last executing test programs: 10.696729248s ago: executing program 3 (id=118): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x80, 0x6, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x840) syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x18, &(0x7f0000000940)={0x20, 0x22, 0x4, {0x4, 0xc, 'Pa'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) fchdir(r2) syz_emit_ethernet(0x244, &(0x7f0000001c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "be027b", 0x20e, 0x89, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[@srh={0x6c, 0x6, 0x4, 0x3, 0x4, 0x40, 0x6, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @dstopts={0x73, 0x1b, '\x00', [@pad1, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @mcast1}, @generic={0xeb, 0xc4, "013ba42ad301dd558bfd492dd4ba5202712c7b2a5e8c9a84682db9bb886879606ea3e5e059785af5e472190f4d77b579b4da155a19d3aed2936c890940dc7451477f58515481f676908fb96500719eab284b3d42339326d092bfd51d7d33b59ea423b53d34bb48f01f27fcf8aad908f607da9f8666dc43933987f62b98e0291c7f0794129848a385086d6fe99db73c45c9c46633072ccdfe9c10e279c14ec22cc336cac45f86c6b1827f3f7d53bd274d3752f64f5b8051dfd70e0cc8eca17c1e256a12e3"}]}, @routing={0x1, 0x6, 0x2, 0xf8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3c}, @dev={0xfe, 0x80, '\x00', 0xc}, @private2={0xfc, 0x2, '\x00', 0x1}]}], "8c21cc8e576bf5b0d6fa8880193377a8468101b5e468a07658d9d160bdb3553879e3c8970446f498bd3d24a679da9186f2752c34d8f91e916be7f2dc7822dce3a6aade7cb91c9cadfde566249da22e9a34f4527145a8412dc74ab2dc39df4d8190235b74b5c8a93e25230ab286eeee0443e0c86423f21542a71955f0d54f6680503364ceb3fdc9257f0e6874111b23e52c57b24e82001878282339e0c7c5b29fbbbaa9d49d64e51754d4155f968ce45ccfdbb44d3fe2"}}}}}, 0x0) 8.349524177s ago: executing program 3 (id=127): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)=0xce3) ppoll(&(0x7f0000000280)=[{r0, 0x1021}], 0x1, 0x0, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b9b66040ac0501b300e4090203010902120001000000000904000000ff0101"], 0x0) syz_io_uring_setup(0x60cb, &(0x7f0000000000)={0x0, 0xb174, 0x4000, 0x2, 0x23a}, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0xf, &(0x7f0000000100)={0x0, 0xd52f, 0x80, 0x1, 0x225}, &(0x7f0000000180), &(0x7f00000001c0)) syz_emit_ethernet(0x2a, 0x0, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x5}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) socket$kcm(0x29, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000400)={[0x6, 0x3]}, &(0x7f0000000380), 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="9c01000016000104feffffff00000000fc00b63aac4c00000000000000000000ac14141a00000000000000000000000000040000000000000000001000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x19c}}, 0x20004808) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mmap$IORING_OFF_SQ_RING(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x1000008, 0x12, r6, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x3, &(0x7f0000000a00)=""/4090, 0xffa) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 8.289720906s ago: executing program 0 (id=128): socket$inet6(0xa, 0x1, 0x8010000000000084) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x5, 0x2) pipe(&(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x6}) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb01020301"], 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200003, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$kcm(0x11, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 7.923709092s ago: executing program 4 (id=129): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x3, 0x40, 0x40, 0x0, 0x10001, 0x2004cc, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x2, 0x0, 0x2, 0x6, 0x1], 0x80a0000, 0x200450}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000030, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000300), 0x4480, 0x0) setsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000380), 0x0) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r5) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r5) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket(0x2, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000000)={0xc2a10a980d0dcec8}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x97, 0x8, 0x47314356, 0x4f565559, 0x3, [{0x9, 0x9}, {0x5, 0x7f75}, {0x0, 0x2001}, {0x89d, 0x2b5}, {0x7, 0x2}, {0x80000001, 0x200}, {0xffffff01, 0x8000}, {0x1, 0x4}], 0x8, 0x8, 0x8, 0x0, 0x7}}) 7.497371392s ago: executing program 1 (id=131): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000080)=[{0x81, 0x1000, 0x0, 0x0}], 0x1}) 6.842468926s ago: executing program 4 (id=132): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a60c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6546c8bd20f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0f594861c0296ca92cb6c2ef9", 0x3c}, {0x0}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec6247282000000000000000000", 0xd7}, {&(0x7f0000004480)="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", 0xd71}, {0x0}], 0x6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0xfe, 0xa2, 0x40, 0x49f, 0xffff, 0x4167, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe0, 0x0, 0x0, 0xff, 0x2, 0xab}}]}}]}}, 0x0) 5.604096372s ago: executing program 2 (id=133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x400c801) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) openat$vicodec1(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc568}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x8, 0x4, 0x9}}]}]}, @IFLA_MASTER={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40) 5.525638178s ago: executing program 4 (id=134): ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000380)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000200)={0xf, r1, 'id1\x00'}) getsockname$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f00000002c0)=0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x2, 0x2bb334fe, 0x0, 0xb49, 0x5, 0x3ff, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x18, &(0x7f0000000040)=0xa, 0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0b1c4369d03760250ceaac594b1b3d741dd16c1c50d38ef2a565ef1e83323691c58d64500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374cb4a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x7fff]}}) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000001840), 0x4) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000140)=0x8003, 0x400006) pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) 5.45458708s ago: executing program 2 (id=135): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10000010, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0xffffffff) 5.363414948s ago: executing program 2 (id=136): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000240)={0x20, 0x11, 0xd5, "6c3ad08ad577e7ca81f27cd0dbc04a0a668f44b455d568057621f801bcc71a984c087d210c7ea573a9f2e460a5b327781a39c4a068cd2c89b439610f25898fe1516f17e32a49291067a86e6d2c4c353d4e4431cdda3dc6c58fdf842d75037b31e01061b6fe85da092f4506ce36d5f8a3237cb4df8c06c01bae7600b8a8e59c0fbd3c5dd28da7edcbc514e42b3cfb80bbc91dd2e9fd3e009941e93dbb331aa03a2701ff49ee098c1bc6aae5a7e316ae37fdddf3b46e1e77111f00c0e888dd1eed5dace5962e961ebc5ce91a00c09c697f8cf67a9422"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xe}, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="2000ca00000000c80f74f8d42e6c24b1b5bea653336979d381ab23a55ddb05e1821e81fd7a959d906ab199b6bac344090a96e62b4e8221b9568647de8e435b819f8f41f1006df11e9cc01e73d99a44e30b1d1843909431b3ecbc7affce685d509f0ea737522430d09e992b6b9d4f51d12d07eeb9a7051c9867efa2d6dff1071cc5783cabdb7d61951ee683838b57a7ba3bf1b26ce1f0fc2d9641a60fe85fe949a7ac1c10505dd70b534620c0f2128fec3e29020000005b2c13fe926ee832f1e7ad05d49655d454b49696"], &(0x7f0000000500)={0x20, 0x1, 0x1, 0x6}, 0x0}) pwritev(r1, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0x1}], 0x1, 0x5, 0xb2) 5.192600967s ago: executing program 3 (id=137): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x80, 0x6, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x840) syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x18, &(0x7f0000000940)={0x20, 0x22, 0x4, {0x4, 0xc, 'Pa'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x30, r2, &(0x7f0000000040)='./file0\x00') syz_emit_ethernet(0x244, &(0x7f0000001c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "be027b", 0x20e, 0x89, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[@srh={0x6c, 0x6, 0x4, 0x3, 0x4, 0x40, 0x6, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @dstopts={0x73, 0x1b, '\x00', [@pad1, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @mcast1}, @generic={0xeb, 0xc4, "013ba42ad301dd558bfd492dd4ba5202712c7b2a5e8c9a84682db9bb886879606ea3e5e059785af5e472190f4d77b579b4da155a19d3aed2936c890940dc7451477f58515481f676908fb96500719eab284b3d42339326d092bfd51d7d33b59ea423b53d34bb48f01f27fcf8aad908f607da9f8666dc43933987f62b98e0291c7f0794129848a385086d6fe99db73c45c9c46633072ccdfe9c10e279c14ec22cc336cac45f86c6b1827f3f7d53bd274d3752f64f5b8051dfd70e0cc8eca17c1e256a12e3"}]}, @routing={0x1, 0x6, 0x2, 0xf8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3c}, @dev={0xfe, 0x80, '\x00', 0xc}, @private2={0xfc, 0x2, '\x00', 0x1}]}], "8c21cc8e576bf5b0d6fa8880193377a8468101b5e468a07658d9d160bdb3553879e3c8970446f498bd3d24a679da9186f2752c34d8f91e916be7f2dc7822dce3a6aade7cb91c9cadfde566249da22e9a34f4527145a8412dc74ab2dc39df4d8190235b74b5c8a93e25230ab286eeee0443e0c86423f21542a71955f0d54f6680503364ceb3fdc9257f0e6874111b23e52c57b24e82001878282339e0c7c5b29fbbbaa9d49d64e51754d4155f968ce45ccfdbb44d3fe2"}}}}}, 0x0) 5.1070929s ago: executing program 0 (id=138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280)={0x9, 0x5, 0x2, 0x11c0000, 0x9}, 0x14) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x299, 0x0, 0x2000000}]}) r4 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040), 0x42000, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000100)={'broute\x00', 0x0, 0x3, 0xa, [0x8, 0x4, 0xffff, 0x5, 0x3], 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=""/10}, &(0x7f0000000180)=0x50) ioctl$KVM_GET_TSC_KHZ_vm(r1, 0xaea3) 4.681420326s ago: executing program 0 (id=139): syz_emit_ethernet(0x0, 0x0, 0x0) 4.637451242s ago: executing program 0 (id=140): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000240)={0x20, 0x11, 0xd5, "6c3ad08ad577e7ca81f27cd0dbc04a0a668f44b455d568057621f801bcc71a984c087d210c7ea573a9f2e460a5b327781a39c4a068cd2c89b439610f25898fe1516f17e32a49291067a86e6d2c4c353d4e4431cdda3dc6c58fdf842d75037b31e01061b6fe85da092f4506ce36d5f8a3237cb4df8c06c01bae7600b8a8e59c0fbd3c5dd28da7edcbc514e42b3cfb80bbc91dd2e9fd3e009941e93dbb331aa03a2701ff49ee098c1bc6aae5a7e316ae37fdddf3b46e1e77111f00c0e888dd1eed5dace5962e961ebc5ce91a00c09c697f8cf67a9422"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xe}, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="2000ca00000000c80f74f8d42e6c24b1b5bea653336979d381ab23a55ddb05e1821e81fd7a959d906ab199b6bac344090a96e62b4e8221b9568647de8e435b819f8f41f1006df11e9cc01e73d99a44e30b1d1843909431b3ecbc7affce685d509f0ea737522430d09e992b6b9d4f51d12d07eeb9a7051c9867efa2d6dff1071cc5783cabdb7d61951ee683838b57a7ba3bf1b26ce1f0fc2d9641a60fe85fe949a7ac1c10505dd70b534620c0f2128fec3e29020000005b2c13fe926ee832f1e7ad05d49655d454b496965f705a56c635"], &(0x7f0000000500)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0x2}}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000080)={0xc, &(0x7f0000000640)={0x20, 0xe, 0x100, {0x100, 0xb, "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"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}}, &(0x7f00000003c0)={0x18, &(0x7f0000000880)={0x40, 0x5, 0xf6, "cc8d8c0aab2a4bd07db524f8a6dd8fbfc24a35013d548a0f33610f026d47892da217934b30e05563d318c6fb2a33b24ad3f6d72502e62c71e796232c99f7cec42c57182c8f3980554338e79510e5ae96c97758313901234976a33f8845e803539f6a33c874152f906030e4d36c6daa45a059d52c5dcf3c2110434a8504fed7bcab7376f8a8e84561bcabf3a816f778c49d18648daeec0d88c4480fa4587079b42e8fbbeee6ec7cac5eed27600e57ae686831ee54df8ccf928ecf3efc6178b65693e764216fe296650eab0e8f50db8e17374a68e39c5019faba368d1f2e33db5a9114380a406e71b7ef37b7b0d31c2215b012343199fc"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0x1c}, &(0x7f0000000100)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000180)={0xc0, 0x5, 0x3, "906984"}, &(0x7f00000001c0)={0x40, 0x5, 0x1, '%'}}) set_mempolicy(0x2, &(0x7f0000000000)=0x76, 0x105) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x280000000) pwritev(r4, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0x1}], 0x1, 0x5, 0xb2) 4.331942762s ago: executing program 1 (id=141): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000001200010003000000000000001000"/28], 0x20}], 0x1, 0x0, 0x0, 0x40801}, 0x4000800) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @private, @initdev}, &(0x7f0000000640)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@loopback, 0xa, r4}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x74, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="36566011ebc1"}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000000)={r10, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000001c0)={r10, 0x1, 0x6, @local}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'ip_vti0\x00', 0x0, 0x1, 0x80, 0x0, 0x5, {{0x18, 0x4, 0x3, 0x21, 0x60, 0x68, 0x0, 0xf, 0x29, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x1c, 0xc1, 0x3, 0xe, [{@remote, 0x8}, {@private=0xa010102, 0xffffffff}, {@broadcast, 0x4}]}, @noop, @timestamp_addr={0x44, 0x2c, 0x27, 0x1, 0x2, [{@local, 0x8}, {@multicast2, 0xa}, {@remote, 0x5}, {@rand_addr=0x64010100, 0x3}, {@multicast1, 0x9}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000980)={'ip_vti0\x00', &(0x7f0000000840)={'syztnl0\x00', r2, 0x10, 0x8, 0xff, 0x1, {{0x43, 0x4, 0x1, 0x7, 0x10c, 0x64, 0x0, 0x81, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x1b, 0x1, 0x5, [{@loopback, 0x800}, {@local, 0x7}, {@multicast2, 0x3}, {@loopback, 0x6}]}, @cipso={0x86, 0x2b, 0x2, [{0x2, 0x10, "d23349c3fa2c71580f74bbd25a13"}, {0x5, 0x3, "d0"}, {0x1, 0x2}, {0x1, 0x10, "bf80bbbb54c3f9276781127fed2e"}]}, @timestamp={0x44, 0x14, 0xd, 0x0, 0x0, [0x240, 0x7fff, 0x5, 0xffff]}, @timestamp_prespec={0x44, 0x2c, 0xc8, 0x3, 0x5, [{@broadcast}, {@multicast1, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@private=0xa010100, 0x9}, {@private=0xa010102, 0x9}]}, @cipso={0x86, 0x47, 0x3, [{0x6, 0xb, "847f546ec5c9dbdd96"}, {0x7, 0x10, "ad41eb1c5f7b01f6666096e68e43"}, {0x1, 0x3, "da"}, {0x5, 0xe, "2a1383cb078f603a85058e27"}, {0x5, 0x7, "d0d5a7cfd8"}, {0x7, 0x5, "410615"}, {0x6, 0x9, "8cbb760c78be7c"}]}, @generic={0x7, 0x8, "4b421a6dbfe5"}, @rr={0x7, 0x17, 0xef, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @multicast1, @empty]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c00)={0x190, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x4}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x200000c5}, 0xc016) 3.996708774s ago: executing program 4 (id=142): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x3, 0x40, 0x40, 0x0, 0x10001, 0x2004cc, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x2, 0x0, 0x2, 0x6, 0x1], 0x80a0000, 0x200450}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000030, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000300), 0x4480, 0x0) setsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000380), 0x0) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r5) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r5) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket(0x2, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000000)={0xc2a10a980d0dcec8}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x97, 0x8, 0x47314356, 0x4f565559, 0x3, [{0x9, 0x9}, {0x5, 0x7f75}, {0x0, 0x2001}, {0x89d, 0x2b5}, {0x7, 0x2}, {0x80000001, 0x200}, {0xffffff01, 0x8000}, {0x1, 0x4}], 0x8, 0x8, 0x8, 0x0, 0x7}}) 3.83323072s ago: executing program 1 (id=143): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000039c0)=ANY=[@ANYBLOB="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"], 0x330}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000001bbbbbbbbbbbb86dd6a000000004811"], 0x0) socket(0x27, 0x3, 0x3d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x26000040) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x3, 0x10000046, 0x8001, 0x400, 0x1, 0x6, 0xfffd, 0x2, 0x5}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x22004800, &(0x7f0000000100)={0xa, 0x2, 0x0, @private2, 0xffffffff}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x404c814, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_open_dev$evdev(&(0x7f0000000180), 0x7, 0x4200) 3.638143224s ago: executing program 2 (id=144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a60c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6546c8bd20f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0f594861c0296ca92cb6c2ef9", 0x3c}, {0x0}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec6247282000000000000000000", 0xd7}, {&(0x7f0000004480)="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", 0xd71}, {0x0}], 0x6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0xfe, 0xa2, 0x40, 0x49f, 0xffff, 0x4167, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe0, 0x0, 0x0, 0xff, 0x2, 0xab}}]}}]}}, 0x0) 3.062104855s ago: executing program 3 (id=145): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x1, 0x6000000, 0x0, {0x0, 0x0, 0x0, r1, 0xfdff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) 2.953011206s ago: executing program 4 (id=146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futimesat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/power/pm_trace', 0x1e1800, 0x56) write$P9_RAUTH(r3, &(0x7f0000000300)={0x14, 0x67, 0x1, {0x4, 0x2, 0x7}}, 0x14) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x60) r5 = socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='nilfs2_segment_usage_allocated\x00', r3}, 0x18) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x3, "5c888596a7776a389ac2ea21d00764a17a73a27a4525d641a8f00302bede855f", "f4ed38bb9511e8c874b4607d81a785604182f7466d190929c3af91b0895c76ef", "b03008606461cc0d6e0bbd73506cdd5b87733deb86d4a6ad26ed7777789bb5c0", "6e17e0e332771caff828fb7bdc2a3f20ad0d986e623ec04440432a4f9f14b32c", "90f26a2be402aa371e6b6fb7ed5d133a1676f722dbb6eae047fd008a86abd598", "8611e083ed2bcfa5a00b8bee", 0x2, 0xa6e9, 0x6, 0x5, 0xfffffffa}}) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r6 = gettid() setpriority(0x2, r6, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x8, 0x1, 0x2, 0x6, {{0x3e, 0x4, 0x3, 0x8, 0xf8, 0x68, 0x0, 0xf9, 0x29, 0x0, @local, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x2c, 0x3a, 0x1, 0x1, [{@rand_addr=0x64010102, 0x7}, {@loopback, 0x81}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast1}]}, @generic={0x94, 0xa, "58f587df9a5b46f1"}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x47, 0x0, 0x4, [0x0, 0x1, 0x3]}, @cipso={0x86, 0x27, 0x1, [{0x2, 0x7, "0f9eac007f"}, {0x0, 0x12, "c5d503fe6bc800351c6ced099a1b1b2b"}, {0x5, 0x8, "bb325c34b065"}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x40, 0x3, [{0x0, 0x7, "62a55d3dbd"}, {0x6, 0x12, "65a962217c1e51d1e0467b60c4816749"}, {0x6, 0xd, "91b80423f29fd795c07ac1"}, {0x2, 0x12, "e5b53b26693c94583f284b9401000003"}, {0x6, 0x2}]}, @ssrr={0x89, 0x27, 0x85, [@rand_addr=0x64010102, @private=0xa010102, @local, @remote, @multicast2, @rand_addr=0x64010101, @multicast1, @local, @local]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000280)={'ip_vti0\x00', r7, 0x10, 0x1, 0x5, 0x655d41fc, {{0xf, 0x4, 0x1, 0x32, 0x3c, 0x67, 0x0, 0x8, 0x2f, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x28, 0x3, [{0x2, 0x6, "33ff2e46"}, {0x7, 0xf, "96c56c0f67cbc3c2f50d05bd1a"}, {0x5, 0xd, "d935cc6a4a7ce473806ce9"}]}]}}}}}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x2294, 0x2c, 0xd27, 0x78bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x2264, 0x2, [@TCA_FLOW_POLICE={0xc64, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80, 0x1, 0x58, 0x2f, 0x6, {0xfa, 0x1, 0xb, 0x3, 0x1, 0x3}, {0x3e, 0x1, 0x408, 0x5, 0x7, 0xf}, 0xfffffffc, 0x7fffffff, 0x68ff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xfffffff8, 0x117, 0x56d2, 0x4, 0xd7, 0x2, 0x10b8, 0x4, 0xd4e, 0x101, 0x5, 0x400, 0x4, 0x9, 0x5, 0x1, 0x4, 0x4, 0x0, 0x0, 0x9, 0x10001, 0x200, 0xffffffff, 0x7, 0x4, 0xf, 0x4, 0x800, 0xe, 0x10001, 0x0, 0x8f4, 0x10000, 0x7, 0x7, 0x1, 0x6, 0x0, 0x3, 0x40, 0x81, 0x2, 0x6, 0x5, 0x94c, 0xff, 0x8, 0xfffffffe, 0x9a85, 0x8, 0xffff2284, 0x5, 0x46df, 0x1fffc0, 0x7, 0x8, 0x6, 0x4, 0x20084, 0x0, 0x101, 0x2, 0x3000000, 0x5, 0x8, 0xfffffe00, 0xad, 0x6, 0x6, 0x18, 0x6, 0x4, 0xff, 0x1, 0x5, 0x5, 0x9, 0x200, 0x9, 0xfffffc01, 0xf8, 0x10614019, 0xfffffffc, 0x3, 0x80000000, 0x7, 0x8, 0x4, 0x6, 0xfffffe00, 0x5, 0x4, 0x81, 0x9, 0x8, 0xa2, 0xfffffffe, 0x0, 0x3, 0x1, 0x101, 0x80, 0xd64, 0x3, 0xd, 0xffff, 0x8, 0x0, 0x1cf9c262, 0xfffffff7, 0x2, 0xce, 0x2, 0x1, 0xe6e7, 0x0, 0x5c67, 0x2, 0xd, 0xfff, 0x1, 0x7, 0xfffffff9, 0x0, 0x200, 0x5, 0x1, 0x1, 0x0, 0x9ae, 0x9, 0x8, 0x9, 0x9, 0x1b, 0x2, 0x3c53, 0x8bfb, 0x0, 0x3, 0x8, 0x1, 0x3, 0xe7, 0xffffffff, 0x6, 0x0, 0x7, 0x8, 0xf9d, 0x8000, 0x9, 0x8000, 0x4, 0xfa, 0x1, 0x5, 0x0, 0x80000000, 0xfff, 0x1, 0xffff, 0x9, 0x10001, 0x3, 0xfffffffc, 0xd, 0x4, 0x800, 0x4, 0x4, 0xffff0000, 0x7f, 0x0, 0x2, 0x7, 0x7ff, 0xe22, 0x9d1, 0xfffffffb, 0x9, 0x0, 0x3ff, 0x1, 0x7, 0xd, 0x1, 0x3, 0x1, 0x3, 0x80000000, 0xbc, 0x3c4, 0x0, 0x401, 0x4, 0x6, 0x6, 0x984, 0x80000001, 0x4, 0x9, 0x4a7, 0x6f58, 0x100, 0x1, 0x1, 0x1, 0x1, 0x5, 0x5, 0xff, 0x33, 0x3, 0x4, 0x5, 0x8, 0x1, 0x4dd, 0x2, 0x8, 0x2, 0x4, 0x9, 0x10000, 0x1, 0x800, 0xfff, 0x4, 0x18, 0x4, 0x1ed2, 0x4, 0x7f, 0xa, 0xffffffff, 0x7fffffff, 0x5, 0x3ff, 0xa, 0x8, 0x100, 0x10001, 0x1800, 0x1ff, 0x4, 0x7f, 0x80, 0x8, 0x4, 0x100, 0x7, 0x1, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x8, 0x9, 0x2, 0x4, 0x1, 0x8, 0x200, 0x6, 0xffff, 0xfffffffe, 0x8, 0xfffffffa, 0xf, 0x4, 0x1, 0x6, 0x6, 0x7, 0x6, 0x1a0, 0x0, 0xf9, 0x6, 0xfffffffc, 0x9, 0x0, 0x3, 0xff, 0x0, 0x2, 0x1, 0x4, 0x9, 0xc0000, 0xf, 0x3ff, 0x5, 0x3, 0xaf, 0x401, 0x2, 0xff, 0x7d, 0x40, 0x0, 0x8, 0x4, 0x1, 0x5af, 0x2, 0x800, 0xffffffff, 0x4, 0x7f800, 0xef5, 0x0, 0x88bc, 0x2ca, 0x1, 0x4, 0xb658, 0x1, 0x4, 0xffff, 0x642e, 0x0, 0xfffffffc, 0xdfb, 0x9, 0xff5d, 0xffffffff, 0x0, 0x400, 0x3, 0x792, 0x6, 0x5bc, 0x0, 0x367c000, 0x7, 0x5, 0xc5, 0x3, 0x4, 0x6, 0x80000000, 0x0, 0x2, 0x3, 0x7, 0x1, 0x8001, 0x8b, 0x0, 0x4, 0x6, 0x40, 0xcb, 0xffffffff, 0x2, 0xdeb, 0x1, 0x52, 0x7, 0xa, 0x800, 0x7fffffff, 0x50, 0x6, 0x7, 0x5, 0x10001, 0x2503, 0x7a, 0x2, 0x7ff, 0xfffffffb, 0x5, 0x4, 0x1, 0x9, 0x2, 0x5, 0x7, 0x0, 0x10001, 0x40000000, 0x8b29, 0x80000000, 0x7f, 0x8, 0x2, 0x5, 0x9f, 0x4, 0x935, 0x7f, 0x8, 0x5, 0x4, 0xd08, 0x40, 0x2, 0x7, 0x3, 0x8000, 0x3, 0x8, 0x40, 0x100, 0x9, 0x6, 0x6a2, 0xc, 0x2, 0x4, 0x6, 0x1, 0x2, 0x9, 0x5, 0x4b8a, 0x2, 0x5, 0x2, 0x9, 0x80000000, 0x8000, 0x6, 0x5, 0x5, 0x7, 0x5, 0x2, 0x81, 0x2, 0x80, 0x80000000, 0x10002, 0x1, 0x8, 0x100, 0x28000, 0x8001, 0xd4a1, 0x0, 0x3ff, 0xae, 0x1, 0x0, 0x3, 0xffffff7d, 0x80000001, 0xf, 0xfc000000, 0x2, 0x4, 0x3, 0x3, 0x5ec2, 0x7fffffff, 0xffff, 0x1, 0x4, 0x9, 0xfff, 0x3, 0x8001, 0x6, 0x8, 0x8, 0x7f, 0xf3b1, 0x0, 0x7, 0x7, 0x81, 0x9, 0x8001, 0x51, 0x1ff, 0x8, 0x2055, 0x8, 0x80000001, 0x7, 0x3, 0x8001, 0x0, 0xffff, 0x5, 0x6, 0x80000001, 0x7ff, 0xfffffa5d, 0x388, 0x6, 0x1, 0xfb30, 0xf, 0x6, 0x1, 0x80, 0x1, 0xfffffffa, 0x968, 0x200, 0x8, 0x8, 0x8, 0x6, 0x9, 0x9, 0x1ff, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x4, 0x4, 0x8, 0xa7, 0xb0, 0x80, 0x8, 0x7, 0xfffffffe, 0x3, 0x4, 0x81, 0x0, 0x8, 0x1, 0x77, 0x7fff, 0x0, 0x6, 0x7636, 0x401, 0xfffffffa, 0x8, 0x4829d9e2, 0x9, 0x8001, 0xa, 0x5, 0x80000000, 0x9, 0x9, 0x3, 0x5, 0xffffffff, 0x0, 0x9, 0x28f, 0x3, 0x7fff, 0x7, 0x4, 0xa3f, 0x1, 0x6, 0x4, 0x7, 0x206, 0x3, 0xe66, 0x3, 0xfffffff9, 0x0, 0x8, 0xfffffff9, 0x72, 0x3, 0x1000, 0x4, 0xc, 0x80, 0x9, 0x8, 0x81, 0x26f, 0x0, 0x400, 0x6, 0x9, 0x2, 0x3, 0x5, 0x6, 0xbc, 0x6, 0x0, 0x0, 0x101, 0x9, 0x765, 0x81, 0x7, 0x2, 0x0, 0x1, 0x80000000, 0xa32, 0x1aeeb83c, 0x2, 0x6, 0x5, 0x77, 0x9, 0x1ff, 0x4, 0x0, 0x7, 0xf, 0x4, 0x7, 0x5, 0x5, 0x1, 0x3, 0x8, 0x4, 0x9, 0xffff, 0x7fffffff, 0x1, 0x6, 0xd7cc, 0x1000, 0x8, 0xfffffff9, 0x0, 0x0, 0x4, 0x5, 0x9, 0x4ca, 0x6, 0x7, 0x1, 0x0, 0x33a, 0x0, 0x4, 0x1, 0xffffffff, 0xfffffff8, 0x3, 0x79b, 0x369fc0f0, 0xd372, 0xff, 0x7, 0x2e, 0x0, 0x2, 0x6c2, 0x4, 0x714a, 0xeef, 0x9, 0x2, 0xf7, 0x7, 0x10000, 0x1, 0x3a9c7bd5, 0x3a, 0x484, 0x3, 0x2, 0x9a, 0x2, 0x2, 0x8, 0x7, 0x883, 0x1, 0x3, 0x3, 0x7, 0x0, 0x0, 0x0, 0x1, 0x9, 0x9, 0x101, 0x9, 0x0, 0x2, 0xa, 0x433, 0xffffffff, 0x80, 0x5a3232f0, 0x2, 0xa, 0xffffffff, 0x4, 0x3, 0x5, 0x1, 0xffff, 0x2, 0x80000001, 0x6, 0x1, 0x10, 0x8, 0x8, 0x1, 0x9, 0xd1, 0x9, 0x0, 0xfffff000, 0x8001, 0xf, 0x5, 0x1, 0x0, 0x2, 0x2, 0xcc9c3bb9, 0xffffffff, 0xf, 0x6, 0x1, 0x14, 0xb, 0x40, 0x0, 0x1, 0x7, 0xfff, 0x7, 0x6, 0x1ff, 0x2d9424ca, 0x5, 0x3ff, 0x8, 0x8, 0x87e, 0x0, 0xc, 0x2, 0x1ff, 0x624, 0x529, 0xc8, 0x0, 0x6, 0xc, 0x7f, 0xd481, 0x6, 0x3, 0x1, 0x5, 0x8, 0xf46, 0x8, 0x7, 0x1, 0x0, 0x81, 0x5, 0x36f5f76d, 0x200, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}, @TCA_FLOW_EMATCHES={0xf4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xc0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x88, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_VAR="079a0071c4a3", @TCF_META_TYPE_VAR="7c0bb3df6afea5af0170", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="29e9a3", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="1a178c23", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="394acd"]}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR="66b33e28", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="dd307775cf9028"]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_VAR="4a6659f25f4946207ca8", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="6980ae0e3bcc8e2b51", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x80, 0x2}, {0x80, 0x0, 0x2}}}]}}, @TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0xb}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0xb, 0x2}, {0xf047, 0x4, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x2}, {0x817, 0x7f}}}]}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x1000, 0x2, 0x8}, {0x7, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x455b}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_ACT={0xc8, 0x9, 0x0, 0x1, [@m_xt={0xc4, 0xb, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x57, 0x6, "fe299c9d2b5519ba2c74cd4a6271dd224736fedd10c8f28d3f89e99ff58fb9c668f68656963584d6d979544eb96a00a9552deee0d5631c1d2a847010eca52200385f938c78e92a97eb366d47637b224dfd2553"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FLOW_POLICE={0x1430, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffff504, 0x1, 0x4, 0x10, 0x7f, 0x0, 0x0, 0x1b, 0x10, 0x1, 0x7, 0x0, 0x9, 0x2, 0x9456, 0x4, 0xffffffff, 0x5, 0x7, 0x4, 0x800, 0x8, 0x1, 0x0, 0x40000000, 0x7, 0x6, 0x400, 0x6, 0x0, 0x1, 0x3, 0x0, 0x10, 0x3, 0x0, 0x2, 0x2, 0x9, 0x6, 0x8000, 0x8, 0x5, 0xa5c8, 0xffffffc0, 0x54, 0x7ff, 0x9, 0x1, 0x2, 0x6, 0x10001, 0x2, 0x0, 0x9, 0x0, 0x5, 0x24b2, 0x19, 0xf14, 0xfffffff8, 0x1, 0x8, 0x6, 0x3ff, 0x2, 0xfc4, 0x1, 0x100, 0x1, 0xbe58, 0x8, 0x4, 0x80000000, 0x101, 0xf5a5, 0x8, 0x777e, 0x7, 0x7, 0x3, 0x9, 0x800, 0xfffffff4, 0x0, 0x100000, 0x2, 0x8, 0x0, 0x1ff, 0x6c4, 0xfff, 0xfff, 0xdfc, 0x4, 0x2, 0x1, 0x6, 0x6, 0x3, 0x8, 0x6, 0x1ff, 0xa6, 0x8, 0x9, 0x0, 0x10, 0x7, 0xa6, 0x8, 0xd, 0xffffffff, 0x4, 0x3, 0x3, 0xfffffffe, 0x6, 0x3f6, 0x6, 0x8, 0x3, 0x2e, 0xffff, 0x1, 0x9, 0xf, 0x2e9, 0x8001, 0x5, 0x4, 0x7, 0x3, 0x3, 0x401, 0x9, 0x4e24, 0x7, 0x1ff, 0x592, 0xf3, 0xffffffff, 0x3, 0x1, 0x65, 0x4, 0x10000, 0xf572, 0x9, 0x7, 0x5, 0x4, 0xfffff800, 0x558c67c2, 0xbb8, 0x40, 0x1000000, 0x10001, 0x80000000, 0x0, 0x7, 0x8, 0x2, 0xc5, 0x1e2e, 0x56, 0x5, 0x6, 0xe, 0x8, 0x824d, 0x7, 0x5, 0x5, 0x800, 0x5, 0x2ab, 0x800, 0xe1, 0x0, 0x337e, 0x7, 0x3, 0x0, 0xe, 0x1, 0x1, 0x7f, 0x1, 0x17d, 0x5, 0xff9a, 0x0, 0x7046, 0x2c9b, 0x10d, 0x8, 0x10000, 0x9, 0x6, 0x915, 0x6, 0x7, 0x1, 0xffff0001, 0x8, 0x400, 0xfff, 0x1, 0x9, 0x81, 0xc98, 0x8, 0x8, 0x46, 0x1, 0xf, 0x9, 0x1ff, 0x6, 0x7ff, 0x4, 0x4, 0x1, 0x7186be27, 0x6, 0x3, 0x5, 0x1, 0xa3c, 0xffff, 0x7c1, 0x84d3, 0x8, 0xfffffffd, 0x40, 0x8, 0x4, 0x5, 0x4, 0x3, 0x101, 0x7ff, 0xfffffff5, 0xfffffe01, 0x0, 0x8, 0x100951, 0x2, 0x3, 0xffffffff, 0x1ff, 0x6, 0xb, 0x3, 0x88]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffb, 0x3, 0x7f, 0xfffffffa, 0xe, 0x4, 0xf, 0x4, 0x0, 0x2, 0x64, 0x9, 0x0, 0x7ff, 0x8, 0xff, 0x7ee1, 0xff, 0xfffff000, 0x1158, 0x800, 0x8, 0x3, 0x1, 0x1000, 0x2c, 0x6, 0xa56, 0x6, 0x1ff, 0x7, 0x98, 0x3ff, 0x7, 0x80000000, 0xe, 0x6, 0xd2, 0x1, 0x3, 0x4, 0xb7, 0x9, 0x3, 0xa, 0xc1ca, 0x1ff, 0x2, 0x0, 0x7fffffff, 0x8001, 0xc3, 0xe, 0x4, 0x6, 0x4, 0x8001, 0x9, 0x80000000, 0x4, 0xffffffff, 0xb, 0xb, 0x7, 0x1, 0x1ff, 0x0, 0x401, 0x88, 0x100, 0xfffffff9, 0x6a00, 0x3, 0x8000, 0x7, 0xdb23, 0x5, 0x0, 0xdb, 0xff, 0x9, 0x473c6b5f, 0x0, 0x2, 0x800, 0x6, 0x7, 0x1, 0x0, 0x75880000, 0x4, 0x8000, 0x5, 0x1, 0x3, 0x42, 0x9, 0x7, 0x10000, 0x6, 0x2, 0x6, 0xb, 0x8, 0x800, 0x8, 0x6, 0x2, 0x2, 0x10001, 0x800, 0xffffffff, 0x3, 0xf, 0x8001, 0x5, 0x0, 0x9, 0xfffffffb, 0x2, 0x7, 0x7fffffff, 0xcd9, 0x80000000, 0x0, 0x1, 0x3, 0xa4, 0x4, 0x83, 0x6, 0x3, 0x8, 0x9, 0xc, 0x18000, 0x4, 0x9, 0x1, 0x9, 0x4, 0x0, 0x8, 0x4, 0xa4b, 0x8, 0xbab, 0x0, 0x3, 0xfbd, 0x2, 0x2, 0xe2, 0x6, 0x7, 0x9, 0x3, 0xff, 0x1e, 0x40, 0x3, 0x4, 0x0, 0x2, 0x4, 0x0, 0x2, 0x0, 0x48c, 0x1000, 0x80000000, 0xfffffff7, 0x800, 0x0, 0x3, 0x7ff, 0xd6, 0x1000, 0x5, 0x3, 0xe, 0x7, 0x6, 0x6, 0x0, 0x9, 0x80, 0x80000000, 0x5, 0xfffffffd, 0xffffffa2, 0x9433a7fe, 0x8, 0x1, 0x3, 0x3, 0x5d0a14ee, 0x7, 0x8, 0x40, 0x8001, 0x4, 0x7, 0x8001, 0x9, 0x80, 0x2, 0x9, 0x1, 0x10001, 0x9, 0x9, 0xc026, 0x7f, 0x18ca245, 0x49, 0x5c, 0xec, 0x4, 0x8, 0x7, 0x400, 0xf9be, 0x526c71d0, 0x3, 0x200, 0x7, 0x2e2, 0x7, 0x8, 0xfffffff8, 0x0, 0xb, 0x80000000, 0x445b, 0x0, 0x3, 0x3, 0x8, 0x280, 0x7, 0xe8b7, 0x101, 0xbb, 0x1, 0x7f, 0x9, 0x7a57374e, 0x0, 0x5, 0x0, 0x7, 0x0, 0x1, 0x6, 0x80]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x7, 0x7fff, 0x2, 0xffff, 0x9, 0x8, 0x7, 0xff, 0x0, 0x2e5, 0x8, 0x4, 0x8, 0x8000, 0xfffffff7, 0x8, 0x8f, 0x7, 0x10000, 0x4, 0x9d, 0x9, 0x5, 0x2, 0x100, 0x6, 0x9, 0x26bf, 0x8a, 0x7, 0x400, 0x85, 0x2, 0x9320, 0x67c, 0x39b4, 0xfffffff1, 0x9, 0x9d, 0xf, 0x1, 0x0, 0x0, 0x5, 0x1, 0x4a4, 0x8, 0xa, 0x3, 0xfffffff8, 0x20200, 0xc, 0x20000, 0x7, 0x0, 0x2, 0x9, 0x1ff, 0x7ef, 0x5, 0xa, 0x101, 0x800, 0x40, 0x3, 0x2, 0xffffffff, 0x15c00, 0x9, 0xbfe1, 0x0, 0xfffffff9, 0x5, 0x1ff, 0xf, 0x80000000, 0x5, 0x2, 0x51d, 0x3, 0x861, 0xa9b, 0x5, 0x489, 0x8, 0x40, 0x8, 0x81, 0x1c, 0x3, 0x4, 0x4, 0x1, 0xfffffffe, 0x8001, 0x0, 0xa, 0xfc8000, 0xf50, 0x8, 0xd1, 0x6, 0xb94, 0x2c70, 0x4, 0x8, 0xab05, 0x0, 0x5, 0x6, 0x2, 0x5, 0xfffffff8, 0x5, 0x58, 0x2, 0x7, 0x8001, 0x0, 0x5, 0xc, 0x8, 0x3, 0xa170, 0x4000, 0xac87, 0x1000, 0x8, 0x80, 0xffffffff, 0x4, 0xffff0001, 0x7fff, 0x5d25, 0xa6fe, 0x3, 0xde8, 0xbb, 0x4, 0x401, 0x2, 0xd, 0x954, 0x8000, 0x4, 0xd, 0xfffffe01, 0x9, 0x3, 0x8001, 0x5, 0x81, 0x2, 0x0, 0x7f, 0x3ff, 0x2, 0x2, 0x8000, 0x9, 0x0, 0x7, 0x4, 0x200, 0xa, 0x2, 0xffff, 0x7, 0x9, 0xe, 0x5, 0x4, 0x1, 0x64c6e08, 0x4, 0xffffffff, 0x1, 0x0, 0x8, 0x10000, 0x600000, 0xffff, 0x7, 0xc, 0x10000, 0xc76b, 0x4, 0x10001, 0x2dc1, 0x3, 0x3, 0x4, 0xfffffffa, 0x46, 0x6, 0x8a5a, 0x5, 0x5, 0x6e, 0x3, 0x1, 0x200, 0x7, 0x400, 0xc3, 0x5f66, 0x6, 0x10000, 0xef, 0x9, 0x6, 0x0, 0x2, 0x4, 0x4, 0xcc37, 0x9, 0xff, 0x2e52, 0x8, 0x0, 0x1088, 0x6, 0x7215f6ef, 0x2, 0x7d39, 0x4, 0x1, 0x81, 0x40, 0xa8000000, 0xfc, 0x1, 0x7fffffff, 0x1, 0xb, 0xfffffbc7, 0x10, 0x4, 0x7ff, 0xe23, 0x1, 0xcbd, 0xe297, 0x0, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x6e72, 0x9, 0x7, 0x40000000, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x4, 0x5, 0x2, 0x4, 0x4, 0x2, 0x4, 0x2, 0x8, 0x90000000, 0x1, 0x5, 0x3, 0x3, 0xff, 0x3, 0x1000, 0x3ef, 0x8fab, 0x0, 0x5, 0x4, 0x9, 0x40, 0x9, 0x9cb, 0x1, 0xd, 0xffffffff, 0x2, 0xac, 0x2, 0xffffff80, 0xced8, 0x4d, 0xf, 0x3, 0x3, 0xd2, 0x8ac, 0xa2, 0x1ff, 0x3, 0x7, 0x6, 0x7ff, 0x66681dbc, 0x2, 0x5, 0x4, 0x5, 0x9, 0x4, 0x7, 0x10000, 0x10, 0x99, 0x1, 0x7, 0x9, 0x6254, 0x8, 0x81, 0x3, 0x8, 0x6c5, 0x80000001, 0x7, 0x8, 0x7f, 0x8, 0x6, 0x0, 0xd124, 0x3260851c, 0x7, 0x6, 0xe, 0x9, 0x1, 0x7, 0x5, 0x1fa, 0x7d13, 0xd4, 0x8, 0x4, 0x763, 0x987, 0x1, 0x50, 0x56, 0x8, 0x0, 0x6, 0x6, 0xf0a8, 0xff, 0x4, 0x3763, 0x8, 0x5d, 0x6, 0x3, 0x3, 0x10000000, 0x401, 0x53, 0x3, 0x6, 0x9, 0x1, 0x8000, 0x9, 0x6, 0x8, 0x7, 0x0, 0x3, 0x6, 0x8, 0x6, 0x2, 0x5, 0xfffffffb, 0x7, 0x7, 0x7fffffff, 0x62e, 0x0, 0x1, 0x4, 0x2, 0xf47, 0x0, 0x8, 0x80000001, 0xfffffff8, 0x5, 0x2, 0x80000001, 0x2, 0x40, 0x7fff, 0x7ff, 0x6, 0x6, 0xffff, 0x0, 0x7fff, 0x2e9e, 0x7fff, 0x5, 0x0, 0x2, 0x9, 0xc, 0xd, 0x3, 0xd1f5, 0xb29, 0xb, 0x72e6c982, 0x4, 0xfffffffe, 0x8, 0x17d, 0x8, 0xf1, 0x7, 0xfffff9e5, 0x57, 0x1, 0x1, 0x2, 0x2, 0x3, 0x5, 0x40, 0xc, 0x3, 0x9, 0x6, 0x3ff, 0x0, 0x7c6f, 0x1, 0x9, 0x1, 0xe, 0x80, 0x7cdf9ff7, 0xf, 0xcaf, 0x1, 0x80000001, 0x5, 0x7, 0x3ff, 0x8, 0x3, 0x4e, 0x80000001, 0x0, 0x1, 0x6, 0x5, 0x7, 0x3, 0x5, 0x401, 0x6, 0x80, 0x1000, 0x5, 0x5, 0xffff9faa, 0x7, 0xc, 0x400, 0x3, 0x5, 0x5, 0x9, 0x3, 0x7, 0x3, 0x0, 0xef, 0x1d8, 0x1ff, 0x414, 0x7fff, 0xffffff00, 0x288a, 0x5, 0x3ff, 0x7, 0x5, 0xfffffe01, 0x9, 0x6, 0x800, 0x1, 0x5, 0x1, 0x8, 0x9, 0x9, 0x6, 0x4, 0x400, 0xb, 0x9, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x7, 0x0, 0x80, 0xffd, 0xd, 0x8e, 0x80000000, 0x6, 0x6d7, 0x8e4b, 0xab2, 0xa4, 0x100, 0x7, 0x3, 0xebb7, 0x1f, 0x6, 0x5, 0x7, 0x7, 0x1000, 0x9, 0x4, 0xc2, 0x8, 0x2783, 0x81a, 0x8, 0x3, 0x0, 0x0, 0x10e9, 0x0, 0x9, 0x8001, 0x67, 0x1, 0x9, 0xb, 0x26b2ed91, 0x1, 0x80, 0x6, 0x80000000, 0x6, 0x0, 0x6, 0x7fffffff, 0x5, 0x7ff, 0x100, 0x1, 0x3, 0xc3, 0x9, 0x34c5, 0x9, 0x1, 0x101, 0x0, 0x41, 0x645, 0xd4, 0x5, 0x6f, 0xe66, 0xe9df, 0x5, 0x4, 0x8000, 0x9, 0x922a, 0x7, 0x6a87, 0x1, 0x3, 0x10, 0x2, 0x10000, 0x1, 0x8, 0x1, 0xf95, 0x73, 0x8, 0x1, 0x10000, 0x5, 0x5ff16871, 0xc, 0x2df1283a, 0x324ad0ab, 0x9, 0x3, 0xab, 0xffffff81, 0x7, 0x0, 0x80, 0x9, 0xb4, 0xbd, 0x7, 0x8, 0x9, 0x7, 0x3, 0x6, 0x9597, 0x0, 0x9, 0x0, 0x2, 0x9, 0x0, 0x10000, 0x2, 0xfff, 0x5, 0x80000000, 0x8, 0x0, 0x4, 0x0, 0x10000, 0x6, 0x7fff, 0x2, 0x0, 0x100, 0xffffffff, 0x800, 0x90, 0x9, 0x0, 0x9, 0x1, 0x2, 0x8, 0x6, 0x3, 0x5, 0x5, 0x3, 0xd3d5, 0x4, 0x6f, 0x9, 0x8, 0x762b, 0xffff8001, 0x3, 0x14, 0xffffffff, 0x5, 0x3, 0x3ff, 0x3ff, 0x0, 0x7, 0x0, 0x4, 0x800, 0x200, 0x2, 0x0, 0x5, 0xf, 0x1, 0x8, 0x8, 0x10001, 0x0, 0x9, 0x7fff, 0x0, 0x7801, 0x80000001, 0x1, 0x6, 0x3, 0x2eb, 0x1, 0x3, 0xa, 0x9, 0x56f2, 0x7, 0x1, 0x9, 0x81, 0x3, 0xfffffffc, 0x9c, 0xcba, 0x7ff, 0x1, 0xa7d9, 0x1, 0x6, 0x0, 0x9, 0x3, 0x0, 0x2, 0xfffffffd, 0x40, 0x0, 0x8, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0xff, 0xf8c, 0x8, 0x1, 0x8, 0x3, 0x200, 0x0, 0x5, 0xf, 0x7, 0x9, 0x10001, 0x0, 0x3, 0x3, 0x6, 0x8, 0x2, 0x9, 0x2edc25ea, 0x0, 0x7fffffff, 0x80000001, 0x81, 0x81, 0x80000000, 0x6, 0x525, 0x2, 0x0, 0xbc, 0x7, 0x4, 0x5, 0xffff, 0x9, 0x10000, 0x9, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe}]}, @TCA_FLOW_MASK={0x8, 0x6, 0x5fa}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x1}]}}]}, 0x2294}, 0x1, 0x0, 0x0, 0x80}, 0xc804) 2.87688903s ago: executing program 3 (id=147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futimesat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/power/pm_trace', 0x1e1800, 0x56) write$P9_RAUTH(r3, &(0x7f0000000300)={0x14, 0x67, 0x1, {0x4, 0x2, 0x7}}, 0x14) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x60) r5 = socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='nilfs2_segment_usage_allocated\x00', r3}, 0x18) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x3, "5c888596a7776a389ac2ea21d00764a17a73a27a4525d641a8f00302bede855f", "f4ed38bb9511e8c874b4607d81a785604182f7466d190929c3af91b0895c76ef", "b03008606461cc0d6e0bbd73506cdd5b87733deb86d4a6ad26ed7777789bb5c0", "6e17e0e332771caff828fb7bdc2a3f20ad0d986e623ec04440432a4f9f14b32c", "90f26a2be402aa371e6b6fb7ed5d133a1676f722dbb6eae047fd008a86abd598", "8611e083ed2bcfa5a00b8bee", 0x2, 0xa6e9, 0x6, 0x5, 0xfffffffa}}) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r6 = gettid() setpriority(0x2, r6, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x8, 0x1, 0x2, 0x6, {{0x3e, 0x4, 0x3, 0x8, 0xf8, 0x68, 0x0, 0xf9, 0x29, 0x0, @local, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x2c, 0x3a, 0x1, 0x1, [{@rand_addr=0x64010102, 0x7}, {@loopback, 0x81}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast1}]}, @generic={0x94, 0xa, "58f587df9a5b46f1"}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x47, 0x0, 0x4, [0x0, 0x1, 0x3]}, @cipso={0x86, 0x27, 0x1, [{0x2, 0x7, "0f9eac007f"}, {0x0, 0x12, "c5d503fe6bc800351c6ced099a1b1b2b"}, {0x5, 0x8, "bb325c34b065"}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x40, 0x3, [{0x0, 0x7, "62a55d3dbd"}, {0x6, 0x12, "65a962217c1e51d1e0467b60c4816749"}, {0x6, 0xd, "91b80423f29fd795c07ac1"}, {0x2, 0x12, "e5b53b26693c94583f284b9401000003"}, {0x6, 0x2}]}, @ssrr={0x89, 0x27, 0x85, [@rand_addr=0x64010102, @private=0xa010102, @local, @remote, @multicast2, @rand_addr=0x64010101, @multicast1, @local, @local]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000280)={'ip_vti0\x00', r7, 0x10, 0x1, 0x5, 0x655d41fc, {{0xf, 0x4, 0x1, 0x32, 0x3c, 0x67, 0x0, 0x8, 0x2f, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x28, 0x3, [{0x2, 0x6, "33ff2e46"}, {0x7, 0xf, "96c56c0f67cbc3c2f50d05bd1a"}, {0x5, 0xd, "d935cc6a4a7ce473806ce9"}]}]}}}}}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x2294, 0x2c, 0xd27, 0x78bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x2264, 0x2, [@TCA_FLOW_POLICE={0xc64, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80, 0x1, 0x58, 0x2f, 0x6, {0xfa, 0x1, 0xb, 0x3, 0x1, 0x3}, {0x3e, 0x1, 0x408, 0x5, 0x7, 0xf}, 0xfffffffc, 0x7fffffff, 0x68ff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xfffffff8, 0x117, 0x56d2, 0x4, 0xd7, 0x2, 0x10b8, 0x4, 0xd4e, 0x101, 0x5, 0x400, 0x4, 0x9, 0x5, 0x1, 0x4, 0x4, 0x0, 0x0, 0x9, 0x10001, 0x200, 0xffffffff, 0x7, 0x4, 0xf, 0x4, 0x800, 0xe, 0x10001, 0x0, 0x8f4, 0x10000, 0x7, 0x7, 0x1, 0x6, 0x0, 0x3, 0x40, 0x81, 0x2, 0x6, 0x5, 0x94c, 0xff, 0x8, 0xfffffffe, 0x9a85, 0x8, 0xffff2284, 0x5, 0x46df, 0x1fffc0, 0x7, 0x8, 0x6, 0x4, 0x20084, 0x0, 0x101, 0x2, 0x3000000, 0x5, 0x8, 0xfffffe00, 0xad, 0x6, 0x6, 0x18, 0x6, 0x4, 0xff, 0x1, 0x5, 0x5, 0x9, 0x200, 0x9, 0xfffffc01, 0xf8, 0x10614019, 0xfffffffc, 0x3, 0x80000000, 0x7, 0x8, 0x4, 0x6, 0xfffffe00, 0x5, 0x4, 0x81, 0x9, 0x8, 0xa2, 0xfffffffe, 0x0, 0x3, 0x1, 0x101, 0x80, 0xd64, 0x3, 0xd, 0xffff, 0x8, 0x0, 0x1cf9c262, 0xfffffff7, 0x2, 0xce, 0x2, 0x1, 0xe6e7, 0x0, 0x5c67, 0x2, 0xd, 0xfff, 0x1, 0x7, 0xfffffff9, 0x0, 0x200, 0x5, 0x1, 0x1, 0x0, 0x9ae, 0x9, 0x8, 0x9, 0x9, 0x1b, 0x2, 0x3c53, 0x8bfb, 0x0, 0x3, 0x8, 0x1, 0x3, 0xe7, 0xffffffff, 0x6, 0x0, 0x7, 0x8, 0xf9d, 0x8000, 0x9, 0x8000, 0x4, 0xfa, 0x1, 0x5, 0x0, 0x80000000, 0xfff, 0x1, 0xffff, 0x9, 0x10001, 0x3, 0xfffffffc, 0xd, 0x4, 0x800, 0x4, 0x4, 0xffff0000, 0x7f, 0x0, 0x2, 0x7, 0x7ff, 0xe22, 0x9d1, 0xfffffffb, 0x9, 0x0, 0x3ff, 0x1, 0x7, 0xd, 0x1, 0x3, 0x1, 0x3, 0x80000000, 0xbc, 0x3c4, 0x0, 0x401, 0x4, 0x6, 0x6, 0x984, 0x80000001, 0x4, 0x9, 0x4a7, 0x6f58, 0x100, 0x1, 0x1, 0x1, 0x1, 0x5, 0x5, 0xff, 0x33, 0x3, 0x4, 0x5, 0x8, 0x1, 0x4dd, 0x2, 0x8, 0x2, 0x4, 0x9, 0x10000, 0x1, 0x800, 0xfff, 0x4, 0x18, 0x4, 0x1ed2, 0x4, 0x7f, 0xa, 0xffffffff, 0x7fffffff, 0x5, 0x3ff, 0xa, 0x8, 0x100, 0x10001, 0x1800, 0x1ff, 0x4, 0x7f, 0x80, 0x8, 0x4, 0x100, 0x7, 0x1, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x8, 0x9, 0x2, 0x4, 0x1, 0x8, 0x200, 0x6, 0xffff, 0xfffffffe, 0x8, 0xfffffffa, 0xf, 0x4, 0x1, 0x6, 0x6, 0x7, 0x6, 0x1a0, 0x0, 0xf9, 0x6, 0xfffffffc, 0x9, 0x0, 0x3, 0xff, 0x0, 0x2, 0x1, 0x4, 0x9, 0xc0000, 0xf, 0x3ff, 0x5, 0x3, 0xaf, 0x401, 0x2, 0xff, 0x7d, 0x40, 0x0, 0x8, 0x4, 0x1, 0x5af, 0x2, 0x800, 0xffffffff, 0x4, 0x7f800, 0xef5, 0x0, 0x88bc, 0x2ca, 0x1, 0x4, 0xb658, 0x1, 0x4, 0xffff, 0x642e, 0x0, 0xfffffffc, 0xdfb, 0x9, 0xff5d, 0xffffffff, 0x0, 0x400, 0x3, 0x792, 0x6, 0x5bc, 0x0, 0x367c000, 0x7, 0x5, 0xc5, 0x3, 0x4, 0x6, 0x80000000, 0x0, 0x2, 0x3, 0x7, 0x1, 0x8001, 0x8b, 0x0, 0x4, 0x6, 0x40, 0xcb, 0xffffffff, 0x2, 0xdeb, 0x1, 0x52, 0x7, 0xa, 0x800, 0x7fffffff, 0x50, 0x6, 0x7, 0x5, 0x10001, 0x2503, 0x7a, 0x2, 0x7ff, 0xfffffffb, 0x5, 0x4, 0x1, 0x9, 0x2, 0x5, 0x7, 0x0, 0x10001, 0x40000000, 0x8b29, 0x80000000, 0x7f, 0x8, 0x2, 0x5, 0x9f, 0x4, 0x935, 0x7f, 0x8, 0x5, 0x4, 0xd08, 0x40, 0x2, 0x7, 0x3, 0x8000, 0x3, 0x8, 0x40, 0x100, 0x9, 0x6, 0x6a2, 0xc, 0x2, 0x4, 0x6, 0x1, 0x2, 0x9, 0x5, 0x4b8a, 0x2, 0x5, 0x2, 0x9, 0x80000000, 0x8000, 0x6, 0x5, 0x5, 0x7, 0x5, 0x2, 0x81, 0x2, 0x80, 0x80000000, 0x10002, 0x1, 0x8, 0x100, 0x28000, 0x8001, 0xd4a1, 0x0, 0x3ff, 0xae, 0x1, 0x0, 0x3, 0xffffff7d, 0x80000001, 0xf, 0xfc000000, 0x2, 0x4, 0x3, 0x3, 0x5ec2, 0x7fffffff, 0xffff, 0x1, 0x4, 0x9, 0xfff, 0x3, 0x8001, 0x6, 0x8, 0x8, 0x7f, 0xf3b1, 0x0, 0x7, 0x7, 0x81, 0x9, 0x8001, 0x51, 0x1ff, 0x8, 0x2055, 0x8, 0x80000001, 0x7, 0x3, 0x8001, 0x0, 0xffff, 0x5, 0x6, 0x80000001, 0x7ff, 0xfffffa5d, 0x388, 0x6, 0x1, 0xfb30, 0xf, 0x6, 0x1, 0x80, 0x1, 0xfffffffa, 0x968, 0x200, 0x8, 0x8, 0x8, 0x6, 0x9, 0x9, 0x1ff, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x4, 0x4, 0x8, 0xa7, 0xb0, 0x80, 0x8, 0x7, 0xfffffffe, 0x3, 0x4, 0x81, 0x0, 0x8, 0x1, 0x77, 0x7fff, 0x0, 0x6, 0x7636, 0x401, 0xfffffffa, 0x8, 0x4829d9e2, 0x9, 0x8001, 0xa, 0x5, 0x80000000, 0x9, 0x9, 0x3, 0x5, 0xffffffff, 0x0, 0x9, 0x28f, 0x3, 0x7fff, 0x7, 0x4, 0xa3f, 0x1, 0x6, 0x4, 0x7, 0x206, 0x3, 0xe66, 0x3, 0xfffffff9, 0x0, 0x8, 0xfffffff9, 0x72, 0x3, 0x1000, 0x4, 0xc, 0x80, 0x9, 0x8, 0x81, 0x26f, 0x0, 0x400, 0x6, 0x9, 0x2, 0x3, 0x5, 0x6, 0xbc, 0x6, 0x0, 0x0, 0x101, 0x9, 0x765, 0x81, 0x7, 0x2, 0x0, 0x1, 0x80000000, 0xa32, 0x1aeeb83c, 0x2, 0x6, 0x5, 0x77, 0x9, 0x1ff, 0x4, 0x0, 0x7, 0xf, 0x4, 0x7, 0x5, 0x5, 0x1, 0x3, 0x8, 0x4, 0x9, 0xffff, 0x7fffffff, 0x1, 0x6, 0xd7cc, 0x1000, 0x8, 0xfffffff9, 0x0, 0x0, 0x4, 0x5, 0x9, 0x4ca, 0x6, 0x7, 0x1, 0x0, 0x33a, 0x0, 0x4, 0x1, 0xffffffff, 0xfffffff8, 0x3, 0x79b, 0x369fc0f0, 0xd372, 0xff, 0x7, 0x2e, 0x0, 0x2, 0x6c2, 0x4, 0x714a, 0xeef, 0x9, 0x2, 0xf7, 0x7, 0x10000, 0x1, 0x3a9c7bd5, 0x3a, 0x484, 0x3, 0x2, 0x9a, 0x2, 0x2, 0x8, 0x7, 0x883, 0x1, 0x3, 0x3, 0x7, 0x0, 0x0, 0x0, 0x1, 0x9, 0x9, 0x101, 0x9, 0x0, 0x2, 0xa, 0x433, 0xffffffff, 0x80, 0x5a3232f0, 0x2, 0xa, 0xffffffff, 0x4, 0x3, 0x5, 0x1, 0xffff, 0x2, 0x80000001, 0x6, 0x1, 0x10, 0x8, 0x8, 0x1, 0x9, 0xd1, 0x9, 0x0, 0xfffff000, 0x8001, 0xf, 0x5, 0x1, 0x0, 0x2, 0x2, 0xcc9c3bb9, 0xffffffff, 0xf, 0x6, 0x1, 0x14, 0xb, 0x40, 0x0, 0x1, 0x7, 0xfff, 0x7, 0x6, 0x1ff, 0x2d9424ca, 0x5, 0x3ff, 0x8, 0x8, 0x87e, 0x0, 0xc, 0x2, 0x1ff, 0x624, 0x529, 0xc8, 0x0, 0x6, 0xc, 0x7f, 0xd481, 0x6, 0x3, 0x1, 0x5, 0x8, 0xf46, 0x8, 0x7, 0x1, 0x0, 0x81, 0x5, 0x36f5f76d, 0x200, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}, @TCA_FLOW_EMATCHES={0xf4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xc0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x88, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_VAR="079a0071c4a3", @TCF_META_TYPE_VAR="7c0bb3df6afea5af0170", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="29e9a3", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="1a178c23", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="394acd"]}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR="66b33e28", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="dd307775cf9028"]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_VAR="4a6659f25f4946207ca8", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="6980ae0e3bcc8e2b51", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x80, 0x2}, {0x80, 0x0, 0x2}}}]}}, @TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0xb}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0xb, 0x2}, {0xf047, 0x4, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x2}, {0x817, 0x7f}}}]}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x1000, 0x2, 0x8}, {0x7, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x455b}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_ACT={0xc8, 0x9, 0x0, 0x1, [@m_xt={0xc4, 0xb, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x57, 0x6, "fe299c9d2b5519ba2c74cd4a6271dd224736fedd10c8f28d3f89e99ff58fb9c668f68656963584d6d979544eb96a00a9552deee0d5631c1d2a847010eca52200385f938c78e92a97eb366d47637b224dfd2553"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FLOW_POLICE={0x1430, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffff504, 0x1, 0x4, 0x10, 0x7f, 0x0, 0x0, 0x1b, 0x10, 0x1, 0x7, 0x0, 0x9, 0x2, 0x9456, 0x4, 0xffffffff, 0x5, 0x7, 0x4, 0x800, 0x8, 0x1, 0x0, 0x40000000, 0x7, 0x6, 0x400, 0x6, 0x0, 0x1, 0x3, 0x0, 0x10, 0x3, 0x0, 0x2, 0x2, 0x9, 0x6, 0x8000, 0x8, 0x5, 0xa5c8, 0xffffffc0, 0x54, 0x7ff, 0x9, 0x1, 0x2, 0x6, 0x10001, 0x2, 0x0, 0x9, 0x0, 0x5, 0x24b2, 0x19, 0xf14, 0xfffffff8, 0x1, 0x8, 0x6, 0x3ff, 0x2, 0xfc4, 0x1, 0x100, 0x1, 0xbe58, 0x8, 0x4, 0x80000000, 0x101, 0xf5a5, 0x8, 0x777e, 0x7, 0x7, 0x3, 0x9, 0x800, 0xfffffff4, 0x0, 0x100000, 0x2, 0x8, 0x0, 0x1ff, 0x6c4, 0xfff, 0xfff, 0xdfc, 0x4, 0x2, 0x1, 0x6, 0x6, 0x3, 0x8, 0x6, 0x1ff, 0xa6, 0x8, 0x9, 0x0, 0x10, 0x7, 0xa6, 0x8, 0xd, 0xffffffff, 0x4, 0x3, 0x3, 0xfffffffe, 0x6, 0x3f6, 0x6, 0x8, 0x3, 0x2e, 0xffff, 0x1, 0x9, 0xf, 0x2e9, 0x8001, 0x5, 0x4, 0x7, 0x3, 0x3, 0x401, 0x9, 0x4e24, 0x7, 0x1ff, 0x592, 0xf3, 0xffffffff, 0x3, 0x1, 0x65, 0x4, 0x10000, 0xf572, 0x9, 0x7, 0x5, 0x4, 0xfffff800, 0x558c67c2, 0xbb8, 0x40, 0x1000000, 0x10001, 0x80000000, 0x0, 0x7, 0x8, 0x2, 0xc5, 0x1e2e, 0x56, 0x5, 0x6, 0xe, 0x8, 0x824d, 0x7, 0x5, 0x5, 0x800, 0x5, 0x2ab, 0x800, 0xe1, 0x0, 0x337e, 0x7, 0x3, 0x0, 0xe, 0x1, 0x1, 0x7f, 0x1, 0x17d, 0x5, 0xff9a, 0x0, 0x7046, 0x2c9b, 0x10d, 0x8, 0x10000, 0x9, 0x6, 0x915, 0x6, 0x7, 0x1, 0xffff0001, 0x8, 0x400, 0xfff, 0x1, 0x9, 0x81, 0xc98, 0x8, 0x8, 0x46, 0x1, 0xf, 0x9, 0x1ff, 0x6, 0x7ff, 0x4, 0x4, 0x1, 0x7186be27, 0x6, 0x3, 0x5, 0x1, 0xa3c, 0xffff, 0x7c1, 0x84d3, 0x8, 0xfffffffd, 0x40, 0x8, 0x4, 0x5, 0x4, 0x3, 0x101, 0x7ff, 0xfffffff5, 0xfffffe01, 0x0, 0x8, 0x100951, 0x2, 0x3, 0xffffffff, 0x1ff, 0x6, 0xb, 0x3, 0x88]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffb, 0x3, 0x7f, 0xfffffffa, 0xe, 0x4, 0xf, 0x4, 0x0, 0x2, 0x64, 0x9, 0x0, 0x7ff, 0x8, 0xff, 0x7ee1, 0xff, 0xfffff000, 0x1158, 0x800, 0x8, 0x3, 0x1, 0x1000, 0x2c, 0x6, 0xa56, 0x6, 0x1ff, 0x7, 0x98, 0x3ff, 0x7, 0x80000000, 0xe, 0x6, 0xd2, 0x1, 0x3, 0x4, 0xb7, 0x9, 0x3, 0xa, 0xc1ca, 0x1ff, 0x2, 0x0, 0x7fffffff, 0x8001, 0xc3, 0xe, 0x4, 0x6, 0x4, 0x8001, 0x9, 0x80000000, 0x4, 0xffffffff, 0xb, 0xb, 0x7, 0x1, 0x1ff, 0x0, 0x401, 0x88, 0x100, 0xfffffff9, 0x6a00, 0x3, 0x8000, 0x7, 0xdb23, 0x5, 0x0, 0xdb, 0xff, 0x9, 0x473c6b5f, 0x0, 0x2, 0x800, 0x6, 0x7, 0x1, 0x0, 0x75880000, 0x4, 0x8000, 0x5, 0x1, 0x3, 0x42, 0x9, 0x7, 0x10000, 0x6, 0x2, 0x6, 0xb, 0x8, 0x800, 0x8, 0x6, 0x2, 0x2, 0x10001, 0x800, 0xffffffff, 0x3, 0xf, 0x8001, 0x5, 0x0, 0x9, 0xfffffffb, 0x2, 0x7, 0x7fffffff, 0xcd9, 0x80000000, 0x0, 0x1, 0x3, 0xa4, 0x4, 0x83, 0x6, 0x3, 0x8, 0x9, 0xc, 0x18000, 0x4, 0x9, 0x1, 0x9, 0x4, 0x0, 0x8, 0x4, 0xa4b, 0x8, 0xbab, 0x0, 0x3, 0xfbd, 0x2, 0x2, 0xe2, 0x6, 0x7, 0x9, 0x3, 0xff, 0x1e, 0x40, 0x3, 0x4, 0x0, 0x2, 0x4, 0x0, 0x2, 0x0, 0x48c, 0x1000, 0x80000000, 0xfffffff7, 0x800, 0x0, 0x3, 0x7ff, 0xd6, 0x1000, 0x5, 0x3, 0xe, 0x7, 0x6, 0x6, 0x0, 0x9, 0x80, 0x80000000, 0x5, 0xfffffffd, 0xffffffa2, 0x9433a7fe, 0x8, 0x1, 0x3, 0x3, 0x5d0a14ee, 0x7, 0x8, 0x40, 0x8001, 0x4, 0x7, 0x8001, 0x9, 0x80, 0x2, 0x9, 0x1, 0x10001, 0x9, 0x9, 0xc026, 0x7f, 0x18ca245, 0x49, 0x5c, 0xec, 0x4, 0x8, 0x7, 0x400, 0xf9be, 0x526c71d0, 0x3, 0x200, 0x7, 0x2e2, 0x7, 0x8, 0xfffffff8, 0x0, 0xb, 0x80000000, 0x445b, 0x0, 0x3, 0x3, 0x8, 0x280, 0x7, 0xe8b7, 0x101, 0xbb, 0x1, 0x7f, 0x9, 0x7a57374e, 0x0, 0x5, 0x0, 0x7, 0x0, 0x1, 0x6, 0x80]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x7, 0x7fff, 0x2, 0xffff, 0x9, 0x8, 0x7, 0xff, 0x0, 0x2e5, 0x8, 0x4, 0x8, 0x8000, 0xfffffff7, 0x8, 0x8f, 0x7, 0x10000, 0x4, 0x9d, 0x9, 0x5, 0x2, 0x100, 0x6, 0x9, 0x26bf, 0x8a, 0x7, 0x400, 0x85, 0x2, 0x9320, 0x67c, 0x39b4, 0xfffffff1, 0x9, 0x9d, 0xf, 0x1, 0x0, 0x0, 0x5, 0x1, 0x4a4, 0x8, 0xa, 0x3, 0xfffffff8, 0x20200, 0xc, 0x20000, 0x7, 0x0, 0x2, 0x9, 0x1ff, 0x7ef, 0x5, 0xa, 0x101, 0x800, 0x40, 0x3, 0x2, 0xffffffff, 0x15c00, 0x9, 0xbfe1, 0x0, 0xfffffff9, 0x5, 0x1ff, 0xf, 0x80000000, 0x5, 0x2, 0x51d, 0x3, 0x861, 0xa9b, 0x5, 0x489, 0x8, 0x40, 0x8, 0x81, 0x1c, 0x3, 0x4, 0x4, 0x1, 0xfffffffe, 0x8001, 0x0, 0xa, 0xfc8000, 0xf50, 0x8, 0xd1, 0x6, 0xb94, 0x2c70, 0x4, 0x8, 0xab05, 0x0, 0x5, 0x6, 0x2, 0x5, 0xfffffff8, 0x5, 0x58, 0x2, 0x7, 0x8001, 0x0, 0x5, 0xc, 0x8, 0x3, 0xa170, 0x4000, 0xac87, 0x1000, 0x8, 0x80, 0xffffffff, 0x4, 0xffff0001, 0x7fff, 0x5d25, 0xa6fe, 0x3, 0xde8, 0xbb, 0x4, 0x401, 0x2, 0xd, 0x954, 0x8000, 0x4, 0xd, 0xfffffe01, 0x9, 0x3, 0x8001, 0x5, 0x81, 0x2, 0x0, 0x7f, 0x3ff, 0x2, 0x2, 0x8000, 0x9, 0x0, 0x7, 0x4, 0x200, 0xa, 0x2, 0xffff, 0x7, 0x9, 0xe, 0x5, 0x4, 0x1, 0x64c6e08, 0x4, 0xffffffff, 0x1, 0x0, 0x8, 0x10000, 0x600000, 0xffff, 0x7, 0xc, 0x10000, 0xc76b, 0x4, 0x10001, 0x2dc1, 0x3, 0x3, 0x4, 0xfffffffa, 0x46, 0x6, 0x8a5a, 0x5, 0x5, 0x6e, 0x3, 0x1, 0x200, 0x7, 0x400, 0xc3, 0x5f66, 0x6, 0x10000, 0xef, 0x9, 0x6, 0x0, 0x2, 0x4, 0x4, 0xcc37, 0x9, 0xff, 0x2e52, 0x8, 0x0, 0x1088, 0x6, 0x7215f6ef, 0x2, 0x7d39, 0x4, 0x1, 0x81, 0x40, 0xa8000000, 0xfc, 0x1, 0x7fffffff, 0x1, 0xb, 0xfffffbc7, 0x10, 0x4, 0x7ff, 0xe23, 0x1, 0xcbd, 0xe297, 0x0, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x6e72, 0x9, 0x7, 0x40000000, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x4, 0x5, 0x2, 0x4, 0x4, 0x2, 0x4, 0x2, 0x8, 0x90000000, 0x1, 0x5, 0x3, 0x3, 0xff, 0x3, 0x1000, 0x3ef, 0x8fab, 0x0, 0x5, 0x4, 0x9, 0x40, 0x9, 0x9cb, 0x1, 0xd, 0xffffffff, 0x2, 0xac, 0x2, 0xffffff80, 0xced8, 0x4d, 0xf, 0x3, 0x3, 0xd2, 0x8ac, 0xa2, 0x1ff, 0x3, 0x7, 0x6, 0x7ff, 0x66681dbc, 0x2, 0x5, 0x4, 0x5, 0x9, 0x4, 0x7, 0x10000, 0x10, 0x99, 0x1, 0x7, 0x9, 0x6254, 0x8, 0x81, 0x3, 0x8, 0x6c5, 0x80000001, 0x7, 0x8, 0x7f, 0x8, 0x6, 0x0, 0xd124, 0x3260851c, 0x7, 0x6, 0xe, 0x9, 0x1, 0x7, 0x5, 0x1fa, 0x7d13, 0xd4, 0x8, 0x4, 0x763, 0x987, 0x1, 0x50, 0x56, 0x8, 0x0, 0x6, 0x6, 0xf0a8, 0xff, 0x4, 0x3763, 0x8, 0x5d, 0x6, 0x3, 0x3, 0x10000000, 0x401, 0x53, 0x3, 0x6, 0x9, 0x1, 0x8000, 0x9, 0x6, 0x8, 0x7, 0x0, 0x3, 0x6, 0x8, 0x6, 0x2, 0x5, 0xfffffffb, 0x7, 0x7, 0x7fffffff, 0x62e, 0x0, 0x1, 0x4, 0x2, 0xf47, 0x0, 0x8, 0x80000001, 0xfffffff8, 0x5, 0x2, 0x80000001, 0x2, 0x40, 0x7fff, 0x7ff, 0x6, 0x6, 0xffff, 0x0, 0x7fff, 0x2e9e, 0x7fff, 0x5, 0x0, 0x2, 0x9, 0xc, 0xd, 0x3, 0xd1f5, 0xb29, 0xb, 0x72e6c982, 0x4, 0xfffffffe, 0x8, 0x17d, 0x8, 0xf1, 0x7, 0xfffff9e5, 0x57, 0x1, 0x1, 0x2, 0x2, 0x3, 0x5, 0x40, 0xc, 0x3, 0x9, 0x6, 0x3ff, 0x0, 0x7c6f, 0x1, 0x9, 0x1, 0xe, 0x80, 0x7cdf9ff7, 0xf, 0xcaf, 0x1, 0x80000001, 0x5, 0x7, 0x3ff, 0x8, 0x3, 0x4e, 0x80000001, 0x0, 0x1, 0x6, 0x5, 0x7, 0x3, 0x5, 0x401, 0x6, 0x80, 0x1000, 0x5, 0x5, 0xffff9faa, 0x7, 0xc, 0x400, 0x3, 0x5, 0x5, 0x9, 0x3, 0x7, 0x3, 0x0, 0xef, 0x1d8, 0x1ff, 0x414, 0x7fff, 0xffffff00, 0x288a, 0x5, 0x3ff, 0x7, 0x5, 0xfffffe01, 0x9, 0x6, 0x800, 0x1, 0x5, 0x1, 0x8, 0x9, 0x9, 0x6, 0x4, 0x400, 0xb, 0x9, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x7, 0x0, 0x80, 0xffd, 0xd, 0x8e, 0x80000000, 0x6, 0x6d7, 0x8e4b, 0xab2, 0xa4, 0x100, 0x7, 0x3, 0xebb7, 0x1f, 0x6, 0x5, 0x7, 0x7, 0x1000, 0x9, 0x4, 0xc2, 0x8, 0x2783, 0x81a, 0x8, 0x3, 0x0, 0x0, 0x10e9, 0x0, 0x9, 0x8001, 0x67, 0x1, 0x9, 0xb, 0x26b2ed91, 0x1, 0x80, 0x6, 0x80000000, 0x6, 0x0, 0x6, 0x7fffffff, 0x5, 0x7ff, 0x100, 0x1, 0x3, 0xc3, 0x9, 0x34c5, 0x9, 0x1, 0x101, 0x0, 0x41, 0x645, 0xd4, 0x5, 0x6f, 0xe66, 0xe9df, 0x5, 0x4, 0x8000, 0x9, 0x922a, 0x7, 0x6a87, 0x1, 0x3, 0x10, 0x2, 0x10000, 0x1, 0x8, 0x1, 0xf95, 0x73, 0x8, 0x1, 0x10000, 0x5, 0x5ff16871, 0xc, 0x2df1283a, 0x324ad0ab, 0x9, 0x3, 0xab, 0xffffff81, 0x7, 0x0, 0x80, 0x9, 0xb4, 0xbd, 0x7, 0x8, 0x9, 0x7, 0x3, 0x6, 0x9597, 0x0, 0x9, 0x0, 0x2, 0x9, 0x0, 0x10000, 0x2, 0xfff, 0x5, 0x80000000, 0x8, 0x0, 0x4, 0x0, 0x10000, 0x6, 0x7fff, 0x2, 0x0, 0x100, 0xffffffff, 0x800, 0x90, 0x9, 0x0, 0x9, 0x1, 0x2, 0x8, 0x6, 0x3, 0x5, 0x5, 0x3, 0xd3d5, 0x4, 0x6f, 0x9, 0x8, 0x762b, 0xffff8001, 0x3, 0x14, 0xffffffff, 0x5, 0x3, 0x3ff, 0x3ff, 0x0, 0x7, 0x0, 0x4, 0x800, 0x200, 0x2, 0x0, 0x5, 0xf, 0x1, 0x8, 0x8, 0x10001, 0x0, 0x9, 0x7fff, 0x0, 0x7801, 0x80000001, 0x1, 0x6, 0x3, 0x2eb, 0x1, 0x3, 0xa, 0x9, 0x56f2, 0x7, 0x1, 0x9, 0x81, 0x3, 0xfffffffc, 0x9c, 0xcba, 0x7ff, 0x1, 0xa7d9, 0x1, 0x6, 0x0, 0x9, 0x3, 0x0, 0x2, 0xfffffffd, 0x40, 0x0, 0x8, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0xff, 0xf8c, 0x8, 0x1, 0x8, 0x3, 0x200, 0x0, 0x5, 0xf, 0x7, 0x9, 0x10001, 0x0, 0x3, 0x3, 0x6, 0x8, 0x2, 0x9, 0x2edc25ea, 0x0, 0x7fffffff, 0x80000001, 0x81, 0x81, 0x80000000, 0x6, 0x525, 0x2, 0x0, 0xbc, 0x7, 0x4, 0x5, 0xffff, 0x9, 0x10000, 0x9, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe}]}, @TCA_FLOW_MASK={0x8, 0x6, 0x5fa}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x1}]}}]}, 0x2294}, 0x1, 0x0, 0x0, 0x80}, 0xc804) 2.832847161s ago: executing program 1 (id=148): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0) mq_timedsend(r0, &(0x7f0000000600)="6d12483bb95dab4d", 0x8, 0x6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_gettime(0x2, &(0x7f0000000140)) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x10000000000000b8, 0x0) mq_timedreceive(r0, &(0x7f0000036600)=""/102394, 0x18ffa, 0x0, 0x0) 2.224686656s ago: executing program 1 (id=149): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) add_key(&(0x7f00000000c0)='rxrpc\x00', 0x0, &(0x7f0000000340)="6debb6c01d255ba96eef31463a476841c4374d9f343464c4f9ba1cc36ab0ce60ae6b83d5e3da9753993296d3a707e329ed92d9c2f869b6feeac8a2b87fcf42f04b82b47c2e2934d0f43c695a44f1abb9bab9f17730eef2ec45e52b4ef7d95b82712831948692c25e028704c4c8f8dd9752ce20811058a5aa0dfe2b1403ec", 0x7e, 0xffffffffffffffff) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=""/34, 0x22}, 0x6e1}], 0x1, 0x20, 0x0) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x34, r4, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac06, 0xfac09]}]]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x23000000}}) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) 2.13960757s ago: executing program 2 (id=150): syz_emit_ethernet(0x0, 0x0, 0x0) 1.909297433s ago: executing program 2 (id=151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) close(r4) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='sour:e', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000200)='befs\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) inotify_init() bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="cd6ab1eb00000000002000000000000000823ff1660be47b3324d1c169f011f0853cd866b486da28b674", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) poll(&(0x7f0000000140), 0x0, 0x8000) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045fe00280064000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004606f907800e7f0ff23782a1d1f28baaa16aacf0d83ba4b4ad9355e0a2d5dff470c9702000000000000000713df17e56704fe68c174ec31c1528963fdeafa931f70e551b7c0fa44675d1c9ce0e342958635e887585420cdebfeef78d12cd1e316371c3e60"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0xcc}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x802) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40084}, 0x40000) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000040)=""/185) 1.41398117s ago: executing program 0 (id=152): unshare(0x24020400) r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0xc0041) fsopen(&(0x7f0000000140)='ext4\x00', 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x591) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200)) sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc7b}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="d5", 0x1}], 0x1}}], 0x2, 0x20000800) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1, 0xffff}, 0x10) 957.327765ms ago: executing program 4 (id=153): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) listen(r1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4840) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000240)={0xfffc, 0x0, 0xfff, 0xa}, 0x8) sendto$inet6(r6, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, 0x0, &(0x7f0000000200)) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001380), 0xffffffffffffffff) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000200)={&(0x7f0000001480)=[{0x9, 0x8001, 0x0, 0x0}, {0x8, 0x11, 0x0, 0x0}], 0x2}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x101) connect$unix(r4, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 793.191799ms ago: executing program 0 (id=154): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000240)={0x20, 0x11, 0xd5, "6c3ad08ad577e7ca81f27cd0dbc04a0a668f44b455d568057621f801bcc71a984c087d210c7ea573a9f2e460a5b327781a39c4a068cd2c89b439610f25898fe1516f17e32a49291067a86e6d2c4c353d4e4431cdda3dc6c58fdf842d75037b31e01061b6fe85da092f4506ce36d5f8a3237cb4df8c06c01bae7600b8a8e59c0fbd3c5dd28da7edcbc514e42b3cfb80bbc91dd2e9fd3e009941e93dbb331aa03a2701ff49ee098c1bc6aae5a7e316ae37fdddf3b46e1e77111f00c0e888dd1eed5dace5962e961ebc5ce91a00c09c697f8cf67a9422"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xe}, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="2000ca00000000c80f74f8d42e6c24b1b5bea653336979d381ab23a55ddb05e1821e81fd7a959d906ab199b6bac344090a96e62b4e8221b9568647de8e435b819f8f41f1006df11e9cc01e73d99a44e30b1d1843909431b3ecbc7affce685d509f0ea737522430d09e992b6b9d4f51d12d07eeb9a7051c9867efa2d6dff1071cc5783cabdb7d61951ee683838b57a7ba3bf1b26ce1f0fc2d9641a60fe85fe949a7ac1c10505dd70b534620c0f2128fec3e29020000005b2c13fe926ee832f1e7ad05d49655d454b49696"], &(0x7f0000000500)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0x2}}) pwritev(r1, 0x0, 0x0, 0x5, 0xb2) 493.435206ms ago: executing program 1 (id=155): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x80, 0x6, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x840) syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x18, &(0x7f0000000940)={0x20, 0x22, 0x4, {0x4, 0xc, 'Pa'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x30, r2, &(0x7f0000000040)='./file0\x00') syz_emit_ethernet(0x244, &(0x7f0000001c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "be027b", 0x20e, 0x89, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[@srh={0x6c, 0x6, 0x4, 0x3, 0x4, 0x40, 0x6, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @dstopts={0x73, 0x1b, '\x00', [@pad1, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @mcast1}, @generic={0xeb, 0xc4, "013ba42ad301dd558bfd492dd4ba5202712c7b2a5e8c9a84682db9bb886879606ea3e5e059785af5e472190f4d77b579b4da155a19d3aed2936c890940dc7451477f58515481f676908fb96500719eab284b3d42339326d092bfd51d7d33b59ea423b53d34bb48f01f27fcf8aad908f607da9f8666dc43933987f62b98e0291c7f0794129848a385086d6fe99db73c45c9c46633072ccdfe9c10e279c14ec22cc336cac45f86c6b1827f3f7d53bd274d3752f64f5b8051dfd70e0cc8eca17c1e256a12e3"}]}, @routing={0x1, 0x6, 0x2, 0xf8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3c}, @dev={0xfe, 0x80, '\x00', 0xc}, @private2={0xfc, 0x2, '\x00', 0x1}]}], "8c21cc8e576bf5b0d6fa8880193377a8468101b5e468a07658d9d160bdb3553879e3c8970446f498bd3d24a679da9186f2752c34d8f91e916be7f2dc7822dce3a6aade7cb91c9cadfde566249da22e9a34f4527145a8412dc74ab2dc39df4d8190235b74b5c8a93e25230ab286eeee0443e0c86423f21542a71955f0d54f6680503364ceb3fdc9257f0e6874111b23e52c57b24e82001878282339e0c7c5b29fbbbaa9d49d64e51754d4155f968ce45ccfdbb44d3fe2"}}}}}, 0x0) 0s ago: executing program 3 (id=156): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x3, 0x40, 0x40, 0x0, 0x10001, 0x2004cc, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x2, 0x0, 0x2, 0x6, 0x1], 0x80a0000, 0x200450}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000030, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000300), 0x4480, 0x0) setsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000380), 0x0) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r5) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r5) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket(0x2, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000000)={0xc2a10a980d0dcec8}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x97, 0x8, 0x47314356, 0x4f565559, 0x3, [{0x9, 0x9}, {0x5, 0x7f75}, {0x0, 0x2001}, {0x89d, 0x2b5}, {0x7, 0x2}, {0x80000001, 0x200}, {0xffffff01, 0x8000}, {0x1, 0x4}], 0x8, 0x8, 0x8, 0x0, 0x7}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.212' (ED25519) to the list of known hosts. [ 66.949285][ T5813] cgroup: Unknown subsys name 'net' [ 67.138048][ T5813] cgroup: Unknown subsys name 'cpuset' [ 67.146708][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.552019][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.617484][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.634295][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.636319][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.642396][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.649688][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.658727][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.664126][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.670775][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.678874][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.692075][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.693212][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.706631][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.714049][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.716664][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.728611][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.729243][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.737039][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.743559][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.758431][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.760663][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.774083][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.792821][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.801226][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.818781][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.826505][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.300631][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 71.318470][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.325050][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.569639][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 71.604319][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.612165][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.620164][ T5844] bridge_slave_0: entered allmulticast mode [ 71.627367][ T5844] bridge_slave_0: entered promiscuous mode [ 71.670992][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.678375][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.685859][ T5844] bridge_slave_1: entered allmulticast mode [ 71.692847][ T5844] bridge_slave_1: entered promiscuous mode [ 71.713333][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 71.838097][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.856035][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.865313][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 71.897685][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 71.929689][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.936941][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.944074][ T5846] bridge_slave_0: entered allmulticast mode [ 71.951669][ T5846] bridge_slave_0: entered promiscuous mode [ 71.990366][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.997884][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.005111][ T5846] bridge_slave_1: entered allmulticast mode [ 72.012079][ T5846] bridge_slave_1: entered promiscuous mode [ 72.029540][ T5844] team0: Port device team_slave_0 added [ 72.074330][ T5844] team0: Port device team_slave_1 added [ 72.136756][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.166155][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.173330][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.180624][ T5842] bridge_slave_0: entered allmulticast mode [ 72.187805][ T5842] bridge_slave_0: entered promiscuous mode [ 72.197329][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.211893][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.218914][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.245043][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.267792][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.275818][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.282994][ T5842] bridge_slave_1: entered allmulticast mode [ 72.290392][ T5842] bridge_slave_1: entered promiscuous mode [ 72.319864][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.326859][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.352979][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.419107][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.426565][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.433691][ T5845] bridge_slave_0: entered allmulticast mode [ 72.440874][ T5845] bridge_slave_0: entered promiscuous mode [ 72.459950][ T5846] team0: Port device team_slave_0 added [ 72.465714][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.472831][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.480218][ T5843] bridge_slave_0: entered allmulticast mode [ 72.487374][ T5843] bridge_slave_0: entered promiscuous mode [ 72.495900][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.503071][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.510767][ T5845] bridge_slave_1: entered allmulticast mode [ 72.519748][ T5845] bridge_slave_1: entered promiscuous mode [ 72.529054][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.540034][ T5846] team0: Port device team_slave_1 added [ 72.546586][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.553718][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.561642][ T5843] bridge_slave_1: entered allmulticast mode [ 72.568826][ T5843] bridge_slave_1: entered promiscuous mode [ 72.602858][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.677557][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.701227][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.721304][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.728318][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.755077][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.768280][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.782796][ T5844] hsr_slave_0: entered promiscuous mode [ 72.789424][ T5844] hsr_slave_1: entered promiscuous mode [ 72.797898][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.808566][ T5842] team0: Port device team_slave_0 added [ 72.815642][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.822587][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.835824][ T5836] Bluetooth: hci4: command tx timeout [ 72.849216][ T5830] Bluetooth: hci2: command tx timeout [ 72.854408][ T5148] Bluetooth: hci0: command tx timeout [ 72.860646][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.865965][ T5840] Bluetooth: hci1: command tx timeout [ 72.904098][ T5842] team0: Port device team_slave_1 added [ 72.915394][ T5840] Bluetooth: hci3: command tx timeout [ 72.965327][ T5843] team0: Port device team_slave_0 added [ 72.972875][ T5845] team0: Port device team_slave_0 added [ 72.999964][ T5843] team0: Port device team_slave_1 added [ 73.007277][ T5845] team0: Port device team_slave_1 added [ 73.023475][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.030920][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.057499][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.113783][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.121156][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.147306][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.192319][ T5846] hsr_slave_0: entered promiscuous mode [ 73.198699][ T5846] hsr_slave_1: entered promiscuous mode [ 73.205547][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 73.211383][ T5846] Cannot create hsr debugfs directory [ 73.230862][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.238465][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.265578][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.277349][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.284301][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.310564][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.331322][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.338308][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.364476][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.376815][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.383749][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.409797][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.521613][ T5842] hsr_slave_0: entered promiscuous mode [ 73.528334][ T5842] hsr_slave_1: entered promiscuous mode [ 73.534316][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 73.540235][ T5842] Cannot create hsr debugfs directory [ 73.637876][ T5843] hsr_slave_0: entered promiscuous mode [ 73.644138][ T5843] hsr_slave_1: entered promiscuous mode [ 73.650800][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 73.656711][ T5843] Cannot create hsr debugfs directory [ 73.668618][ T5845] hsr_slave_0: entered promiscuous mode [ 73.675443][ T5845] hsr_slave_1: entered promiscuous mode [ 73.681719][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 73.687661][ T5845] Cannot create hsr debugfs directory [ 74.050753][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.075630][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.107566][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.127994][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.190488][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.207000][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.218616][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.230893][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.325762][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.337528][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.349635][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.360947][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.468361][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.484324][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.507608][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.514688][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.527134][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.643593][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.658578][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.681553][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.693043][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.711739][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.720596][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.727829][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.738017][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.770445][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.777577][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.821223][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.847617][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.854710][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.872527][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.879685][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.912499][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.915048][ T5840] Bluetooth: hci2: command tx timeout [ 74.919336][ T5836] Bluetooth: hci0: command tx timeout [ 74.925296][ T5840] Bluetooth: hci4: command tx timeout [ 74.931211][ T5148] Bluetooth: hci1: command tx timeout [ 74.996619][ T5836] Bluetooth: hci3: command tx timeout [ 75.028037][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.058185][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.065375][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.082590][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.089757][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.101404][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.158370][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.173163][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.197681][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.204834][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.225089][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.232310][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.268385][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.284378][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.308640][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.341319][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.348446][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.370794][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.377923][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.405886][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.477560][ T5844] veth0_vlan: entered promiscuous mode [ 75.512939][ T5846] veth0_vlan: entered promiscuous mode [ 75.522867][ T5844] veth1_vlan: entered promiscuous mode [ 75.562290][ T5846] veth1_vlan: entered promiscuous mode [ 75.610048][ T5842] veth0_vlan: entered promiscuous mode [ 75.642335][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.657611][ T5842] veth1_vlan: entered promiscuous mode [ 75.677782][ T5844] veth0_macvtap: entered promiscuous mode [ 75.693127][ T5844] veth1_macvtap: entered promiscuous mode [ 75.730357][ T5846] veth0_macvtap: entered promiscuous mode [ 75.751104][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.761976][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.775541][ T5846] veth1_macvtap: entered promiscuous mode [ 75.790191][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.821222][ T4343] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.836630][ T5842] veth0_macvtap: entered promiscuous mode [ 75.844267][ T4343] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.853522][ T4343] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.864239][ T5845] veth0_vlan: entered promiscuous mode [ 75.873707][ T4343] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.889668][ T5842] veth1_macvtap: entered promiscuous mode [ 75.898258][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.919215][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.935818][ T5845] veth1_vlan: entered promiscuous mode [ 75.956449][ T1158] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.967736][ T1158] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.987349][ T1158] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.998514][ T1158] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.016426][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.054197][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.119975][ T1158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.137659][ T1158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.146725][ T1158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.158530][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.168481][ T5843] veth0_vlan: entered promiscuous mode [ 76.174273][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.176315][ T1158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.241068][ T5845] veth0_macvtap: entered promiscuous mode [ 76.256534][ T5845] veth1_macvtap: entered promiscuous mode [ 76.270691][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.275099][ T5843] veth1_vlan: entered promiscuous mode [ 76.281478][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.334449][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.349772][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.384314][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.407655][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.415760][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.433329][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.448624][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.506868][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.528868][ T3740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.540882][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.564207][ T3740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.576318][ T5843] veth0_macvtap: entered promiscuous mode [ 76.583296][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.614651][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.671871][ T5843] veth1_macvtap: entered promiscuous mode [ 76.774043][ T3740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.794364][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.805985][ T3740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.878516][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.900659][ T3740] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.926200][ T3740] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.948707][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.956382][ T3740] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.989015][ T3740] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.995040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.007166][ T5148] Bluetooth: hci2: command tx timeout [ 77.007419][ T5830] Bluetooth: hci1: command tx timeout [ 77.012619][ T5836] Bluetooth: hci4: command tx timeout [ 77.026418][ T5840] Bluetooth: hci0: command tx timeout [ 77.033259][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.055226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.077035][ T5840] Bluetooth: hci3: command tx timeout [ 77.166563][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.197124][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.267622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.325597][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.351980][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.465684][ T5932] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2'. [ 77.486095][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.505648][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.610029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.621002][ T5935] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.645245][ T5911] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.666087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.782310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.884744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.924877][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 77.974450][ T5911] usb 3-1: config 12 has an invalid interface number: 243 but max is 2 [ 77.987581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.098351][ T5911] usb 3-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 78.257469][ T5911] usb 3-1: config 12 has an invalid interface number: 27 but max is 2 [ 78.284004][ T5911] usb 3-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 78.330554][ T5911] usb 3-1: config 12 has an invalid interface number: 83 but max is 2 [ 78.395722][ T5911] usb 3-1: config 12 has no interface number 0 [ 78.413834][ T5911] usb 3-1: config 12 has no interface number 1 [ 78.443053][ T5911] usb 3-1: config 12 has no interface number 2 [ 78.457985][ T5911] usb 3-1: config 12 interface 243 altsetting 196 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 78.487130][ T5911] usb 3-1: config 12 interface 243 altsetting 196 has a duplicate endpoint with address 0x1, skipping [ 78.529919][ T30] audit: type=1326 audit(1765486554.645:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 78.575832][ T5911] usb 3-1: config 12 interface 243 altsetting 196 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 78.709486][ T5911] usb 3-1: config 12 interface 27 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 78.724394][ T30] audit: type=1326 audit(1765486554.685:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=40000003 syscall=304 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 78.792762][ T5911] usb 3-1: config 12 interface 27 altsetting 14 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 78.829278][ T5911] usb 3-1: config 12 interface 27 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 78.847190][ T30] audit: type=1326 audit(1765486554.685:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 78.885367][ T5911] usb 3-1: config 12 interface 27 altsetting 14 endpoint 0x4 has invalid maxpacket 61338, setting to 64 [ 78.910870][ T5911] usb 3-1: config 12 interface 27 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 78.923451][ T30] audit: type=1326 audit(1765486554.735:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 78.953965][ T5911] usb 3-1: config 12 interface 27 altsetting 14 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 78.987487][ T5911] usb 3-1: config 12 interface 27 altsetting 14 has a duplicate endpoint with address 0x8, skipping [ 79.002052][ T30] audit: type=1326 audit(1765486554.845:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 79.095052][ T5840] Bluetooth: hci4: command tx timeout [ 79.095090][ T5840] Bluetooth: hci2: command tx timeout [ 79.095113][ T5840] Bluetooth: hci0: command tx timeout [ 79.095134][ T5840] Bluetooth: hci1: command tx timeout [ 79.151149][ T5911] usb 3-1: config 12 interface 27 altsetting 14 has 9 endpoint descriptors, different from the interface descriptor's value: 10 [ 79.151401][ T5911] usb 3-1: config 12 interface 83 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 79.151425][ T5911] usb 3-1: config 12 interface 83 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 79.151449][ T5911] usb 3-1: config 12 interface 83 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 79.151470][ T5911] usb 3-1: config 12 interface 83 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 79.151489][ T5911] usb 3-1: config 12 interface 83 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 79.151509][ T5911] usb 3-1: config 12 interface 83 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 79.151528][ T5911] usb 3-1: config 12 interface 83 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 79.151547][ T5911] usb 3-1: config 12 interface 83 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 79.151566][ T5911] usb 3-1: config 12 interface 83 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 79.151584][ T5911] usb 3-1: config 12 interface 83 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 79.151603][ T5911] usb 3-1: config 12 interface 83 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 79.151623][ T5911] usb 3-1: config 12 interface 83 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 79.151643][ T5911] usb 3-1: config 12 interface 243 has no altsetting 0 [ 79.151657][ T5911] usb 3-1: config 12 interface 27 has no altsetting 0 [ 79.151672][ T5911] usb 3-1: config 12 interface 83 has no altsetting 0 [ 79.161062][ T5911] usb 3-1: New USB device found, idVendor=046d, idProduct=08f5, bcdDevice=ba.3c [ 79.161091][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.161110][ T5911] usb 3-1: Product: ᰊ [ 79.161124][ T5911] usb 3-1: Manufacturer: 磩ꁎ멧인岪䐍䊖촫潯鴣賣ᙎ犳tᣗ徚꾍휁㰔컫칐䐠▇◼ᐳ呗㤒狺캌胳睗븶ᵀ턦ꨉ脣ㅵⅵ﴿둪뾸萏ㆪ㯚ࠤ岍蠖痕롵᳝瞬૝ᄌꡔﯬ㪍㖍뺓섀싩ᇧꥹ韱釉樚狻萼ꞩ劋㊙鐊ᳬ躛藾蒎⸿筫ꥄ蟫綆腘䀿鰆뛛兀葹썂 [ 79.161150][ T5911] usb 3-1: SerialNumber: ࡃ [ 79.165045][ T5830] Bluetooth: hci3: command tx timeout [ 79.227523][ T5958] mac80211_hwsim hwsim9 ..c: renamed from wlan1 (while UP) [ 79.267609][ T5911] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 79.267647][ T5911] usb 3-1: no configuration chosen from 1 choice [ 79.284843][ T30] audit: type=1326 audit(1765486554.845:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 79.284888][ T30] audit: type=1326 audit(1765486554.845:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 79.284924][ T30] audit: type=1326 audit(1765486554.885:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 79.284958][ T30] audit: type=1326 audit(1765486554.885:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 79.284998][ T30] audit: type=1326 audit(1765486554.885:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 79.341723][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 79.689164][ T5966] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 79.872301][ T5966] wg2: entered allmulticast mode [ 79.986493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.986795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.396757][ T5883] usb 3-1: USB disconnect, device number 2 [ 80.651269][ T5958] ipt_ECN: cannot use operation on non-tcp rule [ 80.697542][ T5979] wg2: entered allmulticast mode [ 81.218239][ T5992] netlink: 'syz.3.20': attribute type 10 has an invalid length. [ 81.218261][ T5992] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20'. [ 81.337643][ T5995] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.472426][ T5992] team0: Failed to send options change via netlink (err -105) [ 81.472444][ T5992] team0: Port device geneve0 added [ 81.472868][ T5993] veth1_to_bond: entered allmulticast mode [ 81.615254][ T5992] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 81.620838][ T5992] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 82.033951][ T6002] netlink: 'syz.3.21': attribute type 3 has an invalid length. [ 82.033985][ T6002] netlink: 132 bytes leftover after parsing attributes in process `syz.3.21'. [ 82.056166][ T5989] veth1_to_bond: left allmulticast mode [ 82.432380][ T6007] QAT: failed to copy from user cfg_data. [ 82.458212][ T6003] netlink: 'syz.2.18': attribute type 30 has an invalid length. [ 82.734872][ T129] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.802660][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 83.133079][ T129] usb 4-1: config 0 has an invalid interface number: 224 but max is 0 [ 83.133097][ T129] usb 4-1: config 0 has no interface number 0 [ 83.218180][ T6014] Zero length message leads to an empty skb [ 83.226231][ T129] usb 4-1: New USB device found, idVendor=049f, idProduct=ffff, bcdDevice=41.67 [ 83.226260][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.226278][ T129] usb 4-1: Product: syz [ 83.226291][ T129] usb 4-1: Manufacturer: syz [ 83.226303][ T129] usb 4-1: SerialNumber: syz [ 83.229008][ T129] usb 4-1: config 0 descriptor?? [ 83.233419][ T129] safe_serial 4-1:0.224: safe_serial converter detected [ 83.233634][ T129] safe_serial 4-1:0.224: probe with driver safe_serial failed with error -22 [ 83.611261][ T5912] usb 4-1: USB disconnect, device number 2 [ 83.944954][ T129] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.097649][ T129] usb 2-1: Using ep0 maxpacket: 32 [ 84.099846][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.193270][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.203866][ T129] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 84.216620][ T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.248726][ T129] usb 2-1: config 0 descriptor?? [ 84.649602][ T5912] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 84.667253][ T129] corsair 0003:1B1C:1B3E.0001: unknown main item tag 0x5 [ 84.687204][ T129] corsair 0003:1B1C:1B3E.0001: failed to start in urb: -90 [ 84.719841][ T129] corsair 0003:1B1C:1B3E.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0 [ 84.795507][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.815933][ T5912] usb 4-1: unable to get BOS descriptor or descriptor too short [ 84.825929][ T5912] usb 4-1: not running at top speed; connect to a high speed hub [ 84.835969][ T5912] usb 4-1: config 7 has an invalid interface number: 180 but max is 0 [ 84.844506][ T5912] usb 4-1: config 7 has no interface number 0 [ 84.851937][ T5912] usb 4-1: config 7 interface 180 has no altsetting 0 [ 84.887225][ T5883] usb 2-1: USB disconnect, device number 2 [ 84.896752][ T5912] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=3c.f2 [ 84.915113][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.923330][ T5912] usb 4-1: Product: syz [ 84.928901][ T5912] usb 4-1: Manufacturer: ᆊ罾柵枨톐㉁띎뼱瑲ほ웒ຘ䭡듺늿=ሬ㻔㬚遧畾헍⹙雐羚⨁ᗩ堓툭ጃ㾋יⅤ㩩層ᗼ揣꘣㐌룋瀂商羹띀ꇶ䭌溩桳ꠈ줖伟핶⥦珅囧唵뮺㼑鍢嫥㗓뙼凳鼫俧拌᱓ [ 84.957327][ T5912] usb 4-1: SerialNumber: syz [ 84.975236][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 84.985370][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.087985][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.108845][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 85.128487][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.137664][ T6037] fido_id[6037]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 85.156946][ T9] usb 5-1: config 0 descriptor?? [ 85.611622][ T5912] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 85.641840][ T9] ft260 0003:0403:6030.0002: unknown main item tag 0x7 [ 85.656706][ T5912] gspca_topro: reg_w err -71 [ 85.705473][ T5912] gspca_topro: Sensor soi763a [ 85.736336][ T5912] usb 4-1: USB disconnect, device number 3 [ 85.873806][ T9] ft260 0003:0403:6030.0002: chip code: 6424 8183 [ 85.955585][ T6046] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.082129][ T9] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 86.102265][ T6048] loop6: detected capacity change from 0 to 2560 [ 86.132136][ T5823] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.170184][ T5823] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.185586][ T5823] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.193687][ T5823] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.203641][ T5823] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.212632][ T5823] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.220908][ T5823] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.229962][ T5823] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.238169][ T5823] ldm_validate_partition_table(): Disk read failed. [ 86.245108][ T5823] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.252970][ T5823] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.266333][ T5823] Dev loop6: unable to read RDB block 0 [ 86.274071][ T5823] loop6: unable to read partition table [ 86.286819][ T6048] ldm_validate_partition_table(): Disk read failed. [ 86.296931][ T9] ft260 0003:0403:6030.0002: failed to retrieve status: -32, no wakeup [ 86.305046][ T6048] Dev loop6: unable to read RDB block 0 [ 86.312441][ T9] ft260 0003:0403:6030.0002: failed to retrieve status: -71 [ 86.312937][ T9] ft260 0003:0403:6030.0002: failed to reset I2C controller: -71 [ 86.321778][ T6048] loop6: unable to read partition table [ 86.349375][ T9] usb 5-1: USB disconnect, device number 2 [ 86.394120][ T6048] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 86.604864][ T129] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.680416][ T39] cfg80211: failed to load regulatory.db [ 86.884862][ T129] usb 1-1: Using ep0 maxpacket: 8 [ 86.913385][ T129] usb 1-1: unable to get BOS descriptor or descriptor too short [ 86.943531][ T129] usb 1-1: config 4 interface 0 has no altsetting 0 [ 87.025987][ T129] usb 1-1: string descriptor 0 read error: -22 [ 87.108796][ T129] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 87.185687][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.245555][ T129] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 87.325581][ T129] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 87.413066][ T129] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 87.428750][ T129] usb 1-1: media controller created [ 87.458400][ T6052] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 87.594067][ T6074] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 87.668731][ T129] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.677856][ T6075] netlink: 28 bytes leftover after parsing attributes in process `syz.4.42'. [ 87.756921][ T129] zl10353_read_register: readreg error (reg=127, ret==0) [ 87.865044][ T129] usb 1-1: USB disconnect, device number 2 [ 88.024896][ T5912] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.032553][ T39] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.093232][ T6080] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 88.135215][ T6080] netlink: 44 bytes leftover after parsing attributes in process `syz.1.44'. [ 88.205043][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 88.211220][ T39] usb 5-1: too many configurations: 175, using maximum allowed: 8 [ 88.220181][ T5912] usb 3-1: config index 0 descriptor too short (expected 64548, got 36) [ 88.231918][ T39] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 88.241024][ T5912] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 88.250711][ T39] usb 5-1: can't read configurations, error -61 [ 88.257172][ T5912] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 88.269921][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.283635][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.294058][ T5912] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 88.305382][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.316861][ T5912] usb 3-1: config 0 descriptor?? [ 88.569251][ T39] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.755138][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 88.771799][ T39] usb 5-1: too many configurations: 175, using maximum allowed: 8 [ 88.791596][ T5912] aquacomputer_d5next 0003:0C70:F0BD.0003: unknown main item tag 0x0 [ 88.812048][ T5912] aquacomputer_d5next 0003:0C70:F0BD.0003: unknown main item tag 0x0 [ 88.821850][ T5912] aquacomputer_d5next 0003:0C70:F0BD.0003: unknown main item tag 0x0 [ 88.830766][ T5912] aquacomputer_d5next 0003:0C70:F0BD.0003: unknown main item tag 0x0 [ 88.844278][ T5912] aquacomputer_d5next 0003:0C70:F0BD.0003: unknown main item tag 0x0 [ 88.852991][ T39] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 88.886138][ T39] usb 5-1: can't read configurations, error -61 [ 88.900916][ T39] usb usb5-port1: attempt power cycle [ 88.920127][ T5912] aquacomputer_d5next 0003:0C70:F0BD.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.2-1/input0 [ 89.131632][ T5912] usb 3-1: USB disconnect, device number 3 [ 89.186420][ T6090] fido_id[6090]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 89.304951][ T39] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 89.340887][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 89.369056][ T39] usb 5-1: too many configurations: 175, using maximum allowed: 8 [ 89.391317][ T39] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 89.420217][ T39] usb 5-1: can't read configurations, error -61 [ 89.517126][ T6099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.556707][ T39] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 89.595957][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 89.601828][ T39] usb 5-1: too many configurations: 175, using maximum allowed: 8 [ 89.620387][ T39] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 89.644864][ T39] usb 5-1: can't read configurations, error -61 [ 89.651577][ T39] usb usb5-port1: unable to enumerate USB device [ 89.694897][ T129] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.737456][ T6108] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 89.744118][ T6108] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.756717][ T6108] vhci_hcd vhci_hcd.0: Device attached [ 89.770253][ T6109] vhci_hcd: connection closed [ 89.771668][ T6016] vhci_hcd vhci_hcd.2: stop threads [ 89.782661][ T6016] vhci_hcd vhci_hcd.2: release socket [ 89.789060][ T6016] vhci_hcd vhci_hcd.2: disconnect device [ 89.825951][ T39] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.889595][ T129] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.901197][ T129] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.911899][ T129] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 89.926991][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 89.943009][ T129] usb 1-1: SerialNumber: syz [ 90.016933][ T39] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 90.026945][ T39] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 90.038354][ T39] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 90.050457][ T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 90.074516][ T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 90.091424][ T39] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.100700][ T39] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.109378][ T39] usb 4-1: Product: syz [ 90.113766][ T39] usb 4-1: Manufacturer: syz [ 90.130215][ T39] cdc_wdm 4-1:1.0: skipping garbage [ 90.135816][ T39] cdc_wdm 4-1:1.0: skipping garbage [ 90.148126][ T39] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 90.154314][ T39] cdc_wdm 4-1:1.0: Unknown control protocol [ 90.180147][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'. [ 90.224552][ T6097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.248205][ T6097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.337878][ T129] usb 1-1: invalid UAC_HEADER (v1) [ 90.413812][ T129] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 90.455836][ T129] usb 1-1: USB disconnect, device number 3 [ 90.478576][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.598234][ T6115] usb usb8: usbfs: process 6115 (syz.2.56) did not claim interface 0 before use [ 90.755126][ T6118] binder: 6098:6118 ioctl c0306201 80000640 returned -22 [ 91.467871][ T6133] netlink: 72 bytes leftover after parsing attributes in process `syz.4.62'. [ 91.654593][ T5903] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 92.016904][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 92.054178][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.081611][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.091773][ T5903] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 92.102247][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.137102][ T5903] usb 1-1: config 0 descriptor?? [ 92.576142][ T6147] netlink: 'syz.2.65': attribute type 10 has an invalid length. [ 92.587728][ T39] usb 4-1: USB disconnect, device number 4 [ 92.607424][ T5903] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x5 [ 92.645689][ T5903] corsair 0003:1B1C:1B3E.0004: failed to start in urb: -90 [ 92.646604][ T6148] netlink: 'syz.2.65': attribute type 10 has an invalid length. [ 92.695131][ T5903] corsair 0003:1B1C:1B3E.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 92.751736][ T6147] team0: Port device dummy0 added [ 92.824271][ T6148] team0: Port device dummy0 removed [ 92.857581][ T5936] usb 1-1: USB disconnect, device number 4 [ 93.476773][ T39] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.674872][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.694837][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 93.802286][ T39] usb 3-1: config 8 has an invalid interface number: 68 but max is 3 [ 93.813148][ T39] usb 3-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 93.865097][ T39] usb 3-1: config 8 has an invalid interface number: 191 but max is 3 [ 93.883573][ T39] usb 3-1: config 8 has an invalid interface number: 103 but max is 3 [ 93.887382][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.910747][ T39] usb 3-1: config 8 has an invalid descriptor of length 247, skipping remainder of the config [ 93.930998][ T39] usb 3-1: config 8 has 3 interfaces, different from the descriptor's value: 4 [ 93.976629][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 93.987820][ T39] usb 3-1: config 8 has no interface number 0 [ 93.987843][ T39] usb 3-1: config 8 has no interface number 1 [ 93.987859][ T39] usb 3-1: config 8 has no interface number 2 [ 93.987917][ T39] usb 3-1: config 8 interface 68 altsetting 95 has an invalid descriptor for endpoint zero, skipping [ 93.987937][ T39] usb 3-1: config 8 interface 68 altsetting 95 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 93.995184][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 94.184652][ T39] usb 3-1: config 8 interface 68 altsetting 95 endpoint 0x6 has invalid wMaxPacketSize 0 [ 94.196897][ T39] usb 3-1: config 8 interface 68 altsetting 95 endpoint 0xB has invalid wMaxPacketSize 0 [ 94.206891][ T39] usb 3-1: config 8 interface 68 altsetting 95 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 94.228593][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.270008][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.279804][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.299930][ T39] usb 3-1: config 8 interface 68 altsetting 95 has an invalid descriptor for endpoint zero, skipping [ 94.322311][ T9] usb 2-1: config 0 descriptor?? [ 94.328848][ T39] usb 3-1: config 8 interface 68 altsetting 95 has a duplicate endpoint with address 0x7, skipping [ 94.349888][ T39] usb 3-1: config 8 interface 68 altsetting 95 bulk endpoint 0xF has invalid maxpacket 967 [ 94.370194][ T39] usb 3-1: config 8 interface 68 altsetting 95 has a duplicate endpoint with address 0x8, skipping [ 94.398699][ T39] usb 3-1: config 8 interface 68 altsetting 95 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 94.424893][ T39] usb 3-1: config 8 interface 191 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 94.454969][ T39] usb 3-1: config 8 interface 191 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 94.484426][ T39] usb 3-1: config 8 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 94.509820][ T39] usb 3-1: config 8 interface 191 altsetting 8 endpoint 0x3 has invalid wMaxPacketSize 0 [ 94.535419][ T39] usb 3-1: config 8 interface 191 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 0 [ 94.540181][ T6180] tipc: Enabling of bearer rejected, failed to enable media [ 94.554951][ T5827] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.590381][ T39] usb 3-1: config 8 interface 191 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 94.614984][ T39] usb 3-1: config 8 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 94.647255][ T39] usb 3-1: config 8 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 94.666570][ T39] usb 3-1: config 8 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 94.683078][ T39] usb 3-1: config 8 interface 191 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 94.705438][ T39] usb 3-1: config 8 interface 191 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 94.725421][ T39] usb 3-1: config 8 interface 191 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 94.739493][ T39] usb 3-1: config 8 interface 191 altsetting 8 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 94.752897][ T5827] usb 1-1: Using ep0 maxpacket: 8 [ 94.759739][ T39] usb 3-1: config 8 interface 103 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 94.785457][ T39] usb 3-1: config 8 interface 68 has no altsetting 0 [ 94.793075][ T5827] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 94.802162][ T5827] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.818185][ T39] usb 3-1: config 8 interface 191 has no altsetting 0 [ 94.825969][ T5827] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.835575][ T9] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 94.837600][ T39] usb 3-1: config 8 interface 103 has no altsetting 0 [ 94.855376][ T5827] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.865704][ T5827] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.882057][ T5827] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.893502][ T39] usb 3-1: New USB device found, idVendor=2040, idProduct=4201, bcdDevice=bc.c3 [ 94.903343][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.924836][ T39] usb 3-1: Product: 〉 [ 94.936928][ T39] usb 3-1: Manufacturer: е [ 94.952190][ T39] usb 3-1: SerialNumber: syz [ 94.961245][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.990269][ T6159] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.220591][ T5827] usb 1-1: usb_control_msg returned -32 [ 95.245042][ T5827] usbtmc 1-1:16.0: can't read capabilities [ 95.276604][ T39] usb 3-1: USB disconnect, device number 4 [ 95.814514][ T5827] usb 2-1: USB disconnect, device number 3 [ 96.244620][ T6207] wg2: entered allmulticast mode [ 96.576567][ T6219] syzkaller1: entered promiscuous mode [ 96.583393][ T6219] syzkaller1: entered allmulticast mode [ 96.590828][ T6213] netlink: 148 bytes leftover after parsing attributes in process `syz.4.84'. [ 96.599741][ T6213] netlink: 148 bytes leftover after parsing attributes in process `syz.4.84'. [ 96.826239][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 96.915332][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.961040][ T6221] hsr_slave_1 (unregistering): left promiscuous mode [ 96.974947][ T5903] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 97.076743][ T9] usb 2-1: config 0 has no interfaces? [ 97.082554][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 97.098252][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.110682][ T9] usb 2-1: config 0 descriptor?? [ 97.134972][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 97.142966][ T5903] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.162816][ T5903] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.172486][ T5903] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.182897][ T5903] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 97.192529][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.216044][ T5903] hub 5-1:1.0: bad descriptor, ignoring hub [ 97.221970][ T5903] hub 5-1:1.0: probe with driver hub failed with error -5 [ 97.245463][ T5903] cdc_wdm 5-1:1.0: skipping garbage [ 97.250753][ T5903] cdc_wdm 5-1:1.0: skipping garbage [ 97.257592][ T5903] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 97.275973][ T9] usb 1-1: USB disconnect, device number 5 [ 97.331123][ T6218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.353359][ T6218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.365615][ T5936] usb 2-1: USB disconnect, device number 4 [ 97.526547][ T9] usb 5-1: USB disconnect, device number 7 [ 97.814852][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 97.985229][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 97.996173][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 98.004367][ T9] usb 2-1: config 0 has no interface number 0 [ 98.068156][ T9] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.086973][ T6240] binder: 6239:6240 ioctl c0306201 80000080 returned -14 [ 98.103350][ T9] usb 2-1: config 0 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 98.123010][ T6242] netlink: 'syz.0.94': attribute type 21 has an invalid length. [ 98.132279][ T6242] netlink: 'syz.0.94': attribute type 4 has an invalid length. [ 98.136795][ T9] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 98.324832][ T9] usb 2-1: config 0 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 98.360260][ T9] usb 2-1: config 0 interface 1 has no altsetting 0 [ 98.378934][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 98.405141][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.457004][ T9] usb 2-1: config 0 descriptor?? [ 98.677734][ T5923] usb 2-1: USB disconnect, device number 5 [ 98.868782][ T6252] syzkaller0: entered promiscuous mode [ 98.874591][ T6252] syzkaller0: entered allmulticast mode [ 99.014878][ T5827] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 99.070084][ T6261] netlink: 'syz.3.100': attribute type 4 has an invalid length. [ 99.123799][ T6261] netlink: 'syz.3.100': attribute type 4 has an invalid length. [ 99.252089][ T5827] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 99.271939][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.294887][ T5827] usb 1-1: Product: syz [ 99.299106][ T5827] usb 1-1: Manufacturer: syz [ 99.346598][ T5827] usb 1-1: SerialNumber: syz [ 99.377611][ T5827] hub 1-1:24.0: bad descriptor, ignoring hub [ 99.402081][ T5827] hub 1-1:24.0: probe with driver hub failed with error -5 [ 99.421974][ T5923] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 99.582982][ T5827] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 99.596859][ T5936] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 99.624336][ T5827] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.626385][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 99.647159][ T5827] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 99.661737][ T5923] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 99.671269][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.687710][ T5827] usb 1-1: media controller created [ 99.719082][ T5923] pvrusb2: Hardware description: Terratec Grabster AV400 [ 99.720922][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.728048][ T5923] pvrusb2: ********** [ 99.746969][ T24] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 99.773086][ T5923] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 99.783630][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.803093][ T5923] pvrusb2: Important functionality might not be entirely working. [ 99.811419][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.822512][ T5923] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 99.834452][ T5936] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 99.847024][ T5923] pvrusb2: ********** [ 99.853029][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.891985][ T5936] usb 5-1: config 0 descriptor?? [ 99.932368][ T2344] pvrusb2: Invalid write control endpoint [ 99.960391][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 99.973917][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 100.005091][ T5827] DVB: Unable to find symbol dib7000p_attach() [ 100.011293][ T5827] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 100.019873][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 100.031499][ T24] usb 2-1: config 129 has an invalid interface number: 135 but max is 1 [ 100.044246][ T24] usb 2-1: config 129 has no interface number 1 [ 100.057644][ T24] usb 2-1: config 129 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 100.102441][ T24] usb 2-1: config 129 interface 135 has no altsetting 0 [ 100.113821][ T2344] pvrusb2: Invalid write control endpoint [ 100.136102][ T24] usb 2-1: config 129 interface 0 has no altsetting 0 [ 100.143126][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 100.160367][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 100.170255][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 100.181243][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 100.191767][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.194970][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 100.204806][ T24] usb 2-1: Product: syz [ 100.210166][ T2344] pvrusb2: Device being rendered inoperable [ 100.216256][ T5827] rc_core: IR keymap rc-dib0700-rc5 not found [ 100.222585][ T5827] Registered IR keymap rc-empty [ 100.227624][ T24] usb 2-1: Manufacturer: syz [ 100.233520][ T5827] dvb-usb: could not initialize remote control. [ 100.245492][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 100.253451][ T24] usb 2-1: SerialNumber: syz [ 100.255693][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 100.266146][ T5827] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 100.285440][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 100.294802][ T5827] usb 1-1: USB disconnect, device number 6 [ 100.406437][ T5936] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 100.408829][ T2344] pvrusb2: Attached sub-driver cx25840 [ 100.456147][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 100.469845][ T9] usb 3-1: config 0 has no interface number 0 [ 100.479817][ T5936] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 100.491321][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 100.502001][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 100.532400][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 100.539288][ T24] au0828: au0828: Device initialization failed. [ 100.557754][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.560046][ T5827] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 100.587365][ T9] usb 3-1: Product: syz [ 100.588884][ T24] au0828: au0828: Device must be connected to a high-speed USB 2.0 port. [ 100.592582][ T5936] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE [ 100.630333][ T9] usb 3-1: Manufacturer: syz [ 100.640244][ T9] usb 3-1: SerialNumber: syz [ 100.643417][ T24] usb 2-1: USB disconnect, device number 6 [ 100.670328][ T9] usb 3-1: config 0 descriptor?? [ 100.980913][ T9] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 101.018244][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 101.032776][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 101.044541][ T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 101.076799][ T9] usb 3-1: USB disconnect, device number 5 [ 101.142788][ T6284] wg2: entered allmulticast mode [ 101.207399][ T5936] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71 [ 101.230887][ T5936] usb 5-1: USB disconnect, device number 8 [ 101.971178][ T5936] usb 4-1: USB disconnect, device number 5 [ 102.386863][ T6322] FAULT_INJECTION: forcing a failure. [ 102.386863][ T6322] name failslab, interval 1, probability 0, space 0, times 0 [ 102.399808][ T6322] CPU: 1 UID: 0 PID: 6322 Comm: syz.2.120 Not tainted syzkaller #0 PREEMPT(full) [ 102.399832][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.399850][ T6322] Call Trace: [ 102.399859][ T6322] [ 102.399866][ T6322] dump_stack_lvl+0x189/0x250 [ 102.399899][ T6322] ? __pfx____ratelimit+0x10/0x10 [ 102.399922][ T6322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.399941][ T6322] ? __pfx__printk+0x10/0x10 [ 102.399970][ T6322] ? __pfx___might_resched+0x10/0x10 [ 102.399987][ T6322] ? fs_reclaim_acquire+0x7d/0x100 [ 102.400011][ T6322] should_fail_ex+0x414/0x560 [ 102.400039][ T6322] should_failslab+0xa8/0x100 [ 102.400061][ T6322] __kmalloc_noprof+0xdf/0x800 [ 102.400078][ T6322] ? alloc_pipe_info+0x1fd/0x4d0 [ 102.400101][ T6322] alloc_pipe_info+0x1fd/0x4d0 [ 102.400122][ T6322] splice_direct_to_actor+0xa5d/0xcc0 [ 102.400156][ T6322] ? rcu_read_lock_any_held+0xb3/0x120 [ 102.400178][ T6322] ? __pfx_aa_file_perm+0x10/0x10 [ 102.400200][ T6322] ? __pfx_direct_splice_actor+0x10/0x10 [ 102.400220][ T6322] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 102.400251][ T6322] do_splice_direct+0x181/0x270 [ 102.400275][ T6322] ? __pfx_do_splice_direct+0x10/0x10 [ 102.400294][ T6322] ? common_file_perm+0x1b5/0x220 [ 102.400319][ T6322] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 102.400344][ T6322] ? bpf_lsm_file_permission+0x9/0x20 [ 102.400362][ T6322] ? security_file_permission+0x75/0x290 [ 102.400386][ T6322] ? rw_verify_area+0x255/0x4d0 [ 102.400406][ T6322] do_sendfile+0x4da/0x7e0 [ 102.400436][ T6322] ? __pfx_do_sendfile+0x10/0x10 [ 102.400456][ T6322] ? __pfx_ksys_write+0x10/0x10 [ 102.400476][ T6322] ? __ia32_compat_sys_sendfile+0x180/0x1d0 [ 102.400495][ T6322] ? __do_fast_syscall_32+0xbe/0x570 [ 102.400516][ T6322] __do_fast_syscall_32+0x1f7/0x570 [ 102.400533][ T6322] ? rcu_is_watching+0x15/0xb0 [ 102.400552][ T6322] ? do_fast_syscall_32+0x34/0x80 [ 102.400572][ T6322] do_fast_syscall_32+0x34/0x80 [ 102.400588][ T6322] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.400608][ T6322] RIP: 0023:0xf6ffd539 [ 102.400631][ T6322] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 102.400646][ T6322] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 102.400665][ T6322] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 102.400676][ T6322] RDX: 0000000000000000 RSI: 000000007ffff000 RDI: 0000000000000000 [ 102.400686][ T6322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.400696][ T6322] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 102.400706][ T6322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.400733][ T6322] [ 102.666278][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.694904][ T5936] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 102.720228][ T5923] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 102.959307][ T5923] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 102.974718][ T5936] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 102.994915][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.003050][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.012171][ T5923] usb 2-1: Product: syz [ 103.018901][ T5936] usb 1-1: Product: syz [ 103.023229][ T5923] usb 2-1: Manufacturer: syz [ 103.027928][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 103.033653][ T5936] usb 1-1: Manufacturer: syz [ 103.047571][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.059138][ T5923] usb 2-1: SerialNumber: syz [ 103.064993][ T5936] usb 1-1: SerialNumber: syz [ 103.274894][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.303624][ T5923] hub 2-1:24.0: bad descriptor, ignoring hub [ 103.316610][ T5936] hub 1-1:24.0: bad descriptor, ignoring hub [ 103.324892][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 103.334035][ T5923] hub 2-1:24.0: probe with driver hub failed with error -5 [ 103.341332][ T5936] hub 1-1:24.0: probe with driver hub failed with error -5 [ 103.351431][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.373741][ T9] usb 4-1: config 0 descriptor?? [ 103.509816][ T5923] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 103.552931][ T5936] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 103.593445][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.603764][ T5936] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.615796][ T5936] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 103.626620][ T5923] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 103.637947][ T5936] usb 1-1: media controller created [ 103.648155][ T5923] usb 2-1: media controller created [ 103.668786][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.710107][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.809941][ T9] corsair 0003:1B1C:1B3E.0007: unknown main item tag 0x5 [ 103.826725][ T9] corsair 0003:1B1C:1B3E.0007: failed to start in urb: -90 [ 103.857451][ T9] corsair 0003:1B1C:1B3E.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.3-1/input0 [ 103.874235][ T5936] DVB: Unable to find symbol dib7000p_attach() [ 103.890308][ T5936] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 103.964002][ T5923] DVB: Unable to find symbol dib7000p_attach() [ 103.982566][ T5923] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 104.022896][ T9] usb 4-1: USB disconnect, device number 6 [ 104.074846][ T5923] rc_core: IR keymap rc-dib0700-rc5 not found [ 104.081163][ T5923] Registered IR keymap rc-empty [ 104.094048][ T5923] dvb-usb: could not initialize remote control. [ 104.115520][ T5923] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 104.131821][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'. [ 104.225326][ T5936] rc_core: IR keymap rc-dib0700-rc5 not found [ 104.231442][ T5936] Registered IR keymap rc-empty [ 104.239980][ T5936] dvb-usb: could not initialize remote control. [ 104.251486][ T5936] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 104.294663][ T5936] usb 1-1: USB disconnect, device number 7 [ 104.431445][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.126'. [ 104.431655][ T5936] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 104.544889][ T5827] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 104.670167][ T24] usb 2-1: USB disconnect, device number 7 [ 104.705156][ T5827] usb 3-1: Using ep0 maxpacket: 32 [ 104.721793][ T5827] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 104.749370][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 104.761077][ T5827] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 104.773570][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 104.784316][ T5827] usb 3-1: Product: syz [ 104.793509][ T5827] usb 3-1: Manufacturer: syz [ 104.804845][ T5827] usb 3-1: SerialNumber: syz [ 104.823612][ T5827] usb 3-1: config 0 descriptor?? [ 104.829761][ T6346] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 104.974872][ T5923] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 105.045812][ T6346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.056551][ T6346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.064838][ T5936] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 105.151018][ T5923] usb 4-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 105.160586][ T5923] usb 4-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 105.168669][ T5923] usb 4-1: Product: syz [ 105.173171][ T5923] usb 4-1: Manufacturer: syz [ 105.177921][ T5923] usb 4-1: SerialNumber: syz [ 105.252108][ T5923] usb 4-1: config 0 descriptor?? [ 105.258672][ T5936] usb 1-1: Using ep0 maxpacket: 32 [ 105.263198][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.278080][ T5936] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 105.299145][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.316210][ T5936] usb 1-1: can't read configurations, error -61 [ 105.362656][ T6363] mmap: syz.2.125 (6363) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.427595][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.440705][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.464979][ T5936] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 105.650047][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 105.650063][ T30] audit: type=1326 audit(1765486581.765:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6349 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 105.654845][ T5936] usb 1-1: Using ep0 maxpacket: 32 [ 105.666746][ T30] audit: type=1326 audit(1765486581.765:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6349 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 105.709173][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 105.723058][ T30] audit: type=1326 audit(1765486581.805:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6349 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 105.754980][ T5936] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 105.763031][ T5936] usb 1-1: can't read configurations, error -61 [ 105.799664][ T5936] usb usb1-port1: attempt power cycle [ 105.864965][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 105.874845][ T30] audit: type=1326 audit(1765486581.975:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6349 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 105.927914][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.953443][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.964201][ T30] audit: type=1326 audit(1765486581.975:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6349 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 105.999765][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 106.031808][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.080342][ T24] usb 2-1: config 0 descriptor?? [ 106.165427][ T5936] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 106.195459][ T5936] usb 1-1: Using ep0 maxpacket: 32 [ 106.203062][ T5936] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 106.211730][ T5936] usb 1-1: can't read configurations, error -61 [ 106.345320][ T5936] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 106.374890][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 106.383809][ T5936] usb 1-1: Using ep0 maxpacket: 32 [ 106.393047][ T5936] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 106.401901][ T5936] usb 1-1: can't read configurations, error -61 [ 106.410610][ T5936] usb usb1-port1: unable to enumerate USB device [ 106.525007][ T24] ft260 0003:0403:6030.0008: unknown main item tag 0x7 [ 106.546813][ T9] usb 5-1: config 0 has an invalid interface number: 224 but max is 0 [ 106.555360][ T9] usb 5-1: config 0 has no interface number 0 [ 106.567568][ T9] usb 5-1: New USB device found, idVendor=049f, idProduct=ffff, bcdDevice=41.67 [ 106.578123][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.586186][ T9] usb 5-1: Product: syz [ 106.590544][ T9] usb 5-1: Manufacturer: syz [ 106.595461][ T9] usb 5-1: SerialNumber: syz [ 106.607063][ T9] usb 5-1: config 0 descriptor?? [ 106.616249][ T9] safe_serial 5-1:0.224: safe_serial converter detected [ 106.623654][ T9] safe_serial 5-1:0.224: probe with driver safe_serial failed with error -22 [ 106.733344][ T24] ft260 0003:0403:6030.0008: chip code: 6424 8183 [ 106.825537][ T5903] usb 5-1: USB disconnect, device number 9 [ 106.935048][ T24] ft260 0003:0403:6030.0008: failed to retrieve system status [ 106.943329][ T24] ft260 0003:0403:6030.0008: probe with driver ft260 failed with error -32 [ 107.264307][ T24] usb 3-1: USB disconnect, device number 6 [ 107.322783][ T6373] netlink: 'syz.2.133': attribute type 10 has an invalid length. [ 107.331059][ T6373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.133'. [ 107.353023][ T6373] team0: Port device geneve0 added [ 107.384111][ T6373] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 107.400367][ T6373] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 107.678027][ T5923] usb 4-1: USB disconnect, device number 7 [ 107.754471][ T6382] loop6: detected capacity change from 0 to 524287999 [ 107.802654][ T6383] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 20 prio class 2 [ 107.815374][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 107.823284][ T6383] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 20 prio class 2 [ 107.833668][ T6383] I/O error, dev loop6, sector 2560 op 0x1:(WRITE) flags 0xc800 phys_seg 21 prio class 2 [ 107.850008][ T6383] I/O error, dev loop6, sector 2560 op 0x1:(WRITE) flags 0xc800 phys_seg 21 prio class 2 [ 107.891660][ T6383] I/O error, dev loop6, sector 5120 op 0x1:(WRITE) flags 0xc800 phys_seg 20 prio class 2 [ 107.997778][ T6383] I/O error, dev loop6, sector 5120 op 0x1:(WRITE) flags 0xc800 phys_seg 20 prio class 2 [ 108.008449][ T6383] I/O error, dev loop6, sector 7680 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 108.020573][ T6383] I/O error, dev loop6, sector 7680 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 108.032453][ T6383] I/O error, dev loop6, sector 9170 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 108.045051][ T6383] I/O error, dev loop6, sector 9170 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 108.059298][ T9] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 108.069148][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.080383][ T9] usb 3-1: Product: syz [ 108.165432][ T9] usb 3-1: Manufacturer: syz [ 108.172632][ T9] usb 3-1: SerialNumber: syz [ 108.220346][ T9] hub 3-1:24.0: bad descriptor, ignoring hub [ 108.230938][ T9] hub 3-1:24.0: probe with driver hub failed with error -5 [ 108.305053][ T5923] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 108.465785][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 108.494500][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.505644][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 108.516195][ T5938] usb 2-1: USB disconnect, device number 8 [ 108.525993][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.537517][ T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 108.551968][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.561957][ T9] usb 3-1: media controller created [ 108.595332][ T5923] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 108.614956][ T5827] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 108.634195][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.649895][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.671782][ T5923] usb 4-1: config 0 descriptor?? [ 108.714294][ T6396] netlink: 'syz.1.141': attribute type 4 has an invalid length. [ 108.764476][ T6396] netlink: 'syz.1.141': attribute type 4 has an invalid length. [ 108.795402][ T5827] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 108.804498][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.814694][ T6396] bridge0: entered promiscuous mode [ 108.820636][ T6396] macvlan2: entered promiscuous mode [ 108.851555][ T9] DVB: Unable to find symbol dib7000p_attach() [ 108.856592][ T5827] usb 1-1: Product: syz [ 108.862404][ T5827] usb 1-1: Manufacturer: syz [ 108.862421][ T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 108.875826][ T5827] usb 1-1: SerialNumber: syz [ 108.893349][ T6397] veth0_to_bridge: entered promiscuous mode [ 108.901827][ T5827] hub 1-1:24.0: bad descriptor, ignoring hub [ 108.928849][ T5827] hub 1-1:24.0: probe with driver hub failed with error -5 [ 108.937964][ T6394] veth0_to_bridge: left promiscuous mode [ 109.034860][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 109.051757][ T9] Registered IR keymap rc-empty [ 109.061098][ T9] dvb-usb: could not initialize remote control. [ 109.068707][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 109.092974][ T5923] corsair 0003:1B1C:1B3E.0009: unknown main item tag 0x5 [ 109.110926][ T5827] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 109.118104][ T5923] corsair 0003:1B1C:1B3E.0009: failed to start in urb: -90 [ 109.135200][ T9] usb 3-1: USB disconnect, device number 7 [ 109.135428][ T5827] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 109.159308][ T6403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.143'. [ 109.189230][ T5923] corsair 0003:1B1C:1B3E.0009: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.3-1/input0 [ 109.208519][ T5827] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 109.233696][ T5827] usb 1-1: media controller created [ 109.258196][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 109.291259][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.296851][ T5938] usb 4-1: USB disconnect, device number 8 [ 109.354239][ T6406] fido_id[6406]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 109.452195][ T5827] DVB: Unable to find symbol dib7000p_attach() [ 109.459355][ T5827] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 109.514858][ T5827] rc_core: IR keymap rc-dib0700-rc5 not found [ 109.521005][ T5827] Registered IR keymap rc-empty [ 109.531723][ T5827] dvb-usb: could not initialize remote control. [ 109.538150][ T5827] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 109.717400][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 109.879805][ T9] usb 3-1: config 0 has an invalid interface number: 224 but max is 0 [ 109.894539][ T9] usb 3-1: config 0 has no interface number 0 [ 109.900914][ T6418] geneve0: entered promiscuous mode [ 109.912042][ T9] usb 3-1: New USB device found, idVendor=049f, idProduct=ffff, bcdDevice=41.67 [ 109.924575][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.933631][ T9] usb 3-1: Product: syz [ 109.940611][ T9] usb 3-1: Manufacturer: syz [ 109.946120][ T9] usb 3-1: SerialNumber: syz [ 109.955408][ T9] usb 3-1: config 0 descriptor?? [ 109.976367][ T9] safe_serial 3-1:0.224: safe_serial converter detected [ 110.014029][ T9] safe_serial 3-1:0.224: probe with driver safe_serial failed with error -22 [ 110.179628][ T5923] usb 3-1: USB disconnect, device number 8 [ 111.459368][ T5827] usb 1-1: USB disconnect, device number 12 [ 111.518088][ T5827] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 111.915202][ T5923] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 112.169949][ T5923] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 112.207728][ T5923] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 112.229526][ T5923] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 112.238581][ T5923] usb 3-1: Manufacturer: syz [ 112.255995][ T5923] usb 3-1: config 0 descriptor?? [ 112.375621][ T5923] rc_core: IR keymap rc-hauppauge not found [ 112.381542][ T5923] Registered IR keymap rc-empty [ 112.410490][ T5923] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 112.455027][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 112.493381][ T5923] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 112.651313][ T9] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 112.660842][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.670967][ T9] usb 1-1: Product: syz [ 112.696936][ T9] usb 1-1: Manufacturer: syz [ 112.715666][ T5827] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 112.717292][ T9] usb 1-1: SerialNumber: syz [ 112.807251][ T9] hub 1-1:24.0: bad descriptor, ignoring hub [ 112.818154][ T5883] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 112.826288][ T9] hub 1-1:24.0: probe with driver hub failed with error -5 [ 112.910430][ T5827] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.920891][ T5827] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 112.948408][ T5827] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 112.961317][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.974949][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 112.983259][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.997983][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.014241][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 113.015490][ T5827] usb 5-1: config 0 descriptor?? [ 113.028721][ T5883] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 113.038942][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.052174][ T5827] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 113.060230][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 113.070548][ T5883] usb 2-1: config 0 descriptor?? [ 113.079524][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.084549][ T5827] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 113.117878][ T5827] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 113.127500][ T5827] usb 5-1: media controller created [ 113.133732][ T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 113.154432][ T9] usb 1-1: media controller created [ 113.169014][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.254030][ T6456] ------------[ cut here ]------------ [ 113.259834][ T6456] usb 1-1: BOGUS control dir, pipe 80000d80 doesn't match bRequestType c0 [ 113.268555][ T6456] WARNING: drivers/usb/core/urb.c:414 at 0x0, CPU#0: syz.4.153/6456 [ 113.276624][ T6456] Modules linked in: [ 113.280763][ T6456] CPU: 0 UID: 0 PID: 6456 Comm: syz.4.153 Not tainted syzkaller #0 PREEMPT(full) [ 113.289550][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 113.290033][ T6456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.296833][ T5827] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 113.306038][ T6456] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 113.306075][ T6456] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 113.340672][ T6456] RSP: 0018:ffffc90003547660 EFLAGS: 00010246 [ 113.346978][ T6456] RAX: 0000000000000000 RBX: ffff888022348000 RCX: 0000000080000d80 [ 113.355076][ T6456] RDX: ffff8881426c54a0 RSI: ffffffff8c13ff40 RDI: ffffffff8f8eb720 [ 113.363093][ T6456] RBP: 1ffff1100a969c44 R08: 00000000000000c0 R09: 0000000000000000 [ 113.371217][ T6456] R10: ffffc90003547760 R11: fffff520006a8ef8 R12: ffff888079dc7100 [ 113.379259][ T6456] R13: ffff888054b4e220 R14: 0000000080000d80 R15: ffff8881426c54a0 [ 113.387313][ T6456] FS: 0000000000000000(0000) GS:ffff888125e3a000(0063) knlGS:00000000f5436b40 [ 113.396567][ T6456] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 113.403311][ T6456] CR2: 000000008011a018 CR3: 000000003256e000 CR4: 00000000003526f0 [ 113.411364][ T6456] Call Trace: [ 113.414679][ T6456] [ 113.418616][ T6456] ? __init_swait_queue_head+0xa9/0x150 [ 113.424635][ T6456] usb_start_wait_urb+0x115/0x4f0 [ 113.430531][ T6456] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 113.436186][ T6456] usb_control_msg+0x232/0x3e0 [ 113.441012][ T6456] dib0700_i2c_xfer+0xba7/0xf70 [ 113.446005][ T6456] __i2c_transfer+0x871/0x2110 [ 113.450825][ T6456] ? lockdep_hardirqs_on+0x98/0x140 [ 113.456117][ T6456] ? __pfx___i2c_transfer+0x10/0x10 [ 113.461363][ T6456] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 113.466798][ T6456] ? i2c_transfer+0x120/0x3a0 [ 113.471523][ T6456] i2c_transfer+0x25b/0x3a0 [ 113.476107][ T6456] ? __pfx_i2c_transfer+0x10/0x10 [ 113.481179][ T6456] ? _copy_from_user+0x94/0xb0 [ 113.486007][ T6456] i2cdev_ioctl_rdwr+0x460/0x740 [ 113.490987][ T6456] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 113.496176][ T6456] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 113.501854][ T6456] ? __fget_files+0x3a0/0x420 [ 113.506616][ T6456] ? __fget_files+0x2a/0x420 [ 113.511248][ T6456] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 113.516879][ T6456] __ia32_compat_sys_ioctl+0x543/0x840 [ 113.523312][ T6456] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 113.530129][ T6456] ? __se_sys_futex_time32+0x360/0x3e0 [ 113.535684][ T6456] ? rcu_is_watching+0x15/0xb0 [ 113.540498][ T6456] ? __do_fast_syscall_32+0xbe/0x570 [ 113.545843][ T6456] __do_fast_syscall_32+0x1f7/0x570 [ 113.551075][ T6456] ? rcu_is_watching+0x15/0xb0 [ 113.555900][ T6456] ? do_fast_syscall_32+0x34/0x80 [ 113.560960][ T6456] do_fast_syscall_32+0x34/0x80 [ 113.565886][ T6456] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.572251][ T6456] RIP: 0023:0xf7f42539 [ 113.576413][ T6456] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 113.596218][ T6456] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 113.604672][ T6456] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000707 [ 113.612796][ T6456] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.620831][ T6456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.629906][ T6456] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 113.638726][ T6456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.646800][ T6456] [ 113.649854][ T6456] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 113.657142][ T6456] CPU: 0 UID: 0 PID: 6456 Comm: syz.4.153 Not tainted syzkaller #0 PREEMPT(full) [ 113.666345][ T6456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.676419][ T6456] Call Trace: [ 113.679712][ T6456] [ 113.682651][ T6456] dump_stack_lvl+0x99/0x250 [ 113.687258][ T6456] ? __asan_memcpy+0x40/0x70 [ 113.691863][ T6456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.697083][ T6456] ? __pfx__printk+0x10/0x10 [ 113.701708][ T6456] vpanic+0x237/0x6d0 [ 113.705706][ T6456] ? __pfx_vpanic+0x10/0x10 [ 113.710222][ T6456] ? is_bpf_text_address+0x292/0x2b0 [ 113.715625][ T6456] ? is_bpf_text_address+0x26/0x2b0 [ 113.720852][ T6456] panic+0xb9/0xc0 [ 113.724595][ T6456] ? __pfx_panic+0x10/0x10 [ 113.729039][ T6456] __warn+0x317/0x4b0 [ 113.733090][ T6456] __report_bug+0x288/0x500 [ 113.737716][ T6456] ? __pfx___report_bug+0x10/0x10 [ 113.742776][ T6456] ? stack_depot_save_flags+0x422/0x850 [ 113.748352][ T6456] report_bug_entry+0x16a/0x220 [ 113.753400][ T6456] ? usb_submit_urb+0x111c/0x18d0 [ 113.758617][ T6456] ? usb_submit_urb+0x1121/0x18d0 [ 113.763742][ T6456] handle_bug+0xca/0x200 [ 113.767985][ T6456] exc_invalid_op+0x1a/0x50 [ 113.772495][ T6456] asm_exc_invalid_op+0x1a/0x20 [ 113.777355][ T6456] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 113.783002][ T6456] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 113.802702][ T6456] RSP: 0018:ffffc90003547660 EFLAGS: 00010246 [ 113.808774][ T6456] RAX: 0000000000000000 RBX: ffff888022348000 RCX: 0000000080000d80 [ 113.816746][ T6456] RDX: ffff8881426c54a0 RSI: ffffffff8c13ff40 RDI: ffffffff8f8eb720 [ 113.824711][ T6456] RBP: 1ffff1100a969c44 R08: 00000000000000c0 R09: 0000000000000000 [ 113.832677][ T6456] R10: ffffc90003547760 R11: fffff520006a8ef8 R12: ffff888079dc7100 [ 113.840650][ T6456] R13: ffff888054b4e220 R14: 0000000080000d80 R15: ffff8881426c54a0 [ 113.848659][ T6456] ? __init_swait_queue_head+0xa9/0x150 [ 113.854222][ T6456] usb_start_wait_urb+0x115/0x4f0 [ 113.859283][ T6456] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 113.864861][ T6456] usb_control_msg+0x232/0x3e0 [ 113.869631][ T6456] dib0700_i2c_xfer+0xba7/0xf70 [ 113.874493][ T6456] __i2c_transfer+0x871/0x2110 [ 113.879273][ T6456] ? lockdep_hardirqs_on+0x98/0x140 [ 113.884504][ T6456] ? __pfx___i2c_transfer+0x10/0x10 [ 113.889725][ T6456] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 113.895101][ T6456] ? i2c_transfer+0x120/0x3a0 [ 113.899783][ T6456] i2c_transfer+0x25b/0x3a0 [ 113.904297][ T6456] ? __pfx_i2c_transfer+0x10/0x10 [ 113.909348][ T6456] ? _copy_from_user+0x94/0xb0 [ 113.914131][ T6456] i2cdev_ioctl_rdwr+0x460/0x740 [ 113.919084][ T6456] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 113.924197][ T6456] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 113.929822][ T6456] ? __fget_files+0x3a0/0x420 [ 113.934503][ T6456] ? __fget_files+0x2a/0x420 [ 113.939096][ T6456] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 113.944646][ T6456] __ia32_compat_sys_ioctl+0x543/0x840 [ 113.950111][ T6456] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 113.956119][ T6456] ? __se_sys_futex_time32+0x360/0x3e0 [ 113.961610][ T6456] ? rcu_is_watching+0x15/0xb0 [ 113.966396][ T6456] ? __do_fast_syscall_32+0xbe/0x570 [ 113.971680][ T6456] __do_fast_syscall_32+0x1f7/0x570 [ 113.976870][ T6456] ? rcu_is_watching+0x15/0xb0 [ 113.981643][ T6456] ? do_fast_syscall_32+0x34/0x80 [ 113.986686][ T6456] do_fast_syscall_32+0x34/0x80 [ 113.991586][ T6456] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.997950][ T6456] RIP: 0023:0xf7f42539 [ 114.002020][ T6456] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 114.021633][ T6456] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 114.030066][ T6456] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000707 [ 114.038039][ T6456] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.046002][ T6456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.053966][ T6456] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 114.061938][ T6456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.069926][ T6456] [ 114.073272][ T6456] Kernel Offset: disabled [ 114.077583][ T6456] Rebooting in 86400 seconds..