last executing test programs: 3m9.085908873s ago: executing program 4 (id=2294): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r2 = shmget$private(0x0, 0x4000, 0xa4, &(0x7f0000ff9000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x5000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000a40)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002240)={'ip6_vti0\x00', &(0x7f00000021c0)={'ip6_vti0\x00', r4, 0x2f, 0x2, 0x0, 0xa, 0x22, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x700, 0x7d6, 0x8133}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x1a6c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWTABLE={0x58, 0x0, 0xa, 0xa00, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x110, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_DESC={0xe0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_DESC_CONCAT={0xc4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4a1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb21f}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x60d5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbe}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x284}, 0x1, 0x0, 0x0, 0x5}, 0x40088c0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r9, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3m4.895263818s ago: executing program 4 (id=2300): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffd, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000b40)={0x0, 0x3}, &(0x7f0000000b80)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000bc0)={0x0}, &(0x7f0000000c00)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x7fffffff, @loopback, 0x7}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000180)="234d688239d927f90a7b5f674d43d2b75b95ec77b81623158b91dc7288f8ee7ca6eb27df233e2ac787d6f6", 0x2b}, {&(0x7f0000000300)}, {&(0x7f0000000340)="ca054d8efe24f758e74ecebecdf3032b0e3bf5f29aa07f6e5cc64dab4bc514b08b6d1dd59bf46bb2b83a07fe564eeac8bfc7bdd4ba7df093b5f63810621b15a721e0a922693afb3f66976b05c4af654ff032d8ba002b295c8ae606f751da86255fe8a8c00b0ed2e9ba0cee14918f71469be4ccd7f77d0ba7a6f5e6842f9c794845de591fb2282f6b48fb06e69612d1520bedc1baf930", 0x96}, {&(0x7f0000000400)="dce1e4d1fa4da47021cd8b356df869b1", 0x10}, {&(0x7f0000000440)="ae90b22729111fb0f0bdd65cac99e8e7f614b7a2cbc5f1c499418c83a987d02d05c9783443598becd7371f0f6529e6da771728ad593daaee5ecabfb259c246c74855826c256054ac3bf9902f7fa22eb785fb616a95fc3b14b054756436bae28b45c74616f78d6b8f313008da18437d4d39fdd3c9ec634ba5fe1628d227b81f45f611e44b1bd0e0441f1bf75f0762173e4b55f02cb6a5ccc01f4bee15bcd3a94b49514d17829a5eff11a2d838f3d87f5735f0c1b0", 0xb4}], 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="30000000000000008400000001000000800f07000b00000000000100ff0100000500000004000000c7ffffff", @ANYRES32=0x0, @ANYBLOB="20001c0000e000008400000002000000aa0401000600000002000b00", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000005000000100000000100000018000000000000008400000006000000480900000000000018000000000000008400000007000000e000000100000000180000000000000084000000070000000a01010200000000180000000000000084000000000000000100ffff08000200180000000000000084000000060000000800000000000000"], 0xe0, 0x4004001}, {&(0x7f0000000840)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000880)="8e056218ad6d79379389f66835a7893b7aea102dc8fbdb5396c90beae6d3c40ce901ec32afe8171cd0295c2309fabf86c2", 0x31}, {&(0x7f00000008c0)="381ccfec372fc2b00c2e03b7d7d55faf8b1f5124998370036c330226146ae9ae336f37e9b0a1fc18f1dc5ac6d94525901e34c47ddf2a5331cb45271251169cf451c783536b17c600b55a", 0x4a}, {&(0x7f0000000940)="6bf59d5dd931fdb02d85768d8128b188c16b535ddd3882752faa67ed9f169a2270224c98d1b289bef88ca996bf6b034a7ca33954194826779e0a473544a61e37aa873dbaf321d03f0307c955258462693972b0c0d7520ef426ccd92e7c08af74b6c685bf27e64b8c25750c4a7728adc487fbadd87fd0793f02c2504a59f0d7613b12ca44127a5ddc5dfbef8daa7a6777564db79b1a92da8b40c5f0f965262b6a32700b8e3390d78faa7a5f604a097fef7547b379c5dfa588605a8d2ce31303030fd1", 0xc2}, {&(0x7f0000000a40)='\b', 0x1}], 0x4, &(0x7f0000000c40)=[@sndinfo={0x20, 0x84, 0x2, {0x8, 0x8201, 0x13, 0x7}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x7, 0x101, 0x0, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x2, 0x8200, 0xfffffffe, 0x4f, 0x9, 0x0, 0xb, r4}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x40, 0x4, 0x3f, 0xc0, 0x918, 0x7, 0x5, r5}}], 0xd0, 0x4}], 0x2, 0x24000000) shutdown(r2, 0x2) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m2.1760327s ago: executing program 4 (id=2311): syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f4, 0x2) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff0103020707240501"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), 0x0, 0x5, 0x0, 0x0, r3}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r4, @ANYRES64=r4], 0x0) 3m0.216071578s ago: executing program 4 (id=2319): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x38, 0x701, 0xfffffffe, 0x25dfdbfe, {0x10}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x9, 0x7fe2, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000780), 0x6, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000380), 0x0}, 0x20) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x17, 0x1, "fa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x2, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="c5", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000005c0)="061f8d430884fd7e536c16f2384e000000000000", 0x14}], 0x1}}], 0x2, 0x0) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0x82, &(0x7f0000000200)={0x7939, 0x5, 0x8000, 0x86, 0xe2, 0x0, 0xff, 0xb7}, &(0x7f0000000440)=0x20) syz_usb_control_io(r4, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, &(0x7f0000000040)={0x7070878e1f870b60, 0x23, 0xca, {0xca, 0x22, "95523c0cb949532a9b76d32d1f5a8fcd893b931cc51cfa22c3ef06f65a40cae71db91daa80e76f32b88003712297f562edd4616d11afd586667df970d1ec6080f46d3ac86bbde90d3ec6d58fb59206ac4afb087345de588dbc53de66cfc6988582a47f927fee77e65b3faf151b453b116fab8d89ef0bca0bfc43e94eef5a54033673cbb2bafa98a00d91ae2754ce66ee46d416586af5a6bc0e01a19c23afd705db4984f6565a12387d13bfacd56190179f9cdaf82c4abafc7ec90e3065fede408fa841f06445e410"}}, &(0x7f00000006c0)={0x0, 0x3, 0x102, @string={0x102, 0x3, "e73fe2231f097c4b87b1da8784d823b9cec3c8e4f3de81635c7bde82f9068c27367bafa903dcd6ac5585b5b6bb414d55f4dcc47cdde57db9f78389e085fccf2cf1bb0f933009f17d1b0fb07a27c54a73828fbdb9ce0a7e9dc809c22105075adeda495511046c3b93237b42908a2a35edf981a23dc69e97a4619b6a35119a8e0eeb12fa2133101c7318d393a4437551d079051f9e17ff7055fcb19c5c085c22ed6d07edcc6d41905028d93502cae8a1b2d254728d95a69363214e26b163e693f370aad47f12a6e9d3ddf1cd6a549c4e76fe5a20b6f99a0c15a5e1555654b8fa0079eb98826e76d7094a92eb84daa29aa96596ef661c8400"/256}}, &(0x7f0000000200)={0x0, 0x22, 0x17, {[@main=@item_012={0x1, 0x0, 0xa, '<'}, @global=@item_4={0x3, 0x1, 0x0, "cf9d6399"}, @local=@item_012={0x2, 0x2, 0x3, "0460"}, @main=@item_012={0x2, 0x0, 0x9, "01c5"}, @global=@item_4={0x3, 0x1, 0xa, "f08cb163"}, @global=@item_4={0x3, 0x1, 0x3, "ae22d7a3"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x4bc}}}}, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0xe, 0x8b, "ef69a24a1b3bb09adafc67966006b1174dfc7c8c76a79bcc670a4e5b6276df92c1926b11d4b61183829a64e4c9c41144563f579713fcc84ce9ce1b344b5d5ef366c1c34d1f6a450f23d91d7b4f3f3c98901b717f9920a649ea46f6ff6d98ecd19bc590f5d50f0b0f18a095880d3342052d25c9ad63c444c877ffae7ef2c4e8e30e8c8d9ab6242f07a66f0d"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4f}, &(0x7f0000000500)={0x20, 0x1, 0x96, "ab98719f51049b0042decbc850ec7991d8db1482bff315f98ef0db391ea12f74467190b8e77ae0b5a25cee00c6fe831060ad0de0d9ffc5f16c63fa6b6b10513d54c6678cd3e5ef9f37c39f45b9fca66fb6261ff3c303ffce91a70f0145bea5a42e81315f5657bb2a43a967b5a5c7a79ab39dc8c5bf87ef24ef9ace308951e3c2d5101ccd5c890dec3703308bd831154b9e4bc4ceed15"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0xde}}) 2m56.354483899s ago: executing program 4 (id=2324): r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) write$char_usb(r0, &(0x7f0000000340)="93743c63e02bf2bbdd02dc4939bee426d94993bd91f49a42636efb85d6c857426e244ad2fae2b7825b49e7eb", 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e230000050021"], 0x6c}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f00000020c0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x7, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}, {{&(0x7f0000000800)={0xa, 0x4e23, 0x7d, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c, 0x0}}], 0x2, 0x931766f6319eed40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x38, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14}}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$FBIOBLANK(r8, 0x4611, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2000000000903, 0x0, 0x0, 0xfffd}, 0x20) pipe2(&(0x7f0000000040), 0x0) 2m55.795926232s ago: executing program 4 (id=2325): r0 = socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000c80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="037d2b81b371", @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf251000000008000500f9ffffff2800028014000100fe8000000000000000000000000000aa080006000600000008000500040000009c0003800500080009000000080001000100000014000600fe8000000000000000000000000000bb14000600fe8000000000000000000000000000aa1400020076657468315f746f5f7465616d000000050008000d000000140002006e657464657673696d300000000000001400020076657468305f746f5f627269646765001400060000000000000000000000ffffac1414aa08000500ffffffff"], 0xe0}, 0x1, 0x0, 0x0, 0x40004}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x3c00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001bc0)=@newtfilter={0x3b60, 0x2c, 0x100, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3b30, 0x2, [@TCA_CGROUP_POLICE={0x60, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc, 0xffffffffffffffff, 0x734, 0x10, 0x96, {0x79, 0x2, 0x8, 0x3, 0x8, 0x6}, {0x7, 0x1, 0x6, 0x5000, 0x8, 0x6}, 0xffffff01, 0x0, 0xfffffffc}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x300}]}, @TCA_CGROUP_ACT={0x149c, 0x1, [@m_bpf={0x130, 0xa, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x9, 0x8, 0x3, 0xad2}, {0xfffd, 0x54, 0xe4, 0x8}, {0x7, 0x8, 0x5, 0x1}, {0x4, 0x2, 0x9, 0xfffffff9}, {0x9, 0x59, 0xf5, 0xc914}, {0x3, 0xc, 0xe2, 0x1000}, {0xc03, 0x1, 0x80, 0xe23}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x2, 0x4, 0x161, 0x8}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x85, 0x6, "7bc2133f1971b37471adb4028e31289dcbee64cbad9e22faa2d2636f8fcfead24bb6dfcdabd01a602da9abb7bcfbd43f30d9fe2ac0540a41bd47e15ed7cb4a0e9d5e67a2f7f68b00dbf502a4569a905cdddd0224e20238cb9bbe2024479e3b695e823e97e4abb2899ae9951c34c3f09f4ab4d0da5fb36df5afb3c8f82cf22646c5"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_tunnel_key={0xa0, 0x15, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0x53, 0x6, "f84d9cf27d5c3c9bf014b32f38f0c524e6e35e4919759a1713d4effcb0feea9ece5f1dedfb22ffcaeac91ee16fdf7f485a1eb2a32eea944a5ef4b9b64adf07e87194c187897f243b3ee14a148601c2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x1030, 0xf, 0x0, 0x0, {{0xb}, {0x4}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0xe4, 0x12, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0xb4, 0x6, "4ea225ec7bd00fd425bf076f3c320ad48828932dd8e8d2f731ac9154fabc836825b2a35e8581b38c4289997086624a5900c8a2ab6916f7ba740d3e975db3d6ba8d857f19939b4c5705b51c511190ae6e8b565661599fdf7d068d652fec4785f554b135974b1027f53de9272e0978b1fe2b2a0ab067ead2f8593bb2cb9af02fc9f0980e376f4d8438b03b611fa003d25a02a9ca2b9f871d8a138cf758c049ca8a784ee275bf0fb69ff49d77675a5ae58f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0x1b4, 0x6, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x0, 0x9, 0x1}, @remote, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x1, 0x1, 0x40, 0x4}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x9, 0xffffffffffffffff, 0x0, 0x8}, @broadcast, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x3, 0xffffffffffffffff, 0x8, 0x8000}, @remote, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x6, 0x7, 0x5, 0x81}, @dev={0xac, 0x14, 0x14, 0x43}, @empty, 0xff}}]}, {0xc2, 0x6, "a6ac8777a1cc464dce38e5c3242cdc66ec1514673db9e2ab57a66e04e83cdd3c14d1ecaa48484b8ff09256ff06b1ff0ddfb5897a81e2c07b71c58809cf767d4986d1236a3d1e999a46024a6e6272b263fafff1a60c304446e776eddae21df1e85df2024df2992bc75f264e9ca20985b311c3f7b0695d39050ceb534e70ce0bcf3f470c76cff356c9403ac89b9d62e71ad254964fc7b4ae13c235b5f6e4d5b042c1dc9aefa8bd08a4eb132ea892173464fe026b1fecee02317fdd88fa4338"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_ACT={0x2630, 0x1, [@m_police={0x6c, 0x20, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff0}]]}, {0x32, 0x6, "65edd20a3fc6cdf6080673329f7bcab13a6ba071f87d371f52fc23878c9fe6c0b2ea4b77e643ac33baeb85d6b1e8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0x9c, 0x0, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x775, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffe, 0x5, 0x4, 0xfffffffa, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffff81, 0x2, 0x0, 0x30, 0x7}}]}, {0x33, 0x6, "31121c400cf4940877730ae68d16ca009034ab53380e3aba5f20bcb4625d6596fdba88ab649772ae8087decfc29068"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_simple={0x134, 0x11, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x10, 0x2, 0xfffffffb}}, @TCA_DEF_DATA={0x9, 0x3, '\'/x:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1c000, 0x22a8, 0x0, 0x4b, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0xd, 0x101, 0x8, 0x1, 0x7}}]}, {0xb1, 0x6, "03a0f3ed5ff647687064837ff007962be06fffccf0c246f2e1dd90a1b048b88da3e9cac8fa1193770b0c29d736815d1430ce445d1fdafb6839dc839c35a3d650578d3ba7e10f97d634ced013116ccea8e91f96dffb60024cd16f7056059265a51f4231ec6345b4088385dd281af604278e6be4d80518b908b73c38e3721748a3af9028f600ee11799b7419e79fb2a96725d9e02d178b12f44627d5ade29dcb007edf17f296f070515d9ea7f2c5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x1da0, 0x1c, 0x0, 0x0, {{0xb}, {0x1d1c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7fff, 0xd, 0x8000, 0x81, 0x9, 0x1, 0x7fffffff, 0x5, 0x1, 0x69, 0x4d1, 0x0, 0x2e621f63, 0x7, 0x200, 0x6e, 0x6, 0x6, 0x3, 0x7fffffff, 0x401, 0x3, 0x83, 0xfffffff8, 0x3, 0x7, 0x7, 0xa52, 0x8, 0xfffff801, 0x1851c000, 0x81, 0x1, 0x1a000, 0x4, 0xf0d, 0x7, 0xd9, 0xffff916e, 0x1, 0x10001, 0x7, 0x3d, 0x800, 0x6, 0x101, 0x2, 0x5, 0x80000001, 0xad08, 0x9, 0x7, 0xa64, 0x7, 0x5, 0x7, 0x1, 0xb86d, 0x800, 0x5, 0x6, 0x7, 0xfffff800, 0x9, 0x6, 0x400, 0x7, 0x8, 0x3, 0x4, 0x7, 0x3, 0x8, 0x1, 0x5, 0x6, 0x4, 0x0, 0x4, 0xfff, 0x1, 0x0, 0xffffffff, 0x6, 0x5, 0x10, 0x0, 0x5, 0xe80d, 0x4, 0x3, 0xf, 0x7fff, 0x7ff, 0x0, 0x68fe7bc2, 0x100, 0x8000, 0x2, 0x1ff, 0xfff, 0xb3, 0x2, 0x6c3, 0x10, 0xffffff1a, 0x1, 0x9, 0x3, 0xffffffff, 0x52, 0xb, 0xfff, 0x83f9, 0x8, 0x9, 0xb, 0x0, 0x0, 0xff, 0x6, 0x5, 0xd3, 0x4, 0x6, 0x2, 0x3bc8fb26, 0x0, 0x0, 0xa, 0x80000001, 0xbc, 0x5, 0x6, 0x6, 0x7, 0x80000, 0x5, 0x7, 0x815acfb, 0x2, 0x7af, 0x3, 0xa8, 0x6, 0x0, 0xc793, 0x0, 0x6, 0x1ff, 0x3, 0x4, 0xec0, 0x0, 0x2000000, 0xffff, 0x3bf1734b, 0xb7, 0x9, 0x8, 0x2, 0x2, 0x8, 0x5, 0xe, 0x24c, 0x3a4e649e, 0x4d847eef, 0x4, 0x6, 0xf, 0x1, 0x863, 0x5, 0x9, 0x5, 0x3, 0x0, 0x4, 0x80000000, 0x3, 0x8, 0xffff5a8b, 0x3ff, 0x0, 0x23, 0x7, 0x9, 0xff, 0xfff, 0x68b, 0x9, 0x200, 0xf568, 0x3e93, 0x10, 0x686, 0xffff, 0x4, 0xfffffff9, 0xcd, 0x8, 0xffffff7f, 0x1, 0xffffff80, 0x5, 0x4, 0x2, 0x3, 0xf, 0xe000000, 0x7, 0x1ff, 0x4, 0x90, 0x1, 0x3, 0x9, 0x5, 0x4, 0x8, 0xffff, 0x5, 0x3, 0x2, 0x400, 0x3, 0x3, 0x69ca8aac, 0x8c0, 0x8001, 0x4, 0x7fffffff, 0x7, 0x8efb, 0x3bff, 0x7, 0x3, 0xc, 0x80000001, 0x4, 0x1f, 0x2, 0x6, 0x3, 0xfffffe01, 0xe, 0xfffffffb, 0x7fff, 0x1000, 0x10, 0x38d1af1a, 0x5, 0xd, 0xffffffff, 0x80]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0xffffffffffffffff, 0x0, 0x9, 0x139a, {0x6, 0x2, 0xe, 0x3ff, 0x49, 0x2}, {0x5, 0x0, 0x6, 0xa, 0x711, 0x3}, 0x10001, 0x7fff, 0x3ff}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x1, 0xfffffff7, 0xb1b, 0x2000000, 0x7fffffff, 0x0, 0x5, 0xff, 0x1, 0x800, 0x5, 0x1e2b, 0xb2c0, 0x1, 0x1, 0x33, 0x1, 0x1, 0x4, 0x8e1e, 0x7fff, 0x6, 0x2, 0x0, 0x6, 0x251, 0x3, 0x0, 0xb, 0xc0000000, 0x8f5, 0x8, 0x10000, 0x1, 0xbf8, 0x3, 0x0, 0x2, 0x6, 0x2, 0x1400, 0x1, 0x2, 0xfffffffb, 0x2, 0x5, 0x6c, 0xfff, 0xfffffffb, 0x3, 0x400, 0xfd8, 0xfffffff7, 0x8, 0x4, 0x3, 0xff, 0x5, 0x7, 0xd95, 0x2, 0x9, 0x3, 0x3, 0x2, 0x4, 0x2, 0xfffffffd, 0x3e, 0x2, 0x9, 0x2, 0x8, 0x1, 0x9, 0x4, 0x800, 0x5, 0x7, 0x5ced, 0x4, 0x8, 0x3, 0x6, 0x0, 0x10001, 0xffffffff, 0x9, 0x40, 0x2, 0x8, 0x9, 0x8, 0x5, 0x9, 0xb, 0x20, 0x40000, 0x5, 0x3, 0xffff, 0x1, 0xab7, 0x1000, 0x9, 0x800, 0x0, 0x8, 0x7, 0x2, 0x6, 0x8, 0x4, 0x9, 0x7ff, 0x3, 0xfffff61b, 0x7, 0x0, 0x7, 0x2, 0xd, 0x2, 0x3b6, 0xff, 0xe12, 0x800, 0x7, 0x200, 0x55, 0x1, 0x2, 0x0, 0x9, 0x3, 0x9, 0x9, 0x4, 0x1, 0x8ed, 0x9, 0x8, 0xffff, 0x8, 0x6, 0xf, 0x8001, 0x0, 0x9, 0x0, 0x1, 0x1, 0x3, 0x800, 0x7, 0x280000, 0x1, 0x8, 0x4, 0x1, 0x8, 0x514, 0x6, 0x63f3, 0x7, 0x4, 0x9, 0x71d, 0x7, 0x1000, 0x2, 0x1ff, 0x9, 0x7, 0x9, 0x2, 0x2, 0x9, 0x1, 0x8, 0x4, 0x9, 0x7, 0x80000000, 0x0, 0x0, 0x80000001, 0x8, 0x0, 0x0, 0xfff, 0x7, 0xfffffffb, 0xffff, 0x27, 0x1, 0x5, 0x80000000, 0x100, 0x3ff, 0x5, 0x3, 0x9, 0x200, 0x1, 0x3, 0x4, 0x6, 0x2, 0x5, 0x6, 0x0, 0x3, 0x8, 0xabc, 0x1ba, 0x1, 0x1, 0x1ff, 0xba, 0x6, 0x8, 0xc, 0x1, 0x8, 0x5, 0x0, 0x9, 0x5, 0xa3, 0x4, 0xe, 0x8, 0x3, 0x6, 0x7, 0x8, 0x1, 0x1, 0x9, 0x80000001, 0x9, 0x1, 0x1ad, 0x80, 0x2, 0x18, 0x2, 0x7a, 0x9, 0x2, 0x9, 0x10001, 0x0, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x52d8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x1f1f}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xca80, 0xe18, 0xae8c, 0x2, 0x8, 0xd7, 0xead4, 0x5, 0x1, 0x7, 0x2, 0x6, 0x9, 0x5, 0x8, 0xa, 0x10, 0x2, 0x66c, 0x6, 0x0, 0x2, 0x3, 0x7fffffff, 0x7, 0x100, 0x6, 0x9, 0x7, 0x9, 0x1ff, 0x7, 0x0, 0x101, 0x3, 0xffff, 0x4, 0x8000, 0x7fffffff, 0x1, 0x9, 0x80000000, 0x80000001, 0x2, 0x7, 0x5, 0xf, 0x5, 0x200, 0x1, 0x9, 0x8001, 0x4, 0x2, 0x1, 0x9, 0x8, 0xae89, 0x7fff, 0x20000, 0x4ae, 0x7ff, 0x100, 0x4, 0x8, 0x2, 0x3, 0x1c0, 0x10, 0x9, 0x25f8, 0xfffffffd, 0x5, 0x8, 0x3, 0x7ff, 0x5, 0x1d0, 0x100, 0xffffffff, 0x800, 0x44d, 0x101, 0x80, 0x8001, 0x8, 0x7, 0xfff, 0xff, 0x64, 0x1, 0x80000001, 0x8, 0x6, 0xb, 0x7fffffff, 0x4, 0x10000, 0x80000000, 0x9, 0x0, 0x374e, 0x1, 0xacd, 0x5, 0x3, 0x2, 0xffff, 0x9, 0x4, 0x9, 0x0, 0x4, 0x9, 0xffffffff, 0x7, 0x8, 0x8001, 0x1, 0xc17, 0x1, 0xb, 0x3, 0x1, 0x7, 0x2, 0x200, 0x8, 0x4, 0x1, 0x80000000, 0xd, 0x2, 0x2, 0x401, 0x1, 0xc, 0xfe, 0x4, 0x754, 0x6, 0x4, 0x400, 0xfffffbff, 0x9, 0x6, 0x0, 0x2, 0x9, 0x40, 0x1, 0x5, 0x100, 0x0, 0x5, 0x1, 0x5, 0x10001, 0xfffffffe, 0x9985, 0x4, 0x80, 0x7d9f, 0xe5, 0x0, 0x3, 0x9, 0x100, 0x1, 0x80000001, 0x3, 0x5, 0x0, 0x4, 0x5, 0x4, 0x1, 0x42dd, 0x9, 0x10001, 0x41b, 0x0, 0x7, 0xa, 0x100, 0xe32a, 0xc03a, 0xffffffff, 0x263, 0x40, 0x8, 0x7, 0x40, 0x8, 0x4, 0x2000, 0xffff0000, 0x5, 0x5, 0x7, 0x8, 0x7, 0x200, 0x9, 0x6, 0x79, 0x3, 0x22cb, 0x0, 0x7, 0x9, 0xd, 0xfc0, 0x2, 0x8, 0x9, 0xfffffff3, 0x5, 0x9, 0xffffffff, 0xe625, 0x0, 0xffffffff, 0x2, 0x1, 0x5, 0x5, 0xfffffe00, 0x8, 0x800, 0x3, 0x0, 0x5, 0x3ad, 0x1ff, 0x9, 0x2, 0x4, 0xe, 0x3ff, 0x1, 0x1, 0xfffffffa, 0x7, 0xfff, 0x10000, 0x2, 0x2, 0x3, 0x2, 0x3, 0x6, 0x4, 0x6, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x2, 0x3, 0x686, 0x1, 0xb37, 0x8, 0x5, 0x8, 0x6, 0x3ff, 0x802a, 0x9, 0x0, 0x1231, 0xd4a, 0xfffffffd, 0x1, 0xc9dc, 0x9, 0x8, 0x5, 0x2, 0x0, 0x5, 0x7, 0x73a4, 0x7, 0x401, 0x53, 0x5, 0x0, 0x8, 0x2, 0x2, 0x7, 0x5, 0x101, 0x5, 0x8, 0xcf8, 0xfffffff9, 0x5, 0x149, 0x2, 0x6, 0x100, 0x11e, 0x0, 0x6, 0x4, 0xf, 0x7, 0x7560, 0x6, 0x9, 0x7fff, 0x8000, 0x6, 0x1, 0x5, 0x0, 0x1, 0xc, 0x44f, 0xff, 0x4, 0x61a02baf, 0x541, 0xffff, 0x9, 0x7, 0x0, 0x0, 0x6, 0x0, 0x8, 0x1, 0x9, 0x2, 0x5, 0x100, 0xb5, 0xff, 0x6, 0x5480, 0x9, 0x3, 0x6, 0xfffff801, 0x3251, 0x59, 0xd6, 0xfffffffd, 0x7ff, 0x7d, 0x40, 0x56, 0x1000, 0x0, 0x4, 0x2, 0x7, 0x9, 0x4, 0x1, 0x5, 0x1, 0xfff, 0x81, 0x6, 0x800, 0x4e, 0xfffffff9, 0x9, 0x6, 0x800, 0x1, 0x8, 0x1, 0x2, 0x7, 0x736, 0x3, 0x7, 0x9, 0x9, 0x7, 0x2000000, 0x401, 0x8, 0x0, 0x3, 0x8, 0x401, 0x1, 0xfff, 0x16, 0x3, 0x80, 0x7, 0x750, 0x1, 0x2996, 0x101, 0x401, 0x100, 0x5, 0x80000001, 0xf, 0x4, 0xffffffff, 0xf, 0x1, 0x9, 0x9, 0x6, 0x8, 0x7, 0xf, 0xfffffffe, 0x5, 0x6, 0x6, 0xa4e1, 0x6, 0x98f, 0x1, 0xce63, 0x7fffffff, 0x200, 0x2, 0x4, 0x9, 0x0, 0xff, 0x7, 0x2, 0x7, 0x10, 0xfffffff7, 0xb8, 0x64, 0x54b5, 0x1, 0x8000, 0x3, 0x7a5, 0x1, 0x2, 0x81, 0xd883, 0x6, 0x5, 0x7, 0x2, 0xd7, 0x2, 0x2, 0x0, 0x9, 0x3, 0x2, 0x9b, 0x8, 0x80000000, 0x7, 0x0, 0x7f, 0x9, 0x6, 0x22670590, 0x3ff, 0x80000000, 0x2, 0x200, 0x0, 0x5, 0x3f9, 0x24000, 0x1, 0x7, 0x2, 0x7, 0xd, 0xe, 0x8, 0x3, 0x4, 0x9, 0x6, 0x3, 0xd, 0x35cf, 0xfff, 0xf, 0xffff, 0xe3b9, 0x8, 0xfa3, 0x0, 0x6, 0xfff, 0x6670, 0x8, 0x5, 0x40, 0x3, 0xb, 0x8, 0x0, 0x6, 0x8, 0x4, 0x10, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7811}, @TCA_POLICE_PEAKRATE64={0xc}], [@TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x4, 0x0, 0x3, 0xa211, 0x8, 0x1, 0x6, 0xffff, 0x4, 0x7ff, 0x4, 0xffff, 0x800, 0x0, 0x7, 0xa6d9, 0x5, 0x400, 0x3, 0x9, 0x10000, 0xffff0000, 0x5, 0x5, 0x7ff, 0x414, 0x5, 0xde0, 0x9, 0x1, 0x4, 0x5, 0x6, 0x9, 0x4, 0x8, 0x4, 0x3ff, 0xffffffff, 0x0, 0x1, 0x10000, 0xfffffffb, 0xc, 0x7, 0x9, 0x7, 0x4, 0x4, 0x7, 0x4, 0x3, 0xfffffffa, 0x1ff, 0xd, 0xb1, 0x100, 0x3, 0x80000000, 0x7fff, 0x9, 0x51, 0x0, 0x2, 0x80000, 0x2, 0x3, 0x7fff, 0x0, 0x480000, 0x6, 0x4, 0x6, 0x3, 0x55, 0x1, 0x10000, 0x0, 0x4, 0x7, 0x7, 0x9, 0x7fffffff, 0xa2, 0x0, 0x94c, 0x7, 0x6, 0x5, 0x7fffffff, 0x8, 0x9, 0xb50a, 0x3, 0xfffffffe, 0x82e, 0x80000000, 0x3, 0x3, 0x400, 0x80, 0x92c5, 0x45a8d98f, 0x3ff, 0x1, 0x10001, 0x9, 0x5, 0x7ff, 0x1ff, 0x5, 0x80000001, 0x10, 0x3, 0x0, 0x4, 0x6, 0x10001, 0x1282, 0x8, 0x4, 0x0, 0x5, 0x38e04b, 0x2, 0x10000, 0x8, 0xff, 0x10000, 0x4, 0x5, 0x1000, 0x7f, 0x0, 0xff, 0xff, 0xff, 0x400, 0x2, 0x9, 0x100, 0x774, 0x2, 0x8, 0x8001, 0x4, 0x9, 0xd, 0xd85, 0x3, 0x0, 0x1412, 0x7, 0xdfe, 0x1, 0x400, 0x3ff, 0x3, 0x8000, 0x3, 0xd9, 0xc5, 0x1, 0xa322, 0x9, 0x7, 0x1, 0x0, 0x5, 0x9, 0x7fff, 0x7f, 0xe, 0x7f, 0x9, 0x7, 0x480, 0x2, 0x3, 0x7, 0x1000, 0x6764, 0x2, 0xfffffff7, 0x7fffffff, 0x8b6, 0x78368b4f, 0x6, 0x8, 0x9, 0x6, 0x6, 0x8, 0x4, 0xac3, 0xfffffffe, 0xff, 0x1000, 0x1c2, 0x4, 0x401, 0x5, 0x4, 0x3, 0x4, 0x3, 0xfffffff7, 0x1, 0x6, 0x80000000, 0x2913, 0x9, 0x7, 0x7, 0x2, 0xa8dc, 0x2, 0x7, 0x80000001, 0xa, 0xfffff000, 0x1, 0x4, 0xffff, 0x7fff, 0x0, 0x7fff, 0x7, 0xbc, 0x2, 0xffffffff, 0x80, 0x4028d528, 0x401, 0x8, 0x2, 0x0, 0x7ff, 0x6, 0x1, 0x1, 0x66, 0x13cf, 0x401, 0x95000000, 0x8000, 0x5, 0x8, 0x2, 0x6, 0x6, 0x8b5, 0x5, 0xd3e5, 0x101]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x9, 0xd, 0x3, 0x3, 0x73e4, 0x7f, 0x5, 0x4, 0xfffffff7, 0x7820, 0xfffffffe, 0x3ff, 0xfffffff9, 0x1, 0x6ed1, 0xeeeb, 0xffffffff, 0xdc, 0x7, 0x1ff, 0x1, 0x9, 0x4, 0x3, 0x8, 0x0, 0x9, 0x7fffffff, 0x10000, 0x860, 0x5, 0x0, 0x7, 0x3, 0x1, 0x3, 0x5, 0x3, 0x54fe736c, 0x3, 0x80, 0x7, 0xffffffff, 0x8, 0x7, 0x1, 0x1, 0xfffffff8, 0xe, 0x6, 0x6c, 0x0, 0x4, 0x10000, 0x81, 0x200, 0x5, 0x5, 0x5, 0xc340, 0x0, 0x5, 0x3ff, 0x5, 0x2, 0xfffffffb, 0xcf, 0x80, 0x4, 0x6, 0xfffffffc, 0x6, 0x3ff, 0x6, 0x6, 0x2c6, 0x10001, 0xffffffff, 0x2, 0xc, 0x9, 0x82, 0x1, 0xffffff7f, 0x9, 0x6, 0xbcf8, 0x3, 0x0, 0xff, 0xbf3, 0xff7, 0x5, 0x4, 0x100, 0x9, 0xa8, 0x1, 0x6069, 0x900, 0x9, 0x8, 0xffff, 0x8, 0x2, 0x5c, 0x1, 0x1, 0x8000, 0x80000001, 0x10001, 0x3, 0x3ff, 0x1, 0x598, 0x3, 0x6, 0x1, 0x9, 0x9, 0x3, 0x1, 0xfffffffe, 0x9, 0x91, 0x80000001, 0x9, 0x0, 0x7f, 0x9618df0, 0x9, 0x8, 0xcc7b, 0x8, 0x3, 0xf354, 0x16a5, 0x9, 0x7fffffff, 0x9, 0x48d, 0x800, 0x7, 0xfffffff8, 0x8, 0x8, 0x2, 0xe, 0x1, 0x80, 0x6af, 0x2, 0x8, 0x7, 0x4, 0x5, 0xc, 0x2, 0x9, 0x800, 0x0, 0x10, 0x100, 0x7, 0x0, 0x0, 0x1, 0x8, 0xb, 0x6, 0x5, 0x8, 0x7, 0x5, 0x2, 0xfb0, 0x5, 0x0, 0x100, 0x6, 0xd, 0x40, 0x7, 0x80000000, 0x5e, 0x6, 0x1, 0x5, 0x80000001, 0x4, 0x7a, 0x0, 0x7, 0x8, 0x8, 0x7, 0x40, 0x1, 0x7, 0x2, 0x3, 0x8, 0x9, 0x5, 0x3, 0xb, 0x1a, 0x3, 0x5b, 0x7, 0x80, 0xff, 0x794f, 0x4b15aa93, 0x5, 0x80, 0x8000, 0x1, 0x9, 0x5, 0x4, 0x8, 0x1, 0xd10, 0xeca, 0x8, 0x7, 0x26, 0xd80d, 0xfffffffe, 0xb, 0x2, 0x5, 0x80000000, 0x5, 0x1, 0x9, 0x55, 0x4, 0x6, 0xd, 0x4, 0x0, 0x6, 0xfffffffd, 0x3, 0x3, 0xffff676c, 0xfb, 0x5, 0x8, 0x4dd7, 0x4, 0x5, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10001}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0xfffffff9, 0x5, 0x81, 0x200, 0x80, 0x6, 0xc677, 0x3, 0x1, 0x8, 0x8, 0x8, 0x2, 0xd, 0x41, 0x1, 0x7b0c, 0x0, 0x2, 0x9, 0x9e4, 0x7, 0x3, 0x80000000, 0x3, 0x3, 0x3, 0x7fffffff, 0x0, 0x1, 0x5, 0x6, 0x5, 0x6e, 0x2, 0x3c, 0x7, 0x9, 0xa929, 0x3, 0xf7, 0x2, 0x9, 0x6, 0x9, 0x56, 0x80000000, 0xa, 0x3, 0x0, 0x200, 0x6, 0x9, 0x8, 0x3ff, 0x6, 0xc93, 0x783, 0x39, 0xe, 0xa1b3, 0xfffffffd, 0x2, 0x7, 0x6, 0x200, 0x3, 0x12000000, 0x7fffffff, 0x4bff, 0x3, 0x8, 0x9, 0x2, 0xffff6fae, 0x5, 0x7, 0x9, 0xd21, 0x10001, 0x7, 0x9069, 0x8000, 0x9, 0xffffffff, 0x10000, 0x2, 0x7fff, 0x8000, 0x5, 0x4, 0x3, 0x64, 0x258, 0x8, 0x4, 0x6, 0x7, 0xd3, 0x2898, 0x6, 0x6, 0x452, 0x0, 0x7, 0xb, 0x98, 0xcf, 0x6, 0x5, 0x7, 0x7fffffff, 0x5, 0x100, 0x7, 0x100, 0x3, 0x5a, 0x1c000, 0x9, 0x5, 0x142, 0xfffffff2, 0x7, 0x2, 0x200, 0xe1b, 0xbfa5, 0x1, 0x0, 0x3, 0x8001, 0x7fffffff, 0x6, 0xffffffff, 0x7, 0xfffffff8, 0x6154c35f, 0xaf, 0xa5, 0x7, 0x1a, 0x7, 0xffffffff, 0x0, 0xff, 0x5, 0x5, 0x8, 0x6c, 0x10000, 0x9, 0xeac4, 0x4, 0x8, 0x1be80, 0x8, 0xfffffff8, 0x0, 0x2, 0x5, 0x8, 0x4, 0x9, 0x3, 0x3f25, 0x3ff, 0x3, 0x1, 0x100, 0x0, 0x2, 0x9, 0x0, 0x8, 0x6, 0x40, 0x0, 0xc39, 0xfffffff9, 0xffff8000, 0x6, 0x7, 0x6, 0x480, 0x3, 0x5, 0xa, 0x1, 0x552cb07d, 0xfff, 0x0, 0x400, 0x9, 0xc, 0x80000000, 0xcd06, 0x8001, 0x3, 0x1, 0xffffffff, 0x6, 0x8000, 0x4, 0x7ff, 0x3, 0xd, 0xad, 0x6, 0x81, 0x1, 0x7fff, 0x100, 0x9, 0x1, 0x6, 0x72f4, 0xf0, 0x2, 0xfff, 0x1, 0xa0000000, 0x9, 0x10001, 0x4, 0x6, 0x2, 0x5, 0x2, 0xc70, 0x4, 0x6, 0xb0, 0x5, 0x28d, 0x200, 0x4, 0x81, 0x8, 0x7fffffff, 0x4, 0x9, 0xff, 0x20, 0x10001, 0x4, 0x0, 0xf, 0x9, 0xb, 0x4, 0xfffff001, 0x6, 0x4, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa74, 0x1, 0xa01, 0x40, 0x9, {0x5, 0x2, 0x4, 0xf4c, 0x7, 0x8}, {0xff, 0x2, 0x2, 0x0, 0xf, 0x5}, 0x9, 0x4d9, 0x1}}]]}, {0x5b, 0x6, "e4ff811eace5fba6da7e3f8d1b2f99493184900860d6675805b894693d7ba3e2b5bda51e7cc775f3ffcd86350caa489e18246226f10cd1db4197c6578fe32c7b93da9d29697e4fd9366ee5a739f2ff4b9e5e1ab79b1069"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0xf0, 0x13, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb6, 0x30, 0x6, 0x4, 0x7}, 0xb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x2, 0xffffffffdffffffb, 0x6, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x10000000, 0x6, 0x8001}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x5, 0xffff0001}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6c, 0xffff9aee, 0x6, 0x7, 0x9a}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x2, 0xec67, 0x4}, 0x8}}]}, {0x16, 0x6, "4949cc0cb4b6e3fae56973d95fa9cd683751"}, {0xc}, {0xc}}}, @m_ctinfo={0x9c, 0x9, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x101}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}]}, {0x40, 0x6, "6f35c2f27e053df7ed9a2bf39875d429553a4d7ae95d57dad82697b7355c2732e030f7e8093426ef9ef726d82bd4d6826579953a911e0340532d8c7d"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x4c4, 0xa, 0x0, 0x0, {{0xb}, {0x46c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0x3b6e, 0x4, 0x2, 0x0, 0x3ff, 0x7a, 0xffffffa2, 0x0, 0x3, 0x711, 0x7, 0x0, 0x7fffffff, 0xd, 0xfffffffa, 0x1, 0x5, 0xa, 0x7100000, 0x1, 0xb20, 0xacf, 0x4, 0x283, 0x9, 0x0, 0x80, 0x1, 0x8, 0x358, 0x200000, 0x7fffffff, 0x6, 0x8, 0xfffffffa, 0x1000, 0xff, 0x2141, 0x326, 0xc, 0x6, 0x0, 0xa, 0x0, 0x1, 0x7fff, 0x3, 0x5, 0x3, 0x84, 0xa, 0x60c, 0x836, 0xa, 0x4, 0x10000, 0x1, 0x1, 0x5, 0x3, 0x7, 0x10001, 0xec, 0xd, 0x3, 0x1, 0x7, 0x2, 0x2, 0x80000000, 0x8001, 0x7d, 0xc, 0x7, 0x5911, 0x1, 0xf0, 0x5, 0x800, 0x2, 0x81, 0xa, 0x101, 0x3, 0x1, 0x6, 0x2, 0x600, 0x2, 0x7, 0x5, 0x3, 0x8f, 0x7ba, 0xfffffffb, 0x7f, 0xffffffff, 0x9, 0x6, 0x7, 0x2, 0x7fff, 0x8, 0x7, 0x9c21, 0xff, 0x2, 0x850, 0x7, 0x6, 0x0, 0x6, 0x0, 0x88e, 0x8, 0x4, 0x300000, 0x341, 0x80000000, 0x9, 0x16a4, 0x8, 0x8cb, 0x1000, 0x5, 0x2ca1, 0xd, 0x6, 0x454, 0x6, 0x100, 0x2c33, 0xbdf6, 0x4, 0xb7, 0xc, 0x3, 0x80, 0xe52b, 0xf, 0x22c8000, 0x7, 0x9c3, 0x6b7, 0x7fff, 0x5, 0x5, 0x6, 0x6, 0xffffffff, 0x4, 0x60b, 0x0, 0xe9a7, 0x2, 0x1, 0x1a5, 0x6, 0x9, 0x400, 0x3714, 0x4443701f, 0x1, 0x80000000, 0x7ff, 0x200, 0x9, 0x3ffc00, 0x8, 0x3, 0x8000, 0x1, 0x7, 0x3, 0xf0a, 0x3, 0xfffffffd, 0x80000001, 0x9, 0x2, 0x1, 0x10, 0xb, 0x3, 0x5, 0xff, 0x797c07a6, 0x7, 0x9, 0x2, 0x9, 0x9, 0x6, 0x8, 0x1, 0x5d93, 0xd, 0x4, 0x2, 0x0, 0xfffffff9, 0x80000000, 0x6, 0x8, 0x1, 0x7ff, 0x7, 0x9, 0x8, 0x5, 0x10000, 0x8, 0x6, 0x40, 0x5, 0x2, 0x3cd0161f, 0x2, 0xb9, 0x3, 0x2, 0xd, 0x1, 0x1, 0x3, 0x9, 0x6, 0x4, 0x0, 0x8000, 0x9c, 0x2, 0x4b20, 0x9, 0x1, 0x101, 0x9ea, 0xfffffffa, 0x0, 0x8, 0x43, 0x3, 0x8, 0x3, 0x9, 0xeda, 0xc, 0x1ff, 0x6, 0x7, 0x7, 0x3, 0x6, 0x3ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x10000000, 0x6b996b45, 0x1000, 0xfaa7, {0x7c, 0x1, 0x3ff, 0x100, 0x95cd, 0x6}, {0x5, 0x0, 0x3, 0x9, 0x7f, 0x3}, 0xf, 0x7, 0xcd5b}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]]}, {0x30, 0x6, "9f9b7c7097a48f3bc1f683f6e9b1f0a61ad418912535b1d3412856d216350ccdd26c3c63c5a5246192dfe578"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x3b60}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r11 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r11, 0xc0045005, &(0x7f0000000140)=0x2000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d0072413"], 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m54.500031831s ago: executing program 32 (id=2325): r0 = socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000c80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="037d2b81b371", @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf251000000008000500f9ffffff2800028014000100fe8000000000000000000000000000aa080006000600000008000500040000009c0003800500080009000000080001000100000014000600fe8000000000000000000000000000bb14000600fe8000000000000000000000000000aa1400020076657468315f746f5f7465616d000000050008000d000000140002006e657464657673696d300000000000001400020076657468305f746f5f627269646765001400060000000000000000000000ffffac1414aa08000500ffffffff"], 0xe0}, 0x1, 0x0, 0x0, 0x40004}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x3c00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001bc0)=@newtfilter={0x3b60, 0x2c, 0x100, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3b30, 0x2, [@TCA_CGROUP_POLICE={0x60, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc, 0xffffffffffffffff, 0x734, 0x10, 0x96, {0x79, 0x2, 0x8, 0x3, 0x8, 0x6}, {0x7, 0x1, 0x6, 0x5000, 0x8, 0x6}, 0xffffff01, 0x0, 0xfffffffc}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x300}]}, @TCA_CGROUP_ACT={0x149c, 0x1, [@m_bpf={0x130, 0xa, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x9, 0x8, 0x3, 0xad2}, {0xfffd, 0x54, 0xe4, 0x8}, {0x7, 0x8, 0x5, 0x1}, {0x4, 0x2, 0x9, 0xfffffff9}, {0x9, 0x59, 0xf5, 0xc914}, {0x3, 0xc, 0xe2, 0x1000}, {0xc03, 0x1, 0x80, 0xe23}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x2, 0x4, 0x161, 0x8}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x85, 0x6, "7bc2133f1971b37471adb4028e31289dcbee64cbad9e22faa2d2636f8fcfead24bb6dfcdabd01a602da9abb7bcfbd43f30d9fe2ac0540a41bd47e15ed7cb4a0e9d5e67a2f7f68b00dbf502a4569a905cdddd0224e20238cb9bbe2024479e3b695e823e97e4abb2899ae9951c34c3f09f4ab4d0da5fb36df5afb3c8f82cf22646c5"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_tunnel_key={0xa0, 0x15, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0x53, 0x6, "f84d9cf27d5c3c9bf014b32f38f0c524e6e35e4919759a1713d4effcb0feea9ece5f1dedfb22ffcaeac91ee16fdf7f485a1eb2a32eea944a5ef4b9b64adf07e87194c187897f243b3ee14a148601c2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x1030, 0xf, 0x0, 0x0, {{0xb}, {0x4}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0xe4, 0x12, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0xb4, 0x6, "4ea225ec7bd00fd425bf076f3c320ad48828932dd8e8d2f731ac9154fabc836825b2a35e8581b38c4289997086624a5900c8a2ab6916f7ba740d3e975db3d6ba8d857f19939b4c5705b51c511190ae6e8b565661599fdf7d068d652fec4785f554b135974b1027f53de9272e0978b1fe2b2a0ab067ead2f8593bb2cb9af02fc9f0980e376f4d8438b03b611fa003d25a02a9ca2b9f871d8a138cf758c049ca8a784ee275bf0fb69ff49d77675a5ae58f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0x1b4, 0x6, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x0, 0x9, 0x1}, @remote, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x1, 0x1, 0x40, 0x4}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x9, 0xffffffffffffffff, 0x0, 0x8}, @broadcast, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x3, 0xffffffffffffffff, 0x8, 0x8000}, @remote, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x6, 0x7, 0x5, 0x81}, @dev={0xac, 0x14, 0x14, 0x43}, @empty, 0xff}}]}, {0xc2, 0x6, "a6ac8777a1cc464dce38e5c3242cdc66ec1514673db9e2ab57a66e04e83cdd3c14d1ecaa48484b8ff09256ff06b1ff0ddfb5897a81e2c07b71c58809cf767d4986d1236a3d1e999a46024a6e6272b263fafff1a60c304446e776eddae21df1e85df2024df2992bc75f264e9ca20985b311c3f7b0695d39050ceb534e70ce0bcf3f470c76cff356c9403ac89b9d62e71ad254964fc7b4ae13c235b5f6e4d5b042c1dc9aefa8bd08a4eb132ea892173464fe026b1fecee02317fdd88fa4338"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_ACT={0x2630, 0x1, [@m_police={0x6c, 0x20, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff0}]]}, {0x32, 0x6, "65edd20a3fc6cdf6080673329f7bcab13a6ba071f87d371f52fc23878c9fe6c0b2ea4b77e643ac33baeb85d6b1e8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0x9c, 0x0, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x775, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffe, 0x5, 0x4, 0xfffffffa, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffff81, 0x2, 0x0, 0x30, 0x7}}]}, {0x33, 0x6, "31121c400cf4940877730ae68d16ca009034ab53380e3aba5f20bcb4625d6596fdba88ab649772ae8087decfc29068"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_simple={0x134, 0x11, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x10, 0x2, 0xfffffffb}}, @TCA_DEF_DATA={0x9, 0x3, '\'/x:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1c000, 0x22a8, 0x0, 0x4b, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0xd, 0x101, 0x8, 0x1, 0x7}}]}, {0xb1, 0x6, "03a0f3ed5ff647687064837ff007962be06fffccf0c246f2e1dd90a1b048b88da3e9cac8fa1193770b0c29d736815d1430ce445d1fdafb6839dc839c35a3d650578d3ba7e10f97d634ced013116ccea8e91f96dffb60024cd16f7056059265a51f4231ec6345b4088385dd281af604278e6be4d80518b908b73c38e3721748a3af9028f600ee11799b7419e79fb2a96725d9e02d178b12f44627d5ade29dcb007edf17f296f070515d9ea7f2c5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x1da0, 0x1c, 0x0, 0x0, {{0xb}, {0x1d1c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7fff, 0xd, 0x8000, 0x81, 0x9, 0x1, 0x7fffffff, 0x5, 0x1, 0x69, 0x4d1, 0x0, 0x2e621f63, 0x7, 0x200, 0x6e, 0x6, 0x6, 0x3, 0x7fffffff, 0x401, 0x3, 0x83, 0xfffffff8, 0x3, 0x7, 0x7, 0xa52, 0x8, 0xfffff801, 0x1851c000, 0x81, 0x1, 0x1a000, 0x4, 0xf0d, 0x7, 0xd9, 0xffff916e, 0x1, 0x10001, 0x7, 0x3d, 0x800, 0x6, 0x101, 0x2, 0x5, 0x80000001, 0xad08, 0x9, 0x7, 0xa64, 0x7, 0x5, 0x7, 0x1, 0xb86d, 0x800, 0x5, 0x6, 0x7, 0xfffff800, 0x9, 0x6, 0x400, 0x7, 0x8, 0x3, 0x4, 0x7, 0x3, 0x8, 0x1, 0x5, 0x6, 0x4, 0x0, 0x4, 0xfff, 0x1, 0x0, 0xffffffff, 0x6, 0x5, 0x10, 0x0, 0x5, 0xe80d, 0x4, 0x3, 0xf, 0x7fff, 0x7ff, 0x0, 0x68fe7bc2, 0x100, 0x8000, 0x2, 0x1ff, 0xfff, 0xb3, 0x2, 0x6c3, 0x10, 0xffffff1a, 0x1, 0x9, 0x3, 0xffffffff, 0x52, 0xb, 0xfff, 0x83f9, 0x8, 0x9, 0xb, 0x0, 0x0, 0xff, 0x6, 0x5, 0xd3, 0x4, 0x6, 0x2, 0x3bc8fb26, 0x0, 0x0, 0xa, 0x80000001, 0xbc, 0x5, 0x6, 0x6, 0x7, 0x80000, 0x5, 0x7, 0x815acfb, 0x2, 0x7af, 0x3, 0xa8, 0x6, 0x0, 0xc793, 0x0, 0x6, 0x1ff, 0x3, 0x4, 0xec0, 0x0, 0x2000000, 0xffff, 0x3bf1734b, 0xb7, 0x9, 0x8, 0x2, 0x2, 0x8, 0x5, 0xe, 0x24c, 0x3a4e649e, 0x4d847eef, 0x4, 0x6, 0xf, 0x1, 0x863, 0x5, 0x9, 0x5, 0x3, 0x0, 0x4, 0x80000000, 0x3, 0x8, 0xffff5a8b, 0x3ff, 0x0, 0x23, 0x7, 0x9, 0xff, 0xfff, 0x68b, 0x9, 0x200, 0xf568, 0x3e93, 0x10, 0x686, 0xffff, 0x4, 0xfffffff9, 0xcd, 0x8, 0xffffff7f, 0x1, 0xffffff80, 0x5, 0x4, 0x2, 0x3, 0xf, 0xe000000, 0x7, 0x1ff, 0x4, 0x90, 0x1, 0x3, 0x9, 0x5, 0x4, 0x8, 0xffff, 0x5, 0x3, 0x2, 0x400, 0x3, 0x3, 0x69ca8aac, 0x8c0, 0x8001, 0x4, 0x7fffffff, 0x7, 0x8efb, 0x3bff, 0x7, 0x3, 0xc, 0x80000001, 0x4, 0x1f, 0x2, 0x6, 0x3, 0xfffffe01, 0xe, 0xfffffffb, 0x7fff, 0x1000, 0x10, 0x38d1af1a, 0x5, 0xd, 0xffffffff, 0x80]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0xffffffffffffffff, 0x0, 0x9, 0x139a, {0x6, 0x2, 0xe, 0x3ff, 0x49, 0x2}, {0x5, 0x0, 0x6, 0xa, 0x711, 0x3}, 0x10001, 0x7fff, 0x3ff}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x1, 0xfffffff7, 0xb1b, 0x2000000, 0x7fffffff, 0x0, 0x5, 0xff, 0x1, 0x800, 0x5, 0x1e2b, 0xb2c0, 0x1, 0x1, 0x33, 0x1, 0x1, 0x4, 0x8e1e, 0x7fff, 0x6, 0x2, 0x0, 0x6, 0x251, 0x3, 0x0, 0xb, 0xc0000000, 0x8f5, 0x8, 0x10000, 0x1, 0xbf8, 0x3, 0x0, 0x2, 0x6, 0x2, 0x1400, 0x1, 0x2, 0xfffffffb, 0x2, 0x5, 0x6c, 0xfff, 0xfffffffb, 0x3, 0x400, 0xfd8, 0xfffffff7, 0x8, 0x4, 0x3, 0xff, 0x5, 0x7, 0xd95, 0x2, 0x9, 0x3, 0x3, 0x2, 0x4, 0x2, 0xfffffffd, 0x3e, 0x2, 0x9, 0x2, 0x8, 0x1, 0x9, 0x4, 0x800, 0x5, 0x7, 0x5ced, 0x4, 0x8, 0x3, 0x6, 0x0, 0x10001, 0xffffffff, 0x9, 0x40, 0x2, 0x8, 0x9, 0x8, 0x5, 0x9, 0xb, 0x20, 0x40000, 0x5, 0x3, 0xffff, 0x1, 0xab7, 0x1000, 0x9, 0x800, 0x0, 0x8, 0x7, 0x2, 0x6, 0x8, 0x4, 0x9, 0x7ff, 0x3, 0xfffff61b, 0x7, 0x0, 0x7, 0x2, 0xd, 0x2, 0x3b6, 0xff, 0xe12, 0x800, 0x7, 0x200, 0x55, 0x1, 0x2, 0x0, 0x9, 0x3, 0x9, 0x9, 0x4, 0x1, 0x8ed, 0x9, 0x8, 0xffff, 0x8, 0x6, 0xf, 0x8001, 0x0, 0x9, 0x0, 0x1, 0x1, 0x3, 0x800, 0x7, 0x280000, 0x1, 0x8, 0x4, 0x1, 0x8, 0x514, 0x6, 0x63f3, 0x7, 0x4, 0x9, 0x71d, 0x7, 0x1000, 0x2, 0x1ff, 0x9, 0x7, 0x9, 0x2, 0x2, 0x9, 0x1, 0x8, 0x4, 0x9, 0x7, 0x80000000, 0x0, 0x0, 0x80000001, 0x8, 0x0, 0x0, 0xfff, 0x7, 0xfffffffb, 0xffff, 0x27, 0x1, 0x5, 0x80000000, 0x100, 0x3ff, 0x5, 0x3, 0x9, 0x200, 0x1, 0x3, 0x4, 0x6, 0x2, 0x5, 0x6, 0x0, 0x3, 0x8, 0xabc, 0x1ba, 0x1, 0x1, 0x1ff, 0xba, 0x6, 0x8, 0xc, 0x1, 0x8, 0x5, 0x0, 0x9, 0x5, 0xa3, 0x4, 0xe, 0x8, 0x3, 0x6, 0x7, 0x8, 0x1, 0x1, 0x9, 0x80000001, 0x9, 0x1, 0x1ad, 0x80, 0x2, 0x18, 0x2, 0x7a, 0x9, 0x2, 0x9, 0x10001, 0x0, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x52d8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x1f1f}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xca80, 0xe18, 0xae8c, 0x2, 0x8, 0xd7, 0xead4, 0x5, 0x1, 0x7, 0x2, 0x6, 0x9, 0x5, 0x8, 0xa, 0x10, 0x2, 0x66c, 0x6, 0x0, 0x2, 0x3, 0x7fffffff, 0x7, 0x100, 0x6, 0x9, 0x7, 0x9, 0x1ff, 0x7, 0x0, 0x101, 0x3, 0xffff, 0x4, 0x8000, 0x7fffffff, 0x1, 0x9, 0x80000000, 0x80000001, 0x2, 0x7, 0x5, 0xf, 0x5, 0x200, 0x1, 0x9, 0x8001, 0x4, 0x2, 0x1, 0x9, 0x8, 0xae89, 0x7fff, 0x20000, 0x4ae, 0x7ff, 0x100, 0x4, 0x8, 0x2, 0x3, 0x1c0, 0x10, 0x9, 0x25f8, 0xfffffffd, 0x5, 0x8, 0x3, 0x7ff, 0x5, 0x1d0, 0x100, 0xffffffff, 0x800, 0x44d, 0x101, 0x80, 0x8001, 0x8, 0x7, 0xfff, 0xff, 0x64, 0x1, 0x80000001, 0x8, 0x6, 0xb, 0x7fffffff, 0x4, 0x10000, 0x80000000, 0x9, 0x0, 0x374e, 0x1, 0xacd, 0x5, 0x3, 0x2, 0xffff, 0x9, 0x4, 0x9, 0x0, 0x4, 0x9, 0xffffffff, 0x7, 0x8, 0x8001, 0x1, 0xc17, 0x1, 0xb, 0x3, 0x1, 0x7, 0x2, 0x200, 0x8, 0x4, 0x1, 0x80000000, 0xd, 0x2, 0x2, 0x401, 0x1, 0xc, 0xfe, 0x4, 0x754, 0x6, 0x4, 0x400, 0xfffffbff, 0x9, 0x6, 0x0, 0x2, 0x9, 0x40, 0x1, 0x5, 0x100, 0x0, 0x5, 0x1, 0x5, 0x10001, 0xfffffffe, 0x9985, 0x4, 0x80, 0x7d9f, 0xe5, 0x0, 0x3, 0x9, 0x100, 0x1, 0x80000001, 0x3, 0x5, 0x0, 0x4, 0x5, 0x4, 0x1, 0x42dd, 0x9, 0x10001, 0x41b, 0x0, 0x7, 0xa, 0x100, 0xe32a, 0xc03a, 0xffffffff, 0x263, 0x40, 0x8, 0x7, 0x40, 0x8, 0x4, 0x2000, 0xffff0000, 0x5, 0x5, 0x7, 0x8, 0x7, 0x200, 0x9, 0x6, 0x79, 0x3, 0x22cb, 0x0, 0x7, 0x9, 0xd, 0xfc0, 0x2, 0x8, 0x9, 0xfffffff3, 0x5, 0x9, 0xffffffff, 0xe625, 0x0, 0xffffffff, 0x2, 0x1, 0x5, 0x5, 0xfffffe00, 0x8, 0x800, 0x3, 0x0, 0x5, 0x3ad, 0x1ff, 0x9, 0x2, 0x4, 0xe, 0x3ff, 0x1, 0x1, 0xfffffffa, 0x7, 0xfff, 0x10000, 0x2, 0x2, 0x3, 0x2, 0x3, 0x6, 0x4, 0x6, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x2, 0x3, 0x686, 0x1, 0xb37, 0x8, 0x5, 0x8, 0x6, 0x3ff, 0x802a, 0x9, 0x0, 0x1231, 0xd4a, 0xfffffffd, 0x1, 0xc9dc, 0x9, 0x8, 0x5, 0x2, 0x0, 0x5, 0x7, 0x73a4, 0x7, 0x401, 0x53, 0x5, 0x0, 0x8, 0x2, 0x2, 0x7, 0x5, 0x101, 0x5, 0x8, 0xcf8, 0xfffffff9, 0x5, 0x149, 0x2, 0x6, 0x100, 0x11e, 0x0, 0x6, 0x4, 0xf, 0x7, 0x7560, 0x6, 0x9, 0x7fff, 0x8000, 0x6, 0x1, 0x5, 0x0, 0x1, 0xc, 0x44f, 0xff, 0x4, 0x61a02baf, 0x541, 0xffff, 0x9, 0x7, 0x0, 0x0, 0x6, 0x0, 0x8, 0x1, 0x9, 0x2, 0x5, 0x100, 0xb5, 0xff, 0x6, 0x5480, 0x9, 0x3, 0x6, 0xfffff801, 0x3251, 0x59, 0xd6, 0xfffffffd, 0x7ff, 0x7d, 0x40, 0x56, 0x1000, 0x0, 0x4, 0x2, 0x7, 0x9, 0x4, 0x1, 0x5, 0x1, 0xfff, 0x81, 0x6, 0x800, 0x4e, 0xfffffff9, 0x9, 0x6, 0x800, 0x1, 0x8, 0x1, 0x2, 0x7, 0x736, 0x3, 0x7, 0x9, 0x9, 0x7, 0x2000000, 0x401, 0x8, 0x0, 0x3, 0x8, 0x401, 0x1, 0xfff, 0x16, 0x3, 0x80, 0x7, 0x750, 0x1, 0x2996, 0x101, 0x401, 0x100, 0x5, 0x80000001, 0xf, 0x4, 0xffffffff, 0xf, 0x1, 0x9, 0x9, 0x6, 0x8, 0x7, 0xf, 0xfffffffe, 0x5, 0x6, 0x6, 0xa4e1, 0x6, 0x98f, 0x1, 0xce63, 0x7fffffff, 0x200, 0x2, 0x4, 0x9, 0x0, 0xff, 0x7, 0x2, 0x7, 0x10, 0xfffffff7, 0xb8, 0x64, 0x54b5, 0x1, 0x8000, 0x3, 0x7a5, 0x1, 0x2, 0x81, 0xd883, 0x6, 0x5, 0x7, 0x2, 0xd7, 0x2, 0x2, 0x0, 0x9, 0x3, 0x2, 0x9b, 0x8, 0x80000000, 0x7, 0x0, 0x7f, 0x9, 0x6, 0x22670590, 0x3ff, 0x80000000, 0x2, 0x200, 0x0, 0x5, 0x3f9, 0x24000, 0x1, 0x7, 0x2, 0x7, 0xd, 0xe, 0x8, 0x3, 0x4, 0x9, 0x6, 0x3, 0xd, 0x35cf, 0xfff, 0xf, 0xffff, 0xe3b9, 0x8, 0xfa3, 0x0, 0x6, 0xfff, 0x6670, 0x8, 0x5, 0x40, 0x3, 0xb, 0x8, 0x0, 0x6, 0x8, 0x4, 0x10, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7811}, @TCA_POLICE_PEAKRATE64={0xc}], [@TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x4, 0x0, 0x3, 0xa211, 0x8, 0x1, 0x6, 0xffff, 0x4, 0x7ff, 0x4, 0xffff, 0x800, 0x0, 0x7, 0xa6d9, 0x5, 0x400, 0x3, 0x9, 0x10000, 0xffff0000, 0x5, 0x5, 0x7ff, 0x414, 0x5, 0xde0, 0x9, 0x1, 0x4, 0x5, 0x6, 0x9, 0x4, 0x8, 0x4, 0x3ff, 0xffffffff, 0x0, 0x1, 0x10000, 0xfffffffb, 0xc, 0x7, 0x9, 0x7, 0x4, 0x4, 0x7, 0x4, 0x3, 0xfffffffa, 0x1ff, 0xd, 0xb1, 0x100, 0x3, 0x80000000, 0x7fff, 0x9, 0x51, 0x0, 0x2, 0x80000, 0x2, 0x3, 0x7fff, 0x0, 0x480000, 0x6, 0x4, 0x6, 0x3, 0x55, 0x1, 0x10000, 0x0, 0x4, 0x7, 0x7, 0x9, 0x7fffffff, 0xa2, 0x0, 0x94c, 0x7, 0x6, 0x5, 0x7fffffff, 0x8, 0x9, 0xb50a, 0x3, 0xfffffffe, 0x82e, 0x80000000, 0x3, 0x3, 0x400, 0x80, 0x92c5, 0x45a8d98f, 0x3ff, 0x1, 0x10001, 0x9, 0x5, 0x7ff, 0x1ff, 0x5, 0x80000001, 0x10, 0x3, 0x0, 0x4, 0x6, 0x10001, 0x1282, 0x8, 0x4, 0x0, 0x5, 0x38e04b, 0x2, 0x10000, 0x8, 0xff, 0x10000, 0x4, 0x5, 0x1000, 0x7f, 0x0, 0xff, 0xff, 0xff, 0x400, 0x2, 0x9, 0x100, 0x774, 0x2, 0x8, 0x8001, 0x4, 0x9, 0xd, 0xd85, 0x3, 0x0, 0x1412, 0x7, 0xdfe, 0x1, 0x400, 0x3ff, 0x3, 0x8000, 0x3, 0xd9, 0xc5, 0x1, 0xa322, 0x9, 0x7, 0x1, 0x0, 0x5, 0x9, 0x7fff, 0x7f, 0xe, 0x7f, 0x9, 0x7, 0x480, 0x2, 0x3, 0x7, 0x1000, 0x6764, 0x2, 0xfffffff7, 0x7fffffff, 0x8b6, 0x78368b4f, 0x6, 0x8, 0x9, 0x6, 0x6, 0x8, 0x4, 0xac3, 0xfffffffe, 0xff, 0x1000, 0x1c2, 0x4, 0x401, 0x5, 0x4, 0x3, 0x4, 0x3, 0xfffffff7, 0x1, 0x6, 0x80000000, 0x2913, 0x9, 0x7, 0x7, 0x2, 0xa8dc, 0x2, 0x7, 0x80000001, 0xa, 0xfffff000, 0x1, 0x4, 0xffff, 0x7fff, 0x0, 0x7fff, 0x7, 0xbc, 0x2, 0xffffffff, 0x80, 0x4028d528, 0x401, 0x8, 0x2, 0x0, 0x7ff, 0x6, 0x1, 0x1, 0x66, 0x13cf, 0x401, 0x95000000, 0x8000, 0x5, 0x8, 0x2, 0x6, 0x6, 0x8b5, 0x5, 0xd3e5, 0x101]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x9, 0xd, 0x3, 0x3, 0x73e4, 0x7f, 0x5, 0x4, 0xfffffff7, 0x7820, 0xfffffffe, 0x3ff, 0xfffffff9, 0x1, 0x6ed1, 0xeeeb, 0xffffffff, 0xdc, 0x7, 0x1ff, 0x1, 0x9, 0x4, 0x3, 0x8, 0x0, 0x9, 0x7fffffff, 0x10000, 0x860, 0x5, 0x0, 0x7, 0x3, 0x1, 0x3, 0x5, 0x3, 0x54fe736c, 0x3, 0x80, 0x7, 0xffffffff, 0x8, 0x7, 0x1, 0x1, 0xfffffff8, 0xe, 0x6, 0x6c, 0x0, 0x4, 0x10000, 0x81, 0x200, 0x5, 0x5, 0x5, 0xc340, 0x0, 0x5, 0x3ff, 0x5, 0x2, 0xfffffffb, 0xcf, 0x80, 0x4, 0x6, 0xfffffffc, 0x6, 0x3ff, 0x6, 0x6, 0x2c6, 0x10001, 0xffffffff, 0x2, 0xc, 0x9, 0x82, 0x1, 0xffffff7f, 0x9, 0x6, 0xbcf8, 0x3, 0x0, 0xff, 0xbf3, 0xff7, 0x5, 0x4, 0x100, 0x9, 0xa8, 0x1, 0x6069, 0x900, 0x9, 0x8, 0xffff, 0x8, 0x2, 0x5c, 0x1, 0x1, 0x8000, 0x80000001, 0x10001, 0x3, 0x3ff, 0x1, 0x598, 0x3, 0x6, 0x1, 0x9, 0x9, 0x3, 0x1, 0xfffffffe, 0x9, 0x91, 0x80000001, 0x9, 0x0, 0x7f, 0x9618df0, 0x9, 0x8, 0xcc7b, 0x8, 0x3, 0xf354, 0x16a5, 0x9, 0x7fffffff, 0x9, 0x48d, 0x800, 0x7, 0xfffffff8, 0x8, 0x8, 0x2, 0xe, 0x1, 0x80, 0x6af, 0x2, 0x8, 0x7, 0x4, 0x5, 0xc, 0x2, 0x9, 0x800, 0x0, 0x10, 0x100, 0x7, 0x0, 0x0, 0x1, 0x8, 0xb, 0x6, 0x5, 0x8, 0x7, 0x5, 0x2, 0xfb0, 0x5, 0x0, 0x100, 0x6, 0xd, 0x40, 0x7, 0x80000000, 0x5e, 0x6, 0x1, 0x5, 0x80000001, 0x4, 0x7a, 0x0, 0x7, 0x8, 0x8, 0x7, 0x40, 0x1, 0x7, 0x2, 0x3, 0x8, 0x9, 0x5, 0x3, 0xb, 0x1a, 0x3, 0x5b, 0x7, 0x80, 0xff, 0x794f, 0x4b15aa93, 0x5, 0x80, 0x8000, 0x1, 0x9, 0x5, 0x4, 0x8, 0x1, 0xd10, 0xeca, 0x8, 0x7, 0x26, 0xd80d, 0xfffffffe, 0xb, 0x2, 0x5, 0x80000000, 0x5, 0x1, 0x9, 0x55, 0x4, 0x6, 0xd, 0x4, 0x0, 0x6, 0xfffffffd, 0x3, 0x3, 0xffff676c, 0xfb, 0x5, 0x8, 0x4dd7, 0x4, 0x5, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10001}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0xfffffff9, 0x5, 0x81, 0x200, 0x80, 0x6, 0xc677, 0x3, 0x1, 0x8, 0x8, 0x8, 0x2, 0xd, 0x41, 0x1, 0x7b0c, 0x0, 0x2, 0x9, 0x9e4, 0x7, 0x3, 0x80000000, 0x3, 0x3, 0x3, 0x7fffffff, 0x0, 0x1, 0x5, 0x6, 0x5, 0x6e, 0x2, 0x3c, 0x7, 0x9, 0xa929, 0x3, 0xf7, 0x2, 0x9, 0x6, 0x9, 0x56, 0x80000000, 0xa, 0x3, 0x0, 0x200, 0x6, 0x9, 0x8, 0x3ff, 0x6, 0xc93, 0x783, 0x39, 0xe, 0xa1b3, 0xfffffffd, 0x2, 0x7, 0x6, 0x200, 0x3, 0x12000000, 0x7fffffff, 0x4bff, 0x3, 0x8, 0x9, 0x2, 0xffff6fae, 0x5, 0x7, 0x9, 0xd21, 0x10001, 0x7, 0x9069, 0x8000, 0x9, 0xffffffff, 0x10000, 0x2, 0x7fff, 0x8000, 0x5, 0x4, 0x3, 0x64, 0x258, 0x8, 0x4, 0x6, 0x7, 0xd3, 0x2898, 0x6, 0x6, 0x452, 0x0, 0x7, 0xb, 0x98, 0xcf, 0x6, 0x5, 0x7, 0x7fffffff, 0x5, 0x100, 0x7, 0x100, 0x3, 0x5a, 0x1c000, 0x9, 0x5, 0x142, 0xfffffff2, 0x7, 0x2, 0x200, 0xe1b, 0xbfa5, 0x1, 0x0, 0x3, 0x8001, 0x7fffffff, 0x6, 0xffffffff, 0x7, 0xfffffff8, 0x6154c35f, 0xaf, 0xa5, 0x7, 0x1a, 0x7, 0xffffffff, 0x0, 0xff, 0x5, 0x5, 0x8, 0x6c, 0x10000, 0x9, 0xeac4, 0x4, 0x8, 0x1be80, 0x8, 0xfffffff8, 0x0, 0x2, 0x5, 0x8, 0x4, 0x9, 0x3, 0x3f25, 0x3ff, 0x3, 0x1, 0x100, 0x0, 0x2, 0x9, 0x0, 0x8, 0x6, 0x40, 0x0, 0xc39, 0xfffffff9, 0xffff8000, 0x6, 0x7, 0x6, 0x480, 0x3, 0x5, 0xa, 0x1, 0x552cb07d, 0xfff, 0x0, 0x400, 0x9, 0xc, 0x80000000, 0xcd06, 0x8001, 0x3, 0x1, 0xffffffff, 0x6, 0x8000, 0x4, 0x7ff, 0x3, 0xd, 0xad, 0x6, 0x81, 0x1, 0x7fff, 0x100, 0x9, 0x1, 0x6, 0x72f4, 0xf0, 0x2, 0xfff, 0x1, 0xa0000000, 0x9, 0x10001, 0x4, 0x6, 0x2, 0x5, 0x2, 0xc70, 0x4, 0x6, 0xb0, 0x5, 0x28d, 0x200, 0x4, 0x81, 0x8, 0x7fffffff, 0x4, 0x9, 0xff, 0x20, 0x10001, 0x4, 0x0, 0xf, 0x9, 0xb, 0x4, 0xfffff001, 0x6, 0x4, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa74, 0x1, 0xa01, 0x40, 0x9, {0x5, 0x2, 0x4, 0xf4c, 0x7, 0x8}, {0xff, 0x2, 0x2, 0x0, 0xf, 0x5}, 0x9, 0x4d9, 0x1}}]]}, {0x5b, 0x6, "e4ff811eace5fba6da7e3f8d1b2f99493184900860d6675805b894693d7ba3e2b5bda51e7cc775f3ffcd86350caa489e18246226f10cd1db4197c6578fe32c7b93da9d29697e4fd9366ee5a739f2ff4b9e5e1ab79b1069"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0xf0, 0x13, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb6, 0x30, 0x6, 0x4, 0x7}, 0xb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x2, 0xffffffffdffffffb, 0x6, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x10000000, 0x6, 0x8001}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x5, 0xffff0001}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6c, 0xffff9aee, 0x6, 0x7, 0x9a}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x2, 0xec67, 0x4}, 0x8}}]}, {0x16, 0x6, "4949cc0cb4b6e3fae56973d95fa9cd683751"}, {0xc}, {0xc}}}, @m_ctinfo={0x9c, 0x9, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x101}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}]}, {0x40, 0x6, "6f35c2f27e053df7ed9a2bf39875d429553a4d7ae95d57dad82697b7355c2732e030f7e8093426ef9ef726d82bd4d6826579953a911e0340532d8c7d"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x4c4, 0xa, 0x0, 0x0, {{0xb}, {0x46c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0x3b6e, 0x4, 0x2, 0x0, 0x3ff, 0x7a, 0xffffffa2, 0x0, 0x3, 0x711, 0x7, 0x0, 0x7fffffff, 0xd, 0xfffffffa, 0x1, 0x5, 0xa, 0x7100000, 0x1, 0xb20, 0xacf, 0x4, 0x283, 0x9, 0x0, 0x80, 0x1, 0x8, 0x358, 0x200000, 0x7fffffff, 0x6, 0x8, 0xfffffffa, 0x1000, 0xff, 0x2141, 0x326, 0xc, 0x6, 0x0, 0xa, 0x0, 0x1, 0x7fff, 0x3, 0x5, 0x3, 0x84, 0xa, 0x60c, 0x836, 0xa, 0x4, 0x10000, 0x1, 0x1, 0x5, 0x3, 0x7, 0x10001, 0xec, 0xd, 0x3, 0x1, 0x7, 0x2, 0x2, 0x80000000, 0x8001, 0x7d, 0xc, 0x7, 0x5911, 0x1, 0xf0, 0x5, 0x800, 0x2, 0x81, 0xa, 0x101, 0x3, 0x1, 0x6, 0x2, 0x600, 0x2, 0x7, 0x5, 0x3, 0x8f, 0x7ba, 0xfffffffb, 0x7f, 0xffffffff, 0x9, 0x6, 0x7, 0x2, 0x7fff, 0x8, 0x7, 0x9c21, 0xff, 0x2, 0x850, 0x7, 0x6, 0x0, 0x6, 0x0, 0x88e, 0x8, 0x4, 0x300000, 0x341, 0x80000000, 0x9, 0x16a4, 0x8, 0x8cb, 0x1000, 0x5, 0x2ca1, 0xd, 0x6, 0x454, 0x6, 0x100, 0x2c33, 0xbdf6, 0x4, 0xb7, 0xc, 0x3, 0x80, 0xe52b, 0xf, 0x22c8000, 0x7, 0x9c3, 0x6b7, 0x7fff, 0x5, 0x5, 0x6, 0x6, 0xffffffff, 0x4, 0x60b, 0x0, 0xe9a7, 0x2, 0x1, 0x1a5, 0x6, 0x9, 0x400, 0x3714, 0x4443701f, 0x1, 0x80000000, 0x7ff, 0x200, 0x9, 0x3ffc00, 0x8, 0x3, 0x8000, 0x1, 0x7, 0x3, 0xf0a, 0x3, 0xfffffffd, 0x80000001, 0x9, 0x2, 0x1, 0x10, 0xb, 0x3, 0x5, 0xff, 0x797c07a6, 0x7, 0x9, 0x2, 0x9, 0x9, 0x6, 0x8, 0x1, 0x5d93, 0xd, 0x4, 0x2, 0x0, 0xfffffff9, 0x80000000, 0x6, 0x8, 0x1, 0x7ff, 0x7, 0x9, 0x8, 0x5, 0x10000, 0x8, 0x6, 0x40, 0x5, 0x2, 0x3cd0161f, 0x2, 0xb9, 0x3, 0x2, 0xd, 0x1, 0x1, 0x3, 0x9, 0x6, 0x4, 0x0, 0x8000, 0x9c, 0x2, 0x4b20, 0x9, 0x1, 0x101, 0x9ea, 0xfffffffa, 0x0, 0x8, 0x43, 0x3, 0x8, 0x3, 0x9, 0xeda, 0xc, 0x1ff, 0x6, 0x7, 0x7, 0x3, 0x6, 0x3ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x10000000, 0x6b996b45, 0x1000, 0xfaa7, {0x7c, 0x1, 0x3ff, 0x100, 0x95cd, 0x6}, {0x5, 0x0, 0x3, 0x9, 0x7f, 0x3}, 0xf, 0x7, 0xcd5b}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]]}, {0x30, 0x6, "9f9b7c7097a48f3bc1f683f6e9b1f0a61ad418912535b1d3412856d216350ccdd26c3c63c5a5246192dfe578"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x3b60}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r11 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r11, 0xc0045005, &(0x7f0000000140)=0x2000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d0072413"], 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m16.737870168s ago: executing program 3 (id=2411): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f00000000c0)={0x1, 0x6}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'gretap0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0xff, 0x20000000000000b, 0x0, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0xff, 0x20000000000000b, 0x0, 0xffffffff}, 0x0) socket$kcm(0x2d, 0x2, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r5) (async) syz_genetlink_get_family_id$batadv(0x0, r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r7, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x28, 0x0, 0x15ac02, 0x7fff, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f00000000c0)) syz_fuse_handle_req(r7, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x400000000003, 0x0, 0x0, {0x5, 0x0, 0x21a5, 0x1, 0x49, 0x6, 0x0, 0x0, 0x0, 0x4009, 0x4007, 0x0, 0x0, 0x6, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000401, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x18c}, &(0x7f0000000400)=0x8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 2m13.45174238s ago: executing program 3 (id=2417): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15460100ef000000240012800b00010067726574617000001400028006000200fefef300f0ff0700ac14141f1cb7d56e0302473fb109084d9bc5d06dcc0074aa2ad5d67290880c21b3e53652f335d62106ae44c9df58f18942d68a0e496a2df01486f65b9a59e343bbce6e7d65a4d45574731f9e4579443ec0364e5bb803211994f127bfe792bc3d68cf5a93a5bcc79c945829c0cf99e5bf460e1de025748dd3684fe55303773000"/182], 0x44}}, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x80047437, &(0x7f0000000140)=0xffff) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, r6, 0x7, &(0x7f0000019080)=""/33}) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ftruncate(r7, 0x100000001) 2m9.068238565s ago: executing program 3 (id=2422): sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="01002bbd7000fcdbdf25170000000e0001006e657464657673696d0000000f0002006e656d300000080003000100000008000b00ff0f0000060016003c97000005"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004804) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000005000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005"], 0x178}}, 0x0) 2m8.352712019s ago: executing program 3 (id=2426): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}, @NFTA_MATCH_INFO={0x4c, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a63"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r0, @ANYBLOB="2c7303000000303030303030303030303030303030303034303030302c757365725f69643d000000000085c55049dd6dd5f77a00000037c2affee8b8c643f13cbeb11a122f10835657e4971f8f15b4c5246a1f593e1dc34a5dd2acceff900bf136d28f6f986e39a79e92177562b9319efd5bca9ef7603becdf7e8508c5c8449ebf", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="3400e6739a81fb9f91f4745baceb29600d787feac7abdcb0e638f34b8d991f1e0b37be124cabd864102b7e892b9a9fcff7dd85ba740eea59edc230b4adc0e9b0e3a43734ce0b1b948a2181da66a91f1e0ec225922cc47e42130e6758c8908dc973b302c330cf76a6219c7c9517e28db3931eb94558a6961458a68cf65c"], 0x40, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x159940, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100400, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0)={'L-', 0x6}, 0x16, 0xd484aa1a5e94cf6b) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x45, 0x4007, @fd_index=0x5, 0x6, 0xfffffffffffffffb, 0x8, 0x4, 0x1, {0x1, r9}}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 2m6.059766913s ago: executing program 3 (id=2434): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$ptp(r0, &(0x7f0000000040)=""/225, 0xe1) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000140)={'\x00', 0x7f, 0x3, 0x2}) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000001c0)={0x9, 0x0, 0x7}) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000200)={{0x1, 0x6}, {0x5, 0xa}}) read(r0, &(0x7f0000000240)=""/151, 0x97) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x10, 0x800) recvfrom(r1, &(0x7f0000000380)=""/95, 0x5f, 0x2020, &(0x7f0000000400)=@in={0x2, 0x4e23, @remote}, 0x80) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x74, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3d}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4d}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5e}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x24}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x48044}, 0x20000080) openat$audio1(0xffffffffffffff9c, &(0x7f00000005c0), 0x1a9001, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs2/custom1\x00', 0x1000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000640)=0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000740)={0xc, 0x0, &(0x7f0000000680)=[@release={0x40046306, 0x2}, @exit_looper], 0x65, 0x0, &(0x7f00000006c0)="71b133f386f18ea1927c889f2d314170853f75554b277380e79faa3b3a593e083edc93d0b9ad71f4aa9d995d82d043fa8c5fb42f8106bc74a19c1c136ad8bb2b33d90a665e2c3237fc1e389aeac0d91388386b860a5abd3c5b6ae1232ec6e4191376955ff1"}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000780)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000007c0)={0x18, r3}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000800)={{0x1, 0x1, 0x18, r2, {0x401}}, './file0\x00'}) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000000840)={0x18, r3, 0x9, 0x5}) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x19) ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, &(0x7f0000000900)={0x74, 0x0, 0x21}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000fc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000a00)={0x54c, r6, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x1b8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x90000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0xa3, 0x3, "0077d1fe18b6313772f3d68884a7905db6323d95245653636d2789e304a181078b8bad182abe33a30125eee7748f9aa316e90bf25ee5891260cbcd3af6c8c60b67d2055f54cbd055e0821555456b08700b813cfd0f4a6113c736fb532e3dc0bc80b2d1a09f4d85b3da90bd6222c05d0a5cfe07052697f8fcf2ba30c4013f88259345456d49ad13b0815dc3094381faed07b97058d139713e436789f47dffbf"}, @TIPC_NLA_NODE_ID={0xb5, 0x3, "b2cb279ea5760374562ca460e5159396df03c9851cd90871d1d6bc92b695b1001905470152c7140a25ddc06eadc028a2faa343d6a90b39095b7f6a964a9197a9665e7630ad76ee1199a5f76a38433a5b7757d166c9a3920f5a125bcc33a016a60f1d10e48d372043894c6bba7d1897c5a6d07df72e8a1e29fde3f6cf6865311c15e4f4f5eaaf291035e3f28dcb0102645231b38aa1d02922cecea3e1f27cdbab0b567dbdfe652abdc70cc097c78735e15b"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "2733a3e48ca25c3c7d9910e66e953eee16d445b91e57aafa0b"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa6}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc15a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeb7a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}]}, @TIPC_NLA_NODE={0x120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "7b68ed50c2eb270b208a50008a46bb908927c2eb2f20b3454a45cc12"}}, @TIPC_NLA_NODE_ID={0xd8, 0x3, "6fc3d9a81bb2846e61f5369a489128aeb6254fb43ecf6daedd0570fda2fd01be6aa8c128dc9988e1e7e2c1df2289745316d483d1233d8245e6be9aad898aa874bb098b6394ff1097a9107364cee75a0a54a90b7cf7688b995664e7ed5f74f529aff87a99a677d74038ccf7dc14306d3e64c372ca800763aee2bf165f37f42392e645533ac4d52004645662e0883ed74d054dd467cdace1e98cf4be48561eea2fff64ca63247016e2548834494d38ad09ad2bfd7d3ac7007cf671a973eb1bf5d1a21d127b1716ac26e293d5110f79d1532f690705"}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8fe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK={0x4}]}, 0x54c}, 0x1, 0x0, 0x0, 0x4014}, 0x14) r7 = socket$alg(0x26, 0x5, 0x0) r8 = accept4$alg(r7, 0x0, 0x0, 0x800) ioctl$KVM_GET_DEVICE_ATTR_vm(r4, 0x4018aee2, &(0x7f0000001040)=@attr_other={0x0, 0x0, 0x8000, &(0x7f0000001000)=0x8}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001100)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000001240)={&(0x7f0000001080), 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x7c, r9, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x16}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x20, 0xac, "7556c737c26de53e3fab90945ece936c9831a6296956b4d5edc24467"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xffff}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r11}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 2m5.666661549s ago: executing program 3 (id=2435): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000240)={0x4, 0xffff1000, 0x1, 0xffffffffffffffff, 0x1}) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x10000, 0x200000) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004140)=[{0xf4ffffff, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 2m3.918022366s ago: executing program 33 (id=2435): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000240)={0x4, 0xffff1000, 0x1, 0xffffffffffffffff, 0x1}) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x10000, 0x200000) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004140)=[{0xf4ffffff, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 10.092539879s ago: executing program 5 (id=2734): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000000000002004e23e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007c8cac4763435bed"], 0x90) 9.60196554s ago: executing program 5 (id=2735): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"/52], 0xb8}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000002000000000000000000000000ff01000000000000000000000000000100000000000000000a0040000000f3007777c3648997531837df715dd8fbee531db49095a7bf53afcaea78dcf5c6cc4791090a0435946b8e999f135c0ba17bc4da4e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000003000"/112], 0xb8}}, 0x4000) 9.388132526s ago: executing program 5 (id=2737): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "2ca949476cf646d3", "69f840be3a8e7295ba1f3a20669f8bf5", "2597d401", "ca94516f2eadaed8"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000740)=0x1) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, 0x0, 0x0) writev(r3, 0x0, 0x0) 7.219188837s ago: executing program 0 (id=2743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (fail_nth: 10) 6.64813062s ago: executing program 0 (id=2744): r0 = io_uring_setup(0x4822, &(0x7f0000000180)) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000000)) io_uring_setup(0x4822, &(0x7f0000000180)) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000000)) (async) 6.500160762s ago: executing program 0 (id=2745): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 5.988434131s ago: executing program 6 (id=2748): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000000000002004e23e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007c8cac4763435bed"], 0x90) 5.764329693s ago: executing program 1 (id=2749): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"/52], 0xb8}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000002000000000000000000000000ff01000000000000000000000000000100000000000000000a0040000000f3007777c3648997531837df715dd8fbee531db49095a7bf53afcaea78dcf5c6cc4791090a0435946b8e999f135c0ba17bc4da4e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000ffffff8000"/112], 0xb8}}, 0x4000) 5.722887319s ago: executing program 6 (id=2750): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffd, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000b40)={0x0, 0x3}, &(0x7f0000000b80)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000bc0)={0x0}, &(0x7f0000000c00)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000000d40)=[{&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x7fffffff, @loopback, 0x7}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000180)="234d688239d927f90a7b5f674d43d2b75b95ec77b81623158b91dc7288f8ee7ca6eb27df233e2ac787d6f6", 0x2b}, {&(0x7f0000000300)}, {&(0x7f0000000340)="ca054d8efe24f758e74ecebecdf3032b0e3bf5f29aa07f6e5cc64dab4bc514b08b6d1dd59bf46bb2b83a07fe564eeac8bfc7bdd4ba7df093b5f63810621b15a721e0a922693afb3f66976b05c4af654ff032d8ba002b295c8ae606f751da86255fe8a8c00b0ed2e9ba0cee14918f71469be4ccd7f77d0ba7a6f5e6842f9c794845de591fb2282f6b48fb06e69612d1520bedc1baf930", 0x96}, {&(0x7f0000000400)="dce1e4d1fa4da47021cd8b356df869b1", 0x10}, {&(0x7f0000000440)="ae90b22729111fb0f0bdd65cac99e8e7f614b7a2cbc5f1c499418c83a987d02d05c9783443598becd7371f0f6529e6da771728ad593daaee5ecabfb259c246c74855826c256054ac3bf9902f7fa22eb785fb616a95fc3b14b054756436bae28b45c74616f78d6b8f313008da18437d4d39fdd3c9ec634ba5fe1628d227b81f45f611e44b1bd0e0441f1bf75f0762173e4b55f02cb6a5ccc01f4bee15bcd3a94b49514d17829a5eff11a2d838f3d87f5735f0c1b0", 0xb4}], 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="30000000000000008400000001000000800f07000b00000000000100ff0100000500000004000000c7ffffff", @ANYRES32=0x0, @ANYBLOB="20001c0000e000008400000002000000aa0401000600000002000b00", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000005000000100000000100000018000000000000008400000006000000480900000000000018000000000000008400000007000000e000000100000000180000000000000084000000070000000a01010200000000180000000000000084000000000000000100ffff08000200180000000000000084000000060000000800000000000000"], 0xe0, 0x4004001}, {&(0x7f0000000840)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000880)="8e056218ad6d79379389f66835a7893b7aea102dc8fbdb5396c90beae6d3c40ce901ec32afe8171cd0295c2309fabf86c2", 0x31}, {&(0x7f00000008c0)="381ccfec372fc2b00c2e03b7d7d55faf8b1f5124998370036c330226146ae9ae336f37e9b0a1fc18f1dc5ac6d94525901e34c47ddf2a5331cb45271251169cf451c783536b17c600b55a", 0x4a}, {&(0x7f0000000940)="6bf59d5dd931fdb02d85768d8128b188c16b535ddd3882752faa67ed9f169a2270224c98d1b289bef88ca996bf6b034a7ca33954194826779e0a473544a61e37aa873dbaf321d03f0307c955258462693972b0c0d7520ef426ccd92e7c08af74b6c685bf27e64b8c25750c4a7728adc487fbadd87fd0793f02c2504a59f0d7613b12ca44127a5ddc5dfbef8daa7a6777564db79b1a92da8b40c5f0f965262b6a32700b8e3390d78faa7a5f604a097fef7547b379c5dfa588605a8d2ce31303030fd1", 0xc2}, {&(0x7f0000000a40)='\b', 0x1}], 0x4, &(0x7f0000000c40)=[@sndinfo={0x20, 0x84, 0x2, {0x8, 0x8201, 0x13, 0x7}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x7, 0x101, 0x0, r4}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x2, 0x8200, 0xfffffffe, 0x4f, 0x9, 0x0, 0xb, r5}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x40, 0x4, 0x3f, 0xc0, 0x918, 0x7, 0x5, r6}}], 0xd0, 0x4}], 0x2, 0x24000000) shutdown(r3, 0x2) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) r7 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.652182901s ago: executing program 5 (id=2751): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x2, 0x9, 0x100000000000008, 0xfffffffe, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000500)={0xa, 0xffff, 0x0, @mcast1, 0x9}, 0x1c) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4609035208070000000000000003003e00810000002701000038000000b00100c69280f2ea967f060007000000468320000100000400017f000000000000000070070000000000000058970000070000000b00000000040000000000805d5d93bd9aed8150be245eb57c20275df23dd4c0a790d184cb0fd06fc61360db201ff5e3b747d53373a968d5dff14ccac501f02fe320a27d63cbc8abbc8bee8130a4849dd5bf877e733c6917ea5757bda54eba462981a44f0e8100"/380], 0x1b2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000002c0)={0x0, 0x9, 0x10001, 0x3}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='\bource\x00\x00\x00\x00\xdb\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x91\xa6\xb3\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000200)={0xfffffff8, [[0x5, 0x80000001, 0x40021, 0x0, 0x7fff, 0x3, 0xfffffffe, 0x206], [0x4, 0xfffffffe, 0x0, 0x0, 0x6fc012ba, 0x940f, 0x0, 0x7], [0x0, 0x2, 0x5, 0x3, 0x100, 0x0, 0x1, 0x4571]], '\x00', [{0x0, 0x1, 0x1}, {0x2, 0x1}, {0x80, 0x80000}, {0x400009, 0x4}, {0x2, 0xf8e}, {0x38}, {0xa5, 0x230d}, {}, {0x0, 0x1}, {0x4000000}, {0x80000000, 0x4}, {0x0, 0x1}], '\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5000000}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xc0000484) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05d1030000000000010902240001000780000904000005030002002921004033012205000905810300000c0007"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) 5.354558404s ago: executing program 1 (id=2752): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffd, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000b40)={0x0, 0x3}, &(0x7f0000000b80)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000bc0)={0x0}, &(0x7f0000000c00)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000000d40)=[{&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x7fffffff, @loopback, 0x7}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000180)="234d688239d927f90a7b5f674d43d2b75b95ec77b81623158b91dc7288f8ee7ca6eb27df233e2ac787d6f6", 0x2b}, {&(0x7f0000000300)}, {&(0x7f0000000340)="ca054d8efe24f758e74ecebecdf3032b0e3bf5f29aa07f6e5cc64dab4bc514b08b6d1dd59bf46bb2b83a07fe564eeac8bfc7bdd4ba7df093b5f63810621b15a721e0a922693afb3f66976b05c4af654ff032d8ba002b295c8ae606f751da86255fe8a8c00b0ed2e9ba0cee14918f71469be4ccd7f77d0ba7a6f5e6842f9c794845de591fb2282f6b48fb06e69612d1520bedc1baf930", 0x96}, {&(0x7f0000000400)="dce1e4d1fa4da47021cd8b356df869b1", 0x10}, {&(0x7f0000000440)="ae90b22729111fb0f0bdd65cac99e8e7f614b7a2cbc5f1c499418c83a987d02d05c9783443598becd7371f0f6529e6da771728ad593daaee5ecabfb259c246c74855826c256054ac3bf9902f7fa22eb785fb616a95fc3b14b054756436bae28b45c74616f78d6b8f313008da18437d4d39fdd3c9ec634ba5fe1628d227b81f45f611e44b1bd0e0441f1bf75f0762173e4b55f02cb6a5ccc01f4bee15bcd3a94b49514d17829a5eff11a2d838f3d87f5735f0c1b0", 0xb4}], 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="30000000000000008400000001000000800f07000b00000000000100ff0100000500000004000000c7ffffff", @ANYRES32=0x0, @ANYBLOB="20001c0000e000008400000002000000aa0401000600000002000b00", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000005000000100000000100000018000000000000008400000006000000480900000000000018000000000000008400000007000000e000000100000000180000000000000084000000070000000a01010200000000180000000000000084000000000000000100ffff08000200180000000000000084000000060000000800000000000000"], 0xe0, 0x4004001}, {&(0x7f0000000840)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000880)="8e056218ad6d79379389f66835a7893b7aea102dc8fbdb5396c90beae6d3c40ce901ec32afe8171cd0295c2309fabf86c2", 0x31}, {&(0x7f00000008c0)="381ccfec372fc2b00c2e03b7d7d55faf8b1f5124998370036c330226146ae9ae336f37e9b0a1fc18f1dc5ac6d94525901e34c47ddf2a5331cb45271251169cf451c783536b17c600b55a", 0x4a}, {&(0x7f0000000940)="6bf59d5dd931fdb02d85768d8128b188c16b535ddd3882752faa67ed9f169a2270224c98d1b289bef88ca996bf6b034a7ca33954194826779e0a473544a61e37aa873dbaf321d03f0307c955258462693972b0c0d7520ef426ccd92e7c08af74b6c685bf27e64b8c25750c4a7728adc487fbadd87fd0793f02c2504a59f0d7613b12ca44127a5ddc5dfbef8daa7a6777564db79b1a92da8b40c5f0f965262b6a32700b8e3390d78faa7a5f604a097fef7547b379c5dfa588605a8d2ce31303030fd1", 0xc2}, {&(0x7f0000000a40)='\b', 0x1}], 0x4, &(0x7f0000000c40)=[@sndinfo={0x20, 0x84, 0x2, {0x8, 0x8201, 0x13, 0x7}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x7, 0x101, 0x0, r4}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x2, 0x8200, 0xfffffffe, 0x4f, 0x9, 0x0, 0xb, r5}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x40, 0x4, 0x3f, 0xc0, 0x918, 0x7, 0x5, r6}}], 0xd0, 0x4}], 0x2, 0x24000000) shutdown(r3, 0x2) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) r7 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.984246223s ago: executing program 2 (id=2754): openat$vimc0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (async) openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000062c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x40}}], 0x1, 0x1) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000040)={0x80000000, &(0x7f0000000000)=[{0x80000000, 0x0}], &(0x7f00000000c0)}) (async) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x1, 0x6, @multicast}, 0x14) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="0004000027", @ANYBLOB], 0x400}], 0x1, 0x0, 0x0, 0x20000001}, 0x20040051) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000140), &(0x7f0000000180)=[{{}, {0x80000000}}]}) (async) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, &(0x7f0000000100)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000003c0)={r6, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', r3, 0x4, 0x7, 0x0, 0xffffffff, 0x40, @private1, @private2, 0x8df15e7c9940164b, 0x8, 0x0, 0xffff0001}}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f000000a300)={{0x80000000, r8, 0x2, [0x1, 0x8]}, {r7, 0x0, 0x0, [0xc1b, 0x4]}, 0x0, [0x7e, 0x8]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000240)={{0x80000000, r1, 0x1, [0x7fffffff, 0x9]}, {r4, r8, 0x4, [0x6, 0x3]}, 0x2, [0x8, 0xa4]}) (async) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000540)=0x5) 3.73825663s ago: executing program 2 (id=2755): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x640, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) set_mempolicy(0x8000, &(0x7f0000000000)=0x1, 0x3) r1 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1000001, 0x10, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000001200)={0x0, 0x3, 0x400000, 0xba, 0x7, "001bf100eeff0000a2c2000100000000002000"}) r3 = syz_open_pts(r2, 0x101) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000440)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000400)={0xffffffffffffffa2, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r8 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001040)={0x74, 0x0, &(0x7f0000000500)=[@increfs_done, @acquire_done={0x40106309, 0x4}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f00000007c0)={@ptr={0x70742a85, 0xffffffff, &(0x7f0000000240)=""/228, 0xe4, 0x1, 0x3c}, @ptr={0x70742a85, 0x1, &(0x7f0000000680)=""/183, 0xb7, 0x1, 0x32}, @fda={0x66646185, 0x3, 0x1, 0x2}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r8}], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) syz_usb_connect$uac1(0x5, 0x8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000206b1d01014000010203010902780003010000060904000000010100000a24010200000201020a24080304004000000009040100000102000009040101010102000009050109100001fc0b0725018107010809040200000102000009040201010102000008240206000547ba07240106040210090582090004"], 0x0) setsockopt$sock_attach_bpf(r9, 0x6, 0x19, &(0x7f0000000ec0), 0x4b) sendmsg$inet(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30004084) 3.386490587s ago: executing program 1 (id=2756): sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="01002bbd7000fcdbdf25170000000e0001006e657464657673696d0000000f0002006e656d300000080003000100000008000b00ff0f0000060016003c97000005"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004804) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000010000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005"], 0x178}}, 0x0) 3.197837494s ago: executing program 1 (id=2757): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a3c65) write$dsp(r3, &(0x7f00000004c0)='\x00', 0x1) socket$inet6_udp(0xa, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2.584395431s ago: executing program 6 (id=2758): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xdc3, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000001c0)=0xffffbf7f) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@gettaction={0xa0, 0x32, 0x100, 0x70bd28, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffff}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x354b}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x200050a5) 2.418810034s ago: executing program 0 (id=2759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0xfffe}], 0x1) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x802) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="850c81d6f9"], 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, r8, 0x100, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x36, &(0x7f0000000040)={@multicast, @random="00005403cb00", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x87, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2}}}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000090601020000000000001b000200fbff040007800900020073797a31000000000500010007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.484890492s ago: executing program 2 (id=2760): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2801, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x4) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190043000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.280334169s ago: executing program 5 (id=2761): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000000000002004e23e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007c8cac4763435bed"], 0x90) 1.236700901s ago: executing program 2 (id=2762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000040)=@getpolicy={0x64, 0x15, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local}, 0x6e6bba, 0x2}, [@XFRMA_IF_ID={0x8}, @mark={0xc}]}, 0x64}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x41, 0x4}, 0x4}}, 0x10) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000040)=@getpolicy={0x64, 0x15, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local}, 0x6e6bba, 0x2}, [@XFRMA_IF_ID={0x8}, @mark={0xc}]}, 0x64}}, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) connect$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x41, 0x4}, 0x4}}, 0x10) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) 1.146417887s ago: executing program 0 (id=2763): openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x28, 0x2, 0x0, 0x80000}}}}}, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r1 = socket(0x11, 0xa, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000640)=0xff, 0x4) recvmmsg(r2, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x2}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={r3, 0xfffffff0}, 0x8) iopl(0x2) r4 = dup(r2) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000000)="689378aa77f5a56a", 0x8}], 0x1, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x0) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r5) add_key(&(0x7f0000000000)='cifs.spnego\x00', 0x0, &(0x7f0000000240)="0000000000000002ff69000000e6000100ff0f180000000200861f4104bfeacdd50800000000000000b536f0", 0x2c, 0xfffffffffffffffd) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="c2bf", 0x2}, {0x0, 0x600}], 0x2) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)='\x00', r6) 944.318274ms ago: executing program 6 (id=2764): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x103000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000800)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x2}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4005}, 0x40c0084) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x4dc}}, 0x4801) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000080"]) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f0000000100)=0x1) 943.878928ms ago: executing program 5 (id=2765): syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000100)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$key(0xf, 0x3, 0x2) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x10d443, 0x0) write$vga_arbiter(r2, &(0x7f00000001c0)=ANY=[], 0xa) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000180)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xbd2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4835f010, 0x9, 0x0, 0x0, 0x5, 0x3, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x40000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7f3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) statx(0xffffffffffffffff, &(0x7f00000062c0)='./file0\x00', 0x2000, 0x4, &(0x7f0000006300)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000006400)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f00000000c0)) fchown(r4, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) 896.587535ms ago: executing program 1 (id=2766): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x140}}, 0x0) 678.64506ms ago: executing program 6 (id=2767): sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="01002bbd7000fcdbdf25170000000e0001006e657464657673696d0000000f0002006e656d300000080003000100000008000b00ff0f0000060016003c97000005"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004804) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000020000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005"], 0x178}}, 0x0) 555.99267ms ago: executing program 1 (id=2768): socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0x4}]}]}, 0x6c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r3, 0x80000000004, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r4, 0xffff8000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x8000, '\x00', @p_u16=&(0x7f00000000c0)=0xfffe}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) 293.48953ms ago: executing program 2 (id=2769): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="cc0000001b000100000000000000000000000000000000000000000000000000ff0200000000000000000000000000010000000000000000000000002f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000e300000000000000000000000f6bdc5a12000000000000030000000000000000000000000000070000000000000000000000000000f600000000000000000000000000000000000000000000ac246142f82843f7000000000000000008"], 0xcc}}, 0x0) 156.09503ms ago: executing program 6 (id=2770): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xc, 0xc8, 0xfa}}}, 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001780)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[{}, {}, {}], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x4}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000001c070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002"], 0x1874}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_emit_vhci(0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x9c, 0x4) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 317.904µs ago: executing program 0 (id=2771): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, 0x8, 0x3c80, 0x85, 0x400, 0x3, 0x60}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "2ca949476cf646d3", "69f840be3a8e7295ba1f3a20669f8bf5", "2597d401", "ca94516f2eadaed8"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000740)=0x1) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, 0x0, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) io_uring_enter(0xffffffffffffffff, 0x1a5a, 0xe9ad, 0x0, &(0x7f00000001c0)={[0x7]}, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) 0s ago: executing program 2 (id=2772): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x640, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x16, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @dev, @void, {@llc_tr={0x11, {@snap={0xab, 0xaa, "16", "61c224", 0xdada}}}}}, 0x0) shutdown(r1, 0x1) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e21, 0xfffffff4, @empty, 0x50}}, 0x9, 0x4000}, 0x90) r5 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000000c0)={"ffc5ccdf", 0x4, 0x6, 0x3, 0x2a2b, 0x0, "186074c00ba7b194ad89da7900", "00000100", "03000500", "b0940700", ["c720f8fffffffff8619e3500", "00000000000000ac00830800", "067100", "00113a071fa0fcd9c500"]}) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, 0x4, 0x0, 0x0, 0x9, 0x17, 0x1, 0x1, 0x42}) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) move_pages(0x0, 0x3, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000f87000/0x4000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r7, 0x4068aea3, &(0x7f0000000200)={0xc0, 0x0, 0x10000}) ioctl$KVM_RESET_DIRTY_RINGS(r7, 0xaec7) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): nk: 4280 bytes leftover after parsing attributes in process `syz.3.2265'. [ 897.533098][T14910] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2272'. [ 897.812312][T14915] netlink: 'syz.0.2273': attribute type 1 has an invalid length. [ 898.105570][T14322] usbhid 3-1:0.0: can't add hid device: -71 [ 898.112022][T14322] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 898.127495][T14322] usb 3-1: USB disconnect, device number 81 [ 898.694243][ T5864] usb 4-1: USB disconnect, device number 96 [ 899.772033][T14948] netlink: 'syz.2.2281': attribute type 4 has an invalid length. [ 899.902617][T14952] openvswitch: netlink: Message has 4 unknown bytes. [ 899.909607][T14952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 899.983807][T14952] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 899.994599][T14952] team0: Port device batadv8 added [ 900.007568][T14952] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2280'. [ 900.640952][T14961] openvswitch: netlink: Message has 4 unknown bytes. [ 900.651064][T14961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 900.671084][T14961] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 900.679757][T14961] team0: Port device batadv4 added [ 900.895939][T14935] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2278'. [ 900.905765][T14935] netlink: 'syz.4.2278': attribute type 6 has an invalid length. [ 900.914087][T14935] netlink: 'syz.4.2278': attribute type 5 has an invalid length. [ 900.922362][T14935] netlink: 'syz.4.2278': attribute type 4 has an invalid length. [ 901.061941][T14970] openvswitch: netlink: Message has 4 unknown bytes. [ 901.071052][T14970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 901.103746][T14970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.114297][T14970] team0: Port device batadv0 added [ 903.818302][T14982] bond_slave_1: entered promiscuous mode [ 903.832059][T14982] bond_slave_1: left promiscuous mode [ 904.669635][T14994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2291'. [ 904.730960][ T9] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 904.760149][T14994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2291'. [ 904.779440][T14994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2291'. [ 904.933620][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 904.952369][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.020665][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.053065][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 905.110963][ T9] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 905.131544][T15005] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 905.143227][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.183489][ T9] usb 4-1: config 0 descriptor?? [ 905.327479][T15005] bond2: entered promiscuous mode [ 905.341265][T15005] bond2: entered allmulticast mode [ 905.351179][T15005] 8021q: adding VLAN 0 to HW filter on device bond2 [ 905.641601][T10747] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 905.824195][T10747] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 905.903767][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 905.921296][T10747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 905.930246][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 905.944318][ T850] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 905.974382][T15023] openvswitch: netlink: Message has 4 unknown bytes. [ 905.981756][T15023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 906.046761][T10747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 906.060920][T10747] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 906.079999][ T9] usb 4-1: USB disconnect, device number 97 [ 906.154475][T10747] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 906.184806][T10747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.214234][T10747] usb 3-1: config 0 descriptor?? [ 906.222483][T15023] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2295'. [ 906.306792][ T850] usb 5-1: Using ep0 maxpacket: 16 [ 906.324831][T15012] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 906.359770][T15012] team0: Port device batadv8 added [ 906.478736][T15017] loop4: detected capacity change from 0 to 2560 [ 906.488539][T15017] buffer_io_error: 27 callbacks suppressed [ 906.488591][T15017] Buffer I/O error on dev loop4, logical block 0, async page read [ 906.506216][T15017] Buffer I/O error on dev loop4, logical block 0, async page read [ 906.515696][T15017] Buffer I/O error on dev loop4, logical block 0, async page read [ 906.525187][T15017] Buffer I/O error on dev loop4, logical block 0, async page read [ 906.551975][T15017] Buffer I/O error on dev loop4, logical block 0, async page read [ 906.601332][T15017] Buffer I/O error on dev loop4, logical block 0, async page read [ 906.711543][T10747] usbhid 3-1:0.0: can't add hid device: -71 [ 906.722439][T10747] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 906.756464][T15017] Buffer I/O error on dev loop4, logical block 0, async page read [ 906.766920][T15017] Buffer I/O error on dev loop4, logical block 0, async page read [ 906.775797][T15017] ldm_validate_partition_table(): Disk read failed. [ 906.783448][T15017] Buffer I/O error on dev loop4, logical block 0, async page read [ 906.793555][T15017] Buffer I/O error on dev loop4, logical block 0, async page read [ 906.802648][T15017] Dev loop4: unable to read RDB block 0 [ 906.809419][T15017] loop4: unable to read partition table [ 906.878739][T15017] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 906.889311][T10747] usb 3-1: USB disconnect, device number 82 [ 907.530693][T10747] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 907.720793][T10747] usb 4-1: Using ep0 maxpacket: 8 [ 907.736070][T10747] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 907.747703][T10747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.769831][T10747] usb 4-1: Product: syz [ 907.789038][T10747] usb 4-1: Manufacturer: syz [ 907.804196][T10747] usb 4-1: SerialNumber: syz [ 907.902778][T10747] usb 4-1: config 0 descriptor?? [ 907.930696][T14322] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 908.094049][T14322] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 908.104201][T14322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.118237][T15031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.130441][T15031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.169713][T14322] usb 3-1: config 0 descriptor?? [ 908.213322][T10747] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 908.269963][T14322] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 908.595679][T15038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.614923][T15031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2297'. [ 908.654137][T15031] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2297'. [ 908.684461][T15038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.972173][T10747] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 909.008978][T10747] usb 4-1: USB disconnect, device number 98 [ 909.463046][ T850] usb 5-1: unable to get BOS descriptor or descriptor too short [ 909.471119][ T850] usb 5-1: no configurations [ 909.569768][ T850] usb 5-1: can't read configurations, error -22 [ 909.891397][T14322] gspca_stv06xx: I2C: Read error writing address: -71 [ 909.901978][T14322] usb 3-1: USB disconnect, device number 83 [ 910.059997][T15047] loop9: detected capacity change from 0 to 7 [ 910.100259][T14977] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 910.160335][T14977] loop9: partition table partially beyond EOD, truncated [ 910.209505][T14977] loop9: p1 size 501170297 extends beyond EOD, truncated [ 910.309712][T15047] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 910.316630][T15047] loop9: partition table partially beyond EOD, truncated [ 910.325558][T15047] loop9: p1 size 501170297 extends beyond EOD, truncated [ 910.582739][T15054] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2306'. [ 910.682668][T15060] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2305'. [ 910.730773][T14977] udevd[14977]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 911.014546][T14977] udevd[14977]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 912.591289][T15085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2310'. [ 912.800962][ T5941] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 912.987121][ T5941] usb 5-1: unable to get BOS descriptor or descriptor too short [ 912.995686][T15087] veth0_macvtap: mtu less than device minimum [ 913.016668][ T5941] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 913.053026][ T5941] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 913.114155][ T5941] usb 5-1: config 63 has no interface number 0 [ 913.120405][ T5941] usb 5-1: config 63 interface 66 has no altsetting 0 [ 913.188942][ T5941] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 913.238841][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.309924][ T5941] usb 5-1: Product: syz [ 913.340761][ T5941] usb 5-1: Manufacturer: syz [ 913.345403][ T5941] usb 5-1: SerialNumber: syz [ 913.596249][T15082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.605247][T15082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.664145][ T5941] uvcvideo 5-1:63.66: probe with driver uvcvideo failed with error -22 [ 913.676351][T15089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2313'. [ 913.712008][ T5941] usb 5-1: USB disconnect, device number 101 [ 914.066758][T15096] netlink: 'syz.1.2315': attribute type 4 has an invalid length. [ 914.121165][T15096] netlink: 'syz.1.2315': attribute type 4 has an invalid length. [ 914.411259][T14322] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 914.781858][ T5941] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 915.050792][ T850] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 915.162811][ T5941] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 915.172128][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.181055][T14322] usb 1-1: Using ep0 maxpacket: 8 [ 915.256083][ T850] usb 5-1: Using ep0 maxpacket: 16 [ 915.273259][T14322] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 915.277326][ T850] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 915.282449][T14322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.282472][T14322] usb 1-1: Product: syz [ 915.282488][T14322] usb 1-1: Manufacturer: syz [ 915.282503][T14322] usb 1-1: SerialNumber: syz [ 915.287932][T14322] usb 1-1: config 0 descriptor?? [ 915.300899][ T5941] usb 4-1: Product: syz [ 915.363175][T14322] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 915.372423][ T850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 915.541285][ T5941] usb 4-1: Manufacturer: syz [ 915.546779][ T850] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 915.557186][ T850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.621114][ T5941] usb 4-1: SerialNumber: syz [ 915.642105][T15112] netlink: 'syz.1.2320': attribute type 2 has an invalid length. [ 915.660195][T15112] netlink: 'syz.1.2320': attribute type 1 has an invalid length. [ 915.680502][T15112] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2320'. [ 915.750592][ T850] usb 5-1: Product: syz [ 915.756595][ T850] usb 5-1: Manufacturer: syz [ 915.762729][ T5941] usb 4-1: config 0 descriptor?? [ 915.791920][ T850] usb 5-1: SerialNumber: syz [ 915.889595][ T850] usb 5-1: config 0 descriptor?? [ 915.954818][T15114] ptrace attach of "./syz-executor exec"[5879] was attempted by "./syz-executor exec"[15114] [ 915.977473][ T850] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 915.987220][ T5941] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 916.177794][T15100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.188188][ T850] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 916.202086][T15100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.365796][ T5941] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 916.498229][T14322] gspca_sonixj: reg_r err -110 [ 916.525889][T14322] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 916.611111][ T850] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 916.619777][ T850] em28xx 5-1:0.0: Config register raw data: 0xfa [ 916.626894][ T850] em28xx 5-1:0.0: I2S Audio (3 sample rate(s)) [ 916.647105][ T850] em28xx 5-1:0.0: No AC97 audio processor [ 917.118541][T15121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 917.136776][T15121] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2321'. [ 917.309761][T15122] syz.2.2321 (15122): drop_caches: 2 [ 917.443139][ T850] usb 1-1: USB disconnect, device number 93 [ 917.502176][T14322] usb 4-1: USB disconnect, device number 99 [ 917.528216][ T5941] usb 5-1: USB disconnect, device number 102 [ 917.925867][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2323'. [ 918.037977][T15133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 920.416653][T15148] netlink: 'syz.3.2330': attribute type 4 has an invalid length. [ 920.487010][T15148] netlink: 'syz.3.2330': attribute type 4 has an invalid length. [ 920.890753][T10747] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 921.061129][T10747] usb 3-1: Using ep0 maxpacket: 8 [ 921.070844][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 921.081961][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 921.091651][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 921.111638][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 921.122927][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 921.150939][T10747] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 921.160213][T10747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.168415][T10747] usb 3-1: Product: syz [ 921.173894][T10747] usb 3-1: Manufacturer: syz [ 921.190689][T10747] usb 3-1: SerialNumber: syz [ 921.201349][T10747] usb 3-1: config 0 descriptor?? [ 921.227101][T10747] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 921.442810][T15166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2337'. [ 922.112509][T15154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.122355][T15154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.290380][T15177] openvswitch: netlink: Message has 4 unknown bytes. [ 922.297654][T15177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 922.369461][T10747] gspca_sonixj: reg_r err -110 [ 922.374642][T10747] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 922.489011][T15179] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2338'. [ 922.498667][T15177] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 922.540362][T15177] team0: Port device batadv9 added [ 922.599858][T15162] chnl_net:caif_netlink_parms(): no params data found [ 923.220839][ T5872] Bluetooth: hci3: command tx timeout [ 923.796397][T10747] usb 3-1: USB disconnect, device number 84 [ 924.087711][T15162] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.111066][T15162] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.118426][T15162] bridge_slave_0: entered allmulticast mode [ 924.165531][T15162] bridge_slave_0: entered promiscuous mode [ 924.230808][T15162] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.251111][T15162] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.278944][T15162] bridge_slave_1: entered allmulticast mode [ 924.308019][T15162] bridge_slave_1: entered promiscuous mode [ 924.464311][T15162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.497551][T15162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.694881][T15162] team0: Port device team_slave_0 added [ 924.739492][T15162] team0: Port device team_slave_1 added [ 924.823975][T15198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2343'. [ 925.027021][T15162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.041022][ T850] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 925.051927][T15162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.121191][T15162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.154354][T15162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.200806][T15208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2346'. [ 925.230214][T15162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.347271][ T5872] Bluetooth: hci3: command tx timeout [ 925.356834][ T850] usb 3-1: Using ep0 maxpacket: 32 [ 925.422401][T15162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.472678][ T850] usb 3-1: too many configurations: 231, using maximum allowed: 8 [ 925.496672][ T850] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 925.521710][ T850] usb 3-1: can't read configurations, error -61 [ 925.928472][ T850] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 926.009220][T15162] hsr_slave_0: entered promiscuous mode [ 926.016433][T15162] hsr_slave_1: entered promiscuous mode [ 926.181420][T15162] debugfs: 'hsr0' already exists in 'hsr' [ 926.187294][T15162] Cannot create hsr debugfs directory [ 926.312060][ T850] usb 3-1: Using ep0 maxpacket: 32 [ 926.364072][ T850] usb 3-1: too many configurations: 231, using maximum allowed: 8 [ 926.441842][T10747] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 926.599536][ T850] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 926.616821][ T850] usb 3-1: can't read configurations, error -61 [ 926.627256][ T850] usb usb3-port1: attempt power cycle [ 927.300789][T10747] usb 1-1: Using ep0 maxpacket: 16 [ 927.323284][T10747] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.380752][ T5872] Bluetooth: hci3: command tx timeout [ 927.411316][T10747] usb 1-1: config 0 has no interfaces? [ 927.497778][T10747] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 927.537998][T15225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.547109][T15225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.562248][T15225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.571196][T15225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.579050][ T850] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 927.631259][ T850] usb 3-1: Using ep0 maxpacket: 32 [ 927.637388][ T850] usb 3-1: too many configurations: 231, using maximum allowed: 8 [ 927.651169][T10747] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 927.671130][ T850] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 927.689026][T10747] usb 1-1: Manufacturer: syz [ 927.792161][T10747] usb 1-1: config 0 descriptor?? [ 927.796823][ T850] usb 3-1: can't read configurations, error -61 [ 928.343241][T15162] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 929.127418][ T30] audit: type=1800 audit(1755293409.944:455): pid=15233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2351" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 929.169475][T15162] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 929.256498][T15162] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 929.360925][ T5941] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 929.460879][ T5872] Bluetooth: hci3: command tx timeout [ 929.512006][ T5941] usb 4-1: Using ep0 maxpacket: 32 [ 929.521088][ T5941] usb 4-1: config index 0 descriptor too short (expected 65242, got 27) [ 929.521142][ T5941] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 929.521168][ T5941] usb 4-1: config 1 interface 0 has no altsetting 0 [ 929.526211][ T5941] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 929.526238][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.526258][ T5941] usb 4-1: Product: syz [ 929.526274][ T5941] usb 4-1: Manufacturer: syz [ 929.526289][ T5941] usb 4-1: SerialNumber: syz [ 929.539586][T15162] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 929.865326][T10747] usb 1-1: USB disconnect, device number 94 [ 930.953472][T15162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.129987][T15162] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.179956][T12138] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.187173][T12138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.444114][T12153] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.451315][T12153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.566258][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.581451][ T5941] usb 4-1: USB disconnect, device number 100 [ 931.590705][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.656206][ T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 931.840736][ T9] usb 3-1: device descriptor read/64, error -71 [ 932.091006][ T9] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 932.328508][T15262] openvswitch: netlink: Message has 4 unknown bytes. [ 932.335873][T15262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 932.345257][ T9] usb 3-1: device descriptor read/64, error -71 [ 932.421496][T15265] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2355'. [ 932.461249][ T9] usb usb3-port1: attempt power cycle [ 932.819940][T15264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2354'. [ 932.994209][T15262] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 933.003774][T15262] team0: Port device batadv10 added [ 933.121530][T15269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 933.501029][ T9] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 933.514020][T15162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.535984][ T9] usb 3-1: device descriptor read/8, error -71 [ 933.911998][ T9] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 934.367483][T15162] veth0_vlan: entered promiscuous mode [ 934.428835][T15162] veth1_vlan: entered promiscuous mode [ 934.698890][T15162] veth0_macvtap: entered promiscuous mode [ 934.837906][T15278] macvlan0: entered promiscuous mode [ 934.890911][T15162] veth1_macvtap: entered promiscuous mode [ 935.211199][T15162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 935.250021][T15162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.311037][T12153] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.392353][T12153] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.438129][T12153] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.508218][T12153] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.676578][ T9] usb 3-1: device descriptor read/8, error -71 [ 935.799069][T15285] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 935.843785][ T9] usb usb3-port1: unable to enumerate USB device [ 936.252457][T12157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.316306][T12157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.347875][T15288] netlink: 4276 bytes leftover after parsing attributes in process `syz.2.2361'. [ 936.511426][T12157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.540950][T12157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.194225][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2362'. [ 937.325393][T15300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 937.541246][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 937.753382][ T850] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 938.230668][ T850] usb 6-1: device descriptor read/64, error -71 [ 938.251099][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 938.269462][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.298374][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 938.333199][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.582808][ T9] usb 4-1: config 0 descriptor?? [ 938.601011][ T850] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 938.813239][ T850] usb 6-1: device descriptor read/64, error -71 [ 939.181973][ T850] usb usb6-port1: attempt power cycle [ 939.204738][ T9] mcp2221 0003:04D8:00DD.001A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 939.447629][T15311] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2367'. [ 939.477937][T15311] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2367'. [ 939.681321][ T850] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 939.733818][ T850] usb 6-1: device descriptor read/8, error -71 [ 939.955171][T15318] sit1: entered allmulticast mode [ 940.001049][ T850] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 940.082085][ T850] usb 6-1: device descriptor read/8, error -71 [ 940.295100][ T850] usb usb6-port1: unable to enumerate USB device [ 941.140662][T10746] usb 4-1: USB disconnect, device number 101 [ 941.551200][T15345] openvswitch: netlink: Message has 4 unknown bytes. [ 941.558715][T15345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 941.858822][T15345] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 941.978417][T15345] team0: Port device batadv5 added [ 942.340748][ T5864] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 942.525474][ T5864] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 942.534995][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.550686][ T5864] usb 4-1: Product: syz [ 942.554886][ T5864] usb 4-1: Manufacturer: syz [ 942.630869][ T5864] usb 4-1: SerialNumber: syz [ 943.005000][ T5864] usb 4-1: config 0 descriptor?? [ 943.045945][ T5864] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 943.365562][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2381'. [ 943.484427][T15371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 944.120856][ T5864] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 944.142661][ T5864] sq905c 4-1:0.0: probe with driver sq905c failed with error -110 [ 944.257106][ T5864] usb 4-1: USB disconnect, device number 102 [ 945.389696][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2383'. [ 945.521813][T15386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 947.286509][T15413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2387'. [ 947.370833][T10748] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 947.517408][T15416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 947.747024][T10748] usb 1-1: config 0 has no interfaces? [ 947.768134][T10748] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 947.790706][T10748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.819421][T10748] usb 1-1: Product: syz [ 947.834108][T10748] usb 1-1: Manufacturer: syz [ 947.838954][T10748] usb 1-1: SerialNumber: syz [ 947.986165][T10748] usb 1-1: config 0 descriptor?? [ 948.757203][T15433] netlink: 'syz.2.2393': attribute type 4 has an invalid length. [ 948.888137][T15434] netlink: 'syz.2.2393': attribute type 4 has an invalid length. [ 950.097450][T15438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.124822][T15438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.498613][T15441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.509966][T15441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.584294][T12135] bond0 (unregistering): Released all slaves [ 950.597569][T15438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2394'. [ 950.768632][T15443] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2395'. [ 950.783240][T15443] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2395'. [ 950.793074][T15443] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2395'. [ 951.141974][T12135] bond1 (unregistering): Released all slaves [ 951.327779][T12135] bond2 (unregistering): Released all slaves [ 951.556858][T15450] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2396'. [ 951.945510][T10748] usb 1-1: USB disconnect, device number 95 [ 952.233040][T15460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2397'. [ 952.484480][T15467] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 952.560800][T10748] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 952.745798][T10748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.757224][T10748] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 952.908804][T10748] usb 6-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 952.990253][T10748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.130066][T10748] usb 6-1: config 0 descriptor?? [ 953.621903][T12135] hsr_slave_0: left promiscuous mode [ 953.649391][T12135] hsr_slave_1: left promiscuous mode [ 953.804794][T15463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.826319][T12135] pimreg (unregistering): left allmulticast mode [ 953.863767][T15463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.031401][T10748] usbhid 6-1:0.0: can't add hid device: -71 [ 954.037681][T10748] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 954.151211][T10748] usb 6-1: USB disconnect, device number 6 [ 954.248855][T15491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.307634][T15491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.480971][ T850] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 954.852580][T15501] loop6: detected capacity change from 0 to 524287999 [ 955.170998][ T850] usb 4-1: device descriptor read/64, error -71 [ 955.422235][ T850] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 955.550913][ T850] usb 4-1: device descriptor read/64, error -71 [ 955.660969][T10748] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 955.665264][ T850] usb usb4-port1: attempt power cycle [ 956.010963][ T850] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 956.042842][ T850] usb 4-1: device descriptor read/8, error -71 [ 956.131524][T10748] usb 6-1: config 0 has no interfaces? [ 956.141950][T10748] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 956.183299][T10748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.200932][T10748] usb 6-1: Product: syz [ 956.206044][T10748] usb 6-1: Manufacturer: syz [ 956.211379][T10748] usb 6-1: SerialNumber: syz [ 956.257809][T10748] usb 6-1: config 0 descriptor?? [ 956.280940][ T850] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 956.319682][ T850] usb 4-1: device descriptor read/8, error -71 [ 956.485990][ T850] usb usb4-port1: unable to enumerate USB device [ 958.762348][T10747] usb 6-1: USB disconnect, device number 7 [ 958.928396][T15527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2413'. [ 959.928871][T15543] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 961.420382][T15561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2417'. [ 961.574406][T15561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 962.756083][T15574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.765117][T15574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.941210][T15579] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2419'. [ 964.858893][T15602] netlink: 'syz.0.2421': attribute type 4 has an invalid length. [ 965.059725][T15604] netlink: 'syz.0.2421': attribute type 4 has an invalid length. [ 965.907424][T15624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2422'. [ 966.316794][T15636] fuse: Unknown parameter '0x0000000000000003' [ 966.807322][T15644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2428'. [ 967.030778][T10746] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 967.193238][T10746] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 967.193260][T10746] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 967.194415][T10746] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 967.194484][T10746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 967.194500][T10746] usb 3-1: SerialNumber: syz [ 967.412432][T10746] usb 3-1: 0:2 : does not exist [ 967.412626][T10746] usb 3-1: unit 255 not found! [ 967.468814][T10746] usb 3-1: USB disconnect, device number 93 [ 967.670374][T14977] udevd[14977]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 968.098727][T15656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.169474][T15656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.465479][T15669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 968.578284][T15670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2433'. [ 969.183839][T15679] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 970.135088][ T3564] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 970.852699][T15691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2439'. [ 970.853021][ T3564] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 971.415780][ T3564] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 971.973440][ T3564] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 972.664421][T15718] FAULT_INJECTION: forcing a failure. [ 972.664421][T15718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.664458][T15718] CPU: 1 UID: 0 PID: 15718 Comm: syz.2.2448 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 972.664490][T15718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 972.664506][T15718] Call Trace: [ 972.664515][T15718] [ 972.664525][T15718] dump_stack_lvl+0x189/0x250 [ 972.664555][T15718] ? __pfx____ratelimit+0x10/0x10 [ 972.664583][T15718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 972.664609][T15718] ? __pfx__printk+0x10/0x10 [ 972.664637][T15718] ? __might_fault+0xb0/0x130 [ 972.664677][T15718] should_fail_ex+0x414/0x560 [ 972.664709][T15718] _copy_from_user+0x2d/0xb0 [ 972.664734][T15718] ___sys_sendmsg+0x158/0x2a0 [ 972.664771][T15718] ? __pfx____sys_sendmsg+0x10/0x10 [ 972.664825][T15718] ? __fget_files+0x2a/0x420 [ 972.664841][T15718] ? __fget_files+0x3a0/0x420 [ 972.664868][T15718] __x64_sys_sendmsg+0x19b/0x260 [ 972.664892][T15718] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 972.664921][T15718] ? __pfx_ksys_write+0x10/0x10 [ 972.664944][T15718] ? rcu_is_watching+0x15/0xb0 [ 972.664969][T15718] ? do_syscall_64+0xbe/0x3b0 [ 972.665000][T15718] do_syscall_64+0xfa/0x3b0 [ 972.665026][T15718] ? lockdep_hardirqs_on+0x9c/0x150 [ 972.665052][T15718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.665071][T15718] ? clear_bhb_loop+0x60/0xb0 [ 972.665094][T15718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.665113][T15718] RIP: 0033:0x7f715af8ebe9 [ 972.665131][T15718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 972.665148][T15718] RSP: 002b:00007f715be3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 972.665168][T15718] RAX: ffffffffffffffda RBX: 00007f715b1b5fa0 RCX: 00007f715af8ebe9 [ 972.665182][T15718] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 972.665195][T15718] RBP: 00007f715be3b090 R08: 0000000000000000 R09: 0000000000000000 [ 972.665207][T15718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.665218][T15718] R13: 00007f715b1b6038 R14: 00007f715b1b5fa0 R15: 00007f715b2dfa28 [ 972.665248][T15718] [ 972.752756][ T3564] dummy0: left allmulticast mode [ 972.752997][ T3564] dummy0: left promiscuous mode [ 972.754245][ T3564] bridge0: port 3(dummy0) entered disabled state [ 972.789707][ T3564] bridge_slave_1: left allmulticast mode [ 972.789771][ T3564] bridge_slave_1: left promiscuous mode [ 972.790039][ T3564] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.798601][T15721] netlink: 'syz.1.2449': attribute type 4 has an invalid length. [ 972.816697][ T3564] bridge_slave_0: left allmulticast mode [ 972.872940][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 972.881508][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 972.889732][T15723] netlink: 'syz.1.2449': attribute type 4 has an invalid length. [ 972.897202][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 973.091883][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 973.092607][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 973.303393][ T3564] bridge_slave_0: left promiscuous mode [ 973.331611][ T3564] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.481897][T15728] binder: 15727:15728 ioctl c0405610 200000000040 returned -22 [ 973.741967][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2451'. [ 973.934421][T15735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 974.623648][T15743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2452'. [ 974.708231][T15744] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 974.821108][ T850] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 974.861714][ T3564] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 974.971636][ T850] usb 3-1: device descriptor read/64, error -71 [ 975.147641][ T5869] Bluetooth: hci4: command tx timeout [ 975.253223][ T850] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 975.411241][ T850] usb 3-1: device descriptor read/64, error -71 [ 975.587515][ T850] usb usb3-port1: attempt power cycle [ 975.648483][ T3564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.707905][ T3564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.759086][ T3564] bond0 (unregistering): Released all slaves [ 975.902517][ T3564] bond1 (unregistering): Released all slaves [ 975.941025][ T850] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 975.995262][ T850] usb 3-1: device descriptor read/8, error -71 [ 976.204675][ T3564] : left promiscuous mode [ 976.285193][ T850] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 976.351387][ T850] usb 3-1: device descriptor read/8, error -71 [ 976.433759][ T3564] tipc: Left network mode [ 976.438353][T15751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2455'. [ 976.522038][ T850] usb usb3-port1: unable to enumerate USB device [ 977.221181][ T5869] Bluetooth: hci4: command tx timeout [ 977.253162][T15724] chnl_net:caif_netlink_parms(): no params data found [ 977.959960][T15786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 977.990637][T10746] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 978.164120][T10746] usb 1-1: config 0 has an invalid descriptor of length 239, skipping remainder of the config [ 978.164222][T10746] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 978.164261][T10746] usb 1-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 978.164284][T10746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.178853][T10746] usb 1-1: config 0 descriptor?? [ 978.452882][T10746] usb 1-1: string descriptor 0 read error: -71 [ 978.472781][T10746] usb 1-1: USB disconnect, device number 96 [ 978.919553][T15797] binder: 15796:15797 ioctl c0405610 200000000040 returned -22 [ 978.983181][T15797] binder: BINDER_SET_CONTEXT_MGR already set [ 979.022531][T15797] binder: 15796:15797 ioctl 4018620d 2000000002c0 returned -16 [ 979.104585][T15724] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.152501][T15724] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.210861][T15724] bridge_slave_0: entered allmulticast mode [ 979.221976][T15724] bridge_slave_0: entered promiscuous mode [ 979.300995][ T5869] Bluetooth: hci4: command tx timeout [ 979.600918][ T3564] hsr_slave_0: left promiscuous mode [ 979.637485][ T3564] hsr_slave_1: left promiscuous mode [ 979.650371][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.692603][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.291439][ T850] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 980.329663][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2463'. [ 980.457233][T15813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 980.493331][ T850] usb 6-1: Using ep0 maxpacket: 16 [ 980.698466][ T3564] team0 (unregistering): Port device batadv10 removed [ 980.769294][ T3564] team0 (unregistering): Port device batadv9 removed [ 980.829705][ T3564] team0 (unregistering): Port device batadv8 removed [ 981.000261][ T3564] team0 (unregistering): Port device batadv7 removed [ 981.074297][ T3564] team0 (unregistering): Port device batadv6 removed [ 981.176955][ T3564] team0 (unregistering): Port device batadv5 removed [ 981.215295][ T3564] team0 (unregistering): Port device batadv4 removed [ 981.367740][ T3564] team0 (unregistering): Port device batadv3 removed [ 981.391646][ T5869] Bluetooth: hci4: command tx timeout [ 983.049134][ T850] usb 6-1: unable to get BOS descriptor or descriptor too short [ 983.064563][ T850] usb 6-1: no configurations [ 983.069255][ T850] usb 6-1: can't read configurations, error -22 [ 983.719489][ T3564] team0 (unregistering): Port device team_slave_1 removed [ 983.790996][ T850] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 983.893275][ T3564] team0 (unregistering): Port device team_slave_0 removed [ 983.982153][ T850] usb 6-1: Using ep0 maxpacket: 32 [ 983.993308][ T850] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 984.012189][ T850] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 984.041260][ T850] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 984.062621][ T850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 984.100101][ T850] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 984.140945][ T850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 984.170661][ T850] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 984.203077][ T850] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 984.233162][ T850] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 984.251522][T15830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2469'. [ 984.261763][ T850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.283349][ T850] usb 6-1: config 0 descriptor?? [ 984.290456][T15828] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 984.306034][ T850] usblp0: Disabling reads from problematic bidirectional printer [ 984.510445][T15834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.524322][T15834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.588827][ T850] usblp 6-1:0.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 984.648350][ T850] usb 6-1: USB disconnect, device number 9 [ 984.689602][ T850] usblp0: removed [ 985.240306][T15724] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.249239][T15724] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.257521][T15724] bridge_slave_1: entered allmulticast mode [ 985.265874][T15724] bridge_slave_1: entered promiscuous mode [ 985.338765][T15724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.358336][T15724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.608300][T15724] team0: Port device team_slave_0 added [ 985.616026][T15847] syz_tun: entered allmulticast mode [ 985.660041][T15724] team0: Port device team_slave_1 added [ 986.154848][T15724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.162167][T10747] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 986.247373][T15724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.427183][T10747] usb 1-1: Using ep0 maxpacket: 8 [ 986.472187][T15860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 986.659515][T10747] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 986.677048][T15724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.688633][T10747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.770689][T10747] usb 1-1: Product: syz [ 986.775446][T10747] usb 1-1: Manufacturer: syz [ 986.780171][T10747] usb 1-1: SerialNumber: syz [ 986.814572][T10747] usb 1-1: config 0 descriptor?? [ 986.911307][T15724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.918359][T15724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.052076][T10747] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 987.072088][T15724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.234598][T15724] hsr_slave_0: entered promiscuous mode [ 987.249572][T15724] hsr_slave_1: entered promiscuous mode [ 988.383091][ T3564] IPVS: stop unused estimator thread 0... [ 988.906209][T10747] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 989.209470][ T5941] usb 1-1: USB disconnect, device number 97 [ 989.303255][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 989.460986][T15883] binder: 15882:15883 ioctl c0405610 200000000040 returned -22 [ 989.596413][T15724] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 989.722781][T15724] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 989.791401][T15724] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 989.824927][T15724] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 989.920810][ T5941] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 990.131088][ T5941] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 990.406734][ T5941] usb 6-1: config 0 interface 0 has no altsetting 0 [ 990.437336][ T5941] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 990.456616][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 990.480419][ T5941] usb 6-1: Product: syz [ 990.512431][ T5941] usb 6-1: Manufacturer: syz [ 990.531623][ T5941] usb 6-1: SerialNumber: syz [ 990.654022][ T5941] usb 6-1: config 0 descriptor?? [ 990.719398][T15724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.821000][ T5941] usb 6-1: selecting invalid altsetting 0 [ 991.068765][T15724] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.225116][T15618] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.232315][T15618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.362075][T12153] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.369271][T12153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.665339][T15922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2483'. [ 992.194876][T15724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 992.205777][T14322] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 992.492656][T14322] usb 1-1: Using ep0 maxpacket: 32 [ 992.505111][T14322] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 992.513910][T14322] usb 1-1: config 0 has no interface number 0 [ 992.520079][T14322] usb 1-1: config 0 interface 184 has no altsetting 0 [ 992.572757][T14322] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 992.582279][T14322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.590390][T14322] usb 1-1: Product: syz [ 992.595365][T14322] usb 1-1: Manufacturer: syz [ 992.668237][T14322] usb 1-1: SerialNumber: syz [ 992.786826][T15724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.855396][T14322] usb 1-1: config 0 descriptor?? [ 992.931227][T14322] smsc75xx v1.0.0 [ 992.935592][T14322] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 992.956226][T14322] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 992.983932][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.990289][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.418240][T15928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.589365][T15928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 993.739026][T15724] veth0_vlan: entered promiscuous mode [ 993.848898][T15724] veth1_vlan: entered promiscuous mode [ 994.076593][T15724] veth0_macvtap: entered promiscuous mode [ 994.127933][T15724] veth1_macvtap: entered promiscuous mode [ 994.575043][T15890] snd-usb-audio 6-1:0.0: Runtime PM usage count underflow! [ 994.600887][T15724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 994.631241][T10746] usb 6-1: USB disconnect, device number 10 [ 994.688071][T15724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 994.691204][T10747] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 994.858055][T12138] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.901001][T10747] usb 3-1: Using ep0 maxpacket: 16 [ 995.062125][T12138] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.064347][T10747] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 995.139021][T12138] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.193202][T10747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 995.242889][T12138] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.289156][T10747] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 995.329229][T10747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.383707][T10747] usb 3-1: Product: syz [ 995.388024][T10747] usb 3-1: Manufacturer: syz [ 995.426075][T10747] usb 3-1: SerialNumber: syz [ 995.470064][T10747] usb 3-1: config 0 descriptor?? [ 995.505443][T10747] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 995.593288][T10747] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 995.594864][ T5864] usb 1-1: USB disconnect, device number 98 [ 995.994101][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.045949][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.063870][T15956] binder: 15954:15956 ioctl c0405610 200000000040 returned -22 [ 996.147251][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.161998][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.128843][T15984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.138446][T15984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.156540][T15984] loop4: detected capacity change from 0 to 2560 [ 997.164064][T15984] buffer_io_error: 11 callbacks suppressed [ 997.164092][T15984] Buffer I/O error on dev loop4, logical block 0, async page read [ 997.178295][T15984] Buffer I/O error on dev loop4, logical block 0, async page read [ 997.186378][T15984] Buffer I/O error on dev loop4, logical block 0, async page read [ 997.194649][T15984] Buffer I/O error on dev loop4, logical block 0, async page read [ 997.202996][T15984] Buffer I/O error on dev loop4, logical block 0, async page read [ 997.231531][T10747] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 997.238331][T10747] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 997.247188][T10747] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 997.281154][T15984] Buffer I/O error on dev loop4, logical block 0, async page read [ 997.342312][T15984] Buffer I/O error on dev loop4, logical block 0, async page read [ 997.350721][T15984] Buffer I/O error on dev loop4, logical block 0, async page read [ 997.390775][T10747] em28xx 3-1:0.0: No AC97 audio processor [ 997.398079][T15984] ldm_validate_partition_table(): Disk read failed. [ 997.469830][T15984] Buffer I/O error on dev loop4, logical block 0, async page read [ 997.490750][T10747] usb 3-1: USB disconnect, device number 98 [ 997.508410][T10747] em28xx 3-1:0.0: Disconnecting em28xx [ 997.559671][T10747] em28xx 3-1:0.0: Freeing device [ 997.619178][T15984] Buffer I/O error on dev loop4, logical block 0, async page read [ 997.873828][T15984] Dev loop4: unable to read RDB block 0 [ 997.881199][T15984] loop4: unable to read partition table [ 997.887570][T15984] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 998.215833][T15999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 999.009018][T16007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 999.560750][ T5941] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 999.994620][ T5941] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1000.069477][ T5941] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1000.138410][ T5941] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1000.218789][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.332444][T16008] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1000.454482][ T5941] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1000.724817][T16008] fuse: Unknown parameter 'rootmod' [ 1001.146030][T16024] netlink: 'syz.0.2503': attribute type 4 has an invalid length. [ 1001.210992][T16025] netlink: 'syz.0.2503': attribute type 4 has an invalid length. [ 1002.340916][T14322] usb 7-1: USB disconnect, device number 2 [ 1002.496012][T16040] binder: 16039:16040 ioctl c0405610 200000000040 returned -22 [ 1002.760460][T16047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1002.910006][T16047] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2507'. [ 1003.100910][T16053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.144828][T16054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.186656][T16053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.295835][T16049] syz.0.2507 (16049): drop_caches: 2 [ 1003.349201][T16054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.404304][T16053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.461768][T16053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.151114][ T5977] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1004.333146][ T5977] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1004.350367][ T30] audit: type=1326 audit(1755293485.794:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16070 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5938ebe9 code=0x7ffc0000 [ 1004.380710][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.392926][T14322] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1004.428533][ T5977] usb 3-1: Product: syz [ 1004.459334][ T5977] usb 3-1: Manufacturer: syz [ 1004.464484][ T30] audit: type=1326 audit(1755293485.824:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16070 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5938ebe9 code=0x7ffc0000 [ 1004.607816][ T5977] usb 3-1: SerialNumber: syz [ 1004.686143][T16077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1004.726400][T14322] usb 7-1: Using ep0 maxpacket: 8 [ 1004.758355][T14322] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1004.766949][T14322] usb 7-1: config 179 has no interface number 0 [ 1004.795991][ T5977] usb 3-1: config 0 descriptor?? [ 1004.800734][T14322] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1004.847291][ T30] audit: type=1326 audit(1755293485.864:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16070 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e5938ebe9 code=0x7ffc0000 [ 1005.020469][T14322] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1005.027276][ T30] audit: type=1326 audit(1755293485.864:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16070 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5938ebe9 code=0x7ffc0000 [ 1005.064810][ T5977] usb 3-1: USB disconnect, device number 99 [ 1005.200339][ T30] audit: type=1326 audit(1755293485.864:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16070 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5938ebe9 code=0x7ffc0000 [ 1005.231926][T14322] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1005.265610][T16060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2510'. [ 1005.323625][T14322] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1005.380625][ T30] audit: type=1326 audit(1755293485.864:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16070 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e5938ebe9 code=0x7ffc0000 [ 1005.400763][T14322] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1005.465639][T14322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.500653][ T30] audit: type=1326 audit(1755293485.864:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16070 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5938ebe9 code=0x7ffc0000 [ 1005.543200][T16065] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1005.673554][ T30] audit: type=1326 audit(1755293485.864:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16070 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5938ebe9 code=0x7ffc0000 [ 1005.791356][ T30] audit: type=1326 audit(1755293485.864:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16070 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e5938ebe9 code=0x7ffc0000 [ 1005.816038][ T30] audit: type=1326 audit(1755293485.864:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16070 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5938ebe9 code=0x7ffc0000 [ 1005.848712][T16065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.869360][T16065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.972382][T10746] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input151 [ 1006.175165][T10746] usb 7-1: USB disconnect, device number 3 [ 1006.175263][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1006.189407][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1006.573145][T16089] netlink: 'syz.0.2516': attribute type 4 has an invalid length. [ 1006.690989][T16089] netlink: 'syz.0.2516': attribute type 4 has an invalid length. [ 1007.360947][ T5941] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1007.620699][ T5941] usb 7-1: Using ep0 maxpacket: 16 [ 1007.989891][T16108] binder: 16105:16108 ioctl c0405610 200000000040 returned -22 [ 1008.219557][T16098] loop4: detected capacity change from 0 to 2560 [ 1008.222802][T16098] buffer_io_error: 11 callbacks suppressed [ 1008.222819][T16098] Buffer I/O error on dev loop4, logical block 0, async page read [ 1008.223153][T16098] Buffer I/O error on dev loop4, logical block 0, async page read [ 1008.223388][T16098] Buffer I/O error on dev loop4, logical block 0, async page read [ 1008.223710][T16098] Buffer I/O error on dev loop4, logical block 0, async page read [ 1008.224038][T16098] Buffer I/O error on dev loop4, logical block 0, async page read [ 1008.224445][T16098] Buffer I/O error on dev loop4, logical block 0, async page read [ 1008.224679][T16098] Buffer I/O error on dev loop4, logical block 0, async page read [ 1008.224982][T16098] Buffer I/O error on dev loop4, logical block 0, async page read [ 1008.225150][T16098] ldm_validate_partition_table(): Disk read failed. [ 1008.225197][T16098] Buffer I/O error on dev loop4, logical block 0, async page read [ 1008.225553][T16098] Buffer I/O error on dev loop4, logical block 0, async page read [ 1008.226162][T16098] Dev loop4: unable to read RDB block 0 [ 1008.227583][T16098] loop4: unable to read partition table [ 1008.228309][T16098] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 1009.250989][ T5864] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1009.767264][ T5864] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1009.767298][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.767319][ T5864] usb 3-1: Product: syz [ 1009.767360][ T5864] usb 3-1: Manufacturer: syz [ 1009.767377][ T5864] usb 3-1: SerialNumber: syz [ 1009.782600][ T5864] usb 3-1: config 0 descriptor?? [ 1010.182635][T16131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.432882][T16131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.443956][T16131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.444478][T16131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.772274][ T9] usb 3-1: USB disconnect, device number 100 [ 1011.522043][ T5941] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1011.529884][ T5941] usb 7-1: no configurations [ 1011.629362][ T5941] usb 7-1: can't read configurations, error -22 [ 1011.672311][T16148] FAULT_INJECTION: forcing a failure. [ 1011.672311][T16148] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.771949][T16148] CPU: 0 UID: 0 PID: 16148 Comm: syz.2.2528 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1011.771993][T16148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1011.772005][T16148] Call Trace: [ 1011.772014][T16148] [ 1011.772024][T16148] dump_stack_lvl+0x189/0x250 [ 1011.772053][T16148] ? __pfx____ratelimit+0x10/0x10 [ 1011.772082][T16148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1011.772106][T16148] ? __pfx__printk+0x10/0x10 [ 1011.772132][T16148] ? nfnetlink_rcv+0x26a/0x2520 [ 1011.772158][T16148] ? ____sys_sendmsg+0x505/0x830 [ 1011.772177][T16148] ? __x64_sys_sendmsg+0x19b/0x260 [ 1011.772209][T16148] should_fail_ex+0x414/0x560 [ 1011.772242][T16148] should_failslab+0xa8/0x100 [ 1011.772275][T16148] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1011.772302][T16148] ? skb_clone+0x212/0x3a0 [ 1011.772329][T16148] skb_clone+0x212/0x3a0 [ 1011.772355][T16148] __netlink_deliver_tap+0x404/0x850 [ 1011.772398][T16148] ? netlink_deliver_tap+0x2e/0x1b0 [ 1011.772429][T16148] netlink_deliver_tap+0x19c/0x1b0 [ 1011.772460][T16148] netlink_sendskb+0x68/0x140 [ 1011.772501][T16148] netlink_unicast+0x397/0x9e0 [ 1011.772526][T16148] ? __asan_memcpy+0x40/0x70 [ 1011.772558][T16148] ? __pfx_netlink_unicast+0x10/0x10 [ 1011.772596][T16148] netlink_rcv_skb+0x28c/0x470 [ 1011.772626][T16148] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1011.772655][T16148] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1011.772697][T16148] ? bpf_lsm_capable+0x9/0x20 [ 1011.772723][T16148] ? security_capable+0x7e/0x2e0 [ 1011.772761][T16148] nfnetlink_rcv+0x26a/0x2520 [ 1011.772791][T16148] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1011.772825][T16148] ? __dev_queue_xmit+0x27b/0x3b50 [ 1011.772862][T16148] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1011.772888][T16148] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1011.772926][T16148] ? ref_tracker_free+0x63a/0x7d0 [ 1011.772955][T16148] ? __asan_memcpy+0x40/0x70 [ 1011.772977][T16148] ? __pfx_ref_tracker_free+0x10/0x10 [ 1011.773004][T16148] ? __skb_clone+0x63/0x7a0 [ 1011.773029][T16148] ? __skb_clone+0x483/0x7a0 [ 1011.773057][T16148] ? skb_clone+0x246/0x3a0 [ 1011.773082][T16148] ? __netlink_deliver_tap+0x807/0x850 [ 1011.773111][T16148] ? netlink_deliver_tap+0x2e/0x1b0 [ 1011.773146][T16148] ? netlink_deliver_tap+0x2e/0x1b0 [ 1011.773182][T16148] netlink_unicast+0x82f/0x9e0 [ 1011.773209][T16148] ? __pfx_netlink_unicast+0x10/0x10 [ 1011.773231][T16148] ? netlink_sendmsg+0x642/0xb30 [ 1011.773260][T16148] ? skb_put+0x11b/0x210 [ 1011.773282][T16148] netlink_sendmsg+0x805/0xb30 [ 1011.773322][T16148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1011.773354][T16148] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1011.773383][T16148] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1011.773398][T16148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1011.773422][T16148] __sock_sendmsg+0x21c/0x270 [ 1011.773454][T16148] ____sys_sendmsg+0x505/0x830 [ 1011.773488][T16148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1011.773519][T16148] ? import_iovec+0x74/0xa0 [ 1011.773546][T16148] ___sys_sendmsg+0x21f/0x2a0 [ 1011.773569][T16148] ? __pfx____sys_sendmsg+0x10/0x10 [ 1011.773630][T16148] ? __fget_files+0x2a/0x420 [ 1011.773648][T16148] ? __fget_files+0x3a0/0x420 [ 1011.773678][T16148] __x64_sys_sendmsg+0x19b/0x260 [ 1011.773703][T16148] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1011.773734][T16148] ? __pfx_ksys_write+0x10/0x10 [ 1011.773758][T16148] ? rcu_is_watching+0x15/0xb0 [ 1011.773777][T16148] ? do_syscall_64+0xbe/0x3b0 [ 1011.773802][T16148] do_syscall_64+0xfa/0x3b0 [ 1011.773828][T16148] ? lockdep_hardirqs_on+0x9c/0x150 [ 1011.773855][T16148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.773876][T16148] ? clear_bhb_loop+0x60/0xb0 [ 1011.773901][T16148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.773919][T16148] RIP: 0033:0x7f715af8ebe9 [ 1011.773937][T16148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.773953][T16148] RSP: 002b:00007f715be3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1011.773969][T16148] RAX: ffffffffffffffda RBX: 00007f715b1b5fa0 RCX: 00007f715af8ebe9 [ 1011.773979][T16148] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1011.773989][T16148] RBP: 00007f715be3b090 R08: 0000000000000000 R09: 0000000000000000 [ 1011.773999][T16148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1011.774014][T16148] R13: 00007f715b1b6038 R14: 00007f715b1b5fa0 R15: 00007f715b2dfa28 [ 1011.774047][T16148] [ 1012.375418][T16154] netlink: set zone limit has 4 unknown bytes [ 1012.817228][T16163] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1012.904724][T16163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1013.250048][T16170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1013.280470][T16166] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2531'. [ 1013.289542][T16163] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1013.574481][T16163] team0: Port device batadv1 added [ 1013.904768][T16177] binder: 16176:16177 ioctl c0405610 200000000040 returned -22 [ 1014.049835][T16177] binder: BINDER_SET_CONTEXT_MGR already set [ 1014.058735][T16177] binder: 16176:16177 ioctl 4018620d 2000000002c0 returned -16 [ 1014.233703][T16188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2538'. [ 1014.477206][T16192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2540'. [ 1015.852182][ T5941] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1015.962681][T16216] FAULT_INJECTION: forcing a failure. [ 1015.962681][T16216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.048393][T16216] CPU: 1 UID: 0 PID: 16216 Comm: syz.5.2544 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1016.048424][T16216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1016.048435][T16216] Call Trace: [ 1016.048442][T16216] [ 1016.048448][T16216] dump_stack_lvl+0x189/0x250 [ 1016.048471][T16216] ? __pfx____ratelimit+0x10/0x10 [ 1016.048492][T16216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1016.048510][T16216] ? __pfx__printk+0x10/0x10 [ 1016.048540][T16216] should_fail_ex+0x414/0x560 [ 1016.048564][T16216] _copy_to_user+0x31/0xb0 [ 1016.048584][T16216] simple_read_from_buffer+0xe1/0x170 [ 1016.048610][T16216] proc_fail_nth_read+0x1b3/0x220 [ 1016.048630][T16216] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1016.048649][T16216] ? rw_verify_area+0x2a6/0x4d0 [ 1016.048668][T16216] ? __lock_acquire+0xab9/0xd20 [ 1016.048688][T16216] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1016.048706][T16216] vfs_read+0x1fd/0xa30 [ 1016.048725][T16216] ? fdget_pos+0x247/0x320 [ 1016.048741][T16216] ? __pfx___mutex_lock+0x10/0x10 [ 1016.048763][T16216] ? __pfx_vfs_read+0x10/0x10 [ 1016.048784][T16216] ? __fget_files+0x2a/0x420 [ 1016.048800][T16216] ? __fget_files+0x3a0/0x420 [ 1016.048812][T16216] ? __fget_files+0x2a/0x420 [ 1016.048832][T16216] ksys_read+0x145/0x250 [ 1016.048854][T16216] ? __pfx_ksys_read+0x10/0x10 [ 1016.048871][T16216] ? rcu_is_watching+0x15/0xb0 [ 1016.048891][T16216] ? do_syscall_64+0xbe/0x3b0 [ 1016.048915][T16216] do_syscall_64+0xfa/0x3b0 [ 1016.048935][T16216] ? lockdep_hardirqs_on+0x9c/0x150 [ 1016.048955][T16216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.048982][T16216] ? clear_bhb_loop+0x60/0xb0 [ 1016.049000][T16216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.049014][T16216] RIP: 0033:0x7f9e5938d5fc [ 1016.049028][T16216] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1016.049041][T16216] RSP: 002b:00007f9e5a192030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1016.049056][T16216] RAX: ffffffffffffffda RBX: 00007f9e595b5fa0 RCX: 00007f9e5938d5fc [ 1016.049067][T16216] RDX: 000000000000000f RSI: 00007f9e5a1920a0 RDI: 0000000000000004 [ 1016.049076][T16216] RBP: 00007f9e5a192090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.049086][T16216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.049094][T16216] R13: 00007f9e595b6038 R14: 00007f9e595b5fa0 R15: 00007f9e596dfa28 [ 1016.049117][T16216] [ 1016.196825][ T5941] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1017.605185][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1017.668982][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1017.683078][T16233] syz_tun: entered allmulticast mode [ 1017.741597][ T5941] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1017.809603][ T5941] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1017.869312][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.012524][ T5941] usb 7-1: config 0 descriptor?? [ 1018.116086][ T5941] usb 7-1: can't set config #0, error -71 [ 1018.229609][T16243] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 1018.240210][T16243] team0: Port device batadv9 added [ 1018.303092][T16243] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2548'. [ 1018.331148][ T5941] usb 7-1: USB disconnect, device number 6 [ 1018.945491][T16253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2551'. [ 1019.222991][T16255] binder: 16254:16255 ioctl c0405610 200000000040 returned -22 [ 1020.070805][T16270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1021.107844][T16277] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2555'. [ 1021.890621][ T5941] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 1022.041783][ T5941] usb 3-1: device descriptor read/64, error -71 [ 1022.291021][ T5941] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1022.411490][T16293] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1022.500979][ T5941] usb 3-1: device descriptor read/64, error -71 [ 1022.666168][ T5941] usb usb3-port1: attempt power cycle [ 1022.705436][T16304] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1022.933256][T16307] binder: 16306:16307 ioctl c0405610 200000000040 returned -22 [ 1023.014802][T16307] binder: BINDER_SET_CONTEXT_MGR already set [ 1023.025070][T16307] binder: 16306:16307 ioctl 4018620d 2000000002c0 returned -16 [ 1023.108302][T16312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.129734][T16312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.141228][ T5941] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1023.171877][ T5941] usb 3-1: device descriptor read/8, error -71 [ 1023.253416][T16314] netlink: 4276 bytes leftover after parsing attributes in process `syz.5.2567'. [ 1023.412844][ T5941] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1023.461857][ T5941] usb 3-1: device descriptor read/8, error -71 [ 1023.571629][ T5941] usb usb3-port1: unable to enumerate USB device [ 1023.602783][T16316] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2569'. [ 1023.636920][T16316] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2569'. [ 1023.738438][T16316] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2569'. [ 1023.961583][T16324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1024.204946][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'. [ 1024.215010][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2570'. [ 1024.362648][T16330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.443045][T16330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.920781][T10747] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1025.179464][T16345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1025.186648][T14322] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1025.268519][T10747] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1025.293812][T10747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.315888][T10747] usb 1-1: Product: syz [ 1025.328254][T10747] usb 1-1: Manufacturer: syz [ 1025.343754][T10747] usb 1-1: SerialNumber: syz [ 1025.395306][T10747] usb 1-1: config 0 descriptor?? [ 1025.426601][T14322] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1025.436216][T14322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.530734][T14322] usb 3-1: config 0 descriptor?? [ 1025.569658][T14322] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1025.968568][T14322] gspca_cpia1: usb_control_msg 03, error -32 [ 1025.987028][T14322] gspca_cpia1: usb_control_msg 03, error -71 [ 1026.091170][T14322] gspca_cpia1: usb_control_msg 01, error -71 [ 1026.097339][T14322] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1026.115783][T14322] usb 3-1: USB disconnect, device number 105 [ 1027.594509][T16363] vivid-003: ================= START STATUS ================= [ 1027.624248][T16363] vivid-003: ================== END STATUS ================== [ 1027.743598][T14322] usb 1-1: USB disconnect, device number 99 [ 1027.885867][T16368] binder: 16366:16368 ioctl c0405610 200000000040 returned -22 [ 1028.219953][T16375] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2584'. [ 1028.233498][T16375] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2584'. [ 1028.243665][T16375] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2584'. [ 1028.445087][T16388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.814526][T16388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.859427][T16387] loop4: detected capacity change from 0 to 2560 [ 1028.870302][T16387] buffer_io_error: 11 callbacks suppressed [ 1028.870323][T16387] Buffer I/O error on dev loop4, logical block 0, async page read [ 1028.884706][T16387] Buffer I/O error on dev loop4, logical block 0, async page read [ 1028.893269][T16387] Buffer I/O error on dev loop4, logical block 0, async page read [ 1028.902071][T16387] Buffer I/O error on dev loop4, logical block 0, async page read [ 1028.911094][T16387] Buffer I/O error on dev loop4, logical block 0, async page read [ 1028.919642][T16387] Buffer I/O error on dev loop4, logical block 0, async page read [ 1028.928054][T16387] Buffer I/O error on dev loop4, logical block 0, async page read [ 1028.936619][T16387] Buffer I/O error on dev loop4, logical block 0, async page read [ 1028.951209][T16387] ldm_validate_partition_table(): Disk read failed. [ 1028.958203][T16387] Buffer I/O error on dev loop4, logical block 0, async page read [ 1028.976753][T16387] Buffer I/O error on dev loop4, logical block 0, async page read [ 1028.985357][T16387] Dev loop4: unable to read RDB block 0 [ 1028.991972][T16387] loop4: unable to read partition table [ 1028.998369][T16387] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 1029.010955][ T9] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 1029.212633][ T9] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1029.279071][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1029.332373][ T9] usb 1-1: New USB device found, idVendor=0eef, idProduct=a001, bcdDevice= 0.40 [ 1029.394180][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.460154][ T9] usb 1-1: Product: syz [ 1029.495511][ T9] usb 1-1: Manufacturer: ⱈ㇚跠㻜늂缾펹髝ࣳ钗莦炑겧掝⥉蔤߰촨먨᪄穸㙕坯㝆⌢댰⑸ଡ଼ [ 1029.694657][ T9] usb 1-1: SerialNumber: syz [ 1029.930969][ T5864] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1030.181398][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 1030.486333][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 1030.521854][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1031.031007][ T9] usb 1-1: USB disconnect, device number 100 [ 1032.034701][T16429] syzkaller1: entered promiscuous mode [ 1032.040276][T16429] syzkaller1: entered allmulticast mode [ 1032.446556][T16431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1032.909675][ T5235] ldm_validate_partition_table(): Disk read failed. [ 1033.033777][ T5235] Dev loop4: unable to read RDB block 0 [ 1033.071182][ T5235] loop4: unable to read partition table [ 1034.474260][T16442] netlink: 'syz.1.2598': attribute type 4 has an invalid length. [ 1034.545569][ T5864] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1034.603931][T16442] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2598'. [ 1034.721894][ T5864] usb 3-1: no configurations [ 1034.818498][ T5864] usb 3-1: can't read configurations, error -22 [ 1034.959519][T16442] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1035.151506][T16448] binder: 16446:16448 ioctl c0405610 200000000040 returned -22 [ 1035.207264][T16448] FAULT_INJECTION: forcing a failure. [ 1035.207264][T16448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1035.301632][T16448] CPU: 1 UID: 0 PID: 16448 Comm: syz.5.2600 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1035.301664][T16448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1035.301677][T16448] Call Trace: [ 1035.301686][T16448] [ 1035.301695][T16448] dump_stack_lvl+0x189/0x250 [ 1035.301729][T16448] ? __pfx____ratelimit+0x10/0x10 [ 1035.301757][T16448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1035.301789][T16448] ? __pfx__printk+0x10/0x10 [ 1035.301817][T16448] ? __might_fault+0xb0/0x130 [ 1035.301857][T16448] should_fail_ex+0x414/0x560 [ 1035.301890][T16448] _copy_from_user+0x2d/0xb0 [ 1035.301915][T16448] userio_char_write+0xc0/0x480 [ 1035.301942][T16448] ? __pfx_userio_char_write+0x10/0x10 [ 1035.301964][T16448] ? bpf_struct_ops_map_update_elem+0x15a0/0x1630 [ 1035.301988][T16448] ? security_file_permission+0x75/0x290 [ 1035.302017][T16448] ? rw_verify_area+0x255/0x4d0 [ 1035.302042][T16448] ? __lock_acquire+0xab9/0xd20 [ 1035.302070][T16448] ? __pfx_userio_char_write+0x10/0x10 [ 1035.302094][T16448] vfs_write+0x27e/0xb30 [ 1035.302130][T16448] ? __pfx_vfs_write+0x10/0x10 [ 1035.302159][T16448] ? __fget_files+0x2a/0x420 [ 1035.302180][T16448] ? __fget_files+0x2a/0x420 [ 1035.302197][T16448] ? __fget_files+0x3a0/0x420 [ 1035.302213][T16448] ? __fget_files+0x2a/0x420 [ 1035.302241][T16448] ksys_write+0x145/0x250 [ 1035.302270][T16448] ? __pfx_ksys_write+0x10/0x10 [ 1035.302295][T16448] ? rcu_is_watching+0x15/0xb0 [ 1035.302321][T16448] ? do_syscall_64+0xbe/0x3b0 [ 1035.302355][T16448] do_syscall_64+0xfa/0x3b0 [ 1035.302382][T16448] ? lockdep_hardirqs_on+0x9c/0x150 [ 1035.302409][T16448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.302427][T16448] ? clear_bhb_loop+0x60/0xb0 [ 1035.302452][T16448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.302471][T16448] RIP: 0033:0x7f9e5938ebe9 [ 1035.302490][T16448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1035.302507][T16448] RSP: 002b:00007f9e5a192038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1035.302528][T16448] RAX: ffffffffffffffda RBX: 00007f9e595b5fa0 RCX: 00007f9e5938ebe9 [ 1035.302543][T16448] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000007 [ 1035.302556][T16448] RBP: 00007f9e5a192090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.302568][T16448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1035.302579][T16448] R13: 00007f9e595b6038 R14: 00007f9e595b5fa0 R15: 00007f9e596dfa28 [ 1035.302612][T16448] [ 1035.310137][T16448] binder: BINDER_SET_CONTEXT_MGR already set [ 1035.590792][T16448] binder: 16446:16448 ioctl 4018620d 2000000002c0 returned -16 [ 1036.671500][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2602'. [ 1036.692088][T14322] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1037.010631][ T5864] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1037.043719][T14322] usb 3-1: Using ep0 maxpacket: 8 [ 1037.534518][ T5864] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1037.546273][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.579752][T14322] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1037.588974][T14322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.589686][ T5864] usb 6-1: Product: syz [ 1037.640594][T14322] usb 3-1: Product: syz [ 1037.648901][ T5864] usb 6-1: Manufacturer: syz [ 1037.659143][T14322] usb 3-1: Manufacturer: syz [ 1037.677566][T14322] usb 3-1: SerialNumber: syz [ 1037.698340][T14322] usb 3-1: config 0 descriptor?? [ 1037.720884][ T5864] usb 6-1: SerialNumber: syz [ 1037.751808][ T5864] usb 6-1: config 0 descriptor?? [ 1037.941832][T14322] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1038.003315][ T5864] usb 6-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 1038.070675][ T5864] f81604 6-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 1038.101589][ T5864] f81604 6-1:0.0: probe with driver f81604 failed with error -121 [ 1039.612864][T16475] netlink: 'syz.2.2606': attribute type 1 has an invalid length. [ 1039.854697][T16475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1040.002011][T16516] bond1: (slave batadv6): Opening slave failed [ 1040.034142][T16520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.048403][T16520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.403880][T14322] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1040.415969][T14322] usb 3-1: USB disconnect, device number 108 [ 1041.308706][T15950] usb 6-1: USB disconnect, device number 11 [ 1041.516647][T16533] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2615'. [ 1041.528985][T16531] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1041.935877][T16535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1042.137666][T16540] binder: 16539:16540 ioctl c0405610 200000000040 returned -22 [ 1042.328483][T16540] binder: BINDER_SET_CONTEXT_MGR already set [ 1042.369150][T16540] binder: 16539:16540 ioctl 4018620d 2000000002c0 returned -16 [ 1044.897273][T16587] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2623'. [ 1045.011417][T16587] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2623'. [ 1045.095163][T16587] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2623'. [ 1045.254128][T16591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2624'. [ 1045.600567][T15950] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1045.760735][T15950] usb 3-1: device descriptor read/64, error -71 [ 1046.040832][T15950] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1046.214868][T15950] usb 3-1: device descriptor read/64, error -71 [ 1046.276035][T16613] openvswitch: netlink: Message has 4 unknown bytes. [ 1046.283444][T16613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1046.403299][T16602] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 1046.415413][T16602] team0: Port device batadv10 added [ 1046.430243][T16602] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2627'. [ 1046.443425][T15950] usb usb3-port1: attempt power cycle [ 1046.751450][T16618] FAULT_INJECTION: forcing a failure. [ 1046.751450][T16618] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.791194][T15950] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1046.791328][T16618] CPU: 1 UID: 0 PID: 16618 Comm: syz.5.2629 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1046.791359][T16618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1046.791375][T16618] Call Trace: [ 1046.791386][T16618] [ 1046.791394][T16618] dump_stack_lvl+0x189/0x250 [ 1046.791434][T16618] ? __pfx____ratelimit+0x10/0x10 [ 1046.791462][T16618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1046.791490][T16618] ? __pfx__printk+0x10/0x10 [ 1046.791528][T16618] ? __pfx___might_resched+0x10/0x10 [ 1046.791557][T16618] should_fail_ex+0x414/0x560 [ 1046.791592][T16618] should_failslab+0xa8/0x100 [ 1046.791628][T16618] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1046.791662][T16618] ? __alloc_skb+0x112/0x2d0 [ 1046.791702][T16618] __alloc_skb+0x112/0x2d0 [ 1046.791739][T16618] netlink_sendmsg+0x5c6/0xb30 [ 1046.791784][T16618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1046.791821][T16618] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1046.791859][T16618] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1046.791885][T16618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1046.791920][T16618] __sock_sendmsg+0x21c/0x270 [ 1046.791952][T16618] sock_write_iter+0x258/0x330 [ 1046.791982][T16618] ? __pfx_sock_write_iter+0x10/0x10 [ 1046.792034][T16618] do_iter_readv_writev+0x61c/0x8b0 [ 1046.792076][T16618] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1046.792105][T16618] ? common_file_perm+0x1b5/0x230 [ 1046.792145][T16618] ? bpf_lsm_file_permission+0x9/0x20 [ 1046.792172][T16618] ? security_file_permission+0x75/0x290 [ 1046.792212][T16618] ? rw_verify_area+0x255/0x4d0 [ 1046.792246][T16618] vfs_writev+0x31a/0x960 [ 1046.792274][T16618] ? __lock_acquire+0xab9/0xd20 [ 1046.792309][T16618] ? __pfx_vfs_writev+0x10/0x10 [ 1046.792349][T16618] ? __fget_files+0x2a/0x420 [ 1046.792375][T16618] ? __fget_files+0x3a0/0x420 [ 1046.792393][T16618] ? __fget_files+0x2a/0x420 [ 1046.792423][T16618] do_writev+0x14d/0x2d0 [ 1046.792448][T16618] ? __pfx_do_writev+0x10/0x10 [ 1046.792468][T16618] ? rcu_is_watching+0x15/0xb0 [ 1046.792498][T16618] ? do_syscall_64+0xbe/0x3b0 [ 1046.792535][T16618] do_syscall_64+0xfa/0x3b0 [ 1046.792567][T16618] ? lockdep_hardirqs_on+0x9c/0x150 [ 1046.792596][T16618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.792631][T16618] ? clear_bhb_loop+0x60/0xb0 [ 1046.792657][T16618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.792677][T16618] RIP: 0033:0x7f9e5938ebe9 [ 1046.792698][T16618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.792716][T16618] RSP: 002b:00007f9e5a192038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1046.792742][T16618] RAX: ffffffffffffffda RBX: 00007f9e595b5fa0 RCX: 00007f9e5938ebe9 [ 1046.792758][T16618] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1046.792772][T16618] RBP: 00007f9e5a192090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.792786][T16618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.792800][T16618] R13: 00007f9e595b6038 R14: 00007f9e595b5fa0 R15: 00007f9e596dfa28 [ 1046.792833][T16618] [ 1047.246200][T15950] usb 3-1: device descriptor read/8, error -71 [ 1047.505416][T15950] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1047.552167][T15950] usb 3-1: device descriptor read/8, error -71 [ 1047.593349][T16630] openvswitch: netlink: Message has 20 unknown bytes. [ 1047.678267][T16630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1047.700667][T15950] usb usb3-port1: unable to enumerate USB device [ 1047.731612][T16632] openvswitch: netlink: Message has 4 unknown bytes. [ 1047.738842][T16632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1047.763856][T16632] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1047.774101][T16632] team0: Port device batadv1 added [ 1047.896688][T16630] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1047.905674][T16630] team0: Port device batadv2 added [ 1048.758461][T15950] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1049.063352][T15950] usb 3-1: Using ep0 maxpacket: 16 [ 1049.121032][T15950] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1049.130112][T15950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.203198][T15950] usb 3-1: Product: syz [ 1049.221824][T15950] usb 3-1: Manufacturer: syz [ 1049.261091][T15950] usb 3-1: SerialNumber: syz [ 1049.311127][T15950] usb 3-1: config 0 descriptor?? [ 1049.332633][T15950] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 1049.636095][T16659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.673821][T16659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.382860][ T5977] usb 3-1: USB disconnect, device number 113 [ 1051.272208][T16667] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2640'. [ 1051.433154][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2640'. [ 1051.469921][T16667] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2640'. [ 1051.854219][T16678] tipc: Enabling of bearer rejected, failed to enable media [ 1052.262942][T10747] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1052.470686][T10747] usb 7-1: Using ep0 maxpacket: 8 [ 1052.496480][T10747] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1052.524079][T10747] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.630816][T10747] usb 7-1: Product: syz [ 1052.635245][T10747] usb 7-1: Manufacturer: syz [ 1052.639961][T10747] usb 7-1: SerialNumber: syz [ 1052.716148][T10747] usb 7-1: config 0 descriptor?? [ 1052.750870][T10747] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1052.760875][T14322] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1052.920697][T14322] usb 6-1: device descriptor read/64, error -71 [ 1053.181519][T14322] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1053.478512][T10746] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1053.540722][T14322] usb 6-1: device descriptor read/64, error -71 [ 1053.583466][T16699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.618232][T16699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.644803][T10746] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1053.654365][T14322] usb usb6-port1: attempt power cycle [ 1053.661355][T10746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.676650][T10746] usb 1-1: Product: syz [ 1053.686762][T16699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.696114][T16699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.747922][T16687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.759386][T16687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.904280][T10746] usb 1-1: Manufacturer: syz [ 1053.937159][T10746] usb 1-1: SerialNumber: syz [ 1053.953578][T10746] usb 1-1: config 0 descriptor?? [ 1054.031097][T10747] gspca_sonixj: reg_r err -110 [ 1054.036027][T10747] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 1054.060647][T14322] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1054.081611][T14322] usb 6-1: device descriptor read/8, error -71 [ 1054.184993][T10746] usb 1-1: USB disconnect, device number 101 [ 1054.269913][T14995] udevd[14995]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1054.390642][T14322] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1054.427771][T14322] usb 6-1: device descriptor read/8, error -71 [ 1054.428114][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.516266][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.553172][T14322] usb usb6-port1: unable to enumerate USB device [ 1055.841415][T16719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2652'. [ 1056.211055][T15950] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1056.246292][T14322] usb 7-1: USB disconnect, device number 7 [ 1056.418364][T15950] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1056.453326][T15950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.479544][T15950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.495099][T16734] netlink: 'syz.0.2656': attribute type 4 has an invalid length. [ 1056.538701][T15950] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1056.558503][T16734] netlink: 'syz.0.2656': attribute type 4 has an invalid length. [ 1056.575628][T16736] netlink: 232 bytes leftover after parsing attributes in process `syz.6.2657'. [ 1056.609628][T15950] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1056.631453][T15950] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1056.671613][T15950] usb 3-1: Manufacturer: syz [ 1056.709517][T15950] usb 3-1: config 0 descriptor?? [ 1057.330704][T16738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.351574][T16738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.588416][T16741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2658'. [ 1057.631175][T15950] usbhid 3-1:0.0: can't add hid device: -71 [ 1057.637750][T15950] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1057.681967][T15950] usb 3-1: USB disconnect, device number 114 [ 1058.590332][T15950] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1058.613902][T10746] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1058.820903][T15950] usb 1-1: Using ep0 maxpacket: 16 [ 1058.940687][T10746] usb 7-1: Using ep0 maxpacket: 8 [ 1059.081039][T16747] loop4: detected capacity change from 0 to 2560 [ 1059.109597][T10746] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 1059.117428][T10746] usb 7-1: config 0 has no interfaces? [ 1059.134552][T10746] usb 7-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 1059.144000][T10746] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.160387][T10746] usb 7-1: Product: syz [ 1059.174294][T16747] buffer_io_error: 32 callbacks suppressed [ 1059.174313][T16747] Buffer I/O error on dev loop4, logical block 0, async page read [ 1059.197694][T16747] Buffer I/O error on dev loop4, logical block 0, async page read [ 1059.223159][T10746] usb 7-1: Manufacturer: syz [ 1059.294769][T10746] usb 7-1: SerialNumber: syz [ 1059.325025][T10746] usb 7-1: config 0 descriptor?? [ 1059.360001][T16747] Buffer I/O error on dev loop4, logical block 0, async page read [ 1059.369028][T16747] Buffer I/O error on dev loop4, logical block 0, async page read [ 1059.377739][T16747] Buffer I/O error on dev loop4, logical block 0, async page read [ 1059.431680][T16747] Buffer I/O error on dev loop4, logical block 0, async page read [ 1059.440202][T16747] Buffer I/O error on dev loop4, logical block 0, async page read [ 1059.449050][T16747] Buffer I/O error on dev loop4, logical block 0, async page read [ 1059.457637][T16747] ldm_validate_partition_table(): Disk read failed. [ 1059.529678][T16747] Buffer I/O error on dev loop4, logical block 0, async page read [ 1059.649075][ T5864] usb 7-1: USB disconnect, device number 8 [ 1059.825061][T16747] Buffer I/O error on dev loop4, logical block 0, async page read [ 1059.843130][T16747] Dev loop4: unable to read RDB block 0 [ 1059.851332][T16747] loop4: unable to read partition table [ 1059.857511][T16747] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 1060.158809][T16762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2664'. [ 1060.297357][T16762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2664'. [ 1060.319689][T16762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2664'. [ 1060.741424][T10746] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1060.912145][T10746] usb 7-1: Using ep0 maxpacket: 8 [ 1060.937712][T10746] usb 7-1: config 162 has an invalid interface number: 166 but max is 0 [ 1060.957494][T10746] usb 7-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.013746][T10746] usb 7-1: config 162 has no interface number 0 [ 1061.052798][T10746] usb 7-1: config 162 interface 166 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1061.117408][T10746] usb 7-1: config 162 interface 166 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1061.187118][T16770] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1061.296529][T10746] usb 7-1: config 162 interface 166 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1061.525801][T10746] usb 7-1: config 162 interface 166 has no altsetting 0 [ 1061.582433][T10746] usb 7-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 1061.591905][T10746] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.615777][T10746] usb 7-1: Product: syz [ 1061.642549][T10746] usb 7-1: Manufacturer: syz [ 1061.688851][T10746] usb 7-1: SerialNumber: syz [ 1061.812569][T16772] binder: 16771:16772 ioctl c0405610 200000000040 returned -22 [ 1061.952319][T10746] appledisplay 7-1:162.166: Could not find int-in endpoint [ 1062.002185][T10746] usbhid 7-1:162.166: couldn't find an input interrupt endpoint [ 1062.086901][T10746] usb 7-1: USB disconnect, device number 9 [ 1062.170272][T16776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2667'. [ 1062.213218][ T5235] ldm_validate_partition_table(): Disk read failed. [ 1062.254933][ T5235] Dev loop4: unable to read RDB block 0 [ 1062.262757][ T5235] loop4: unable to read partition table [ 1062.288395][T15950] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1062.306543][T15950] usb 1-1: no configurations [ 1062.330925][T15950] usb 1-1: can't read configurations, error -22 [ 1062.542154][T16783] netlink: 'syz.1.2669': attribute type 4 has an invalid length. [ 1062.579365][T16783] netlink: 'syz.1.2669': attribute type 4 has an invalid length. [ 1062.782404][T16788] FAULT_INJECTION: forcing a failure. [ 1062.782404][T16788] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.111485][T16788] CPU: 0 UID: 0 PID: 16788 Comm: syz.2.2671 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1063.111514][T16788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1063.111526][T16788] Call Trace: [ 1063.111534][T16788] [ 1063.111544][T16788] dump_stack_lvl+0x189/0x250 [ 1063.111572][T16788] ? __pfx____ratelimit+0x10/0x10 [ 1063.111599][T16788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1063.111622][T16788] ? __pfx__printk+0x10/0x10 [ 1063.111651][T16788] ? __lock_acquire+0xab9/0xd20 [ 1063.111689][T16788] should_fail_ex+0x414/0x560 [ 1063.111719][T16788] should_failslab+0xa8/0x100 [ 1063.111749][T16788] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1063.111775][T16788] ? skb_clone+0x212/0x3a0 [ 1063.111806][T16788] skb_clone+0x212/0x3a0 [ 1063.111831][T16788] __netlink_deliver_tap+0x404/0x850 [ 1063.111870][T16788] ? netlink_deliver_tap+0x2e/0x1b0 [ 1063.111900][T16788] netlink_deliver_tap+0x19c/0x1b0 [ 1063.111934][T16788] netlink_unicast+0x7fa/0x9e0 [ 1063.111966][T16788] ? __pfx_netlink_unicast+0x10/0x10 [ 1063.111993][T16788] ? netlink_sendmsg+0x642/0xb30 [ 1063.112018][T16788] ? skb_put+0x11b/0x210 [ 1063.112038][T16788] netlink_sendmsg+0x805/0xb30 [ 1063.112077][T16788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1063.112108][T16788] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1063.112140][T16788] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1063.112161][T16788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1063.112189][T16788] __sock_sendmsg+0x21c/0x270 [ 1063.112217][T16788] sock_write_iter+0x258/0x330 [ 1063.112243][T16788] ? __pfx_sock_write_iter+0x10/0x10 [ 1063.112289][T16788] do_iter_readv_writev+0x61c/0x8b0 [ 1063.112323][T16788] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1063.112348][T16788] ? common_file_perm+0x1b5/0x230 [ 1063.112380][T16788] ? bpf_lsm_file_permission+0x9/0x20 [ 1063.112401][T16788] ? security_file_permission+0x75/0x290 [ 1063.112428][T16788] ? rw_verify_area+0x255/0x4d0 [ 1063.112457][T16788] vfs_writev+0x31a/0x960 [ 1063.112480][T16788] ? __lock_acquire+0xab9/0xd20 [ 1063.112509][T16788] ? __pfx_vfs_writev+0x10/0x10 [ 1063.112543][T16788] ? __fget_files+0x2a/0x420 [ 1063.112564][T16788] ? __fget_files+0x3a0/0x420 [ 1063.112580][T16788] ? __fget_files+0x2a/0x420 [ 1063.112606][T16788] do_writev+0x14d/0x2d0 [ 1063.112627][T16788] ? __pfx_do_writev+0x10/0x10 [ 1063.112644][T16788] ? rcu_is_watching+0x15/0xb0 [ 1063.112668][T16788] ? do_syscall_64+0xbe/0x3b0 [ 1063.112699][T16788] do_syscall_64+0xfa/0x3b0 [ 1063.112724][T16788] ? lockdep_hardirqs_on+0x9c/0x150 [ 1063.112749][T16788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.112769][T16788] ? clear_bhb_loop+0x60/0xb0 [ 1063.112798][T16788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.112816][T16788] RIP: 0033:0x7f715af8ebe9 [ 1063.112835][T16788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1063.112854][T16788] RSP: 002b:00007f715be3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1063.112874][T16788] RAX: ffffffffffffffda RBX: 00007f715b1b5fa0 RCX: 00007f715af8ebe9 [ 1063.112888][T16788] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1063.112899][T16788] RBP: 00007f715be3b090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.112910][T16788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.112922][T16788] R13: 00007f715b1b6038 R14: 00007f715b1b5fa0 R15: 00007f715b2dfa28 [ 1063.112952][T16788] [ 1063.461983][T16793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2672'. [ 1064.015944][T10746] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 1064.227487][T10746] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1064.308276][T10746] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1064.347020][T10746] usb 1-1: New USB device found, idVendor=0eef, idProduct=a001, bcdDevice= 0.40 [ 1064.370624][T10746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.405604][T10746] usb 1-1: Product: syz [ 1064.425032][T10746] usb 1-1: Manufacturer: ⱈ㇚跠㻜늂缾펹髝ࣳ钗莦炑겧掝⥉蔤߰촨먨᪄穸㙕坯㝆⌢댰⑸ଡ଼ [ 1064.455821][T16810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.489020][T10746] usb 1-1: SerialNumber: syz [ 1064.521372][T16810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.575447][T16810] loop4: detected capacity change from 0 to 2560 [ 1064.583032][T16810] buffer_io_error: 27 callbacks suppressed [ 1064.583048][T16810] Buffer I/O error on dev loop4, logical block 0, async page read [ 1064.597022][T16810] Buffer I/O error on dev loop4, logical block 0, async page read [ 1064.606910][T16810] Buffer I/O error on dev loop4, logical block 0, async page read [ 1064.616230][T16810] Buffer I/O error on dev loop4, logical block 0, async page read [ 1064.624353][T16810] Buffer I/O error on dev loop4, logical block 0, async page read [ 1064.901637][T16810] Buffer I/O error on dev loop4, logical block 0, async page read [ 1064.910820][T16810] Buffer I/O error on dev loop4, logical block 0, async page read [ 1064.919763][T16810] Buffer I/O error on dev loop4, logical block 0, async page read [ 1064.928083][T16810] ldm_validate_partition_table(): Disk read failed. [ 1064.942024][T16810] Buffer I/O error on dev loop4, logical block 0, async page read [ 1064.993740][T16810] Buffer I/O error on dev loop4, logical block 0, async page read [ 1065.115483][T16810] Dev loop4: unable to read RDB block 0 [ 1065.122147][T16810] loop4: unable to read partition table [ 1065.128390][T16810] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 1065.272157][T10746] usbhid 1-1:1.0: can't add hid device: -71 [ 1065.278880][T10746] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1065.322524][T10746] usb 1-1: USB disconnect, device number 104 [ 1065.811294][T16828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1066.312766][T16829] netlink: 'syz.0.2681': attribute type 1 has an invalid length. [ 1066.957880][T16836] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2682'. [ 1067.057414][T16838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2683'. [ 1067.489897][ T5235] ldm_validate_partition_table(): Disk read failed. [ 1067.530810][ T5235] Dev loop4: unable to read RDB block 0 [ 1067.558283][ T5235] loop4: unable to read partition table [ 1068.160731][T16852] netlink: 'syz.2.2687': attribute type 4 has an invalid length. [ 1068.192391][T16852] netlink: 'syz.2.2687': attribute type 4 has an invalid length. [ 1068.312413][T10746] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1068.650652][T10746] usb 1-1: Using ep0 maxpacket: 8 [ 1068.681126][T10746] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1068.700173][T10746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.757456][T10746] usb 1-1: Product: syz [ 1068.770658][T10746] usb 1-1: Manufacturer: syz [ 1068.804708][T10746] usb 1-1: SerialNumber: syz [ 1068.887777][T10746] usb 1-1: config 0 descriptor?? [ 1069.021560][T15950] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1069.142923][T10746] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1069.193777][T15950] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1069.220922][T15950] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1069.249049][T15950] usb 6-1: New USB device found, idVendor=0eef, idProduct=a001, bcdDevice= 0.40 [ 1069.277669][T15950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.305345][T15950] usb 6-1: Product: syz [ 1069.315570][T15950] usb 6-1: Manufacturer: ⱈ㇚跠㻜늂缾펹髝ࣳ钗莦炑겧掝⥉蔤߰촨먨᪄穸㙕坯㝆⌢댰⑸ଡ଼ [ 1069.339391][T15950] usb 6-1: SerialNumber: syz [ 1069.536586][T10746] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1070.244689][T15950] usbhid 6-1:1.0: can't add hid device: -71 [ 1070.274731][T15950] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1070.353637][T10746] usb 1-1: USB disconnect, device number 105 [ 1070.381790][T15950] usb 6-1: USB disconnect, device number 16 [ 1071.020651][T10746] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1071.221223][T10746] usb 1-1: Using ep0 maxpacket: 16 [ 1071.275788][T16878] loop4: detected capacity change from 0 to 2560 [ 1071.283094][T16878] buffer_io_error: 27 callbacks suppressed [ 1071.283107][T16878] Buffer I/O error on dev loop4, logical block 0, async page read [ 1071.332425][T16889] openvswitch: netlink: Message has 4 unknown bytes. [ 1071.339497][T16889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1071.424173][T16878] Buffer I/O error on dev loop4, logical block 0, async page read [ 1071.478031][T16878] Buffer I/O error on dev loop4, logical block 0, async page read [ 1071.486185][T16878] Buffer I/O error on dev loop4, logical block 0, async page read [ 1071.494876][T16878] Buffer I/O error on dev loop4, logical block 0, async page read [ 1071.503905][T16878] Buffer I/O error on dev loop4, logical block 0, async page read [ 1071.529305][T16878] Buffer I/O error on dev loop4, logical block 0, async page read [ 1071.539772][T16878] Buffer I/O error on dev loop4, logical block 0, async page read [ 1071.558617][T16878] ldm_validate_partition_table(): Disk read failed. [ 1071.567214][T16878] Buffer I/O error on dev loop4, logical block 0, async page read [ 1071.575902][T16878] Buffer I/O error on dev loop4, logical block 0, async page read [ 1071.585210][T16878] Dev loop4: unable to read RDB block 0 [ 1071.595832][T16878] loop4: unable to read partition table [ 1071.601981][T16892] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2697'. [ 1071.612818][T16878] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 1071.832907][T16889] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1071.842325][T16889] team0: Port device batadv3 added [ 1072.854073][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2698'. [ 1073.605815][T10746] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1073.670697][T10746] usb 1-1: no configurations [ 1073.675441][T10746] usb 1-1: can't read configurations, error -22 [ 1073.782763][T16911] netlink: 4276 bytes leftover after parsing attributes in process `syz.1.2702'. [ 1073.973524][T16916] openvswitch: netlink: Message has 4 unknown bytes. [ 1073.982388][T16916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1074.006319][T16916] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1074.018263][T16916] team0: Port device batadv2 added [ 1074.052763][T16922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2703'. [ 1074.091166][T16922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2703'. [ 1074.182453][T16922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2703'. [ 1074.333396][T16929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.372338][T16929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.729781][T16935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1075.859958][T16944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.901331][T16944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.847222][T16972] FAULT_INJECTION: forcing a failure. [ 1077.847222][T16972] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.911737][T16972] CPU: 0 UID: 0 PID: 16972 Comm: syz.6.2716 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1077.911763][T16972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1077.911774][T16972] Call Trace: [ 1077.911781][T16972] [ 1077.911790][T16972] dump_stack_lvl+0x189/0x250 [ 1077.911817][T16972] ? __pfx____ratelimit+0x10/0x10 [ 1077.911842][T16972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1077.911864][T16972] ? __pfx__printk+0x10/0x10 [ 1077.911893][T16972] ? __pfx___might_resched+0x10/0x10 [ 1077.911911][T16972] ? fs_reclaim_acquire+0x7d/0x100 [ 1077.911943][T16972] should_fail_ex+0x414/0x560 [ 1077.911972][T16972] should_failslab+0xa8/0x100 [ 1077.912000][T16972] __kmalloc_noprof+0xcb/0x4f0 [ 1077.912023][T16972] ? kfree+0x4d/0x440 [ 1077.912042][T16972] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1077.912074][T16972] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1077.912094][T16972] ? tomoyo_domain+0xd9/0x130 [ 1077.912118][T16972] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1077.912143][T16972] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1077.912170][T16972] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1077.912211][T16972] ? __lock_acquire+0xab9/0xd20 [ 1077.912256][T16972] ? __fget_files+0x2a/0x420 [ 1077.912275][T16972] ? __fget_files+0x2a/0x420 [ 1077.912290][T16972] ? __fget_files+0x3a0/0x420 [ 1077.912304][T16972] ? __fget_files+0x2a/0x420 [ 1077.912324][T16972] security_file_ioctl+0xcb/0x2d0 [ 1077.912350][T16972] __se_sys_ioctl+0x47/0x170 [ 1077.912375][T16972] do_syscall_64+0xfa/0x3b0 [ 1077.912398][T16972] ? lockdep_hardirqs_on+0x9c/0x150 [ 1077.912439][T16972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.912458][T16972] ? clear_bhb_loop+0x60/0xb0 [ 1077.912481][T16972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.912500][T16972] RIP: 0033:0x7f4a33d8ebe9 [ 1077.912517][T16972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1077.912534][T16972] RSP: 002b:00007f4a34b10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1077.912555][T16972] RAX: ffffffffffffffda RBX: 00007f4a33fb5fa0 RCX: 00007f4a33d8ebe9 [ 1077.912569][T16972] RDX: 0000200000002dc0 RSI: 00000000c058565d RDI: 0000000000000003 [ 1077.912581][T16972] RBP: 00007f4a34b10090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.912594][T16972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1077.912605][T16972] R13: 00007f4a33fb6038 R14: 00007f4a33fb5fa0 R15: 00007f4a340dfa28 [ 1077.912636][T16972] [ 1077.912644][T16972] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1078.182942][T16979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2717'. [ 1078.229299][T16969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2715'. [ 1078.315805][T16969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2715'. [ 1078.331217][T16979] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1078.343469][T16980] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2718'. [ 1078.365721][T16969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2715'. [ 1078.408915][T16979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1078.434333][T16980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2718'. [ 1078.727423][T16980] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2718'. [ 1079.630593][T10746] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1079.710503][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1079.710522][ T30] audit: type=1326 audit(1755293561.154:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17005 comm="syz.0.2722" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa05698ebe9 code=0x0 [ 1079.793459][T10746] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1079.842882][T10746] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1080.066501][T10746] usb 6-1: New USB device found, idVendor=0eef, idProduct=a001, bcdDevice= 0.40 [ 1080.186371][T10746] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.199254][T17016] openvswitch: netlink: Message has 4 unknown bytes. [ 1080.206361][T17016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1080.227961][T17016] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 1080.236406][T17016] team0: Port device batadv6 added [ 1080.302401][T10746] usb 6-1: Product: syz [ 1080.311393][T10746] usb 6-1: Manufacturer: ⱈ㇚跠㻜늂缾펹髝ࣳ钗莦炑겧掝⥉蔤߰촨먨᪄穸㙕坯㝆⌢댰⑸ଡ଼ [ 1080.324886][T10746] usb 6-1: SerialNumber: syz [ 1081.174062][T10746] usbhid 6-1:1.0: can't add hid device: -71 [ 1081.180124][T10746] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1081.315669][T17025] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2726'. [ 1081.380378][T10746] usb 6-1: USB disconnect, device number 17 [ 1081.747570][T17029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2728'. [ 1085.241150][T17063] openvswitch: netlink: IP tunnel dst address not specified [ 1087.007116][T17086] openvswitch: netlink: Message has 4 unknown bytes. [ 1087.026023][T17086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1087.197879][T17086] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2741'. [ 1087.463331][T17087] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 1087.474319][T17083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2742'. [ 1087.513793][T17087] team0: Port device batadv7 added [ 1087.557617][T17080] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1087.632572][T17080] team0: Port device batadv3 added [ 1087.728984][T17083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2742'. [ 1089.550665][T10746] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1089.840735][T14322] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1090.003346][T14322] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1090.015153][T14322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1090.052149][T10746] usb 6-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 1090.083286][T10746] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1090.165134][T14322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1090.215771][T10746] usb 6-1: New USB device found, idVendor=054c, idProduct=03d1, bcdDevice= 0.00 [ 1090.314927][T14322] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1090.328124][T10746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.357353][T14322] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1090.377780][T14322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.387186][T10746] usb 6-1: config 0 descriptor?? [ 1090.465270][T14322] usb 1-1: config 0 descriptor?? [ 1090.919762][T14322] usbhid 1-1:0.0: can't add hid device: -71 [ 1090.926035][T14322] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1090.956917][T14322] usb 1-1: USB disconnect, device number 108 [ 1091.149035][T17137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2756'. [ 1091.337993][T17139] binder: BINDER_SET_CONTEXT_MGR already set [ 1091.344142][T17139] binder: 17138:17139 ioctl 4018620d 200000000040 returned -16 [ 1091.660814][ T5977] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1091.910788][ T5977] usb 3-1: Using ep0 maxpacket: 32 [ 1091.917895][ T5977] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.929576][ T5977] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1091.948767][ T5977] usb 3-1: config 1 has no interface number 1 [ 1091.969499][ T5977] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1092.019496][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.055444][ T5977] usb 3-1: Product: syz [ 1092.064218][ T5977] usb 3-1: Manufacturer: syz [ 1092.073323][ T5977] usb 3-1: SerialNumber: syz [ 1092.250562][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1092.310922][ T5977] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1092.323838][ T5977] usb 3-1: 2:1 : format type 6 is not supported yet [ 1092.385757][T17149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2759'. [ 1092.403943][ T5977] usb 3-1: USB disconnect, device number 115 [ 1092.424222][ T9] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1092.462651][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.507210][ T9] usb 7-1: Product: syz [ 1092.537477][ T9] usb 7-1: Manufacturer: syz [ 1092.584877][ T9] usb 7-1: SerialNumber: syz [ 1092.632163][ T9] usb 7-1: config 0 descriptor?? [ 1092.875077][ T9] usb 7-1: USB disconnect, device number 10 [ 1093.104721][T10746] usb 6-1: string descriptor 0 read error: -71 [ 1093.117242][T10746] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1093.152861][T10746] usb 6-1: USB disconnect, device number 18 [ 1093.687525][T17171] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2766'. [ 1094.078773][T17181] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2767'. [ 1094.251005][T17183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2768'. [ 1094.316518][T17185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2769'. [ 1094.378797][T17183] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1094.389827][T17183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1095.394410][ T5872] ------------[ cut here ]------------ [ 1095.400437][ T5872] WARNING: CPU: 0 PID: 5872 at net/bluetooth/hci_conn.c:568 hci_conn_timeout+0xff/0x290 [ 1095.410617][ T5872] Modules linked in: [ 1095.414840][ T5872] CPU: 0 UID: 0 PID: 5872 Comm: kworker/u9:6 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1095.427047][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1095.437379][ T5872] Workqueue: hci4 hci_conn_timeout [ 1095.442564][ T5872] RIP: 0010:hci_conn_timeout+0xff/0x290 [ 1095.448307][ T5872] Code: 48 89 df e8 23 05 09 00 eb 07 e8 7c 9d 48 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 37 ca fe ff e8 62 9d 48 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 1095.468810][ T5872] RSP: 0000:ffffc9000413fa50 EFLAGS: 00010293 [ 1095.475204][ T5872] RAX: ffffffff8a770e2e RBX: ffff88807e590000 RCX: ffff88807fc63c00 [ 1095.483256][ T5872] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1095.491688][ T5872] RBP: 00000000ffffffff R08: ffff88807e590013 R09: 1ffff1100fcb2002 [ 1095.499727][ T5872] R10: dffffc0000000000 R11: ffffed100fcb2003 R12: dffffc0000000000 [ 1095.507780][ T5872] R13: ffff88801f6cf718 R14: ffff88807e590948 R15: ffff88807e590010 [ 1095.515815][ T5872] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 1095.525041][ T5872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1095.531674][ T5872] CR2: 0000001b3330cff8 CR3: 0000000021fda000 CR4: 00000000003526f0 [ 1095.539647][ T5872] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1095.547760][ T5872] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1095.556252][ T5872] Call Trace: [ 1095.559534][ T5872] [ 1095.562827][ T5872] ? process_scheduled_works+0x9ef/0x17b0 [ 1095.568568][ T5872] process_scheduled_works+0xade/0x17b0 [ 1095.574183][ T5872] ? __pfx_process_scheduled_works+0x10/0x10 [ 1095.580176][ T5872] worker_thread+0x8a0/0xda0 [ 1095.585106][ T5872] kthread+0x70e/0x8a0 [ 1095.589207][ T5872] ? __pfx_worker_thread+0x10/0x10 [ 1095.594358][ T5872] ? __pfx_kthread+0x10/0x10 [ 1095.598958][ T5872] ? _raw_spin_unlock_irq+0x23/0x50 [ 1095.604256][ T5872] ? lockdep_hardirqs_on+0x9c/0x150 [ 1095.609472][ T5872] ? __pfx_kthread+0x10/0x10 [ 1095.614387][ T5872] ret_from_fork+0x3f9/0x770 [ 1095.619012][ T5872] ? __pfx_ret_from_fork+0x10/0x10 [ 1095.624199][ T5872] ? __switch_to_asm+0x39/0x70 [ 1095.628972][ T5872] ? __switch_to_asm+0x33/0x70 [ 1095.633798][ T5872] ? __pfx_kthread+0x10/0x10 [ 1095.638409][ T5872] ret_from_fork_asm+0x1a/0x30 [ 1095.643525][ T5872] [ 1095.646559][ T5872] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1095.653839][ T5872] CPU: 0 UID: 0 PID: 5872 Comm: kworker/u9:6 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1095.666012][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1095.676083][ T5872] Workqueue: hci4 hci_conn_timeout [ 1095.681216][ T5872] Call Trace: [ 1095.684505][ T5872] [ 1095.687436][ T5872] dump_stack_lvl+0x99/0x250 [ 1095.692044][ T5872] ? __asan_memcpy+0x40/0x70 [ 1095.696640][ T5872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1095.701853][ T5872] ? __pfx__printk+0x10/0x10 [ 1095.706457][ T5872] vpanic+0x281/0x750 [ 1095.710437][ T5872] ? __pfx__printk+0x10/0x10 [ 1095.715046][ T5872] ? __pfx_vpanic+0x10/0x10 [ 1095.719575][ T5872] ? is_bpf_text_address+0x292/0x2b0 [ 1095.724895][ T5872] panic+0xb9/0xc0 [ 1095.728623][ T5872] ? __pfx_panic+0x10/0x10 [ 1095.733080][ T5872] __warn+0x31b/0x4b0 [ 1095.737075][ T5872] ? hci_conn_timeout+0xff/0x290 [ 1095.742023][ T5872] ? hci_conn_timeout+0xff/0x290 [ 1095.746984][ T5872] report_bug+0x2be/0x4f0 [ 1095.751322][ T5872] ? hci_conn_timeout+0xff/0x290 [ 1095.756286][ T5872] ? hci_conn_timeout+0xff/0x290 [ 1095.761253][ T5872] ? hci_conn_timeout+0x101/0x290 [ 1095.766289][ T5872] handle_bug+0x84/0x160 [ 1095.770568][ T5872] exc_invalid_op+0x1a/0x50 [ 1095.775076][ T5872] asm_exc_invalid_op+0x1a/0x20 [ 1095.779938][ T5872] RIP: 0010:hci_conn_timeout+0xff/0x290 [ 1095.785498][ T5872] Code: 48 89 df e8 23 05 09 00 eb 07 e8 7c 9d 48 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 37 ca fe ff e8 62 9d 48 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 1095.805126][ T5872] RSP: 0000:ffffc9000413fa50 EFLAGS: 00010293 [ 1095.811209][ T5872] RAX: ffffffff8a770e2e RBX: ffff88807e590000 RCX: ffff88807fc63c00 [ 1095.819182][ T5872] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1095.827158][ T5872] RBP: 00000000ffffffff R08: ffff88807e590013 R09: 1ffff1100fcb2002 [ 1095.835129][ T5872] R10: dffffc0000000000 R11: ffffed100fcb2003 R12: dffffc0000000000 [ 1095.843130][ T5872] R13: ffff88801f6cf718 R14: ffff88807e590948 R15: ffff88807e590010 [ 1095.851132][ T5872] ? hci_conn_timeout+0xfe/0x290 [ 1095.856090][ T5872] ? process_scheduled_works+0x9ef/0x17b0 [ 1095.861811][ T5872] process_scheduled_works+0xade/0x17b0 [ 1095.867398][ T5872] ? __pfx_process_scheduled_works+0x10/0x10 [ 1095.873417][ T5872] worker_thread+0x8a0/0xda0 [ 1095.878072][ T5872] kthread+0x70e/0x8a0 [ 1095.882173][ T5872] ? __pfx_worker_thread+0x10/0x10 [ 1095.887298][ T5872] ? __pfx_kthread+0x10/0x10 [ 1095.891914][ T5872] ? _raw_spin_unlock_irq+0x23/0x50 [ 1095.897139][ T5872] ? lockdep_hardirqs_on+0x9c/0x150 [ 1095.902360][ T5872] ? __pfx_kthread+0x10/0x10 [ 1095.907039][ T5872] ret_from_fork+0x3f9/0x770 [ 1095.911632][ T5872] ? __pfx_ret_from_fork+0x10/0x10 [ 1095.916764][ T5872] ? __switch_to_asm+0x39/0x70 [ 1095.921538][ T5872] ? __switch_to_asm+0x33/0x70 [ 1095.926304][ T5872] ? __pfx_kthread+0x10/0x10 [ 1095.930935][ T5872] ret_from_fork_asm+0x1a/0x30 [ 1095.935729][ T5872] [ 1095.939019][ T5872] Kernel Offset: disabled [ 1095.943346][ T5872] Rebooting in 86400 seconds..