last executing test programs: 1m48.569252368s ago: executing program 4 (id=384): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x169243, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x7) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x1b9890e6, 0x8, 0x6, 0x4000000000000e51, 0x7fffffff, 0x5479, 0x1041, 0x200000000006, 0x0, 0x1, 0x2, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x800040069], 0x2000, 0x1080}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) dup3(r7, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 1m45.568659976s ago: executing program 4 (id=390): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) close_range(r2, 0xffffffffffffffff, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r7, &(0x7f0000001ac0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, &(0x7f0000001a00)={0x84, 0x0, 0x0, 0x0, &(0x7f00000016c0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xc07, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1m44.579438624s ago: executing program 4 (id=392): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x74001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4005}, 0x11) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) link(&(0x7f0000001240)='./file1\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) r3 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) write$ppp(0xffffffffffffffff, &(0x7f0000000300)='Z', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="0203000310000000000000000000000002000900080000000a0000000000000005000600000000000a000000000000000000000000000000000000000000000100000000000000000200010000020000000000fb0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x40000) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4140aecd, 0x0) 1m42.049042154s ago: executing program 4 (id=401): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000280)=@hopopts={0x33}, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) (async) unshare(0x26020480) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) (async) socket$inet6(0xa, 0x802, 0x0) (async) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000280)=@hopopts={0x33}, 0x8) (async) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) connect$inet6(r2, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0x0) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) 1m41.6108527s ago: executing program 4 (id=403): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x0, @private=0x80000000}}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = epoll_create1(0x80000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read$FUSE(r2, &(0x7f0000002280)={0x2020}, 0x2020) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000002240)={0x10000000}) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x2, 0x14, 0x0, 0x0, 0x0, [@sadb_key={0x6, 0x8, 0x108, 0x0, "041f6255dd400d223296421054f011855acec306fd5e47b5a703e12c5826a2e7e3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0xa0}, 0x1, 0x7}, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) listen(r5, 0x80000400) listen(r5, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x401, 0x1c}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x48011) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r6, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x14}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x66, 0xac, "f419bb03df1122ef70bcec580d7e32f84bb51d0d9635b3f6f4ed7f41a7a99c71786acd94e01bccbeedb6d7a814d06dc34b7ac7a1920ecfd8433a34a1b4dfb401e12ea1b7b16203c4aa57660dc87a65938ff5f37d6872bb2bfefdbbb4729c1d1e1b11"}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$key(0xf, 0x3, 0x2) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$HIDIOCGVERSION(r4, 0x80044801, &(0x7f0000000200)) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r9, @ANYRES16=r8], 0x0) 1m41.206958414s ago: executing program 4 (id=407): r0 = socket$inet6(0xa, 0x3, 0x87) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TIOCSSOFTCAR(r1, 0x541a, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x0, 0x4e20, 0x7fff, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9, 0x200}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x2, 0x2}, {{@in=@empty, 0x4d6, 0x32}, 0xa, @in6=@mcast1, 0x3502, 0x1, 0x0, 0x0, 0x400, 0xfffffffd}}, 0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000b15000/0x2000)=nil, 0x3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) mmap(&(0x7f0000ad7000/0x3000)=nil, 0x3000, 0x2, 0x89010, r0, 0x806d0000) 1m40.270166269s ago: executing program 32 (id=407): r0 = socket$inet6(0xa, 0x3, 0x87) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TIOCSSOFTCAR(r1, 0x541a, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x0, 0x4e20, 0x7fff, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9, 0x200}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x2, 0x2}, {{@in=@empty, 0x4d6, 0x32}, 0xa, @in6=@mcast1, 0x3502, 0x1, 0x0, 0x0, 0x400, 0xfffffffd}}, 0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000b15000/0x2000)=nil, 0x3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) mmap(&(0x7f0000ad7000/0x3000)=nil, 0x3000, 0x2, 0x89010, r0, 0x806d0000) 10.98294281s ago: executing program 0 (id=709): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]}) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000b80)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r1) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 10.325431983s ago: executing program 0 (id=712): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffff5f, 0x0}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@hyper, 0x2}, @local, 0x0, 0x0, 0x100, 0x6, 0x10, 0x3}) 10.06506094s ago: executing program 2 (id=714): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r0 = syz_io_uring_setup(0x43d2, &(0x7f0000000080)={0x0, 0x3670, 0x10100, 0x202, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x2}}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac004000202080028000300010004000c00eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = epoll_create1(0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000780)={0x10000000}) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88000) write$P9_ROPEN(r7, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x80, 0x3, 0x4}, 0x17d8}}, 0x18) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x2007, @fd, 0x8, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 8.546843247s ago: executing program 2 (id=718): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_pts(r1, 0x141601) fcntl$setstatus(r2, 0x4, 0x102800) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa14a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0xff, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "03bba8c1b77c06e7"}}}}}}}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000000300)="96", 0x1, 0xfffffffffffffffc}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r5, 0x0, &(0x7f0000000200)="cc", 0x1, 0x2}) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x14342, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r7, 0x8140aecc, &(0x7f0000000200)) 8.054407538s ago: executing program 0 (id=720): syz_usb_connect(0x7, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100005f2ab4000000000904000000dba29200"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x4, 0x0, 0x2, 0x6, 0x8, 0x0, 0x9}, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0xc0408c1}, 0x24000840) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(0x0, 0x80) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020001000000000000000702000000ff05000500000000000a00000000000000ff010000000000000000000000000001000000000000000002"], 0x80}}, 0x0) r5 = add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) r6 = add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000500)="000000c6d222406b096cc34801000000647418aaf9784416ed438eb9a332f44a1ec989b2d2e513f57632c54d863ecd9b0df090728300e43d59f817b99310b6b600968f3d2f02bbdfbbcb5c4f13e25d19bfdffe6f178f3580ea2b14da36c6095d68284c04c724611344d68d651aa37d305b61d2ffec13ebbbdaa51c2dac42788676771ee9f9a1cd34fbb8c576bfddf2a15d55dcb910f9eb6f9e572c362d7df6deb76cab9bff062885ec675056768437", 0xaf, r5) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, 0x0, 0x40850) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd23, 0x0}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 7.327009655s ago: executing program 2 (id=721): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040341a05f7000000ac708bd29e0092520000012902240001000020000904000005910308000000fd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="40031600000016304ff6"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040341a05f7000000ac708bd29e0092520000012902240001000020000904000005910308000000fd"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="40031600000016304ff6"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 7.075219724s ago: executing program 1 (id=723): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x0, 0x8001, 0x0, 0x1, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x8, &(0x7f0000146000/0x1000)=nil) r2 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000240)={0x5, 0x50424752, 0x0, @discrete={0xfff, 0x800007}}) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x5106, 0x0, 0x1}, 0x18, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff01, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES64=r5, @ANYRESDEC=0x0, @ANYBLOB], 0x50) syz_open_dev$evdev(0x0, 0x4e1e991f, 0x200800) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_getattr(r2, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) mremap(&(0x7f0000336000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000037820b63a863000b4d67deab187b5b4ac75b12656bd0b0741c4590458d4a3eb464fa883b4c8bdad2671f0096ace0a1f40e3b3aeadaadb7f50a4ce2d76d6a7e1eac99c8f09a6b34512e94", @ANYRES16=r7, @ANYRES64], 0x2c}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f00000002c0)="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") remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x2, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6.219173582s ago: executing program 5 (id=724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f1730000000000000000000a20001000000a03000000000000000000070000000900010073797a3000000000ffe95800000700000008000a40000000000900020073797a31000000000900010073797a30000000000100054000000031200011800a00012071756f74610000001000ed7f0c0001400000000000000008140000003400010000000000000000000084ebbbcf16b5cb79589952fb1af22c"], 0xa4}, 0x1, 0x0, 0x0, 0x4008084}, 0x604c000) 6.152951268s ago: executing program 5 (id=725): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000640)={0x0, 0xf3c4, 0x5, 0x3}) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) 5.862024684s ago: executing program 1 (id=727): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x98, r8, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x80, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000003280)={'fscrypt:', @desc4}, 0x0, 0x0, 0xfffffffffffffffb) r9 = syz_io_uring_setup(0x498, &(0x7f0000000400)={0x0, 0x79af, 0x1, 0x8001, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) unshare(0x28040600) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r9, 0x627, 0xc103fffe, 0x47, 0x0, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r11, 0x331, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000002d00600000000000000000000500000014000a00bc5ae44ef0428c6625dbb53bd0dd0900000000000000000000000000000142"], 0x28}}, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80020001}, 0xc, &(0x7f0000000100)={&(0x7f0000004380)=@newtfilter={0x42ec, 0x2c, 0x800, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x9, 0x10}, {0x1, 0xa}, {0xc46767b1018b0618, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_basic={{0xa}, {0x42b4, 0x2, [@TCA_BASIC_EMATCHES={0x1b0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1ac, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7ff, 0x1, 0xb}, {0x7, 0x7fffffff, 0x200, 0x2, 0xa, 0x0, 0x1}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x9, 0x2b05}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x73}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x5, 0x1, 0x70}, {0x94c, 0x8, 0x1f14, 0x4, 0x3, 0x1, 0x1}}}, @TCF_EM_META={0x134, 0x1, 0x0, 0x0, {{0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x101, 0x9}, {0x6, 0x6, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0xc7, 0x2}, {0xd12f, 0x8, 0x2}}}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="00055aaa4ce0"]}, @TCA_EM_META_RVALUE={0x2e, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="85ec2ad112", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="ddd9ca1309a9c5b286", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="d82cd4dd7a7144f7"]}, @TCA_EM_META_LVALUE={0x26, 0x2, [@TCF_META_TYPE_VAR="d38baa", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="b8b3", @TCF_META_TYPE_VAR="ce", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="8a7974b965cb86db", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="c89876bb", @TCF_META_TYPE_VAR="f7ad", @TCF_META_TYPE_VAR="5b6a2a9ddb14d6", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x23, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="2b338851cdb6b99a70", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="6eae706b39e8584e4422"]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="e7e406c563d450f9", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="c7"]}, @TCA_EM_META_RVALUE={0x2e, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="c4bd37e6dc", @TCF_META_TYPE_VAR="0ca55486d5f2", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="16380b", @TCF_META_TYPE_VAR="864de5a31398bc53", @TCF_META_TYPE_VAR="8738adb5"]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="5e0fde0c", @TCF_META_TYPE_VAR="abb7", @TCF_META_TYPE_VAR="5da829"]}]}}, @TCF_EM_IPT={0x28, 0x3, 0x0, 0x0, {{0x1, 0x9, 0xa9}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}, @TCA_BASIC_POLICE={0x87c, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x7f, 0x81, 0x80000000, {0x3, 0x4, 0x0, 0x4b, 0x3, 0xbc7}, {0x0, 0x1, 0x7f, 0x0, 0xff}, 0x0, 0x5, 0xeca}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfd16, 0x5, 0xac, 0x5, 0x2, 0x3, 0x5, 0x0, 0x64, 0xfffffff8, 0x1, 0x5000000, 0x6, 0x10001, 0x8, 0x0, 0x6, 0x81, 0x8, 0xd, 0xa, 0xc, 0x4, 0x7, 0x8000, 0x3, 0xa, 0x74, 0x7, 0x7, 0x32, 0x3, 0x6, 0x6, 0x2, 0xd3, 0xfffffff7, 0xd, 0x480, 0x2, 0x100, 0x1, 0x7, 0x3f, 0x9, 0x10, 0x6, 0x83b3, 0x3eb49dc4, 0x0, 0x2, 0xe, 0x9, 0xe2, 0x8, 0xe, 0x3, 0x9, 0x2, 0x0, 0x4, 0x101, 0x8, 0x8, 0x7, 0x1, 0x4, 0x6, 0x1, 0x2, 0x2, 0x2, 0x9e, 0x56e, 0x2, 0x4, 0x6, 0x1, 0x7, 0xfffffffb, 0xfffffff8, 0x1, 0x3, 0x8, 0x1, 0x2, 0x3, 0x20, 0x7, 0x3, 0x7f, 0xe, 0x120, 0x0, 0x1, 0x968, 0x4, 0x5, 0x2, 0xffff, 0xffff, 0x6, 0xc2, 0x6, 0x4, 0xf, 0x800, 0x5, 0xe1f6, 0x7, 0x6a6e, 0x8, 0x4, 0x2, 0x7350, 0x5, 0x3, 0x0, 0x1, 0x1, 0x4, 0x8, 0x1, 0xd, 0x80000001, 0xfffffff7, 0x6a6, 0x4, 0x3ff, 0x80000001, 0x6, 0x3, 0x2, 0xbc, 0x8, 0x6, 0x5, 0x100, 0x8, 0x401, 0x5f9, 0x6, 0xc, 0x7, 0xd96, 0x1fb33311, 0xff, 0x5, 0x4, 0x4, 0x7, 0x3, 0x9, 0x382, 0x0, 0x7, 0x7, 0xb1b2, 0x8, 0x1, 0x9, 0xffffffff, 0x47, 0x80000001, 0x8, 0x7, 0x9, 0x401, 0x0, 0x0, 0x8ff, 0xffffffff, 0x10, 0x8d, 0xb, 0x9, 0x9, 0x1, 0x0, 0xfff, 0x4, 0xbf5, 0x7fffffff, 0x6, 0x5, 0x100000, 0x1000000, 0x7, 0x7, 0x18, 0x7, 0x4, 0x1ce, 0x50ae, 0x3, 0x4, 0x0, 0xfffffffa, 0x7, 0x6, 0x9, 0x3, 0x9, 0xfffffffb, 0xf0, 0x5, 0x800, 0xeeb317, 0x80000000, 0x7f, 0xf9, 0x100, 0x8, 0x9, 0xdf, 0x400, 0x7701, 0x9, 0x7, 0x8, 0x3, 0x1926, 0x200, 0xfffff801, 0x5, 0x9, 0x2, 0x2f, 0x1, 0x0, 0x3, 0x200, 0x8, 0x7, 0x4, 0x2, 0x0, 0x4, 0x900, 0x4, 0x2, 0x1, 0x4, 0x484, 0x451a, 0x10000, 0x0, 0x5, 0x80000000, 0xfff, 0x4, 0x7ff, 0xba, 0x4, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfc62, 0xbdb3, 0x3, 0x4, 0x0, 0x7ff, 0xfffffff8, 0x4, 0xfffffff9, 0x449, 0x0, 0xfffffffb, 0x2, 0x5, 0x668, 0x2, 0x2, 0xffffffff, 0x8, 0x7, 0x6, 0x6, 0x8, 0x6, 0xe8d1, 0x50, 0x0, 0xd, 0x9, 0xc, 0xe5, 0x3, 0x647, 0xb, 0x7, 0x8, 0x1, 0x47, 0x90cb, 0xffff8000, 0xef, 0x4, 0x4, 0xfe2, 0xa9, 0x4c4, 0xfffff800, 0x8, 0x10000, 0x4, 0x2, 0xcb2, 0xfffffff5, 0x8, 0xf3c, 0xffff, 0x6, 0x1, 0x8, 0x4, 0x8, 0x1, 0x42d, 0x5, 0x6, 0x4, 0x6, 0x7, 0x6, 0x6, 0x46, 0x0, 0x8, 0x3ff, 0x684, 0x8000, 0xfffffffd, 0x2, 0x6, 0x7, 0x40, 0x4, 0x6, 0x8001, 0x8, 0x7fff, 0x10000, 0x9, 0x4, 0xe8, 0x1, 0x9, 0x7, 0x2, 0xc00000, 0x8d3, 0x1, 0x6, 0xa7aa, 0xfff, 0x7934723d, 0x120, 0x2, 0xb63b, 0x5, 0x6, 0x8, 0x31, 0x80000000, 0xaf60, 0x6, 0x5, 0x7, 0x3, 0x2, 0x4, 0x24a0, 0x1, 0x6, 0x6, 0xf, 0x8153, 0x48, 0x2, 0x101, 0x4, 0x80000000, 0xff, 0x7, 0x10, 0xc3, 0x4, 0x7, 0x1, 0x2, 0xf, 0x7ff, 0x2, 0x6, 0x2, 0x80000000, 0xfffffffd, 0x6, 0x1000, 0x40, 0xffffffff, 0x9, 0x0, 0x9, 0x6, 0x14000, 0xe, 0x2, 0x1, 0xc, 0x1, 0x3a, 0x80000001, 0x2, 0x200, 0x2e5, 0xcaa, 0x9, 0x6, 0x950, 0x7fffffff, 0xb, 0x7fffffff, 0xb02, 0x7f, 0x7, 0x1, 0x83d, 0x7, 0x8, 0x3, 0x9, 0x10, 0x7, 0x6, 0x3, 0x5, 0x7, 0x3, 0x6, 0x6, 0x4, 0x0, 0x498, 0x8, 0x1, 0x6, 0xff, 0x10, 0x30c18376, 0x9, 0x0, 0xfffffff7, 0x0, 0x429, 0xff, 0x5, 0x8, 0x5, 0x8, 0x7, 0x2, 0x4, 0x3, 0xfffffffd, 0x4, 0x8, 0x9, 0x5, 0x9, 0x5, 0x8, 0xe4c7, 0x1e05, 0xffffffff, 0x1, 0x5, 0x80000000, 0x9, 0x200, 0x7, 0x5, 0x6, 0x8001, 0xfffff800, 0x7, 0x6, 0x4, 0x693b8ff5, 0x8, 0x8001, 0x354d5ecc, 0x6, 0x50c, 0x3, 0x9, 0x7, 0x2, 0x6, 0x4, 0xbcc0, 0x6, 0x5, 0x0, 0xfa, 0xa5e, 0x80000001, 0x800, 0x3, 0x6, 0x51]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9cc}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7a}]}, @TCA_BASIC_EMATCHES={0xdc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0x4}, {0x3ff, 0x2, 0xfff, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x8, 0x2, 0x8}, {0x5, 0x0, 0x1}}}, @TCF_EM_META={0x6c, 0x3, 0x0, 0x0, {{0x5, 0x4, 0xe586}, [@TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="10", @TCF_META_TYPE_VAR="9f", @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x8, 0x2}, {0x0, 0xb, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0xa, 0x3, [@TCF_META_TYPE_VAR="11d5a668989b"]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="4bc9e32375", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR="8a2d4465"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xe, 0x2, 0x6}, {0x1, 0x8, 0x1, "fc8acfc8e55b4738"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xf38, 0xb1, 0x9, 0x1, 0x1, 0xffff08ca, 0x5, 0x7f, 0x1000, 0x6, 0x10000, 0x3, 0x7ff, 0xf, 0x2, 0x1, 0x7, 0x8, 0x1ff, 0x6, 0xfb, 0x8, 0x8, 0x2, 0x6, 0x101, 0x1400000, 0x6, 0x7, 0x200, 0x1e79, 0xfffffffa, 0x401, 0x905, 0x4, 0x3, 0x3, 0x7, 0x2, 0xf5a4, 0x9, 0x5, 0x7, 0x7, 0x0, 0xe, 0x53f, 0x9, 0x9, 0x9, 0x3, 0x101, 0x59f1, 0x2, 0x10000, 0x3, 0x2, 0xa, 0x200, 0x3, 0x2, 0x40, 0x80000001, 0xfffffffa, 0x2, 0xc1fc, 0xff, 0x1, 0x400, 0x0, 0xa27, 0xaec, 0xc, 0x4, 0x800, 0x5, 0x8, 0x9, 0x1, 0x1, 0x6f, 0x6, 0x7, 0x5, 0x1, 0xf0edccb, 0x3, 0xffffffff, 0x4, 0x8fcc, 0x6, 0x6, 0xe, 0x0, 0x7fff, 0x5, 0xff, 0x2, 0xfffffffe, 0x9, 0x1, 0xc, 0x7, 0x2, 0xd2d, 0x5, 0x0, 0x4, 0xf7, 0x8, 0xe, 0x0, 0x18, 0x6, 0x3, 0x5, 0x3, 0x4, 0xfff, 0x8, 0x817f, 0x6, 0xdf, 0x2, 0x6, 0x686, 0x9, 0x7, 0xd, 0x56, 0x8000, 0x6, 0x10, 0xff, 0x6, 0x3, 0x5, 0x4, 0x8, 0x3, 0xebd0, 0x0, 0x1, 0x9, 0x34, 0x2, 0x9, 0x35a1, 0x9, 0xa03b, 0x3, 0x80, 0x10000, 0x7fff, 0x709c, 0xa64, 0x2, 0x883, 0x8001, 0x9, 0x10000, 0x7ff, 0x7, 0x7fff, 0xd, 0x40, 0x8, 0x5b92, 0x3, 0x5, 0x73a7, 0x9, 0x0, 0x8, 0x6, 0x8000, 0x1, 0x7, 0x0, 0x8, 0x9, 0x4, 0x4204, 0x2, 0x4, 0x7fffffff, 0xae, 0x5, 0x8, 0x101, 0x11, 0x4, 0x7c, 0x3a40000, 0xfffffffe, 0x3, 0x5, 0x7, 0x4, 0x8, 0x1, 0x1b, 0xb58, 0x2, 0x6, 0x4, 0x800, 0xffff, 0x7, 0x84a2, 0x80000001, 0x6, 0x7fff, 0xfff, 0xb60, 0x8, 0x4, 0x81, 0x1, 0x1c, 0x0, 0x0, 0x40, 0x40, 0x5, 0xffff7fff, 0x0, 0x2, 0xfffffffc, 0x5, 0xa7c, 0x8931, 0x1, 0x800, 0xffffff80, 0x80000001, 0x7, 0x4, 0x10000, 0x0, 0xc3, 0x8001, 0x2, 0x9, 0x7f, 0x2, 0x800, 0x1, 0x3, 0x400, 0x800, 0x5, 0xff, 0x1, 0x1, 0xfffffffb]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x3, 0x6, 0xfffffffc, 0x4, {0x92, 0x1, 0x0, 0x7f, 0x1, 0xffff}, {0x5, 0x1, 0x4, 0x3, 0x5}, 0x6, 0x8, 0xfffffffb}}]}, @TCA_BASIC_POLICE={0x85c, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xafd}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd1}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7ff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x0, 0x640a, 0x1, 0x6, 0x7, 0xa, 0x39, 0x3ff, 0xd, 0xe27, 0x1, 0x0, 0xc900, 0x9, 0x5, 0xeaf, 0x6, 0x6, 0x400, 0xcc3fc77, 0xfd0, 0x7, 0x1, 0x4851, 0xe9ac, 0xffffffff, 0x7, 0x5, 0x180, 0x5, 0x3034, 0xffffff45, 0x1, 0x0, 0x0, 0x3, 0x5e1, 0xf, 0x6, 0x15b5ed25, 0x6, 0x5, 0xea, 0xffff, 0xf0c, 0x7, 0x1e1, 0x91, 0x7fffffff, 0x3ff, 0x1ff, 0x8, 0x6d, 0x5, 0x3, 0x92cc, 0x5, 0x1, 0x7ff, 0x8, 0xff, 0x5, 0x5, 0x241, 0x6, 0x80, 0x3, 0x5, 0x7, 0x8, 0x4, 0x10, 0x81, 0x9, 0x0, 0x400, 0x4, 0x4, 0x2, 0x3, 0xffffff10, 0x5, 0x1, 0x8, 0x2, 0x5, 0x1, 0xfffffffd, 0x7, 0x627, 0x5, 0x8000, 0xfffffff8, 0x2, 0x7, 0x5, 0xfffffffc, 0x9, 0x100, 0x1, 0x7, 0x4, 0x4, 0x6, 0x2, 0x5, 0x400000, 0x9, 0x7, 0x1, 0x8, 0xfff, 0xbdef, 0x10001, 0x7, 0x53, 0x3, 0x2, 0xfffffffd, 0x10001, 0x3, 0x4, 0xe4, 0x6, 0x3, 0x3ff, 0x0, 0xffffff01, 0xc, 0xf, 0x7fff, 0x1020000, 0x9, 0x81, 0x5, 0x200, 0x8, 0x5, 0x7, 0x9, 0xb, 0x4, 0xfff, 0xfffffa49, 0x4, 0x10, 0x1000, 0x6, 0x7, 0x0, 0x3, 0xfffffff8, 0x50e, 0x100, 0x80000000, 0x1ff, 0x80000000, 0x2, 0xee, 0x8, 0xffff4ad5, 0x1, 0x1, 0x5, 0x7fffffff, 0xa, 0x3, 0x2, 0x2, 0x6, 0x4, 0x9, 0x1, 0x2, 0x18a588b8, 0x4, 0x7, 0x0, 0x2, 0x2, 0x1, 0x2, 0x3, 0x5, 0x7, 0x101, 0x8, 0x9, 0x2, 0x1ff, 0x2, 0x6, 0xfffffffd, 0x59b9, 0x0, 0x7, 0xffffff00, 0x0, 0xcda00000, 0x8b41, 0x3, 0x7, 0xa55, 0x4, 0x200, 0x7, 0x9, 0x4, 0x0, 0xfffffff9, 0x8, 0x7, 0x6511, 0x57a, 0x3, 0x3ff, 0xeb8, 0x4, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xf6, 0x40000000, 0x80000000, 0x3, 0x0, 0x0, 0x9, 0x3, 0x6, 0x3, 0xa, 0x1, 0x5, 0x5, 0x7, 0x837b, 0x299, 0xff, 0xe, 0x3, 0x7f, 0x6, 0x6, 0x9, 0x9, 0x6, 0x1, 0x3, 0x8b, 0x4, 0x9, 0xc]}, @TCA_POLICE_RATE={0x404, 0x2, [0x200, 0x2, 0xfff, 0x6, 0x5, 0x1, 0x4, 0x9, 0x0, 0x0, 0xff, 0x13, 0x7fffffff, 0xe, 0xd, 0xf151, 0xe, 0x81, 0x6bcb, 0x8, 0x5, 0x9, 0x4, 0x4, 0x1, 0x5, 0x81, 0x7, 0xffffff81, 0xffffffff, 0x6, 0xbc30, 0x5, 0x1, 0x3, 0x7, 0x4, 0x0, 0x8, 0x5, 0x5, 0x1000, 0xff, 0x4, 0x3, 0x4, 0x100, 0xfee, 0x81ed, 0x5f, 0xfffffffc, 0x1, 0xba, 0x3, 0x6, 0xce2, 0xe0, 0xfffffeff, 0xd81, 0x0, 0xfffffffc, 0x7, 0x3, 0x1, 0x6, 0xa, 0x7, 0xfffffff3, 0xe, 0x4, 0x4, 0x3, 0x467, 0x4, 0x7, 0x7, 0xaad, 0xfffffffd, 0x9, 0x9, 0x8, 0x314, 0x3e, 0x4000000, 0x3, 0x6, 0xb12, 0xb4, 0x7fff, 0x2, 0xff, 0x9, 0x41, 0x5, 0x1, 0x9, 0xd535, 0x9, 0x9, 0x3, 0x1, 0x76, 0x5dc, 0xb5, 0x580000, 0xb, 0x7, 0xd2c, 0x5, 0x401, 0x10000, 0x724a, 0x0, 0xf, 0x8, 0xfffffff9, 0x2, 0x4, 0x1, 0x34bd45f4, 0x3, 0x5, 0x0, 0x6f, 0x800, 0x1, 0x7, 0x8, 0x9, 0x6, 0x7fff, 0x3, 0x9, 0x9, 0x3, 0x5, 0x4, 0x8719, 0x0, 0x1, 0x6, 0x6, 0x78, 0x9, 0x9c5, 0x7fff, 0x10000, 0x9, 0x4, 0x0, 0xcc, 0x200, 0xcdfd, 0x7, 0xff, 0x1, 0x101, 0x2, 0x6, 0x6, 0x2ec, 0x7, 0x23, 0xd4, 0x9, 0x8, 0x9, 0x8, 0x4, 0x80000001, 0x5, 0x4, 0x2, 0x10, 0x1, 0xa1, 0x2, 0x4, 0xffff, 0x7fffffff, 0x3, 0x0, 0x3, 0x1, 0xa, 0xbcdc, 0xddfa, 0x1, 0x0, 0x7, 0x583b, 0x43, 0x10, 0x4, 0x3, 0x3d4b, 0x4, 0x1, 0x7, 0x5, 0x7f, 0x38, 0x1, 0x29e, 0x80000001, 0x6, 0x4, 0x5, 0x9, 0x507, 0xea, 0x4, 0x5, 0x7f, 0x1, 0x1ac, 0x4b, 0x4, 0x8, 0x101, 0x8, 0x1, 0xb6c0, 0x9, 0xfffff3f1, 0x7ff, 0x4, 0x71, 0x200, 0x3, 0x7, 0x8, 0x5, 0x2, 0xd097, 0x3ff, 0x3, 0x7, 0xb, 0x4, 0x401, 0xffff7fff, 0xfffffffe, 0x19, 0x7, 0x1, 0xab8, 0x3, 0x6, 0x5, 0x6, 0x3, 0x8a, 0x3, 0x4, 0x1000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_BASIC_ACT={0x2b08, 0x3, [@m_xt={0x1ec, 0x1d, 0x0, 0x0, {{0x7}, {0xd0, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0xbc, 0x6, {0x5, 'security\x00', 0x5a, 0x7, "5a22c57445e7a050112917a7beacb6d853a1e627d6a9b9f3b4f12b43f08087f7789069fd4613d42b7ccf87df36a7a1383e9b2640d57affa3c448b3c6cd017389065f5b98525f9599aecc1c769e2b9d7882378d1ccfe2a10ec4866b07b41511a6e5697151768e40b5de643e8f5b5610cb025b427144a9a9fb97ca35dee8baf5005f12920203ea568783b5b6acb3df14d99c43"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0xf5, 0x6, "1d01845ec9f0f5c6336efd9897b39ef4887ae3566ba56fc5a5745866115dedf7b4e00fcbca1b020b941b4dded6a7df46dca487717c71fa02509a84c38ee2b030cc79eafde6ef939453d968920de6245371f26b6f784cb41bac98919f8cbfb4607a41bdc71c92ffddf470c0ed9f2a4a00ba706e1bb1b0b2adaa9111da523bed3287de1a9294904cb22196af321211c307f6a59282c7986015c184f2d17b795d74135803bf2d8af36e099e334dc779d844d70bd09e7d550afcc76f62b8fed66f6ec0677ec2cad1977f3ad6ffa1ffecff8fdce31c01b34449335e1d5e68229273a218302dc5a2009865965381639fd855411a"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x2918, 0x8, 0x0, 0x0, {{0xb}, {0x18ec, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x8000}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x2, 0x47, 0x7, 0x7, 0x100, 0xbbf9, 0x0, 0x9, 0xffff, 0x7, 0x401, 0x5, 0x2023, 0x10, 0x2, 0x5, 0x5, 0x4, 0x4, 0x9, 0x2, 0x3, 0x8, 0x7, 0x6, 0x200, 0x4, 0x9, 0x8, 0x2, 0x9, 0x80000000, 0x0, 0x1, 0xd0d8, 0x54, 0x200, 0x6, 0x7, 0x80, 0x7, 0x7, 0x9, 0x1, 0xca, 0x7fff, 0x9, 0x8, 0x8c67, 0xff, 0x7f, 0x733, 0xfff, 0x7, 0xe1, 0x7, 0x844, 0x2, 0xa, 0x4, 0x8, 0xfffffff7, 0x5, 0x80000001, 0x6, 0x200, 0x3, 0xc, 0x1, 0xe80, 0x2, 0x63, 0x7, 0x8, 0x7, 0x7fff, 0xce4, 0x2, 0x40, 0x8, 0xfffffffe, 0x1, 0x2, 0xa, 0x1, 0x8001, 0x7cfc61d2, 0xfff, 0xfffffffa, 0x1, 0x8ac5, 0x7, 0x3, 0xfffffff4, 0xfffffffc, 0x5, 0x0, 0x4, 0x4, 0x4, 0x7fff, 0x3, 0x9, 0x1, 0x7, 0x800, 0x9, 0xfffffffb, 0x3, 0x8f, 0x9, 0x7fffffff, 0x5, 0x3, 0x4, 0x7fffffff, 0xff, 0x2, 0x5033, 0x2, 0xbd, 0x6, 0x7, 0xfffffff7, 0x0, 0x4, 0x7, 0x4, 0x5, 0x5, 0xf5, 0xff8, 0x3ff, 0x1, 0x5, 0x5, 0x80000001, 0x2, 0x6, 0x3, 0x2, 0x5, 0x8, 0x1, 0xe, 0x8ff, 0x401, 0x8, 0x7, 0x3, 0x9, 0x8, 0x0, 0x7fff, 0x2, 0x60913747, 0x8d, 0x7fff, 0xfffffffb, 0x1d, 0x1, 0x9, 0x3271, 0x8000, 0x4, 0x4, 0x3ff, 0x3, 0x101, 0x0, 0xa, 0x9, 0x9, 0x9, 0x1, 0xe, 0x4, 0x0, 0x61, 0x7, 0x0, 0x8, 0x80000001, 0x7, 0x7, 0x9, 0x401, 0x3, 0x6, 0x7, 0xff, 0xb, 0x7, 0x6, 0x1, 0x8, 0x100, 0x6, 0x6, 0x2, 0x4, 0xd, 0x80000001, 0x11f5, 0x6, 0xe, 0x6, 0x100, 0x0, 0x4, 0x7fd1, 0x80000000, 0x8, 0x5, 0x6, 0x6, 0x3, 0x0, 0x7, 0x1, 0x2b6, 0xfffffe00, 0x8, 0x4, 0x1, 0x5, 0x0, 0x80000000, 0xf04a, 0x5, 0x0, 0x0, 0x6, 0x1, 0x0, 0xe3a, 0x9, 0x80000001, 0x9, 0x4, 0x7, 0xfffffff2, 0xe0, 0x4, 0x62ca, 0x5ef, 0x5, 0x842, 0x5340fcbe, 0x3, 0x8, 0xa, 0x14, 0x81, 0xfff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfc, 0xfcbf, 0x2, 0x0, 0x5, 0x7, 0x2, 0xdd48, 0x4, 0x6, 0x2, 0x9, 0xe, 0xa90, 0xc, 0xfffffffb, 0x5, 0x0, 0x5, 0x9, 0x800, 0x10, 0x8, 0x3, 0x200, 0x0, 0xfffffff3, 0x6, 0x1, 0x8, 0x8001, 0x7794, 0x4, 0x1000, 0x6, 0xaf, 0x8, 0x0, 0x2, 0x8, 0x0, 0x4, 0x9, 0x80000001, 0xd19a, 0x5, 0x0, 0xfa2, 0x5, 0x8b, 0x8, 0x0, 0x2, 0x200, 0x1000, 0x42c, 0x1, 0x7483, 0x2, 0x8, 0x0, 0xffffffff, 0x4, 0xffff7fff, 0x9, 0x3, 0x4, 0x2e, 0xb, 0x0, 0x0, 0x401, 0xd0dc, 0x200, 0xd, 0x4, 0xa61, 0x800, 0xe9, 0xb, 0x6, 0x6, 0x2, 0x7f, 0x3, 0x4, 0xfff, 0x1, 0x80, 0x2, 0x8, 0x7, 0x9b, 0x8001, 0x28b, 0x3ff, 0x4, 0xe38a, 0x8, 0x80, 0xd, 0xf, 0x6, 0x6, 0x6, 0xc0000000, 0x80000000, 0x8, 0x9, 0x200, 0x7de, 0x9, 0xffffbf59, 0xcae4, 0x9, 0x69e, 0x1, 0x5, 0x3, 0x4, 0x8001, 0xa1c00, 0x4, 0x375, 0x2, 0xfffffc00, 0xffffffff, 0x800, 0x5, 0x5, 0x8, 0x8e8, 0x2c76, 0xca63, 0x1, 0x1, 0x7, 0xff, 0x9, 0x2, 0x2, 0x6, 0x6, 0x1f, 0x8, 0x5bc4, 0x6f6, 0x3, 0x9, 0x1d0b7baa, 0x7, 0x5, 0xa, 0x8, 0xfffffffa, 0x4d, 0x3ebc, 0x8001, 0x8, 0x91a0, 0x7, 0x5, 0x3, 0x2, 0x1, 0x0, 0x45a6, 0x200, 0x6, 0x8, 0x9, 0x3ff, 0x8, 0x6, 0xa, 0x101, 0xfffffff9, 0x3, 0x8000, 0x1c, 0x1ff, 0x3, 0x7b, 0x3, 0xe, 0x10001, 0x9, 0x3, 0x0, 0x8, 0xc, 0x3, 0x8, 0xa, 0x0, 0x80, 0x70, 0x4, 0x18, 0x2f, 0x0, 0x0, 0x7fff, 0x2, 0x3, 0x9, 0x4, 0x1, 0x4, 0x9, 0x8, 0x6, 0x8, 0x1, 0x3, 0x3280, 0x80000000, 0xde9c, 0xef, 0xfff, 0x5, 0x8000, 0x1, 0x8, 0x0, 0x10, 0xf, 0x7e8e, 0xffffffff, 0x200, 0x3ff, 0x4c, 0x9, 0x9, 0xd9, 0x2, 0x1, 0xfffffffa, 0x80, 0x4, 0x5, 0x80000001, 0x2, 0x5, 0x1, 0xfffffffd, 0xe, 0x7, 0x6, 0x4, 0xb8c5, 0x4, 0x80000000, 0x21c, 0x7, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0xb18c, 0x8, 0x2, 0x8, 0x7, 0x5, 0x81, 0x3, 0x1, 0xc60, 0x2, 0x4, 0x6, 0x2, 0x7, 0x8, 0x1, 0x7, 0x9, 0xd, 0xfffffffd, 0x5, 0xc, 0xd, 0x96, 0x0, 0x6, 0x3, 0x3ff, 0x4, 0x400, 0x1, 0x2, 0x1bebed5c, 0x7ff, 0x28e, 0x1, 0x5, 0xec, 0x5, 0x8, 0x2047, 0x6, 0x15, 0x9, 0x5, 0x5, 0x8, 0x3, 0x0, 0x35c0, 0xfffffffa, 0x30, 0xf08, 0x0, 0x3, 0x1, 0x8, 0xc234, 0x0, 0x5, 0x4, 0x8, 0x7fff, 0x9, 0x7, 0x800, 0x2, 0x8001, 0x0, 0x7, 0x5, 0x5, 0x9, 0xffff, 0x7e, 0x8, 0x900, 0x5, 0x472, 0x7, 0x4, 0x3, 0x37, 0x5, 0xd, 0x4, 0x4, 0x8, 0x80000001, 0x9, 0x3ff, 0x0, 0x3, 0xfffff315, 0x0, 0x1, 0x3, 0x9, 0xdfe2, 0x10001, 0xf, 0x7f, 0x4, 0x8000, 0x4, 0x3, 0x5, 0x80000001, 0x2, 0x8001, 0x2, 0x6, 0x10, 0x8, 0x40000000, 0x0, 0x35, 0x7, 0x2415, 0x9, 0x4, 0x401, 0x383, 0x2cf, 0x80000000, 0x5, 0xdd, 0x8, 0x8, 0x12, 0x1, 0x8, 0xed82, 0x5, 0xe, 0x0, 0x0, 0x0, 0xdd5b, 0x7f, 0x2, 0xb, 0xff1, 0x52c, 0xff, 0x0, 0x88, 0x0, 0x80000000, 0x3, 0xf2b, 0xefac, 0x6a9f, 0xaa, 0x0, 0x233d, 0xe, 0xfffff4c5, 0x2, 0x9, 0x2, 0x8001, 0xcff614b, 0x0, 0x3, 0x2, 0xf, 0x80, 0xd, 0x7, 0xfffff286, 0x1, 0x0, 0x800, 0x4, 0x1ff, 0x8, 0x6, 0x9, 0x8, 0x7ff, 0x4, 0x6, 0x2, 0x9, 0xe3, 0x0, 0xff, 0x6, 0x8, 0x5, 0x7, 0x7, 0x3ff, 0x2, 0x9, 0x7, 0x6, 0x2, 0x401, 0x7391, 0x10000, 0x7, 0x0, 0x9eb, 0x6, 0x5, 0x0, 0x5, 0x2, 0x2, 0x7, 0x8001, 0x4, 0x5, 0x6, 0x1, 0x1000, 0x10000, 0x800, 0x2, 0x9, 0x2, 0x1, 0x5, 0x1, 0x40, 0x6, 0x19e4, 0x0, 0x4, 0x6, 0x8000, 0x7, 0xb, 0x6, 0x0, 0xd7b, 0xd59, 0x80, 0x7ff, 0xe, 0x7, 0x40, 0x0, 0x3ff, 0x7, 0x3, 0x6, 0x10001, 0x4, 0x8, 0x7ff, 0x9bb, 0x7fff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xffff, 0x7, 0x5, 0x0, 0x4, 0x1000, 0x7fdd8870, 0x7, 0x8e18, 0xaa, 0x200, 0x6, 0x800, 0x7, 0x8, 0x0, 0x200, 0x0, 0x1, 0x0, 0xd33, 0x39, 0x54f62a53, 0x14, 0x8, 0xd8, 0x5, 0x3308, 0x0, 0x9b, 0x8, 0x5, 0xc, 0x3, 0xfffffff9, 0x6, 0x6b15, 0xfffffffb, 0x8001, 0x200, 0x6, 0x3, 0x1550, 0x1000000, 0x3b9, 0x6, 0x8, 0x9, 0x6, 0x27, 0x6, 0x8, 0x4181, 0x401, 0x7f, 0x42276b55, 0x3, 0xb803, 0x6, 0x9c7b, 0x9, 0x3, 0x67f0, 0x4e1, 0x5, 0x2455, 0x10, 0xe9, 0x3, 0x7, 0x800, 0x5, 0x7, 0x6, 0x4, 0x80, 0xcfe8, 0x0, 0x7fffffff, 0xb, 0x10000, 0x9, 0x400, 0xf05, 0x8, 0x4, 0xfffffff9, 0x7, 0xa7a5, 0x7, 0x1, 0x8, 0x8, 0x5, 0x9, 0xaad, 0x7, 0x1, 0x1d4c, 0x2, 0xf2a1, 0x7ff, 0x6, 0x6, 0x93a, 0x3, 0x6, 0x3, 0x3, 0x100, 0x10001, 0x1, 0x9, 0x15, 0x8, 0xcf, 0x7, 0x8, 0x8, 0x7fffffff, 0x8, 0x4, 0x9, 0x0, 0xff, 0x3, 0x2, 0x7, 0x4, 0xf59c, 0xa, 0x5, 0xe, 0x6, 0xe42, 0x8f6, 0x7fff, 0x81, 0x1, 0x8000000, 0xf, 0x2, 0x7, 0x97, 0x4, 0x80000000, 0x87b, 0x6, 0x18c, 0x5, 0x0, 0x6, 0x1, 0x9, 0x4, 0x0, 0x1, 0xe6e, 0x1, 0x0, 0x9, 0x8, 0x5, 0x9, 0xe, 0x8001, 0xb0, 0x1a71, 0x1ff, 0x1, 0x6, 0x2, 0x1000, 0xff, 0x0, 0xfffffff4, 0x5, 0x5, 0x4, 0x3e, 0x32b, 0x6, 0x4, 0x0, 0x6000000, 0x0, 0x2, 0xfffffe00, 0x457b8544, 0xfffffffc, 0x400, 0x4, 0x4000, 0x6006, 0x2, 0x7ff, 0xfffffffc, 0xffffffff, 0x8, 0xb, 0x1, 0x80000001, 0x0, 0xc, 0xdb5f, 0x12c, 0x5, 0x2, 0x0, 0x8000, 0x2, 0x10000, 0x4, 0x7fffffff, 0x7, 0x9, 0x8001, 0x6, 0xe, 0x5, 0x80000001, 0x9af, 0x137, 0x200, 0x1cad181c, 0xa35, 0x7, 0x8, 0x2, 0x4, 0xb, 0x4, 0x2, 0x3ff, 0x7, 0x3, 0x5, 0x8, 0x8, 0x8, 0x6, 0x3, 0xc, 0x2, 0x400, 0x7ff, 0x65, 0x10001, 0xbc, 0x0, 0x1, 0x9, 0x9, 0x200, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffdffffffa, 0x1ff, 0x1000, 0x9, {0x1, 0x0, 0xffff, 0xfad, 0x9, 0x1}, {0x3, 0x1, 0x6, 0x0, 0xfff9, 0x1}, 0xffffffff, 0xff, 0x200}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x1, 0xfffffe01, 0x80000, 0xf320, 0x4, 0x4, 0x5, 0x3a25, 0x10e5dc18, 0x0, 0xcc1f, 0x7, 0x15cb, 0xffff, 0x8, 0x9, 0x8, 0xff, 0x1, 0x8d10, 0x101, 0xb8e3, 0x4c4a5806, 0x7ff, 0x326c, 0x4, 0x3, 0x101, 0x3, 0x7, 0x3, 0x200, 0x9, 0x4, 0x1, 0x211, 0x2, 0xd, 0x4, 0x9, 0xffffff01, 0x8, 0x5, 0x7fffffff, 0xffffffca, 0x8, 0x1, 0x2, 0x4, 0x477a15bd, 0x1, 0x1000, 0x22000000, 0x81, 0xa5, 0x0, 0x1ff, 0x0, 0xf, 0x0, 0xfffffffe, 0x23, 0x8001, 0x9ae, 0x8, 0x5, 0x7f, 0x7, 0x80, 0x948b, 0x9, 0x2, 0x1, 0xc, 0x0, 0x7, 0x2936, 0xb86, 0xffffffff, 0x43f, 0x6, 0x8, 0x6, 0x7, 0x0, 0x8, 0x9, 0x0, 0x0, 0x3, 0xff, 0x2000, 0x9, 0x40, 0x800, 0x5, 0x8, 0xfff, 0x9, 0x8000, 0xb2, 0xd9e6, 0x0, 0x9, 0x1, 0x5, 0x372c4fd5, 0x5, 0x5, 0x9, 0x67, 0x5c40, 0x7, 0x8, 0x8, 0x916, 0x0, 0x1, 0xf, 0x9, 0x3, 0x6, 0x6, 0x2, 0x0, 0xf18e, 0xa, 0x8, 0xb, 0x1000, 0xc3d, 0xfff, 0x0, 0xd, 0x977, 0xfffffffb, 0xfffff000, 0xfff, 0x101, 0x3, 0x5, 0x7, 0x3, 0x80000000, 0x8f, 0x100, 0x5, 0x67f, 0x3091, 0x7b79, 0x7, 0x5, 0x5, 0x2, 0x0, 0x41, 0x9, 0x7, 0x100, 0x59, 0xd415, 0x0, 0xd, 0x0, 0x6b, 0xa7, 0x2, 0x6, 0x9, 0xffff0001, 0x7f1, 0x1ad5, 0x8, 0x4, 0x2aef2ca0, 0x7f, 0x5, 0x3, 0x4, 0x0, 0x0, 0x0, 0xfffffff7, 0x9, 0x9, 0x7, 0x434e, 0x20, 0x2, 0x80, 0x4, 0x614, 0x0, 0x45, 0x5, 0xfffffff0, 0x7, 0x7f, 0x4, 0x2, 0x5, 0x8, 0x5, 0xfffff60f, 0xf, 0x49, 0x1, 0x5, 0x16, 0xfffffff7, 0x1, 0xfffffff9, 0x6, 0x1218, 0x3ff, 0x300000, 0xe, 0x3, 0xce437d2, 0x1, 0x2, 0x5, 0x9, 0x8, 0x6, 0x3, 0x6, 0x3, 0x1000, 0x1, 0x3, 0x8221, 0xf7c, 0x800, 0x5, 0x40, 0x2, 0x5, 0x4, 0x200, 0x6, 0x500, 0x3, 0x6, 0x800, 0x9, 0x100, 0x5, 0x0, 0x18000, 0x9, 0x10, 0x0, 0x1, 0x955d]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10001}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd443, 0x2, 0x5, 0x4, 0x8, 0x3, 0x5, 0x4, 0x6, 0xbfa, 0x400000, 0xffff7676, 0x0, 0x9, 0x7, 0x3, 0x5, 0x23d, 0xe5, 0x4000000, 0x5, 0x1, 0xfffffffc, 0x9, 0xffff0001, 0x9, 0x4, 0x1ff, 0x1, 0x1ff, 0x6, 0xb, 0x0, 0x1ff, 0x1, 0x5, 0x80000000, 0x0, 0x7ff, 0x8, 0x1, 0x0, 0x3, 0x9, 0x8, 0x9c5, 0x3, 0x9, 0xf, 0x6, 0xb, 0x6, 0x7, 0x1, 0x5, 0x1ff, 0x4, 0x5, 0x9, 0x6, 0x1, 0x4, 0x2, 0xff, 0xf, 0x3, 0xe, 0x8, 0x6, 0x1, 0x5, 0x7fffffff, 0x7f, 0x80000000, 0x5, 0x5, 0x2f2b8b5a, 0xe9, 0x200, 0xffffffc5, 0x5, 0x9927, 0x81, 0x8, 0x1, 0x5, 0xf7, 0x8e, 0x7, 0xc71, 0xb57d, 0x6, 0x3, 0x400, 0xffffffff, 0x1000, 0x0, 0x9d, 0x3, 0x0, 0x3, 0x5, 0x2, 0x5, 0xa9, 0x800, 0x8, 0x2, 0x8a6, 0xd1c, 0x48f2, 0x401, 0x4, 0xf, 0x80000000, 0x4, 0x2, 0x4, 0x8, 0x4, 0x454bcd0e, 0x9889, 0x9, 0x1, 0xffff, 0x6, 0xc, 0x7f, 0xc, 0xcf, 0xffffffff, 0x5, 0x1d, 0x400, 0x2, 0xf51, 0x0, 0x100, 0xa74, 0xffff, 0xbb4, 0xffffac33, 0x8001, 0xffff8001, 0x8, 0x6, 0xc6f4, 0x4, 0x4, 0xd22, 0x3, 0x1, 0x4f, 0xcc3, 0x0, 0x80, 0x0, 0x80000001, 0x1, 0xa, 0x100, 0xffffffff, 0xa682, 0x1ff, 0x2, 0x0, 0x8, 0x6, 0x7, 0xc9, 0x9, 0x0, 0x3, 0x7, 0x0, 0x18925eab, 0x1, 0xbd, 0x126, 0x1, 0x1, 0xfffff001, 0x4, 0x6, 0x6, 0x40, 0xfffffffc, 0x0, 0x3, 0x5, 0x943, 0x32, 0x3, 0x5, 0xfffffffc, 0x9, 0x10, 0x5, 0x9, 0x4, 0x4, 0x8, 0x7, 0xd, 0xc, 0xc9, 0x3, 0x9, 0x4, 0xe, 0x8, 0xfffffffa, 0x2, 0x0, 0xd, 0x4, 0x85, 0x8, 0x5fc7, 0xfff, 0xe, 0x1, 0x2, 0x1, 0x6c7d, 0x3, 0x35d, 0x40, 0x400, 0x912, 0xa632, 0x0, 0x10001, 0x9, 0x2, 0x1fc00000, 0x80000001, 0x80000001, 0x3, 0xe, 0x7, 0x1ff, 0x4, 0x7, 0x81, 0x6, 0x80, 0x8a6, 0x7, 0x7a, 0x4, 0x3, 0x8, 0x8000, 0x8000, 0x89]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x101}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x42ec}, 0x1, 0x0, 0x0, 0x40080c5}, 0x4) getsockopt(r0, 0x28, 0x2, &(0x7f0000001680)=""/55, &(0x7f0000000000)=0x21) 5.802896402s ago: executing program 5 (id=728): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x4) recvmmsg(r4, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0xfffffffc, 0x0, 0xcd7e], [], 0x0, [0x1]}, 0x0, 0x2000}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x20000080) statfs(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000000100)={0x7, 'bridge0\x00', {0x6}, 0x7ff}) r6 = open$dir(&(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200002, 0x14) name_to_handle_at(r6, &(0x7f0000001540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x4, 0xa3db, 0xf, 0xc}}, &(0x7f00000002c0), 0x1400) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000002030300000000000000000005000000080005"], 0x1c}}, 0x20040000) 4.741500741s ago: executing program 1 (id=730): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000cf8bed20d90f250040290000000109021200010000e7000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) (async) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r4, 0x6}, &(0x7f0000000080)=0x8) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000003c0)={0x1, 0x29, 0x5, &(0x7f0000000380)={0x12, "a0acac25062cff010000000000000014e1539402bb225c00"}}) 4.586895176s ago: executing program 0 (id=731): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f00000006c0)=@assoc_value={0x0}, &(0x7f0000000700)=0x1b) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2, 0xa, 0x37b, 0x3}, &(0x7f0000000140)=0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x19, &(0x7f0000000000)=@string={0x1f, 0x3, "659d1895b7812a076c5d35eb1cf09a6e1bc4f42792897b"}}, {0x38, &(0x7f0000000440)=@string={0x38, 0x3, "0a4af0351adb777e186a4455977025f7553f9c0869f098b84ad538a7eadb8381f051a586cd26a92f32f6514be8dcf7a0d8394f9452fe"}}, {0xf3, &(0x7f0000000480)=@string={0xf3, 0x3, "216fed6b600710d0a8f5a673444ce78e6330ab1359eb9d93cb027df67b30213c8e0b504b3aa9fb362c6bb836010bad0d5e213b81541fedc62ba63a53876e32b86b0c4a85fdbe478114b07fa565020a70682fa716d7c5a04d854f614e45f300a4e88995625617046714961c18f933118b43a58ef9154200dfbfe47bb7b7b15608f4724243865d58a47100f1d451abd813c6607b8d311897418c82a888ffb1aeaed50c204f781d0b6ebf01706ae3439aff3527672e0e15ce32c9d1bea707bb38bf5437b0d675372bbb6fc5b31c493fe7dcb65379388a5ed255f27fd0660b7dd47bddbf468785ec6aa36044657c2e7c7ecc83"}}, {0xff, &(0x7f0000000800)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2a2f}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x30d5bacfae307244}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc17}}]}) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc0046209, &(0x7f0000001340)) r5 = dup(r4) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r5, 0x400454a4, &(0x7f0000000080)=0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='children\x00') read$alg(r6, &(0x7f0000000e80)=""/4096, 0x1000) preadv(r6, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/157, 0x9d}], 0x100000000000002c, 0x8, 0x0) ioctl$PTP_SYS_OFFSET(r6, 0x43403d05, &(0x7f0000000100)={0x7}) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000001040)={&(0x7f0000001000)=[{0x3, 0x3a10, 0x0, 0x0}, {0x100, 0x2a00, 0x0, 0x0}, {0xffff, 0x0, 0x0, 0x0}], 0x3}) 4.502484627s ago: executing program 5 (id=733): madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) mremap(&(0x7f0000bdd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x8000, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0xfffffffffffffc8a) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000180)=0x2f9, 0x4) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3}}}, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) shutdown(r1, 0x1) unshare(0x6020400) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) eventfd(0x1008c66) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000080)={0x0, 0x100000, 0x1, 0xffffffffffffffff, 0x8}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) 4.052454737s ago: executing program 2 (id=735): syz_emit_ethernet(0x66, &(0x7f0000000340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x30, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @mcast2, @private2}}}}}}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYBLOB="1d9284e836b30ef2d2fa6e2d4a34e0c7dd124fa27c254104030b9156e94abc2eb98865411599acfd24f3ecfbf49512e0cc567787c57533ff982217e7a6a4abc795f43ce5699f3230d9747157479ceab0fecf97d10dec5be9606a26b1c8d2814a0374372c94ff8c4acb4c11636ba4679e405cb0e5ba7c09000000376c4dd74832dbf57d162891bf4ead79b7dfdb10f19c8e7b70305a81102d74935ae00886115cd3f3fe460000000000", @ANYBLOB="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"], 0x270}}, 0x0) 3.799324258s ago: executing program 2 (id=736): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xc6, 0xa443) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x12, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x400000, 0x40, 0x29}, &(0x7f0000000100)='./file0\x00', 0x30, 0x0, 0x12345}) io_uring_enter(r1, 0x47ba, 0xda2a, 0x62, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000000300)={0x40, 0x21, 0xea, {0xea, 0x2, "7959cd460a760be6b560ecf4bbfc7ce259128edcf2b04adec8e2d231c6959f02ec85077c06f5d82976934b11fa6f9fa889d1cbb62628d09cbd40efd5b47381a4c8a6a7ee4f9e41987fa3f771f9564504eff3d362db91f7444b0819cb89e3e3b806a0fbf111e6ce2c5b6819fb70b022273b9a708aa764dec1039f4c1d49eb0f8239e1b138e0b591765b4fc80dd0e0d2c246d25e7beefe087d6f9a91bea6db626f02e30085083a89fc6b96460882b3ab48227eef3ea86accd6a283840cefbacbdfd5740e7f7dec40d6d30fcfd3bb0183ca0efbdd4e0a433a2787c3f5761293a712c7fac20fd8be3fa9"}}, &(0x7f0000000580)={0x0, 0x3, 0xeb, @string={0xeb, 0x3, "1ddf5a511299813ab26bb1506343790217d9fa2cf96a47de88e6dcb183653f5328ea7255ba846613fbae7ce167d5a691eaf584e23783ab2d7bd86593b9e960dc6bdae2fe130e00f10ec6e27c0cf60257c9beea07cbf3d61a12098ef82159fb4b8d68b7059d56361e9a848e5f025abb8bec51d2e6bfb7fa728482614bb94e8cbcae7a463952e31127db46533cbfbc97179d66ebf9a9690d4c26d04c63ea3d98548094dad32766eb7d185a9b8d6e2d0109e2557afedb6dbfaf72395acebda50510e8b0ea65943fc1b0d1202d911a8f329b6d243336a0c5f88596645518cd46ca9a39e304c75bbab1df03"}}, &(0x7f0000000400)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7f, 0x5, 0x1, {0x22, 0x57c}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000680)={0x40, 0x11, 0x8d, "62b23b6321caa3a6fb85a34d22275100abfe0353da5cc74c5dea003b8fc76108f3291495dfa634bd175e69f009496191d2f2fa60e3c038eb5b3ded5be92141d4500f9d26a3ee90a462f5c4cd6748f83fec33dac8690e4599346f7d8128a79ce110d2e461ad2a813aef4bf616b807ceabe4749ba9aabc634b431eea14225cb066cc40cfe9070005bce787d1b706"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000007c0)={0x20, 0x1, 0xb6, "f20bd5255d817b15b689beb0d93e84df27574fe6456dd13e4850a6b68562e7882fe8f3a1b68b608550a87efd7b96ab1600e2bd9460cda72b6d5d635868f464ea8fb5a9bc1de578949a67717a46a8bf4262a470c78aa6e34bb5db685ac13abbca9089a3048f7b134c53d92252bf3b5d997602715d541751f0e4ceeda046297f919308ed072774b97e803f1b329a5c2cbebb3d13926f04d1771ed91acebb810cd47b83b15c298b9502d31f2269350d14e0cb79c97c93e6"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x8}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000001c0)={0x40, 0x17, 0x4, "06fa282f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000880)="27050200340f14000600002fb96dbcf706e105000000890600001144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e5700", 0x3e}], 0x1}, 0x800) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000240)) pwritev(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)="00214717a7070000000003060000000000000000a8a6761d5874f72cf86d73d32f46381d8fee86d9ca0e6a9c4db5a40fef56", 0x54}], 0x1, 0xe, 0x200004) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.454981635s ago: executing program 1 (id=737): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x0, 0x8001, 0x0, 0x1, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x8, &(0x7f0000146000/0x1000)=nil) r2 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000240)={0x5, 0x50424752, 0x0, @discrete={0xfff, 0x800007}}) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x5106, 0x0, 0x1}, 0x18, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff01, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES64=r5, @ANYRESDEC=0x0, @ANYBLOB], 0x50) syz_open_dev$evdev(0x0, 0x4e1e991f, 0x200800) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_getattr(r2, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) mremap(&(0x7f0000336000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000037820b63a863000b4d67deab187b5b4ac75b12656bd0b0741c4590458d4a3eb464fa883b4c8bdad2671f0096ace0a1f40e3b3aeadaadb7f50a4ce2d76d6a7e1eac99c8f09a6b34512e94", @ANYRES16=r7, @ANYRES64], 0x2c}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f00000002c0)="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") remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x2, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.379244817s ago: executing program 3 (id=738): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x85) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x5, 0x20, 0x1, 0x7}, &(0x7f0000000240)=0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000380)={r5, 0x4}, &(0x7f0000000400)=0x8) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0xc0800, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000007c0)={'macsec0\x00', 0x10}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0xc0984124, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r7}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) 2.870774755s ago: executing program 3 (id=739): inotify_init() r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = epoll_create1(0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]}) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, r2, 0x0) fanotify_init(0x200, 0x40800) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0xa, {}, {0x5, 0x8, 0xc1, 0x6b, 0x9, 0x2, "84653375"}, 0xffb, 0x2, {0x0}}) unshare(0xa020480) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.393401706s ago: executing program 1 (id=740): r0 = socket$inet6(0xa, 0x80000, 0x7c) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000040)={&(0x7f0000000000)=""/13, 0xd, 0x3, 0xffffffff}) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x414000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000301, r5, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="d985b5de3f03b0347197b0eca4983ce348ce5570a6bf86454bc50e6747911d2df0cfcf1c14933b3cb799cde1e4db192165c9d4ef7b1602a0250d9e63aec83ad5cc54dc17476643f7bdffcb3890cdfca98717364d6d0f18e748f333bfd0f4161a4163681d921e3bcbd83eb50f7f167883ff96a4fd1c4736cd1c90484afc74f7bf8e2ab6abf18b054fdf5b04", 0x8b, 0x4080, &(0x7f0000000280)={0xa, 0x4e20, 0x40, @private1, 0xf1}, 0x1c) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f00000002c0)=0x6) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @broadcast, @multicast2}, &(0x7f00000003c0)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@mcast1, 0x0}, &(0x7f0000000440)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000480)={'wg1\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={@local, @multicast2, 0x0}, &(0x7f0000000500)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @private}, &(0x7f0000000640)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000680)={'gre0\x00', 0x0, 0x1, 0x20, 0xfb3, 0x4, {{0x1c, 0x4, 0x0, 0x2, 0x70, 0x64, 0x0, 0x8, 0x4, 0x0, @broadcast, @multicast1, {[@cipso={0x86, 0x47, 0x1, [{0x5, 0x9, "541c54771ed279"}, {0x0, 0x10, "2a5c5884b60dc483d3422725d1c5"}, {0x1, 0x5, "7f733e"}, {0x6, 0x2}, {0x7, 0x3, "b2"}, {0x5, 0xd, "4ee4b8d5350ea9b5119df2"}, {0x0, 0x5, "de8bbd"}, {0x1, 0xc, "c151c4a0c690e7861a63"}]}, @cipso={0x86, 0x12, 0x0, [{0x2, 0xc, "d3e2a4e73bfb98177829"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x1, 0x35d7, {{0x11, 0x4, 0x2, 0x1b, 0x44, 0x66, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@generic={0x89, 0xc, "1ae1715ceeb90ef6c1f3"}, @lsrr={0x83, 0x17, 0x2f, [@rand_addr=0x64010101, @private=0xa010101, @multicast2, @multicast1, @multicast2]}, @ssrr={0x89, 0xb, 0x3c, [@dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000a00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20080100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x15c, r6, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f0000000e00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWSET={0x318, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_FLAGS={0x8}, @NFTA_SET_USERDATA={0xbe, 0xd, 0x1, 0x0, "7956996f2f8677c6d8cf3561a85b66f2445fda83630761060b691c0f0741a46e2c65e55cdf64c1cf4b9caf8e920ac04cd93281edee67427a5f388533ce24f357fe9997a784167cf55394093d127119daf3eac6b4abddb538ea087b579731e7ba55b585b783c191d77fabb7dabcc7ae511c9ad8ea6ac772724c1feee2121f9d3f666dfcd4718fc3fbad84ab65448459decea2f351d84610763eb1174833edfecf94506ec67276a08e66a43e7f7f28091e9fb044d32d1789fc76a9"}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x22c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7c3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xeb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xec}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b98}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0xe4, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcfe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3c19}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81bd}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x13cd}, @NFTA_SET_DESC_CONCAT={0xcc, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x46463ee5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa0000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x340}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000004) r16 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r16, 0x29, 0x1c, &(0x7f0000000e40)={@mcast1, 0x0}, &(0x7f0000000e80)=0x14) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000f00)={0xffffffffffff86f8, 0x20, '\x00', 0x1, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$EVIOCSKEYCODE_V2(r15, 0x40284504, &(0x7f0000000f40)={0x6b, 0x1c, 0x0, 0x67, "8665928eadae8c84210d46942f74be3da037f14da7843911ee03caf75e142587"}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001040)={'syztnl1\x00', &(0x7f0000000fc0)={'ip6_vti0\x00', 0x0, 0x29, 0xd, 0x6, 0x3, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x1, 0x100, 0x3}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001080)={0x0, @rand_addr, @multicast1}, &(0x7f00000010c0)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000001300)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000012c0)={&(0x7f0000001100)={0x1ac, r4, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8f6c0bab75002836}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0xe54d72599b4445ab}, 0x20048000) 2.078962085s ago: executing program 1 (id=741): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, &(0x7f00000001c0)) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002200)={0x50, 0x0, r4, {0x7, 0x27, 0x2, 0x4a1dd8c1, 0xfffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r3, &(0x7f000000a680)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000008680)="265ed300624cee917954148609d0f2ac52561da46fe5c8ce8b3d649d8b59dfb0c633a2151990de893de399d507986121aa114fd87163065d2988807d3e0953e6b084d8b607280f9207193bb76a79bb6d4f638d070435bddb76667d5dee6329e71b2c9befbb22bbde0c1b6da63b845f2c28d2c5f4deb07b4ae015fc576702112f75a755e76b6dc450719f63cd1939961e4c895f9054760c61f933bf74d185520f9aebaf3ab397a2089640ec41ab5cfe6c828b53c4cc544f9812034c719e712532763eff6e69ad7cc4d2f29f97ccce18f298ce417251430929d422e21cac05093609d97896d0beb7d4cce9f1975f01e7dd29ea061a868bb6607b7cf88a2e33dd5c5db31cbead98e06c2c7add9012b0483fe662532c81ab1a1ca8f20f1cd9020e06c2bdade3f311d08b47503b5b63b279a9be019006e6929670f53d5688c194e9f046d2322d71bc26245e698cd44d655c59b2e0ff43771a386abc38cd6e493e0a475ef525fa78671fd9954e7df71a3b7c7ed90379dffa4fd76f0367eca11c1d8de813979951eccc8c93b4f9fdb4785c0a9d207e65742bdd358e9dfbf29203c36b91fdd78db55b53ad1e713e32fc1f47bf3390f3db8dfbd514b4b31095c818e18b63ebad5cc3b406557f3a9380c5025ab11c64522b1752b2296bb00b7750ab82704ba197f26ab76e35da02ae87d25669d54d212aa680b579773c889902782d1c8067b16ff957bfa70cd8af4c366c1629e871cfb033d46c0d308c3ff5072fd8e23ee02986a128051b8e6dbaa2bc46bdc8772d923f2906eef68015bdb4cd66a2525269a91cbd7336c930c08190a8606d762c768d164d05eea38d63e99e1fab83ce2683b885e1619065acb1bed0bfd63e3cea5c9d7c9994df4036aa17f9eb0850f9eb42b17b19926fd9d814529c3cf4397e3f38f9626f0bb4f229b51c35773cbecc42ba22f8346c9c3a6f3ca7d8b25d0bbf30baf48bde92ea192e2484ef9b2160492edb5f2ce296b0b6b420d020b7d14d77f7b436b1a23b733051369536eae7c7148927c3ba3a968516039b0b14d9918a41a1bdd5002847e1c3d02f0dc2235857a9797038d164591757820e7d74dbadd42b8903f20434c6ac0f401fdbfcbed5dd3c5b5fb0ce1f9c81e8d1037fde8dd3fef1d5d7af6af8f36c0f4462909dbf694cc6fe80070bd5fac5a5ca4dffae4b2c67892f7c53af3644ffec29ab3d791bd7934ad38929a9d5fb9ecf10b9dec62e315ccb0e0de60bb1620daa8154a4cdec98d94d42ac1a4b5f8da6afcb7dfb53544fbbcaa3aa444182ff25064ace51a825fe89236e850a2c90e1c7db17871ea809c4a11a26f49b213cab87d4a42b747546fb9b15068faf1a8556f909f2c47202e7b65cddc708ded90bdde68725b787bdc2d4eeda60204bd0028f07ffc3052f93eb6343d1b2a9a5292e6574baa4a096fda6dd54f6d39e9462b6839b8ee2426e3fbf42a016dc0963145e602f2b0c351f123df48f608f74b04fc7e9cd018e7ab25bc1c12f8f58c0b2dce5714faa54820ef72f38566e3d776ea2d5b061a2e94710176f15d2221420abad8b8b733de253e602277848e7f1e0eb4d07f5eb0cc4d9f874e632007cbca23a5d7e4109cf5c4fafe5f607149bac37938734b77d9b183cf76014aa61507bd4eb44524e8326c58932c8b9f6a10e334cc602b5b8c956c7cb5ffa099274b599fc9c58327f85553e00263e548c93c89edf7a7c83cc10348662fc344c85378572a40b49ae65972fb40abd5e0a38af48207983f86c7bb6bf9b7853c4b1fb522d135a83bbdbb78130b4df3aa7cfa930868cd5a2d995ca9fe4f64c79485ab19d85b0c82a72f4a09ccab267320a61208ccef13c3546ab0f16e34cdc56d6e48a6d9c14c626528a3b191e3723b19d4388d5b9b61c7aec726b8752455f96e888ba7af82c127796e9b67432d1f60a3470c7bf4b924cf10f06a3e3f64c60c7c2b0fba4d1ebe4e52014b4052c2ba0d5b649c46e5cdc6c7159faff2adad2db2d3db9f4f9e9735ba28b7aa1c6c2fea9dab6c9617160d182dfc13e18f44e73c4377df42080d08a87fcfd46b4a4f30205457ad19ddd473fc3a67153d04e960f1dc7556fb158a1d584eb2bde917792892a30e9cd25d37a318cf06bd6541463adaf5d12adc50252f364ba05f89182018ded2179c23a1fc0b31d87139da39298b8d387446c70c4577a27f6df841d9f43106bc1bf44f5c7a41460e2afc9eea98f8e256919c0befd53d7d015412391963c9ad39a19aad265cdbd609628e1913adc2467b69c00865a88635c46a851e7252cf3dc5c3cc5dcb04e97c0742d1a844556744036c97710dd9b55f661506f36cfef2c6b7305b63f5c33469b33ad09e1b593a7ddfc97777954c71c8e4857ca49aa7e5de0d25d760f633660e1fd783cdc43b00a0ec149cc9c8385807c2f6b4cb255d6a15ac75ef63d0871b176d503f332c069ccfa7a2bacd11999ea792024b35c9faae5bf02bd5c844d04d9680c1fe35c2d90ce808b45932e754e4e1dd142ba5a7bd9ecdf7717094ed4359eba666fbdc1e849ccede72b0b37f0b8bc4f76b99222f8d199de11dbd0ff396236f4a37aab955126a60c9f0d457c7a394920aa9014611e5d994c8373516f061dcc5ac881bdda5132b5ee984b15fd007828401c72df63c2efbc5f0e8545310ce65d0635dc73f0cb1c796c24b7ee62616116c13369ceb74ff8bda64a98e903dfcfd88b3c0c5f86191bcc8342578f23dc70fa6ceebde822ffedb7587a3f204d330be4977bbbc2529cf0ddf4c85b17f1088f48d878e72fb00e15a6144231108be816d2718c360e2fa8a236691c775a9a0ef3559696e9b8f85eec0aa2b1c4f01a2df6065bd31b23dd37718613fcbbb1566dc0607bf487c1a91f2b39a83755a6048e46d02ede0f5aaea8ee9e245d6c37891f5ebc9bb7ad2462b4ea4f1167b8c8e97e2f7b62c1c98ae0b808ee6033818d28a00ee72120820b2227da50d7f66d3318f6acc6398c81e529c5cb0df75e303954c2fa828760c1133fdbdf1fd7675b8634bdb496b054b91672fc7ac344a37bf60988870d54e5baf91334db883b2c69acb50676c2f871fd577747dd1d26c00a56e757b6a0edcd609ef5c3b3ef669ced2af5f19ad19194d04f23ff23546df47bc67ad596672a40cca2e87f8fcc3a318e37c73f9f50bd06926c74078356ddddba42ee273e0c33c2fc6cdd1fd50daa6ed3b7b6ce558f89449fca6d8b05c90639283d44e14a854eb29d65ce5b9552597072cb148ccea15ef430630559293afaf204f22a890fc3009a2bc1b0844a49668354a940fbd0d5919faadfe5cb80e4c93d138ae28269a99c877426298b9ec7f01e9005da2d7977f34103de38b2f65bdc1c899ba96745ca977c46db6003b1ab840e677f0d8960b4e9f71e82fb89a8cc0702739276ec7a040c69e6dc0e439658d420737a2f6cbe7cb1ce904f4a39dbe8284971e527ef50976c89855f75d5e129a09a117a5c042411696f8a3bf02879a287b2b1ea2a6e1adaed0374341113bb8363f33aacd361339c9c06b4bd6e04f8fbf1f120f1992856608426d44abb6cc429a075c7bd22bdffc9493f218286f8eb585001fdf79327c8c17d462cc2ca5b435d444659767150c6e1000a74f001be398a1bb48863d3a4d4a71a4623e1721b003d7d2c038fdb405b814f37a95a6a53bbb365dddeefb83451676c7b57a23dd1d523958e2e2eb8d889c47cb7aa515e9b11b2c3accfe6739a8ef56b7a02adfd63ec9f9232c38e2aef3773a9a7d6f4844ea1d609f146f19e6c46fb6b961b8037e5d9ba34c0ca5c10a668ddc5d6f4c7951732f68c56ad9c1b3e53e09d33d9b377258ab2de957c8adcd4b68923ed6eaf2441e2d888d1d4653c5686ab712a82ca16cf475009e238e5a8df04ca2fa719e6308bd60026deea44355a6e878157ffc7f14a8d34275a9ed5f810ea4ed1827e4c91998aebe9aacbae14d95eed96a9de17463ae852f53d2bf3e92df959564e9550c1eeb0b052c00cd44c07b7f021cdad5c70908a74bca9ec4fa372f491aeadb297e8f571de1b376ef1b7194d8e434ba3867940606521399595be0ec4daab0b45c42e439adc5cbecc7310025ed8761a1d78adf3ee6b223577e473423cece99cde0807269de6929624ed1739b2380ed4688779ce9808595e9b87ed6f42d89b1676014cb8c9a3f7484aacdf794f056439fd1e5233de23141d5b87ca95b54721a01212666e8067cf683025f1219f4d0569c8cfb2d6ed67e7f051e2ef9d0b70a390ac7d53bf9c4e537c74afd223e311341583282ac6e4ab209a591ab0f4d7205512a74a01cd33b57d993fc5c548a757d757e1f32272c22b86fb2428b338eac75c21e4ce3fbfdc6f04a62856610308e65dca82a7637d7113a48c6ce0357fa454f6d58a1b61698c7b65dc9b8678f9d279b883f76e04ad1f1154e2f490afb7e397ce65ce297f6599b0671f3129bc87cf4221d8ce101f71a1df23b6343dc3d6e35ee2eb0a1e37e67e091fab994b8948e956320d7e512308641a129526ff2e73ba026fb72fd3da3482fde5374d54bc3ed6ae53f2b9b4d222db5f3126760285683ecbbd0f8b5bb964e5a1cfe404ce21588a21c2244e0f76520e139992f65a15299548f4dc5e4d1e54acf7592ee1f04e36987606bf10e4632c79d00e1ed985553b00a8e828dd193f5cbd7101cd36745804d474532fc51e708c7f124bf9231b9a7bd1ca4446060535054b4bfd5a61607f3ae45cf1deebfb9d8710e5523c8cd03565cd378e77b1b3323a7d97f28fd1a13aa40626abf69d7b66ee9db3d604b293966347a4fb36d089078f9808bc209109690ea47941ad7c146367b78eee93131a57b5e12690b7288ffecf22f39f308a80457ac6052b8f477bafc15a3ab30cfa3cbd7dda9803e5a5664694e77f528087de197c02fd4d133ea9133b9aa4377bcc0b62801982b999b6e7f76dff371dfd998704e340b4e5da88384fa8cf08d747c977105e4574bda02c56361338a0a9bd800e94c861a31d5d64d71cb65c0655f5b5cf5f900e348d7cc05d9c2dcf711859cbb8ffa54065e2e5462f4c1d80d28e5d5400090d4bf61565422b8df0f34f7a7c1e153d39c9d7340d15b8db226d323b4e3c50fd8aaa87ec9e5c3fbb3ad66462c6ec5ff31877024d119fdb7a16e69d324ca9819512c45c3852409f4899a41a4d16ca77dc3dba1ffbdc2af2fccaba1f04e048444154d5019a267bbcd440d7bb3516e9741e5f9c3ef1135e8c0d70e3c7800c10c000e9cfbddbb5aba9e43b3dc0164f92733590f6921bfb53aa1466a53b6146113795fc13d1621b3cbe0eadec02c469a4899232c23a5a88a9d659984c22ee523b5c5de84223a0f0f9bf1fcdb1efb4709252c0fab477823bf2505f9a2e4a36d0bdae824ecad15a4c313f0c9eb4423ea249710e353e61264630927f778c01978f5b50213d71fd746e40009432bf50b7932b7659942f0d1b6375b87d9b038ce271d7333ed282beb3925a330d881ac7611d3e8b869601b146fd82c06b340ae4823c4c429af4c15f2a2a2bdf383788e86b68c001866a86188cfd71b02bc8abef13703264f3ad08ff6602e15ff84715b7796541c87e26b0c6e086211943e52629f8c1e71fdaec972ab5a2c690c78b08d65651ae4b64070f7bb37931119881ef14c4c8e228d67d34f1c9eb855b39ad6e615bf24f7b453a76547edf2fa025c53bda95d783fb3f735852f28318a8a67c8ceb5279d380d724ee6eb2e76ba8807a0865fcafac50d09a92b85d27a238e4461a80cbbeaed62a844c17e498f6457aa642ebbd0aaeabf127b8f8fbdc2e28ff7fafaafe3016603461f256d7fca690a8643b9697800b3cd59e09ecae48baabccb63cad4a627f6bfba0759f1c186977e9698e6fbc16ec9d1c95ca8e2e075a1eed3ba6223e4df44be7da59a444715a78fdb90a1645c069ca0fd1609b7dce29ffa11f17266c32856f9ebc853c0c7cbbbd82667a5106b5b63f5328ae9d653dc5dd53194988f0e421db3851eee53c557e40a7ad293a22ffd3445d296347cef4187aab3c9c3c2a8e40be66919c30cef3de8125f3cc7342a43791cf1b3b117af99b04e0fd8170f17f4ba25bdcb24965501025188a430df86239d369a6e2c9245e914fe4be3a1eb48e22e2e1c72caeb4b0d1b69e8a817cc7ddf644d33e56ae32215604f267a80754619440ddb3621280a4b388c14ca19dfd398d744977849247d0bbc55d5a54ef062ad3cb3689168b28a0981946fa01737e081101b9c571d0ec4e5775159daccc110588fbd35bf6f0d55f99da967a3d3db1999e158958d7ce128571efaabc09c1aa7137c35f3edf7cfff386a79ba5acfa974366c442207a39ce67afc8469c2ddc6f45413dd654d9f59ae7fd31115dfeccc43c27bbcffab119106735b7782f9694a3e30159aee341f04540a54443562cafad5cf3336c6e900343b053d7c93bab45d8846cb5b880e11b979c13dfea06267932d89e258ef30768ec2ce1d7b020609a5ea6ad9eda78219542567029d1d4d2ffe797b7f95f16b8f599390b0b630decdc6e17593b7e4992d48e62c27cca2e423eded85cd4b436065496984d59044d38f317d0ba649837e5377ab3793c3f66c0509eb37ba365c94273b3cad97c5f607bcd312cdf3c8605dd5569e293d21c588969d7bfb17a228b53f2cd0387995945253c6ec8fad3777cafafcbb9151a54e653a142b5ad0c62682b8ec4b99f525dd853f75c17ae6264b7bf975138de9932d40be9f35ce25dd2a1e307fcf506eb6db8803c19b9880f96299ef58a6bdf32708346db540dae112b0f7ebfbe6f3f46635b7d98e232cc91eff29c7fed6dd53d448db2fb8fc4c0dd661d47585c7966f9338f165e53b3d7777dd844be6a6c8885d95b839a32ea0bc83ec0ef8a5bd11b666d11fd8e27561d8afc4686e978ba31ff2f812f81a6a82956b95a0cce2966a37a4b9e33bd297ab8b1667f6ca5a6be65e4485a305651a4230b7a010a960b035dfb7a8474dec1965c6a9177f62484817807e0dc43ab2770b27adcb40f76c0e78639c55fdecb6c008f2e859ed496818b48e5fbe32376fb3c434afc0ff780867e7374a8d659cc1580e49678f4542e5cd3e54d5f4bd1ff6d186827d588ace5a8adf437dea11def7b57b6b8c992b86695d09c65aaf532d6b8cf12686df8b07bfb5a8aef7944f04c8bd00d500b8b7eb24516dbec0f5514dc48f70eb26a2b78042fb6b4726a20fcf73ccc9a14b75bb82e558e8bc4f7ff5453850f83d12896e9abf322e5b81b6efe679c8c98ee092e06302f9f1472931dbe5a815ac38b1bff79363c4f846caa755ab3ed5b60a938d5f1a9e10950aaa0c5d10c5c4f09abb8ce6b98867e6f8644e3b9d603f07f9c2d1044600635d432ce796b0b96baf572238711302f8fe486f3bd4b5a0463eefb0cb04271393cb1b47b033db62840b4c535da356de3db90961deefbf43060d57b303489aaf9c3bed935f8750d47b8e6aed8eba71f08d93246c92c7cfddea99f6e052bf18e787aca4cc04779dda1f67a420cbb5fbcee2f2ae28be664fad18b478e171dc3699116ae71421b86a5fa9732767c994f38519874b33f07b12b8baa5bc672017cb1e2c8e8897e541358da9a9e3bf8bf57ad3541fb434534190ddb95a5ad701e20548b269268fef7c20c15adb8a86dc8ed756f760370ef2bfff1261349b535b77f67a4118dc8f95c70e977ae39c7c77f2d4e2248028439b72325c033c68684fc8dd6050f0449e2c87debc00fb8bd5d1d9b9f31219b4243cb089362b345f2b9aa7089eb618e1407223ef1022dbaa856197f6cd8dcb7fc53afc16731e0f21b45a17fdc2c49bfd9f14e454c98536c507c3aca95ad57be395ea9d737a4a3237825cf102ca080e013230cd7a46e91237b2214a2b175ffb390ac9f12e5dd3124ffe1e152e148371425c6ae5c603715d5439e0f9e49e8048b56489ce79c26df2dab6ad0c8ac0b37e5d4fe10061f44f3d2314e1ee6245ed600c62a9c448faf905267cdb125ed7dd2a7a539770bd1ddeefd13a521991cae16160cadef434edc23fec333ec7b328c4a6213c5040848e835c6b3e0aebcae1d5884f7e8f654adb512c2f0227fae83ddae0dfa848e0ba9344404ef1d6da880f8eac71fb7e02f197859fdc1ec634dca3f46932e5f022689ed253e60f232e1acd96fce398961d62c4d63d7f37d48c26175298658c224bc1db73b8baaeab139065a9bd004bcaa24493c17f09961c09bd0cb828a8cb3cab56df2991646ff370040bc8507d3d16e66dc075c8d302c6586dbee27b32f93ea563a2692f65ada174e35bcd8cd3214c1a38cc00c90067828b9980da7dec04fbeaa2e550c8d069712efd0853e7daf007b0de5c9e361d75c40ad5f9f2923c10ea479e5852ad35f232d6d141ca7b4328c9d72dc5c247d1431688b2a325d88582733953ee50f997a5d8324cdcb01fda11a773093f344fb38b55c5f9e7706e1024cfb4f2e47544ebbaf792de3c4d8f1522e9d9ce73fdaf1740d3dc134a78b53c6167aec45c730016b8ad9d9bc4042b6835a5ff34c9d36da7418719a86be6637c896fa4a4eda862a9e73ab97e5a977aebf0fe64a7d507dc210a677873e155fe4b2cc3a96e558f4d54db6fc5fcdf166c4cd58bb5d1721378ccff170c0eba14b990ef610606909c205e34aabd15eb7a62406df5451871b18ae3cfb5af37b7f7bb2be80590d3be02c5d0c4143be66efcbe13c6927f54ed27884b3d6a73e90516552a0bbd81f7c76ed5f84ecfef2225e52b9cf6021895716aa29b540750eb64b31cd7be1e9fdaaf132681b23cfb2742fbeb4d1f40fd0bb1d13ba044b252f2f04b0d5fcb121977486c5754a569b81be7577cc0c9e918affbf9abc1b6dd567aab66b7e2aca396e79d53ced9695a65a704bbd9700b55ac8c968c5f43557060c6507a3557c8762a7dc8263eaba22d51fb7df435e20beeaa700609d774d1e212e7493b672324e1a907fc1546cdf7d4ff88029dd7e9c92fc530e3f55b6c1b103c69f14859524d07e454a3c5f987e01d21d9a5a6f842370cc3dadcde1b5822b0d0c47883dfee62b9b7209c3a7c399ed34604e164f806e68a5a24a53d0c5beccdc1389e87a5894061f95e7e8e8bf84ead6e7fb155938230f22b426d9041e8bea72dae14911824db9b65bb0ea0d0404cc8fabcb8f1863e13c8475beb68138e043dd67bf1b0d7e038f9f3d25c8ab1a52173af6b46d8260d677bf066058e89dd18b03fa20e79938dab01876102992f9df49dbe983526b9e0bc83c15cb9d52511eff20d18dcdd316bf334b98aed9024051b87bd3d767054470f4b7f59a207e9b9f17827497bec146aa1b0d18ef54ae5927c64b05f34c8508a0cfea02cf59b3c97a1d3e83a00b7ca495167f411b3f41c1409a8ac007e1cb08ef83c4cbe38117d4b1ef9b58dc0092371b1dbb1a1834f780282dc2f3b6bf36fd0dcc7619c28785b76910757376adfb014ca9ff8bfa3e291e7cba2caa05efad48b1506337b61f74b7b0f4abc18846af682f34708bbee9dee76837bcd192876d1861a20b3e77c9984aff5ebf0a2a4741d6e43b4ac056ea138e79230144578bfd4ae82b84ed109e4d5ff0f955ca481ac0231cae963b7d4db76d89d07e265973a16899fb3a6f8dba53473954589134b520e680f4c5e707fd056e75edb194004b81a40bce0407b6c294078b77e8abd8873c01f6918b2c7c6095c9f23b9841e90e8acde53ba60cd78911cac6fc2ef6bb5fcbb0d3da3e63d70b47495f2177afce5da37c59efde49aae133761847a6f0c8aa374790522ba04d466bd1f7860f53371f5eb2f506c5bc7bb6ab449e4a5c37866c31684b285cf5da17f36434b809f69c542c989449fd0eca50f5eacf8080cbbe8b84d1183095ae7416b8f2b98311451cf7cad2d8fb721e589f9e611376430359cf855444fd1415011e8c313834bf0e217ac7b03f8add941427b0d15b56378b2cd1e3925008c16cd5f95dd149c7e050e0a153e4333e63bd14816b4357fbaa5f706af6ee225057eb599bbe5714c9ff23204d1902230569839d8836e6b2525570b00eca8534aa0c29cf62dce61ec66d9c195be81279b698ec8565fd6754f636b9288247657efdb2b6356a82f014a1e6b24926fdd67810ef0a01295c664980f2057ca17362b0a5888c23ac21842f931a7d57cdeea73c4848c6c1cce20be979faa611f86509ce031fb4102a0fd30bea4f4f840c75d238362a2c4f8de16e81733ca90119f8c1ae148b184d0b113685594088ad8a947455dcfb782f8beb69e255dbed46ae2ee6f094168a52501fc68ed669fac390cd9320ba16d69c86d6f642aea836bb1d7c14593f15d8d33d452d8c87003d7ada1995e2b43f788b4ab00ec6f58869968f0982c34f017d1d8825d67a14cd3de7de8357902e8ecfb5f2e6beb5d3d32a6a6224fe3d6dc5c06eb117af0ab396acfcae58b2b1b9981cc71cc1cde07491b6b6d97e04c10ff216393dd28737d31c8f2cc9ebe161b96d407088b2bc456c331b676a0d7dca3df7f7080697d154fa14f351fd467e30b4ac3f4eb7b4adfb173ff20594cfe539c775c4275795d54782bae4b59cc64a45740ff73d21f5d6cf39e10bae4fbc48ac7799023796d7408ff9220a07a49552b18c5e35f98082297d2b4a0932e4d224c6807d49bf9b5de2eff1a8130da56124ecb5509241fe95be11eb0df066f5f819bc7db0f1ee90ea0aaf4ca4458ae7b5105d574de028c82714ad0d53bfc8ffab31c57762b38e433d6991d83ba5616162e27e8ac122c145547c4abe18260c6d32c755a44390ed41241ef375e1f5a4311263881a02dae71f837206413fc37ddf40a9bb72256d1625ee0b94c1c5715809bdb24224cd0698a5802a83e2328dfa22b80e31b9a5c7dc2fe0c68545905368806c308334c194803eed4a24a96bc5021b837a293dde7ba22b9ed27369b3584deda6489bd1b3fa2925beeacb7d3be367fd014547f82b4561c0120978b6ec2b32ac2634589b819a2c94fd20c081fe9eac7b0745f73a1981e21b05b1bd97a9a1d7218c0e6d0e473e15a1a7465cea98ba0c72af2f270b6a61bc51d1a0a9603b91fcdcc7314fe7aa007ecffe6c7eebf5a65e82a96325e86f9aec39feac6eee9501495c74000ec1f0923e79ad1fbf6dc581539047537794151473e00be353b3b8dbb6da0053826c7bdf16c43867cc9cab9d1220466ca29ef2d6172c4c0ff9067eba9d9775225efaeab1b8c634b4001d2a5c01628bd5550c4573fa017afa3f501f1a6b7d7a483dc0885ab9c2ee959a596ffbb68c7ea99e48f4304697edf7fdba5567735ace3433c15aa59863f87e4605206a31ccf268588de7ed37fcacf6bde80c68ad53de63feb4399cce137c5776abd15395402af07250938aa1c466511bd5754f9cf2f938faa37a683996c801c8fc8aae36a706c5d6e2d36e96ab77eec817ce4d56d2bcf5a43702a883b127a1da8b6ceae1b82573a9e9e9e297560f8d65a1f5fd4bf3d45af0841e691b6e637bd8b9f7c8e51b813b818b0baf2d9c5c9d116781d327b4b43309c7265612089f1dce60a41fd0aff4bcd1335d696f01cee7b371e13584c731a3c3ef7e1b9f3f41f91c4dc647b948c93a99c1ae79f5f530c68c3cc28bbd00", 0x2000, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008600)={0x78, 0x0, 0x4, {0x0, 0x0, 0x0, {0x6, 0xfbffffffffffa635, 0x3, 0x5, 0x8, 0x2000000000000000, 0x0, 0x0, 0x0, 0x1000, 0xd3bbb4a7, r5, 0x0, 0x9, 0x20006}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000021c0)='./file0\x00', r5, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATX(r1, &(0x7f0000000140)={0x130, 0x0, r2, {0x80000001, 0x2, 0x0, '\x00', {0x0, 0xf49, 0x2, 0xfffff800, r5, r6, 0x1000, '\x00', 0x4edb, 0x82, 0x2, 0x5, {0xc, 0x8001}, {0x5, 0x1}, {0x4, 0x4}, {0x0, 0x4}, 0x4, 0x9, 0x1, 0x9}}}, 0x130) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040580411500000000000010902240001000000000904000002030000000921feff000122050009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 1.476330459s ago: executing program 0 (id=742): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xffe2}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x66, 0xf31, 0xfffffff8, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0x6}, {0x2, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.460694948s ago: executing program 3 (id=743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe75}, 0x48) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRESDEC=r0], 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.229032093s ago: executing program 5 (id=744): syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xc5, 0x19, 0xc7, 0x8, 0x733, 0x430, 0xd70c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x0, 0xdf, 0x77, 0xd3}}]}}]}}, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xa4, 0x9, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xce8}}]}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000000) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r2 = userfaultfd(0x801) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup2(r2, r2) ioctl$KVM_IOEVENTFD(r4, 0x40a0ae49, &(0x7f0000000000)={0x7, 0x0, 0x0, r5, 0x100000}) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x2}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r7, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r8, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) recvmmsg$unix(r10, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3fb, 0x8, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x10040001}, 0x801) bind$tipc(r7, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000001b40)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x20, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0xfffd, 0x0, 0x0, {[@nop, @exp_fastopen={0xfe, 0x8, 0xf989, "adb18d07"}]}}}}}}}}, 0x0) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101040) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r11, 0xc058534f, &(0x7f0000000180)={{0x1, 0xe}, 0x1, 0x7, 0x1ff, {0x40, 0x1}, 0x9, 0x7}) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000100)) 1.19451403s ago: executing program 0 (id=745): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3082, 0x0) write$P9_RSTATu(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x30e) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x400) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x8, 0xfff3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004028}, 0x0) mremap(&(0x7f00005a9000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000292000/0x4000)=nil) syz_clone(0x5014100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.052283688s ago: executing program 2 (id=746): inotify_init() r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = epoll_create1(0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]}) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, r2, 0x0) fanotify_init(0x200, 0x40800) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0xa, {}, {0x5, 0x8, 0xc1, 0x6b, 0x9, 0x2, "84653375"}, 0xffb, 0x2, {0x0}}) unshare(0xa020480) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 690.701158ms ago: executing program 3 (id=747): syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) (async, rerun: 64) epoll_create1(0x0) (rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) write$sndseq(0xffffffffffffffff, &(0x7f00000002c0)=[{0x4, 0x80, 0x9c, 0x6, @time={0x38, 0x7}, {0xe, 0xe}, {0x2, 0x9}, @connect={{0x6, 0x2}, {0x9, 0x9}}}, {0x0, 0x7, 0x7, 0x8, @time={0x85, 0x2}, {0x1, 0x4}, {0x6, 0xe}, @connect={{0x1, 0x4}, {0xe, 0x8}}}, {0xa, 0xb, 0x7, 0x7c, @time={0x5, 0x6}, {0x6, 0x9b}, {0x4, 0xe9}, @addr={0xfa, 0x7f}}, {0xb, 0x7, 0x9, 0x7, @time={0x81, 0x5}, {0xb, 0x10}, {0x0, 0xc}, @ext={0x0, 0x0}}, {0x9, 0x84, 0x2, 0x3, @time={0x5, 0x23ff}, {0x60, 0x1}, {0x9, 0x1}, @queue={0x1, {0x6, 0x1}}}], 0x8c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0x74}}, 0x0) dup(r1) (async, rerun: 64) r5 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) (rerun: 64) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, 0x0, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11079, 0x2b}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc}}}, @IFLA_IFALIASn={0x4}, @IFLA_LINKMODE={0x0, 0x11, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 564.076284ms ago: executing program 3 (id=748): socket(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003c000701fcffffff0000000027624cf235088099010002007b302486fc79423e2c1300000008e3008b6a8c30ec717b73dd1eebe7b6be877eb9848df61e68448316b5124a"], 0x2c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) (async) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x800) sendto$inet(r2, &(0x7f0000000300)="cca204e7", 0x4, 0x0, 0x0, 0x0) (async) sendto$inet(r2, &(0x7f0000000300)="cca204e7", 0x4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x7a}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) (async) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000600)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000004080)={{r0}, r7, 0x10, @inherit={0x78, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000060000000000000000000000800000001d000000000000000400000000000000030000000000000001000000000000000200000000000000ffffffffffffffff03000000000000000800000000000000030000000000ffff020000000000000007000000000000000300000000000000"]}, @devid}) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000004080)={{r0}, r7, 0x10, @inherit={0x78, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000060000000000000000000000800000001d000000000000000400000000000000030000000000000001000000000000000200000000000000ffffffffffffffff03000000000000000800000000000000030000000000ffff020000000000000007000000000000000300000000000000"]}, @devid}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x2a64, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x2a34, 0x2, [@TCA_BASIC_ACT={0x2a30, 0x3, [@m_police={0x2a2c, 0xb, 0x0, 0x0, {{0xb}, {0x2974, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffb}, @TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x8001, 0x9, 0xb6, 0x8, 0x0, 0x3, 0x7f, 0x7, 0xb, 0x343, 0x3, 0x8, 0x0, 0xf9, 0x8, 0xd72, 0x12c65e81, 0x80000000, 0x0, 0x69e, 0x2, 0xf, 0x40, 0x8, 0x5, 0x80, 0x8001, 0x2554, 0xeb, 0x7, 0x3, 0x9, 0xfffffffc, 0x1, 0x2, 0x5, 0x2, 0xfffffffe, 0x9, 0x3, 0x4, 0x6f, 0x1, 0x10, 0x3, 0x5, 0x140000, 0x4, 0x51cd, 0xb, 0x80, 0x1545, 0xbbe, 0x8, 0x981c, 0x0, 0x10001, 0x4, 0x4, 0x5, 0xfffffff9, 0xff, 0x4, 0x1, 0x9, 0x6, 0x6, 0x2, 0x6, 0x1, 0x3, 0xfff, 0x38, 0x4, 0x2, 0x4, 0x7, 0x376, 0x9, 0x5, 0xb5ec, 0x6, 0x7, 0xf649, 0x37, 0x401, 0x7, 0x0, 0xca, 0xba2, 0x1, 0x80, 0xe, 0x6, 0x4, 0x8, 0xffff, 0x7, 0x8d, 0xcb81, 0x9, 0x7, 0x2, 0x7, 0x8, 0x8, 0x2, 0x1, 0x83, 0x1, 0x6, 0x2, 0xb, 0x10000, 0x10, 0x0, 0x9, 0xe, 0x0, 0x8, 0x101, 0xfffffffb, 0x9, 0x1, 0xe, 0x4, 0x10001, 0x7, 0x9, 0x8001, 0x1, 0x5, 0x6, 0x3, 0x101, 0x2, 0x10000, 0xfffffff9, 0xccb, 0x933f, 0x0, 0x40, 0x2, 0xd, 0x8, 0xfffffffc, 0x1ff, 0x6, 0x3, 0x51, 0x8000, 0x5, 0x8, 0x7, 0x864, 0xd, 0x3325, 0xfffffff7, 0x3, 0xc6f0, 0x67, 0xb, 0x2, 0x4, 0x35, 0xfff, 0x6, 0xd, 0x101, 0x4, 0x8, 0x6, 0x1, 0x7fffffff, 0x2, 0x3, 0x7, 0xf, 0x6, 0x8, 0x40, 0x3ff, 0xc, 0x4, 0x1, 0xffffffff, 0x9, 0x100, 0xef4, 0xffff, 0x10001, 0x9, 0xe5, 0x10001, 0xffff, 0x4, 0x7, 0x2, 0x8, 0x1, 0x3aba9438, 0x2, 0x6, 0x10, 0x9, 0x1, 0x401, 0x5, 0x2, 0x0, 0x1000, 0x80000000, 0x9, 0x6, 0x1, 0xa, 0x7, 0x3, 0x7, 0x1, 0x4, 0x9, 0x5, 0x20000, 0x2, 0x3, 0x3, 0x2, 0x6, 0x3, 0x2, 0x5, 0x52, 0x0, 0xfffffffc, 0xfffffffb, 0x7, 0x8, 0x1, 0xde, 0x8e3a, 0xaade, 0xfffff801, 0x0, 0x1, 0xc, 0xb, 0x9, 0x8, 0x3, 0x1, 0x9, 0xffffffff, 0xfffffff7, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x0, 0xc67, 0x101, 0xd2, 0x5ea4, 0x2, 0xc26, 0x401, 0xd2dd, 0xd, 0x991d, 0x3, 0xe9f9, 0x9, 0x9, 0xd, 0x5, 0x6, 0x5, 0x1, 0x4, 0x6e, 0x3, 0x3, 0x9, 0x3, 0x7, 0x9, 0x0, 0xc, 0x6, 0x0, 0x0, 0x6, 0x80, 0x5f2a, 0x7, 0x80, 0x5ba6, 0xd, 0x9, 0x7, 0x2, 0x6, 0xfff, 0x5, 0x2, 0x7ff, 0xa, 0x5, 0x6, 0x4700000, 0x7fff, 0xe, 0x80000000, 0x1, 0x72c, 0xffffff63, 0x8, 0xfffffff8, 0x7, 0x76db, 0x200, 0x7, 0x10000, 0x7, 0xc, 0x6, 0xa, 0x9, 0x0, 0x3, 0x5, 0xff, 0x6, 0x2, 0x0, 0xf3, 0x21d, 0x4, 0x10000, 0x1, 0x5, 0x3c89, 0x4, 0x2, 0x6, 0x64a, 0x2, 0x5, 0xd6, 0xff, 0x2, 0x1, 0x1000, 0x1, 0x8, 0x81, 0x0, 0x4, 0x7, 0x40, 0x1, 0xff, 0x9, 0x3, 0x80000001, 0x226c, 0x2, 0x7f, 0x8001, 0x80000001, 0xc4, 0x700000, 0x5, 0x6, 0xffffff24, 0xffffffff, 0x81, 0x0, 0x3, 0x2, 0xeb0, 0xfffffffe, 0x9, 0x78cd, 0x4, 0x80000001, 0x9, 0x3, 0xde, 0x38e, 0x1000, 0x9, 0x6, 0x8, 0x6a61ae4d, 0x8, 0x10000, 0x401, 0x9, 0xa, 0x401, 0x5, 0x5, 0x200, 0x3, 0x2, 0xb, 0x19ff, 0xffffffff, 0x4, 0x2, 0x4, 0x1, 0xa6, 0x10000, 0x22b, 0x10000, 0x4, 0x8, 0x100, 0xa6, 0x80, 0x400, 0x7, 0xf0d, 0xc66b, 0x8000, 0x0, 0xffffffff, 0x1, 0x7, 0x5, 0x5, 0x7, 0x0, 0x5, 0xc8, 0x1, 0xf, 0x0, 0xf4f, 0x1000, 0x1, 0x0, 0x4, 0xa4, 0x10001, 0x1, 0x7fff, 0x2, 0x5, 0x7bc4, 0x9, 0xa68, 0x2, 0x0, 0x0, 0x8, 0x0, 0x1, 0xfffffffe, 0x0, 0x8000, 0x226d, 0x2, 0xa, 0x6, 0x7fff, 0x7fffffff, 0x2, 0x5, 0x6, 0x74, 0x3, 0x1, 0x3, 0x5, 0x2, 0x9, 0x8, 0x7fff, 0x3ff, 0x4, 0x66c7e55, 0x80, 0x7, 0x800, 0xf, 0x7d5, 0xc, 0x4, 0x7fffffff, 0x6, 0x8, 0x2, 0x9e4, 0x5b03, 0x8, 0x6fc0, 0x8, 0xae, 0x2, 0xf, 0xf, 0xf9ab, 0xabef, 0x81, 0x3, 0x8, 0xfffffff9, 0x1, 0x79d2, 0xfffffbff]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x3, 0x8, 0x6, 0x9fde, 0x1, 0x5e, 0x41, 0x8e, 0x84b, 0x2, 0x6, 0x7fff, 0xfffffffe, 0x12, 0x0, 0x0, 0x0, 0x3, 0x4, 0x7, 0x1, 0x1, 0x7fff, 0x2, 0xffffffff, 0x10, 0x5, 0x86, 0x5, 0x4, 0x5, 0x9, 0xfffff001, 0xeaa, 0x557, 0x10000, 0x5, 0x6, 0x1, 0x5, 0x3, 0x8, 0xa76, 0x1, 0x8001, 0x1000, 0xd, 0x92f, 0x5, 0xfff, 0xffffff8f, 0xb3, 0x2, 0x6, 0xe7b5, 0x3, 0xf78, 0x0, 0x7, 0xa, 0x2, 0x4, 0x80000000, 0x8725, 0x8, 0x4e7, 0x5, 0x4, 0x7, 0x7, 0x1, 0x3ff, 0x2, 0xfffffffd, 0xf79, 0x8, 0x0, 0x3, 0xffffffff, 0x7, 0x100, 0x0, 0x5, 0x6, 0x1, 0x40, 0xd6d, 0xff, 0xb, 0x6, 0x8, 0x7, 0x6, 0x9, 0x3, 0x3, 0xfffffff9, 0x7, 0x1, 0x2, 0x5, 0x6, 0x81, 0x4, 0x8000, 0x1, 0x4, 0x4, 0x8, 0x2, 0xf, 0x3, 0x3f17d4f1, 0xfffffffd, 0x8, 0x0, 0xfffffffd, 0x7, 0x5, 0x5cf, 0xfffffff9, 0x7fffffff, 0xd, 0xffff, 0x8, 0x8, 0x4, 0x9, 0x2, 0x59a, 0x2, 0x9, 0x2, 0x6, 0x4, 0x200, 0x7fff, 0x2, 0x80000001, 0x2ba7fd9d, 0xc, 0x6, 0x5, 0x6, 0x8b4c, 0x4, 0x7fff, 0x0, 0x100, 0x3, 0x10, 0x5, 0x9, 0x401, 0xb, 0x100, 0x3, 0x8, 0xe00000, 0xfffffffc, 0x6, 0x7ff, 0x3ff, 0x7, 0x1, 0x5, 0x2, 0xec5, 0x3, 0x8001, 0x100, 0xe1b4, 0x80000, 0xd3c1, 0x8, 0x10001, 0x9, 0xc, 0x906, 0x6, 0x80000001, 0xb, 0xfff, 0x4, 0xfff, 0x5, 0x7ff, 0xffffb445, 0x7, 0x7, 0xe, 0x9, 0x400, 0x17b, 0x100, 0x1, 0x5, 0x1ce0, 0xede, 0x9, 0x80000001, 0x8, 0x6, 0x5, 0x1, 0xa, 0x2, 0x1, 0x5, 0x0, 0x2, 0xffff, 0x42b, 0x2, 0x6, 0x1, 0x5, 0x9, 0x2fd, 0x7, 0x8, 0x45e0, 0xffffff01, 0x5, 0x0, 0x54b1, 0x28ba, 0x10, 0x7fff, 0x3, 0x7, 0x100, 0x9, 0x7, 0x0, 0x1, 0x1, 0x800, 0x5, 0x100, 0x5ed5, 0x7, 0xd7, 0xfffffff9, 0x5, 0x0, 0x8000, 0x401, 0x8, 0xfffffffd, 0x3a5, 0x80, 0x3, 0x7f, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x6, 0x2, 0x6, 0x9, 0x1ff, 0x4, 0x8, 0x5, 0x6, 0x9, 0x7, 0xfff, 0x8, 0x6, 0x3, 0x7fff, 0x4, 0x3, 0xd, 0xffffff71, 0xfffffff1, 0x4, 0x9, 0x0, 0xff, 0x7fffffff, 0x3, 0x100, 0x6, 0x10, 0x46, 0x1, 0x0, 0x27e2a81c, 0x5, 0x81, 0xf, 0x5, 0xfbbf, 0x1, 0x5, 0xe, 0xd, 0x36, 0x4800000, 0x3, 0x9, 0x80, 0x5, 0x8, 0x4, 0x4, 0x46e, 0xb, 0x800, 0x2, 0x7f, 0x75da3168, 0xe, 0x7, 0x1, 0x8, 0xc, 0x4, 0x70, 0xb, 0x621d, 0x10, 0xffffffff, 0x9, 0xcbf, 0x5, 0x6, 0x0, 0xfffffb3c, 0x6, 0x10, 0xfffffff8, 0x7, 0x4, 0x7, 0x0, 0xfff, 0x0, 0xcd1b, 0x4, 0x400, 0x4, 0xf, 0x6, 0x4d8b9e05, 0x4, 0x9, 0x2, 0xfffffffd, 0x2, 0x7fffffff, 0x1, 0x8, 0x9, 0x7, 0x4, 0x717, 0x6, 0x4, 0xb, 0x2, 0x5679, 0x9, 0x88d, 0x9, 0xfffffff8, 0x1, 0x4, 0xc, 0x40, 0xffff, 0x0, 0x200, 0x9, 0x401, 0x80ae, 0x80, 0x1, 0xf, 0x2, 0x2, 0x100, 0x2, 0x8, 0x4, 0x8000, 0x9, 0x8, 0xff, 0x9, 0x932, 0x9, 0x3, 0x6, 0x8, 0xffffffd8, 0x7, 0x1ff, 0x20080000, 0x3, 0x80000000, 0x8000, 0x9, 0x4, 0x1, 0x52aa, 0x5, 0x9, 0x3, 0xfffffffa, 0x7, 0x6, 0x3, 0x4, 0x7, 0x5b00000, 0x101, 0x1, 0x7d512369, 0x8, 0x0, 0x4, 0x7, 0x1cc9, 0x0, 0x959, 0x401, 0x2, 0x4, 0x2, 0x3, 0x4, 0x9, 0x5, 0x6, 0x10000, 0x401a, 0x5, 0x6, 0x3, 0x6, 0xd, 0x4, 0x0, 0x800, 0x100, 0x200, 0x4, 0x4, 0x4, 0x5, 0xfffffffc, 0xff, 0xfffeffff, 0x1, 0x8, 0x7, 0x0, 0xfffffffb, 0x6, 0xd, 0x0, 0x27, 0x100, 0xc54e, 0x5, 0xf8, 0x7, 0x0, 0x21, 0x9, 0x1, 0x5, 0x1, 0x5, 0x4, 0x6, 0x62f, 0xcb0, 0x8, 0x0, 0x2, 0xa, 0x8, 0x9, 0x5, 0xe8, 0xf, 0x5, 0x7, 0x1, 0x9, 0x3, 0x9, 0x1000, 0x5, 0x7, 0x2abf, 0x45, 0x4, 0x8, 0x4, 0x30c7, 0x5, 0x3, 0xa502, 0x4, 0x86cf, 0x101]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x8, 0x7, 0x2, 0x8, {0x8, 0x1, 0x8, 0xffff, 0x1b, 0x3}, {0x7, 0x2, 0xf3, 0xe6, 0x2, 0x2}, 0x0, 0x9, 0x101}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x7ff, 0x8, 0x7500, 0x1, 0xfffffffc, 0xffffff00, 0x8, 0x6, 0x348, 0x2, 0x2, 0xfffffffa, 0x5, 0x0, 0x9, 0xc, 0x9, 0x9, 0x4, 0x7fffffff, 0xfffff7a1, 0x2, 0xa, 0x8, 0x24794916, 0x3, 0x6, 0x7, 0xf, 0x3, 0x1, 0x2, 0x9, 0x6, 0x2, 0x0, 0x80000000, 0x80000001, 0xffff, 0x100, 0xffffffd5, 0x4, 0x7, 0x80000001, 0x1, 0xfff, 0x6, 0x2, 0x1, 0x8, 0x6, 0x9, 0x1, 0xfffffff2, 0x400, 0x3, 0x4, 0xfffffffd, 0x1000, 0x7, 0x2, 0x73ac, 0x1ff, 0xfffffff8, 0x4265, 0xd6f800, 0x7, 0x9, 0x0, 0xfffffff6, 0x4, 0x0, 0x2, 0x3, 0x9, 0x7fffffff, 0x56, 0x2, 0x5, 0x2, 0x3, 0x4, 0x9, 0x3, 0x7, 0x6, 0x0, 0xff, 0xa, 0x7b, 0x0, 0x200, 0x7, 0x8, 0x7, 0x7, 0x25, 0x6, 0x8f, 0x1c, 0x4, 0x6, 0x3, 0x8, 0x6, 0x4, 0x7f, 0x5, 0x7dfd, 0x9, 0x9, 0x7, 0x3, 0x6, 0x10001, 0x2, 0x8000, 0x10000, 0x116f94d5, 0x7, 0x6, 0x6, 0x3, 0x7, 0xfffffffd, 0x2, 0x8, 0x47, 0x1ff, 0x7, 0x7ff, 0x4, 0x5, 0x9, 0x3, 0x46, 0x5, 0x61, 0xbb, 0x6946, 0xd, 0x3b5800, 0x4, 0x97, 0x9, 0x80000001, 0x2, 0x8, 0x6, 0x7, 0x3, 0x5, 0x1, 0x2, 0x7, 0xc7, 0x4, 0xa, 0x916, 0x58e, 0x5, 0xfb, 0x7, 0x8, 0x6, 0x0, 0x5, 0x114, 0x9, 0x7, 0x1, 0x22, 0xfffffaff, 0x6c1b55dc, 0x2, 0x5, 0xfffffff9, 0x101, 0xbe, 0x9, 0x2, 0x7, 0x9, 0xfffffff7, 0x1590, 0x800, 0x8, 0x4, 0x5, 0x6, 0x8, 0xfff, 0x38, 0x137, 0x5, 0xb3, 0x1, 0xa, 0x7, 0x100, 0x4, 0x7, 0xb, 0x5, 0xfff, 0x0, 0x3, 0x0, 0x7ff, 0x0, 0x0, 0x81, 0x7, 0x27, 0x0, 0x3, 0x400, 0x6, 0xfffffffa, 0x1, 0x400, 0x104, 0x7fff, 0x7, 0xb87, 0x9fc4, 0x7, 0x699bded8, 0xffffffb0, 0x7, 0x9, 0xa4c, 0x9, 0x8001, 0x0, 0x3d1d7459, 0x4c, 0xd, 0x4, 0xfffffa5a, 0x99, 0x3, 0x5, 0xc7a, 0x4c33, 0xc437, 0x43c, 0x1, 0x1, 0xffffcf7a, 0x6336, 0xc, 0x10, 0x8]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xa, 0x1, 0x5, 0xb, 0x81, 0x7, 0x400, 0x3, 0x6, 0x863, 0xc, 0x6, 0x80000000, 0x8, 0x7, 0x80000001, 0xfffffffc, 0x8e, 0xec, 0x40, 0x9, 0x3, 0x9, 0x7f, 0x77d, 0xffffff33, 0xe9, 0x3, 0x6, 0x4, 0x4, 0x1, 0x10, 0x9, 0x3, 0x3, 0xf, 0x0, 0x7, 0x8, 0x9, 0xe6, 0xb, 0x6, 0xd, 0x5, 0x3, 0x1, 0xc, 0x8, 0x1, 0x10000, 0xa, 0x7ff, 0x2, 0x8, 0x1000, 0xd24c, 0x9, 0x6, 0xcf, 0x5, 0x7, 0x8, 0x6e4d, 0xfffffffd, 0x4, 0x4, 0x9, 0x1, 0x400, 0x3, 0x8, 0x1, 0x6, 0x7, 0x8, 0x7, 0x1, 0x2, 0xed, 0x3, 0xffff, 0x3, 0x7d, 0x100, 0x9, 0x7, 0x6, 0x8, 0x0, 0x3ff, 0x6f, 0x0, 0x7, 0x3, 0xdd, 0x9, 0x3, 0x5, 0x2, 0x2, 0x66f, 0x1, 0x9, 0x8442, 0x1, 0x8, 0xaf50, 0x3, 0x5, 0x8, 0x9, 0x9, 0xffff, 0x2, 0x2, 0x3, 0xd3a, 0x5, 0xfffffd7f, 0xc8d, 0x1, 0x800, 0x7ff, 0x7, 0x54fbdfbe, 0xa58, 0x9, 0x80000001, 0x3, 0x1, 0xffff, 0x6, 0x2, 0x0, 0x8, 0x40, 0xfff, 0x80, 0x6, 0xe2, 0xd, 0x7, 0x4, 0x16, 0x0, 0x80000001, 0x7, 0x9, 0x3ff, 0x2, 0x4, 0x0, 0x6c, 0xfffffffc, 0x5, 0x6, 0x0, 0xaf4e, 0x1, 0x98, 0x0, 0xa, 0x6, 0x3, 0x1000, 0xe, 0x554, 0x9, 0x1, 0x0, 0x4, 0x8000, 0x6714, 0x5, 0x100, 0x1000, 0x7, 0xe, 0x1, 0x3fe, 0x7, 0x9, 0x4, 0x0, 0x10000, 0x3, 0x5, 0x40, 0x1, 0x9, 0x3ff, 0x5, 0x9, 0x4, 0x7, 0x1, 0x8000, 0x1, 0xe, 0xc72, 0x4, 0xffffff01, 0x4, 0xd5f, 0x3, 0xf, 0x2, 0xe, 0x5, 0x1, 0x8, 0x479, 0x9, 0x7, 0x98c, 0x6, 0xffffffff, 0x1, 0x9, 0x6, 0x100, 0x6, 0x6, 0x81a, 0x7, 0x1, 0x9, 0x5, 0x180000, 0xfffffffb, 0x6, 0x200, 0x80000001, 0x401, 0x2, 0x9, 0x53ff, 0x5, 0x3, 0xfff, 0xff, 0x1552, 0xffffffff, 0x1, 0xc292, 0x1ff, 0x1, 0x0, 0x6, 0x2c18, 0x6, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x5, 0x5, 0xffffffff, 0x8, {0x0, 0xdb5fa3cdea6e91f5, 0x0, 0x2, 0xfbd3, 0x1000}, {0xb2, 0x2, 0xf066, 0x4, 0x7ff, 0x7fffffff}, 0xfff, 0x7fffffff, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x5, 0x9, 0x7, 0x0, 0x7ff, 0x8, 0x101, 0x4, 0x8, 0x9, 0x6, 0x1, 0xfffffffe, 0xe, 0x81, 0x100, 0x69, 0x3, 0x3, 0xb62, 0xfffffff8, 0x80000000, 0xa, 0xffff111b, 0x2, 0xfffffe00, 0xfffffffd, 0x8d50, 0x5, 0x10, 0x5, 0xfc000000, 0x2, 0xfffffff6, 0x1, 0x10001, 0x81, 0x5, 0x7, 0x3, 0x4, 0x7fff, 0x5, 0x6, 0xfffffff8, 0x0, 0x2f5beb58, 0x3, 0x2, 0xf, 0x7ff, 0x2, 0x7ff, 0x3, 0xffff, 0x7fff, 0x6, 0x10000, 0xd80, 0xb6079a5d, 0x3, 0x6, 0x1, 0x6, 0x8, 0xe, 0x40000, 0x2, 0x7, 0x0, 0xb2, 0x200, 0x2, 0x7, 0xedd, 0xa, 0x7f, 0x7fff, 0x8, 0x6405658, 0x2, 0x9, 0x9, 0x40, 0x0, 0x800, 0x10000, 0x80000000, 0x2cb71bf8, 0x6, 0x4, 0x80000000, 0xfffff25f, 0x6, 0x9, 0x6d, 0x5, 0xfffffff9, 0x8, 0x8, 0x4, 0x1, 0x10, 0xd9d9, 0x2, 0x14df, 0xb, 0x9a0b, 0x1, 0x101, 0x7, 0x9, 0x7fff, 0xe8, 0x9, 0x80, 0xff, 0x6, 0xfffffffa, 0xe9, 0x5, 0x7, 0x6, 0x1, 0xfffffffb, 0xd967, 0x4, 0x2, 0x8, 0x2, 0x80000001, 0x2f2, 0x10000, 0x3, 0x6, 0x6, 0x1, 0xc4e, 0x1, 0x6, 0x8, 0x0, 0x5, 0xe, 0x339, 0x8, 0x9, 0x5, 0x10, 0x6, 0xff, 0x7ef, 0x5, 0x2c12, 0x81, 0x3, 0x4, 0x3, 0xfffffffa, 0x0, 0x0, 0x400, 0xd, 0xfffffff8, 0x52, 0x4, 0x40, 0x6, 0x6, 0xff, 0x3, 0x6, 0x400, 0x5, 0xe58c, 0x1, 0x9, 0x1, 0x3, 0x6, 0x1ff, 0x6, 0x0, 0x3, 0x4, 0x6, 0x0, 0x0, 0x800, 0x8, 0x1, 0x8e, 0xffffffff, 0x6, 0x488, 0x3e7916b3, 0x74f728c7, 0x1621, 0x0, 0x1, 0x809, 0x0, 0x0, 0x3, 0xc, 0x1, 0x6, 0xc30c, 0x6, 0x10000, 0x9122, 0xad, 0x3, 0x5, 0x6, 0xd, 0x10, 0x6, 0x546, 0x7, 0x3, 0x7, 0x10, 0x5, 0x2, 0x89a, 0x8, 0x2dd, 0x8, 0x2, 0x8, 0x3, 0x5, 0x1, 0x0, 0x9, 0x2, 0x43, 0x8, 0x5, 0x7, 0x2, 0x8, 0x2, 0x1, 0x1, 0xffffffff, 0x2, 0x8, 0x1, 0xf, 0x4, 0x7ec2472a, 0x3d17, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x88, 0x2, 0x6b, 0x49, 0x9, {0x54, 0x0, 0x5e6, 0x80, 0x200, 0xfffffff7}, {0x3, 0x2, 0x4, 0x8, 0x0, 0x6}, 0x7, 0x8, 0xd3a}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1dda}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0x1, 0x7, 0xc0000000, 0xfffffd8a, 0x800, 0x8, 0x10001, 0x7, 0x2, 0x8, 0x8, 0x3, 0x200, 0x9, 0xb1, 0x2, 0x4, 0x2, 0x0, 0x3, 0x3, 0x0, 0x7, 0x0, 0x9, 0xd6, 0x80000000, 0x8, 0x0, 0x81, 0xfffffff9, 0x10, 0x2, 0x8, 0x1, 0x0, 0x9094, 0x8, 0xaa41, 0x9, 0x2, 0x9, 0x6, 0x5, 0x0, 0x9, 0x3, 0x3, 0x5, 0x1, 0x2234, 0x7103, 0xfffffff2, 0x3, 0x2, 0xf03, 0x6, 0x48ec6aaa, 0x91, 0x0, 0x9, 0x5, 0x97, 0x200, 0x8000, 0x9, 0x5f8, 0x7fffffff, 0xec2d, 0x8, 0x7, 0x4, 0x6, 0x3, 0x9, 0xb3ee, 0x1, 0x485e, 0x7fffffff, 0xc, 0x9, 0x1, 0x0, 0x28c00000, 0x9, 0x0, 0x8000, 0x1, 0x515, 0x2, 0x5, 0x9, 0x5, 0xc1, 0x1e57a61a, 0x2, 0x496, 0xa2, 0x7, 0x1, 0x98, 0x3, 0x4, 0x7, 0x6, 0x3, 0x3, 0xfffffffb, 0x2, 0x3, 0x3, 0xe, 0xd4, 0x5, 0xa2a, 0xfffffffa, 0x1, 0x9, 0xe, 0x79c2, 0x7, 0x10001, 0x54, 0x2, 0xd37, 0x2, 0x4, 0x0, 0x1, 0x2, 0x5, 0x2, 0x6, 0x8, 0x4, 0x0, 0xffff0000, 0x990, 0x4, 0x5, 0x357, 0xaa, 0xf, 0x2, 0x8, 0x7fff, 0x1, 0x5, 0x3, 0x40, 0x7ff, 0x8000, 0xfffffffa, 0x81, 0x80, 0x9d, 0x8, 0x80, 0x10000, 0x6, 0x7fff, 0x8, 0x10001, 0x7b, 0x3, 0xb61a, 0x7, 0xf4eb5f1, 0x8, 0x5, 0x3, 0x7fff, 0x401, 0x401, 0x1, 0x9, 0xbb, 0x5, 0x4, 0x8a, 0x8, 0x4, 0x2b, 0x10, 0x10001, 0x3, 0x8, 0x101, 0x8001, 0xd3, 0x7fffffff, 0x7f, 0x4, 0x7, 0x1, 0x1, 0xffff, 0x3, 0x3ff, 0x9, 0x7, 0x7, 0xffff, 0x3, 0x5, 0x4, 0x400, 0x21, 0x4000000, 0x800, 0x3, 0xc1bd, 0x9, 0x3, 0x400, 0x7, 0xc92, 0x16, 0x8, 0x0, 0x8, 0x5, 0x6, 0x3, 0x6, 0x6, 0x8, 0xabca, 0x4, 0x3e, 0xfffffff9, 0x497, 0x400, 0x40, 0x579, 0xa0c1, 0x81, 0x0, 0x10000, 0x7525f569, 0x1, 0x8, 0x8, 0x2, 0x4, 0x3, 0x8, 0x401, 0x0, 0x7, 0xfffffffa, 0x7, 0xa, 0x9, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x911}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x14e21746, 0x2, 0x5, 0x228, 0xffff, 0x3, 0xfff, 0x6, 0xa, 0xffffffff, 0x0, 0x8000, 0xfffffffe, 0x7, 0xd5ce, 0x2, 0xc, 0x7fff, 0x40, 0x9, 0x10001, 0x5af5ddcc, 0x4, 0x100, 0x2, 0x5, 0x8, 0x73408626, 0x7, 0x401, 0xadff, 0x7, 0x4, 0x2, 0x4, 0x5191, 0x80, 0x5, 0x0, 0x1, 0xfffffffa, 0x0, 0xa, 0x905, 0xd287, 0x800, 0xfffffff9, 0x10000, 0xb, 0x28fb, 0x3, 0x2, 0x6, 0xff, 0x101, 0x3, 0x467, 0x9, 0x9, 0x3, 0xffffff80, 0x7, 0x0, 0x37, 0x4, 0xfffffffb, 0x656, 0x1, 0x4, 0x800, 0x80, 0x1, 0x9, 0x3, 0x300, 0x6, 0x3, 0x0, 0x92e3, 0x3, 0x3, 0x3220, 0xffff, 0x7, 0x9, 0x7fff, 0x4, 0x40, 0x81, 0x8, 0x3, 0x7, 0x9, 0x1, 0x8, 0x2, 0x4, 0x7ff, 0xc1, 0x7, 0xedd, 0x10, 0x3, 0x0, 0x200, 0xffff, 0x80000000, 0x7, 0xa, 0x9c, 0x0, 0x7, 0x5, 0xa53, 0x7fff, 0x2, 0x9, 0xfffffe01, 0x4, 0x6, 0x7, 0x7ff, 0x7, 0x1, 0x8, 0x1, 0x80, 0x5, 0x5, 0x1000, 0x100, 0xd, 0x7fff, 0x1, 0x2, 0x4, 0x1, 0xfffffffd, 0xe654, 0x57a, 0xfb41, 0x4, 0x8001, 0x466, 0x5, 0x4, 0x5, 0x7, 0x1, 0x40, 0xc, 0x7fffffff, 0x6, 0x152, 0xc, 0x4, 0x81, 0x8, 0x5, 0x101, 0x5, 0x5, 0x2, 0xffff0001, 0x7, 0x3, 0x7fffffff, 0x4, 0x6, 0x6, 0x9, 0x81, 0x0, 0x6, 0x10001, 0xb04, 0x7fffffff, 0x0, 0x9, 0x5, 0x8, 0x3, 0x2, 0x2, 0xd438, 0x0, 0x0, 0x159, 0x3, 0x1, 0x1ff, 0x2, 0x4fe672ea, 0x6, 0x3, 0x10, 0x77, 0x80000000, 0x2, 0x8, 0x7, 0xd, 0x9d6, 0x3, 0x1ff, 0x9, 0xfffffff3, 0x8, 0x2, 0x9, 0x80000000, 0x50, 0x27, 0x184c32f1, 0xfffffff8, 0x9, 0x9, 0x3c, 0x7, 0x7fffffff, 0x0, 0x1000, 0xf9a, 0x3, 0x9, 0x6, 0x0, 0x8, 0x474, 0x4, 0x401, 0xfff, 0x3, 0xfffffff9, 0x9, 0x7, 0x0, 0x4000000, 0x3, 0x10, 0x6, 0x0, 0x5, 0x40000000, 0x5db, 0x3ff, 0x1, 0xb10, 0x9, 0x7, 0x400, 0xffffff00, 0x74a, 0x0, 0xd65]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x5, 0xfffffffc, 0xfffffffc, 0x592, 0x1, 0x6, 0x6, 0x8, 0x2, 0x0, 0x6, 0x3, 0x7f1b, 0x7fff, 0x80000000, 0x6, 0x9, 0x7, 0x8, 0x9, 0x6, 0x8, 0xd0f, 0xfffffffe, 0x0, 0xd9, 0x1, 0x6, 0x0, 0x6, 0x5, 0x8, 0x80ed, 0x9, 0x2, 0xfffffffb, 0x7d, 0x5, 0x80000001, 0x2, 0x7, 0xf3, 0x0, 0x80000001, 0xfffffffd, 0x2a9e, 0x1ff, 0x9, 0x1, 0xcd, 0x4, 0x1000, 0xffff, 0x5, 0xc, 0x3, 0x800, 0xf4, 0x10001, 0xe2cc, 0x9a9, 0x6, 0x0, 0x3, 0x400, 0x8, 0x40, 0x1, 0x2, 0x1, 0x0, 0x3, 0x6, 0xf, 0xd, 0x8, 0xfffffffe, 0x0, 0x2, 0x9, 0xffff, 0x4, 0x176, 0x349, 0xe, 0x4, 0x10001, 0x7, 0x3, 0x1000, 0x9, 0x4, 0xa, 0x2, 0x8, 0x7, 0x6, 0xfffffffd, 0x7fffffff, 0x6, 0x800, 0x3, 0xb2e, 0x8, 0x6, 0x200, 0x9, 0x8, 0x9, 0x400, 0x5, 0x1, 0x7f1, 0x1, 0x2, 0x1, 0x5, 0x1, 0x4, 0xfffffff6, 0x2, 0xf8, 0x521, 0x1, 0xf, 0x95, 0xcdc4, 0x3d57, 0x7, 0x601c0166, 0xf9b964f0, 0x5, 0xeb46, 0x7, 0x400, 0xffffffff, 0x3, 0xa, 0xd, 0x7, 0x9, 0x800, 0x9, 0x89b, 0x5, 0x9, 0x670f, 0xf6, 0x4, 0xfdac, 0x9, 0x6, 0x3, 0x1000, 0x5, 0x9, 0xf175, 0x400, 0x7, 0xfffffffd, 0x3, 0x6, 0x4, 0xd3, 0x3, 0x3, 0x938c00, 0xa5, 0x7, 0x1, 0x1, 0x8, 0x3, 0x80000001, 0x85, 0x4, 0xffff, 0x4, 0x8c, 0x5, 0xe, 0xc, 0x1, 0x800, 0x0, 0x9, 0x0, 0x6, 0xd9, 0x2, 0x6, 0x5a, 0x12fb, 0x8, 0x7, 0x4, 0x9, 0x4, 0x503, 0x9, 0x0, 0x1, 0x2, 0xaed2, 0x800, 0xffff, 0x0, 0x5, 0x13, 0x8, 0x6, 0x1400, 0x2, 0x8, 0x1ff, 0x3d, 0x54, 0xfca, 0x10, 0x4, 0x2, 0x7, 0x2, 0x7, 0x5, 0x8000, 0x0, 0xffff0001, 0x9, 0x40, 0xf, 0x7fffffff, 0xa69, 0x3, 0x4, 0x3800, 0x3, 0x8001, 0x1, 0xe23, 0x8, 0x1, 0x5, 0x8001, 0xf, 0x3, 0x1, 0x47cd, 0x7, 0x100, 0x1, 0x2, 0x3ff, 0x0, 0x1ff]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xf4d}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]]}, {0x90, 0x6, "32747bb7d663a61ad458b0ef2e8e1375620469460e42c6cf74a1f33e16af09a032406ce136e3a803fee0e8afb2bde1bcc6fbd3f3387f8da8d7c79c802ed749d618614e7dae3902d3a20e6a3dc610a40ffba6d88d0a0f071c17c4389f9d82e9fcfe3ada74521b12567b6b5348d75a3a356ed8d6903af1ed1853f286bdac26dda8eef34e4b40a914441680d1f8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x2a64}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000900)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000900)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) 320.264908ms ago: executing program 3 (id=749): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4c003, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x44095) socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0xfffffffffffffe1b}], 0x0, 0x4498bda7e2139f37, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x200004, 0x0, 0x2, 0x0, 0x1], 0x80a0000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x102, 0x0) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5d6d}, 0x1c) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x13) sendmsg$MPTCP_PM_CMD_REMOVE(r9, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004800}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x79, &(0x7f0000000100), 0x0) 0s ago: executing program 5 (id=750): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x0, 0x8001, 0x0, 0x1, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x8, &(0x7f0000146000/0x1000)=nil) r2 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000240)={0x5, 0x50424752, 0x0, @discrete={0xfff, 0x800007}}) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x5106, 0x0, 0x1}, 0x18, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff01, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES64=r5, @ANYRESDEC=0x0, @ANYBLOB], 0x50) syz_open_dev$evdev(0x0, 0x4e1e991f, 0x200800) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_getattr(r2, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) mremap(&(0x7f0000336000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000037820b63a863000b4d67deab187b5b4ac75b12656bd0b0741c4590458d4a3eb464fa883b4c8bdad2671f0096ace0a1f40e3b3aeadaadb7f50a4ce2d76d6a7e1eac99c8f09a6b34512e94", @ANYRES16=r7, @ANYRES64], 0x2c}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f00000002c0)="d940b3509bfb5ed4b9a4aab921be7e6b0aa6aa1e30922231e326099fedcfc8e888b8222ff285cb53d9d6137a1a7c34fdca2ef343bf818fed67502ab95a7286dae717dcf0fa059ebb1e0751a267a1a3d64ad765f8afbc52646e77dd6f998392308d8b769d5b292f463cc44ec3b4b0073cf6ddddf4bf967883cd960a00fb5e4cfee5e7cfbf7da53b0265b5c54ac19bdbd87e71a9d60574fb13b91fcb783f751803a8031f1e30a80ca21ddc0c315cbaddf724c83c3e57fe1d145000c15eee6c44239a046d5e4c7b0ca28aed2502d6620bbffc22c08d37b879ad33606679011a44035ab849b166b10aa84c9671b468dbe94a77e82d71577230ab43c6e4d54a6b4631") remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x2, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kernel console output (not intermixed with test programs): aa3, cluster identity 4711 [ 189.196696][ T7397] tipc: Enabled bearer , priority 10 [ 189.220765][ T7399] netlink: 'syz.3.378': attribute type 23 has an invalid length. [ 189.453364][ T6185] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 189.905000][ T6185] usb 4-1: config 3 has an invalid descriptor of length 91, skipping remainder of the config [ 189.915495][ T6185] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 189.925367][ T6185] usb 4-1: config 3 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.941399][ T6185] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.952277][ T6185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.981405][ T6185] usb 4-1: Product: syz [ 189.990204][ T6185] usb 4-1: Manufacturer: syz [ 190.003320][ T6185] usb 4-1: SerialNumber: syz [ 190.031784][ T6185] cdc_ncm 4-1:3.0: invalid descriptor buffer length [ 190.038751][ T6185] cdc_ncm 4-1:3.0: CDC Union missing and no IAD found [ 190.046225][ T6185] cdc_ncm 4-1:3.0: bind() failure [ 190.394409][ T980] tipc: Node number set to 10136234 [ 190.412862][ T980] usb 4-1: USB disconnect, device number 18 [ 191.107994][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'. [ 191.227470][ T5955] usb 3-1: string descriptor 0 read error: -71 [ 191.250926][ T5955] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.281873][ T7418] tipc: Enabled bearer , priority 0 [ 191.298058][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.311595][ T7418] tipc: Resetting bearer [ 191.344399][ T5955] usb 3-1: config 0 descriptor?? [ 191.370860][ T5955] usb 3-1: can't set config #0, error -71 [ 191.380134][ T5955] usb 3-1: USB disconnect, device number 17 [ 191.503230][ T5866] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 191.826115][ T7429] binder: 7420:7429 ioctl c0306201 200000000080 returned -14 [ 191.880752][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 191.895344][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.930084][ T5866] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 192.011263][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.058854][ T5866] usb 2-1: config 0 descriptor?? [ 192.403463][ T5866] usbhid 2-1:0.0: can't add hid device: -71 [ 192.495514][ T5866] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 192.545684][ T5866] usb 2-1: USB disconnect, device number 18 [ 192.683374][ T7450] lo: entered promiscuous mode [ 192.689633][ T7450] tunl0: entered promiscuous mode [ 192.696386][ T7450] gre0: entered promiscuous mode [ 192.703250][ T7450] gretap0: entered promiscuous mode [ 192.711152][ T7450] erspan0: entered promiscuous mode [ 192.718408][ T7450] ip_vti0: entered promiscuous mode [ 192.725916][ T7450] ip6_vti0: entered promiscuous mode [ 192.739450][ T7450] sit0: entered promiscuous mode [ 192.746509][ T7450] ip6tnl0: entered promiscuous mode [ 192.753253][ T7450] ip6gre0: entered promiscuous mode [ 192.759998][ T7450] syz_tun: entered promiscuous mode [ 192.766797][ T7450] ip6gretap0: entered promiscuous mode [ 192.773743][ T7450] bridge0: entered promiscuous mode [ 192.781121][ T7450] vcan0: entered promiscuous mode [ 192.787403][ T7450] bond0: entered promiscuous mode [ 192.792488][ T7450] bond_slave_0: entered promiscuous mode [ 192.806667][ T7450] bond_slave_1: entered promiscuous mode [ 192.840470][ T7450] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 192.887788][ T7450] team0: entered promiscuous mode [ 192.928124][ T7450] team_slave_0: entered promiscuous mode [ 192.934316][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'. [ 192.944305][ T7452] netlink: 'syz.0.388': attribute type 15 has an invalid length. [ 192.968569][ T7450] team_slave_1: entered promiscuous mode [ 193.000443][ T7450] dummy0: entered promiscuous mode [ 193.073283][ T5953] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 193.083412][ T7450] nlmon0: entered promiscuous mode [ 193.283319][ T5953] usb 4-1: Using ep0 maxpacket: 32 [ 193.297616][ T5953] usb 4-1: unable to get BOS descriptor or descriptor too short [ 193.310209][ T7450] caif0: entered promiscuous mode [ 193.310485][ T5953] usb 4-1: config 4 has an invalid interface number: 239 but max is 0 [ 193.326492][ T5953] usb 4-1: config 4 has no interface number 0 [ 193.337849][ T5953] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=48.59 [ 193.347522][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.365156][ T5953] usb 4-1: Product: syz [ 193.411052][ T7450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.416271][ T5953] usb 4-1: Manufacturer: syz [ 193.484006][ T5953] usb 4-1: SerialNumber: syz [ 193.575111][ T7452] vxlan0: entered promiscuous mode [ 194.179898][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.189638][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.497711][ T7461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.603551][ T7461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.687478][ T486] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.711767][ T486] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.182545][ T486] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.275169][ T5953] usb 4-1: MBOX3: Invalid descriptor size=18. [ 195.324583][ T5953] usb 4-1: USB disconnect, device number 19 [ 195.343577][ T486] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.425003][ T7466] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 195.449640][ T7466] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 195.483011][ T7463] bridge0: port 3(batadv1) entered blocking state [ 195.500443][ T7463] bridge0: port 3(batadv1) entered disabled state [ 195.509928][ T7463] batadv1: entered allmulticast mode [ 195.526856][ T7463] batadv1: entered promiscuous mode [ 195.709812][ T7479] overlayfs: missing 'lowerdir' [ 195.803319][ T5953] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 195.992207][ T1326] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 195.995111][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 196.002391][ T1326] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 196.087199][ T5953] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.112339][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.172033][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.201831][ T5866] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 196.228014][ T5953] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 196.267112][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.292125][ T5953] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 196.302309][ T5953] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 196.316177][ T5953] usb 4-1: Manufacturer: syz [ 196.323735][ T5953] usb 4-1: config 0 descriptor?? [ 196.390208][ T5866] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 196.431138][ T5866] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 196.444432][ T5866] usb 3-1: can't read configurations, error -61 [ 196.541133][ T7474] netlink: 132 bytes leftover after parsing attributes in process `syz.3.394'. [ 196.625437][ T5866] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 196.793217][ T5953] rc_core: IR keymap rc-hauppauge not found [ 196.803514][ T5953] Registered IR keymap rc-empty [ 196.834515][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 196.866962][ T5866] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 196.883449][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 196.887579][ T5866] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 196.913731][ T5866] usb 3-1: can't read configurations, error -61 [ 196.933326][ T5866] usb usb3-port1: attempt power cycle [ 196.941573][ T5953] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 197.213378][ T5953] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 197.313168][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 197.333321][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 197.368636][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 197.383239][ T5866] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 197.424473][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 197.429674][ T5866] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 197.431339][ T5866] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 197.431373][ T5866] usb 3-1: can't read configurations, error -61 [ 197.445155][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 197.493248][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 197.513867][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 197.543249][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 197.553373][ T5866] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 197.593694][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 197.594868][ T5866] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 197.623348][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 197.662743][ T5866] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 197.675539][ T5953] mceusb 4-1:0.0: Registered 腎 with mce emulator interface version 1 [ 197.679693][ T5866] usb 3-1: can't read configurations, error -61 [ 197.707711][ T5866] usb usb3-port1: unable to enumerate USB device [ 197.863346][ T5953] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 197.951994][ T5953] usb 4-1: USB disconnect, device number 20 [ 198.404018][ T7510] netlink: 'syz.0.405': attribute type 10 has an invalid length. [ 198.412357][ T7510] bond0: (slave wlan1): Opening slave failed [ 198.428821][ T980] usb 5-1: USB disconnect, device number 14 [ 198.436251][ T7510] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 198.455764][ T7510] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 198.617766][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.671901][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.742032][ T5866] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 198.936951][ T5866] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 198.947280][ T5866] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 198.977775][ T5866] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.998308][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.016135][ T5866] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 199.027745][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.038522][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.090845][ T5866] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 199.098851][ T5866] usb 4-1: invalid MIDI out EP 0 [ 199.123297][ T5953] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 199.157195][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.259844][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.333387][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 199.343879][ T5866] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 199.440579][ T5953] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 199.467129][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.477034][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.478200][ T5953] usb 2-1: Product: syz [ 199.553231][ T5953] usb 2-1: Manufacturer: syz [ 199.557887][ T5953] usb 2-1: SerialNumber: syz [ 199.567181][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.588214][ T5953] usb 2-1: config 0 descriptor?? [ 199.618673][ T5953] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 199.883059][ T980] usb 4-1: USB disconnect, device number 21 [ 200.238229][ T59] bridge_slave_1: left allmulticast mode [ 200.346984][ T59] bridge_slave_1: left promiscuous mode [ 200.385488][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.498932][ T59] bridge_slave_0: left allmulticast mode [ 200.570140][ T59] bridge_slave_0: left promiscuous mode [ 200.658820][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.667878][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.757171][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.808569][ T7529] netlink: 44 bytes leftover after parsing attributes in process `syz.2.411'. [ 200.837777][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'. [ 200.849458][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'. [ 200.867902][ T7529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.411'. [ 200.943422][ T5953] gspca_sonixj: reg_w1 err -110 [ 200.983218][ T5953] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 201.510421][ T5872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 201.588358][ T5872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 201.598385][ T5872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 201.635011][ T5872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 201.797809][ T5953] usb 2-1: USB disconnect, device number 19 [ 201.808709][ T5872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.347264][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.358068][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.368217][ T59] bond0 (unregistering): Released all slaves [ 202.386796][ T7545] tipc: Enabling of bearer rejected, already enabled [ 202.513366][ T59] tipc: Left network mode [ 203.073236][ T5953] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 203.081268][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 203.221070][ T7584] sctp: [Deprecated]: syz.3.420 (pid 7584) Use of int in maxseg socket option. [ 203.221070][ T7584] Use struct sctp_assoc_value instead [ 203.235715][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 203.245518][ T24] usb 3-1: config 127 has an invalid interface number: 23 but max is 3 [ 203.254155][ T24] usb 3-1: config 127 has an invalid interface number: 17 but max is 3 [ 203.262435][ T24] usb 3-1: config 127 has an invalid interface number: 71 but max is 3 [ 203.271854][ T24] usb 3-1: config 127 has an invalid interface number: 90 but max is 3 [ 203.281469][ T24] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 203.291867][ T24] usb 3-1: config 127 has no interface number 0 [ 203.292005][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.310143][ T24] usb 3-1: config 127 has no interface number 1 [ 203.316631][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.330613][ T24] usb 3-1: config 127 has no interface number 2 [ 203.337218][ T24] usb 3-1: config 127 has no interface number 3 [ 203.344118][ T5953] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 203.353505][ T24] usb 3-1: config 127 interface 23 altsetting 64 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 203.365450][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.374108][ T24] usb 3-1: config 127 interface 17 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 203.464760][ T5953] usb 1-1: config 0 descriptor?? [ 203.513324][ T24] usb 3-1: config 127 interface 17 altsetting 2 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 203.557460][ T24] usb 3-1: config 127 interface 17 altsetting 2 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 203.583440][ T24] usb 3-1: config 127 interface 17 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 203.593545][ T59] hsr_slave_0: left promiscuous mode [ 203.613231][ T59] hsr_slave_1: left promiscuous mode [ 203.621438][ T24] usb 3-1: config 127 interface 17 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 203.624478][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.641054][ T24] usb 3-1: config 127 interface 17 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 203.656900][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.657275][ T24] usb 3-1: config 127 interface 17 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 203.684641][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.689595][ T24] usb 3-1: config 127 interface 17 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 203.692045][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.784106][ T24] usb 3-1: config 127 interface 17 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 203.804516][ T59] veth1_to_batadv: left promiscuous mode [ 203.810465][ T59] veth1_macvtap: left promiscuous mode [ 203.811430][ T24] usb 3-1: config 127 interface 17 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 203.858335][ T24] usb 3-1: config 127 interface 17 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 203.859896][ T59] veth0_macvtap: left promiscuous mode [ 203.923196][ T5872] Bluetooth: hci4: command tx timeout [ 203.935551][ T5953] samsung 0003:0419:0600.0005: unknown main item tag 0x3 [ 203.956942][ T5953] samsung 0003:0419:0600.0005: unknown main item tag 0x0 [ 203.978510][ T24] usb 3-1: config 127 interface 17 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 203.991535][ T5953] samsung 0003:0419:0600.0005: unknown main item tag 0x3 [ 204.013305][ T24] usb 3-1: config 127 interface 71 altsetting 13 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 204.026347][ T5953] samsung 0003:0419:0600.0005: hidraw0: USB HID v0.80 Device [HID 0419:0600] on usb-dummy_hcd.0-1/input0 [ 204.039101][ T24] usb 3-1: config 127 interface 71 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 204.055577][ T24] usb 3-1: config 127 interface 71 altsetting 13 has a duplicate endpoint with address 0x9, skipping [ 204.068914][ T24] usb 3-1: config 127 interface 71 altsetting 13 has a duplicate endpoint with address 0xD, skipping [ 204.080146][ T24] usb 3-1: config 127 interface 71 altsetting 13 has a duplicate endpoint with address 0xB, skipping [ 204.091331][ T24] usb 3-1: config 127 interface 71 altsetting 13 has a duplicate endpoint with address 0xC, skipping [ 204.102595][ T24] usb 3-1: config 127 interface 71 altsetting 13 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 204.114083][ T24] usb 3-1: config 127 interface 71 altsetting 13 has a duplicate endpoint with address 0x3, skipping [ 204.126196][ T24] usb 3-1: config 127 interface 71 altsetting 13 has a duplicate endpoint with address 0x3, skipping [ 204.198000][ T24] usb 3-1: config 127 interface 90 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 204.230639][ T24] usb 3-1: config 127 interface 90 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 204.272168][ T24] usb 3-1: config 127 interface 90 altsetting 7 endpoint 0x7 has an invalid bInterval 128, changing to 7 [ 204.318877][ T24] usb 3-1: config 127 interface 90 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 204.351963][ T24] usb 3-1: config 127 interface 90 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 204.374964][ T24] usb 3-1: config 127 interface 90 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 204.425449][ T24] usb 3-1: config 127 interface 90 altsetting 7 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 204.446302][ T24] usb 3-1: config 127 interface 90 altsetting 7 endpoint 0x81 has invalid maxpacket 19716, setting to 1024 [ 204.480893][ T24] usb 3-1: config 127 interface 90 altsetting 7 bulk endpoint 0x81 has invalid maxpacket 1024 [ 204.503263][ T24] usb 3-1: config 127 interface 90 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 204.533179][ T24] usb 3-1: config 127 interface 90 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 204.549383][ T24] usb 3-1: config 127 interface 90 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 204.581617][ T24] usb 3-1: config 127 interface 90 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 204.592882][ T24] usb 3-1: config 127 interface 90 altsetting 7 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 204.616351][ T24] usb 3-1: config 127 interface 23 has no altsetting 0 [ 204.624488][ T24] usb 3-1: config 127 interface 17 has no altsetting 0 [ 204.631370][ T24] usb 3-1: config 127 interface 71 has no altsetting 0 [ 204.639452][ T24] usb 3-1: config 127 interface 90 has no altsetting 0 [ 204.649228][ T24] usb 3-1: New USB device found, idVendor=1bc7, idProduct=10d3, bcdDevice=8a.c9 [ 204.658911][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.671734][ T24] usb 3-1: Product: ⠉ [ 204.676374][ T24] usb 3-1: Manufacturer: ఇ [ 204.686428][ T24] usb 3-1: SerialNumber: 쎷ᄳ譽ᨐ鱞ퟡ쿸㍠ᠦ⌥蓜奻ꗼ깤⩫倻嫰ϩᙍ㊳嶺謺꩓柝隌ᢺﳭ夾벏拖렐㽨眗멖乶紳ી鉛镴ꙁꖵ鮠祟䡵⢪牥嵠.柼钋룿䓭爯ꍤ씆薌㽿줸Ⱓ앑蹪撙⋇构㓽䘜吺ᕺ⠸藟⭈㸀좳⍬屴뾡驥䜸ᦶ猈譐懹얪ᒵ拏ꤣ稬蹐렱꫑Տ拰쾊⮋킽걆ꭐೊ夊굉 [ 204.953580][ T24] option 3-1:127.23: GSM modem (1-port) converter detected [ 205.018079][ T5866] usb 1-1: USB disconnect, device number 18 [ 205.034945][ T24] usb 3-1: USB disconnect, device number 22 [ 205.074598][ T24] option 3-1:127.23: device disconnected [ 205.091020][ T59] team0 (unregistering): Port device team_slave_1 removed [ 205.152921][ T59] team0 (unregistering): Port device team_slave_0 removed [ 205.463181][ T5866] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 205.638471][ T5866] usb 1-1: unable to get BOS descriptor or descriptor too short [ 205.672969][ T7558] chnl_net:caif_netlink_parms(): no params data found [ 205.680522][ T5866] usb 1-1: config 1 has an invalid interface number: 106 but max is 0 [ 205.680552][ T5866] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 205.680574][ T5866] usb 1-1: config 1 has no interface number 0 [ 205.680615][ T5866] usb 1-1: config 1 interface 106 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 205.680647][ T5866] usb 1-1: config 1 interface 106 has no altsetting 0 [ 205.686610][ T5866] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 205.888250][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.959547][ T5866] usb 1-1: Product: syz [ 205.979732][ T5866] usb 1-1: Manufacturer: syz [ 205.993456][ T5872] Bluetooth: hci4: command tx timeout [ 206.105694][ T5866] usb 1-1: SerialNumber: syz [ 206.205301][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 206.323302][ T5866] usb 1-1: can't set config #1, error -71 [ 206.366602][ T5866] usb 1-1: USB disconnect, device number 19 [ 206.408230][ T7558] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.438241][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.459652][ T7558] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.467237][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.467299][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 206.543531][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.555055][ T24] usb 3-1: config 0 descriptor?? [ 206.567244][ T7558] bridge_slave_0: entered allmulticast mode [ 206.575414][ T7558] bridge_slave_0: entered promiscuous mode [ 206.607092][ T7558] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.629568][ T7558] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.639891][ T7558] bridge_slave_1: entered allmulticast mode [ 206.655340][ T7558] bridge_slave_1: entered promiscuous mode [ 206.782013][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 206.791987][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 206.843576][ T24] usb 3-1: USB disconnect, device number 23 [ 206.879050][ T7558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.934100][ T7558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.474674][ T7558] team0: Port device team_slave_0 added [ 207.483799][ T7558] team0: Port device team_slave_1 added [ 207.533190][ T1212] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 207.713456][ T1212] usb 2-1: Using ep0 maxpacket: 16 [ 207.769551][ T1212] usb 2-1: unable to get BOS descriptor or descriptor too short [ 207.779274][ T1212] usb 2-1: config 3 has an invalid interface number: 216 but max is 0 [ 207.825634][ T1212] usb 2-1: config 3 has no interface number 0 [ 207.852477][ T1212] usb 2-1: config 3 interface 216 has no altsetting 0 [ 207.877796][ T7638] netlink: 44 bytes leftover after parsing attributes in process `syz.0.426'. [ 207.888444][ T7558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.896659][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 207.981822][ T7558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.018197][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 208.027158][ T7638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.426'. [ 208.041218][ T7558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.050570][ T1212] usb 2-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=de.a6 [ 208.075752][ T5872] Bluetooth: hci4: command tx timeout [ 208.091943][ T7558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.099334][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.112389][ T1212] usb 2-1: Product: syz [ 208.116702][ T7558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.143628][ T7558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.160015][ T1212] usb 2-1: Manufacturer: syz [ 208.209401][ T1212] usb 2-1: SerialNumber: syz [ 208.369167][ T7657] tipc: Enabling of bearer rejected, already enabled [ 208.426259][ T7558] hsr_slave_0: entered promiscuous mode [ 208.450756][ T7558] hsr_slave_1: entered promiscuous mode [ 208.490362][ T7655] FAULT_INJECTION: forcing a failure. [ 208.490362][ T7655] name failslab, interval 1, probability 0, space 0, times 0 [ 208.516142][ T1212] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.216/input/input8 [ 208.541251][ T7655] CPU: 0 UID: 0 PID: 7655 Comm: syz.0.429 Not tainted syzkaller #0 PREEMPT(full) [ 208.541276][ T7655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 208.541288][ T7655] Call Trace: [ 208.541296][ T7655] [ 208.541304][ T7655] dump_stack_lvl+0x189/0x250 [ 208.541333][ T7655] ? __pfx____ratelimit+0x10/0x10 [ 208.541352][ T7655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.541376][ T7655] ? __pfx__printk+0x10/0x10 [ 208.541409][ T7655] ? __pfx___might_resched+0x10/0x10 [ 208.541428][ T7655] ? fs_reclaim_acquire+0x7d/0x100 [ 208.541451][ T7655] should_fail_ex+0x414/0x560 [ 208.541489][ T7655] should_failslab+0xa8/0x100 [ 208.541521][ T7655] __kmalloc_noprof+0xcb/0x4f0 [ 208.541546][ T7655] ? kfree+0x4d/0x440 [ 208.541567][ T7655] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 208.541593][ T7655] tomoyo_realpath_from_path+0xe3/0x5d0 [ 208.541615][ T7655] ? tomoyo_domain+0xd9/0x130 [ 208.541642][ T7655] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 208.541671][ T7655] tomoyo_path_number_perm+0x1e8/0x5a0 [ 208.541703][ T7655] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 208.541749][ T7655] ? __lock_acquire+0xab9/0xd20 [ 208.541799][ T7655] ? __fget_files+0x2a/0x420 [ 208.541819][ T7655] ? __fget_files+0x2a/0x420 [ 208.541835][ T7655] ? __fget_files+0x3a0/0x420 [ 208.541851][ T7655] ? __fget_files+0x2a/0x420 [ 208.541871][ T7655] security_file_ioctl+0xcb/0x2d0 [ 208.541901][ T7655] __se_sys_ioctl+0x47/0x170 [ 208.541928][ T7655] do_syscall_64+0xfa/0x3b0 [ 208.541949][ T7655] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.541968][ T7655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.541987][ T7655] ? clear_bhb_loop+0x60/0xb0 [ 208.542012][ T7655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.542030][ T7655] RIP: 0033:0x7f375678eba9 [ 208.542048][ T7655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.542076][ T7655] RSP: 002b:00007f37576bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.542096][ T7655] RAX: ffffffffffffffda RBX: 00007f37569d5fa0 RCX: 00007f375678eba9 [ 208.542110][ T7655] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 208.542122][ T7655] RBP: 00007f37576bf090 R08: 0000000000000000 R09: 0000000000000000 [ 208.542134][ T7655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.542144][ T7655] R13: 00007f37569d6038 R14: 00007f37569d5fa0 R15: 00007f3756affa28 [ 208.542190][ T7655] [ 208.544321][ T5220] bcm5974 2-1:3.216: could not read from device [ 208.554141][ T7655] ERROR: Out of memory at tomoyo_realpath_from_path. [ 208.823651][ T1212] usb 2-1: USB disconnect, device number 20 [ 208.839961][ T5220] bcm5974 2-1:3.216: could not read from device [ 208.998263][ T7662] netlink: 56 bytes leftover after parsing attributes in process `syz.3.430'. [ 209.008178][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.430'. [ 209.022394][ T7662] netlink: 31 bytes leftover after parsing attributes in process `syz.3.430'. [ 209.031681][ T7662] netlink: 'syz.3.430': attribute type 2 has an invalid length. [ 209.040789][ T7662] netlink: 31 bytes leftover after parsing attributes in process `syz.3.430'. [ 209.648380][ T7558] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 209.655576][ T5866] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 209.726887][ T7558] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 209.760777][ T7558] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 209.844559][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 209.909086][ T7558] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 209.930057][ T5866] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 209.965778][ T5866] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 210.056939][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.083211][ T5866] usb 4-1: Product: syz [ 210.087690][ T5866] usb 4-1: Manufacturer: syz [ 210.092291][ T5866] usb 4-1: SerialNumber: syz [ 210.112428][ T5866] usb 4-1: config 0 descriptor?? [ 210.153208][ T5868] Bluetooth: hci4: command tx timeout [ 210.163888][ T5866] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 210.186797][ T5866] usb 4-1: setting power ON [ 210.206984][ T5866] dvb-usb: bulk message failed: -22 (2/0) [ 210.235624][ T5866] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.308180][ T5866] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 210.333172][ T5866] usb 4-1: media controller created [ 210.422589][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.548759][ T5866] usb 4-1: selecting invalid altsetting 6 [ 210.581091][ T7691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.583464][ T5866] usb 4-1: digital interface selection failed (-22) [ 210.663190][ T5866] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 210.680876][ T7558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.727030][ T7696] dvb-usb: bulk message failed: -22 (3/0) [ 210.742022][ T7696] cxusb: i2c wr: len=8192 is too big! [ 210.742022][ T7696] [ 210.770812][ T5866] usb 4-1: setting power OFF [ 210.785059][ T7558] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.793034][ T5866] dvb-usb: bulk message failed: -22 (2/0) [ 210.839948][ T5866] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 210.848706][ T7698] dvb-usb: bulk message failed: -22 (5/0) [ 210.869859][ T5866] (NULL device *): no alternate interface [ 210.898950][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.912033][ T486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.218607][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.225753][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.498124][ T7558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.596651][ T5868] Bluetooth: hci0: command 0x0406 tx timeout [ 211.602735][ T5868] Bluetooth: hci1: command 0x0406 tx timeout [ 211.608779][ T7558] veth0_vlan: entered promiscuous mode [ 211.615399][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 211.621488][ T5882] Bluetooth: hci2: command 0x0406 tx timeout [ 211.624762][ T7558] veth1_vlan: entered promiscuous mode [ 211.807608][ T5953] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 211.821729][ T7721] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073290121217) [ 211.887269][ T7558] veth0_macvtap: entered promiscuous mode [ 211.905256][ T7558] veth1_macvtap: entered promiscuous mode [ 211.993484][ T5953] usb 3-1: Using ep0 maxpacket: 16 [ 212.000273][ T5953] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.009750][ T7558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.020754][ T5953] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 212.043838][ T5953] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 212.077366][ T5953] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.077612][ T7558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.094512][ T5953] usb 3-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 212.105753][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.118419][ T5953] usb 3-1: config 0 descriptor?? [ 212.163390][ T43] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 212.177682][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.328897][ T1326] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.337888][ T43] usb 1-1: device descriptor read/64, error -71 [ 212.346523][ T1326] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.413387][ T5866] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 212.466303][ T5866] usb 4-1: USB disconnect, device number 22 [ 212.487192][ T1326] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.593335][ T43] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 212.628157][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.444'. [ 212.735433][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.444'. [ 212.773495][ T43] usb 1-1: device descriptor read/64, error -71 [ 212.916625][ T5953] usbhid 3-1:0.0: can't add hid device: -71 [ 212.922977][ T43] usb usb1-port1: attempt power cycle [ 212.940860][ T5953] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 212.987888][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.037394][ T5953] usb 3-1: USB disconnect, device number 24 [ 213.046836][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.200093][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.218558][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.343543][ T43] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 213.414887][ T43] usb 1-1: device descriptor read/8, error -71 [ 213.723334][ T43] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 213.814811][ T43] usb 1-1: device descriptor read/8, error -71 [ 213.925716][ T43] usb usb1-port1: unable to enumerate USB device [ 214.043743][ T5928] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 214.173295][ T5928] usb 6-1: device descriptor read/64, error -71 [ 214.179828][ T43] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 214.313382][ T43] usb 2-1: device descriptor read/64, error -71 [ 214.443874][ T5928] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 214.573365][ T43] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 214.596975][ T5928] usb 6-1: device descriptor read/64, error -71 [ 214.714840][ T5928] usb usb6-port1: attempt power cycle [ 214.720362][ T43] usb 2-1: device descriptor read/64, error -71 [ 214.837981][ T7759] tipc: Enabling of bearer rejected, already enabled [ 214.856670][ T43] usb usb2-port1: attempt power cycle [ 214.867046][ T7759] FAULT_INJECTION: forcing a failure. [ 214.867046][ T7759] name failslab, interval 1, probability 0, space 0, times 0 [ 214.910150][ T7759] CPU: 0 UID: 0 PID: 7759 Comm: syz.3.450 Not tainted syzkaller #0 PREEMPT(full) [ 214.910180][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 214.910194][ T7759] Call Trace: [ 214.910202][ T7759] [ 214.910212][ T7759] dump_stack_lvl+0x189/0x250 [ 214.910244][ T7759] ? __pfx____ratelimit+0x10/0x10 [ 214.910267][ T7759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.910293][ T7759] ? __pfx__printk+0x10/0x10 [ 214.910326][ T7759] ? __pfx___might_resched+0x10/0x10 [ 214.910348][ T7759] ? fs_reclaim_acquire+0x7d/0x100 [ 214.910399][ T7759] should_fail_ex+0x414/0x560 [ 214.910437][ T7759] should_failslab+0xa8/0x100 [ 214.910471][ T7759] __kmalloc_noprof+0xcb/0x4f0 [ 214.910499][ T7759] ? tomoyo_encode+0x28b/0x550 [ 214.910526][ T7759] tomoyo_encode+0x28b/0x550 [ 214.910556][ T7759] tomoyo_realpath_from_path+0x58d/0x5d0 [ 214.910581][ T7759] ? tomoyo_domain+0xd9/0x130 [ 214.910611][ T7759] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 214.910644][ T7759] tomoyo_path_number_perm+0x1e8/0x5a0 [ 214.910679][ T7759] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 214.910730][ T7759] ? __lock_acquire+0xab9/0xd20 [ 214.910785][ T7759] ? __fget_files+0x2a/0x420 [ 214.910808][ T7759] ? __fget_files+0x2a/0x420 [ 214.910824][ T7759] ? __fget_files+0x3a0/0x420 [ 214.910842][ T7759] ? __fget_files+0x2a/0x420 [ 214.910865][ T7759] security_file_ioctl+0xcb/0x2d0 [ 214.910898][ T7759] __se_sys_ioctl+0x47/0x170 [ 214.910928][ T7759] do_syscall_64+0xfa/0x3b0 [ 214.910950][ T7759] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.910972][ T7759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.910994][ T7759] ? clear_bhb_loop+0x60/0xb0 [ 214.911021][ T7759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.911041][ T7759] RIP: 0033:0x7fcf5ad8eba9 [ 214.911069][ T7759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.911088][ T7759] RSP: 002b:00007fcf5bc78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.911111][ T7759] RAX: ffffffffffffffda RBX: 00007fcf5afd5fa0 RCX: 00007fcf5ad8eba9 [ 214.911127][ T7759] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 214.911153][ T7759] RBP: 00007fcf5bc78090 R08: 0000000000000000 R09: 0000000000000000 [ 214.911166][ T7759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.911189][ T7759] R13: 00007fcf5afd6038 R14: 00007fcf5afd5fa0 R15: 00007fcf5b0ffa28 [ 214.911221][ T7759] [ 214.911252][ T7759] ERROR: Out of memory at tomoyo_realpath_from_path. [ 215.113862][ T5928] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 215.233405][ T43] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 215.246593][ T5928] usb 6-1: device descriptor read/8, error -71 [ 215.266072][ T43] usb 2-1: device descriptor read/8, error -71 [ 215.483403][ T5928] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 215.513892][ T5928] usb 6-1: device descriptor read/8, error -71 [ 215.539899][ T7777] overlayfs: missing 'lowerdir' [ 215.544875][ T43] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 215.602662][ T43] usb 2-1: device descriptor read/8, error -71 [ 215.623586][ T5928] usb usb6-port1: unable to enumerate USB device [ 215.835427][ T43] usb usb2-port1: unable to enumerate USB device [ 217.448965][ T7795] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 217.490568][ T7795] netlink: 32 bytes leftover after parsing attributes in process `syz.0.458'. [ 217.535226][ T7795] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 217.554237][ T7802] netlink: 32 bytes leftover after parsing attributes in process `syz.0.458'. [ 217.713377][ T43] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 217.753510][ T5928] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 217.875737][ T43] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 217.895248][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.920811][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 217.959107][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 217.971291][ T43] usb 2-1: config 0 descriptor?? [ 218.004141][ T43] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 218.015381][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 218.026668][ T7813] tipc: Enabling of bearer rejected, already enabled [ 218.037099][ T5928] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 218.058239][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.066880][ T5928] usb 4-1: Product: syz [ 218.071359][ T5928] usb 4-1: Manufacturer: syz [ 218.077841][ T5928] usb 4-1: SerialNumber: syz [ 218.093912][ T5928] usb 4-1: config 0 descriptor?? [ 218.239311][ T7799] bridge_slave_0: left allmulticast mode [ 218.249863][ T7799] bridge_slave_0: left promiscuous mode [ 218.262582][ T7799] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.446896][ T7824] program syz.1.460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.457715][ T7824] netlink: 'syz.1.460': attribute type 11 has an invalid length. [ 218.504895][ T7799] bridge_slave_1: left allmulticast mode [ 218.561527][ T7799] bridge_slave_1: left promiscuous mode [ 218.569082][ T7799] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.603348][ T7799] bond0: (slave bond_slave_0): Releasing backup interface [ 218.642890][ T7799] bond0: (slave bond_slave_1): Releasing backup interface [ 218.670170][ T7821] netlink: 44 bytes leftover after parsing attributes in process `syz.5.466'. [ 218.679147][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.466'. [ 218.688109][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.466'. [ 218.697088][ T7821] netlink: 16 bytes leftover after parsing attributes in process `syz.5.466'. [ 218.759261][ T7799] team0: Port device team_slave_0 removed [ 218.789881][ T7799] team0: Port device team_slave_1 removed [ 218.815172][ T7799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.822787][ T7799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.839492][ T5928] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 218.852359][ T7799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.860545][ T7799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.902495][ T7828] netlink: 'syz.2.467': attribute type 1 has an invalid length. [ 218.996967][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.468'. [ 219.100627][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.136960][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.197335][ T43] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 219.208167][ T43] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 219.280695][ T43] usb 4-1: USB disconnect, device number 23 [ 219.554368][ T7844] loop5: detected capacity change from 0 to 7 [ 219.567454][ T7844] Dev loop5: unable to read RDB block 7 [ 219.575201][ T1212] usb 2-1: USB disconnect, device number 25 [ 219.575348][ T7844] loop5: unable to read partition table [ 219.587515][ T7844] loop5: partition table beyond EOD, truncated [ 219.602776][ T7844] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 221.286786][ T7874] tipc: Enabling of bearer rejected, already enabled [ 221.312923][ T7874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.479'. [ 222.365863][ T7885] netlink: 44 bytes leftover after parsing attributes in process `syz.5.480'. [ 222.374957][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.480'. [ 222.541585][ T7896] loop6: detected capacity change from 0 to 524287999 [ 223.115729][ T5921] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 223.189274][ T7911] loop5: detected capacity change from 0 to 7 [ 223.209471][ T7911] Dev loop5: unable to read RDB block 7 [ 223.240288][ T7911] loop5: unable to read partition table [ 223.251082][ T7911] loop5: partition table beyond EOD, truncated [ 223.260587][ T7911] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 223.286372][ T1212] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 223.303631][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 223.314946][ T5921] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 223.345746][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.375485][ T5921] usb 2-1: config 0 descriptor?? [ 223.403313][ T5866] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 223.406371][ T5921] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 223.463202][ T1212] usb 6-1: Using ep0 maxpacket: 32 [ 223.473975][ T1212] usb 6-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 223.483376][ T5928] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 223.484009][ T1212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.500644][ T1212] usb 6-1: Product: syz [ 223.505097][ T1212] usb 6-1: Manufacturer: syz [ 223.509709][ T1212] usb 6-1: SerialNumber: syz [ 223.517623][ T1212] usb 6-1: config 0 descriptor?? [ 223.574111][ T5866] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 223.594615][ T5866] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.613287][ T5866] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.633161][ T5866] usb 4-1: config 0 interface 0 has no altsetting 0 [ 223.652386][ T5866] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.662716][ T5866] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.667447][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 223.685047][ T5866] usb 4-1: config 0 interface 0 has no altsetting 0 [ 223.686971][ T5866] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.709225][ T5866] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.728287][ T7907] loop6: detected capacity change from 0 to 7 [ 223.733289][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 223.752612][ T7907] Dev loop6: unable to read RDB block 7 [ 223.763912][ T7907] loop6: unable to read partition table [ 223.766385][ T5866] usb 4-1: config 0 interface 0 has no altsetting 0 [ 223.770567][ T7907] loop6: partition table beyond EOD, [ 223.776565][ T6185] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 223.796131][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 223.802860][ T7907] truncated [ 223.811648][ T5866] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.826125][ T7907] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 223.839541][ T5866] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.858685][ T5866] usb 4-1: config 0 interface 0 has no altsetting 0 [ 223.864557][ T5928] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 223.876216][ T1212] pegasus 6-1:0.0: probe with driver pegasus failed with error -71 [ 223.897153][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.897308][ T5866] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.923328][ T1212] usb 6-1: USB disconnect, device number 6 [ 223.941535][ T5928] usb 3-1: Product: syz [ 223.949677][ T5928] usb 3-1: Manufacturer: syz [ 223.958232][ T6185] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 223.966044][ T5928] usb 3-1: SerialNumber: syz [ 223.986808][ T6185] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 223.997139][ T5866] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.011832][ T5928] usb 3-1: config 0 descriptor?? [ 224.014502][ T5866] usb 4-1: config 0 interface 0 has no altsetting 0 [ 224.026320][ T5921] gspca_sonixj: reg_r err -71 [ 224.031088][ T5921] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 224.033182][ T6185] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 224.063492][ T5866] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.065174][ T5921] usb 2-1: USB disconnect, device number 26 [ 224.072532][ T6185] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 224.096018][ T5866] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.112498][ T5866] usb 4-1: config 0 interface 0 has no altsetting 0 [ 224.125462][ T5866] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.134896][ T6185] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 224.144798][ T5866] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.160664][ T6185] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 224.170615][ T5866] usb 4-1: config 0 interface 0 has no altsetting 0 [ 224.180575][ T5866] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.189844][ T5866] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.190157][ T6185] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 224.211400][ T5866] usb 4-1: config 0 interface 0 has no altsetting 0 [ 224.224545][ T6185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.232876][ T6185] usb 1-1: Product: syz [ 224.239739][ T6185] usb 1-1: Manufacturer: syz [ 224.245485][ T5866] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 224.254589][ T5866] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 224.263052][ T6185] usb 1-1: SerialNumber: syz [ 224.269535][ T5866] usb 4-1: Product: syz [ 224.273851][ T5866] usb 4-1: Manufacturer: syz [ 224.278476][ T5866] usb 4-1: SerialNumber: syz [ 224.284272][ T6185] usb 1-1: config 0 descriptor?? [ 224.295691][ T5866] usb 4-1: config 0 descriptor?? [ 224.308146][ T6185] ti_usb_3410_5052 1-1:0.0: TI USB 5052 2 port adapter converter detected [ 224.323058][ T5866] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 224.330746][ T6185] ti_usb_3410_5052 1-1:0.0: missing endpoints [ 224.518212][ T6185] usb 4-1: USB disconnect, device number 24 [ 224.552748][ T6185] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 224.568452][ T5866] usb 1-1: USB disconnect, device number 24 [ 224.685629][ T5928] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 224.951527][ T7937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.962913][ T7937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.971021][ T5954] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 225.101639][ T5921] usb 3-1: USB disconnect, device number 25 [ 225.113255][ T5954] usb 6-1: device descriptor read/64, error -71 [ 225.355973][ T5954] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 225.493180][ T5954] usb 6-1: device descriptor read/64, error -71 [ 225.539027][ T5928] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 225.603540][ T5954] usb usb6-port1: attempt power cycle [ 225.694748][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 225.708154][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 225.736020][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 225.767072][ T5928] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 225.777735][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.790702][ T5928] usb 1-1: Product: syz [ 225.797217][ T5928] usb 1-1: Manufacturer: syz [ 225.802114][ T5928] usb 1-1: SerialNumber: syz [ 225.819301][ T5928] usb 1-1: config 0 descriptor?? [ 225.853860][ T5928] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 225.894934][ T5928] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 225.943246][ T5954] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 225.969676][ T5954] usb 6-1: device descriptor read/8, error -71 [ 226.146074][ T5928] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 226.173239][ T5928] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 226.230700][ T5954] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 226.271399][ T5928] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 226.288205][ T5928] em28xx 1-1:0.0: No AC97 audio processor [ 226.313911][ T5954] usb 6-1: device descriptor read/8, error -71 [ 226.341438][ T5928] usb 1-1: USB disconnect, device number 25 [ 226.364234][ T5928] em28xx 1-1:0.0: Disconnecting em28xx [ 226.435472][ T5928] em28xx 1-1:0.0: Freeing device [ 226.522683][ T5954] usb usb6-port1: unable to enumerate USB device [ 226.672230][ T7982] __nla_validate_parse: 2 callbacks suppressed [ 226.672249][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.499'. [ 227.192838][ T7992] netlink: 44 bytes leftover after parsing attributes in process `syz.3.497'. [ 227.212520][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 227.221978][ T5954] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 227.240020][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 227.249233][ T5928] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 227.282479][ T7992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.497'. [ 227.383403][ T5954] usb 1-1: Using ep0 maxpacket: 32 [ 227.399412][ T5954] usb 1-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 227.408569][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 227.419491][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.430019][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.462012][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.473537][ T5954] usb 1-1: Product: syz [ 227.478133][ T5954] usb 1-1: Manufacturer: syz [ 227.482752][ T5954] usb 1-1: SerialNumber: syz [ 227.487599][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 227.500644][ T5954] usb 1-1: config 0 descriptor?? [ 227.507892][ T5928] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 227.524453][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.542630][ T5928] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 227.557472][ T5928] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 227.597880][ T5928] usb 2-1: Manufacturer: syz [ 227.618793][ T5928] usb 2-1: config 0 descriptor?? [ 227.731857][ T7998] netlink: 24 bytes leftover after parsing attributes in process `syz.5.503'. [ 227.742669][ T7989] loop6: detected capacity change from 0 to 7 [ 227.753533][ T7989] Dev loop6: unable to read RDB block 7 [ 227.759167][ T7989] loop6: unable to read partition table [ 227.768784][ T7989] loop6: partition table beyond EOD, truncated [ 227.802244][ T7989] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 227.913462][ T5954] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 227.929977][ T7991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.985933][ T5954] usb 1-1: USB disconnect, device number 26 [ 228.037729][ T7991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.218263][ T5928] rc_core: IR keymap rc-hauppauge not found [ 228.243896][ T5928] Registered IR keymap rc-empty [ 228.259176][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.297647][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.392386][ T5928] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 228.669123][ T8015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.718586][ T5928] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 228.731380][ T8018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.779671][ T8018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.825471][ T8016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.842426][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.871999][ T8016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.936509][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.943717][ T8020] fuse: Bad value for 'fd' [ 228.945196][ T8020] fuse: Unknown parameter 'fd-0x0000000000000006' [ 229.223307][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 229.243239][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 229.385823][ T8028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.414025][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 229.465872][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 229.503476][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 229.535299][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 229.743300][ T5866] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 229.745434][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 229.783334][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 229.813187][ T5953] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 229.825342][ T5928] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 229.869330][ T5928] mceusb 2-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 229.908136][ T5928] usb 2-1: USB disconnect, device number 27 [ 229.953335][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 229.960171][ T5866] usb 3-1: config 0 interface 0 has no altsetting 0 [ 229.973903][ T5866] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 230.011514][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.027623][ T5953] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.030284][ T5866] usb 3-1: Product: syz [ 230.073147][ T5953] usb 1-1: config 0 interface 0 has no altsetting 0 [ 230.079795][ T5953] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 230.087251][ T5866] usb 3-1: Manufacturer: syz [ 230.123195][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.160874][ T5866] usb 3-1: SerialNumber: syz [ 230.179504][ T5953] usb 1-1: config 0 descriptor?? [ 230.211541][ T5866] usb 3-1: config 0 descriptor?? [ 230.631430][ T5953] hid-alps 0003:044E:1215.0006: unknown main item tag 0x1 [ 230.640706][ T5866] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 230.663320][ T5953] hid-alps 0003:044E:1215.0006: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.0-1/input0 [ 231.197563][ T5954] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 231.220419][ T5954] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 231.399524][ T1212] usb 1-1: USB disconnect, device number 27 [ 231.431604][ T8034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.496051][ T8034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.657228][ T8055] fido_id[8055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 231.684809][ T5866] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 231.722554][ T5866] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 231.781415][ T5866] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 231.816550][ T5866] usb 3-1: USB disconnect, device number 26 [ 231.912071][ T8071] syzkaller1: entered promiscuous mode [ 231.918781][ T8071] syzkaller1: entered allmulticast mode [ 232.603288][ T5866] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 232.813598][ T6185] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 232.843153][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 232.992635][ T5866] usb 4-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 233.005271][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.051717][ T5866] usb 4-1: Product: syz [ 233.056492][ T5866] usb 4-1: Manufacturer: syz [ 233.128533][ T6185] usb 1-1: Using ep0 maxpacket: 8 [ 233.140125][ T5866] usb 4-1: SerialNumber: syz [ 233.148307][ T5866] usb 4-1: config 0 descriptor?? [ 233.160997][ T6185] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 233.203732][ T6185] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 233.218376][ T6185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.233171][ T6185] usb 1-1: Product: syz [ 233.251538][ T6185] usb 1-1: Manufacturer: syz [ 233.527911][ T8073] loop6: detected capacity change from 0 to 7 [ 233.545129][ T6185] usb 1-1: SerialNumber: syz [ 233.561564][ T8073] Dev loop6: unable to read RDB block 7 [ 233.591874][ T6185] usb 1-1: config 0 descriptor?? [ 233.613657][ T8073] loop6: unable to read partition table [ 233.623766][ T6185] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 233.633806][ T8073] loop6: partition table beyond EOD, truncated [ 233.652309][ T8073] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 233.717529][ T5866] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 233.747232][ T5866] usb 4-1: USB disconnect, device number 25 [ 234.203205][ T1212] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 234.246003][ T6185] gspca_zc3xx: reg_w_i err -71 [ 234.414461][ T1212] usb 2-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 234.415432][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.526'. [ 234.455865][ T1212] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 234.476748][ T1212] usb 2-1: config 1 has no interface number 0 [ 234.482937][ T1212] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 234.503351][ T1212] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.711981][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.734421][ T1212] usb 2-1: Product: syz [ 234.739060][ T1212] usb 2-1: Manufacturer: syz [ 234.747632][ T1212] usb 2-1: SerialNumber: syz [ 234.760152][ T1212] cdc_ncm 2-1:1.1: skipping garbage [ 234.768261][ T1212] usb 2-1: selecting invalid altsetting 1 [ 234.883476][ T6185] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 234.924098][ T6185] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 235.012463][ T5928] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 235.063556][ T6185] usb 1-1: USB disconnect, device number 28 [ 235.163183][ T5928] usb 4-1: device descriptor read/64, error -71 [ 235.553254][ T5928] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 235.675160][ T1212] cdc_ncm 2-1:1.1: SET_CRC_MODE failed [ 235.682951][ T1212] cdc_ncm 2-1:1.1: SET_NTB_FORMAT failed [ 235.747167][ T1212] usb 2-1: selecting invalid altsetting 1 [ 235.762271][ T1212] cdc_ncm 2-1:1.1: bind() failure [ 235.787055][ T1212] usb 2-1: USB disconnect, device number 28 [ 235.842169][ T5928] usb 4-1: device descriptor read/64, error -71 [ 235.893461][ T6185] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 236.023539][ T5928] usb usb4-port1: attempt power cycle [ 236.064482][ T6185] usb 6-1: Using ep0 maxpacket: 32 [ 236.087107][ T6185] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 236.101033][ T6185] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 236.238028][ T8125] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 236.253628][ T8125] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 236.310147][ T6185] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 236.377714][ T8125] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.383988][ T5928] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 236.410149][ T8125] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 236.425647][ T5928] usb 4-1: device descriptor read/8, error -71 [ 236.434627][ T8125] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 236.441361][ T8125] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 236.454573][ T8125] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.463000][ T6185] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 236.464022][ T8125] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 236.508695][ T8125] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 236.515179][ T8125] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 236.527901][ T8125] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 236.665824][ T5928] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 236.678909][ T6185] usb 6-1: config 0 interface 0 has no altsetting 0 [ 236.703820][ T5928] usb 4-1: device descriptor read/8, error -71 [ 236.798294][ T6185] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 236.813592][ T5928] usb usb4-port1: unable to enumerate USB device [ 236.824306][ T6185] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 236.855238][ T6185] usb 6-1: Product: syz [ 236.865876][ T6185] usb 6-1: Manufacturer: syz [ 236.880906][ T6185] usb 6-1: SerialNumber: syz [ 236.953412][ T6185] usb 6-1: config 0 descriptor?? [ 237.025593][ T6185] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 237.130916][ T6185] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 237.692687][ T8149] pim6reg1: entered promiscuous mode [ 237.698149][ T8149] pim6reg1: entered allmulticast mode [ 237.986847][ T30] audit: type=1326 audit(1757755273.666:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600ef8eba9 code=0x7ffc0000 [ 238.079273][ T30] audit: type=1326 audit(1757755273.666:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600ef8eba9 code=0x7ffc0000 [ 238.108575][ T5870] Bluetooth: hci0: command 0x0406 tx timeout [ 238.132114][ T30] audit: type=1326 audit(1757755273.666:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f600ef8eba9 code=0x7ffc0000 [ 238.154836][ T30] audit: type=1326 audit(1757755273.666:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600ef8eba9 code=0x7ffc0000 [ 238.177663][ T30] audit: type=1326 audit(1757755273.666:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600ef8eba9 code=0x7ffc0000 [ 238.202940][ T30] audit: type=1326 audit(1757755273.666:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f600ef8eba9 code=0x7ffc0000 [ 238.227900][ T30] audit: type=1326 audit(1757755273.666:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600ef8eba9 code=0x7ffc0000 [ 238.255454][ T30] audit: type=1326 audit(1757755273.666:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600ef8eba9 code=0x7ffc0000 [ 238.397305][ T30] audit: type=1326 audit(1757755273.666:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f600ef8eba9 code=0x7ffc0000 [ 238.419750][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 238.436741][ T30] audit: type=1326 audit(1757755273.666:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600ef8eba9 code=0x7ffc0000 [ 238.473191][ T5870] Bluetooth: hci2: command 0x0406 tx timeout [ 238.474020][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 238.560285][ T5872] Bluetooth: hci4: command 0x0c1a tx timeout [ 239.494105][ T5954] usb 6-1: USB disconnect, device number 11 [ 239.514432][ T5954] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 240.175290][ T5872] Bluetooth: hci0: command 0x0406 tx timeout [ 240.569164][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 240.575351][ T5870] Bluetooth: hci2: command 0x0406 tx timeout [ 240.587862][ T5870] Bluetooth: hci3: command 0x0406 tx timeout [ 240.611975][ T8187] netlink: 180 bytes leftover after parsing attributes in process `syz.0.544'. [ 240.653191][ T5185] Bluetooth: hci4: command 0x0c1a tx timeout [ 240.663056][ T8189] netlink: 256 bytes leftover after parsing attributes in process `syz.3.545'. [ 241.146047][ T8186] netlink: 44 bytes leftover after parsing attributes in process `syz.5.541'. [ 241.155071][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.541'. [ 241.163934][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.541'. [ 241.172731][ T8186] netlink: 16 bytes leftover after parsing attributes in process `syz.5.541'. [ 241.236572][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'. [ 241.907134][ T8200] netlink: 'syz.5.548': attribute type 33 has an invalid length. [ 241.920148][ T8200] netlink: 152 bytes leftover after parsing attributes in process `syz.5.548'. [ 241.931150][ T8201] tipc: Enabling of bearer rejected, already enabled [ 241.939928][ T8201] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 241.951416][ T8201] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 242.213185][ T5956] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 242.395621][ T5956] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 242.413928][ T5956] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 242.437089][ T5956] usb 6-1: config 0 has no interface number 0 [ 242.457676][ T5956] usb 6-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.510438][ T5956] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 242.564385][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.604324][ T5956] usb 6-1: config 0 descriptor?? [ 242.713398][ T5185] Bluetooth: hci4: command 0x0c1a tx timeout [ 242.920333][ T5956] usb 6-1: USB disconnect, device number 12 [ 243.238341][ T8231] netlink: 'syz.3.554': attribute type 29 has an invalid length. [ 243.247082][ T8231] netlink: 'syz.3.554': attribute type 29 has an invalid length. [ 243.255760][ T8231] netlink: 500 bytes leftover after parsing attributes in process `syz.3.554'. [ 243.265042][ T8231] unsupported nla_type 58 [ 243.735827][ T8234] netlink: 'syz.2.555': attribute type 29 has an invalid length. [ 243.749217][ T8234] netlink: 'syz.2.555': attribute type 29 has an invalid length. [ 243.763296][ T8234] netlink: 500 bytes leftover after parsing attributes in process `syz.2.555'. [ 244.273175][ T5954] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 244.444977][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 244.458104][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 244.501365][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 244.558919][ T5954] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 244.569163][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.615166][ T5954] usb 6-1: Product: syz [ 244.642925][ T5954] usb 6-1: Manufacturer: syz [ 244.658063][ T5954] usb 6-1: SerialNumber: syz [ 244.711649][ T5954] usb 6-1: config 0 descriptor?? [ 244.812545][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 244.812563][ T30] audit: type=1326 audit(1757755280.506:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f738eba9 code=0x7ffc0000 [ 244.863284][ T30] audit: type=1326 audit(1757755280.506:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f738eba9 code=0x7ffc0000 [ 244.895800][ T30] audit: type=1326 audit(1757755280.546:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53f738eba9 code=0x7ffc0000 [ 244.919483][ T30] audit: type=1326 audit(1757755280.546:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f738eba9 code=0x7ffc0000 [ 245.002651][ T30] audit: type=1326 audit(1757755280.566:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f738eba9 code=0x7ffc0000 [ 245.096671][ T30] audit: type=1326 audit(1757755280.566:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53f738eba9 code=0x7ffc0000 [ 245.213295][ T30] audit: type=1326 audit(1757755280.566:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f738eba9 code=0x7ffc0000 [ 245.254434][ T5954] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 245.305722][ T30] audit: type=1326 audit(1757755280.566:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f738eba9 code=0x7ffc0000 [ 245.398968][ T30] audit: type=1326 audit(1757755280.586:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f53f738eba9 code=0x7ffc0000 [ 245.441863][ T8250] loop5: detected capacity change from 0 to 7 [ 245.479464][ T8250] Dev loop5: unable to read RDB block 7 [ 245.505476][ T30] audit: type=1326 audit(1757755280.586:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f738eba9 code=0x7ffc0000 [ 245.527932][ T8250] loop5: unable to read partition table [ 245.550447][ T8250] loop5: partition table beyond EOD, truncated [ 245.564556][ T8250] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 245.610801][ T8248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.619699][ T8248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.742018][ T5956] usb 6-1: USB disconnect, device number 13 [ 246.236993][ T6185] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 246.494551][ T8263] tipc: Started in network mode [ 246.503204][ T8263] tipc: Node identity 080211000001, cluster identity 4711 [ 246.523418][ T8263] tipc: Enabled bearer , priority 0 [ 246.572594][ T8253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.595225][ T8263] tipc: Resetting bearer [ 246.623364][ T6185] usb 4-1: device descriptor read/64, error -71 [ 246.861566][ T8268] __nla_validate_parse: 2 callbacks suppressed [ 246.861580][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.566'. [ 246.877184][ T6185] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 247.026586][ T6185] usb 4-1: device descriptor read/64, error -71 [ 247.174089][ T6185] usb usb4-port1: attempt power cycle [ 247.423640][ T8273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.447763][ T5956] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 247.593592][ T1212] tipc: Node number set to 134418688 [ 247.599065][ T6185] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 247.944937][ T5956] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.085651][ T5956] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.234634][ T6185] usb 4-1: device descriptor read/8, error -71 [ 248.274445][ T5956] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.278065][ T8291] loop5: detected capacity change from 0 to 7 [ 248.293426][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.298495][ T8291] Dev loop5: unable to read RDB block 7 [ 248.314217][ T8291] loop5: unable to read partition table [ 248.321252][ T8291] loop5: partition table beyond EOD, truncated [ 248.347394][ T8292] netlink: 16 bytes leftover after parsing attributes in process `syz.1.571'. [ 248.358107][ T5956] usb 6-1: Product: syz [ 248.359653][ T8291] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 248.373453][ T5956] usb 6-1: Manufacturer: syz [ 248.378084][ T5956] usb 6-1: SerialNumber: syz [ 248.523472][ T6185] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 248.532719][ T8296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.551139][ T8296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.566792][ T6185] usb 4-1: device descriptor read/8, error -71 [ 248.619991][ T5956] usb 6-1: 0:2 : does not exist [ 248.629393][ T5956] usb 6-1: unit 9 not found! [ 248.682371][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 248.699605][ T5956] usb 6-1: 4:0: cannot get min/max values for control 1 (id 4) [ 248.730213][ T6185] usb usb4-port1: unable to enumerate USB device [ 248.977361][ T5956] usb 6-1: USB disconnect, device number 14 [ 249.043313][ T5953] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 249.196811][ T5953] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.224942][ T5953] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.246688][ T5953] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 249.270473][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 249.290542][ T5953] usb 1-1: SerialNumber: syz [ 249.449594][ T8309] netlink: 24 bytes leftover after parsing attributes in process `syz.5.576'. [ 249.548102][ T5953] usb 1-1: 0:2 : does not exist [ 249.583331][ T5953] usb 1-1: USB disconnect, device number 29 [ 249.683005][ T6755] udevd[6755]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.226622][ T8314] netlink: 'syz.0.578': attribute type 15 has an invalid length. [ 250.268207][ T8314] netlink: 666 bytes leftover after parsing attributes in process `syz.0.578'. [ 250.562247][ T8324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.657698][ T8314] TCP: tcp_parse_options: Illegal window scaling value 15 > 14 received [ 250.965879][ T8331] loop5: detected capacity change from 0 to 7 [ 250.991799][ T6755] Dev loop5: unable to read RDB block 7 [ 251.208227][ T6755] loop5: unable to read partition table [ 251.228700][ T6755] loop5: partition table beyond EOD, truncated [ 251.260658][ T8331] Dev loop5: unable to read RDB block 7 [ 251.277012][ T8331] loop5: unable to read partition table [ 251.287276][ T8331] loop5: partition table beyond EOD, truncated [ 251.304601][ T8333] netlink: 'syz.5.582': attribute type 1 has an invalid length. [ 251.376092][ T8331] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 251.461772][ T8336] gretap1: entered promiscuous mode [ 251.474141][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.582'. [ 251.486870][ T8336] bond1: (slave gretap1): making interface the new active one [ 251.518557][ T8336] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 251.576732][ T8333] macvlan2: entered promiscuous mode [ 251.651085][ T8333] macvlan2: entered allmulticast mode [ 252.443287][ T5953] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 253.233434][ T5953] usb 3-1: Using ep0 maxpacket: 16 [ 253.330237][ T5953] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 253.339519][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.347782][ T5953] usb 3-1: Product: syz [ 253.352042][ T5953] usb 3-1: Manufacturer: syz [ 253.377803][ T5953] usb 3-1: SerialNumber: syz [ 253.440918][ T5953] usb 3-1: config 0 descriptor?? [ 253.462722][ T5953] as10x_usb: device has been detected [ 253.469747][ T5953] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 253.660800][ T8342] random: crng reseeded on system resumption [ 254.182947][ T5953] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 254.539353][ T5953] as10x_usb: error during firmware upload part1 [ 254.546206][ T5953] Registered device Sky IT Digital Key (green led) [ 254.803022][ T5954] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 254.818503][ T5928] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 254.963146][ T5928] usb 6-1: device descriptor read/64, error -71 [ 254.983125][ T5954] usb 2-1: Using ep0 maxpacket: 8 [ 254.995378][ T5954] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 255.044292][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.062417][ T5954] usb 2-1: Product: syz [ 255.074352][ T5954] usb 2-1: Manufacturer: syz [ 255.092010][ T5954] usb 2-1: SerialNumber: syz [ 255.136596][ T5866] usb 3-1: USB disconnect, device number 27 [ 255.194271][ T5954] usb 2-1: config 0 descriptor?? [ 255.202054][ T5866] Unregistered device Sky IT Digital Key (green led) [ 255.203867][ T5928] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 255.244005][ T5866] as10x_usb: device has been disconnected [ 255.245813][ T5954] gspca_main: se401-2.14.0 probing 047d:5003 [ 255.407491][ T5928] usb 6-1: device descriptor read/64, error -71 [ 255.461483][ T8391] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 255.523919][ T5928] usb usb6-port1: attempt power cycle [ 255.597922][ T5866] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 255.598058][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.612838][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.724105][ T5956] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 255.738182][ T5954] gspca_se401: ExtraFeatures: 255 [ 255.746134][ T5954] gspca_se401: Too many frame sizes [ 255.753528][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 255.761976][ T5866] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.777336][ T5866] usb 3-1: config 0 interface 0 has no altsetting 0 [ 255.786590][ T5866] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 255.796937][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.808151][ T5866] usb 3-1: config 0 descriptor?? [ 255.826856][ T5866] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 255.884564][ T5928] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 255.895191][ T5956] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 255.904518][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.916279][ T5928] usb 6-1: device descriptor read/8, error -71 [ 255.917290][ T5956] usb 1-1: config 0 descriptor?? [ 256.028728][ T8388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.043018][ T8388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.131514][ T5956] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 256.153895][ T5928] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 256.190146][ T5928] usb 6-1: device descriptor read/8, error -71 [ 256.308604][ T5928] usb usb6-port1: unable to enumerate USB device [ 256.332795][ T8391] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 256.349331][ T5956] [drm:udl_init] *ERROR* Selecting channel failed [ 256.385042][ T5956] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 256.401803][ T5956] [drm] Initialized udl on minor 2 [ 256.417003][ T5956] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 256.434325][ T5956] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 256.510366][ T6185] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 256.523558][ T5956] usb 1-1: USB disconnect, device number 30 [ 256.536229][ T6185] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 257.683205][ T5928] usb 2-1: USB disconnect, device number 29 [ 258.341302][ T5220] bcm5974 3-1:0.0: could not read from device [ 258.493538][ T5220] bcm5974 3-1:0.0: could not read from device [ 258.518900][ T5866] usb 3-1: USB disconnect, device number 28 [ 258.529996][ T5220] bcm5974 3-1:0.0: could not read from device [ 260.932640][ T5928] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 261.103665][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 261.130541][ T5928] usb 6-1: config 6 has an invalid interface number: 170 but max is 0 [ 261.138959][ T5928] usb 6-1: config 6 has no interface number 0 [ 261.151209][ T5928] usb 6-1: New USB device found, idVendor=a168, idProduct=0611, bcdDevice=81.2f [ 261.161419][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.174143][ T5928] usb 6-1: Product: syz [ 261.180415][ T5928] usb 6-1: Manufacturer: syz [ 261.195763][ T5928] usb 6-1: SerialNumber: syz [ 261.348628][ T5954] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 261.605570][ T5954] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 261.614063][ T5954] usb 1-1: config 0 has no interface number 0 [ 261.623203][ T5954] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 261.646419][ T5954] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 261.741027][ T5954] usb 1-1: config 0 interface 2 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 261.771389][ T5954] usb 1-1: config 0 interface 2 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 261.800820][ T5954] usb 1-1: config 0 interface 2 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 261.811792][ T5954] usb 1-1: config 0 interface 2 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 261.832203][ T5954] usb 1-1: config 0 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 261.854246][ T5954] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1060, bcdDevice=12.36 [ 261.866455][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.876526][ T5954] usb 1-1: Product: syz [ 261.884122][ T5954] usb 1-1: Manufacturer: syz [ 261.888891][ T5954] usb 1-1: SerialNumber: syz [ 261.938104][ T5954] usb 1-1: config 0 descriptor?? [ 262.147494][ T8436] netlink: 'syz.5.608': attribute type 2 has an invalid length. [ 262.202069][ T5954] usb 1-1: USB disconnect, device number 31 [ 263.545657][ T8490] syzkaller1: entered promiscuous mode [ 263.581844][ T5928] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0611 [ 263.600340][ T8490] syzkaller1: entered allmulticast mode [ 263.619234][ T5928] gspca_sn9c20x: Write register 1000 failed -71 [ 263.635729][ T5928] gspca_sn9c20x: Device initialization failed [ 263.662310][ T5928] gspca_sn9c20x 6-1:6.170: probe with driver gspca_sn9c20x failed with error -71 [ 263.703776][ T5928] usb 6-1: USB disconnect, device number 19 [ 264.094185][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.625'. [ 264.106266][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.625'. [ 264.411740][ T8503] netlink: 'syz.2.626': attribute type 1 has an invalid length. [ 264.680437][ T8507] bond0: entered promiscuous mode [ 264.685840][ T8507] bond0: entered allmulticast mode [ 264.692804][ T8507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.915490][ T8503] bridge1: entered promiscuous mode [ 264.951182][ T8503] bridge1: entered allmulticast mode [ 264.958724][ T8503] bond0: (slave bridge1): Enslaving as a backup interface with an up link [ 264.975852][ T486] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 265.645387][ T1164] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 265.832567][ T8528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.632'. [ 267.157199][ T5928] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 267.448033][ T5928] usb 6-1: Using ep0 maxpacket: 32 [ 267.594176][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 267.623150][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 267.648133][ T5928] usb 6-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75 [ 267.657858][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.669335][ T5928] usb 6-1: Product: syz [ 267.686210][ T5928] usb 6-1: Manufacturer: syz [ 267.758071][ T5928] usb 6-1: SerialNumber: syz [ 267.774201][ T5928] usb 6-1: config 0 descriptor?? [ 267.788010][ T8547] netlink: 'syz.3.635': attribute type 29 has an invalid length. [ 267.797074][ T8547] netlink: 'syz.3.635': attribute type 29 has an invalid length. [ 267.806271][ T8547] netlink: 500 bytes leftover after parsing attributes in process `syz.3.635'. [ 267.962115][ T8550] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073290121217) [ 268.071363][ T5928] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 268.174636][ T5928] peak_usb 6-1:0.0: unable to read PCAN-USB Pro FD firmware info (err -71) [ 268.264513][ T5928] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 268.279955][ T5928] usb 6-1: USB disconnect, device number 20 [ 268.463283][ T5921] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 268.603242][ T5921] usb 3-1: device descriptor read/64, error -71 [ 268.843297][ T5921] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 268.983752][ T5921] usb 3-1: device descriptor read/64, error -71 [ 269.094706][ T5921] usb usb3-port1: attempt power cycle [ 269.142613][ T8558] netlink: 28 bytes leftover after parsing attributes in process `syz.1.640'. [ 269.570296][ T5921] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 269.597526][ T5921] usb 3-1: device descriptor read/8, error -71 [ 269.808291][ T5928] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 269.853221][ T5921] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 269.886160][ T5921] usb 3-1: device descriptor read/8, error -71 [ 269.963192][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 269.975624][ T5928] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 269.985721][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.012096][ T5921] usb usb3-port1: unable to enumerate USB device [ 270.036455][ T5928] usb 6-1: Product: syz [ 270.040813][ T5928] usb 6-1: Manufacturer: syz [ 270.067145][ T5928] usb 6-1: SerialNumber: syz [ 270.075717][ T5928] usb 6-1: config 0 descriptor?? [ 270.134101][ T5928] as10x_usb: device has been detected [ 270.148225][ T5928] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 270.374438][ T5928] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 270.458234][ T5928] as10x_usb: error during firmware upload part1 [ 270.484690][ T5928] Registered device Sky IT Digital Key (green led) [ 270.499378][ T8581] netlink: 'syz.3.645': attribute type 15 has an invalid length. [ 270.533230][ T8581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.645'. [ 270.771320][ T8576] netlink: 44 bytes leftover after parsing attributes in process `syz.1.644'. [ 270.780362][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'. [ 270.789443][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'. [ 270.798871][ T8576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.644'. [ 271.503363][ T5956] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 271.653162][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 271.660839][ T5956] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 271.673833][ T5956] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.708075][ T5956] usb 2-1: config 1 interface 0 has no altsetting 0 [ 271.735922][ T5956] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 271.745268][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.807914][ T5956] usb 2-1: Product: ࡡ [ 271.838639][ T5956] usb 2-1: Manufacturer: ⴧ슭菨혀 [ 271.856377][ T5956] usb 2-1: SerialNumber: 熠쟜䫟늁勵朊疒q흄꽛ꄔ扥᪃ퟸℚ朓점䌄㿽⊵ﭖ韬ᐗᚴ訕럷꒑䦷밠椰䲹鎊鲧邘鑣஝ᗮ틩䴯ᙁ튦ᮁ㔤ﯵ㍕ⲹ喊巊銹 [ 272.195089][ T8584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.205448][ T8584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.232693][ T5956] usbhid 2-1:1.0: can't add hid device: -71 [ 272.245887][ T5956] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 272.282229][ T5956] usb 2-1: USB disconnect, device number 30 [ 272.764053][ T5928] usb 6-1: USB disconnect, device number 21 [ 272.788489][ T5928] Unregistered device Sky IT Digital Key (green led) [ 272.866859][ T8604] netlink: 44 bytes leftover after parsing attributes in process `syz.5.650'. [ 272.913222][ T8604] netlink: 32 bytes leftover after parsing attributes in process `syz.5.650'. [ 272.969391][ T5928] as10x_usb: device has been disconnected [ 273.608112][ T8611] netlink: 'syz.1.652': attribute type 1 has an invalid length. [ 274.064534][ T8631] binder: 8628:8631 unknown command 1077961494 [ 274.070780][ T8631] binder: 8628:8631 ioctl c0306201 200000000100 returned -22 [ 274.734256][ T8636] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.083314][ T5956] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 275.195067][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 275.195085][ T30] audit: type=1326 audit(1757755310.896:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.5.661" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f600ef8eba9 code=0x0 [ 275.263153][ T5954] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 275.295104][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 275.405877][ T5956] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 275.415082][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.432726][ T5956] usb 4-1: Product: syz [ 275.443645][ T5954] usb 1-1: device descriptor read/64, error -71 [ 275.483610][ T5956] usb 4-1: Manufacturer: syz [ 275.497467][ T5956] usb 4-1: SerialNumber: syz [ 275.595520][ T5956] r8152-cfgselector 4-1: Unknown version 0x0000 [ 275.602190][ T5956] r8152-cfgselector 4-1: config 0 descriptor?? [ 275.684005][ T5954] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 275.758527][ T8659] vlan2: entered promiscuous mode [ 275.823312][ T5954] usb 1-1: device descriptor read/64, error -71 [ 275.862927][ T8639] netlink: 'syz.3.659': attribute type 10 has an invalid length. [ 275.881350][ T8639] dummy0: left promiscuous mode [ 275.916425][ T8661] netlink: 'syz.3.659': attribute type 10 has an invalid length. [ 275.931396][ T8639] dummy0: entered promiscuous mode [ 275.933539][ T5954] usb usb1-port1: attempt power cycle [ 275.992915][ T8639] team0: Port device dummy0 added [ 276.005124][ T8661] dummy0: left promiscuous mode [ 276.025883][ T8661] team0: Port device dummy0 removed [ 276.053911][ T5866] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 276.075245][ T8661] dummy0: entered promiscuous mode [ 276.095865][ T8661] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 276.172786][ T8639] netlink: 88 bytes leftover after parsing attributes in process `syz.3.659'. [ 276.182682][ T8639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.193167][ T5866] usb 2-1: device descriptor read/64, error -71 [ 276.203474][ T8639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.293173][ T5954] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 276.301573][ T8639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.334564][ T5954] usb 1-1: device descriptor read/8, error -71 [ 276.443959][ T5866] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 276.573187][ T5954] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 276.604374][ T5954] usb 1-1: device descriptor read/8, error -71 [ 276.718914][ T5954] usb usb1-port1: unable to enumerate USB device [ 276.733239][ T5866] usb 2-1: device descriptor read/64, error -71 [ 276.851401][ T5954] r8152-cfgselector 4-1: USB disconnect, device number 34 [ 276.865595][ T5866] usb usb2-port1: attempt power cycle [ 277.403190][ T5866] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 277.527449][ T8673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.654516][ T5866] usb 2-1: device descriptor read/8, error -71 [ 277.893196][ T5866] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 278.056372][ T5866] usb 2-1: device descriptor read/8, error -71 [ 278.184189][ T5866] usb usb2-port1: unable to enumerate USB device [ 278.942786][ T8691] tipc: Enabling of bearer rejected, already enabled [ 279.082418][ T5954] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 279.145352][ T8685] netlink: 44 bytes leftover after parsing attributes in process `syz.3.668'. [ 279.154411][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.668'. [ 279.167684][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.668'. [ 279.176883][ T8685] netlink: 16 bytes leftover after parsing attributes in process `syz.3.668'. [ 279.249477][ T30] audit: type=1326 audit(1757755314.946:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.1.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d98eba9 code=0x7ffc0000 [ 279.338571][ T30] audit: type=1326 audit(1757755314.976:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.1.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d98eba9 code=0x7ffc0000 [ 279.383175][ T5954] usb 1-1: Using ep0 maxpacket: 16 [ 279.414756][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 279.505511][ T30] audit: type=1326 audit(1757755314.976:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.1.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f878d98eba9 code=0x7ffc0000 [ 279.513160][ T5954] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 279.532995][ T30] audit: type=1326 audit(1757755314.976:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.1.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d98eba9 code=0x7ffc0000 [ 279.613343][ T30] audit: type=1326 audit(1757755314.976:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.1.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d98eba9 code=0x7ffc0000 [ 279.670234][ T30] audit: type=1326 audit(1757755314.986:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.1.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f878d98eba9 code=0x7ffc0000 [ 279.720215][ T5954] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 279.767912][ T5954] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 279.801576][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.842395][ T5954] usb 1-1: Product: syz [ 279.851325][ T30] audit: type=1326 audit(1757755314.986:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.1.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d98eba9 code=0x7ffc0000 [ 279.854657][ T5954] usb 1-1: Manufacturer: syz [ 279.919479][ T5954] usb 1-1: SerialNumber: syz [ 279.941565][ T5954] usb 1-1: config 0 descriptor?? [ 279.960152][ T30] audit: type=1326 audit(1757755314.986:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.1.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d98eba9 code=0x7ffc0000 [ 279.982860][ T8687] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 280.054216][ T5954] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 280.071750][ T30] audit: type=1326 audit(1757755314.986:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.1.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f878d98eba9 code=0x7ffc0000 [ 280.080259][ T5954] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 280.144094][ T5954] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 280.162955][ T5954] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 280.170195][ T5954] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 280.423236][ T5928] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 280.583263][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 280.591472][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.608076][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.631084][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.657351][ T5928] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 280.668963][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.698063][ T5928] usb 3-1: config 0 descriptor?? [ 280.865470][ T8731] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073290121217) [ 280.928388][ T5928] koneplus 0003:1E7D:2E22.0008: item fetching failed at offset 0/2 [ 280.942389][ T5928] koneplus 0003:1E7D:2E22.0008: parse failed [ 280.959159][ T5928] koneplus 0003:1E7D:2E22.0008: probe with driver koneplus failed with error -22 [ 281.174120][ T5928] usb 3-1: USB disconnect, device number 33 [ 281.224327][ T5866] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 281.415392][ T5866] usb 2-1: device descriptor read/64, error -71 [ 281.605130][ T5928] usb 1-1: USB disconnect, device number 36 [ 281.638077][ T5928] mcba_usb 1-1:0.0 can0: device disconnected [ 281.781997][ T5866] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 281.946238][ T5866] usb 2-1: device descriptor read/64, error -71 [ 282.040054][ T8747] ip6tnl1: entered promiscuous mode [ 282.095223][ T5866] usb usb2-port1: attempt power cycle [ 282.440187][ T8755] netlink: 40 bytes leftover after parsing attributes in process `syz.3.685'. [ 282.473950][ T5866] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 282.529410][ T5866] usb 2-1: device descriptor read/8, error -71 [ 282.853579][ T5866] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 282.915893][ T5866] usb 2-1: device descriptor read/8, error -71 [ 283.063285][ T5866] usb usb2-port1: unable to enumerate USB device [ 283.132954][ T8766] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20002 [ 284.113146][ T5928] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 284.273348][ T5928] usb 4-1: device descriptor read/64, error -71 [ 284.545383][ T5928] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 284.925297][ T8787] netlink: 44 bytes leftover after parsing attributes in process `syz.0.690'. [ 284.935820][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'. [ 284.973462][ T5928] usb 4-1: device descriptor read/64, error -71 [ 285.003932][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'. [ 285.016863][ T8787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.690'. [ 285.124095][ T5928] usb usb4-port1: attempt power cycle [ 285.503166][ T5928] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 285.533907][ T5928] usb 4-1: device descriptor read/8, error -71 [ 285.713159][ T1212] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 285.720827][ T5866] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 285.775934][ T5185] Bluetooth: unknown link type 128 [ 285.827860][ T5928] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 285.863906][ T5928] usb 4-1: device descriptor read/8, error -71 [ 285.874320][ T8812] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.697'. [ 285.883393][ T1212] usb 2-1: Using ep0 maxpacket: 16 [ 285.883517][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 285.889237][ T5866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.915890][ T1212] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 285.933148][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.941267][ T8809] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 285.941506][ T8812] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.697'. [ 285.963154][ T1212] usb 2-1: Product: syz [ 285.967333][ T1212] usb 2-1: Manufacturer: syz [ 285.971932][ T1212] usb 2-1: SerialNumber: syz [ 285.983182][ T5866] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 285.993033][ T5866] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 285.997168][ T5928] usb usb4-port1: unable to enumerate USB device [ 286.009561][ T1212] usb 2-1: config 0 descriptor?? [ 286.022614][ T8812] netlink: 332 bytes leftover after parsing attributes in process `syz.0.697'. [ 286.023004][ T8809] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 286.037690][ T5866] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 286.059660][ T1212] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 286.089066][ T8809] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 286.093304][ T5866] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.106610][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.116188][ T8809] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 286.116666][ T5866] usb 3-1: Product: syz [ 286.122510][ T8809] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 286.141336][ T5866] usb 3-1: Manufacturer: syz [ 286.149497][ T5866] usb 3-1: SerialNumber: syz [ 286.515042][ T8815] netlink: 40 bytes leftover after parsing attributes in process `syz.5.698'. [ 286.524265][ T8799] loop6: detected capacity change from 0 to 7 [ 286.539710][ T8799] Dev loop6: unable to read RDB block 7 [ 286.549751][ T8799] loop6: unable to read partition table [ 286.563393][ T1212] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 286.570174][ T8799] loop6: partition table beyond EOD, truncated [ 286.609818][ T8799] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 287.579285][ T5866] cdc_ncm 3-1:1.0: bind() failure [ 287.605713][ T5866] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 287.619372][ T5866] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 287.632382][ T5866] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 287.706521][ T8827] vti0: entered promiscuous mode [ 287.711741][ T8827] vti0: entered allmulticast mode [ 287.737350][ T8827] netlink: 60 bytes leftover after parsing attributes in process `syz.5.700'. [ 287.751602][ T5866] usb 3-1: USB disconnect, device number 34 [ 287.914745][ T5185] Bluetooth: hci0: command 0x0406 tx timeout [ 288.073334][ T5185] Bluetooth: hci1: command 0x0406 tx timeout [ 288.153187][ T5185] Bluetooth: hci4: command 0x0c1a tx timeout [ 288.159231][ T5870] Bluetooth: hci2: command 0x0406 tx timeout [ 288.165477][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 288.450735][ T5928] usb 2-1: USB disconnect, device number 39 [ 288.562255][ T8845] netlink: 156 bytes leftover after parsing attributes in process `syz.2.707'. [ 288.859007][ T8843] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073290121217) [ 288.883224][ T5866] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 289.095198][ T5866] usb 4-1: device descriptor read/64, error -71 [ 289.243932][ T8862] netlink: 'syz.2.710': attribute type 3 has an invalid length. [ 289.251714][ T8862] netlink: 3 bytes leftover after parsing attributes in process `syz.2.710'. [ 289.344017][ T5866] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 289.493230][ T5866] usb 4-1: device descriptor read/64, error -71 [ 289.624190][ T5866] usb usb4-port1: attempt power cycle [ 289.769093][ T8873] vivid-003: disconnect [ 289.855116][ T8876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.875428][ T8876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.913440][ T5956] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 289.984638][ T5866] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 290.027313][ T5866] usb 4-1: device descriptor read/8, error -71 [ 290.083997][ T8872] vivid-003: reconnect [ 290.098691][ T5956] usb 1-1: Using ep0 maxpacket: 32 [ 290.124303][ T5956] usb 1-1: unable to get BOS descriptor or descriptor too short [ 290.142749][ T5956] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 290.176160][ T5956] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 290.198850][ T5956] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 290.225196][ T5956] usb 1-1: config 128 has no interface number 0 [ 290.241589][ T5956] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 170, changing to 11 [ 290.263359][ T5956] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 42744, setting to 1024 [ 290.293261][ T5866] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 290.303899][ T5956] usb 1-1: config 128 interface 127 has no altsetting 0 [ 290.314230][ T5866] usb 4-1: device descriptor read/8, error -71 [ 290.330563][ T5956] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 290.360353][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.383344][ T5956] usb 1-1: Product: syz [ 290.392111][ T5956] usb 1-1: Manufacturer: syz [ 290.430257][ T5866] usb usb4-port1: unable to enumerate USB device [ 290.452107][ T5956] usb 1-1: SerialNumber: syz [ 290.503431][ T8871] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 290.776475][ T5956] usb 1-1: USB disconnect, device number 37 [ 290.821209][ T6755] udevd[6755]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.947784][ T8887] fuse: Bad value for 'fd' [ 291.276190][ T5956] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 291.445740][ T5956] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 291.454234][ T5956] usb 2-1: config 0 has no interface number 0 [ 291.485206][ T5956] usb 2-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 291.496038][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.513129][ T5956] usb 2-1: Product: syz [ 291.554880][ T5956] usb 2-1: Manufacturer: syz [ 291.656986][ T5956] usb 2-1: SerialNumber: syz [ 291.676033][ T5956] usb 2-1: config 0 descriptor?? [ 291.700114][ T5956] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 291.724639][ T5956] dvb-usb: bulk message failed: -22 (4/0) [ 291.736627][ T5956] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 291.864032][ T5956] dvb-usb: bulk message failed: -22 (5/0) [ 291.875220][ T5956] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 291.889966][ T5956] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 291.909847][ T5956] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 292.646269][ T5955] usb 2-1: USB disconnect, device number 40 [ 292.931290][ T5953] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 293.143995][ T5953] usb 3-1: too many configurations: 139, using maximum allowed: 8 [ 293.164099][ T5953] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 293.171923][ T5953] usb 3-1: can't read configurations, error -61 [ 293.453388][ T5953] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 293.674052][ T5953] usb 3-1: too many configurations: 139, using maximum allowed: 8 [ 293.701280][ T5953] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 293.713120][ T5953] usb 3-1: can't read configurations, error -61 [ 293.729780][ T5953] usb usb3-port1: attempt power cycle [ 294.535867][ T5953] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 294.564189][ T5953] usb 3-1: too many configurations: 139, using maximum allowed: 8 [ 294.573894][ T5953] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 294.585755][ T5953] usb 3-1: can't read configurations, error -61 [ 294.793490][ T5953] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 294.863806][ T5953] usb 3-1: too many configurations: 139, using maximum allowed: 8 [ 294.897482][ T5953] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 294.905688][ T5953] usb 3-1: can't read configurations, error -61 [ 294.949847][ T5953] usb usb3-port1: unable to enumerate USB device [ 295.130598][ T8934] netlink: 40 bytes leftover after parsing attributes in process `syz.3.729'. [ 295.306962][ T8940] loop5: detected capacity change from 0 to 7 [ 295.314812][ T6755] Dev loop5: unable to read RDB block 7 [ 295.320387][ T6755] loop5: unable to read partition table [ 295.326688][ T6755] loop5: partition table beyond EOD, truncated [ 295.335756][ T8940] Dev loop5: unable to read RDB block 7 [ 295.341748][ T8940] loop5: unable to read partition table [ 295.348177][ T8940] loop5: partition table beyond EOD, truncated [ 295.353163][ T5953] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 295.354827][ T8940] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 295.513542][ T5928] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 295.543350][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 295.555693][ T5953] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 295.564966][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.582433][ T5953] usb 2-1: config 0 descriptor?? [ 295.693952][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 295.731424][ T5928] usb 1-1: unable to get BOS descriptor or descriptor too short [ 295.751230][ T5928] usb 1-1: config 4 interface 0 has no altsetting 0 [ 295.771719][ T5928] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 295.800507][ T5953] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 295.808010][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.824918][ T5953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 295.834473][ T5928] usb 1-1: Product: 漡毭ݠ퀐玦䱄軧っᎫ鎝ˋほ㰡எ䭐ꤺ㛻欬㚸ଁත⅞脻ὔ웭ꘫ区溇렲౫蕊뻽腇뀔ꕿɥ瀊⽨ᚧ엗䶠侅乡ꐀ觨投᝖朄阔᠜㏹謑ꕃ年䈕띻놷ࡖ狴䍂嶆ꑘq퓱ꭑᏘ惆赻ᠱ䆗芌袨뇿꺮ೕ传ᵸ渋ƿ橰䏣ﾚ✵⹧ᔎ㋎퇉Ꞿ묇뼸㝔횰㝵묫앯Ჳ㽉厶㡹床嗒翲曐紋篔뿝蝆ꍪ䑠籥簮챾 [ 295.872122][ T5953] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 295.885548][ T5953] usb 2-1: media controller created [ 295.957959][ T5928] usb 1-1: Manufacturer: 䨊㗰繷樘啄炗㽕࢜뢘핊Ꜹ膃凰蚥⛍⾩䭑ꃷ㧘鑏﹒ [ 295.988794][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.003171][ T5928] usb 1-1: SerialNumber: 奠빏雕쯦ﵱ褔ꚰى潷잏⊸틉З組瓁줚梅ḵ쵤쌱砨齏淙ᑐ껠ℯ鵔븒䝔驋偓໲䕅䉚㻛眉胐例쑥끿㸨斀∹Յ㇥塕꾗ꖜ蚣ዡ鯢䙊䒿鵳ᘷﰷ≰ﲀ⚑㤗먔늏桋￭줼뒝ꔻ醄ࣔ᠙쐟즗靡໠䚫컓영轱㍯둲렂仕癤汁㋉࡜짐풢戝⸋㞝굇瘺⼣쬾ఄ먿‷㣲洗䒗⾪⠫븗猹඲ [ 296.226059][ T5953] az6027: usb out operation failed. (-71) [ 296.231881][ T5953] stb0899_attach: Driver disabled by Kconfig [ 296.239616][ T5953] az6027: no front-end attached [ 296.239616][ T5953] [ 296.254470][ T5953] az6027: usb out operation failed. (-71) [ 296.260444][ T5953] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 296.271198][ T8937] binder: 8935:8937 ioctl 400454a4 200000000080 returned -22 [ 296.290289][ T8937] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 296.301125][ T5953] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 296.320711][ T5921] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 296.349419][ T5953] dvb-usb: schedule remote query interval to 400 msecs. [ 296.363141][ T5953] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 296.408147][ T5953] usb 2-1: USB disconnect, device number 41 [ 296.504525][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 296.520981][ T5921] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 296.535101][ T5921] usb 3-1: config 0 has no interface number 0 [ 296.569263][ T5921] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 296.585792][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.596547][ T5921] usb 3-1: Product: syz [ 296.603597][ T5921] usb 3-1: Manufacturer: syz [ 296.610553][ T5921] usb 3-1: SerialNumber: syz [ 296.628974][ T5921] usb 3-1: config 0 descriptor?? [ 296.638879][ T5921] smsc95xx v2.0.0 [ 297.047630][ T5921] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 297.058881][ T5921] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 297.110573][ T8966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.058708][ T5921] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 298.070079][ T5921] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 298.108399][ T5921] usb 3-1: USB disconnect, device number 39 [ 298.246614][ T5953] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 298.294989][ T5928] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 298.346291][ T5928] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 298.369470][ T5928] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 298.385404][ T5928] usb 1-1: media controller created [ 298.419653][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.444128][ T8980] netlink: 40 bytes leftover after parsing attributes in process `syz.0.742'. [ 298.499946][ T5928] zl10353_read_register: readreg error (reg=127, ret==0) [ 298.585341][ T5928] usb 1-1: USB disconnect, device number 38 [ 298.613211][ T5953] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 298.794372][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.815932][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.833179][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.858239][ T5953] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 298.878791][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.977482][ T5953] usb 2-1: config 0 descriptor?? [ 299.215573][ T9000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.522222][ T5953] kye 0003:0458:5011.0009: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 299.587833][ T5953] kye 0003:0458:5011.0009: unknown main item tag 0x0 [ 299.673517][ T5953] kye 0003:0458:5011.0009: unknown main item tag 0x0 [ 299.680732][ T5953] kye 0003:0458:5011.0009: unknown main item tag 0x0 [ 299.702018][ T5953] kye 0003:0458:5011.0009: hidraw0: USB HID vff.fe Device [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 299.756110][ T5953] kye 0003:0458:5011.0009: tablet-enabling feature report not found [ 299.814997][ T5953] kye 0003:0458:5011.0009: tablet enabling failed [ 300.104499][ T9009] ================================================================== [ 300.112600][ T9009] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100 [ 300.120836][ T9009] Read of size 5 at addr ffff88802686cba0 by task fido_id/9009 [ 300.128370][ T9009] [ 300.130706][ T9009] CPU: 0 UID: 0 PID: 9009 Comm: fido_id Not tainted syzkaller #0 PREEMPT(full) [ 300.130724][ T9009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 300.130734][ T9009] Call Trace: [ 300.130740][ T9009] [ 300.130747][ T9009] dump_stack_lvl+0x189/0x250 [ 300.130768][ T9009] ? __virt_addr_valid+0x1c8/0x5c0 [ 300.130788][ T9009] ? rcu_is_watching+0x15/0xb0 [ 300.130804][ T9009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.130822][ T9009] ? rcu_is_watching+0x15/0xb0 [ 300.130837][ T9009] ? lock_release+0x4b/0x3e0 [ 300.130859][ T9009] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 300.130894][ T9009] ? __virt_addr_valid+0x1c8/0x5c0 [ 300.130914][ T9009] ? __virt_addr_valid+0x4a5/0x5c0 [ 300.130934][ T9009] print_report+0xca/0x240 [ 300.130949][ T9009] ? report_descriptor_read+0xb5/0x100 [ 300.130967][ T9009] kasan_report+0x118/0x150 [ 300.130990][ T9009] ? report_descriptor_read+0xb5/0x100 [ 300.131012][ T9009] kasan_check_range+0x2b0/0x2c0 [ 300.131034][ T9009] ? report_descriptor_read+0xb5/0x100 [ 300.131054][ T9009] __asan_memcpy+0x29/0x70 [ 300.131072][ T9009] report_descriptor_read+0xb5/0x100 [ 300.131092][ T9009] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 300.131107][ T9009] kernfs_fop_read_iter+0x3fe/0x640 [ 300.131133][ T9009] vfs_read+0x557/0xa30 [ 300.131155][ T9009] ? __pfx_vfs_read+0x10/0x10 [ 300.131176][ T9009] ? do_sys_openat2+0x154/0x1c0 [ 300.131191][ T9009] ? kmem_cache_free+0x18f/0x400 [ 300.131217][ T9009] ksys_read+0x145/0x250 [ 300.131250][ T9009] ? __pfx_ksys_read+0x10/0x10 [ 300.131268][ T9009] ? rcu_is_watching+0x15/0xb0 [ 300.131289][ T9009] ? do_syscall_64+0xbe/0x3b0 [ 300.131307][ T9009] do_syscall_64+0xfa/0x3b0 [ 300.131322][ T9009] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.131335][ T9009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.131350][ T9009] ? clear_bhb_loop+0x60/0xb0 [ 300.131367][ T9009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.131381][ T9009] RIP: 0033:0x7f64f55c4407 [ 300.131394][ T9009] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 300.131408][ T9009] RSP: 002b:00007ffea9f7edb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 300.131423][ T9009] RAX: ffffffffffffffda RBX: 00007f64f4f99880 RCX: 00007f64f55c4407 [ 300.131435][ T9009] RDX: 0000000000001000 RSI: 00007ffea9f7ee00 RDI: 0000000000000004 [ 300.131444][ T9009] RBP: 000055b2654ec730 R08: 0000000000000000 R09: 0000000000000000 [ 300.131453][ T9009] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b2654eb930 [ 300.131463][ T9009] R13: 00007ffea9f7ee00 R14: 0000000000000004 R15: 000055b2404a34d8 [ 300.131479][ T9009] [ 300.131484][ T9009] [ 300.392213][ T9009] Allocated by task 5953: [ 300.396538][ T9009] kasan_save_track+0x3e/0x80 [ 300.401229][ T9009] __kasan_kmalloc+0x93/0xb0 [ 300.405833][ T9009] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 300.412284][ T9009] kmemdup_noprof+0x2b/0x70 [ 300.416778][ T9009] hid_open_report+0x208/0xee0 [ 300.421528][ T9009] kye_probe+0x21/0x5f0 [ 300.425670][ T9009] hid_device_probe+0x39d/0x710 [ 300.430529][ T9009] really_probe+0x26d/0x9e0 [ 300.435057][ T9009] __driver_probe_device+0x18c/0x2f0 [ 300.440430][ T9009] driver_probe_device+0x4f/0x430 [ 300.445454][ T9009] __device_attach_driver+0x2ce/0x530 [ 300.450821][ T9009] bus_for_each_drv+0x24e/0x2e0 [ 300.455680][ T9009] __device_attach+0x2b8/0x400 [ 300.460435][ T9009] bus_probe_device+0x185/0x260 [ 300.465280][ T9009] device_add+0x7b6/0xb50 [ 300.469601][ T9009] hid_add_device+0x398/0x540 [ 300.474283][ T9009] usbhid_probe+0xe13/0x12a0 [ 300.478874][ T9009] usb_probe_interface+0x665/0xc30 [ 300.483993][ T9009] really_probe+0x26d/0x9e0 [ 300.488491][ T9009] __driver_probe_device+0x18c/0x2f0 [ 300.493769][ T9009] driver_probe_device+0x4f/0x430 [ 300.498783][ T9009] __device_attach_driver+0x2ce/0x530 [ 300.504142][ T9009] bus_for_each_drv+0x24e/0x2e0 [ 300.508979][ T9009] __device_attach+0x2b8/0x400 [ 300.513732][ T9009] bus_probe_device+0x185/0x260 [ 300.518568][ T9009] device_add+0x7b6/0xb50 [ 300.522881][ T9009] usb_set_configuration+0x1a87/0x20e0 [ 300.528332][ T9009] usb_generic_driver_probe+0x8d/0x150 [ 300.533782][ T9009] usb_probe_device+0x1c1/0x390 [ 300.538623][ T9009] really_probe+0x26d/0x9e0 [ 300.543119][ T9009] __driver_probe_device+0x18c/0x2f0 [ 300.548420][ T9009] driver_probe_device+0x4f/0x430 [ 300.553434][ T9009] __device_attach_driver+0x2ce/0x530 [ 300.558800][ T9009] bus_for_each_drv+0x24e/0x2e0 [ 300.563659][ T9009] __device_attach+0x2b8/0x400 [ 300.568416][ T9009] bus_probe_device+0x185/0x260 [ 300.573253][ T9009] device_add+0x7b6/0xb50 [ 300.577583][ T9009] usb_new_device+0xa39/0x16f0 [ 300.582333][ T9009] hub_event+0x2958/0x4a20 [ 300.586741][ T9009] process_scheduled_works+0xae1/0x17b0 [ 300.592273][ T9009] worker_thread+0x8a0/0xda0 [ 300.596849][ T9009] kthread+0x70e/0x8a0 [ 300.600909][ T9009] ret_from_fork+0x436/0x7d0 [ 300.605497][ T9009] ret_from_fork_asm+0x1a/0x30 [ 300.610267][ T9009] [ 300.612591][ T9009] The buggy address belongs to the object at ffff88802686cba0 [ 300.612591][ T9009] which belongs to the cache kmalloc-8 of size 8 [ 300.626293][ T9009] The buggy address is located 0 bytes inside of [ 300.626293][ T9009] freed 8-byte region [ffff88802686cba0, ffff88802686cba8) [ 300.639738][ T9009] [ 300.642054][ T9009] The buggy address belongs to the physical page: [ 300.648459][ T9009] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802686ce20 pfn:0x2686c [ 300.658534][ T9009] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 300.666595][ T9009] page_type: f5(slab) [ 300.670567][ T9009] raw: 00fff00000000200 ffff88801a441500 ffff88801a440348 ffffea0001da03d0 [ 300.679168][ T9009] raw: ffff88802686ce20 000000000080007f 00000000f5000000 0000000000000000 [ 300.687741][ T9009] page dumped because: kasan: bad access detected [ 300.694150][ T9009] page_owner tracks the page as allocated [ 300.699855][ T9009] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 12645758591, free_ts 12536802736 [ 300.718339][ T9009] post_alloc_hook+0x240/0x2a0 [ 300.723112][ T9009] get_page_from_freelist+0x21e4/0x22c0 [ 300.728669][ T9009] __alloc_frozen_pages_noprof+0x181/0x370 [ 300.734462][ T9009] alloc_pages_mpol+0x232/0x4a0 [ 300.739328][ T9009] allocate_slab+0x8a/0x370 [ 300.743818][ T9009] ___slab_alloc+0xbeb/0x1420 [ 300.748515][ T9009] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 300.754935][ T9009] kstrdup+0x42/0x100 [ 300.758912][ T9009] __kernfs_new_node+0x9c/0x7e0 [ 300.763769][ T9009] kernfs_new_node+0x102/0x210 [ 300.768522][ T9009] kernfs_create_link+0xa7/0x200 [ 300.773452][ T9009] sysfs_do_create_link_sd+0x83/0x110 [ 300.778817][ T9009] device_add_class_symlinks+0x1cf/0x240 [ 300.784445][ T9009] device_add+0x475/0xb50 [ 300.788760][ T9009] device_create+0x25b/0x2f0 [ 300.793338][ T9009] mon_bin_add+0xb6/0x130 [ 300.797657][ T9009] page last free pid 980 tgid 980 stack trace: [ 300.803797][ T9009] __free_frozen_pages+0xbc4/0xd30 [ 300.808905][ T9009] vfree+0x25a/0x400 [ 300.812797][ T9009] delayed_vfree_work+0x55/0x80 [ 300.817644][ T9009] process_scheduled_works+0xae1/0x17b0 [ 300.823193][ T9009] worker_thread+0x8a0/0xda0 [ 300.827782][ T9009] kthread+0x70e/0x8a0 [ 300.831861][ T9009] ret_from_fork+0x436/0x7d0 [ 300.836463][ T9009] ret_from_fork_asm+0x1a/0x30 [ 300.841239][ T9009] [ 300.843550][ T9009] Memory state around the buggy address: [ 300.849164][ T9009] ffff88802686ca80: 06 fc fc fc 00 fc fc fc 00 fc fc fc 00 fc fc fc [ 300.857214][ T9009] ffff88802686cb00: 00 fc fc fc 00 fc fc fc 00 fc fc fc 06 fc fc fc [ 300.865262][ T9009] >ffff88802686cb80: 05 fc fc fc fb fc fc fc 00 fc fc fc fa fc fc fc [ 300.873349][ T9009] ^ [ 300.878446][ T9009] ffff88802686cc00: fa fc fc fc 06 fc fc fc fa fc fc fc 07 fc fc fc [ 300.886496][ T9009] ffff88802686cc80: 07 fc fc fc 05 fc fc fc 05 fc fc fc 00 fc fc fc [ 300.894540][ T9009] ================================================================== [ 300.974075][ T9009] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 300.981309][ T9009] CPU: 0 UID: 0 PID: 9009 Comm: fido_id Not tainted syzkaller #0 PREEMPT(full) [ 300.990324][ T9009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 301.000380][ T9009] Call Trace: [ 301.003663][ T9009] [ 301.006606][ T9009] dump_stack_lvl+0x99/0x250 [ 301.011194][ T9009] ? __asan_memcpy+0x40/0x70 [ 301.015789][ T9009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.021008][ T9009] ? __pfx__printk+0x10/0x10 [ 301.025608][ T9009] vpanic+0x281/0x750 [ 301.029586][ T9009] ? preempt_schedule+0xae/0xc0 [ 301.034453][ T9009] ? __pfx_vpanic+0x10/0x10 [ 301.038975][ T9009] ? preempt_schedule_common+0x83/0xd0 [ 301.044437][ T9009] ? preempt_schedule+0xae/0xc0 [ 301.049279][ T9009] ? __pfx_preempt_schedule+0x10/0x10 [ 301.054672][ T9009] panic+0xb9/0xc0 [ 301.058403][ T9009] ? __pfx_panic+0x10/0x10 [ 301.062814][ T9009] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 301.068705][ T9009] ? is_module_address+0x17/0xf0 [ 301.073648][ T9009] ? report_descriptor_read+0xb5/0x100 [ 301.079120][ T9009] check_panic_on_warn+0x89/0xb0 [ 301.084057][ T9009] ? report_descriptor_read+0xb5/0x100 [ 301.089510][ T9009] end_report+0x78/0x160 [ 301.093749][ T9009] kasan_report+0x129/0x150 [ 301.098259][ T9009] ? report_descriptor_read+0xb5/0x100 [ 301.103727][ T9009] kasan_check_range+0x2b0/0x2c0 [ 301.108663][ T9009] ? report_descriptor_read+0xb5/0x100 [ 301.114117][ T9009] __asan_memcpy+0x29/0x70 [ 301.118534][ T9009] report_descriptor_read+0xb5/0x100 [ 301.123834][ T9009] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 301.129285][ T9009] kernfs_fop_read_iter+0x3fe/0x640 [ 301.134483][ T9009] vfs_read+0x557/0xa30 [ 301.138642][ T9009] ? __pfx_vfs_read+0x10/0x10 [ 301.143338][ T9009] ? do_sys_openat2+0x154/0x1c0 [ 301.148184][ T9009] ? kmem_cache_free+0x18f/0x400 [ 301.153130][ T9009] ksys_read+0x145/0x250 [ 301.157379][ T9009] ? __pfx_ksys_read+0x10/0x10 [ 301.162142][ T9009] ? rcu_is_watching+0x15/0xb0 [ 301.166925][ T9009] ? do_syscall_64+0xbe/0x3b0 [ 301.171599][ T9009] do_syscall_64+0xfa/0x3b0 [ 301.176098][ T9009] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.181287][ T9009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.187344][ T9009] ? clear_bhb_loop+0x60/0xb0 [ 301.192024][ T9009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.197912][ T9009] RIP: 0033:0x7f64f55c4407 [ 301.202339][ T9009] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 301.221940][ T9009] RSP: 002b:00007ffea9f7edb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 301.230350][ T9009] RAX: ffffffffffffffda RBX: 00007f64f4f99880 RCX: 00007f64f55c4407 [ 301.238323][ T9009] RDX: 0000000000001000 RSI: 00007ffea9f7ee00 RDI: 0000000000000004 [ 301.246372][ T9009] RBP: 000055b2654ec730 R08: 0000000000000000 R09: 0000000000000000 [ 301.254335][ T9009] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b2654eb930 [ 301.262297][ T9009] R13: 00007ffea9f7ee00 R14: 0000000000000004 R15: 000055b2404a34d8 [ 301.270264][ T9009] [ 301.273603][ T9009] Kernel Offset: disabled [ 301.277927][ T9009] Rebooting in 86400 seconds..