last executing test programs:

15.985594603s ago: executing program 0 (id=2186):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000240)='./file1\x00', 0x4000423)
mkdir(0x0, 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff)

15.589783207s ago: executing program 0 (id=2189):
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0xffffffffffffffff}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f5ffffff00"/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0x1, '\x00', 0x4}, {0xfe, 0x3, 0x0, '\x00', 0x6}, {0x7, 0xff, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x2}, {0xf, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x6}, {0x8, 0x9, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0xff}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0xa}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0x9}, {0x7, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x7f}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x60, 0x4, '\x00', 0x12}, {0xb, 0x8, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x7}, {0x8, 0xc, 0x0, '\x00', 0x6}]}})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
prctl$PR_SET_NAME(0x4, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r7, 0xff08, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005800)=@newtfilter={0x44ac, 0x2c, 0x100, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0x0, 0x9}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @filter_kind_options=@f_fw={{0x7}, {0x3fd0, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x7, 0x3, 0x6, {0xf7, 0x0, 0x2, 0x6, 0x92}, {0x5, 0x2, 0x400, 0x0, 0x1d, 0x8}, 0x3, 0xd, 0x2}}]}, @TCA_FW_POLICE={0x20, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x17}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x62}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x401}]}, @TCA_FW_MASK={0x8, 0x5, 0x5c}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}, @TCA_FW_ACT={0x3f38, 0x4, [@m_csum={0x1d8, 0x18, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfffffffb, 0x6, 0x1ff, 0x3}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xffffffff, 0x5, 0x1, 0x3}, 0x39}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xffffffff, 0x3, 0x5, 0x5bf}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x10000000, 0x425, 0x10}, 0x32}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x2, 0x8, 0x7}, 0x27}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xdbe, 0x10001, 0x20000000, 0xde, 0x7}, 0x6d}}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x2d84, 0x20, 0x0, 0x0, {{0xb}, {0x2d34, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xaf8d, 0xb3, 0x0, 0x5, 0x676, 0x8d, 0x2, 0x8001, 0xbe, 0x0, 0x4, 0x8, 0x17, 0x140, 0x7fff, 0x1, 0xffffffff, 0x400, 0x800, 0x10, 0x401, 0x6, 0x1, 0x0, 0x4, 0x3967, 0x244, 0x0, 0xc6, 0x6, 0x9, 0x7fffffff, 0x2, 0xfffff001, 0x3, 0xa0d, 0x7, 0xffffffff, 0x1, 0x7ff, 0x0, 0xad, 0x100, 0x5, 0x4, 0x8e8, 0x8, 0xe, 0xfffffffd, 0x9, 0x63, 0x7, 0xffffcf1c, 0xfffffffc, 0x7ff, 0x401, 0x401, 0x1, 0x3, 0x401, 0x8, 0x6, 0x80000000, 0x1, 0x1, 0x2, 0x9, 0x5, 0x1, 0xe, 0x10000000, 0x3, 0xfffffff9, 0x7f, 0x7fffffff, 0x500000, 0x5, 0x0, 0x2f, 0x8, 0xffffffef, 0x3, 0x3, 0x6b4, 0x4, 0x600, 0xa8c6, 0x8000, 0x1e9f, 0x4b50, 0x7, 0xb33c, 0x80000001, 0x7, 0x6, 0x4, 0x3, 0xb55, 0x9, 0x4, 0xe89, 0x1, 0x146, 0x6, 0xaf65027, 0x350c, 0x200, 0x5, 0x8, 0xa8, 0x54961aa4, 0x5, 0xa, 0x6, 0x7ff, 0xb, 0xffff, 0x4cd, 0x800, 0x0, 0xfffffffd, 0x7, 0x2, 0x2, 0x7, 0x9, 0x5, 0x0, 0x0, 0x7, 0x4, 0x1, 0x3, 0x8, 0x4, 0x9, 0x8, 0x0, 0x4, 0xffffff99, 0x9, 0x8, 0x917f, 0x10, 0x5, 0xe, 0x0, 0xff, 0x9507, 0x8, 0xc012, 0x5, 0x8b, 0x8, 0x0, 0xa, 0x401, 0x7, 0x0, 0x4, 0x1000, 0x4, 0x400, 0x99d, 0x6, 0x9, 0x9, 0xd1, 0x19f7159, 0x20000000, 0x4, 0xffffff80, 0x9, 0x9, 0x6, 0x4, 0x3, 0x7, 0x2, 0x8, 0x7, 0x2, 0x7fff, 0x6, 0xfffffffb, 0x4dbd, 0x400, 0x8, 0x14, 0x8, 0x0, 0x3, 0x5, 0xffffffff, 0x8, 0x2, 0x4f, 0x9, 0x9, 0x3, 0x4, 0xa, 0xb5c1, 0x7e, 0x0, 0xd, 0x2d, 0x7, 0x80000000, 0x10000, 0x1d0, 0x400, 0x0, 0x60, 0x3, 0xfffffc00, 0x5, 0x7f, 0x10001, 0x80000001, 0x8, 0x9, 0x1, 0x8, 0x7, 0x5, 0x11, 0x4, 0xe, 0x800, 0x6, 0x135e, 0x6, 0x9, 0x6, 0xf808, 0x7, 0x0, 0x7ff, 0x0, 0x3, 0x3ff, 0x3, 0x6, 0x2, 0x3, 0x7, 0x800, 0x7, 0x5, 0x5, 0x6d, 0x5, 0xfffffff9, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x66, 0x0, 0x81, 0x2, 0x3, 0x664, 0x317, 0xe, 0x8f, 0xa2f, 0x8, 0x0, 0x7, 0x4, 0xa, 0x8, 0x8, 0xf4, 0xfffffff7, 0xc774, 0x81, 0x0, 0x7, 0x3, 0x4, 0x73, 0xa04, 0x6, 0x4, 0x7f, 0x5, 0xb0, 0x7f, 0x79a, 0x7, 0x8, 0x2, 0x5, 0xd7, 0xe0, 0x9, 0xffffffda, 0x6, 0x9, 0xd42a, 0x3, 0x3, 0x7fff, 0x8, 0x2, 0x2, 0x55, 0x0, 0x6, 0x3, 0x1, 0x2f842a2a, 0x8, 0x5, 0xffff, 0x5, 0x1, 0xfff, 0xe, 0x1, 0x6, 0xa3, 0x8, 0x8, 0xff, 0x9, 0x0, 0x7, 0x4d79, 0x96f9, 0x14cc, 0x8, 0x7, 0xe0, 0x7, 0x7, 0x9, 0x1000, 0xe, 0x40, 0x81, 0x2, 0x60, 0x9, 0x3, 0xe1, 0x2, 0x0, 0x97, 0x6, 0x0, 0x1, 0x1, 0x80000001, 0x9, 0x9, 0xf0a1, 0x5, 0x8001, 0x10001, 0x8, 0x6, 0x55e, 0x1, 0x9, 0x81, 0x1, 0xfffffff9, 0xe, 0x4d, 0xd6, 0x9, 0xffffff69, 0x6, 0x7, 0x7, 0x2403, 0x0, 0x7210bca8, 0x4000000, 0x7, 0xe, 0x81, 0x8, 0x800, 0x100, 0x10, 0x7, 0x3, 0x9, 0x0, 0x4, 0x0, 0xe70, 0x1, 0x0, 0x0, 0x0, 0x9, 0x7, 0x9, 0xf, 0x1000, 0x4, 0x1, 0x1, 0xffff, 0xfffffffb, 0x3ff, 0x3, 0x7ff, 0x7fff, 0x6, 0x4, 0xc, 0x7, 0x2, 0x5, 0x7, 0x7, 0xe7, 0x3, 0xfffffffe, 0x86, 0x6, 0x1, 0x64, 0x7fffffff, 0x3, 0x6, 0x7, 0x2d, 0xe22a, 0x8000, 0x3, 0xfff, 0x2, 0x401, 0xe, 0x6, 0xb5e, 0x8b7b, 0x4, 0xbf, 0x4, 0xfffffff7, 0x2, 0x3ff, 0x3, 0x5, 0x0, 0x800, 0x4, 0x1, 0x9, 0x401, 0x2, 0xd, 0xc, 0x5, 0x8, 0xfffffeff, 0x8, 0xe700, 0x9, 0x6, 0xec, 0x6, 0xf, 0x9, 0x1ff, 0x6, 0x7fff, 0x3, 0x4, 0x3ff, 0x5, 0x1, 0x1, 0x1, 0x14e, 0xf7, 0x6, 0x7, 0x401, 0x800, 0x131, 0x52926a17, 0xffff, 0x80000001, 0x7, 0x0, 0x80, 0x1, 0x7, 0x6, 0xa2f5, 0x5, 0x200, 0x5, 0x0, 0x3, 0x6, 0x1, 0x1, 0x8000, 0x1, 0x80, 0xe, 0xd]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x1000, 0x5adb9f16, 0x5, 0x5, 0x9d, 0x0, 0xc, 0xefb, 0x6, 0x400, 0xffffffff, 0x6, 0x4, 0x101, 0x418, 0x61c6, 0xffff, 0x46cf, 0x10, 0x3, 0x7, 0x5, 0x1, 0x1, 0x6, 0x9, 0x1, 0x4, 0x9, 0x1, 0xfffffffc, 0x5, 0x4, 0x2, 0x101, 0x7, 0x1, 0x2, 0x2, 0x6cc4, 0x741, 0x9, 0x805, 0x0, 0x7, 0x55, 0x6e, 0x96, 0x6, 0x3, 0x4, 0x6, 0x8, 0xd43b, 0x1, 0x7f, 0xce5, 0x0, 0x9ff, 0x2f1, 0x3, 0x3e7d, 0x9, 0x9e, 0x61f, 0x2, 0x1, 0xffffffe9, 0x8, 0x0, 0x9, 0x4, 0x2, 0x4, 0x3474, 0x0, 0x401, 0x7fff, 0x2, 0x4b, 0x9, 0x7, 0x5, 0x1e, 0x6, 0x2, 0xffffffc0, 0x1ff, 0x7, 0x7ff, 0x6, 0x4, 0x3, 0xf, 0x1ff, 0x80000001, 0x7, 0x6, 0x5, 0x1000, 0xb7f9, 0x4, 0x8, 0x8, 0x9, 0x7, 0x6, 0xffff, 0x4, 0x4, 0x8, 0xfffffffb, 0x6, 0x4, 0x18000000, 0x0, 0x0, 0x40, 0x6, 0x1, 0x0, 0x1, 0x9376, 0x0, 0x3, 0x0, 0x3, 0xfbb, 0xc, 0xb4bb, 0x541e, 0x80000001, 0x6, 0x9, 0xa9b0, 0x4, 0x1, 0x2, 0x7, 0x4, 0x0, 0x9, 0x2, 0xfffffff7, 0x9, 0x80, 0x80000001, 0xbe5, 0x1ff, 0x800, 0x4, 0x8b5, 0xb8, 0x6182, 0xd, 0x6, 0x81, 0x80000001, 0x1, 0x9, 0x9, 0xfffffffc, 0x8, 0x3, 0x6, 0x40, 0x9f4, 0xbc8f, 0x1, 0x0, 0x1, 0x80000000, 0x4, 0x6, 0x9, 0x8, 0x2, 0x4, 0x4, 0x2, 0x2, 0x6, 0x5, 0x4, 0x9, 0x4, 0x200, 0xa51, 0x3, 0x5, 0x5, 0x1000, 0x1, 0x9, 0x0, 0x5, 0x4, 0x3, 0x10, 0x2, 0x74c, 0x2, 0x7f, 0x4ee, 0x0, 0xf, 0xfffffffe, 0xd295, 0x2, 0xff, 0xbdb, 0x7f, 0x8, 0x0, 0x5, 0x2, 0x7fff, 0x80000001, 0x800, 0x762a, 0x2, 0x8, 0x6, 0x800, 0x2, 0x4, 0x1, 0x5, 0x4, 0x8ee, 0x81, 0x3, 0x7fff, 0x0, 0x7, 0x8001, 0x0, 0xfff, 0x6, 0x5, 0x519f, 0x7, 0x3, 0x2, 0x4, 0xf846, 0x10, 0x8, 0x2, 0x8, 0xf5, 0x9, 0x32a, 0x401, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x5, 0x8001, 0xa6, 0x7ff, 0x8, 0x4, 0x7, 0xfffffe00, 0x71, 0x10000, 0x2, 0x80000000, 0x3, 0x40, 0x3, 0x7, 0xff, 0x2, 0x8, 0x5, 0x5, 0xffffffff, 0x0, 0x5, 0x9b, 0x6, 0x7fffffff, 0xab1, 0x8, 0x4, 0xd376, 0x5, 0x1, 0x4, 0x1, 0x0, 0x1000, 0x1, 0x7, 0x6, 0xffff3001, 0x4, 0x0, 0x6, 0x400, 0x9, 0x20, 0xfffffffe, 0x80000000, 0x0, 0xb7b0, 0x7, 0xfffffff7, 0x7, 0x7, 0x5, 0x7, 0x3c, 0x7f, 0x2, 0xb6e6, 0x800, 0xb48, 0x9, 0x80000001, 0x10000, 0x8, 0x7, 0x80000000, 0x6, 0x7fff, 0x8, 0x4, 0x10, 0x3, 0x5, 0x4c, 0x2, 0x5, 0x400, 0x1, 0x5, 0x0, 0x1, 0x3, 0x830, 0x8000, 0x101, 0x4, 0x4, 0x8, 0xe, 0x0, 0x10, 0x4, 0x9, 0x100, 0x1, 0x31, 0x2, 0x7, 0x7, 0xe00000, 0x8, 0x9, 0x3, 0x8, 0x800, 0xc, 0xfffffffb, 0x70f5, 0x4, 0xfffffff8, 0x69, 0x6, 0x1, 0x3b0, 0x101, 0x7, 0x6ae, 0x8, 0xa94, 0x8, 0x1, 0xfffffffa, 0x0, 0xfffff800, 0x7, 0xffffff00, 0xfffffffa, 0x4, 0x5, 0x1, 0x5, 0x9, 0x80, 0x5, 0x30800, 0x8, 0x5, 0x9, 0x4, 0x4b, 0x101, 0x3, 0x0, 0x81, 0x3, 0x10, 0x6, 0x8, 0x0, 0xff, 0x8, 0x7, 0x1ec, 0x5, 0x3ff, 0x0, 0x2, 0x3, 0x6, 0x88, 0x4, 0x56, 0x3, 0x1, 0x0, 0x7, 0xfff, 0x5, 0xb, 0x90e, 0xe, 0x3, 0xa, 0x8, 0x9, 0x7, 0x1, 0x8, 0x1, 0x6, 0x395, 0x5, 0x5, 0xd, 0x250a, 0xfff, 0x10000, 0x0, 0x4, 0x41, 0x5, 0x3ff, 0x5, 0x0, 0x9, 0x5, 0x4, 0x4, 0x3ff, 0x4, 0xea8, 0xf, 0x2, 0xa, 0x7, 0x7, 0x9, 0x0, 0xa, 0x8, 0x67af, 0x7fffffff, 0x7, 0x9, 0xfff, 0x6, 0x9, 0xffffffff, 0x7, 0x7fff, 0xfffffff8, 0x7, 0x4, 0x0, 0xfffffffe, 0x9, 0xfffffffd, 0x8, 0x0, 0x5, 0x8, 0x81, 0x6, 0x9, 0x0, 0x7fffffff, 0xfffffffe, 0x7, 0x1000, 0x0, 0x200, 0x0, 0x8, 0x6, 0x8, 0x7, 0x5, 0x4, 0x6, 0x80, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x5, 0x3, 0x4, 0x20, 0x5, 0x6, 0xd5, 0x1, 0x2, 0x1ff, 0x4, 0xc9, 0x1, 0x5, 0xfff, 0x9, 0x5, 0xe6, 0xd, 0x3, 0xffffff38, 0xf7b, 0x9, 0x9, 0x8, 0xeb, 0x5, 0x96, 0x87c, 0x44, 0x80000001, 0x7, 0x10, 0xffff, 0x8, 0x1, 0x7, 0xfffffff9, 0xd8bf, 0x0, 0x4, 0x4, 0x6d000000, 0x10000, 0x20000000, 0x0, 0xe, 0x0, 0x17a, 0x5, 0x1, 0x7f, 0x400, 0x420, 0x0, 0xd038, 0x80000001, 0x5, 0x1, 0x3, 0x0, 0x6, 0x1c000, 0xd, 0x9, 0xcc, 0x2b, 0x1000, 0x8, 0x0, 0x6, 0xffffffff, 0x10000, 0x80, 0xff, 0xa7f, 0xfff, 0x3ff, 0x10001, 0x5, 0xffffffff, 0x6a9, 0xe, 0x0, 0x3, 0x6, 0x2, 0xf, 0x5, 0xfff, 0x255613f8, 0x6, 0x40, 0x2, 0x4ba, 0x1ff, 0x1, 0x585e, 0x3, 0x9, 0xfff, 0x2, 0x9, 0x3, 0x3ff, 0x0, 0x7fffffff, 0x2, 0x6, 0x864, 0x5, 0xc1e1, 0x134, 0x10000, 0x4, 0x8, 0x3, 0x9, 0x0, 0x48, 0x5, 0x8, 0x3, 0x0, 0x3, 0x7, 0x4, 0x9, 0x5, 0x7, 0x9e, 0x4, 0x9, 0x8, 0x1, 0x5, 0xc, 0xf01, 0x0, 0x0, 0x2, 0x6, 0x1000, 0x5, 0x1, 0xa33a, 0x5, 0x0, 0x9, 0x1, 0x5, 0x3, 0xb, 0x3, 0x3, 0xf0000000, 0x1ff, 0x9, 0x48389cc5, 0x4, 0x401, 0x3, 0xa, 0x423, 0x8, 0xa, 0x6, 0x0, 0x1ff, 0x1, 0x1, 0x10, 0x5, 0x10, 0x401, 0x7, 0x70db, 0xfffffff9, 0xdf, 0x200, 0xffe, 0x7, 0x5, 0x1, 0x100, 0x9, 0x8, 0x8, 0x1, 0xc11b, 0xc, 0xdb76, 0x81, 0x100, 0xe, 0xcdf3, 0x80000000, 0x1, 0x2, 0x1000, 0x8, 0x0, 0x400, 0x7, 0x3a4, 0x81, 0x3, 0x8, 0xff, 0x8, 0x8, 0x9, 0x0, 0x80, 0x5, 0xe372, 0x6, 0x7, 0x7a5fc192, 0xf, 0x1, 0x6, 0x8, 0x814, 0x2, 0x8, 0xf, 0xfffffffa, 0x4, 0x6, 0x5, 0x1, 0x80, 0xe, 0x400, 0xa, 0x81, 0x6, 0x0, 0x0, 0x29a, 0x8001, 0x65, 0xfffffffb, 0x6, 0x5, 0x3ff, 0x4000, 0x10, 0x2c4, 0xffffff49, 0x84, 0x6, 0x6, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff63, 0x2, 0x9, 0x8, 0x80000000, 0x6e, 0xf4, 0x3, 0x16, 0x9, 0x0, 0xffffda19, 0x0, 0x0, 0xfffffffc, 0x0, 0xff000000, 0x6, 0x8, 0xf440, 0x0, 0x2, 0x3, 0x5, 0x4, 0x9, 0xe0, 0x80000001, 0x0, 0x3, 0x8, 0x8, 0x0, 0xd61, 0x5, 0x3ff, 0x3, 0x1, 0x80000000, 0x3513be4f, 0x1, 0x2, 0x4, 0x800, 0x0, 0x100, 0x2, 0x9e, 0x101, 0x7, 0x7, 0x3, 0x1, 0x6, 0xaf, 0x4, 0x6b, 0x1000, 0xb3, 0x1ff, 0x100, 0x8001, 0x8, 0x8, 0xd, 0x1, 0x1, 0x7fff, 0x1ff, 0x2d, 0x8, 0x3, 0x2, 0xe0c, 0x6, 0x10001, 0xfffff800, 0x40, 0xa, 0xb, 0x1766bc2f, 0x2, 0x3ff, 0x0, 0xff, 0x0, 0xd04, 0x0, 0x1, 0x2, 0x8, 0x1, 0xc, 0x7, 0x9, 0x80000000, 0x3, 0x10, 0xb, 0x2, 0xfffffff1, 0x6, 0x6, 0x2, 0xf, 0x4, 0x8, 0x0, 0x8, 0x6, 0xb2, 0x8000, 0x60, 0x8, 0x0, 0xc4a, 0xfffffffc, 0x8, 0x2, 0x10001, 0xed, 0x4, 0xfffffffc, 0x8001, 0x2, 0x5303, 0x8001, 0x8, 0x53a, 0x400, 0xc40c, 0xffffffff, 0x8000, 0x0, 0x9, 0x8, 0x49, 0x2f, 0x8, 0x6, 0xf, 0x2, 0x6, 0x10800, 0x400, 0x1000, 0x216, 0x7f, 0x6, 0x9, 0x5, 0x7, 0x6, 0x65f, 0x9, 0x4, 0x9, 0x7, 0x1, 0x0, 0xfff, 0xf, 0x80000001, 0x3, 0xb, 0xfffffffe, 0x73, 0x4, 0x9, 0x3d75, 0x4, 0xff, 0x9, 0x1, 0x3, 0xfffffff8, 0x1, 0x2, 0x80, 0x8, 0x2f1ee5b3, 0x1, 0xb, 0x5, 0x2, 0x2, 0x7, 0x1d7f, 0x910, 0xfffffff7, 0x0, 0x9, 0xfffffe01, 0x5515, 0x2, 0x4, 0x6, 0x8, 0x3c, 0x7, 0x81, 0x2, 0x9, 0x7, 0x6, 0x9, 0x3, 0x0, 0x0, 0x965d, 0x1, 0x100, 0x10001, 0x800, 0x802, 0x0, 0x4, 0x9, 0x4, 0xffff4240, 0x9, 0x1, 0x5, 0x9, 0x2, 0x4, 0xff, 0x8, 0x7, 0x9, 0x8, 0x1, 0x3, 0x4, 0x3, 0x6, 0x80000000, 0x100, 0x7ff, 0x8, 0xbcf, 0x195, 0x5, 0x74c, 0x5, 0x9, 0x62, 0xf, 0xfff, 0x5, 0x4, 0x1, 0x2, 0x2, 0x9, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0xbf, 0x8, 0xffff0000, {0x9, 0x2, 0x1000, 0x1000, 0x6, 0x4b}, {0x7, 0x0, 0xaa18, 0x0, 0x100, 0x9}, 0x4, 0x9, 0x8}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff2ff6, 0x0, 0x7, 0x36, 0x101, {0x6, 0x2, 0x7, 0x101, 0x2}, {0x0, 0x2, 0x1, 0x8001, 0x4, 0x2}, 0x7ff, 0x80, 0xb080}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x100, 0x4, 0x9, 0x1, 0xffff, 0xffff7fff, 0xfffffffb, 0x9, 0x5, 0x3, 0x3, 0x3, 0x5e, 0x0, 0x5, 0xdc, 0xe, 0x7, 0xeb0, 0x9, 0x401, 0x8, 0x1ff, 0x81, 0x8, 0x4, 0x3, 0x2, 0x8, 0x1, 0x5, 0x2, 0x7f, 0x3a5, 0x9, 0x0, 0x7, 0x8001, 0x1, 0x1, 0x6, 0x8e1, 0x400, 0xfffffffc, 0x3, 0x5, 0x9cb1, 0x8001, 0x8, 0xfb5, 0xeb, 0xe67, 0x5, 0x2, 0x8, 0x1000, 0x4, 0x7ff, 0x0, 0xf, 0x2, 0xfffffffe, 0x0, 0xfffffce4, 0x4ccf, 0x0, 0xffff, 0xef1, 0x9, 0x1, 0x2, 0x27d6, 0x9, 0x1, 0xd, 0x5, 0x5, 0x9, 0x4, 0x6000, 0x6, 0x6, 0x4, 0x1ff, 0x800, 0x3, 0x5, 0x80000001, 0x8, 0x5, 0x4, 0x10, 0x2, 0x1, 0x72b14143, 0x0, 0xffff834c, 0x9, 0x7a, 0x8, 0x200, 0x8, 0x40, 0x0, 0x7, 0x1, 0x4, 0x2, 0x3000, 0xfd1, 0x1, 0x8000, 0x3, 0x1, 0x2, 0x1, 0x7, 0x2, 0x1, 0x1, 0x3fe3, 0x9, 0x8, 0x3f32, 0x0, 0x8, 0xfffffffd, 0x0, 0x9, 0xe, 0x80000001, 0x0, 0xa, 0x6, 0x400, 0xffff, 0x8, 0x5, 0xfffff001, 0x3ff, 0x7ff, 0x3, 0x0, 0x3, 0xff, 0x5, 0x8, 0x3, 0x7, 0x9, 0x787, 0x8123, 0x86a, 0x2, 0x3, 0x0, 0xdb, 0x101, 0x8, 0x1, 0x0, 0x22ba, 0xffffff9d, 0x7, 0x8, 0x5, 0x100, 0x9, 0x8, 0x4e, 0x4, 0x3, 0x5, 0x0, 0xee, 0x10001, 0x0, 0x145d, 0x10001, 0x80, 0xca, 0x4, 0x1, 0xf, 0x6, 0xb, 0x2, 0xe, 0x88e, 0x7, 0xd, 0x3, 0x3ff, 0xca3, 0x9, 0xe, 0x3, 0x9, 0x3ff, 0xfffffbff, 0x8, 0x3, 0xf80, 0x400, 0xd7600000, 0x10000, 0x3, 0x65abdb0b, 0x2, 0x8, 0x7, 0x3, 0xe, 0x0, 0x8, 0x7, 0x8001, 0x81b, 0x8000, 0x10db, 0xfffffffd, 0x0, 0x40, 0x383, 0x6, 0x6, 0x8, 0x400, 0x8, 0x8, 0x1, 0x0, 0x7, 0xe2, 0x6, 0x2, 0xe450, 0xe, 0x0, 0x6, 0xdf, 0x7ff, 0x6, 0x80, 0x9, 0x4, 0x8e, 0x200, 0x3, 0x4, 0xb470, 0x3, 0x10000, 0x400, 0x8000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x3, 0x3, 0xffff0000, 0x7, 0x5, 0x1, 0x8, 0x10001, 0x9, 0x10000, 0x4, 0x1, 0x200, 0x5b, 0x6, 0x3ff, 0xa, 0x9, 0x10, 0x800, 0x5, 0x4, 0x9a8, 0xf, 0x3, 0xf3, 0x0, 0x453cff11, 0x8, 0x9cf8, 0x9, 0x1, 0x4b, 0x4e1, 0x17, 0x7, 0xffff, 0xc, 0x58, 0xc, 0xffff, 0x2, 0x81, 0x80, 0x0, 0x3, 0x7, 0x6, 0x2, 0x6, 0x7, 0x265, 0x1, 0x6, 0x0, 0x0, 0x45, 0x5, 0x1af, 0x5, 0x2, 0x80000000, 0x1d, 0x5, 0x6cc, 0x0, 0xde, 0xffffffff, 0x81, 0x7ff, 0x81, 0x80, 0xecf, 0x10, 0x6, 0x80000000, 0x9, 0x7fff, 0x101, 0x5, 0x2, 0xfff, 0x2, 0x1, 0x5, 0x7fffffff, 0xa028, 0x3, 0x5, 0x7, 0xffffff91, 0xf4, 0xcaf2, 0x484, 0x5, 0xfffff000, 0xb580, 0x9d, 0x7, 0x5, 0xffffffff, 0x40, 0x4, 0xa, 0x401, 0x6, 0x400, 0x0, 0x4, 0x9, 0x5, 0x3, 0x75ab, 0x7, 0x0, 0x3, 0x5, 0x2, 0x0, 0x5, 0x7, 0x7, 0x9, 0x1, 0x5, 0x3, 0xc, 0x7f, 0x2, 0x1, 0xf0e, 0x6, 0x1e, 0x3, 0x3, 0x4, 0x7, 0x8, 0x8, 0x3, 0x1c0000, 0x8001, 0x4, 0x9, 0x28, 0x6, 0x8, 0x0, 0x9, 0x100, 0x0, 0x2, 0x0, 0x5dee860b, 0xd, 0x6, 0xff, 0xc35, 0x4, 0x100, 0xffffffff, 0x20000000, 0x7f, 0xfffffffa, 0x4, 0xfffffffe, 0x2, 0x2, 0x9, 0x7f, 0x4f3, 0x8, 0x1, 0x2, 0x6, 0x10000, 0x2788, 0x80000000, 0x2, 0xfffffffb, 0x100, 0x499c, 0x4, 0xfff, 0x5, 0x9, 0x8000, 0x0, 0x0, 0x8, 0xf3, 0x0, 0xa, 0x1, 0x0, 0xc, 0x4, 0x200, 0x2, 0x3, 0x8, 0x3, 0x34, 0x4, 0xffffce01, 0x6, 0x9, 0x7, 0xa, 0x1000, 0x0, 0xfffff80d, 0x7, 0xfe1, 0x80000000, 0x1, 0x3, 0x5c00, 0x80000001, 0x80000000, 0xf, 0x3, 0xe5, 0x37f753e3, 0x0, 0x8001, 0x7, 0x6, 0x2c, 0x6, 0xa, 0xfffffffb, 0x9, 0x6, 0x1, 0x9, 0x3ff, 0x3, 0x8, 0xffffffff, 0x796, 0xcd, 0xe, 0x62c1, 0xed3, 0x3ff, 0x9, 0x2, 0x5, 0x7ff, 0x19000, 0xa11, 0x3, 0x0, 0xfffffff9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x8001, 0x7fffffff, 0x4, {0x10, 0x2, 0xb3f, 0xd, 0x4}, {0x40, 0x1, 0x1, 0x81, 0x4, 0x6}, 0x9, 0xfffffffe, 0xe}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x8, 0xa, 0x1, 0xffff0d42, 0x2, 0x80000000, 0x596, 0x9, 0x3, 0x1, 0x7fffffff, 0x6, 0x4, 0x6, 0x5, 0x4, 0x40, 0xd734, 0x3, 0x4203, 0xff, 0x10000, 0x9e8, 0x4, 0xe31, 0x9, 0x2, 0x6, 0x7f, 0x7, 0xa878, 0x2, 0xd0, 0x4, 0x8, 0x6, 0xfffffffc, 0x0, 0x400, 0x0, 0x0, 0x1, 0x2, 0x2ba, 0x1, 0x1, 0x7, 0x8, 0x1, 0x0, 0x401, 0x0, 0x9, 0x9, 0x3, 0x1, 0x5, 0x4, 0xa, 0x9, 0x2, 0x8001, 0x0, 0x1, 0x8, 0x4, 0x80000000, 0x2, 0x63a, 0x3, 0x7, 0x6, 0x8, 0x5, 0x6, 0x1, 0x6, 0xb, 0xf, 0x45ab, 0x6, 0xa8f, 0x7, 0x6, 0x7fff, 0x6, 0x1, 0x5, 0x69d6, 0x6, 0x8, 0x4, 0x0, 0x8, 0x9, 0x1ff, 0x9, 0x3, 0x4, 0xb, 0xabe, 0x2, 0x4, 0x8001, 0x7, 0xab3, 0x5, 0x2, 0xffff, 0x5, 0x9, 0x4, 0x4, 0x6, 0xa, 0xc0de, 0x8, 0x4, 0x7, 0x7f, 0x5, 0x0, 0x9, 0x2, 0x10000, 0x1, 0xe2, 0x300000, 0x1000, 0x9, 0x80000000, 0x0, 0x7, 0x8, 0x0, 0x2, 0x7ff, 0x7, 0x6, 0x4, 0x1000, 0x5, 0x9, 0x5, 0x5a75, 0x7, 0x4, 0x4, 0xfff, 0x7, 0x15a, 0x5, 0xd8c, 0x7, 0x2, 0x759, 0x1, 0x8, 0x7fbd, 0x18000000, 0xfffffffa, 0x9, 0x4dfe, 0x10000, 0x9, 0x64d, 0x6, 0x4, 0x3, 0x5, 0x8, 0x0, 0x4, 0x2, 0xfbb, 0xfffffffb, 0x6, 0x18000000, 0x8, 0x89, 0x8514, 0x512f8d8a, 0x0, 0xa99, 0xffff, 0x9, 0x67, 0xfff, 0xeca3, 0x3, 0x92, 0x8001, 0x7, 0x33244850, 0x6, 0x3, 0x53, 0xffffffff, 0x0, 0x6, 0x7, 0x600000, 0x7d59, 0x2, 0xc211, 0x9, 0x7, 0x2, 0x3000000, 0x4, 0x6, 0x7, 0xb891, 0x0, 0x1, 0x7, 0x0, 0x4, 0x400, 0x7, 0x9, 0xd0000000, 0x1, 0xfffffffd, 0x9, 0xd62, 0x1ff, 0x6, 0x9d5, 0x3, 0x8, 0x1, 0x6, 0xf2b, 0x400, 0x6, 0x9, 0xfb, 0x10001, 0x1, 0x4, 0x9, 0x100, 0x101, 0x6, 0xaf, 0x2, 0x5, 0x2, 0x6, 0x3, 0x4, 0x400, 0xdb81, 0xfffffffc]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x1000, 0x0, 0x0, 0x9, 0xa, 0xfffffff7, 0xfffff28a, 0x800, 0x9, 0x8, 0x4f, 0x4, 0x8, 0x0, 0x9, 0x5, 0x2402, 0x7fffffff, 0x3, 0x22, 0x6, 0x3, 0xb, 0x5, 0xfffff85d, 0x2, 0x10, 0x7fffffff, 0x80000000, 0x0, 0x3, 0xc3f, 0x0, 0xfffffffe, 0x96c, 0x0, 0x2, 0x3af545d8, 0x54, 0x6, 0x3, 0x200, 0x3, 0x5, 0x25, 0xfffffffd, 0xfffffffd, 0x7, 0x7, 0x96, 0x9, 0x80, 0x8, 0x5c, 0x2, 0x8, 0x36ee, 0x2, 0x7fffffff, 0x1, 0x9, 0x5, 0x0, 0x9, 0x9, 0x5, 0x6, 0x8, 0x4f72, 0x5, 0x4, 0x7, 0x0, 0x3ff, 0x9, 0x7, 0x401, 0x5, 0xe0000000, 0xe, 0xb, 0x4, 0x8, 0x800, 0x2, 0x3f6, 0x27b, 0x9, 0x9, 0x8, 0x2, 0x804ad7b, 0xc8, 0x0, 0x7ff, 0x5, 0x2, 0x3, 0x4, 0x80000001, 0x4, 0x1ff, 0x3, 0x3, 0x9000, 0x0, 0x3ff, 0xd, 0x5, 0x6, 0x23e0, 0x5, 0x5, 0x7, 0x5, 0xfffffff8, 0x3, 0x1, 0x9, 0x400, 0x9, 0x42, 0xfffffffd, 0xc97, 0x7, 0x3, 0x1365, 0x2, 0x397, 0x5, 0x2, 0x9, 0x3db, 0x766, 0x3, 0x7, 0x0, 0x5, 0x1000, 0x9, 0x8466, 0x28, 0x6, 0x100, 0x5c0a130b, 0x5, 0x0, 0x10, 0x8, 0xd174, 0x9, 0x3779, 0x0, 0xffffffff, 0xc9b, 0xff, 0x8, 0xffffffff, 0x3, 0x0, 0x8, 0x9, 0xc0, 0x3, 0x6, 0xffffff80, 0x10000, 0x4, 0x8, 0x9, 0x9, 0x2, 0x8, 0x9, 0x7, 0x5, 0x4, 0x1722, 0x2027, 0x9, 0x800, 0x159, 0x80000000, 0x21, 0x10000, 0x1, 0x0, 0x5, 0xd, 0xfffffff9, 0x1ff, 0x7, 0x9, 0x8, 0xc, 0x8, 0xbf14, 0x6, 0x6, 0x5, 0x2264, 0x4, 0x8, 0x8, 0x6, 0x13a, 0x2, 0xb, 0x4, 0x2, 0xbc5, 0x40, 0x9, 0xdf90, 0x6, 0x6, 0x0, 0xd9, 0xa7, 0x8, 0x5, 0xb9, 0x80, 0x1000, 0xa7, 0x2, 0x7, 0x400, 0x3, 0xd40, 0x27, 0x4040, 0x0, 0x3, 0x1, 0x0, 0x1, 0x5, 0x8, 0xdf, 0x2c, 0x4, 0x5, 0x3, 0x8, 0x2, 0x4, 0x0, 0x2, 0x8, 0x9, 0x0, 0x4, 0x2, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0xffffffff, 0x4, 0x81, 0x3bfa, 0x18, 0x2, 0x2, 0x7, 0x0, 0x80000000, 0xb1, 0x20004, 0x0, 0x5, 0x0, 0x7, 0x3a, 0x7ff, 0x9, 0x5, 0x1ff, 0x1000, 0x3, 0x0, 0x5a2f, 0x401, 0x4, 0x7, 0x3e, 0x2, 0x5, 0xc, 0x80000, 0x5, 0x290, 0x37a4, 0x1, 0x401, 0x0, 0x8, 0x9, 0x1, 0x0, 0xaaa, 0x41, 0xa, 0xd, 0x0, 0x1ff, 0xddd2, 0xffff8001, 0x80000001, 0x7, 0x8, 0x9, 0x2, 0x1, 0x4e4ef336, 0x56d, 0x2, 0x1, 0x7, 0x10, 0x2, 0x3, 0x401, 0x5, 0xd, 0x753, 0x800, 0x3, 0xd, 0x1000, 0x2, 0xb5, 0x6, 0x7c7f166b, 0x2, 0x3, 0x7, 0x1, 0x1, 0x5, 0xfffffff9, 0x4f, 0x8, 0x9, 0xf, 0x10, 0x6, 0x1, 0x1, 0x8b, 0x6, 0x0, 0x4, 0x0, 0x1, 0x5, 0x2, 0x81, 0x8, 0x6, 0x400, 0x1, 0x7066f002, 0x3, 0x8, 0x100, 0x9, 0x0, 0x1, 0x3, 0x9, 0xf, 0x1, 0x9, 0x4f09, 0x5, 0x6, 0x74, 0x6, 0x101, 0x5d1, 0x81, 0x54, 0xc, 0xfff, 0x3800000, 0x1, 0x2, 0x88e3, 0x0, 0xdd0, 0x2, 0x9, 0x3a4, 0x0, 0xffffffff, 0xe, 0x2, 0x30, 0x2, 0x8, 0xc, 0xc0, 0xa, 0x6, 0xc, 0x7, 0x2, 0x7, 0x35, 0xcf, 0x9, 0x9, 0x400, 0xe, 0x10000, 0xfffffff9, 0x6, 0x2, 0x80000000, 0xe8b, 0x5, 0x48, 0x3, 0x1, 0xedd, 0xa, 0x9, 0x3, 0x2, 0x3, 0x2, 0xfffffff7, 0xd, 0x9, 0x1, 0x401, 0x371009d8, 0x80, 0xb33, 0x0, 0x6, 0x8290, 0x8, 0x2, 0x8, 0xfffffffc, 0x9, 0xd22c, 0x5, 0x5, 0x2, 0x0, 0x4, 0x7f, 0xc8ab, 0x7, 0x5, 0x0, 0x1, 0x5, 0x8, 0x8001, 0x2, 0x1, 0x6, 0xb, 0x2, 0x0, 0x6, 0x2, 0x2, 0xa, 0xc0f, 0x3, 0x9, 0x10001, 0xad, 0xfffffffa, 0x1, 0x6, 0x769, 0x1000, 0x2, 0x2, 0x4, 0x400, 0x87, 0x3, 0x1a, 0x2, 0x4, 0x1, 0x6, 0xbed, 0x7fff, 0x10001, 0x6, 0x10, 0xe, 0xff, 0x6, 0x7f, 0x2, 0x6, 0x6, 0x100, 0x6, 0x40000000, 0x70bc, 0xffffffff, 0x3e]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]]}, {0x28, 0x6, "faeec1853aaeb2f5f1702ab29d46388f1f946207e21330127c2e04d9e762f9f4729409b0"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_pedit={0xfd8, 0xb, 0x0, 0x0, {{0xa}, {0xf14, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xf10, 0x2, {{{0x1, 0x4, 0x4, 0x0, 0x2}, 0x6, 0x9, [{0x7, 0x2, 0x9, 0x357, 0x3, 0x7}, {0xc8b, 0x200, 0x9, 0x4, 0x4, 0xfffffffe}, {0x3, 0x7, 0x5, 0xffff0001, 0xfffffff8, 0xd00}, {0x0, 0x4, 0x5, 0x80000000, 0x1, 0x2}, {0x7, 0x8, 0x0, 0x7, 0x8001, 0x5}, {0x1, 0x7ff, 0x5, 0x6, 0xf9, 0x7}, {0x0, 0x2, 0xd6, 0x2, 0x4, 0x3}, {0x6, 0x7f, 0x1800000, 0x313, 0x101, 0x786eb8cf}, {0x1000, 0x1d, 0x6, 0x5, 0xfffffff1}, {0x4, 0x3, 0xf, 0x9, 0x9, 0x80}]}, [{0x100, 0x9, 0x0, 0x0, 0x2, 0x6}, {0x6, 0x9, 0x7, 0x4, 0x0, 0xc8}, {0x6, 0x10001, 0x40, 0x46, 0xfffffffa, 0x4a}, {0xfd4a, 0x7, 0x7217, 0x1, 0x4, 0xf9ce}, {0x1, 0x1ff, 0xb, 0x40, 0x0, 0x7f}, {0x7, 0x2, 0x0, 0x7f, 0xbb14}, {0x5, 0x9, 0x5, 0x0, 0x5, 0x14}, {0x400, 0x77, 0x0, 0x3, 0x1, 0x87}, {0x5, 0x400, 0x3, 0x8, 0xb, 0x6}, {0x3, 0x2, 0x9, 0x2, 0x81, 0x1}, {0xfffff000, 0x1, 0x0, 0xffffffff, 0x40000, 0x7}, {0x6, 0x5, 0x7, 0x7fff, 0x9b, 0x9}, {0x0, 0xffff8000, 0x81, 0x463, 0x200, 0x5}, {0x7, 0xa, 0x4, 0x4, 0x3, 0x1}, {0xffff, 0x6, 0x80000001, 0x7f, 0x2, 0x3d}, {0x1, 0xffff, 0x1, 0xdaa3, 0x5, 0x80}, {0x8, 0x9e, 0x1, 0x5, 0x2, 0x10001}, {0x1, 0x0, 0x3, 0x400, 0x1, 0x4}, {0x98e, 0x60, 0x0, 0x1, 0x8, 0x9}, {0x0, 0x7, 0x8, 0x5, 0x9, 0x8000}, {0xfffffffd, 0x2, 0x8, 0x3b3a, 0xb, 0x8001000}, {0x0, 0x5, 0x6, 0x6, 0x5, 0x8}, {0x5, 0x1bc7, 0x5, 0x1, 0xfffffffb, 0x1}, {0x5, 0x3ff, 0x5, 0xb, 0x80, 0xfffffffc}, {0x7fff, 0xd, 0x80, 0x2, 0xf, 0xffff}, {0x100, 0x0, 0xdda, 0x6, 0xf, 0x6}, {0x0, 0xccf, 0x6a69, 0x5, 0x0, 0x1}, {0x8, 0x1000, 0x3, 0x11, 0xce9a, 0x9}, {0x9, 0x341, 0x5, 0x5, 0x450e, 0x1000}, {0x3, 0x200, 0x6, 0xe, 0x1, 0x2}, {0x4, 0x6830, 0x7, 0x3, 0x0, 0x4}, {0x10000, 0xfffffffc, 0x6, 0x9, 0x2, 0x1}, {0x3, 0xe, 0x8, 0x66, 0xa, 0x9}, {0xf03, 0x74, 0x379, 0x7ff, 0x6, 0x1}, {0x1, 0xfffffffb, 0x9, 0xd54d, 0x6, 0x9}, {0xffff0001, 0x8001, 0x6eb0, 0x6, 0x80, 0x2}, {0x0, 0x100, 0xe, 0x6, 0xffffff6e, 0x1}, {0xff, 0x9, 0xc0000000, 0x1, 0x2, 0x1000}, {0x5, 0x3ff, 0x2, 0x2, 0x8000, 0x3}, {0x1, 0xa, 0x4, 0x5570, 0x5, 0x6}, {0x4, 0x3, 0x7, 0x0, 0x8, 0xf}, {0xd, 0x8, 0x0, 0x2, 0x6, 0x1}, {0x88, 0x7, 0x4e21, 0x1, 0x5, 0x7fffffff}, {0x80000000, 0xb, 0xed2, 0x401, 0x3, 0x7fff}, {0xfffffffb, 0x400, 0x701, 0x10000, 0xca, 0x80000001}, {0x5, 0x2a812615, 0x4e, 0x8210, 0x5, 0x580b}, {0x9, 0x2, 0x4, 0x5, 0x7, 0x401}, {0x66, 0xb, 0x7fff, 0xef, 0x7fffffff, 0x3}, {0x4, 0x6, 0xeac7, 0xffff7fff, 0x8, 0x64fa}, {0x9, 0xe1f, 0x80000001, 0x7bec, 0x80000001, 0xf9}, {0x40, 0x3, 0x4, 0x4, 0x6, 0x7}, {0x2, 0x80000000, 0x9, 0xa7, 0x6, 0x401}, {0x46, 0x7, 0x401, 0x6, 0xfffffcca, 0x4}, {0x8000, 0x0, 0x6, 0x7c, 0x7}, {0x4, 0x4, 0xfffffffe, 0x49d, 0x0, 0x2}, {0xc, 0x5, 0x6, 0x6, 0xdbfe, 0xd}, {0x8, 0x629, 0x3df0, 0xff, 0xab, 0x6}, {0xdb5, 0x7, 0x7fffffff, 0x800, 0x40400000, 0x7}, {0x1000, 0x385ed70d, 0x1, 0x5, 0xfffffd5d, 0x5}, {0x5, 0x8, 0xfffffc00, 0xfffffff9, 0x7, 0x200}, {0x1, 0x5, 0x9, 0x3, 0x3, 0x4}, {0x3, 0x10, 0x4, 0x3, 0x9aee, 0x7}, {0xffff, 0x4, 0x16, 0x1, 0xa, 0x9}, {0x5, 0x5, 0x6, 0x1, 0x5, 0x1}, {0x0, 0x9, 0x5e2, 0x7, 0xc0000, 0x400}, {0x2, 0x71f980c8, 0x1000, 0x8, 0xa, 0x8}, {0x1, 0xfffffff8, 0xa, 0xff, 0x5c, 0xffffffff}, {0x44, 0x8000, 0x3, 0x100, 0x7f, 0x8000}, {0xffff, 0x2c8f, 0x0, 0x9, 0x7fff}, {0x7fffffff, 0x5, 0x6, 0x3, 0x5847, 0x7f}, {0x5, 0x7fff, 0x5, 0x0, 0xba3, 0x3}, {0x2, 0x1, 0x8, 0x401, 0x4, 0x9}, {0x5, 0x1d3, 0x0, 0x7ff, 0x8, 0x80000000}, {0x0, 0x3, 0xdb, 0x1000, 0x0, 0xc}, {0x4, 0x7, 0x1, 0xd, 0x8001, 0xd}, {0x8, 0x3, 0x0, 0x3, 0x2}, {0x7c, 0x2896, 0x2, 0x1, 0x80, 0xfff}, {0x8, 0x7fffffff, 0x6, 0xffffffff, 0x1, 0x8}, {0x6, 0x6, 0xb, 0x200, 0x2, 0x6}, {0x10000, 0x8f09, 0x11, 0x3, 0xfffffffa, 0x6}, {0x3, 0xfffffffe, 0x1, 0x9, 0x2, 0x8}, {0x2eca, 0x27, 0x6, 0x1000, 0x0, 0x5}, {0x0, 0x59f9, 0x3ff, 0x0, 0x1, 0xbc}, {0x9, 0x0, 0x6, 0x3f77c39f, 0x1, 0x3}, {0x5, 0x0, 0x8, 0x8, 0x3, 0x6}, {0x0, 0x7, 0x1, 0x66, 0x8, 0x2}, {0x5, 0x2, 0x40, 0x9, 0x3, 0x3}, {0xd, 0x8, 0x200, 0x4, 0x1, 0x140}, {0x401, 0xa5, 0x1, 0x5, 0x3, 0x1}, {0x9, 0xffff, 0x4, 0x6, 0x8, 0xfffffffa}, {0x439, 0xc, 0x3, 0x436, 0x3, 0xfd}, {0x1, 0x3, 0x0, 0x2, 0x7fff, 0x7f}, {0x10000, 0x0, 0x6, 0x200, 0x6, 0x5}, {0x7, 0x1, 0x6, 0x2a, 0x4, 0x7}, {0xe846, 0x1, 0x5, 0x65, 0x5, 0x800}, {0xa, 0x8000, 0x3, 0xa88, 0x800, 0xb7a}, {0x2, 0x5d, 0x1, 0x3, 0x100}, {0x1, 0x6, 0xc, 0x10001, 0x3, 0x10001}, {0xfffffff7, 0x6, 0xa, 0xfffffffa, 0x3, 0x4}, {0x14, 0xa1, 0x1, 0x1, 0x3, 0x95b}, {0x5, 0x89fd, 0xff, 0x8, 0x3}, {0x7, 0x8, 0xedb2, 0x8, 0x1, 0x7d}, {0xffff6a2d, 0x2, 0xb7c, 0xf, 0x9, 0x6}, {0x8, 0xe57, 0xb, 0xe0d, 0x1, 0x7}, {0xffff, 0x81, 0xb33, 0x2, 0x8001, 0xa}, {0x4, 0x9, 0xf2, 0x2, 0x3, 0x1}, {0x4, 0x8, 0x9, 0x804, 0x61d0f94a, 0x7}, {0x100, 0x80, 0x6, 0x10001, 0x4, 0x6}, {0x0, 0x0, 0x6, 0xfffffeff, 0x8000, 0x3}, {0x40, 0x1, 0x4, 0xf7, 0x8, 0x400}, {0x6, 0x0, 0x101, 0x1, 0x7, 0xfdd9}, {0xefe, 0xffff, 0x8, 0x5, 0x8, 0x5}, {0x2, 0x6, 0x1, 0x0, 0x10, 0x6dfe}, {0xa, 0x5, 0x7, 0x544, 0x3, 0x7064}, {0x4, 0x800, 0xa, 0x100, 0x800, 0xffffffff}, {0xfffffffa, 0x7, 0x7, 0x2, 0x864, 0x3}, {0x7, 0x5, 0x621, 0x6, 0x6, 0x8000}, {0xb, 0x1, 0x1, 0xf26, 0x9, 0x9}, {0x3, 0x2a3, 0x1, 0x0, 0x7, 0x61}, {0x4, 0x0, 0x6257, 0xffd, 0x7, 0x74}, {0x1102, 0xfffffffb, 0x0, 0x5, 0xf697, 0x8}, {0x4, 0x128e, 0x3, 0x8, 0xffffffff, 0x8fe5}, {0x40, 0x6000, 0xd7c0, 0x4d7, 0x2, 0x1}, {0x6, 0x4bf, 0x1, 0x0, 0x6, 0x4}, {0x5, 0x9c, 0x4, 0x0, 0x6, 0x3}, {0x8, 0xa5d, 0x200, 0x1000, 0x4f0}, {0xfffffff6, 0xe, 0x0, 0x80000001, 0x1, 0x2}, {0x5, 0x6, 0x4, 0xfffffffa, 0x4800, 0x101}], [{}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {}, {}, {0x1}, {0x4}, {0x1}, {0x4, 0x2}, {0x6, 0x1}, {0x4}, {0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {}, {}, {0x4, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {0x3}, {0x5}, {0x1}, {0x5}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x4}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x5}, {0x3}, {}, {0x4}, {0x5, 0x2}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {}, {0x1, 0x1}, {}, {}, {}, {0x2, 0x1}, {0x3b0af444c0d0a083, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {}, {}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x7}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x9b, 0x6, "e0938e10322352d8e4ae9a651a26c38998250e582cfaf457b3bc29a3086230fa78b92905024424a40c6c69f6336f5094c1d38aa7e83301df6b1a3e54340ae61b8e2a396bd3f1b090c3dd63e37242d9fbacb1e65ec5a8a9778c7b6f64b1cbfb19e7d92a99bad6ad17e3aa74235df2ae8f43ef2fd2d10cbde28d1f38a8d0e4170b418a0c875c0f03a24442d6c2b1a8af1d264838e6a7ea3f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x4}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x6, 0x10}}, @TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0xa}}, @TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0xffff05f4}, @filter_kind_options=@f_flow={{0x9}, {0x488, 0x2, [@TCA_FLOW_EMATCHES={0x464, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x394, 0x2, 0x0, 0x1, [@TCF_EM_META={0x4c, 0x2, 0x0, 0x0, {{0x80, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="04d39bbd70c52e92", @TCF_META_TYPE_VAR="5e8d0e", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="5bf02615b7a58075aefe"]}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR="ff504b592ae5", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="bb"]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x5}, {0xa6e, 0x5, 0x4, 0x200}}}, @TCF_EM_META={0x74, 0x1, 0x0, 0x0, {{0x8}, [@TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="0644b4f874e8", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x24, 0x3, [@TCF_META_TYPE_VAR="19899f5b57cf01338d", @TCF_META_TYPE_VAR="8277603d", @TCF_META_TYPE_VAR="d7", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="98a5a81bd5d7d4", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="ba2419"]}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_VAR="8d", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="64a3a9a00efd", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x7}, {0x5, 0x82, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x9, 0x1}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_IPT={0x254, 0x1, 0x0, 0x0, {{0x6, 0x9, 0xd}, [@TCA_EM_IPT_MATCH_DATA={0xfa, 0x5, "fd734fffe7bb121c690678ebc4e5352c5d0d5a407e23863aaf5e29628323af5d8db5c880ae86dcfedaa943ceda8230661634d628cb04b572683b3fb9d2ea0885aa7c77a0370f8d9c51704745962c464d6fddd56bbb44c9543187027d6e960aac7ba61b8d1af75fea829e713a42d8b82bbaa9cd3815b4e4aa376b582c8174cfa4f4702f065311e7617856c52a1e37d04ed764461c548762725daeceeb2f3cc89181d48ef95edda60ed053b3535b24fd5dfaf515f916a62c9865babde2761f1f6a8b59796516b88913240eed296834bf70a9b2a48a8ad1b673b3f40e7e93f36f54af2cc6f079cba535b691fbfd388118f0ab12bccace0a"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x12, 0x5, "4b60fd76926e347219015965425a"}, @TCA_EM_IPT_MATCH_DATA={0x9a, 0x5, "df4e7b549c7ee9fdfd28c544605927b37f8ae58578b73740cee9aabf6fc05c0f374d605b1b43204a3972416b5e576859891dd74b8352cc94e1aefbedde65b11493eb849861678a3806a292344f948ab5ee481aeef7e460df0a1cc88ec3bd5d0e4a21b09c1709a6122629a2365c44bc11de8ab74431fe5ec6acfd11978ee23aa0f0c5498a69ebf8216da72a7001d3ae952c51c4458a2c"}, @TCA_EM_IPT_MATCH_DATA={0x80, 0x5, "13c418f6ea988f4e96dbf607f44139f047f38773f6a09e31ceed7a3df76a5c013aea3ada8fa4b3d5e755d6543b4f757bccd5af1cdf677e2dce124ec7a848de72213d937d5232efa87aa398e2f9d963e1bf07de1b16f6774c86675295bef3af93b541075b1eba72cf27720df94dc6a1e3ceb4232a715c252235948fdd"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x4c, 0x3, 0x0, 0x0, {{0xd180, 0x4, 0x1c}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x5}, {0x30f2, 0x14, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x6}, {0x8, 0x5, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x53, 0x2}, {0x10, 0x6, 0x1}}}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="b74fab01", @TCF_META_TYPE_VAR="2386812684d3b4"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2b}, {0x6, 0x80}}}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3a51, 0x7, 0x9}, {{0x6, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x4}, {0x7fff, 0x1, 0x1a9, 0x5}}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0x80, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0x6}, {0x2, 0x4, 0x5, 0x5}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x34, 0x2, 0x7e3}, {0x2, 0x9, 0x0, "b9aee12ec3297d27a7"}}}, @TCF_EM_META={0x38, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_VAR='hl', @TCF_META_TYPE_VAR="c1817d", @TCF_META_TYPE_VAR="ab", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="ef2ae83890f6a9049e4e", @TCF_META_TYPE_VAR="cf1f268f075f9d39e52c", @TCF_META_TYPE_VAR="4b3e0495c8f3", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0xac}, {0xee, 0x3ff, 0x0, 0x6, 0xf}}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x6}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x5e57}]}}]}, 0x44ac}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r11 = openat$sndtimer(0xffffff9c, &(0x7f00000000c0), 0x601)
ioctl$SNDRV_TIMER_IOCTL_START(r11, 0x54a0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYRES32=r10, @ANYRES32=r12, @ANYBLOB="050018013b02000008009f000a00000008002600b409"], 0x34}}, 0x0)

14.908393357s ago: executing program 0 (id=2192):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x63, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x40000000000}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000002c0)="6700000011008188040f56ecdb4cb9cca7480ef437000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649fea8a8ee6518fd890c16b684f635fd3694bf0e1bcb56357d07cdbf5eab41362f98e549e685d368773955096f94608949ab92aca7843de79e580914fc9dc353d6f9da7efc5f412835d29d55aa670b859bf5d5d74af403a2abf42b7bf0f27e15304dad2b30220637748", 0xcf}], 0x1}, 0x0)
r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', <r3=>0x0, 0x7800, 0x7800, 0x0, 0x9, {{0x17, 0x4, 0x1, 0x8, 0x5c, 0x68, 0xc, 0x7, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x26, 0x2, [{0x2, 0x8, "cd3112555176"}, {0x2, 0x5, "a12944"}, {0x7, 0x9, "27cec38b05e12e"}, {0x0, 0x4, "42b4"}, {0x1, 0x6, "484686e9"}]}, @lsrr={0x83, 0x1f, 0x47, [@remote, @dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0xa}, @remote, @multicast1, @local, @empty]}, @noop]}}}}})
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0)
r5 = openat$binderfs(0xffffff9c, &(0x7f0000000280)='./binderfs/custom0\x00', 0x800, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close_range(r5, r6, 0x2)
mq_timedsend(r4, 0x0, 0x0, 0x9, 0x0)
r7 = syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042)
ioctl$HIDIOCGRDESC(r7, 0x4030582a, &(0x7f0000000200)={0xd, "7954bbc8e800000000000000d5"}) (fail_nth: 2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x4, '\x00', r3, r4, 0x3, 0x3, 0x2}, 0x50)

12.521150102s ago: executing program 0 (id=2198):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21024, 0x51a23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4c100)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)={0x964, 0x1, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [{{0x254, 0x1, {{0x3, 0x1}, 0xb, 0x0, 0x2, 0x3, 0xe, 'syz0\x00', "ffa165fc424502b014340905466dce0ff37eb37fddad3a1059a5a211342e2bdc", "9f11a5b683fe44671bf7f1e0348f8f0b9dbb469d7a6f17ba091080f6f7a4195d", [{0x2, 0x4000, {0x2, 0x2}}, {0x9, 0x9}, {0x9, 0xd, {0x1, 0x3d6}}, {0x8891, 0x101, {0x3, 0xe}}, {0x800, 0x101, {0x1, 0x7ff}}, {0xd986, 0x1ff, {0x0, 0x5}}, {0xfffc, 0xdd13, {0x3, 0x2}}, {0x7, 0x9, {0x2, 0xeb}}, {0x6, 0x5, {0x3, 0xf4}}, {0x4, 0x88, {0x0, 0xfff}}, {0x0, 0x2, {0x0, 0xe}}, {0x0, 0x0, {0x0, 0x1}}, {0x40, 0x11, {0x3, 0x679}}, {0x4, 0x7fff, {0x2, 0xfffff800}}, {0xfff0, 0x101, {0x1, 0x7}}, {0xae, 0x3, {0x2, 0xfbc}}, {0x2e9, 0x3, {0x0, 0x7}}, {0xb9b5, 0x5, {0x0, 0x10001}}, {0x0, 0x400, {0x1, 0x4}}, {0xe, 0x9, {0x1, 0xdee}}, {0x9, 0x3, {0x1, 0x7}}, {0x1c, 0x46, {0x0, 0x7}}, {0x7, 0x80, {0x1, 0x3}}, {0x101, 0x658, {0x0, 0x6}}, {0x3, 0x2, {0x3, 0xfffffffc}}, {0x9, 0x1, {0x0, 0x6}}, {0x0, 0x7b, {0x3, 0x5}}, {0x7ff, 0x7f, {0x3, 0xd5}}, {0x9, 0x1, {0x3}}, {0x6f96, 0x8, {0x3, 0x90c}}, {0x3, 0x1, {0x3, 0x3}}, {0x9, 0x6, {0x2, 0x9}}, {0xd6a8, 0x0, {0x0, 0xf}}, {0x0, 0x3, {0x1, 0x2}}, {0x3, 0x1, {0x1, 0x5}}, {0x0, 0x0, {0x3, 0x10001}}, {0x2, 0x1, {0x0, 0x6}}, {0x4, 0x4, {0x0, 0xfc9}}, {0x3ff, 0x7ff, {0x1, 0x7}}, {0xe66, 0x6df2, {0x1, 0x7f}}]}}}, {{0x254, 0x1, {{0x3, 0x7fffffff}, 0x40, 0x3e, 0x9, 0x6, 0xc, 'syz1\x00', "5cee816d746a9759c8d4cb742bf549e9366c3b611b1d8777c77213c99d2f58f8", "e47651e0dcd6a2abae997a2e0211c9cb2de418b321f25a3f109b3221e6fbb338", [{0x7, 0x3, {0x0, 0x1ff}}, {0x0, 0x4, {0x1, 0x8000}}, {0xff00, 0x5, {0x2, 0x7}}, {0x2, 0x9, {0x0, 0xbb4a}}, {0x3a3c, 0xa, {0x2, 0xfffffff7}}, {0x800, 0x4, {0x0, 0x9}}, {0x8, 0x5, {0x1, 0x100}}, {0x6, 0x3, {0x0, 0xb}}, {0x4, 0x2, {0x0, 0x4}}, {0x0, 0x3, {0x0, 0x4}}, {0x2, 0x7, {0x0, 0x8001}}, {0x3ff, 0x2, {0x1, 0x80000001}}, {0x6, 0x4, {0x0, 0xffff2976}}, {0x4, 0x5, {0x3, 0x8}}, {0xfd5, 0xc, {0x0, 0x9}}, {0x7, 0x3, {0x0, 0x7fffffff}}, {0x1, 0x6, {0x0, 0x9}}, {0x6, 0xe0, {0x3, 0x7fff}}, {0x676, 0x85e8, {0x2, 0x9}}, {0x1, 0x2, {0x1, 0xc2}}, {0x9, 0x6, {0x1, 0x2}}, {0x101, 0x7, {0x2, 0x4}}, {0x0, 0x8001, {0x2, 0x9}}, {0x8, 0x8001, {0x0, 0x5}}, {0x400, 0x0, {0x1, 0x100}}, {0x6, 0x0, {0x3, 0x60}}, {0x0, 0x400, {0x91ffc8785854db94, 0x2}}, {0x6e13, 0x6, {0x1, 0x81}}, {0x4, 0x401, {0x2, 0xe}}, {0x978, 0x401, {0x0, 0xe}}, {0x8, 0x101, {0x2, 0xdc}}, {0x5, 0x1, {0x1, 0xb5beba5f}}, {0x9, 0xd5, {0x2, 0x487}}, {0x8, 0x9, {0x2, 0x1}}, {0x0, 0x2, {0x2, 0x5}}, {0x9, 0x8, {0x3, 0x200}}, {0x7, 0xb9a0, {0x1, 0x2}}, {0x2, 0x2, {0x1, 0xe9}}, {0x1, 0xdc, {0x3, 0x35ac}}, {0x620, 0x168, {0x3, 0xb}}]}}}, {{0x254, 0x1, {{0x1, 0x101}, 0x5, 0x5, 0x6, 0x4, 0x1f, 'syz1\x00', "7e2da6358a108547156b7d6a099082ff37c69cdceac3390eb80f62a75ac64d60", "20ceec4501cf64cb77b94ef57228a8c105db45b52754b8e7fa4fe7b06aaadb8a", [{0x0, 0x6000, {0x1, 0x8}}, {0x57, 0x2, {0x3, 0x101}}, {0xe, 0x2, {0x2}}, {0x4f3, 0x7fff, {0x3, 0x2}}, {0x1543, 0x1b7, {0x1, 0xb4}}, {0x0, 0xf97, {0x0, 0x10}}, {0x8, 0xc, {0x0, 0xfffffffe}}, {0x1, 0x3e58}, {0xfff8, 0xe9, {0x3, 0x6}}, {0x16d, 0x4, {0x3, 0x200}}, {0x1, 0x8001, {0x2, 0x40}}, {0xf, 0xa6b0, {0x0, 0xc}}, {0x4, 0x3, {0x2, 0x3}}, {0xf, 0x6, {0x3, 0x8}}, {0x81, 0xfd2f, {0x3, 0x5}}, {0xcc, 0x0, {0x2, 0x8ce}}, {0x9, 0x0, {0x0, 0x3}}, {0x0, 0x3, {0x3, 0x42}}, {0x7fff, 0x0, {0x0, 0x10}}, {0x7, 0x8, {0x3}}, {0x7ff, 0x8, {0x3, 0xe}}, {0x5, 0x1, {0x1, 0x80000001}}, {0x5, 0x9, {0x3, 0x5}}, {0x101, 0x1, {0x2, 0x9}}, {0x4, 0x80, {0x0, 0x6}}, {0x8001, 0x6, {0x2, 0xe0e}}, {0x8, 0x9, {0x3, 0xbf0}}, {0xfff8, 0x7f, {0x0, 0xfffff801}}, {0xd9, 0xa, {0x0, 0x5e9}}, {0x4f63, 0x898e, {0x2, 0x7}}, {0x2, 0x2, {0x0, 0x7fffffff}}, {0x0, 0x3ff, {0x3}}, {0x5, 0xfff9, {0x2, 0x5}}, {0x2, 0x70, {0x3, 0x2}}, {0x1, 0x7ff, {0x1, 0x2}}, {0x47f, 0x0, {0x2, 0xfffffffc}}, {0x7, 0xfffb, {0x1, 0xff}}, {0x1, 0x4, {0x0, 0x6}}, {0x5, 0x71d5, {0x0, 0x401}}, {0x80, 0xfffb, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x3, 0x3, 0x3cf, 0x800, 0x19, 'syz1\x00', "0595510ae273300b457149e4bb234db2dbc5d04a701f57b485763b863b71378a", "8cfbdfbb48e114f7d4ac07bc4db915271b6b58cebdbc066a7040a259e14f3074", [{0x5, 0x1, {0x0, 0x80}}, {0x5, 0x10, {0x2, 0x1}}, {0x2, 0x401, {0x3, 0x8}}, {0x6, 0x9, {0x2}}, {0x7ff, 0x1, {0x3}}, {0x2, 0x81, {0x1, 0x4}}, {0x9, 0x6, {0x2, 0xfff}}, {0x8, 0x3, {0x1, 0xc20a}}, {0x0, 0x1, {0x3, 0x7fff}}, {0x800, 0x8, {0x0, 0x4}}, {0x7, 0x80, {0x2, 0x3}}, {0x18, 0x101, {0x2, 0x1}}, {0x2, 0xbe9, {0x1, 0xfffffff7}}, {0xa8c8, 0x9ba4, {0x1, 0x3}}, {0x2, 0x9, {0x1, 0x4}}, {0x9, 0xaca, {0x1, 0x3}}, {0x1, 0x4, {0x1, 0x5}}, {0x1, 0x8}, {0xff, 0xfffc, {0x3, 0x6}}, {0x1, 0x2, {0x0, 0xa}}, {0x8000, 0x6, {0x0, 0x1}}, {0x4, 0x4, {0x1, 0x401}}, {0x8, 0xabcf, {0x3, 0xfffffff7}}, {0x4, 0x2, {0x3, 0x4}}, {0x7f, 0xa, {0x3}}, {0x8, 0x0, {0x0, 0x7}}, {0xfffc, 0x9, {0x1}}, {0xd, 0x3, {0x2, 0x6}}, {0x2, 0x8, {0x2}}, {0xa990, 0x0, {0x1, 0x1}}, {0x0, 0x4, {0x2, 0x101}}, {0x5, 0x7f, {0x3, 0x5}}, {0x7, 0xe6f0, {0x0, 0x3632}}, {0x8000, 0x80, {0xf04ab2b447954066, 0x9}}, {0x7ff, 0x0, {0x2}}, {0x8, 0x80, {0x3, 0x6}}, {0x3, 0xf, {0x3, 0x1ff}}, {0x9, 0xf, {0x3, 0x2}}, {0x8, 0xb, {0x445181852a8906ee, 0x8000}}, {0x800, 0x6, {0x2, 0xfffffffe}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000}, 0x8050)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f0000000080), 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x1c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "90e047d5f6f10af04c969637a74d458778aaf420c424e297610a9a8ac106a052a4b3ffa1be800387bf8e1729cbfe2c2b8904445029a3c7b1ed7724cd01f233932e5c03474218635d9031be4b3430418b8de85cd656529a4fb80f085faefbadb3683c8458ccb4c07063af10be19d4819ef075ae2ff2dc46dea22ff697b0416284d392caf4831b0601f5bb7d906bd348d67ba39b8cfda366cbed421680be5a0f564bb01f4dac1c84bbf2240c45eae85872e6914d64e5de2ffc13e10b4422307ea8a6b86dc1acc4baa6c691fd74e6ccc4651ea816f934da382d80cf8c9bfb36c1eddccde01eadccf7faac4ae45038bb61c59247f92be3c6918387588fb164c4f6d0"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x400)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0xf, 0x0, 0x0, 0x0, 0x6, 0x800})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x1c)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000005c0)={0x6, <r10=>r3, 'id0\x00'})
r11 = openat$pfkey(0xffffff9c, &(0x7f0000000640), 0x80000, 0x0)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r2, 0x4, 0x1, 0x5}, 0x50)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1f, 0xfffeffff, 0x4, 0x0, 0x410, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001200)={0x6, 0x9, &(0x7f0000000380)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @call={0x85, 0x0, 0x0, 0x5c}, @generic={0x80, 0x0, 0x5, 0xf, 0x3acd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], &(0x7f0000000400)='syzkaller\x00', 0xffffffff, 0x22, &(0x7f0000000440)=""/34, 0x41100, 0x20, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xf, 0x66d, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[r9, r10, r11, r12, r13, 0x1], 0x0, 0x10, 0x2}, 0x94)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x1b, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}, {&(0x7f00000018c0)="3c1775af", 0x4}], 0x2}, 0x0)
syz_usb_connect(0x2, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="ce010000d1253c40d11256eddd460102030109022f0001000000000904cf0000ff013700052482"], 0x0)
syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)

12.401402182s ago: executing program 4 (id=2199):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000240)='./file1\x00', 0x4000423)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chown(0x0, 0x0, 0xffffffffffffffff)

11.902066751s ago: executing program 4 (id=2201):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x1, 0x80802, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
dup(r6)
syz_usb_connect(0x0, 0x24, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0xd4, 0x26, 0x7a, 0x10, 0x1004, 0x61aa, 0x4f75, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
syz_usb_connect$uac1(0x0, 0xaa, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x8, 0x30, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x2, 0x6c, 0x5}, @as_header={0x7, 0x24, 0x1, 0x29, 0x2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xfb, 0x5, 0xef, {0x7, 0x25, 0x1, 0x81, 0x2, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x2, 0x3, 0xb, "9c3722c40930"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x74f4, 0x5, 0x4, "36b97ec7d2587d5c"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0x6, 0x79, "9187ad"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x3, 0xf3, {0x7, 0x25, 0x1, 0x3, 0x4e, 0x3ff}}}}}}}]}}, 0x0)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$vhost_msg_v2(r7, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
pipe2(0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d40)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21011, 0x15001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0xff}]}}}]}, 0x44}}, 0x24040084)
write$vhost_msg_v2(r7, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f00000102c0)=""/50, 0x32, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r7, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000440)=""/127, 0x7f, 0x0, 0x2, 0x3}}, 0x48)

11.853659525s ago: executing program 1 (id=2202):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0x376a00d87f3a89db, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
unshare(0x22020400)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
lseek(r3, 0x9c, 0x1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x0, 0x700}, @exit_looper], 0x0, 0x1000000, 0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r5, 0x0, 0x4ffe6, 0x0)

10.245762309s ago: executing program 1 (id=2205):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)

10.221501141s ago: executing program 0 (id=2206):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x1, 0x80802, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
dup(r6)
syz_usb_connect(0x0, 0x24, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0xd4, 0x26, 0x7a, 0x10, 0x1004, 0x61aa, 0x4f75, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
syz_usb_connect$uac1(0x0, 0xaa, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x8, 0x30, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x2, 0x6c, 0x5}, @as_header={0x7, 0x24, 0x1, 0x29, 0x2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xfb, 0x5, 0xef, {0x7, 0x25, 0x1, 0x81, 0x2, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x2, 0x3, 0xb, "9c3722c40930"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x74f4, 0x5, 0x4, "36b97ec7d2587d5c"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0x6, 0x79, "9187ad"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x3, 0xf3, {0x7, 0x25, 0x1, 0x3, 0x4e, 0x3ff}}}}}}}]}}, 0x0)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$vhost_msg_v2(r7, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
pipe2(0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d40)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21011, 0x15001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0xff}]}}}]}, 0x44}}, 0x24040084)
write$vhost_msg_v2(r7, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f00000102c0)=""/50, 0x32, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r7, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000440)=""/127, 0x7f, 0x0, 0x2, 0x3}}, 0x48)

9.315831509s ago: executing program 1 (id=2207):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x8, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc27}], 0x1c)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
getsockname$unix(r2, &(0x7f00000001c0)=@abs, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff})
r4 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0)
ioctl$VT_SETMODE(r4, 0x5602, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40046602, &(0x7f0000000040)=0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)

8.165962945s ago: executing program 3 (id=2208):
getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x60, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r2, r2, 0x21) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x1e0, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1ac, 0x2, [@TCA_MATCHALL_ACT={0x198, 0x2, [@m_tunnel_key={0x158, 0x11, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x600000, 0x6, 0x8, 0xabd, 0xffff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0xf9, 0x6, "1b1761d5185ba6c3cc3d515e1bb0bc5dd5740bae2e42ace65c9fb07479a50f564d0bcd57927c2f4d75f706d720aa2215dd95d93e91ccedc0bf31774776d7a4b51b35d4a8010d4c57edf32dd9245b9aae30bee88daea4b3bdc2fd01b499526ff69bef45525586ec1a883366d277802e268d6f9ad3e4619dfefa8f735b425bc9eb1bfaf2b1b8ad91a73837fc2edc90c05c5d544ee2316551ea940fd62cede60b1b2f197ef512a27709dcc2fc1fddbebd2258b2e4356a1c4c426e04d4e3ac9e97b4731774af5fcdc0eb36523490cdbc527bbd073cc1e918e8da62426d19a271e874694db1066295d034dfed99b3b14dc8c2dc57573a8a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x3c, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0xd, 0x6, "d221bbe80221bde503"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe9, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000080) (async)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async)
socket$packet(0x11, 0x3, 0x300) (async)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000240)={0x0, 0x9fa5, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
r7 = socket(0x10, 0x2, 0x0)
write(r7, &(0x7f0000000200)="240000001e005f8000400000000000000a000000000000000000080008000100000000ff", 0x24)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) (async)
io_uring_enter(r4, 0x32d7, 0x0, 0x46, 0x0, 0x0) (async)
memfd_create(&(0x7f0000000000)='\x00', 0x5) (async)
socket(0x28, 0x4, 0x8001)

7.128976702s ago: executing program 3 (id=2210):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x8, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc27}], 0x1c)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
getsockname$unix(r2, &(0x7f00000001c0)=@abs, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff})
r4 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0)
ioctl$VT_SETMODE(r4, 0x5602, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40046602, &(0x7f0000000040)=0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)

7.042631038s ago: executing program 4 (id=2211):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202400, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r3 = syz_open_pts(0xffffffffffffffff, 0x141601)
fcntl$setstatus(r3, 0x4, 0x102800)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x582})
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x6, 0x0, 0x5, 0x0})
write$binfmt_script(r2, &(0x7f0000000180)={'#! ', './file0', [{0x20, '\x00'}, {0x20, 'R'}, {0x20, '\xff\xff'}, {0x20, 'a$:\xb0'}, {}, {0x20, ')&,\'].'}, {0x20, '\x00'}], 0xa, "69fc8ea639b3ce1b369771a911a3ca304a84ecd335a74a6a2a7b91467a20819384c314c7a1f9d4c3186554e1154254d0fa5fc7a4c80f6deae79c3b4968ddb3b34fb6604a"}, 0x65)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f00000000c0)=ANY=[], 0x1)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000200)={<r6=>0x0, @local, @local}, &(0x7f0000000040)=0xc)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x73, r6})
ioctl(r7, 0x8916, &(0x7f0000000000))

6.185557941s ago: executing program 2 (id=2213):
r0 = dup(0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x18)
socket$kcm(0x10, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xd)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
socket$inet(0x2, 0x2, 0x0)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x8008700b, &(0x7f0000000080)={0x2e, 0x27, 0x1, 0x1d, 0x1, 0x8004, 0x2, 0x16b, 0xffffffffffffffff})
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x12, 0x8, 0x100, 0xef}})
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat(r0, &(0x7f0000000180)='./cgroup/../file0\x00', 0x141a02, 0x2)
openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
r5 = socket(0x28, 0x1, 0x0)
connect$packet(r5, &(0x7f0000000500)={0x28, 0x2, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
connect$packet(r5, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
write$cgroup_pid(r0, &(0x7f0000000240), 0x12)
openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
tgkill(r6, r6, 0x21)
r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82187202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000100)=0x3)
r8 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x105042, 0x4a)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r8, 0x0)
r9 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./cgroup/../file0/file0\x00', 0x101042, 0x146)
pwrite64(r9, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
truncate(&(0x7f0000000680)='./file1\x00', 0x6)

5.476055017s ago: executing program 2 (id=2214):
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0xffffffffffffffff}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f5ffffff00"/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0x1, '\x00', 0x4}, {0xfe, 0x3, 0x0, '\x00', 0x6}, {0x7, 0xff, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x2}, {0xf, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x6}, {0x8, 0x9, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0xff}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0xa}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0x9}, {0x7, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x7f}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x60, 0x4, '\x00', 0x12}, {0xb, 0x8, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x7}, {0x8, 0xc, 0x0, '\x00', 0x6}]}})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
prctl$PR_SET_NAME(0x4, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r7, 0xff08, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005800)=@newtfilter={0x44ac, 0x2c, 0x100, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0x0, 0x9}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @filter_kind_options=@f_fw={{0x7}, {0x3fd0, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x7, 0x3, 0x6, {0xf7, 0x0, 0x2, 0x6, 0x92}, {0x5, 0x2, 0x400, 0x0, 0x1d, 0x8}, 0x3, 0xd, 0x2}}]}, @TCA_FW_POLICE={0x20, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x17}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x62}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x401}]}, @TCA_FW_MASK={0x8, 0x5, 0x5c}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}, @TCA_FW_ACT={0x3f38, 0x4, [@m_csum={0x1d8, 0x18, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfffffffb, 0x6, 0x1ff, 0x3}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xffffffff, 0x5, 0x1, 0x3}, 0x39}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xffffffff, 0x3, 0x5, 0x5bf}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x10000000, 0x425, 0x10}, 0x32}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x2, 0x8, 0x7}, 0x27}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xdbe, 0x10001, 0x20000000, 0xde, 0x7}, 0x6d}}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x2d84, 0x20, 0x0, 0x0, {{0xb}, {0x2d34, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xaf8d, 0xb3, 0x0, 0x5, 0x676, 0x8d, 0x2, 0x8001, 0xbe, 0x0, 0x4, 0x8, 0x17, 0x140, 0x7fff, 0x1, 0xffffffff, 0x400, 0x800, 0x10, 0x401, 0x6, 0x1, 0x0, 0x4, 0x3967, 0x244, 0x0, 0xc6, 0x6, 0x9, 0x7fffffff, 0x2, 0xfffff001, 0x3, 0xa0d, 0x7, 0xffffffff, 0x1, 0x7ff, 0x0, 0xad, 0x100, 0x5, 0x4, 0x8e8, 0x8, 0xe, 0xfffffffd, 0x9, 0x63, 0x7, 0xffffcf1c, 0xfffffffc, 0x7ff, 0x401, 0x401, 0x1, 0x3, 0x401, 0x8, 0x6, 0x80000000, 0x1, 0x1, 0x2, 0x9, 0x5, 0x1, 0xe, 0x10000000, 0x3, 0xfffffff9, 0x7f, 0x7fffffff, 0x500000, 0x5, 0x0, 0x2f, 0x8, 0xffffffef, 0x3, 0x3, 0x6b4, 0x4, 0x600, 0xa8c6, 0x8000, 0x1e9f, 0x4b50, 0x7, 0xb33c, 0x80000001, 0x7, 0x6, 0x4, 0x3, 0xb55, 0x9, 0x4, 0xe89, 0x1, 0x146, 0x6, 0xaf65027, 0x350c, 0x200, 0x5, 0x8, 0xa8, 0x54961aa4, 0x5, 0xa, 0x6, 0x7ff, 0xb, 0xffff, 0x4cd, 0x800, 0x0, 0xfffffffd, 0x7, 0x2, 0x2, 0x7, 0x9, 0x5, 0x0, 0x0, 0x7, 0x4, 0x1, 0x3, 0x8, 0x4, 0x9, 0x8, 0x0, 0x4, 0xffffff99, 0x9, 0x8, 0x917f, 0x10, 0x5, 0xe, 0x0, 0xff, 0x9507, 0x8, 0xc012, 0x5, 0x8b, 0x8, 0x0, 0xa, 0x401, 0x7, 0x0, 0x4, 0x1000, 0x4, 0x400, 0x99d, 0x6, 0x9, 0x9, 0xd1, 0x19f7159, 0x20000000, 0x4, 0xffffff80, 0x9, 0x9, 0x6, 0x4, 0x3, 0x7, 0x2, 0x8, 0x7, 0x2, 0x7fff, 0x6, 0xfffffffb, 0x4dbd, 0x400, 0x8, 0x14, 0x8, 0x0, 0x3, 0x5, 0xffffffff, 0x8, 0x2, 0x4f, 0x9, 0x9, 0x3, 0x4, 0xa, 0xb5c1, 0x7e, 0x0, 0xd, 0x2d, 0x7, 0x80000000, 0x10000, 0x1d0, 0x400, 0x0, 0x60, 0x3, 0xfffffc00, 0x5, 0x7f, 0x10001, 0x80000001, 0x8, 0x9, 0x1, 0x8, 0x7, 0x5, 0x11, 0x4, 0xe, 0x800, 0x6, 0x135e, 0x6, 0x9, 0x6, 0xf808, 0x7, 0x0, 0x7ff, 0x0, 0x3, 0x3ff, 0x3, 0x6, 0x2, 0x3, 0x7, 0x800, 0x7, 0x5, 0x5, 0x6d, 0x5, 0xfffffff9, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x66, 0x0, 0x81, 0x2, 0x3, 0x664, 0x317, 0xe, 0x8f, 0xa2f, 0x8, 0x0, 0x7, 0x4, 0xa, 0x8, 0x8, 0xf4, 0xfffffff7, 0xc774, 0x81, 0x0, 0x7, 0x3, 0x4, 0x73, 0xa04, 0x6, 0x4, 0x7f, 0x5, 0xb0, 0x7f, 0x79a, 0x7, 0x8, 0x2, 0x5, 0xd7, 0xe0, 0x9, 0xffffffda, 0x6, 0x9, 0xd42a, 0x3, 0x3, 0x7fff, 0x8, 0x2, 0x2, 0x55, 0x0, 0x6, 0x3, 0x1, 0x2f842a2a, 0x8, 0x5, 0xffff, 0x5, 0x1, 0xfff, 0xe, 0x1, 0x6, 0xa3, 0x8, 0x8, 0xff, 0x9, 0x0, 0x7, 0x4d79, 0x96f9, 0x14cc, 0x8, 0x7, 0xe0, 0x7, 0x7, 0x9, 0x1000, 0xe, 0x40, 0x81, 0x2, 0x60, 0x9, 0x3, 0xe1, 0x2, 0x0, 0x97, 0x6, 0x0, 0x1, 0x1, 0x80000001, 0x9, 0x9, 0xf0a1, 0x5, 0x8001, 0x10001, 0x8, 0x6, 0x55e, 0x1, 0x9, 0x81, 0x1, 0xfffffff9, 0xe, 0x4d, 0xd6, 0x9, 0xffffff69, 0x6, 0x7, 0x7, 0x2403, 0x0, 0x7210bca8, 0x4000000, 0x7, 0xe, 0x81, 0x8, 0x800, 0x100, 0x10, 0x7, 0x3, 0x9, 0x0, 0x4, 0x0, 0xe70, 0x1, 0x0, 0x0, 0x0, 0x9, 0x7, 0x9, 0xf, 0x1000, 0x4, 0x1, 0x1, 0xffff, 0xfffffffb, 0x3ff, 0x3, 0x7ff, 0x7fff, 0x6, 0x4, 0xc, 0x7, 0x2, 0x5, 0x7, 0x7, 0xe7, 0x3, 0xfffffffe, 0x86, 0x6, 0x1, 0x64, 0x7fffffff, 0x3, 0x6, 0x7, 0x2d, 0xe22a, 0x8000, 0x3, 0xfff, 0x2, 0x401, 0xe, 0x6, 0xb5e, 0x8b7b, 0x4, 0xbf, 0x4, 0xfffffff7, 0x2, 0x3ff, 0x3, 0x5, 0x0, 0x800, 0x4, 0x1, 0x9, 0x401, 0x2, 0xd, 0xc, 0x5, 0x8, 0xfffffeff, 0x8, 0xe700, 0x9, 0x6, 0xec, 0x6, 0xf, 0x9, 0x1ff, 0x6, 0x7fff, 0x3, 0x4, 0x3ff, 0x5, 0x1, 0x1, 0x1, 0x14e, 0xf7, 0x6, 0x7, 0x401, 0x800, 0x131, 0x52926a17, 0xffff, 0x80000001, 0x7, 0x0, 0x80, 0x1, 0x7, 0x6, 0xa2f5, 0x5, 0x200, 0x5, 0x0, 0x3, 0x6, 0x1, 0x1, 0x8000, 0x1, 0x80, 0xe, 0xd]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x1000, 0x5adb9f16, 0x5, 0x5, 0x9d, 0x0, 0xc, 0xefb, 0x6, 0x400, 0xffffffff, 0x6, 0x4, 0x101, 0x418, 0x61c6, 0xffff, 0x46cf, 0x10, 0x3, 0x7, 0x5, 0x1, 0x1, 0x6, 0x9, 0x1, 0x4, 0x9, 0x1, 0xfffffffc, 0x5, 0x4, 0x2, 0x101, 0x7, 0x1, 0x2, 0x2, 0x6cc4, 0x741, 0x9, 0x805, 0x0, 0x7, 0x55, 0x6e, 0x96, 0x6, 0x3, 0x4, 0x6, 0x8, 0xd43b, 0x1, 0x7f, 0xce5, 0x0, 0x9ff, 0x2f1, 0x3, 0x3e7d, 0x9, 0x9e, 0x61f, 0x2, 0x1, 0xffffffe9, 0x8, 0x0, 0x9, 0x4, 0x2, 0x4, 0x3474, 0x0, 0x401, 0x7fff, 0x2, 0x4b, 0x9, 0x7, 0x5, 0x1e, 0x6, 0x2, 0xffffffc0, 0x1ff, 0x7, 0x7ff, 0x6, 0x4, 0x3, 0xf, 0x1ff, 0x80000001, 0x7, 0x6, 0x5, 0x1000, 0xb7f9, 0x4, 0x8, 0x8, 0x9, 0x7, 0x6, 0xffff, 0x4, 0x4, 0x8, 0xfffffffb, 0x6, 0x4, 0x18000000, 0x0, 0x0, 0x40, 0x6, 0x1, 0x0, 0x1, 0x9376, 0x0, 0x3, 0x0, 0x3, 0xfbb, 0xc, 0xb4bb, 0x541e, 0x80000001, 0x6, 0x9, 0xa9b0, 0x4, 0x1, 0x2, 0x7, 0x4, 0x0, 0x9, 0x2, 0xfffffff7, 0x9, 0x80, 0x80000001, 0xbe5, 0x1ff, 0x800, 0x4, 0x8b5, 0xb8, 0x6182, 0xd, 0x6, 0x81, 0x80000001, 0x1, 0x9, 0x9, 0xfffffffc, 0x8, 0x3, 0x6, 0x40, 0x9f4, 0xbc8f, 0x1, 0x0, 0x1, 0x80000000, 0x4, 0x6, 0x9, 0x8, 0x2, 0x4, 0x4, 0x2, 0x2, 0x6, 0x5, 0x4, 0x9, 0x4, 0x200, 0xa51, 0x3, 0x5, 0x5, 0x1000, 0x1, 0x9, 0x0, 0x5, 0x4, 0x3, 0x10, 0x2, 0x74c, 0x2, 0x7f, 0x4ee, 0x0, 0xf, 0xfffffffe, 0xd295, 0x2, 0xff, 0xbdb, 0x7f, 0x8, 0x0, 0x5, 0x2, 0x7fff, 0x80000001, 0x800, 0x762a, 0x2, 0x8, 0x6, 0x800, 0x2, 0x4, 0x1, 0x5, 0x4, 0x8ee, 0x81, 0x3, 0x7fff, 0x0, 0x7, 0x8001, 0x0, 0xfff, 0x6, 0x5, 0x519f, 0x7, 0x3, 0x2, 0x4, 0xf846, 0x10, 0x8, 0x2, 0x8, 0xf5, 0x9, 0x32a, 0x401, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x5, 0x8001, 0xa6, 0x7ff, 0x8, 0x4, 0x7, 0xfffffe00, 0x71, 0x10000, 0x2, 0x80000000, 0x3, 0x40, 0x3, 0x7, 0xff, 0x2, 0x8, 0x5, 0x5, 0xffffffff, 0x0, 0x5, 0x9b, 0x6, 0x7fffffff, 0xab1, 0x8, 0x4, 0xd376, 0x5, 0x1, 0x4, 0x1, 0x0, 0x1000, 0x1, 0x7, 0x6, 0xffff3001, 0x4, 0x0, 0x6, 0x400, 0x9, 0x20, 0xfffffffe, 0x80000000, 0x0, 0xb7b0, 0x7, 0xfffffff7, 0x7, 0x7, 0x5, 0x7, 0x3c, 0x7f, 0x2, 0xb6e6, 0x800, 0xb48, 0x9, 0x80000001, 0x10000, 0x8, 0x7, 0x80000000, 0x6, 0x7fff, 0x8, 0x4, 0x10, 0x3, 0x5, 0x4c, 0x2, 0x5, 0x400, 0x1, 0x5, 0x0, 0x1, 0x3, 0x830, 0x8000, 0x101, 0x4, 0x4, 0x8, 0xe, 0x0, 0x10, 0x4, 0x9, 0x100, 0x1, 0x31, 0x2, 0x7, 0x7, 0xe00000, 0x8, 0x9, 0x3, 0x8, 0x800, 0xc, 0xfffffffb, 0x70f5, 0x4, 0xfffffff8, 0x69, 0x6, 0x1, 0x3b0, 0x101, 0x7, 0x6ae, 0x8, 0xa94, 0x8, 0x1, 0xfffffffa, 0x0, 0xfffff800, 0x7, 0xffffff00, 0xfffffffa, 0x4, 0x5, 0x1, 0x5, 0x9, 0x80, 0x5, 0x30800, 0x8, 0x5, 0x9, 0x4, 0x4b, 0x101, 0x3, 0x0, 0x81, 0x3, 0x10, 0x6, 0x8, 0x0, 0xff, 0x8, 0x7, 0x1ec, 0x5, 0x3ff, 0x0, 0x2, 0x3, 0x6, 0x88, 0x4, 0x56, 0x3, 0x1, 0x0, 0x7, 0xfff, 0x5, 0xb, 0x90e, 0xe, 0x3, 0xa, 0x8, 0x9, 0x7, 0x1, 0x8, 0x1, 0x6, 0x395, 0x5, 0x5, 0xd, 0x250a, 0xfff, 0x10000, 0x0, 0x4, 0x41, 0x5, 0x3ff, 0x5, 0x0, 0x9, 0x5, 0x4, 0x4, 0x3ff, 0x4, 0xea8, 0xf, 0x2, 0xa, 0x7, 0x7, 0x9, 0x0, 0xa, 0x8, 0x67af, 0x7fffffff, 0x7, 0x9, 0xfff, 0x6, 0x9, 0xffffffff, 0x7, 0x7fff, 0xfffffff8, 0x7, 0x4, 0x0, 0xfffffffe, 0x9, 0xfffffffd, 0x8, 0x0, 0x5, 0x8, 0x81, 0x6, 0x9, 0x0, 0x7fffffff, 0xfffffffe, 0x7, 0x1000, 0x0, 0x200, 0x0, 0x8, 0x6, 0x8, 0x7, 0x5, 0x4, 0x6, 0x80, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x5, 0x3, 0x4, 0x20, 0x5, 0x6, 0xd5, 0x1, 0x2, 0x1ff, 0x4, 0xc9, 0x1, 0x5, 0xfff, 0x9, 0x5, 0xe6, 0xd, 0x3, 0xffffff38, 0xf7b, 0x9, 0x9, 0x8, 0xeb, 0x5, 0x96, 0x87c, 0x44, 0x80000001, 0x7, 0x10, 0xffff, 0x8, 0x1, 0x7, 0xfffffff9, 0xd8bf, 0x0, 0x4, 0x4, 0x6d000000, 0x10000, 0x20000000, 0x0, 0xe, 0x0, 0x17a, 0x5, 0x1, 0x7f, 0x400, 0x420, 0x0, 0xd038, 0x80000001, 0x5, 0x1, 0x3, 0x0, 0x6, 0x1c000, 0xd, 0x9, 0xcc, 0x2b, 0x1000, 0x8, 0x0, 0x6, 0xffffffff, 0x10000, 0x80, 0xff, 0xa7f, 0xfff, 0x3ff, 0x10001, 0x5, 0xffffffff, 0x6a9, 0xe, 0x0, 0x3, 0x6, 0x2, 0xf, 0x5, 0xfff, 0x255613f8, 0x6, 0x40, 0x2, 0x4ba, 0x1ff, 0x1, 0x585e, 0x3, 0x9, 0xfff, 0x2, 0x9, 0x3, 0x3ff, 0x0, 0x7fffffff, 0x2, 0x6, 0x864, 0x5, 0xc1e1, 0x134, 0x10000, 0x4, 0x8, 0x3, 0x9, 0x0, 0x48, 0x5, 0x8, 0x3, 0x0, 0x3, 0x7, 0x4, 0x9, 0x5, 0x7, 0x9e, 0x4, 0x9, 0x8, 0x1, 0x5, 0xc, 0xf01, 0x0, 0x0, 0x2, 0x6, 0x1000, 0x5, 0x1, 0xa33a, 0x5, 0x0, 0x9, 0x1, 0x5, 0x3, 0xb, 0x3, 0x3, 0xf0000000, 0x1ff, 0x9, 0x48389cc5, 0x4, 0x401, 0x3, 0xa, 0x423, 0x8, 0xa, 0x6, 0x0, 0x1ff, 0x1, 0x1, 0x10, 0x5, 0x10, 0x401, 0x7, 0x70db, 0xfffffff9, 0xdf, 0x200, 0xffe, 0x7, 0x5, 0x1, 0x100, 0x9, 0x8, 0x8, 0x1, 0xc11b, 0xc, 0xdb76, 0x81, 0x100, 0xe, 0xcdf3, 0x80000000, 0x1, 0x2, 0x1000, 0x8, 0x0, 0x400, 0x7, 0x3a4, 0x81, 0x3, 0x8, 0xff, 0x8, 0x8, 0x9, 0x0, 0x80, 0x5, 0xe372, 0x6, 0x7, 0x7a5fc192, 0xf, 0x1, 0x6, 0x8, 0x814, 0x2, 0x8, 0xf, 0xfffffffa, 0x4, 0x6, 0x5, 0x1, 0x80, 0xe, 0x400, 0xa, 0x81, 0x6, 0x0, 0x0, 0x29a, 0x8001, 0x65, 0xfffffffb, 0x6, 0x5, 0x3ff, 0x4000, 0x10, 0x2c4, 0xffffff49, 0x84, 0x6, 0x6, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff63, 0x2, 0x9, 0x8, 0x80000000, 0x6e, 0xf4, 0x3, 0x16, 0x9, 0x0, 0xffffda19, 0x0, 0x0, 0xfffffffc, 0x0, 0xff000000, 0x6, 0x8, 0xf440, 0x0, 0x2, 0x3, 0x5, 0x4, 0x9, 0xe0, 0x80000001, 0x0, 0x3, 0x8, 0x8, 0x0, 0xd61, 0x5, 0x3ff, 0x3, 0x1, 0x80000000, 0x3513be4f, 0x1, 0x2, 0x4, 0x800, 0x0, 0x100, 0x2, 0x9e, 0x101, 0x7, 0x7, 0x3, 0x1, 0x6, 0xaf, 0x4, 0x6b, 0x1000, 0xb3, 0x1ff, 0x100, 0x8001, 0x8, 0x8, 0xd, 0x1, 0x1, 0x7fff, 0x1ff, 0x2d, 0x8, 0x3, 0x2, 0xe0c, 0x6, 0x10001, 0xfffff800, 0x40, 0xa, 0xb, 0x1766bc2f, 0x2, 0x3ff, 0x0, 0xff, 0x0, 0xd04, 0x0, 0x1, 0x2, 0x8, 0x1, 0xc, 0x7, 0x9, 0x80000000, 0x3, 0x10, 0xb, 0x2, 0xfffffff1, 0x6, 0x6, 0x2, 0xf, 0x4, 0x8, 0x0, 0x8, 0x6, 0xb2, 0x8000, 0x60, 0x8, 0x0, 0xc4a, 0xfffffffc, 0x8, 0x2, 0x10001, 0xed, 0x4, 0xfffffffc, 0x8001, 0x2, 0x5303, 0x8001, 0x8, 0x53a, 0x400, 0xc40c, 0xffffffff, 0x8000, 0x0, 0x9, 0x8, 0x49, 0x2f, 0x8, 0x6, 0xf, 0x2, 0x6, 0x10800, 0x400, 0x1000, 0x216, 0x7f, 0x6, 0x9, 0x5, 0x7, 0x6, 0x65f, 0x9, 0x4, 0x9, 0x7, 0x1, 0x0, 0xfff, 0xf, 0x80000001, 0x3, 0xb, 0xfffffffe, 0x73, 0x4, 0x9, 0x3d75, 0x4, 0xff, 0x9, 0x1, 0x3, 0xfffffff8, 0x1, 0x2, 0x80, 0x8, 0x2f1ee5b3, 0x1, 0xb, 0x5, 0x2, 0x2, 0x7, 0x1d7f, 0x910, 0xfffffff7, 0x0, 0x9, 0xfffffe01, 0x5515, 0x2, 0x4, 0x6, 0x8, 0x3c, 0x7, 0x81, 0x2, 0x9, 0x7, 0x6, 0x9, 0x3, 0x0, 0x0, 0x965d, 0x1, 0x100, 0x10001, 0x800, 0x802, 0x0, 0x4, 0x9, 0x4, 0xffff4240, 0x9, 0x1, 0x5, 0x9, 0x2, 0x4, 0xff, 0x8, 0x7, 0x9, 0x8, 0x1, 0x3, 0x4, 0x3, 0x6, 0x80000000, 0x100, 0x7ff, 0x8, 0xbcf, 0x195, 0x5, 0x74c, 0x5, 0x9, 0x62, 0xf, 0xfff, 0x5, 0x4, 0x1, 0x2, 0x2, 0x9, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0xbf, 0x8, 0xffff0000, {0x9, 0x2, 0x1000, 0x1000, 0x6, 0x4b}, {0x7, 0x0, 0xaa18, 0x0, 0x100, 0x9}, 0x4, 0x9, 0x8}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff2ff6, 0x0, 0x7, 0x36, 0x101, {0x6, 0x2, 0x7, 0x101, 0x2}, {0x0, 0x2, 0x1, 0x8001, 0x4, 0x2}, 0x7ff, 0x80, 0xb080}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x100, 0x4, 0x9, 0x1, 0xffff, 0xffff7fff, 0xfffffffb, 0x9, 0x5, 0x3, 0x3, 0x3, 0x5e, 0x0, 0x5, 0xdc, 0xe, 0x7, 0xeb0, 0x9, 0x401, 0x8, 0x1ff, 0x81, 0x8, 0x4, 0x3, 0x2, 0x8, 0x1, 0x5, 0x2, 0x7f, 0x3a5, 0x9, 0x0, 0x7, 0x8001, 0x1, 0x1, 0x6, 0x8e1, 0x400, 0xfffffffc, 0x3, 0x5, 0x9cb1, 0x8001, 0x8, 0xfb5, 0xeb, 0xe67, 0x5, 0x2, 0x8, 0x1000, 0x4, 0x7ff, 0x0, 0xf, 0x2, 0xfffffffe, 0x0, 0xfffffce4, 0x4ccf, 0x0, 0xffff, 0xef1, 0x9, 0x1, 0x2, 0x27d6, 0x9, 0x1, 0xd, 0x5, 0x5, 0x9, 0x4, 0x6000, 0x6, 0x6, 0x4, 0x1ff, 0x800, 0x3, 0x5, 0x80000001, 0x8, 0x5, 0x4, 0x10, 0x2, 0x1, 0x72b14143, 0x0, 0xffff834c, 0x9, 0x7a, 0x8, 0x200, 0x8, 0x40, 0x0, 0x7, 0x1, 0x4, 0x2, 0x3000, 0xfd1, 0x1, 0x8000, 0x3, 0x1, 0x2, 0x1, 0x7, 0x2, 0x1, 0x1, 0x3fe3, 0x9, 0x8, 0x3f32, 0x0, 0x8, 0xfffffffd, 0x0, 0x9, 0xe, 0x80000001, 0x0, 0xa, 0x6, 0x400, 0xffff, 0x8, 0x5, 0xfffff001, 0x3ff, 0x7ff, 0x3, 0x0, 0x3, 0xff, 0x5, 0x8, 0x3, 0x7, 0x9, 0x787, 0x8123, 0x86a, 0x2, 0x3, 0x0, 0xdb, 0x101, 0x8, 0x1, 0x0, 0x22ba, 0xffffff9d, 0x7, 0x8, 0x5, 0x100, 0x9, 0x8, 0x4e, 0x4, 0x3, 0x5, 0x0, 0xee, 0x10001, 0x0, 0x145d, 0x10001, 0x80, 0xca, 0x4, 0x1, 0xf, 0x6, 0xb, 0x2, 0xe, 0x88e, 0x7, 0xd, 0x3, 0x3ff, 0xca3, 0x9, 0xe, 0x3, 0x9, 0x3ff, 0xfffffbff, 0x8, 0x3, 0xf80, 0x400, 0xd7600000, 0x10000, 0x3, 0x65abdb0b, 0x2, 0x8, 0x7, 0x3, 0xe, 0x0, 0x8, 0x7, 0x8001, 0x81b, 0x8000, 0x10db, 0xfffffffd, 0x0, 0x40, 0x383, 0x6, 0x6, 0x8, 0x400, 0x8, 0x8, 0x1, 0x0, 0x7, 0xe2, 0x6, 0x2, 0xe450, 0xe, 0x0, 0x6, 0xdf, 0x7ff, 0x6, 0x80, 0x9, 0x4, 0x8e, 0x200, 0x3, 0x4, 0xb470, 0x3, 0x10000, 0x400, 0x8000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x3, 0x3, 0xffff0000, 0x7, 0x5, 0x1, 0x8, 0x10001, 0x9, 0x10000, 0x4, 0x1, 0x200, 0x5b, 0x6, 0x3ff, 0xa, 0x9, 0x10, 0x800, 0x5, 0x4, 0x9a8, 0xf, 0x3, 0xf3, 0x0, 0x453cff11, 0x8, 0x9cf8, 0x9, 0x1, 0x4b, 0x4e1, 0x17, 0x7, 0xffff, 0xc, 0x58, 0xc, 0xffff, 0x2, 0x81, 0x80, 0x0, 0x3, 0x7, 0x6, 0x2, 0x6, 0x7, 0x265, 0x1, 0x6, 0x0, 0x0, 0x45, 0x5, 0x1af, 0x5, 0x2, 0x80000000, 0x1d, 0x5, 0x6cc, 0x0, 0xde, 0xffffffff, 0x81, 0x7ff, 0x81, 0x80, 0xecf, 0x10, 0x6, 0x80000000, 0x9, 0x7fff, 0x101, 0x5, 0x2, 0xfff, 0x2, 0x1, 0x5, 0x7fffffff, 0xa028, 0x3, 0x5, 0x7, 0xffffff91, 0xf4, 0xcaf2, 0x484, 0x5, 0xfffff000, 0xb580, 0x9d, 0x7, 0x5, 0xffffffff, 0x40, 0x4, 0xa, 0x401, 0x6, 0x400, 0x0, 0x4, 0x9, 0x5, 0x3, 0x75ab, 0x7, 0x0, 0x3, 0x5, 0x2, 0x0, 0x5, 0x7, 0x7, 0x9, 0x1, 0x5, 0x3, 0xc, 0x7f, 0x2, 0x1, 0xf0e, 0x6, 0x1e, 0x3, 0x3, 0x4, 0x7, 0x8, 0x8, 0x3, 0x1c0000, 0x8001, 0x4, 0x9, 0x28, 0x6, 0x8, 0x0, 0x9, 0x100, 0x0, 0x2, 0x0, 0x5dee860b, 0xd, 0x6, 0xff, 0xc35, 0x4, 0x100, 0xffffffff, 0x20000000, 0x7f, 0xfffffffa, 0x4, 0xfffffffe, 0x2, 0x2, 0x9, 0x7f, 0x4f3, 0x8, 0x1, 0x2, 0x6, 0x10000, 0x2788, 0x80000000, 0x2, 0xfffffffb, 0x100, 0x499c, 0x4, 0xfff, 0x5, 0x9, 0x8000, 0x0, 0x0, 0x8, 0xf3, 0x0, 0xa, 0x1, 0x0, 0xc, 0x4, 0x200, 0x2, 0x3, 0x8, 0x3, 0x34, 0x4, 0xffffce01, 0x6, 0x9, 0x7, 0xa, 0x1000, 0x0, 0xfffff80d, 0x7, 0xfe1, 0x80000000, 0x1, 0x3, 0x5c00, 0x80000001, 0x80000000, 0xf, 0x3, 0xe5, 0x37f753e3, 0x0, 0x8001, 0x7, 0x6, 0x2c, 0x6, 0xa, 0xfffffffb, 0x9, 0x6, 0x1, 0x9, 0x3ff, 0x3, 0x8, 0xffffffff, 0x796, 0xcd, 0xe, 0x62c1, 0xed3, 0x3ff, 0x9, 0x2, 0x5, 0x7ff, 0x19000, 0xa11, 0x3, 0x0, 0xfffffff9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x8001, 0x7fffffff, 0x4, {0x10, 0x2, 0xb3f, 0xd, 0x4}, {0x40, 0x1, 0x1, 0x81, 0x4, 0x6}, 0x9, 0xfffffffe, 0xe}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x8, 0xa, 0x1, 0xffff0d42, 0x2, 0x80000000, 0x596, 0x9, 0x3, 0x1, 0x7fffffff, 0x6, 0x4, 0x6, 0x5, 0x4, 0x40, 0xd734, 0x3, 0x4203, 0xff, 0x10000, 0x9e8, 0x4, 0xe31, 0x9, 0x2, 0x6, 0x7f, 0x7, 0xa878, 0x2, 0xd0, 0x4, 0x8, 0x6, 0xfffffffc, 0x0, 0x400, 0x0, 0x0, 0x1, 0x2, 0x2ba, 0x1, 0x1, 0x7, 0x8, 0x1, 0x0, 0x401, 0x0, 0x9, 0x9, 0x3, 0x1, 0x5, 0x4, 0xa, 0x9, 0x2, 0x8001, 0x0, 0x1, 0x8, 0x4, 0x80000000, 0x2, 0x63a, 0x3, 0x7, 0x6, 0x8, 0x5, 0x6, 0x1, 0x6, 0xb, 0xf, 0x45ab, 0x6, 0xa8f, 0x7, 0x6, 0x7fff, 0x6, 0x1, 0x5, 0x69d6, 0x6, 0x8, 0x4, 0x0, 0x8, 0x9, 0x1ff, 0x9, 0x3, 0x4, 0xb, 0xabe, 0x2, 0x4, 0x8001, 0x7, 0xab3, 0x5, 0x2, 0xffff, 0x5, 0x9, 0x4, 0x4, 0x6, 0xa, 0xc0de, 0x8, 0x4, 0x7, 0x7f, 0x5, 0x0, 0x9, 0x2, 0x10000, 0x1, 0xe2, 0x300000, 0x1000, 0x9, 0x80000000, 0x0, 0x7, 0x8, 0x0, 0x2, 0x7ff, 0x7, 0x6, 0x4, 0x1000, 0x5, 0x9, 0x5, 0x5a75, 0x7, 0x4, 0x4, 0xfff, 0x7, 0x15a, 0x5, 0xd8c, 0x7, 0x2, 0x759, 0x1, 0x8, 0x7fbd, 0x18000000, 0xfffffffa, 0x9, 0x4dfe, 0x10000, 0x9, 0x64d, 0x6, 0x4, 0x3, 0x5, 0x8, 0x0, 0x4, 0x2, 0xfbb, 0xfffffffb, 0x6, 0x18000000, 0x8, 0x89, 0x8514, 0x512f8d8a, 0x0, 0xa99, 0xffff, 0x9, 0x67, 0xfff, 0xeca3, 0x3, 0x92, 0x8001, 0x7, 0x33244850, 0x6, 0x3, 0x53, 0xffffffff, 0x0, 0x6, 0x7, 0x600000, 0x7d59, 0x2, 0xc211, 0x9, 0x7, 0x2, 0x3000000, 0x4, 0x6, 0x7, 0xb891, 0x0, 0x1, 0x7, 0x0, 0x4, 0x400, 0x7, 0x9, 0xd0000000, 0x1, 0xfffffffd, 0x9, 0xd62, 0x1ff, 0x6, 0x9d5, 0x3, 0x8, 0x1, 0x6, 0xf2b, 0x400, 0x6, 0x9, 0xfb, 0x10001, 0x1, 0x4, 0x9, 0x100, 0x101, 0x6, 0xaf, 0x2, 0x5, 0x2, 0x6, 0x3, 0x4, 0x400, 0xdb81, 0xfffffffc]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x1000, 0x0, 0x0, 0x9, 0xa, 0xfffffff7, 0xfffff28a, 0x800, 0x9, 0x8, 0x4f, 0x4, 0x8, 0x0, 0x9, 0x5, 0x2402, 0x7fffffff, 0x3, 0x22, 0x6, 0x3, 0xb, 0x5, 0xfffff85d, 0x2, 0x10, 0x7fffffff, 0x80000000, 0x0, 0x3, 0xc3f, 0x0, 0xfffffffe, 0x96c, 0x0, 0x2, 0x3af545d8, 0x54, 0x6, 0x3, 0x200, 0x3, 0x5, 0x25, 0xfffffffd, 0xfffffffd, 0x7, 0x7, 0x96, 0x9, 0x80, 0x8, 0x5c, 0x2, 0x8, 0x36ee, 0x2, 0x7fffffff, 0x1, 0x9, 0x5, 0x0, 0x9, 0x9, 0x5, 0x6, 0x8, 0x4f72, 0x5, 0x4, 0x7, 0x0, 0x3ff, 0x9, 0x7, 0x401, 0x5, 0xe0000000, 0xe, 0xb, 0x4, 0x8, 0x800, 0x2, 0x3f6, 0x27b, 0x9, 0x9, 0x8, 0x2, 0x804ad7b, 0xc8, 0x0, 0x7ff, 0x5, 0x2, 0x3, 0x4, 0x80000001, 0x4, 0x1ff, 0x3, 0x3, 0x9000, 0x0, 0x3ff, 0xd, 0x5, 0x6, 0x23e0, 0x5, 0x5, 0x7, 0x5, 0xfffffff8, 0x3, 0x1, 0x9, 0x400, 0x9, 0x42, 0xfffffffd, 0xc97, 0x7, 0x3, 0x1365, 0x2, 0x397, 0x5, 0x2, 0x9, 0x3db, 0x766, 0x3, 0x7, 0x0, 0x5, 0x1000, 0x9, 0x8466, 0x28, 0x6, 0x100, 0x5c0a130b, 0x5, 0x0, 0x10, 0x8, 0xd174, 0x9, 0x3779, 0x0, 0xffffffff, 0xc9b, 0xff, 0x8, 0xffffffff, 0x3, 0x0, 0x8, 0x9, 0xc0, 0x3, 0x6, 0xffffff80, 0x10000, 0x4, 0x8, 0x9, 0x9, 0x2, 0x8, 0x9, 0x7, 0x5, 0x4, 0x1722, 0x2027, 0x9, 0x800, 0x159, 0x80000000, 0x21, 0x10000, 0x1, 0x0, 0x5, 0xd, 0xfffffff9, 0x1ff, 0x7, 0x9, 0x8, 0xc, 0x8, 0xbf14, 0x6, 0x6, 0x5, 0x2264, 0x4, 0x8, 0x8, 0x6, 0x13a, 0x2, 0xb, 0x4, 0x2, 0xbc5, 0x40, 0x9, 0xdf90, 0x6, 0x6, 0x0, 0xd9, 0xa7, 0x8, 0x5, 0xb9, 0x80, 0x1000, 0xa7, 0x2, 0x7, 0x400, 0x3, 0xd40, 0x27, 0x4040, 0x0, 0x3, 0x1, 0x0, 0x1, 0x5, 0x8, 0xdf, 0x2c, 0x4, 0x5, 0x3, 0x8, 0x2, 0x4, 0x0, 0x2, 0x8, 0x9, 0x0, 0x4, 0x2, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0xffffffff, 0x4, 0x81, 0x3bfa, 0x18, 0x2, 0x2, 0x7, 0x0, 0x80000000, 0xb1, 0x20004, 0x0, 0x5, 0x0, 0x7, 0x3a, 0x7ff, 0x9, 0x5, 0x1ff, 0x1000, 0x3, 0x0, 0x5a2f, 0x401, 0x4, 0x7, 0x3e, 0x2, 0x5, 0xc, 0x80000, 0x5, 0x290, 0x37a4, 0x1, 0x401, 0x0, 0x8, 0x9, 0x1, 0x0, 0xaaa, 0x41, 0xa, 0xd, 0x0, 0x1ff, 0xddd2, 0xffff8001, 0x80000001, 0x7, 0x8, 0x9, 0x2, 0x1, 0x4e4ef336, 0x56d, 0x2, 0x1, 0x7, 0x10, 0x2, 0x3, 0x401, 0x5, 0xd, 0x753, 0x800, 0x3, 0xd, 0x1000, 0x2, 0xb5, 0x6, 0x7c7f166b, 0x2, 0x3, 0x7, 0x1, 0x1, 0x5, 0xfffffff9, 0x4f, 0x8, 0x9, 0xf, 0x10, 0x6, 0x1, 0x1, 0x8b, 0x6, 0x0, 0x4, 0x0, 0x1, 0x5, 0x2, 0x81, 0x8, 0x6, 0x400, 0x1, 0x7066f002, 0x3, 0x8, 0x100, 0x9, 0x0, 0x1, 0x3, 0x9, 0xf, 0x1, 0x9, 0x4f09, 0x5, 0x6, 0x74, 0x6, 0x101, 0x5d1, 0x81, 0x54, 0xc, 0xfff, 0x3800000, 0x1, 0x2, 0x88e3, 0x0, 0xdd0, 0x2, 0x9, 0x3a4, 0x0, 0xffffffff, 0xe, 0x2, 0x30, 0x2, 0x8, 0xc, 0xc0, 0xa, 0x6, 0xc, 0x7, 0x2, 0x7, 0x35, 0xcf, 0x9, 0x9, 0x400, 0xe, 0x10000, 0xfffffff9, 0x6, 0x2, 0x80000000, 0xe8b, 0x5, 0x48, 0x3, 0x1, 0xedd, 0xa, 0x9, 0x3, 0x2, 0x3, 0x2, 0xfffffff7, 0xd, 0x9, 0x1, 0x401, 0x371009d8, 0x80, 0xb33, 0x0, 0x6, 0x8290, 0x8, 0x2, 0x8, 0xfffffffc, 0x9, 0xd22c, 0x5, 0x5, 0x2, 0x0, 0x4, 0x7f, 0xc8ab, 0x7, 0x5, 0x0, 0x1, 0x5, 0x8, 0x8001, 0x2, 0x1, 0x6, 0xb, 0x2, 0x0, 0x6, 0x2, 0x2, 0xa, 0xc0f, 0x3, 0x9, 0x10001, 0xad, 0xfffffffa, 0x1, 0x6, 0x769, 0x1000, 0x2, 0x2, 0x4, 0x400, 0x87, 0x3, 0x1a, 0x2, 0x4, 0x1, 0x6, 0xbed, 0x7fff, 0x10001, 0x6, 0x10, 0xe, 0xff, 0x6, 0x7f, 0x2, 0x6, 0x6, 0x100, 0x6, 0x40000000, 0x70bc, 0xffffffff, 0x3e]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]]}, {0x28, 0x6, "faeec1853aaeb2f5f1702ab29d46388f1f946207e21330127c2e04d9e762f9f4729409b0"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_pedit={0xfd8, 0xb, 0x0, 0x0, {{0xa}, {0xf14, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xf10, 0x2, {{{0x1, 0x4, 0x4, 0x0, 0x2}, 0x6, 0x9, [{0x7, 0x2, 0x9, 0x357, 0x3, 0x7}, {0xc8b, 0x200, 0x9, 0x4, 0x4, 0xfffffffe}, {0x3, 0x7, 0x5, 0xffff0001, 0xfffffff8, 0xd00}, {0x0, 0x4, 0x5, 0x80000000, 0x1, 0x2}, {0x7, 0x8, 0x0, 0x7, 0x8001, 0x5}, {0x1, 0x7ff, 0x5, 0x6, 0xf9, 0x7}, {0x0, 0x2, 0xd6, 0x2, 0x4, 0x3}, {0x6, 0x7f, 0x1800000, 0x313, 0x101, 0x786eb8cf}, {0x1000, 0x1d, 0x6, 0x5, 0xfffffff1}, {0x4, 0x3, 0xf, 0x9, 0x9, 0x80}]}, [{0x100, 0x9, 0x0, 0x0, 0x2, 0x6}, {0x6, 0x9, 0x7, 0x4, 0x0, 0xc8}, {0x6, 0x10001, 0x40, 0x46, 0xfffffffa, 0x4a}, {0xfd4a, 0x7, 0x7217, 0x1, 0x4, 0xf9ce}, {0x1, 0x1ff, 0xb, 0x40, 0x0, 0x7f}, {0x7, 0x2, 0x0, 0x7f, 0xbb14}, {0x5, 0x9, 0x5, 0x0, 0x5, 0x14}, {0x400, 0x77, 0x0, 0x3, 0x1, 0x87}, {0x5, 0x400, 0x3, 0x8, 0xb, 0x6}, {0x3, 0x2, 0x9, 0x2, 0x81, 0x1}, {0xfffff000, 0x1, 0x0, 0xffffffff, 0x40000, 0x7}, {0x6, 0x5, 0x7, 0x7fff, 0x9b, 0x9}, {0x0, 0xffff8000, 0x81, 0x463, 0x200, 0x5}, {0x7, 0xa, 0x4, 0x4, 0x3, 0x1}, {0xffff, 0x6, 0x80000001, 0x7f, 0x2, 0x3d}, {0x1, 0xffff, 0x1, 0xdaa3, 0x5, 0x80}, {0x8, 0x9e, 0x1, 0x5, 0x2, 0x10001}, {0x1, 0x0, 0x3, 0x400, 0x1, 0x4}, {0x98e, 0x60, 0x0, 0x1, 0x8, 0x9}, {0x0, 0x7, 0x8, 0x5, 0x9, 0x8000}, {0xfffffffd, 0x2, 0x8, 0x3b3a, 0xb, 0x8001000}, {0x0, 0x5, 0x6, 0x6, 0x5, 0x8}, {0x5, 0x1bc7, 0x5, 0x1, 0xfffffffb, 0x1}, {0x5, 0x3ff, 0x5, 0xb, 0x80, 0xfffffffc}, {0x7fff, 0xd, 0x80, 0x2, 0xf, 0xffff}, {0x100, 0x0, 0xdda, 0x6, 0xf, 0x6}, {0x0, 0xccf, 0x6a69, 0x5, 0x0, 0x1}, {0x8, 0x1000, 0x3, 0x11, 0xce9a, 0x9}, {0x9, 0x341, 0x5, 0x5, 0x450e, 0x1000}, {0x3, 0x200, 0x6, 0xe, 0x1, 0x2}, {0x4, 0x6830, 0x7, 0x3, 0x0, 0x4}, {0x10000, 0xfffffffc, 0x6, 0x9, 0x2, 0x1}, {0x3, 0xe, 0x8, 0x66, 0xa, 0x9}, {0xf03, 0x74, 0x379, 0x7ff, 0x6, 0x1}, {0x1, 0xfffffffb, 0x9, 0xd54d, 0x6, 0x9}, {0xffff0001, 0x8001, 0x6eb0, 0x6, 0x80, 0x2}, {0x0, 0x100, 0xe, 0x6, 0xffffff6e, 0x1}, {0xff, 0x9, 0xc0000000, 0x1, 0x2, 0x1000}, {0x5, 0x3ff, 0x2, 0x2, 0x8000, 0x3}, {0x1, 0xa, 0x4, 0x5570, 0x5, 0x6}, {0x4, 0x3, 0x7, 0x0, 0x8, 0xf}, {0xd, 0x8, 0x0, 0x2, 0x6, 0x1}, {0x88, 0x7, 0x4e21, 0x1, 0x5, 0x7fffffff}, {0x80000000, 0xb, 0xed2, 0x401, 0x3, 0x7fff}, {0xfffffffb, 0x400, 0x701, 0x10000, 0xca, 0x80000001}, {0x5, 0x2a812615, 0x4e, 0x8210, 0x5, 0x580b}, {0x9, 0x2, 0x4, 0x5, 0x7, 0x401}, {0x66, 0xb, 0x7fff, 0xef, 0x7fffffff, 0x3}, {0x4, 0x6, 0xeac7, 0xffff7fff, 0x8, 0x64fa}, {0x9, 0xe1f, 0x80000001, 0x7bec, 0x80000001, 0xf9}, {0x40, 0x3, 0x4, 0x4, 0x6, 0x7}, {0x2, 0x80000000, 0x9, 0xa7, 0x6, 0x401}, {0x46, 0x7, 0x401, 0x6, 0xfffffcca, 0x4}, {0x8000, 0x0, 0x6, 0x7c, 0x7}, {0x4, 0x4, 0xfffffffe, 0x49d, 0x0, 0x2}, {0xc, 0x5, 0x6, 0x6, 0xdbfe, 0xd}, {0x8, 0x629, 0x3df0, 0xff, 0xab, 0x6}, {0xdb5, 0x7, 0x7fffffff, 0x800, 0x40400000, 0x7}, {0x1000, 0x385ed70d, 0x1, 0x5, 0xfffffd5d, 0x5}, {0x5, 0x8, 0xfffffc00, 0xfffffff9, 0x7, 0x200}, {0x1, 0x5, 0x9, 0x3, 0x3, 0x4}, {0x3, 0x10, 0x4, 0x3, 0x9aee, 0x7}, {0xffff, 0x4, 0x16, 0x1, 0xa, 0x9}, {0x5, 0x5, 0x6, 0x1, 0x5, 0x1}, {0x0, 0x9, 0x5e2, 0x7, 0xc0000, 0x400}, {0x2, 0x71f980c8, 0x1000, 0x8, 0xa, 0x8}, {0x1, 0xfffffff8, 0xa, 0xff, 0x5c, 0xffffffff}, {0x44, 0x8000, 0x3, 0x100, 0x7f, 0x8000}, {0xffff, 0x2c8f, 0x0, 0x9, 0x7fff}, {0x7fffffff, 0x5, 0x6, 0x3, 0x5847, 0x7f}, {0x5, 0x7fff, 0x5, 0x0, 0xba3, 0x3}, {0x2, 0x1, 0x8, 0x401, 0x4, 0x9}, {0x5, 0x1d3, 0x0, 0x7ff, 0x8, 0x80000000}, {0x0, 0x3, 0xdb, 0x1000, 0x0, 0xc}, {0x4, 0x7, 0x1, 0xd, 0x8001, 0xd}, {0x8, 0x3, 0x0, 0x3, 0x2}, {0x7c, 0x2896, 0x2, 0x1, 0x80, 0xfff}, {0x8, 0x7fffffff, 0x6, 0xffffffff, 0x1, 0x8}, {0x6, 0x6, 0xb, 0x200, 0x2, 0x6}, {0x10000, 0x8f09, 0x11, 0x3, 0xfffffffa, 0x6}, {0x3, 0xfffffffe, 0x1, 0x9, 0x2, 0x8}, {0x2eca, 0x27, 0x6, 0x1000, 0x0, 0x5}, {0x0, 0x59f9, 0x3ff, 0x0, 0x1, 0xbc}, {0x9, 0x0, 0x6, 0x3f77c39f, 0x1, 0x3}, {0x5, 0x0, 0x8, 0x8, 0x3, 0x6}, {0x0, 0x7, 0x1, 0x66, 0x8, 0x2}, {0x5, 0x2, 0x40, 0x9, 0x3, 0x3}, {0xd, 0x8, 0x200, 0x4, 0x1, 0x140}, {0x401, 0xa5, 0x1, 0x5, 0x3, 0x1}, {0x9, 0xffff, 0x4, 0x6, 0x8, 0xfffffffa}, {0x439, 0xc, 0x3, 0x436, 0x3, 0xfd}, {0x1, 0x3, 0x0, 0x2, 0x7fff, 0x7f}, {0x10000, 0x0, 0x6, 0x200, 0x6, 0x5}, {0x7, 0x1, 0x6, 0x2a, 0x4, 0x7}, {0xe846, 0x1, 0x5, 0x65, 0x5, 0x800}, {0xa, 0x8000, 0x3, 0xa88, 0x800, 0xb7a}, {0x2, 0x5d, 0x1, 0x3, 0x100}, {0x1, 0x6, 0xc, 0x10001, 0x3, 0x10001}, {0xfffffff7, 0x6, 0xa, 0xfffffffa, 0x3, 0x4}, {0x14, 0xa1, 0x1, 0x1, 0x3, 0x95b}, {0x5, 0x89fd, 0xff, 0x8, 0x3}, {0x7, 0x8, 0xedb2, 0x8, 0x1, 0x7d}, {0xffff6a2d, 0x2, 0xb7c, 0xf, 0x9, 0x6}, {0x8, 0xe57, 0xb, 0xe0d, 0x1, 0x7}, {0xffff, 0x81, 0xb33, 0x2, 0x8001, 0xa}, {0x4, 0x9, 0xf2, 0x2, 0x3, 0x1}, {0x4, 0x8, 0x9, 0x804, 0x61d0f94a, 0x7}, {0x100, 0x80, 0x6, 0x10001, 0x4, 0x6}, {0x0, 0x0, 0x6, 0xfffffeff, 0x8000, 0x3}, {0x40, 0x1, 0x4, 0xf7, 0x8, 0x400}, {0x6, 0x0, 0x101, 0x1, 0x7, 0xfdd9}, {0xefe, 0xffff, 0x8, 0x5, 0x8, 0x5}, {0x2, 0x6, 0x1, 0x0, 0x10, 0x6dfe}, {0xa, 0x5, 0x7, 0x544, 0x3, 0x7064}, {0x4, 0x800, 0xa, 0x100, 0x800, 0xffffffff}, {0xfffffffa, 0x7, 0x7, 0x2, 0x864, 0x3}, {0x7, 0x5, 0x621, 0x6, 0x6, 0x8000}, {0xb, 0x1, 0x1, 0xf26, 0x9, 0x9}, {0x3, 0x2a3, 0x1, 0x0, 0x7, 0x61}, {0x4, 0x0, 0x6257, 0xffd, 0x7, 0x74}, {0x1102, 0xfffffffb, 0x0, 0x5, 0xf697, 0x8}, {0x4, 0x128e, 0x3, 0x8, 0xffffffff, 0x8fe5}, {0x40, 0x6000, 0xd7c0, 0x4d7, 0x2, 0x1}, {0x6, 0x4bf, 0x1, 0x0, 0x6, 0x4}, {0x5, 0x9c, 0x4, 0x0, 0x6, 0x3}, {0x8, 0xa5d, 0x200, 0x1000, 0x4f0}, {0xfffffff6, 0xe, 0x0, 0x80000001, 0x1, 0x2}, {0x5, 0x6, 0x4, 0xfffffffa, 0x4800, 0x101}], [{}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {}, {}, {0x1}, {0x4}, {0x1}, {0x4, 0x2}, {0x6, 0x1}, {0x4}, {0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {}, {}, {0x4, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {0x3}, {0x5}, {0x1}, {0x5}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x4}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x5}, {0x3}, {}, {0x4}, {0x5, 0x2}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {}, {0x1, 0x1}, {}, {}, {}, {0x2, 0x1}, {0x3b0af444c0d0a083, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {}, {}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x7}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x9b, 0x6, "e0938e10322352d8e4ae9a651a26c38998250e582cfaf457b3bc29a3086230fa78b92905024424a40c6c69f6336f5094c1d38aa7e83301df6b1a3e54340ae61b8e2a396bd3f1b090c3dd63e37242d9fbacb1e65ec5a8a9778c7b6f64b1cbfb19e7d92a99bad6ad17e3aa74235df2ae8f43ef2fd2d10cbde28d1f38a8d0e4170b418a0c875c0f03a24442d6c2b1a8af1d264838e6a7ea3f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x4}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x6, 0x10}}, @TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0xa}}, @TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0xffff05f4}, @filter_kind_options=@f_flow={{0x9}, {0x488, 0x2, [@TCA_FLOW_EMATCHES={0x464, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x394, 0x2, 0x0, 0x1, [@TCF_EM_META={0x4c, 0x2, 0x0, 0x0, {{0x80, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="04d39bbd70c52e92", @TCF_META_TYPE_VAR="5e8d0e", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="5bf02615b7a58075aefe"]}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR="ff504b592ae5", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="bb"]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x5}, {0xa6e, 0x5, 0x4, 0x200}}}, @TCF_EM_META={0x74, 0x1, 0x0, 0x0, {{0x8}, [@TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="0644b4f874e8", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x24, 0x3, [@TCF_META_TYPE_VAR="19899f5b57cf01338d", @TCF_META_TYPE_VAR="8277603d", @TCF_META_TYPE_VAR="d7", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="98a5a81bd5d7d4", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="ba2419"]}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_VAR="8d", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="64a3a9a00efd", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x7}, {0x5, 0x82, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x9, 0x1}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_IPT={0x254, 0x1, 0x0, 0x0, {{0x6, 0x9, 0xd}, [@TCA_EM_IPT_MATCH_DATA={0xfa, 0x5, "fd734fffe7bb121c690678ebc4e5352c5d0d5a407e23863aaf5e29628323af5d8db5c880ae86dcfedaa943ceda8230661634d628cb04b572683b3fb9d2ea0885aa7c77a0370f8d9c51704745962c464d6fddd56bbb44c9543187027d6e960aac7ba61b8d1af75fea829e713a42d8b82bbaa9cd3815b4e4aa376b582c8174cfa4f4702f065311e7617856c52a1e37d04ed764461c548762725daeceeb2f3cc89181d48ef95edda60ed053b3535b24fd5dfaf515f916a62c9865babde2761f1f6a8b59796516b88913240eed296834bf70a9b2a48a8ad1b673b3f40e7e93f36f54af2cc6f079cba535b691fbfd388118f0ab12bccace0a"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x12, 0x5, "4b60fd76926e347219015965425a"}, @TCA_EM_IPT_MATCH_DATA={0x9a, 0x5, "df4e7b549c7ee9fdfd28c544605927b37f8ae58578b73740cee9aabf6fc05c0f374d605b1b43204a3972416b5e576859891dd74b8352cc94e1aefbedde65b11493eb849861678a3806a292344f948ab5ee481aeef7e460df0a1cc88ec3bd5d0e4a21b09c1709a6122629a2365c44bc11de8ab74431fe5ec6acfd11978ee23aa0f0c5498a69ebf8216da72a7001d3ae952c51c4458a2c"}, @TCA_EM_IPT_MATCH_DATA={0x80, 0x5, "13c418f6ea988f4e96dbf607f44139f047f38773f6a09e31ceed7a3df76a5c013aea3ada8fa4b3d5e755d6543b4f757bccd5af1cdf677e2dce124ec7a848de72213d937d5232efa87aa398e2f9d963e1bf07de1b16f6774c86675295bef3af93b541075b1eba72cf27720df94dc6a1e3ceb4232a715c252235948fdd"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x4c, 0x3, 0x0, 0x0, {{0xd180, 0x4, 0x1c}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x5}, {0x30f2, 0x14, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x6}, {0x8, 0x5, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x53, 0x2}, {0x10, 0x6, 0x1}}}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="b74fab01", @TCF_META_TYPE_VAR="2386812684d3b4"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2b}, {0x6, 0x80}}}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3a51, 0x7, 0x9}, {{0x6, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x4}, {0x7fff, 0x1, 0x1a9, 0x5}}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0x80, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0x6}, {0x2, 0x4, 0x5, 0x5}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x34, 0x2, 0x7e3}, {0x2, 0x9, 0x0, "b9aee12ec3297d27a7"}}}, @TCF_EM_META={0x38, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_VAR='hl', @TCF_META_TYPE_VAR="c1817d", @TCF_META_TYPE_VAR="ab", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="ef2ae83890f6a9049e4e", @TCF_META_TYPE_VAR="cf1f268f075f9d39e52c", @TCF_META_TYPE_VAR="4b3e0495c8f3", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0xac}, {0xee, 0x3ff, 0x0, 0x6, 0xf}}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x6}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x5e57}]}}]}, 0x44ac}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r11 = openat$sndtimer(0xffffff9c, &(0x7f00000000c0), 0x601)
ioctl$SNDRV_TIMER_IOCTL_START(r11, 0x54a0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYRES32=r10, @ANYRES32=r12, @ANYBLOB="050018013b02000008009f000a00000008002600b409"], 0x34}}, 0x0)

5.324391508s ago: executing program 1 (id=2215):
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0xc7d02, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x64, 0x2, [@TCA_BASIC_ACT={0x60, 0x3, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xe42ef}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x204, 0xffff, 0x6, 0x2, 0x6}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x4)
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x8, {0x0, 0x22, 0x0, {0x0, 0x10000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x4000, 0x0, r2, r3, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r10 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
write$char_usb(r10, 0x0, 0x0)
fsync(r10)
r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
syz_usb_control_io(r11, 0x0, 0x0)
ioctl$int_in(r10, 0x5452, &(0x7f0000000400)=0x4010000)
syz_usb_control_io$uac1(r11, 0x0, &(0x7f0000000b80)={0x24, &(0x7f0000000980)={0x0, 0x12, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r12 = eventfd2(0x0, 0x80800)
read$eventfd(r12, &(0x7f0000000080), 0x8)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb7, 0x85, 0xca, 0x10, 0x781, 0x100, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0xa5, 0x0, 0x0, 0xbb, 0x8, 0x72, 0x3}}]}}]}}, 0x0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12011003000000406d0432c5400001020301df2ef084bc090224000101052002090400000103010199092106000001223a0109058103ff03045492"], &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x80, 0x28, 0x0, 0x40, 0x3}, 0x6b, &(0x7f0000000080)={0x5, 0xf, 0x6b, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x8a, 0x1, 0x2af8, 0xf00, 0x5, [0xff410f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "f5a75cd4b0b0c4f7c1cf9c1658171a33"}, @ptm_cap={0x3}, @generic={0x3c, 0x10, 0xb, "577f4edacbdd8b4f5805f2bbfa9667c6a606c647a55dbda1dd1e96bf75e3bec2866d5e887e7170ffad3bcf01d8af24bf34e733674b5694a11c"}]}, 0x6, [{0x33, &(0x7f0000000100)=@string={0x33, 0x3, "f1e968b6214ae186485056379bbe0c51e6676642050769afc02a994f51cf1f0edbfba383937e67df3eb893ee29a3b8dd26"}}, {0x9, &(0x7f0000000140)=@string={0x9, 0x3, "5b6a17fea129da"}}, {0xad, &(0x7f0000000180)=@string={0xad, 0x3, "2658a78a49dc7477fc3f59fb1c20a3b2d41465a8091b204a6bfea1b3720b576ed59eb3e3c4a8bbc10cebff71222919ba886c19c8d5f03a1a301b5f979af2c6f5ab6828e8ce36f81d37f6d5b53578a719a549814602e5dbcc60caefbbd82758d92629a3eefddffc1e0b496c57be1e8f1e2faf2be66ff8cac779fbff8a9f92f2f5276a6d60f5dab315628174301d8496b983b6397653297ce3d5dc5a0da39d34bbdb9f7dd5125f558b47a14c"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc8f8}}, {0x2b, &(0x7f0000000280)=@string={0x2b, 0x3, "674def6e90fb76e45a88960cd947ed0f7d27f888d83d759aad166055ec731d73e3ed15b20e3d3f3d0d"}}, {0x99, &(0x7f00000002c0)=@string={0x99, 0x3, "a728eeae652226cc32af115dd6f4c926054901b24b6aab09ac20d9f9dc43e8acac8d0a6e11796cce816a60d2358990f61475486c39637c008b8bbf0f4a6d5d37ecbfa8c43b2089669471e5ada655e0de12869857651973283dd0020cee29f106e848a2c2984badca6df44cc299c46783fb01a567ac7e73c819ca7012cb71141ac0eefadb032bfb07b2fcb2b195172f9dc73320bf34a744"}}]})

5.247698922s ago: executing program 3 (id=2216):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811)
syz_open_dev$cec(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000003c0), 0x0, 0x44800)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', <r3=>0x0, 0x4, 0x5, 0x4, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x7, 0x4}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180006000000000000000000ff0f00009f60010031a50e50b3fa33cf2295a5040000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
lseek(0xffffffffffffffff, 0x5, 0x2)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
read(r6, &(0x7f0000000040)=""/148, 0xffffff96)

5.039831634s ago: executing program 4 (id=2217):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000600))
io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10)
io_uring_enter(r6, 0x3516, 0xf400, 0x0, 0x0, 0x0)
openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x400600, 0x0)
ioctl$TCSETAF(r3, 0x5432, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2810, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}})
openat$ptmx(0xffffff9c, &(0x7f0000000080), 0x840, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x0, 0x80000004, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0)

4.951415953s ago: executing program 2 (id=2218):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}})
ioctl$LOOP_SET_STATUS64(r0, 0x40101286, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4000000000000001, 0xfffffffffffffffc, 0x0, 0x0, 0x21, 0x9, "43443a7a168c8ad271d16eb2123b3b1bd68150cf090004a3a3026f60c75585bee41b9ac462bacb1c9522c014cc874a103a4a7408000000009dd38cb4a000", "e2e6b11135feb7aee56532ffcca6b3882519260888c0a077e7d74ea96f8488aad5f38476d7ea2c8948212e81691cf4daf180c193dd28f6fa07396ca098ceeaab", "9ec7409f2c61d43e70aa034b860bf9285f39fedfbcfdb3eaeb22bb8cf712e37f", [0x9, 0x8000000003ff]})

4.247120435s ago: executing program 0 (id=2219):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x1, 0x80802, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
dup(r6)
syz_usb_connect(0x0, 0x24, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0xd4, 0x26, 0x7a, 0x10, 0x1004, 0x61aa, 0x4f75, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
syz_usb_connect$uac1(0x0, 0xaa, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x8, 0x30, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x2, 0x6c, 0x5}, @as_header={0x7, 0x24, 0x1, 0x29, 0x2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xfb, 0x5, 0xef, {0x7, 0x25, 0x1, 0x81, 0x2, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x2, 0x3, 0xb, "9c3722c40930"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x74f4, 0x5, 0x4, "36b97ec7d2587d5c"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0x6, 0x79, "9187ad"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x3, 0xf3, {0x7, 0x25, 0x1, 0x3, 0x4e, 0x3ff}}}}}}}]}}, 0x0)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$vhost_msg_v2(r7, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
vmsplice(r9, 0x0, 0x0, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d40)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21011, 0x15001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0xff}]}}}]}, 0x44}}, 0x24040084)
write$vhost_msg_v2(r7, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f00000102c0)=""/50, 0x32, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r7, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000440)=""/127, 0x7f, 0x0, 0x2, 0x3}}, 0x48)

3.177345964s ago: executing program 3 (id=2220):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00')
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
poll(&(0x7f0000000240)=[{r0, 0x250}], 0x1, 0x478a)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000001d00"/28], 0x50)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0xc8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {0xa, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x7, 0x7, 0x10, 0x2, 0x6, 0x7f, 0x3}}, {0xa, 0x2, [0x3, 0x7, 0x9]}}, {{0x1c, 0x1, {0x3, 0xfc, 0x4, 0x6, 0x0, 0x34, 0xac, 0x2}}, {0x8, 0x2, [0x9, 0x7f]}}, {{0x1c, 0x1, {0x3, 0x7, 0x203, 0x0, 0x0, 0x7, 0xf, 0x8}}, {0x14, 0x2, [0x7ff, 0x8001, 0xf, 0x4b0, 0x7, 0x2, 0x7, 0x4400]}}, {{0x1c, 0x1, {0xf, 0xa7, 0x1, 0x9, 0x2, 0xd90e, 0x2, 0x1}}, {0x6, 0x2, [0x808]}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24004040}, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000000f", @ANYRES8=r11], 0x3c}}, 0x10)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {0xb}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000003, 0x11, r3, 0x69205000)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x40}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x54}}, 0x1)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_sctp(0x2, 0x5, 0x84)
pipe(&(0x7f0000000040))
r14 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r14], 0x20}}, 0x0)

2.843293719s ago: executing program 4 (id=2221):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000180))
r5 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x2)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x0)
ftruncate(r6, 0x2007ffd)
sendfile(r4, r5, 0x0, 0x1000a3)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r0, 0x0, 0x6)
fchdir(r7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000000140)={'dummy0\x00', {0x2, 0x0, @initdev}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)

2.62940247s ago: executing program 1 (id=2222):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6578, 0x400009})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x100000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r3, &(0x7f0000000800)=[{&(0x7f00000000c0)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000600)="d5", 0x1}], 0x1, &(0x7f0000000840)=[@sndinfo={0x1c, 0x84, 0x2, {0x6, 0x0, 0xffffffff, 0x8}}, @prinfo={0x14, 0x84, 0x5, {0x30, 0xe}}], 0x30, 0x40}], 0x1, 0x4008801)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0xa6e, 0xb46, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x8)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@typedef={0x5, 0x0, 0x0, 0x8, 0x4}, @struct={0x8, 0x1, 0x0, 0x4, 0x0, 0x39df, [{0x7, 0x1, 0xff}]}, @typedef={0x1, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30, 0x30, 0x2e]}}, &(0x7f0000000380), 0x4d, 0x0, 0x0, 0x200, 0x10000}, 0x28)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000900)}, 0x1c)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x19, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0xab}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x7}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000540)='syzkaller\x00', 0xc, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x5, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r9=>r2, {0x6}}, './file0\x00'})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r11, 0x6, &(0x7f00000006c0)={0x0, 0x1, 0xac1d})
fcntl$lock(r11, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x5})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x19}, [@jmp={0x5, 0x0, 0xc, 0x5, 0x0, 0x4, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @tail_call, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x29, &(0x7f0000000140)=""/41, 0x40f00, 0x50, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000400)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x3, 0x5, 0x7}, 0x10, 0xf749, r7, 0x0, &(0x7f0000000800)=[r8, r9, 0x1, r10, r11]}, 0x94)
syslog(0x3, &(0x7f0000000200)=""/90, 0x5a)

2.513404249s ago: executing program 2 (id=2223):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, 0x0)
preadv(r2, 0x0, 0x0, 0x80000001, 0x3f7a)
openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x402, 0x0)
pipe2$watch_queue(0x0, 0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8850)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
connect$inet(r3, &(0x7f00000001c0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10)
r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$apparmor_current(r5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0xa0, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_USERDATA={0x8c, 0x6, "2eec0df80064c8da38a7a451fb42a1246ae7fb598d707be2ca9ebd29bb99e92de84dec94b863f35fb76175f0e6ffc061612dbdfc7e91befbb59eb3ee0285126e02e09885e9a0eb66647943fe35a246e7114f88644f014e8b7e86ba8f65cfa6cbadca4558b37f9354d2a40e97e24929c12e681f72923df2be51f7b24cccd205b2816e87f174ffa832"}]}, @NFT_MSG_NEWSET={0x1a8, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x16c, 0x12, 0x0, 0x1, [{0x168, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x158, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x100, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x56, 0x1, "17d0ad4584693c34362683470afcffd7d41423ffe5a0c6bec82c65ad60216403970e31f51afa6dfd32c2c0799efd23f49a9124ad41a235ba18e612822275aa50725d98e408a315e4166e190e251fb59fb691"}, @NFTA_DATA_VALUE={0xa2, 0x1, "1072f3353de766d55722ad7df79c08a408ea7bae3c1947ae1c5a08ba316b14bd8fd7ccdf9eae29542a6cf357e908740467204de0d89d8e755b3d219585bf134b0d905c0bf9bcfa9ba0f21919464a752be043b0a583f8e2b0bc8f17996482cf735911c1580e47628b070f74231940a1e169b8aded6738cbdf2459cb2866f31b4955ccb8abe3affe7f89e9828d0936abc14a2ec21086eebc471c76afff5ce4"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_MASK={0x10, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_BITWISE_MASK={0x24, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xea}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x270}}, 0x20050800)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc)
fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xfff})
fcntl$lock(r7, 0x7, &(0x7f0000000040)={0x0, 0x0, 0xccd, 0x7})
fcntl$lock(r4, 0x7, &(0x7f0000000100)={0x0, 0x1, 0x9, 0x2})
unshare(0x20000400)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))

1.646994158s ago: executing program 3 (id=2224):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x15, 0x3, 0xfffffffe)
r1 = syz_io_uring_setup(0x3211, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000, 0x1fffffd}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd, 0x3, 0x0, 0x0, 0x2, 0x1})
io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000})
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7ffffffb, 0x400, 0x5, 0xd, 0x0, 0x6, 0x7}, 0x1c)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
recvmmsg$unix(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10000, 0x0)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x6, 0x7, 0x8, 0x6}, {0x7cbe, 0x5, 0x3e, 0x3}, {0x0, 0x4, 0x5, 0x2}]})
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x8)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e23, 0x80001, @local, 0x1}, 0x1c)
sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0)

447.091876ms ago: executing program 2 (id=2225):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="600200007d020000051f01030000000005c00000000008000000000000000000404100000000a0e5000005000000000000001b00046e6f6465767b65766f6f7e0545c60005080037d93a8b920000003300704a86cec602007dfa673effeb09b5351f5bde05"], 0x260)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001800010900000000000000000218000000000008000000000800010fd47400ac1414000800060002"], 0x2c}}, 0x0)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000001c0)={<r4=>0x0, 0x42, "60b565c17c468d16521c4112682d1c45bdab8286d26baa0e0d8e8dd8176b48073cd8d57f54815334c649460bc648e306665c4bcef0467f000ae8f1f99ded1ebb365d"}, &(0x7f0000000000)=0x4a)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={r4, @in6={{0xa, 0x4e21, 0xfffffff9, @empty, 0x6}}, 0x2, 0x5}, &(0x7f00000000c0)=0x88)
read$FUSE(r2, &(0x7f0000000740)={0x2020}, 0x2020)
ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000340), 0x11000)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async)
write$P9_RSTATu(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="600200007d020000051f01030000000005c00000000008000000000000000000404100000000a0e5000005000000000000001b00046e6f6465767b65766f6f7e0545c60005080037d93a8b920000003300704a86cec602007dfa673effeb09b5351f5bde05"], 0x260) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001800010900000000000000000218000000000008000000000800010fd47400ac1414000800060002"], 0x2c}}, 0x0) (async)
pipe(&(0x7f0000000080)) (async)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x42, "60b565c17c468d16521c4112682d1c45bdab8286d26baa0e0d8e8dd8176b48073cd8d57f54815334c649460bc648e306665c4bcef0467f000ae8f1f99ded1ebb365d"}, &(0x7f0000000000)=0x4a) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={r4, @in6={{0xa, 0x4e21, 0xfffffff9, @empty, 0x6}}, 0x2, 0x5}, &(0x7f00000000c0)=0x88) (async)
read$FUSE(r2, &(0x7f0000000740)={0x2020}, 0x2020) (async)
ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) (async)
write(r3, &(0x7f0000000340), 0x11000) (async)

109.190779ms ago: executing program 3 (id=2226):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x8, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc27}], 0x1c)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
getsockname$unix(r2, &(0x7f00000001c0)=@abs, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff})
r4 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0)
ioctl$VT_SETMODE(r4, 0x5602, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40046602, &(0x7f0000000040)=0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)

107.520537ms ago: executing program 1 (id=2236):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4622, 0x659, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x421630d3}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000001c0)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x68000)
fcntl$setstatus(r3, 0x4, 0x2000)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x427c2, 0x19e)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = getpid()
fcntl$setownex(r4, 0xf, &(0x7f0000000100)={0x2, r5})
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=<r6=>0x0)
fcntl$setown(0xffffffffffffffff, 0x8, r6)
sched_setscheduler(r6, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, 0x0)
r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x8, {0x80c, 0x1}, {0x45, 0x400}, @rumble={0xdc, 0x8}})
write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)

382.268µs ago: executing program 2 (id=2227):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202400, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r3 = syz_open_pts(0xffffffffffffffff, 0x141601)
fcntl$setstatus(r3, 0x4, 0x102800)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x582})
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x6, 0x0, 0x5, 0x0})
write$binfmt_script(r2, &(0x7f0000000180)={'#! ', './file0', [{0x20, '\x00'}, {0x20, 'R'}, {0x20, '\xff\xff'}, {0x20, 'a$:\xb0'}, {}, {0x20, ')&,\'].'}, {0x20, '\x00'}], 0xa, "69fc8ea639b3ce1b369771a911a3ca304a84ecd335a74a6a2a7b91467a20819384c314c7a1f9d4c3186554e1154254d0fa5fc7a4c80f6deae79c3b4968ddb3b34fb6604a"}, 0x65)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f00000000c0)=ANY=[], 0x1)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000200)={<r6=>0x0, @local, @local}, &(0x7f0000000040)=0xc)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x73, r6})
ioctl(r7, 0x8916, &(0x7f0000000000))

0s ago: executing program 4 (id=2228):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c0005800500194003"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x700, 0x1}, 0x24044040)

kernel console output (not intermixed with test programs):

2-1: Product: syz
[  691.641597][ T5865] m920x_read = error: -19
[  691.657450][ T5922] usb 2-1: Manufacturer: syz
[  691.672017][ T5922] usb 2-1: SerialNumber: syz
[  691.682581][ T5865] dvb-usb: error while querying for an remote control event.
[  691.716909][ T5922] usb 2-1: config 0 descriptor??
[  691.822357][    T9] usb 5-1: USB disconnect, device number 90
[  691.834307][ T5950] m920x_read = error: -19
[  691.839170][ T5950] dvb-usb: error while querying for an remote control event.
[  691.971943][ T5922] usb 2-1: bad CDC descriptors
[  692.021759][ T5950] m920x_read = error: -19
[  692.026569][ T5950] dvb-usb: error while querying for an remote control event.
[  692.059954][T12202] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  692.116050][T13701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1931'.
[  692.241705][ T5950] m920x_read = error: -19
[  692.246332][ T5950] dvb-usb: error while querying for an remote control event.
[  692.283963][T13663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  692.297610][T13663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  692.403908][T12202] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  692.418467][T12202] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  692.458166][T12202] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  692.481795][ T5865] m920x_read = error: -19
[  692.486709][ T5865] dvb-usb: error while querying for an remote control event.
[  692.512383][T12202] usb 4-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00
[  692.530539][T12202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.557516][T12202] usb 4-1: config 0 descriptor??
[  692.615335][ T5865] m920x_read = error: -19
[  692.619933][ T5865] dvb-usb: error while querying for an remote control event.
[  692.752626][ T5865] m920x_read = error: -19
[  692.804343][ T5865] dvb-usb: error while querying for an remote control event.
[  692.850474][T13751] fuse: Unknown parameter 'LrGk��&n��oup_id'
[  692.954537][ T5865] m920x_read = error: -19
[  692.959712][ T5865] dvb-usb: error while querying for an remote control event.
[  693.008661][T12202] thrustmaster 0003:044F:B323.0010: unknown main item tag 0x0
[  693.047990][T12202] thrustmaster 0003:044F:B323.0010: unknown main item tag 0x0
[  693.091671][ T5865] m920x_read = error: -19
[  693.096785][ T5865] dvb-usb: error while querying for an remote control event.
[  693.107586][T12202] thrustmaster 0003:044F:B323.0010: unknown main item tag 0x0
[  693.183278][T12202] thrustmaster 0003:044F:B323.0010: unknown main item tag 0x0
[  693.218838][T12202] thrustmaster 0003:044F:B323.0010: unknown main item tag 0x0
[  693.265379][ T5950] m920x_read = error: -19
[  693.270847][ T5950] dvb-usb: error while querying for an remote control event.
[  694.522771][ T5950] m920x_read = error: -19
[  694.527503][ T5950] dvb-usb: error while querying for an remote control event.
[  694.582916][T12202] thrustmaster 0003:044F:B323.0010: hidraw0: USB HID v0.00 Device [HID 044f:b323] on usb-dummy_hcd.3-1/input0
[  694.604682][T12202] thrustmaster 0003:044F:B323.0010: no inputs found
[  694.617503][T12202] usb 4-1: USB disconnect, device number 92
[  694.688143][ T5950] m920x_read = error: -19
[  694.693194][ T5950] dvb-usb: error while querying for an remote control event.
[  694.831612][ T5950] m920x_read = error: -19
[  694.857701][ T5950] dvb-usb: error while querying for an remote control event.
[  694.880639][T13777] fido_id[13777]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  695.001662][ T5950] m920x_read = error: -19
[  695.006168][ T5950] dvb-usb: error while querying for an remote control event.
[  695.098116][ T5922] usb 2-1: USB disconnect, device number 95
[  695.183799][ T5950] m920x_read = error: -19
[  695.211850][ T5950] dvb-usb: error while querying for an remote control event.
[  695.353534][ T5950] m920x_read = error: -19
[  695.358081][ T5950] dvb-usb: error while querying for an remote control event.
[  695.416872][T13804] syz_tun: entered allmulticast mode
[  695.444214][T13804] dvmrp6: entered allmulticast mode
[  695.479716][T13803] syz_tun: left allmulticast mode
[  695.494298][T13803] dvmrp6: left allmulticast mode
[  695.502608][T12202] m920x_read = error: -19
[  695.507299][T12202] dvb-usb: error while querying for an remote control event.
[  695.781666][ T5950] m920x_read = error: -19
[  695.786894][ T5950] dvb-usb: error while querying for an remote control event.
[  695.941971][ T5950] m920x_read = error: -19
[  695.946644][ T5950] dvb-usb: error while querying for an remote control event.
[  696.072395][T12202] m920x_read = error: -19
[  696.080083][T12202] dvb-usb: error while querying for an remote control event.
[  696.257333][T12202] m920x_read = error: -19
[  696.267757][T12202] dvb-usb: error while querying for an remote control event.
[  696.541649][T12202] m920x_read = error: -19
[  696.546695][T12202] dvb-usb: error while querying for an remote control event.
[  696.554292][T13847] fuse: Invalid uid '00000000000000000003'
[  696.608941][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1948'.
[  696.682054][T13854] netlink: 'syz.0.1949': attribute type 4 has an invalid length.
[  696.690687][T12202] m920x_read = error: -19
[  696.710417][T13854] netlink: 'syz.0.1949': attribute type 4 has an invalid length.
[  696.744042][T12202] dvb-usb: error while querying for an remote control event.
[  696.881956][ T5865] m920x_read = error: -19
[  696.886726][ T5865] dvb-usb: error while querying for an remote control event.
[  697.032046][ T5865] m920x_read = error: -19
[  697.038326][ T5865] dvb-usb: error while querying for an remote control event.
[  697.081618][T12202] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[  697.155359][ T5865] m920x_read = error: -19
[  697.163744][ T5865] dvb-usb: error while querying for an remote control event.
[  697.251690][T12202] usb 5-1: Using ep0 maxpacket: 16
[  697.299189][ T5865] m920x_read = error: -19
[  697.314233][ T5865] dvb-usb: error while querying for an remote control event.
[  697.328050][T12202] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  697.438276][T12202] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  697.479084][T12202] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  697.542273][ T5865] m920x_read = error: -19
[  697.546864][ T5865] dvb-usb: error while querying for an remote control event.
[  697.557332][T12202] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  697.571363][T12202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.584857][T12202] usb 5-1: Product: syz
[  697.589143][T12202] usb 5-1: Manufacturer: syz
[  697.594268][T12202] usb 5-1: SerialNumber: syz
[  697.661975][ T5865] m920x_read = error: -19
[  697.666703][ T5865] dvb-usb: error while querying for an remote control event.
[  697.792324][ T5865] m920x_read = error: -19
[  697.796894][ T5865] dvb-usb: error while querying for an remote control event.
[  697.883376][T13877] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1953'.
[  697.894791][T13877] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1953'.
[  697.952031][ T5950] m920x_read = error: -19
[  697.956765][ T5950] dvb-usb: error while querying for an remote control event.
[  698.019829][T12202] usb 5-1: 2:1 : format type 0 is detected, processed as PCM
[  698.177699][ T5950] m920x_read = error: -19
[  698.185995][ T5950] dvb-usb: error while querying for an remote control event.
[  698.529062][ T5950] m920x_read = error: -19
[  698.555227][ T5950] dvb-usb: error while querying for an remote control event.
[  698.872260][ T5950] m920x_read = error: -19
[  698.877024][ T5950] dvb-usb: error while querying for an remote control event.
[  698.974233][ T5946] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  698.992570][ T5865] m920x_read = error: -19
[  698.997297][ T5865] dvb-usb: error while querying for an remote control event.
[  699.118382][ T5865] m920x_read = error: -19
[  699.144664][ T5865] dvb-usb: error while querying for an remote control event.
[  699.451163][T13860] wg1: entered promiscuous mode
[  699.465427][T13860] wg1: entered allmulticast mode
[  699.574043][ T5946] usb 1-1: Using ep0 maxpacket: 16
[  699.629676][ T5946] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75
[  699.782091][ T5865] m920x_read = error: -19
[  699.786682][ T5865] dvb-usb: error while querying for an remote control event.
[  699.807110][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  699.871581][ T5946] usb 1-1: Product: syz
[  699.875837][ T5946] usb 1-1: Manufacturer: syz
[  699.880472][ T5946] usb 1-1: SerialNumber: syz
[  699.940227][    T9] m920x_read = error: -19
[  699.944975][    T9] dvb-usb: error while querying for an remote control event.
[  699.984543][T13903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1957'.
[  700.023623][ T5946] usb 1-1: config 0 descriptor??
[  700.037674][T13906] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1957'.
[  700.085359][ T5946] usb 1-1: bad CDC descriptors
[  700.161811][    T9] m920x_read = error: -19
[  700.184400][    T9] dvb-usb: error while querying for an remote control event.
[  700.244628][T12202] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82
[  700.331686][   T10] m920x_read = error: -19
[  700.336464][   T10] dvb-usb: error while querying for an remote control event.
[  700.347376][T13880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  700.477433][T13880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  700.581862][   T10] m920x_read = error: -19
[  700.593343][T12202] usb 5-1: USB disconnect, device number 91
[  700.599533][   T10] dvb-usb: error while querying for an remote control event.
[  700.657422][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  700.741984][    T9] m920x_read = error: -19
[  700.746837][    T9] dvb-usb: error while querying for an remote control event.
[  700.873065][    T9] m920x_read = error: -19
[  700.910234][    T9] dvb-usb: error while querying for an remote control event.
[  700.945934][T13930] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1959'.
[  701.095544][   T10] m920x_read = error: -19
[  701.126034][   T10] dvb-usb: error while querying for an remote control event.
[  701.146159][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1961'.
[  701.181248][T13958] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  701.216990][T13958] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  701.282082][   T10] m920x_read = error: -19
[  701.287419][   T10] dvb-usb: error while querying for an remote control event.
[  701.427153][   T10] m920x_read = error: -19
[  701.442124][   T10] dvb-usb: error while querying for an remote control event.
[  701.588519][   T10] m920x_read = error: -19
[  701.599453][   T10] dvb-usb: error while querying for an remote control event.
[  701.607670][    T9] usb 1-1: USB disconnect, device number 42
[  701.742569][T12202] m920x_read = error: -19
[  701.767970][T12202] dvb-usb: error while querying for an remote control event.
[  701.871133][   T30] kauditd_printk_skb: 25 callbacks suppressed
[  701.871154][   T30] audit: type=1326 audit(1757342857.410:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13969 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15539 code=0x7ffc0000
[  701.912700][T12202] m920x_read = error: -19
[  701.921617][T12202] dvb-usb: error while querying for an remote control event.
[  701.970744][   T30] audit: type=1326 audit(1757342857.410:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13969 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15539 code=0x7ffc0000
[  701.993293][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.051962][T12202] m920x_read = error: -19
[  702.056514][T12202] dvb-usb: error while querying for an remote control event.
[  702.197049][T13988] netlink: 'syz.2.1963': attribute type 4 has an invalid length.
[  702.238055][T12202] m920x_read = error: -19
[  702.252983][T13998] netlink: 'syz.2.1963': attribute type 4 has an invalid length.
[  702.271471][T12202] dvb-usb: error while querying for an remote control event.
[  702.414839][T12202] m920x_read = error: -19
[  702.419352][T12202] dvb-usb: error while querying for an remote control event.
[  702.581936][   T10] m920x_read = error: -19
[  702.587007][   T10] dvb-usb: error while querying for an remote control event.
[  702.722216][T14009] netlink: 'syz.1.1968': attribute type 4 has an invalid length.
[  702.778255][T12202] m920x_read = error: -19
[  702.783040][T12202] dvb-usb: error while querying for an remote control event.
[  702.901841][T12202] m920x_read = error: -19
[  702.906547][T12202] dvb-usb: error while querying for an remote control event.
[  702.973313][T14013] netlink: 'syz.1.1968': attribute type 4 has an invalid length.
[  703.021796][T12202] m920x_read = error: -19
[  703.027753][T12202] dvb-usb: error while querying for an remote control event.
[  703.197276][T12202] m920x_read = error: -19
[  703.203118][T12202] dvb-usb: error while querying for an remote control event.
[  703.509954][T12202] m920x_read = error: -19
[  703.541572][T12202] dvb-usb: error while querying for an remote control event.
[  703.794252][    T9] m920x_read = error: -19
[  703.798771][    T9] dvb-usb: error while querying for an remote control event.
[  703.931676][    T9] m920x_read = error: -19
[  703.948668][    T9] dvb-usb: error while querying for an remote control event.
[  703.970900][T14023] netlink: 'syz.0.1970': attribute type 4 has an invalid length.
[  704.102949][T14024] netlink: 'syz.0.1970': attribute type 4 has an invalid length.
[  704.452226][   T10] m920x_read = error: -19
[  704.492540][   T10] dvb-usb: error while querying for an remote control event.
[  704.902093][    T9] m920x_read = error: -19
[  704.911580][    T9] dvb-usb: error while querying for an remote control event.
[  705.042156][   T10] m920x_read = error: -19
[  705.059649][   T10] dvb-usb: error while querying for an remote control event.
[  705.292061][   T10] m920x_read = error: -19
[  705.297016][   T10] dvb-usb: error while querying for an remote control event.
[  705.356216][T14039] netlink: 'syz.3.1972': attribute type 4 has an invalid length.
[  705.472259][T14041] netlink: 'syz.3.1972': attribute type 4 has an invalid length.
[  705.816695][T12202] m920x_read = error: -19
[  705.831056][T12202] dvb-usb: error while querying for an remote control event.
[  705.961744][   T10] m920x_read = error: -19
[  705.967307][   T10] dvb-usb: error while querying for an remote control event.
[  706.081599][   T10] m920x_read = error: -19
[  706.113401][T14054] FAULT_INJECTION: forcing a failure.
[  706.113401][T14054] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  706.195234][   T10] dvb-usb: error while querying for an remote control event.
[  706.228615][T14054] CPU: 1 UID: 0 PID: 14054 Comm: syz.2.1975 Not tainted syzkaller #0 PREEMPT(full) 
[  706.228638][T14054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  706.228648][T14054] Call Trace:
[  706.228655][T14054]  <TASK>
[  706.228661][T14054]  dump_stack_lvl+0x189/0x250
[  706.228684][T14054]  ? __pfx____ratelimit+0x10/0x10
[  706.228700][T14054]  ? __pfx_dump_stack_lvl+0x10/0x10
[  706.228718][T14054]  ? __pfx__printk+0x10/0x10
[  706.228748][T14054]  should_fail_ex+0x414/0x560
[  706.228774][T14054]  _copy_to_user+0x31/0xb0
[  706.228796][T14054]  simple_read_from_buffer+0xe1/0x170
[  706.228822][T14054]  proc_fail_nth_read+0x1b3/0x220
[  706.228841][T14054]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  706.228860][T14054]  ? rw_verify_area+0x2a6/0x4d0
[  706.228879][T14054]  ? __lock_acquire+0xab9/0xd20
[  706.228899][T14054]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  706.228917][T14054]  vfs_read+0x200/0xa30
[  706.228935][T14054]  ? fdget_pos+0x247/0x320
[  706.228951][T14054]  ? __pfx___mutex_lock+0x10/0x10
[  706.228968][T14054]  ? __pfx_vfs_read+0x10/0x10
[  706.228988][T14054]  ? __fget_files+0x2a/0x420
[  706.229005][T14054]  ? __fget_files+0x3a0/0x420
[  706.229017][T14054]  ? __fget_files+0x2a/0x420
[  706.229036][T14054]  ksys_read+0x145/0x250
[  706.229064][T14054]  ? __pfx_ksys_read+0x10/0x10
[  706.229086][T14054]  ? lockdep_hardirqs_on+0x9c/0x150
[  706.229104][T14054]  __do_fast_syscall_32+0xb6/0x2b0
[  706.229121][T14054]  ? lockdep_hardirqs_on+0x9c/0x150
[  706.229138][T14054]  do_fast_syscall_32+0x34/0x80
[  706.229162][T14054]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  706.229184][T14054] RIP: 0023:0xf702e539
[  706.229198][T14054] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  706.229210][T14054] RSP: 002b:00000000f541e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  706.229226][T14054] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f541e620
[  706.229238][T14054] RDX: 000000000000000f RSI: 00000000f73a4ff4 RDI: 0000000000000000
[  706.229247][T14054] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  706.229255][T14054] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  706.229265][T14054] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  706.229286][T14054]  </TASK>
[  706.721634][ T5944] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  706.730525][   T10] m920x_read = error: -19
[  706.773569][   T10] dvb-usb: error while querying for an remote control event.
[  706.891500][ T5944] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  706.918034][ T5944] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  706.945436][ T5944] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  706.970003][ T5944] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  707.002124][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.014354][   T10] m920x_read = error: -19
[  707.028407][T14056] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  707.039908][   T10] dvb-usb: error while querying for an remote control event.
[  707.086114][T14072] usb usb8: usbfs: process 14072 (syz.1.1979) did not claim interface 0 before use
[  707.201953][T12202] m920x_read = error: -19
[  707.214763][T12202] dvb-usb: error while querying for an remote control event.
[  707.323637][ T5944] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[  707.344423][T14086] FAULT_INJECTION: forcing a failure.
[  707.344423][T14086] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  707.362400][T12202] m920x_read = error: -19
[  707.373061][T12202] dvb-usb: error while querying for an remote control event.
[  707.385690][ T5944] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input22
[  707.387032][T14086] CPU: 0 UID: 0 PID: 14086 Comm: syz.3.1980 Not tainted syzkaller #0 PREEMPT(full) 
[  707.387067][T14086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  707.387084][T14086] Call Trace:
[  707.387094][T14086]  <TASK>
[  707.387104][T14086]  dump_stack_lvl+0x189/0x250
[  707.387134][T14086]  ? __pfx____ratelimit+0x10/0x10
[  707.387157][T14086]  ? __pfx_dump_stack_lvl+0x10/0x10
[  707.387185][T14086]  ? __pfx__printk+0x10/0x10
[  707.387217][T14086]  ? __might_fault+0xb0/0x130
[  707.387274][T14086]  should_fail_ex+0x414/0x560
[  707.387316][T14086]  _copy_from_iter+0x1de/0x1790
[  707.387353][T14086]  ? rcu_is_watching+0x15/0xb0
[  707.387379][T14086]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  707.387420][T14086]  ? __pfx__copy_from_iter+0x10/0x10
[  707.387449][T14086]  ? __build_skb_around+0x257/0x3e0
[  707.387481][T14086]  ? netlink_sendmsg+0x642/0xb30
[  707.387505][T14086]  ? skb_put+0x11b/0x210
[  707.387534][T14086]  netlink_sendmsg+0x6b2/0xb30
[  707.387577][T14086]  ? __pfx_netlink_sendmsg+0x10/0x10
[  707.387605][T14086]  ? __import_iovec+0x5d4/0x7f0
[  707.387632][T14086]  ? aa_sock_msg_perm+0xf1/0x1d0
[  707.387656][T14086]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  707.387683][T14086]  ? __pfx_netlink_sendmsg+0x10/0x10
[  707.387709][T14086]  __sock_sendmsg+0x21c/0x270
[  707.387747][T14086]  ____sys_sendmsg+0x505/0x830
[  707.387783][T14086]  ? __pfx_____sys_sendmsg+0x10/0x10
[  707.387830][T14086]  ___sys_sendmsg+0x21f/0x2a0
[  707.387861][T14086]  ? __pfx____sys_sendmsg+0x10/0x10
[  707.387932][T14086]  ? __fget_files+0x2a/0x420
[  707.387952][T14086]  ? __fget_files+0x3a0/0x420
[  707.387984][T14086]  __sys_sendmsg+0x164/0x220
[  707.388015][T14086]  ? __pfx___sys_sendmsg+0x10/0x10
[  707.388062][T14086]  ? lockdep_hardirqs_on+0x9c/0x150
[  707.388090][T14086]  __do_fast_syscall_32+0xb6/0x2b0
[  707.388117][T14086]  ? lockdep_hardirqs_on+0x9c/0x150
[  707.388145][T14086]  do_fast_syscall_32+0x34/0x80
[  707.388171][T14086]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  707.388199][T14086] RIP: 0023:0xf7f38539
[  707.388221][T14086] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  707.388251][T14086] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  707.388276][T14086] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000180
[  707.388293][T14086] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000
[  707.388307][T14086] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  707.388320][T14086] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  707.388335][T14086] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  707.388367][T14086]  </TASK>
[  707.910426][   T10] m920x_read = error: -19
[  707.953699][   T10] dvb-usb: error while querying for an remote control event.
[  708.407722][ T5865] m920x_read = error: -19
[  708.412501][ T5865] dvb-usb: error while querying for an remote control event.
[  708.491346][T14115] sctp: [Deprecated]: syz.1.1984 (pid 14115) Use of int in maxseg socket option.
[  708.491346][T14115] Use struct sctp_assoc_value instead
[  708.630082][T12202] m920x_read = error: -19
[  708.659696][T12202] dvb-usb: error while querying for an remote control event.
[  708.698134][ T5865] usb 5-1: new full-speed USB device number 92 using dummy_hcd
[  708.728522][ T5944] usb 1-1: USB disconnect, device number 43
[  708.734774][    C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  708.923659][    T9] m920x_read = error: -19
[  708.937372][ T5865] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  708.953061][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.986473][    T9] dvb-usb: error while querying for an remote control event.
[  709.038747][ T5865] usb 5-1: config 0 descriptor??
[  709.162423][T12202] m920x_read = error: -19
[  709.188303][T12202] dvb-usb: error while querying for an remote control event.
[  709.279001][ T5865] usb 5-1: selecting invalid altsetting 3
[  709.333749][ T5865] comedi comedi5: could not set alternate setting 3 in high speed
[  709.342352][T14126] FAULT_INJECTION: forcing a failure.
[  709.342352][T14126] name failslab, interval 1, probability 0, space 0, times 0
[  709.367691][ T5865] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device.
[  709.383275][    T9] m920x_read = error: -19
[  709.389715][T14126] CPU: 0 UID: 0 PID: 14126 Comm: syz.1.1985 Not tainted syzkaller #0 PREEMPT(full) 
[  709.389751][T14126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  709.389764][T14126] Call Trace:
[  709.389773][T14126]  <TASK>
[  709.389782][T14126]  dump_stack_lvl+0x189/0x250
[  709.389811][T14126]  ? __pfx____ratelimit+0x10/0x10
[  709.389831][T14126]  ? __pfx_dump_stack_lvl+0x10/0x10
[  709.389855][T14126]  ? __pfx__printk+0x10/0x10
[  709.389889][T14126]  ? __pfx___might_resched+0x10/0x10
[  709.389907][T14126]  ? fs_reclaim_acquire+0x7d/0x100
[  709.389941][T14126]  should_fail_ex+0x414/0x560
[  709.389976][T14126]  should_failslab+0xa8/0x100
[  709.390007][T14126]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  709.390035][T14126]  ? nfnetlink_rcv+0x1fe9/0x2520
[  709.390063][T14126]  ? __alloc_skb+0x112/0x2d0
[  709.390090][T14126]  __alloc_skb+0x112/0x2d0
[  709.390115][T14126]  netlink_ack+0x146/0xa50
[  709.390133][T14126]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  709.390174][T14126]  nfnetlink_rcv+0x1f3f/0x2520
[  709.390221][T14126]  ? __dev_queue_xmit+0x27b/0x3b50
[  709.390261][T14126]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  709.390308][T14126]  ? ref_tracker_free+0x63a/0x7d0
[  709.390329][T14126]  ? __asan_memcpy+0x40/0x70
[  709.390353][T14126]  ? __pfx_ref_tracker_free+0x10/0x10
[  709.390390][T14126]  ? skb_clone+0x246/0x3a0
[  709.390420][T14126]  ? __netlink_deliver_tap+0x807/0x850
[  709.390443][T14126]  ? netlink_deliver_tap+0x2e/0x1b0
[  709.390492][T14126]  netlink_unicast+0x82c/0x9e0
[  709.390534][T14126]  ? __pfx_netlink_unicast+0x10/0x10
[  709.390566][T14126]  ? netlink_sendmsg+0x642/0xb30
[  709.390586][T14126]  ? skb_put+0x11b/0x210
[  709.390613][T14126]  netlink_sendmsg+0x805/0xb30
[  709.390644][T14126]  ? __pfx_netlink_sendmsg+0x10/0x10
[  709.390669][T14126]  ? aa_sock_msg_perm+0xf1/0x1d0
[  709.390692][T14126]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  709.390714][T14126]  ? __pfx_netlink_sendmsg+0x10/0x10
[  709.390744][T14126]  __sock_sendmsg+0x21c/0x270
[  709.390779][T14126]  __sys_sendto+0x3bd/0x520
[  709.390804][T14126]  ? __pfx___sys_sendto+0x10/0x10
[  709.390839][T14126]  ? __might_fault+0xb0/0x130
[  709.390889][T14126]  __ia32_compat_sys_socketcall+0x71c/0x9c0
[  709.390916][T14126]  ? __fget_files+0x3a0/0x420
[  709.390939][T14126]  ? __pfx___ia32_compat_sys_socketcall+0x10/0x10
[  709.390965][T14126]  ? fput+0xa0/0xd0
[  709.390986][T14126]  ? ksys_write+0x22a/0x250
[  709.391023][T14126]  ? lockdep_hardirqs_on+0x9c/0x150
[  709.391047][T14126]  __do_fast_syscall_32+0xb6/0x2b0
[  709.391070][T14126]  ? lockdep_hardirqs_on+0x9c/0x150
[  709.391095][T14126]  do_fast_syscall_32+0x34/0x80
[  709.391118][T14126]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  709.391143][T14126] RIP: 0023:0xf7f15539
[  709.391161][T14126] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  709.391180][T14126] RSP: 002b:00000000f5425430 EFLAGS: 00000206 ORIG_RAX: 0000000000000066
[  709.391202][T14126] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f5425444
[  709.391216][T14126] RDX: 0000000000000000 RSI: 00000000f5425560 RDI: 00000000f73a4ff4
[  709.391231][T14126] RBP: 00000000f5425560 R08: 0000000000000000 R09: 0000000000000000
[  709.391243][T14126] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  709.391255][T14126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  709.391286][T14126]  </TASK>
[  709.731912][    C0] vkms_vblank_simulate: vblank timer overrun
[  709.744747][    T9] dvb-usb: error while querying for an remote control event.
[  709.782621][T14104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  709.828449][T14104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  709.864976][ T5865] usbduxsigma 5-1:0.0: probe with driver usbduxsigma failed with error -22
[  709.875832][    T9] m920x_read = error: -19
[  709.880486][    T9] dvb-usb: error while querying for an remote control event.
[  710.002820][T12202] m920x_read = error: -19
[  710.007354][T12202] dvb-usb: error while querying for an remote control event.
[  710.126758][T12202] m920x_read = error: -19
[  710.131185][T12202] dvb-usb: error while querying for an remote control event.
[  710.163632][T14104] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1983'.
[  710.219651][T14157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1986'.
[  710.255042][T12202] m920x_read = error: -19
[  710.268882][T12202] dvb-usb: error while querying for an remote control event.
[  710.391560][T12202] m920x_read = error: -19
[  710.399488][T12202] dvb-usb: error while querying for an remote control event.
[  710.437012][ T5922] IPVS: starting estimator thread 0...
[  710.660611][T12202] m920x_read = error: -19
[  710.672246][T12202] dvb-usb: error while querying for an remote control event.
[  710.740482][ T5865] usb 5-1: USB disconnect, device number 92
[  710.748370][T14174] IPVS: using max 38 ests per chain, 91200 per kthread
[  710.976658][T12202] m920x_read = error: -19
[  710.989738][T12202] dvb-usb: error while querying for an remote control event.
[  711.193968][   T10] m920x_read = error: -19
[  711.214027][   T10] dvb-usb: error while querying for an remote control event.
[  711.341963][   T10] m920x_read = error: -19
[  711.351467][   T10] dvb-usb: error while querying for an remote control event.
[  711.491873][    T9] m920x_read = error: -19
[  711.496857][    T9] dvb-usb: error while querying for an remote control event.
[  711.511645][   T10] usb 1-1: new low-speed USB device number 44 using dummy_hcd
[  711.622327][    T9] m920x_read = error: -19
[  711.626951][    T9] dvb-usb: error while querying for an remote control event.
[  711.701527][   T10] usb 1-1: device descriptor read/64, error -71
[  711.785494][    T9] m920x_read = error: -19
[  711.831913][    T9] dvb-usb: error while querying for an remote control event.
[  711.983462][   T10] usb 1-1: new low-speed USB device number 45 using dummy_hcd
[  712.003121][ T5865] m920x_read = error: -19
[  712.008650][ T5865] dvb-usb: error while querying for an remote control event.
[  712.142932][ T5865] m920x_read = error: -19
[  712.147368][ T5865] dvb-usb: error while querying for an remote control event.
[  712.159849][   T10] usb 1-1: device descriptor read/64, error -71
[  712.272773][ T5865] m920x_read = error: -19
[  712.277989][   T10] usb usb1-port1: attempt power cycle
[  712.292622][ T5865] dvb-usb: error while querying for an remote control event.
[  712.313675][T14254] netlink: 'syz.2.1997': attribute type 4 has an invalid length.
[  712.421534][ T5922] usb 4-1: new full-speed USB device number 93 using dummy_hcd
[  712.573021][T14271] netlink: 'syz.2.1997': attribute type 4 has an invalid length.
[  712.612539][ T5865] m920x_read = error: -19
[  712.636562][ T5865] dvb-usb: error while querying for an remote control event.
[  712.693896][ T5922] usb 4-1: config 0 has no interfaces?
[  712.699521][ T5922] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  712.710707][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  712.729438][ T5922] usb 4-1: config 0 descriptor??
[  712.771743][   T10] usb 1-1: new low-speed USB device number 46 using dummy_hcd
[  713.055186][    T9] m920x_read = error: -19
[  713.059606][    T9] dvb-usb: error while querying for an remote control event.
[  713.080148][   T10] usb 1-1: device descriptor read/8, error -71
[  713.430443][    T9] m920x_read = error: -19
[  713.439488][ T5944] usb 4-1: USB disconnect, device number 93
[  713.465029][    T9] dvb-usb: error while querying for an remote control event.
[  713.611733][    T9] m920x_read = error: -19
[  713.616231][    T9] dvb-usb: error while querying for an remote control event.
[  713.651659][   T10] usb 1-1: new low-speed USB device number 47 using dummy_hcd
[  713.682217][   T10] usb 1-1: device descriptor read/8, error -71
[  713.751810][    T9] m920x_read = error: -19
[  713.756435][    T9] dvb-usb: error while querying for an remote control event.
[  713.812771][   T10] usb usb1-port1: unable to enumerate USB device
[  713.901805][   T10] m920x_read = error: -19
[  713.906365][   T10] dvb-usb: error while querying for an remote control event.
[  714.024355][   T10] m920x_read = error: -19
[  714.061271][   T10] dvb-usb: error while querying for an remote control event.
[  714.217396][   T10] m920x_read = error: -19
[  714.250146][   T10] dvb-usb: error while querying for an remote control event.
[  714.382331][   T10] m920x_read = error: -19
[  714.392307][   T10] dvb-usb: error while querying for an remote control event.
[  714.556758][    T9] m920x_read = error: -19
[  714.561353][    T9] dvb-usb: error while querying for an remote control event.
[  714.621495][ T5946] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[  714.703618][    T9] m920x_read = error: -19
[  714.711885][    T9] dvb-usb: error while querying for an remote control event.
[  714.837557][ T5946] usb 1-1: config 0 has no interfaces?
[  714.854404][ T5946] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  714.885042][    T9] m920x_read = error: -19
[  714.889506][    T9] dvb-usb: error while querying for an remote control event.
[  714.914680][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  715.006439][ T5946] usb 1-1: config 0 descriptor??
[  715.231591][    T9] m920x_read = error: -19
[  715.238913][    T9] dvb-usb: error while querying for an remote control event.
[  715.342517][T14356] FAULT_INJECTION: forcing a failure.
[  715.342517][T14356] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  715.371810][    T9] m920x_read = error: -19
[  715.376981][    T9] dvb-usb: error while querying for an remote control event.
[  715.395572][T14356] CPU: 1 UID: 0 PID: 14356 Comm: syz.3.2006 Not tainted syzkaller #0 PREEMPT(full) 
[  715.395602][T14356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  715.395617][T14356] Call Trace:
[  715.395625][T14356]  <TASK>
[  715.395635][T14356]  dump_stack_lvl+0x189/0x250
[  715.395667][T14356]  ? __pfx____ratelimit+0x10/0x10
[  715.395689][T14356]  ? __pfx_dump_stack_lvl+0x10/0x10
[  715.395718][T14356]  ? __pfx__printk+0x10/0x10
[  715.395762][T14356]  should_fail_ex+0x414/0x560
[  715.395800][T14356]  _copy_to_user+0x31/0xb0
[  715.395830][T14356]  simple_read_from_buffer+0xe1/0x170
[  715.395866][T14356]  proc_fail_nth_read+0x1b3/0x220
[  715.395894][T14356]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  715.395922][T14356]  ? rw_verify_area+0x2a6/0x4d0
[  715.395948][T14356]  ? __lock_acquire+0xab9/0xd20
[  715.395976][T14356]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  715.396001][T14356]  vfs_read+0x200/0xa30
[  715.396027][T14356]  ? fdget_pos+0x247/0x320
[  715.396051][T14356]  ? __pfx___mutex_lock+0x10/0x10
[  715.396074][T14356]  ? __pfx_vfs_read+0x10/0x10
[  715.396104][T14356]  ? __fget_files+0x2a/0x420
[  715.396127][T14356]  ? __fget_files+0x3a0/0x420
[  715.396145][T14356]  ? __fget_files+0x2a/0x420
[  715.396173][T14356]  ksys_read+0x145/0x250
[  715.396203][T14356]  ? __pfx_ksys_read+0x10/0x10
[  715.396235][T14356]  ? lockdep_hardirqs_on+0x9c/0x150
[  715.396259][T14356]  __do_fast_syscall_32+0xb6/0x2b0
[  715.396284][T14356]  ? lockdep_hardirqs_on+0x9c/0x150
[  715.396309][T14356]  do_fast_syscall_32+0x34/0x80
[  715.396331][T14356]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  715.396363][T14356] RIP: 0023:0xf7f38539
[  715.396382][T14356] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  715.396401][T14356] RSP: 002b:00000000f5446590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  715.396423][T14356] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5446620
[  715.396438][T14356] RDX: 000000000000000f RSI: 00000000f73c4ff4 RDI: 0000000000000000
[  715.396451][T14356] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  715.396464][T14356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  715.396477][T14356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  715.396508][T14356]  </TASK>
[  715.822059][    T9] m920x_read = error: -19
[  715.826658][    T9] dvb-usb: error while querying for an remote control event.
[  716.117452][   T10] m920x_read = error: -19
[  716.134366][   T10] dvb-usb: error while querying for an remote control event.
[  716.283716][   T10] m920x_read = error: -19
[  716.302810][   T10] dvb-usb: error while querying for an remote control event.
[  716.316327][T12202] usb 1-1: USB disconnect, device number 48
[  716.356778][T14359] usb usb8: usbfs: process 14359 (syz.3.2007) did not claim interface 0 before use
[  716.591675][   T10] m920x_read = error: -19
[  716.596281][   T10] dvb-usb: error while querying for an remote control event.
[  716.732794][   T10] m920x_read = error: -19
[  716.760481][   T10] dvb-usb: error while querying for an remote control event.
[  716.935206][   T10] m920x_read = error: -19
[  716.939716][   T10] dvb-usb: error while querying for an remote control event.
[  716.982841][T14377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2008'.
[  717.152702][   T10] IPVS: starting estimator thread 0...
[  717.172161][   T10] m920x_read = error: -19
[  717.217126][   T10] dvb-usb: error while querying for an remote control event.
[  717.316654][T14384] netlink: 'syz.2.2010': attribute type 5 has an invalid length.
[  717.387282][ T5865] m920x_read = error: -19
[  717.393795][T14383] IPVS: using max 38 ests per chain, 91200 per kthread
[  717.405088][ T5865] dvb-usb: error while querying for an remote control event.
[  717.531949][T12202] m920x_read = error: -19
[  717.536476][T12202] dvb-usb: error while querying for an remote control event.
[  717.562033][   T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  717.841543][   T10] usb 1-1: Using ep0 maxpacket: 8
[  717.855874][ T5865] m920x_read = error: -19
[  717.893709][ T5865] dvb-usb: error while querying for an remote control event.
[  717.907136][   T10] usb 1-1: config 0 has an invalid interface number: 3 but max is 0
[  717.949175][   T10] usb 1-1: config 0 has an invalid interface number: 114 but max is 0
[  718.039237][   T10] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  718.057783][   T10] usb 1-1: config 0 has no interface number 0
[  718.092250][T12202] m920x_read = error: -19
[  718.129754][T12202] dvb-usb: error while querying for an remote control event.
[  718.140805][   T10] usb 1-1: config 0 has no interface number 1
[  718.179075][   T10] usb 1-1: config 0 interface 3 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  718.301575][T12202] m920x_read = error: -19
[  718.320149][T12202] dvb-usb: error while querying for an remote control event.
[  718.329519][   T10] usb 1-1: config 0 interface 3 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  718.367994][   T10] usb 1-1: config 0 interface 3 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  718.417430][   T10] usb 1-1: config 0 interface 3 altsetting 1 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  718.443923][   T10] usb 1-1: config 0 interface 3 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 7
[  718.471795][T12202] m920x_read = error: -19
[  718.476250][T12202] dvb-usb: error while querying for an remote control event.
[  718.535195][   T10] usb 1-1: too many endpoints for config 0 interface 114 altsetting 226: 125, using maximum allowed: 30
[  718.601740][T12202] m920x_read = error: -19
[  718.606231][T12202] dvb-usb: error while querying for an remote control event.
[  718.617749][   T10] usb 1-1: config 0 interface 114 altsetting 226 has 1 endpoint descriptor, different from the interface descriptor's value: 125
[  718.692531][   T10] usb 1-1: config 0 interface 3 has no altsetting 0
[  718.699336][   T10] usb 1-1: config 0 interface 114 has no altsetting 0
[  718.709556][   T10] usb 1-1: New USB device found, idVendor=05c6, idProduct=90b2, bcdDevice=b8.d4
[  718.737605][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  718.760230][   T10] usb 1-1: config 0 descriptor??
[  718.766206][T12202] m920x_read = error: -19
[  718.771288][T12202] dvb-usb: error while querying for an remote control event.
[  718.863129][T14439] ptrace attach of "./syz-executor exec"[5877] was attempted by "./syz-executor exec"[14439]
[  718.880369][T14439] dns_resolver: Unsupported server list version (0)
[  718.911450][T12202] m920x_read = error: -19
[  718.931520][T12202] dvb-usb: error while querying for an remote control event.
[  719.063168][ T5865] m920x_read = error: -19
[  719.067674][ T5865] dvb-usb: error while querying for an remote control event.
[  719.076138][   T10] usb 1-1: string descriptor 0 read error: -71
[  719.132681][   T10] option 1-1:0.114: GSM modem (1-port) converter detected
[  719.214772][T12202] m920x_read = error: -19
[  719.224279][T12202] dvb-usb: error while querying for an remote control event.
[  719.242261][   T10] usb 1-1: USB disconnect, device number 49
[  719.276411][   T10] option 1-1:0.114: device disconnected
[  719.380530][T12202] m920x_read = error: -19
[  719.388462][T12202] dvb-usb: error while querying for an remote control event.
[  719.523988][T12202] m920x_read = error: -19
[  719.591317][T12202] dvb-usb: error while querying for an remote control event.
[  719.653705][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2017'.
[  719.664906][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2017'.
[  719.764443][T12202] m920x_read = error: -19
[  719.775184][T12202] dvb-usb: error while querying for an remote control event.
[  719.943058][T12202] m920x_read = error: -19
[  719.951507][T12202] dvb-usb: error while querying for an remote control event.
[  720.004731][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2020'.
[  720.040174][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2018'.
[  720.077020][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2020'.
[  720.101841][   T10] m920x_read = error: -19
[  720.106458][   T10] dvb-usb: error while querying for an remote control event.
[  720.197956][T14494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2020'.
[  720.251856][   T10] m920x_read = error: -19
[  720.256276][   T10] dvb-usb: error while querying for an remote control event.
[  720.275875][T14495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2020'.
[  720.520338][   T10] m920x_read = error: -19
[  720.532798][   T10] dvb-usb: error while querying for an remote control event.
[  720.758109][   T10] m920x_read = error: -19
[  720.781533][   T10] dvb-usb: error while querying for an remote control event.
[  720.892003][   T10] m920x_read = error: -19
[  720.899738][   T10] dvb-usb: error while querying for an remote control event.
[  721.043813][   T10] m920x_read = error: -19
[  721.048300][   T10] dvb-usb: error while querying for an remote control event.
[  721.204340][   T10] m920x_read = error: -19
[  721.218171][   T10] dvb-usb: error while querying for an remote control event.
[  721.542159][   T10] m920x_read = error: -19
[  721.546676][   T10] dvb-usb: error while querying for an remote control event.
[  721.691853][   T10] m920x_read = error: -19
[  721.696345][   T10] dvb-usb: error while querying for an remote control event.
[  721.861934][T14517] netlink: 'syz.4.2024': attribute type 4 has an invalid length.
[  721.882898][   T10] m920x_read = error: -19
[  721.887420][   T10] dvb-usb: error while querying for an remote control event.
[  721.969558][T14517] netlink: 'syz.4.2024': attribute type 4 has an invalid length.
[  722.061631][   T10] m920x_read = error: -19
[  722.066466][   T10] dvb-usb: error while querying for an remote control event.
[  722.261879][   T10] m920x_read = error: -19
[  722.284036][   T10] dvb-usb: error while querying for an remote control event.
[  722.462949][   T10] m920x_read = error: -19
[  722.666685][   T10] dvb-usb: error while querying for an remote control event.
[  722.812046][   T10] m920x_read = error: -19
[  722.819101][   T10] dvb-usb: error while querying for an remote control event.
[  722.897851][T14541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2030'.
[  722.953317][   T10] m920x_read = error: -19
[  722.957938][   T10] dvb-usb: error while querying for an remote control event.
[  723.092112][   T10] m920x_read = error: -19
[  723.103482][   T10] dvb-usb: error while querying for an remote control event.
[  723.252665][   T10] m920x_read = error: -19
[  723.262353][   T10] dvb-usb: error while querying for an remote control event.
[  723.403314][   T10] m920x_read = error: -19
[  723.407926][   T10] dvb-usb: error while querying for an remote control event.
[  723.428421][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2032'.
[  723.531800][   T10] m920x_read = error: -19
[  723.536540][   T10] dvb-usb: error while querying for an remote control event.
[  723.651816][   T10] m920x_read = error: -19
[  723.657435][   T10] dvb-usb: error while querying for an remote control event.
[  723.732589][ T5944] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  723.772317][   T10] m920x_read = error: -19
[  723.776842][   T10] dvb-usb: error while querying for an remote control event.
[  723.911755][ T5944] usb 5-1: device descriptor read/64, error -71
[  723.913763][   T10] m920x_read = error: -19
[  723.935085][   T10] dvb-usb: error while querying for an remote control event.
[  724.380674][ T5946] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  724.383384][   T10] m920x_read = error: -19
[  724.404147][   T10] dvb-usb: error while querying for an remote control event.
[  724.541526][ T5944] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  724.681486][ T5946] usb 1-1: Using ep0 maxpacket: 16
[  724.717992][   T10] m920x_read = error: -19
[  724.758341][   T10] dvb-usb: error while querying for an remote control event.
[  724.797491][ T5946] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75
[  724.807826][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  724.828453][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2036'.
[  724.847377][ T5946] usb 1-1: Product: syz
[  724.852936][ T5944] usb 5-1: device descriptor read/64, error -71
[  724.902775][ T5946] usb 1-1: Manufacturer: syz
[  724.989852][   T10] m920x_read = error: -19
[  725.036641][ T5944] usb usb5-port1: attempt power cycle
[  725.044787][   T10] dvb-usb: error while querying for an remote control event.
[  725.120697][ T5946] usb 1-1: SerialNumber: syz
[  725.181663][   T10] m920x_read = error: -19
[  725.186091][   T10] dvb-usb: error while querying for an remote control event.
[  725.202375][ T5946] usb 1-1: config 0 descriptor??
[  725.275543][ T5946] usb 1-1: bad CDC descriptors
[  725.321573][   T10] m920x_read = error: -19
[  725.326202][   T10] dvb-usb: error while querying for an remote control event.
[  725.409198][ T5944] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  725.475550][T14582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  725.484741][T14582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  725.521081][   T10] m920x_read = error: -19
[  725.526715][   T10] dvb-usb: error while querying for an remote control event.
[  725.584523][ T5944] usb 5-1: device descriptor read/8, error -71
[  725.652664][   T10] m920x_read = error: -19
[  725.661931][   T10] dvb-usb: error while querying for an remote control event.
[  725.782292][   T10] m920x_read = error: -19
[  725.786925][   T10] dvb-usb: error while querying for an remote control event.
[  725.822526][ T5944] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  725.862287][ T5944] usb 5-1: device descriptor read/8, error -71
[  725.911974][T12202] m920x_read = error: -19
[  725.916426][T12202] dvb-usb: error while querying for an remote control event.
[  725.972566][ T5944] usb usb5-port1: unable to enumerate USB device
[  726.075526][T12202] m920x_read = error: -19
[  726.106474][T12202] dvb-usb: error while querying for an remote control event.
[  726.251585][T12202] m920x_read = error: -19
[  726.256231][T12202] dvb-usb: error while querying for an remote control event.
[  726.377124][T14621] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2040'.
[  726.492460][T12202] m920x_read = error: -19
[  726.549770][T12202] dvb-usb: error while querying for an remote control event.
[  726.741880][T12202] m920x_read = error: -19
[  726.748180][T12202] dvb-usb: error while querying for an remote control event.
[  726.957022][T12202] m920x_read = error: -19
[  726.962381][T12202] dvb-usb: error while querying for an remote control event.
[  727.083742][T12202] m920x_read = error: -19
[  727.088381][T12202] dvb-usb: error while querying for an remote control event.
[  727.241564][T12202] m920x_read = error: -19
[  727.246274][T12202] dvb-usb: error while querying for an remote control event.
[  727.448210][T12202] m920x_read = error: -19
[  727.452899][T12202] dvb-usb: error while querying for an remote control event.
[  727.510166][T14636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  727.571579][   T10] m920x_read = error: -19
[  727.576611][   T10] dvb-usb: error while querying for an remote control event.
[  727.721611][T12202] m920x_read = error: -19
[  727.726084][T12202] dvb-usb: error while querying for an remote control event.
[  727.881764][T12202] m920x_read = error: -19
[  727.931762][T12202] dvb-usb: error while querying for an remote control event.
[  728.054286][ T5946] usb 1-1: USB disconnect, device number 50
[  728.182379][T12202] m920x_read = error: -19
[  728.187815][T12202] dvb-usb: error while querying for an remote control event.
[  728.471558][T12202] m920x_read = error: -19
[  728.476932][T12202] dvb-usb: error while querying for an remote control event.
[  728.531498][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  728.904473][T12202] m920x_read = error: -19
[  728.944634][T12202] dvb-usb: error while querying for an remote control event.
[  729.311541][T12202] m920x_read = error: -19
[  729.316876][T12202] dvb-usb: error while querying for an remote control event.
[  729.342638][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  729.492584][T12202] m920x_read = error: -19
[  729.511883][T12202] dvb-usb: error while querying for an remote control event.
[  729.700285][T12202] m920x_read = error: -19
[  729.726318][T12202] dvb-usb: error while querying for an remote control event.
[  729.844734][ T5950] m920x_read = error: -19
[  729.849427][ T5950] dvb-usb: error while querying for an remote control event.
[  729.981660][ T5950] m920x_read = error: -19
[  729.989763][ T5950] dvb-usb: error while querying for an remote control event.
[  730.159260][ T5950] m920x_read = error: -19
[  730.202110][ T5950] dvb-usb: error while querying for an remote control event.
[  730.441530][ T5950] m920x_read = error: -19
[  730.446021][ T5950] dvb-usb: error while querying for an remote control event.
[  730.681708][ T5950] m920x_read = error: -19
[  730.739135][ T5950] dvb-usb: error while querying for an remote control event.
[  730.903988][ T5950] m920x_read = error: -19
[  730.908377][ T5950] dvb-usb: error while querying for an remote control event.
[  730.993984][T14693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2050'.
[  731.221509][ T5950] m920x_read = error: -19
[  731.287172][ T5950] dvb-usb: error while querying for an remote control event.
[  731.412244][ T5950] m920x_read = error: -19
[  731.416775][ T5950] dvb-usb: error while querying for an remote control event.
[  731.902226][ T5950] m920x_read = error: -19
[  731.965275][ T5950] dvb-usb: error while querying for an remote control event.
[  732.114754][T14704] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  732.141992][ T5950] m920x_read = error: -19
[  732.166159][ T5950] dvb-usb: error while querying for an remote control event.
[  732.506551][ T5950] m920x_read = error: -19
[  732.668493][ T5950] dvb-usb: error while querying for an remote control event.
[  732.832277][ T5946] usb 2-1: new full-speed USB device number 96 using dummy_hcd
[  732.832335][ T5950] m920x_read = error: -19
[  732.968284][ T5950] dvb-usb: error while querying for an remote control event.
[  733.040088][ T5946] usb 2-1: config 5 has an invalid interface number: 159 but max is 1
[  733.059809][ T5946] usb 2-1: config 5 has no interface number 1
[  733.081645][ T5950] m920x_read = error: -19
[  733.086178][ T5950] dvb-usb: error while querying for an remote control event.
[  733.112600][ T5946] usb 2-1: config 5 interface 159 has no altsetting 0
[  733.171459][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  733.196964][ T5946] usb 2-1: New USB device found, idVendor=0582, idProduct=0004, bcdDevice=6b.64
[  733.201604][ T5950] m920x_read = error: -19
[  733.212039][ T5950] dvb-usb: error while querying for an remote control event.
[  733.217536][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.240601][ T5946] usb 2-1: Product: syz
[  733.334583][ T5950] m920x_read = error: -19
[  733.339489][ T5950] dvb-usb: error while querying for an remote control event.
[  733.451963][ T5946] usb 2-1: Manufacturer: syz
[  733.452518][ T5950] m920x_read = error: -19
[  733.457318][ T5946] usb 2-1: SerialNumber: syz
[  733.538879][ T5950] dvb-usb: error while querying for an remote control event.
[  733.763074][ T5950] m920x_read = error: -19
[  733.774008][ T5950] dvb-usb: error while querying for an remote control event.
[  733.812405][T14729] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2054'.
[  733.895045][ T5950] m920x_read = error: -19
[  733.923780][ T5950] dvb-usb: error while querying for an remote control event.
[  734.033648][ T5950] m920x_read = error: -19
[  734.049852][ T5950] dvb-usb: error while querying for an remote control event.
[  734.198842][ T5946] usb 2-1: USB disconnect, device number 96
[  734.211657][ T5950] m920x_read = error: -19
[  734.344339][ T5950] dvb-usb: error while querying for an remote control event.
[  734.531810][T12202] m920x_read = error: -19
[  734.536738][T12202] dvb-usb: error while querying for an remote control event.
[  734.673778][T12202] m920x_read = error: -19
[  734.810581][T12202] dvb-usb: error while querying for an remote control event.
[  735.094295][T12202] m920x_read = error: -19
[  735.162411][T12202] dvb-usb: error while querying for an remote control event.
[  735.392429][ T5950] m920x_read = error: -19
[  735.396852][ T5950] dvb-usb: error while querying for an remote control event.
[  735.612392][T12202] m920x_read = error: -19
[  735.661345][T12202] dvb-usb: error while querying for an remote control event.
[  735.954379][T12202] m920x_read = error: -19
[  735.958800][T12202] dvb-usb: error while querying for an remote control event.
[  736.225195][ T5950] m920x_read = error: -19
[  736.229783][ T5950] dvb-usb: error while querying for an remote control event.
[  736.373325][ T5950] m920x_read = error: -19
[  736.380422][ T5950] dvb-usb: error while querying for an remote control event.
[  736.463698][T14797] FAULT_INJECTION: forcing a failure.
[  736.463698][T14797] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  736.534337][T12202] m920x_read = error: -19
[  736.538902][T12202] dvb-usb: error while querying for an remote control event.
[  736.577354][T14797] CPU: 1 UID: 0 PID: 14797 Comm: syz.3.2063 Not tainted syzkaller #0 PREEMPT(full) 
[  736.577385][T14797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  736.577399][T14797] Call Trace:
[  736.577409][T14797]  <TASK>
[  736.577420][T14797]  dump_stack_lvl+0x189/0x250
[  736.577452][T14797]  ? __pfx____ratelimit+0x10/0x10
[  736.577473][T14797]  ? __pfx_dump_stack_lvl+0x10/0x10
[  736.577499][T14797]  ? __pfx__printk+0x10/0x10
[  736.577542][T14797]  should_fail_ex+0x414/0x560
[  736.577579][T14797]  _copy_to_user+0x31/0xb0
[  736.577609][T14797]  simple_read_from_buffer+0xe1/0x170
[  736.577645][T14797]  proc_fail_nth_read+0x1b3/0x220
[  736.577672][T14797]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  736.577700][T14797]  ? rw_verify_area+0x2a6/0x4d0
[  736.577726][T14797]  ? __lock_acquire+0xab9/0xd20
[  736.577754][T14797]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  736.577780][T14797]  vfs_read+0x200/0xa30
[  736.577806][T14797]  ? fdget_pos+0x247/0x320
[  736.577830][T14797]  ? __pfx___mutex_lock+0x10/0x10
[  736.577853][T14797]  ? __pfx_vfs_read+0x10/0x10
[  736.577882][T14797]  ? __fget_files+0x2a/0x420
[  736.577905][T14797]  ? __fget_files+0x3a0/0x420
[  736.577922][T14797]  ? __fget_files+0x2a/0x420
[  736.577957][T14797]  ksys_read+0x145/0x250
[  736.577988][T14797]  ? __pfx_ksys_read+0x10/0x10
[  736.578020][T14797]  ? lockdep_hardirqs_on+0x9c/0x150
[  736.578045][T14797]  __do_fast_syscall_32+0xb6/0x2b0
[  736.578068][T14797]  ? lockdep_hardirqs_on+0x9c/0x150
[  736.578093][T14797]  do_fast_syscall_32+0x34/0x80
[  736.578116][T14797]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  736.578141][T14797] RIP: 0023:0xf7f38539
[  736.578159][T14797] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  736.578177][T14797] RSP: 002b:00000000f5446590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  736.578198][T14797] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f5446620
[  736.578212][T14797] RDX: 000000000000000f RSI: 00000000f73c4ff4 RDI: 0000000000000000
[  736.578225][T14797] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  736.578237][T14797] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  736.578250][T14797] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  736.578279][T14797]  </TASK>
[  736.692383][T12202] m920x_read = error: -19
[  737.351633][T14817] netlink: 'syz.1.2067': attribute type 4 has an invalid length.
[  737.423572][T14821] netlink: 'syz.1.2067': attribute type 4 has an invalid length.
[  737.506848][ T5946] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  737.671067][ T5946] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  737.754930][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.773960][ T5946] usb 4-1: Product: syz
[  737.807345][T12202] dvb-usb: error while querying for an remote control event.
[  737.808466][ T5946] usb 4-1: Manufacturer: syz
[  737.927534][ T5946] usb 4-1: SerialNumber: syz
[  737.949915][ T5946] usb 4-1: config 0 descriptor??
[  738.005783][T12202] m920x_read = error: -19
[  738.010291][T12202] dvb-usb: error while querying for an remote control event.
[  738.135947][T14831] FAULT_INJECTION: forcing a failure.
[  738.135947][T14831] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  738.182049][T14831] CPU: 0 UID: 0 PID: 14831 Comm: syz.0.2070 Not tainted syzkaller #0 PREEMPT(full) 
[  738.182132][T14831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  738.182143][T14831] Call Trace:
[  738.182154][T14831]  <TASK>
[  738.182165][T14831]  dump_stack_lvl+0x189/0x250
[  738.182200][T14831]  ? __pfx____ratelimit+0x10/0x10
[  738.182222][T14831]  ? __pfx_dump_stack_lvl+0x10/0x10
[  738.182248][T14831]  ? __pfx__printk+0x10/0x10
[  738.182277][T14831]  ? __might_fault+0xb0/0x130
[  738.182312][T14831]  should_fail_ex+0x414/0x560
[  738.182351][T14831]  _copy_to_iter+0x1de/0x1790
[  738.182377][T14831]  ? __lock_acquire+0xab9/0xd20
[  738.182421][T14831]  ? __pfx__copy_to_iter+0x10/0x10
[  738.182450][T14831]  ? is_bpf_text_address+0x26/0x2b0
[  738.182481][T14831]  __skb_datagram_iter+0x41a/0x990
[  738.182508][T14831]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  738.182553][T14831]  skb_copy_datagram_iter+0xc5/0x230
[  738.182587][T14831]  tcp_recvmsg_locked+0xec6/0x3660
[  738.182635][T14831]  ? __lock_acquire+0xab9/0xd20
[  738.182683][T14831]  ? __pfx_tcp_recvmsg_locked+0x10/0x10
[  738.182805][T14831]  ? __lock_acquire+0xab9/0xd20
[  738.182850][T14831]  ? __local_bh_enable_ip+0x12d/0x1c0
[  738.182872][T14831]  ? lockdep_hardirqs_on+0x9c/0x150
[  738.182894][T14831]  ? __local_bh_enable_ip+0x12d/0x1c0
[  738.182926][T14831]  tcp_recvmsg+0x216/0x810
[  738.182946][T14831]  ? __pfx_tcp_recvmsg+0x10/0x10
[  738.182966][T14831]  ? aa_sk_perm+0x81e/0x950
[  738.182995][T14831]  ? sock_rps_record_flow+0x19/0x410
[  738.183030][T14831]  inet_recvmsg+0x147/0x250
[  738.183065][T14831]  ? __pfx_inet_recvmsg+0x10/0x10
[  738.183104][T14831]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  738.183120][T14831]  ? security_socket_recvmsg+0x7e/0x2e0
[  738.183140][T14831]  sock_recvmsg+0x1a8/0x270
[  738.183172][T14831]  ____sys_recvmsg+0x1c9/0x460
[  738.183211][T14831]  ? __pfx_____sys_recvmsg+0x10/0x10
[  738.183235][T14831]  ? get_compat_msghdr+0x37e/0x4a0
[  738.183270][T14831]  ? get_pid_task+0x20/0x1f0
[  738.183295][T14831]  ___sys_recvmsg+0x1b5/0x510
[  738.183323][T14831]  ? __pfx____sys_recvmsg+0x10/0x10
[  738.183377][T14831]  ? __fget_files+0x3a0/0x420
[  738.183409][T14831]  __sys_recvmsg+0x161/0x220
[  738.183438][T14831]  ? __pfx___sys_recvmsg+0x10/0x10
[  738.183478][T14831]  ? lockdep_hardirqs_on+0x9c/0x150
[  738.183504][T14831]  __do_fast_syscall_32+0xb6/0x2b0
[  738.183527][T14831]  ? lockdep_hardirqs_on+0x9c/0x150
[  738.183550][T14831]  do_fast_syscall_32+0x34/0x80
[  738.183571][T14831]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  738.183597][T14831] RIP: 0023:0xf707e539
[  738.183616][T14831] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  738.183635][T14831] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000174
[  738.183658][T14831] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000580
[  738.183673][T14831] RDX: 0000000000000700 RSI: 0000000000000000 RDI: 0000000000000000
[  738.183692][T14831] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  738.183706][T14831] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  738.183727][T14831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  738.183767][T14831]  </TASK>
[  738.516167][    C0] vkms_vblank_simulate: vblank timer overrun
[  738.523848][ T5946] hso 4-1:0.0: Failed to find INT IN ep
[  738.530359][ T5946] usb-storage 4-1:0.0: USB Mass Storage device detected
[  738.581784][T12202] m920x_read = error: -19
[  738.586420][T12202] dvb-usb: error while querying for an remote control event.
[  738.701689][ T5865] m920x_read = error: -19
[  738.706239][ T5865] dvb-usb: error while querying for an remote control event.
[  738.831899][ T5865] m920x_read = error: -19
[  738.836942][ T5865] dvb-usb: error while querying for an remote control event.
[  738.951589][ T5865] m920x_read = error: -19
[  738.963204][T14833] gtp0: left promiscuous mode
[  738.968867][T14833] gtp1: left promiscuous mode
[  738.974187][ T5865] dvb-usb: error while querying for an remote control event.
[  738.992426][T14833] gtp2: left promiscuous mode
[  739.060074][T14837] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2071'.
[  739.074176][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2072'.
[  739.121934][T12202] m920x_read = error: -19
[  739.126536][T12202] dvb-usb: error while querying for an remote control event.
[  739.252205][T12202] m920x_read = error: -19
[  739.256899][T12202] dvb-usb: error while querying for an remote control event.
[  739.391614][T12202] m920x_read = error: -19
[  739.406307][T12202] dvb-usb: error while querying for an remote control event.
[  739.543679][T12202] m920x_read = error: -19
[  739.548376][T12202] dvb-usb: error while querying for an remote control event.
[  739.882026][T12202] m920x_read = error: -19
[  739.897136][T12202] dvb-usb: error while querying for an remote control event.
[  740.022304][T12202] m920x_read = error: -19
[  740.138444][T12202] dvb-usb: error while querying for an remote control event.
[  740.226811][T12202] usb 4-1: USB disconnect, device number 94
[  740.273642][ T5950] m920x_read = error: -19
[  740.282530][ T5950] dvb-usb: error while querying for an remote control event.
[  740.401545][ T5950] m920x_read = error: -19
[  740.406228][ T5950] dvb-usb: error while querying for an remote control event.
[  740.541987][T12202] m920x_read = error: -19
[  740.546581][T12202] dvb-usb: error while querying for an remote control event.
[  740.671895][T12202] m920x_read = error: -19
[  740.676591][T12202] dvb-usb: error while querying for an remote control event.
[  741.172257][T12202] m920x_read = error: -19
[  741.176684][T12202] dvb-usb: error while querying for an remote control event.
[  741.427873][T14890] fuse: Invalid uid '00000000000000000003'
[  741.491010][T14893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2081'.
[  741.502890][ T5865] m920x_read = error: -19
[  741.528085][ T5865] dvb-usb: error while querying for an remote control event.
[  741.683294][ T5865] m920x_read = error: -19
[  741.693329][ T5865] dvb-usb: error while querying for an remote control event.
[  741.831919][ T5865] m920x_read = error: -19
[  741.836775][ T5865] dvb-usb: error while querying for an remote control event.
[  741.962056][ T5865] m920x_read = error: -19
[  741.966927][ T5865] dvb-usb: error while querying for an remote control event.
[  742.093551][ T5865] m920x_read = error: -19
[  742.115605][ T5865] dvb-usb: error while querying for an remote control event.
[  742.257037][ T5865] m920x_read = error: -19
[  742.263888][T14903] ptrace attach of "./syz-executor exec"[5877] was attempted by "./syz-executor exec"[14903]
[  742.285805][ T5865] dvb-usb: error while querying for an remote control event.
[  742.521724][T12202] m920x_read = error: -19
[  742.526644][T12202] dvb-usb: error while querying for an remote control event.
[  742.572244][T14903] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2093'.
[  742.643901][T14908] ptrace attach of "./syz-executor exec"[5875] was attempted by "./syz-executor exec"[14908]
[  742.652857][T12202] m920x_read = error: -19
[  742.660628][T12202] dvb-usb: error while querying for an remote control event.
[  742.665390][T14908] dns_resolver: Unsupported server list version (0)
[  742.791784][T12202] m920x_read = error: -19
[  742.800004][T12202] dvb-usb: error while querying for an remote control event.
[  742.955683][T12202] m920x_read = error: -19
[  742.960363][T12202] dvb-usb: error while querying for an remote control event.
[  743.283255][ T5865] m920x_read = error: -19
[  743.290322][ T5865] dvb-usb: error while querying for an remote control event.
[  743.431792][ T5865] m920x_read = error: -19
[  743.436474][ T5865] dvb-usb: error while querying for an remote control event.
[  743.568281][ T5865] m920x_read = error: -19
[  743.598156][ T5865] dvb-usb: error while querying for an remote control event.
[  743.731832][ T5865] m920x_read = error: -19
[  743.790578][ T5865] dvb-usb: error while querying for an remote control event.
[  743.941962][ T5865] m920x_read = error: -19
[  743.961149][ T5865] dvb-usb: error while querying for an remote control event.
[  744.061758][ T5944] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  744.129191][ T5865] m920x_read = error: -19
[  744.146196][ T5865] dvb-usb: error while querying for an remote control event.
[  744.246023][ T5944] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  744.270579][ T5944] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  744.294979][ T5865] m920x_read = error: -19
[  744.302649][ T5865] dvb-usb: error while querying for an remote control event.
[  744.305652][ T5944] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  744.321291][ T5944] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  744.341273][ T5944] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  744.358600][ T5944] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  744.368438][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  744.377107][ T5944] usb 5-1: Product: syz
[  744.383812][ T5944] usb 5-1: Manufacturer: syz
[  744.431638][ T5865] m920x_read = error: -19
[  744.454728][ T5865] dvb-usb: error while querying for an remote control event.
[  744.512583][ T5944] cdc_wdm 5-1:1.0: skipping garbage
[  744.532019][ T5944] cdc_wdm 5-1:1.0: skipping garbage
[  744.582104][T14933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2088'.
[  744.776615][ T5865] m920x_read = error: -19
[  744.791744][ T5865] dvb-usb: error while querying for an remote control event.
[  744.811711][ T5944] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  744.842064][ T5944] cdc_wdm 5-1:1.0: Unknown control protocol
[  744.941638][ T5950] m920x_read = error: -19
[  744.946431][ T5950] dvb-usb: error while querying for an remote control event.
[  745.141682][ T5944] usb 5-1: USB disconnect, device number 97
[  745.201001][ T5950] m920x_read = error: -19
[  745.221906][ T5950] dvb-usb: error while querying for an remote control event.
[  745.231954][ T5865] usb 2-1: new full-speed USB device number 97 using dummy_hcd
[  745.259451][T14939] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2087'.
[  745.332535][ T5950] m920x_read = error: -19
[  745.347654][ T5950] dvb-usb: error while querying for an remote control event.
[  745.406532][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  745.419258][ T5865] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  745.443038][ T5865] usb 2-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00
[  745.461568][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  745.471867][ T5950] m920x_read = error: -19
[  745.476364][ T5950] dvb-usb: error while querying for an remote control event.
[  745.507672][ T5865] usb 2-1: config 0 descriptor??
[  745.515154][T14943] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  745.592418][ T5950] m920x_read = error: -19
[  745.605208][ T5950] dvb-usb: error while querying for an remote control event.
[  745.731882][ T5950] m920x_read = error: -19
[  745.741853][ T5950] dvb-usb: error while querying for an remote control event.
[  745.854208][ T5950] m920x_read = error: -19
[  745.877463][ T5950] dvb-usb: error while querying for an remote control event.
[  745.935218][ T5865] uclogic 0003:28BD:0074.0011: interface is invalid, ignoring
[  746.002135][ T5865] m920x_read = error: -19
[  746.013930][ T5865] dvb-usb: error while querying for an remote control event.
[  746.181601][ T5865] m920x_read = error: -19
[  746.187816][ T5865] dvb-usb: error while querying for an remote control event.
[  746.321834][ T5865] m920x_read = error: -19
[  746.335875][ T5865] dvb-usb: error while querying for an remote control event.
[  746.462849][ T5865] m920x_read = error: -19
[  746.467790][ T5865] dvb-usb: error while querying for an remote control event.
[  746.581931][ T5865] m920x_read = error: -19
[  746.586429][ T5865] dvb-usb: error while querying for an remote control event.
[  746.711657][ T5865] m920x_read = error: -19
[  746.718607][ T5865] dvb-usb: error while querying for an remote control event.
[  746.841570][ T5865] m920x_read = error: -19
[  746.845988][ T5865] dvb-usb: error while querying for an remote control event.
[  746.962556][ T5865] m920x_read = error: -19
[  746.967247][ T5865] dvb-usb: error while querying for an remote control event.
[  747.102001][ T5865] m920x_read = error: -19
[  747.122377][ T5865] dvb-usb: error while querying for an remote control event.
[  747.271832][ T5865] m920x_read = error: -19
[  747.299476][ T5865] dvb-usb: error while querying for an remote control event.
[  747.572747][T12202] m920x_read = error: -19
[  747.577260][T12202] dvb-usb: error while querying for an remote control event.
[  747.719429][T12202] m920x_read = error: -19
[  747.736812][T12202] dvb-usb: error while querying for an remote control event.
[  747.762412][ T5865] usb 2-1: USB disconnect, device number 97
[  747.931988][T12202] m920x_read = error: -19
[  747.945571][T12202] dvb-usb: error while querying for an remote control event.
[  748.117862][ T5865] m920x_read = error: -19
[  748.127939][ T5865] dvb-usb: error while querying for an remote control event.
[  748.177720][ T5946] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  748.295023][ T5865] m920x_read = error: -19
[  748.299631][ T5865] dvb-usb: error while querying for an remote control event.
[  748.477178][ T5946] usb 4-1: New USB device found, idVendor=13e9, idProduct=8b4e, bcdDevice=9c.08
[  748.492188][ T5865] m920x_read = error: -19
[  748.496838][ T5865] dvb-usb: error while querying for an remote control event.
[  748.501509][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  748.582914][ T5946] usb 4-1: config 0 descriptor??
[  748.614888][ T5865] m920x_read = error: -19
[  748.629963][ T5865] dvb-usb: error while querying for an remote control event.
[  748.673295][T15027] fuse: Invalid uid '00000000000000000003'
[  748.736816][T15030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2101'.
[  748.776033][ T5865] m920x_read = error: -19
[  748.783710][ T5865] dvb-usb: error while querying for an remote control event.
[  748.931705][ T5865] m920x_read = error: -19
[  748.938641][ T5865] dvb-usb: error while querying for an remote control event.
[  749.082172][ T5950] m920x_read = error: -19
[  749.086792][ T5950] dvb-usb: error while querying for an remote control event.
[  749.207162][ T5950] m920x_read = error: -19
[  749.216279][ T5950] dvb-usb: error while querying for an remote control event.
[  749.331836][ T5950] m920x_read = error: -19
[  749.336309][ T5950] dvb-usb: error while querying for an remote control event.
[  749.393638][T15050] netlink: 'syz.4.2105': attribute type 4 has an invalid length.
[  749.486459][T15051] netlink: 'syz.4.2105': attribute type 4 has an invalid length.
[  749.542180][ T5950] m920x_read = error: -19
[  749.549234][ T5950] dvb-usb: error while querying for an remote control event.
[  749.702204][ T5865] m920x_read = error: -19
[  749.706771][ T5865] dvb-usb: error while querying for an remote control event.
[  749.827780][ T5865] m920x_read = error: -19
[  749.836701][ T5865] dvb-usb: error while querying for an remote control event.
[  749.856376][   T30] audit: type=1326 audit(1757342905.400:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.0.2106" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x0
[  750.071555][ T5865] m920x_read = error: -19
[  750.076094][ T5865] dvb-usb: error while querying for an remote control event.
[  750.192261][T15054] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  750.199107][T15054] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  750.207723][T15054] vhci_hcd vhci_hcd.0: Device attached
[  750.301916][ T5950] m920x_read = error: -19
[  750.306940][ T5950] dvb-usb: error while querying for an remote control event.
[  750.422324][ T5950] m920x_read = error: -19
[  750.427002][ T5950] dvb-usb: error while querying for an remote control event.
[  750.471965][ T5865] usb 34-1: SetAddress Request (2) to port 0
[  750.480060][ T5865] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd
[  750.552445][ T5950] m920x_read = error: -19
[  750.564601][ T5950] dvb-usb: error while querying for an remote control event.
[  750.645179][ T5946] usb 4-1: USB disconnect, device number 95
[  750.682920][ T5950] m920x_read = error: -19
[  750.707426][ T5950] dvb-usb: error while querying for an remote control event.
[  750.813985][T15073] FAULT_INJECTION: forcing a failure.
[  750.813985][T15073] name failslab, interval 1, probability 0, space 0, times 0
[  750.841844][ T5950] m920x_read = error: -19
[  750.846351][ T5950] dvb-usb: error while querying for an remote control event.
[  750.857303][T15073] CPU: 0 UID: 0 PID: 15073 Comm: syz.3.2108 Not tainted syzkaller #0 PREEMPT(full) 
[  750.857335][T15073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  750.857349][T15073] Call Trace:
[  750.857359][T15073]  <TASK>
[  750.857369][T15073]  dump_stack_lvl+0x189/0x250
[  750.857402][T15073]  ? __pfx____ratelimit+0x10/0x10
[  750.857424][T15073]  ? __pfx_dump_stack_lvl+0x10/0x10
[  750.857450][T15073]  ? __pfx__printk+0x10/0x10
[  750.857496][T15073]  should_fail_ex+0x414/0x560
[  750.857534][T15073]  should_failslab+0xa8/0x100
[  750.857569][T15073]  __kmalloc_cache_noprof+0x70/0x3d0
[  750.857598][T15073]  ? sctp_add_bind_addr+0x8c/0x370
[  750.857650][T15073]  sctp_add_bind_addr+0x8c/0x370
[  750.857688][T15073]  sctp_copy_local_addr_list+0x30b/0x4e0
[  750.857726][T15073]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  750.857760][T15073]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  750.857798][T15073]  ? sctp_v4_is_any+0x35/0x60
[  750.857818][T15073]  ? sctp_copy_one_addr+0x93/0x360
[  750.857859][T15073]  sctp_bind_addr_copy+0xb3/0x3c0
[  750.857894][T15073]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  750.857928][T15073]  sctp_connect_new_asoc+0x2e0/0x690
[  750.857958][T15073]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  750.857982][T15073]  ? __local_bh_enable_ip+0x12d/0x1c0
[  750.858013][T15073]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  750.858039][T15073]  ? security_sctp_bind_connect+0x7e/0x2e0
[  750.858072][T15073]  sctp_sendmsg+0x155c/0x2810
[  750.858110][T15073]  ? __pfx_sctp_sendmsg+0x10/0x10
[  750.858139][T15073]  ? aa_sk_perm+0x81e/0x950
[  750.858177][T15073]  ? __pfx_aa_sk_perm+0x10/0x10
[  750.858213][T15073]  ? sock_rps_record_flow+0x19/0x410
[  750.858247][T15073]  ? inet_sendmsg+0x2f4/0x370
[  750.858282][T15073]  __sock_sendmsg+0x19c/0x270
[  750.858319][T15073]  ____sys_sendmsg+0x52d/0x830
[  750.858352][T15073]  ? __pfx_____sys_sendmsg+0x10/0x10
[  750.858398][T15073]  ___sys_sendmsg+0x21f/0x2a0
[  750.858428][T15073]  ? __pfx____sys_sendmsg+0x10/0x10
[  750.858495][T15073]  ? __fget_files+0x2a/0x420
[  750.858513][T15073]  ? __fget_files+0x3a0/0x420
[  750.858545][T15073]  __sys_sendmmsg+0x28e/0x430
[  750.858578][T15073]  ? __pfx___sys_sendmmsg+0x10/0x10
[  750.858615][T15073]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  750.858666][T15073]  ? ksys_write+0x22a/0x250
[  750.858708][T15073]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  750.858737][T15073]  __do_fast_syscall_32+0xb6/0x2b0
[  750.858762][T15073]  ? lockdep_hardirqs_on+0x9c/0x150
[  750.858788][T15073]  do_fast_syscall_32+0x34/0x80
[  750.858812][T15073]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  750.858837][T15073] RIP: 0023:0xf7f38539
[  750.858855][T15073] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  750.858872][T15073] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  750.858893][T15073] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000880
[  750.858907][T15073] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  750.858919][T15073] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  750.858932][T15073] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  750.858945][T15073] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  750.858976][T15073]  </TASK>
[  751.191481][    C0] vkms_vblank_simulate: vblank timer overrun
[  751.359249][ T5950] m920x_read = error: -19
[  751.363755][ T5950] dvb-usb: error while querying for an remote control event.
[  751.471539][ T5950] m920x_read = error: -19
[  751.476046][ T5950] dvb-usb: error while querying for an remote control event.
[  751.591678][T12202] m920x_read = error: -19
[  751.596327][T12202] dvb-usb: error while querying for an remote control event.
[  751.748369][T12202] m920x_read = error: -19
[  751.753356][T12202] dvb-usb: error while querying for an remote control event.
[  751.801524][ T5950] usb 5-1: new full-speed USB device number 98 using dummy_hcd
[  751.864017][T12202] m920x_read = error: -19
[  751.871510][T12202] dvb-usb: error while querying for an remote control event.
[  751.968212][ T5950] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  752.021674][T12202] m920x_read = error: -19
[  752.026404][T12202] dvb-usb: error while querying for an remote control event.
[  752.036601][ T5950] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  752.079909][ T5950] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  752.089717][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  752.138556][ T5950] usb 5-1: SerialNumber: syz
[  752.176843][ T5950] usb 5-1: 0:2 : does not exist
[  752.182903][T12202] m920x_read = error: -19
[  752.187663][T12202] dvb-usb: error while querying for an remote control event.
[  752.302592][ T5950] m920x_read = error: -19
[  752.307004][ T5950] dvb-usb: error while querying for an remote control event.
[  752.380933][ T5950] usb 5-1: USB disconnect, device number 98
[  752.475703][T12202] m920x_read = error: -19
[  752.480765][T12202] dvb-usb: error while querying for an remote control event.
[  752.515784][ T6110] udevd[6110]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  752.651607][    T9] m920x_read = error: -19
[  752.657542][    T9] dvb-usb: error while querying for an remote control event.
[  752.712733][T15136] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  752.801966][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  752.820210][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  752.833838][ T5950] m920x_read = error: -19
[  752.839469][ T5950] dvb-usb: error while querying for an remote control event.
[  752.952007][ T5950] m920x_read = error: -19
[  752.958181][ T5950] dvb-usb: error while querying for an remote control event.
[  753.039685][T15055] vhci_hcd: connection reset by peer
[  753.054191][ T1145] vhci_hcd: stop threads
[  753.064835][ T1145] vhci_hcd: release socket
[  753.085296][ T1145] vhci_hcd: disconnect device
[  753.121604][ T5950] m920x_read = error: -19
[  753.126309][ T5950] dvb-usb: error while querying for an remote control event.
[  753.271549][ T5950] m920x_read = error: -19
[  753.276446][ T5950] dvb-usb: error while querying for an remote control event.
[  753.288150][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2121'.
[  753.334568][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2121'.
[  753.345488][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2121'.
[  753.356565][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2121'.
[  753.365982][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2121'.
[  753.375730][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2121'.
[  753.387331][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2121'.
[  753.396751][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2121'.
[  753.406142][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2121'.
[  753.415860][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2121'.
[  753.431974][ T5950] m920x_read = error: -19
[  753.451621][ T5950] dvb-usb: error while querying for an remote control event.
[  753.561924][ T5950] m920x_read = error: -19
[  753.577580][ T5950] dvb-usb: error while querying for an remote control event.
[  753.655793][T15184] FAULT_INJECTION: forcing a failure.
[  753.655793][T15184] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  753.672596][T15184] CPU: 0 UID: 0 PID: 15184 Comm: syz.0.2124 Not tainted syzkaller #0 PREEMPT(full) 
[  753.672636][T15184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  753.672650][T15184] Call Trace:
[  753.672659][T15184]  <TASK>
[  753.672668][T15184]  dump_stack_lvl+0x189/0x250
[  753.672698][T15184]  ? __pfx____ratelimit+0x10/0x10
[  753.672721][T15184]  ? __pfx_dump_stack_lvl+0x10/0x10
[  753.672745][T15184]  ? __pfx__printk+0x10/0x10
[  753.672774][T15184]  ? __might_fault+0xb0/0x130
[  753.672815][T15184]  should_fail_ex+0x414/0x560
[  753.672851][T15184]  _copy_from_iter+0x1de/0x1790
[  753.672879][T15184]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  753.672910][T15184]  ? policy_nodemask+0x27c/0x720
[  753.672937][T15184]  ? __pfx__copy_from_iter+0x10/0x10
[  753.672969][T15184]  ? set_page_refcounted+0xa0/0x1e0
[  753.672998][T15184]  ? page_copy_sane+0x4e/0x280
[  753.673023][T15184]  copy_page_from_iter+0xdd/0x170
[  753.673060][T15184]  tun_get_user+0x1d7b/0x3e20
[  753.673093][T15184]  ? tun_get_user+0x6f6/0x3e20
[  753.673125][T15184]  ? aa_file_perm+0x44d/0x1550
[  753.673147][T15184]  ? __pfx_tun_get_user+0x10/0x10
[  753.673170][T15184]  ? _parse_integer_limit+0x1ae/0x1f0
[  753.673200][T15184]  ? __lock_acquire+0xab9/0xd20
[  753.673238][T15184]  ? ref_tracker_alloc+0x318/0x460
[  753.673255][T15184]  ? __lock_acquire+0xab9/0xd20
[  753.673288][T15184]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  753.673313][T15184]  ? tun_get+0x1c/0x2f0
[  753.673343][T15184]  ? tun_get+0x1c/0x2f0
[  753.673364][T15184]  ? tun_get+0x1c/0x2f0
[  753.673392][T15184]  tun_chr_write_iter+0x113/0x200
[  753.673419][T15184]  vfs_write+0x5c6/0xb30
[  753.673451][T15184]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  753.673475][T15184]  ? __pfx_vfs_write+0x10/0x10
[  753.673513][T15184]  ? __fget_files+0x2a/0x420
[  753.673542][T15184]  ksys_write+0x145/0x250
[  753.673571][T15184]  ? __pfx_ksys_write+0x10/0x10
[  753.673601][T15184]  ? lockdep_hardirqs_on+0x9c/0x150
[  753.673624][T15184]  __do_fast_syscall_32+0xb6/0x2b0
[  753.673647][T15184]  ? lockdep_hardirqs_on+0x9c/0x150
[  753.673670][T15184]  do_fast_syscall_32+0x34/0x80
[  753.673692][T15184]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  753.673718][T15184] RIP: 0023:0xf707e539
[  753.673737][T15184] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  753.673755][T15184] RSP: 002b:00000000f546e520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  753.673777][T15184] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000000
[  753.673791][T15184] RDX: 0000000000000046 RSI: 00000000f73f4ff4 RDI: 0000000000000000
[  753.673805][T15184] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  753.673817][T15184] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  753.673829][T15184] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  753.673860][T15184]  </TASK>
[  753.971686][    C0] vkms_vblank_simulate: vblank timer overrun
[  753.979773][    T9] m920x_read = error: -19
[  753.985029][    T9] dvb-usb: error while querying for an remote control event.
[  754.101679][ T5950] m920x_read = error: -19
[  754.106415][ T5950] dvb-usb: error while querying for an remote control event.
[  754.221610][ T5950] m920x_read = error: -19
[  754.226123][ T5950] dvb-usb: error while querying for an remote control event.
[  754.341662][ T5950] m920x_read = error: -19
[  754.350869][ T5950] dvb-usb: error while querying for an remote control event.
[  754.435732][   T30] audit: type=1804 audit(1757342909.980:703): pid=15199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2128" name="file0" dev="ramfs" ino=57971 res=1 errno=0
[  754.462769][ T5950] m920x_read = error: -19
[  754.474956][ T5950] dvb-usb: error while querying for an remote control event.
[  754.592580][ T5950] m920x_read = error: -19
[  754.600680][ T5950] dvb-usb: error while querying for an remote control event.
[  754.732122][ T5950] m920x_read = error: -19
[  754.763597][ T5950] dvb-usb: error while querying for an remote control event.
[  754.806628][T15206] veth1_to_bond: entered allmulticast mode
[  754.873023][ T5950] m920x_read = error: -19
[  754.878442][ T5950] dvb-usb: error while querying for an remote control event.
[  754.891012][T15206] bond0: (slave bond_slave_1): Releasing backup interface
[  754.994299][ T5950] m920x_read = error: -19
[  755.001541][ T5950] dvb-usb: error while querying for an remote control event.
[  755.036891][T15219] FAULT_INJECTION: forcing a failure.
[  755.036891][T15219] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  755.056501][T15219] CPU: 1 UID: 0 PID: 15219 Comm: syz.2.2132 Not tainted syzkaller #0 PREEMPT(full) 
[  755.056531][T15219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  755.056545][T15219] Call Trace:
[  755.056554][T15219]  <TASK>
[  755.056563][T15219]  dump_stack_lvl+0x189/0x250
[  755.056594][T15219]  ? __pfx____ratelimit+0x10/0x10
[  755.056615][T15219]  ? __pfx_dump_stack_lvl+0x10/0x10
[  755.056640][T15219]  ? __pfx__printk+0x10/0x10
[  755.056669][T15219]  ? __might_fault+0xb0/0x130
[  755.056708][T15219]  should_fail_ex+0x414/0x560
[  755.056744][T15219]  _copy_from_iter+0x1de/0x1790
[  755.056777][T15219]  ? rcu_is_watching+0x15/0xb0
[  755.056800][T15219]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  755.056831][T15219]  ? __pfx__copy_from_iter+0x10/0x10
[  755.056857][T15219]  ? __build_skb_around+0x257/0x3e0
[  755.056883][T15219]  ? netlink_sendmsg+0x642/0xb30
[  755.056904][T15219]  ? skb_put+0x11b/0x210
[  755.056931][T15219]  netlink_sendmsg+0x6b2/0xb30
[  755.056964][T15219]  ? __pfx_netlink_sendmsg+0x10/0x10
[  755.056990][T15219]  ? __import_iovec+0x5d4/0x7f0
[  755.057015][T15219]  ? aa_sock_msg_perm+0xf1/0x1d0
[  755.057037][T15219]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  755.057064][T15219]  ? __pfx_netlink_sendmsg+0x10/0x10
[  755.057088][T15219]  __sock_sendmsg+0x21c/0x270
[  755.057123][T15219]  ____sys_sendmsg+0x505/0x830
[  755.057155][T15219]  ? __pfx_____sys_sendmsg+0x10/0x10
[  755.057199][T15219]  ___sys_sendmsg+0x21f/0x2a0
[  755.057237][T15219]  ? __pfx____sys_sendmsg+0x10/0x10
[  755.057302][T15219]  ? __fget_files+0x2a/0x420
[  755.057321][T15219]  ? __fget_files+0x3a0/0x420
[  755.057351][T15219]  __sys_sendmsg+0x164/0x220
[  755.057380][T15219]  ? __pfx___sys_sendmsg+0x10/0x10
[  755.057423][T15219]  ? lockdep_hardirqs_on+0x9c/0x150
[  755.057448][T15219]  __do_fast_syscall_32+0xb6/0x2b0
[  755.057472][T15219]  ? lockdep_hardirqs_on+0x9c/0x150
[  755.057498][T15219]  do_fast_syscall_32+0x34/0x80
[  755.057521][T15219]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  755.057546][T15219] RIP: 0023:0xf702e539
[  755.057563][T15219] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  755.057581][T15219] RSP: 002b:00000000f541e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  755.057603][T15219] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0
[  755.057617][T15219] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000
[  755.057629][T15219] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  755.057641][T15219] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  755.057653][T15219] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  755.057682][T15219]  </TASK>
[  755.131658][    T9] m920x_read = error: -19
[  755.342010][    T9] dvb-usb: error while querying for an remote control event.
[  755.451665][    T9] m920x_read = error: -19
[  755.456304][    T9] dvb-usb: error while querying for an remote control event.
[  755.571795][    T9] m920x_read = error: -19
[  755.576440][    T9] dvb-usb: error while querying for an remote control event.
[  755.584304][ T5865] usb 34-1: device descriptor read/8, error -110
[  755.610107][T15232] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  755.693649][    T9] m920x_read = error: -19
[  755.698073][    T9] dvb-usb: error while querying for an remote control event.
[  756.047490][ T5865] usb usb34-port1: attempt power cycle
[  756.101880][    T9] m920x_read = error: -19
[  756.256954][    T9] dvb-usb: error while querying for an remote control event.
[  756.401886][    T9] m920x_read = error: -19
[  756.406520][    T9] dvb-usb: error while querying for an remote control event.
[  756.653446][    T9] m920x_read = error: -19
[  756.682578][    T9] dvb-usb: error while querying for an remote control event.
[  756.954775][    T9] m920x_read = error: -19
[  756.962221][    T9] dvb-usb: error while querying for an remote control event.
[  756.970669][ T5865] usb usb34-port1: unable to enumerate USB device
[  757.086777][    T9] m920x_read = error: -19
[  757.099101][    T9] dvb-usb: error while querying for an remote control event.
[  757.260752][    T9] m920x_read = error: -19
[  757.307618][    T9] dvb-usb: error while querying for an remote control event.
[  757.522016][    T9] m920x_read = error: -19
[  757.541826][    T9] dvb-usb: error while querying for an remote control event.
[  757.623275][T15263] netlink: 'syz.3.2140': attribute type 4 has an invalid length.
[  757.661945][T12202] m920x_read = error: -19
[  757.681468][T15263] netlink: 'syz.3.2140': attribute type 4 has an invalid length.
[  757.772544][T12202] dvb-usb: error while querying for an remote control event.
[  757.911637][T12202] m920x_read = error: -19
[  757.924434][T12202] dvb-usb: error while querying for an remote control event.
[  758.091626][T12202] m920x_read = error: -19
[  758.143854][T12202] dvb-usb: error while querying for an remote control event.
[  758.359720][T12202] m920x_read = error: -19
[  758.367968][T12202] dvb-usb: error while querying for an remote control event.
[  758.521581][T12202] m920x_read = error: -19
[  758.526008][T12202] dvb-usb: error while querying for an remote control event.
[  758.537158][T15268] ptrace attach of "./syz-executor exec"[5872] was attempted by "./syz-executor exec"[15268]
[  758.561555][T15268] dns_resolver: Unsupported server list version (0)
[  758.604232][T15230] tipc: Disabling bearer <eth:syzkaller0>
[  758.734643][T12202] m920x_read = error: -19
[  758.866724][T12202] dvb-usb: error while querying for an remote control event.
[  758.982084][ T5865] m920x_read = error: -19
[  758.986601][ T5865] dvb-usb: error while querying for an remote control event.
[  759.101926][T12202] m920x_read = error: -19
[  759.106563][T12202] dvb-usb: error while querying for an remote control event.
[  759.221927][T12202] m920x_read = error: -19
[  759.226332][T12202] dvb-usb: error while querying for an remote control event.
[  759.371786][T12202] m920x_read = error: -19
[  759.376967][T12202] dvb-usb: error while querying for an remote control event.
[  759.489690][T15291] netlink: 'syz.4.2144': attribute type 4 has an invalid length.
[  759.531776][ T5865] m920x_read = error: -19
[  759.539704][ T5865] dvb-usb: error while querying for an remote control event.
[  759.565149][T15294] netlink: 'syz.4.2144': attribute type 4 has an invalid length.
[  759.786087][T12202] m920x_read = error: -19
[  759.790921][T12202] dvb-usb: error while querying for an remote control event.
[  759.895810][T15300] __nla_validate_parse: 47 callbacks suppressed
[  759.895834][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2149'.
[  759.911760][ T5865] m920x_read = error: -19
[  759.916554][ T5865] dvb-usb: error while querying for an remote control event.
[  760.043584][T12202] m920x_read = error: -19
[  760.051292][T12202] dvb-usb: error while querying for an remote control event.
[  760.392265][    T9] m920x_read = error: -19
[  760.397733][    T9] dvb-usb: error while querying for an remote control event.
[  760.521530][ T5865] m920x_read = error: -19
[  760.526020][ T5865] dvb-usb: error while querying for an remote control event.
[  760.571871][T12202] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  760.644530][    T9] m920x_read = error: -19
[  760.653747][    T9] dvb-usb: error while querying for an remote control event.
[  760.765372][T12202] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  760.775290][T12202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.783975][ T5865] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  760.792224][T12202] usb 1-1: Product: syz
[  760.797101][T12202] usb 1-1: Manufacturer: syz
[  760.865102][    T9] m920x_read = error: -19
[  760.954771][    T9] dvb-usb: error while querying for an remote control event.
[  760.986123][T12202] usb 1-1: SerialNumber: syz
[  761.005060][T12202] usb 1-1: config 0 descriptor??
[  761.024095][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  761.059560][ T5865] usb 2-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00
[  761.082229][ T5950] m920x_read = error: -19
[  761.086714][ T5950] dvb-usb: error while querying for an remote control event.
[  761.103587][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  761.188408][ T5865] usb 2-1: config 0 descriptor??
[  761.201823][    T9] m920x_read = error: -19
[  761.210386][    T9] dvb-usb: error while querying for an remote control event.
[  761.221760][T12202] hso 1-1:0.0: Failed to find INT IN ep
[  761.271791][T12202] usb-storage 1-1:0.0: USB Mass Storage device detected
[  761.398453][T12202] m920x_read = error: -19
[  761.408551][T12202] dvb-usb: error while querying for an remote control event.
[  761.581687][    T9] m920x_read = error: -19
[  761.586185][    T9] dvb-usb: error while querying for an remote control event.
[  761.691896][ T5865] razer 0003:1532:010D.0012: unknown main item tag 0x1
[  761.721975][    T9] m920x_read = error: -19
[  761.732627][ T5865] razer 0003:1532:010D.0012: unknown main item tag 0x2
[  761.739608][ T5865] razer 0003:1532:010D.0012: unbalanced delimiter at end of report description
[  761.749990][    T9] dvb-usb: error while querying for an remote control event.
[  761.771205][T12202] usb 1-1: USB disconnect, device number 51
[  761.817063][ T5865] razer 0003:1532:010D.0012: probe with driver razer failed with error -22
[  761.914098][ T5946] usb 2-1: USB disconnect, device number 98
[  761.921748][ T5865] m920x_read = error: -19
[  761.926324][ T5865] dvb-usb: error while querying for an remote control event.
[  762.062128][T12202] m920x_read = error: -19
[  762.078387][T12202] dvb-usb: error while querying for an remote control event.
[  762.201058][T15374] FAULT_INJECTION: forcing a failure.
[  762.201058][T15374] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  762.216447][T15374] CPU: 0 UID: 0 PID: 15374 Comm: syz.2.2156 Not tainted syzkaller #0 PREEMPT(full) 
[  762.216476][T15374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  762.216491][T15374] Call Trace:
[  762.216498][T15374]  <TASK>
[  762.216505][T15374]  dump_stack_lvl+0x189/0x250
[  762.216529][T15374]  ? __pfx____ratelimit+0x10/0x10
[  762.216544][T15374]  ? __pfx_dump_stack_lvl+0x10/0x10
[  762.216562][T15374]  ? __pfx__printk+0x10/0x10
[  762.216583][T15374]  ? __might_fault+0xb0/0x130
[  762.216612][T15374]  should_fail_ex+0x414/0x560
[  762.216638][T15374]  _copy_from_iter+0x1de/0x1790
[  762.216666][T15374]  ? __pfx__copy_from_iter+0x10/0x10
[  762.216694][T15374]  tun_get_user+0x219/0x3e20
[  762.216727][T15374]  ? aa_file_perm+0x44d/0x1550
[  762.216743][T15374]  ? __pfx_tun_get_user+0x10/0x10
[  762.216759][T15374]  ? _parse_integer_limit+0x1ae/0x1f0
[  762.216781][T15374]  ? __lock_acquire+0xab9/0xd20
[  762.216807][T15374]  ? ref_tracker_alloc+0x318/0x460
[  762.216819][T15374]  ? __lock_acquire+0xab9/0xd20
[  762.216842][T15374]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  762.216860][T15374]  ? tun_get+0x1c/0x2f0
[  762.216881][T15374]  ? tun_get+0x1c/0x2f0
[  762.216896][T15374]  ? tun_get+0x1c/0x2f0
[  762.216916][T15374]  tun_chr_write_iter+0x113/0x200
[  762.216935][T15374]  vfs_write+0x5c6/0xb30
[  762.216959][T15374]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  762.216976][T15374]  ? __pfx_vfs_write+0x10/0x10
[  762.217003][T15374]  ? __fget_files+0x2a/0x420
[  762.217023][T15374]  ksys_write+0x145/0x250
[  762.217045][T15374]  ? __pfx_ksys_write+0x10/0x10
[  762.217067][T15374]  ? lockdep_hardirqs_on+0x9c/0x150
[  762.217084][T15374]  __do_fast_syscall_32+0xb6/0x2b0
[  762.217102][T15374]  ? lockdep_hardirqs_on+0x9c/0x150
[  762.217119][T15374]  do_fast_syscall_32+0x34/0x80
[  762.217135][T15374]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  762.217154][T15374] RIP: 0023:0xf702e539
[  762.217176][T15374] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  762.217189][T15374] RSP: 002b:00000000f541e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  762.217205][T15374] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[  762.217216][T15374] RDX: 0000000000000032 RSI: 0000000000000000 RDI: 0000000000000000
[  762.217225][T15374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  762.217233][T15374] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  762.217242][T15374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  762.217263][T15374]  </TASK>
[  762.479902][    C0] vkms_vblank_simulate: vblank timer overrun
[  762.538039][T12202] m920x_read = error: -19
[  762.542773][T12202] dvb-usb: error while querying for an remote control event.
[  762.651997][ T5865] m920x_read = error: -19
[  762.656422][ T5865] dvb-usb: error while querying for an remote control event.
[  762.782053][ T5865] m920x_read = error: -19
[  762.788119][ T5865] dvb-usb: error while querying for an remote control event.
[  762.932488][T15391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2157'.
[  762.989744][ T5865] m920x_read = error: -19
[  762.994666][ T5865] dvb-usb: error while querying for an remote control event.
[  763.170550][ T5865] m920x_read = error: -19
[  763.188622][ T5865] dvb-usb: error while querying for an remote control event.
[  763.353910][T12202] m920x_read = error: -19
[  763.363356][T12202] dvb-usb: error while querying for an remote control event.
[  763.731689][T12202] m920x_read = error: -19
[  763.736413][T12202] dvb-usb: error while querying for an remote control event.
[  763.941690][    T9] m920x_read = error: -19
[  763.966545][    T9] dvb-usb: error while querying for an remote control event.
[  764.091854][ T5944] usb 2-1: new full-speed USB device number 99 using dummy_hcd
[  764.125124][    T9] m920x_read = error: -19
[  764.171297][    T9] dvb-usb: error while querying for an remote control event.
[  764.439972][    T9] m920x_read = error: -19
[  764.444899][    T9] dvb-usb: error while querying for an remote control event.
[  764.460650][ T5944] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  764.474711][ T5944] usb 2-1: config 0 has no interface number 0
[  764.489609][ T5944] usb 2-1: config 0 interface 35 has no altsetting 0
[  764.513588][ T5944] usb 2-1: New USB device found, idVendor=0f11, idProduct=1038, bcdDevice=e4.bb
[  764.560322][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.571997][    T9] m920x_read = error: -19
[  764.576466][    T9] dvb-usb: error while querying for an remote control event.
[  764.580802][ T5944] usb 2-1: Product: syz
[  764.592943][ T5944] usb 2-1: Manufacturer: syz
[  764.604544][ T5944] usb 2-1: SerialNumber: syz
[  764.635400][ T5944] usb 2-1: config 0 descriptor??
[  764.655247][ T5944] ldusb 2-1:0.35: Interrupt in endpoint not found
[  764.692038][T12202] m920x_read = error: -19
[  764.696693][T12202] dvb-usb: error while querying for an remote control event.
[  764.701531][ T5922] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  764.819811][T15477] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  764.831785][T12202] m920x_read = error: -19
[  764.836768][T12202] dvb-usb: error while querying for an remote control event.
[  764.841495][ T5922] usb 1-1: device descriptor read/64, error -71
[  765.052429][T12202] m920x_read = error: -19
[  765.057690][T12202] dvb-usb: error while querying for an remote control event.
[  765.068523][    T9] usb 2-1: USB disconnect, device number 99
[  765.311538][ T5922] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  765.698322][T12202] m920x_read = error: -19
[  765.709174][T12202] dvb-usb: error while querying for an remote control event.
[  765.831567][T12202] m920x_read = error: -19
[  765.836284][T12202] dvb-usb: error while querying for an remote control event.
[  765.862025][ T5922] usb 1-1: device descriptor read/64, error -71
[  765.972322][T12202] m920x_read = error: -19
[  765.977090][T12202] dvb-usb: error while querying for an remote control event.
[  765.992023][ T5922] usb usb1-port1: attempt power cycle
[  766.000377][T15494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2172'.
[  766.122672][T12202] m920x_read = error: -19
[  766.137142][T12202] dvb-usb: error while querying for an remote control event.
[  766.275247][T12202] m920x_read = error: -19
[  766.290162][T12202] dvb-usb: error while querying for an remote control event.
[  766.338268][ T5922] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  766.379959][ T5922] usb 1-1: device descriptor read/8, error -71
[  766.422344][    T9] m920x_read = error: -19
[  766.427464][    T9] dvb-usb: error while querying for an remote control event.
[  766.471099][T15515] netlink: 'syz.1.2176': attribute type 4 has an invalid length.
[  766.539561][T15517] netlink: 'syz.1.2176': attribute type 4 has an invalid length.
[  766.642037][ T5922] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  766.644720][T12202] m920x_read = error: -19
[  766.665058][T12202] dvb-usb: error while querying for an remote control event.
[  766.673015][ T5922] usb 1-1: device descriptor read/8, error -71
[  766.781960][T12202] m920x_read = error: -19
[  766.786765][T12202] dvb-usb: error while querying for an remote control event.
[  766.845123][ T5922] usb usb1-port1: unable to enumerate USB device
[  767.043097][T12202] m920x_read = error: -19
[  767.056682][T12202] dvb-usb: error while querying for an remote control event.
[  767.201907][T12202] m920x_read = error: -19
[  767.206467][T12202] dvb-usb: error while querying for an remote control event.
[  767.321818][T12202] m920x_read = error: -19
[  767.326502][T12202] dvb-usb: error while querying for an remote control event.
[  767.379458][T15536] program syz.2.2179 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  767.461552][ T5865] m920x_read = error: -19
[  767.466066][ T5865] dvb-usb: error while querying for an remote control event.
[  767.581519][ T5922] usb 4-1: new full-speed USB device number 96 using dummy_hcd
[  767.601687][ T5865] m920x_read = error: -19
[  767.628913][ T5865] dvb-usb: error while querying for an remote control event.
[  767.767053][ T5922] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  767.794681][ T5922] usb 4-1: config 0 has no interface number 0
[  767.812821][T12202] m920x_read = error: -19
[  767.827475][T12202] dvb-usb: error while querying for an remote control event.
[  767.827506][ T5922] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  767.881011][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  767.916478][ T5922] usb 4-1: config 0 descriptor??
[  767.966409][T15551] 8021q: adding VLAN 0 to HW filter on device bond2
[  767.981876][T12202] m920x_read = error: -19
[  767.986462][T12202] dvb-usb: error while querying for an remote control event.
[  768.006078][ T5922] usb 4-1: selecting invalid altsetting 1
[  768.022090][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2183'.
[  768.049227][ T5922] dvb_ttusb_budget: ttusb_init_controller: error
[  768.085739][ T5922] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  768.122203][T12202] m920x_read = error: -19
[  768.146605][T12202] dvb-usb: error while querying for an remote control event.
[  768.302446][ T5922] DVB: Unable to find symbol cx22700_attach()
[  768.345585][ T5865] m920x_read = error: -19
[  768.350179][ T5865] dvb-usb: error while querying for an remote control event.
[  768.399092][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2187'.
[  768.431013][T15602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2187'.
[  768.465147][ T5922] DVB: Unable to find symbol tda10046_attach()
[  768.488445][ T5922] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  768.514559][T15602] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2187'.
[  768.524931][ T5865] m920x_read = error: -19
[  768.539635][ T5922] usb 4-1: USB disconnect, device number 96
[  768.541514][ T5865] dvb-usb: error while querying for an remote control event.
[  768.721541][T12202] m920x_read = error: -19
[  768.728578][T12202] dvb-usb: error while querying for an remote control event.
[  768.938109][    T9] m920x_read = error: -19
[  768.949057][    T9] dvb-usb: error while querying for an remote control event.
[  769.164596][ T5865] m920x_read = error: -19
[  769.181234][ T5865] dvb-usb: error while querying for an remote control event.
[  769.361121][    T9] m920x_read = error: -19
[  769.389174][    T9] dvb-usb: error while querying for an remote control event.
[  769.561886][ T5865] m920x_read = error: -19
[  769.584182][T15652] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  769.601885][ T5865] dvb-usb: error while querying for an remote control event.
[  769.630506][T15652] netlink: 'syz.0.2192': attribute type 10 has an invalid length.
[  769.665876][T15639] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  769.681189][T15652] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2192'.
[  769.722171][ T5865] m920x_read = error: -19
[  769.726792][ T5865] dvb-usb: error while querying for an remote control event.
[  769.760153][T15658] FAULT_INJECTION: forcing a failure.
[  769.760153][T15658] name failslab, interval 1, probability 0, space 0, times 0
[  769.801828][T15658] CPU: 0 UID: 0 PID: 15658 Comm: syz.0.2192 Not tainted syzkaller #0 PREEMPT(full) 
[  769.801851][T15658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  769.801861][T15658] Call Trace:
[  769.801867][T15658]  <TASK>
[  769.801875][T15658]  dump_stack_lvl+0x189/0x250
[  769.801898][T15658]  ? __pfx____ratelimit+0x10/0x10
[  769.801914][T15658]  ? __pfx_dump_stack_lvl+0x10/0x10
[  769.801932][T15658]  ? __pfx__printk+0x10/0x10
[  769.801954][T15658]  ? __pfx___might_resched+0x10/0x10
[  769.801969][T15658]  ? fs_reclaim_acquire+0x7d/0x100
[  769.801996][T15658]  should_fail_ex+0x414/0x560
[  769.802022][T15658]  should_failslab+0xa8/0x100
[  769.802047][T15658]  __kmalloc_noprof+0xcb/0x4f0
[  769.802066][T15658]  ? tomoyo_encode+0x28b/0x550
[  769.802085][T15658]  tomoyo_encode+0x28b/0x550
[  769.802105][T15658]  tomoyo_realpath_from_path+0x58d/0x5d0
[  769.802129][T15658]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  769.802156][T15658]  tomoyo_path_number_perm+0x1e8/0x5a0
[  769.802179][T15658]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  769.802214][T15658]  ? __lock_acquire+0xab9/0xd20
[  769.802251][T15658]  ? __fget_files+0x2a/0x420
[  769.802268][T15658]  ? __fget_files+0x3a0/0x420
[  769.802280][T15658]  ? __fget_files+0x2a/0x420
[  769.802296][T15658]  security_file_ioctl_compat+0xcb/0x2d0
[  769.802320][T15658]  __ia32_compat_sys_ioctl+0x128/0x840
[  769.802342][T15658]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  769.802362][T15658]  ? __fget_files+0x3a0/0x420
[  769.802380][T15658]  ? fput+0xa0/0xd0
[  769.802395][T15658]  ? ksys_write+0x22a/0x250
[  769.802422][T15658]  ? lockdep_hardirqs_on+0x9c/0x150
[  769.802440][T15658]  __do_fast_syscall_32+0xb6/0x2b0
[  769.802469][T15658]  ? lockdep_hardirqs_on+0x9c/0x150
[  769.802486][T15658]  do_fast_syscall_32+0x34/0x80
[  769.802503][T15658]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  769.802522][T15658] RIP: 0023:0xf707e539
[  769.802536][T15658] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  769.802549][T15658] RSP: 002b:00000000f542c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  769.802566][T15658] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000004030582a
[  769.802582][T15658] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000
[  769.802593][T15658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  769.802605][T15658] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  769.802616][T15658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  769.802645][T15658]  </TASK>
[  769.802667][T15658] ERROR: Out of memory at tomoyo_realpath_from_path.
[  769.977668][T15639] batman_adv: batadv0: Adding interface: ip6gretap1
[  770.004199][ T5865] m920x_read = error: -19
[  770.154220][T15639] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  770.211822][ T5865] dvb-usb: error while querying for an remote control event.
[  770.700068][T15667] netlink: 'syz.2.2194': attribute type 4 has an invalid length.
[  770.731706][T15639] batman_adv: batadv0: Interface activated: ip6gretap1
[  770.778836][T15670] netlink: 'syz.2.2194': attribute type 4 has an invalid length.
[  770.834021][ T5865] m920x_read = error: -19
[  770.838611][ T5865] dvb-usb: error while querying for an remote control event.
[  770.997845][ T5865] m920x_read = error: -19
[  771.025661][ T5865] dvb-usb: error while querying for an remote control event.
[  771.222603][ T5865] m920x_read = error: -19
[  771.227169][ T5865] dvb-usb: error while querying for an remote control event.
[  771.300913][T15677] netlink: 'syz.3.2196': attribute type 4 has an invalid length.
[  771.357274][ T5865] m920x_read = error: -19
[  771.364174][T15678] netlink: 'syz.3.2196': attribute type 4 has an invalid length.
[  771.381558][ T5865] dvb-usb: error while querying for an remote control event.
[  771.544647][ T5865] m920x_read = error: -19
[  771.551888][ T5865] dvb-usb: error while querying for an remote control event.
[  771.663316][ T5865] m920x_read = error: -19
[  771.668291][ T5865] dvb-usb: error while querying for an remote control event.
[  771.812418][ T5865] m920x_read = error: -19
[  771.818280][ T5865] dvb-usb: error while querying for an remote control event.
[  771.973080][T12202] m920x_read = error: -19
[  771.977818][T12202] dvb-usb: error while querying for an remote control event.
[  772.179714][ T5865] m920x_read = error: -19
[  772.191491][ T5865] dvb-usb: error while querying for an remote control event.
[  772.231614][    T9] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[  772.302778][ T5865] m920x_read = error: -19
[  772.307753][ T5865] dvb-usb: error while querying for an remote control event.
[  772.394140][    T9] usb 1-1: config 0 has an invalid interface number: 207 but max is 0
[  772.403187][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  772.426966][ T5865] m920x_read = error: -19
[  772.665076][ T5865] dvb-usb: error while querying for an remote control event.
[  772.674298][    T9] usb 1-1: config 0 has no interface number 0
[  772.782014][ T5950] m920x_read = error: -19
[  772.808662][ T5950] dvb-usb: error while querying for an remote control event.
[  772.940918][    T9] usb 1-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd
[  772.970615][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.979441][ T5950] m920x_read = error: -19
[  773.006166][ T5950] dvb-usb: error while querying for an remote control event.
[  773.031676][ T5865] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  773.061204][    T9] usb 1-1: Product: syz
[  773.098670][    T9] usb 1-1: Manufacturer: syz
[  773.157374][    T9] usb 1-1: SerialNumber: syz
[  773.164713][    T9] usb 1-1: config 0 descriptor??
[  773.175904][    T9] qmi_wwan 1-1:0.207: probe with driver qmi_wwan failed with error -22
[  773.211552][    T9] m920x_read = error: -19
[  773.220197][    T9] dvb-usb: error while querying for an remote control event.
[  773.306839][ T5865] usb 5-1: Using ep0 maxpacket: 16
[  773.355094][ T5865] usb 5-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75
[  773.399464][    T9] usb 1-1: USB disconnect, device number 56
[  773.441831][   T10] m920x_read = error: -19
[  773.446573][   T10] dvb-usb: error while querying for an remote control event.
[  773.519520][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.602354][   T10] m920x_read = error: -19
[  773.606852][   T10] dvb-usb: error while querying for an remote control event.
[  773.802078][ T5865] usb 5-1: Product: syz
[  773.936199][ T5865] usb 5-1: Manufacturer: syz
[  773.941130][ T5865] usb 5-1: SerialNumber: syz
[  774.028480][ T5865] usb 5-1: config 0 descriptor??
[  774.042505][    T9] m920x_read = error: -19
[  774.047148][    T9] dvb-usb: error while querying for an remote control event.
[  774.470435][ T5865] usb 5-1: bad CDC descriptors
[  774.476809][ T5950] m920x_read = error: -19
[  774.484894][ T5950] dvb-usb: error while querying for an remote control event.
[  774.601560][ T5950] m920x_read = error: -19
[  774.608497][ T5950] dvb-usb: error while querying for an remote control event.
[  774.743398][ T5950] m920x_read = error: -19
[  774.747986][ T5950] dvb-usb: error while querying for an remote control event.
[  774.939554][ T5950] m920x_read = error: -19
[  775.007986][ T5950] dvb-usb: error while querying for an remote control event.
[  775.164502][T15770] netlink: 'syz.1.2207': attribute type 4 has an invalid length.
[  775.214951][    T9] m920x_read = error: -19
[  775.219501][    T9] dvb-usb: error while querying for an remote control event.
[  775.333193][T15771] netlink: 'syz.1.2207': attribute type 4 has an invalid length.
[  775.761829][ T5950] m920x_read = error: -19
[  775.766437][ T5950] dvb-usb: error while querying for an remote control event.
[  775.894647][ T5950] m920x_read = error: -19
[  775.899141][ T5950] dvb-usb: error while querying for an remote control event.
[  775.981555][    T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  776.022497][ T5950] m920x_read = error: -19
[  776.027007][ T5950] dvb-usb: error while querying for an remote control event.
[  776.271566][    T9] usb 1-1: Using ep0 maxpacket: 16
[  776.391631][   T10] m920x_read = error: -19
[  776.396061][   T10] dvb-usb: error while querying for an remote control event.
[  776.428946][    T9] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75
[  776.741559][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  776.819730][    T9] usb 1-1: Product: syz
[  776.833445][    T9] usb 1-1: Manufacturer: syz
[  776.841544][ T5922] usb 5-1: USB disconnect, device number 99
[  776.846915][   T10] m920x_read = error: -19
[  776.873427][    T9] usb 1-1: SerialNumber: syz
[  776.896337][   T10] dvb-usb: error while querying for an remote control event.
[  776.932746][    T9] usb 1-1: config 0 descriptor??
[  777.035667][    T9] usb 1-1: bad CDC descriptors
[  777.141623][   T10] m920x_read = error: -19
[  777.146141][   T10] dvb-usb: error while querying for an remote control event.
[  777.246280][T15805] netlink: 'syz.3.2210': attribute type 4 has an invalid length.
[  777.348926][   T10] m920x_read = error: -19
[  777.379060][   T10] dvb-usb: error while querying for an remote control event.
[  777.409910][T15809] netlink: 'syz.3.2210': attribute type 4 has an invalid length.
[  777.521985][    T9] m920x_read = error: -19
[  777.526813][    T9] dvb-usb: error while querying for an remote control event.
[  777.651742][    T9] m920x_read = error: -19
[  777.661780][    T9] dvb-usb: error while querying for an remote control event.
[  777.802029][    T9] m920x_read = error: -19
[  777.807057][    T9] dvb-usb: error while querying for an remote control event.
[  777.932172][    T9] m920x_read = error: -19
[  777.936911][    T9] dvb-usb: error while querying for an remote control event.
[  777.949543][T15759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  778.035340][T15759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  778.084828][ T5865] m920x_read = error: -19
[  778.113091][ T5865] dvb-usb: error while querying for an remote control event.
[  778.258695][ T5865] m920x_read = error: -19
[  778.320080][ T5865] dvb-usb: error while querying for an remote control event.
[  778.431535][ T5865] m920x_read = error: -19
[  778.436664][ T5865] dvb-usb: error while querying for an remote control event.
[  778.641528][ T5865] m920x_read = error: -19
[  778.669948][ T5865] dvb-usb: error while querying for an remote control event.
[  778.821609][ T5865] m920x_read = error: -19
[  778.844363][ T5865] dvb-usb: error while querying for an remote control event.
[  779.011586][    T9] m920x_read = error: -19
[  779.016378][    T9] dvb-usb: error while querying for an remote control event.
[  779.152002][ T5865] m920x_read = error: -19
[  779.156425][ T5865] dvb-usb: error while querying for an remote control event.
[  779.285135][    T9] m920x_read = error: -19
[  779.312748][    T9] dvb-usb: error while querying for an remote control event.
[  779.468295][    T9] m920x_read = error: -19
[  779.473529][    T9] dvb-usb: error while querying for an remote control event.
[  779.631924][ T5865] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  779.659229][    T9] m920x_read = error: -19
[  779.670311][    T9] dvb-usb: error while querying for an remote control event.
[  779.697615][T15853] loop5: detected capacity change from 0 to 7
[  779.815958][ T5865] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  779.874793][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  779.885312][    T9] m920x_read = error: -19
[  779.906412][    T9] dvb-usb: error while querying for an remote control event.
[  779.926771][   T10] usb 1-1: USB disconnect, device number 57
[  779.947975][ T5865] usb 2-1: config 0 descriptor??
[  780.090934][ T5865] gspca_main: cpia1-2.14.0 probing 0813:0001
[  780.130568][    T9] m920x_read = error: -19
[  780.148402][    T9] dvb-usb: error while querying for an remote control event.
[  780.311934][ T6110] Dev loop5: unable to read RDB block 7
[  780.331916][ T6110]  loop5: unable to read partition table
[  780.411494][    T9] m920x_read = error: -19
[  780.433294][    T9] dvb-usb: error while querying for an remote control event.
[  780.433680][ T6110] loop5: partition table beyond EOD, truncated
[  780.541859][    T9] m920x_read = error: -19
[  780.546432][    T9] dvb-usb: error while querying for an remote control event.
[  780.669732][T15828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  780.684179][    T9] m920x_read = error: -19
[  780.688822][    T9] dvb-usb: error while querying for an remote control event.
[  780.742198][T15828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  780.821818][    T9] m920x_read = error: -19
[  780.826515][    T9] dvb-usb: error while querying for an remote control event.
[  780.870057][ T5922] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  780.902625][ T5865] gspca_cpia1: usb_control_msg 01, error -71
[  780.908782][ T5865] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0)
[  780.942028][    T9] m920x_read = error: -19
[  780.946472][    T9] dvb-usb: error while querying for an remote control event.
[  780.970179][ T5865] usb 2-1: USB disconnect, device number 100
[  781.051468][ T5922] usb 1-1: Using ep0 maxpacket: 16
[  781.076063][ T5922] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75
[  781.085875][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.107099][ T5922] usb 1-1: Product: syz
[  781.121988][    T9] m920x_read = error: -19
[  781.126504][    T9] dvb-usb: error while querying for an remote control event.
[  781.127816][ T5922] usb 1-1: Manufacturer: syz
[  781.141679][ T5922] usb 1-1: SerialNumber: syz
[  781.170762][ T5922] usb 1-1: config 0 descriptor??
[  781.207888][ T5922] usb 1-1: bad CDC descriptors
[  781.258669][T15853] Dev loop5: unable to read RDB block 7
[  781.311556][ T5865] m920x_read = error: -19
[  781.316119][ T5865] dvb-usb: error while querying for an remote control event.
[  781.351736][T15853]  loop5: unable to read partition table
[  781.357746][T15853] loop5: partition table beyond EOD, truncated
[  781.438091][T15870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  781.449124][T15853] loop_reread_partitions: partition scan of loop5 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  781.452302][T15870] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  781.522019][ T5865] m920x_read = error: -19
[  781.535753][ T5865] dvb-usb: error while querying for an remote control event.
[  781.696777][ T5865] m920x_read = error: -19
[  781.801941][ T5865] dvb-usb: error while querying for an remote control event.
[  781.931728][ T5865] m920x_read = error: -19
[  782.051081][ T5865] dvb-usb: error while querying for an remote control event.
[  782.563667][ T5865] m920x_read = error: -19
[  782.581807][ T5865] dvb-usb: error while querying for an remote control event.
[  782.906883][ T5865] m920x_read = error: -19
[  782.911960][ T5865] dvb-usb: error while querying for an remote control event.
[  783.060214][ T5865] m920x_read = error: -19
[  783.100607][ T5865] dvb-usb: error while querying for an remote control event.
[  783.350699][T15926] mmap: syz.3.2224 (15926): VmData 37457920 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  783.392206][ T5865] m920x_read = error: -19
[  783.400365][ T5865] dvb-usb: error while querying for an remote control event.
[  783.522308][    T9] m920x_read = error: -19
[  783.527174][    T9] dvb-usb: error while querying for an remote control event.
[  783.651576][ T5865] m920x_read = error: -19
[  783.657533][ T5865] dvb-usb: error while querying for an remote control event.
[  783.801642][ T5865] m920x_read = error: -19
[  783.829394][ T5865] dvb-usb: error while querying for an remote control event.
[  783.937874][T15929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2225'.
[  783.971624][ T5865] m920x_read = error: -19
[  783.987192][ T5865] dvb-usb: error while querying for an remote control event.
[  784.152537][    T9] m920x_read = error: -19
[  784.189262][    T9] dvb-usb: error while querying for an remote control event.
[  784.209839][ T5865] usb 1-1: USB disconnect, device number 58
[  784.259492][T15939] 
[  784.261958][T15939] =====================================================
[  784.269353][T15939] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  784.276954][T15939] syzkaller #0 Not tainted
[  784.281481][T15939] -----------------------------------------------------
[  784.288527][T15939] syz.1.2236/15939 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  784.296530][T15939] ffff88805850c210 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[  784.305374][T15939] 
[  784.305374][T15939] and this task is already holding:
[  784.312943][T15939] ffff888078bfb028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[  784.322746][T15939] which would create a new lock dependency:
[  784.328840][T15939]  (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3}
[  784.337214][T15939] 
[  784.337214][T15939] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  784.346779][T15939]  (&dev->event_lock#2){..-.}-{3:3}
[  784.346829][T15939] 
[  784.346829][T15939] ... which became SOFTIRQ-irq-safe at:
[  784.360012][T15939]   lock_acquire+0x120/0x360
[  784.364763][T15939]   _raw_spin_lock_irqsave+0xa7/0xf0
[  784.370188][T15939]   input_inject_event+0xa5/0x340
[  784.375388][T15939]   led_trigger_event+0x138/0x210
[  784.380550][T15939]   kbd_bh+0x1c6/0x2e0
[  784.384658][T15939]   tasklet_action_common+0x36c/0x580
[  784.390153][T15939]   handle_softirqs+0x283/0x870
[  784.395184][T15939]   __irq_exit_rcu+0xca/0x1f0
[  784.400179][T15939]   irq_exit_rcu+0x9/0x30
[  784.404540][T15939]   sysvec_call_function_single+0xa3/0xc0
[  784.410414][T15939]   asm_sysvec_call_function_single+0x1a/0x20
[  784.416786][T15939]   _raw_spin_unlock_irq+0x29/0x50
[  784.422129][T15939]   n_tty_ioctl_helper+0x27e/0x340
[  784.427427][T15939]   tty_ioctl+0x9c6/0xde0
[  784.431816][T15939]   __ia32_compat_sys_ioctl+0x543/0x840
[  784.437638][T15939]   __do_fast_syscall_32+0xb6/0x2b0
[  784.442865][T15939]   do_fast_syscall_32+0x34/0x80
[  784.447834][T15939]   entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  784.454449][T15939] 
[  784.454449][T15939] to a SOFTIRQ-irq-unsafe lock:
[  784.461663][T15939]  (tasklist_lock){.+.+}-{3:3}
[  784.461694][T15939] 
[  784.461694][T15939] ... which became SOFTIRQ-irq-unsafe at:
[  784.474530][T15939] ...
[  784.474541][T15939]   lock_acquire+0x120/0x360
[  784.482025][T15939]   _raw_read_lock+0x36/0x50
[  784.486796][T15939]   __do_wait+0xde/0x740
[  784.491196][T15939]   do_wait+0x1f8/0x520
[  784.495511][T15939]   kernel_wait+0xab/0x170
[  784.499997][T15939]   call_usermodehelper_exec_work+0xbe/0x230
[  784.506018][T15939]   process_scheduled_works+0xae1/0x17b0
[  784.511757][T15939]   worker_thread+0x8a0/0xda0
[  784.516639][T15939]   kthread+0x70e/0x8a0
[  784.520993][T15939]   ret_from_fork+0x3fc/0x770
[  784.525725][T15939]   ret_from_fork_asm+0x1a/0x30
[  784.530606][T15939] 
[  784.530606][T15939] other info that might help us debug this:
[  784.530606][T15939] 
[  784.541055][T15939] Chain exists of:
[  784.541055][T15939]   &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock
[  784.541055][T15939] 
[  784.555273][T15939]  Possible interrupt unsafe locking scenario:
[  784.555273][T15939] 
[  784.563879][T15939]        CPU0                    CPU1
[  784.569435][T15939]        ----                    ----
[  784.574917][T15939]   lock(tasklist_lock);
[  784.579713][T15939]                                local_irq_disable();
[  784.586491][T15939]                                lock(&dev->event_lock#2);
[  784.593919][T15939]                                lock(&client->buffer_lock);
[  784.601402][T15939]   <Interrupt>
[  784.604899][T15939]     lock(&dev->event_lock#2);
[  784.609958][T15939] 
[  784.609958][T15939]  *** DEADLOCK ***
[  784.609958][T15939] 
[  784.618515][T15939] 7 locks held by syz.1.2236/15939:
[  784.623735][T15939]  #0: ffff8881473e7118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480
[  784.632893][T15939]  #1: ffff88814733e230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340
[  784.643363][T15939]  #2: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340
[  784.653074][T15939]  #3: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[  784.662760][T15939]  #4: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340
[  784.672187][T15939]  #5: ffff888078bfb028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[  784.682651][T15939]  #6: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[  784.691986][T15939] 
[  784.691986][T15939] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  784.702817][T15939]  -> (&dev->event_lock#2){..-.}-{3:3} {
[  784.708678][T15939]     IN-SOFTIRQ-W at:
[  784.712936][T15939]                       lock_acquire+0x120/0x360
[  784.719373][T15939]                       _raw_spin_lock_irqsave+0xa7/0xf0
[  784.726501][T15939]                       input_inject_event+0xa5/0x340
[  784.733671][T15939]                       led_trigger_event+0x138/0x210
[  784.740588][T15939]                       kbd_bh+0x1c6/0x2e0
[  784.746679][T15939]                       tasklet_action_common+0x36c/0x580
[  784.753823][T15939]                       handle_softirqs+0x283/0x870
[  784.760642][T15939]                       __irq_exit_rcu+0xca/0x1f0
[  784.767175][T15939]                       irq_exit_rcu+0x9/0x30
[  784.773271][T15939]                       sysvec_call_function_single+0xa3/0xc0
[  784.780942][T15939]                       asm_sysvec_call_function_single+0x1a/0x20
[  784.788954][T15939]                       _raw_spin_unlock_irq+0x29/0x50
[  784.795820][T15939]                       n_tty_ioctl_helper+0x27e/0x340
[  784.802939][T15939]                       tty_ioctl+0x9c6/0xde0
[  784.809026][T15939]                       __ia32_compat_sys_ioctl+0x543/0x840
[  784.816329][T15939]                       __do_fast_syscall_32+0xb6/0x2b0
[  784.823485][T15939]                       do_fast_syscall_32+0x34/0x80
[  784.830360][T15939]                       entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  784.838694][T15939]     INITIAL USE at:
[  784.842697][T15939]                      lock_acquire+0x120/0x360
[  784.848959][T15939]                      _raw_spin_lock_irqsave+0xa7/0xf0
[  784.856092][T15939]                      input_inject_event+0xa5/0x340
[  784.863145][T15939]                      kbd_led_trigger_activate+0xbc/0x100
[  784.870458][T15939]                      led_trigger_set+0x52a/0x950
[  784.877059][T15939]                      led_trigger_set_default+0x260/0x2a0
[  784.884364][T15939]                      led_classdev_register_ext+0x73d/0x930
[  784.891772][T15939]                      input_leds_connect+0x517/0x790
[  784.898593][T15939]                      input_register_device+0xcfd/0x1140
[  784.905893][T15939]                      atkbd_connect+0x72e/0xa00
[  784.912324][T15939]                      serio_driver_probe+0x82/0xd0
[  784.918936][T15939]                      really_probe+0x26d/0x9e0
[  784.925291][T15939]                      __driver_probe_device+0x18c/0x2f0
[  784.932684][T15939]                      driver_probe_device+0x4f/0x430
[  784.939463][T15939]                      __driver_attach+0x452/0x700
[  784.946073][T15939]                      bus_for_each_dev+0x233/0x2b0
[  784.952688][T15939]                      serio_handle_event+0x1f9/0x8d0
[  784.959753][T15939]                      process_scheduled_works+0xae1/0x17b0
[  784.967338][T15939]                      worker_thread+0x8a0/0xda0
[  784.974094][T15939]                      kthread+0x70e/0x8a0
[  784.980284][T15939]                      ret_from_fork+0x3fc/0x770
[  784.987036][T15939]                      ret_from_fork_asm+0x1a/0x30
[  784.993829][T15939]   }
[  784.996437][T15939]   ... key      at: [<ffffffff99e30fa0>] input_allocate_device.__key.5+0x0/0x20
[  785.005651][T15939] -> (&client->buffer_lock){....}-{3:3} {
[  785.011463][T15939]    INITIAL USE at:
[  785.016205][T15939]                    lock_acquire+0x120/0x360
[  785.022339][T15939]                    _raw_spin_lock+0x2e/0x40
[  785.028608][T15939]                    evdev_handle_get_val+0x70/0x9f0
[  785.035527][T15939]                    evdev_ioctl_handler+0x1202/0x1f10
[  785.043034][T15939]                    __ia32_compat_sys_ioctl+0x543/0x840
[  785.050727][T15939]                    __do_fast_syscall_32+0xb6/0x2b0
[  785.057718][T15939]                    do_fast_syscall_32+0x34/0x80
[  785.064441][T15939]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  785.072553][T15939]  }
[  785.075167][T15939]  ... key      at: [<ffffffff99e31240>] evdev_open.__key.25+0x0/0x20
[  785.083525][T15939]  ... acquired at:
[  785.087354][T15939]    lock_acquire+0x120/0x360
[  785.092161][T15939]    _raw_spin_lock+0x2e/0x40
[  785.097477][T15939]    evdev_handle_get_val+0x70/0x9f0
[  785.102892][T15939]    evdev_ioctl_handler+0x1202/0x1f10
[  785.108633][T15939]    __ia32_compat_sys_ioctl+0x543/0x840
[  785.114905][T15939]    __do_fast_syscall_32+0xb6/0x2b0
[  785.120311][T15939]    do_fast_syscall_32+0x34/0x80
[  785.125368][T15939]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  785.132067][T15939] 
[  785.134401][T15939] 
[  785.134401][T15939] the dependencies between the lock to be acquired
[  785.134412][T15939]  and SOFTIRQ-irq-unsafe lock:
[  785.148028][T15939]   -> (tasklist_lock){.+.+}-{3:3} {
[  785.153432][T15939]      HARDIRQ-ON-R at:
[  785.157697][T15939]                         lock_acquire+0x120/0x360
[  785.164253][T15939]                         _raw_read_lock+0x36/0x50
[  785.171218][T15939]                         __do_wait+0xde/0x740
[  785.177399][T15939]                         do_wait+0x1f8/0x520
[  785.183485][T15939]                         kernel_wait+0xab/0x170
[  785.189826][T15939]                         call_usermodehelper_exec_work+0xbe/0x230
[  785.197966][T15939]                         process_scheduled_works+0xae1/0x17b0
[  785.205529][T15939]                         worker_thread+0x8a0/0xda0
[  785.212140][T15939]                         kthread+0x70e/0x8a0
[  785.218237][T15939]                         ret_from_fork+0x3fc/0x770
[  785.224860][T15939]                         ret_from_fork_asm+0x1a/0x30
[  785.231727][T15939]      SOFTIRQ-ON-R at:
[  785.235897][T15939]                         lock_acquire+0x120/0x360
[  785.242422][T15939]                         _raw_read_lock+0x36/0x50
[  785.248959][T15939]                         __do_wait+0xde/0x740
[  785.255362][T15939]                         do_wait+0x1f8/0x520
[  785.261718][T15939]                         kernel_wait+0xab/0x170
[  785.268258][T15939]                         call_usermodehelper_exec_work+0xbe/0x230
[  785.276264][T15939]                         process_scheduled_works+0xae1/0x17b0
[  785.283991][T15939]                         worker_thread+0x8a0/0xda0
[  785.291481][T15939]                         kthread+0x70e/0x8a0
[  785.297670][T15939]                         ret_from_fork+0x3fc/0x770
[  785.304401][T15939]                         ret_from_fork_asm+0x1a/0x30
[  785.311278][T15939]      INITIAL USE at:
[  785.315548][T15939]                        lock_acquire+0x120/0x360
[  785.322000][T15939]                        _raw_write_lock_irq+0xa2/0xf0
[  785.328912][T15939]                        copy_process+0x224f/0x3c00
[  785.335820][T15939]                        kernel_clone+0x21e/0x840
[  785.342496][T15939]                        user_mode_thread+0xdd/0x140
[  785.349388][T15939]                        rest_init+0x23/0x300
[  785.355488][T15939]                        start_kernel+0x3a9/0x410
[  785.362233][T15939]                        x86_64_start_reservations+0x24/0x30
[  785.369877][T15939]                        x86_64_start_kernel+0x143/0x1c0
[  785.377034][T15939]                        common_startup_64+0x13e/0x147
[  785.384300][T15939]      INITIAL READ USE at:
[  785.389171][T15939]                             lock_acquire+0x120/0x360
[  785.396422][T15939]                             _raw_read_lock+0x36/0x50
[  785.403388][T15939]                             __do_wait+0xde/0x740
[  785.410188][T15939]                             do_wait+0x1f8/0x520
[  785.417095][T15939]                             kernel_wait+0xab/0x170
[  785.424068][T15939]                             call_usermodehelper_exec_work+0xbe/0x230
[  785.432524][T15939]                             process_scheduled_works+0xae1/0x17b0
[  785.440621][T15939]                             worker_thread+0x8a0/0xda0
[  785.447991][T15939]                             kthread+0x70e/0x8a0
[  785.454602][T15939]                             ret_from_fork+0x3fc/0x770
[  785.461639][T15939]                             ret_from_fork_asm+0x1a/0x30
[  785.468888][T15939]    }
[  785.471866][T15939]    ... key      at: [<ffffffff8de0c058>] tasklist_lock+0x18/0x40
[  785.479911][T15939]    ... acquired at:
[  785.483989][T15939]    lock_acquire+0x120/0x360
[  785.488839][T15939]    _raw_read_lock+0x36/0x50
[  785.493745][T15939]    send_sigurg+0x12b/0x420
[  785.498485][T15939]    sk_send_sigurg+0x6c/0x2e0
[  785.503459][T15939]    queue_oob+0x420/0x4f0
[  785.507979][T15939]    unix_stream_sendmsg+0xc3f/0xdf0
[  785.513470][T15939]    __sock_sendmsg+0x21c/0x270
[  785.518335][T15939]    ____sys_sendmsg+0x505/0x830
[  785.523387][T15939]    ___sys_sendmsg+0x21f/0x2a0
[  785.528471][T15939]    __sys_sendmsg+0x164/0x220
[  785.533346][T15939]    __do_fast_syscall_32+0xb6/0x2b0
[  785.538936][T15939]    do_fast_syscall_32+0x34/0x80
[  785.544420][T15939]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  785.550943][T15939] 
[  785.553294][T15939]  -> (&f_owner->lock){....}-{3:3} {
[  785.558794][T15939]     INITIAL USE at:
[  785.562919][T15939]                      lock_acquire+0x120/0x360
[  785.569191][T15939]                      _raw_write_lock_irq+0xa2/0xf0
[  785.576075][T15939]                      __f_setown+0x67/0x370
[  785.582239][T15939]                      do_fcntl+0x15ff/0x1910
[  785.588868][T15939]                      do_compat_fcntl64+0x477/0x720
[  785.595729][T15939]                      __do_fast_syscall_32+0xb6/0x2b0
[  785.602693][T15939]                      do_fast_syscall_32+0x34/0x80
[  785.609310][T15939]                      entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  785.617477][T15939]     INITIAL READ USE at:
[  785.621931][T15939]                           lock_acquire+0x120/0x360
[  785.628631][T15939]                           _raw_read_lock_irqsave+0xaf/0x100
[  785.636477][T15939]                           send_sigio+0x38/0x370
[  785.643257][T15939]                           kill_fasync+0x24d/0x4d0
[  785.650060][T15939]                           lease_break_callback+0x26/0x30
[  785.657322][T15939]                           __break_lease+0x6a2/0x1620
[  785.664511][T15939]                           do_dentry_open+0x8b7/0x13f0
[  785.671562][T15939]                           vfs_open+0x3b/0x340
[  785.677834][T15939]                           path_openat+0x2ee5/0x3830
[  785.684866][T15939]                           do_filp_open+0x1fa/0x410
[  785.691668][T15939]                           do_sys_openat2+0x121/0x1c0
[  785.698656][T15939]                           __ia32_compat_sys_open+0x117/0x140
[  785.706897][T15939]                           __do_fast_syscall_32+0xb6/0x2b0
[  785.714304][T15939]                           do_fast_syscall_32+0x34/0x80
[  785.721524][T15939]                           entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  785.730400][T15939]   }
[  785.733077][T15939]   ... key      at: [<ffffffff99b31fa0>] file_f_owner_allocate.__key+0x0/0x20
[  785.742300][T15939]   ... acquired at:
[  785.746317][T15939]    lock_acquire+0x120/0x360
[  785.751202][T15939]    _raw_read_lock_irqsave+0xaf/0x100
[  785.756811][T15939]    send_sigio+0x38/0x370
[  785.761350][T15939]    kill_fasync+0x24d/0x4d0
[  785.766063][T15939]    lease_break_callback+0x26/0x30
[  785.771388][T15939]    __break_lease+0x6a2/0x1620
[  785.776510][T15939]    do_dentry_open+0x8b7/0x13f0
[  785.781464][T15939]    vfs_open+0x3b/0x340
[  785.785821][T15939]    path_openat+0x2ee5/0x3830
[  785.790614][T15939]    do_filp_open+0x1fa/0x410
[  785.795394][T15939]    do_sys_openat2+0x121/0x1c0
[  785.800364][T15939]    __ia32_compat_sys_open+0x117/0x140
[  785.806318][T15939]    __do_fast_syscall_32+0xb6/0x2b0
[  785.811848][T15939]    do_fast_syscall_32+0x34/0x80
[  785.817280][T15939]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  785.824095][T15939] 
[  785.826445][T15939] -> (&new->fa_lock){....}-{3:3} {
[  785.831586][T15939]    INITIAL USE at:
[  785.835752][T15939]                    lock_acquire+0x120/0x360
[  785.842035][T15939]                    _raw_write_lock_irq+0xa2/0xf0
[  785.848828][T15939]                    fasync_remove_entry+0xf1/0x1c0
[  785.855906][T15939]                    sock_fasync+0x85/0xf0
[  785.861745][T15939]                    __fput+0x8a2/0xa70
[  785.867312][T15939]                    task_work_run+0x1d1/0x260
[  785.873487][T15939]                    do_exit+0x6b5/0x2300
[  785.879230][T15939]                    do_group_exit+0x21c/0x2d0
[  785.885500][T15939]                    get_signal+0x1286/0x1340
[  785.891578][T15939]                    arch_do_signal_or_restart+0x9a/0x750
[  785.898713][T15939]                    exit_to_user_mode_loop+0x75/0x110
[  785.905596][T15939]                    __do_fast_syscall_32+0x1f4/0x2b0
[  785.912584][T15939]                    do_fast_syscall_32+0x34/0x80
[  785.919449][T15939]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  785.927644][T15939]    INITIAL READ USE at:
[  785.932049][T15939]                         lock_acquire+0x120/0x360
[  785.938749][T15939]                         _raw_read_lock_irqsave+0xaf/0x100
[  785.946174][T15939]                         kill_fasync+0x199/0x4d0
[  785.952878][T15939]                         sock_wake_async+0x137/0x160
[  785.959929][T15939]                         af_alg_wmem_wakeup+0x3c0/0x440
[  785.967078][T15939]                         aead_recvmsg+0x1377/0x13f0
[  785.973905][T15939]                         sock_recvmsg+0x22c/0x270
[  785.980534][T15939]                         ____sys_recvmsg+0x1c9/0x460
[  785.987573][T15939]                         ___sys_recvmsg+0x1b5/0x510
[  785.994262][T15939]                         __sys_recvmsg+0x161/0x220
[  786.000941][T15939]                         __do_fast_syscall_32+0xb6/0x2b0
[  786.008061][T15939]                         do_fast_syscall_32+0x34/0x80
[  786.015016][T15939]                         entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  786.023623][T15939]  }
[  786.026350][T15939]  ... key      at: [<ffffffff99b31fc0>] fasync_insert_entry.__key+0x0/0x20
[  786.035152][T15939]  ... acquired at:
[  786.039070][T15939]    lock_acquire+0x120/0x360
[  786.044117][T15939]    _raw_read_lock_irqsave+0xaf/0x100
[  786.049821][T15939]    kill_fasync+0x199/0x4d0
[  786.054446][T15939]    evdev_pass_values+0x627/0xbd0
[  786.059651][T15939]    evdev_events+0x1e6/0x340
[  786.064385][T15939]    input_pass_values+0x288/0x890
[  786.069519][T15939]    input_event_dispose+0x330/0x6b0
[  786.074835][T15939]    input_inject_event+0x1dd/0x340
[  786.080250][T15939]    evdev_write+0x2fc/0x480
[  786.084945][T15939]    vfs_write+0x27b/0xb30
[  786.089398][T15939]    ksys_write+0x145/0x250
[  786.093939][T15939]    __do_fast_syscall_32+0xb6/0x2b0
[  786.099259][T15939]    do_fast_syscall_32+0x34/0x80
[  786.104474][T15939]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  786.111259][T15939] 
[  786.113694][T15939] 
[  786.113694][T15939] stack backtrace:
[  786.119631][T15939] CPU: 1 UID: 0 PID: 15939 Comm: syz.1.2236 Not tainted syzkaller #0 PREEMPT(full) 
[  786.119653][T15939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  786.119664][T15939] Call Trace:
[  786.119673][T15939]  <TASK>
[  786.119680][T15939]  dump_stack_lvl+0x189/0x250
[  786.119705][T15939]  ? __pfx_dump_stack_lvl+0x10/0x10
[  786.119762][T15939]  ? __pfx__printk+0x10/0x10
[  786.119787][T15939]  validate_chain+0x1f05/0x2140
[  786.119814][T15939]  __lock_acquire+0xab9/0xd20
[  786.119840][T15939]  ? kill_fasync+0x199/0x4d0
[  786.119857][T15939]  lock_acquire+0x120/0x360
[  786.119878][T15939]  ? kill_fasync+0x199/0x4d0
[  786.119899][T15939]  _raw_read_lock_irqsave+0xaf/0x100
[  786.119925][T15939]  ? kill_fasync+0x199/0x4d0
[  786.119941][T15939]  ? __pfx__raw_read_lock_irqsave+0x10/0x10
[  786.119963][T15939]  ? do_raw_spin_lock+0x121/0x290
[  786.119985][T15939]  kill_fasync+0x199/0x4d0
[  786.120001][T15939]  ? kill_fasync+0x53/0x4d0
[  786.120019][T15939]  evdev_pass_values+0x627/0xbd0
[  786.120036][T15939]  ? evdev_pass_values+0x641/0xbd0
[  786.120054][T15939]  evdev_events+0x1e6/0x340
[  786.120068][T15939]  ? evdev_events+0x79/0x340
[  786.120082][T15939]  ? input_pass_values+0x8d/0x890
[  786.120095][T15939]  input_pass_values+0x288/0x890
[  786.120112][T15939]  ? input_handle_event+0x70c/0xf30
[  786.120133][T15939]  input_event_dispose+0x330/0x6b0
[  786.120155][T15939]  input_inject_event+0x1dd/0x340
[  786.120176][T15939]  ? input_inject_event+0xb6/0x340
[  786.120197][T15939]  evdev_write+0x2fc/0x480
[  786.120211][T15939]  ? futex_private_hash_put+0x245/0x280
[  786.120231][T15939]  ? __pfx_evdev_write+0x10/0x10
[  786.120246][T15939]  ? bpf_lsm_file_permission+0x9/0x20
[  786.120265][T15939]  ? security_file_permission+0x75/0x290
[  786.120287][T15939]  ? rw_verify_area+0x255/0x4d0
[  786.120305][T15939]  ? __lock_acquire+0xab9/0xd20
[  786.120327][T15939]  ? __pfx_evdev_write+0x10/0x10
[  786.120342][T15939]  vfs_write+0x27b/0xb30
[  786.120365][T15939]  ? __pfx_vfs_write+0x10/0x10
[  786.120385][T15939]  ? __fget_files+0x2a/0x420
[  786.120399][T15939]  ? __fget_files+0x2a/0x420
[  786.120411][T15939]  ? __fget_files+0x3a0/0x420
[  786.120423][T15939]  ? __fget_files+0x2a/0x420
[  786.120438][T15939]  ksys_write+0x145/0x250
[  786.120459][T15939]  ? __pfx_ksys_write+0x10/0x10
[  786.120479][T15939]  ? lockdep_hardirqs_on+0x9c/0x150
[  786.120496][T15939]  __do_fast_syscall_32+0xb6/0x2b0
[  786.120514][T15939]  ? lockdep_hardirqs_on+0x9c/0x150
[  786.120529][T15939]  do_fast_syscall_32+0x34/0x80
[  786.120546][T15939]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  786.120566][T15939] RIP: 0023:0xf7f15539
[  786.120581][T15939] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  786.120596][T15939] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  786.120613][T15939] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000040
[  786.120624][T15939] RDX: 0000000000002250 RSI: 0000000000000000 RDI: 0000000000000000
[  786.120634][T15939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  786.120642][T15939] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  786.120652][T15939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  786.120667][T15939]  </TASK>
[  786.453951][    T9] m920x_read = error: -19
[  786.470758][    T9] dvb-usb: error while querying for an remote control event.
[  786.493392][T15946] netlink: 'syz.3.2226': attribute type 4 has an invalid length.
[  786.574671][T15947] netlink: 'syz.3.2226': attribute type 4 has an invalid length.
[  786.671651][ T5865] m920x_read = error: -19
[  786.676379][ T5865] dvb-usb: error while querying for an remote control event.
[  786.935372][ T5865] m920x_read = error: -19
[  786.939858][ T5865] dvb-usb: error while querying for an remote control event.
[  787.154492][ T5865] m920x_read = error: -19
[  787.159307][ T5865] dvb-usb: error while querying for an remote control event.
[  787.271930][    T9] m920x_read = error: -19
[  787.277150][    T9] dvb-usb: error while querying for an remote control event.
[  787.392413][    T9] m920x_read = error: -19
[  787.396989][    T9] dvb-usb: error while querying for an remote control event.
[  787.511971][    T9] m920x_read = error: -19
[  787.516495][    T9] dvb-usb: error while querying for an remote control event.
[  787.631990][    T9] m920x_read = error: -19
[  787.636606][    T9] dvb-usb: error while querying for an remote control event.
[  787.751903][    T9] m920x_read = error: -19
[  787.756479][    T9] dvb-usb: error while querying for an remote control event.
[  787.871998][    T9] m920x_read = error: -19
[  787.876477][    T9] dvb-usb: error while querying for an remote control event.
[  787.993181][    T9] m920x_read = error: -19
[  787.997660][    T9] dvb-usb: error while querying for an remote control event.
[  788.111937][    T9] m920x_read = error: -19
[  788.116450][    T9] dvb-usb: error while querying for an remote control event.
[  788.232044][    T9] m920x_read = error: -19
[  788.236490][    T9] dvb-usb: error while querying for an remote control event.
[  788.352638][    T9] m920x_read = error: -19
[  788.357050][    T9] dvb-usb: error while querying for an remote control event.
[  788.471898][    T9] m920x_read = error: -19
[  788.476407][    T9] dvb-usb: error while querying for an remote control event.
[  788.593287][    T9] m920x_read = error: -19
[  788.597679][    T9] dvb-usb: error while querying for an remote control event.
[  788.712203][    T9] m920x_read = error: -19
[  788.716632][    T9] dvb-usb: error while querying for an remote control event.
[  788.832845][    T9] m920x_read = error: -19
[  788.837347][    T9] dvb-usb: error while querying for an remote control event.
[  788.952394][    T9] m920x_read = error: -19
[  788.956887][    T9] dvb-usb: error while querying for an remote control event.
[  789.071902][    T9] m920x_read = error: -19
[  789.076544][    T9] dvb-usb: error while querying for an remote control event.
[  789.191936][    T9] m920x_read = error: -19
[  789.196512][    T9] dvb-usb: error while querying for an remote control event.
[  789.313183][    T9] m920x_read = error: -19
[  789.317711][    T9] dvb-usb: error while querying for an remote control event.
[  789.433187][    T9] m920x_read = error: -19
[  789.437599][    T9] dvb-usb: error while querying for an remote control event.
[  789.551883][    T9] m920x_read = error: -19
[  789.556468][    T9] dvb-usb: error while querying for an remote control event.
[  789.672108][    T9] m920x_read = error: -19
[  789.676776][    T9] dvb-usb: error while querying for an remote control event.
[  789.792919][    T9] m920x_read = error: -19
[  789.797612][    T9] dvb-usb: error while querying for an remote control event.
[  789.911948][    T9] m920x_read = error: -19
[  789.916581][    T9] dvb-usb: error while querying for an remote control event.
[  790.033102][    T9] m920x_read = error: -19
[  790.037873][    T9] dvb-usb: error while querying for an remote control event.
[  790.151819][    T9] m920x_read = error: -19
[  790.156223][    T9] dvb-usb: error while querying for an remote control event.
[  790.271956][    T9] m920x_read = error: -19
[  790.276431][    T9] dvb-usb: error while querying for an remote control event.
[  790.392154][    T9] m920x_read = error: -19
[  790.399477][    T9] dvb-usb: error while querying for an remote control event.
[  790.512454][    T9] m920x_read = error: -19
[  790.517003][    T9] dvb-usb: error while querying for an remote control event.
[  790.632564][    T9] m920x_read = error: -19
[  790.637179][    T9] dvb-usb: error while querying for an remote control event.
[  790.751915][    T9] m920x_read = error: -19
[  790.756564][    T9] dvb-usb: error while querying for an remote control event.
[  790.872387][    T9] m920x_read = error: -19
[  790.876835][    T9] dvb-usb: error while querying for an remote control event.
[  790.991768][    T9] m920x_read = error: -19
[  790.996250][    T9] dvb-usb: error while querying for an remote control event.
[  791.111855][    T9] m920x_read = error: -19
[  791.116277][    T9] dvb-usb: error while querying for an remote control event.
[  791.232267][    T9] m920x_read = error: -19
[  791.236669][    T9] dvb-usb: error while querying for an remote control event.
[  791.352057][    T9] m920x_read = error: -19
[  791.356744][    T9] dvb-usb: error while querying for an remote control event.
[  791.472607][    T9] m920x_read = error: -19
[  791.477207][    T9] dvb-usb: error while querying for an remote control event.
[  791.592061][    T9] m920x_read = error: -19
[  791.596493][    T9] dvb-usb: error while querying for an remote control event.
[  791.711982][    T9] m920x_read = error: -19
[  791.717275][    T9] dvb-usb: error while querying for an remote control event.
[  791.832598][    T9] m920x_read = error: -19
[  791.837046][    T9] dvb-usb: error while querying for an remote control event.
[  791.951817][    T9] m920x_read = error: -19
[  791.956243][    T9] dvb-usb: error while querying for an remote control event.
[  792.071855][    T9] m920x_read = error: -19
[  792.076254][    T9] dvb-usb: error while querying for an remote control event.
[  792.192298][    T9] m920x_read = error: -19
[  792.196739][    T9] dvb-usb: error while querying for an remote control event.
[  792.311933][    T9] m920x_read = error: -19
[  792.316767][    T9] dvb-usb: error while querying for an remote control event.
[  792.432289][    T9] m920x_read = error: -19
[  792.437002][    T9] dvb-usb: error while querying for an remote control event.
[  792.552330][    T9] m920x_read = error: -19
[  792.557083][    T9] dvb-usb: error while querying for an remote control event.
[  792.671909][    T9] m920x_read = error: -19
[  792.676887][    T9] dvb-usb: error while querying for an remote control event.
[  792.792364][    T9] m920x_read = error: -19
[  792.796783][    T9] dvb-usb: error while querying for an remote control event.
[  792.911830][    T9] m920x_read = error: -19
[  792.916815][    T9] dvb-usb: error while querying for an remote control event.
[  793.032486][    T9] m920x_read = error: -19
[  793.037960][    T9] dvb-usb: error while querying for an remote control event.
[  793.152303][    T9] m920x_read = error: -19
[  793.156885][    T9] dvb-usb: error while querying for an remote control event.
[  793.271790][    T9] m920x_read = error: -19
[  793.276587][    T9] dvb-usb: error while querying for an remote control event.
[  793.393246][    T9] m920x_read = error: -19
[  793.397792][    T9] dvb-usb: error while querying for an remote control event.
[  793.512941][    T9] m920x_read = error: -19
[  793.517373][    T9] dvb-usb: error while querying for an remote control event.
[  793.631767][    T9] m920x_read = error: -19
[  793.636182][    T9] dvb-usb: error while querying for an remote control event.
[  793.752520][    T9] m920x_read = error: -19
[  793.757181][    T9] dvb-usb: error while querying for an remote control event.
[  793.871925][    T9] m920x_read = error: -19
[  793.876459][    T9] dvb-usb: error while querying for an remote control event.
[  793.992779][    T9] m920x_read = error: -19
[  793.997507][    T9] dvb-usb: error while querying for an remote control event.
[  794.112179][    T9] m920x_read = error: -19
[  794.116797][    T9] dvb-usb: error while querying for an remote control event.
[  794.232348][    T9] m920x_read = error: -19
[  794.237023][    T9] dvb-usb: error while querying for an remote control event.