 4-1: Manufacturer: syz [ 408.181790][ T36] usb 4-1: SerialNumber: syz [ 408.326007][ T9030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.326613][ T9030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.434880][ T36] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 408.838433][ T36] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 408.838856][ T36] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 409.053547][ T5963] usb 4-1: USB disconnect, device number 32 [ 410.377777][ T9063] netlink: 'syz.1.893': attribute type 11 has an invalid length. [ 410.377832][ T9063] FAULT_INJECTION: forcing a failure. [ 410.377832][ T9063] name failslab, interval 1, probability 0, space 0, times 0 [ 410.377863][ T9063] CPU: 0 UID: 0 PID: 9063 Comm: syz.1.893 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 410.377889][ T9063] Tainted: [L]=SOFTLOCKUP [ 410.377896][ T9063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 410.377908][ T9063] Call Trace: [ 410.377916][ T9063] [ 410.377924][ T9063] dump_stack_lvl+0xe8/0x150 [ 410.377959][ T9063] should_fail_ex+0x46b/0x600 [ 410.377993][ T9063] should_failslab+0xa8/0x100 [ 410.378015][ T9063] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 410.378046][ T9063] ? __alloc_skb+0x1d0/0x7d0 [ 410.378074][ T9063] ? lockdep_hardirqs_on+0x7a/0x110 [ 410.378112][ T9063] __alloc_skb+0x1d0/0x7d0 [ 410.378140][ T9063] ? netlink_ack_tlv_len+0x6c/0x210 [ 410.378171][ T9063] netlink_ack+0x146/0xa50 [ 410.378191][ T9063] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.378227][ T9063] ? __pfx_ref_tracker_free+0x10/0x10 [ 410.378272][ T9063] netlink_rcv_skb+0x2b6/0x4b0 [ 410.378300][ T9063] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.378323][ T9063] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 410.378364][ T9063] ? netlink_deliver_tap+0x2e/0x1b0 [ 410.378391][ T9063] ? netlink_deliver_tap+0x2e/0x1b0 [ 410.378420][ T9063] genl_rcv+0x28/0x40 [ 410.378438][ T9063] netlink_unicast+0x831/0x9f0 [ 410.378475][ T9063] ? __pfx_netlink_unicast+0x10/0x10 [ 410.378502][ T9063] ? netlink_sendmsg+0x650/0xb40 [ 410.378527][ T9063] ? skb_put+0x11b/0x210 [ 410.378560][ T9063] netlink_sendmsg+0x813/0xb40 [ 410.378599][ T9063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.378629][ T9063] ? unwind_get_return_address+0x4d/0x90 [ 410.378654][ T9063] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.378689][ T9063] ____sys_sendmsg+0x94c/0x9c0 [ 410.378719][ T9063] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.378748][ T9063] ? import_iovec+0x73/0xa0 [ 410.378780][ T9063] ___sys_sendmsg+0x2a5/0x360 [ 410.378808][ T9063] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.378870][ T9063] ? __fget_files+0x2a/0x420 [ 410.378895][ T9063] ? __fget_files+0x3a6/0x420 [ 410.378932][ T9063] __x64_sys_sendmsg+0x1c3/0x2a0 [ 410.378958][ T9063] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 410.378991][ T9063] ? __pfx_ksys_write+0x10/0x10 [ 410.379034][ T9063] do_syscall_64+0x14d/0xf80 [ 410.379052][ T9063] ? trace_irq_disable+0x3b/0x150 [ 410.379075][ T9063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.379096][ T9063] ? clear_bhb_loop+0x40/0x90 [ 410.379121][ T9063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.379142][ T9063] RIP: 0033:0x7f960af6c799 [ 410.379163][ T9063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.379182][ T9063] RSP: 002b:00007f96091c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.379206][ T9063] RAX: ffffffffffffffda RBX: 00007f960b1e5fa0 RCX: 00007f960af6c799 [ 410.379221][ T9063] RDX: 0000000000080000 RSI: 0000200000000100 RDI: 0000000000000003 [ 410.379234][ T9063] RBP: 00007f96091c6090 R08: 0000000000000000 R09: 0000000000000000 [ 410.379248][ T9063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.379268][ T9063] R13: 00007f960b1e6038 R14: 00007f960b1e5fa0 R15: 00007ffc2d18e808 [ 410.379304][ T9063] [ 411.565512][ T9065] netlink: 'syz.1.894': attribute type 11 has an invalid length. [ 411.565539][ T9065] netlink: 'syz.1.894': attribute type 66 has an invalid length. [ 411.641392][ T9065] netlink: 32 bytes leftover after parsing attributes in process `syz.1.894[ 411.641392][ T9065] netlink: 32 bytes leftover after parsing attributes in process `syz.1.894'. [ 411.641421][ T9065] openvswitch: netlink: Flow key attr not present in new flow. [ 411.653666][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 411.653678][ T809] usb 3-1: USB disconnect, device number 23 [ 411.653821][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 411.657428][ C1] ================================================================== [ 411.657446][ C1] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 411.657489][ C1] Read of size 1 at addr ffff888034404870 by task ktimers/1/29 [ 411.657509][ C1] [ 411.657525][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 411.657555][ C1] Tainted: [L]=SOFTLOCKUP [ 411.657562][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 411.657575][ C1] Call Trace: [ 411.657584][ C1] [ 411.657594][ C1] dump_stack_lvl+0xe8/0x150 [ 411.657626][ C1] print_report+0xba/0x230 [ 411.657654][ C1] ? _raw_spin_lock_irqsave+0x40/0x60 [ 411.657683][ C1] kasan_report+0x117/0x150 [ 411.657702][ C1] ? irqentry_exit+0x59e/0x620 [ 411.657733][ C1] ? _raw_spin_lock_irqsave+0x40/0x60 [ 411.657767][ C1] __kasan_check_byte+0x2a/0x40 [ 411.657798][ C1] lock_acquire+0x79/0x2e0 [ 411.657820][ C1] ? rcu_is_watching+0x15/0xb0 [ 411.657867][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 411.657898][ C1] ? rt_spin_lock+0x157/0x400 [ 411.657924][ C1] rt_spin_lock+0x157/0x400 [ 411.657951][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 411.657979][ C1] ? rt_spin_unlock+0x160/0x200 [ 411.658006][ C1] __wake_up_common_lock+0x2f/0x1e0 [ 411.658040][ C1] __usb_hcd_giveback_urb+0x419/0x5e0 [ 411.658072][ C1] dummy_timer+0x8a6/0x4710 [ 411.658108][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 411.658141][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 411.658175][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 411.658202][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 411.658237][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 411.658269][ C1] __hrtimer_run_queues+0x55f/0xda0 [ 411.658302][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 411.658325][ C1] ? read_tsc+0x9/0x20 [ 411.658356][ C1] hrtimer_run_softirq+0x192/0x5d0 [ 411.658386][ C1] handle_softirqs+0x1de/0x6f0 [ 411.658426][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 411.658458][ C1] run_ktimerd+0x69/0x100 [ 411.658478][ C1] smpboot_thread_fn+0x541/0xa50 [ 411.658510][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 411.658545][ C1] kthread+0x388/0x470 [ 411.658568][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 411.658598][ C1] ? __pfx_kthread+0x10/0x10 [ 411.658621][ C1] ret_from_fork+0x51e/0xb90 [ 411.658651][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 411.658679][ C1] ? __switch_to+0xc7d/0x1450 [ 411.658707][ C1] ? __pfx_kthread+0x10/0x10 [ 411.658730][ C1] ret_from_fork_asm+0x1a/0x30 [ 411.658758][ C1] [ 411.658766][ C1] [ 411.658772][ C1] Allocated by task 5855: [ 411.658782][ C1] kasan_save_track+0x3e/0x80 [ 411.658809][ C1] __kasan_kmalloc+0x93/0xb0 [ 411.658836][ C1] __kmalloc_cache_noprof+0x3a6/0x690 [ 411.658866][ C1] xpad_probe+0x428/0x1fd0 [ 411.658887][ C1] usb_probe_interface+0x668/0xc90 [ 411.658910][ C1] really_probe+0x267/0xaf0 [ 411.658934][ C1] __driver_probe_device+0x18c/0x320 [ 411.658956][ C1] driver_probe_device+0x4f/0x240 [ 411.658981][ C1] __device_attach_driver+0x279/0x430 [ 411.659004][ C1] bus_for_each_drv+0x25b/0x2f0 [ 411.659031][ C1] __device_attach+0x2c8/0x450 [ 411.659053][ C1] device_initial_probe+0xa1/0xd0 [ 411.659075][ C1] bus_probe_device+0x12d/0x220 [ 411.659102][ C1] device_add+0x7b6/0xb80 [ 411.659121][ C1] usb_set_configuration+0x1a87/0x2110 [ 411.659143][ C1] usb_generic_driver_probe+0x8d/0x150 [ 411.659163][ C1] usb_probe_device+0x1c4/0x3b0 [ 411.659185][ C1] really_probe+0x267/0xaf0 [ 411.659208][ C1] __driver_probe_device+0x18c/0x320 [ 411.659231][ C1] driver_probe_device+0x4f/0x240 [ 411.659261][ C1] __device_attach_driver+0x279/0x430 [ 411.659285][ C1] bus_for_each_drv+0x25b/0x2f0 [ 411.659312][ C1] __device_attach+0x2c8/0x450 [ 411.659334][ C1] device_initial_probe+0xa1/0xd0 [ 411.659357][ C1] bus_probe_device+0x12d/0x220 [ 411.659384][ C1] device_add+0x7b6/0xb80 [ 411.659418][ C1] usb_new_device+0x9f8/0x16e0 [ 411.659445][ C1] hub_event+0x2a49/0x4f60 [ 411.659466][ C1] process_scheduled_works+0xb6e/0x18c0 [ 411.659492][ C1] worker_thread+0xa53/0xfc0 [ 411.659518][ C1] kthread+0x388/0x470 [ 411.659537][ C1] ret_from_fork+0x51e/0xb90 [ 411.659562][ C1] ret_from_fork_asm+0x1a/0x30 [ 411.659581][ C1] [ 411.659586][ C1] Freed by task 809: [ 411.659596][ C1] kasan_save_track+0x3e/0x80 [ 411.659622][ C1] kasan_save_free_info+0x46/0x50 [ 411.659645][ C1] __kasan_slab_free+0x5c/0x80 [ 411.659671][ C1] kfree+0x1c1/0x6c0 [ 411.659695][ C1] xpad_disconnect+0x350/0x480 [ 411.659716][ C1] usb_unbind_interface+0x26e/0x910 [ 411.659738][ C1] device_release_driver_internal+0x4d9/0x870 [ 411.659762][ C1] bus_remove_device+0x45a/0x570 [ 411.659791][ C1] device_del+0x52b/0x900 [ 411.659811][ C1] usb_disable_device+0x3d4/0x8d0 [ 411.659831][ C1] usb_disconnect+0x315/0x970 [ 411.659859][ C1] hub_event+0x1cf9/0x4f60 [ 411.659878][ C1] process_scheduled_works+0xb6e/0x18c0 [ 411.659904][ C1] worker_thread+0xa53/0xfc0 [ 411.659930][ C1] kthread+0x388/0x470 [ 411.659948][ C1] ret_from_fork+0x51e/0xb90 [ 411.659974][ C1] ret_from_fork_asm+0x1a/0x30 [ 411.659992][ C1] [ 411.659997][ C1] The buggy address belongs to the object at ffff888034404800 [ 411.659997][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 411.660015][ C1] The buggy address is located 112 bytes inside of [ 411.660015][ C1] freed 1024-byte region [ffff888034404800, ffff888034404c00) [ 411.660038][ C1] [ 411.660043][ C1] The buggy address belongs to the physical page: [ 411.660055][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34400 [ 411.660076][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 411.660092][ C1] flags: 0x80000000000040(head|node=0|zone=1) [ 411.660110][ C1] page_type: f5(slab) [ 411.660129][ C1] raw: 0080000000000040 ffff88813fe19dc0 dead000000000100 dead000000000122 [ 411.660147][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 411.660166][ C1] head: 0080000000000040 ffff88813fe19dc0 dead000000000100 dead000000000122 [ 411.660182][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 411.660200][ C1] head: 0080000000000003 ffffea0000d10001 00000000ffffffff 00000000ffffffff [ 411.660214][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 411.660222][ C1] page dumped because: kasan: bad access detected [ 411.660231][ C1] page_owner tracks the page as allocated [ 411.660238][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1178, tgid 1178 (kworker/u8:10), ts 156982846842, free_ts 153292403121 [ 411.660279][ C1] post_alloc_hook+0x231/0x280 [ 411.660297][ C1] get_page_from_freelist+0x28bb/0x2950 [ 411.660308][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 411.660319][ C1] allocate_slab+0x77/0x660 [ 411.660331][ C1] refill_objects+0x334/0x3c0 [ 411.660342][ C1] __pcs_replace_empty_main+0x35c/0x710 [ 411.660354][ C1] __kmalloc_noprof+0x530/0x7b0 [ 411.660369][ C1] ieee802_11_parse_elems_full+0x159/0x2ab0 [ 411.660383][ C1] ieee80211_ibss_rx_queued_mgmt+0x4ca/0x2cd0 [ 411.660394][ C1] ieee80211_iface_work+0x84e/0x1340 [ 411.660405][ C1] cfg80211_wiphy_work+0x2ab/0x4a0 [ 411.660417][ C1] process_scheduled_works+0xb6e/0x18c0 [ 411.660430][ C1] worker_thread+0xa53/0xfc0 [ 411.660443][ C1] kthread+0x388/0x470 [ 411.660453][ C1] ret_from_fork+0x51e/0xb90 [ 411.660466][ C1] ret_from_fork_asm+0x1a/0x30 [ 411.660476][ C1] page last free pid 5165 tgid 5165 stack trace: [ 411.660482][ C1] __free_frozen_pages+0xfe3/0x1170 [ 411.660497][ C1] __slab_free+0x24f/0x2a0 [ 411.660506][ C1] qlist_free_all+0x97/0x100 [ 411.660519][ C1] kasan_quarantine_reduce+0x148/0x160 [ 411.660533][ C1] __kasan_slab_alloc+0x22/0x80 [ 411.660547][ C1] __kmalloc_noprof+0x399/0x7b0 [ 411.660561][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 411.660574][ C1] tomoyo_path_perm+0x283/0x560 [ 411.660589][ C1] tomoyo_path_unlink+0xaa/0xf0 [ 411.660601][ C1] security_path_unlink+0x15f/0x330 [ 411.660614][ C1] filename_unlinkat+0x34f/0x610 [ 411.660625][ C1] __se_sys_unlink+0x2e/0x140 [ 411.660634][ C1] do_syscall_64+0x14d/0xf80 [ 411.660644][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.660655][ C1] [ 411.660658][ C1] Memory state around the buggy address: [ 411.660665][ C1] ffff888034404700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 411.660672][ C1] ffff888034404780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 411.660680][ C1] >ffff888034404800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 411.660685][ C1] ^ [ 411.660692][ C1] ffff888034404880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 411.660699][ C1] ffff888034404900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 411.660705][ C1] ================================================================== [ 411.660713][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 411.660725][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 411.660741][ C1] Tainted: [L]=SOFTLOCKUP [ 411.660745][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 411.660752][ C1] Call Trace: [ 411.660756][ C1] [ 411.660761][ C1] vpanic+0x56c/0xa60 [ 411.660778][ C1] ? __pfx_vpanic+0x10/0x10 [ 411.660796][ C1] panic+0xc5/0xd0 [ 411.660811][ C1] ? __pfx_panic+0x10/0x10 [ 411.660827][ C1] ? _raw_spin_lock_irqsave+0x40/0x60 [ 411.660843][ C1] ? rcu_is_watching+0x15/0xb0 [ 411.660876][ C1] ? _raw_spin_lock_irqsave+0x40/0x60 [ 411.660896][ C1] ? _raw_spin_lock_irqsave+0x40/0x60 [ 411.660919][ C1] check_panic_on_warn+0x89/0xb0 [ 411.660942][ C1] ? _raw_spin_lock_irqsave+0x40/0x60 [ 411.660968][ C1] end_report+0x73/0x180 [ 411.660987][ C1] ? _raw_spin_lock_irqsave+0x40/0x60 [ 411.661011][ C1] kasan_report+0x128/0x150 [ 411.661027][ C1] ? irqentry_exit+0x59e/0x620 [ 411.661055][ C1] ? _raw_spin_lock_irqsave+0x40/0x60 [ 411.661082][ C1] __kasan_check_byte+0x2a/0x40 [ 411.661098][ C1] lock_acquire+0x79/0x2e0 [ 411.661109][ C1] ? rcu_is_watching+0x15/0xb0 [ 411.661121][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 411.661137][ C1] ? rt_spin_lock+0x157/0x400 [ 411.661150][ C1] rt_spin_lock+0x157/0x400 [ 411.661164][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 411.661178][ C1] ? rt_spin_unlock+0x160/0x200 [ 411.661192][ C1] __wake_up_common_lock+0x2f/0x1e0 [ 411.661211][ C1] __usb_hcd_giveback_urb+0x419/0x5e0 [ 411.661227][ C1] dummy_timer+0x8a6/0x4710 [ 411.661245][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 411.661270][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 411.661288][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 411.661302][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 411.661319][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 411.661333][ C1] __hrtimer_run_queues+0x55f/0xda0 [ 411.661350][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 411.661362][ C1] ? read_tsc+0x9/0x20 [ 411.661377][ C1] hrtimer_run_softirq+0x192/0x5d0 [ 411.661392][ C1] handle_softirqs+0x1de/0x6f0 [ 411.661409][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 411.661425][ C1] run_ktimerd+0x69/0x100 [ 411.661435][ C1] smpboot_thread_fn+0x541/0xa50 [ 411.661452][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 411.661470][ C1] kthread+0x388/0x470 [ 411.661481][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 411.661497][ C1] ? __pfx_kthread+0x10/0x10 [ 411.661508][ C1] ret_from_fork+0x51e/0xb90 [ 411.661523][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 411.661538][ C1] ? __switch_to+0xc7d/0x1450 [ 411.661551][ C1] ? __pfx_kthread+0x10/0x10 [ 411.661563][ C1] ret_from_fork_asm+0x1a/0x30 [ 411.661577][ C1] [ 411.661742][ C1] Kernel Offset: disabled