last executing test programs:

11.027452815s ago: executing program 4 (id=347):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc293, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x9)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
dup(r4)
epoll_create1(0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x29}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008048)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=0x1000)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe4, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xe4}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14000000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x3d, 0x701, 0x0, 0x0, {0x3}, [@typed={0x1, 0x14c}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0xb, {[@main=@item_012={0x2, 0x0, 0xa, '(?'}, @global=@item_4={0x3, 0x1, 0x3, "0300"}, @main=@item_012={0x2, 0x0, 0xb, 'rG'}]}}, 0x0}, 0x0)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x0, 0x0})

10.978010089s ago: executing program 0 (id=348):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sync_file_range(r1, 0x7, 0x81, 0x4) (async)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000027c0)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1}, [{}, {0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0xec0}, {0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7f0}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0xffffffff}, {0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x20000, 0x8}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xcb1}, {}, {0x0, 0x0, 0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x100}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xeb4}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0) (async)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r6) (async)
fstat(r0, &(0x7f0000000340)) (async, rerun: 32)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0) (rerun: 32)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000240), r7) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r9, 0x0, 0x1}, 0x18) (async)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x8000, &(0x7f00000003c0)={[{@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@subj_type={'subj_type', 0x3d, '/dev/kvm\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) (async)
pipe2(&(0x7f0000000040), 0x0)

9.714393796s ago: executing program 2 (id=355):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000004000000f0183bbb761cdc34000000005e7769cc6e5bfcfee9354b3d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
listen(0xffffffffffffffff, 0x8)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x608102, 0x0)
ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000340)={0x28, 0x2, 0x0, 0x0, <r2=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000300)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f00000003c0)={0x20, r2, &(0x7f0000000380)=[{0x0, 0x3}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x1}], 0xdeadbeef, 0x8, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

9.570272167s ago: executing program 2 (id=356):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
timerfd_create(0x0, 0x800)
io_submit(0x0, 0x0, &(0x7f0000000500))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
pselect6(0x40, &(0x7f0000000000)={0x3, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x4}, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000b00)={'gre0\x00', &(0x7f0000000a00)={'gretap0\x00', <r5=>0x0, 0x40, 0x7800, 0x0, 0x198, {{0x34, 0x4, 0x3, 0x4, 0xd0, 0x66, 0x5, 0xfa, 0x2f, 0x0, @broadcast, @local, {[@rr={0x7, 0x1b, 0xd5, [@private=0xa010102, @multicast1, @remote, @rand_addr=0x64010101, @multicast2, @multicast1]}, @cipso={0x86, 0x10, 0x1, [{0x0, 0xa, "33c765b610d7d011"}]}, @lsrr={0x83, 0x13, 0x73, [@loopback, @loopback, @local, @broadcast]}, @rr={0x7, 0x7, 0xf, [@local]}, @timestamp={0x44, 0x18, 0x58, 0x0, 0x3, [0x0, 0x344, 0xd, 0x8, 0xa9]}, @ssrr={0x89, 0x1f, 0xa6, [@loopback, @remote, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x33, 0x2, [{0x0, 0x11, "fffa7fd49ba57ddf9d2a51273b03bf"}, {0x6, 0xb, "232492a794c1ef39a2"}, {0x2, 0xa, "784e67d5bb758433"}, {0x5, 0x7, "23c52c0987"}]}, @timestamp={0x44, 0x8, 0x74, 0x0, 0x8, [0x9]}]}}}}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000005040)=@newtaction={0x6674, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x43e0, 0x1, [@m_ctinfo={0x1078, 0x1a, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0xe3, 0x0, 0xb6, 0x5}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x7, 0x0, 0xb5, 0x101}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x1ac, 0x1a, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x26258418, 0x5, 0x3, 0xffff}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x1, 0x4, 0x2}, 0x96}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc6, 0x5, 0x20000000, 0x7, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xfffffffd, 0x4, 0x3, 0x401}, 0x2124}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x181d67ba, 0x20000000, 0x1, 0x78a6}, 0xfbff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0x5, 0x2, 0x2}, 0x2f29}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x8, 0x8, 0x4b7}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x10000000, 0x5, 0x2}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf00, 0x0, 0x6, 0x1000, 0x1}}}]}, {0x7e, 0x6, "be8aa16e24fd4e46ccff23b8dba23fe3e5d7814c95569ff3cb04852e3062eefe81497bc4be1553b839b9ae64c167777fbd171f35eaea4a1169230f10884ec4e032738a2a3d35854a0021a7dce9160268a562cbbe6a5888f6153ebadc8b311949c0b077cb1c2bc0ed4b3e72c45a0548d982f577e3aa09ece4de3f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_police={0x2a64, 0x5, 0x0, 0x0, {{0xb}, {0x1a38, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x101, 0x10001, 0x6, 0x2, 0x0, 0x67ba, 0xe, 0x5, 0xfffffff3, 0x1, 0x8, 0x7, 0x1ff, 0x3a96, 0x528, 0x69, 0x10001, 0x7, 0x5, 0x9, 0x0, 0x5, 0x4, 0x80000000, 0x9, 0x0, 0x1, 0x7, 0x0, 0x7, 0x6, 0xeb, 0xfffffff8, 0x2, 0xe6a, 0x2, 0x3ff, 0x96, 0x4, 0x2813, 0xfff, 0xfffffff8, 0xf, 0x40, 0x5, 0x7fff, 0x480, 0xfffffffe, 0x800, 0x8, 0x11, 0x4, 0x1, 0x4c, 0x2, 0x37b, 0xfffffff7, 0x4, 0x2, 0x1000, 0x401, 0x662e31f6, 0x5, 0x9, 0x2fd, 0x7fffffff, 0x2000000, 0x7, 0x1, 0x7, 0x80000001, 0x3ff, 0x1, 0xcf64, 0x6, 0x7, 0xfffffc85, 0x7f, 0x505, 0x6, 0x2, 0xfffffbff, 0x6, 0x107a4fcb, 0x8, 0x0, 0x0, 0x1, 0x2, 0x3, 0xf931, 0x1, 0x4, 0x3, 0x3ff, 0xff, 0xfffff800, 0x3, 0x0, 0x800000, 0x10000, 0x16, 0x4, 0x3, 0x80, 0x2, 0x5, 0xad, 0x5, 0x1, 0x9, 0x7ff, 0x663a, 0x7fff, 0x2, 0x9, 0x7, 0x10000, 0x81, 0x9, 0x299, 0xa, 0x4, 0x0, 0x3, 0x4, 0xfffffffa, 0x9, 0x200, 0x3, 0xc, 0x6, 0x2, 0x3, 0x2be, 0xc, 0x9, 0x2, 0x10000, 0x8001, 0x8, 0x7, 0x0, 0x0, 0x9, 0x40, 0x6, 0x8, 0x7, 0x3, 0x97d, 0x8, 0x33, 0x8, 0x2, 0x4, 0x0, 0x2bd9, 0xff, 0x9a6, 0x8, 0x7, 0xf, 0xfffffffe, 0x4, 0x3, 0x401, 0xe, 0x3, 0xa, 0x3, 0x73a, 0x2, 0x6, 0x5, 0x2, 0x0, 0xffffffff, 0x4, 0x40, 0x8, 0xa72, 0x7, 0x2, 0x400, 0x2, 0x0, 0xfffffff7, 0x7, 0xff, 0x1852, 0x101, 0x3, 0x932, 0x1000, 0x4, 0xffffffff, 0x3f, 0x8, 0x7, 0x100, 0x81, 0x3fe, 0x0, 0x4, 0x100, 0xfffffff9, 0x5e7, 0x8000, 0x4, 0xff, 0x3d09, 0xfff, 0x8, 0x1, 0x3, 0x9, 0x0, 0x9, 0x7, 0x7, 0x4, 0x273, 0x4c, 0x1, 0x9, 0x10000, 0xc2, 0x8, 0x6, 0x7, 0x3, 0x0, 0x0, 0x80000000, 0x1ff, 0x0, 0x4, 0x9, 0x6, 0x4, 0x4, 0x0, 0xd48, 0xc, 0x5, 0xfffffff7, 0x4, 0xffffff7f, 0x1a2, 0x0, 0x2, 0x9, 0x2, 0x7ff, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1b5}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffff5b6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x2, 0x1, 0x7, 0x0, {0x10, 0x2, 0x0, 0x81, 0x100}, {0x7, 0x0, 0xfa, 0xc60, 0xd2b, 0x1000}, 0x7ff, 0x5, 0x6}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffdffffffb, 0x3ff, 0x40, 0xa55, {0x4, 0x0, 0x0, 0xfff, 0x2, 0xfff}, {0xfa, 0x1, 0x100, 0xcf2, 0xf, 0xe1d1}, 0x7, 0xa4, 0x399}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x8, 0x5, 0x3, 0x10000, 0x5, 0x4, 0x10000, 0xfffffff0, 0x8, 0x2, 0x1ff, 0xbc, 0xf97, 0x7, 0x6e5, 0x401, 0x0, 0x9, 0xab6, 0x5, 0x5, 0x4942, 0x1, 0x9, 0x10000, 0x1, 0x58f, 0x3, 0x5236, 0x80, 0x3, 0x7, 0xff, 0x0, 0x3, 0x40, 0x800, 0x2, 0x4a57, 0xb, 0x9, 0x3ff, 0x0, 0x3, 0x0, 0x80000000, 0x2, 0x7fffffff, 0xfffffc00, 0x7fff, 0x5, 0x1ff, 0x7, 0x0, 0x5, 0x3, 0x3ff, 0x1, 0x1, 0x3f, 0x0, 0x6, 0xfffffffb, 0x5, 0x4, 0x8, 0x18ef, 0x400, 0x9, 0x8, 0x6, 0x4, 0x79f, 0x7ff, 0x8a5, 0x1ff, 0xbb38, 0x6, 0xfffffbff, 0x80000001, 0x5, 0xfff, 0xd, 0x1ff, 0x0, 0x3, 0x2, 0xfffffff8, 0x2, 0x3374, 0x0, 0x4dc0, 0x8, 0x2, 0x6, 0x7, 0x0, 0x1000, 0x2, 0x8000, 0x0, 0x7ada610d, 0x5, 0x60f, 0xb, 0x200, 0x1, 0x6dc, 0x0, 0x0, 0x0, 0x80, 0x2, 0xeb, 0x81, 0x9, 0x7, 0x3, 0x2, 0xfffff7ae, 0xb0, 0x7d8c, 0x8, 0xb, 0x401, 0xbb0f, 0x2, 0xe6f, 0x40, 0x8, 0x0, 0x9, 0x77, 0x5, 0x5, 0x1ff, 0x1, 0x16a, 0x1, 0xcf21, 0x6, 0x7cf67470, 0xcb, 0x7, 0x0, 0x7, 0xd5, 0xff, 0x9, 0x1, 0x3, 0x1ff, 0x8, 0x1, 0x7fff, 0x200, 0x7, 0x5, 0x40, 0x7fffffff, 0xfffffff7, 0xfb, 0x6, 0x1, 0x7ff, 0xffff, 0x0, 0x1, 0x2, 0x100, 0x7fffffff, 0x6, 0xbe, 0x4, 0x7fff, 0x100, 0x4, 0x3, 0x0, 0xe, 0x2, 0x2, 0x3, 0x0, 0x5, 0x8, 0x3, 0x7, 0x2, 0x100, 0xa, 0x4, 0x3, 0x0, 0x6be, 0xdae, 0x6, 0x9, 0x9, 0x6, 0x10001, 0x6, 0x6, 0xac6, 0x1, 0x3, 0x1, 0x9, 0x0, 0x93, 0x1, 0x1, 0x1e84, 0xe, 0x80000000, 0x9, 0xde27, 0x2, 0x67, 0x7, 0x9, 0xc1e, 0x7, 0x8, 0x9a, 0x7cc5, 0x3, 0x5, 0x6, 0xf, 0x28000000, 0x9, 0x2, 0x8, 0x8, 0x6, 0x1, 0x3, 0x9a54, 0x1, 0x2, 0x0, 0x3, 0x3, 0xffffffff, 0x80000000, 0x400, 0x7, 0x6, 0x6, 0x32bd110, 0xe507, 0x1000, 0x3, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x70e, 0x1, 0x389, 0xfffffffb, 0x7, 0x1800000, 0x0, 0x101, 0x83d, 0x8, 0x7, 0x0, 0x6, 0x5, 0x800, 0x73c, 0xfff, 0xff, 0x1000, 0x0, 0x2, 0x0, 0x7f33b085, 0x6, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, 0x3d, 0x2, 0x3, 0x516f, 0xfffffffc, 0x1, 0x40, 0x9, 0x7, 0x7, 0x7fff, 0x2, 0xfc, 0x3, 0x7, 0x7c8ba499, 0x8, 0x4635, 0x49, 0x3, 0x4, 0x8001, 0x1, 0x1, 0x101, 0x5, 0x8000, 0x3, 0x40, 0x0, 0x7f, 0x800, 0x3, 0x21f, 0x0, 0x7, 0x5, 0xfa4, 0xfff, 0x101, 0x80000000, 0x401, 0xd04, 0x5, 0x2, 0x10, 0xf93, 0x7801, 0x4, 0x7, 0x48, 0x88d, 0x6, 0xf9, 0xffffffff, 0xfffffe00, 0xee72, 0x230df43, 0xc3, 0x7, 0x101, 0xf, 0x2, 0x5, 0x4, 0x2d, 0x101, 0xffff, 0x8b46, 0x3, 0x0, 0x0, 0x3, 0x7, 0x6, 0x3, 0x4, 0x5, 0x3, 0x7, 0x7927, 0x7, 0x6, 0x8, 0x7, 0xffff, 0x9, 0x0, 0x3dc, 0x1, 0x2, 0x0, 0x0, 0xfffffff9, 0x2, 0x9, 0x1, 0x8, 0x5f, 0x10000, 0x80000001, 0xe299, 0x4, 0x5, 0x2000, 0x2, 0x3, 0x7, 0x6e6b, 0x9, 0x5, 0xd932, 0x4, 0x5, 0xb, 0xfffffffe, 0x80000001, 0x1, 0x9e, 0x7, 0x7, 0x7fff, 0x3, 0x800000, 0xffff0001, 0x1, 0x0, 0x3165, 0xa73, 0x4, 0xff, 0x2, 0x800, 0x7f, 0x0, 0x3ff, 0x9, 0x100, 0x80000000, 0x8f83, 0x400, 0x80000001, 0x3ff, 0xfffffc00, 0x1, 0x4, 0xe3, 0x0, 0xfffffffb, 0xd, 0x8, 0x360a, 0x0, 0x5, 0x9, 0x9, 0x1ff, 0x1, 0x0, 0xe7, 0x2, 0xe, 0x100, 0x9, 0x1, 0xcc21, 0x4, 0x9e, 0x2100, 0x1, 0x7ff, 0x4, 0x7f, 0x3, 0xfffffffc, 0x1, 0x4, 0xd, 0xa217, 0x7, 0x8, 0xfffffff9, 0xffffff67, 0x2, 0x9, 0x7a6d, 0x4, 0xffffffff, 0x7d0, 0x7ff, 0x4, 0x8, 0x3, 0x1, 0xfff, 0x2, 0x8, 0x8, 0x7, 0x3, 0xa1, 0x2, 0x1, 0xfffffff9, 0xa77, 0x4, 0x2, 0x2, 0x3a79, 0x83, 0x7804, 0xc, 0x3, 0xb9, 0x200, 0xd, 0x49f, 0x7, 0x2, 0x2, 0x800, 0x7645, 0x4, 0x1, 0x2c98, 0x0, 0x4af8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2ea}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0xa80, 0x101, 0xb, {0x2, 0x2, 0x5, 0x3, 0x4, 0x88}, {0x8, 0x2, 0x3, 0xb, 0x5fb, 0x7}, 0x8001, 0x2, 0x4}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0x6, 0x1, 0x101, {0xdd, 0x0, 0x6, 0x7f, 0x31d, 0x8}, {0x6, 0x2, 0x5, 0x6, 0xe11, 0x5}, 0xfa8, 0x8, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x200}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8087}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x46c4, 0x0, 0x9, 0x0, 0x1, 0xed6d, 0x0, 0xcb, 0x5, 0x5, 0xd634, 0x4, 0x9, 0x3, 0x3, 0x5, 0x0, 0x1, 0x7fffffff, 0x7, 0x9, 0x1, 0x1, 0xd, 0x7f, 0x0, 0x4, 0x1, 0x2, 0x1f7, 0x9, 0x7, 0x0, 0x4, 0x6, 0x400, 0x0, 0x9, 0xce23, 0x0, 0x200, 0xfffffffb, 0xff, 0x0, 0x400, 0x9, 0x4, 0x3, 0x3, 0x6, 0xd0, 0x4, 0xeee, 0x6, 0x5, 0xb, 0xfffffc01, 0xfffffff9, 0x7, 0x1a28, 0x7, 0x3, 0xd, 0x16, 0xfffffffc, 0x80000000, 0x3ff, 0x2, 0x8, 0x8, 0x0, 0x7, 0x401, 0x2, 0x4, 0x80, 0x401, 0x9, 0x6, 0x0, 0x1, 0x10000, 0x4, 0xff, 0x0, 0x2, 0x40, 0x0, 0x80, 0x1, 0x8620511, 0x80, 0xfffffffe, 0x4, 0x7, 0x7, 0x433, 0x3, 0x4, 0xfffffe01, 0x3, 0x0, 0x9c7, 0xfffffff7, 0xe75, 0x7, 0x17cdc380, 0x5, 0x8, 0x3, 0x0, 0x200, 0x8, 0x4, 0x1000, 0xf5, 0x6, 0x2, 0xf3, 0x5, 0xf24, 0x7f, 0xffff2c20, 0x1ff, 0x722, 0xffff8001, 0x101, 0xea89, 0x45, 0x81, 0x8001, 0x6, 0x1ff, 0x2, 0x0, 0x0, 0xffffffff, 0x7, 0x1, 0xae, 0x800, 0x1000, 0x7, 0x5, 0x9, 0xfffffffe, 0xe, 0x0, 0x8, 0x5, 0x100, 0x5, 0x6, 0x8001, 0x101, 0x2, 0x5, 0x8, 0x187, 0x5, 0x2, 0xfffff82e, 0x9, 0xffffffff, 0x5, 0x5, 0xfffffffd, 0x9, 0x5417, 0x2, 0x6, 0x8, 0xb8c1, 0x0, 0x6, 0x80db, 0x101, 0x1, 0x5, 0x8, 0xfffffff0, 0x1000, 0xb0, 0x8c, 0xecf, 0x6, 0xfffffffe, 0x5, 0x2, 0x4, 0x1, 0x800, 0xfff, 0x8, 0x4, 0x80000001, 0x48c, 0x1, 0x2, 0x9, 0xfffffffd, 0x3ff, 0xffffffff, 0x4, 0x81, 0x4, 0x10001, 0x3c9, 0x9c, 0x1, 0x400, 0x4, 0x0, 0x3, 0x1, 0x2, 0x40, 0x7, 0x4, 0x10, 0x2, 0x0, 0x623ab359, 0x9, 0x0, 0x8001, 0x0, 0x5, 0x3, 0x79, 0x8, 0x0, 0x0, 0xffff, 0x3ff, 0xa454, 0x9, 0xe57, 0x4, 0x1, 0x9e8, 0x200, 0x0, 0x0, 0xffffffff, 0x3, 0x3, 0xe, 0x0, 0x40, 0xfff, 0x8000, 0x3ff, 0x5, 0x6, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x7f, 0x0, 0x4, {0x6, 0x0, 0xb2, 0x5, 0x4, 0x3}, {0x10, 0x0, 0x8, 0x81, 0x7, 0x1}, 0x2, 0x6, 0x5}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x2, 0x2, 0x9, 0x5, {0x8, 0x0, 0x1, 0x9, 0xfe, 0x5}, {0x6, 0x1, 0x81, 0x9, 0x0, 0x2}, 0x7, 0x401, 0x9}}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0xdee2, 0x10, 0x4, 0xd99e, 0x400, 0x800, 0x10, 0xad1, 0x3, 0x400, 0x1000, 0xfffff577, 0x1ff, 0x0, 0x4, 0xc8, 0xbc, 0x9, 0x9, 0x0, 0xd, 0xfe, 0x5166, 0x8, 0x6a5, 0x5, 0x2, 0x3, 0x4, 0xe, 0x4317, 0x8, 0x2, 0x9fce, 0xfff7, 0x6, 0x6, 0xfffffffb, 0x1, 0x45, 0x4, 0xffff, 0x2, 0x3, 0x4, 0x7, 0x2, 0xa93, 0x2, 0x182, 0x0, 0x7, 0x7, 0x9, 0x4295, 0x7ff, 0x8000, 0x10000, 0x81, 0x9, 0x9, 0x9, 0x0, 0x6, 0x1, 0x6, 0x4, 0x81, 0xce5, 0x7, 0x200, 0x3, 0xb, 0x80, 0xffffffff, 0x79dd, 0x3, 0x67ed, 0x5, 0x80000001, 0x6, 0x6, 0x5, 0x80000001, 0x7, 0xfffffffb, 0x0, 0x9, 0x1, 0x1, 0x5, 0x40, 0x1000, 0xffffff7b, 0x9, 0x3, 0xe20, 0x3, 0xb, 0x4, 0x7f, 0xc5a0, 0x0, 0xb3, 0xd6d, 0x4, 0xd, 0x9, 0x1, 0x10, 0x9, 0x7, 0x2, 0x8, 0x9, 0x4, 0xc, 0x3, 0x8, 0x1, 0x8001, 0x9, 0x7fffffff, 0x1ff, 0x401, 0x8acd, 0x4, 0x3ff, 0x6, 0xfffffffd, 0x200, 0x1ff, 0x7d, 0x5, 0x6, 0x7, 0xb7b, 0x8, 0xb, 0x1, 0xffffff81, 0x7, 0x2000, 0x2, 0x8, 0x1000, 0x8, 0x7fff, 0x1, 0x3, 0x8, 0x9, 0x9, 0xff, 0x3, 0x100, 0x3, 0x101, 0x8, 0x0, 0xc, 0x2, 0x6, 0x1, 0xaea, 0x9, 0xb9, 0x7, 0x1, 0xe, 0xfffffffc, 0x148e7c7e, 0xa3, 0x4, 0x8a, 0x8000, 0x0, 0xd, 0x2, 0xfff, 0x3ff, 0xf890, 0x6f1d2f3d, 0x80, 0x9d8, 0x2, 0xd44, 0x7, 0x0, 0x9, 0x3, 0x3, 0x1000, 0xc, 0x744, 0x1, 0xd, 0x8, 0x7fffffff, 0x3, 0x6, 0x80000000, 0x1b1d7b80, 0xfffffffa, 0xda, 0x2, 0x5, 0x4, 0x38f, 0x8000, 0x6, 0xaf, 0x7fff, 0x7, 0x6, 0xfffffffd, 0x2, 0x1f, 0x5, 0x6, 0x7, 0x6, 0x5, 0x5, 0x80000001, 0xffffffff, 0x1, 0x7, 0xaf3, 0x355, 0xf60, 0x8, 0x1, 0x3, 0x2, 0x3b, 0x4, 0x40, 0x8, 0xc, 0x2, 0x9, 0x5, 0x8a, 0x2, 0x8000, 0x1, 0x2, 0x2, 0x970, 0x7a, 0x2, 0x7fffffff, 0x1, 0x5, 0xfffffff7]}, @TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x1, 0x5, 0xf31, 0xffff, 0x80000001, 0xe7ab0f85, 0x5, 0xba, 0xab4d, 0xfc56, 0x6, 0x5, 0x7, 0x2, 0xfffffffa, 0x5, 0x0, 0xff, 0x9, 0x6, 0x4, 0x80000000, 0x7, 0x9, 0x16b, 0x7, 0x1, 0x9, 0x4, 0x7, 0x6, 0x6a0, 0x1, 0x86e, 0xe, 0x9, 0x0, 0x3, 0x8000, 0x8, 0x3, 0x7f, 0x401, 0x4, 0x2, 0x1, 0x2, 0x1, 0x2f, 0xda, 0x400, 0x0, 0x5, 0x6, 0x10000, 0x1e0, 0x7fff, 0x4, 0x9, 0x2, 0x51ae, 0x0, 0x400, 0xa, 0x6, 0x4, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0x7560, 0x5, 0x44142897, 0x6ec951c2, 0x40, 0x5, 0x80, 0x400, 0x7, 0xe, 0x2, 0xca, 0x9, 0x1, 0x9, 0x9, 0x7, 0x901, 0x6, 0xf1, 0x4b, 0xe, 0x6a85da6b, 0x5, 0x5, 0x9, 0xe96f, 0x0, 0x1, 0x7ff, 0xcb0, 0x8fb, 0x3, 0x9, 0xfffffffc, 0x101, 0x8, 0x8, 0x4, 0x2542, 0x80000000, 0x6, 0x5, 0x5, 0x5, 0x2, 0x2, 0x3, 0xfffff4d2, 0x7e8e4b8, 0x4, 0x4, 0x8000, 0x9, 0x9, 0x8, 0x1, 0x6, 0x6, 0xd9a, 0x5, 0x0, 0x5, 0x8, 0x81, 0x5, 0x5, 0x9, 0x0, 0x6, 0x249, 0x4, 0x1a4, 0x7, 0x1000, 0xe6f9, 0x3eb, 0xff, 0x2, 0x80, 0x1, 0x2, 0x5, 0x10000, 0x9, 0x5, 0x401, 0x1, 0x8, 0x9, 0x95a9, 0x1ff, 0x9, 0x6, 0x2, 0x4, 0x6, 0x5, 0x101, 0x0, 0x2, 0x0, 0x200, 0x2, 0x1fd, 0x5, 0x2, 0x175d, 0x9, 0x1, 0x8, 0x80000001, 0x40, 0x2, 0x2, 0x6, 0x80000000, 0x9, 0x9, 0x6, 0xa31e, 0x9, 0x101, 0x5, 0x401, 0x4, 0xfff, 0x23, 0x2, 0x5a, 0xfff, 0x2, 0x8, 0xb, 0x5, 0xfffff3b0, 0x0, 0x1, 0x3ff, 0x0, 0x40, 0x4fa, 0x1, 0x0, 0x4, 0xcfc, 0x4, 0x3, 0x9, 0x7f, 0xfffffffb, 0x3, 0x9, 0x1, 0x7, 0x8, 0x1, 0xc, 0xfffff2c7, 0xfffffffa, 0x5c, 0x400, 0xff, 0xa88, 0x1, 0x3, 0x0, 0x9, 0x8, 0x1, 0x48b, 0x4, 0xc, 0x5, 0x8, 0xc, 0xc, 0x9, 0x7, 0xd, 0x9b1, 0x20119847, 0x6, 0xfffffff8]}], []]}, {0x1004, 0x6, "9b96b8d1e839da4d567ad0ea60a94e52d0af1badfb77b55d2b5de56c2ec34e2d4ba599f52a6f7483f04d193eb438049519008c28ac63bb5c817c2cf5b6a574934fcee20cd9455cd286f10b590bbe3a73f5849bc658ae6476009468e8c0484ad4fc111b6a2f75db65f6097895b1cee5b0b9b9bff830d165fe30ba3cd61ed5f3955fbf7626c6f8149449834e66370bc07361e3db517baa01818cabcdc7482ba81c9640736ea9f89891722b462a00995fdce13af8b77bccab308daa67dd48e9aea4aabb6c3989b82ed34c1ab1c2e3f506e3f6ed18b334608b63525f5a2984b268d7167ed5d8c8744d9af03eb2646114cdf3655bd91317eb2bf4da065c6c0d3177959be9599050fb722eedcd7323c140177746287201a76f5da60d9cedeba1ecca51cbaa774b800a969ad7e96c19afd6fda0c62ada8f8e9cb1b8c3d71cef0cb0c6703fe60ab3ca5459e9f3df27e7786c39b6706a43bba5664cdcea7e95ae9c557efd03a9e6c920f28f7b46e9ecf851270e26ffd9297624babe6cc42c3ed486443e68fda45905c12ce4584bd81359132b292ae0cd91b33e751bf96e598474d1d592cbf0fd6634cf5c44b21dbe27d3696960c4a29926e6a6c5d6f2f9cd64c58586a94054c9e5a97e37d0c62a26947c251c20aff29752e5cf84f5d2a60022156055a69286eba6be6619625340efe96c460298540451752612fbafaf609272548f395f4cd424c5ecdebc23fe380ecbacd2084829b6bbf8a31aa997fb08e0290134b63a3312a6d92da6916131f169c71e866ea197633ca69fb47522edccd982143b6aa5837b0f4008e48d2bcbe4fb2a5b2833437d9a4198f62f0235b9c0522f9dcffa66d54d293c2bf57fb3a257bb68f557eba74fac1e57e141d54fbbd92c561bbca0545acc98ce54e5993dafbadd6af20d8ad957688acc06697d8865d477cec9ff87be79f8c2da6bf99a47a1ea7ab28f330c48884f8bc4bee333d2454686a7e81bb43d5cd6be03565c822accfc726316946a3662f913c2157ae335008066fdb35119b2806e69be18dde3193f56f4665a2120c80875623d2268689beefe0eb73198ef1f2e9577bf1f1eaa8c21daa6bc72edef154086cddc40b889edb0a8a0eb149680adf3e423f5815b487ce316baa30df63a9930202b590d8e32f5b3904b934bd0ef45b81538156f13020f132b7f3de428095d0bde542358f30f8105d14068388c9fc9df66f3d2e8f1a13123863376f0dee772adfebf2be39b5225c13f44a609e2213c73fa246ad7ecd87027a4464505f1ba401b85a7275df097510187d7cd76a2d4fa193d723e975bc2667b44fc5f4635393e2fe33c7e7fd24577321f80284fe5b2094b323655e4b172af192e337ff8102ada3c36003428101befeff93a47e95ad2d23407531983425f3c81d993c010de7a43934d001dfd8ef9dc8799da69382fb3ebb806dc960c7ead1bb9ac26e1209af8b3c2c8bc5e66e4f59d86ef3f6b42f9972f6a0a6b775a78884f17d73d1c1031b730a08b3608c406511b22e338d003629dcd1f1bc7e9c027f08535a379b8d94e69434a098b5e276ac2b16fa59dd3cc1d87553230a4400114170eba139ded3a41d5c87f9a5e96ec92899d3904b034aaa6181a8453d7edd175fc83162a06632d7784b99fafa1c31e4c0fc53c00275a816f973dbc2ac5b00bea1c6236fcb132f5aae651945bd6686d9a907c27ce74992f409c0e8b591f6873fe86e8ceee8776803b8d02b66a891896b9002e8845844e3b986584a7d405541ac14ecba9cc632d5474342a3bbfd45a8201cac410f8a85cbf989df33c55286b1697d69ac7024c6a9d45773b3b44cb9b793f51f2623f540efdd4d8548a80cb12bbe80fc19af85255ffad30fa297dcc81f23eae89d07ed4f16d2ae3379e09494fe6a81f9171174a92f1242ba6438158e95229c2df84445aab50c86e98d9c1c8ab7dd2f7e48c166210c1bc33c8db000ce5f98b01c8b65affb284baeec8ada38fe0f2350e6db3f4a7be2be540493ab0ade57b036ab01362bd52341cbd3dcfd8c410d6215c22f0bb3d0b838bcda21b114e1da41b6c21347764e9bf9573c5b7882dbe5a0fcbb4035a44647816b2490d4b840303c624472712949159a27800fcdbd461046e2928d2ce8b8a40f5d980094ffc6245b2134f528099dad0286f4e68adfd6cb5456746090c58ee92f8d7cdd778d4a73d5b0f08ba482a9b504f4fc36d719aaf4cecef6a2095be4c1e27af148a8ab5f423d6d8febad43f3cb0d28064017d9750c3517a2f63633ee5cfe86d76859f2747dddf85a72a4c8183c2a40fe4ad1f186568ff447c8caa257b46487c306095202e8f726f7dd4cc82a50958ec9dd24778675d82db189ff47610e33bea8e53e3ac54e644503151ecc4ab21c9b2606502996e0c6b89a0538d1a97a19d6007465b37ec7b99d2ccc88d8f0a290be100d2c0524f31bb292635d2659f2b945ef360161e1a50e3ac05b8b38fef0b9130379de5385679ff493b722d76c108dd5b18b09d9ef3ae13336628fa280cf9d83395abceff084c6115494c04b38f85b67a03a93e166b0745c18f147ea6872f2e076226f7e047a6c343ddf642beabd7dd51052df78930694d1a77afa5e4fae483ab57e990decfb572a181cb1e0294b0e5fcbb24d6d71a528d168b280cc0fd7d6ddca9ccad0a3ddeb37a4da976b71ec93ae04b2978bb91a4b9f1a6bbe0b922501f9d06b12ba8db179f340976262182523953161b9fc86aa50b0cab9673e5e43ac77289989d3392fc06d5c2489b7eb6cf4c6ff5e2beebec98cf4b0ee4ae396a600f353ac90f06b4be727d5fe32b9e50c75cd3bc00dea54bda3283e0813584e959195d0b97f0f7114f5f5060fa6072bbd44bda6be74bcab35ae3b05d9e3080aadec51a2bf075ad75140b3623216606ab98c77a4ea6f9eca323b98349c1b1ee7224f87c318cd6fd707bd3f9c4e959e21f9ee27814adabfbe40ecb0b6bf08bd3174d4fde4de102598e9f9375ec453a2f25f0be04b5a6e5f22381c9c2f40265f8d2bd1f33646922428d5fbad4209880fa53f6543ab322a1554899eebc3595d412076d18fd4ebcc328077d9423123c7a2cd74a003327916620ccb2ef9eeedeb663d254d39e5594b2f08bbc203a6f0ed458b5cda83ef828bfe4107282ae000eca1f415adf301d14fa2353ebdd4bd7b90a2a80b3dd4095cfe93d96272ef0522b65d0a7a9b3faa604784502cdb54b22d5f845682544a8b1ef4344de55a091a14cbf0b938487ac3f6d81b9d71fe48404ebb9c721473fcc61862861280fe7d8ffb1b0712fb779c74d0ef8491d5e4ddfb81c2650190782ecdc48aaf04e5427d8b2787849eeb0cf1a16f9e50274e357077d98664ddcf5a8678eeb7ff508a2d2f99ee76e4729fd2353af84a5ed3e8596120ef8b5f47d893723dca37f8d49d22149e89e3f082a82feb761ab03e9fc0cdccbb277547fe9e4bf1e2b4546f49155970bd3b72175115bf5571cb76f36d63e53706a0de04a13b7518ec22b6ccd4219d2ac627bcfd2d622a9510aa533fcc3c3eccf5777c5e8e87b3b2a5a95d08bc80ddd8407b7722c7a9f50e4f1c178c554355b3866794de723e1fcc91546cce3eb0dda61e196badc802f97ce404e22d641e42b63d93dcb75dbdff47c8efd596d52a76af268b2252327317d7995708cdd209b8d47bb2a5001388c8a36c82cb3442450e22d60eda10faa32658e84cc3fbb40ada488d312eb341e3a8a3b0261c4995c5794b5a5ad19112ca110d4580398f50a13d8f61b05ed1ae0f17772faa9704811f808e0d3c0e72819760569afb3a0f0081ccce63242815ea60dfa13650da6e7f7c71747bc3e4b6bcc39c30dff2e9fd49324cb84510ee74665cf5fabfe01aa93b89f004773cf06b30833ebb6f8e56ef92dfcedf244e37622c82b5d5d73abfa7b95b18021652c8acd56017989e71dbdd8095c31efc082e44a777bd3787557e2447744d44a161ddc203bf680525ec836589f0c484a70b6ee70aa286d90f7ff333348c3922c71a35d0cd0bb1011918821ad592ff342ac72dda6d6047113487fae22044e8bdf7220fbf7abec86313a4172b612da9b040258330935efdb167dc8111d11e13e46d4921d7eb8a5e6caa9831b9cb940db98a15e743b586b6e725a8064c104f1ebd8a8cc761cd159b8c581f3f38ea75ed7c1fdfa1100309b63e1b15aa3ee4430f57e5fab8b6f0f7527100c4a0f1acb4ecf94e0238b276175a051f87f23a777661e6a6bbf56114389230f2fa3efe9194fb20f4028c4843c3f56c7597772b8cb4e45d69184eba1a4c6e2be097695f788727d3299b9ab74b2151fa4cf2d114f2da06704a7e1f7f5a56cd2ef30e48db882cab53e58f767f0d88d85437dca95797172b8aac53f88c592537a78352bfcf7f73493eaa3378c46870be56aa66114e9ba36b3faf91e9f584627e962d5c04403586087f158c0071fd9a7b69c7706245dc3ec3b7d9bbd35b439cdbd1b65a09e52023c441884a007f95eac2174c802f16d432333444ac6829c6cd6e403e2e65d855c9238a603f8cdafa95c8f81f1353717de898b38af9e0abb33952ae8adf116e49ce9b8c9904adfa9a999b02972d1e46b725f047442fa34b7c97149f95490752eba4f5c396f58d93602bbfb1db8a0ec00e1212f86cf2751ddfa41a8067bf9687bd59835781812e391ae9fd947cbaf5e8cbf9fba3a71e42478ad75221fd26e02a574f925b8138f285cc50418d0f1da7845578312280e5eaa7023c3437d28ebc3c2765f64fd8d3c6251f0efb1ee2430a792a97756f8162e04e2470095cd8864391d45eb26737dde6916d3199f5ebab705bb472caa9d0e34e043155af91465ae5ec46a0c36ab33892ddfdca75db51b98d3e7159568b5bce1acd7b46fbeb3fde9b04b9c3665dfb6286d59a1dee92d83900961d4e771abc6fff0789b308dc9c263eb49f2798e8e91e3a83faa0eaba7b0be0e27c5db2f8d5baec9984e8f6459ad8d6d9dac4ef7a5d3b6358d2337e3a379b9527920a6280505e675ab8fbb817c10ab2e935eb8e32d80e02781795e225a601fe8acaccb179523a381f207d6b0e692daca29db8e349b5efd0c86ee4ec61a9ef615790b926391786aa16ce5e8134774e1c3919509925351d2e2e6af7a8b9df59ba38f11bb36f68179dd0718d3aeba65b9272f0527aaefb1c2a2b6f767a564fb9ab367beadf0cd5574d30e83a609cf42476f8786fc6b02957625b8d09b9d77defb28d03622b6fcebbc4fc033572092e01890ca1ca97f0ced492834e399da651511d36a814f315ffe5680b3808a40beeec79361c25bd9ca6cce1eca2051cc05d0e7c1af352df6294cc697e10c682910484e11116409f3b42d63a7284570042c5c9ffab0c1df93426c5653a263083bc68ad73eaf0c584d2bfdd3951e071f3c72b247c30c1deaf193cb8a9c5b16a346d04b760384956594a8e0034d2b8bb8ff22b877463d88df03769593b4d6f737481aab1324d0c968cbd3e952a1a428e105cce761e1a4b3c58f627aa2b0dd27588006975d17792747344e08640a8ca6f21b796ac346e6cebf621bd3d63b502c1a8778d2fd3f2760e466045c7ed199139b77fba9bb8dc60b992479613fe6487c1418c663a1be9e309b2044394d0e3fb0e54545c287aa3a4272a1963bf22b6f35786762ca4f2f1856a7c3ae3d676d53cd1fe8fb75f483db8e6cf9e8fe4d1134241a6532b42eab2bbb6cd92ab379a67489691e45a91b3627a6cdbfb095da3b5b97032401150cea96e727bf4a6ad9aff5814d36be56933913977d04142aee4b314f95e8ffd69d"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x88, 0x9, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x9, 0x2, 0x4, 0x80}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x8, 0x2, 0x5, 0x800}}]}, {0x29, 0x6, "6ee8774bbac475de6efdeab68127e3ebdc6c4d22d09dec764b432596c207b10d610730cf5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x170, 0x18, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x6}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_ZONE={0x6, 0x4, 0x6}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0xf8, 0x3, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x16d}]}, {0xc2, 0x6, "fd91692dcbdc75efd11607f8f9d2264417a2d8485af081cd9a399cf1aeeff1a8bea4d0a131642667fc197aaa58f5f163651cc83e66f7db71d2dc1028b7398dfdf5864ea5bc74a5c42f3da8e2dec6d83033215751be2e4101bbf69d6be141fe6e97da6f42093c265c98a02432c8743cc498f3e6a7245ddb0651f2dd2d3e5a664687cb84201585becdc87384c198d88760db470cbbcf81aa2cb06f5dad0534f37b248f72be14f3db2f89a7f5e9fc17bcd5950e1075b8661b55495ebbeda93d"}, {0xc}, {0xc, 0x8, {0x2, 0x4}}}}, @m_gact={0x16c, 0x1b, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xa, 0x5, 0x400, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1499, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x4, 0x2, 0x2, 0x76fd}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7, 0x20000000, 0xffe00000, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1487, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x10e4, 0x4}}]}, {0xd3, 0x6, "67be00bcd7eeccd91fb4d553bd5551193be673a63dcb719443b4a43baa6b1635dbda24f68aba3541ca7297f060627c6fd3644aa8173e5c613484226829337ac328981e5bedab211d866471241f0d565603f5625b59df81248baa02d77bd0101bb699efa9c3fdd745cc35270c1368a717f07f333e9382ce65895f77fb533e29c0930af6bfdc23fb4d43acae80f2171dc1b7d09f49741756b35d5e6e5e5497a97136fd0da6d0ae0ff0e2ed3784da154b04e991cd1da90a31647ba4d34b5d3c13d7c754bcee38a897a1bc18f121c59412"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x17c, 0x12, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7a0, 0x4, 0x1, 0xe11}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x8001, 0x4, 0xfffffffa, 0x1d}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xffff6dd0, 0x8, 0x3bd90, 0x9}, 0x5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x80000001, 0x8, 0x60000000, 0x5}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0xb3ee00, 0x0, 0x0, 0x7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0x5, 0xc933, 0x9d}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xcfc, 0xfffffffffffffff8, 0x7, 0x10000}, 0x9ec01b1e1cbc22e2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x2, 0x5, 0x2, 0xe5a}, 0x3}}]}, {0x50, 0x6, "e98434dc46f0751f1cff88138a233f9cc496802fc8a44c8c4b206c138229c704573b18054c62012f575f7fb41c759d491f138a8f3c5be4366bd981c1a9c9fd2e4d92594cd252a282ca1aa559"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x17c, 0xd, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x200, 0x6, 0x6, 0xbc3}, 0x64}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x51b, 0x1, 0xffffffffffffffff, 0x4773f9fe, 0x5}, 0x42}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x2, 0x3, 0x81}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0x8000, 0xffffffffffffffff, 0xfffffff7, 0x3}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x1, 0x1, 0xffffc54f}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x0, 0xeb}, 0x74}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5600, 0x4, 0xfffffffff7ffffff, 0x9, 0x343f}, 0x2e}}]}, {0x89, 0x6, "c206f3539a7dfe3e245993a7ebd05fc70c7b44a752716805e9ed7c5eb88ebf736fd7e3d9ea8c14221144cd71c62754ad262c446dd0dd59bca27f0f1738eeddd80707230867a0048592b5c49adc095a5520b61b4c4b095f47165ca2acd44c1c16d8e04779e739d9253e2ff1d4f0670b9c03aa6e5ea3678d3b5e2abc5486f107e8117873a724"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x5}}}}]}, {0x2208, 0x1, [@m_gact={0x150, 0x19, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x136e, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x171d, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x3, 0x4, 0x0, 0x1}}]}, {0xf4, 0x6, "b21187ab0d77b35a6bd71ca6b40f984d9f6dcfa0c1ee7438019243826b66f30fed488770fc8bc0d13793c0aacdf834a8577606eb4feb941c9c1dbe4af681d6c0d000fee91fa69649d7665ebb7deb788dfb64fde4ff48d488e8e0f7bdea54c9e42ad92c055df1c64700bd54d13a1980f14aced2d9b3b1219979362145719ebda97d0dfca5f4caed0029114d784ccb15b016bfe1be2ab0fb94fb8ef6bdf27b4c523663845a70b8e9af36a4bd422913353b926d1880180e8aeae6fafec6de46449a172e1aa975a334c25b426846183f0669cc60dda92164d2f59aa5587ada185bf86016bce965a043d41970f8dd2e0f5a17"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0xc4, 0x0, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x22, 0x8, 0x0, 0xe}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0x401, 0x20000007, 0x0, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7fff, 0x3, 0x2, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9ba, 0x8, 0x4, 0x2, 0x3}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x8, 0xffff0bc1, 0xe}, 0x81c2}}]}, {0x6, 0x6, "a46a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x1dfc, 0xd, 0x0, 0x0, {{0xa}, {0x1d04, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x4, 0xf, 0x8, 0x8, 0x2144}, 0x9, 0x9, [{0x23, 0x520e1d09, 0xfff, 0xd1e1, 0x7, 0x8}, {0x81cd, 0x4, 0xfffffffa, 0x8001, 0x8, 0x401}, {0x5, 0x8, 0x9, 0x8001, 0x10000, 0x9}, {0x100, 0xf58, 0x9, 0x3, 0x1, 0x5}]}, [{0x102, 0xab5, 0x0, 0x8, 0xfff, 0x8000}, {0x3, 0x80, 0x1ff, 0x4, 0x1, 0x6}, {0xb327, 0x7, 0xc, 0x800, 0x1, 0x5}, {0x0, 0x7fffffff, 0x1000, 0xfffffd65, 0x6173c061, 0xb56}, {0x9, 0x1f4, 0xfff, 0x3, 0x9, 0x9}, {0x1ff, 0x40, 0x5, 0x7f, 0x2, 0xfd}, {0xb, 0x6, 0x1, 0x6, 0x4, 0x6}, {0x43ad, 0x2, 0x5a, 0x6, 0xe6, 0x4}, {0x3, 0x6, 0x8, 0x7, 0x3, 0x101}, {0x3ff, 0x9, 0x2703, 0x7fffffff}, {0xbe2f, 0x9, 0x7f, 0x7, 0x8, 0x7fffffff}, {0xfe5, 0x7, 0x7f, 0xf, 0x2e2cec6, 0x9}, {0xa9, 0x2, 0x5, 0x3, 0x100, 0x5}, {0x5, 0x9, 0x1, 0x8, 0x1, 0x5}, {0x1, 0x1, 0x8, 0x7f, 0x100, 0x2}, {0x9, 0x4350, 0x76, 0x9, 0x81, 0x2}, {0x6, 0x1, 0x7fff, 0x5, 0x7, 0xd1ee}, {0x6, 0x2e80, 0x4, 0x7ff, 0x49ce, 0x10}, {0x800, 0x200, 0x3, 0x4, 0xfffffffe, 0x12000}, {0x7, 0x401, 0x80000001, 0x0, 0x2798, 0x5}, {0x3, 0x8, 0x7, 0x947, 0x800, 0xc}, {0x1, 0x7ff, 0x5, 0x1, 0x101, 0x3d5}, {0x38b7, 0x7, 0x0, 0x0, 0x5, 0x3ff}, {0xfffffff9, 0x9, 0x1000, 0x7, 0x3}, {0x1000, 0x2, 0x200, 0x4, 0x3, 0x3}, {0x5, 0xfffe0000, 0x7ff, 0x9e33, 0x5, 0x1}, {0x7, 0x63a4, 0xd96, 0x0, 0x6, 0x5}, {0x7fff, 0xfffffffa, 0x40, 0x7, 0x1000, 0x3}, {0x4, 0x7fffffff, 0x2, 0x9, 0x7, 0x8}, {0x40, 0x4, 0x1, 0x4, 0x5f}, {0x736, 0x0, 0x7, 0x897, 0x80000001}, {0xe013, 0xbdc3, 0x8, 0x22}, {0xf, 0x8, 0x9, 0x5, 0x4, 0x8}, {0x24e9, 0x2, 0x2, 0x27, 0xfffffffa, 0x1000}, {0x9b, 0xff, 0x80000000, 0xffffffff, 0x9, 0x67fd}, {0x2, 0x293a, 0x3, 0xfffffffc, 0x5, 0x7ff}, {0xa, 0x80000000, 0xd, 0x1, 0xcd, 0x400}, {0x8000, 0xeb, 0x1, 0x1, 0x0, 0x74}, {0xfffff5a5, 0x1, 0x1, 0xb2, 0x1ff}, {0x93, 0x7, 0x6, 0x1, 0x5, 0x6}, {0xb, 0x2, 0x81, 0x7, 0x10001, 0x4}, {0x3, 0x722, 0x8, 0x2, 0x2, 0xfffffffa}, {0xffffffd5, 0x3f5e4db8, 0x0, 0x1a5, 0x2, 0x44000000}, {0x100, 0x92, 0x3a3dea9f, 0xffff, 0xc, 0xfff}, {0x8, 0x8, 0x2, 0x31a5, 0x8, 0x401}, {0xfff, 0x3, 0x1000, 0xf, 0xb, 0xd2}, {0x64, 0xe6, 0x6, 0xde, 0x8, 0xff}, {0x0, 0x8c, 0x1cf1, 0x7, 0x4, 0xfffffffe}, {0x5, 0x1ff, 0x5, 0x10000, 0x7, 0x3}, {0x2, 0xf, 0x30000000, 0xac, 0x4}, {0x2, 0x8, 0xf, 0x4, 0x8, 0x2}, {0x0, 0x5, 0x80000001, 0x0, 0xffffffff, 0x785}, {0x2, 0x5, 0x8, 0x2}, {0x9, 0xe, 0x37800000, 0xb4, 0xfffffffd, 0x8}, {0x4, 0x80000000, 0x6, 0x80000000, 0x4, 0x8001}, {0xe, 0x8, 0x100, 0x8, 0xc, 0x4}, {0x40, 0x10000, 0x200, 0xd, 0x8, 0x5}, {0x1, 0x5, 0x9, 0x0, 0xff, 0x7}, {0x0, 0x3, 0x7, 0x54, 0xfffff35f, 0x61}, {0x101, 0xfffffff8, 0x0, 0x3, 0x8, 0x2}, {0x8, 0x8001, 0x6, 0x10, 0x31, 0xa}, {0x1, 0x3, 0x10001, 0x3, 0xe, 0x8}, {0x5, 0x4, 0xfffffff7, 0xfffffffc, 0x10000, 0x1}, {0x9, 0x0, 0x0, 0x8, 0xffff, 0x7fffffff}, {0x10001, 0xcf, 0x7, 0xe, 0x7, 0x7}, {0x5, 0x93, 0x2, 0x1, 0x9b2c}, {0x6, 0x9, 0x801, 0x7, 0x5, 0x4}, {0x3259, 0x9e, 0xc, 0x5, 0xfffffffb, 0x1000000}, {0xe8d, 0x40, 0xf6f, 0x6, 0x3, 0x5}, {0x1, 0x1ff3, 0x8, 0x8, 0x1, 0x1}, {0x461c07a6, 0x8, 0x8, 0x100, 0x3, 0x6f}, {0x5, 0x4, 0x1, 0x8, 0x1, 0x8}, {0x80000001, 0x8c74, 0x43e08904, 0xa5678355, 0x0, 0x3}, {0xd905, 0x8, 0x1, 0x7, 0x81, 0x10001}, {0x3, 0x4, 0xffffffff, 0x2, 0x4, 0x4}, {0x1, 0x7, 0xb000, 0x7, 0xf04, 0x3}, {0x9, 0x8, 0x5, 0x6, 0xffffffff, 0x9}, {0x10000, 0x4, 0x8, 0x7, 0xffff8001, 0x1}, {0x4, 0x98ae, 0x8, 0x10001, 0x2, 0x868}, {0x5, 0x1ff, 0x2d0, 0x9, 0x2, 0xa}, {0x1, 0x1a, 0x8001, 0x2, 0x9, 0xfffffff7}, {0x1, 0xb, 0xf3cb, 0xb5a9, 0x7d4cf8e9, 0x7ff}, {0x1, 0x8, 0x5, 0x80000000, 0xb178, 0x9}, {0x3497, 0xb, 0x0, 0xfffffffa, 0x3ff, 0x8}, {0x4, 0x1000, 0x6, 0x4, 0x6, 0x9}, {0x4, 0x5, 0x4, 0x8, 0x8, 0x6}, {0x7, 0x7, 0xf, 0x5, 0x0, 0x10}, {0x6, 0x175, 0x9, 0x7, 0x86f5, 0x7}, {0x1, 0x4, 0x400, 0x7, 0xfffffff9, 0x75}, {0x3, 0xa, 0x2, 0x7, 0x1, 0x6}, {0x4, 0x4e3, 0x4, 0x6, 0x1, 0x401}, {0xfffffffb, 0xff, 0x2, 0xbc8, 0x0, 0x4}, {0x6, 0x5a1a, 0x7, 0x3, 0x9, 0x2}, {0x6, 0xbb2, 0x3, 0x6, 0x2, 0x6}, {0x1, 0x40000000, 0x5, 0x1, 0x0, 0x7fff}, {0x2, 0x6, 0xf, 0x1ff, 0x5, 0x2}, {0x3, 0xfffffff9, 0x5, 0x5, 0xca2}, {0x5, 0x1, 0x4, 0xffff7fff, 0xffffffff, 0x1}, {0x4, 0x5, 0x6, 0x9, 0xe8, 0xffffffff}, {0x9, 0x6, 0x8000, 0x7, 0xff}, {0x4, 0x3, 0x4, 0xb, 0x100, 0x7}, {0x0, 0x7ff, 0x6, 0xa9ae, 0xff5, 0xae}, {0x18c0000, 0x81, 0x6, 0xe6127059, 0x1f, 0x5}, {0x1, 0x5d1, 0x1, 0x5, 0x7fff, 0x59f}, {0x1000, 0x2, 0x8, 0x401, 0x1, 0x26}, {0x18, 0x36a, 0x6, 0x6, 0x4, 0x80000001}, {0x5, 0x6, 0x80, 0x8, 0x9, 0x80000001}, {0x80000000, 0x4f24, 0x4, 0x2, 0x8, 0x7}, {0x1, 0x87, 0x3, 0x9e, 0x0, 0x2}, {0x5, 0x4cc0000, 0x800, 0x5, 0xfffffff9, 0x3}, {0x80000001, 0x4, 0xbe, 0x25, 0x3, 0x800}, {0x5, 0x6, 0x2, 0x6, 0xe, 0x2}, {0x2b22, 0x4, 0x7, 0x369c, 0x2, 0x2}, {0x4af0, 0xff, 0x6, 0x9, 0x0, 0x3}, {0x2, 0x1000, 0x2, 0x1, 0xffffffff, 0x6}, {0x9, 0x1c000, 0x9, 0x7, 0x7, 0x101}, {0x189, 0x2, 0x8, 0x1, 0xb4d, 0x7}, {0xf0b, 0x8, 0x0, 0x9, 0x4, 0x7f}, {0xeb85, 0x200000, 0x6, 0xfffffff9, 0x1, 0x9}, {0x5, 0x10001, 0xf30, 0x2cc, 0x12000, 0x6}, {0x7, 0x4, 0x6, 0xea3, 0x8001, 0x4c}, {0x8, 0x8, 0x20000, 0xff, 0x298b, 0x200}, {0x6, 0x2a79, 0x10000, 0xfffffffe, 0x9, 0x1}, {0xb05, 0x3e9, 0x7fff, 0x7ff, 0x1, 0x9}, {0x8, 0x5, 0x4, 0x7fffffff, 0x8, 0x7}, {0xe14, 0x184, 0xfb, 0xfffffff4, 0x0, 0x8}, {0x5, 0x9, 0x2, 0x101, 0x0, 0xffffffc0}, {0x4, 0x7, 0x10000000, 0x0, 0x2, 0x9}], [{0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x2}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x2}, {0x4}, {0x3}, {0x4}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2a04bfe2e860246a}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x3}, {0x4}, {0x0, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x2}, {0x2, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0xc77d9f21309200e4}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x724bd0bc9930bc39}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0xd}, {0x3}, {0x5ae6d3f4727d0df2}, {0x2, 0x2bdd7134154843ed}, {}, {0x1}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0xa6, 0x211d69cb, 0x10000000, 0x9ed0, 0x8}, 0xa6, 0x5, [{0x7ff, 0x2, 0x400, 0xe8ea, 0x6c0, 0x5}, {0x2, 0xa95d, 0x10001, 0x67, 0x0, 0x48}, {0x80, 0x8, 0x9, 0x1ff, 0x3, 0x3}, {0x80, 0x0, 0xfffffff6, 0x0, 0x1, 0x401}]}, [{0x5, 0x8, 0x1, 0x80000001, 0xd, 0xfffffc01}, {0x4, 0x10000, 0x2, 0xfffffc01, 0x2, 0x200}, {0x2, 0x60, 0x3, 0x6, 0x7, 0x8000}, {0xa, 0x8, 0x401, 0xfffffffd, 0x100, 0x8}, {0x2, 0xfff, 0x5, 0x8, 0x0, 0x4}, {0x5, 0x8000, 0x10000, 0x71d9, 0x0, 0x80000001}, {0x100, 0xf8, 0x10, 0x3, 0x3, 0x2}, {0x3, 0x0, 0x2, 0x9, 0x8, 0x3}, {0x7, 0x1, 0x7fff, 0x9, 0x0, 0x7}, {0x7, 0x1, 0x4, 0x10001, 0x7fffffff, 0x3}, {0xda, 0xa14, 0x4, 0xfd, 0x1, 0x5}, {0x8, 0x9, 0x3, 0xd, 0xb7d, 0x2}, {0x0, 0x8, 0x3, 0x0, 0x8, 0x2}, {0x4, 0x2243, 0x101, 0x3c192820, 0x4, 0x1ff}, {0x8, 0x9, 0x3, 0xd8f4, 0x8, 0xff}, {0x2, 0x6, 0x7ff, 0x3, 0x4, 0x4}, {0x8001, 0x12a0, 0x4, 0x4, 0x4, 0x7}, {0x4, 0x81, 0x2, 0x1, 0x5, 0x6b9fa310}, {0x7, 0x4, 0x2, 0xb, 0x4, 0x7}, {0x5, 0x3, 0xfffffffd, 0x3, 0x7, 0xc5e}, {0x7, 0x8, 0x401, 0x4, 0x8, 0x4}, {0x1, 0x37a5, 0xbbb4, 0x100, 0x8, 0x2}, {0x4, 0xfff, 0x0, 0xfd, 0x8, 0x100}, {0x1, 0x3, 0xfffffff7, 0x3, 0x9, 0xc01}, {0x7ff, 0xce49, 0x15891aa7, 0xcb, 0x1, 0x7ff}, {0x62, 0x8, 0x1000, 0x100, 0x3ff, 0xf}, {0x9, 0xb17c, 0x401, 0x10001, 0x0, 0xff}, {0x3, 0x2, 0x9, 0xf8, 0x3, 0x1}, {0x76fda048, 0xee4, 0xd94a, 0xff, 0xd128, 0x3}, {0x1, 0x48e5241a, 0x2, 0x8, 0x0, 0x7}, {0x7f, 0x10, 0x800, 0x8, 0x6, 0x77}, {0xfc, 0x64, 0x81, 0xffffffff, 0x7, 0xda4}, {0x1, 0x4, 0x6, 0x7, 0x6e1, 0x2}, {0x8, 0xfff, 0x2, 0x8001, 0x6, 0x8001}, {0x6, 0x94, 0x599e, 0x169, 0x8, 0x4}, {0xd874, 0x4, 0x6, 0x3, 0xb1d, 0x3}, {0xc, 0x80000000, 0x5, 0x9, 0x7, 0xfffffff8}, {0x5, 0x9, 0x9, 0x8001, 0x9, 0xffffffff}, {0x6a3d21db, 0x1, 0x81, 0x7, 0x4, 0xfffffff9}, {0xa001, 0x2, 0x4, 0x5f, 0xbdc5, 0x504}, {0x8, 0x9, 0x9, 0x7, 0xc43}, {0x400, 0x6, 0x5, 0x7fffffff, 0xa4, 0x9}, {0x9, 0x10000, 0x447, 0xa1, 0x2, 0x4}, {0x80, 0x9, 0x8, 0x8, 0x400, 0x100}, {0x7fff, 0x5, 0x7, 0x4, 0xc86f, 0x8}, {0x1, 0x0, 0x100, 0x3, 0x2ef, 0x225}, {0x4, 0x80000001, 0x101, 0xe0f5, 0xfffffffa, 0x148}, {0xffffffff, 0x6, 0xb, 0xa80, 0x7c38, 0x9725}, {0x9, 0x8, 0x10, 0x7, 0x73a9}, {0x6, 0x5, 0xff, 0x5, 0x5, 0x8}, {0x4, 0x0, 0x5, 0x8000, 0x7, 0x39fd}, {0x5, 0xfffffffb, 0x2, 0x4, 0x8, 0x2}, {0x2, 0x7f, 0x6, 0x9, 0xfffffff8, 0x400}, {0xe4c, 0xd, 0x1, 0x8001, 0x5, 0x200}, {0x100, 0x5, 0xd, 0x632, 0x80000000, 0x4}, {0xfff, 0xf, 0x8, 0x10, 0x101, 0x8}, {0x1, 0x7, 0x86, 0x4c, 0x200, 0x9}, {0x0, 0x4, 0x5ef, 0x9, 0x8, 0xc}, {0x5, 0xd2c, 0x3ff, 0x6, 0xfffffffd}, {0x1, 0xffffffff, 0x5, 0x2, 0x4, 0xd02}, {0xfffffffe, 0x0, 0x7, 0x0, 0xfff, 0x8}, {0x1000, 0x0, 0x2, 0x5, 0x2c874e8e, 0x9}, {0xeb0, 0x9, 0x9, 0x1, 0x4}, {0x2f48, 0x5, 0x9, 0x6, 0x8, 0x1}, {0x1ff, 0x4, 0x4, 0xa, 0xf318, 0x2}, {0x7, 0x5, 0x4, 0x2, 0x1, 0xadb}, {0x0, 0x5, 0x5, 0x6, 0x2, 0x6}, {0x86, 0x0, 0x0, 0x3a, 0x7, 0xa3be}, {0xffffff80, 0xabda, 0x6, 0x8, 0x0, 0xb}, {0x0, 0x7, 0xe16, 0x1, 0x5, 0x7}, {0x100, 0x4, 0x2, 0x7, 0x7f, 0x4}, {0x2b4e, 0xad1, 0x4, 0x2, 0x7f, 0x332b}, {0xeb, 0xe, 0xb0, 0x8, 0xa, 0x7}, {0xffffffff, 0x9, 0x4, 0x3, 0x200, 0x40}, {0x5, 0x3, 0x81, 0xfffeffff, 0xe, 0x100}, {0x1, 0x40, 0x3, 0xfffffff8, 0x8, 0x4}, {0x1, 0x401, 0x2b, 0x10, 0x9, 0x8}, {0x7, 0x7, 0x1bd, 0x6, 0x9c, 0xbf}, {0x6, 0x2, 0x5, 0x1000, 0x3, 0x8}, {0x80000000, 0x1, 0x1, 0x1, 0x0, 0xf755bd84}, {0x101, 0xe, 0x22d, 0x8000, 0x5, 0x3}, {0x6, 0xfffffff5, 0x6, 0x8, 0x6, 0x5e02}, {0x7, 0xd18b, 0x7, 0x7, 0x0, 0x5}, {0x200000, 0x2, 0xdf, 0x1000, 0x6, 0x9}, {0x3ff, 0x7fff, 0xff, 0x8, 0x2, 0xfffffff7}, {0x9, 0x0, 0xc, 0x0, 0x4}, {0xd, 0x401, 0x4, 0x7, 0xb, 0xf}, {0x7, 0x3, 0x8d6, 0x6, 0x4, 0x7}, {0xffffff02, 0xf, 0x1, 0x8, 0x1, 0xe9c0}, {0x0, 0xdc, 0xa5c, 0xfaa0, 0x6, 0xd}, {0x0, 0x4, 0x4, 0x22, 0x88b, 0x28960766}, {0x7, 0x8, 0x4, 0x5, 0x7ff, 0x1}, {0xfffffffe, 0x5, 0xafd, 0x2, 0x6, 0x8}, {0x8, 0x401, 0x5, 0x101, 0x7, 0x7}, {0x8, 0x9, 0xe, 0xf, 0x10000, 0x5}, {0x80000000, 0x43, 0x1f000000, 0x8, 0x7fff, 0x4}, {0x81, 0x9, 0x3, 0x9, 0x22, 0xfd9a}, {0xd, 0x268f6fa4, 0x5, 0xfffffff9, 0x8, 0x6}, {0x0, 0x4, 0xee, 0xa20, 0x4, 0x4}, {0x101, 0x7, 0x2, 0xfffff800, 0x8, 0x757}, {0x3ff, 0x6, 0xfffffe3f, 0x6, 0x4, 0xfffffffb}, {0x9, 0x7fffffff, 0x6, 0x7fff, 0x9, 0x6}, {0x0, 0x3, 0x3, 0x3e73, 0x22b, 0x1}, {0x6, 0xffff0000, 0x6, 0x8000, 0x8, 0x2}, {0x3, 0xe, 0x8, 0x0, 0x28}, {0x2a, 0x3, 0x98, 0x9, 0xc8f, 0x80d}, {0x7fffffff, 0x86a, 0x3, 0x4, 0x5e, 0xd943}, {0x5, 0x3, 0x8, 0x5, 0xc, 0x28aed10f}, {0x6, 0x7, 0x7, 0x0, 0x8, 0x6}, {0x9, 0x8, 0x4, 0x2, 0x5, 0x1}, {0x6, 0xa, 0x30c, 0x7, 0x1b, 0x7}, {0x590, 0x0, 0x101, 0x5, 0x5, 0x2}, {0x4, 0x8, 0x10000, 0x3, 0x5, 0x8}, {0x4, 0x7, 0x8000, 0x5, 0xfffff525, 0x2800}, {0x7, 0x8d5, 0x5, 0x80000000, 0x7, 0x9}, {0x8000, 0x1, 0x9, 0x2, 0x5, 0xffffd466}, {0x101, 0x9, 0x10001, 0x5, 0x2, 0x1}, {0x5, 0xd9f, 0xb7, 0x8, 0x6e, 0x5}, {0xcb8, 0xf4, 0xf0000, 0xf, 0xfffeffff, 0x81}, {0x1, 0x3, 0x0, 0x400, 0x2, 0x1}, {0x100, 0x7, 0x3, 0x7, 0x2, 0x2}, {0x3, 0x200, 0x3, 0x9, 0x9, 0xfff}, {0x4f, 0x36, 0x94e, 0x10000, 0x9a1b, 0x100}, {0x1, 0x4, 0x8, 0x401, 0x4}, {0x792b4560, 0x0, 0x8, 0x3, 0xe5c, 0x9}, {0x4, 0x3, 0x7fff, 0x1f7e9e3, 0xfffffff4, 0x89}, {0x9, 0x7fffffff, 0xd, 0x2, 0x7a, 0x4}, {0xd, 0x2, 0xf6, 0x9, 0x6, 0x3ca0}], [{0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0xf}, {0x3}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x5}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x2}, {0x0, 0x1}, {0xe}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {}, {0x2}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x3}, {}, {0x5}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}]}}]}, {0xcd, 0x6, "845d491fab1526169b97cccbb84565cb152be845cf577d98308922f82dccbff0b762c8f5919cbdaf7c9417c54e7a8996936e4c19f187271eb58e9c62de565b23b743228b0e9d74f20f58da828d0afe66a7405c72aba3d3f4fe4155b11b446ef718c96c3f132587c2b37850f799d07e7e0d053220500b65bda65de0f5d2aabe1f0e32a644c86f39e950ff19450c2fbfd11f1b1f9fc3d02edc5f1f96b241732d101ad9ec55f0355eb5e1d21b1ffa70ed7da617885d89c48544bd94fcef7759c6fb402da794d6138a7e2e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_csum={0xf0, 0x3, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x10, 0x3, 0x3ff, 0xea}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x5, 0xffffffffffffffff, 0x444f, 0x1}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x0, 0xffffffffffffffff, 0x9, 0xc}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x4, 0xfffffff8, 0x1}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x6, 0x2, 0x100, 0xc}, 0x60}}]}, {0x38, 0x6, "9f77d564c1d587f96f7bdc6e83cb483daa474fdb32631eab770ceb24e024a776c60e5c704bd7f41f2fa6984e0ac2a6c8e38ef6f8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x104, 0x12, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x6, 0x4, 0x6, 0x619}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x10000000, 0x4, 0x7d}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x259, 0x0, 0x8, 0x80}, 0x6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x7f, 0x3, 0x4, 0x1c}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x9, 0x10000000, 0x4, 0x3}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x6, 0x1, 0xfffffff7, 0x2}, 0x7, r5}}]}, {0x16, 0x6, "054f8429f4f437b84a8d227b133093d40251"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x78, 0x1, [@m_ct={0x74, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x11}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}]}, {0x31, 0x6, "590f18da88cb32b4d835c82071cb38db9995027415dfbf3a2dbc6b40fa8c4b6581106d554f7a0f016fc7f4f87a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6674}, 0x1, 0x0, 0x0, 0x20040894}, 0x800)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0xeaa3ef926154ef0f, 0x70bd26, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r7 = socket$inet_dccp(0x2, 0x6, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xf6c52000)
connect$inet(r7, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10)

7.629505741s ago: executing program 2 (id=359):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0x0, 0xfffffffd, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
listen(r4, 0x5)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xce)
setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @multicast2}], 0x3c)
sendmmsg$inet6(r6, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f82}, 0xffffff96)
getpgrp(0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='signal_generate\x00', r7}, 0x18)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000003d000d8632cd6bdccc8d0003047c0000040000000c00018006000600800a0000040002"], 0x28}}, 0xc800)

7.102982868s ago: executing program 0 (id=361):
r0 = timerfd_create(0x1, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
timerfd_gettime(r0, &(0x7f0000000640))
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xfffffffc}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x4, 0x0, 0x2}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$mixer_OSS_ALSAEMULVER(r3, 0x80044df9, &(0x7f0000000080))
ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000080))
r4 = socket$inet6_dccp(0xa, 0x6, 0x0)
setresuid(0x0, 0xee00, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001300)=ANY=[@ANYBLOB="01000000000000000a004e2400000006ff0200000000000000000000000000010000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3f87dd2530000000000000000000000000000000000000000000000000000000100"], 0x490)

7.092288689s ago: executing program 1 (id=362):
mkdir(&(0x7f0000005800)='./bus\x00', 0x6b76f27452643c0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8408, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x14, r2, 0x1, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f00000003c0)='/dev/cpu/#/msr\x00', 0xf)
getsockopt$inet_int(r4, 0x10d, 0x5, &(0x7f0000000000), &(0x7f0000000340)=0x4)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x13, 0xffffffffffffffff, 0xab17e000)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)="d1cbda49e10a5a0e133faedbc4dddafbda03662b04cb284720265d14d4b4e92e1499213fd0f3104e741e0c9d744335c1fe8ad995067e70d9d284439a235bc694a38b79b4d9cec0c1670523cfcca868a8b03019dc4353999a9a", 0x59}, {&(0x7f00000000c0)="01917198efb8d3868124c701c1162c4732191f1357eb6cc4812fe9ccdf08d697a4cbae811c7bdc8207791cfd5966031998d8d99c28c0ce5bc0cb70114c84ab", 0x3f}, {&(0x7f0000000180)="4db80a8fc41404aa7469390099ab196bf0deac1099e99c7c6104eba1af93e645f018091a72", 0x25}, {&(0x7f0000000740)="ac57098d8763a6ff79d18f62c1a089a84fbcadaefbaf9b86138b1196a13869c353a024677e1262eee25b556501949259640f86921e398f6550aa7dd979a8debb9de044b96a8cc4e7382e650095258c0248ec4931150b31337442469279de352b6279b340ae385cd5d1627c4d0df6cc5a72ca551d2d54cbf200a88a62dda5ff72c006217713a2dd49639bf81270d2c06f0cad4339751818caea32270e314e38a465ed4604e067c3691bf0a9d9201ad552008bf0c771c3f459b9f1680fdb99b50cdc35aa9161c1c2313c831e05c232365d88fde886df8ffc2c06", 0xd9}], 0x4, &(0x7f0000000840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xdf}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0xf8}, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@expire={0x2dc, 0x18, 0x1, 0x70bd2a, 0x25dfdbff, {{{@in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x4e21, 0x0, 0x4e20, 0x4, 0xa, 0x0, 0x0, 0x2c, 0x0, r7}, {@in6=@local, 0x4d4, 0x3c}, @in6=@loopback, {0xf04, 0x2, 0x9, 0x8001, 0x2a, 0x400, 0x401, 0x200}, {0x8, 0x3, 0x1, 0x80}, {0x200, 0x7, 0x6393}, 0x70bd27, 0x3506, 0x2, 0x0, 0xd, 0x10}, 0x40}, [@offload={0xc, 0x1c, {r5, 0x2}}, @sec_ctx={0xe4, 0x8, {0xe0, 0x8, 0x0, 0x0, 0xd8, "55238e63162087197b692816be887a894f089ffe73f780faea3a0835fcf8e8542508c75001fc466d6a350c58af08000000000c0000dc758aee10147d97c1e54a80b0f693d75230d807d2a61a58e7a455d82c0627ce900ace8023bef37f6a7b0b0da4622a78246f772397fcc57951e3cfaa57cbd98fc216359216dbe388ae6404ffd3424ee7b38178e653f669dd97ae7a20b8543bddc3edf678bf7caa804cbdb2eff22e6624b855ca8fc63768da25e66ff75042a9016894592079808d20fa180ffb4eea65f3686f4e6ceb71c22db5d1bab61482ece355db5d"}}, @sec_ctx={0xc9, 0x8, {0xc5, 0x8, 0x1, 0xf9, 0xbd, "87d0033011c9f48698abb9d94a54bf63b9063634a18fce92afecf7c800e11d5dea1572dcfd8c8e20385ac8775848fd2335ec45754b9ac5aab36abe198eed76047a5b7bb80d0d0dc3d09ec9958f54b437bc0068e79b091efcda149b79ba917965a60e72d729419615b2f95250a8dd8a8b7def83431885b52699ccb01d3471e3e1421572b58a914fd14797892d90533fb21a623de9cd8affaf6c43ba316b6ff243dec3ccc2a0a5fb78bc4ba4747c40b3cdbbab949ecf380ec0b0d35fd073"}}, @address_filter={0x28, 0x1a, {@in6=@mcast1, @in=@broadcast, 0x2, 0x4, 0x7f}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x800}, 0x0)

6.399312621s ago: executing program 2 (id=363):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)=[0x0, 0x0], 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x8, 0x26, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0100deffffffe3001c0000000000000000000000070000004404730001000000"], 0x40}, 0x0)

6.33902981s ago: executing program 0 (id=364):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r4)

6.310999551s ago: executing program 1 (id=365):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x27, &(0x7f0000000000)="bb23095ff13c1d3ee452718afc1c3dff23d2fe535c0d", 0x16)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x1e8, 0x700001b, 0x148, 0x90, 0x148, 0x1e8, 0x206, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'tunl0\x00', 'sit0\x00'}, 0x1ea, 0xc0, 0x128, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket1={{0x28}}, @common=@inet=@socket2={{0x20}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)

6.291906432s ago: executing program 4 (id=367):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4004c0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r0], 0x20)

6.05856585s ago: executing program 4 (id=368):
socket$alg(0x26, 0x5, 0x0)
epoll_create(0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x101000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"})
syz_open_pts(r1, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x1cc, 0x11, [{@in=@rand_addr=0x64010102, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0x2}, {@in=@empty, @in=@private=0xa010100, @in6=@remote, @in6=@mcast2, 0x33, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2, 0xff, 0x0, 0x0, 0x3503, 0x0, 0x2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev, 0x0, 0x1, 0x0, 0x3506, 0x2, 0xf}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@broadcast, @in6=@mcast1, @in6=@remote}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd29, 0x70bd2d, 0x70bd27, 0x70bd28, 0x7f, [0x0, 0x7, 0x7, 0x5, 0x80, 0x0, 0x0, 0xfffffff7, 0x6]}}, @proto={0x5, 0x19, 0x6c}, @mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x27c}}, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x3, &(0x7f0000000000)=0x8000, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)

5.200523893s ago: executing program 4 (id=369):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000140)={0x8, @capture={0x0, 0x0, {0x5, 0xfff}, 0x0, 0xc}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0)

5.129861298s ago: executing program 4 (id=370):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6d, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="000000000000b7080000000000007b8af8ff00000001bfa200000000f8ffffffb703000008000020b70400000000000085000000c3000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@alu={0x0, 0x0, 0x7, 0x3, 0x4, 0x20, 0x8}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r6, 0x81, 0x2, &(0x7f0000000280)="935a")
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_int(r7, &(0x7f0000000040)=0x900, 0x12)
read$msr(r7, &(0x7f0000000000), 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket(0x10, 0x3, 0x0)
write(r8, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r8, &(0x7f00000021c0), 0x5b, 0x40, 0x0)

4.880797891s ago: executing program 1 (id=372):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getrule={0x1c, 0x22, 0x208, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x14, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10001}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x50)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010300000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000200150a01020000000000000000000000000900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r6}, 0x20)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2a, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000380), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0}, 0x1, 0x0, 0x0, 0x60840}, 0x4040004)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)

4.879113272s ago: executing program 2 (id=373):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000003000010400000000000000000040ffff", @ANYRES32=0x0, @ANYRES32=r2], 0x48}}, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, 0x0, 0x0)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, 0x0, &(0x7f0000000040))
r7 = socket(0x2, 0x80805, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45}})
sendmmsg$inet(r7, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffbfffff, 0x0, &(0x7f0000006680)=0x1)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
fstatfs(r9, &(0x7f0000000340)=""/244)
mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000005600010000000000000000000700000006dc11adbbfa8e4ae5c47aabfd76557ad6d2e562be658bfb4ff6034dc59803359dc4ee65ec877c8d57fb9c8efdfa97f1277ae23cf1f6100900000069fe26c01c11bd3d4c8cb970b2f89434811e3548564d2dfc000000000000", @ANYRES32=0x0, @ANYBLOB="100001000c0004800800020000000000"], 0x28}}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

4.028328211s ago: executing program 0 (id=374):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0100deffffffe3001c0000000000000000000000070000004404730001000000"], 0x40}, 0x0)

3.926825299s ago: executing program 3 (id=375):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r2=>0x0}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000540)={r2, 0x7f}, 0x8)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
epoll_create1(0x80000)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4)
getsockopt$packet_int(r3, 0x107, 0x15, 0x0, &(0x7f0000000100))
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast2, 0x20000004}, 0x1c)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
r7 = syz_open_dev$video4linux(&(0x7f0000000900), 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r7, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x102, 0x3, {0x10001, 0x81, 0xad2d}})
setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88)
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0xaf)
socket$nl_route(0x10, 0x3, 0x0)

3.903280231s ago: executing program 1 (id=376):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0xa8, 0x108, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'wlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200)=0x5, 0xfffffe97)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[@ANYRES16=r4], 0x118)
r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x8242, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x10}}}}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, &(0x7f0000000080)={0x14, &(0x7f0000000040)={0x40, 0x22, 0x11, {0x11, 0x7, "c9c66e6a40ce87784345b3711383be"}}, 0x0}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f00000000c0)={0x7ff, [0xab8, 0x0, 0x312, 0x81, 0xd114, 0x0, 0x7fff, 0x91, 0xebf, 0x7, 0x4, 0x5, 0x8, 0xa, 0xfff9, 0x5, 0x8, 0x2, 0x2, 0x8, 0x5, 0x8, 0x5, 0x9, 0x5, 0xb, 0x1, 0x7e, 0x1, 0x1, 0x1, 0xcb5, 0x5b5, 0x1, 0xf093, 0x9, 0xe, 0xbd0a, 0xa09a, 0x8, 0x4, 0x9, 0x2c, 0x3, 0x6, 0x7fff, 0xfa, 0x7], 0x2})
ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x8)

3.882274227s ago: executing program 0 (id=377):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x101600, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x7)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x2)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$devlink(0x0, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x8e0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT=0x0], 0x0)
syz_usb_ep_write(r4, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()

3.31893466s ago: executing program 3 (id=378):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010"], 0x79c}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102376, 0x18fe8)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TCFLSH(r3, 0x400455c8, 0x2)
ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x4)
ioctl$TIOCSTI(r3, 0x5412, 0x0)
creat(0x0, 0xecf86c37d53049cc)
execve(0x0, 0x0, 0x0)
lseek(r0, 0x9, 0x0)

2.822767753s ago: executing program 3 (id=379):
mkdir(&(0x7f0000005800)='./bus\x00', 0x6b76f27452643c0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8408, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x14, r2, 0x1, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f00000003c0)='/dev/cpu/#/msr\x00', 0xf)
getsockopt$inet_int(r4, 0x10d, 0x5, &(0x7f0000000000), &(0x7f0000000340)=0x4)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x13, 0xffffffffffffffff, 0xab17e000)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)="d1cbda49e10a5a0e133faedbc4dddafbda03662b04cb284720265d14d4b4e92e1499213fd0f3104e741e0c9d744335c1fe8ad995067e70d9d284439a235bc694a38b79b4d9cec0c1670523cfcca868a8b03019dc4353999a9a", 0x59}, {&(0x7f00000000c0)="01917198efb8d3868124c701c1162c4732191f1357eb6cc4812fe9ccdf08d697a4cbae811c7bdc8207791cfd5966031998d8d99c28c0ce5bc0cb70114c84ab", 0x3f}, {&(0x7f0000000180)="4db80a8fc41404aa7469390099ab196bf0deac1099e99c7c6104eba1af93e645f018091a72", 0x25}, {&(0x7f0000000740)="ac57098d8763a6ff79d18f62c1a089a84fbcadaefbaf9b86138b1196a13869c353a024677e1262eee25b556501949259640f86921e398f6550aa7dd979a8debb9de044b96a8cc4e7382e650095258c0248ec4931150b31337442469279de352b6279b340ae385cd5d1627c4d0df6cc5a72ca551d2d54cbf200a88a62dda5ff72c006217713a2dd49639bf81270d2c06f0cad4339751818caea32270e314e38a465ed4604e067c3691bf0a9d9201ad552008bf0c771c3f459b9f1680fdb99b50cdc35aa9161c1c2313c831e05c232365d88fde886df8ffc2c06", 0xd9}], 0x4, &(0x7f0000000840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xdf}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0xf8}, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0)
lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@expire={0x2dc, 0x18, 0x1, 0x70bd2a, 0x25dfdbff, {{{@in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x4e21, 0x0, 0x4e20, 0x4, 0xa, 0x0, 0x0, 0x2c, 0x0, r8}, {@in6=@local, 0x4d4, 0x3c}, @in6=@loopback, {0xf04, 0x2, 0x9, 0x8001, 0x2a, 0x400, 0x401, 0x200}, {0x8, 0x3, 0x1, 0x80}, {0x200, 0x7, 0x6393}, 0x70bd27, 0x3506, 0x2, 0x0, 0xd, 0x10}, 0x40}, [@offload={0xc, 0x1c, {r5, 0x2}}, @sec_ctx={0xe4, 0x8, {0xe0, 0x8, 0x0, 0x0, 0xd8, "55238e63162087197b692816be887a894f089ffe73f780faea3a0835fcf8e8542508c75001fc466d6a350c58af08000000000c0000dc758aee10147d97c1e54a80b0f693d75230d807d2a61a58e7a455d82c0627ce900ace8023bef37f6a7b0b0da4622a78246f772397fcc57951e3cfaa57cbd98fc216359216dbe388ae6404ffd3424ee7b38178e653f669dd97ae7a20b8543bddc3edf678bf7caa804cbdb2eff22e6624b855ca8fc63768da25e66ff75042a9016894592079808d20fa180ffb4eea65f3686f4e6ceb71c22db5d1bab61482ece355db5d"}}, @sec_ctx={0xc9, 0x8, {0xc5, 0x8, 0x1, 0xf9, 0xbd, "87d0033011c9f48698abb9d94a54bf63b9063634a18fce92afecf7c800e11d5dea1572dcfd8c8e20385ac8775848fd2335ec45754b9ac5aab36abe198eed76047a5b7bb80d0d0dc3d09ec9958f54b437bc0068e79b091efcda149b79ba917965a60e72d729419615b2f95250a8dd8a8b7def83431885b52699ccb01d3471e3e1421572b58a914fd14797892d90533fb21a623de9cd8affaf6c43ba316b6ff243dec3ccc2a0a5fb78bc4ba4747c40b3cdbbab949ecf380ec0b0d35fd073"}}, @address_filter={0x28, 0x1a, {@in6=@mcast1, @in=@broadcast, 0x2, 0x4, 0x7f}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.755982596s ago: executing program 4 (id=380):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x40, 0x8, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="200103990000c3e904"], 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = io_uring_setup(0x1dde, &(0x7f0000000440))
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1a, 0x20000028, r2)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0x0, 0x3, 0xc9, @string={0xc9, 0x3, "33187bdbfb64e373c75240bf380ec6eca4893514b6c83bc9b73fb4ece951f2ce6d609e123d6062f642df1e58de83a7bcda4f8300a972332b83d5de6fd6c7364681633e2eb69ad08f0f1f09264ab766b7245f251a3b889a637fcb3dfee2657a66c63d963812647fc0c0d8d55c1bdf5ee4b6db8bd2099a3315d2b7327ede0deb714dad469b5fc6b0bcb075746c0581913025ee6882c3d0c9148625bb8d96a4dc00ec1ed2a37a0b081f391689c9d2081acb9b340bce94fe17abed01ad388ac1fa1f5c2a159a6f67ea"}}, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x2}, @local=@item_012={0x0, 0x2, 0x9}, @main=@item_4={0x3, 0x0, 0xc, "2b976412"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x1, 0x1, {0x22, 0xfb7}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000340)={0x0, 0x16, 0x68, "f4bbded854edf9defc31b21ba72ef1d7035b3d955202933395727d41bd1a5b816282158467e57bf80f65becaa42910056c26f49583d46204d6c4a4f59eed459c00a751ad13ee47a9948274fe2672919e589d991dfcb639d1e2b26fdb0acf655a16acd4073a7faf99"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000500)={0x20, 0x1, 0xab, "8cd407340f7456befdf2416c264f02b0ff2dca255db85b627754dbf5169b6616802e1c981cb7b3c092e90b673d77eb1f2dcd2e0afe5dfbad316c9ab3ae5463823632408dbdb569330dcd373ba993dbb9d02731287e7c476c6017056ac84ec579f72844de785c1a95f404980c82bfdcc1101219358072df8d812a6b11608c014296d5f43195632c75134ef550eb6a749d4ab90ed710c3ae4155812a59f3a7b7a221f2d6db9bd50f575eb6fc"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x7}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f00000007c0)={0x80, 0xe, 0xd, "86cee894c3c2cb80cec0cc64cc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x1}, 0x6)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4)
r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f80)=ANY=[@ANYBLOB="12015002000000082505a8a4400001020301090224000101ff50020904000501070102130905010200023e02030905820200020601056c4f18a57499501803a352293f84acfa9237b54a4c8e1c8c97ff1190a2332aed46b293c917e86b9946499cec98f13ddbf0d20ed42aefa74e5e04cf005ddb627bff4dace83eceffbf06560c3ba3b7f990cc23d70223c1ed490e3ff5b5b7295c78f9ada5a868110c5535cdb91e8876959e6f99caad960682ed460c99616574ecf3a6235759bba241dc8d061db0e8ca399fa43f2ef32dfd5a5f11d7e89f8c9f2856a8c7af26b015f5256613419733661d652915c20ff59f0260ca86"], &(0x7f0000000980)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x8, 0x2, 0x10, 0xff, 0x8}, 0x21, &(0x7f0000000100)=ANY=[@ANYBLOB="050f210001444b87f6bc3d7ca630c000003f7e04000f00"/33], 0x5, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x146a}}, {0x35, &(0x7f0000000800)=@string={0x35, 0x3, "06e204ca19fe6be665f5af2326e9d892260dd644d64c1817dc0434b9ed1991fdc9d756f6c9d7d720cfc5e1bbae54a4b9259a0e"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x1801}}, {0x81, &(0x7f00000008c0)=@string={0x81, 0x3, "a65167dc9970e92c23f03c2f7e21e22a422f025307d047a9ea81d40db07657554ece76b258130971449cf31ff24f7c9d8f4097c715c774ae22cb323263120b7bb0adcf16ef86741128ec08854d3f866ea7303099eb919ead5cf4514b4a2361d8d026998fdf59aa9b035a269274fe4047b37a81e7fc268f9fec385039d81841"}}]})
add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$session_to_parent(0x12)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0xffff7fff}, 0x55)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r6 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x6, 0x1})
dup3(r6, 0xffffffffffffffff, 0x0)
r7 = mq_open(0x0, 0x42, 0x40, 0x0)
mq_timedsend(r7, 0x0, 0x0, 0x6, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230000090400"], 0x0)
syz_usb_control_io$printer(r5, &(0x7f0000000b80)={0x14, &(0x7f0000000a00)={0x20, 0x23, 0xe6, {0xe6, 0x23, "f08669b7c8ef06efc396cd96e1afb394fd5e89f43979bb558d76d891345a0ff076e94f0ca4cbf522fc0646c5df78e9b5152e23d4f0a506df516222d88792348395e0407195d289795843ba26cdcedc1fb224cffe4a68d8584ee146dbceca8549115dc59257e4b5d0da20e7ac5f0669f407a22eb7b87c0cbda74f72655d7f5028cb39375be8e46a33b1bd5e0ee49dcf63b13ea37ec3a6ad34cd9d070fcc1c41b064f7f96fa6a1b8eb6533e26fe3dcbdad12f678a8f3c9f42d0707ca8c315845dc227ef03aa2b23d0979f1ce4de28eb0d7eeb44103d36c0d67332455c412f006e2721f2097"}}, &(0x7f0000000b00)={0x0, 0x3, 0x65, @string={0x65, 0x3, "b712e29c7931e929a4dde70efea1c3478ca09611736dd9025a118ee6fdb9947be8d73d52bb329207932b936f1ce0eb275936e4d3d946ddd9232f86fe35dc0c3d8251a5b78f7ae77b91c7678e0916ff0223487ae05e961aa3710ce3e3145bbb4a1dbb52"}}}, &(0x7f0000000f40)={0x34, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000e00)={0x20, 0x0, 0xb2, {0xb0, "922810592d0b3bf82cdac39d1fc3ccd137953e0328dce41426dfb9f77fda1d1ef5a808ee19ed2991c36d662b147277937a271ee94f00ebde7c3a28b54d0ab9a1d5ebd17bdc7f4ee7f7353256cd74cbc7325c12fe73047d2a5cca7686d6246df9f9c33496856391de06f56cbf26b5454540ba8dc0e78d93fd7f6e22890d68714743eb51791e5e7d92cad07b5900458e0287eba4b7548dff70811e7dbf80b8f8b2242c4350a1e85d17a2cc51941ed5586b"}}, &(0x7f0000000ec0)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000f00)={0x20, 0x0, 0x1, 0x2}})

1.684661034s ago: executing program 3 (id=381):
r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
gettid()
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r2=>0x0})
mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r4=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d)
r10 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14<L\x19K\xbf\xf7\x9c\xe7 \x12+4.\xa9\xa7\xdc[\xd2\xec\xbe\x1a\xa1\x04\xd3\x9e\x92\x8a\xf7\xdb\xe7f\xdeo\xc1\xa5\xb6T\r)\x1c\xbe\x12\xd1\xef\xc2S\xcci\xc8\x0e\x00]\xe6|\xccK\xc7\r\xfa \x02\xe8\x1b\xc1\x93\xce\x02%\x86\xcb\x94K\v\xe7x\xe3\x06[/\xf9\xa8\x82\x9b\xeeF\x88\xc0f\x82\xb7T\r\x04\xbb\x10\x1d3\xa6', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0)
ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000002c0)={0x18, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r4, 0x0, &(0x7f0000236000/0x800000)=nil, 0x800000, 0x400000000000000})
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f00000003c0)='//0\xc3p\xa7n\xb5\xad3\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3V\x9c\x8c\xf8\xf7\xe2\xd5\x8bE\xee5\x00\xaa\xd5\xfc\x1b$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\x92\xe22\xc9\xb5\xca\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\xec\xac\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xec\x9es\xee\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\x00\x00\x00\x00\x00\x00\x00\x00_\tN\xfd\xa2\xc2SPu\xe7\xc0+SL\xa1', 0x0)

1.255933001s ago: executing program 2 (id=382):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102376, 0x18fe8)
ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$TIOCSTI(r2, 0x5412, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
creat(0x0, 0xecf86c37d53049cc)
syz_open_procfs(0x0, 0x0)
lseek(r0, 0x9, 0x0)

587.666114ms ago: executing program 0 (id=383):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r4)

519.012351ms ago: executing program 1 (id=384):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req={0xb6, 0x5, 0xfff, 0xe000}, 0x10)

249.961531ms ago: executing program 3 (id=385):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$inet6(0xa, 0x3, 0xff)
sendmmsg$inet6(r0, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0)
shutdown(r0, 0x0)

55.396845ms ago: executing program 3 (id=386):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x101600, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x7)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x2)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$devlink(0x0, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x8e0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT=0x0], 0x0)
syz_usb_ep_write(r6, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()

0s ago: executing program 1 (id=387):
socket$inet(0x2, 0x2, 0x1)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x20000000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000300)={0x1, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x9, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x1, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0x9, 0x6, '\x00', 0x4}, {0x11, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0xe4, '\x00', 0x6}, {0x88, 0x3, 0x2a, '\x00', 0x88}, {0x1, 0x0, 0xa, '\x00', 0xed}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x9f, 0x6, 0x3, '\x00', 0x6}, {0x2, 0xb, 0x80, '\x00', 0x7f}, {0x8, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x4}, {0x9, 0x4, 0x7, '\x00', 0x9}, {0x1, 0x3, 0x7, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x3}, {0x7, 0x4, 0xca, '\x00', 0x6}, {0x0, 0xff, 0x81, '\x00', 0x13}, {0x5, 0x0, 0x6, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x23, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x1, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0xa}]}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0)
r5 = io_uring_setup(0x2d58, &(0x7f0000000380)={0x0, 0x62cc, 0x400, 0x8000002, 0x3f7})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x424}, 0x1, 0x0, 0x0, 0x40}, 0x440d8)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x42400, 0x0)
write$cgroup_int(r8, &(0x7f0000000280)=0x8, 0x12)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r9 = syz_open_dev$usbmon(&(0x7f0000000000), 0xf4, 0x8800)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010108, @local}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x5, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "910000000000006f00"}, @md5sig={0x13, 0x12, "000000fb000000000000801100"}]}}}}}}}, 0x0)
read$usbmon(r9, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   73.705194][ T6052] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   73.721286][ T6052] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   73.731091][ T6052] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   73.744069][ T6052] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   73.753172][ T6052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.107001][ T6052] usb 4-1: config 0 descriptor??
[   74.152526][   T30] audit: type=1400 audit(1743242276.491:250): avc:  denied  { create } for  pid=6119 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   74.250908][   T30] audit: type=1400 audit(1743242276.501:251): avc:  denied  { write } for  pid=6119 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   74.647676][   T30] audit: type=1400 audit(1743242276.741:252): avc:  denied  { create } for  pid=6121 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   74.837406][   T30] audit: type=1400 audit(1743242276.751:253): avc:  denied  { setopt } for  pid=6121 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   74.872516][   T30] audit: type=1400 audit(1743242276.751:254): avc:  denied  { create } for  pid=6121 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   74.897336][   T30] audit: type=1400 audit(1743242276.971:255): avc:  denied  { ioctl } for  pid=6121 comm="syz.0.58" path="mnt:[4026532798]" dev="nsfs" ino=4026532798 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   74.938264][   T30] audit: type=1400 audit(1743242277.231:256): avc:  denied  { append } for  pid=6119 comm="syz.2.57" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   75.049226][ T6052] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[   75.073887][ T6052] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   75.452491][ T6148] No control pipe specified
[   75.980133][ T6052] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   76.025429][   T10] cfg80211: failed to load regulatory.db
[   76.249922][ T6052] usb 3-1: Using ep0 maxpacket: 16
[   76.265161][ T6052] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[   76.283460][ T6052] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   76.316144][ T6052] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[   76.333658][ T6052] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.349884][ T6052] usb 3-1: Product: syz
[   76.358793][ T6052] usb 3-1: Manufacturer: syz
[   76.370396][ T6052] usb 3-1: SerialNumber: syz
[   76.382872][ T6052] usb 3-1: config 0 descriptor??
[   76.436986][   T30] audit: type=1400 audit(1743242278.791:257): avc:  denied  { ioctl } for  pid=6156 comm="syz.4.63" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   76.651489][ T6052] appledisplay 3-1:0.0: Error while getting initial brightness: -110
[   76.705453][ T6148] netlink: 56 bytes leftover after parsing attributes in process `syz.2.62'.
[   76.710738][ T6052] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110
[   76.874905][ T6052] usb 3-1: USB disconnect, device number 4
[   77.021292][ T6162] Invalid logical block size (6)
[   77.120879][ T6162] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   78.153748][   T10] usb 4-1: USB disconnect, device number 3
[   78.328415][ T6165] 9pnet: Could not find request transport: fd0x0000000000000003
[   78.798303][ T6173] loop6: detected capacity change from 0 to 8
[   78.807907][    C1] blk_print_req_error: 43 callbacks suppressed
[   78.807918][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   78.823172][    C1] buffer_io_error: 43 callbacks suppressed
[   78.823179][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   78.838227][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   78.847384][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   78.856571][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   78.865767][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   78.874897][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   78.884031][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   78.898482][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   78.907654][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   78.911012][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'.
[   78.915655][ T6172] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   78.930872][ T6172] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   78.933544][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   78.947857][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   78.956054][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   78.965220][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   78.974191][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   78.983384][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   78.991213][ T6173] ldm_validate_partition_table(): Disk read failed.
[   79.006896][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   79.016064][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   79.024480][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   79.033592][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   79.044495][ T6173] Dev loop6: unable to read RDB block 0
[   79.052897][ T6173]  loop6: unable to read partition table
[   79.058606][ T6173] loop6: partition table beyond EOD, truncated
[   79.064882][ T6173] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[   79.076514][ T6172] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   79.082434][ T6172] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   79.105665][ T6172] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   79.111862][ T6172] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   79.131352][ T6172] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   79.137324][ T6172] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[   79.147651][ T6172] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   79.153906][ T6172] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[   79.379983][   T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   79.772969][   T10] usb 1-1: Using ep0 maxpacket: 16
[   80.302430][   T30] kauditd_printk_skb: 2 callbacks suppressed
[   80.302445][   T30] audit: type=1400 audit(1743242282.611:260): avc:  denied  { ioctl } for  pid=6200 comm="syz.4.74" path="socket:[8065]" dev="sockfs" ino=8065 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   80.349022][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[   80.391006][   T30] audit: type=1400 audit(1743242282.611:261): avc:  denied  { write } for  pid=6200 comm="syz.4.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   80.413715][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   80.881396][   T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[   80.895949][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.903982][   T10] usb 1-1: Product: syz
[   80.908143][   T10] usb 1-1: Manufacturer: syz
[   80.912796][   T10] usb 1-1: SerialNumber: syz
[   80.918363][   T30] audit: type=1400 audit(1743242282.731:262): avc:  denied  { create } for  pid=6183 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   80.940936][   T10] usb 1-1: config 0 descriptor??
[   80.989528][   T30] audit: type=1400 audit(1743242282.741:263): avc:  denied  { write } for  pid=6183 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   81.074748][   T30] audit: type=1400 audit(1743242282.831:264): avc:  denied  { read } for  pid=6200 comm="syz.4.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   81.210145][   T10] appledisplay 1-1:0.0: Error while getting initial brightness: -110
[   81.251469][ T6210] syzkaller1: entered promiscuous mode
[   81.257967][ T6210] syzkaller1: entered allmulticast mode
[   81.338959][   T10] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -110
[   81.864931][   T10] usb 1-1: USB disconnect, device number 7
[   82.554372][ T6217] 9pnet_fd: Insufficient options for proto=fd
[   84.901865][ T6238] loop6: detected capacity change from 0 to 8
[   85.080674][    C0] blk_print_req_error: 6 callbacks suppressed
[   85.080686][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.095889][    C0] buffer_io_error: 6 callbacks suppressed
[   85.095896][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.113218][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.122431][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.130441][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.139574][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.148201][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.157402][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.165429][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.174557][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.183373][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.192483][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.200886][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.209993][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.217858][ T6238] ldm_validate_partition_table(): Disk read failed.
[   85.224897][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.233998][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.243091][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.252224][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.260739][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.269866][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.278958][ T6238] Dev loop6: unable to read RDB block 0
[   85.285068][ T6238]  loop6: unable to read partition table
[   85.290787][ T6238] loop6: partition table beyond EOD, truncated
[   85.296914][ T6238] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[   86.391401][   T30] audit: type=1400 audit(1743242288.751:265): avc:  denied  { setopt } for  pid=6246 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   86.412237][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'.
[   87.087386][   T30] audit: type=1400 audit(1743242289.401:266): avc:  denied  { write } for  pid=6246 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   87.310669][ T6266] 9pnet_fd: Insufficient options for proto=fd
[   87.738263][   T30] audit: type=1400 audit(1743242290.091:267): avc:  denied  { connect } for  pid=6270 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   87.822497][ T5909] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   87.981434][ T5909] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   87.993852][ T5909] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   88.005856][ T5909] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   88.019385][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.033282][ T6273] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   88.056521][ T5909] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   88.180181][ T6052] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   88.305689][ T2149] usb 3-1: USB disconnect, device number 5
[   88.344611][ T6052] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   88.374874][ T6052] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   88.419142][ T6052] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   88.430209][ T6052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.447915][ T6276] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   88.468506][ T6052] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[   88.818859][   T10] usb 5-1: USB disconnect, device number 4
[   88.995405][   T30] audit: type=1400 audit(1743242291.351:268): avc:  denied  { create } for  pid=6285 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   89.050881][   T30] audit: type=1400 audit(1743242291.381:269): avc:  denied  { setopt } for  pid=6285 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   89.071797][   T30] audit: type=1400 audit(1743242291.381:270): avc:  denied  { audit_read } for  pid=6285 comm="syz.2.97" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   89.095464][   T30] audit: type=1400 audit(1743242291.391:271): avc:  denied  { create } for  pid=6285 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   89.116812][   T30] audit: type=1400 audit(1743242291.401:272): avc:  denied  { ioctl } for  pid=6285 comm="syz.2.97" path="socket:[9312]" dev="sockfs" ino=9312 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   89.263899][   T30] audit: type=1400 audit(1743242291.401:273): avc:  denied  { ioctl } for  pid=6285 comm="syz.2.97" path="socket:[9313]" dev="sockfs" ino=9313 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   89.288178][    C0] vkms_vblank_simulate: vblank timer overrun
[   90.876752][   T30] audit: type=1400 audit(1743242291.471:274): avc:  denied  { read } for  pid=6285 comm="syz.2.97" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   90.899541][    C0] vkms_vblank_simulate: vblank timer overrun
[   91.335610][ T6314] random: crng reseeded on system resumption
[   91.498174][ T6319] 9pnet_fd: Insufficient options for proto=fd
[   91.617253][ T6323] 9pnet_fd: Insufficient options for proto=fd
[   91.669053][   T30] kauditd_printk_skb: 11 callbacks suppressed
[   91.669069][   T30] audit: type=1400 audit(1743242294.021:286): avc:  denied  { mount } for  pid=6324 comm="syz.1.106" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   91.773792][ T6327] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   91.786879][ T6327] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   91.808628][   T30] audit: type=1400 audit(1743242294.131:287): avc:  denied  { unlink } for  pid=6324 comm="syz.1.106" name="#1" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   91.875488][   T30] audit: type=1400 audit(1743242294.161:288): avc:  denied  { mount } for  pid=6324 comm="syz.1.106" name="/" dev="overlay" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   92.245163][   T30] audit: type=1400 audit(1743242294.201:289): avc:  denied  { create } for  pid=6324 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   92.266317][   T30] audit: type=1400 audit(1743242294.331:290): avc:  denied  { connect } for  pid=6324 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   92.286275][   T30] audit: type=1400 audit(1743242294.341:291): avc:  denied  { ioctl } for  pid=6324 comm="syz.1.106" path="socket:[8955]" dev="sockfs" ino=8955 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   92.383611][ T6327] overlayfs: failed to look up (tracing) for ino (-66)
[   92.389907][   T30] audit: type=1400 audit(1743242294.371:292): avc:  denied  { ioctl } for  pid=6326 comm="syz.4.107" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8958 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   92.550822][   T30] audit: type=1400 audit(1743242294.371:293): avc:  denied  { create } for  pid=6326 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   92.570707][   T30] audit: type=1400 audit(1743242294.501:294): avc:  denied  { connect } for  pid=6326 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   92.599933][ T6052] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   93.006784][   T30] audit: type=1400 audit(1743242294.791:295): avc:  denied  { setopt } for  pid=6326 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   93.206686][ T6344] warning: `syz.3.111' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   93.356812][ T6052] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   93.381987][ T6052] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   93.419840][ T6052] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   93.689037][ T6052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.757580][ T6332] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   93.782132][ T6052] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   94.199925][ T5910] usb 3-1: USB disconnect, device number 6
[   94.355978][ T6357] 9pnet_fd: Insufficient options for proto=fd
[   94.872169][ T6360] netlink: 592 bytes leftover after parsing attributes in process `syz.4.116'.
[   95.038358][ T6366] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   95.714711][ T5910] libceph: connect (1)[c::]:6789 error -101
[   95.818012][ T5910] libceph: mon0 (1)[c::]:6789 connect error
[   95.994730][ T6370] ceph: No mds server is up or the cluster is laggy
[   96.973380][   T30] kauditd_printk_skb: 9 callbacks suppressed
[   96.973411][   T30] audit: type=1400 audit(1743242299.291:305): avc:  denied  { map } for  pid=6381 comm="syz.2.121" path="socket:[9450]" dev="sockfs" ino=9450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   97.465258][   T30] audit: type=1400 audit(1743242299.821:306): avc:  denied  { read write } for  pid=6391 comm="syz.4.125" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   97.530189][   T30] audit: type=1400 audit(1743242299.821:307): avc:  denied  { open } for  pid=6391 comm="syz.4.125" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   97.679182][   T30] audit: type=1400 audit(1743242300.001:308): avc:  denied  { create } for  pid=6393 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   97.760641][   T30] audit: type=1400 audit(1743242300.001:309): avc:  denied  { write } for  pid=6393 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   97.842876][   T30] audit: type=1400 audit(1743242300.031:310): avc:  denied  { unmount } for  pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   98.917703][ T6412] FAULT_INJECTION: forcing a failure.
[   98.917703][ T6412] name failslab, interval 1, probability 0, space 0, times 0
[   98.946586][ T6412] CPU: 1 UID: 0 PID: 6412 Comm: syz.1.131 Not tainted 6.14.0-syzkaller-07540-geff5f16bfd87 #0 PREEMPT(full) 
[   98.946612][ T6412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   98.946622][ T6412] Call Trace:
[   98.946626][ T6412]  <TASK>
[   98.946633][ T6412]  dump_stack_lvl+0x16c/0x1f0
[   98.946661][ T6412]  should_fail_ex+0x512/0x640
[   98.946678][ T6412]  ? fs_reclaim_acquire+0xae/0x150
[   98.946704][ T6412]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[   98.946725][ T6412]  should_failslab+0xc2/0x120
[   98.946745][ T6412]  __kmalloc_noprof+0xd2/0x510
[   98.946767][ T6412]  tomoyo_realpath_from_path+0xc2/0x6e0
[   98.946789][ T6412]  ? tomoyo_profile+0x47/0x60
[   98.946814][ T6412]  tomoyo_path_number_perm+0x245/0x580
[   98.946831][ T6412]  ? tomoyo_path_number_perm+0x237/0x580
[   98.946851][ T6412]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   98.946870][ T6412]  ? find_held_lock+0x2b/0x80
[   98.946905][ T6412]  ? find_held_lock+0x2b/0x80
[   98.946923][ T6412]  ? hook_file_ioctl_common+0x145/0x410
[   98.946951][ T6412]  ? __fget_files+0x20e/0x3c0
[   98.946972][ T6412]  security_file_ioctl+0x9b/0x240
[   98.946994][ T6412]  __x64_sys_ioctl+0xb7/0x200
[   98.947019][ T6412]  do_syscall_64+0xcd/0x260
[   98.947042][ T6412]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.947058][ T6412] RIP: 0033:0x7f8d2bf8d169
[   98.947071][ T6412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.947086][ T6412] RSP: 002b:00007f8d2cde4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   98.947105][ T6412] RAX: ffffffffffffffda RBX: 00007f8d2c1a5fa0 RCX: 00007f8d2bf8d169
[   98.947114][ T6412] RDX: 0000200000000100 RSI: 00000000c0606610 RDI: 0000000000000003
[   98.947123][ T6412] RBP: 00007f8d2cde4090 R08: 0000000000000000 R09: 0000000000000000
[   98.947132][ T6412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   98.947140][ T6412] R13: 0000000000000000 R14: 00007f8d2c1a5fa0 R15: 00007ffe462cced8
[   98.947155][ T6412]  </TASK>
[   98.947181][ T6412] ERROR: Out of memory at tomoyo_realpath_from_path.
[   99.269978][   T30] audit: type=1400 audit(1743242301.611:311): avc:  denied  { append } for  pid=6414 comm="syz.1.132" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   99.320007][ T6416] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   99.347383][   T30] audit: type=1400 audit(1743242301.701:312): avc:  denied  { execute } for  pid=6414 comm="syz.1.132" name=10 dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   99.413787][ T6418] netlink: 'syz.0.133': attribute type 10 has an invalid length.
[   99.487010][ T6418] team0: Device hsr_slave_0 failed to register rx_handler
[   99.668619][   T30] audit: type=1400 audit(1743242302.021:313): avc:  denied  { read } for  pid=6411 comm="syz.2.130" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   99.700079][ T5909] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   99.720428][   T30] audit: type=1400 audit(1743242302.021:314): avc:  denied  { open } for  pid=6411 comm="syz.2.130" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   99.868294][ T6425] No control pipe specified
[   99.981021][ T5909] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[   99.989412][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.001599][ T5909] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  100.010707][ T5909] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  100.018722][ T5909] usb 1-1: Manufacturer: syz
[  100.032972][ T5909] usb 1-1: config 0 descriptor??
[  100.090702][ T5909] rc_core: IR keymap rc-hauppauge not found
[  100.110363][ T5909] Registered IR keymap rc-empty
[  100.119889][ T6052] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  100.127938][ T5909] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  100.151675][ T5909] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7
[  100.299896][ T6052] usb 4-1: Using ep0 maxpacket: 16
[  100.314445][ T6052] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  100.404388][ T6052] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  100.483223][ T6052] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  100.502595][ T6052] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.519927][ T6052] usb 4-1: Product: syz
[  100.539895][ T6052] usb 4-1: Manufacturer: syz
[  100.544522][ T6052] usb 4-1: SerialNumber: syz
[  100.580769][ T6052] usb 4-1: config 0 descriptor??
[  100.663755][ T5909] usb 1-1: USB disconnect, device number 8
[  100.853422][ T6438] netlink: 56 bytes leftover after parsing attributes in process `syz.3.135'.
[  100.855798][ T6052] appledisplay 4-1:0.0: Error while getting initial brightness: -110
[  100.856783][ T6052] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110
[  100.890350][ T6439] process 'syz.1.138' launched './file2' with NULL argv: empty string added
[  100.934076][ T6052] usb 4-1: USB disconnect, device number 4
[  101.040132][ T5910] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  101.120653][ T5909] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  101.199924][ T5910] usb 5-1: Using ep0 maxpacket: 16
[  101.210727][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  101.224964][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  101.259158][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  101.275646][ T5909] usb 1-1: device descriptor read/64, error -71
[  101.310437][ T5910] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  101.338865][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.365542][ T5910] usb 5-1: Product: syz
[  101.369913][   T10] usb 2-1: Using ep0 maxpacket: 16
[  101.382268][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  101.396576][ T5910] usb 5-1: Manufacturer: syz
[  101.401665][ T5910] usb 5-1: SerialNumber: syz
[  101.411710][   T10] usb 2-1: config 1 has an invalid descriptor of length 51, skipping remainder of the config
[  101.429611][ T5910] usb 5-1: config 0 descriptor??
[  101.449483][   T10] usb 2-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  101.493478][   T10] usb 2-1: config 1 interface 0 has no altsetting 0
[  101.542080][ T5909] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  101.561958][   T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  101.572360][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.581191][   T10] usb 2-1: Product: syz
[  101.591065][   T10] usb 2-1: Manufacturer: syz
[  101.595898][   T10] usb 2-1: SerialNumber: syz
[  101.797040][ T5910] appledisplay 5-1:0.0: Error while getting initial brightness: -110
[  101.809368][ T5909] usb 1-1: device descriptor read/64, error -71
[  101.816476][ T5910] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110
[  101.847324][   T10] usbhid 2-1:1.0: couldn't find an input interrupt endpoint
[  101.868061][   T10] usb 2-1: USB disconnect, device number 2
[  101.930065][ T5909] usb usb1-port1: attempt power cycle
[  102.146921][   T24] usb 5-1: USB disconnect, device number 5
[  102.279915][ T5909] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  102.280966][ T6482] trusted_key: syz.2.143 sent an empty control message without MSG_MORE.
[  102.300340][ T5909] usb 1-1: device descriptor read/8, error -71
[  102.303629][ T6482] netlink: 'syz.2.143': attribute type 1 has an invalid length.
[  102.332893][ T6482] bond1: (slave gre2): The slave device specified does not support setting the MAC address
[  102.386374][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  102.386389][   T30] audit: type=1400 audit(1743242304.741:339): avc:  denied  { read write } for  pid=6484 comm="syz.1.145" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  102.389316][ T6482] bond1: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  102.415844][    C0] vkms_vblank_simulate: vblank timer overrun
[  102.420022][   T30] audit: type=1400 audit(1743242304.741:340): avc:  denied  { open } for  pid=6484 comm="syz.1.145" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  102.427448][ T6482] bond1: (slave gre2): Opening slave failed
[  102.454139][    C0] vkms_vblank_simulate: vblank timer overrun
[  102.501783][ T6489] xt_time: invalid argument - start or stop time greater than 23:59:59
[  102.595015][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'.
[  102.619909][   T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  102.791644][ T6497] syzkaller1: entered promiscuous mode
[  102.797229][ T6497] syzkaller1: entered allmulticast mode
[  102.919889][   T24] usb 2-1: Using ep0 maxpacket: 16
[  102.926249][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  102.938625][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  102.951398][   T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  102.960871][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.969199][   T24] usb 2-1: Product: syz
[  102.973717][   T24] usb 2-1: Manufacturer: syz
[  102.978356][   T24] usb 2-1: SerialNumber: syz
[  102.985186][   T24] usb 2-1: config 0 descriptor??
[  103.001546][ T6501] Bluetooth: MGMT ver 1.23
[  103.268369][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  103.672194][   T24] appledisplay 2-1:0.0: Error while getting initial brightness: -110
[  103.683280][   T24] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110
[  103.713704][   T24] usb 2-1: USB disconnect, device number 3
[  103.744199][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86
[  103.775927][ T6507] FAULT_INJECTION: forcing a failure.
[  103.775927][ T6507] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  103.786912][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024
[  103.810091][ T6507] CPU: 1 UID: 0 PID: 6507 Comm: syz.0.151 Not tainted 6.14.0-syzkaller-07540-geff5f16bfd87 #0 PREEMPT(full) 
[  103.810117][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  103.810126][ T6507] Call Trace:
[  103.810131][ T6507]  <TASK>
[  103.810137][ T6507]  dump_stack_lvl+0x16c/0x1f0
[  103.810165][ T6507]  should_fail_ex+0x512/0x640
[  103.810185][ T6507]  _copy_from_user+0x2e/0xd0
[  103.810204][ T6507]  restore_altstack+0x93/0x170
[  103.810230][ T6507]  ? __pfx_restore_altstack+0x10/0x10
[  103.810255][ T6507]  ? _raw_spin_unlock_irq+0x23/0x50
[  103.810274][ T6507]  ? lockdep_hardirqs_on+0x7c/0x110
[  103.810296][ T6507]  ? _raw_spin_unlock_irq+0x2e/0x50
[  103.810314][ T6507]  ? set_current_blocked+0xdd/0x120
[  103.810332][ T6507]  __do_sys_rt_sigreturn+0x13c/0x230
[  103.810355][ T6507]  ? __pfx___do_sys_rt_sigreturn+0x10/0x10
[  103.810384][ T6507]  do_syscall_64+0xcd/0x260
[  103.810408][ T6507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.810423][ T6507] RIP: 0033:0x7fe0fdd29359
[  103.810436][ T6507] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[  103.810451][ T6507] RSP: 002b:00007fe0fdbf6340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f
[  103.810467][ T6507] RAX: ffffffffffffffda RBX: 00007fe0fdfa5fa0 RCX: 00007fe0fdd29359
[  103.810478][ T6507] RDX: 00007fe0fdbf6340 RSI: 00007fe0fdbf6470 RDI: 0000000000000021
[  103.810487][ T6507] RBP: 00007fe0fdbf7090 R08: 0000000000000000 R09: 0000000000000000
[  103.810496][ T6507] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  103.810505][ T6507] R13: 0000000000000000 R14: 00007fe0fdfa5fa0 R15: 00007ffec41b2a28
[  103.810523][ T6507]  </TASK>
[  103.813005][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024
[  104.021621][   T10] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  104.032032][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.059457][   T10] usb 4-1: config 0 descriptor??
[  104.073443][ T6501] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  104.094352][   T10] gspca_main: spca561-2.14.0 probing abcd:cdee
[  104.309419][   T10] spca561 4-1:0.0: probe with driver spca561 failed with error -22
[  104.339462][   T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  104.357180][   T10] usb 4-1: MIDIStreaming interface descriptor not found
[  104.369525][   T30] audit: type=1400 audit(1743242306.731:341): avc:  denied  { read write } for  pid=6515 comm="syz.2.154" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  104.427051][   T10] usb 4-1: USB disconnect, device number 5
[  104.436002][   T30] audit: type=1400 audit(1743242306.751:342): avc:  denied  { open } for  pid=6515 comm="syz.2.154" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  104.520386][   T30] audit: type=1400 audit(1743242306.761:343): avc:  denied  { ioctl } for  pid=6515 comm="syz.2.154" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  104.879231][ T6529] FAULT_INJECTION: forcing a failure.
[  104.879231][ T6529] name failslab, interval 1, probability 0, space 0, times 0
[  104.892136][ T6529] CPU: 0 UID: 0 PID: 6529 Comm: syz.0.156 Not tainted 6.14.0-syzkaller-07540-geff5f16bfd87 #0 PREEMPT(full) 
[  104.892159][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  104.892168][ T6529] Call Trace:
[  104.892173][ T6529]  <TASK>
[  104.892179][ T6529]  dump_stack_lvl+0x16c/0x1f0
[  104.892207][ T6529]  should_fail_ex+0x512/0x640
[  104.892226][ T6529]  should_failslab+0xc2/0x120
[  104.892247][ T6529]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  104.892266][ T6529]  ? __alloc_skb+0x2b2/0x380
[  104.892287][ T6529]  __alloc_skb+0x2b2/0x380
[  104.892304][ T6529]  ? __pfx___alloc_skb+0x10/0x10
[  104.892322][ T6529]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  104.892347][ T6529]  netlink_alloc_large_skb+0x69/0x130
[  104.892368][ T6529]  netlink_sendmsg+0x694/0xd70
[  104.892391][ T6529]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.892412][ T6529]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.892436][ T6529]  ____sys_sendmsg+0xa8d/0xc60
[  104.892459][ T6529]  ? copy_msghdr_from_user+0x10a/0x160
[  104.892476][ T6529]  ? __pfx_____sys_sendmsg+0x10/0x10
[  104.892497][ T6529]  ? trace_sched_exit_tp+0xde/0x130
[  104.892522][ T6529]  ? sched_clock_cpu+0x6c/0x530
[  104.892550][ T6529]  ___sys_sendmsg+0x134/0x1d0
[  104.892568][ T6529]  ? __pfx____sys_sendmsg+0x10/0x10
[  104.892586][ T6529]  ? lockdep_hardirqs_on+0x7c/0x110
[  104.892627][ T6529]  __sys_sendmsg+0x16d/0x220
[  104.892644][ T6529]  ? __pfx___sys_sendmsg+0x10/0x10
[  104.892662][ T6529]  ? rcu_is_watching+0x12/0xc0
[  104.892691][ T6529]  do_syscall_64+0xcd/0x260
[  104.892716][ T6529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.892732][ T6529] RIP: 0033:0x7fe0fdd8d169
[  104.892744][ T6529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.892759][ T6529] RSP: 002b:00007fe0fdbd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  104.892774][ T6529] RAX: ffffffffffffffda RBX: 00007fe0fdfa6080 RCX: 00007fe0fdd8d169
[  104.892785][ T6529] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  104.892794][ T6529] RBP: 00007fe0fdbd6090 R08: 0000000000000000 R09: 0000000000000000
[  104.892804][ T6529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  104.892813][ T6529] R13: 0000000000000000 R14: 00007fe0fdfa6080 R15: 00007ffec41b2a28
[  104.892831][ T6529]  </TASK>
[  105.127692][    C0] vkms_vblank_simulate: vblank timer overrun
[  105.309325][ T5909] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  105.473235][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  105.533433][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  105.587549][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  105.611124][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  105.629916][ T5909] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  105.652877][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.671533][ T5909] usb 2-1: config 0 descriptor??
[  105.742404][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'.
[  105.839955][ T5910] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  105.992348][ T5910] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  106.007971][ T5910] usb 3-1: config 0 interface 0 has no altsetting 0
[  106.027064][ T5910] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  106.054489][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  106.073019][ T5910] usb 3-1: Product: syz
[  106.086632][ T5910] usb 3-1: Manufacturer: syz
[  106.109965][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  106.119269][ T5910] usb 3-1: SerialNumber: syz
[  106.136644][ T5910] usb 3-1: config 0 descriptor??
[  106.145584][ T5909] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  106.173815][ T5910] usb 3-1: selecting invalid altsetting 0
[  106.182267][ T5909] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  106.269964][   T10] usb 4-1: Using ep0 maxpacket: 16
[  106.282016][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  106.314627][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  106.357923][   T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  106.384635][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.443978][   T10] usb 4-1: Product: syz
[  106.449099][   T10] usb 4-1: Manufacturer: syz
[  106.462736][   T10] usb 4-1: SerialNumber: syz
[  106.594022][   T10] usb 4-1: config 0 descriptor??
[  106.675235][ T6550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.684114][ T6550] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.764337][ T5909] usb 3-1: USB disconnect, device number 7
[  106.789905][ T2149] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  106.880399][   T10] appledisplay 4-1:0.0: Error while getting initial brightness: -110
[  106.889157][   T10] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110
[  106.933428][   T10] usb 4-1: USB disconnect, device number 6
[  107.149886][ T2149] usb 1-1: Using ep0 maxpacket: 16
[  107.158420][ T2149] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  107.229562][ T2149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  107.297995][ T2149] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  107.433717][   T30] audit: type=1400 audit(1743242309.791:344): avc:  denied  { unmount } for  pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  107.462993][ T2149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.488496][ T2149] usb 1-1: Product: syz
[  107.493627][ T2149] usb 1-1: Manufacturer: syz
[  107.498234][ T2149] usb 1-1: SerialNumber: syz
[  107.505963][ T2149] usb 1-1: config 0 descriptor??
[  107.759616][   T30] audit: type=1400 audit(1743242310.111:345): avc:  denied  { ioctl } for  pid=6563 comm="syz.3.169" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  107.807140][ T2149] appledisplay 1-1:0.0: Error while getting initial brightness: -110
[  107.917374][   T30] audit: type=1400 audit(1743242310.271:346): avc:  denied  { bind } for  pid=6563 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  107.940038][ T5870] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  108.252184][   T24] usb 2-1: USB disconnect, device number 4
[  108.640002][ T2149] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -110
[  108.669889][ T2149] usb 1-1: USB disconnect, device number 13
[  108.735210][ T6573] syzkaller1: entered promiscuous mode
[  108.741019][ T6573] syzkaller1: entered allmulticast mode
[  108.864341][ T5870] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  108.896567][ T5870] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  108.970466][ T5870] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  108.988957][ T6578] netlink: 32 bytes leftover after parsing attributes in process `syz.3.174'.
[  109.003088][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.025396][ T6566] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  109.044415][ T5870] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  109.380011][ T5909] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  109.733687][ T6588] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=62224 sclass=netlink_xfrm_socket pid=6588 comm=syz.3.176
[  109.768284][ T5910] usb 3-1: USB disconnect, device number 8
[  109.790991][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  109.803690][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  109.815811][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  109.828515][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  109.864159][ T5909] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  109.873287][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.933688][ T5909] usb 1-1: config 0 descriptor??
[  109.994008][   T30] audit: type=1400 audit(1743242312.351:347): avc:  denied  { read } for  pid=6594 comm="syz.4.179" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  110.017603][    C0] vkms_vblank_simulate: vblank timer overrun
[  110.043691][   T30] audit: type=1400 audit(1743242312.351:348): avc:  denied  { open } for  pid=6594 comm="syz.4.179" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  110.067691][    C0] vkms_vblank_simulate: vblank timer overrun
[  110.209882][   T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  110.355896][ T5909] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  110.389918][   T24] usb 2-1: Using ep0 maxpacket: 16
[  110.390110][ T5909] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  110.418187][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  110.444113][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  110.589118][   T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  110.609885][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.617896][   T24] usb 2-1: Product: syz
[  110.629851][   T24] usb 2-1: Manufacturer: syz
[  110.634477][   T24] usb 2-1: SerialNumber: syz
[  110.646271][   T24] usb 2-1: config 0 descriptor??
[  110.723719][ T6601] loop6: detected capacity change from 0 to 8
[  110.778209][    C1] blk_print_req_error: 6 callbacks suppressed
[  110.778225][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.793483][    C1] buffer_io_error: 6 callbacks suppressed
[  110.793496][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  110.825481][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.834716][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  110.891414][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.900610][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  110.912636][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.921814][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  110.930548][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.939680][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  110.948183][   T24] appledisplay 2-1:0.0: Error while getting initial brightness: -110
[  110.962297][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.971485][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  110.982152][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.991317][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  111.001142][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  111.010339][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  111.018317][ T6601] ldm_validate_partition_table(): Disk read failed.
[  111.028989][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  111.038183][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  111.049472][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  111.058672][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  111.069694][ T6601] Dev loop6: unable to read RDB block 0
[  111.113969][   T24] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110
[  111.125539][ T6601]  loop6: unable to read partition table
[  111.125685][ T6601] loop6: partition table beyond EOD, truncated
[  111.125702][ T6601] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  111.183813][   T24] usb 2-1: USB disconnect, device number 5
[  111.298023][ T5195] ldm_validate_partition_table(): Disk read failed.
[  111.322036][ T5195] Dev loop6: unable to read RDB block 0
[  111.347189][ T5195]  loop6: unable to read partition table
[  111.368989][ T5195] loop6: partition table beyond EOD, truncated
[  111.793964][   T30] audit: type=1400 audit(1743242314.151:349): avc:  denied  { create } for  pid=6605 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  111.814736][    C0] vkms_vblank_simulate: vblank timer overrun
[  112.073652][ T6611] lo speed is unknown, defaulting to 1000
[  112.079891][ T6611] lo speed is unknown, defaulting to 1000
[  112.089766][ T6611] lo speed is unknown, defaulting to 1000
[  112.099547][ T6611] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  112.254227][ T6611] lo speed is unknown, defaulting to 1000
[  112.264287][ T6611] lo speed is unknown, defaulting to 1000
[  112.273885][ T6611] lo speed is unknown, defaulting to 1000
[  112.281339][ T6611] lo speed is unknown, defaulting to 1000
[  112.290944][ T6611] lo speed is unknown, defaulting to 1000
[  112.741816][ T6621] FAULT_INJECTION: forcing a failure.
[  112.741816][ T6621] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  112.754887][ T6621] CPU: 1 UID: 0 PID: 6621 Comm: syz.3.184 Not tainted 6.14.0-syzkaller-07540-geff5f16bfd87 #0 PREEMPT(full) 
[  112.754909][ T6621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  112.754918][ T6621] Call Trace:
[  112.754924][ T6621]  <TASK>
[  112.754930][ T6621]  dump_stack_lvl+0x16c/0x1f0
[  112.754957][ T6621]  should_fail_ex+0x512/0x640
[  112.754977][ T6621]  _copy_from_user+0x2e/0xd0
[  112.754997][ T6621]  copy_msghdr_from_user+0x98/0x160
[  112.755022][ T6621]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  112.755048][ T6621]  ___sys_sendmsg+0xfe/0x1d0
[  112.755067][ T6621]  ? __pfx____sys_sendmsg+0x10/0x10
[  112.755103][ T6621]  __sys_sendmsg+0x16d/0x220
[  112.755122][ T6621]  ? __pfx___sys_sendmsg+0x10/0x10
[  112.755146][ T6621]  ? rcu_is_watching+0x12/0xc0
[  112.755170][ T6621]  do_syscall_64+0xcd/0x260
[  112.755195][ T6621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.755211][ T6621] RIP: 0033:0x7f9ffa78d169
[  112.755224][ T6621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.755239][ T6621] RSP: 002b:00007f9ffb631038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  112.755255][ T6621] RAX: ffffffffffffffda RBX: 00007f9ffa9a6160 RCX: 00007f9ffa78d169
[  112.755266][ T6621] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005
[  112.755276][ T6621] RBP: 00007f9ffb631090 R08: 0000000000000000 R09: 0000000000000000
[  112.755285][ T6621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.755295][ T6621] R13: 0000000000000000 R14: 00007f9ffa9a6160 R15: 00007ffdf7ec8008
[  112.755313][ T6621]  </TASK>
[  113.028901][ T5909] usb 1-1: USB disconnect, device number 14
[  113.644889][ T6628] CIFS: VFS: Malformed UNC in devname
[  113.917136][ T6638] 9pnet_fd: Insufficient options for proto=fd
[  114.039962][   T30] audit: type=1400 audit(1743242316.381:350): avc:  denied  { mount } for  pid=6639 comm="syz.3.192" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  114.094136][   T30] audit: type=1400 audit(1743242316.441:351): avc:  denied  { read write } for  pid=6639 comm="syz.3.192" name="sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  114.155789][   T30] audit: type=1400 audit(1743242316.441:352): avc:  denied  { open } for  pid=6639 comm="syz.3.192" path="/dev/sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  114.212191][ T6648] netlink: 32 bytes leftover after parsing attributes in process `syz.3.195'.
[  114.221953][   T30] audit: type=1400 audit(1743242316.441:353): avc:  denied  { ioctl } for  pid=6639 comm="syz.3.192" path="/dev/sg0" dev="devtmpfs" ino=743 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  114.262914][ T6649] loop6: detected capacity change from 0 to 8
[  114.380084][ T5870] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  114.527505][ T6649] ldm_validate_partition_table(): Disk read failed.
[  114.619904][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.649947][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.659697][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  114.688569][ T6649] Dev loop6: unable to read RDB block 0
[  114.765870][ T6649]  loop6: unable to read partition table
[  114.773499][ T6649] loop6: partition table beyond EOD, truncated
[  114.779924][ T6649] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  114.895175][ T5870] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  114.904710][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.920081][ T5870] usb 2-1: config 0 descriptor??
[  114.985491][ T6657] libceph: resolve '.' (ret=-3): failed
[  115.003729][   T30] audit: type=1400 audit(1743242317.351:354): avc:  denied  { append } for  pid=6651 comm="syz.2.196" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  115.029394][   T30] audit: type=1400 audit(1743242317.351:355): avc:  denied  { open } for  pid=6651 comm="syz.2.196" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  115.296134][   T30] audit: type=1400 audit(1743242317.431:356): avc:  denied  { create } for  pid=6651 comm="syz.2.196" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  115.316652][    C0] vkms_vblank_simulate: vblank timer overrun
[  115.787813][   T30] audit: type=1400 audit(1743242318.131:357): avc:  denied  { unlink } for  pid=5817 comm="syz-executor" name="file0" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  115.901236][ T5870] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  116.025821][   T30] audit: type=1400 audit(1743242318.381:358): avc:  denied  { search } for  pid=5177 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  116.030068][ T5870] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  116.086382][ T6664] syz.2.199 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  116.117761][   T30] audit: type=1400 audit(1743242318.471:359): avc:  denied  { ioctl } for  pid=6663 comm="syz.2.199" path="socket:[10086]" dev="sockfs" ino=10086 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  116.196773][ T6644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.207888][ T6644] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.224020][ T6644] netlink: 44 bytes leftover after parsing attributes in process `syz.1.194'.
[  116.250353][ T6670] CIFS: VFS: Malformed UNC in devname
[  116.388989][ T6675] lo speed is unknown, defaulting to 1000
[  116.470196][ T5870] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  116.596192][   T24] usb 2-1: USB disconnect, device number 6
[  116.660822][ T5870] usb 1-1: Using ep0 maxpacket: 16
[  116.752453][ T5870] usb 1-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00
[  116.766605][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.808222][ T5870] usb 1-1: config 0 descriptor??
[  118.121561][ T5870] cypress 0003:04B4:DE64.0007: hidraw0: USB HID v20.00 Device [HID 04b4:de64] on usb-dummy_hcd.0-1/input0
[  118.360988][ T5870] usb 1-1: USB disconnect, device number 15
[  119.258232][ T6713] CIFS: VFS: Malformed UNC in devname
[  120.019991][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  120.020021][   T30] audit: type=1400 audit(1743242322.371:363): avc:  denied  { mounton } for  pid=6715 comm="syz.2.216" path="/52/file0" dev="tmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  120.982466][ T5910] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  121.156943][ T5910] usb 1-1: Using ep0 maxpacket: 16
[  121.201100][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  121.270676][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  121.338183][ T5910] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  121.347271][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  121.364868][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.385872][ T5910] usb 1-1: Product: syz
[  121.394109][ T5910] usb 1-1: Manufacturer: syz
[  121.409865][ T5910] usb 1-1: SerialNumber: syz
[  121.431951][ T5910] usb 1-1: config 0 descriptor??
[  121.509918][   T10] usb 4-1: Using ep0 maxpacket: 32
[  121.518190][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  121.528689][   T10] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[  121.537373][   T10] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  121.551772][   T10] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[  121.566301][   T10] usb 4-1: config 128 has no interface number 0
[  121.578760][   T10] usb 4-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  121.619916][   T10] usb 4-1: config 128 interface 127 has no altsetting 0
[  121.643620][   T10] usb 4-1: language id specifier not provided by device, defaulting to English
[  121.644803][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  121.644827][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.644845][   T10] usb 4-1: Product: syz
[  121.644858][   T10] usb 4-1: Manufacturer: syz
[  121.644872][   T10] usb 4-1: SerialNumber: syz
[  121.700183][ T5910] appledisplay 1-1:0.0: Error while getting initial brightness: -110
[  121.712144][ T5910] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -110
[  121.821518][ T5910] usb 1-1: USB disconnect, device number 16
[  123.683088][ T6747] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  123.750776][ T5909] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  124.040293][   T24] libceph: connect (1)[c::]:6789 error -101
[  124.046829][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  124.047067][ T5909] usb 5-1: device descriptor read/64, error -71
[  124.323493][ T5870] libceph: connect (1)[c::]:6789 error -101
[  124.404561][ T5870] libceph: mon0 (1)[c::]:6789 connect error
[  124.483592][   T10] usb 4-1: USB disconnect, device number 7
[  124.502677][ T6753] ceph: No mds server is up or the cluster is laggy
[  124.694081][ T6765] netlink: 32 bytes leftover after parsing attributes in process `syz.0.230'.
[  124.700577][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  124.733830][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'.
[  124.742738][ T5909] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  124.879931][ T5909] usb 5-1: device descriptor read/64, error -71
[  125.032609][ T5909] usb usb5-port1: attempt power cycle
[  125.280728][   T30] audit: type=1400 audit(1743242327.611:364): avc:  denied  { mount } for  pid=6767 comm="syz.0.231" name="/" dev="ramfs" ino=10674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  125.459907][ T5909] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  125.490331][ T5909] usb 5-1: device descriptor read/8, error -71
[  125.905619][ T6778] x_tables: duplicate underflow at hook 1
[  126.559276][ T5909] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  126.679910][ T5909] usb 5-1: device descriptor read/8, error -71
[  127.000072][ T5909] usb usb5-port1: unable to enumerate USB device
[  127.094344][   T30] audit: type=1400 audit(1743242329.451:365): avc:  denied  { setopt } for  pid=6787 comm="syz.4.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  127.664975][   T30] audit: type=1400 audit(1743242329.451:366): avc:  denied  { connect } for  pid=6787 comm="syz.4.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  128.069883][ T5909] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  128.156526][   T30] audit: type=1400 audit(1743242330.511:367): avc:  denied  { create } for  pid=6800 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  128.187304][   T30] audit: type=1400 audit(1743242330.541:368): avc:  denied  { getopt } for  pid=6800 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  128.188733][ T6799] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96
[  128.223750][ T5909] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[  128.232923][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.304738][ T6805] vlan2: entered promiscuous mode
[  128.309951][ T6805] veth0_virt_wifi: entered promiscuous mode
[  128.317165][ T6805] vlan2: entered allmulticast mode
[  128.322435][ T6805] veth0_virt_wifi: entered allmulticast mode
[  128.353394][ T6805] team0: Port device vlan2 added
[  128.513678][ T5909] usb 5-1: Product: syz
[  128.517901][ T5909] usb 5-1: Manufacturer: syz
[  128.536742][ T5909] usb 5-1: SerialNumber: syz
[  128.557936][ T5909] usb 5-1: config 0 descriptor??
[  128.577171][ T6808] netlink: 32 bytes leftover after parsing attributes in process `syz.3.243'.
[  128.597520][ T5823] Bluetooth: hci5: urb ffff888025604300 submission failed (2)
[  128.621449][ T6806] hsr0: entered promiscuous mode
[  129.190698][   T30] audit: type=1400 audit(1743242331.531:369): avc:  denied  { read } for  pid=6809 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  129.227201][ T6798] hsr0: left promiscuous mode
[  129.317225][ T5909] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  129.521703][ T5869] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  129.609936][ T5909] usb 4-1: Using ep0 maxpacket: 32
[  129.699846][ T5869] usb 3-1: Using ep0 maxpacket: 16
[  129.711226][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.731458][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.743472][ T5869] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  129.752704][ T5909] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  129.762440][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.772719][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.780912][ T5869] usb 3-1: Product: syz
[  129.785887][ T5869] usb 3-1: Manufacturer: syz
[  129.791053][ T5869] usb 3-1: SerialNumber: syz
[  129.796421][ T5909] usb 4-1: config 0 descriptor??
[  129.804867][ T5869] usb 3-1: config 0 descriptor??
[  129.814964][ T5909] hub 4-1:0.0: USB hub found
[  129.837904][ T5869] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  129.868253][ T6823] loop6: detected capacity change from 0 to 8
[  129.878440][    C0] blk_print_req_error: 38 callbacks suppressed
[  129.878454][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  129.893889][    C0] buffer_io_error: 38 callbacks suppressed
[  129.893901][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  129.912640][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  129.921943][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  129.936387][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  129.945545][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  129.954656][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  129.963798][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  129.972104][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  129.981230][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  129.989478][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  129.998608][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  130.007354][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  130.017108][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  130.106095][   T10] usb 5-1: USB disconnect, device number 10
[  130.135036][ T6814] xt_connbytes: Forcing CT accounting to be enabled
[  130.147701][ T6814] xt_NFQUEUE: number of total queues is 0
[  130.175040][ T5869] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110
[  130.226070][ T5909] hub 4-1:0.0: config failed, can't read hub descriptor (err -90)
[  130.235478][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  130.244633][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  130.253466][ T6823] ldm_validate_partition_table(): Disk read failed.
[  130.281726][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  130.290977][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  130.302844][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  130.312038][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  130.323313][ T6823] Dev loop6: unable to read RDB block 0
[  130.331226][ T6823]  loop6: unable to read partition table
[  130.336807][   T24] usb 3-1: USB disconnect, device number 9
[  130.337065][ T6823] loop6: partition table beyond EOD, truncated
[  130.356706][ T6823] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  130.500817][ T5195] ldm_validate_partition_table(): Disk read failed.
[  130.507795][ T5195] Dev loop6: unable to read RDB block 0
[  130.514996][ T5195]  loop6: unable to read partition table
[  130.522224][ T5195] loop6: partition table beyond EOD, truncated
[  130.631468][ T5909] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0
[  130.669890][   T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  130.839160][   T10] usb 5-1: Using ep0 maxpacket: 16
[  130.848510][   T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  130.875122][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  130.906827][   T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  130.919243][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.934509][   T10] usb 5-1: Product: syz
[  130.946772][   T10] usb 5-1: Manufacturer: syz
[  130.966793][   T10] usb 5-1: SerialNumber: syz
[  130.979249][   T30] audit: type=1400 audit(1743242333.321:370): avc:  denied  { read } for  pid=6834 comm="syz.1.250" path="socket:[10894]" dev="sockfs" ino=10894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  131.002318][    C0] vkms_vblank_simulate: vblank timer overrun
[  131.042669][   T10] usb 5-1: config 0 descriptor??
[  131.064911][   T30] audit: type=1400 audit(1743242333.321:371): avc:  denied  { name_connect } for  pid=6834 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  131.114886][   T30] audit: type=1400 audit(1743242333.391:372): avc:  denied  { shutdown } for  pid=6834 comm="syz.1.250" lport=43123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  131.200537][ T5910] usb 4-1: USB disconnect, device number 8
[  131.208014][   T30] audit: type=1400 audit(1743242333.551:373): avc:  denied  { mount } for  pid=6841 comm="syz.1.252" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  131.249111][   T30] audit: type=1400 audit(1743242333.601:374): avc:  denied  { search } for  pid=6841 comm="syz.1.252" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  131.270680][    C0] vkms_vblank_simulate: vblank timer overrun
[  131.283048][   T30] audit: type=1400 audit(1743242333.601:375): avc:  denied  { write } for  pid=6841 comm="syz.1.252" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  131.331102][   T10] appledisplay 5-1:0.0: Error while getting initial brightness: -110
[  131.334965][   T10] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110
[  131.354917][    C0] vkms_vblank_simulate: vblank timer overrun
[  131.378332][ T6833] netlink: 56 bytes leftover after parsing attributes in process `syz.4.249'.
[  131.394395][   T10] usb 5-1: USB disconnect, device number 11
[  131.636497][ T6851] syzkaller1: entered promiscuous mode
[  131.642204][ T6851] syzkaller1: entered allmulticast mode
[  131.785746][ T6853] netlink: 32 bytes leftover after parsing attributes in process `syz.3.255'.
[  132.320941][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  132.443932][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  132.929894][   T30] audit: type=1400 audit(1743242335.281:376): avc:  denied  { unmount } for  pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  133.207245][   T30] audit: type=1400 audit(1743242335.551:377): avc:  denied  { write } for  pid=6864 comm="syz.3.259" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  133.295568][   T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  133.309870][   T30] audit: type=1400 audit(1743242335.551:378): avc:  denied  { open } for  pid=6864 comm="syz.3.259" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  133.820375][   T24] usb 2-1: Using ep0 maxpacket: 32
[  133.827582][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  133.836950][   T24] usb 2-1: config 128 has an invalid interface number: 127 but max is 3
[  133.968829][   T24] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  134.706833][ T6878] overlayfs: missing 'workdir'
[  135.013905][   T24] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4
[  135.101121][   T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  135.194932][   T24] usb 2-1: config 128 has no interface number 0
[  135.250295][   T24] usb 2-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  135.368333][   T24] usb 2-1: config 128 interface 127 has no altsetting 0
[  135.394548][   T10] usb 1-1: Using ep0 maxpacket: 32
[  135.406890][   T24] usb 2-1: language id specifier not provided by device, defaulting to English
[  135.408017][   T10] usb 1-1: config 0 has no interfaces?
[  135.644807][   T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c
[  135.655462][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.674895][   T10] usb 1-1: Product: syz
[  135.680921][   T10] usb 1-1: Manufacturer: syz
[  135.685520][   T10] usb 1-1: SerialNumber: syz
[  135.725432][   T10] usb 1-1: config 0 descriptor??
[  135.725846][   T24] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  135.762464][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.780394][   T24] usb 2-1: Product: syz
[  135.784660][   T24] usb 2-1: Manufacturer: syz
[  135.789290][   T24] usb 2-1: SerialNumber: syz
[  136.824487][ T5869] usb 1-1: USB disconnect, device number 17
[  137.066836][   T30] audit: type=1400 audit(1743242339.421:379): avc:  denied  { shutdown } for  pid=6897 comm="syz.2.265" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  137.102774][ T6898] 9pnet_fd: Insufficient options for proto=fd
[  137.155744][   T30] audit: type=1400 audit(1743242339.451:380): avc:  denied  { append } for  pid=6897 comm="syz.2.265" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  137.791637][   T24] usb 2-1: USB disconnect, device number 7
[  137.893473][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'.
[  137.963701][ T6911] loop6: detected capacity change from 0 to 8
[  137.982586][    C0] blk_print_req_error: 22 callbacks suppressed
[  137.982602][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  137.997920][    C0] buffer_io_error: 22 callbacks suppressed
[  137.997933][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  138.006069][ T6913] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  138.032694][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  138.032907][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  138.057970][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  138.147358][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  138.156578][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  138.184090][ T6918] syzkaller1: entered promiscuous mode
[  138.190528][ T6918] syzkaller1: entered allmulticast mode
[  138.205028][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  138.214238][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  138.224549][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  138.233701][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  138.245046][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  138.254190][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  138.275253][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  138.284557][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  138.297536][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  138.306714][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  138.314646][ T6911] ldm_validate_partition_table(): Disk read failed.
[  138.345745][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  138.354967][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  138.366865][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  138.376047][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  139.120026][ T6921] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  139.688443][ T6911] Dev loop6: unable to read RDB block 0
[  139.751080][   T30] audit: type=1400 audit(1743242342.091:381): avc:  denied  { watch } for  pid=6925 comm="syz.1.273" path="/49" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  139.789540][   T30] audit: type=1400 audit(1743242342.091:382): avc:  denied  { read } for  pid=6925 comm="syz.1.273" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  139.822551][ T6911]  loop6: unable to read partition table
[  139.864925][ T6911] loop6: partition table beyond EOD, truncated
[  139.965963][ T6911] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  140.038543][ T6935] FAULT_INJECTION: forcing a failure.
[  140.038543][ T6935] name failslab, interval 1, probability 0, space 0, times 0
[  140.051334][ T6935] CPU: 0 UID: 0 PID: 6935 Comm: syz.1.275 Not tainted 6.14.0-syzkaller-07540-geff5f16bfd87 #0 PREEMPT(full) 
[  140.051355][ T6935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  140.051364][ T6935] Call Trace:
[  140.051370][ T6935]  <TASK>
[  140.051376][ T6935]  dump_stack_lvl+0x16c/0x1f0
[  140.051404][ T6935]  should_fail_ex+0x512/0x640
[  140.051421][ T6935]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  140.051442][ T6935]  should_failslab+0xc2/0x120
[  140.051463][ T6935]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  140.051482][ T6935]  ? getname_flags.part.0+0x48/0x540
[  140.051508][ T6935]  getname_flags.part.0+0x48/0x540
[  140.051533][ T6935]  getname_flags+0x93/0xf0
[  140.051551][ T6935]  __x64_sys_symlinkat+0x79/0xc0
[  140.051572][ T6935]  do_syscall_64+0xcd/0x260
[  140.051597][ T6935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.051614][ T6935] RIP: 0033:0x7f8d2bf8d169
[  140.051628][ T6935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.051653][ T6935] RSP: 002b:00007f8d2cd42038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[  140.051670][ T6935] RAX: ffffffffffffffda RBX: 00007f8d2c1a6080 RCX: 00007f8d2bf8d169
[  140.051681][ T6935] RDX: 0000200000000040 RSI: ffffffffffffff9c RDI: 0000200000001040
[  140.051691][ T6935] RBP: 00007f8d2cd42090 R08: 0000000000000000 R09: 0000000000000000
[  140.051701][ T6935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.051711][ T6935] R13: 0000000000000000 R14: 00007f8d2c1a6080 R15: 00007ffe462cced8
[  140.051730][ T6935]  </TASK>
[  140.396159][   T30] audit: type=1400 audit(1743242342.581:383): avc:  denied  { name_connect } for  pid=6931 comm="syz.1.275" dest=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  140.769829][ T6940] loop6: detected capacity change from 0 to 8
[  140.785207][ T6940] ldm_validate_partition_table(): Disk read failed.
[  140.792793][ T6940] Dev loop6: unable to read RDB block 0
[  140.799393][ T6940]  loop6: unable to read partition table
[  140.805510][ T6940] loop6: partition table beyond EOD, truncated
[  140.811794][ T6940] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  141.290309][ T5910] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  141.413094][   T30] audit: type=1400 audit(1743242343.771:384): avc:  denied  { shutdown } for  pid=6942 comm="syz.3.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  141.450808][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.279'.
[  141.471056][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  141.483767][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  141.504933][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  141.514781][   T30] audit: type=1400 audit(1743242343.861:385): avc:  denied  { setopt } for  pid=6942 comm="syz.3.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  141.555668][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  141.571380][   T30] audit: type=1400 audit(1743242343.861:386): avc:  denied  { create } for  pid=6942 comm="syz.3.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  141.604299][ T5910] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  141.619901][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.650804][ T5910] usb 5-1: config 0 descriptor??
[  141.660035][   T47] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  141.764623][   T30] audit: type=1400 audit(1743242344.121:387): avc:  denied  { setopt } for  pid=6942 comm="syz.3.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  141.801169][   T30] audit: type=1400 audit(1743242344.151:388): avc:  denied  { accept } for  pid=6942 comm="syz.3.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  141.850487][   T47] usb 3-1: Using ep0 maxpacket: 32
[  141.857357][   T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.876762][   T47] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  141.909921][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.948537][   T47] usb 3-1: Product: syz
[  141.962200][   T47] usb 3-1: Manufacturer: syz
[  141.966873][   T47] usb 3-1: SerialNumber: syz
[  141.987785][   T47] usb 3-1: config 0 descriptor??
[  142.064998][ T5910] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  142.083920][ T5910] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  142.175647][ T6947] syz.3.280 uses obsolete (PF_INET,SOCK_PACKET)
[  142.193829][ T6947] syzkaller1: entered promiscuous mode
[  142.199399][ T6947] syzkaller1: entered allmulticast mode
[  142.629777][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'.
[  142.643783][ T6950] XFS (nullb0): Invalid superblock magic number
[  142.660075][ T6961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.009251][ T6944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.027564][ T6966] loop6: detected capacity change from 0 to 8
[  143.036030][    C1] blk_print_req_error: 22 callbacks suppressed
[  143.036044][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  143.051379][    C1] buffer_io_error: 22 callbacks suppressed
[  143.051390][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  143.065690][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  143.074823][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  143.085407][ T6944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.097144][    T9] usb 3-1: USB disconnect, device number 10
[  143.110340][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  143.119481][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  143.136531][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  143.145696][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  143.174583][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  143.183762][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  143.229907][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  143.239072][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  143.262708][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  143.272021][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  143.280394][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  143.289514][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  143.297389][ T6966] ldm_validate_partition_table(): Disk read failed.
[  143.313059][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  143.322236][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  143.339633][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  143.348820][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  143.442798][ T6966] Dev loop6: unable to read RDB block 0
[  143.481846][ T6966]  loop6: unable to read partition table
[  143.509996][ T6966] loop6: partition table beyond EOD, truncated
[  143.516851][ T6966] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  143.663763][ T5195] ldm_validate_partition_table(): Disk read failed.
[  143.691800][ T5195] Dev loop6: unable to read RDB block 0
[  143.733582][ T5195]  loop6: unable to read partition table
[  143.742077][ T5195] loop6: partition table beyond EOD, truncated
[  144.141881][ T6976] netlink: 32 bytes leftover after parsing attributes in process `syz.4.286'.
[  144.208722][ T6978] netlink: 32 bytes leftover after parsing attributes in process `syz.4.287'.
[  144.221860][ T5869] usb 5-1: USB disconnect, device number 12
[  144.312061][   T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  144.470686][   T24] usb 4-1: Using ep0 maxpacket: 16
[  144.520094][ T5870] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  144.535861][   T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  144.564696][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  144.600355][   T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  144.610362][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.618462][   T24] usb 4-1: Product: syz
[  144.626673][   T24] usb 4-1: Manufacturer: syz
[  144.635886][   T24] usb 4-1: SerialNumber: syz
[  144.721697][ T5870] usb 2-1: Using ep0 maxpacket: 16
[  144.746915][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  144.768925][   T24] usb 4-1: config 0 descriptor??
[  144.782614][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  144.816759][ T5870] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  144.826113][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.834410][ T5870] usb 2-1: Product: syz
[  144.838661][ T5870] usb 2-1: Manufacturer: syz
[  144.844439][ T5870] usb 2-1: SerialNumber: syz
[  144.851284][ T5870] usb 2-1: config 0 descriptor??
[  144.912344][ T6988] sp0: Synchronizing with TNC
[  144.961384][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  145.069960][   T47] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  145.070354][   T24] appledisplay 4-1:0.0: Error while getting initial brightness: -110
[  145.121492][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  145.121525][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  145.121548][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  145.121568][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  145.121602][    T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  145.121622][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.122849][ T5870] appledisplay 2-1:0.0: Error while getting initial brightness: -110
[  145.123035][    T9] usb 5-1: config 0 descriptor??
[  145.124501][ T5870] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110
[  145.125936][   T24] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110
[  145.219873][ T5869] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  145.226556][ T5870] usb 2-1: USB disconnect, device number 8
[  145.255655][   T24] usb 4-1: USB disconnect, device number 9
[  145.299892][   T47] usb 3-1: Using ep0 maxpacket: 32
[  145.306509][   T47] usb 3-1: unable to get BOS descriptor or descriptor too short
[  145.315536][   T47] usb 3-1: config 128 has an invalid interface number: 127 but max is 3
[  145.323970][   T47] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  145.334400][   T47] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4
[  145.343599][   T47] usb 3-1: config 128 has no interface number 0
[  145.350216][   T47] usb 3-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  145.364002][   T47] usb 3-1: config 128 interface 127 has no altsetting 0
[  145.373153][   T47] usb 3-1: language id specifier not provided by device, defaulting to English
[  145.383679][   T47] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  145.389882][ T5869] usb 1-1: Using ep0 maxpacket: 16
[  145.392821][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.401125][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  145.405809][   T47] usb 3-1: Product: syz
[  145.420367][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  145.422582][   T47] usb 3-1: Manufacturer: syz
[  145.436643][ T5869] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  145.436798][   T47] usb 3-1: SerialNumber: syz
[  145.450651][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.462725][ T5869] usb 1-1: Product: syz
[  145.466911][ T5869] usb 1-1: Manufacturer: syz
[  145.471999][ T5869] usb 1-1: SerialNumber: syz
[  145.477888][ T5869] usb 1-1: config 0 descriptor??
[  145.485274][ T5869] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  145.494566][ T5869] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  145.540961][    T9] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  145.551600][    T9] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  146.409984][ T5869] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  146.431198][ T5869] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  146.520050][ T5870] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  146.661625][ T7009] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  146.672683][ T5869] em28xx 1-1:0.0: AC97 command still being executed: not handled properly!
[  146.672781][ T6988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.681824][ T5869] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  146.697987][ T5869] em28xx 1-1:0.0: No AC97 audio processor
[  146.713500][ T6988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.798091][ T5869] usb 1-1: USB disconnect, device number 18
[  146.820021][ T5870] usb 4-1: Using ep0 maxpacket: 16
[  146.821686][ T5869] em28xx 1-1:0.0: Disconnecting em28xx
[  146.826812][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  146.842819][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  146.844831][ T5869] em28xx 1-1:0.0: Freeing device
[  146.855356][ T5870] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  146.868654][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.876912][ T5870] usb 4-1: Product: syz
[  146.967751][ T5870] usb 4-1: Manufacturer: syz
[  147.017426][ T5870] usb 4-1: SerialNumber: syz
[  147.031843][   T10] usb 5-1: USB disconnect, device number 13
[  147.074258][ T5870] usb 4-1: config 0 descriptor??
[  147.390144][ T5870] appledisplay 4-1:0.0: Error while getting initial brightness: -110
[  147.399737][ T5870] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110
[  147.415697][ T5870] usb 4-1: USB disconnect, device number 10
[  147.598624][ T7013] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=62224 sclass=netlink_xfrm_socket pid=7013 comm=syz.4.296
[  148.277572][   T47] usb 3-1: USB disconnect, device number 11
[  148.530773][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  149.769961][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.302'.
[  149.848091][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'.
[  149.906680][ T7047] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  150.800668][ T7056] netlink: 32 bytes leftover after parsing attributes in process `syz.0.308'.
[  150.904961][ T7059] sp0: Synchronizing with TNC
[  151.021630][ T7064] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=62224 sclass=netlink_xfrm_socket pid=7064 comm=syz.2.312
[  151.253277][ T7072] loop6: detected capacity change from 0 to 8
[  151.259683][    C1] blk_print_req_error: 22 callbacks suppressed
[  151.259697][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  151.274987][    C1] buffer_io_error: 22 callbacks suppressed
[  151.274998][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  151.289858][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  151.299004][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  151.351313][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  151.360530][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  151.368839][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  151.377958][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  151.389864][   T30] audit: type=1400 audit(1743242353.751:389): avc:  denied  { ioctl } for  pid=7060 comm="syz.0.311" path="socket:[12655]" dev="sockfs" ino=12655 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  151.389890][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  151.414275][    C1] vkms_vblank_simulate: vblank timer overrun
[  151.429376][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  151.438239][ T5869] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  151.450732][   T47] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  151.461020][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  151.470235][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  151.479060][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  151.488285][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  151.497572][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  151.506736][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  151.514592][ T7072] ldm_validate_partition_table(): Disk read failed.
[  151.522295][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  151.531431][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  151.539546][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  151.548652][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  151.557450][ T7072] Dev loop6: unable to read RDB block 0
[  151.569413][ T7072]  loop6: unable to read partition table
[  151.575229][ T7072] loop6: partition table beyond EOD, truncated
[  151.581736][ T7072] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  151.660241][ T5869] usb 4-1: Using ep0 maxpacket: 16
[  151.680320][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  151.706122][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  151.749366][ T5869] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  151.759300][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.779066][ T5869] usb 4-1: Product: syz
[  151.788897][ T5869] usb 4-1: Manufacturer: syz
[  151.798995][ T5869] usb 4-1: SerialNumber: syz
[  151.811231][ T5869] usb 4-1: config 0 descriptor??
[  151.821284][ T5869] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  151.851279][ T5869] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  151.924947][   T47] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  151.934175][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.942261][   T47] usb 2-1: Product: syz
[  151.946442][   T47] usb 2-1: Manufacturer: syz
[  151.953378][   T47] usb 2-1: SerialNumber: syz
[  151.959275][   T47] usb 2-1: config 0 descriptor??
[  151.973311][   T47] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  152.720932][   T47] gspca_sunplus: reg_w_riv err -110
[  152.768448][   T47] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[  152.771356][ T5869] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  152.914499][ T5869] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  153.058800][ T7086] FAULT_INJECTION: forcing a failure.
[  153.058800][ T7086] name failslab, interval 1, probability 0, space 0, times 0
[  153.097353][ T7086] CPU: 1 UID: 0 PID: 7086 Comm: syz.4.317 Not tainted 6.14.0-syzkaller-07540-geff5f16bfd87 #0 PREEMPT(full) 
[  153.097380][ T7086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  153.097389][ T7086] Call Trace:
[  153.097394][ T7086]  <TASK>
[  153.097400][ T7086]  dump_stack_lvl+0x16c/0x1f0
[  153.097428][ T7086]  should_fail_ex+0x512/0x640
[  153.097443][ T7086]  ? __kmalloc_noprof+0xbf/0x510
[  153.097461][ T7086]  ? sock_kmalloc+0x111/0x170
[  153.097480][ T7086]  should_failslab+0xc2/0x120
[  153.097498][ T7086]  __kmalloc_noprof+0xd2/0x510
[  153.097513][ T7086]  ? do_raw_spin_lock+0x12c/0x2b0
[  153.097532][ T7086]  sock_kmalloc+0x111/0x170
[  153.097551][ T7086]  af_alg_alloc_areq+0xbc/0x2e0
[  153.097572][ T7086]  skcipher_recvmsg+0x32b/0x1030
[  153.097596][ T7086]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  153.097619][ T7086]  sock_recvmsg+0x1f6/0x250
[  153.097639][ T7086]  ____sys_recvmsg+0x218/0x6b0
[  153.097660][ T7086]  ? __pfx_____sys_recvmsg+0x10/0x10
[  153.097685][ T7086]  ? __lock_acquire+0x5ca/0x1ba0
[  153.097708][ T7086]  ___sys_recvmsg+0x114/0x1a0
[  153.097724][ T7086]  ? __pfx____sys_recvmsg+0x10/0x10
[  153.097750][ T7086]  __sys_recvmsg+0x16a/0x220
[  153.097765][ T7086]  ? __pfx___sys_recvmsg+0x10/0x10
[  153.097784][ T7086]  ? rcu_is_watching+0x12/0xc0
[  153.097807][ T7086]  do_syscall_64+0xcd/0x260
[  153.097829][ T7086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.097844][ T7086] RIP: 0033:0x7f8df418d169
[  153.097858][ T7086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.097874][ T7086] RSP: 002b:00007f8df509f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  153.097891][ T7086] RAX: ffffffffffffffda RBX: 00007f8df43a5fa0 RCX: 00007f8df418d169
[  153.097901][ T7086] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004
[  153.097910][ T7086] RBP: 00007f8df509f090 R08: 0000000000000000 R09: 0000000000000000
[  153.097920][ T7086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.097929][ T7086] R13: 0000000000000000 R14: 00007f8df43a5fa0 R15: 00007ffec7827828
[  153.097948][ T7086]  </TASK>
[  153.181195][ T7059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.184879][    C1] vkms_vblank_simulate: vblank timer overrun
[  153.323495][    C1] vkms_vblank_simulate: vblank timer overrun
[  153.370161][ T7059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.732022][ T5869] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  153.952052][ T5869] em28xx 4-1:0.0: No AC97 audio processor
[  153.967219][ T5869] usb 4-1: USB disconnect, device number 11
[  153.983967][ T5869] em28xx 4-1:0.0: Disconnecting em28xx
[  153.990717][ T5869] em28xx 4-1:0.0: Freeing device
[  154.247044][   T10] usb 2-1: USB disconnect, device number 9
[  154.690099][ T7104] FAULT_INJECTION: forcing a failure.
[  154.690099][ T7104] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.703222][ T7104] CPU: 1 UID: 0 PID: 7104 Comm: syz.4.322 Not tainted 6.14.0-syzkaller-07540-geff5f16bfd87 #0 PREEMPT(full) 
[  154.703245][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  154.703255][ T7104] Call Trace:
[  154.703261][ T7104]  <TASK>
[  154.703267][ T7104]  dump_stack_lvl+0x16c/0x1f0
[  154.703295][ T7104]  should_fail_ex+0x512/0x640
[  154.703315][ T7104]  _copy_from_user+0x2e/0xd0
[  154.703335][ T7104]  copy_msghdr_from_user+0x98/0x160
[  154.703355][ T7104]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  154.703373][ T7104]  ? ____sys_sendmsg+0x31e/0xc60
[  154.703398][ T7104]  ? kfree+0x252/0x4d0
[  154.703417][ T7104]  ___sys_sendmsg+0xfe/0x1d0
[  154.703436][ T7104]  ? __pfx____sys_sendmsg+0x10/0x10
[  154.703458][ T7104]  ? find_held_lock+0x2b/0x80
[  154.703493][ T7104]  ? __pfx___might_resched+0x10/0x10
[  154.703518][ T7104]  __sys_sendmmsg+0x200/0x420
[  154.703538][ T7104]  ? __pfx___sys_sendmmsg+0x10/0x10
[  154.703562][ T7104]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  154.703592][ T7104]  ? fput+0x70/0xf0
[  154.703614][ T7104]  ? ksys_write+0x1b9/0x240
[  154.703630][ T7104]  ? __pfx_ksys_write+0x10/0x10
[  154.703650][ T7104]  __x64_sys_sendmmsg+0x9c/0x100
[  154.703668][ T7104]  ? lockdep_hardirqs_on+0x7c/0x110
[  154.703690][ T7104]  do_syscall_64+0xcd/0x260
[  154.703714][ T7104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.703731][ T7104] RIP: 0033:0x7f8df418d169
[  154.703744][ T7104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.703760][ T7104] RSP: 002b:00007f8df505d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  154.703777][ T7104] RAX: ffffffffffffffda RBX: 00007f8df43a6160 RCX: 00007f8df418d169
[  154.703788][ T7104] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000006
[  154.703799][ T7104] RBP: 00007f8df505d090 R08: 0000000000000000 R09: 0000000000000000
[  154.703809][ T7104] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001
[  154.703819][ T7104] R13: 0000000000000000 R14: 00007f8df43a6160 R15: 00007ffec7827828
[  154.703838][ T7104]  </TASK>
[  154.832006][ T7102] loop6: detected capacity change from 0 to 8
[  154.834353][    C1] vkms_vblank_simulate: vblank timer overrun
[  154.927249][    C1] vkms_vblank_simulate: vblank timer overrun
[  154.933219][    C1] hrtimer: interrupt took 223429051 ns
[  155.284984][   T47] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  155.337135][ T7096] netlink: 32 bytes leftover after parsing attributes in process `syz.3.321'.
[  155.364289][ T7102] ldm_validate_partition_table(): Disk read failed.
[  155.422288][ T7111] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  155.446534][ T7102] Dev loop6: unable to read RDB block 0
[  155.537931][ T7102]  loop6: unable to read partition table
[  155.559009][ T7102] loop6: partition table beyond EOD, truncated
[  155.566326][ T7102] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  155.629931][   T47] usb 2-1: Using ep0 maxpacket: 16
[  155.637895][   T47] usb 2-1: config 4 has an invalid interface number: 153 but max is 0
[  156.031959][    T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  156.190912][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.215224][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.421341][   T47] usb 2-1: config 4 has no interface number 0
[  156.442880][    T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  156.486079][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.486859][   T47] usb 2-1: config 4 interface 153 has no altsetting 0
[  156.506334][   T47] usb 2-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice=e8.11
[  156.526428][    C0] blk_print_req_error: 22 callbacks suppressed
[  156.526448][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  156.529850][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.532660][    C0] buffer_io_error: 22 callbacks suppressed
[  156.532670][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  156.549811][   T47] usb 2-1: Product: syz
[  156.567725][   T47] usb 2-1: Manufacturer: syz
[  156.572375][   T47] usb 2-1: SerialNumber: syz
[  156.580381][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  156.589589][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  156.598023][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  156.607214][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  156.704151][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  156.713361][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  156.822375][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  156.831596][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  156.860945][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  156.870152][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  156.888054][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  156.897237][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  156.924779][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  156.933956][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  156.941837][ T5195] ldm_validate_partition_table(): Disk read failed.
[  156.951478][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  156.960639][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  157.016272][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  157.025583][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  157.079543][ T5195] Dev loop6: unable to read RDB block 0
[  157.109205][ T7125] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  157.137875][    T9] usb 3-1: config 0 descriptor??
[  157.170357][ T5195]  loop6: unable to read partition table
[  157.231378][ T5195] loop6: partition table beyond EOD, truncated
[  157.757034][   T47] usb 2-1: can't set config #4, error -71
[  157.764783][   T47] usb 2-1: USB disconnect, device number 10
[  158.025626][    T9] pyra 0003:1E7D:2CF6.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0
[  158.066058][ T7131] FAULT_INJECTION: forcing a failure.
[  158.066058][ T7131] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.099487][ T7131] CPU: 1 UID: 0 PID: 7131 Comm: syz.1.329 Not tainted 6.14.0-syzkaller-07540-geff5f16bfd87 #0 PREEMPT(full) 
[  158.099514][ T7131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  158.099524][ T7131] Call Trace:
[  158.099529][ T7131]  <TASK>
[  158.099535][ T7131]  dump_stack_lvl+0x16c/0x1f0
[  158.099563][ T7131]  should_fail_ex+0x512/0x640
[  158.099584][ T7131]  _copy_to_user+0x32/0xd0
[  158.099603][ T7131]  copy_siginfo_to_user+0x27/0xc0
[  158.099627][ T7131]  x64_setup_rt_frame+0x811/0xcf0
[  158.099656][ T7131]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  158.099678][ T7131]  ? find_held_lock+0x2b/0x80
[  158.099701][ T7131]  arch_do_signal_or_restart+0x5e6/0x7d0
[  158.099725][ T7131]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  158.099752][ T7131]  ? ksys_read+0x1b9/0x240
[  158.099769][ T7131]  ? __pfx_ksys_read+0x10/0x10
[  158.099792][ T7131]  syscall_exit_to_user_mode+0x150/0x2a0
[  158.099815][ T7131]  do_syscall_64+0xda/0x260
[  158.099838][ T7131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.099854][ T7131] RIP: 0033:0x7f8d2bf8d167
[  158.099866][ T7131] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  158.099881][ T7131] RSP: 002b:00007f8d2cde4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  158.099898][ T7131] RAX: 0000000000000000 RBX: 00007f8d2c1a5fa0 RCX: 00007f8d2bf8d169
[  158.099908][ T7131] RDX: 0000000000002020 RSI: 0000200000000f80 RDI: 0000000000000003
[  158.099916][ T7131] RBP: 00007f8d2cde4090 R08: 0000000000000000 R09: 0000000000000000
[  158.099924][ T7131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.099933][ T7131] R13: 0000000000000000 R14: 00007f8d2c1a5fa0 R15: 00007ffe462cced8
[  158.099947][ T7131]  </TASK>
[  158.454858][    T9] pyra 0003:1E7D:2CF6.000B: couldn't init struct pyra_device
[  158.899984][   T30] audit: type=1400 audit(1743242360.831:390): avc:  denied  { getopt } for  pid=7135 comm="syz.4.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  158.959496][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.331'.
[  159.160302][    T9] pyra 0003:1E7D:2CF6.000B: couldn't install mouse
[  159.170406][    T9] pyra 0003:1E7D:2CF6.000B: probe with driver pyra failed with error -5
[  159.832016][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.331'.
[  160.581187][   T10] usb 3-1: USB disconnect, device number 12
[  160.800459][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'.
[  160.987270][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'.
[  161.001896][   T30] audit: type=1400 audit(1743242363.341:391): avc:  denied  { connect } for  pid=7151 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  161.134994][   T30] audit: type=1400 audit(1743242363.461:392): avc:  denied  { read } for  pid=7151 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  161.663412][   T30] audit: type=1400 audit(1743242363.511:393): avc:  denied  { write } for  pid=7151 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  162.437592][ T7175] lo speed is unknown, defaulting to 1000
[  162.549894][ T5870] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  162.572884][ T7183] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=62224 sclass=netlink_xfrm_socket pid=7183 comm=syz.0.339
[  162.610400][   T30] audit: type=1400 audit(1743242364.971:394): avc:  denied  { setopt } for  pid=7184 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  162.672141][   T30] audit: type=1400 audit(1743242365.031:395): avc:  denied  { getopt } for  pid=7184 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  162.721027][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.739891][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.749638][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  162.789896][ T5870] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  162.798959][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.814119][ T5870] usb 3-1: config 0 descriptor??
[  162.870196][   T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  163.031299][   T10] usb 4-1: Using ep0 maxpacket: 16
[  163.092700][   T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  163.103748][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.124976][   T10] usb 4-1: Product: syz
[  163.129543][   T10] usb 4-1: Manufacturer: syz
[  163.139265][   T10] usb 4-1: SerialNumber: syz
[  163.149666][   T10] usb 4-1: config 0 descriptor??
[  163.160465][   T10] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  163.245764][ T5870] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  163.265191][ T5870] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  163.383081][   T10] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71
[  163.400981][   T10] usb 4-1: USB disconnect, device number 12
[  163.600825][ T7173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.619009][ T7173] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.674813][ T7173] netlink: 44 bytes leftover after parsing attributes in process `syz.2.341'.
[  163.983313][   T47] usb 3-1: USB disconnect, device number 13
[  164.192282][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'.
[  164.250201][ T7213] sp0: Synchronizing with TNC
[  164.509910][ T5870] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  164.569765][   T30] audit: type=1400 audit(1743242366.921:396): avc:  denied  { connect } for  pid=7219 comm="syz.2.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  164.668078][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'.
[  164.677015][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'.
[  164.686102][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'.
[  164.705936][   T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  164.919938][   T10] usb 4-1: Using ep0 maxpacket: 16
[  164.998121][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  165.046994][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  165.106829][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  165.192865][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.271331][   T10] usb 4-1: Product: syz
[  165.275525][   T10] usb 4-1: Manufacturer: syz
[  165.289359][   T10] usb 4-1: SerialNumber: syz
[  165.304661][   T10] usb 4-1: config 0 descriptor??
[  165.315400][   T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  165.325454][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.346934][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.349594][   T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  165.357882][ T5870] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  165.373584][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.438221][ T5870] usb 5-1: config 0 descriptor??
[  165.450665][ T7226] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  165.588435][ T7230] unknown channel width for channel at 909000KHz?
[  165.606748][ T7230] unknown channel width for channel at 909000KHz?
[  165.618791][ T7230] unknown channel width for channel at 909000KHz?
[  165.640949][ T7232] syzkaller1: entered promiscuous mode
[  165.646551][ T7232] syzkaller1: entered allmulticast mode
[  165.925555][   T10] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  166.473818][ T7236] IPVS: length: 4096 != 8
[  166.595786][   T10] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  166.735824][ T7213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.808341][ T7213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.000522][ T5870] logitech 0003:046D:C293.000D: unbalanced collection at end of report description
[  167.048360][ T5870] logitech 0003:046D:C293.000D: parse failed
[  167.080506][ T5870] logitech 0003:046D:C293.000D: probe with driver logitech failed with error -22
[  167.387601][   T10] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  167.395049][   T10] em28xx 4-1:0.0: No AC97 audio processor
[  167.404910][   T10] usb 4-1: USB disconnect, device number 13
[  167.413910][   T10] em28xx 4-1:0.0: Disconnecting em28xx
[  167.420965][   T10] em28xx 4-1:0.0: Freeing device
[  167.692789][   T30] audit: type=1400 audit(1743242370.011:397): avc:  denied  { listen } for  pid=7240 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  167.712561][   T30] audit: type=1400 audit(1743242370.021:398): avc:  denied  { checkpoint_restore } for  pid=7240 comm="syz.2.359" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  167.829162][   T30] audit: type=1400 audit(1743242370.031:399): avc:  denied  { create } for  pid=7240 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  167.899728][   T30] audit: type=1400 audit(1743242370.031:400): avc:  denied  { setopt } for  pid=7240 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  167.955611][   T30] audit: type=1400 audit(1743242370.311:401): avc:  denied  { connect } for  pid=7246 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  168.010578][   T30] audit: type=1400 audit(1743242370.341:402): avc:  denied  { ioctl } for  pid=7246 comm="syz.0.361" path="socket:[13036]" dev="sockfs" ino=13036 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  168.454723][   T30] audit: type=1400 audit(1743242370.341:403): avc:  denied  { setopt } for  pid=7246 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  168.737538][   T24] usb 5-1: USB disconnect, device number 14
[  170.319252][ T7276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.371'.
[  170.416715][ T5870] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  170.417150][ T7276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.371'.
[  170.433785][ T7276] Zero length message leads to an empty skb
[  170.518519][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'.
[  171.171652][ T5870] usb 5-1: Using ep0 maxpacket: 16
[  171.180450][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.208737][ T5870] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  171.232357][   T30] audit: type=1400 audit(1743242373.591:404): avc:  denied  { getopt } for  pid=7282 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  171.255595][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.278445][ T5870] usb 5-1: config 0 descriptor??
[  171.297829][ T7288] sp0: Synchronizing with TNC
[  171.510765][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  171.681656][   T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  171.701948][ T5870] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  171.761663][    T9] usb 2-1: device descriptor read/64, error -71
[  171.869888][   T24] usb 1-1: Using ep0 maxpacket: 16
[  171.930998][   T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  172.015891][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  172.037017][   T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  172.046917][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.058429][   T24] usb 1-1: Product: syz
[  172.149635][ T7269] block device autoloading is deprecated and will be removed.
[  172.158475][ T7269] syz.4.370: attempt to access beyond end of device
[  172.158475][ T7269] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  172.183187][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  172.263117][   T24] usb 1-1: Manufacturer: syz
[  172.270861][   T24] usb 1-1: SerialNumber: syz
[  172.278556][ T7296] netlink: 52 bytes leftover after parsing attributes in process `syz.2.373'.
[  172.291655][   T24] usb 1-1: config 0 descriptor??
[  172.303308][   T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  172.315369][   T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  172.820178][    T9] usb 2-1: device descriptor read/64, error -71
[  172.878008][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'.
[  172.936482][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'.
[  172.971967][    T9] usb usb2-port1: attempt power cycle
[  172.997164][   T24] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  173.042824][   T24] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  173.163703][ T7296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.373'.
[  173.310058][ T5909] usb 5-1: USB disconnect, device number 15
[  173.360494][    T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  173.384789][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.400302][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.413021][    T9] usb 2-1: device descriptor read/8, error -71
[  173.433484][   T24] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  173.450178][   T24] em28xx 1-1:0.0: No AC97 audio processor
[  173.472516][   T24] usb 1-1: USB disconnect, device number 19
[  173.490451][   T24] em28xx 1-1:0.0: Disconnecting em28xx
[  173.502496][   T24] em28xx 1-1:0.0: Freeing device
[  173.674430][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  173.699925][ T5909] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  173.722139][    T9] usb 2-1: device descriptor read/8, error -71
[  173.776413][ T7306] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  173.866977][    T9] usb usb2-port1: unable to enumerate USB device
[  174.041046][    T9] libceph: connect (1)[c::]:6789 error -101
[  174.047700][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  174.385050][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.404061][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.414307][ T5909] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  174.423678][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.441811][ T5909] usb 5-1: config 0 descriptor??
[  174.610406][ T7310] ceph: No mds server is up or the cluster is laggy
[  175.054585][ T5909] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0
[  175.063336][ T7323] sp0: Synchronizing with TNC
[  175.077080][   T36] 
[  175.079401][   T36] =====================================================
[  175.086304][   T36] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
[  175.093736][   T36] 6.14.0-syzkaller-07540-geff5f16bfd87 #0 Not tainted
[  175.100473][   T36] -----------------------------------------------------
[  175.107379][   T36] kworker/u8:2/36 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  175.114979][   T36] ffffffff8f568038 (disc_data_lock#3){.?.+}-{3:3}, at: sp_get+0x18/0xf0
[  175.123300][   T36] 
[  175.123300][   T36] and this task is already holding:
[  175.130640][   T36] ffffffff9adc5138 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30
[  175.139303][   T36] which would create a new lock dependency:
[  175.145179][   T36]  (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#3){.?.+}-{3:3}
[  175.153002][   T36] 
[  175.153002][   T36] but this new dependency connects a HARDIRQ-irq-safe lock:
[  175.162431][   T36]  (&port_lock_key){-.-.}-{3:3}
[  175.162448][   T36] 
[  175.162448][   T36] ... which became HARDIRQ-irq-safe at:
[  175.174936][   T36]   lock_acquire+0x179/0x350
[  175.179510][   T36]   _raw_spin_lock_irqsave+0x3a/0x60
[  175.184775][   T36]   serial8250_handle_irq+0x95/0xcb0
[  175.190029][   T36]   serial8250_default_handle_irq+0x9a/0x210
[  175.195977][   T36]   serial8250_interrupt+0x103/0x210
[  175.201231][   T36]   __handle_irq_event_percpu+0x229/0x7d0
[  175.206921][   T36]   handle_irq_event+0xab/0x1e0
[  175.211766][   T36]   handle_edge_irq+0x263/0xd10
[  175.216605][   T36]   __common_interrupt+0xdf/0x250
[  175.221608][   T36]   common_interrupt+0xba/0xe0
[  175.226353][   T36]   asm_common_interrupt+0x26/0x40
[  175.231437][   T36]   _raw_spin_unlock_irqrestore+0x31/0x80
[  175.237143][   T36]   uart_write+0x2a4/0xb30
[  175.241540][   T36]   n_tty_write+0x41f/0x1150
[  175.246107][   T36]   file_tty_write.constprop.0+0x512/0x9b0
[  175.251893][   T36]   redirected_tty_write+0xd4/0x150
[  175.257067][   T36]   vfs_write+0x5ba/0x1180
[  175.261452][   T36]   ksys_write+0x12a/0x240
[  175.265836][   T36]   do_syscall_64+0xcd/0x260
[  175.270400][   T36]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.276348][   T36] 
[  175.276348][   T36] to a HARDIRQ-irq-unsafe lock:
[  175.283331][   T36]  (disc_data_lock#3){.?.+}-{3:3}
[  175.283351][   T36] 
[  175.283351][   T36] ... which became HARDIRQ-irq-unsafe at:
[  175.296185][   T36] ...
[  175.296189][   T36]   lock_acquire+0x179/0x350
[  175.303300][   T36]   _raw_read_lock+0x5f/0x70
[  175.307859][   T36]   sp_get+0x18/0xf0
[  175.311723][   T36]   sixpack_receive_buf+0x59/0x1c90
[  175.316891][   T36]   tty_ldisc_receive_buf+0x157/0x1a0
[  175.322234][   T36]   tty_port_default_receive_buf+0x70/0xb0
[  175.328016][   T36]   flush_to_ldisc+0x268/0x780
[  175.332758][   T36]   process_one_work+0x9cc/0x1b70
[  175.337751][   T36]   worker_thread+0x6c8/0xf10
[  175.342396][   T36]   kthread+0x3c2/0x780
[  175.346520][   T36]   ret_from_fork+0x45/0x80
[  175.350994][   T36]   ret_from_fork_asm+0x1a/0x30
[  175.355828][   T36] 
[  175.355828][   T36] other info that might help us debug this:
[  175.355828][   T36] 
[  175.366023][   T36]  Possible interrupt unsafe locking scenario:
[  175.366023][   T36] 
[  175.374306][   T36]        CPU0                    CPU1
[  175.379639][   T36]        ----                    ----
[  175.384972][   T36]   lock(disc_data_lock#3);
[  175.389449][   T36]                                local_irq_disable();
[  175.396171][   T36]                                lock(&port_lock_key);
[  175.402993][   T36]                                lock(disc_data_lock#3);
[  175.409986][   T36]   <Interrupt>
[  175.413407][   T36]     lock(&port_lock_key);
[  175.417877][   T36] 
[  175.417877][   T36]  *** DEADLOCK ***
[  175.417877][   T36] 
[  175.425986][   T36] 6 locks held by kworker/u8:2/36:
[  175.431060][   T36]  #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  175.442164][   T36]  #1: ffffc90000ad7d18 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  175.453169][   T36]  #2: ffff8880258c0ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x34/0x780
[  175.462192][   T36]  #3: ffff888077cf00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80
[  175.471486][   T36]  #4: ffffffff9adc5138 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30
[  175.480606][   T36]  #5: ffff888077cf00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80
[  175.489894][   T36] 
[  175.489894][   T36] the dependencies between HARDIRQ-irq-safe lock and the holding lock:
[  175.500282][   T36] -> (&port_lock_key){-.-.}-{3:3} {
[  175.505464][   T36]    IN-HARDIRQ-W at:
[  175.509412][   T36]                     lock_acquire+0x179/0x350
[  175.515544][   T36]                     _raw_spin_lock_irqsave+0x3a/0x60
[  175.522382][   T36]                     serial8250_handle_irq+0x95/0xcb0
[  175.529208][   T36]                     serial8250_default_handle_irq+0x9a/0x210
[  175.536729][   T36]                     serial8250_interrupt+0x103/0x210
[  175.543563][   T36]                     __handle_irq_event_percpu+0x229/0x7d0
[  175.550837][   T36]                     handle_irq_event+0xab/0x1e0
[  175.557225][   T36]                     handle_edge_irq+0x263/0xd10
[  175.563609][   T36]                     __common_interrupt+0xdf/0x250
[  175.570165][   T36]                     common_interrupt+0xba/0xe0
[  175.576462][   T36]                     asm_common_interrupt+0x26/0x40
[  175.583109][   T36]                     _raw_spin_unlock_irqrestore+0x31/0x80
[  175.590364][   T36]                     uart_write+0x2a4/0xb30
[  175.596329][   T36]                     n_tty_write+0x41f/0x1150
[  175.602452][   T36]                     file_tty_write.constprop.0+0x512/0x9b0
[  175.609795][   T36]                     redirected_tty_write+0xd4/0x150
[  175.616528][   T36]                     vfs_write+0x5ba/0x1180
[  175.622477][   T36]                     ksys_write+0x12a/0x240
[  175.628425][   T36]                     do_syscall_64+0xcd/0x260
[  175.634553][   T36]                     entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.642062][   T36]    IN-SOFTIRQ-W at:
[  175.646022][   T36]                     lock_acquire+0x179/0x350
[  175.652150][   T36]                     _raw_spin_lock_irqsave+0x3a/0x60
[  175.658968][   T36]                     serial8250_handle_irq+0x95/0xcb0
[  175.665785][   T36]                     serial8250_default_handle_irq+0x9a/0x210
[  175.673296][   T36]                     serial8250_interrupt+0x103/0x210
[  175.680111][   T36]                     __handle_irq_event_percpu+0x229/0x7d0
[  175.687362][   T36]                     handle_irq_event+0xab/0x1e0
[  175.693745][   T36]                     handle_edge_irq+0x263/0xd10
[  175.700127][   T36]                     __common_interrupt+0xdf/0x250
[  175.706680][   T36]                     common_interrupt+0xba/0xe0
[  175.712976][   T36]                     asm_common_interrupt+0x26/0x40
[  175.719616][   T36]                     __orc_find+0x65/0xf0
[  175.725391][   T36]                     unwind_next_frame+0x2be/0x1ff0
[  175.732035][   T36]                     __unwind_start+0x45f/0x7f0
[  175.738344][   T36]                     arch_stack_walk+0x73/0x100
[  175.744643][   T36]                     stack_trace_save+0x8e/0xc0
[  175.750945][   T36]                     kasan_save_stack+0x33/0x60
[  175.757241][   T36]                     kasan_save_track+0x14/0x30
[  175.763547][   T36]                     kasan_save_free_info+0x3b/0x60
[  175.770195][   T36]                     __kasan_slab_free+0x51/0x70
[  175.776578][   T36]                     kmem_cache_free+0x2d4/0x4d0
[  175.782973][   T36]                     rcu_core+0x799/0x14e0
[  175.788834][   T36]                     handle_softirqs+0x216/0x8e0
[  175.795217][   T36]                     run_ksoftirqd+0x3a/0x60
[  175.801254][   T36]                     smpboot_thread_fn+0x3f4/0xae0
[  175.807811][   T36]                     kthread+0x3c2/0x780
[  175.813507][   T36]                     ret_from_fork+0x45/0x80
[  175.819542][   T36]                     ret_from_fork_asm+0x1a/0x30
[  175.825929][   T36]    INITIAL USE at:
[  175.829794][   T36]                    lock_acquire+0x179/0x350
[  175.835833][   T36]                    _raw_spin_lock_irqsave+0x3a/0x60
[  175.842563][   T36]                    serial8250_do_set_termios+0x310/0x1710
[  175.849812][   T36]                    serial8250_set_termios+0x6e/0x80
[  175.856541][   T36]                    uart_set_options+0x31a/0x5f0
[  175.862924][   T36]                    serial8250_console_setup+0x189/0x450
[  175.870007][   T36]                    univ8250_console_setup+0x1eb/0x2e0
[  175.876911][   T36]                    try_enable_preferred_console+0x2fd/0x530
[  175.884339][   T36]                    register_console+0x3ab/0x11b0
[  175.890810][   T36]                    univ8250_console_init+0x5f/0x90
[  175.897455][   T36]                    console_init+0x14f/0x680
[  175.903492][   T36]                    start_kernel+0x29f/0x4d0
[  175.909540][   T36]                    x86_64_start_reservations+0x18/0x30
[  175.916533][   T36]                    x86_64_start_kernel+0xb0/0xc0
[  175.923017][   T36]                    common_startup_64+0x13e/0x148
[  175.929503][   T36]  }
[  175.931975][   T36]  ... key      at: [<ffffffff9adc43a0>] port_lock_key+0x0/0x40
[  175.939589][   T36] 
[  175.939589][   T36] the dependencies between the lock to be acquired
[  175.939596][   T36]  and HARDIRQ-irq-unsafe lock:
[  175.953078][   T36] -> (disc_data_lock#3){.?.+}-{3:3} {
[  175.958442][   T36]    IN-HARDIRQ-R at:
[  175.962393][   T36]                     lock_acquire+0x179/0x350
[  175.968527][   T36]                     _raw_read_lock+0x3a/0x70
[  175.974652][   T36]                     sp_get+0x18/0xf0
[  175.980092][   T36]                     sixpack_write_wakeup+0x20/0x390
[  175.986824][   T36]                     tty_wakeup+0xe5/0x120
[  175.992687][   T36]                     tty_port_default_wakeup+0x2a/0x40
[  175.999600][   T36]                     serial8250_tx_chars+0x68e/0x860
[  176.006329][   T36]                     serial8250_handle_irq+0x761/0xcb0
[  176.013242][   T36]                     serial8250_default_handle_irq+0x9a/0x210
[  176.020752][   T36]                     serial8250_interrupt+0x103/0x210
[  176.027570][   T36]                     __handle_irq_event_percpu+0x229/0x7d0
[  176.034837][   T36]                     handle_irq_event+0xab/0x1e0
[  176.041238][   T36]                     handle_edge_irq+0x263/0xd10
[  176.047631][   T36]                     __common_interrupt+0xdf/0x250
[  176.054190][   T36]                     common_interrupt+0xba/0xe0
[  176.060498][   T36]                     asm_common_interrupt+0x26/0x40
[  176.067140][   T36]                     _raw_spin_unlock_irqrestore+0x31/0x80
[  176.074392][   T36]                     uart_write+0x2a4/0xb30
[  176.080345][   T36]                     sixpack_receive_buf+0x3d0/0x1c90
[  176.087164][   T36]                     tty_ldisc_receive_buf+0x157/0x1a0
[  176.094071][   T36]                     tty_port_default_receive_buf+0x70/0xb0
[  176.101414][   T36]                     flush_to_ldisc+0x268/0x780
[  176.107712][   T36]                     process_one_work+0x9cc/0x1b70
[  176.114268][   T36]                     worker_thread+0x6c8/0xf10
[  176.120475][   T36]                     kthread+0x3c2/0x780
[  176.126160][   T36]                     ret_from_fork+0x45/0x80
[  176.132194][   T36]                     ret_from_fork_asm+0x1a/0x30
[  176.138581][   T36]    HARDIRQ-ON-R at:
[  176.142543][   T36]                     lock_acquire+0x179/0x350
[  176.148669][   T36]                     _raw_read_lock+0x5f/0x70
[  176.154791][   T36]                     sp_get+0x18/0xf0
[  176.160217][   T36]                     sixpack_receive_buf+0x59/0x1c90
[  176.166946][   T36]                     tty_ldisc_receive_buf+0x157/0x1a0
[  176.173852][   T36]                     tty_port_default_receive_buf+0x70/0xb0
[  176.181193][   T36]                     flush_to_ldisc+0x268/0x780
[  176.187492][   T36]                     process_one_work+0x9cc/0x1b70
[  176.194046][   T36]                     worker_thread+0x6c8/0xf10
[  176.200255][   T36]                     kthread+0x3c2/0x780
[  176.205950][   T36]                     ret_from_fork+0x45/0x80
[  176.211984][   T36]                     ret_from_fork_asm+0x1a/0x30
[  176.218370][   T36]    SOFTIRQ-ON-R at:
[  176.222317][   T36]                     lock_acquire+0x179/0x350
[  176.228444][   T36]                     _raw_read_lock+0x5f/0x70
[  176.234565][   T36]                     sp_get+0x18/0xf0
[  176.239990][   T36]                     sixpack_receive_buf+0x59/0x1c90
[  176.246721][   T36]                     tty_ldisc_receive_buf+0x157/0x1a0
[  176.253626][   T36]                     tty_port_default_receive_buf+0x70/0xb0
[  176.260967][   T36]                     flush_to_ldisc+0x268/0x780
[  176.267264][   T36]                     process_one_work+0x9cc/0x1b70
[  176.273818][   T36]                     worker_thread+0x6c8/0xf10
[  176.280024][   T36]                     kthread+0x3c2/0x780
[  176.285720][   T36]                     ret_from_fork+0x45/0x80
[  176.291766][   T36]                     ret_from_fork_asm+0x1a/0x30
[  176.298151][   T36]    INITIAL USE at:
[  176.302011][   T36]                    lock_acquire+0x179/0x350
[  176.308060][   T36]                    _raw_write_lock_irq+0x36/0x50
[  176.314531][   T36]                    sixpack_close+0x1e/0x2f0
[  176.320568][   T36]                    tty_ldisc_close+0x111/0x1a0
[  176.326865][   T36]                    tty_ldisc_kill+0x8e/0x150
[  176.332988][   T36]                    tty_ldisc_hangup+0x365/0x740
[  176.339372][   T36]                    __tty_hangup.part.0+0x3eb/0x890
[  176.346018][   T36]                    tty_ioctl+0xf4b/0x15f0
[  176.351881][   T36]                    __x64_sys_ioctl+0x190/0x200
[  176.358185][   T36]                    do_syscall_64+0xcd/0x260
[  176.364223][   T36]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.371645][   T36]    INITIAL READ USE at:
[  176.375940][   T36]                         lock_acquire+0x179/0x350
[  176.382421][   T36]                         _raw_read_lock+0x5f/0x70
[  176.388890][   T36]                         sp_get+0x18/0xf0
[  176.394671][   T36]                         sixpack_receive_buf+0x59/0x1c90
[  176.401750][   T36]                         tty_ldisc_receive_buf+0x157/0x1a0
[  176.409004][   T36]                         tty_port_default_receive_buf+0x70/0xb0
[  176.416693][   T36]                         flush_to_ldisc+0x268/0x780
[  176.423339][   T36]                         process_one_work+0x9cc/0x1b70
[  176.430242][   T36]                         worker_thread+0x6c8/0xf10
[  176.436797][   T36]                         kthread+0x3c2/0x780
[  176.442842][   T36]                         ret_from_fork+0x45/0x80
[  176.449222][   T36]                         ret_from_fork_asm+0x1a/0x30
[  176.455956][   T36]  }
[  176.458423][   T36]  ... key      at: [<ffffffff8f568038>] disc_data_lock+0x18/0xfe0
[  176.466287][   T36]  ... acquired at:
[  176.470056][   T36]    lock_acquire+0x179/0x350
[  176.474705][   T36]    _raw_read_lock+0x5f/0x70
[  176.479350][   T36]    sp_get+0x18/0xf0
[  176.483300][   T36]    sixpack_write_wakeup+0x20/0x390
[  176.488555][   T36]    tty_wakeup+0xe5/0x120
[  176.492941][   T36]    tty_port_default_wakeup+0x2a/0x40
[  176.498379][   T36]    serial8250_tx_chars+0x68e/0x860
[  176.503631][   T36]    __start_tx+0x3e9/0x4a0
[  176.508111][   T36]    serial8250_start_tx+0x368/0x530
[  176.513362][   T36]    __uart_start+0x292/0x4c0
[  176.518018][   T36]    uart_write+0x218/0xb30
[  176.522493][   T36]    sixpack_receive_buf+0x3d0/0x1c90
[  176.527833][   T36]    tty_ldisc_receive_buf+0x157/0x1a0
[  176.533262][   T36]    tty_port_default_receive_buf+0x70/0xb0
[  176.539127][   T36]    flush_to_ldisc+0x268/0x780
[  176.543950][   T36]    process_one_work+0x9cc/0x1b70
[  176.549029][   T36]    worker_thread+0x6c8/0xf10
[  176.553760][   T36]    kthread+0x3c2/0x780
[  176.557970][   T36]    ret_from_fork+0x45/0x80
[  176.562538][   T36]    ret_from_fork_asm+0x1a/0x30
[  176.567458][   T36] 
[  176.569755][   T36] 
[  176.569755][   T36] stack backtrace:
[  176.575625][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.14.0-syzkaller-07540-geff5f16bfd87 #0 PREEMPT(full) 
[  176.575641][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  176.575648][   T36] Workqueue: events_unbound flush_to_ldisc
[  176.575667][   T36] Call Trace:
[  176.575672][   T36]  <TASK>
[  176.575676][   T36]  dump_stack_lvl+0x116/0x1f0
[  176.575692][   T36]  check_irq_usage+0x7dc/0x920
[  176.575709][   T36]  ? check_path.constprop.0+0x24/0x50
[  176.575724][   T36]  ? __lock_acquire+0x1189/0x1ba0
[  176.575739][   T36]  __lock_acquire+0x1189/0x1ba0
[  176.575755][   T36]  ? lock_acquire+0x179/0x350
[  176.575771][   T36]  lock_acquire+0x179/0x350
[  176.575786][   T36]  ? sp_get+0x18/0xf0
[  176.575798][   T36]  ? ldsem_down_read_trylock+0x11a/0x180
[  176.575809][   T36]  ? ldsem_down_read_trylock+0x120/0x180
[  176.575820][   T36]  ? __pfx_sixpack_write_wakeup+0x10/0x10
[  176.575832][   T36]  _raw_read_lock+0x5f/0x70
[  176.575845][   T36]  ? sp_get+0x18/0xf0
[  176.575856][   T36]  sp_get+0x18/0xf0
[  176.575867][   T36]  ? __pfx_sixpack_write_wakeup+0x10/0x10
[  176.575879][   T36]  sixpack_write_wakeup+0x20/0x390
[  176.575892][   T36]  ? __pfx_sixpack_write_wakeup+0x10/0x10
[  176.575904][   T36]  tty_wakeup+0xe5/0x120
[  176.575917][   T36]  tty_port_default_wakeup+0x2a/0x40
[  176.575927][   T36]  serial8250_tx_chars+0x68e/0x860
[  176.575939][   T36]  __start_tx+0x3e9/0x4a0
[  176.575949][   T36]  serial8250_start_tx+0x368/0x530
[  176.575962][   T36]  __uart_start+0x292/0x4c0
[  176.575974][   T36]  uart_write+0x218/0xb30
[  176.575990][   T36]  sixpack_receive_buf+0x3d0/0x1c90
[  176.576004][   T36]  ? ldsem_down_read_trylock+0x120/0x180
[  176.576014][   T36]  ? __pfx_ldsem_down_read_trylock+0x10/0x10
[  176.576026][   T36]  ? __pfx_sixpack_receive_buf+0x10/0x10
[  176.576039][   T36]  tty_ldisc_receive_buf+0x157/0x1a0
[  176.576054][   T36]  tty_port_default_receive_buf+0x70/0xb0
[  176.576070][   T36]  flush_to_ldisc+0x268/0x780
[  176.576090][   T36]  ? rcu_is_watching+0x12/0xc0
[  176.576102][   T36]  process_one_work+0x9cc/0x1b70
[  176.576120][   T36]  ? __pfx_process_one_work+0x10/0x10
[  176.576134][   T36]  ? assign_work+0x1a0/0x250
[  176.576144][   T36]  worker_thread+0x6c8/0xf10
[  176.576156][   T36]  ? __pfx_worker_thread+0x10/0x10
[  176.576173][   T36]  kthread+0x3c2/0x780
[  176.576183][   T36]  ? __pfx_kthread+0x10/0x10
[  176.576198][   T36]  ? __pfx_kthread+0x10/0x10
[  176.576207][   T36]  ? __pfx_kthread+0x10/0x10
[  176.576218][   T36]  ? __pfx_kthread+0x10/0x10
[  176.576227][   T36]  ? rcu_is_watching+0x12/0xc0
[  176.576241][   T36]  ? __pfx_kthread+0x10/0x10
[  176.576251][   T36]  ret_from_fork+0x45/0x80
[  176.576261][   T36]  ? __pfx_kthread+0x10/0x10
[  176.576270][   T36]  ret_from_fork_asm+0x1a/0x30
[  176.576287][   T36]  </TASK>
[  176.576323][    C1] vkms_vblank_simulate: vblank timer overrun
[  176.846782][    C1] vkms_vblank_simulate: vblank timer overrun
[  176.874846][ T5909] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device
[  176.882478][ T5909] pyra 0003:1E7D:2CF6.000F: couldn't install mouse
[  176.889651][ T5909] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -71
[  176.900084][ T5909] usb 5-1: USB disconnect, device number 16
[  177.169833][ T2149] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  177.321163][ T2149] usb 4-1: Using ep0 maxpacket: 16
[  177.327500][ T2149] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  177.338989][ T2149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  177.351249][ T2149] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  177.360481][ T2149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.368495][ T2149] usb 4-1: Product: syz
[  177.372742][ T2149] usb 4-1: Manufacturer: syz
[  177.377316][ T2149] usb 4-1: SerialNumber: syz
[  177.382598][ T2149] usb 4-1: config 0 descriptor??
[  177.388692][ T2149] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  177.397930][ T2149] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  178.017846][ T2149] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  178.024476][ T2149] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  178.233146][ T7323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.241663][ T7323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.301547][ T2149] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  178.308519][ T2149] em28xx 4-1:0.0: No AC97 audio processor
[  178.318980][ T2149] usb 4-1: USB disconnect, device number 14
[  178.327446][ T2149] em28xx 4-1:0.0: Disconnecting em28xx
[  178.333506][ T2149] em28xx 4-1:0.0: Freeing device