last executing test programs: 6.496069015s ago: executing program 3 (id=2742): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000480)={0x0, 0x79af, 0x10081, 0x8000, 0x3d0}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x841}, 0x84) (async) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x38, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r7, &(0x7f0000000400)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) (async) ioctl$BLKGETZONESZ(r7, 0x80041284, &(0x7f00000012c0)=0xf2) (async) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r9, @ANYBLOB="02000000000080008000120008000100767469"], 0xa0}}, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=@bridge_dellink={0x4e0, 0x11, 0x5, 0x2000, 0x300, {0x7, 0x0, 0x0, r11, 0x1, 0x1952}, [@IFLA_VFINFO_LIST={0x4c0, 0x16, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1c000, 0x7fffffff}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0x390, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4a95, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0xffffffffffffffff}}]}, {0x11c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x3}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x1}}, @IFLA_VF_MAC={0x28, 0x1, {0xfffffffb, @random="dc51a219984d"}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7, 0xa8}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8001, 0x777, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x40, 0x8c0}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0x4369ddab}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8001, 0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x8001}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xb, 0x3, 0x400, 0x88a8}}, {0x14, 0x1, {0x9, 0xfea, 0x401, 0x8100}}, {0x14, 0x1, {0x5, 0x76, 0xffffff80, 0x88a8}}, {0x14, 0x1, {0x6, 0xcc4, 0x93, 0x8100}}, {0x14, 0x1, {0x5, 0x5b, 0x400, 0x8100}}, {0x14, 0x1, {0x0, 0xd41}}]}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xd, 0xffffffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x7fff, 0x9, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0x827c}}]}, {0x8c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000000, 0xfffffff8}}, @IFLA_VF_TRUST={0xc, 0x9, {0x3, 0xfffff800}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1516, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x4}}, @IFLA_VF_MAC={0x28, 0x1, {0x2175, @local}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0xe55, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x8}}]}, {0x164, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0x3}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffff3f, 0xa2d}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7fff, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8, 0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0xb3a, 0x5, 0xfffffffa}}, @IFLA_VF_VLAN_LIST={0xcc, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2, 0x154, 0x7fff, 0x8100}}, {0x14, 0x1, {0x1, 0xa95, 0xa8, 0x88a8}}, {0x14, 0x1, {0xfffffff7, 0xe2a, 0xc5, 0x88a8}}, {0x14, 0x1, {0xdc, 0xb89, 0x2, 0x88a8}}, {0x14, 0x1, {0xfffffffd, 0xc74, 0x32, 0x8100}}, {0x14, 0x1, {0x3, 0xe19, 0x200, 0x88a8}}, {0x14, 0x1, {0xff, 0xe14, 0x4, 0x88a8}}, {0x14, 0x1, {0xfff, 0xfd8, 0x9fd, 0x88a8}}, {0x14, 0x1, {0x400, 0xd15, 0x1, 0x88a8}}, {0x14, 0x1, {0x7fff, 0x6e7, 0x40, 0x88a8}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x9}}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x3}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6eaa7dc8, 0xfb}}, @IFLA_VF_VLAN={0x10, 0x2, {0x70000000, 0x349, 0x2}}, @IFLA_VF_MAC={0x28, 0x1, {0x1d, @local}}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x3dc8ed11}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xd, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x99e, 0x1000}}, @IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x7ff}}, @IFLA_VF_TRUST={0xc, 0x9, {0xd9, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x401, 0x6}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xff, 0x8000}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x80000000, 0x9}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x7f}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0x154a}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x8}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xf, 0x6}}]}]}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_UNLINK(r12, 0x4161, 0x0) (async) syz_usb_connect(0x1, 0x24, &(0x7f0000001280)=ANY=[@ANYRESOCT=r11], 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x8e, 0x1, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7f, 0x9, 0x2}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x288, 0x6, 0x3, 0x2, 0x8, 0xe7}, 0x4c, &(0x7f0000000100)={0x5, 0xf, 0x4c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x36, "6d250687b3ad44b7c5fce539a68bb971"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0x80, 0x5}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x0, 0xf00, 0x1, [0xffc0c0, 0xff0000, 0x0, 0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xff, 0x3}]}, 0x8, [{0x28, &(0x7f0000000180)=@string={0x28, 0x3, "d3be4df871a0b0bdbd55cdeb2806395ad7a3b3824cce4887b81a7aadc8553fe9ad234d86f049"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x42, &(0x7f0000000200)=@string={0x42, 0x3, "2597a7b4d5790f05ce3bb15ca151d997df56ec38e7c0ae4fb132881b72a9b178d166e490b054916e3a48c1ea73d282201371aa97d46b50c58eac625758dcb7f4"}}, {0xd1, &(0x7f0000000280)=ANY=[@ANYBLOB="d1036dd3f6785ef0019d16105b8d2f2be03ff3a2e52b9447f3dee1c0371b510052ec30af2fde363d8b6c8f1f0c71ec9eec27b319450a3c70668b31ae91f7536258d8d606ebbf9663527c5e391507865318ab7bcd3cb11d6985b9cd9975d652b528bb018de56840471d8eff8a55f35c7ef3439853657d9600735b372eb75423977c322eff726bf6ec1807b0414dd2bdb767afc4ed16618e0c5e32c9cb3ea9253f09857b396342b397f5ede1f2e1b004f0b30796847ef5c209bf80f4e59a8dedf10d98e41bb61ffd85eaa15465d139b709"]}, {0x90, &(0x7f0000000380)=@string={0x90, 0x3, "59d14c698c9fb1e2a4f5a048cb80abafc40d4e68d7807fbb0108517e06462e91d81ba04c40f51ca688999b2f5017eac742fcb224b766201cf20f8b438274d521be6bee60daeb4e7779bac392e11eb426b3a25def7ca779f445d0d2a20148848f9a3fc0e6a4a5243d0e69196d4a9873f62533bc7a7a23d6d35d34647968e08b844ba28592498b23eaf286f0c1e179"}}, {0x8e, &(0x7f0000000440)=ANY=[@ANYBLOB="8e0393d3607f3a8cb2581f44303e54b14e3dc05bc44c3293276bcecadebd04e801f34cecb3ea9777dbe96479f42282f7a1c082a01d3b24cb4833cdf6005c6dfa746dfdfed48590a3191439ab4b51738e361d0aa9fc6cd0793254524804bd907b75622d32b247d00663d1d5078eeb3e51dca423847175892206203fff6fac10d84ff203f9d2b41322f277b4ee403c"]}, {0x7a, &(0x7f0000000500)=@string={0x7a, 0x3, "631c53ff86b815d8ab05015214771991351afa094a5b9035bde9b640603279a4a034260ee2594289b73f18fc84daeff91d4b022bc4e557d0a6fc7aa1cc03d8e62b78622659f2c5acb5625355daf3c9e301aa5a762744507f13b041b6e93985d29513d357dbca10e77c21e63cd604e23ba422a95ae7b01a1e"}}, {0x7a, &(0x7f0000000580)=@string={0x7a, 0x3, "5e5bb71a3071b521b656deb3ab0b74df6ea48f847b4dc7546c3f05130abaf192d74af33d63b278e599286f2e4bbd51cb296db63723d41d7c7439d2ce87e5a27c2aa9ab92d783b7a11f06796cca61676adf59f676642837fcf7466c8fd3458c9d11f6f90c63a18eea75875a87685139bdebb1bdd2903b8b21"}}]}) (async) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) (async) write$binfmt_aout(r13, &(0x7f00000001c0)=ANY=[], 0xff2e) 6.324047254s ago: executing program 1 (id=2743): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6.313530886s ago: executing program 4 (id=2744): socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup2(r1, r4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r3], 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r6, @ANYRESHEX], 0x0) 6.167916839s ago: executing program 1 (id=2745): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000020a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500030000000c0016"], 0x38}}, 0x10) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@local}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000400)='.\x00', 0xa4000021) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x550, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r5, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) 5.009760504s ago: executing program 1 (id=2749): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x40003, @local, 0x2}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) syz_clone(0x0, 0x0, 0xcf09bf30ba350518, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) rt_sigprocmask(0x1, &(0x7f0000000400)={[0x8]}, &(0x7f0000000440), 0x8) sendmmsg$inet(r2, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="e0", 0x1}], 0x1}}], 0x1, 0x2000c0e0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x12, r3, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000080)=0x1, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) shutdown(r3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r8, 0x10e, 0x4, &(0x7f0000004380)=""/247, &(0x7f0000002140)=0xf7) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000480)={r3}) recvmsg(r9, &(0x7f0000000d40)={&(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/124, 0x7c}, {&(0x7f00000006c0)=""/249, 0xf9}, {&(0x7f0000000300)=""/201, 0xc9}, {&(0x7f00000008c0)=""/166, 0xa6}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000980)=""/204, 0xcc}, {&(0x7f0000000a80)=""/121, 0x79}, {&(0x7f0000000b00)=""/10, 0xa}, {&(0x7f0000000d80)=""/80, 0x50}], 0x9, &(0x7f0000000c80)=""/139, 0x8b}, 0x10102) socket$inet6_mptcp(0xa, 0x1, 0x106) 4.866830945s ago: executing program 2 (id=2750): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x40, r0}, 0x38) r1 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0xa, r4}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) dup(r2) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x140, &(0x7f0000000180)={0xa, 0x4e20, 0x94fb0b98, @empty, 0x9}, 0x1c) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002400)=""/4098, 0xd5e}], 0x3a}, 0x0) 4.739723672s ago: executing program 4 (id=2751): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) r1 = socket$inet6(0xa, 0x80001, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x110) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff280000bfa300000000000007030000f4ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000080)={0x5, @vbi={0x2, 0x10001, 0xa6, 0x32314247, [0x1, 0xe], [0x6, 0x10001], 0x108}}) 4.668202495s ago: executing program 2 (id=2752): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f00000000c0)=""/215, &(0x7f00000001c0)=0xd7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x1fff, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2000000000000008) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f00000000c0)=""/215, &(0x7f00000001c0)=0xd7) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x1fff, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2000000000000008) (async) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 4.632494857s ago: executing program 4 (id=2753): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000020a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500030000000c0016"], 0x38}}, 0x10) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f636b206e6f6e916500"], 0xa) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000400)='.\x00', 0xa4000021) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x550, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) 4.431648606s ago: executing program 2 (id=2754): r0 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x27, 0x1, 0x3, "3a8e2ba75088c20500ca55e21f0000000400b2b679d2000000000000000500", 0x34324d59}) 4.198869612s ago: executing program 1 (id=2755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800000055ec22e37396b39e1386c35af3bfea9527e4c2535971f7000000000000000401e451eaaafe804a7255b9b344e478a61b685d4fcf957683a1bddf8539bca5181c5a08f48bcc41a221a75c5364b3f906361c669eb76e5544272b47464d7bb38f4cfd0fde3695b8da88a791d13eb29958e4ede4d1006bf29d72b998593d2c298d1df3550c974108ade9cbe5254bf93451073a9f24508f62cdde86805204fe408116da5ad36a2bc62f14f32e953b", @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf250b00000004000580"], 0x18}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0xffff}, 0x90) 4.024049477s ago: executing program 2 (id=2756): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xc70, 0xf001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf09"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x17a}, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000700", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 3.683874227s ago: executing program 1 (id=2757): socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) (async) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000001c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x8, 0x38303553, [0x0, 0x8000000], [0x8203, 0x1]}}, 0x50}) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) (async, rerun: 32) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300), 0x0) (async, rerun: 32) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) (async, rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETLINK(r7, 0x400454cd, 0x30a) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000012c0)='source', &(0x7f00000010c0)='//\xf2/\x06\b/\xdf/o\xc0\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rm,\x91)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\x8fu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b\xc6\xc1\xff\r]\xbd\'U\x8be\x94\xa7D\xd5\xc6n\xdf\x00;\xcag\xc3[\xb4\xca\xd9h3\xfb^g\xcd\xfb\x81\x95\xd7\xe7x~\xe8%.\xd1\x1a\xd5\xd2T\xee\xee\x9f\xf3\x1a\x0e\x91\' \xa9u\xea\x9b\xc2\xf6\xf4nA\xb7]\x91\xce\x1fs\x1a\x8a\x05\x00\x00>\xdd\x00\x00\x00\x00\x00', 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x2, 0x0) (async, rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fedbdf258900000008000300", @ANYRES32=0x0, @ANYBLOB="14001d8010000080060053c3672c82170c2a0400"], 0x30}, 0x1, 0x0, 0x0, 0x4c080}, 0x20000040) (async) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000004aa214083e91c826bf6b807bc2cbd80a367b80cf920147fbd3f8a3da7a4240f81fa496da42080b383f9d67378c0d947cf9d70c8ddfadaa662a1361754776c01681edaaa17007c50351af9131291727ee95b253ab10968da2f5b1f577f46077f42b8d176268151ef73d11189aed7a8c2d7953ab220e9321d56884c4", @ANYRES16=0x0, @ANYBLOB="080025bd7000fcdbdf251100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900003000004400000006001201070000000500e400000000000400ac000600ed008e01000006001a0103000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000040}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r10, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) 3.655203035s ago: executing program 0 (id=2758): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a80000ffffffe50a0000000000639500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x22, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 3.567979003s ago: executing program 0 (id=2759): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000020a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500030000000c0016"], 0x38}}, 0x10) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f636b206e6f6e916500"], 0xa) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@local}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000400)='.\x00', 0xa4000021) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x550, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r5, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) 3.297997995s ago: executing program 3 (id=2760): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0x0) (async) write$binfmt_misc(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x5df}}, './cgroup/../file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x5df}}, './cgroup/../file0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f0000000100)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) (async) r2 = memfd_create(&(0x7f0000000100)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.767160026s ago: executing program 4 (id=2761): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000010) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x77}, @in6={0xa, 0x4e23, 0x1, @empty, 0x9}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e24, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x34}, 0x1}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0x81, @empty, 0x10000}, @in6={0xa, 0x4e20, 0xdd, @loopback, 0x4}], 0xdc) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x2, {0x14, 0x1000, 0x2e04, 0x6}}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x2c0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) 2.382301149s ago: executing program 3 (id=2762): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007929a800000022001d0a0000000000639500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x22, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 2.365523075s ago: executing program 3 (id=2763): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x388}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e60", 0x32}], 0x3}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x4, 0x402181) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000300)) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000"]) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xffffffffffffffd8}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47f6, 0x0, 0x0, 0x0, 0x0) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCMBIC(r12, 0x5417, &(0x7f0000000100)=0x69) dup2(r12, r0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002ef1c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.269126918s ago: executing program 2 (id=2764): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb080045fc0074000000000001907864010102ac1414aa05009078e00000e0460000000000000005110042000000030089039d443c00030a01012f00000000ac1e0100000000000000000000ac14141e000100000000ac14140000000000ac1414aa000000000000acf9"], 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000000c1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x3432564e}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x3, 0x1, 0xe0e, 0x7, 0xf, 0x20000120000, 0x7f5d3dc9, 0x0, 0x8, 0x9, 0x2, 0x0, 0x101, 0x8, 0x2b48], 0xd5dd0000, 0x181204}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x4, 0xb6, '\x00', 0x2}) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @empty, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000380)={'tunl0\x00', r8, 0x40, 0x7800, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x2c, 0x14, 0x66, 0x4, 0x40, 0x2f, 0x0, @broadcast, @multicast1}}}}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_open_dev$video4linux(&(0x7f0000000c80), 0x200007, 0x8482) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 2.09249624s ago: executing program 0 (id=2765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000280)={0x8f, 0x0, 0x8}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x0, 0x25dfdbfd, {0x2, 0x18, 0x0, 0x0, 0x0, 0x4, 0xff, 0x9, 0x2400}, [@RTA_FLOW={0x8, 0xb, 0x80000001}, @RTA_PREFSRC={0x8, 0x7, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 1.60014221s ago: executing program 0 (id=2766): r0 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x27, 0x1, 0x3, "3a8e2ba75088c20500ca55e21f0000000400b2b679d200", 0x34324d59}) 1.442243384s ago: executing program 0 (id=2767): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0xa) fchdir(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x20) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 1.381966704s ago: executing program 3 (id=2768): r0 = socket(0x10, 0x803, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @remote}, 0x4, 0x1, 0x3, 0x2}}, 0x2e) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x7fffffff, 0x8}}}}]}, 0x44}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710}, 0x10) listen(r3, 0x7ff) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x2, 0x1, 0xcf}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRESOCT=r7, @ANYRESOCT=r6, @ANYRES8=r1, @ANYRES64=r4, @ANYRES16=r6], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a030400000000000000000a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a3200000000f37d140000001100010000000000000000000100000a"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 825.172248ms ago: executing program 4 (id=2769): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000022001d0a0000000000639500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x22, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 724.262265ms ago: executing program 1 (id=2770): syz_usb_connect(0x3, 0x5b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x59, 0xc2, 0xbf, 0x10, 0x499, 0x150a, 0xf67f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbe, 0x0, 0x0, 0x7a, 0x1f, 0xd6, 0x40}}, {{0x9, 0x4, 0x0, 0x5, 0x1, 0xff, 0xfb, 0xff, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x7}, [@mixer_unit={0x5, 0x24, 0x4, 0x2, 0x5}]}], [{{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x5, 0x7, 0x3, [@generic={0x17, 0x22, "563d73b6e045e3d5429ec265922a160c95aedc51e1"}]}}]}}]}}]}}, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0xff, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x1, 0x1, 0x6, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0xe6, {{0x6, 0x24, 0x6, 0x0, 0x0, "e8"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x3, 0x3, 0x12}, [@mdlm_detail={0x24, 0x24, 0x13, 0x80, "ff65d6c8514ec1e8a83a7e64ef764ab5df1eb1870185c93742d32047ab2f8aa7"}, @mdlm_detail={0x84, 0x24, 0x13, 0x4, "0adee226b6a91ee5b7a71fa48bf6ec488d4e89188be97938be06d4b9e9eae9d30bfd3f5c663acc451aed65323411e37e53bac7bac1281104517a7a60a7d54ff2461c9524b080dd5217494dc6e008df9b7a4a5fd47f2ff0c08612d270049366c9a20ac910f11b6499f14418f3c6e514fadb0caed97977b3e5b15bcb61419f509a"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0xb5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0x1, 0xa}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x250, 0x2, 0x4, 0x9, 0xff, 0x4}, 0x91, &(0x7f00000007c0)={0x5, 0xf, 0x91, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x1, 0xf, 0x5, [0x0, 0x3f00]}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x7, 0xf, 0x0, [0xff00, 0xffc000, 0xffc000, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x4, 0x5, 0x7, 0x8}, @generic={0x36, 0x10, 0xa, "524405cca0236221fc6fb07c5ac9bf7996a8dbfe51a9a8b1e86e66e84a7aa74b76ec056829ce82545d5cf4bf15366d840f6e5e"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "5610e41a4abf7803e570ae13a44adb5d"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0xa, 0x80}]}, 0x4, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x41f}}, {0x9f, &(0x7f0000000900)=@string={0x9f, 0x3, "f62b0513c98ecc62579e6f10c3535cb6830d4bd07e39fb04730779cad58be0678d0ff341d72100e48a3c5733eb83ef7807861ae8090eb448c4b7f120eca31a9502ddd325c858e1ec150b99fc84435a54f7e0b9cf904dba8e9f5e5fd99cc7d11c7479f07e8efa5dc709d86b37d8b5fd261b3938f2a66c17a93b5cf1d69aa617c55902cf7f06ada5d986d97f05b90d8a8a6d6ec8d1db922d5e0d33a34cec"}}, {0x45, &(0x7f00000009c0)=@string={0x45, 0x3, "7dc4d375dd4c0ce643bb7a992626b463edf6ecb7dbddc3cbecbaa31135687488f057e3a32f2a2aad4e3bdcaa5b1e04edc07513250c2b967da8c5a070b99979b03989f7"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x568, &(0x7f0000000100)={[{0x59, 0x4e00, "70a61419bb7df361a0b6e975c3028eb0d908898d3476375bcaf2bde65ccae6d952629a4f26cd40f0e1d4f688f7aacc1532298c80efa131cf3bb3d4a9b4172be32d99177ef0c5555e82ab32e6eade1c8332aea0041a3f7be2a3"}, {0x80, 0x4e00, "34a42044e5aac08a614c7691be688c936058cb20dc80001e9159e425059c811b0b971b2632d6c841ea28b0bbe4cba82a834989dd81dab210a7125af71f34971b10cc1a29a05db2c480461cce95204931d00ddc44faa94924f50a7852c0fc3e59205fd648f056177f62e8acda95ac414226d48487f5397a3084b0e0f1596858c8"}, {0xfc, 0x4e00, "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"}, {0xb9, 0x4e00, "555f9da63364208b7635e19439a7e53fcbf64be12a2945b1abbc46efe43d5884ca8dab64cdac5ef0b2fa70cce94caffc347d20fd04c1563b748334e14206e848285778783ce48ab6ec4d6d7e79944deb4d02112db9b3873ba8915c16808e51d58b5461b277ed43f140000756fb9f51b65c6a4e75e71867a3e7b40af430aa78eca14040f69328e68c17e7d838612b0b147933099bf122c72af065015fd7074dbfa7fa8a806e5b0cfd933e3aa96c893f24e3c3e27b1e1d8af81e"}, {0x19, 0x4e00, "f4de841335d66d41f4c2e616667d157d897bfbcc14ce173584"}, {0xd3, 0x4e00, "26eb5ac8b3aa1d8a99a8b45548d3a28bbbe9b497e82deeb6dac7b8ada7db28a67e80bbce4948dba3af36b0ece8113af2b5afbb05274aaf71d17b02df3d1f80e575c79dd02d01c8d0c2f60ce620eb3eddedc5f8c78bdc102d6e2891a6d1a50d16d154fa2b4c30c927a6d05b0ac511541c40b823215dca8e84480f1caddf6db1b7150e67cd3ec7e6d25c34e70c010f318d5c330d03abcfaee17a0c86bab26ab6ecf1e269644f03871ad7b510b89908623b12463468b1c0f019cb4ccccd40bd1f5e7e0787c207e552aa09fe79f3b31f52fd33022d"}, {0xce, 0x4e00, "d68fdc470433fc73e82bf41c999c5d68eee7af35b189458d5b53ad79d178eed6d2e6761b268b7491c3c53543804c53d6f2ac1ab1fe8fba2f4fc29e9014b55ed5c839f6d5ca4b5b71414450f82ce26c239d768ba2f3dd1e9a9ad9a1d54268e0711a8767c6054cc1813610227e05d7e6ff77e5dd550a9302ad62a56725fefe664b741a3be0f8fbf9dfeb1cc7450e1c674eb623778d51af904e7705fc78ba773d6b6fc4f4417693396ef08518ae95248a052570863d9e6fba5312d2d1428b444961776ecc12282b33ee2c39763f08f0"}, {0xf3, 0x4e00, "8f0c0766449a311e7f1715dca4dcd930395036170b3230b59ec9b87787c9684af3c7d962f4a444457da1a9156a54f5408079a09656008b206cd3d939db9489804e64e0b2d35895afead66ee55d99a4b3638d3965921cd7bb7574ba50608582e3077c5f63bd66cc6a25ebabc25b68258b381db82f2b329855217189c9817ab6beacd087b57dc5d5dbe09d504e8c6b1d159027b5b086b7bf9ab8b86399f4a781d4509e9a9c9d738eb5441d2789fc1b546f7a73b2f12322c887ae36cb5280c6b21069feb4e4954e44cd8277d8b0f9a604943d6dfd3e45fe566b771d847d3488c1854713732af2637b4ba9e23bc8699b4bd5b59641"}]}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x3, 0x3e3}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) socket$inet_sctp(0x2, 0x1, 0x84) 722.171607ms ago: executing program 4 (id=2771): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000020a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500030000000c0016"], 0x38}}, 0x10) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f636b206e6f6e916500"], 0xa) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000400)='.\x00', 0xa4000021) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x550, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) 619.07536ms ago: executing program 2 (id=2772): futex_waitv(&(0x7f0000000440)=[{0x10001, &(0x7f0000000000)=0xc3, 0x2}, {0x1ff, &(0x7f0000000040)=0x800}, {0x3, &(0x7f0000000080)=0x1000, 0x82}, {0x4, &(0x7f00000000c0)=0xa, 0x82}, {0x4, &(0x7f0000000100)=0x7, 0x82}, {0x8, &(0x7f0000000140)=0x3, 0x2}, {0xb8, &(0x7f0000000180)=0x5, 0x82}, {0xe, &(0x7f00000001c0)=0x3, 0x82}, {0x7, &(0x7f0000000200)=0x9, 0x82}, {0x200, &(0x7f0000000240)=0x7, 0x2}, {0xd2, &(0x7f0000000280)=0x1, 0x82}, {0xc, &(0x7f00000002c0)=0x1, 0x2}, {0xfffffffffffffffd, &(0x7f0000000300)=0x7f, 0x82}, {0x7fffffff, &(0x7f0000000340)=0x8, 0x82}, {0x416, &(0x7f0000000380), 0x2}, {0x4, &(0x7f00000003c0)=0x1, 0x82}, {0xb45c, &(0x7f0000000400), 0x2}], 0x11, 0x0, &(0x7f0000000600)={0x0, 0x3938700}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f0000000640)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/75, 0x4b}, {&(0x7f0000000740)=""/8, 0x8}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000880)=""/122, 0x7a}], 0x4, &(0x7f0000000940)=""/249, 0xf9}, 0xbe}], 0x1, 0x2388df44a0ec8f0a, &(0x7f0000000a80)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000ac0)={0x7}, 0x4) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000b00)={0x6, 0xffffffffffffffff}) r3 = dup2(r2, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r3) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x400c001) clock_getres(0x3, &(0x7f0000000cc0)) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000d00)={0x401, 0x2, 0x1, "49f0f3006bccd004e31f71053fe02597accf02372d4fc2aca12d944669b8f974", 0x43353039}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000d80)=@attr_other={0x0, 0x3, 0x5, &(0x7f0000000d40)=0xc69c}) nanosleep(&(0x7f0000000dc0)={0x0, 0x989680}, &(0x7f0000000e00)) setsockopt(r1, 0x8a, 0x2, &(0x7f0000000e40)="633303e016a08e87e2401c792038f9d1dced2441f70bd0e80d93a1dea7889de45b7712ecd46681640b36390f5765", 0x2e) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000e80)={0x0, 0x401}, &(0x7f0000000ec0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000f00)={r5, @in={{0x2, 0x4e21, @local}}, 0x7, 0x66e, 0x10000, 0x8, 0x47, 0x5, 0x38}, 0x9c) r6 = socket$inet6(0xa, 0xa, 0x9) pselect6(0x40, &(0x7f0000000fc0)={0x100000001, 0x9a, 0x4ac, 0x6, 0x3, 0x3, 0x1, 0xf}, &(0x7f0000001000)={0x10001, 0x6, 0x200, 0x4, 0x101, 0xfffffffffffffff9}, &(0x7f0000001040)={0x3, 0x8, 0x4, 0xb92, 0x9, 0x9bfb, 0x3, 0x6}, &(0x7f0000001080)={0x0, 0x3938700}, &(0x7f0000001100)={&(0x7f00000010c0)={[0x9]}, 0x8}) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000001540)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f0000001180)={0x35c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x31c, 0x4, 0x0, 0x1, [{0x318, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x308, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_INNER_EXPR={0x2d8, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x2c4, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_IMMEDIATE_DATA={0x15c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x52, 0x1, "114aa83a3edfdc149775112dcbdfe87a4fa1ac749c3229353873c1384e7ca3f3f31934d9d257d129eab71169024a022cf4856e59141aedcd5f908470d942fe58dfd2ebea51f7fa6d6586187fc5d7"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf2, 0x1, "d79365891af9ff69e2c467886d4c58eca9225f8283013c9571787359543cd5a597f691dea8bad7fe5d01293a5d3c6ea41bf5226db93d1cc019d1424a93d312ac04e45af9d792fa29a0491ab1e239342ebc0d52bcc6d32005a5112b99659a4983d9f305a45908ca9f8175fcdefb7731f7b22152c6849421b6aae70469c4326ce4aa96394f77468458ce6309fc0a8dba4a370724932a3b25ed9f92f6d0e46c034d567c10c2c6029a9bd82df3c45c67e845a2e45baed788ae6cb0799096db40222017541ffbfd9598dd0a18cc7e2c4b72416ea47ceaca9f5bbfd7ee7a7a437f1d85143a7273e8e8e35d2d1c126aed5f"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0x14c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x36, 0x1, "df27783ae3e82b243fb54046cdcf1709acefcf5e736909eb316ea8a47bc7b8384f0dcee157f964cd9ae91a79ee8e007689d0"}, @NFTA_DATA_VALUE={0xa4, 0x1, "a9dd1aa45970abd972d565d242ce10a566326867a7293f3e9042670bc4dd3a9cecd4451cc23b57a2e7cba72c42f037d0484ffd5144189f70b6c910badf63c146e8760cda3eae8606be974fd86941c2927fdb8227152897f0a9077ef6340712008472f4a5af15017d021458e1f18ae064b73681b5e09394a8227376305e256b0c76f689c26732a9d71e5e2d685c825bdf81205775006e8f812a406c9ddb474bf5"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "ca20b961d856f7a2b018b8f16587cda832e7b717e79bd993bfb06024e444395cdc5c155febfb1b36a8c733a85a7aa6a26edad6da8770dd6c53ed5d622d12d5dcd2251c6c5e65c8d3a7ccf3c8ec64d9dff770f73527d9"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xc6}]}}}]}]}, 0x35c}}, 0x40) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000015c0)={0x0, @dev, @initdev}, &(0x7f0000001600)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000017c0)={'sit0\x00', &(0x7f0000001640)={'sit0\x00', 0x0, 0x0, 0x10, 0x1, 0x0, {{0x51, 0x4, 0x1, 0x7, 0x144, 0x64, 0x0, 0x45, 0x4, 0x0, @multicast1, @multicast1, {[@cipso={0x86, 0x4c, 0x3, [{0x1, 0xe, "9e7eac89037789ae14db3300"}, {0x7, 0xb, "3ae65236681dd4f29a"}, {0x1, 0xd, "ed7c0f36b12488d50d2ed1"}, {0x0, 0xf, "ba529b7722b499f013689f5e9a"}, {0x6, 0x11, "37ce5ec20ed05f5055aa5c65752181"}]}, @cipso={0x86, 0x22, 0x3, [{0x0, 0x12, "af7370c350ad61e2342913a5564bbee2"}, {0x7, 0xa, "8b65f75e0405ae26"}]}, @generic={0x7, 0x10, "fb833d083aa8495772f49f6ba3f5"}, @generic={0x44, 0x8, "0ae0710dda60"}, @rr={0x7, 0x1b, 0x9c, [@multicast2, @broadcast, @private=0xa010101, @local, @local, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0xc, 0x89, 0x1, 0x9, [{@broadcast, 0x6}]}, @ssrr={0x89, 0x27, 0x31, [@rand_addr=0x64010100, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010101, @multicast2, @broadcast, @loopback, @rand_addr=0x64010100]}, @cipso={0x86, 0x50, 0x1, [{0x5, 0xd, "78fd8560d0aa8f70fd1368"}, {0x0, 0xc, "191b41839e4fc2586410"}, {0x6, 0x7, "361d5b3142"}, {0x2, 0x9, "a8a0f6618ce308"}, {0x2, 0xe, "92a8b8ea53ed39498e647b51"}, {0x6, 0x2}, {0x6, 0xb, "122c08f2e5a95d4ab0"}, {0x2, 0x6, "8198c303"}]}, @timestamp_addr={0x44, 0xc, 0x15, 0x1, 0x1, [{@loopback, 0x6}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001880)={'ip6gre0\x00', &(0x7f0000001800)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x1, 0x5b, 0x21, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x7800, 0xe}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000001940)={'gretap0\x00', &(0x7f00000018c0)={'erspan0\x00', 0x0, 0x10, 0x80, 0x8, 0xd0a1625, {{0x12, 0x4, 0x0, 0x11, 0x48, 0x65, 0x0, 0x7, 0x29, 0x0, @empty, @multicast2, {[@end, @generic={0x83, 0x7, "a5e05a229e"}, @end, @timestamp_prespec={0x44, 0x24, 0x34, 0x3, 0x5, [{@remote, 0xfff}, {@private=0xa010102, 0x7}, {@empty, 0x1}, {@empty, 0x1000000}]}, @ssrr={0x89, 0x7, 0x3a, [@broadcast]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001980)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001ac0)={'syztnl0\x00', &(0x7f00000019c0)={'erspan0\x00', 0x0, 0x700, 0x1, 0x46497e3d, 0x0, {{0x2c, 0x4, 0x2, 0x8, 0xb0, 0x64, 0x0, 0x1, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xf, 0x39, [@remote, @dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0xc0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x86, 0xb, "a11a48f492e44d92c2"}, @lsrr={0x83, 0xb, 0x86, [@local, @loopback]}, @end, @noop, @timestamp_prespec={0x44, 0x24, 0x1a, 0x3, 0x8, [{@multicast1, 0x4}, {@rand_addr=0x64010102, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@private=0xa010101, 0xfffffffd}]}, @timestamp_prespec={0x44, 0x34, 0x1f, 0x3, 0x9, [{@private=0xa010101, 0xc}, {@multicast1, 0xfffffff8}, {@private=0xa010102, 0x5}, {@multicast2, 0xb53}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0xc}, {@loopback, 0xb831}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001b00)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001b40)={'bridge_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001c00)={'ip6gre0\x00', &(0x7f0000001b80)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0xd0, 0xfff, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x7, 0x6, 0xf6e30b5}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001cc0)={r3, 0x58, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000007240)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000007200)={&(0x7f0000001f00)=@delchain={0x52f8, 0x65, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xb, 0x4}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xfd4, 0x2, [@TCA_FW_ACT={0xfd0, 0x4, [@m_vlan={0x88, 0xb, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xde6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x7, 0x5, 0x8, 0x3}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xafb}]}, {0x7, 0x6, "49b0b4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x94, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xd4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x81}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}]}, {0x3f, 0x6, "fd803fad5913fe3a514fb8ed1d3fd9cb7287fecd0212f7d0deccd8ef216e1b0c3f70d085379cf0cd857e70ba68860821db13c1c5898cf839f0b4af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x104, 0x14, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x2}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x1a}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010102}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x4}]}, {0x73, 0x6, "1da949f1e670a39553f76271f876ddde73cc4dd1cc70d2063c40d97d60b53af24d7ecde70908ade878f8433a513749c84f4c64af397d11cbc100a95bc55b9517f7802f4b27cbf185696b8a547f1e72450704c91522a3d06a4b082c5fb9d251883f18f347c89013fe5eecacfa2519cd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0xdac, 0x1d, 0x0, 0x0, {{0xb}, {0xd24, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0x3, 0x1, 0x6, 0x6, 0xa38c, 0x0, 0x9, 0x2, 0x3, 0x6, 0xa8c8, 0x0, 0x8, 0x3, 0xffffffff, 0x5, 0xdf9b, 0x2, 0x3, 0x0, 0x7, 0x6, 0x0, 0xff, 0x315d, 0x1, 0x80000001, 0x0, 0x4, 0x3, 0x9c000000, 0x6, 0x1, 0x2, 0x10, 0xffffffff, 0x7, 0x1, 0x19f, 0x8, 0x0, 0x5, 0x89, 0x6, 0x5, 0x7, 0x4060, 0x4, 0x7f, 0x8, 0x2, 0x7ff, 0xf, 0xff, 0x7, 0x3, 0x4, 0x69, 0x3, 0x6, 0x100, 0x3, 0xffffffff, 0xd8f, 0x26e, 0xffffffff, 0x7, 0x89, 0x5, 0xa0, 0x8000, 0x7, 0xf, 0x34ac0000, 0x8, 0x2, 0x5, 0x8, 0xb, 0x8, 0x0, 0x2, 0xf49e, 0x4, 0xffffffff, 0x3, 0x1, 0x2, 0x6, 0xfd0, 0x9, 0x3, 0x6e0, 0x6, 0x3ba5, 0xe, 0x1ff, 0xfffffffc, 0x7, 0x1, 0x6, 0x3, 0x7, 0x2, 0xe2, 0x6, 0xfffffffb, 0x4, 0x9, 0xb40b, 0x3, 0x3, 0x3, 0xfffffff8, 0x5, 0xea74, 0x3, 0x10001, 0x7fffffff, 0x9, 0x7, 0x10000, 0x80, 0x460e, 0x4, 0x6b2850ff, 0x0, 0x10001, 0x5e03, 0x2, 0xe, 0x7, 0x4, 0x9, 0xffffffff, 0xa054ed9, 0x3, 0x401, 0x9, 0x4d822a8b, 0x1, 0x3ff, 0xfffffffd, 0x9, 0x5, 0x8, 0x9, 0x92, 0x0, 0x5, 0x6, 0x3, 0x3c1, 0x7, 0xbeef, 0x10bf, 0x5, 0x75, 0x2, 0x8, 0x7fffffff, 0x7b, 0x1, 0x9, 0xfffffff8, 0x8000, 0x2, 0x7c9, 0x5, 0x44d6, 0x9, 0x0, 0x9, 0x1, 0x4f7, 0x3, 0x289c, 0x1, 0x0, 0xb, 0xe8e, 0xfffffff2, 0x81, 0x7, 0x1, 0xffff, 0x3c, 0x4, 0x5, 0xfffffffe, 0x7, 0x10001, 0x835, 0x400, 0x2, 0xfffffffe, 0x1, 0x8, 0x1, 0x401, 0x67, 0xca, 0x7, 0x5, 0xf, 0x1, 0x9, 0x4, 0x7fffffff, 0x401, 0x3, 0xfffffff7, 0x3, 0x1000, 0x80000000, 0x2, 0x4, 0x9, 0x2, 0x5, 0x8, 0x3, 0x2, 0x1ff, 0x7, 0x40, 0x81, 0x5, 0x9, 0x6, 0x5, 0x7, 0x8, 0x1, 0x9, 0xffff, 0x8, 0x8, 0x5d2d, 0x66083b0c, 0x3, 0x4, 0x9, 0x5, 0x4, 0x6, 0x2, 0x4, 0x7, 0x5, 0x9, 0x6, 0x8c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x8, 0x0, 0x0, 0xeeb3, {0x1, 0x0, 0x0, 0x23f, 0x3}, {0xe, 0x2, 0x0, 0x2, 0x81, 0x3}, 0x8, 0xc, 0xe}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6277}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0xffff, 0x7, 0x80000001, 0x6380, 0x6, 0x6, 0xb, 0x0, 0x7, 0x259, 0x2, 0x0, 0x1200, 0xffffffff, 0x80000001, 0x8, 0xffff9dcb, 0x7, 0xfffffffb, 0xfffffffd, 0x6, 0x81, 0x80, 0x0, 0x0, 0x6, 0x4, 0xb, 0xffffff48, 0x7ff, 0x7, 0x3ff, 0x2, 0x5, 0x2, 0x6, 0xfff, 0x6, 0x6, 0xff, 0x3ff, 0x1, 0x5, 0x3987, 0x0, 0x3, 0xd, 0x401, 0x7, 0x6, 0x4, 0x5, 0x5, 0x0, 0x2, 0xc, 0x3ff, 0x200, 0x3, 0x81, 0x3, 0xb8, 0x3ff, 0xffff7fff, 0x2, 0x0, 0xd850, 0x5, 0x6d1, 0x78, 0x2, 0x8, 0x7, 0xffffffff, 0x82000, 0x4, 0x1, 0xf5bb, 0x8c81, 0x9, 0xfffffffd, 0x80000001, 0x1000, 0x387, 0x7, 0x3ff, 0x4, 0x10001, 0x10001, 0xe, 0xd763, 0xfffffff8, 0x80000000, 0x3, 0x8, 0x8, 0xffffffff, 0x4, 0x0, 0x1, 0x0, 0x6556, 0x7, 0x1, 0xe, 0x4, 0x4, 0xd, 0x0, 0x1, 0x5, 0x0, 0x1, 0x7a3e, 0xfffffc01, 0x2, 0x8001, 0xfffffff7, 0x7, 0x2, 0x401, 0x81, 0xc0, 0xcf3, 0xf9e7, 0x9, 0x77e, 0xe72a, 0x1000, 0x0, 0x80, 0x8e8b, 0x6, 0x4, 0x81, 0x80000, 0x9f, 0x9, 0x7, 0x6, 0xff, 0x6, 0xffe0, 0x401, 0xd51, 0x6, 0x5, 0x8, 0x6, 0x1, 0xb, 0x200, 0x1, 0x7fff, 0x1ff, 0xffffff18, 0xa, 0x2, 0x9, 0x300000, 0x7, 0x3ff, 0x221, 0x3, 0x4b20c50e, 0x4, 0x5, 0xfffff27a, 0x934c, 0x1ff, 0x5, 0x3, 0x4, 0x7, 0x1d92, 0x800, 0x3ff, 0xaffb, 0xf, 0x3, 0xb46, 0x10001, 0x401, 0x8000, 0xd, 0x100, 0x6, 0x4, 0x3, 0x5, 0x2c, 0x4, 0x6, 0x8, 0xfffffff8, 0x1, 0x7, 0xa, 0x999, 0x7fff, 0xa2, 0x2, 0x9, 0xb, 0x3, 0x6, 0x80000001, 0x6, 0x1, 0xfffff3ed, 0x6f99cb1e, 0x5, 0x7fff, 0x80000001, 0x400, 0x9, 0xc, 0x7ff, 0x5, 0xf0a, 0x6a19, 0x4, 0xffffffc0, 0x1, 0x1, 0x7, 0x7, 0x8, 0x5, 0x4, 0xfff, 0xa063, 0x453, 0x7ff, 0x7b28, 0x9, 0x2, 0xa, 0x3, 0x8a, 0x101, 0x400, 0x10000, 0xa5, 0x3, 0x8001, 0x3e, 0x5765, 0x8, 0x4, 0x9, 0x4e3e, 0x8, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0x42070883, 0x9, 0x8, {0xfb, 0x2, 0x9, 0x8419, 0x4749, 0x2}, {0x2, 0x2, 0x483, 0x564, 0x7fff, 0x2}, 0xd, 0xb, 0x6}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb550}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xfffffb04, 0x6, 0x4, 0x5, 0x7f, 0x3, 0xfffffff1, 0xe75, 0x5, 0x1, 0x4, 0x5, 0xffff, 0x2, 0x9, 0x5, 0x10000, 0x3, 0x5, 0x3ff, 0xb, 0x6, 0x3, 0x3, 0xf, 0xc0000, 0x0, 0x55e4, 0x2, 0x7, 0x1, 0x4, 0x3, 0x9, 0x80000001, 0xf, 0x2, 0x400, 0x0, 0x0, 0xffffe147, 0x6, 0x7fffffff, 0x8, 0x2, 0x80000000, 0xc, 0xaba, 0x431d, 0x2, 0x100, 0x800, 0x9, 0x2, 0x3, 0x9, 0x2, 0x6, 0x5, 0x6713, 0x4, 0x0, 0x80000001, 0xffffffff, 0xbb, 0x1ba, 0x6, 0x82, 0xfff, 0x4, 0x9, 0x1, 0x97cc, 0x55e, 0x2, 0xa, 0x1b0b, 0x7, 0x5, 0x10000000, 0x5, 0x974, 0x5, 0x5, 0x6, 0x3, 0x6, 0x7, 0x1, 0x3, 0x6, 0x3, 0x3, 0x2, 0x7fffffff, 0x3ff, 0x8, 0x0, 0x4, 0xfffffff9, 0x0, 0x0, 0x7fffffff, 0x10001, 0x101, 0x4, 0x10001, 0x2, 0xfffffffc, 0x81, 0x9, 0x1, 0x800, 0xd9, 0xa, 0xc6, 0x5669, 0x6, 0x3c0592df, 0x6, 0x4, 0x3b0ffaf1, 0x7, 0x93d, 0x80, 0x8, 0x0, 0x5, 0x1b5, 0x4, 0xfffffff8, 0x9bf6, 0x373c9a41, 0x33, 0xfff, 0x73, 0xc8, 0x7, 0x8, 0x8, 0x1, 0x4, 0x1, 0x8, 0x6, 0xfff, 0x5, 0x8001, 0xae23, 0x8, 0x7fffffff, 0x6, 0x40, 0x10, 0x9, 0x7, 0x5, 0x10000, 0x0, 0x2, 0x7, 0x8, 0x6, 0x9, 0x1, 0x3, 0x7, 0x80000000, 0x1, 0x1, 0x6, 0x7, 0xd, 0x8, 0x5, 0x8000, 0x2, 0x75, 0x9, 0x70c, 0x0, 0x200, 0x7ff, 0x4, 0x4, 0xfffffffb, 0xa8000000, 0x7ff, 0x2d2c3bd9, 0xffff, 0x8, 0x9, 0x4, 0x8, 0x3, 0x4, 0x5, 0xe5, 0x6, 0x3, 0x6, 0xc, 0x9, 0x4b86, 0x7, 0x6, 0x7, 0x8, 0x7, 0xf, 0x1, 0x1, 0xc5, 0x6, 0x2, 0x6, 0x1, 0x5, 0x9, 0x7, 0x7f, 0x9, 0xf, 0x80000001, 0x101, 0x8, 0x3, 0x8, 0x1ff, 0x3, 0x7, 0x3, 0x3, 0x3, 0x3, 0xa9, 0x6, 0x6, 0x2, 0x5, 0x1ff, 0x7, 0x7, 0xc01, 0x8, 0x1000, 0x9, 0x9, 0x6, 0x6, 0x8, 0x101, 0x3, 0x8, 0x400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1bbd, 0x0, 0x5242712e, 0x2, 0x9, {0x7, 0x0, 0x7fff, 0x1f68, 0x9, 0x4}, {0x6, 0x1, 0x1, 0x3, 0x1f, 0x9}, 0x2, 0x40, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]]}, {0x5d, 0x6, "d088c65ee1f8ec963cfe5b85ddcbb84636f0f6885f42984a5fa6708a9b6aa83df95ab049d3c8d20306fef2f97d5120c97541646d00893abefe87c8a92395256a58e7503d8c132264798116b1da8daa898cf29e54c91287d69c"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x844, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r8}, @TCA_ROUTE4_IIF={0x8, 0x4, r9}, @TCA_ROUTE4_POLICE={0x830, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3, 0xfffffff9, 0x0, 0x9, 0x1, 0x4, 0x70558f4f, 0x7, 0x8, 0x1, 0x7c, 0x79, 0x7, 0x2, 0xfffffe02, 0xf, 0xfffffa68, 0x3ff, 0x8, 0x5, 0x7, 0x81, 0x2, 0x6, 0xaf, 0x9, 0x3, 0x80, 0x6, 0xfffffffb, 0x0, 0x3, 0x401, 0x800, 0x9, 0x80000001, 0x5, 0x4, 0x2, 0x4b, 0x9, 0x0, 0x0, 0x2, 0xef4, 0x3, 0x9, 0x8, 0x20, 0x5, 0x448, 0x5, 0x9, 0x6, 0x7, 0x0, 0x9, 0x5, 0x6, 0x8000, 0x101, 0x1, 0x7, 0x3, 0x7, 0x2, 0xfffff20f, 0x5, 0xd, 0x7fff, 0x8001, 0x101, 0x4, 0x2, 0x5, 0x1000, 0x3, 0xfffeffff, 0x4, 0x80000001, 0x8, 0x8, 0xffffffff, 0x2, 0x7f, 0x7, 0x2, 0xdb, 0x9, 0x6, 0x4, 0x3, 0x7, 0x1, 0x6, 0xfffffffe, 0x80000000, 0x1, 0x1, 0x6, 0xffffff81, 0x8, 0xe89, 0x9, 0x1ff, 0x0, 0x10, 0x314, 0xa, 0x80000000, 0x6e, 0x3, 0xd, 0x100, 0x1, 0x1, 0xfffffffd, 0xf, 0x4, 0xffff06af, 0x6, 0x8, 0xfffffff8, 0x2, 0x5, 0x7, 0x200, 0x9, 0x7, 0x2, 0x2, 0xb, 0x6, 0x1ff, 0x3, 0x0, 0x8, 0x8ec, 0xd, 0x2, 0x5, 0x879e, 0x4, 0x2, 0x2, 0x3, 0xffffffff, 0x7fffffff, 0x6, 0x3, 0x7, 0xa3b, 0x9, 0x800, 0x100, 0x9, 0x1, 0x6, 0x7, 0x7, 0xfff, 0x4, 0x0, 0xa, 0x200, 0x100, 0x9, 0x0, 0xe7aac01, 0x1, 0xffffff00, 0xd4e, 0x8, 0x1, 0x3113, 0x2f, 0x9, 0x1, 0xffff, 0x80, 0x1, 0x75a4, 0x0, 0x8, 0xa9, 0x9, 0x1, 0x2, 0x401, 0xcb14, 0x401, 0x952, 0x6, 0x6, 0xffffffff, 0x1ff, 0xba6, 0x19, 0x200, 0x7, 0x8, 0x5, 0x0, 0xffffffff, 0xe86, 0x3, 0xf, 0x1, 0xfffffe00, 0x4, 0x101, 0xcbf, 0xf06c, 0x4, 0x9, 0x1, 0x0, 0x9, 0x7, 0x140, 0x8, 0x6, 0x4, 0xfffffff7, 0x3, 0x2, 0x7, 0x9, 0x9, 0x401, 0x9, 0xfffffff7, 0x3b, 0x7, 0xd, 0x7f, 0x7, 0x2, 0x80000001, 0xfffffffd, 0x0, 0x10000, 0x0, 0x80000001, 0x1, 0x1, 0x8000, 0x8, 0xfffffffc, 0xfffffffe, 0x0, 0x1, 0x8, 0xa, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x10, 0x9, 0x1ff, 0x3, 0x8, 0x7, 0x6000000, 0x1000, 0xf, 0x2, 0x7, 0x8, 0x8, 0x7, 0xc0, 0x3, 0x1, 0x0, 0x3ff, 0x2, 0xbf, 0x5, 0x3, 0x1, 0x7fffffff, 0xc, 0x3, 0x0, 0x2c52, 0xfffffffc, 0x800, 0x4, 0xfffffff7, 0x5, 0xff, 0x4, 0x8, 0xc, 0x5, 0x6, 0x0, 0x598, 0x6, 0x5, 0x5, 0x3ff, 0xffffffff, 0x28000000, 0x7, 0x8000, 0x5, 0xe00, 0x7fffffff, 0x4, 0x3, 0xa7ab, 0xbe, 0xce3f, 0x1, 0x4, 0x3, 0x2c, 0x6, 0x7fff, 0x2e800000, 0xf, 0xf4d7, 0xfffff801, 0x400, 0x10000, 0x2, 0x40, 0x82b2, 0x7, 0x3, 0xff, 0x7ff, 0x4, 0xe5, 0x9, 0xfff, 0xad, 0x7, 0x6, 0x1b4f, 0x7, 0x100, 0x3, 0x7, 0x6, 0x200, 0x9, 0x9, 0x0, 0x5, 0x4, 0x488, 0xffffffff, 0xc25, 0x5, 0x2, 0x1ea, 0x8b7, 0xcc59, 0xfffffffd, 0x9, 0x4, 0xfffffffe, 0x0, 0x4, 0x9, 0x2, 0x15f, 0x5, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x5, 0x0, 0xffff638a, 0xa44, 0xffffff21, 0xffff6791, 0xe35f, 0x5, 0xff, 0x0, 0x28ef, 0x5, 0x5, 0xfffffc00, 0x3, 0xfff, 0xdb, 0x8, 0x370c3139, 0x4, 0xbe, 0x7ff, 0xfffffff8, 0x101, 0x4, 0x4, 0xffffff35, 0x3, 0x3, 0x6, 0x3, 0x0, 0x8, 0xe4f, 0x101, 0x7320, 0x5, 0x7, 0x9, 0x8, 0x5, 0x81, 0x2, 0x2, 0xefb, 0x2, 0x5, 0x1005, 0x3, 0x0, 0xff, 0x9, 0x4de238a2, 0x8, 0x9, 0x1, 0xa, 0x1, 0x3, 0x2, 0x2e, 0x40, 0x1, 0x1, 0x6, 0x3, 0x1ff, 0x3, 0x9, 0x788ef536, 0x0, 0x0, 0x2, 0x8, 0x5, 0x40, 0x7fffffff, 0x3, 0x1, 0x7, 0x6351, 0x9, 0x7, 0x4, 0x80, 0x9, 0x3ff, 0x3ff, 0x140, 0xfffffff9, 0x2, 0xfffffffc, 0xc78, 0x2, 0x5, 0xfffffffb, 0x9, 0x2, 0x6450, 0x2, 0x9, 0x200, 0x2, 0x0, 0x6, 0xe8, 0x50, 0x3d16, 0x8000, 0x2, 0x7d09, 0x0, 0x5, 0x2, 0x81, 0x4, 0xc000, 0x6, 0x1, 0x7, 0x9, 0x8, 0x4, 0x2, 0x8000, 0x4, 0x8, 0x3, 0x0, 0x6, 0x2, 0x3, 0x9, 0x8, 0x7]}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @filter_kind_options=@f_basic={{0xa}, {0x2ed0, 0x2, [@TCA_BASIC_POLICE={0xc34, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffd}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x401, 0x2, 0x359, 0x101, 0x6, 0x2, 0x2, 0x800, 0x1, 0x9, 0x0, 0x7, 0x5, 0xe84, 0x70000, 0x7ff, 0x76, 0x7fffffff, 0x19a, 0x7, 0x97b1, 0xd09, 0x4, 0x9, 0x35, 0x5, 0x7, 0x5, 0xffffffff, 0x4, 0x6b3, 0x3, 0x80000000, 0x9, 0xf, 0x5, 0x2f00, 0x8000, 0x2269, 0x1, 0x4, 0x2ec, 0x1, 0x69d, 0x0, 0x1, 0xfffffffa, 0xd12b, 0x1ff, 0xffff, 0x7, 0x1, 0x8cb5, 0x6, 0x594, 0xe1, 0x0, 0x3, 0x3, 0x4, 0x9, 0x1, 0x7, 0x7, 0xc8, 0x0, 0x4, 0x8, 0xffff21cf, 0x80000000, 0x9, 0x3, 0x4, 0x1, 0xfffffffc, 0x7, 0x50, 0x1, 0x0, 0x2, 0xff, 0x0, 0x24, 0x0, 0x3962b386, 0x8, 0x10001, 0xe, 0xd60327b6, 0x1, 0x0, 0x6d37, 0x0, 0x7, 0x10001, 0x400, 0x9, 0xfffffffd, 0x2, 0xa2000000, 0x4, 0x6a, 0x5, 0x7, 0x3, 0x1, 0x5, 0x4, 0x0, 0x5, 0x10001, 0x8a94, 0x8, 0x0, 0x5, 0x2, 0x6, 0xcbbb, 0x3ff, 0x5, 0x9, 0x7, 0x7d64, 0xc6, 0xb, 0x3, 0x9, 0x8d0, 0xffff, 0xb5, 0x1ee676f7, 0x2, 0x5, 0x6, 0xc4, 0x3ff, 0x6, 0x2, 0x0, 0x0, 0x8, 0x4, 0xfffffff8, 0x519a9437, 0x1, 0x2, 0x3, 0x4, 0x0, 0x3c, 0x3, 0xadc, 0x4, 0x2, 0x6, 0x5, 0x3, 0x80000000, 0xffffff00, 0xffffffff, 0x7fff, 0x33, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x3, 0x3, 0xd, 0x10, 0x800, 0x5, 0x6, 0x9, 0x1, 0x7, 0x9, 0xc252, 0x8, 0x710, 0x15ba5682, 0x10, 0x6, 0x1, 0x9, 0x0, 0x0, 0xffffffc1, 0xc, 0xd, 0x5, 0x1000, 0x7, 0x5, 0x6, 0xfffffff6, 0x8199, 0x81, 0x67, 0x0, 0x9, 0x8000, 0x1, 0x5, 0x0, 0x4, 0xd610, 0x9, 0x10, 0x100, 0x0, 0x4, 0x5, 0xd563, 0x1523, 0x2, 0x4, 0x1, 0x3, 0x7, 0xffffffff, 0x3, 0x7, 0xc, 0x7f, 0x3, 0x2, 0x4, 0x6, 0x1, 0x9, 0x7, 0xffffffff, 0x7, 0x7, 0x9cc, 0x5, 0x8, 0x7dd, 0x32f, 0x9, 0x5, 0x7fffffff, 0x5, 0x37a, 0x5, 0x1, 0x3, 0x2, 0x704, 0x1, 0x785, 0x1, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x9, 0x7ff, 0x7, 0x3, 0x1, 0x9, 0x10001, 0x7, 0x800, 0x2, 0x2, 0x2, 0x8001, 0x36ac, 0x9, 0xfffffffb, 0x200, 0x0, 0xfffffff9, 0x4, 0x9, 0x79d, 0x3, 0x3f2, 0xffffea15, 0xfffffffe, 0x3, 0x100, 0xf1, 0x1, 0xffffffff, 0x3, 0x7, 0x2, 0xfffffff7, 0x0, 0x2, 0x80000000, 0x6, 0xffff, 0x8, 0x7a, 0x6, 0x3, 0x8, 0x6, 0x63, 0x4d1, 0x2, 0x81, 0x6, 0x0, 0xd6, 0x3, 0x4, 0xfffffff7, 0x5, 0x100, 0x1, 0x40, 0xe, 0x5, 0x4, 0x6, 0xfffffff9, 0xffff, 0x5, 0x80, 0x5, 0xffffffff, 0x4, 0x400, 0x3, 0x5308, 0x4, 0x5, 0x500, 0xa, 0x6, 0x8, 0x8, 0x1ff, 0x80, 0x9, 0x6, 0x9, 0x4, 0x3ff, 0x3a, 0x100, 0x3, 0x4, 0x5, 0xff, 0x9, 0xe, 0x8, 0x4, 0x200, 0x10000, 0x5, 0x8, 0x3ff, 0x7fffffff, 0xe, 0x1, 0x2, 0x8, 0x0, 0x100010, 0xfffffff5, 0x8c58, 0x78a, 0x7, 0xa53, 0x8, 0x1, 0x80000001, 0x2, 0xd, 0xb51, 0x4, 0x1000, 0xfffffffa, 0x0, 0x6, 0x3, 0x6, 0x80, 0x9fcc, 0x8, 0x9, 0x2, 0x1e500, 0x553e964b, 0xf, 0xb4d, 0x6, 0xb6, 0x4, 0x200, 0x2, 0x4, 0x3, 0x7f, 0x607e, 0xb, 0x7fffffff, 0x0, 0x2, 0x7, 0x6, 0x8001, 0x7, 0xc, 0x2, 0xffffffff, 0x2, 0x1, 0x0, 0x2, 0x6, 0x4, 0x40000000, 0x0, 0x9, 0x9, 0x1ff, 0x4, 0x8, 0x1, 0x3, 0x8, 0x9, 0x4a6, 0x6, 0x0, 0x1000, 0xfffffff9, 0x3, 0x7aa5aa8a, 0xca06, 0x9, 0x6, 0x0, 0x8, 0x9494, 0x9, 0x5, 0x8, 0x1ff, 0x57c4, 0x7fff, 0x8, 0x7, 0xfca0, 0x8000, 0x9, 0xfffffffd, 0x400, 0x7ff, 0x2, 0x8, 0x5, 0x1f64, 0x8000, 0x27, 0x6, 0x7fffffff, 0x0, 0x10000, 0xfffffff9, 0x5, 0x8, 0xab3, 0x2, 0x0, 0x7, 0x5, 0x4, 0x5, 0x3, 0xbb, 0xff, 0x1000, 0x9, 0xb, 0x10001, 0x1, 0x4, 0x2, 0x5, 0xf, 0x9, 0x8, 0x0, 0x9, 0x3d, 0x80000001, 0x5, 0x7, 0x8, 0x5, 0x1, 0x400, 0x6, 0x7, 0x3ff, 0x8, 0x6, 0x4, 0x7, 0xe3, 0x1, 0x1ba]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x49e2e407, 0x0, 0x4, 0x5, 0xffffff0c, 0x9, 0x800, 0x9, 0xf, 0x732a, 0xad47, 0x4, 0xfffffffc, 0x3, 0x6, 0x80000001, 0x6, 0x1ff, 0xfffffff9, 0x6, 0x9, 0x9, 0x8001, 0x4, 0x7, 0x0, 0xfffffffd, 0x100, 0x3, 0x4, 0x3, 0x3, 0x1c57, 0x1, 0x4842, 0x8, 0xfffffffb, 0x4010000, 0x3, 0xfffffffd, 0x5, 0xfffff48e, 0x1, 0x200, 0x15, 0x9, 0x7, 0x4, 0x0, 0x21, 0x9, 0x80000000, 0x4, 0x9, 0x10, 0x8, 0x8, 0x3, 0x1, 0x4, 0x6, 0x2, 0x4, 0x8, 0xffffffff, 0x1, 0x7f, 0x0, 0x4, 0x9, 0x1, 0x8, 0x1, 0x10, 0xfffffffb, 0x2, 0x9, 0x9, 0x2796, 0x7, 0x10, 0x9, 0xfe000000, 0x9, 0x3, 0xfffffffe, 0x0, 0x0, 0x1000, 0xf, 0xfffffff8, 0x0, 0x1, 0xffffff16, 0x8, 0x5c2, 0x5, 0x0, 0xcea3, 0x7b, 0x8, 0xfffffff8, 0x3, 0xf, 0x4, 0x6, 0x7ff, 0x10, 0x81c, 0x4, 0x5, 0x2, 0xfffffffa, 0x80000001, 0x4, 0xff, 0x6, 0x3, 0x1, 0x401, 0x4, 0xfffff000, 0x9, 0x6, 0x5, 0x0, 0xea, 0xe8bc, 0x9, 0x5, 0x3, 0x29, 0x8, 0x42d3, 0xd, 0x8, 0x2, 0xffff, 0xd14, 0x7, 0x2, 0x101, 0xffffff00, 0x1000, 0x0, 0x3, 0x1, 0xfffff793, 0x610, 0x2, 0x6, 0x1, 0x0, 0x0, 0x1, 0x9, 0x2, 0xb52, 0x7, 0x80000000, 0x1ff, 0x0, 0x8e41, 0xf, 0x6d40, 0x9, 0x2, 0x80, 0x1, 0x5, 0x18, 0x3df1f9e7, 0x3, 0x7d583725, 0x10001, 0x0, 0x9, 0x20000, 0x3, 0x3, 0x6, 0x9, 0x80000000, 0x4, 0x4, 0x7fffffff, 0x997, 0x0, 0x8, 0xd4ca, 0xd, 0x7, 0x80, 0x95, 0x0, 0x10001, 0xd462, 0xfffffffd, 0x3, 0x1ff, 0x81, 0x1, 0x9, 0x8, 0x8001, 0x8001, 0x1, 0x6, 0x5, 0x5, 0xfff000, 0x339, 0x4, 0x7ff, 0x6, 0x5, 0xbeb7, 0xb, 0xd15, 0x3, 0x800, 0x6, 0x59d1, 0xfffffffb, 0x5, 0x10001, 0x0, 0x919b, 0x101, 0x4, 0x3, 0x6, 0x5, 0x2, 0x1b, 0x0, 0xe, 0x0, 0x7, 0x4, 0xeae, 0x6, 0x80000001, 0x9, 0x2, 0x6, 0x2, 0xfffffff0, 0x2, 0x4, 0x1, 0x1, 0x7fffffff, 0x4, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0x8}}, @TCA_BASIC_EMATCHES={0x324, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4fec}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0xd}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xc}, {0x8, 0x88}}}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x472, 0x7, 0x40}, {{0x4, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2084}}, @TCA_EMATCH_TREE_LIST={0x2e0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x224, 0x1, 0x0, 0x0, {{0xf5a3, 0x9, 0x800}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x70, 0x5, "26ff613006e51309eb5424adde3dd56f89f6d0158c3af41af46150d5921522e2af44fccdfbf5846a10ae497239a44b675d26d72540c07d4254da528d36627ce190785539dbffafab8532d2e0d1f70bdf386b6688f87eebbf551229a221dd846c3d2f049cc3118d517bd55602"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x567fff7b812673fe}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0xa9, 0x5, "5e104708ddc9ddc9dca804b5da1f82cf0b957df799fdd09ee440df5e5a2b081afa86ad6d38255f24258fd6d662dc8bf0012528106c43b7a2a5b1e136199485186f36277876038a8ae18f05068ae73f5ef9c836aaa0b330ff8d1d195491ac7036bc9af22dcf3180a980b9b634802958a33547dcadb0fbab65a945fcac7eb994c4c85a42c59ce0ed04b855849982646a0b1ab25d4d13d8da3eff80a1c5559edb46ce478fe58f"}, @TCA_EM_IPT_MATCH_DATA={0xc6, 0x5, "241143e3af01c2524224fb1920393a57b0dae2882ce6b9f9d20cee3863dc399078be93e7aa6c1cac306c253816f00c2d3ef1647eb46d72a5cdb8425955db6486dba5d730bde799d41ad5b663cc16a95a883dfbd1d81b26e52c2047c4a7644401138fe7a4c8aee6f5aa1a4c132e94c08a57b50e844b5289d95532f9f0e1d6f98075de52cbf0943c39af7b2d8831a0e6b01f969f367329b03debc556106db167f7e4a290fea5e3d2cf601d05579eda287f3f7ed96a2836b5f32e039330ae7682426932"}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x400, 0x7, 0x3}, {{0x0, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_META={0xa4, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="3dc4"]}, @TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_VAR="772e33f2c5", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR='\\u', @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="59e72b0a1075d036", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="80ff4e3cb7f15007", @TCF_META_TYPE_VAR="433330839be4078a5aa1", @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0xaf, 0x2}, {0x5, 0x8, 0x2}}}, @TCA_EM_META_RVALUE={0x28, 0x3, [@TCF_META_TYPE_VAR="2adbac", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="ad8c2bd331", @TCF_META_TYPE_VAR="9c", @TCF_META_TYPE_VAR="bcc0f66a2adb", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="220e8b3e1888961785e6", @TCF_META_TYPE_VAR="14fc08"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x2, 0x2}, {0x81, 0x8, 0x2}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR="84b88b48", @TCF_META_TYPE_INT=0x920]}]}}]}]}, @TCA_BASIC_ACT={0x12ec, 0x3, [@m_ife={0x10bc, 0x20, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x0, 0x2, 0x3}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffe}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x100, 0x7, 0x1, 0x1000, 0x91}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x6, 0x100, 0x9}, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0x130, 0xb, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x65f}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xaf8, 0xffffffff, 0x10000000, 0x8, 0x8}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x2, 0x4, 0x6, 0x1}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x8, 0x4, 0x7fffffff, 0x8fd}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4f}]}, {0xa2, 0x6, "a695b84885b3e047c991f738d77c6c353f3af8d3757cb808d8a4703a6e96c610cbaec4189c4e14c4956ffe9cfac583974a5e20b6e2f64fea5b3969b13c64bb22dc85f6577a5e1b1d1128b5b8c5ecbaf6a319f35a77cdc659e807d67b88aafa72f78583f746133a2b57b5432f261925406f5e6926d09b50328c028e0a0d6549bda0ec161374e20f103b43896cbad090a43dd956705dd91d2d9fa9230f9ba7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xfc, 0x1a, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x15f4, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x7, 0x10000000, 0x3, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x264, 0x4, 0x3, 0x8a}}]}, {0x93, 0x6, "167372544cbffa5b74fce984df40988e087427efb6d7ae0fea182616d991cf44ed5757fb73b43d899910309d28b72bf467630d3dd296c8714f678956f86ac0eb950200aefb870d3d2e8a39a5158d29569a69ee56d46336a94effbad8058eb76a44a4490d2114a4d99951f7d5f5114366d94bcf2d52dd54ffa0b086d5f3a7488b011ad25cd54d2b5ba1f2b7c4a98fde"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_BASIC_POLICE={0xc80, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0xfff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3, 0x0, 0xaed6, 0x4, 0x8, 0x2, 0xfff, 0xb, 0x5, 0x341c000, 0xffff, 0x595, 0x2, 0x8, 0x9, 0x0, 0x1, 0x30, 0x7, 0xe, 0x490c, 0x0, 0xd6e, 0x0, 0x4, 0xfffffffa, 0x0, 0x7, 0x8, 0xf9, 0x0, 0x2800000, 0x1000, 0xcd01, 0x3fa, 0x7, 0x8, 0x7d1, 0x5, 0x9, 0xa, 0x3, 0x0, 0x1, 0x7, 0x4, 0x8, 0x7, 0xf8, 0x0, 0x285, 0x49, 0x7f, 0x1, 0x7fffffff, 0x2, 0xe, 0x0, 0xfffffff8, 0x1, 0x8, 0x2, 0x8f8, 0x1ff, 0x800, 0x8, 0xb0000000, 0x80d8, 0x8, 0xd, 0x964, 0x3ff, 0x5, 0x1, 0x8, 0x80000001, 0x0, 0xfffffffc, 0xc, 0x9, 0x0, 0x6, 0x670, 0x7, 0x2, 0x5, 0x5, 0x10, 0x8, 0xe488, 0x0, 0xf, 0x1000, 0xfff, 0x4, 0x5d7, 0x5, 0x9, 0x1, 0x8000, 0x2, 0x6c6, 0x7fff, 0x3, 0x6, 0x4, 0x9, 0x80000000, 0x400, 0x68d, 0x5, 0x800, 0xf4, 0x5, 0x80, 0x91d, 0x5, 0x1, 0x1, 0xd1, 0x1, 0x4, 0x8, 0x38e, 0x40, 0x5c, 0xa, 0x698, 0xfffffffa, 0x7, 0x7, 0x7ff, 0x3329, 0x75c0, 0x400, 0x9e6e, 0x7, 0x0, 0x40, 0x6, 0x10001, 0xe, 0xfffffffe, 0x7, 0x1411, 0x7, 0x76, 0xe0, 0x4, 0x9, 0x1, 0x1, 0x9, 0x5, 0x5d9, 0x80, 0x6, 0x2, 0x3ff, 0x0, 0x800, 0x1, 0xb, 0x1ff, 0xe, 0x7, 0x10000, 0xb, 0x6, 0x3, 0x94b, 0xffffff43, 0x9, 0x0, 0x80f, 0x0, 0x2, 0x2, 0x4, 0x3, 0x5, 0xfffffffa, 0xffffffff, 0xfffffffc, 0x0, 0x9, 0x10001, 0x5, 0x7, 0xfffffff9, 0x1000, 0xffffffff, 0x3, 0x4, 0x7, 0x3, 0x401, 0x9, 0x1, 0x0, 0x4, 0x8, 0x5, 0x2, 0xd, 0x1, 0x2, 0x7, 0x0, 0x9, 0xad, 0x8000, 0xdb, 0x4, 0x8, 0x10000, 0x5, 0x0, 0x800, 0x5, 0x0, 0x1000, 0xd3ed, 0x7, 0x400, 0xfff, 0x4, 0x69a89d, 0x1, 0x7ff, 0xe27, 0x4, 0x6, 0x2, 0x7, 0x2, 0x98, 0x6, 0x6, 0x2, 0x183, 0xff, 0x21630c76, 0x38, 0xd, 0x9, 0x8, 0x80, 0x2, 0x6, 0x800, 0x8, 0x4, 0x5, 0x162d]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0xffffffff, 0x4, 0xb8, 0x0, 0xc02a, 0xc78, 0x9, 0xfffffffa, 0x400, 0xfffffff7, 0x401, 0xfffffffb, 0x7, 0x5, 0xffffffc7, 0xa, 0x8, 0x58, 0x2, 0xfffffff8, 0x9, 0x5, 0x3, 0x466d, 0x7fff, 0x4, 0x6, 0x2, 0x8, 0x3, 0x5a, 0x34c, 0x2d, 0x0, 0x2, 0x306e, 0x3, 0x5, 0x4, 0x5, 0x2, 0x2, 0x5, 0x8, 0x6, 0x6, 0x65a, 0x2, 0x10000, 0x7, 0x9, 0x3b, 0xd, 0x1, 0xe, 0x6, 0x4, 0x100, 0x3ff, 0x1, 0x7bb, 0x71123aed, 0x7fff, 0x4, 0x583, 0x8, 0x1, 0x80000000, 0xfffffffb, 0x1, 0xf, 0x58, 0xd, 0x1ff, 0x1, 0xfffffff0, 0x2, 0x4, 0x7, 0x14, 0x1, 0x2, 0x6, 0x552, 0x1, 0xfffffffb, 0x9, 0x9, 0xfffff800, 0x8, 0x4, 0x4, 0x1, 0x322, 0x94, 0x6, 0x7, 0x1ff, 0x6, 0x3, 0x3, 0x7, 0x5, 0x6, 0x6, 0x8, 0x9, 0x40, 0x9, 0x2, 0x1, 0x5, 0x9, 0x10001, 0x6, 0x4, 0x5ee9e557, 0x7, 0x3, 0x0, 0x9, 0x200, 0x100, 0x100, 0x6, 0x9, 0x6, 0x9, 0x2, 0x8, 0x4, 0x3, 0x10, 0x1, 0x7, 0x2, 0x6, 0x80, 0x0, 0x9, 0x4, 0x1, 0xe, 0x1, 0x3, 0x4, 0x7, 0x5, 0x800, 0x6, 0x4, 0x6, 0xfffffff6, 0x4, 0x8, 0xe, 0x1, 0x6, 0x1, 0x8, 0x3, 0x5, 0x6, 0x2, 0x2fc6b3c3, 0xef, 0xfffffffc, 0xe47d, 0x3, 0x39b, 0x7, 0x1000, 0x3, 0xd, 0x8000, 0x2, 0x7, 0xb2, 0x7fffffff, 0x2, 0x5, 0x9, 0x400, 0x8d, 0x80000001, 0x3b, 0x1ff, 0x5, 0x5, 0x3, 0x19, 0xffff, 0x5, 0xff, 0xa, 0x7fff, 0x74, 0x6, 0xcc75, 0x6, 0x3, 0x1000, 0x7, 0xed12, 0x0, 0x3, 0x1, 0xfff, 0xb8, 0x4, 0x2, 0xe33, 0x4, 0x0, 0x1, 0x3, 0x11, 0x8, 0x5, 0x4, 0x2, 0x81, 0x0, 0x6, 0x1, 0x3, 0x5, 0x6, 0x7, 0x9, 0x7, 0x10, 0x3, 0x3d, 0xbdc, 0x9, 0x2, 0x3, 0x0, 0x6, 0x1, 0x0, 0x7, 0x7f, 0x66c, 0xe, 0xffff7fff, 0xb07, 0x9, 0xb8, 0x1, 0x6, 0x4, 0x3, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x0, 0x0, 0x3, 0x3, 0x2, 0xffffffff, 0xe, 0x0, 0x100, 0x9, 0x3, 0x7fffffff, 0xa4, 0x7, 0x3, 0x7984, 0xfff, 0x4, 0x6, 0xe, 0x5, 0xff, 0x6, 0x3, 0x200, 0xffffffff, 0x9, 0x7b0, 0x4, 0xc8ed, 0x1, 0x9, 0x987, 0xa, 0x1ff, 0x2, 0xfd51, 0x80000000, 0xffffff48, 0x200, 0x3, 0x4, 0x401, 0x1000, 0x9, 0xfe000, 0x6, 0x64d2, 0xb, 0x81, 0x4, 0x7, 0x80000001, 0xd, 0x4, 0x9, 0x0, 0x80000001, 0x6, 0x1, 0x8, 0x6, 0x7f, 0x8, 0xf, 0x6, 0x0, 0x6, 0x819, 0x1, 0x5, 0x3, 0x4, 0x4, 0x1d, 0x9, 0x5, 0x2, 0x5, 0x1, 0xea9f, 0x6, 0x1800000, 0x5, 0x6, 0x80, 0x7, 0xfffffffb, 0x4800000, 0x3, 0x7fffffff, 0xa213, 0xe, 0x2, 0xfffffff9, 0x2, 0x47, 0x3ff, 0x0, 0x7, 0x10, 0x1, 0x73e2, 0xffffffff, 0x4, 0x0, 0x2, 0x2, 0x4e2, 0x2, 0x2, 0x4, 0x4, 0x1, 0x7, 0x9, 0xd9a, 0x9, 0x40, 0xab6e, 0x46e, 0x80, 0x1, 0xf, 0x6, 0x400, 0x80000000, 0x5, 0x4, 0x100, 0x0, 0x81, 0x1, 0x6, 0x3, 0x7ff, 0x4, 0xa, 0x7, 0x4f, 0x7, 0x80000001, 0x45d1, 0x5, 0x8, 0x6, 0xfffffff7, 0x7f, 0x3, 0x6, 0x0, 0xfffffff4, 0x0, 0x8, 0x1, 0x1, 0xfffffff1, 0x3, 0x5, 0x410, 0x8f27, 0x5, 0x4, 0x854, 0x7b, 0x5, 0x9, 0x5, 0x8de9, 0xff, 0x0, 0x0, 0xf9, 0x80000001, 0x8000, 0x8, 0x76, 0x7, 0x9, 0xb, 0x4, 0xffffb733, 0x5, 0x5, 0xff, 0xd, 0x7ff, 0x5, 0x4, 0x756d, 0x800, 0xc, 0x10, 0x800, 0x75e, 0x400, 0x10, 0x3, 0x8, 0x4bba, 0x4, 0x9, 0x3, 0x7f, 0x45ef, 0x10000, 0x8, 0xd1, 0x5, 0x4b, 0x8, 0x5, 0xa, 0x10001, 0xff, 0x1, 0x8, 0x3, 0x9, 0x8, 0x8b1, 0x10000, 0x1, 0x9, 0x6, 0x7e, 0xffffffff, 0x9, 0x259a, 0x7fffffff, 0x80000000, 0x4, 0x7, 0x9, 0xbae, 0x2, 0x7, 0x7, 0x400, 0x2, 0xd6, 0xffff, 0x4, 0xe, 0xfffffff7, 0x7ff, 0x7ad, 0x3, 0x6, 0xffff8001, 0x80, 0x7fffffff, 0x9526, 0x5, 0x174]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x20000000, 0x0, 0xfff, 0x2c91, {0x81, 0x2, 0xa5, 0xd, 0x0, 0x7f}, {0xc4, 0x0, 0x0, 0x2, 0xde, 0xe32}, 0x8, 0x3ff, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}]}}, @TCA_RATE={0x6, 0x5, {0xd5, 0x7}}, @filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_INDEV={0x14, 0x2, 'virt_wifi0\x00'}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x9da}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x3e6}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0xbb}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0xf5}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x6}}, @filter_kind_options=@f_matchall={{0xd}, {0xb14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0x1d}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe9, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_ACT={0xad0, 0x2, [@m_mirred={0x114, 0x1d, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4c7, 0x0, 0x20000000, 0x9, 0x81}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x6, 0x7, 0x4, 0x6}, 0x1, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x42, 0xff, 0x2, 0x4, 0x40}, 0x4, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7, 0x2, 0x4, 0xffffa374}, 0x2, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0x4, 0x0, 0x2a6, 0x1}, 0x1, r14}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x400, 0xf, 0x4, 0xf61}, 0x2, r15}}]}, {0x28, 0x6, "2912d48cfeb04b777e8ca0f29850de162c917c75b518622c332e700167c4a8b12703bc28"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0xe6ca09fd923f1ffd}}}}, @m_nat={0x120, 0xb, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x101, 0x2, 0xfffffe00, 0x6ff012a}, @remote, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff9, 0x2, 0x7, 0x4, 0x59}, @local, @rand_addr=0x64010102, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x5, 0xfffffffffffffffb, 0x0, 0x800}, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xc7c, 0x6, 0x3, 0x4}, @broadcast, @loopback, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x400, 0xf}, @loopback, @rand_addr=0x64010102, 0xff000000, 0x1}}]}, {0x2e, 0x6, "c6dfdf2eb1cb595aa2b4297dac6c6790bc55cfc4130e818537328e61865bd739e8ece7a8923a1c25bcc5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x134, 0x10, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x56, 0x1, 0x3, 0x3, 0x4}}]}, {0xf4, 0x6, "c58b690eedb433217ff36f3417e373fb7d30a3ed76710372894017fd02d238dc25a063ae7eaf87ee41740c80b2f866f20bd0d30a7e7a857c4acb7420b613ef1fa846bc70870a644b09f9bce3281e821fa74fa471fc62155601667314398e9b15e28a4c8b92b5c9531db6f1e2937665089790af4964923136d9ab5d27565fc08b263958e542dc3cb567399d72d259288a362119ecd2803c42db76c6c64241f830fd4f5bc6dd3b52386b17dc33d45b6506a6d1644d5e1fdefc10ef9c1420161893a1e0cd6decf38db478680a06a729de76e85f77b0204709f52ff7a2fe5b7f73eb26522983fab72adeb4e98435dd312024"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x194, 0xf, 0x0, 0x0, {{0xb}, {0xb8, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x100}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x36, 0x2, 0x0, 0x80000001, 0x7ff}, 0xd}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x200}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x200, 0xc6, 0x20000000, 0x7, 0x6}, 0x4}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x4, 0x6, 0x0, 0x5}, 0x7}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0xb1, 0x6, "a0c65fdc918209b0cc0e0ffea24c697bd1f72167dd7701b7b9ea1dd17f896a83b3b3ba20f5d6822c0d4bcc46c9065200a623926f703e54faf040a1aaa616a267d6cd88ecd1edf56042f8b8b835b34bdaf923fd06dfe583f271b1656a2d6045d98c4e0af7f2dc00cceacd71c3e79f08f9048285921bc6e4e8e40e47e08abb07f4651ea8df64d06fbb6e947c06dd0ac2b25afec1f552770e22090ed450fb659fc3bd44583737fbc51264fe4a72b0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0x164, 0x13, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1ff, 0x4, 0x6, 0x8, 0x8b6c3f85}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x401, 0x0, 0x5, 0xb}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x8, 0x5}, 0x7c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x1, 0x50b3, 0xcd1}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x2, 0x6, 0x3}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff8001, 0x7ff, 0x0, 0xdb3a, 0xe}, 0x8}}]}, {0x8e, 0x6, "88e0e94e14f87743edef96d0a289525b1d0ad4d7117e5173ecc7b45dbf6d2be95726f4ae51bfc34c249d86f7a0c4dc35cf7ad7b88f4e0b4ae138ae77ebe26cafb4af7db3bd23069bf80b03e096bb7db353868fecfe1be03f7b3d06e0893fe1462e0d2fa252fe19c25f2ef4c85c42b1b39ba460139ffc7e1001df79ff2295cda11689a5af70fa9296da19"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x194, 0x8, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x2, 0x10000000, 0x2058, 0x3}, 0x1, r16}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0x1, 0x7, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x0, 0x2, 0x9, 0x6}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x195cae08, 0xc62, 0x3, 0x7, 0x3}, 0x6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x510, 0x8, 0x3, 0xfffffff9, 0x1}, 0x3}}]}, {0xc8, 0x6, "d549b6de65510070c06f4816f7a9bfc10e849e61aed0d2fe2fe59333ea3cac9ebeb52f28e5a3e1c4d533035ee6374d4357bc2c8cc5f41603d6bb6e72018da4a8bf022f76568e4cd17c560b8985eb6c66e7a1f24b436da33e433cb9a1494207ceaf38bc0c914cbe731b5cb2555099c20164dc29b7955115f32641ed23ab7aae9a967fbdb4e8c5d98df97b738aaaeecd759ee0a5019bc46e3c696d0e41b51ffa8ee9037006d6b259f8747664956c3b0ddc8180b38203aa4bee7fbaa24b92540b7e76a24785"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0xa4, 0x1a, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x100, 0x1, 0x7, 0x9}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "2ad197ae3662377fe3e0539839501788"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x6}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}]}, {0x10, 0x6, "f3782199f8ebdaf13b1f2c34"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x128, 0x1f, 0x0, 0x0, {{0xc}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7016}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x7, 0x1, 0xa, 0xffff713d}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x5, 0x20000000, 0x0, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0xffff}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0xa93, 0x4, 0x3, 0x7}}]}, {0x84, 0x6, "ba6ae97a4ee8c49b8d83f445f780332cd8c41473d4a32f4963c850151c972f37bb4e8f6dc17982cd4c64db6659252d8ead36aa804624de5bda3cef4b2bf7b25bc418dacf2caed161b0b03bf2fe9186fa8dd432430a3a6865597621d039c82186b5e16694d5b565e0ee2413cea61bffd3290fb743814cfc882198f7f5ac080362"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x10c, 0xb, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xd667, 0xff, 0x8, 0x7fff, 0x4}}, @TCA_DEF_DATA={0x6, 0x3, '\xf6\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'ipvlan1\x00'}, @TCA_DEF_DATA={0x6, 0x3, '}\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'inner\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x7, 0x5, 0x3, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3, 0x3, 0x4, 0xd}}]}, {0x70, 0x6, "661428ffd8f4c1d0ebd75e60484a22c93ef1fd995319405173a82b0563f9fe45809812e7bad5dfe51e34ddecbb60d35772696782d3c4c2be02968010d3c87f9eb731ad5f10ac3ce11ff3cebbef4eda98ab9a38a8cb5d1aab586e8a9dfc9d3db3c1fafddfa9d84b432de582d7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x9}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0xff}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0x6}]}}]}, 0x52f8}, 0x1, 0x0, 0x0, 0x48851}, 0x20000001) 288.754409ms ago: executing program 0 (id=2773): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) setxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), &(0x7f00000003c0)=@ng={0x4, 0x5, "f76497fdf2f45661022e3ef750d0c50ca791a301"}, 0x16, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', 0x0}) sendmsg(r1, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5, 0x0}) fcntl$lock(r2, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r5}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r6, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0x4a, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000000000008100000008000300", @ANYRES32=r9, @ANYBLOB="0a00060008021100000000004000330030080d0008021100000008021100ffffff770008333e00010001002d1a008001b2816362000000000c0057001600000008001200000007"], 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) syz_clone(0x1100, 0x0, 0x1c, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=2774): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000240)={0xfffffc01}, 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000082505a1a44000010203010902"], 0xfffffffffffffffc) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) dup2(r4, r2) kernel console output (not intermixed with test programs): 1758109008.444:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14921 comm="syz.3.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542858eba9 code=0x7ffc0000 [ 734.102786][ T30] audit: type=1326 audit(1758109008.444:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14921 comm="syz.3.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f542858eba9 code=0x7ffc0000 [ 734.157435][T14937] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2295'. [ 734.519410][ T5948] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 734.681897][ T5948] usb 3-1: Using ep0 maxpacket: 8 [ 734.720637][ T5948] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 734.730870][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.738900][ T5948] usb 3-1: Product: syz [ 734.749628][ T5948] usb 3-1: Manufacturer: syz [ 734.756055][ T5948] usb 3-1: SerialNumber: syz [ 734.780406][ T5948] usb 3-1: config 0 descriptor?? [ 734.791283][ T5948] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 734.831386][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 735.002765][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 735.011621][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 735.022150][ T10] usb 2-1: config 3 has an invalid interface number: 106 but max is 0 [ 735.030696][ T10] usb 2-1: config 3 has no interface number 0 [ 735.036918][ T10] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 735.048231][ T10] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 735.059649][ T10] usb 2-1: config 3 interface 106 has no altsetting 0 [ 735.068868][ T10] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 735.078156][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.087188][ T10] usb 2-1: Product: syz [ 735.091786][ T10] usb 2-1: Manufacturer: syz [ 735.096424][ T10] usb 2-1: SerialNumber: syz [ 735.105845][T14942] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 735.113602][T14942] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 735.328198][ T10] kobil_sct 2-1:3.106: KOBIL USB smart card terminal converter detected [ 735.349557][ T10] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 735.370177][ T10] usb 2-1: USB disconnect, device number 13 [ 735.396208][ T10] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 735.422029][T14947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2299'. [ 735.434608][ T5948] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 735.445289][ T10] kobil_sct 2-1:3.106: device disconnected [ 735.457025][ T5948] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 735.472282][ T5948] usb 3-1: USB disconnect, device number 124 [ 735.568466][T14951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2301'. [ 735.667941][T14955] netlink: 'syz.3.2303': attribute type 1 has an invalid length. [ 735.714342][T14955] 8021q: adding VLAN 0 to HW filter on device bond7 [ 736.080918][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'. [ 736.239631][ T5948] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 736.350881][T14970] overlayfs: missing 'lowerdir' [ 736.493991][ T5948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 736.516215][ T5948] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 736.552491][ T5948] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 736.574551][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.596716][ T5948] usb 2-1: Product: syz [ 736.609743][ T5948] usb 2-1: Manufacturer: syz [ 736.616627][ T5948] usb 2-1: SerialNumber: syz [ 736.686028][T14977] netlink: 'syz.4.2310': attribute type 1 has an invalid length. [ 737.022481][T14977] bond6: entered promiscuous mode [ 737.059719][T14977] bond6: entered allmulticast mode [ 737.133285][T14982] netlink: 'syz.1.2306': attribute type 4 has an invalid length. [ 737.157172][T14982] netlink: 'syz.1.2306': attribute type 4 has an invalid length. [ 738.075459][T14993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2312'. [ 738.643601][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2313'. [ 738.887765][ T5948] usb 2-1: cannot find UAC_HEADER [ 738.964604][ T5948] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 739.002559][ T5948] usb 2-1: USB disconnect, device number 14 [ 739.080053][T15006] fuse: Bad value for 'group_id' [ 739.092456][T15006] fuse: Bad value for 'group_id' [ 739.121069][T10719] udevd[10719]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 740.288694][T15031] syz.2.2321 (15031) used obsolete PPPIOCDETACH ioctl [ 740.708114][T15038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.717075][T15038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.840611][T15038] loop2: detected capacity change from 0 to 7 [ 740.879037][T10719] loop2: [POWERTEC] p1 p2 p3 p4 [ 740.898206][T10719] loop2: p1 start 1441792 is beyond EOD, truncated [ 740.955374][T10719] loop2: p2 start 1310720 is beyond EOD, truncated [ 740.975673][T10719] loop2: p3 start 16777216 is beyond EOD, truncated [ 741.003902][T10719] loop2: p4 start 150995490 is beyond EOD, truncated [ 741.028874][T15038] loop2: [POWERTEC] p1 p2 p3 p4 [ 741.037598][T15038] loop2: p1 start 1441792 is beyond EOD, truncated [ 741.044611][T15038] loop2: p2 start 1310720 is beyond EOD, truncated [ 741.051393][T15038] loop2: p3 start 16777216 is beyond EOD, truncated [ 741.061552][T15038] loop2: p4 start 150995490 is beyond EOD, truncated [ 741.140135][T15048] tipc: Trying to set illegal importance in message [ 741.229428][T15048] tipc: Trying to set illegal importance in message [ 741.269452][T15048] tipc: Trying to set illegal importance in message [ 741.309547][T15048] tipc: Trying to set illegal importance in message [ 741.343681][T15048] tipc: Trying to set illegal importance in message [ 741.352843][T15048] tipc: Trying to set illegal importance in message [ 741.369688][T15048] tipc: Trying to set illegal importance in message [ 741.382683][T15048] tipc: Trying to set illegal importance in message [ 741.391184][T15048] tipc: Trying to set illegal importance in message [ 741.398066][T15048] tipc: Trying to set illegal importance in message [ 741.411210][T15048] tipc: Trying to set illegal importance in message [ 741.418043][T15048] tipc: Trying to set illegal importance in message [ 741.426497][T15048] tipc: Trying to set illegal importance in message [ 741.434197][T15048] tipc: Trying to set illegal importance in message [ 741.440971][ T5948] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 741.451725][T15048] tipc: Trying to set illegal importance in message [ 741.458462][T15048] tipc: Trying to set illegal importance in message [ 741.467059][T15048] tipc: Trying to set illegal importance in message [ 741.473842][T15048] tipc: Trying to set illegal importance in message [ 741.504541][T15048] tipc: Trying to set illegal importance in message [ 741.513320][T15048] tipc: Trying to set illegal importance in message [ 741.535706][T15048] tipc: Trying to set illegal importance in message [ 741.545828][T15048] tipc: Trying to set illegal importance in message [ 741.552817][T15048] tipc: Trying to set illegal importance in message [ 741.560008][T15048] tipc: Trying to set illegal importance in message [ 741.566685][T15048] tipc: Trying to set illegal importance in message [ 741.573826][T15048] tipc: Trying to set illegal importance in message [ 741.580821][ T5948] usb 3-1: device descriptor read/64, error -71 [ 741.587756][T15048] tipc: Trying to set illegal importance in message [ 741.594786][T15048] tipc: Trying to set illegal importance in message [ 741.602013][T15048] tipc: Trying to set illegal importance in message [ 741.608941][T15048] tipc: Trying to set illegal importance in message [ 741.616467][T15048] tipc: Trying to set illegal importance in message [ 741.623839][T15048] tipc: Trying to set illegal importance in message [ 741.632973][T15048] tipc: Trying to set illegal importance in message [ 741.651732][T15043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.687480][T15043] bond_slave_0: left promiscuous mode [ 741.771768][T15043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.786537][T15043] bond_slave_1: left promiscuous mode [ 741.790150][T15055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.803759][T15055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.804305][T15043] bond0 (unregistering): (slave team0): Releasing backup interface [ 741.829782][ T5948] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 741.838567][T15043] team0: left promiscuous mode [ 741.853192][T15043] team_slave_0: left promiscuous mode [ 741.858918][T15043] team_slave_1: left promiscuous mode [ 741.885793][T15058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.901725][T15058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.908407][T15043] bond0 (unregistering): Released all slaves [ 741.980278][ T5948] usb 3-1: device descriptor read/64, error -71 [ 742.090113][ T5948] usb usb3-port1: attempt power cycle [ 742.462563][ T5948] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 742.511590][ T5948] usb 3-1: device descriptor read/8, error -71 [ 742.802423][T15076] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 742.812055][ T5948] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 742.825637][T15076] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 742.860679][ T5948] usb 3-1: device descriptor read/8, error -71 [ 743.005928][ T5948] usb usb3-port1: unable to enumerate USB device [ 743.302772][ T5866] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 743.499569][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 743.517038][ T5866] usb 4-1: config 5 has an invalid interface number: 206 but max is 0 [ 743.525479][ T5866] usb 4-1: config 5 has no interface number 0 [ 743.534348][ T5866] usb 4-1: config 5 interface 206 has no altsetting 0 [ 743.544140][ T5866] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=60.44 [ 743.557974][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.567479][ T5866] usb 4-1: Product: syz [ 743.709019][ T5866] usb 4-1: Manufacturer: syz [ 743.714460][ T5866] usb 4-1: SerialNumber: syz [ 743.938033][ T5866] usb_ehset_test 4-1:5.206: probe with driver usb_ehset_test failed with error -32 [ 743.980334][ T5866] usb 4-1: USB disconnect, device number 22 [ 744.230437][T15103] netlink: 'syz.2.2341': attribute type 1 has an invalid length. [ 744.253635][T15103] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 745.399764][T12140] Bluetooth: hci1: command 0x0406 tx timeout [ 745.415322][T15086] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 745.853615][T15086] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 745.859850][T15086] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 745.866169][T15086] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 745.872602][T15086] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 746.119637][ T5866] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 746.149666][ T5948] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 746.296738][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 746.309936][ T5866] usb 2-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 746.318980][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.332990][ T5866] usb 2-1: config 0 descriptor?? [ 746.340932][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 746.367693][ T5948] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 746.376482][ T5948] usb 4-1: config 0 has no interface number 0 [ 746.383490][ T5948] usb 4-1: config 0 interface 89 has no altsetting 0 [ 746.397209][ T5948] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 746.406820][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.414993][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 746.422613][ T5948] usb 4-1: Product: syz [ 746.426809][ T5948] usb 4-1: Manufacturer: syz [ 746.431894][ T5948] usb 4-1: SerialNumber: syz [ 746.442307][ T5948] usb 4-1: config 0 descriptor?? [ 746.452760][ T5948] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 746.462520][ T5948] em28xx 4-1:0.89: Video interface 89 found: bulk [ 746.562341][T15092] loop2: detected capacity change from 0 to 7 [ 746.569977][T15092] loop2: [POWERTEC] p1 p2 p3 p4 [ 746.575381][T15092] loop2: p1 start 1441792 is beyond EOD, truncated [ 746.582230][T15092] loop2: p2 start 1310720 is beyond EOD, truncated [ 746.589545][T15092] loop2: p3 start 16777216 is beyond EOD, truncated [ 746.596375][T15092] loop2: p4 start 150995490 is beyond EOD, truncated [ 746.617286][ T5866] usbhid 2-1:0.0: can't add hid device: -71 [ 746.631819][ T10] usb 3-1: config 0 has no interfaces? [ 746.640201][ T5866] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 746.651032][ T10] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 746.661315][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.674178][ T5866] usb 2-1: USB disconnect, device number 15 [ 746.680509][ T10] usb 3-1: Product: syz [ 746.685876][ T10] usb 3-1: Manufacturer: syz [ 746.691458][ T10] usb 3-1: SerialNumber: syz [ 746.708141][ T10] usb 3-1: config 0 descriptor?? [ 746.928115][T15115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.938442][T15115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.979603][T15127] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2346'. [ 747.104427][ T5948] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 747.253837][T15134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2348'. [ 747.322167][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.328494][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.412332][T15135] bond4: entered promiscuous mode [ 747.417406][T15135] bond4: entered allmulticast mode [ 747.449671][T15135] 8021q: adding VLAN 0 to HW filter on device bond4 [ 747.457382][T15135] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check. [ 747.460149][ T24] usb 3-1: USB disconnect, device number 3 [ 747.485421][T12140] Bluetooth: hci3: command 0x0406 tx timeout [ 747.889235][T12140] Bluetooth: hci0: command 0x0405 tx timeout [ 747.895756][ T5867] Bluetooth: hci4: command 0x0406 tx timeout [ 747.902285][T12140] Bluetooth: hci2: command 0x0406 tx timeout [ 748.045639][T15152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2349'. [ 748.209642][ T5948] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 748.220450][T15113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.230611][ T5948] em28xx 4-1:0.89: board has no eeprom [ 748.259832][T15113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.659534][ T5948] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 748.684580][ T5948] em28xx 4-1:0.89: analog set to bulk mode. [ 748.693892][T15152] netlink: 'syz.1.2349': attribute type 1 has an invalid length. [ 748.717944][ T10] em28xx 4-1:0.89: Registering V4L2 extension [ 748.739188][ T5948] usb 4-1: USB disconnect, device number 23 [ 748.747223][ T5948] em28xx 4-1:0.89: Disconnecting em28xx [ 748.954743][ T10] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 749.008668][ T10] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 749.041869][ T10] em28xx 4-1:0.89: No AC97 audio processor [ 749.113287][ T10] usb 4-1: Decoder not found [ 749.126782][T15171] trusted_key: encrypted_key: insufficient parameters specified [ 749.424104][ T10] em28xx 4-1:0.89: failed to create media graph [ 749.450673][ T10] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 749.608458][ T10] em28xx 4-1:0.89: Registering snapshot button... [ 749.943922][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input44 [ 750.074637][ T10] em28xx 4-1:0.89: Remote control support is not available for this card. [ 750.120797][ T5866] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 750.200829][ T5948] em28xx 4-1:0.89: Closing input extension [ 750.208576][ T5948] em28xx 4-1:0.89: Deregistering snapshot button [ 750.288506][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 750.347711][ T5866] usb 2-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 750.496419][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.564125][ T5948] em28xx 4-1:0.89: Freeing device [ 750.607899][ T5866] usb 2-1: config 0 descriptor?? [ 750.627098][T10719] udevd[10719]: setting mode of /dev/bus/usb/004/023 to 020664 failed: No such file or directory [ 750.677241][T10719] udevd[10719]: setting owner of /dev/bus/usb/004/023 to uid=0, gid=0 failed: No such file or directory [ 750.902223][T15179] loop2: detected capacity change from 0 to 7 [ 750.952599][T15179] loop2: [POWERTEC] p1 p2 p3 p4 [ 750.960483][T15179] loop2: p1 start 1441792 is beyond EOD, truncated [ 751.008282][T15202] fuse: Bad value for 'fd' [ 751.022100][T15179] loop2: p2 start 1310720 is beyond EOD, truncated [ 751.063240][T15179] loop2: p3 start 16777216 is beyond EOD, truncated [ 751.103201][T15179] loop2: p4 start 150995490 is beyond EOD, truncated [ 751.200421][ T5866] usbhid 2-1:0.0: can't add hid device: -71 [ 751.206456][ T5866] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 751.251864][T15205] netlink: 'syz.0.2364': attribute type 1 has an invalid length. [ 751.269144][ T5866] usb 2-1: USB disconnect, device number 16 [ 752.069670][ T5948] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 752.260587][ T5948] usb 3-1: Using ep0 maxpacket: 16 [ 752.702379][ T5948] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 752.722108][ T5948] usb 3-1: config 0 has no interface number 0 [ 752.815417][ T5948] usb 3-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 752.845885][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.865068][ T5948] usb 3-1: Product: syz [ 752.887708][ T5948] usb 3-1: Manufacturer: syz [ 752.899551][ T5948] usb 3-1: SerialNumber: syz [ 752.939229][ T5948] usb 3-1: config 0 descriptor?? [ 753.942411][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2371'. [ 754.196031][T15243] openvswitch: netlink: Missing valid actions attribute. [ 754.218180][T15243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 754.624366][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 754.624377][ T30] audit: type=1326 audit(1758109029.554:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.4.2377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f849cb8eba9 code=0x0 [ 754.744834][T15257] nfs: Unknown parameter '' [ 754.753382][T15257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.765367][T15257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.886034][ T5948] go7007 3-1:0.41: probe with driver go7007 failed with error -12 [ 754.912756][ T5948] usb 3-1: USB disconnect, device number 4 [ 756.180213][T15267] vxcan0: entered allmulticast mode [ 756.585755][T15283] fuse: Bad value for 'fd' [ 756.716807][ T24] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 756.739607][ T5941] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 756.858244][T15294] netlink: 'syz.3.2388': attribute type 1 has an invalid length. [ 756.881846][ T24] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 756.891531][ T24] usb 3-1: config 0 has no interface number 0 [ 756.898143][ T24] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 756.911204][ T5941] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.921856][T15295] netlink: 'syz.3.2388': attribute type 1 has an invalid length. [ 756.932307][ T5941] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 756.932470][ T24] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 756.951560][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.961043][ T5941] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 756.970393][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.979329][T15296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2388'. [ 756.988812][ T24] usb 3-1: Product: syz [ 756.993274][ T5941] usb 2-1: Product: syz [ 756.998070][ T24] usb 3-1: Manufacturer: syz [ 757.003228][ T5941] usb 2-1: Manufacturer: syz [ 757.008144][ T24] usb 3-1: SerialNumber: syz [ 757.013513][ T5941] usb 2-1: SerialNumber: syz [ 757.025946][ T24] usb 3-1: config 0 descriptor?? [ 757.241596][ T5941] usb 2-1: 0:2 : does not exist [ 757.267613][ T5941] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 757.306883][ T5941] usb 2-1: USB disconnect, device number 17 [ 757.414716][T10719] udevd[10719]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 757.662852][T15279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.682182][T15279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.773383][T15310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.782350][T15310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.887420][ T30] audit: type=1326 audit(1758109032.814:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.0.2392" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ffbb8eba9 code=0x0 [ 757.925964][ T24] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 758.320062][ T24] usb 3-1: USB disconnect, device number 5 [ 759.017085][T15336] binder: 15335:15336 ioctl c0306201 2000000003c0 returned -14 [ 759.409620][ T5941] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 759.574792][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.591367][ T5941] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 4.00 [ 759.606422][ T5941] usb 2-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 759.616540][ T5941] usb 2-1: Manufacturer: syz [ 759.624028][ T5941] usb 2-1: config 0 descriptor?? [ 760.030696][T15359] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2404'. [ 760.079443][T15359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2404'. [ 760.111450][T15358] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 760.121972][T15358] bond1: left promiscuous mode [ 760.124582][ T5941] lg-g15 0003:046D:C222.001F: unbalanced delimiter at end of report description [ 760.130832][T15358] ip6tnl1: left promiscuous mode [ 760.145166][T15358] macvtap1: left promiscuous mode [ 760.150674][T15358] bond2: left promiscuous mode [ 760.155665][T15358] bond4: left promiscuous mode [ 760.160597][T15358] geneve2: left promiscuous mode [ 760.168108][T15358] geneve3: left promiscuous mode [ 760.173769][T15358] bond5: left promiscuous mode [ 760.178776][T15358] bond6: left promiscuous mode [ 760.183892][T15359] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2404'. [ 760.194841][T15358] bond7: left promiscuous mode [ 760.200361][T15359] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2404'. [ 760.274897][ T5941] lg-g15 0003:046D:C222.001F: probe with driver lg-g15 failed with error -22 [ 760.787176][T15368] fuse: Invalid uid '00000000000000000005' [ 760.869752][T15376] bridge0: port 3(gretap0) entered blocking state [ 760.878194][T15376] bridge0: port 3(gretap0) entered disabled state [ 760.884955][T15376] gretap0: entered allmulticast mode [ 760.895948][T15376] gretap0: entered promiscuous mode [ 760.905582][T15376] bridge0: port 3(gretap0) entered blocking state [ 760.912153][T15376] bridge0: port 3(gretap0) entered forwarding state [ 760.963163][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2408'. [ 761.009719][ T5866] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 761.342345][ T5866] usb 3-1: config 1 interface 0 altsetting 164 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 761.354014][ T5866] usb 3-1: config 1 interface 0 altsetting 164 endpoint 0x2 has an invalid bInterval 201, changing to 11 [ 761.369014][ T5866] usb 3-1: config 1 interface 0 has no altsetting 0 [ 761.423019][ T5866] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.40 [ 761.451522][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.475602][ T5866] usb 3-1: Product: ᐄ [ 761.491684][ T5866] usb 3-1: Manufacturer: у [ 761.539344][ T5866] usb 3-1: SerialNumber: syz [ 762.075339][T15384] block nbd0: Attempted send on invalid socket [ 762.081830][T15384] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 3 [ 762.111048][ T5866] usbhid 3-1:1.0: can't add hid device: -71 [ 762.117209][ T5866] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 762.133971][ T5866] usb 3-1: USB disconnect, device number 6 [ 762.196144][ T24] usb 2-1: USB disconnect, device number 18 [ 762.805884][T15397] input: syz0 as /devices/virtual/input/input46 [ 763.019478][ T5941] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 763.069384][ T5866] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 763.181691][ T5941] usb 4-1: unable to get BOS descriptor or descriptor too short [ 763.192877][ T5941] usb 4-1: not running at top speed; connect to a high speed hub [ 763.203045][ T5941] usb 4-1: config 129 has an invalid interface number: 28 but max is 0 [ 763.219079][ T5941] usb 4-1: config 129 has no interface number 0 [ 763.219385][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 763.230864][ T5941] usb 4-1: config 129 interface 28 altsetting 250 endpoint 0xC has invalid maxpacket 65040, setting to 64 [ 763.237139][ T5866] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 763.263004][ T5941] usb 4-1: config 129 interface 28 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 763.291931][ T5941] usb 4-1: config 129 interface 28 has no altsetting 0 [ 763.305257][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 763.307214][ T5941] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 763.315830][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 763.339393][ T5866] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 763.356252][ T5866] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 763.382461][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.390727][ T5941] usb 4-1: Product: syz [ 763.395023][ T5941] usb 4-1: Manufacturer: syz [ 763.401490][ T5941] usb 4-1: SerialNumber: syz [ 763.402220][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.418262][T15394] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 763.435990][T15394] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 763.674752][ T5866] usb 3-1: GET_CAPABILITIES returned 0 [ 763.699539][ T5866] usbtmc 3-1:16.0: can't read capabilities [ 763.789520][ T8153] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 763.841749][T15425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.855226][T15425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.871831][T15425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.885426][T15425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.962253][ T8153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 763.985603][ T8153] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 764.015955][ T8153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 764.036140][ T8153] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 764.047365][ T8153] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 764.058198][ T8153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.075097][ T8153] usb 2-1: config 0 descriptor?? [ 764.183192][ T5941] etas_es58x 4-1:129.28: Starting syz syz (Serial Number syz) [ 764.207521][ T5941] usb 4-1: USB disconnect, device number 24 [ 764.216724][T15433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.230638][T15433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.604878][T15449] binder: 15448:15449 ioctl c0306201 2000000003c0 returned -14 [ 764.614835][T15449] FAULT_INJECTION: forcing a failure. [ 764.614835][T15449] name failslab, interval 1, probability 0, space 0, times 0 [ 764.629642][T15449] CPU: 0 UID: 0 PID: 15449 Comm: syz.0.2429 Not tainted syzkaller #0 PREEMPT(full) [ 764.629664][T15449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 764.629675][T15449] Call Trace: [ 764.629682][T15449] [ 764.629691][T15449] dump_stack_lvl+0x189/0x250 [ 764.629716][T15449] ? __pfx____ratelimit+0x10/0x10 [ 764.629734][T15449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 764.629751][T15449] ? __pfx__printk+0x10/0x10 [ 764.629770][T15449] ? genl_rcv+0x28/0x40 [ 764.629791][T15449] ? ____sys_sendmsg+0x505/0x830 [ 764.629810][T15449] ? __x64_sys_sendmsg+0x19b/0x260 [ 764.629837][T15449] should_fail_ex+0x414/0x560 [ 764.629864][T15449] should_failslab+0xa8/0x100 [ 764.629889][T15449] kmem_cache_alloc_noprof+0x73/0x3c0 [ 764.629909][T15449] ? skb_clone+0x212/0x3a0 [ 764.629933][T15449] skb_clone+0x212/0x3a0 [ 764.629955][T15449] __netlink_deliver_tap+0x404/0x850 [ 764.629983][T15449] ? netlink_deliver_tap+0x2e/0x1b0 [ 764.630003][T15449] netlink_deliver_tap+0x19c/0x1b0 [ 764.630023][T15449] netlink_sendskb+0x68/0x140 [ 764.630049][T15449] netlink_unicast+0x397/0x9e0 [ 764.630078][T15449] ? __asan_memcpy+0x40/0x70 [ 764.630107][T15449] ? __pfx_netlink_unicast+0x10/0x10 [ 764.630142][T15449] netlink_rcv_skb+0x28c/0x470 [ 764.630158][T15449] ? __lock_acquire+0xab9/0xd20 [ 764.630182][T15449] ? __pfx_genl_rcv_msg+0x10/0x10 [ 764.630206][T15449] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 764.630244][T15449] ? down_read+0x1ad/0x2e0 [ 764.630267][T15449] genl_rcv+0x28/0x40 [ 764.630287][T15449] netlink_unicast+0x82c/0x9e0 [ 764.630318][T15449] ? __pfx_netlink_unicast+0x10/0x10 [ 764.630345][T15449] ? netlink_sendmsg+0x642/0xb30 [ 764.630361][T15449] ? skb_put+0x11b/0x210 [ 764.630384][T15449] netlink_sendmsg+0x805/0xb30 [ 764.630412][T15449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.630434][T15449] ? aa_sock_msg_perm+0xf1/0x1d0 [ 764.630454][T15449] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 764.630472][T15449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.630492][T15449] __sock_sendmsg+0x219/0x270 [ 764.630519][T15449] ____sys_sendmsg+0x505/0x830 [ 764.630546][T15449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 764.630576][T15449] ? import_iovec+0x74/0xa0 [ 764.630603][T15449] ___sys_sendmsg+0x21f/0x2a0 [ 764.630626][T15449] ? __pfx____sys_sendmsg+0x10/0x10 [ 764.630685][T15449] ? __fget_files+0x2a/0x420 [ 764.630700][T15449] ? __fget_files+0x3a0/0x420 [ 764.630727][T15449] __x64_sys_sendmsg+0x19b/0x260 [ 764.630751][T15449] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 764.630783][T15449] ? __pfx_ksys_write+0x10/0x10 [ 764.630809][T15449] ? do_syscall_64+0xbe/0x3b0 [ 764.630828][T15449] do_syscall_64+0xfa/0x3b0 [ 764.630844][T15449] ? lockdep_hardirqs_on+0x9c/0x150 [ 764.630860][T15449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.630876][T15449] ? clear_bhb_loop+0x60/0xb0 [ 764.630896][T15449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.630912][T15449] RIP: 0033:0x7f3ffbb8eba9 [ 764.630928][T15449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.630942][T15449] RSP: 002b:00007f3ffc9c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 764.630961][T15449] RAX: ffffffffffffffda RBX: 00007f3ffbdd5fa0 RCX: 00007f3ffbb8eba9 [ 764.630974][T15449] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 764.630984][T15449] RBP: 00007f3ffc9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 764.630994][T15449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.631004][T15449] R13: 00007f3ffbdd6038 R14: 00007f3ffbdd5fa0 R15: 00007f3ffbeffa28 [ 764.631033][T15449] [ 764.989093][ C0] vkms_vblank_simulate: vblank timer overrun [ 765.141372][T15456] netlink: 'syz.0.2430': attribute type 21 has an invalid length. [ 765.149515][T15456] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2430'. [ 765.158833][T15456] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2430'. [ 765.217693][ T30] audit: type=1326 audit(1758109040.104:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.0.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb8eba9 code=0x7ffc0000 [ 765.290102][ T30] audit: type=1326 audit(1758109040.104:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.0.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb8eba9 code=0x7ffc0000 [ 765.312628][ C0] vkms_vblank_simulate: vblank timer overrun [ 765.323954][ T30] audit: type=1326 audit(1758109040.104:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.0.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ffbb8eba9 code=0x7ffc0000 [ 765.381622][ T30] audit: type=1326 audit(1758109040.104:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.0.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb8eba9 code=0x7ffc0000 [ 765.432303][ T30] audit: type=1326 audit(1758109040.104:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.0.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb8eba9 code=0x7ffc0000 [ 765.477680][ T30] audit: type=1326 audit(1758109040.104:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.0.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3ffbb8eba9 code=0x7ffc0000 [ 765.532924][ T30] audit: type=1326 audit(1758109040.104:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.0.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb8eba9 code=0x7ffc0000 [ 765.559224][ T30] audit: type=1326 audit(1758109040.104:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.0.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb8eba9 code=0x7ffc0000 [ 765.596399][ T30] audit: type=1326 audit(1758109040.104:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.0.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f3ffbb8eba9 code=0x7ffc0000 [ 765.624687][ T30] audit: type=1326 audit(1758109040.104:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.0.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb8eba9 code=0x7ffc0000 [ 765.655994][T15461] fuse: Invalid uid '00000000000000000032' [ 765.685386][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2433'. [ 765.697668][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2433'. [ 765.726303][T15463] bridge0: entered promiscuous mode [ 765.753117][T15463] macvlan0: entered allmulticast mode [ 765.758896][T15463] bridge0: entered allmulticast mode [ 765.765924][T15465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.779504][T15465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.831323][ T5866] usb 3-1: USB disconnect, device number 7 [ 765.862053][T15465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.947539][T15465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.259659][ T5866] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 766.399731][ T5866] usb 3-1: device descriptor read/64, error -71 [ 766.566946][ T8153] hdpvr 2-1:0.0: unexpected answer of status request, len -71 [ 766.585011][ T8153] hdpvr 2-1:0.0: device init failed [ 766.590609][ T8153] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 766.600228][ T5941] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 766.621059][ T8153] usb 2-1: USB disconnect, device number 19 [ 766.637175][T15478] bond4: (slave geneve2): Releasing active interface [ 766.649895][ T5866] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 766.658680][T15478] geneve2: left promiscuous mode [ 766.667414][T15478] geneve2: left allmulticast mode [ 766.688087][ T67] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.700162][ T67] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.709679][ T67] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.718722][ T67] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.729643][ T5941] usb 4-1: device descriptor read/64, error -71 [ 766.737117][T15481] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 766.743646][T15481] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 766.754517][T15481] vhci_hcd vhci_hcd.0: Device attached [ 766.809472][ T5866] usb 3-1: device descriptor read/64, error -71 [ 766.930245][ T5866] usb usb3-port1: attempt power cycle [ 766.969531][ T5941] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 767.039653][ T10] usb 36-1: SetAddress Request (2) to port 0 [ 767.046619][ T10] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 767.109418][ T5941] usb 4-1: device descriptor read/64, error -71 [ 767.233780][ T5941] usb usb4-port1: attempt power cycle [ 767.269397][ T5866] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 767.301345][ T5866] usb 3-1: device descriptor read/8, error -71 [ 767.459430][T15482] vhci_hcd: connection reset by peer [ 767.464962][ T9857] vhci_hcd: stop threads [ 767.470731][ T9857] vhci_hcd: release socket [ 767.476803][ T9857] vhci_hcd: disconnect device [ 767.539592][ T5866] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 767.560047][ T5866] usb 3-1: device descriptor read/8, error -71 [ 767.579457][ T5941] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 767.610062][ T5941] usb 4-1: device descriptor read/8, error -71 [ 767.669915][ T5866] usb usb3-port1: unable to enumerate USB device [ 767.859933][ T5941] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 767.880431][ T5941] usb 4-1: device descriptor read/8, error -71 [ 767.989884][ T5941] usb usb4-port1: unable to enumerate USB device [ 769.178725][T15500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2443'. [ 769.892697][ T5941] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 769.959512][T15512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.000169][T15512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.069391][ T5941] usb 2-1: Using ep0 maxpacket: 8 [ 770.086298][ T5941] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 770.133013][ T5941] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 770.159367][ T5941] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 770.192685][ T5941] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 770.225282][ T5941] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 770.245630][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.429801][ T5948] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 770.449636][T15518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.473524][T15507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.482673][T15507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.495702][ T5941] usb 2-1: GET_CAPABILITIES returned 0 [ 770.503110][ T5941] usbtmc 2-1:16.0: can't read capabilities [ 770.609728][ T5948] usb 4-1: Using ep0 maxpacket: 16 [ 770.616123][ T5948] usb 4-1: too many configurations: 98, using maximum allowed: 8 [ 770.627816][ T5948] usb 4-1: config 6 has no interfaces? [ 770.736988][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 770.752018][ T5948] usb 4-1: config 6 has no interfaces? [ 770.758473][ T5866] usb 2-1: USB disconnect, device number 20 [ 770.765245][ T5948] usb 4-1: config 6 has no interfaces? [ 770.772432][ T5948] usb 4-1: config 6 has no interfaces? [ 770.779507][ T5948] usb 4-1: config 6 has no interfaces? [ 770.793982][ T5948] usb 4-1: config 6 has no interfaces? [ 770.803212][ T5948] usb 4-1: config 6 has no interfaces? [ 770.852496][ T5948] usb 4-1: config 6 has no interfaces? [ 770.991872][ T5948] usb 4-1: string descriptor 0 read error: -71 [ 770.998207][ T5948] usb 4-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=58.3c [ 771.007877][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=154 [ 771.029079][ T5948] usb 4-1: rejected 8 configurations due to insufficient available bus power [ 771.038525][ T5948] usb 4-1: no configuration chosen from 8 choices [ 771.049699][ T5948] usb 4-1: USB disconnect, device number 29 [ 771.873177][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 771.873190][ T30] audit: type=1326 audit(1758109046.804:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15536 comm="syz.2.2455" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f478f38eba9 code=0x0 [ 772.127883][ T10] usb 36-1: device descriptor read/8, error -110 [ 772.159697][ T5972] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 772.199483][ T5941] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 772.343153][ T5972] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 772.351841][ T5972] usb 3-1: config 0 has no interface number 0 [ 772.364183][ T5941] usb 2-1: too many configurations: 207, using maximum allowed: 8 [ 772.375782][ T5941] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 772.388034][ T5941] usb 2-1: can't read configurations, error -61 [ 772.429950][ T5972] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 772.462839][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.523946][ T5972] usb 3-1: Product: syz [ 772.535231][ T5972] usb 3-1: Manufacturer: syz [ 772.542556][ T5972] usb 3-1: SerialNumber: syz [ 772.555901][ T5972] usb 3-1: config 0 descriptor?? [ 772.561205][ T5941] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 772.577563][ T10] usb usb36-port1: attempt power cycle [ 772.720550][ T5941] usb 2-1: too many configurations: 207, using maximum allowed: 8 [ 772.918323][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2459'. [ 773.042663][ T5972] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 773.051422][ T5941] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 773.088926][ T5941] usb 2-1: can't read configurations, error -61 [ 773.109608][T15516] delete_channel: no stack [ 773.115512][ T5972] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 773.124654][ T5941] usb usb2-port1: attempt power cycle [ 773.130313][ T5972] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 773.139419][ T5972] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 773.202848][ T5972] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 773.260567][ T10] usb usb36-port1: unable to enumerate USB device [ 773.480049][ T5941] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 773.512253][ T5941] usb 2-1: too many configurations: 207, using maximum allowed: 8 [ 773.535097][ T5941] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 773.566396][ T5941] usb 2-1: can't read configurations, error -61 [ 773.712867][ T5941] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 773.760688][ T5941] usb 2-1: too many configurations: 207, using maximum allowed: 8 [ 773.772816][ T5941] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 773.795089][ T5941] usb 2-1: can't read configurations, error -61 [ 773.816198][ T5941] usb usb2-port1: unable to enumerate USB device [ 773.952609][T15578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.042465][T15578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.844300][T15587] binder: 15586:15587 ioctl c0306201 2000000003c0 returned -14 [ 774.855536][T15587] binder: 15586:15587 ioctl c0306201 200000000440 returned -14 [ 774.888528][ T10] usb 3-1: USB disconnect, device number 12 [ 774.906708][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 774.933906][ T10] keyspan 3-1:0.133: device disconnected [ 777.619430][ T3195] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 777.729726][ T5948] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 777.809499][ T3195] usb 2-1: Using ep0 maxpacket: 8 [ 777.847495][ T3195] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 777.889704][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 777.890026][ T3195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.901120][ T5948] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 777.921675][ T3195] usb 2-1: Product: syz [ 777.926221][ T5948] usb 4-1: config 0 has no interface number 0 [ 777.932578][ T3195] usb 2-1: Manufacturer: syz [ 777.932608][ T3195] usb 2-1: SerialNumber: syz [ 777.951089][ T3195] usb 2-1: config 0 descriptor?? [ 777.980359][ T5948] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 777.980389][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.980408][ T5948] usb 4-1: Product: syz [ 777.980422][ T5948] usb 4-1: Manufacturer: syz [ 777.980436][ T5948] usb 4-1: SerialNumber: syz [ 777.980644][ T3195] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 777.983686][ T5948] usb 4-1: config 0 descriptor?? [ 777.988698][ T5948] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 778.203960][ T5948] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 778.275416][ T5948] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 778.392294][T15634] binder: 15633:15634 ioctl c0306201 2000000003c0 returned -14 [ 778.412478][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 778.421484][ T5948] usb 4-1: USB disconnect, device number 30 [ 778.430521][ T5948] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 778.479832][ T5948] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 778.505757][ T3195] gspca_m5602: Failed to find a sensor [ 778.511291][ T3195] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 778.519014][ T3195] usb 2-1: USB disconnect, device number 25 [ 778.615791][ T5948] quatech2 4-1:0.51: device disconnected [ 781.786175][T15710] binder: BINDER_SET_CONTEXT_MGR already set [ 781.796515][T15710] binder: 15709:15710 ioctl 4018620d 200000000ac0 returned -16 [ 781.851684][T15712] binder: 15709:15712 ioctl c0306201 2000000003c0 returned -14 [ 782.325020][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2500'. [ 782.334076][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2500'. [ 783.159953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.417280][T15725] bond0: entered promiscuous mode [ 783.691753][ T5948] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 783.794572][T15745] binder: 15744:15745 ioctl c0306201 2000000003c0 returned -14 [ 783.851780][ T5948] usb 2-1: unable to get BOS descriptor or descriptor too short [ 783.894431][ T5948] usb 2-1: config 13 has an invalid interface number: 50 but max is 3 [ 783.903266][ T5948] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 783.921243][ T5948] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 783.942220][ T5948] usb 2-1: config 13 has no interface number 0 [ 783.960193][ T5948] usb 2-1: config 13 interface 50 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 783.974433][ T5948] usb 2-1: config 13 interface 50 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 783.988229][ T5948] usb 2-1: config 13 interface 50 has no altsetting 0 [ 784.003606][ T5948] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 784.019759][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.038209][ T5948] usb 2-1: Product: syz [ 784.046711][ T5948] usb 2-1: Manufacturer: syz [ 784.054547][ T5948] usb 2-1: SerialNumber: syz [ 784.097940][T15756] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2513'. [ 784.211384][T15758] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2514'. [ 784.340266][ T5948] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 784.373721][ T30] audit: type=1326 audit(1758109059.284:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15759 comm="syz.4.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849cb8eba9 code=0x7ffc0000 [ 784.399691][ T9858] usb 2-1: Failed to submit usb control message: -71 [ 784.422017][ T5948] usb 2-1: USB disconnect, device number 26 [ 784.430319][ T9858] usb 2-1: unable to send the bmi data to the device: -71 [ 784.437469][ T9858] usb 2-1: unable to get target info from device [ 784.446612][ T30] audit: type=1326 audit(1758109059.294:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15759 comm="syz.4.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f849cb8eba9 code=0x7ffc0000 [ 784.485855][ T9858] usb 2-1: could not get target info (-71) [ 784.498723][T15766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 784.502886][ T9858] usb 2-1: could not probe fw (-71) [ 784.536277][ T30] audit: type=1326 audit(1758109059.294:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15759 comm="syz.4.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849cb8eba9 code=0x7ffc0000 [ 784.574892][T15766] loop4: detected capacity change from 0 to 1 [ 784.583016][ T30] audit: type=1326 audit(1758109059.294:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15759 comm="syz.4.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849cb8eba9 code=0x7ffc0000 [ 784.626665][T15766] Dev loop4: unable to read RDB block 1 [ 784.640081][T15767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2516'. [ 784.665705][ T30] audit: type=1326 audit(1758109059.294:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15759 comm="syz.4.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f849cb90ac7 code=0x7ffc0000 [ 784.682308][T15766] loop4: unable to read partition table [ 784.718843][ T30] audit: type=1326 audit(1758109059.294:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15759 comm="syz.4.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f849cb90a3c code=0x7ffc0000 [ 784.754430][T15767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2516'. [ 784.757453][ T30] audit: type=1326 audit(1758109059.294:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15759 comm="syz.4.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f849cb90974 code=0x7ffc0000 [ 784.769738][T15766] loop4: partition table beyond EOD, [ 784.807296][ T30] audit: type=1326 audit(1758109059.294:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15759 comm="syz.4.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f849cb90974 code=0x7ffc0000 [ 784.849140][ T30] audit: type=1326 audit(1758109059.294:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15759 comm="syz.4.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f849cb8d80a code=0x7ffc0000 [ 784.862762][T15766] truncated [ 784.884856][ T30] audit: type=1326 audit(1758109059.294:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15759 comm="syz.4.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849cb8eba9 code=0x7ffc0000 [ 784.901224][T15766] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 784.960825][ T5972] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 785.069068][ T5234] Dev loop4: unable to read RDB block 1 [ 785.075464][ T5234] loop4: unable to read partition table [ 785.090983][ T5234] loop4: partition table beyond EOD, truncated [ 785.144752][ T5972] usb 3-1: config 0 has an invalid interface number: 138 but max is 0 [ 785.159942][ T5972] usb 3-1: config 0 has no interface number 0 [ 785.174315][ T5972] usb 3-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 785.197701][ T5972] usb 3-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 785.224384][ T5972] usb 3-1: config 0 interface 138 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 785.246103][ T5972] usb 3-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 785.264652][ T5972] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66 [ 785.267970][T15782] input: syz1 as /devices/virtual/input/input48 [ 785.291909][T15785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2521'. [ 785.311613][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.319478][T15785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2521'. [ 785.332690][ T5972] usb 3-1: config 0 descriptor?? [ 785.352116][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2521'. [ 785.396641][ T5234] Dev loop4: unable to read RDB block 1 [ 785.404395][ T5234] loop4: unable to read partition table [ 785.414350][ T5234] loop4: partition table beyond EOD, truncated [ 785.570307][ T5234] Dev loop4: unable to read RDB block 1 [ 785.578712][ T5234] loop4: unable to read partition table [ 785.595148][ T5234] loop4: partition table beyond EOD, truncated [ 785.684217][ T5972] usb 3-1: string descriptor 0 read error: -71 [ 785.700303][ T5972] usbtest 3-1:0.138: Linux gadget zero [ 785.710403][ T5972] usbtest 3-1:0.138: full-speed {control in/out bulk-out int-in} tests (+alt) [ 785.734126][ T5972] usb 3-1: USB disconnect, device number 13 [ 785.825992][T15802] tun0: tun_chr_ioctl cmd 2147767517 [ 786.009516][ T5948] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 786.164879][ T5948] usb 2-1: config 252 has an invalid interface number: 107 but max is 0 [ 786.175012][ T5948] usb 2-1: config 252 has no interface number 0 [ 786.185428][ T5948] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 786.208327][ T5948] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 786.227803][ T5948] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 786.237627][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.251194][ T5948] usb 2-1: Product: syz [ 786.255475][ T5948] usb 2-1: Manufacturer: syz [ 786.262578][ T5948] usb 2-1: SerialNumber: syz [ 786.480298][ T3195] usb 2-1: USB disconnect, device number 27 [ 786.629460][ T5972] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 786.698037][T15812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.708251][T15812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.720505][T15812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.729957][T15812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.779665][ T5972] usb 3-1: Using ep0 maxpacket: 8 [ 786.789173][ T5972] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 786.797547][ T5972] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 786.807516][ T5972] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 786.820945][ T5972] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 786.831995][ T5972] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 786.845156][ T5972] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 786.854331][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.071019][ T5972] usb 3-1: GET_CAPABILITIES returned 0 [ 787.076974][ T5972] usbtmc 3-1:16.0: can't read capabilities [ 787.279993][T15806] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2527'. [ 787.291742][ T10] usb 3-1: USB disconnect, device number 14 [ 787.329839][ T5948] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 787.481597][ T5948] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 787.490685][ T5948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 787.496769][ C1] sd 0:0:1:0: [sda] tag#5756 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 787.501292][ T5948] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 787.511273][ C1] sd 0:0:1:0: [sda] tag#5756 CDB: Read(6) 08 00 0c 6a 08 48 [ 787.528109][ T5948] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.541023][ T5948] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 787.550285][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 787.558345][ T5948] usb 2-1: Product: syz [ 787.562771][ T5948] usb 2-1: Manufacturer: syz [ 787.572557][ T5948] cdc_wdm 2-1:1.0: skipping garbage [ 787.589728][ T5948] cdc_wdm 2-1:1.0: skipping garbage [ 787.595350][ T5948] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 787.786126][T15814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.795219][T15814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.830245][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 787.923047][ T5972] usb 2-1: USB disconnect, device number 28 [ 787.991442][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.005509][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.016163][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 788.054075][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 788.063365][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.075415][ T10] usb 3-1: config 0 descriptor?? [ 788.086828][ T10] hub 3-1:0.0: USB hub found [ 788.288445][ T10] hub 3-1:0.0: 14 ports detected [ 788.295691][ T10] hub 3-1:0.0: insufficient power available to use all downstream ports [ 788.873343][T15827] veth0_to_bridge: entered promiscuous mode [ 788.895184][T15827] syz_tun: entered promiscuous mode [ 788.909982][T15827] macsec0: entered allmulticast mode [ 788.925741][T15827] syz_tun: entered allmulticast mode [ 788.938163][T15827] syz_tun: left allmulticast mode [ 788.957506][T15827] syz_tun: left promiscuous mode [ 789.011082][T15834] netlink: 'syz.3.2533': attribute type 2 has an invalid length. [ 789.021652][T15834] netlink: 'syz.3.2533': attribute type 2 has an invalid length. [ 789.032033][T15834] netlink: 'syz.3.2533': attribute type 2 has an invalid length. [ 789.058455][T15834] netlink: 'syz.3.2533': attribute type 2 has an invalid length. [ 789.069199][T15834] netlink: 'syz.3.2533': attribute type 2 has an invalid length. [ 789.077367][T15834] netlink: 'syz.3.2533': attribute type 2 has an invalid length. [ 789.088835][T15834] netlink: 'syz.3.2533': attribute type 2 has an invalid length. [ 789.097121][T15834] netlink: 'syz.3.2533': attribute type 2 has an invalid length. [ 789.107208][T15834] netlink: 'syz.3.2533': attribute type 2 has an invalid length. [ 789.115167][T15834] netlink: 'syz.3.2533': attribute type 2 has an invalid length. [ 789.138976][T15826] veth0_to_bridge: left promiscuous mode [ 789.469466][T12160] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 789.641895][T12160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.667386][T12160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.683858][ T5948] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 789.694043][T12160] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 789.705258][T12160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.725239][T12160] usb 4-1: config 0 descriptor?? [ 789.807227][ T5972] usb 3-1: USB disconnect, device number 15 [ 789.883509][T15849] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2538'. [ 790.095763][T15854] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2538'. [ 790.157094][T12160] hid_parser_main: 1525 callbacks suppressed [ 790.157116][T12160] playstation 0003:054C:0BA0.0020: unknown main item tag 0x0 [ 790.198089][T12160] playstation 0003:054C:0BA0.0020: unknown main item tag 0x0 [ 790.319380][T12160] playstation 0003:054C:0BA0.0020: unknown main item tag 0x0 [ 790.336057][T12160] playstation 0003:054C:0BA0.0020: unknown main item tag 0x1 [ 790.343983][T12160] playstation 0003:054C:0BA0.0020: unknown main item tag 0x0 [ 790.353653][T15840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.458791][T12160] playstation 0003:054C:0BA0.0020: unknown main item tag 0x0 [ 790.468118][T15840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.477791][T12160] playstation 0003:054C:0BA0.0020: unknown main item tag 0x0 [ 790.549535][ T5972] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 790.707879][T12160] playstation 0003:054C:0BA0.0020: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0 [ 790.750559][ T5972] usb 3-1: Using ep0 maxpacket: 16 [ 790.773874][ T5972] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 790.938430][T12160] playstation 0003:054C:0BA0.0020: Failed to retrieve feature with reportID 18: -71 [ 790.969686][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.014620][T12160] playstation 0003:054C:0BA0.0020: Failed to retrieve DualShock4 pairing info: -71 [ 791.024067][T12160] playstation 0003:054C:0BA0.0020: Failed to get MAC address from DualShock4 [ 791.044363][T12160] playstation 0003:054C:0BA0.0020: Failed to create dualshock4. [ 791.055228][ T5972] usb 3-1: Product: syz [ 791.062783][ T5972] usb 3-1: Manufacturer: syz [ 791.072812][T12160] playstation 0003:054C:0BA0.0020: probe with driver playstation failed with error -71 [ 791.078131][ T5972] usb 3-1: SerialNumber: syz [ 791.115907][ T5972] usb 3-1: config 0 descriptor?? [ 791.207697][T12160] usb 4-1: USB disconnect, device number 31 [ 791.700644][ T5972] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 792.957772][ T5941] usb 3-1: USB disconnect, device number 16 [ 793.031525][T15879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 795.883264][T15921] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 796.122016][T15931] loop3: detected capacity change from 0 to 1 [ 796.131632][T10719] Dev loop3: unable to read RDB block 1 [ 796.137212][T10719] loop3: unable to read partition table [ 796.173651][T10719] loop3: partition table beyond EOD, truncated [ 796.187402][T15931] Dev loop3: unable to read RDB block 1 [ 796.201869][T15931] loop3: unable to read partition table [ 796.208792][T15931] loop3: partition table beyond EOD, truncated [ 796.216001][T15931] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 796.420604][T15934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2556'. [ 796.430267][T15934] validate_nla: 35 callbacks suppressed [ 796.430286][T15934] netlink: 'syz.4.2556': attribute type 7 has an invalid length. [ 796.451190][T15934] netlink: 'syz.4.2556': attribute type 8 has an invalid length. [ 796.459053][T15934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2556'. [ 796.796168][T15953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.832747][T15953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.290001][ T5941] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 797.319611][ T3195] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 797.566772][ T5941] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.598787][ T3195] usb 2-1: Using ep0 maxpacket: 16 [ 797.609634][ T5941] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.630009][ T3195] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 797.648428][ T3195] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.679926][ T5941] usb 3-1: config 0 interface 0 has no altsetting 0 [ 797.692797][ T3195] usb 2-1: config 0 has no interface number 0 [ 797.711467][ T5941] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 797.733440][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.747333][ T3195] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 797.756818][ T3195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.769737][ T3195] usb 2-1: Product: syz [ 797.773936][ T3195] usb 2-1: Manufacturer: syz [ 797.788661][ T5941] usb 3-1: config 0 descriptor?? [ 797.795117][ T3195] usb 2-1: SerialNumber: syz [ 797.823123][ T3195] usb 2-1: config 0 descriptor?? [ 797.837826][ T3195] uvcvideo 2-1:0.105: probe with driver uvcvideo failed with error -22 [ 798.101958][ T24] usb 2-1: USB disconnect, device number 29 [ 798.159460][ T3195] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 798.309397][ T3195] usb 4-1: Using ep0 maxpacket: 8 [ 798.316212][ T3195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 798.329227][ T3195] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 798.338527][ T3195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.350918][ T3195] usb 4-1: config 0 descriptor?? [ 798.408419][ T5941] usb 3-1: string descriptor 0 read error: -22 [ 798.570831][ T3195] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 798.646517][ T5941] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0021/input/input50 [ 798.703572][ T3195] usb 4-1: USB disconnect, device number 32 [ 798.748262][ T5941] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0021/input/input51 [ 798.834929][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 798.834946][ T30] audit: type=1326 audit(1758109073.764:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.3.2571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f542858eba9 code=0x0 [ 798.869750][ T5941] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0021/input/input52 [ 798.975450][ T5941] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0021/input/input53 [ 799.132866][ T5941] uclogic 0003:256C:006D.0021: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 799.179131][ T5941] usb 3-1: USB disconnect, device number 17 [ 799.273307][T15993] fido_id[15993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 799.439599][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 799.568648][T16003] Context (ID=0x1) not attached to queue pair (handle=0x4db:0x802) [ 799.579962][T16003] binder: 16002:16003 ioctl c0306201 2000000003c0 returned -14 [ 799.609639][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 799.624494][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 799.643989][ T10] usb 2-1: config 129 has an invalid interface number: 145 but max is 0 [ 799.668653][ T10] usb 2-1: config 129 has no interface number 0 [ 799.681710][ T10] usb 2-1: config 129 interface 145 has no altsetting 0 [ 799.705582][ T10] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= d.2f [ 799.721147][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.731994][ T10] usb 2-1: Product: syz [ 799.736763][ T10] usb 2-1: Manufacturer: syz [ 799.742250][ T10] usb 2-1: SerialNumber: syz [ 799.748089][T16009] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2576'. [ 799.850466][ T5941] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 800.147001][ T5941] usb 3-1: Using ep0 maxpacket: 8 [ 800.224332][ T10] usb 2-1: disable ehci-hcd to run US-144 [ 800.234215][ T5941] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 800.236605][ T10] usb 2-1: USB disconnect, device number 30 [ 800.248397][ T5941] usb 3-1: config 0 has no interface number 0 [ 800.278973][ T5941] usb 3-1: config 0 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 800.317740][ T5941] usb 3-1: config 0 interface 154 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 800.344119][ T5941] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=9e.bc [ 800.355620][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.365173][ T5941] usb 3-1: Product: syz [ 800.371451][ T5941] usb 3-1: Manufacturer: syz [ 800.376431][ T5941] usb 3-1: SerialNumber: syz [ 800.388664][ T5941] usb 3-1: config 0 descriptor?? [ 800.425862][ T5941] appletouch 3-1:0.154: Could not find int-in endpoint [ 800.434119][ T5941] appletouch 3-1:0.154: probe with driver appletouch failed with error -5 [ 800.447631][ T5941] usbhid 3-1:0.154: couldn't find an input interrupt endpoint [ 800.635890][T16017] ip6tnl1: entered allmulticast mode [ 800.741909][ T3195] usb 3-1: USB disconnect, device number 18 [ 801.500541][T16044] loop4: detected capacity change from 0 to 2560 [ 801.521371][T16044] Buffer I/O error on dev loop4, logical block 0, async page read [ 801.550880][T16044] Buffer I/O error on dev loop4, logical block 0, async page read [ 801.597519][T16044] Buffer I/O error on dev loop4, logical block 0, async page read [ 801.637229][T16044] Buffer I/O error on dev loop4, logical block 0, async page read [ 801.656305][T16044] loop4: unable to read partition table [ 801.669023][T16041] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 801.677940][T16044] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 801.692165][T16041] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 801.718825][T16050] binder: 16048:16050 ioctl c0306201 2000000003c0 returned -14 [ 801.727954][T16041] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 801.740422][T16041] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 801.749207][T16041] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 801.771614][T16041] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 802.152691][T16061] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2589'. [ 802.438866][T16069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.464212][T16069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.244394][T16080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.274576][T16080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.317528][T16080] netlink: 'syz.4.2595': attribute type 1 has an invalid length. [ 803.382823][T16080] 8021q: adding VLAN 0 to HW filter on device bond7 [ 803.462470][T16080] vlan2: entered allmulticast mode [ 803.507467][T16080] batadv0: entered allmulticast mode [ 803.514200][T16080] bond7: (slave vlan2): Opening slave failed [ 803.833765][T16094] binder: 16093:16094 ioctl c0306201 2000000003c0 returned -14 [ 803.969877][T12160] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 804.139467][T12160] usb 3-1: Using ep0 maxpacket: 32 [ 804.146224][T12160] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 804.155701][T12160] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.166038][T12160] usb 3-1: config 0 descriptor?? [ 804.171356][ T3195] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 804.333099][ T3195] usb 4-1: Using ep0 maxpacket: 8 [ 804.352729][ T3195] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 804.368304][ T3195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.383765][T12160] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 804.389953][ T3195] usb 4-1: config 0 descriptor?? [ 804.409756][T12160] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 804.421365][T12160] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 804.493559][ T30] audit: type=1326 audit(1758109079.424:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.4.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849cb8eba9 code=0x7ffc0000 [ 804.547098][ T30] audit: type=1326 audit(1758109079.444:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.4.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849cb8eba9 code=0x7ffc0000 [ 804.608948][ T30] audit: type=1326 audit(1758109079.444:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.4.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849cb8eba9 code=0x7ffc0000 [ 804.648388][ T30] audit: type=1326 audit(1758109079.444:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.4.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849cb8eba9 code=0x7ffc0000 [ 804.675804][ T30] audit: type=1326 audit(1758109079.444:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.4.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f849cb8eba9 code=0x7ffc0000 [ 804.701985][T16092] netlink: 'syz.2.2598': attribute type 3 has an invalid length. [ 804.710403][T16092] netlink: 'syz.2.2598': attribute type 3 has an invalid length. [ 804.718263][T16092] netlink: 'syz.2.2598': attribute type 3 has an invalid length. [ 804.745807][T16092] netlink: 'syz.2.2598': attribute type 3 has an invalid length. [ 804.758113][T16092] netlink: 'syz.2.2598': attribute type 3 has an invalid length. [ 804.767547][T16092] netlink: 'syz.2.2598': attribute type 3 has an invalid length. [ 804.767745][ T30] audit: type=1326 audit(1758109079.444:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.4.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849cb8eba9 code=0x7ffc0000 [ 804.800094][ T10] usb 4-1: USB disconnect, device number 33 [ 804.814774][ T30] audit: type=1326 audit(1758109079.444:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.4.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849cb8eba9 code=0x7ffc0000 [ 804.848326][T16092] netlink: 'syz.2.2598': attribute type 3 has an invalid length. [ 804.861785][T16092] netlink: 'syz.2.2598': attribute type 3 has an invalid length. [ 804.869758][T16092] netlink: 'syz.2.2598': attribute type 3 has an invalid length. [ 804.881936][ T30] audit: type=1326 audit(1758109079.444:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.4.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849cb8eba9 code=0x7ffc0000 [ 804.910702][ T30] audit: type=1326 audit(1758109079.444:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.4.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f849cb8eba9 code=0x7ffc0000 [ 804.934798][ T30] audit: type=1326 audit(1758109079.444:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.4.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849cb8eba9 code=0x7ffc0000 [ 804.970025][ T5866] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 805.099388][ T5866] usb 2-1: device descriptor read/64, error -71 [ 805.341191][ T5866] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 805.436297][T16109] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 805.486015][ T5866] usb 2-1: device descriptor read/64, error -71 [ 805.657752][ T5866] usb usb2-port1: attempt power cycle [ 806.029401][ T5866] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 806.050363][ T5866] usb 2-1: device descriptor read/8, error -71 [ 806.325489][ T5941] IPVS: starting estimator thread 0... [ 806.343176][T16119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.386940][T16119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.829816][ T5866] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 806.860869][T16119] binder: 16118:16119 ioctl 80045530 2000000015c0 returned -22 [ 806.862843][ T5866] usb 2-1: device descriptor read/8, error -71 [ 806.873379][T16119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.883151][T16128] IPVS: using max 50 ests per chain, 120000 per kthread [ 806.905907][T16119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.981464][ T5866] usb usb2-port1: unable to enumerate USB device [ 807.755329][T16138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.786205][T16138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.831810][T16139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.891059][T16139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.239501][ T5941] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 808.414711][ T5941] usb 2-1: config 1 has an invalid interface number: 5 but max is 2 [ 808.500236][ T5941] usb 2-1: config 1 has an invalid interface descriptor of length 3, skipping [ 808.514842][ T5941] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 808.528501][ T5941] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 808.584901][ T5941] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 808.645871][ T5941] usb 2-1: config 1 has no interface number 1 [ 808.686212][ T5941] usb 2-1: config 1 interface 5 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 808.847354][ T5941] usb 2-1: config 1 interface 5 has no altsetting 0 [ 808.847930][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.864801][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.874534][ T5941] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 808.885141][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.893629][ T5941] usb 2-1: Product: 氝険쏠诐᠇㾴飕堚썺櫓㭧춽稩䈎ꢏ릑凫ꩡ陳鷵靉妌雈ﶚ᡼◀౑ꏙꭾồ蘠巀鬊⒴呔ꆐ斀귫愋堐䜦鹖좤㜷傏댔瀎ᗲॆ搀繭婜侎ꯙ苠㢛调⿡ퟞ鬾놠忾턮ꪁ鐑彮獉ﶃ柫䦮谿䍃餍壉沔⌞䇋 [ 808.971962][ T5941] usb 2-1: Manufacturer: ည [ 808.976702][ T5941] usb 2-1: SerialNumber: Џ [ 809.280956][T16160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 809.361352][ T5941] usb 2-1: 0:2 : does not exist [ 809.386134][ T5941] usb 2-1: USB disconnect, device number 35 [ 809.729603][ T5948] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 809.883407][ T5948] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 809.930726][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.930756][ T5948] usb 4-1: Product: syz [ 809.930771][ T5948] usb 4-1: Manufacturer: syz [ 809.930785][ T5948] usb 4-1: SerialNumber: syz [ 809.933572][ T5948] usb 4-1: config 0 descriptor?? [ 809.952804][ T5948] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 810.043260][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2623'. [ 810.560825][T16181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.573234][T16181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.594255][T16181] loop2: detected capacity change from 0 to 7 [ 810.634668][T16181] loop2: [POWERTEC] p1 p2 p3 p4 [ 810.643391][T16181] loop2: p1 start 1441792 is beyond EOD, truncated [ 810.658104][T16181] loop2: p2 start 1310720 is beyond EOD, truncated [ 810.671626][T16181] loop2: p3 start 16777216 is beyond EOD, truncated [ 810.741853][T16181] loop2: p4 start 150995490 is beyond EOD, truncated [ 810.917424][T16184] MPI: mpi too large (113288 bits) [ 811.270401][T16188] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2628'. [ 811.462206][T16191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.472699][T16191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.533492][ T5948] gspca_sunplus: reg_w_riv err -71 [ 811.543517][ T5948] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 811.562703][ T5948] usb 4-1: USB disconnect, device number 34 [ 812.043017][T16198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.057483][T16198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.308834][T16211] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2637'. [ 812.479568][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 812.629440][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 812.640294][ T10] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 812.649676][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.657684][ T10] usb 4-1: Product: syz [ 812.662130][ T10] usb 4-1: Manufacturer: syz [ 812.666971][ T10] usb 4-1: SerialNumber: syz [ 812.676378][ T10] usb 4-1: config 0 descriptor?? [ 812.685425][ T10] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 812.884245][ T10] usb 4-1: USB disconnect, device number 35 [ 813.411960][ T5941] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 813.582438][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.593724][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.604030][ T5941] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 813.613179][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.624329][ T5941] usb 2-1: config 0 descriptor?? [ 813.659662][ T5948] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 813.811763][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 813.824505][ T5948] usb 4-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 813.834035][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.836791][ T5941] usbhid 2-1:0.0: can't add hid device: -71 [ 813.853415][ T5941] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 813.858006][ T5948] usb 4-1: config 0 descriptor?? [ 813.864823][ T5941] usb 2-1: USB disconnect, device number 36 [ 814.085951][T16218] loop2: detected capacity change from 0 to 7 [ 814.095196][T16218] loop2: [POWERTEC] p1 p2 p3 p4 [ 814.101896][T16218] loop2: p1 start 1441792 is beyond EOD, truncated [ 814.108492][T16218] loop2: p2 start 1310720 is beyond EOD, truncated [ 814.115580][T16218] loop2: p3 start 16777216 is beyond EOD, truncated [ 814.122855][T16218] loop2: p4 start 150995490 is beyond EOD, truncated [ 814.136111][ T5948] usbhid 4-1:0.0: can't add hid device: -71 [ 814.151076][ T5948] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 814.167798][ T5948] usb 4-1: USB disconnect, device number 36 [ 814.339533][ T5941] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 814.489488][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 814.496253][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.507465][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.517395][ T5941] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 814.527220][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.537647][ T5941] usb 2-1: config 0 descriptor?? [ 814.700866][T16222] binder: 16221:16222 ioctl c0306201 200000000440 returned -14 [ 815.035380][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2641'. [ 815.146537][ T5941] mcp2200 0003:04D8:00DF.0022: item fetching failed at offset 1/5 [ 815.174874][ T5941] mcp2200 0003:04D8:00DF.0022: can't parse reports [ 815.182603][ T5941] mcp2200 0003:04D8:00DF.0022: probe with driver mcp2200 failed with error -22 [ 815.294074][ T5941] usb 2-1: USB disconnect, device number 37 [ 815.431159][T16235] kvm: emulating exchange as write [ 815.829833][T16240] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 815.837566][T16240] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 815.844088][T16240] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 815.850388][T16240] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 815.856651][T16240] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 816.106830][T16248] vivid-000: disconnect [ 816.378647][T16252] fuse: Unknown parameter '00000000000000000005' [ 816.460696][ T5941] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 816.633657][ T5941] usb 2-1: too many configurations: 138, using maximum allowed: 8 [ 816.643595][ T5941] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 816.653300][ T5941] usb 2-1: can't read configurations, error -61 [ 816.799447][ T5941] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 816.968595][T16260] validate_nla: 39 callbacks suppressed [ 816.968612][T16260] netlink: 'syz.3.2650': attribute type 10 has an invalid length. [ 816.985101][T16260] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2650'. [ 817.044126][T16260] team0: Port device geneve0 added [ 817.124500][ T5941] usb 2-1: too many configurations: 138, using maximum allowed: 8 [ 817.154782][ T5941] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 817.182677][ T5941] usb 2-1: can't read configurations, error -61 [ 817.190057][ T5941] usb usb2-port1: attempt power cycle [ 817.199151][T16263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2651'. [ 817.450238][T15974] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 817.539374][ T5941] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 817.561018][ T5941] usb 2-1: too many configurations: 138, using maximum allowed: 8 [ 817.576935][ T5941] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 817.584935][ T5941] usb 2-1: can't read configurations, error -61 [ 817.611109][T15974] usb 4-1: Using ep0 maxpacket: 8 [ 817.618067][T15974] usb 4-1: unable to get BOS descriptor or descriptor too short [ 817.627927][T15974] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 817.636004][T15974] usb 4-1: can't read configurations, error -22 [ 817.720500][T15147] Bluetooth: hci1: command 0x0406 tx timeout [ 817.720719][ T5941] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 817.750924][ T5941] usb 2-1: too many configurations: 138, using maximum allowed: 8 [ 817.761089][ T5941] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 817.768687][ T5941] usb 2-1: can't read configurations, error -61 [ 817.775343][T15974] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 817.783239][ T5941] usb usb2-port1: unable to enumerate USB device [ 817.882305][T15147] Bluetooth: hci0: command 0x0405 tx timeout [ 817.882327][ T5867] Bluetooth: hci3: command 0x0406 tx timeout [ 817.888503][T15147] Bluetooth: hci4: command 0x0406 tx timeout [ 817.894576][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 817.939478][T15974] usb 4-1: Using ep0 maxpacket: 8 [ 817.950340][T15974] usb 4-1: unable to get BOS descriptor or descriptor too short [ 817.959579][T15974] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 817.969068][T15974] usb 4-1: can't read configurations, error -22 [ 817.976819][T15974] usb usb4-port1: attempt power cycle [ 818.319568][T15974] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 818.344196][T15974] usb 4-1: Using ep0 maxpacket: 8 [ 818.371147][T15974] usb 4-1: unable to get BOS descriptor or descriptor too short [ 818.383097][T15974] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 818.394877][T15974] usb 4-1: can't read configurations, error -22 [ 818.529519][T15974] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 818.553257][T15974] usb 4-1: Using ep0 maxpacket: 8 [ 818.568891][T15974] usb 4-1: unable to get BOS descriptor or descriptor too short [ 818.588782][T15974] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 818.607679][T15974] usb 4-1: can't read configurations, error -22 [ 818.615349][T15974] usb usb4-port1: unable to enumerate USB device [ 818.874142][T12140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 818.884797][T12140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 818.893411][T12140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 818.903840][T12140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 818.913558][T12140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 818.925202][ T5866] usb 5-1: USB disconnect, device number 91 [ 819.097569][T16270] chnl_net:caif_netlink_parms(): no params data found [ 819.126566][T16248] vivid-000: reconnect [ 819.271793][T16270] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.297931][T16270] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.310599][T16270] bridge_slave_0: entered allmulticast mode [ 819.318364][T16270] bridge_slave_0: entered promiscuous mode [ 819.327652][T16270] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.335199][T16270] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.342499][T16270] bridge_slave_1: entered allmulticast mode [ 819.349984][T16270] bridge_slave_1: entered promiscuous mode [ 819.382493][T16270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.393925][T16270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.434116][T16270] team0: Port device team_slave_0 added [ 819.441944][T16270] team0: Port device team_slave_1 added [ 819.472435][T16270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.480268][T16270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.506339][T16270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.518306][T16270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.525379][T16270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.551382][T16270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.597186][T16270] hsr_slave_0: entered promiscuous mode [ 819.604184][T16270] hsr_slave_1: entered promiscuous mode [ 819.613213][T16270] debugfs: 'hsr0' already exists in 'hsr' [ 819.618986][T16270] Cannot create hsr debugfs directory [ 819.629675][ T5866] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 819.769713][ T5866] usb 2-1: device descriptor read/64, error -71 [ 820.034838][ T5866] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 820.053963][T16270] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 820.065067][T16270] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 820.075235][T16270] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 820.085381][T16270] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 820.161099][T16270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.169357][ T5866] usb 2-1: device descriptor read/64, error -71 [ 820.191686][T16270] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.205037][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.212342][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.234873][T15333] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.242186][T15333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.276027][T16290] lo: left promiscuous mode [ 820.282102][T16290] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2657'. [ 820.289853][ T5866] usb usb2-port1: attempt power cycle [ 820.293061][T16290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 820.408291][T16270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.447585][T16270] veth0_vlan: entered promiscuous mode [ 820.464585][T16270] veth1_vlan: entered promiscuous mode [ 820.534227][T16270] veth0_macvtap: entered promiscuous mode [ 820.576434][T16270] veth1_macvtap: entered promiscuous mode [ 820.629480][ T5866] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 820.642193][T16270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.868204][ T5866] usb 2-1: device descriptor read/8, error -71 [ 820.870270][T16270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.915881][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.926909][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.954027][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.978428][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.999743][T12140] Bluetooth: hci1: command tx timeout [ 821.108486][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.130338][ T5866] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 821.169592][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.180993][ T5866] usb 2-1: device descriptor read/8, error -71 [ 821.215822][T15984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.225840][T15984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.300053][ T5866] usb usb2-port1: unable to enumerate USB device [ 821.839392][ T8153] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 821.991692][ T8153] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 821.999662][ T8153] usb 4-1: can't read configurations, error -61 [ 822.129468][ T8153] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 822.301128][ T8153] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 822.309037][ T8153] usb 4-1: can't read configurations, error -61 [ 822.324013][ T8153] usb usb4-port1: attempt power cycle [ 822.512731][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2663'. [ 822.527152][T16317] netlink: 'syz.1.2663': attribute type 14 has an invalid length. [ 822.535272][T16317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2663'. [ 822.602272][T15974] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 822.679504][ T8153] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 822.702857][ T8153] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 822.722492][ T8153] usb 4-1: can't read configurations, error -61 [ 822.762685][T15974] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 822.773160][T15974] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 822.809006][T15974] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 822.819814][T15974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.827850][T15974] usb 5-1: Product: syz [ 822.869424][ T8153] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 822.883639][T15974] usb 5-1: Manufacturer: syz [ 822.908668][T15974] usb 5-1: SerialNumber: syz [ 822.918819][ T8153] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 822.935999][ T8153] usb 4-1: can't read configurations, error -61 [ 822.963948][ T8153] usb usb4-port1: unable to enumerate USB device [ 823.079888][T12140] Bluetooth: hci1: command tx timeout [ 823.163476][T15974] usb 5-1: 0:2 : does not exist [ 823.173791][T15974] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 823.220632][T15974] usb 5-1: USB disconnect, device number 92 [ 823.313175][T10719] udevd[10719]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 825.159850][T12140] Bluetooth: hci1: command tx timeout [ 827.250179][T12140] Bluetooth: hci1: command tx timeout [ 865.102768][T12160] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 865.141783][T12160] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 865.167843][T12160] usb 3-1: USB disconnect, device number 19 [ 870.202620][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.209128][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.645251][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.651936][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 940.798974][T16336] [U] .h0FwZ,iqgҏV2sO [ 940.859453][T16336] [U] ` w*BBOLhU [ 940.864000][T16336] [U] w$n|#%o.z\̧mРw [ 940.869113][T16336] [U] R{ꫢ S [ 941.010901][T16345] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2671'. [ 941.171224][T16342] ip6gre2: entered promiscuous mode [ 941.179539][T16342] ip6gre2: entered allmulticast mode [ 941.439702][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 941.713607][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 941.739382][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 941.753031][ T9] usb 3-1: config 0 interface 0 has no altsetting 1 [ 941.771553][ T9] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 941.784014][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 941.817467][ T9] usb 3-1: SerialNumber: syz [ 941.834608][ T9] usb 3-1: config 0 descriptor?? [ 941.852506][ T9] usb-storage 3-1:0.0: USB Mass Storage device detected [ 941.892921][ T9] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 942.439475][T15974] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 942.849676][ T5948] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 943.017171][ T5948] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 943.069531][ T5948] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 943.121384][ T5948] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 943.155959][T16375] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 943.175948][ T5948] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 943.223184][ T5948] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 943.242006][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.280292][ T5948] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 943.302681][ T5948] usb 2-1: invalid MIDI out EP 0 [ 943.453553][T16352] udevd[16352]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 943.498900][ T5948] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 943.537888][ T5948] usb 2-1: USB disconnect, device number 46 [ 943.794452][T16386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2679'. [ 943.837436][ T5941] usb 3-1: USB disconnect, device number 20 [ 943.962989][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 944.201835][ T30] kauditd_printk_skb: 208 callbacks suppressed [ 944.201851][ T30] audit: type=1326 audit(1758109219.134:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16384 comm="syz.3.2680" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f542858eba9 code=0x0 [ 944.241257][T16336] [U] [ 944.843209][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2683'. [ 944.849422][T15974] usb 4-1: device descriptor read/64, error -71 [ 944.865083][ T5941] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 944.913008][T16394] input: syz0 as /devices/virtual/input/input54 [ 945.089906][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 945.102989][ T5941] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 945.117834][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.154017][ T5941] usb 3-1: Product: syz [ 945.165058][ T5941] usb 3-1: Manufacturer: syz [ 945.169970][T15974] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 945.187518][ T5941] usb 3-1: SerialNumber: syz [ 945.196439][ T5941] usb 3-1: config 0 descriptor?? [ 945.331445][T15974] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 945.350027][T15974] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 945.371446][T15974] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 945.386541][T15974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 945.409182][T15974] usb 4-1: SerialNumber: syz [ 945.866291][ T5941] airspy 3-1:0.0: Board ID: e0 [ 945.896962][ T5941] airspy 3-1:0.0: Firmware version: [ 945.981851][ T30] audit: type=1326 audit(1758109220.914:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16409 comm="syz.0.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb8eba9 code=0x7ffc0000 [ 946.058057][ T30] audit: type=1326 audit(1758109220.944:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16409 comm="syz.0.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f3ffbb8eba9 code=0x7ffc0000 [ 946.105347][ T30] audit: type=1326 audit(1758109220.944:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16409 comm="syz.0.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb8eba9 code=0x7ffc0000 [ 946.140134][ T30] audit: type=1326 audit(1758109220.944:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16409 comm="syz.0.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb8eba9 code=0x7ffc0000 [ 946.176110][ T30] audit: type=1326 audit(1758109220.954:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16409 comm="syz.0.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3ffbb8eba9 code=0x7ffc0000 [ 946.220960][ T30] audit: type=1326 audit(1758109220.954:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16409 comm="syz.0.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb8eba9 code=0x7ffc0000 [ 946.261278][ T30] audit: type=1326 audit(1758109220.954:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16409 comm="syz.0.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb8eba9 code=0x7ffc0000 [ 946.367032][ T30] audit: type=1326 audit(1758109220.954:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16409 comm="syz.0.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3ffbb8eba9 code=0x7ffc0000 [ 946.399953][ T30] audit: type=1326 audit(1758109220.954:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16409 comm="syz.0.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb8eba9 code=0x7ffc0000 [ 946.833129][T15974] usb 4-1: 0:2 : does not exist [ 946.895886][ T5941] airspy 3-1:0.0: Registered as swradio24 [ 946.911908][ T5941] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 946.979058][T15974] usb 4-1: USB disconnect, device number 46 [ 947.029401][ T3195] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 947.062036][T16380] udevd[16380]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 947.195672][ T3195] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 947.225300][ T3195] usb 5-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 947.252666][ T3195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.291248][ T3195] usb 5-1: config 0 descriptor?? [ 947.359970][T15974] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 947.444186][T16408] netlink: 'syz.2.2684': attribute type 2 has an invalid length. [ 947.452687][T16408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2684'. [ 947.490502][T16408] : entered promiscuous mode [ 947.518860][T16434] loop2: detected capacity change from 0 to 7 [ 947.528378][T15974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 947.548180][T16434] loop2: [POWERTEC] p1 p2 p3 p4 [ 947.556422][T15974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 947.570207][T16434] loop2: p1 start 1441792 is beyond EOD, truncated [ 947.575666][T15974] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 947.577430][T16434] loop2: p2 start 1310720 is beyond EOD, [ 947.595022][T15974] usb 4-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 947.618763][T16434] truncated [ 947.622617][T15974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.632391][T16434] loop2: p3 start 16777216 is beyond EOD, truncated [ 947.648358][T15974] usb 4-1: config 0 descriptor?? [ 947.658996][T16434] loop2: p4 start 150995490 is beyond EOD, truncated [ 947.676556][T15974] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input55 [ 947.729936][ T3195] usbhid 5-1:0.0: can't add hid device: -71 [ 947.738485][ T3195] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 947.765262][ T3195] usb 5-1: USB disconnect, device number 93 [ 947.871994][ T5219] bcm5974 4-1:0.0: could not read from device [ 947.893524][ T5219] bcm5974 4-1:0.0: could not read from device [ 947.916942][T15974] usb 4-1: USB disconnect, device number 47 [ 948.064214][T16339] udevd[16339]: Error opening device "/dev/input/event4": No such file or directory [ 948.083276][T16339] udevd[16339]: Unable to EVIOCGABS device "/dev/input/event4" [ 948.142211][T16339] udevd[16339]: Unable to EVIOCGABS device "/dev/input/event4" [ 948.150106][T16339] udevd[16339]: Unable to EVIOCGABS device "/dev/input/event4" [ 948.163281][T16339] udevd[16339]: Unable to EVIOCGABS device "/dev/input/event4" [ 948.548144][ T5948] usb 3-1: USB disconnect, device number 21 [ 949.149734][T15974] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 949.312792][T15974] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 949.343369][T15974] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 949.369910][T15974] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 949.379488][T15974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.387814][T15974] usb 4-1: Product: syz [ 949.394128][T15974] usb 4-1: Manufacturer: syz [ 949.492270][T15974] usb 4-1: SerialNumber: syz [ 949.766504][T15974] usb 4-1: 0:2 : does not exist [ 949.803309][T15974] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 949.878492][T16473] openvswitch: netlink: Key type 31 is not supported [ 950.004542][T15974] usb 4-1: USB disconnect, device number 48 [ 950.080826][T16372] udevd[16372]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 951.159496][T15974] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 951.344042][T15974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 951.355323][ T5941] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 951.399426][T15974] usb 2-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 951.408616][T15974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.520093][T15974] usb 2-1: config 0 descriptor?? [ 951.560257][ T5941] usb 4-1: Using ep0 maxpacket: 8 [ 951.594891][T16502] netlink: 'syz.0.2709': attribute type 13 has an invalid length. [ 951.691053][ T5941] usb 4-1: unable to get BOS descriptor or descriptor too short [ 951.700099][ T5941] usb 4-1: no configurations [ 951.704793][ T5941] usb 4-1: can't read configurations, error -22 [ 951.956599][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2711'. [ 952.166571][T16502] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.208856][T16502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 952.242842][T16485] loop2: detected capacity change from 0 to 7 [ 952.277205][T16372] loop2: [POWERTEC] p1 p2 p3 p4 [ 952.292678][T16372] loop2: p1 start 1441792 is beyond EOD, truncated [ 952.301165][T16372] loop2: p2 start 1310720 is beyond EOD, truncated [ 952.329537][T16372] loop2: p3 start 16777216 is beyond EOD, truncated [ 952.438252][T16372] loop2: p4 start 150995490 is beyond EOD, truncated [ 952.523055][T16485] loop2: [POWERTEC] p1 p2 p3 p4 [ 952.574990][T16485] loop2: p1 start 1441792 is beyond EOD, truncated [ 952.649505][ T3195] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 952.691439][T16485] loop2: p2 start 1310720 is beyond EOD, truncated [ 952.791778][T16485] loop2: p3 start 16777216 is beyond EOD, truncated [ 952.806498][ T3195] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 952.837895][ T3195] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 952.870036][ T3195] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 952.884057][ T3195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.901466][T16485] loop2: p4 start 150995490 is beyond EOD, truncated [ 952.917484][ T3195] usb 3-1: Product: syz [ 952.934352][ T3195] usb 3-1: Manufacturer: syz [ 952.956660][ T3195] usb 3-1: SerialNumber: syz [ 953.020406][T15974] usbhid 2-1:0.0: can't add hid device: -71 [ 953.043986][T15974] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 953.137444][T15974] usb 2-1: USB disconnect, device number 47 [ 953.265506][ T3195] usb 3-1: 0:2 : does not exist [ 953.305438][ T3195] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 953.604215][T16523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2715'. [ 953.658580][ T3195] usb 3-1: USB disconnect, device number 22 [ 953.777330][T16372] udevd[16372]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 954.702347][T12140] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 955.717443][T16554] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 955.841788][T16548] tipc: Enabling of bearer rejected, failed to enable media [ 956.129379][ T3195] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 956.289382][ T3195] usb 3-1: Using ep0 maxpacket: 8 [ 956.305980][ T3195] usb 3-1: config 0 has no interfaces? [ 958.033757][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 958.033791][ T30] audit: type=1326 audit(1758109232.964:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16572 comm="syz.4.2728" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1e518eba9 code=0x0 [ 958.061936][ C1] vkms_vblank_simulate: vblank timer overrun [ 958.319578][ T5948] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 958.494861][ T5948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 958.510690][ T5948] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 958.545052][ T5948] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 958.555101][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.564935][ T5948] usb 2-1: Product: syz [ 958.574892][ T5948] usb 2-1: Manufacturer: syz [ 958.584155][ T5948] usb 2-1: SerialNumber: syz [ 958.877611][ T5948] usb 2-1: 0:2 : does not exist [ 958.929472][ T5948] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 958.947062][T16588] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 959.039893][ T5948] usb 2-1: USB disconnect, device number 48 [ 959.103171][ T3195] usb 3-1: string descriptor 0 read error: -71 [ 959.105808][T16372] udevd[16372]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 959.139819][ T3195] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 959.171681][ T3195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.197472][ T3195] usb 3-1: config 0 descriptor?? [ 959.207399][ T3195] usb 3-1: can't set config #0, error -71 [ 959.215912][ T3195] usb 3-1: USB disconnect, device number 23 [ 959.310024][ T24] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 959.491095][ T24] usb 5-1: config 4 has an invalid interface number: 168 but max is 0 [ 959.505987][ T24] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 959.530198][ T24] usb 5-1: config 4 has no interface number 0 [ 959.536558][ T24] usb 5-1: too many endpoints for config 4 interface 168 altsetting 150: 166, using maximum allowed: 30 [ 959.633633][ T24] usb 5-1: config 4 interface 168 altsetting 150 has 0 endpoint descriptors, different from the interface descriptor's value: 166 [ 959.647421][ T24] usb 5-1: config 4 interface 168 has no altsetting 0 [ 959.655902][ T24] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 959.669431][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.965870][T16590] bridge0: port 3(hsr_slave_1) entered blocking state [ 959.973931][T16590] bridge0: port 3(hsr_slave_1) entered disabled state [ 959.981327][T16590] hsr_slave_1: entered allmulticast mode [ 959.988498][T16590] hsr_slave_1: left allmulticast mode [ 959.996814][ T24] usb 5-1: string descriptor 0 read error: -71 [ 960.006039][ T24] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 960.102295][T16603] netlink: 380 bytes leftover after parsing attributes in process `syz.3.2736'. [ 960.703282][T16610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2737'. [ 960.925582][T16616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2738'. [ 961.079871][ T24] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 961.259107][ T24] stv0680 5-1:4.168: STV(e): camera ping failed!! [ 961.293608][ T24] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 961.304851][ T24] stv0680 5-1:4.168: last error: 0, command = 0x0 [ 961.388525][ T24] usb 5-1: USB disconnect, device number 94 [ 961.403610][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 961.883819][T16632] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2742'. [ 962.373022][T16645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2745'. [ 962.440554][ T5948] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 962.519562][T12160] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 962.604990][ T5948] usb 4-1: device descriptor read/64, error -71 [ 962.691970][T12160] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 962.710761][T12160] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 962.751242][T12160] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 962.767446][T12160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.775713][T12160] usb 5-1: Product: syz [ 962.783514][T12160] usb 5-1: Manufacturer: syz [ 962.793918][T12160] usb 5-1: SerialNumber: syz [ 962.869665][ T5948] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 962.999815][ T5948] usb 4-1: device descriptor read/64, error -71 [ 963.038342][T12160] usb 5-1: 0:2 : does not exist [ 963.048925][T12160] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 963.109973][ T5948] usb usb4-port1: attempt power cycle [ 963.149807][T12160] usb 5-1: USB disconnect, device number 95 [ 963.242360][T16622] udevd[16622]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 963.469385][ T5948] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 963.498170][ T5948] usb 4-1: device descriptor read/8, error -71 [ 963.759633][ T5948] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 963.802674][ T5948] usb 4-1: device descriptor read/8, error -71 [ 963.920235][ T5948] usb usb4-port1: unable to enumerate USB device [ 964.046660][T16674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2753'. [ 964.579936][ T24] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 964.790906][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 964.832796][ T24] usb 3-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 964.886470][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.927427][ T24] usb 3-1: config 0 descriptor?? [ 965.125543][T16692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2759'. [ 965.358962][T16681] loop2: detected capacity change from 0 to 7 [ 965.371063][T16681] loop2: [POWERTEC] p1 p2 p3 p4 [ 965.376361][T16681] loop2: p1 start 1441792 is beyond EOD, truncated [ 965.388904][T16681] loop2: p2 start 1310720 is beyond EOD, truncated [ 965.410971][T16681] loop2: p3 start 16777216 is beyond EOD, truncated [ 965.431306][T16681] loop2: p4 start 150995490 is beyond EOD, truncated [ 965.477722][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 965.485213][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 965.559690][ T24] usb 3-1: USB disconnect, device number 24 [ 965.838564][T16701] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 966.172374][T16706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2763'. [ 966.314576][T16706] vlan0: entered promiscuous mode [ 967.916109][T16732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2771'. [ 968.012520][ T3195] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 968.280554][ T3195] usb 2-1: Using ep0 maxpacket: 16 [ 968.305343][ T3195] usb 2-1: config 0 has an invalid interface number: 190 but max is 1 [ 968.317568][ T3195] usb 2-1: config 0 has an invalid interface number: 2 but max is 1 [ 968.345456][ T3195] usb 2-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 968.408664][ T3195] usb 2-1: config 0 has no interface number 1 [ 968.417521][ T3195] usb 2-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 968.477292][T16740] page: refcount:515 mapcount:0 mapping:ffff88801cb31b70 index:0x0 pfn:0x11e00 [ 968.487612][T16740] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 968.496403][T16740] aops:hugetlbfs_aops ino:12921 dentry name(?):"anon_hugepage" [ 968.503970][T16740] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff) [ 968.512133][T16740] page_type: f4(hugetlb) [ 968.516419][T16740] raw: 00fff00000000041 ffffc9000bdc7e10 ffffc9000bdc7e10 ffff88801cb31b70 [ 968.525007][T16740] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 968.533596][T16740] head: 00fff00000000041 ffffc9000bdc7e10 ffffc9000bdc7e10 ffff88801cb31b70 [ 968.542300][T16740] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 968.551086][T16740] head: 00fff00000000009 ffffea0000478001 0000000000000000 0000000000000000 [ 968.559787][T16740] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 968.568467][T16740] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 968.575948][T16740] page_owner tracks the page as allocated [ 968.582788][T16740] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 15708, tgid 15697 (syz.2.2497), ts 781820087493, free_ts 781744259226 [ 968.603568][T16740] post_alloc_hook+0x240/0x2a0 [ 968.608334][T16740] get_page_from_freelist+0x21e4/0x22c0 [ 968.613880][T16740] __alloc_frozen_pages_noprof+0x181/0x370 [ 968.619667][T16740] alloc_buddy_hugetlb_folio+0xdf/0x1c0 [ 968.625200][T16740] only_alloc_fresh_hugetlb_folio+0x8c/0x280 [ 968.631202][T16740] alloc_surplus_hugetlb_folio+0x103/0x430 [ 968.636994][T16740] alloc_hugetlb_folio+0xb1a/0x16a0 [ 968.642362][T16740] hugetlb_wp+0x8f0/0x31a0 [ 968.646850][T16740] hugetlb_fault+0x1692/0x2970 [ 968.651615][T16740] handle_mm_fault+0x740/0x8e0 [ 968.656477][T16740] __get_user_pages+0x1699/0x2ce0 [ 968.661500][T16740] populate_vma_page_range+0x29f/0x3a0 [ 968.666949][T16740] __mm_populate+0x24c/0x380 [ 968.671516][T16740] do_mlock+0x625/0x740 [ 968.675762][T16740] __x64_sys_mlock+0x60/0x70 [ 968.680330][T16740] do_syscall_64+0xfa/0x3b0 [ 968.684830][T16740] page last free pid 15706 tgid 15697 stack trace: [ 968.691309][T16740] __free_frozen_pages+0xbc4/0xd30 [ 968.696405][T16740] __folio_put+0x21b/0x2c0 [ 968.700810][T16740] update_and_free_hugetlb_folio+0x169/0x280 [ 968.706801][T16740] free_huge_folio+0xd72/0x1100 [ 968.711766][T16740] folios_put_refs+0x410/0x640 [ 968.716516][T16740] free_pages_and_swap_cache+0x4be/0x520 [ 968.722223][T16740] tlb_flush_mmu+0x3a0/0x680 [ 968.726901][T16740] tlb_finish_mmu+0xc3/0x1d0 [ 968.731494][T16740] zap_page_range_single_batched+0x5ba/0x740 [ 968.737473][T16740] madvise_vma_behavior+0x24a9/0x3af0 [ 968.742931][T16740] madvise_walk_vmas+0x87e/0xa30 [ 968.747875][T16740] madvise_do_behavior+0x38e/0x550 [ 968.752974][T16740] do_madvise+0x1bc/0x270 [ 968.757289][T16740] __x64_sys_madvise+0xa7/0xc0 [ 968.762050][T16740] do_syscall_64+0xfa/0x3b0 [ 968.766534][T16740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.772490][T16740] ------------[ cut here ]------------ [ 968.778279][T16740] kernel BUG at mm/filemap.c:154! [ 968.783323][T16740] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 968.789568][T16740] CPU: 0 UID: 0 PID: 16740 Comm: syz.0.2773 Not tainted syzkaller #0 PREEMPT(full) [ 968.798925][T16740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 968.809057][T16740] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 968.815297][T16740] Code: a3 c9 ff 48 89 df 48 c7 c6 20 3e 94 8b e8 13 e2 31 ff 90 0f 0b e8 5b a3 c9 ff 48 89 df 48 c7 c6 00 3d 94 8b e8 fc e1 31 ff 90 <0f> 0b e8 44 a3 c9 ff 48 89 df 48 c7 c6 20 3e 94 8b e8 e5 e1 31 ff [ 968.835236][T16740] RSP: 0018:ffffc9000bfc6e20 EFLAGS: 00010046 [ 968.841375][T16740] RAX: c5b7c63eac6ba700 RBX: ffffea0000478000 RCX: c5b7c63eac6ba700 [ 968.849348][T16740] RDX: 0000000000000005 RSI: ffffffff8dba93b2 RDI: ffff888030e6da00 [ 968.857321][T16740] RBP: 0000000000000001 R08: ffff8880b8624253 R09: 1ffff110170c484a [ 968.865272][T16740] R10: dffffc0000000000 R11: ffffed10170c484b R12: 0000000000000040 [ 968.873228][T16740] R13: 1ffffd400008f000 R14: 1ffffd400008f001 R15: ffffea0000478008 [ 968.881280][T16740] FS: 00007f3ffc9856c0(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 968.890192][T16740] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 968.896777][T16740] CR2: 0000200000092380 CR3: 0000000054d60000 CR4: 00000000003526f0 [ 968.904821][T16740] Call Trace: [ 968.908103][T16740] [ 968.911050][T16740] __filemap_remove_folio+0xc3/0x500 [ 968.916415][T16740] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 968.921801][T16740] ? __pfx___filemap_remove_folio+0x10/0x10 [ 968.927690][T16740] ? _raw_spin_lock_irq+0xae/0xf0 [ 968.932699][T16740] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 968.938243][T16740] filemap_remove_folio+0xe6/0x1f0 [ 968.943450][T16740] remove_inode_hugepages+0x594/0x1100 [ 968.948989][T16740] ? is_bpf_text_address+0x292/0x2b0 [ 968.954287][T16740] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 968.960184][T16740] ? hugetlbfs_fallocate+0xbaf/0x1100 [ 968.965573][T16740] ? up_write+0x1c4/0x420 [ 968.969915][T16740] hugetlbfs_fallocate+0xbc7/0x1100 [ 968.975108][T16740] ? aa_file_perm+0x13a/0x1550 [ 968.980031][T16740] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 968.985673][T16740] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 968.991657][T16740] vfs_fallocate+0x666/0x7e0 [ 968.996237][T16740] ? __pfx_vfs_fallocate+0x10/0x10 [ 969.001617][T16740] madvise_vma_behavior+0x3254/0x3af0 [ 969.006989][T16740] ? __lock_acquire+0xab9/0xd20 [ 969.011831][T16740] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 969.017552][T16740] ? finish_task_switch+0x266/0x950 [ 969.022748][T16740] ? lockdep_hardirqs_on+0x9c/0x150 [ 969.027934][T16740] ? finish_task_switch+0x266/0x950 [ 969.033119][T16740] ? rcu_is_watching+0x15/0xb0 [ 969.037897][T16740] ? trace_sched_exit_tp+0x36/0x110 [ 969.043098][T16740] ? __schedule+0x17ae/0x4cc0 [ 969.047956][T16740] ? mas_prev_slot+0xb31/0xbb0 [ 969.052703][T16740] ? find_vma_prev+0xfc/0x170 [ 969.057364][T16740] ? __pfx_find_vma_prev+0x10/0x10 [ 969.062455][T16740] ? futex_unqueue+0x22/0x240 [ 969.067117][T16740] ? __futex_wait+0x34f/0x3e0 [ 969.071802][T16740] madvise_walk_vmas+0x51c/0xa30 [ 969.076838][T16740] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 969.082301][T16740] ? blk_start_plug+0x6f/0x1b0 [ 969.087153][T16740] madvise_do_behavior+0x38e/0x550 [ 969.092354][T16740] ? __pfx_madvise_do_behavior+0x10/0x10 [ 969.097985][T16740] ? down_read+0x1ad/0x2e0 [ 969.102388][T16740] do_madvise+0x1bc/0x270 [ 969.106714][T16740] ? __pfx_do_madvise+0x10/0x10 [ 969.111556][T16740] ? __se_sys_futex+0x36f/0x400 [ 969.116509][T16740] ? rcu_is_watching+0x15/0xb0 [ 969.121264][T16740] __x64_sys_madvise+0xa7/0xc0 [ 969.126118][T16740] do_syscall_64+0xfa/0x3b0 [ 969.130623][T16740] ? lockdep_hardirqs_on+0x9c/0x150 [ 969.135823][T16740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.141896][T16740] ? clear_bhb_loop+0x60/0xb0 [ 969.146576][T16740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.152485][T16740] RIP: 0033:0x7f3ffbb8eba9 [ 969.156900][T16740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 969.176597][T16740] RSP: 002b:00007f3ffc985038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 969.185089][T16740] RAX: ffffffffffffffda RBX: 00007f3ffbdd6180 RCX: 00007f3ffbb8eba9 [ 969.193055][T16740] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 969.201191][T16740] RBP: 00007f3ffbc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 969.209154][T16740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 969.217115][T16740] R13: 00007f3ffbdd6218 R14: 00007f3ffbdd6180 R15: 00007f3ffbeffa28 [ 969.225149][T16740] [ 969.228156][T16740] Modules linked in: [ 969.232139][T16740] ---[ end trace 0000000000000000 ]--- [ 969.237577][T16740] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 969.243810][T16740] Code: a3 c9 ff 48 89 df 48 c7 c6 20 3e 94 8b e8 13 e2 31 ff 90 0f 0b e8 5b a3 c9 ff 48 89 df 48 c7 c6 00 3d 94 8b e8 fc e1 31 ff 90 <0f> 0b e8 44 a3 c9 ff 48 89 df 48 c7 c6 20 3e 94 8b e8 e5 e1 31 ff [ 969.263405][T16740] RSP: 0018:ffffc9000bfc6e20 EFLAGS: 00010046 [ 969.269557][T16740] RAX: c5b7c63eac6ba700 RBX: ffffea0000478000 RCX: c5b7c63eac6ba700 [ 969.277528][T16740] RDX: 0000000000000005 RSI: ffffffff8dba93b2 RDI: ffff888030e6da00 [ 969.285478][T16740] RBP: 0000000000000001 R08: ffff8880b8624253 R09: 1ffff110170c484a [ 969.293437][T16740] R10: dffffc0000000000 R11: ffffed10170c484b R12: 0000000000000040 [ 969.301384][T16740] R13: 1ffffd400008f000 R14: 1ffffd400008f001 R15: ffffea0000478008 [ 969.309353][T16740] FS: 00007f3ffc9856c0(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 969.318530][T16740] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 969.325128][T16740] CR2: 0000200000092380 CR3: 0000000054d60000 CR4: 00000000003526f0 [ 969.333096][T16740] Kernel panic - not syncing: Fatal exception [ 969.339469][T16740] Kernel Offset: disabled [ 969.343778][T16740] Rebooting in 86400 seconds..