last executing test programs: 2m18.22390544s ago: executing program 4 (id=368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x804) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf25050000000e0001006e657464657673696d0000000f000200"], 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000002c0)={@private0, 0x0}, &(0x7f0000000300)=0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002640), &(0x7f0000000000), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r7, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80001008}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x9c, r3, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12982, 0x2000a}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1}]}}}]}, 0x5c}}, 0x0) 2m18.045030399s ago: executing program 4 (id=369): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) fcntl$getown(r0, 0x9) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x700, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2m16.843988538s ago: executing program 4 (id=374): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x4, 0x9, '\x00', [@generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0xf, "e80ee304ecb784ec4655260cecea14"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x140, 0x29, 0x36, {0x5e, 0x25, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x0]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x258}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf72}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m16.351883651s ago: executing program 4 (id=378): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r5}, 0x20) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0000000000000700000000080017004e224e24050016000000000008000d00050000000c0014"], 0x4c}, 0x1, 0x0, 0x0, 0x4040016}, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000077ee000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) sendto$inet6(r7, &(0x7f0000000200)="7f895b63521b37a36ab0dae7c7cde9879160278ab56c32844fdc83709f838c4c0229532d571c741deeb5e03b0d5fdbeec6c2ff3e8c39d6432d602eed3f9b2556189b42db5b1898bb26e2756dbc225e38ef83caca3a35b33782fc197f27e46c847b7b655d0cced7f8d89102e0d0f976953be4e599a1c9bbf5b87035e5b645572bab95cc6cde327d2f67e66241e8378c2676e9b62e669e5e334c3962026ab3a6ea83a8a1e20d5908dd26ad2756dfc8ba105b327a18087b60ea68a05a24", 0xbc, 0x80, &(0x7f0000000180)={0xa, 0x4e20, 0x10001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) ioctl$LOOP_SET_FD(r8, 0x4c05, r8) dup2(r7, r0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000200)=0x3) r10 = fsopen(&(0x7f0000000000)='cramfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r10, 0x5, 0x0, 0x0, 0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(r9, 0x80047437, &(0x7f0000020780)) syz_emit_ethernet(0x20, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaace3500590a7f08050106f7e3b5aeca45e13eb25a105cb94b66915e310dee243cc97bdf575efee5edfa7a1b4a528f408655494928232429749df84c8299e8c86ebdb774d73dc143ee7f9e9ea9336af50265523a01eb2b1aa35089fce0d8daae059ae5fc9fe498c476a9307a83e266f2da717c999169a7fa545360a7c64adad2adaf2a064438abf650977d8e1bd4dfee45f7fc969fcc1fb06a2e27b8f310136768c6d6c4131ad462d9ad0f5f0c0b0a40be6a21c1f6192296f2ea4f84dd661f7933835a5005516c76238ceb14dc19f180499931135806c92993000000"], 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], 0x0) 2m15.795526711s ago: executing program 4 (id=379): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 2m15.506465993s ago: executing program 4 (id=381): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4044010) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0xf29, 0xe7, {"6dcab0e3d68f00000000459dba1dbe10"}, 0x7, 0xb, 0x4}, @ib={0x1b, 0x7ac, 0x0, {"b2000000000000d24d93cfe66ee5a001"}, 0x200, 0x0, 0x400000000}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0xc0000, 0x0) ppoll(&(0x7f0000010140)=[{r3, 0x2046}], 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mlock(&(0x7f00008bf000/0x1000)=nil, 0x1000) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) r6 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) semtimedop(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfe67) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) 2m14.351882846s ago: executing program 32 (id=381): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4044010) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0xf29, 0xe7, {"6dcab0e3d68f00000000459dba1dbe10"}, 0x7, 0xb, 0x4}, @ib={0x1b, 0x7ac, 0x0, {"b2000000000000d24d93cfe66ee5a001"}, 0x200, 0x0, 0x400000000}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0xc0000, 0x0) ppoll(&(0x7f0000010140)=[{r3, 0x2046}], 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mlock(&(0x7f00008bf000/0x1000)=nil, 0x1000) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) r6 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) semtimedop(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfe67) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) 11.320668452s ago: executing program 2 (id=876): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc29c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xa0}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000840)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="200da0000000a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfc, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x43f4, 0x5c18, 0x6, 0x0, 0x0) 9.156523028s ago: executing program 2 (id=885): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r2, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) mq_notify(r2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) read(r1, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x9, 0x12) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@ipv6_deladdr={0xb4, 0x15, 0x400, 0x70bd2d, 0x25dfdbfc, {0xa, 0x1, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x20}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFA_CACHEINFO={0x14, 0x6, {0xb, 0x0, 0x80000000}}, @IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0xb4}, 0x1, 0xba01}, 0x8800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01024e47aeec002dbd7000fbdbdf2503010000004e2400000500020002000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40018) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x40) 8.779963077s ago: executing program 0 (id=887): syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x495, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, 0x0, 0x0) r3 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth1_to_batadv\x00'}) bind$packet(r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x6700000000000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) semget$private(0x0, 0x2, 0x6a3) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x0, 0x20044090}, 0x20046024) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0x40c989, 0x0, 0xffffffdf, 0x175}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 8.602885649s ago: executing program 2 (id=889): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) memfd_secret(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'ip6tnl0\x00', @random="0200ac7f7f00"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, 0x0, 0x4048043) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x80) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3f6c, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x10, 0xfff1}, {0xd}, {0x7, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3f3c, 0x2, [@TCA_CGROUP_POLICE={0xc4c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x9, 0x5, 0x9, 0x3, 0x7, 0x8, 0x9, 0xff, 0x40, 0x8, 0xe, 0x7, 0x10000, 0x24, 0x0, 0x40, 0x7, 0x8, 0x81, 0x80000000, 0x9, 0x7ff, 0xf, 0x3555, 0x4, 0xfffffffb, 0x3, 0xfff, 0x1000, 0x3, 0x8, 0x61, 0xd, 0x4, 0x3, 0x1, 0x8, 0x7, 0x80000000, 0x8, 0x8, 0x3, 0x3, 0x0, 0x1, 0x9, 0x9, 0xfffffff7, 0x8, 0x0, 0x7f, 0xfffffffe, 0x0, 0x4, 0x5, 0x4, 0xb78, 0xffff0001, 0x1, 0x5, 0x3, 0x440c, 0x89c, 0x3, 0x4, 0xfb7e, 0xffff, 0x80000001, 0xe3, 0x6, 0x7, 0x1, 0x0, 0x9, 0x22aa7b85, 0x80000001, 0x8, 0x6, 0x1ff, 0x55, 0x64fc59d3, 0x8, 0x7, 0x54000000, 0x2, 0xb9d7, 0x0, 0x81, 0x6, 0x0, 0x7, 0xa, 0x4, 0x1, 0x3, 0x1, 0x94, 0x10000, 0x0, 0x8b70, 0x4, 0x5, 0xd7a1, 0xfffffffa, 0x6, 0x9fc, 0x1, 0x96, 0x0, 0xfffffffe, 0x5, 0x8, 0x5, 0x3, 0x1, 0x1, 0x40, 0x1c6e, 0x3, 0x3, 0x8, 0x8, 0x8, 0x1, 0xc, 0x5, 0x0, 0xd4b, 0x800, 0x5, 0x3, 0x0, 0x6, 0x83a6, 0x9, 0x4, 0x7, 0x9, 0x7, 0x1ff, 0xfffff800, 0x0, 0x3fa1, 0x8, 0x8, 0x10001, 0x8, 0xfffffffd, 0x14, 0x80000001, 0x5, 0x9, 0x80000000, 0x8000, 0x7fffffff, 0x0, 0x1, 0x3, 0xffff, 0x5a, 0x4, 0x8, 0xfffffffd, 0x5, 0x7, 0x1, 0x3, 0x6, 0x7ff, 0x401, 0x7, 0x6, 0xfaf, 0x3, 0xf, 0x7, 0x5, 0x4, 0x8c, 0x5, 0x10000, 0x4, 0xb6c, 0x80000001, 0x3, 0x8, 0x800, 0x8, 0x81, 0x5, 0x5, 0x4, 0x0, 0x1, 0x9, 0x427, 0x3, 0x6, 0x4, 0x9, 0x40, 0xd, 0x3, 0x400, 0x7f, 0x40, 0x8001, 0x8, 0x7, 0x1ff, 0x7fff, 0x84, 0x90e, 0x0, 0x4, 0x2, 0x7fff, 0x3, 0x3, 0x4, 0x4, 0x100, 0x8bd7, 0x5e23, 0x6, 0x2, 0x0, 0xfffffffd, 0x3, 0xbc, 0xf9d, 0x3, 0x7, 0x5, 0xfffffffa, 0x7fffffff, 0x40, 0x6, 0x5, 0x1, 0x0, 0xc8, 0x1000, 0x2, 0x1, 0x4, 0x9, 0xfd, 0x4, 0xd949, 0xb, 0x7, 0x1000, 0x750, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xa, 0x496, 0x4, 0xd9, 0x4, 0x2, 0x1ff, 0xfffffbb0, 0x1, 0x7, 0x23d0f55d, 0x1ff, 0x5, 0x10000, 0x8, 0x7, 0x6, 0x2, 0x7, 0x2, 0x4, 0x7, 0xe, 0x9, 0x5, 0x8, 0x1, 0x3b, 0xfffffffc, 0x200, 0x8, 0x0, 0x9, 0x8, 0xb, 0x1, 0x6, 0xff, 0x1, 0x64, 0xff, 0x80, 0x3, 0x5a, 0xc, 0x2, 0x10, 0x2, 0x7fffffff, 0x10001, 0x2, 0x7ff, 0x4, 0x7, 0xfff, 0x1000, 0x4, 0x9, 0x2, 0x0, 0x8000, 0x2, 0xb56, 0x4, 0x3, 0x5, 0x2, 0x2, 0x200, 0x8, 0x6, 0x4, 0x6, 0xffff, 0xd89a, 0xce31, 0xfffffff9, 0x9, 0x4, 0x8, 0x7, 0x4, 0xfffff801, 0x2, 0x2, 0xffffffff, 0x1, 0x9, 0x5, 0x81, 0xb88, 0x7, 0x80000000, 0x10000, 0x86a, 0x3, 0x200, 0xdbb8, 0x86, 0x10, 0x3, 0xfffffff8, 0x415c, 0xe, 0x1, 0xc9d, 0x6, 0x7, 0x3, 0x52, 0x3, 0x67, 0x1, 0x5, 0x6, 0x3, 0x8, 0x3c, 0x3ff, 0x40, 0x1000, 0x5, 0x1, 0xffffffff, 0x0, 0x3, 0x8, 0x1, 0x10, 0xf66, 0x200, 0xf1, 0xf399, 0x1, 0x4, 0x4, 0x9, 0x2, 0x7, 0x1ff, 0x8, 0x268d, 0x1, 0x2, 0x4, 0x0, 0xfff, 0x3, 0x8, 0x5, 0x2717, 0x9, 0x9000000, 0x1987, 0x7, 0xf, 0x1, 0x10, 0x3, 0x8, 0x1, 0xbac8, 0x8, 0xb, 0x3, 0xffffffff, 0x8000, 0x2, 0x5, 0x2, 0x4, 0x4, 0xb8a, 0x1, 0x1, 0x0, 0x5, 0x1, 0x0, 0x1, 0x428, 0x8, 0x3f, 0x101, 0x3, 0x1fccdd3d, 0x9, 0x1, 0x1, 0x10001, 0x39, 0x46b, 0x8, 0xb3c, 0x5, 0x9, 0x5, 0x3, 0x3, 0x7, 0x10, 0x0, 0x101, 0x8, 0xfffffc01, 0x25, 0x80000001, 0xff, 0x0, 0x9, 0x51, 0x0, 0x7, 0x3ff, 0xfffeffff, 0x2f0, 0x7f, 0x4, 0x100, 0x3, 0x87c, 0x8, 0x4, 0xb89f, 0xd, 0x2, 0x9, 0x1, 0x9, 0x4, 0x1, 0x1f4, 0x800, 0x7, 0x7fffffff, 0x8, 0x3, 0x101, 0x80, 0x7fffffff, 0x6, 0x5, 0xb6d, 0x5, 0xffffffff, 0x7f, 0xab, 0xe9, 0x401, 0x2, 0xc9, 0x2, 0x5, 0x7fffffff, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x5, 0x17f, 0x2, 0x5, {0xf, 0x1, 0x1, 0x6, 0x8, 0x8}, {0xff, 0x0, 0x0, 0x4, 0x8c, 0x9}, 0xbe, 0x5, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x0, 0xf9e, 0xffffffff, 0x8, 0x3, 0x8, 0x3f3c, 0xfffffffd, 0xffffaa05, 0xc851, 0x727f, 0x7ff, 0x7, 0x0, 0x2, 0x4, 0x3, 0x6, 0x8, 0x8, 0x4, 0x4, 0x1, 0x480000, 0x8001, 0xffffffff, 0x9, 0xd3fd, 0x800, 0x7fffffff, 0xfff, 0x80000000, 0x9, 0x5, 0x2205, 0xfffffff2, 0x8000, 0x5, 0x5, 0x3ff, 0x5, 0x4, 0x0, 0x4, 0x7, 0x7fffffff, 0xfffffc15, 0x15, 0xf89e, 0x6, 0x4, 0x4, 0x33f5, 0xf, 0xd44, 0x0, 0x48, 0x1, 0x80000001, 0xd1, 0xc98d, 0x400, 0x8, 0x31, 0x6, 0x8, 0x577d, 0xd0, 0x10001, 0x4, 0x40, 0x1, 0x7, 0x6, 0x0, 0x6, 0xffffffff, 0x650b, 0x8, 0x7fff, 0xff, 0xf, 0xfffffffa, 0x7ff, 0x8, 0x6, 0x16, 0xa94, 0x3, 0x1, 0x7, 0x97c, 0x8, 0x4, 0x7ff, 0x2, 0x52633d02, 0x4, 0x1, 0x6, 0x40, 0x3, 0x8000, 0x3, 0x7, 0x5, 0xfffffeff, 0x80000000, 0x5, 0x1, 0x0, 0x6, 0x2f3, 0x62, 0x8, 0x1ff, 0x2, 0x0, 0x6b9, 0x8000, 0x7fff, 0x5, 0x10, 0xffff, 0x3, 0x9, 0x2, 0x3, 0x0, 0x1000, 0x8, 0x80000000, 0x5, 0x10000, 0x30000, 0x5, 0x9, 0x1, 0x10000, 0x9, 0x5, 0x8, 0xb4, 0x3, 0x7fffffff, 0x5, 0xa27, 0x7, 0x2, 0x2, 0x80000001, 0x8, 0xe, 0x4, 0x75, 0x0, 0x9, 0x4, 0x7fff, 0x40, 0xc, 0x3, 0x0, 0x101, 0x9, 0x1, 0x4, 0x8, 0x5, 0x4, 0x7, 0x1, 0x3, 0xc, 0x5, 0x7, 0x10, 0xfffffff7, 0x340, 0x40, 0x6, 0xf, 0x5, 0x0, 0x3, 0x3, 0x3, 0x9, 0x7, 0x9, 0x8, 0x57, 0x7ff, 0x10000, 0x44ff, 0x3, 0x1, 0x2, 0x5, 0x703, 0x200, 0x0, 0x6, 0x5, 0x8, 0x5, 0x8, 0x9, 0x401, 0x3, 0xfffffffb, 0x6, 0x1, 0x80, 0x5779, 0x5, 0x1368, 0xe2f, 0x3, 0xb, 0x0, 0x3e, 0x9, 0x3, 0x2, 0x3, 0x9, 0x8ef, 0x700000, 0x9, 0xffffffff, 0xfffffffb, 0x6, 0x80000000, 0xa10, 0x8, 0x5, 0x200, 0x101, 0x6, 0x2, 0x7, 0xe5, 0x800, 0x101, 0x4, 0x0, 0x1, 0x9, 0x755176cb, 0x4, 0x5, 0x6, 0x4, 0x3]}]}, @TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_EMATCHES={0x2d4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xffff, 0x3, 0x6}, {0x4, 0x4, 0xa, 0x3}}}, @TCF_EM_META={0x48, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x28, 0x3, [@TCF_META_TYPE_VAR="02db77feed14a1ad", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="08d2e83e2667eaa73e", @TCF_META_TYPE_VAR="24748f6e3ffe44", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR="03fc7a72"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xa, 0x7, 0x2}, {0x4215, 0x3}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x194, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3e3, 0x7, 0x1}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0x8, 0x9, 0xf}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0xffb7}, {0x1, 0x5, 0xffffffc0, 0x401}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x4}, {0x0, 0x5}}}, @TCF_EM_IPT={0x18, 0x1, 0x0, 0x0, {{0x1, 0x9, 0xfff}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xffff, 0x7, 0x5}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xa8, 0x2, 0x0, 0x0, {{0x7f}, "165c77ccba7e675fe49eed410a2e2e4716cd407fc646343209513d7b325d42fc02d6aa9f50d053fe7e5713fa7437ad6fba8569fd1385de57a7f6190470b34ecd7309585e09484f2becc072983f084f6d72fef9a22e5851e647e7f67ee29ff9ad5e2c410f1584f651e20d1c969f9078006c1f7e0c1be07036c4b645cdf008702944ad88fccd7e74190d1ecd2c96686681e5f4ce44b18cb830c19593ff"}}, @TCF_EM_IPT={0x3c, 0x2, 0x0, 0x0, {{0x2326, 0x9, 0x6000}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x1ff}, {0x80000000, 0x3, 0x8479, 0x1, 0x3}}}]}, @TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x349, 0x2, 0x2}, {0x514, 0x4, 0x2, "165a2c3e"}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x9}, {0x8, 0x1, 0x0, '!'}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x800, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x6}, {0x7, 0x9d}}}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xf41a, 0x2, 0x185}, {0x6, 0x5, 0x1, "3d4984b771"}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x401, 0x2, 0x720}, {0xb, 0x7, 0x0, "323634776728e3"}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x10}, {0x7, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xb, 0x1, 0x4}, {0x1, 0xfffffff8, 0x4, 0x4, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd}}]}, @TCA_CGROUP_POLICE={0x1470, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}, @TCA_POLICE_RATE={0x404, 0x2, [0x7b, 0x9, 0x1, 0xdc8, 0x2, 0x2, 0x8, 0x0, 0x5, 0x200, 0x1000, 0xb5, 0xf14, 0x0, 0x4, 0x5b, 0x8, 0x2, 0x0, 0x29e7, 0x4, 0x4, 0x6, 0x3, 0x9, 0x0, 0x4, 0x9, 0x0, 0x81, 0x0, 0x1, 0x6, 0x5, 0xb, 0x8, 0x200, 0xffffff80, 0x2, 0xfffffff8, 0xfffffffa, 0x4e, 0x130, 0xc65, 0x7, 0x9, 0x9, 0x2, 0x1, 0x6, 0x2141, 0x8, 0x4, 0x4, 0x100, 0x5, 0x3, 0xf, 0x9d81, 0x6, 0x5, 0x0, 0x3a, 0x1, 0xfff, 0x5, 0x634, 0x1, 0x0, 0x6ae5, 0x2, 0x5, 0x10001, 0x75, 0x81, 0xfffffff9, 0x5, 0xfffffffd, 0xc10d, 0x101, 0x7, 0xfff, 0x3fc, 0x7, 0x8001, 0x1, 0x80000000, 0x9, 0x2, 0x7f, 0xb, 0x3, 0x2, 0x8, 0x200, 0xfffffc00, 0x172, 0x80000000, 0x0, 0x0, 0xe80, 0x7, 0x3ff, 0xea4, 0xa, 0xfffffe01, 0x8, 0x3, 0x8, 0xa47, 0x0, 0x5f99, 0x7, 0x2, 0x8001, 0x4, 0x8, 0x9, 0x1, 0xe36, 0xba, 0x0, 0x6, 0x7, 0x5, 0x0, 0x9, 0x7, 0x8001, 0x0, 0x0, 0x9, 0x800, 0xaf8e, 0xffffffc6, 0x2e, 0x5, 0x3, 0x81e4, 0x325, 0x3, 0x10, 0xfd0, 0x2, 0x2, 0x4, 0x2, 0x5, 0x2, 0x2, 0xffff, 0x2, 0x1, 0x255c, 0x4, 0x5, 0xc, 0x80000000, 0x80000000, 0x7, 0x0, 0x100, 0x1f, 0x7002, 0x5, 0xee, 0xe, 0xa59, 0x4, 0x9, 0x401, 0x200, 0x5, 0x6, 0x3, 0x7, 0x35b, 0x8000, 0xc, 0x2d459b57, 0x10000, 0xa62, 0x6, 0x7, 0x7cd, 0x6, 0xe54, 0x4, 0x7, 0xfffffffa, 0x2, 0x4, 0x5, 0x52e7, 0x2, 0x47, 0xf65, 0xffffffff, 0x4, 0x680, 0x0, 0x3, 0x8, 0x4f, 0x5, 0x80000001, 0x80, 0x0, 0x1ff, 0x7, 0x4, 0x9, 0xfffffe01, 0x0, 0x2, 0x1, 0x6, 0x80000001, 0x4, 0x5, 0x81, 0x2, 0xffffffff, 0x1, 0x40, 0x4, 0x200, 0x8, 0x1, 0x6, 0xe, 0x8, 0x4, 0x5, 0xfff, 0x9, 0x1, 0x0, 0x80, 0x1000, 0xfffff80d, 0x6, 0x8, 0x3, 0xfffffffc, 0x1, 0x7c, 0x3ff, 0x5b7924ef, 0xd104, 0x6, 0x0, 0x1, 0x7, 0x136, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x0, 0x8, 0x81, 0xa, 0xdc, 0x7, 0x9, 0x6, 0xfffffffa, 0x1, 0x4, 0xfffffffe, 0x10001, 0x8, 0x7, 0x9, 0xe, 0xff, 0x3, 0x7fffffff, 0x3, 0x1, 0x4, 0xc0, 0x3, 0x7, 0x8, 0x100, 0x3, 0x9, 0x8, 0x9, 0x5, 0x6, 0x6, 0x6, 0x1, 0x5, 0x6, 0x2, 0x1, 0x7c, 0x7, 0x6, 0x7, 0x2, 0x75, 0xffffff8a, 0x0, 0x9, 0x8000, 0x400, 0x9, 0x200, 0x2, 0xa, 0x2, 0xa4e, 0x40, 0x2, 0x0, 0x9, 0x4, 0xfff, 0x5, 0x200, 0x7, 0x6, 0x0, 0x4, 0x2, 0x1, 0x1, 0x6, 0x8, 0x5, 0x3, 0x2, 0x8, 0x0, 0x39f7bc20, 0x8, 0x6, 0x9, 0x81, 0x2, 0x431, 0xb5, 0x200, 0x9, 0xff, 0x8, 0x92, 0x5, 0x75b, 0x1, 0x200, 0x1ff, 0x3, 0x3, 0x81, 0x7, 0x3ff, 0x10200, 0x800, 0x84, 0xa660, 0x3, 0x3, 0xfffffffe, 0x40, 0x4, 0x2, 0x2, 0x1, 0x3, 0x7eb, 0x7, 0x1, 0x1, 0x81, 0x5, 0xbb, 0x40, 0x6, 0xffffffff, 0x3, 0xe, 0x9, 0x4, 0x7ff, 0x4, 0x70000000, 0x9, 0x7ff, 0x3, 0xbf, 0x4, 0x4, 0x3, 0x401, 0x2, 0x1ff, 0x40, 0x101, 0x80000001, 0x9c, 0xde8, 0x0, 0x10000, 0x9b, 0x0, 0x2, 0x2, 0x100, 0x0, 0xa, 0x7ff, 0x1, 0x8, 0x7fffffff, 0x0, 0x3, 0x7, 0x2, 0x3, 0x2000, 0x80000001, 0xe2a0, 0x800, 0xac5, 0x6, 0x9, 0x539, 0x8, 0x3, 0x0, 0x4568, 0x80, 0xe5, 0x80, 0x7fffffff, 0x1, 0x100, 0x0, 0x10, 0x7ff, 0x4, 0x12, 0x6, 0x5, 0x5c63, 0x4, 0x64, 0x4, 0x1, 0x61, 0x4, 0x10, 0x36, 0xffffffff, 0x6, 0xfb6, 0x0, 0x9, 0xa081, 0x3, 0x43e, 0x2, 0x7, 0x4, 0xfffffff8, 0x8000, 0x7, 0xffff, 0x10001, 0x6, 0xc, 0x4, 0xffff, 0x0, 0x3, 0x5, 0x7, 0x10001, 0x8001, 0xb, 0x2, 0x0, 0xf, 0x6, 0x6, 0x1ff, 0x0, 0x80000001, 0x6, 0x6, 0x3, 0x9, 0xb, 0xb, 0xf, 0xffffffff, 0xcdc, 0x9, 0x829b, 0x8, 0x1, 0x8, 0x129, 0x2, 0x93d8, 0x774d, 0x9, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x0, 0x2, 0x800, 0xfd1, 0x0, 0xa928, 0x1, 0x0, 0x6, 0x4, 0x2d90, 0x6, 0xff, 0xfff, 0x7, 0x0, 0x0, 0x0, 0x9, 0x6, 0x4, 0x1f4, 0xfffffff7, 0xb, 0xb, 0xfffffff9, 0x0, 0x2, 0x2, 0x101, 0x6, 0x3, 0x5, 0x6, 0x100, 0xd1, 0xffffffff, 0x80, 0x6, 0xfffffffa, 0x10000, 0x5, 0x7fff, 0x5, 0x8, 0x4, 0x5, 0x22a, 0x5, 0x8, 0xffff0001, 0x2f, 0x2000, 0xfffffffb, 0x0, 0x1, 0xd, 0x3, 0x9, 0x2c5d, 0x8, 0x2d, 0x8, 0xfffffc4c, 0x5, 0x3, 0xff, 0x6, 0x6, 0xd, 0x6, 0x6, 0x5, 0x5, 0x1, 0x8, 0x9, 0x2c6, 0x9, 0x3, 0x401, 0x7, 0x9, 0x2, 0x7, 0x1, 0xb7, 0xfffffff8, 0x6, 0x40, 0x401, 0x8, 0x4, 0x9, 0x80000000, 0x5, 0xfffff000, 0x5b, 0x7ff, 0x2, 0x9ea, 0x4, 0xc, 0xff, 0x97, 0xa3c7, 0x6, 0x0, 0xf, 0x5, 0x6, 0x6, 0x9, 0x5, 0x200, 0x800, 0xb9, 0x5, 0x101, 0x4, 0x1, 0x5f, 0x2, 0x3, 0x1000, 0x8f34, 0x7, 0x5, 0x2, 0x8, 0x3, 0x5, 0x8, 0x9, 0x80000000, 0x64ea, 0x1, 0x4, 0x5, 0x6, 0xe, 0x8, 0x6, 0x7, 0x44e2b63, 0x1, 0x40, 0x3, 0x9, 0xa5a7, 0x2, 0x0, 0x7, 0x8, 0xf87e, 0x30cd, 0x34, 0x1ff, 0x5, 0xac, 0x1, 0x6, 0x803, 0x1, 0xcec2, 0x7, 0x0, 0x9e, 0x9, 0x80, 0x8, 0x7, 0x5, 0x9, 0x0, 0x6a, 0x8000, 0x5, 0x7fffffff, 0x7, 0x5, 0x2, 0xf, 0xfffffffd, 0x3, 0x5, 0xb, 0xfffffffb, 0x4, 0x2, 0x74b, 0x3, 0xc5a1, 0xa24, 0x6, 0xb, 0xf1b, 0x7fffffff, 0x80000001, 0xfffffffd, 0xffff8001, 0x6, 0x100, 0x1, 0xa, 0xffffff69, 0x7, 0x4, 0x5, 0x7ff, 0x4, 0x1800, 0x0, 0xff, 0x8, 0x10, 0x2616, 0x800, 0x101, 0x9, 0x3, 0x2, 0x3, 0x53, 0x6, 0xfff, 0x8, 0xac, 0xf0, 0x9, 0x0, 0x7512, 0x6, 0x10, 0x3, 0x10, 0x200, 0x0, 0xd71, 0x5, 0x7, 0x18000, 0x5, 0x7, 0x8, 0x8, 0x7, 0x7, 0x2, 0x8bbd, 0xae7, 0x7, 0x3ff, 0x100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0x4, 0x8, 0x2, {0x2, 0x1, 0x6, 0x1d9, 0x4, 0x7ff}, {0x7, 0x2, 0x2, 0x200, 0x8, 0x9}, 0x8, 0x400000, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfffff000, 0x3, 0x9, 0x0, 0x2, 0xd, 0x2, 0x8, 0x0, 0x40, 0xc24d, 0x400, 0xffffff01, 0x4, 0x7, 0x1, 0x8, 0x1, 0x800, 0x70, 0x7, 0x8, 0x81, 0x6, 0x7fff, 0x5, 0x5, 0x6, 0x7, 0x2, 0x4, 0xfffffff4, 0x0, 0x800, 0x5, 0x3, 0x2, 0x1, 0x5, 0xd7e9, 0x8, 0x4, 0x3, 0x1, 0x1, 0xd0, 0x1000, 0xfff, 0x3, 0x7, 0xca, 0x2, 0xfff, 0x8, 0xf, 0xffffffff, 0x3, 0x7, 0x0, 0xc0000000, 0x7, 0x10001, 0x7, 0x0, 0x9, 0x8, 0x6, 0x2, 0xa, 0x8, 0x2, 0xc, 0x9, 0x7, 0xffff8000, 0x4, 0x8, 0x7, 0x4, 0xfffffffa, 0xffffff96, 0x0, 0x4, 0x2, 0x7, 0x8001, 0x8, 0x0, 0x9, 0xe64a, 0x5, 0x6, 0xffffffd1, 0x8c, 0x5, 0xff, 0x6, 0xe1, 0x203, 0xfffeffff, 0x5, 0x4, 0x5, 0x2, 0x24a, 0x1, 0x10000, 0xfff, 0x9, 0x18c0, 0xe, 0x2eec, 0xaa4c, 0x6, 0x10001, 0x7, 0x4, 0x1, 0x0, 0x1, 0x6, 0x9, 0x200, 0x940b, 0x9, 0xffffffff, 0x5, 0x9, 0x6, 0x5147, 0x94df, 0xfffffff8, 0x6ef, 0x3, 0x800, 0x6, 0x9, 0x3, 0x4, 0x6, 0x4, 0x8, 0x2, 0x9, 0xfffffff8, 0x0, 0x456, 0x81, 0x8, 0xfffffff7, 0x2, 0x1, 0x0, 0x1, 0x1, 0x7af, 0x6, 0x66839548, 0x1, 0x9, 0x2, 0x10, 0xe0000000, 0x101, 0x1, 0x7, 0x6, 0x10000, 0x2, 0x9, 0x7, 0x0, 0x80, 0xfffffff8, 0x7f, 0x1, 0x2, 0x8, 0x2, 0x7, 0x0, 0xf, 0x3, 0x5, 0xffff, 0x8, 0x81, 0x0, 0x5, 0x9, 0x7, 0x6, 0x0, 0xf, 0x1000, 0x9f24, 0x5, 0x5, 0x200, 0x4, 0x2000000, 0x3, 0x1, 0x5, 0x120000, 0x1, 0x4, 0x7, 0x2, 0x6, 0x5, 0x2, 0xfffffffb, 0x1000, 0x6, 0xffffffff, 0x7b3e, 0x0, 0x200, 0xf7, 0xa, 0x18, 0xab9, 0x6, 0x5, 0x0, 0x10001, 0xc3b, 0x0, 0xb008, 0x800, 0xfffffd95, 0x4, 0x3, 0x3, 0x51, 0x8, 0x1000, 0x662, 0x5, 0x2, 0x0, 0x5, 0x7, 0x0, 0x200, 0xee, 0x4, 0x2, 0xa4e, 0x4, 0x4, 0x800, 0x8, 0x1000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x958, 0x0, 0x8000, 0x1, 0x5, 0x8c0, 0xffff0000, 0x2, 0x6, 0x87, 0x0, 0x0, 0x722, 0xffffffff, 0xd, 0x8, 0xfffffffb, 0x2, 0xa5, 0x4, 0x80000000, 0x0, 0x8, 0x80000000, 0x6, 0x8, 0x0, 0x7, 0xfffffffe, 0x7, 0x0, 0x4, 0x2, 0x0, 0x7f, 0x0, 0x6, 0x10000, 0x8, 0xafe, 0x8, 0x4, 0x7, 0x20000000, 0x5, 0x200800, 0x1, 0x1ed, 0x2, 0x1, 0x3, 0x9, 0x3, 0x101, 0x9, 0xfffff800, 0x9, 0xd, 0xfe, 0x2, 0xb, 0x10001, 0x9, 0x0, 0x0, 0x6, 0x9, 0x0, 0x100, 0x1000, 0xf, 0x9, 0x5, 0x7f, 0x7, 0x3, 0x3, 0x2, 0xfffffffe, 0x80000000, 0xfffffff9, 0x4, 0x6, 0x9, 0x7f, 0x32, 0x6, 0x3, 0x0, 0x7, 0x8001, 0x2, 0x8, 0xffff, 0xfffffffb, 0x800, 0x512, 0x8a, 0x2, 0x0, 0x1, 0xa, 0x80000000, 0xd517, 0x0, 0xfffffffc, 0x9, 0x8, 0x5, 0xf6, 0x9d, 0x0, 0x10000, 0xfffff42f, 0x10001, 0x7, 0x9, 0x1, 0x3, 0x8, 0x9, 0x739, 0x1, 0x0, 0x20, 0x8, 0x60000000, 0x2, 0xffffff95, 0x8, 0x8, 0x3, 0x5d81, 0x7fffffff, 0x3, 0x6, 0x5, 0x81, 0xfff, 0x40, 0x7fff, 0x6, 0x100, 0x9, 0xffffffff, 0x4, 0x1000, 0x1, 0x8, 0x0, 0xcf, 0x2, 0x3, 0x4, 0xf, 0x7ff, 0xf, 0x6, 0x5, 0x7f, 0x2, 0x40000000, 0x3ff, 0xb, 0x3e86, 0x6, 0x7, 0xb, 0x0, 0x8, 0x1f5, 0x4, 0x5, 0xfffffd3c, 0xff, 0xd, 0x0, 0xffffffff, 0x3, 0x4, 0xc38, 0x2, 0x2, 0x5, 0xfff, 0x4, 0x0, 0x18000, 0x80000000, 0xda7, 0x4, 0x9, 0x200, 0x3, 0x80000001, 0x8000, 0x6, 0x4, 0x4, 0x0, 0x306, 0x2, 0x0, 0x0, 0xc1, 0x9, 0x2, 0xb, 0x7ff, 0x80000001, 0x8, 0x3, 0x2, 0x4, 0x9cde, 0xf97, 0x1, 0xffffffc0, 0xffff, 0x8, 0x5, 0x401, 0x0, 0x7f, 0x4b62, 0xef, 0x9, 0x98, 0x6d, 0x40, 0x80000001, 0xfffffffe, 0x8000, 0x1, 0x7, 0xcae, 0x27, 0x9, 0x81, 0x7, 0x800, 0x8000, 0x0, 0x6, 0x7c, 0x8, 0x8, 0x7, 0x7, 0x3, 0x200, 0x7, 0x1, 0x7, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffa}]}, @TCA_CGROUP_POLICE={0x468, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x101}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8, 0x1, 0x1, 0x8, 0x2, 0x10000, 0x2, 0x9, 0x10000, 0xbf7, 0x800, 0xfffffffe, 0x1000, 0x2, 0x1, 0x0, 0x4, 0x8000, 0x9, 0xfff, 0x3, 0x407, 0x5, 0x7, 0x4, 0x2e, 0x1, 0x0, 0x86, 0x4, 0xfffffff9, 0x7ff, 0x0, 0x8, 0x80000000, 0x0, 0x7, 0x200, 0x1000, 0x200, 0x4, 0x8, 0xc1df, 0x3, 0xfffffff9, 0x3ff, 0x5, 0x7, 0x6, 0x3, 0x9, 0x3, 0x1, 0x1, 0x6d6ad700, 0xe8, 0x2, 0x2, 0x9, 0x1, 0x10000, 0x2a607710, 0xfffffff7, 0x0, 0xffd1, 0x2, 0xee, 0x8, 0x0, 0x5, 0x2, 0x69a, 0x3, 0x47d51252, 0x2, 0x7, 0x7fffffff, 0x3, 0x8b6, 0xfff, 0xfe000000, 0xfffffff1, 0xffffffff, 0xf77, 0x5, 0x3, 0x1, 0x8, 0x8, 0x5, 0x3, 0x8, 0x200, 0x9, 0x6, 0x1f, 0x8fdd, 0xfffffffd, 0x10000, 0x9, 0x4, 0x3, 0x279, 0x7, 0xfffffff8, 0x88f7, 0x5, 0x7, 0x2, 0x7, 0x1, 0x7, 0x9f5f, 0x7fff, 0xfffffffc, 0x6f0, 0xfffffffa, 0x1, 0x6, 0x473f675d, 0x911f, 0x1d6451e9, 0x4, 0x0, 0x1, 0xb83, 0x8, 0x4, 0x0, 0x9, 0x8, 0x1ff, 0x8, 0x6, 0x3, 0x2, 0x0, 0x7fffffff, 0x6, 0xe6, 0x0, 0x80000000, 0x9, 0x0, 0x34f, 0x5, 0x8, 0xf, 0x6, 0x5, 0xf7, 0x0, 0x3f8e, 0x0, 0xfff, 0x10001, 0x7, 0x1, 0xfffffff5, 0x2, 0x3, 0x1d, 0xff, 0x4, 0x7ff, 0x7, 0x10001, 0x5, 0x1, 0x9, 0x2, 0x7ff, 0xcad, 0x1, 0x5, 0x76ec, 0x4, 0x8, 0xf, 0x1, 0x6, 0xb, 0x9, 0x5, 0x4b3a, 0x0, 0x0, 0x5b9, 0x7, 0x7fffffff, 0x4800, 0xaf64, 0x6, 0x8, 0x9, 0xff, 0x5, 0x81, 0x80000001, 0x80, 0x9, 0x4, 0x80000000, 0x0, 0x1, 0xffff, 0x3, 0x7ec2, 0x6, 0xfffffffa, 0x5000000, 0x5, 0x1, 0x6, 0x6, 0x0, 0xb, 0x2, 0xc4, 0xfffff90a, 0x8, 0x4, 0x92, 0x6b9, 0x6, 0x8001, 0x7, 0xffffd26b, 0x2, 0x0, 0x2, 0x9, 0x1000, 0xd, 0x800, 0x2, 0xd, 0x0, 0x7, 0x3, 0x6, 0x9, 0x2, 0x0, 0xfffffeff, 0xc, 0x6908, 0x4, 0x1, 0x200000, 0xb2d, 0x6, 0x2, 0x7ff, 0x400]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5e43d6bc}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x592bb5aa, 0x8, 0x3, 0xf7, 0x0, {0x1, 0x0, 0x5, 0xd4d, 0x7, 0x5}, {0xc, 0x1, 0x5, 0x0, 0x3, 0x8}, 0x1, 0x8, 0x8000}}]}, @TCA_CGROUP_POLICE={0x818, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xfff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf6f, 0x5, 0x1000, 0x5, 0x4, 0x6, 0x4, 0xfce, 0xffff, 0x9, 0x7, 0xb41d, 0x1, 0x0, 0x2, 0xd10e, 0x8000, 0x70f, 0x3, 0x9, 0xa2b, 0x6, 0x5, 0xffffffff, 0x9, 0x7, 0x4, 0x2, 0x8, 0x3, 0x6, 0x8, 0x10001, 0x9, 0x8, 0x6, 0x0, 0x2, 0x10000, 0x0, 0x6, 0x9, 0x7, 0x3, 0x8, 0x401, 0x1216, 0x6, 0x3, 0x4, 0x8, 0x9, 0x9, 0x9, 0xc, 0x3, 0xfffffa88, 0x5, 0x4, 0x4, 0x3, 0x7, 0xa, 0x9, 0xc, 0xa2c6, 0xd321, 0x1000, 0x3, 0x2, 0x2f48, 0x1167, 0x9, 0x600, 0x1000, 0xfff, 0x5, 0xf, 0x0, 0x9, 0x8, 0x9, 0x1, 0x7, 0x4, 0xfffffff9, 0x3a, 0x3, 0xc5, 0x100, 0x0, 0x9, 0x92, 0x5, 0x0, 0x9, 0xabc2, 0x7f, 0x1, 0xe4, 0x80000001, 0x80, 0xfa3, 0xffff69e4, 0x3, 0x1, 0x8, 0x6, 0x3, 0xfffffffd, 0x9, 0x401, 0x7, 0x4, 0xd0f, 0x100, 0x1, 0x5, 0x6, 0x7, 0x1, 0x4, 0x7, 0x9, 0x6, 0x419d, 0x4, 0x2, 0x6, 0x5, 0x9, 0x0, 0x400, 0x8c, 0x1, 0x1, 0x4, 0x6, 0x4, 0xb4c7, 0x39, 0x208, 0x4, 0x2, 0x8, 0x5, 0x5eb, 0x1, 0x8, 0x5, 0xbd9, 0x7, 0x6, 0x3, 0x2, 0x100, 0x3, 0x200, 0x9, 0x0, 0x800, 0x0, 0x80, 0x5, 0x0, 0x81, 0xe, 0x0, 0x1f23, 0x5, 0x3ff, 0x6, 0xd7b7, 0x6, 0x7f, 0x7, 0x8, 0x8, 0x2, 0x5, 0x1, 0x40, 0x80000000, 0x7, 0x61ee, 0xe, 0xfffffff8, 0x6, 0x40, 0x2, 0x5, 0x80000001, 0x7fffffff, 0xf, 0x1000, 0x7, 0xc720, 0x2, 0x9, 0xe, 0x3, 0x9, 0x9, 0xc, 0x6, 0x0, 0x8, 0x2, 0x7, 0x3, 0x0, 0x7, 0xdfe1, 0x8000, 0xfffff8f8, 0x4, 0x4, 0x6, 0x89, 0x2, 0x1, 0x3f800000, 0x4, 0xfff, 0x6, 0x1, 0x9, 0xd, 0x1, 0x9, 0xfffffff2, 0x10000, 0x1, 0x9, 0x3, 0x3, 0x7, 0x95, 0x6447, 0xfffffffb, 0x4, 0x2, 0x7ff, 0xffffff37, 0x9, 0x1d, 0x5, 0x0, 0xfffff75a, 0x81, 0x3, 0x80, 0x6048, 0x7, 0x0, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x1, 0x8001, 0xe679, 0x8, 0xf4, 0x1, 0x3ff, 0xe, 0xfffffffc, 0x200, 0xce40, 0x2, 0x3, 0x49, 0x3ff, 0x8001, 0xbad9, 0x1, 0x84, 0x800, 0x0, 0x0, 0x0, 0x823e4a7, 0x7, 0x2, 0xfffffffa, 0x87e, 0x4, 0x4a8b, 0xe, 0x2, 0x9, 0x7, 0x4, 0x5, 0x77a, 0x2, 0x96, 0xb25, 0x7fffffff, 0x6, 0x1, 0x80000000, 0x2, 0x1, 0x6, 0x6, 0x0, 0x6b6c, 0x4, 0xffff, 0x65f, 0x6, 0x1, 0x3, 0x2, 0x4, 0xc9f1, 0x3, 0xce, 0x0, 0x81, 0xd3b, 0xffffffff, 0x88, 0x7, 0x4aa, 0x7, 0x9, 0x6, 0x44472ca6, 0xc, 0x3, 0x93a, 0x8, 0xfb3, 0x3, 0x9, 0x5, 0x8, 0x8, 0x0, 0xa, 0x3, 0x8, 0xfffffffd, 0x6, 0x823c, 0x8, 0x7, 0xfffffffc, 0x80000001, 0x9, 0x9, 0x7, 0x7a, 0x7, 0x6, 0xb28, 0x6, 0x9, 0x6, 0x6, 0xf1e, 0x2, 0x7fff, 0xc, 0x4e9, 0x9, 0x3, 0x8, 0xff, 0x1, 0x7, 0x6, 0x8000, 0x4, 0x9, 0xc, 0x6, 0xc543, 0xffffffff, 0x91, 0xeb, 0x1, 0x1, 0xfffffff1, 0xc, 0x3ff, 0xfffffe01, 0x2a7, 0x3, 0x2, 0x25, 0x2, 0x6, 0x3, 0x500000, 0x8, 0x0, 0x7, 0xfffffffd, 0xfffffeff, 0x2, 0x80000000, 0x8001, 0x101, 0x1, 0x4, 0x8, 0x80000001, 0xfffffff9, 0xc, 0xd, 0x8, 0x0, 0xf, 0x6, 0x4, 0x8dfe, 0x7, 0x4, 0x7f, 0x6, 0x4, 0x0, 0x62f, 0x7, 0x2, 0x0, 0x0, 0xa, 0x9, 0x5, 0x9, 0x1827, 0x1, 0x3, 0x10000, 0xacf7, 0x6, 0x8000, 0x9, 0x5, 0xe, 0xb9, 0x6, 0xef9a, 0x10000, 0x200, 0x80000001, 0x6, 0x10000, 0x8000, 0x1, 0x0, 0xe, 0xcdc, 0x25af, 0x10001, 0x81, 0xa, 0x3, 0x81, 0x3, 0xbb7, 0x9, 0x9, 0x6e98, 0x2, 0x0, 0xfffffffb, 0x9, 0x9, 0x81e, 0x50b7, 0x9, 0x3, 0x2, 0x0, 0xffffffff, 0x1, 0x7, 0x7, 0x1, 0x80000001, 0x9, 0x6, 0x6, 0x6, 0x9, 0x8, 0x5, 0x8, 0x8, 0x2, 0x10001, 0x1000, 0xdc5, 0x8, 0x3, 0x3, 0x767d, 0x1, 0x3, 0xfff, 0x3, 0x6, 0x7, 0x7, 0x4, 0x51b1, 0x5, 0x200df176]}]}, @TCA_CGROUP_ACT={0x52c, 0x1, [@m_xt={0x174, 0x4, 0x0, 0x0, {{0x7}, {0xd0, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x434}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x98}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x51, 0x6, {0xef9d, 'mangle\x00', 0x38, 0x1, "05bee9bb8b3c074504bcd08f59899ea3d9ca2566c53400b6160076334165959bf121822c4a59d8"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x7f, 0x6, "dc25a1f0c4fdd61abf4d7ab55c78186fd68f8756a639e8bb2ed1027e4b71adeb3a3e9b39307a7a7e58ccdebd9f8212aef11fe9389e5c3926615f0e1cfb55e20e4120e719de2b68b0a6f0e80348dd82126939138198a2c50133e582994edcd2087cf4f072b9bc2d2e806d17d37914914d612dea47b39e4a67517df5"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x16c, 0xb, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xffffffff, 0x18ca, 0x0, 0x8, 0x3}}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9ad3}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x7ff, 0x10000000, 0xffffa253}}}, @TCA_IFE_DMAC={0xa, 0x3, @random="232878b298b7"}, @TCA_IFE_DMAC={0xa}]}, {0xd5, 0x6, "7a4b0185f6398ca56e452765439e9339cb94349fb1e53d98fb4f9fc8a2a49d6137b4b4d4e2a470e59de69b6dc2cbafae63eb64bb440cfa28a5a54bc36d2bc524ec35513324bd271cdad964b1cc4a8a1d3d8aa95c85d4083215b29028be5fff25bfb6bd6182a0bbe443f55db44feaa84396a8556313f51a4b486a1936f1a92286037e603f7b037e7a49e5d2730bac71e8d58cdb3398301d6ba3a57c738b48190175b1cd318dbf4adb3b4ebf80a9106f67e344c924938491fb3228a46af69f28d09f670e0c123e9cc6de62d822f1a70f34ca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0xe0, 0x1a, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x1, 0x4, 0xfffffff7, 0x2}}]}, {0x9a, 0x6, "5e4a2b3e642bb87521f08f8c9f7ab821852e69305bbce0bb2d6ef213fcb46bdd35ede307b5b9e563e34184f3e8a5437cb9140ed3a6d0d60df9c29c502883b17e9c98c657dbb61774369aa906e9c8afcbb09ec1a96022cd4d7d08df4cf2b0a9767b2aeeb1efc722c73d5a8bf0aed75106709534b98f95ccdb77cf1a27aaf7d8395282de40b25d5c27f01062d239a09ee56fc1b4c85db9"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_xt={0x168, 0xd, 0x0, 0x0, {{0x7}, {0xd0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x56, 0x6, {0x3, 'filter\x00', 0xef, 0x6, "6e227f0ca2619332b58f4873e7782181c8080c5257cae0d88e67612538b083674c285dcf4630157e969034dc"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x71, 0x6, "862b58c7b7e41b9a16b2911b8bae4d22984fdec78725fc3e175f225f1eb9208f7d3e0b48604b3e1c355e053be3614f46b33c4aab9474b26613ff3c4da44b0064808481651a45c0b4e9eacbabfca11494db376efaab186cc81300c8b7b5d2c38758a4b9f1e1ab70a540289c64b2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x910, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x2, 0x2, 0x6, 0xf, {0x7, 0x0, 0xf5, 0x42a, 0x400, 0x1200}, {0x8, 0x0, 0xd, 0x3, 0xffff, 0xb}, 0xb, 0x3, 0xb}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0x9, 0x100000, 0x7, {0xe9, 0x1, 0xcc0, 0x3, 0x5481, 0xc10}, {0x4, 0x2, 0x3ff, 0xff, 0x68, 0x8}, 0x101, 0xd8b8, 0xf3e3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x80000000, 0x101, 0x1, 0x0, 0x71, 0xfffffffa, 0x2, 0x91, 0x8a, 0x5, 0x11ab8465, 0x400, 0x400, 0x0, 0x4, 0xa, 0x40, 0x8000, 0xe39, 0x9, 0x1, 0x2, 0x4359, 0x0, 0x7, 0x101, 0x0, 0x0, 0x2, 0x34, 0x0, 0x0, 0x1ff, 0x3000, 0x400, 0x0, 0x120, 0x20000000, 0x8, 0x7f, 0xba, 0x800, 0x0, 0x5, 0x5, 0x5, 0x3, 0xa, 0x11f0000, 0x5, 0x3, 0x0, 0x4, 0x1, 0x3, 0x3, 0x6, 0x2, 0x7f, 0x4a22, 0x8, 0x100, 0x3, 0xfffffff4, 0x567600da, 0x5, 0x3a, 0x2, 0x2, 0x7fffffff, 0x1, 0x0, 0x0, 0x5, 0x4, 0x46c8, 0x80, 0x2, 0x8, 0x5, 0x1ff, 0x0, 0x7fffffff, 0x3, 0x1, 0x1, 0x8, 0x1, 0x200, 0x0, 0xb, 0x6, 0xfff, 0x1, 0x6b, 0xfffffff8, 0x6, 0x5, 0xebe, 0x1, 0x1, 0x3956, 0xffff1fc8, 0x2, 0xc3, 0x0, 0x100, 0x9, 0x7f, 0xacd5, 0x3, 0x1, 0x1, 0x5, 0x5, 0xaa4, 0x0, 0x1, 0x8001, 0x6, 0x5d, 0x82f8c800, 0x1, 0x26a6, 0x2, 0x22d, 0x1, 0x7205b315, 0x1, 0x0, 0x80, 0x3283, 0xfffffffa, 0x7, 0x7fffffff, 0xfffffff8, 0x3, 0x80, 0x80000000, 0x3ff, 0x5, 0x6, 0x2ee, 0x1, 0x9f, 0x9, 0x7, 0x4, 0x2, 0x1, 0x1, 0x80, 0x4, 0xc, 0x9, 0x10, 0x3, 0x8, 0xf, 0x1, 0x8, 0x8000, 0xfffff7af, 0xa56, 0x80, 0x6, 0x0, 0x5, 0x9, 0x9b, 0x7, 0x7, 0xb8, 0x2, 0x3, 0xffffffff, 0x0, 0xfa, 0x471, 0x3, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80, 0x1ff20ee7, 0x7ff, 0x5, 0x1, 0xbd, 0x7fff, 0x80000000, 0x7, 0x7, 0x3ff, 0xf85, 0x6, 0x0, 0x1ab7, 0xc, 0x3, 0x66, 0x2, 0x9, 0x40, 0x800, 0x2, 0x9, 0xd559, 0x944, 0x2, 0x9, 0x2800000, 0xfffffffc, 0xd, 0x0, 0x8, 0xff36, 0xffffffff, 0x1200, 0x54, 0x10, 0x80000000, 0x7, 0x6, 0x7ff, 0x7, 0x832a, 0x80, 0x1, 0x6, 0x6, 0x7fff, 0x3da18b6b, 0x4, 0x1, 0x2690, 0x1, 0x40, 0x240, 0x8, 0x4, 0x7, 0x1, 0x59, 0xa8, 0xbc13, 0x6, 0x7, 0x0, 0x6e5, 0x160, 0x475a, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x6, 0x6, {0x0, 0x2, 0x5, 0x1, 0x3}, {0x0, 0x2, 0x1, 0x0, 0x3, 0x7}, 0xfff, 0x4cc3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3, 0x2, 0x7, 0x2, 0x7, 0x0, 0xb1, 0x2, 0x5, 0x2, 0x4, 0x9, 0x1000, 0x6, 0x1, 0x2, 0x6, 0x3, 0x8000, 0x140000, 0x5, 0xc764, 0xc2, 0xc, 0x10000000, 0x3, 0x2, 0x3, 0x1, 0x5, 0x7, 0x1ff, 0x81, 0xfd75, 0xa, 0x3, 0x2, 0x5e9d, 0x836, 0x1, 0x3, 0xffffff80, 0x9, 0x1000, 0xb, 0x1, 0x6, 0x3, 0x5, 0x4, 0x62, 0xff, 0x80000000, 0x5, 0x3, 0xd, 0x9, 0x8, 0x1, 0xe6a7, 0x9, 0x1, 0x7f, 0x0, 0x0, 0x5, 0x35ed, 0x4, 0x4, 0x5, 0x3, 0x7, 0x5, 0x80000000, 0x5, 0x9, 0x26f, 0x80000000, 0x7, 0x3c, 0x4, 0x1000, 0x7a, 0xa, 0x9, 0x2, 0x8000, 0x3, 0x642d, 0x2, 0x0, 0x5, 0x33, 0x8, 0x3, 0x140000, 0x8000, 0x5, 0x0, 0x5, 0x8, 0x4, 0x1, 0xeaa, 0x7, 0x2, 0xc, 0x4, 0x101, 0x7f, 0x0, 0x2, 0x8, 0x755, 0x2, 0x9, 0x1000, 0x6, 0x3, 0x101, 0x3, 0x6, 0x1, 0xb45a, 0x7, 0x0, 0x2, 0x5, 0x8, 0xf937, 0x3, 0x7, 0x7, 0x8, 0xee, 0x2, 0x8001, 0x7fffffff, 0x288ff004, 0x9, 0x4, 0xfffffff8, 0x8001, 0x1, 0x60, 0xdba, 0x20, 0x8, 0x4, 0x1347, 0x42, 0x71, 0x7, 0xfffffc00, 0x3, 0x8, 0x8, 0x8c, 0x0, 0x40, 0xffffffff, 0x6, 0x5, 0x7fffffff, 0xfffff001, 0x5, 0x6, 0x0, 0x7ff, 0xa258, 0x3, 0x2, 0x58, 0x1, 0x5d8ba99e, 0xf561, 0x2, 0x2, 0x3854, 0x9c7f, 0x2, 0xffff8983, 0x11f5, 0x431, 0x8000, 0xfffffffd, 0x9, 0x8, 0x9, 0x3, 0x81, 0x100, 0x4515, 0x5, 0x4, 0x1ff, 0x9, 0x80000000, 0x3, 0x2, 0x10001, 0x80, 0x100, 0x200, 0x585, 0xa, 0x9, 0xaf6, 0x7, 0x4, 0x4, 0x7fffffff, 0x200, 0xdf, 0x10000, 0x800, 0x5, 0xc23, 0xfffffff8, 0x4, 0x7, 0x5, 0x88f, 0x6ace6ca5, 0x33f5, 0x92, 0xf1, 0x4, 0x3, 0xda77, 0xa, 0xe6, 0x88b, 0x3, 0x4, 0x3, 0x7ff, 0x7, 0x81, 0x6, 0xffff, 0x7, 0xde, 0x740, 0xde, 0x4, 0x2, 0xffff, 0xe3, 0xb9800, 0x0, 0x7, 0x401, 0x8, 0xd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x20000000, 0x2f16, 0x6f87ab7e, 0x8a54, {0x1, 0x2, 0xfffa, 0x3ff, 0x2, 0x2}, {0x2b, 0x2, 0xa, 0x45, 0x80, 0x6}, 0x6, 0x1c, 0xb086}}]}, @TCA_CGROUP_EMATCHES={0xe8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x100, 0x2, 0xe4f}, {0xfb4, 0x3, 0x0, "2eac64"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8, 0x8, 0x8000}, {0x3, 0x2, 0x6}}}]}, @TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x84, 0x3, 0x0, 0x0, {{0x200, 0x0, 0x3000}, "4fe8179fee373284fcdf72d247565ba004d8853ef37d7e6680969ed00979af0e6086df880ea01184e97667343a785ac774d0fcc1eb23d2c7ce0160cfbcd054138889b623a039c878daae31249543b38f88c454789fc52296eafc433e9015649be11b97dc2910a34d7c328bc5f4769981eb6115a56c"}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7ff, 0x1, 0x6}, {0x4, 0x0, 0x0, 0xc, 0x5, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x6, 0x2, 0x6}, {0x9, 0x5, 0x1, "d74abdfc88"}}}]}]}]}}]}, 0x3f6c}}, 0x24044094) 7.739987228s ago: executing program 1 (id=893): r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000000)={r3, 0x7f}, 0x8) syz_io_uring_setup(0x22f0, &(0x7f0000000140)={0x0, 0xaee3, 0x40, 0x402, 0xbfdffffc}, 0x0, 0x0) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800000042000503"], 0x18}}, 0x20008804) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0xa, @vbi={0x1, 0x1, 0x26, 0x30383653, [0x80000000, 0x4], [0x9, 0x7], 0x108}}) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) 7.562944368s ago: executing program 1 (id=894): syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockname$packet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000400000004000000018000000000", @ANYRES32=r3], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) 6.445618691s ago: executing program 0 (id=895): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc29c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xa0}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000840)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="200da0000000a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfc, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x43f4, 0x5c18, 0x6, 0x0, 0x0) 5.798500476s ago: executing program 5 (id=899): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r2, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) mq_notify(r2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) read(r1, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x9, 0x12) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@ipv6_deladdr={0xb4, 0x15, 0x400, 0x70bd2d, 0x25dfdbfc, {0xa, 0x1, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x20}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFA_CACHEINFO={0x14, 0x6, {0xb, 0x0, 0x80000000}}, @IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0xb4}, 0x1, 0xba01}, 0x8800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01024e47aeec002dbd7000fbdbdf2503010000004e2400000500020002000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40018) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x40) 5.449796449s ago: executing program 5 (id=900): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2aa65, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xc}]}, @IFLA_MTU={0x8, 0x4, 0x81}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) epoll_create1(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/154, 0x9a, 0x0, &(0x7f0000000040)={0x77359400}) creat(0x0, 0x16c) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000740)={0x11, @multicast2, 0x4e24, 0x4, 'wrr\x00', 0x39, 0x7ff, 0x22}, 0x2c) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x40000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x4000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000000)={0x0, @bt={0x3, 0xe624, 0x0, 0x0, 0x200, 0x109, 0x67, 0x0, 0x0, 0x1, 0xc, 0x2, 0x3, 0xd, 0xa, 0x22, {0xc, 0x6}, 0x3}}) unshare(0x26020480) 4.896795236s ago: executing program 0 (id=901): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_io_uring_setup(0x1244, &(0x7f0000000100)={0x0, 0xd5a5, 0x800, 0x3, 0x205}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x99, 0x1, 0x2, 0x18, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x700, 0x8000, 0xc, 0x7fff}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x2, &(0x7f0000000040)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0xc}], &(0x7f00000000c0)='GPL\x00', 0xffff, 0x2b, &(0x7f00000001c0)=""/43, 0x0, 0x41, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x0, 0xf, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000300)=[r0, r0, r0], &(0x7f0000000340)=[{0x1, 0x1, 0x5, 0x1}, {0x3, 0x5, 0xc, 0x5}, {0x5, 0x1, 0xa, 0x4}, {0x2, 0x5, 0x6}], 0x10, 0x9}, 0x94) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000019080), 0x2000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000019140)=ANY=[@ANYBLOB="1201000000000040ac0538024000010203010902240601010000000904000000030102"], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r4) r6 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, r0, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1, {0x0, r7}}) syz_open_procfs(0x0, &(0x7f0000000300)='attr/exec\x00') socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0x10, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) eventfd(0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) 4.284540919s ago: executing program 1 (id=902): socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x20804, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x9, 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 4.109779059s ago: executing program 1 (id=903): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x229) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000040)}) socket$kcm(0x29, 0x5, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000e0001006e6574021d03ef696d0000000f0006006e657464657673696d300000c88882003c6c325fb926da57c2d304d6ebd79e0f0de2f3633b8a4021a518d000ed0400870000000000"], 0x4c}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808480200000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000003bc0)={'\x00', 0xbe4f, 0x0, 0x7, 0x9, 0xed8}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000002080)='pkcs7_test\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r7) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) 3.84936376s ago: executing program 2 (id=904): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x6, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000143edd08b82225646cd3010203010902440001000000000904000000020a"], 0x0) close_range(r0, 0xffffffffffffffff, 0x400000097ffffff) 3.748523909s ago: executing program 5 (id=905): syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x495, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, 0x0, 0x0) r3 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth1_to_batadv\x00'}) bind$packet(r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x6700000000000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) semget$private(0x0, 0x2, 0x6a3) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x0, 0x20044090}, 0x20046024) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0x40c989, 0x0, 0xffffffdf, 0x175}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 3.599765509s ago: executing program 0 (id=906): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x220, 0x110, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000001780)=""/201, &(0x7f0000001700)=0xc9) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0x8, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000161f979a4ddd27"], 0x0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001740)={0x0, 0x16, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x4e23, 0x2, @empty, 0x3}, @in6={0xa, 0x4e24, 0x2, @local, 0x4}}}, 0x118) syz_usb_connect(0x5, 0x27, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b75c7f4047050102641101020301a8ac120001000000000904006b00a2cdd200"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002ac0)=ANY=[@ANYBLOB="8c050000130001002bbd7000fb0e0025080054"], 0x58c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r9, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x7c84, 0x26, 0x3, 0x4, 0xbf9]}}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f00000016c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000000500)=ANY=[@ANYBLOB="801100e5", @ANYRES16=r5, @ANYBLOB="000226bd7000fcdbdf256500000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x1180}, 0x1, 0x0, 0x0, 0x810}, 0x80) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001900)={'syztnl1\x00', &(0x7f0000001880)={'ip6_vti0\x00', 0x0, 0x2f, 0x48, 0xae, 0x8001, 0x2, @loopback, @private2, 0x20, 0x8, 0x53f, 0xc}}) ioctl$I2C_RDWR(r10, 0x707, &(0x7f0000000300)={&(0x7f0000000280)=[{0x1000, 0x9010, 0x4, &(0x7f0000000180)="e0160285"}, {0x5, 0xc010, 0x0, &(0x7f0000000540)}], 0x2}) 2.644788397s ago: executing program 3 (id=907): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b1801004ec6"}) 2.48401446s ago: executing program 3 (id=908): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r1 = epoll_create(0xff9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000080)={0x2, 0x8, 0x8, 0xff76}) write$char_usb(r2, 0x0, 0x0) 2.300131898s ago: executing program 3 (id=909): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010140)=ANY=[@ANYBLOB="200000007600070000000000000000000300000000000000080001"], 0x20}}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x3, 0x3}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000440)={&(0x7f0000000180)=[0x0], &(0x7f0000000240)=[{}, {}], r3, 0x0, '\x00', 0x1, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[], 0x21c}}, 0x0) 2.153009284s ago: executing program 1 (id=910): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r2, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) mq_notify(r2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) read(r1, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x9, 0x12) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@ipv6_deladdr={0xb4, 0x15, 0x400, 0x70bd2d, 0x25dfdbfc, {0xa, 0x1, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x20}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFA_CACHEINFO={0x14, 0x6, {0xb, 0x0, 0x80000000}}, @IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0xb4}, 0x1, 0xba01}, 0x8800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01024e47aeec002dbd7000fbdbdf2503010000004e2400000500020002000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40018) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x40) 2.13715171s ago: executing program 2 (id=911): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000040109021b00010000800009040bfd0133776100090513020004814006"], 0x0) r0 = fsopen(&(0x7f0000000040)='udf\x00', 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000080), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r3 = syz_io_uring_setup(0x1442, &(0x7f0000000980)={0x0, 0xc52a, 0x80, 0x0, 0x0, 0x0, r1}, &(0x7f00000004c0)=0x0, &(0x7f0000000000)=0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000072, 0x0, 0x2b34988d}]}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x67, 0x4004, @fd=r0, 0x1, &(0x7f00000002c0)="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", 0xfe, 0x8, 0x1}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000640)="f5", 0x1}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00'}) 2.088051565s ago: executing program 3 (id=912): syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockname$packet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000400000004000000018000000000", @ANYRES32=r3], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) 1.936564983s ago: executing program 5 (id=913): socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x20804, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x9, 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 1.760518863s ago: executing program 1 (id=914): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) memfd_secret(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'ip6tnl0\x00', @random="0200ac7f7f00"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, 0x0, 0x4048043) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x80) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3f6c, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x10, 0xfff1}, {0xd}, {0x7, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3f3c, 0x2, [@TCA_CGROUP_POLICE={0xc4c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x9, 0x5, 0x9, 0x3, 0x7, 0x8, 0x9, 0xff, 0x40, 0x8, 0xe, 0x7, 0x10000, 0x24, 0x0, 0x40, 0x7, 0x8, 0x81, 0x80000000, 0x9, 0x7ff, 0xf, 0x3555, 0x4, 0xfffffffb, 0x3, 0xfff, 0x1000, 0x3, 0x8, 0x61, 0xd, 0x4, 0x3, 0x1, 0x8, 0x7, 0x80000000, 0x8, 0x8, 0x3, 0x3, 0x0, 0x1, 0x9, 0x9, 0xfffffff7, 0x8, 0x0, 0x7f, 0xfffffffe, 0x0, 0x4, 0x5, 0x4, 0xb78, 0xffff0001, 0x1, 0x5, 0x3, 0x440c, 0x89c, 0x3, 0x4, 0xfb7e, 0xffff, 0x80000001, 0xe3, 0x6, 0x7, 0x1, 0x0, 0x9, 0x22aa7b85, 0x80000001, 0x8, 0x6, 0x1ff, 0x55, 0x64fc59d3, 0x8, 0x7, 0x54000000, 0x2, 0xb9d7, 0x0, 0x81, 0x6, 0x0, 0x7, 0xa, 0x4, 0x1, 0x3, 0x1, 0x94, 0x10000, 0x0, 0x8b70, 0x4, 0x5, 0xd7a1, 0xfffffffa, 0x6, 0x9fc, 0x1, 0x96, 0x0, 0xfffffffe, 0x5, 0x8, 0x5, 0x3, 0x1, 0x1, 0x40, 0x1c6e, 0x3, 0x3, 0x8, 0x8, 0x8, 0x1, 0xc, 0x5, 0x0, 0xd4b, 0x800, 0x5, 0x3, 0x0, 0x6, 0x83a6, 0x9, 0x4, 0x7, 0x9, 0x7, 0x1ff, 0xfffff800, 0x0, 0x3fa1, 0x8, 0x8, 0x10001, 0x8, 0xfffffffd, 0x14, 0x80000001, 0x5, 0x9, 0x80000000, 0x8000, 0x7fffffff, 0x0, 0x1, 0x3, 0xffff, 0x5a, 0x4, 0x8, 0xfffffffd, 0x5, 0x7, 0x1, 0x3, 0x6, 0x7ff, 0x401, 0x7, 0x6, 0xfaf, 0x3, 0xf, 0x7, 0x5, 0x4, 0x8c, 0x5, 0x10000, 0x4, 0xb6c, 0x80000001, 0x3, 0x8, 0x800, 0x8, 0x81, 0x5, 0x5, 0x4, 0x0, 0x1, 0x9, 0x427, 0x3, 0x6, 0x4, 0x9, 0x40, 0xd, 0x3, 0x400, 0x7f, 0x40, 0x8001, 0x8, 0x7, 0x1ff, 0x7fff, 0x84, 0x90e, 0x0, 0x4, 0x2, 0x7fff, 0x3, 0x3, 0x4, 0x4, 0x100, 0x8bd7, 0x5e23, 0x6, 0x2, 0x0, 0xfffffffd, 0x3, 0xbc, 0xf9d, 0x3, 0x7, 0x5, 0xfffffffa, 0x7fffffff, 0x40, 0x6, 0x5, 0x1, 0x0, 0xc8, 0x1000, 0x2, 0x1, 0x4, 0x9, 0xfd, 0x4, 0xd949, 0xb, 0x7, 0x1000, 0x750, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xa, 0x496, 0x4, 0xd9, 0x4, 0x2, 0x1ff, 0xfffffbb0, 0x1, 0x7, 0x23d0f55d, 0x1ff, 0x5, 0x10000, 0x8, 0x7, 0x6, 0x2, 0x7, 0x2, 0x4, 0x7, 0xe, 0x9, 0x5, 0x8, 0x1, 0x3b, 0xfffffffc, 0x200, 0x8, 0x0, 0x9, 0x8, 0xb, 0x1, 0x6, 0xff, 0x1, 0x64, 0xff, 0x80, 0x3, 0x5a, 0xc, 0x2, 0x10, 0x2, 0x7fffffff, 0x10001, 0x2, 0x7ff, 0x4, 0x7, 0xfff, 0x1000, 0x4, 0x9, 0x2, 0x0, 0x8000, 0x2, 0xb56, 0x4, 0x3, 0x5, 0x2, 0x2, 0x200, 0x8, 0x6, 0x4, 0x6, 0xffff, 0xd89a, 0xce31, 0xfffffff9, 0x9, 0x4, 0x8, 0x7, 0x4, 0xfffff801, 0x2, 0x2, 0xffffffff, 0x1, 0x9, 0x5, 0x81, 0xb88, 0x7, 0x80000000, 0x10000, 0x86a, 0x3, 0x200, 0xdbb8, 0x86, 0x10, 0x3, 0xfffffff8, 0x415c, 0xe, 0x1, 0xc9d, 0x6, 0x7, 0x3, 0x52, 0x3, 0x67, 0x1, 0x5, 0x6, 0x3, 0x8, 0x3c, 0x3ff, 0x40, 0x1000, 0x5, 0x1, 0xffffffff, 0x0, 0x3, 0x8, 0x1, 0x10, 0xf66, 0x200, 0xf1, 0xf399, 0x1, 0x4, 0x4, 0x9, 0x2, 0x7, 0x1ff, 0x8, 0x268d, 0x1, 0x2, 0x4, 0x0, 0xfff, 0x3, 0x8, 0x5, 0x2717, 0x9, 0x9000000, 0x1987, 0x7, 0xf, 0x1, 0x10, 0x3, 0x8, 0x1, 0xbac8, 0x8, 0xb, 0x3, 0xffffffff, 0x8000, 0x2, 0x5, 0x2, 0x4, 0x4, 0xb8a, 0x1, 0x1, 0x0, 0x5, 0x1, 0x0, 0x1, 0x428, 0x8, 0x3f, 0x101, 0x3, 0x1fccdd3d, 0x9, 0x1, 0x1, 0x10001, 0x39, 0x46b, 0x8, 0xb3c, 0x5, 0x9, 0x5, 0x3, 0x3, 0x7, 0x10, 0x0, 0x101, 0x8, 0xfffffc01, 0x25, 0x80000001, 0xff, 0x0, 0x9, 0x51, 0x0, 0x7, 0x3ff, 0xfffeffff, 0x2f0, 0x7f, 0x4, 0x100, 0x3, 0x87c, 0x8, 0x4, 0xb89f, 0xd, 0x2, 0x9, 0x1, 0x9, 0x4, 0x1, 0x1f4, 0x800, 0x7, 0x7fffffff, 0x8, 0x3, 0x101, 0x80, 0x7fffffff, 0x6, 0x5, 0xb6d, 0x5, 0xffffffff, 0x7f, 0xab, 0xe9, 0x401, 0x2, 0xc9, 0x2, 0x5, 0x7fffffff, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x5, 0x17f, 0x2, 0x5, {0xf, 0x1, 0x1, 0x6, 0x8, 0x8}, {0xff, 0x0, 0x0, 0x4, 0x8c, 0x9}, 0xbe, 0x5, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x0, 0xf9e, 0xffffffff, 0x8, 0x3, 0x8, 0x3f3c, 0xfffffffd, 0xffffaa05, 0xc851, 0x727f, 0x7ff, 0x7, 0x0, 0x2, 0x4, 0x3, 0x6, 0x8, 0x8, 0x4, 0x4, 0x1, 0x480000, 0x8001, 0xffffffff, 0x9, 0xd3fd, 0x800, 0x7fffffff, 0xfff, 0x80000000, 0x9, 0x5, 0x2205, 0xfffffff2, 0x8000, 0x5, 0x5, 0x3ff, 0x5, 0x4, 0x0, 0x4, 0x7, 0x7fffffff, 0xfffffc15, 0x15, 0xf89e, 0x6, 0x4, 0x4, 0x33f5, 0xf, 0xd44, 0x0, 0x48, 0x1, 0x80000001, 0xd1, 0xc98d, 0x400, 0x8, 0x31, 0x6, 0x8, 0x577d, 0xd0, 0x10001, 0x4, 0x40, 0x1, 0x7, 0x6, 0x0, 0x6, 0xffffffff, 0x650b, 0x8, 0x7fff, 0xff, 0xf, 0xfffffffa, 0x7ff, 0x8, 0x6, 0x16, 0xa94, 0x3, 0x1, 0x7, 0x97c, 0x8, 0x4, 0x7ff, 0x2, 0x52633d02, 0x4, 0x1, 0x6, 0x40, 0x3, 0x8000, 0x3, 0x7, 0x5, 0xfffffeff, 0x80000000, 0x5, 0x1, 0x0, 0x6, 0x2f3, 0x62, 0x8, 0x1ff, 0x2, 0x0, 0x6b9, 0x8000, 0x7fff, 0x5, 0x10, 0xffff, 0x3, 0x9, 0x2, 0x3, 0x0, 0x1000, 0x8, 0x80000000, 0x5, 0x10000, 0x30000, 0x5, 0x9, 0x1, 0x10000, 0x9, 0x5, 0x8, 0xb4, 0x3, 0x7fffffff, 0x5, 0xa27, 0x7, 0x2, 0x2, 0x80000001, 0x8, 0xe, 0x4, 0x75, 0x0, 0x9, 0x4, 0x7fff, 0x40, 0xc, 0x3, 0x0, 0x101, 0x9, 0x1, 0x4, 0x8, 0x5, 0x4, 0x7, 0x1, 0x3, 0xc, 0x5, 0x7, 0x10, 0xfffffff7, 0x340, 0x40, 0x6, 0xf, 0x5, 0x0, 0x3, 0x3, 0x3, 0x9, 0x7, 0x9, 0x8, 0x57, 0x7ff, 0x10000, 0x44ff, 0x3, 0x1, 0x2, 0x5, 0x703, 0x200, 0x0, 0x6, 0x5, 0x8, 0x5, 0x8, 0x9, 0x401, 0x3, 0xfffffffb, 0x6, 0x1, 0x80, 0x5779, 0x5, 0x1368, 0xe2f, 0x3, 0xb, 0x0, 0x3e, 0x9, 0x3, 0x2, 0x3, 0x9, 0x8ef, 0x700000, 0x9, 0xffffffff, 0xfffffffb, 0x6, 0x80000000, 0xa10, 0x8, 0x5, 0x200, 0x101, 0x6, 0x2, 0x7, 0xe5, 0x800, 0x101, 0x4, 0x0, 0x1, 0x9, 0x755176cb, 0x4, 0x5, 0x6, 0x4, 0x3]}]}, @TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_EMATCHES={0x2d4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xffff, 0x3, 0x6}, {0x4, 0x4, 0xa, 0x3}}}, @TCF_EM_META={0x48, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x28, 0x3, [@TCF_META_TYPE_VAR="02db77feed14a1ad", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="08d2e83e2667eaa73e", @TCF_META_TYPE_VAR="24748f6e3ffe44", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR="03fc7a72"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xa, 0x7, 0x2}, {0x4215, 0x3}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x194, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3e3, 0x7, 0x1}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0x8, 0x9, 0xf}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0xffb7}, {0x1, 0x5, 0xffffffc0, 0x401}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x4}, {0x0, 0x5}}}, @TCF_EM_IPT={0x18, 0x1, 0x0, 0x0, {{0x1, 0x9, 0xfff}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xffff, 0x7, 0x5}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xa8, 0x2, 0x0, 0x0, {{0x7f}, "165c77ccba7e675fe49eed410a2e2e4716cd407fc646343209513d7b325d42fc02d6aa9f50d053fe7e5713fa7437ad6fba8569fd1385de57a7f6190470b34ecd7309585e09484f2becc072983f084f6d72fef9a22e5851e647e7f67ee29ff9ad5e2c410f1584f651e20d1c969f9078006c1f7e0c1be07036c4b645cdf008702944ad88fccd7e74190d1ecd2c96686681e5f4ce44b18cb830c19593ff"}}, @TCF_EM_IPT={0x3c, 0x2, 0x0, 0x0, {{0x2326, 0x9, 0x6000}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x1ff}, {0x80000000, 0x3, 0x8479, 0x1, 0x3}}}]}, @TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x349, 0x2, 0x2}, {0x514, 0x4, 0x2, "165a2c3e"}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x9}, {0x8, 0x1, 0x0, '!'}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x800, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x6}, {0x7, 0x9d}}}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xf41a, 0x2, 0x185}, {0x6, 0x5, 0x1, "3d4984b771"}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x401, 0x2, 0x720}, {0xb, 0x7, 0x0, "323634776728e3"}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x10}, {0x7, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xb, 0x1, 0x4}, {0x1, 0xfffffff8, 0x4, 0x4, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd}}]}, @TCA_CGROUP_POLICE={0x1470, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}, @TCA_POLICE_RATE={0x404, 0x2, [0x7b, 0x9, 0x1, 0xdc8, 0x2, 0x2, 0x8, 0x0, 0x5, 0x200, 0x1000, 0xb5, 0xf14, 0x0, 0x4, 0x5b, 0x8, 0x2, 0x0, 0x29e7, 0x4, 0x4, 0x6, 0x3, 0x9, 0x0, 0x4, 0x9, 0x0, 0x81, 0x0, 0x1, 0x6, 0x5, 0xb, 0x8, 0x200, 0xffffff80, 0x2, 0xfffffff8, 0xfffffffa, 0x4e, 0x130, 0xc65, 0x7, 0x9, 0x9, 0x2, 0x1, 0x6, 0x2141, 0x8, 0x4, 0x4, 0x100, 0x5, 0x3, 0xf, 0x9d81, 0x6, 0x5, 0x0, 0x3a, 0x1, 0xfff, 0x5, 0x634, 0x1, 0x0, 0x6ae5, 0x2, 0x5, 0x10001, 0x75, 0x81, 0xfffffff9, 0x5, 0xfffffffd, 0xc10d, 0x101, 0x7, 0xfff, 0x3fc, 0x7, 0x8001, 0x1, 0x80000000, 0x9, 0x2, 0x7f, 0xb, 0x3, 0x2, 0x8, 0x200, 0xfffffc00, 0x172, 0x80000000, 0x0, 0x0, 0xe80, 0x7, 0x3ff, 0xea4, 0xa, 0xfffffe01, 0x8, 0x3, 0x8, 0xa47, 0x0, 0x5f99, 0x7, 0x2, 0x8001, 0x4, 0x8, 0x9, 0x1, 0xe36, 0xba, 0x0, 0x6, 0x7, 0x5, 0x0, 0x9, 0x7, 0x8001, 0x0, 0x0, 0x9, 0x800, 0xaf8e, 0xffffffc6, 0x2e, 0x5, 0x3, 0x81e4, 0x325, 0x3, 0x10, 0xfd0, 0x2, 0x2, 0x4, 0x2, 0x5, 0x2, 0x2, 0xffff, 0x2, 0x1, 0x255c, 0x4, 0x5, 0xc, 0x80000000, 0x80000000, 0x7, 0x0, 0x100, 0x1f, 0x7002, 0x5, 0xee, 0xe, 0xa59, 0x4, 0x9, 0x401, 0x200, 0x5, 0x6, 0x3, 0x7, 0x35b, 0x8000, 0xc, 0x2d459b57, 0x10000, 0xa62, 0x6, 0x7, 0x7cd, 0x6, 0xe54, 0x4, 0x7, 0xfffffffa, 0x2, 0x4, 0x5, 0x52e7, 0x2, 0x47, 0xf65, 0xffffffff, 0x4, 0x680, 0x0, 0x3, 0x8, 0x4f, 0x5, 0x80000001, 0x80, 0x0, 0x1ff, 0x7, 0x4, 0x9, 0xfffffe01, 0x0, 0x2, 0x1, 0x6, 0x80000001, 0x4, 0x5, 0x81, 0x2, 0xffffffff, 0x1, 0x40, 0x4, 0x200, 0x8, 0x1, 0x6, 0xe, 0x8, 0x4, 0x5, 0xfff, 0x9, 0x1, 0x0, 0x80, 0x1000, 0xfffff80d, 0x6, 0x8, 0x3, 0xfffffffc, 0x1, 0x7c, 0x3ff, 0x5b7924ef, 0xd104, 0x6, 0x0, 0x1, 0x7, 0x136, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x0, 0x8, 0x81, 0xa, 0xdc, 0x7, 0x9, 0x6, 0xfffffffa, 0x1, 0x4, 0xfffffffe, 0x10001, 0x8, 0x7, 0x9, 0xe, 0xff, 0x3, 0x7fffffff, 0x3, 0x1, 0x4, 0xc0, 0x3, 0x7, 0x8, 0x100, 0x3, 0x9, 0x8, 0x9, 0x5, 0x6, 0x6, 0x6, 0x1, 0x5, 0x6, 0x2, 0x1, 0x7c, 0x7, 0x6, 0x7, 0x2, 0x75, 0xffffff8a, 0x0, 0x9, 0x8000, 0x400, 0x9, 0x200, 0x2, 0xa, 0x2, 0xa4e, 0x40, 0x2, 0x0, 0x9, 0x4, 0xfff, 0x5, 0x200, 0x7, 0x6, 0x0, 0x4, 0x2, 0x1, 0x1, 0x6, 0x8, 0x5, 0x3, 0x2, 0x8, 0x0, 0x39f7bc20, 0x8, 0x6, 0x9, 0x81, 0x2, 0x431, 0xb5, 0x200, 0x9, 0xff, 0x8, 0x92, 0x5, 0x75b, 0x1, 0x200, 0x1ff, 0x3, 0x3, 0x81, 0x7, 0x3ff, 0x10200, 0x800, 0x84, 0xa660, 0x3, 0x3, 0xfffffffe, 0x40, 0x4, 0x2, 0x2, 0x1, 0x3, 0x7eb, 0x7, 0x1, 0x1, 0x81, 0x5, 0xbb, 0x40, 0x6, 0xffffffff, 0x3, 0xe, 0x9, 0x4, 0x7ff, 0x4, 0x70000000, 0x9, 0x7ff, 0x3, 0xbf, 0x4, 0x4, 0x3, 0x401, 0x2, 0x1ff, 0x40, 0x101, 0x80000001, 0x9c, 0xde8, 0x0, 0x10000, 0x9b, 0x0, 0x2, 0x2, 0x100, 0x0, 0xa, 0x7ff, 0x1, 0x8, 0x7fffffff, 0x0, 0x3, 0x7, 0x2, 0x3, 0x2000, 0x80000001, 0xe2a0, 0x800, 0xac5, 0x6, 0x9, 0x539, 0x8, 0x3, 0x0, 0x4568, 0x80, 0xe5, 0x80, 0x7fffffff, 0x1, 0x100, 0x0, 0x10, 0x7ff, 0x4, 0x12, 0x6, 0x5, 0x5c63, 0x4, 0x64, 0x4, 0x1, 0x61, 0x4, 0x10, 0x36, 0xffffffff, 0x6, 0xfb6, 0x0, 0x9, 0xa081, 0x3, 0x43e, 0x2, 0x7, 0x4, 0xfffffff8, 0x8000, 0x7, 0xffff, 0x10001, 0x6, 0xc, 0x4, 0xffff, 0x0, 0x3, 0x5, 0x7, 0x10001, 0x8001, 0xb, 0x2, 0x0, 0xf, 0x6, 0x6, 0x1ff, 0x0, 0x80000001, 0x6, 0x6, 0x3, 0x9, 0xb, 0xb, 0xf, 0xffffffff, 0xcdc, 0x9, 0x829b, 0x8, 0x1, 0x8, 0x129, 0x2, 0x93d8, 0x774d, 0x9, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x0, 0x2, 0x800, 0xfd1, 0x0, 0xa928, 0x1, 0x0, 0x6, 0x4, 0x2d90, 0x6, 0xff, 0xfff, 0x7, 0x0, 0x0, 0x0, 0x9, 0x6, 0x4, 0x1f4, 0xfffffff7, 0xb, 0xb, 0xfffffff9, 0x0, 0x2, 0x2, 0x101, 0x6, 0x3, 0x5, 0x6, 0x100, 0xd1, 0xffffffff, 0x80, 0x6, 0xfffffffa, 0x10000, 0x5, 0x7fff, 0x5, 0x8, 0x4, 0x5, 0x22a, 0x5, 0x8, 0xffff0001, 0x2f, 0x2000, 0xfffffffb, 0x0, 0x1, 0xd, 0x3, 0x9, 0x2c5d, 0x8, 0x2d, 0x8, 0xfffffc4c, 0x5, 0x3, 0xff, 0x6, 0x6, 0xd, 0x6, 0x6, 0x5, 0x5, 0x1, 0x8, 0x9, 0x2c6, 0x9, 0x3, 0x401, 0x7, 0x9, 0x2, 0x7, 0x1, 0xb7, 0xfffffff8, 0x6, 0x40, 0x401, 0x8, 0x4, 0x9, 0x80000000, 0x5, 0xfffff000, 0x5b, 0x7ff, 0x2, 0x9ea, 0x4, 0xc, 0xff, 0x97, 0xa3c7, 0x6, 0x0, 0xf, 0x5, 0x6, 0x6, 0x9, 0x5, 0x200, 0x800, 0xb9, 0x5, 0x101, 0x4, 0x1, 0x5f, 0x2, 0x3, 0x1000, 0x8f34, 0x7, 0x5, 0x2, 0x8, 0x3, 0x5, 0x8, 0x9, 0x80000000, 0x64ea, 0x1, 0x4, 0x5, 0x6, 0xe, 0x8, 0x6, 0x7, 0x44e2b63, 0x1, 0x40, 0x3, 0x9, 0xa5a7, 0x2, 0x0, 0x7, 0x8, 0xf87e, 0x30cd, 0x34, 0x1ff, 0x5, 0xac, 0x1, 0x6, 0x803, 0x1, 0xcec2, 0x7, 0x0, 0x9e, 0x9, 0x80, 0x8, 0x7, 0x5, 0x9, 0x0, 0x6a, 0x8000, 0x5, 0x7fffffff, 0x7, 0x5, 0x2, 0xf, 0xfffffffd, 0x3, 0x5, 0xb, 0xfffffffb, 0x4, 0x2, 0x74b, 0x3, 0xc5a1, 0xa24, 0x6, 0xb, 0xf1b, 0x7fffffff, 0x80000001, 0xfffffffd, 0xffff8001, 0x6, 0x100, 0x1, 0xa, 0xffffff69, 0x7, 0x4, 0x5, 0x7ff, 0x4, 0x1800, 0x0, 0xff, 0x8, 0x10, 0x2616, 0x800, 0x101, 0x9, 0x3, 0x2, 0x3, 0x53, 0x6, 0xfff, 0x8, 0xac, 0xf0, 0x9, 0x0, 0x7512, 0x6, 0x10, 0x3, 0x10, 0x200, 0x0, 0xd71, 0x5, 0x7, 0x18000, 0x5, 0x7, 0x8, 0x8, 0x7, 0x7, 0x2, 0x8bbd, 0xae7, 0x7, 0x3ff, 0x100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0x4, 0x8, 0x2, {0x2, 0x1, 0x6, 0x1d9, 0x4, 0x7ff}, {0x7, 0x2, 0x2, 0x200, 0x8, 0x9}, 0x8, 0x400000, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfffff000, 0x3, 0x9, 0x0, 0x2, 0xd, 0x2, 0x8, 0x0, 0x40, 0xc24d, 0x400, 0xffffff01, 0x4, 0x7, 0x1, 0x8, 0x1, 0x800, 0x70, 0x7, 0x8, 0x81, 0x6, 0x7fff, 0x5, 0x5, 0x6, 0x7, 0x2, 0x4, 0xfffffff4, 0x0, 0x800, 0x5, 0x3, 0x2, 0x1, 0x5, 0xd7e9, 0x8, 0x4, 0x3, 0x1, 0x1, 0xd0, 0x1000, 0xfff, 0x3, 0x7, 0xca, 0x2, 0xfff, 0x8, 0xf, 0xffffffff, 0x3, 0x7, 0x0, 0xc0000000, 0x7, 0x10001, 0x7, 0x0, 0x9, 0x8, 0x6, 0x2, 0xa, 0x8, 0x2, 0xc, 0x9, 0x7, 0xffff8000, 0x4, 0x8, 0x7, 0x4, 0xfffffffa, 0xffffff96, 0x0, 0x4, 0x2, 0x7, 0x8001, 0x8, 0x0, 0x9, 0xe64a, 0x5, 0x6, 0xffffffd1, 0x8c, 0x5, 0xff, 0x6, 0xe1, 0x203, 0xfffeffff, 0x5, 0x4, 0x5, 0x2, 0x24a, 0x1, 0x10000, 0xfff, 0x9, 0x18c0, 0xe, 0x2eec, 0xaa4c, 0x6, 0x10001, 0x7, 0x4, 0x1, 0x0, 0x1, 0x6, 0x9, 0x200, 0x940b, 0x9, 0xffffffff, 0x5, 0x9, 0x6, 0x5147, 0x94df, 0xfffffff8, 0x6ef, 0x3, 0x800, 0x6, 0x9, 0x3, 0x4, 0x6, 0x4, 0x8, 0x2, 0x9, 0xfffffff8, 0x0, 0x456, 0x81, 0x8, 0xfffffff7, 0x2, 0x1, 0x0, 0x1, 0x1, 0x7af, 0x6, 0x66839548, 0x1, 0x9, 0x2, 0x10, 0xe0000000, 0x101, 0x1, 0x7, 0x6, 0x10000, 0x2, 0x9, 0x7, 0x0, 0x80, 0xfffffff8, 0x7f, 0x1, 0x2, 0x8, 0x2, 0x7, 0x0, 0xf, 0x3, 0x5, 0xffff, 0x8, 0x81, 0x0, 0x5, 0x9, 0x7, 0x6, 0x0, 0xf, 0x1000, 0x9f24, 0x5, 0x5, 0x200, 0x4, 0x2000000, 0x3, 0x1, 0x5, 0x120000, 0x1, 0x4, 0x7, 0x2, 0x6, 0x5, 0x2, 0xfffffffb, 0x1000, 0x6, 0xffffffff, 0x7b3e, 0x0, 0x200, 0xf7, 0xa, 0x18, 0xab9, 0x6, 0x5, 0x0, 0x10001, 0xc3b, 0x0, 0xb008, 0x800, 0xfffffd95, 0x4, 0x3, 0x3, 0x51, 0x8, 0x1000, 0x662, 0x5, 0x2, 0x0, 0x5, 0x7, 0x0, 0x200, 0xee, 0x4, 0x2, 0xa4e, 0x4, 0x4, 0x800, 0x8, 0x1000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x958, 0x0, 0x8000, 0x1, 0x5, 0x8c0, 0xffff0000, 0x2, 0x6, 0x87, 0x0, 0x0, 0x722, 0xffffffff, 0xd, 0x8, 0xfffffffb, 0x2, 0xa5, 0x4, 0x80000000, 0x0, 0x8, 0x80000000, 0x6, 0x8, 0x0, 0x7, 0xfffffffe, 0x7, 0x0, 0x4, 0x2, 0x0, 0x7f, 0x0, 0x6, 0x10000, 0x8, 0xafe, 0x8, 0x4, 0x7, 0x20000000, 0x5, 0x200800, 0x1, 0x1ed, 0x2, 0x1, 0x3, 0x9, 0x3, 0x101, 0x9, 0xfffff800, 0x9, 0xd, 0xfe, 0x2, 0xb, 0x10001, 0x9, 0x0, 0x0, 0x6, 0x9, 0x0, 0x100, 0x1000, 0xf, 0x9, 0x5, 0x7f, 0x7, 0x3, 0x3, 0x2, 0xfffffffe, 0x80000000, 0xfffffff9, 0x4, 0x6, 0x9, 0x7f, 0x32, 0x6, 0x3, 0x0, 0x7, 0x8001, 0x2, 0x8, 0xffff, 0xfffffffb, 0x800, 0x512, 0x8a, 0x2, 0x0, 0x1, 0xa, 0x80000000, 0xd517, 0x0, 0xfffffffc, 0x9, 0x8, 0x5, 0xf6, 0x9d, 0x0, 0x10000, 0xfffff42f, 0x10001, 0x7, 0x9, 0x1, 0x3, 0x8, 0x9, 0x739, 0x1, 0x0, 0x20, 0x8, 0x60000000, 0x2, 0xffffff95, 0x8, 0x8, 0x3, 0x5d81, 0x7fffffff, 0x3, 0x6, 0x5, 0x81, 0xfff, 0x40, 0x7fff, 0x6, 0x100, 0x9, 0xffffffff, 0x4, 0x1000, 0x1, 0x8, 0x0, 0xcf, 0x2, 0x3, 0x4, 0xf, 0x7ff, 0xf, 0x6, 0x5, 0x7f, 0x2, 0x40000000, 0x3ff, 0xb, 0x3e86, 0x6, 0x7, 0xb, 0x0, 0x8, 0x1f5, 0x4, 0x5, 0xfffffd3c, 0xff, 0xd, 0x0, 0xffffffff, 0x3, 0x4, 0xc38, 0x2, 0x2, 0x5, 0xfff, 0x4, 0x0, 0x18000, 0x80000000, 0xda7, 0x4, 0x9, 0x200, 0x3, 0x80000001, 0x8000, 0x6, 0x4, 0x4, 0x0, 0x306, 0x2, 0x0, 0x0, 0xc1, 0x9, 0x2, 0xb, 0x7ff, 0x80000001, 0x8, 0x3, 0x2, 0x4, 0x9cde, 0xf97, 0x1, 0xffffffc0, 0xffff, 0x8, 0x5, 0x401, 0x0, 0x7f, 0x4b62, 0xef, 0x9, 0x98, 0x6d, 0x40, 0x80000001, 0xfffffffe, 0x8000, 0x1, 0x7, 0xcae, 0x27, 0x9, 0x81, 0x7, 0x800, 0x8000, 0x0, 0x6, 0x7c, 0x8, 0x8, 0x7, 0x7, 0x3, 0x200, 0x7, 0x1, 0x7, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffa}]}, @TCA_CGROUP_POLICE={0x468, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x101}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8, 0x1, 0x1, 0x8, 0x2, 0x10000, 0x2, 0x9, 0x10000, 0xbf7, 0x800, 0xfffffffe, 0x1000, 0x2, 0x1, 0x0, 0x4, 0x8000, 0x9, 0xfff, 0x3, 0x407, 0x5, 0x7, 0x4, 0x2e, 0x1, 0x0, 0x86, 0x4, 0xfffffff9, 0x7ff, 0x0, 0x8, 0x80000000, 0x0, 0x7, 0x200, 0x1000, 0x200, 0x4, 0x8, 0xc1df, 0x3, 0xfffffff9, 0x3ff, 0x5, 0x7, 0x6, 0x3, 0x9, 0x3, 0x1, 0x1, 0x6d6ad700, 0xe8, 0x2, 0x2, 0x9, 0x1, 0x10000, 0x2a607710, 0xfffffff7, 0x0, 0xffd1, 0x2, 0xee, 0x8, 0x0, 0x5, 0x2, 0x69a, 0x3, 0x47d51252, 0x2, 0x7, 0x7fffffff, 0x3, 0x8b6, 0xfff, 0xfe000000, 0xfffffff1, 0xffffffff, 0xf77, 0x5, 0x3, 0x1, 0x8, 0x8, 0x5, 0x3, 0x8, 0x200, 0x9, 0x6, 0x1f, 0x8fdd, 0xfffffffd, 0x10000, 0x9, 0x4, 0x3, 0x279, 0x7, 0xfffffff8, 0x88f7, 0x5, 0x7, 0x2, 0x7, 0x1, 0x7, 0x9f5f, 0x7fff, 0xfffffffc, 0x6f0, 0xfffffffa, 0x1, 0x6, 0x473f675d, 0x911f, 0x1d6451e9, 0x4, 0x0, 0x1, 0xb83, 0x8, 0x4, 0x0, 0x9, 0x8, 0x1ff, 0x8, 0x6, 0x3, 0x2, 0x0, 0x7fffffff, 0x6, 0xe6, 0x0, 0x80000000, 0x9, 0x0, 0x34f, 0x5, 0x8, 0xf, 0x6, 0x5, 0xf7, 0x0, 0x3f8e, 0x0, 0xfff, 0x10001, 0x7, 0x1, 0xfffffff5, 0x2, 0x3, 0x1d, 0xff, 0x4, 0x7ff, 0x7, 0x10001, 0x5, 0x1, 0x9, 0x2, 0x7ff, 0xcad, 0x1, 0x5, 0x76ec, 0x4, 0x8, 0xf, 0x1, 0x6, 0xb, 0x9, 0x5, 0x4b3a, 0x0, 0x0, 0x5b9, 0x7, 0x7fffffff, 0x4800, 0xaf64, 0x6, 0x8, 0x9, 0xff, 0x5, 0x81, 0x80000001, 0x80, 0x9, 0x4, 0x80000000, 0x0, 0x1, 0xffff, 0x3, 0x7ec2, 0x6, 0xfffffffa, 0x5000000, 0x5, 0x1, 0x6, 0x6, 0x0, 0xb, 0x2, 0xc4, 0xfffff90a, 0x8, 0x4, 0x92, 0x6b9, 0x6, 0x8001, 0x7, 0xffffd26b, 0x2, 0x0, 0x2, 0x9, 0x1000, 0xd, 0x800, 0x2, 0xd, 0x0, 0x7, 0x3, 0x6, 0x9, 0x2, 0x0, 0xfffffeff, 0xc, 0x6908, 0x4, 0x1, 0x200000, 0xb2d, 0x6, 0x2, 0x7ff, 0x400]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5e43d6bc}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x592bb5aa, 0x8, 0x3, 0xf7, 0x0, {0x1, 0x0, 0x5, 0xd4d, 0x7, 0x5}, {0xc, 0x1, 0x5, 0x0, 0x3, 0x8}, 0x1, 0x8, 0x8000}}]}, @TCA_CGROUP_POLICE={0x818, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xfff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf6f, 0x5, 0x1000, 0x5, 0x4, 0x6, 0x4, 0xfce, 0xffff, 0x9, 0x7, 0xb41d, 0x1, 0x0, 0x2, 0xd10e, 0x8000, 0x70f, 0x3, 0x9, 0xa2b, 0x6, 0x5, 0xffffffff, 0x9, 0x7, 0x4, 0x2, 0x8, 0x3, 0x6, 0x8, 0x10001, 0x9, 0x8, 0x6, 0x0, 0x2, 0x10000, 0x0, 0x6, 0x9, 0x7, 0x3, 0x8, 0x401, 0x1216, 0x6, 0x3, 0x4, 0x8, 0x9, 0x9, 0x9, 0xc, 0x3, 0xfffffa88, 0x5, 0x4, 0x4, 0x3, 0x7, 0xa, 0x9, 0xc, 0xa2c6, 0xd321, 0x1000, 0x3, 0x2, 0x2f48, 0x1167, 0x9, 0x600, 0x1000, 0xfff, 0x5, 0xf, 0x0, 0x9, 0x8, 0x9, 0x1, 0x7, 0x4, 0xfffffff9, 0x3a, 0x3, 0xc5, 0x100, 0x0, 0x9, 0x92, 0x5, 0x0, 0x9, 0xabc2, 0x7f, 0x1, 0xe4, 0x80000001, 0x80, 0xfa3, 0xffff69e4, 0x3, 0x1, 0x8, 0x6, 0x3, 0xfffffffd, 0x9, 0x401, 0x7, 0x4, 0xd0f, 0x100, 0x1, 0x5, 0x6, 0x7, 0x1, 0x4, 0x7, 0x9, 0x6, 0x419d, 0x4, 0x2, 0x6, 0x5, 0x9, 0x0, 0x400, 0x8c, 0x1, 0x1, 0x4, 0x6, 0x4, 0xb4c7, 0x39, 0x208, 0x4, 0x2, 0x8, 0x5, 0x5eb, 0x1, 0x8, 0x5, 0xbd9, 0x7, 0x6, 0x3, 0x2, 0x100, 0x3, 0x200, 0x9, 0x0, 0x800, 0x0, 0x80, 0x5, 0x0, 0x81, 0xe, 0x0, 0x1f23, 0x5, 0x3ff, 0x6, 0xd7b7, 0x6, 0x7f, 0x7, 0x8, 0x8, 0x2, 0x5, 0x1, 0x40, 0x80000000, 0x7, 0x61ee, 0xe, 0xfffffff8, 0x6, 0x40, 0x2, 0x5, 0x80000001, 0x7fffffff, 0xf, 0x1000, 0x7, 0xc720, 0x2, 0x9, 0xe, 0x3, 0x9, 0x9, 0xc, 0x6, 0x0, 0x8, 0x2, 0x7, 0x3, 0x0, 0x7, 0xdfe1, 0x8000, 0xfffff8f8, 0x4, 0x4, 0x6, 0x89, 0x2, 0x1, 0x3f800000, 0x4, 0xfff, 0x6, 0x1, 0x9, 0xd, 0x1, 0x9, 0xfffffff2, 0x10000, 0x1, 0x9, 0x3, 0x3, 0x7, 0x95, 0x6447, 0xfffffffb, 0x4, 0x2, 0x7ff, 0xffffff37, 0x9, 0x1d, 0x5, 0x0, 0xfffff75a, 0x81, 0x3, 0x80, 0x6048, 0x7, 0x0, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x1, 0x8001, 0xe679, 0x8, 0xf4, 0x1, 0x3ff, 0xe, 0xfffffffc, 0x200, 0xce40, 0x2, 0x3, 0x49, 0x3ff, 0x8001, 0xbad9, 0x1, 0x84, 0x800, 0x0, 0x0, 0x0, 0x823e4a7, 0x7, 0x2, 0xfffffffa, 0x87e, 0x4, 0x4a8b, 0xe, 0x2, 0x9, 0x7, 0x4, 0x5, 0x77a, 0x2, 0x96, 0xb25, 0x7fffffff, 0x6, 0x1, 0x80000000, 0x2, 0x1, 0x6, 0x6, 0x0, 0x6b6c, 0x4, 0xffff, 0x65f, 0x6, 0x1, 0x3, 0x2, 0x4, 0xc9f1, 0x3, 0xce, 0x0, 0x81, 0xd3b, 0xffffffff, 0x88, 0x7, 0x4aa, 0x7, 0x9, 0x6, 0x44472ca6, 0xc, 0x3, 0x93a, 0x8, 0xfb3, 0x3, 0x9, 0x5, 0x8, 0x8, 0x0, 0xa, 0x3, 0x8, 0xfffffffd, 0x6, 0x823c, 0x8, 0x7, 0xfffffffc, 0x80000001, 0x9, 0x9, 0x7, 0x7a, 0x7, 0x6, 0xb28, 0x6, 0x9, 0x6, 0x6, 0xf1e, 0x2, 0x7fff, 0xc, 0x4e9, 0x9, 0x3, 0x8, 0xff, 0x1, 0x7, 0x6, 0x8000, 0x4, 0x9, 0xc, 0x6, 0xc543, 0xffffffff, 0x91, 0xeb, 0x1, 0x1, 0xfffffff1, 0xc, 0x3ff, 0xfffffe01, 0x2a7, 0x3, 0x2, 0x25, 0x2, 0x6, 0x3, 0x500000, 0x8, 0x0, 0x7, 0xfffffffd, 0xfffffeff, 0x2, 0x80000000, 0x8001, 0x101, 0x1, 0x4, 0x8, 0x80000001, 0xfffffff9, 0xc, 0xd, 0x8, 0x0, 0xf, 0x6, 0x4, 0x8dfe, 0x7, 0x4, 0x7f, 0x6, 0x4, 0x0, 0x62f, 0x7, 0x2, 0x0, 0x0, 0xa, 0x9, 0x5, 0x9, 0x1827, 0x1, 0x3, 0x10000, 0xacf7, 0x6, 0x8000, 0x9, 0x5, 0xe, 0xb9, 0x6, 0xef9a, 0x10000, 0x200, 0x80000001, 0x6, 0x10000, 0x8000, 0x1, 0x0, 0xe, 0xcdc, 0x25af, 0x10001, 0x81, 0xa, 0x3, 0x81, 0x3, 0xbb7, 0x9, 0x9, 0x6e98, 0x2, 0x0, 0xfffffffb, 0x9, 0x9, 0x81e, 0x50b7, 0x9, 0x3, 0x2, 0x0, 0xffffffff, 0x1, 0x7, 0x7, 0x1, 0x80000001, 0x9, 0x6, 0x6, 0x6, 0x9, 0x8, 0x5, 0x8, 0x8, 0x2, 0x10001, 0x1000, 0xdc5, 0x8, 0x3, 0x3, 0x767d, 0x1, 0x3, 0xfff, 0x3, 0x6, 0x7, 0x7, 0x4, 0x51b1, 0x5, 0x200df176]}]}, @TCA_CGROUP_ACT={0x52c, 0x1, [@m_xt={0x174, 0x4, 0x0, 0x0, {{0x7}, {0xd0, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x434}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x98}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x51, 0x6, {0xef9d, 'mangle\x00', 0x38, 0x1, "05bee9bb8b3c074504bcd08f59899ea3d9ca2566c53400b6160076334165959bf121822c4a59d8"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x7f, 0x6, "dc25a1f0c4fdd61abf4d7ab55c78186fd68f8756a639e8bb2ed1027e4b71adeb3a3e9b39307a7a7e58ccdebd9f8212aef11fe9389e5c3926615f0e1cfb55e20e4120e719de2b68b0a6f0e80348dd82126939138198a2c50133e582994edcd2087cf4f072b9bc2d2e806d17d37914914d612dea47b39e4a67517df5"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x16c, 0xb, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xffffffff, 0x18ca, 0x0, 0x8, 0x3}}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9ad3}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x7ff, 0x10000000, 0xffffa253}}}, @TCA_IFE_DMAC={0xa, 0x3, @random="232878b298b7"}, @TCA_IFE_DMAC={0xa}]}, {0xd5, 0x6, "7a4b0185f6398ca56e452765439e9339cb94349fb1e53d98fb4f9fc8a2a49d6137b4b4d4e2a470e59de69b6dc2cbafae63eb64bb440cfa28a5a54bc36d2bc524ec35513324bd271cdad964b1cc4a8a1d3d8aa95c85d4083215b29028be5fff25bfb6bd6182a0bbe443f55db44feaa84396a8556313f51a4b486a1936f1a92286037e603f7b037e7a49e5d2730bac71e8d58cdb3398301d6ba3a57c738b48190175b1cd318dbf4adb3b4ebf80a9106f67e344c924938491fb3228a46af69f28d09f670e0c123e9cc6de62d822f1a70f34ca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0xe0, 0x1a, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x1, 0x4, 0xfffffff7, 0x2}}]}, {0x9a, 0x6, "5e4a2b3e642bb87521f08f8c9f7ab821852e69305bbce0bb2d6ef213fcb46bdd35ede307b5b9e563e34184f3e8a5437cb9140ed3a6d0d60df9c29c502883b17e9c98c657dbb61774369aa906e9c8afcbb09ec1a96022cd4d7d08df4cf2b0a9767b2aeeb1efc722c73d5a8bf0aed75106709534b98f95ccdb77cf1a27aaf7d8395282de40b25d5c27f01062d239a09ee56fc1b4c85db9"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_xt={0x168, 0xd, 0x0, 0x0, {{0x7}, {0xd0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x56, 0x6, {0x3, 'filter\x00', 0xef, 0x6, "6e227f0ca2619332b58f4873e7782181c8080c5257cae0d88e67612538b083674c285dcf4630157e969034dc"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x71, 0x6, "862b58c7b7e41b9a16b2911b8bae4d22984fdec78725fc3e175f225f1eb9208f7d3e0b48604b3e1c355e053be3614f46b33c4aab9474b26613ff3c4da44b0064808481651a45c0b4e9eacbabfca11494db376efaab186cc81300c8b7b5d2c38758a4b9f1e1ab70a540289c64b2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x910, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x2, 0x2, 0x6, 0xf, {0x7, 0x0, 0xf5, 0x42a, 0x400, 0x1200}, {0x8, 0x0, 0xd, 0x3, 0xffff, 0xb}, 0xb, 0x3, 0xb}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0x9, 0x100000, 0x7, {0xe9, 0x1, 0xcc0, 0x3, 0x5481, 0xc10}, {0x4, 0x2, 0x3ff, 0xff, 0x68, 0x8}, 0x101, 0xd8b8, 0xf3e3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x80000000, 0x101, 0x1, 0x0, 0x71, 0xfffffffa, 0x2, 0x91, 0x8a, 0x5, 0x11ab8465, 0x400, 0x400, 0x0, 0x4, 0xa, 0x40, 0x8000, 0xe39, 0x9, 0x1, 0x2, 0x4359, 0x0, 0x7, 0x101, 0x0, 0x0, 0x2, 0x34, 0x0, 0x0, 0x1ff, 0x3000, 0x400, 0x0, 0x120, 0x20000000, 0x8, 0x7f, 0xba, 0x800, 0x0, 0x5, 0x5, 0x5, 0x3, 0xa, 0x11f0000, 0x5, 0x3, 0x0, 0x4, 0x1, 0x3, 0x3, 0x6, 0x2, 0x7f, 0x4a22, 0x8, 0x100, 0x3, 0xfffffff4, 0x567600da, 0x5, 0x3a, 0x2, 0x2, 0x7fffffff, 0x1, 0x0, 0x0, 0x5, 0x4, 0x46c8, 0x80, 0x2, 0x8, 0x5, 0x1ff, 0x0, 0x7fffffff, 0x3, 0x1, 0x1, 0x8, 0x1, 0x200, 0x0, 0xb, 0x6, 0xfff, 0x1, 0x6b, 0xfffffff8, 0x6, 0x5, 0xebe, 0x1, 0x1, 0x3956, 0xffff1fc8, 0x2, 0xc3, 0x0, 0x100, 0x9, 0x7f, 0xacd5, 0x3, 0x1, 0x1, 0x5, 0x5, 0xaa4, 0x0, 0x1, 0x8001, 0x6, 0x5d, 0x82f8c800, 0x1, 0x26a6, 0x2, 0x22d, 0x1, 0x7205b315, 0x1, 0x0, 0x80, 0x3283, 0xfffffffa, 0x7, 0x7fffffff, 0xfffffff8, 0x3, 0x80, 0x80000000, 0x3ff, 0x5, 0x6, 0x2ee, 0x1, 0x9f, 0x9, 0x7, 0x4, 0x2, 0x1, 0x1, 0x80, 0x4, 0xc, 0x9, 0x10, 0x3, 0x8, 0xf, 0x1, 0x8, 0x8000, 0xfffff7af, 0xa56, 0x80, 0x6, 0x0, 0x5, 0x9, 0x9b, 0x7, 0x7, 0xb8, 0x2, 0x3, 0xffffffff, 0x0, 0xfa, 0x471, 0x3, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80, 0x1ff20ee7, 0x7ff, 0x5, 0x1, 0xbd, 0x7fff, 0x80000000, 0x7, 0x7, 0x3ff, 0xf85, 0x6, 0x0, 0x1ab7, 0xc, 0x3, 0x66, 0x2, 0x9, 0x40, 0x800, 0x2, 0x9, 0xd559, 0x944, 0x2, 0x9, 0x2800000, 0xfffffffc, 0xd, 0x0, 0x8, 0xff36, 0xffffffff, 0x1200, 0x54, 0x10, 0x80000000, 0x7, 0x6, 0x7ff, 0x7, 0x832a, 0x80, 0x1, 0x6, 0x6, 0x7fff, 0x3da18b6b, 0x4, 0x1, 0x2690, 0x1, 0x40, 0x240, 0x8, 0x4, 0x7, 0x1, 0x59, 0xa8, 0xbc13, 0x6, 0x7, 0x0, 0x6e5, 0x160, 0x475a, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x6, 0x6, {0x0, 0x2, 0x5, 0x1, 0x3}, {0x0, 0x2, 0x1, 0x0, 0x3, 0x7}, 0xfff, 0x4cc3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3, 0x2, 0x7, 0x2, 0x7, 0x0, 0xb1, 0x2, 0x5, 0x2, 0x4, 0x9, 0x1000, 0x6, 0x1, 0x2, 0x6, 0x3, 0x8000, 0x140000, 0x5, 0xc764, 0xc2, 0xc, 0x10000000, 0x3, 0x2, 0x3, 0x1, 0x5, 0x7, 0x1ff, 0x81, 0xfd75, 0xa, 0x3, 0x2, 0x5e9d, 0x836, 0x1, 0x3, 0xffffff80, 0x9, 0x1000, 0xb, 0x1, 0x6, 0x3, 0x5, 0x4, 0x62, 0xff, 0x80000000, 0x5, 0x3, 0xd, 0x9, 0x8, 0x1, 0xe6a7, 0x9, 0x1, 0x7f, 0x0, 0x0, 0x5, 0x35ed, 0x4, 0x4, 0x5, 0x3, 0x7, 0x5, 0x80000000, 0x5, 0x9, 0x26f, 0x80000000, 0x7, 0x3c, 0x4, 0x1000, 0x7a, 0xa, 0x9, 0x2, 0x8000, 0x3, 0x642d, 0x2, 0x0, 0x5, 0x33, 0x8, 0x3, 0x140000, 0x8000, 0x5, 0x0, 0x5, 0x8, 0x4, 0x1, 0xeaa, 0x7, 0x2, 0xc, 0x4, 0x101, 0x7f, 0x0, 0x2, 0x8, 0x755, 0x2, 0x9, 0x1000, 0x6, 0x3, 0x101, 0x3, 0x6, 0x1, 0xb45a, 0x7, 0x0, 0x2, 0x5, 0x8, 0xf937, 0x3, 0x7, 0x7, 0x8, 0xee, 0x2, 0x8001, 0x7fffffff, 0x288ff004, 0x9, 0x4, 0xfffffff8, 0x8001, 0x1, 0x60, 0xdba, 0x20, 0x8, 0x4, 0x1347, 0x42, 0x71, 0x7, 0xfffffc00, 0x3, 0x8, 0x8, 0x8c, 0x0, 0x40, 0xffffffff, 0x6, 0x5, 0x7fffffff, 0xfffff001, 0x5, 0x6, 0x0, 0x7ff, 0xa258, 0x3, 0x2, 0x58, 0x1, 0x5d8ba99e, 0xf561, 0x2, 0x2, 0x3854, 0x9c7f, 0x2, 0xffff8983, 0x11f5, 0x431, 0x8000, 0xfffffffd, 0x9, 0x8, 0x9, 0x3, 0x81, 0x100, 0x4515, 0x5, 0x4, 0x1ff, 0x9, 0x80000000, 0x3, 0x2, 0x10001, 0x80, 0x100, 0x200, 0x585, 0xa, 0x9, 0xaf6, 0x7, 0x4, 0x4, 0x7fffffff, 0x200, 0xdf, 0x10000, 0x800, 0x5, 0xc23, 0xfffffff8, 0x4, 0x7, 0x5, 0x88f, 0x6ace6ca5, 0x33f5, 0x92, 0xf1, 0x4, 0x3, 0xda77, 0xa, 0xe6, 0x88b, 0x3, 0x4, 0x3, 0x7ff, 0x7, 0x81, 0x6, 0xffff, 0x7, 0xde, 0x740, 0xde, 0x4, 0x2, 0xffff, 0xe3, 0xb9800, 0x0, 0x7, 0x401, 0x8, 0xd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x20000000, 0x2f16, 0x6f87ab7e, 0x8a54, {0x1, 0x2, 0xfffa, 0x3ff, 0x2, 0x2}, {0x2b, 0x2, 0xa, 0x45, 0x80, 0x6}, 0x6, 0x1c, 0xb086}}]}, @TCA_CGROUP_EMATCHES={0xe8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x100, 0x2, 0xe4f}, {0xfb4, 0x3, 0x0, "2eac64"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8, 0x8, 0x8000}, {0x3, 0x2, 0x6}}}]}, @TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x84, 0x3, 0x0, 0x0, {{0x200, 0x0, 0x3000}, "4fe8179fee373284fcdf72d247565ba004d8853ef37d7e6680969ed00979af0e6086df880ea01184e97667343a785ac774d0fcc1eb23d2c7ce0160cfbcd054138889b623a039c878daae31249543b38f88c454789fc52296eafc433e9015649be11b97dc2910a34d7c328bc5f4769981eb6115a56c"}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7ff, 0x1, 0x6}, {0x4, 0x0, 0x0, 0xc, 0x5, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x6, 0x2, 0x6}, {0x9, 0x5, 0x1, "d74abdfc88"}}}]}]}]}}]}, 0x3f6c}}, 0x24044094) 1.694051688s ago: executing program 5 (id=915): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00180000020800004c001f800a00090069706f69620000003c2002800600030000000000060001000e0000000600020001030001000000060002000000000006000300000000000600010009000000080003000000000000", @ANYRES32=0x0, @ANYBLOB], 0x74}, 0x1, 0xd, 0x0, 0x4000000}, 0x44050) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) 1.557244362s ago: executing program 0 (id=916): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32=0xffffffffffffffff], 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x4004550a, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000700)={0x14, 0x0, 0x0}, &(0x7f0000001000)={0x34, &(0x7f0000000500)=ANY=[@ANYBLOB="0097cd000000bf89f16f99a95538684b13e805ab61855f4107c84d805011ed6e14a663072ff0674519e70c59fb0ac76f4991458d44da77f418c24e507f3c4dba4be54ab29b3af8e962acb6082d40d43a8fbf0219b401f322aae71ed262a1dca49213e0bdea577c4a0b939850e9c6a31c9f1e9d0436331200bfce3235ba2a295bf56faeefe69eb7bc44fce3abb370c8648a35305d42da18f6a7307baf9ec37a46ffdecb22"], &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000380)=ANY=[@ANYRESDEC=r2], &(0x7f0000000f80)={0x20, 0x1, 0x1}, 0x0}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x60044084) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="df1654000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setsig(r0, 0xa, 0x21) r5 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, 0x0) fcntl$getownex(r0, 0x10, 0x0) sendmsg$netlink(r0, &(0x7f0000000340)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x631f99afe7ff17c}, 0x40804) fcntl$setlease(r4, 0x400, 0x0) syz_open_dev$loop(0x0, 0x7, 0x180862) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x82802, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x9, 0x4, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d649b2c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2fbfadee, 0x7]}}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x8, 0xfe2, &(0x7f0000001840)=""/4066, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prctl$PR_GET_FPEXC(0xb, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) 838.605273ms ago: executing program 5 (id=917): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) landlock_create_ruleset(0x0, 0x0, 0x1) syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d00000003000000040000000100000000000000", @ANYRES32=r1], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1000, r3}, 0x38) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x9237, 0x149441) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000001cc0)='1', 0x1, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r7, 0xc00464be, &(0x7f0000000180)={r6}) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001fe, 0x82) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x200, 0x2004, 0x0, 0x400004, 0x0}) close_range(r8, r7, 0x2) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r9, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_int(r9, 0x0, 0x6, &(0x7f0000000280)=0x2, 0x4) recvmmsg(r9, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffece}, 0x8a}], 0x1, 0x10022, 0x0) fadvise64(r4, 0x18, 0x0, 0x3) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000300)={&(0x7f0000000280)=[{0x1000, 0x9010, 0x0, 0x0}, {0x5, 0xc010, 0x0, 0x0}, {0x8, 0x7010, 0x0, 0x0}], 0x3}) 689.100302ms ago: executing program 0 (id=918): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00180000020800004c001f800a00090069706f69620000003c2002800600030000000000060001000e0000000600020001030001000000060002000000000006000300000000000600010009000000080003000000000000", @ANYRES32=0x0, @ANYBLOB], 0x74}, 0x1, 0xd, 0x0, 0x4000000}, 0x44050) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e1e}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_io_uring_setup(0x473b, &(0x7f0000000480)={0x0, 0x9485, 0x10000, 0x0, 0x18b}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r5, 0x0) r6 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)='::,\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) gettid() socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000380000001c0a050000000000000000000200000a0c00034000000000000000020900020073797a32000000000900010073797a30"], 0x8c}}, 0x0) 311.00245ms ago: executing program 3 (id=919): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r1 = epoll_create(0xff9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000080)={0x2, 0x8, 0x8, 0xff76}) write$char_usb(r2, 0x0, 0x0) 90.713207ms ago: executing program 2 (id=920): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000040109021b00010000800009040bfd0133776100090513020004814006"], 0x0) r0 = fsopen(&(0x7f0000000040)='udf\x00', 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000080), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) syz_io_uring_setup(0x1442, &(0x7f0000000980)={0x0, 0xc52a, 0x80, 0x0, 0x0, 0x0, r1}, &(0x7f00000004c0)=0x0, &(0x7f0000000000)=0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000072, 0x0, 0x2b34988d}]}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x67, 0x4004, @fd=r0, 0x1, &(0x7f00000002c0)="bddcd48dbb851fb9697065ec15544733199a5101eeb54a01d6cf3cc26257ea6e3f37f35f23ee33919af63acc8a67532197e8d84ad7c2b91e23641f6b1c72ef9f35ca733d816b7c02a7a6e891cbcf4299b99980151ffd7692688b6d8bc27322cc28d757832fa6672ff1c1862a9394e1a775de2645cb5f70fc39984e4a3b2406479b494b1252e89edabb0563092c6488bd00e74b0b7c43420a30bfa1bb3123d2b002da82d6ee0450c5a76ad8f63dfb69e5eb7d2cb9fa00a2905473e502e2413b1f8e895f3205ba703450b1884498bf41bc10fd945fa5ed0e55098c7cd1298ab264e10db5d07c5f25eeb15d83218f269be2c0502a345d0ce6596fea987e88b3", 0xfe, 0x8, 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00'}) 0s ago: executing program 3 (id=921): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x400, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000280)={[0xf000, 0x54000, 0x5000, 0x100000], 0x0, 0x10, 0xfffffffffffffeff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x104000) kernel console output (not intermixed with test programs): 918] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 246.061410][ T5918] input input34: Timeout waiting for response from device. [ 246.077316][ T5918] usb 2-1: USB disconnect, device number 32 [ 246.155577][ T6016] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 246.173553][ T8416] kvm: emulating exchange as write [ 246.185904][ T6016] usb 3-1: device descriptor read/8, error -71 [ 246.225551][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 246.240443][ T8419] netlink: 24 bytes leftover after parsing attributes in process `syz.5.623'. [ 246.250225][ T8419] netlink: 60 bytes leftover after parsing attributes in process `syz.5.623'. [ 246.259882][ T8419] vlan0: entered promiscuous mode [ 246.301552][ T6016] usb usb3-port1: unable to enumerate USB device [ 246.370687][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.395834][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 246.403130][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.414591][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 246.425604][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.435552][ T5918] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 246.446493][ T9] usb 1-1: config 0 descriptor?? [ 246.607474][ T5918] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 246.804815][ T5918] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 246.842536][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 246.859071][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 246.880710][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 246.889488][ T5918] usb 4-1: Product: syz [ 246.894527][ T5918] usb 4-1: Manufacturer: syz [ 246.899908][ T5918] usb 4-1: SerialNumber: syz [ 246.914235][ T5918] usb 4-1: config 0 descriptor?? [ 246.925724][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.934020][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.942178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.950544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.035434][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 247.042170][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 247.053351][ T24] usb 2-1: config 0 has no interface number 0 [ 247.074289][ T24] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 247.093904][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.109227][ T24] usb 2-1: Product: syz [ 247.122344][ T24] usb 2-1: Manufacturer: syz [ 247.130637][ T5918] usb 4-1: USB disconnect, device number 36 [ 247.166333][ T24] usb 2-1: SerialNumber: syz [ 247.184919][ T24] usb 2-1: config 0 descriptor?? [ 247.202119][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 247.410798][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.658748][ T8434] syzkaller0: entered promiscuous mode [ 247.675500][ T8434] syzkaller0: entered allmulticast mode [ 247.694657][ T8434] tipc: Enabled bearer , priority 0 [ 247.750420][ T8432] tipc: Resetting bearer [ 247.786115][ T8436] netlink: 52 bytes leftover after parsing attributes in process `syz.5.629'. [ 247.807787][ T8432] tipc: Disabling bearer [ 247.828894][ T8438] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20004 [ 247.847377][ T8438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.861256][ T8438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.966154][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.974706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.998804][ T8447] netlink: 'syz.2.633': attribute type 11 has an invalid length. [ 248.085512][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 248.255507][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 248.263301][ T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 248.271906][ T9] usb 4-1: config 0 has no interface number 0 [ 248.278873][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 248.291603][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 248.303796][ T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 248.315071][ T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 248.328430][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 248.338337][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.346560][ T8426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.347391][ T8426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.372268][ T9] usb 4-1: config 0 descriptor?? [ 248.383538][ T8426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.385540][ T9] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 248.409048][ T8426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.419429][ T6016] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 248.568931][ T24] gspca_spca1528: reg_w err -71 [ 248.573994][ T24] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 248.575441][ T6016] usb 6-1: Using ep0 maxpacket: 32 [ 248.600624][ T24] usb 2-1: USB disconnect, device number 33 [ 248.622919][ T6016] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 248.649791][ T6016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 248.678897][ T6016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 248.706262][ T6016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 248.733924][ T6016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 248.767568][ T6016] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 248.789696][ T8465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.795445][ T6016] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.810841][ T6016] usb 6-1: Product: syz [ 248.827141][ T6016] usb 6-1: Manufacturer: syz [ 248.836787][ T6016] usb 6-1: SerialNumber: syz [ 248.855796][ T6016] usb 6-1: config 0 descriptor?? [ 249.068855][ T6016] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 249.076042][ T6016] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 249.195608][ T9] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 249.208045][ T8473] netlink: 52 bytes leftover after parsing attributes in process `syz.1.642'. [ 249.378517][ T9] usb 3-1: config 0 has an invalid interface number: 147 but max is 0 [ 249.387847][ T9] usb 3-1: config 0 has no interface number 0 [ 249.394004][ T9] usb 3-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 249.407883][ T9] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 249.418465][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.426704][ T9] usb 3-1: Product: syz [ 249.431214][ T9] usb 3-1: Manufacturer: syz [ 249.435955][ T9] usb 3-1: SerialNumber: syz [ 249.443659][ T9] usb 3-1: config 0 descriptor?? [ 249.450526][ T8470] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 249.490363][ T9] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 249.502726][ T6016] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 249.529088][ T6016] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 249.540186][ T6016] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 249.547197][ T6016] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 249.553840][ T6016] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 249.562007][ T6016] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 249.569094][ T6016] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 249.575945][ T6016] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 249.583965][ T6016] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 249.590147][ T5907] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 249.598352][ T6016] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 249.604931][ T6016] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 249.612074][ T6016] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 249.618600][ T6016] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 249.625192][ T6016] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 249.631892][ T6016] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 249.638639][ T6016] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 249.644764][ T6016] input input35: Timeout waiting for response from device. [ 249.663544][ T6016] usb 6-1: USB disconnect, device number 18 [ 249.666854][ T5886] usb 3-1: USB disconnect, device number 36 [ 249.669803][ T66] usb 3-1: Failed to submit usb control message: -71 [ 249.695807][ T66] usb 3-1: unable to send the bmi data to the device: -71 [ 249.711311][ T66] usb 3-1: unable to get target info from device [ 249.718519][ T66] usb 3-1: could not get target info (-71) [ 249.730885][ T66] usb 3-1: could not probe fw (-71) [ 249.760479][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 249.798522][ T5907] usb 2-1: unable to get BOS descriptor or descriptor too short [ 249.813014][ T5907] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 249.821734][ T5907] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 249.831404][ T5907] usb 2-1: config 4 has no interface number 0 [ 249.841414][ T5907] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 249.851109][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.860709][ T5907] usb 2-1: Product: syz [ 249.865182][ T5907] usb 2-1: Manufacturer: syz [ 249.871763][ T5907] usb 2-1: SerialNumber: syz [ 250.118545][ T5907] uvcvideo 2-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 250.139876][ T5907] uvcvideo 2-1:4.147: No valid video chain found. [ 250.152580][ T5907] usb 2-1: USB disconnect, device number 34 [ 250.198810][ T8493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.211544][ T8493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.268216][ T8495] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.575510][ T5886] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 250.729279][ T5886] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 250.739343][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.747469][ T5886] usb 6-1: Product: syz [ 250.751731][ T5886] usb 6-1: Manufacturer: syz [ 250.756557][ T5886] usb 6-1: SerialNumber: syz [ 250.759909][ T8504] netlink: 52 bytes leftover after parsing attributes in process `syz.1.654'. [ 250.865132][ T5918] usb 4-1: USB disconnect, device number 37 [ 250.898859][ T5918] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 251.085963][ C1] net_ratelimit: 9 callbacks suppressed [ 251.085985][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.100022][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.229186][ T5886] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 251.242422][ T5886] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 251.581803][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.120968][ T8523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.129959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.130254][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.155931][ T8523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.444137][ T5886] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 252.459849][ T5886] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 252.480358][ T5886] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 252.500577][ T5886] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 252.535704][ T5886] usb 6-1: USB disconnect, device number 19 [ 252.610630][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.005828][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.011621][ T8526] FAULT_INJECTION: forcing a failure. [ 253.011621][ T8526] name failslab, interval 1, probability 0, space 0, times 0 [ 253.014214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.061963][ T8526] CPU: 1 UID: 0 PID: 8526 Comm: syz.1.661 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.061991][ T8526] Tainted: [L]=SOFTLOCKUP [ 253.061997][ T8526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 253.062021][ T8526] Call Trace: [ 253.062028][ T8526] [ 253.062034][ T8526] dump_stack_lvl+0xe8/0x150 [ 253.062058][ T8526] should_fail_ex+0x412/0x560 [ 253.062082][ T8526] should_failslab+0xa8/0x100 [ 253.062101][ T8526] __kmalloc_noprof+0xde/0x7e0 [ 253.062115][ T8526] ? tomoyo_encode+0x28b/0x550 [ 253.062138][ T8526] tomoyo_encode+0x28b/0x550 [ 253.062163][ T8526] tomoyo_realpath_from_path+0x58d/0x5d0 [ 253.062193][ T8526] tomoyo_path_perm+0x283/0x560 [ 253.062210][ T8526] ? tomoyo_path_perm+0x251/0x560 [ 253.062227][ T8526] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 253.062262][ T8526] ? filemap_check_errors+0xd2/0x120 [ 253.062304][ T8526] ? bdev_mark_dead+0x9f/0x170 [ 253.062328][ T8526] security_inode_getattr+0x12b/0x310 [ 253.062345][ T8526] vfs_getattr+0x23/0x70 [ 253.062363][ T8526] loop_assign_backing_file+0x27a/0x4b0 [ 253.062383][ T8526] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 253.062397][ T8526] ? bd_prepare_to_claim+0x40f/0x4a0 [ 253.062431][ T8526] ? __asan_memcpy+0x40/0x70 [ 253.062452][ T8526] ? loop_set_status_from_info+0x185/0x250 [ 253.062471][ T8526] loop_configure+0x838/0xdf0 [ 253.062499][ T8526] ? __pfx_loop_configure+0x10/0x10 [ 253.062544][ T8526] lo_ioctl+0xad4/0x2010 [ 253.062567][ T8526] ? __lock_acquire+0x6b5/0x2cf0 [ 253.062583][ T8526] ? __pfx_lo_ioctl+0x10/0x10 [ 253.062598][ T8526] ? ima_match_policy+0x112/0x21e0 [ 253.062618][ T8526] ? ima_match_policy+0x2146/0x21e0 [ 253.062639][ T8526] ? __lock_acquire+0x6b5/0x2cf0 [ 253.062660][ T8526] ? __lock_acquire+0x6b5/0x2cf0 [ 253.062680][ T8526] ? __lock_acquire+0x6b5/0x2cf0 [ 253.062699][ T8526] ? __lock_acquire+0x6b5/0x2cf0 [ 253.062720][ T8526] ? __lock_acquire+0x6b5/0x2cf0 [ 253.062738][ T8526] ? __lock_acquire+0x6b5/0x2cf0 [ 253.062763][ T8526] ? unwind_next_frame+0xa5/0x23c0 [ 253.062790][ T8526] ? unwind_next_frame+0xa5/0x23c0 [ 253.062813][ T8526] ? is_bpf_text_address+0x26/0x2b0 [ 253.062845][ T8526] ? is_bpf_text_address+0x26/0x2b0 [ 253.062861][ T8526] ? is_bpf_text_address+0x292/0x2b0 [ 253.062877][ T8526] ? is_bpf_text_address+0x26/0x2b0 [ 253.062902][ T8526] ? kernel_text_address+0xa5/0xe0 [ 253.062925][ T8526] ? __kernel_text_address+0xd/0x30 [ 253.062952][ T8526] ? unwind_get_return_address+0x4d/0x90 [ 253.062973][ T8526] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 253.062994][ T8526] ? arch_stack_walk+0xfb/0x150 [ 253.063011][ T8526] ? stack_trace_save+0xa9/0x100 [ 253.063024][ T8526] ? __pfx_stack_trace_save+0x10/0x10 [ 253.063039][ T8526] ? stack_depot_save_flags+0x33/0x810 [ 253.063066][ T8526] ? kasan_save_track+0x4f/0x80 [ 253.063082][ T8526] ? kasan_save_track+0x3e/0x80 [ 253.063097][ T8526] ? kasan_save_free_info+0x46/0x50 [ 253.063118][ T8526] ? __kasan_slab_free+0x5c/0x80 [ 253.063134][ T8526] ? kfree+0x1be/0x650 [ 253.063148][ T8526] ? tomoyo_path_number_perm+0x501/0x630 [ 253.063158][ T8526] ? security_file_ioctl+0xc3/0x2a0 [ 253.063168][ T8526] ? __se_sys_ioctl+0x47/0x170 [ 253.063180][ T8526] ? do_syscall_64+0xe2/0xf80 [ 253.063193][ T8526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.063225][ T8526] ? __asan_memset+0x22/0x50 [ 253.063257][ T8526] ? blk_get_meta_cap+0x16d/0x7a0 [ 253.063283][ T8526] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 253.063301][ T8526] ? blkdev_common_ioctl+0x1319/0x2dc0 [ 253.063314][ T8526] ? kasan_quarantine_put+0xbb/0x1f0 [ 253.063326][ T8526] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 253.063338][ T8526] ? tomoyo_path_number_perm+0x219/0x630 [ 253.063356][ T8526] ? tomoyo_path_number_perm+0x219/0x630 [ 253.063380][ T8526] ? do_vfs_ioctl+0x1166/0x1530 [ 253.063435][ T8526] ? __pfx_lo_ioctl+0x10/0x10 [ 253.063448][ T8526] blkdev_ioctl+0x5e3/0x740 [ 253.063462][ T8526] ? __pfx_blkdev_ioctl+0x10/0x10 [ 253.063473][ T8526] ? __fget_files+0x2a/0x420 [ 253.063486][ T8526] ? bpf_lsm_file_ioctl+0x9/0x20 [ 253.063499][ T8526] ? __pfx_blkdev_ioctl+0x10/0x10 [ 253.063520][ T8526] __se_sys_ioctl+0xfc/0x170 [ 253.063548][ T8526] do_syscall_64+0xe2/0xf80 [ 253.063571][ T8526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.063586][ T8526] ? trace_irq_disable+0x37/0x100 [ 253.063600][ T8526] ? clear_bhb_loop+0x60/0xb0 [ 253.063611][ T8526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.063621][ T8526] RIP: 0033:0x7f5b25d9acb9 [ 253.063632][ T8526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.063641][ T8526] RSP: 002b:00007f5b26d2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.063656][ T8526] RAX: ffffffffffffffda RBX: 00007f5b26015fa0 RCX: 00007f5b25d9acb9 [ 253.063669][ T8526] RDX: 0000200000000400 RSI: 0000000000004c0a RDI: 0000000000000004 [ 253.063680][ T8526] RBP: 00007f5b26d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 253.063690][ T8526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.063701][ T8526] R13: 00007f5b26016038 R14: 00007f5b26015fa0 R15: 00007f5b2613fa48 [ 253.063732][ T8526] [ 253.568779][ T8526] ERROR: Out of memory at tomoyo_realpath_from_path. [ 253.578051][ T8526] loop5: detected capacity change from 0 to 7 [ 253.596445][ T7451] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 253.643319][ T7451] loop5: p1 start 771753728 is beyond EOD, truncated [ 253.664767][ T7451] loop5: p2 start 1818846767 is beyond EOD, truncated [ 253.682077][ T7451] loop5: p3 start 6291456 is beyond EOD, truncated [ 253.708687][ T7451] loop5: p4 start 3090415749 is beyond EOD, truncated [ 253.734460][ T7451] loop5: p5 start 2847655788 is beyond EOD, truncated [ 253.753214][ T8528] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.760620][ T7451] loop5: p6 start 701767795 is beyond EOD, truncated [ 253.779970][ T8526] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 253.810792][ T8526] loop5: p1 start 771753728 is beyond EOD, truncated [ 253.850227][ T8526] loop5: p2 start 1818846767 is beyond EOD, truncated [ 253.877366][ T8526] loop5: p3 start 6291456 is beyond EOD, truncated [ 253.891078][ T8526] loop5: p4 start 3090415749 is beyond EOD, truncated [ 253.898664][ T8526] loop5: p5 start 2847655788 is beyond EOD, truncated [ 253.920574][ T8526] loop5: p6 start 701767795 is beyond EOD, truncated [ 254.060140][ T8533] Cannot find set identified by id 0 to match [ 254.101214][ T8533] loop5: detected capacity change from 0 to 7 [ 254.126433][ T8533] Dev loop5: unable to read RDB block 7 [ 254.135507][ T8533] loop5: unable to read partition table [ 254.143339][ T8533] loop5: partition table beyond EOD, truncated [ 254.150823][ T8533] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 254.190453][ T8537] netlink: 52 bytes leftover after parsing attributes in process `syz.1.666'. [ 254.356150][ T6016] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 254.435759][ T8540] netlink: 'syz.5.667': attribute type 31 has an invalid length. [ 254.453870][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.667'. [ 254.505575][ T6016] usb 4-1: Using ep0 maxpacket: 16 [ 254.525086][ T6016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.544928][ T6016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.555899][ T6016] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 254.569358][ T6016] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 254.580116][ T6016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.597963][ T6016] usb 4-1: config 0 descriptor?? [ 254.732065][ T8542] libceph: resolve ' [ 254.732065][ T8542] -&fYǝa2i [ 254.732065][ T8542] .?&*&' (ret=-3): failed [ 255.119875][ T6016] usbhid 4-1:0.0: can't add hid device: -71 [ 255.163245][ T6016] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 255.181606][ T6016] usb 4-1: USB disconnect, device number 38 [ 255.337035][ T8548] netem: incorrect gi model size [ 255.342207][ T8548] netem: change failed [ 255.537032][ T8555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.567705][ T8555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.649990][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.656983][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.669232][ T8559] loop2: detected capacity change from 0 to 7 [ 255.699952][ T8559] Dev loop2: unable to read RDB block 7 [ 255.706155][ T6016] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 255.717605][ T8559] loop2: unable to read partition table [ 255.747314][ T8559] loop2: partition table beyond EOD, truncated [ 255.764366][ T8559] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 255.812720][ T8561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.885715][ T6016] usb 2-1: Using ep0 maxpacket: 8 [ 255.893706][ T6016] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 255.909686][ T6016] usb 2-1: config 179 has no interface number 0 [ 255.924981][ T6016] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 255.951002][ T6016] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 255.963041][ T6016] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 255.978307][ T8565] netlink: 'syz.5.675': attribute type 41 has an invalid length. [ 255.986154][ T6016] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 255.998997][ T6016] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 256.014528][ T6016] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 256.023871][ T6016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.044621][ T8550] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 256.569682][ T8570] fuse: Bad value for 'rootmode' [ 256.685808][ C1] net_ratelimit: 16 callbacks suppressed [ 256.685827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.700236][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.724574][ T6016] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input36 [ 256.808537][ T6259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.986607][ T8550] netlink: 'syz.1.669': attribute type 1 has an invalid length. [ 257.078566][ T8578] netlink: 52 bytes leftover after parsing attributes in process `syz.5.679'. [ 257.090724][ T6259] usb 2-1: USB disconnect, device number 35 [ 257.090812][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 257.105622][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 257.555439][ T5886] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 257.725766][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.734230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.765621][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 257.837232][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.868616][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.886702][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.905533][ T5886] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 257.936166][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.984176][ T5886] usb 3-1: config 0 descriptor?? [ 258.010504][ T8588] netlink: 'syz.5.683': attribute type 31 has an invalid length. [ 258.055674][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.683'. [ 258.256032][ T8598] libceph: resolve ' [ 258.256032][ T8598] -&fYǝa2i [ 258.256032][ T8598] .?&*&' (ret=-3): failed [ 258.568864][ T5886] logitech 0003:046D:C29C.001B: unknown main item tag 0x0 [ 258.605520][ T5886] logitech 0003:046D:C29C.001B: unknown main item tag 0x0 [ 258.612703][ T5886] logitech 0003:046D:C29C.001B: unknown main item tag 0x0 [ 258.694675][ T5886] logitech 0003:046D:C29C.001B: unknown main item tag 0x0 [ 258.710784][ T5886] logitech 0003:046D:C29C.001B: unknown main item tag 0x0 [ 258.726619][ T5886] logitech 0003:046D:C29C.001B: unknown main item tag 0x0 [ 258.734083][ T5886] logitech 0003:046D:C29C.001B: unknown main item tag 0x0 [ 258.754399][ T5886] logitech 0003:046D:C29C.001B: unknown main item tag 0x0 [ 258.765738][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.774264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.789786][ T5886] logitech 0003:046D:C29C.001B: unknown main item tag 0x0 [ 258.834630][ T5886] logitech 0003:046D:C29C.001B: unknown main item tag 0x0 [ 258.940826][ T6259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.952279][ T30] audit: type=1326 audit(1769179391.126:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.5.689" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f442db9acb9 code=0x0 [ 258.976723][ T5886] logitech 0003:046D:C29C.001B: unbalanced collection at end of report description [ 258.998044][ T5886] logitech 0003:046D:C29C.001B: parse failed [ 259.145159][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.163802][ T5886] logitech 0003:046D:C29C.001B: probe with driver logitech failed with error -22 [ 259.197438][ T5886] usb 3-1: USB disconnect, device number 37 [ 259.374910][ T8607] could not allocate digest TFM handle [ 259.479385][ T8620] trusted_key: encrypted_key: insufficient parameters specified [ 260.388793][ T8627] netlink: 52 bytes leftover after parsing attributes in process `syz.2.692'. [ 260.462747][ T8627] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.470430][ T8627] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.686384][ T8634] FAULT_INJECTION: forcing a failure. [ 260.686384][ T8634] name failslab, interval 1, probability 0, space 0, times 0 [ 260.753902][ T8634] CPU: 1 UID: 0 PID: 8634 Comm: syz.5.695 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.753934][ T8634] Tainted: [L]=SOFTLOCKUP [ 260.753940][ T8634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 260.753950][ T8634] Call Trace: [ 260.753958][ T8634] [ 260.753966][ T8634] dump_stack_lvl+0xe8/0x150 [ 260.753992][ T8634] should_fail_ex+0x412/0x560 [ 260.754009][ T8634] should_failslab+0xa8/0x100 [ 260.754022][ T8634] __kvmalloc_node_noprof+0x166/0x8d0 [ 260.754034][ T8634] ? fuse_dev_splice_write+0x185/0xa60 [ 260.754046][ T8634] ? current_time+0x22a/0x370 [ 260.754071][ T8634] fuse_dev_splice_write+0x185/0xa60 [ 260.754102][ T8634] ? touch_atime+0x384/0x6d0 [ 260.754128][ T8634] ? __pfx_fuse_dev_splice_write+0x10/0x10 [ 260.754147][ T8634] ? shmem_file_splice_read+0xa74/0xbd0 [ 260.754165][ T8634] ? __pfx_fuse_dev_splice_write+0x10/0x10 [ 260.754178][ T8634] direct_splice_actor+0x101/0x160 [ 260.754192][ T8634] splice_direct_to_actor+0x53a/0xc70 [ 260.754218][ T8634] ? __pfx_direct_splice_actor+0x10/0x10 [ 260.754247][ T8634] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 260.754278][ T8634] do_splice_direct+0x195/0x290 [ 260.754296][ T8634] ? __pfx_do_splice_direct+0x10/0x10 [ 260.754306][ T8634] ? common_file_perm+0x1b4/0x220 [ 260.754319][ T8634] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 260.754332][ T8634] ? bpf_lsm_file_permission+0x9/0x20 [ 260.754342][ T8634] ? security_file_permission+0x75/0x260 [ 260.754357][ T8634] ? rw_verify_area+0x255/0x4d0 [ 260.754386][ T8634] do_sendfile+0x535/0x7c0 [ 260.754415][ T8634] ? __pfx_do_sendfile+0x10/0x10 [ 260.754439][ T8634] ? __pfx___schedule+0x10/0x10 [ 260.754453][ T8634] __se_sys_sendfile64+0x144/0x1a0 [ 260.754466][ T8634] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 260.754482][ T8634] do_syscall_64+0xe2/0xf80 [ 260.754499][ T8634] ? rcu_is_watching+0x15/0xb0 [ 260.754518][ T8634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.754542][ T8634] ? clear_bhb_loop+0x60/0xb0 [ 260.754563][ T8634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.754581][ T8634] RIP: 0033:0x7f442db9acb9 [ 260.754592][ T8634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.754600][ T8634] RSP: 002b:00007f442bdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 260.754611][ T8634] RAX: ffffffffffffffda RBX: 00007f442de15fa0 RCX: 00007f442db9acb9 [ 260.754618][ T8634] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000007 [ 260.754624][ T8634] RBP: 00007f442bdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 260.754630][ T8634] R10: 00004000000053d2 R11: 0000000000000246 R12: 0000000000000001 [ 260.754636][ T8634] R13: 00007f442de16038 R14: 00007f442de15fa0 R15: 00007f442df3fa48 [ 260.754656][ T8634] [ 261.735906][ T8643] netlink: 'syz.5.699': attribute type 31 has an invalid length. [ 261.766040][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.5.699'. [ 262.037127][ T8646] libceph: resolve ' [ 262.037127][ T8646] -&fYǝa2i [ 262.037127][ T8646] .?&*&' (ret=-3): failed [ 262.050992][ C1] net_ratelimit: 7 callbacks suppressed [ 262.051008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.051283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.130979][ T6259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.216591][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.224900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.805641][ T8662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.835254][ T8662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.878110][ T8664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.704'. [ 263.085655][ T5907] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 263.085920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.101757][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.171510][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.285910][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 263.322092][ T5907] usb 2-1: unable to get BOS descriptor or descriptor too short [ 263.352237][ T852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.360650][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.394418][ T5907] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 263.422090][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.432406][ T5907] usb 2-1: Product: syz [ 263.445413][ T5907] usb 2-1: Manufacturer: syz [ 263.455430][ T5907] usb 2-1: SerialNumber: syz [ 263.676856][ T5907] usb 2-1: selecting invalid altsetting 1 [ 263.709495][ T5907] catc 2-1:8.0: Can't set altsetting 1. [ 263.715260][ T5907] catc 2-1:8.0: probe with driver catc failed with error -5 [ 263.723000][ T30] audit: type=1326 audit(1769179395.916:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8678 comm="syz.3.709" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff89af9acb9 code=0x0 [ 263.754179][ T5886] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 263.773068][ T5907] usb 2-1: USB disconnect, device number 36 [ 264.215844][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 264.241186][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.301268][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.329943][ T8690] netlink: 'syz.0.712': attribute type 31 has an invalid length. [ 264.341569][ T5886] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 264.357029][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.370290][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.712'. [ 264.382854][ T5886] usb 6-1: config 0 descriptor?? [ 264.789460][ T8693] libceph: resolve ' [ 264.789460][ T8693] -&fYǝa2i [ 264.789460][ T8693] .?&*&' (ret=-3): failed [ 264.814947][ T5886] hid_parser_main: 149 callbacks suppressed [ 264.814969][ T5886] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 264.853130][ T5886] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 264.865455][ T5886] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 264.894028][ T5886] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 264.942194][ T5886] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 264.965270][ T5886] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 265.027211][ T5886] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 265.055454][ T5886] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 265.062636][ T5886] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 265.140942][ T5886] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 265.221472][ T5886] logitech 0003:046D:C29C.001C: unbalanced collection at end of report description [ 265.300150][ T5886] logitech 0003:046D:C29C.001C: parse failed [ 265.355643][ T5886] logitech 0003:046D:C29C.001C: probe with driver logitech failed with error -22 [ 265.450219][ T8702] netlink: 'syz.0.715': attribute type 31 has an invalid length. [ 265.464782][ T5150] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 265.473976][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'. [ 265.583464][ T8703] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 265.590338][ T8703] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.772574][ T8703] vhci_hcd vhci_hcd.0: Device attached [ 265.790916][ T5907] usb 6-1: USB disconnect, device number 20 [ 265.880432][ T8715] FAULT_INJECTION: forcing a failure. [ 265.880432][ T8715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.925520][ T8715] CPU: 1 UID: 0 PID: 8715 Comm: syz.2.718 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.925546][ T8715] Tainted: [L]=SOFTLOCKUP [ 265.925549][ T8715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 265.925555][ T8715] Call Trace: [ 265.925561][ T8715] [ 265.925568][ T8715] dump_stack_lvl+0xe8/0x150 [ 265.925596][ T8715] should_fail_ex+0x412/0x560 [ 265.925625][ T8715] _copy_from_user+0x2d/0xb0 [ 265.925644][ T8715] io_submit_one+0xd3/0x14c0 [ 265.925665][ T8715] ? irqentry_exit+0x59c/0x620 [ 265.925678][ T8715] ? lockdep_hardirqs_on+0x7a/0x110 [ 265.925691][ T8715] ? irqentry_exit+0x59c/0x620 [ 265.925705][ T8715] ? __pfx_io_submit_one+0x10/0x10 [ 265.925724][ T8715] ? __might_fault+0xaf/0x130 [ 265.925760][ T8715] ? __might_fault+0xaf/0x130 [ 265.925787][ T8715] __se_sys_io_submit+0x195/0x340 [ 265.925808][ T8715] ? __pfx___se_sys_io_submit+0x10/0x10 [ 265.925820][ T8715] ? ksys_write+0x242/0x270 [ 265.925836][ T8715] do_syscall_64+0xe2/0xf80 [ 265.925849][ T8715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.925858][ T8715] ? trace_irq_disable+0x37/0x100 [ 265.925878][ T8715] ? clear_bhb_loop+0x60/0xb0 [ 265.925899][ T8715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.925917][ T8715] RIP: 0033:0x7f8d8899acb9 [ 265.925932][ T8715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.925947][ T8715] RSP: 002b:00007f8d89792028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 265.925960][ T8715] RAX: ffffffffffffffda RBX: 00007f8d88c15fa0 RCX: 00007f8d8899acb9 [ 265.925967][ T8715] RDX: 00002000000001c0 RSI: 0000000000000001 RDI: 00007f8d89771000 [ 265.925973][ T8715] RBP: 00007f8d89792090 R08: 0000000000000000 R09: 0000000000000000 [ 265.925979][ T8715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.925985][ T8715] R13: 00007f8d88c16038 R14: 00007f8d88c15fa0 R15: 00007f8d88d3fa48 [ 265.925999][ T8715] [ 265.928794][ T8710] libceph: resolve ' [ 265.928794][ T8710] -&fYǝa2i [ 265.928794][ T8710] .?&*&' (ret=-3): failed [ 266.189742][ T8708] vhci_hcd: connection closed [ 266.191756][ T66] vhci_hcd vhci_hcd.1: stop threads [ 266.195508][ T5886] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 266.197604][ T66] vhci_hcd vhci_hcd.1: release socket [ 266.261896][ T66] vhci_hcd vhci_hcd.1: disconnect device [ 266.766550][ T8725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.811199][ T8725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.045701][ T6259] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 267.170838][ T30] audit: type=1326 audit(1769179399.356:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.2.727" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d8899acb9 code=0x0 [ 267.211829][ T8742] binder: BINDER_SET_CONTEXT_MGR already set [ 267.218317][ T6259] usb 2-1: Using ep0 maxpacket: 8 [ 267.227762][ T8742] binder: 8741:8742 ioctl 4018620d 200000000180 returned -16 [ 267.235426][ T8742] binder: BINDER_SET_CONTEXT_MGR already set [ 267.240243][ T6259] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 267.241429][ T8742] binder: 8741:8742 ioctl 4018620d 200000000180 returned -16 [ 267.251107][ C1] net_ratelimit: 11 callbacks suppressed [ 267.251122][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.258750][ T8742] binder: BINDER_SET_CONTEXT_MGR already set [ 267.264514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.272396][ T8742] binder: 8741:8742 ioctl 4018620d 200000000180 returned -16 [ 267.286699][ T6259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.286724][ T6259] usb 2-1: Product: syz [ 267.286744][ T6259] usb 2-1: Manufacturer: syz [ 267.286760][ T6259] usb 2-1: SerialNumber: syz [ 267.411572][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.498908][ T6259] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 267.616835][ T8753] netlink: 52 bytes leftover after parsing attributes in process `syz.5.730'. [ 268.058618][ T8759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.722'. [ 268.091633][ T8759] netlink: 60 bytes leftover after parsing attributes in process `syz.1.722'. [ 268.111540][ T6259] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 268.123149][ T8759] vlan0: entered promiscuous mode [ 268.286130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.294259][ T852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.302385][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.310505][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.315804][ T6259] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.335486][ T6259] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.368613][ T6259] usb 6-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 268.403173][ T6259] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.435072][ T6259] usb 6-1: config 0 descriptor?? [ 268.450731][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.073247][ T6259] usbhid 6-1:0.0: can't add hid device: -71 [ 269.081661][ T6259] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 269.110150][ T6259] usb 6-1: USB disconnect, device number 21 [ 269.206859][ T8772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.249027][ T8772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.326177][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.330125][ T8772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.334722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.349380][ T8776] geneve2: entered promiscuous mode [ 269.359839][ T8772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.372842][ T5980] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 57673 - 0 [ 269.386816][ T5980] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 57673 - 0 [ 269.410528][ T5980] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 57673 - 0 [ 269.431589][ T5980] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 57673 - 0 [ 269.502129][ T6259] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 269.675495][ T6259] usb 3-1: Using ep0 maxpacket: 16 [ 269.686348][ T6259] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.706021][ T5918] IPVS: starting estimator thread 0... [ 269.715951][ T6259] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.817572][ T6259] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 269.826839][ T8784] IPVS: using max 52 ests per chain, 124800 per kthread [ 269.849202][ T5923] usb 2-1: USB disconnect, device number 37 [ 269.877137][ T6259] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.886337][ T5923] usblp1: removed [ 270.307726][ T6259] usb 3-1: config 0 descriptor?? [ 270.674076][ T30] audit: type=1326 audit(1769179402.856:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.3.745" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff89af9acb9 code=0x0 [ 270.717774][ T8798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.730125][ T8798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.900283][ T6259] hid_parser_main: 149 callbacks suppressed [ 270.900305][ T6259] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 271.068843][ T6259] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 271.163924][ T6259] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 271.198230][ T6259] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 271.211998][ T6259] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 271.306023][ T6259] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 271.377523][ T5886] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 271.403658][ T6259] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 271.414096][ T6259] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 271.434695][ T6259] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 271.445634][ T6259] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 271.575707][ T852] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 271.612570][ T6259] logitech 0003:046D:C29C.001D: unbalanced collection at end of report description [ 271.746217][ T6259] logitech 0003:046D:C29C.001D: parse failed [ 271.752337][ T6259] logitech 0003:046D:C29C.001D: probe with driver logitech failed with error -22 [ 271.809235][ T852] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 271.842576][ T852] usb 2-1: config 0 has no interface number 0 [ 271.871094][ T6259] usb 3-1: USB disconnect, device number 38 [ 271.872944][ T852] usb 2-1: config 0 interface 11 altsetting 253 has an endpoint descriptor with address 0x13, changing to 0x3 [ 271.921696][ T852] usb 2-1: config 0 interface 11 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 1024 [ 271.974160][ T852] usb 2-1: config 0 interface 11 has no altsetting 0 [ 272.030958][ T852] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 272.048114][ T852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 272.071698][ T852] usb 2-1: SerialNumber: syz [ 272.105616][ T852] usb 2-1: config 0 descriptor?? [ 272.144075][ T8805] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 272.167705][ T852] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 272.200876][ T852] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 87 [ 272.262059][ T852] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 7 [ 272.310523][ T852] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 272.351588][ T852] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 272.387879][ T852] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 272.412978][ T852] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 272.442933][ T852] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 272.455827][ C1] net_ratelimit: 9 callbacks suppressed [ 272.455847][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.469849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.509259][ T852] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 272.559549][ T852] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 272.595924][ T852] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 272.619459][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.625506][ T852] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 272.658582][ T852] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 272.702948][ T852] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 272.719914][ T852] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 272.733460][ T852] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 272.813383][ T852] usb 2-1: USB disconnect, device number 38 [ 272.860842][ T852] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 272.888973][ T852] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 272.903110][ T852] keyspan 2-1:0.11: device disconnected [ 272.926238][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.934589][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.072031][ T8820] tipc: Started in network mode [ 273.077125][ T5907] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 273.085899][ T8820] tipc: Node identity 32d6556efdc2, cluster identity 4711 [ 273.093505][ T8820] tipc: Enabled bearer , priority 0 [ 273.100301][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 273.116053][ T8820] syzkaller0: entered promiscuous mode [ 273.121924][ T8820] syzkaller0: entered allmulticast mode [ 273.132079][ T8819] tipc: Resetting bearer [ 273.150842][ T8819] tipc: Disabling bearer [ 273.238234][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.250474][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.265613][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 273.270979][ T5907] usb 6-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 273.280717][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.293852][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 273.308437][ T5907] usb 6-1: config 0 descriptor?? [ 273.317768][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.330404][ T9] usb 3-1: Product: syz [ 273.342247][ T9] usb 3-1: Manufacturer: syz [ 273.347585][ T9] usb 3-1: SerialNumber: syz [ 273.459029][ T8831] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 273.467178][ T8831] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 273.485841][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.494369][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.650155][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.765590][ T5886] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 274.069305][ T8836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.751'. [ 274.082078][ T8836] netlink: 60 bytes leftover after parsing attributes in process `syz.2.751'. [ 274.082660][ T5907] usbhid 6-1:0.0: can't add hid device: -71 [ 274.101731][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 274.101833][ T5907] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 274.137058][ T5907] usb 6-1: USB disconnect, device number 22 [ 274.156551][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.291584][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.322326][ T5886] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 274.352098][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.368668][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.412169][ T5886] usb 2-1: config 0 descriptor?? [ 274.933103][ T5886] logitech 0003:046D:C29C.001E: unbalanced collection at end of report description [ 274.958188][ T5886] logitech 0003:046D:C29C.001E: parse failed [ 274.964477][ T30] audit: type=1326 audit(1769179407.146:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.0.762" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8638d9acb9 code=0x0 [ 275.095150][ T5886] logitech 0003:046D:C29C.001E: probe with driver logitech failed with error -22 [ 275.509327][ T6016] usb 2-1: USB disconnect, device number 39 [ 275.665503][ T5907] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 275.824854][ T5907] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 275.897947][ T9] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 275.916209][ T5907] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.946212][ T9] usb 3-1: USB disconnect, device number 39 [ 275.987684][ T5907] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 275.998832][ T9] usblp1: removed [ 276.015459][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.043370][ T5907] usb 4-1: Product: syz [ 276.063671][ T5907] usb 4-1: Manufacturer: syz [ 276.094090][ T5907] usb 4-1: SerialNumber: syz [ 276.151195][ T5907] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input37 [ 276.361236][ T5184] bcm5974 4-1:1.0: could not read from device [ 276.412432][ T5907] bcm5974 4-1:1.0: could not read from device [ 276.476567][ T5184] bcm5974 4-1:1.0: could not read from device [ 276.557879][ T5907] input: failed to attach handler mousedev to device input37, error: -5 [ 276.618580][ T5184] bcm5974 4-1:1.0: could not read from device [ 276.925435][ T5184] bcm5974 4-1:1.0: could not read from device [ 276.970943][ T5907] usb 4-1: USB disconnect, device number 39 [ 277.525478][ T6259] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 277.615798][ T8876] syzkaller0: create flow: hash 2446752861 index 1 [ 277.645931][ C1] net_ratelimit: 14 callbacks suppressed [ 277.645952][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.660235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.686584][ T6259] usb 6-1: Using ep0 maxpacket: 32 [ 277.699440][ T6259] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 277.718451][ T6259] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 277.736223][ T50] syzkaller0: tun_net_xmit 76 [ 277.745474][ T6259] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 277.757110][ T50] syzkaller0: tun_net_xmit 48 [ 277.765582][ T6259] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 277.766088][ T6016] syzkaller0: tun_net_xmit 76 [ 277.796704][ T6259] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 277.833980][ T6259] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 277.849863][ T6259] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.858995][ T6259] usb 6-1: Product: syz [ 277.863242][ T6259] usb 6-1: Manufacturer: syz [ 277.868140][ T6259] usb 6-1: SerialNumber: syz [ 277.886563][ T6259] usb 6-1: config 0 descriptor?? [ 277.974040][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.985947][ T6016] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 278.095769][ T6259] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 278.102385][ T6259] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 278.145566][ T6016] usb 4-1: Using ep0 maxpacket: 32 [ 278.153459][ T6016] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 278.162022][ T6016] usb 4-1: config 0 has no interface number 0 [ 278.168310][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 278.176165][ T6016] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 278.189646][ T6016] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 278.199086][ T6016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.207122][ T6016] usb 4-1: Product: syz [ 278.211384][ T6016] usb 4-1: Manufacturer: syz [ 278.216051][ T6016] usb 4-1: SerialNumber: syz [ 278.223531][ T6016] usb 4-1: config 0 descriptor?? [ 278.233256][ T6016] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 278.241413][ T6016] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 278.315586][ T5907] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 278.335641][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 278.342709][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.353345][ T9] usb 3-1: config 0 has no interfaces? [ 278.353344][ T8873] syzkaller0: delete flow: hash 2446752861 index 1 [ 278.361684][ T9] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 278.375461][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.383505][ T9] usb 3-1: Product: syz [ 278.388862][ T9] usb 3-1: Manufacturer: syz [ 278.393492][ T9] usb 3-1: SerialNumber: syz [ 278.408903][ T9] usb 3-1: config 0 descriptor?? [ 278.439580][ T6016] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 278.467563][ T5907] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 278.476127][ T5907] usb 2-1: config 0 has no interface number 0 [ 278.482301][ T5907] usb 2-1: config 0 interface 11 altsetting 253 has an endpoint descriptor with address 0x13, changing to 0x3 [ 278.494178][ T5907] usb 2-1: config 0 interface 11 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 1024 [ 278.504682][ T5907] usb 2-1: config 0 interface 11 has no altsetting 0 [ 278.512715][ T5907] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 278.522945][ T6259] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 278.534304][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 278.540916][ T6259] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 278.543098][ T5907] usb 2-1: SerialNumber: syz [ 278.549875][ T6259] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 278.557586][ T5907] usb 2-1: config 0 descriptor?? [ 278.566426][ T8882] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 278.573433][ T6259] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 278.577664][ T5907] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 278.581454][ T6259] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 278.589263][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 87 [ 278.601782][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 7 [ 278.607613][ T6259] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 278.614324][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 278.623777][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 278.631449][ T6259] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 278.638321][ T6259] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 278.638356][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 278.653202][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 278.654984][ T8878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.662112][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 278.671151][ T6259] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 278.678425][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 278.684025][ T6259] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 278.691810][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.692327][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.704453][ T8878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.709264][ T6259] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 278.716550][ T5907] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 278.733491][ T6259] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 278.739669][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 278.749555][ T6259] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 278.764901][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 278.771685][ T6259] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 278.773190][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 278.780409][ T6259] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 278.806253][ T6259] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 278.823389][ T6259] input input38: Timeout waiting for response from device. [ 278.844740][ T6016] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 278.853148][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 278.856287][ T6259] usb 6-1: USB disconnect, device number 23 [ 278.864144][ T5907] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 278.896415][ T5907] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 278.929937][ T5907] usb 2-1: USB disconnect, device number 40 [ 278.969110][ T5907] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 279.018777][ T5907] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 279.022462][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.041643][ T5923] usb 4-1: USB disconnect, device number 40 [ 279.052186][ T5923] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 279.076427][ T5907] keyspan 2-1:0.11: device disconnected [ 279.735831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.744308][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.855980][ T5907] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 279.955473][ T5923] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 280.032827][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.043901][ T5907] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 280.060679][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.073137][ T5907] usb 4-1: config 0 descriptor?? [ 280.074391][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.125741][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 280.134482][ T5923] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 280.144368][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.152825][ T5923] usb 2-1: Product: syz [ 280.157317][ T5923] usb 2-1: Manufacturer: syz [ 280.162025][ T5923] usb 2-1: SerialNumber: syz [ 280.455528][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.501844][ T5907] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 280.541894][ T5907] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001F/input/input39 [ 280.591943][ T8897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.604005][ T8897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.662784][ T5907] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 280.737766][ T8891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.774'. [ 280.753831][ T8891] netlink: 60 bytes leftover after parsing attributes in process `syz.1.774'. [ 280.955945][ T5907] usb 3-1: USB disconnect, device number 40 [ 281.047503][ T5886] usb 4-1: USB disconnect, device number 41 [ 281.276798][ T30] audit: type=1326 audit(1769179413.466:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8902 comm="syz.0.779" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8638d9acb9 code=0x0 [ 281.395465][ T5907] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 281.617787][ T5907] usb 3-1: config index 0 descriptor too short (expected 1572, got 36) [ 281.668495][ T5907] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.709187][ T5907] usb 3-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 281.726227][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.766489][ T5907] usb 3-1: Product: syz [ 281.780984][ T5907] usb 3-1: Manufacturer: syz [ 281.795480][ T5907] usb 3-1: SerialNumber: syz [ 281.844700][ T5907] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input40 [ 282.030921][ T5184] bcm5974 3-1:1.0: could not read from device [ 282.042413][ T5184] bcm5974 3-1:1.0: could not read from device [ 282.062704][ T5907] bcm5974 3-1:1.0: could not read from device [ 282.105968][ T5907] input: failed to attach handler mousedev to device input40, error: -5 [ 282.137238][ T5184] bcm5974 3-1:1.0: could not read from device [ 282.146906][ T5184] bcm5974 3-1:1.0: could not read from device [ 282.169729][ T5907] usb 3-1: USB disconnect, device number 41 [ 282.588307][ T8916] vim2m vim2m.0: vidioc_s_fmt queue busy [ 282.805073][ T5923] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 282.845897][ C1] net_ratelimit: 10 callbacks suppressed [ 282.845915][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.860186][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.901306][ T5923] usb 2-1: USB disconnect, device number 41 [ 282.937111][ T5923] usblp1: removed [ 283.202094][ T5886] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 283.292967][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.375012][ T5923] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 283.403614][ T8924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.437047][ T8924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.454603][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 283.477273][ T5886] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 283.485819][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.486339][ T5886] usb 4-1: config 0 has no interface number 0 [ 283.494109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.505324][ T5886] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 283.524108][ T5886] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 283.534101][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.543008][ T5886] usb 4-1: Product: syz [ 283.547334][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 283.553471][ T5886] usb 4-1: Manufacturer: syz [ 283.559071][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 283.574732][ T5886] usb 4-1: SerialNumber: syz [ 283.579724][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 283.597094][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 283.617254][ T5886] usb 4-1: config 0 descriptor?? [ 283.630375][ T5886] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 283.675551][ T5886] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 283.685793][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 283.707452][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 283.729410][ T5923] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 283.739184][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.747713][ T5923] usb 2-1: Product: syz [ 283.752495][ T5923] usb 2-1: Manufacturer: syz [ 283.785127][ T5923] usb 2-1: SerialNumber: syz [ 283.820834][ T5923] usb 2-1: config 0 descriptor?? [ 283.859676][ T5886] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 283.885819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.894358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.047261][ T5923] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 284.061141][ T8922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.073285][ T5923] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 284.083715][ T8922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.118634][ T5886] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 284.156510][ T5907] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 284.323228][ T5886] usb 4-1: USB disconnect, device number 42 [ 284.325635][ T852] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 284.334978][ T5886] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 284.337004][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 284.363693][ T5907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.374922][ T5907] usb 3-1: config 0 has no interfaces? [ 284.381962][ T6259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.385050][ T5907] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 284.403735][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.426138][ T5907] usb 3-1: Product: syz [ 284.430424][ T5907] usb 3-1: Manufacturer: syz [ 284.436513][ T5907] usb 3-1: SerialNumber: syz [ 284.457406][ T5907] usb 3-1: config 0 descriptor?? [ 284.489093][ T5923] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 284.501291][ T5923] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 284.509571][ T5923] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 284.517252][ T5923] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 284.523600][ T852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.523967][ T5923] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 284.543387][ T852] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 284.553097][ T5923] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 284.553807][ T852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.559884][ T5923] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 284.584356][ T5923] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 284.593037][ T5923] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 284.600418][ T5923] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 284.610362][ T5923] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 284.610712][ T852] usb 6-1: config 0 descriptor?? [ 284.628884][ T5923] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 284.636318][ T5923] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 284.644702][ T5923] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 284.653250][ T5923] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 284.660245][ T5923] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 284.673749][ T5923] input input41: Timeout waiting for response from device. [ 284.693212][ T5923] usb 2-1: USB disconnect, device number 42 [ 284.925828][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.934356][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.106017][ T852] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 285.160194][ T852] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0020/input/input42 [ 285.259436][ T852] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 285.375795][ T5923] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 285.489496][ T30] audit: type=1326 audit(1769179417.676:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.0.796" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8638d9acb9 code=0x0 [ 285.545486][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 285.552618][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.563663][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.573578][ T5923] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 285.583424][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.594167][ T5923] usb 4-1: config 0 descriptor?? [ 285.645563][ T5886] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 285.680773][ T5918] usb 6-1: USB disconnect, device number 24 [ 285.835529][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 285.853822][ T5886] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 285.882058][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.892413][ T5886] usb 2-1: Product: syz [ 285.896774][ T5886] usb 2-1: Manufacturer: syz [ 285.901709][ T5886] usb 2-1: SerialNumber: syz [ 286.098129][ T5923] hid_parser_main: 308 callbacks suppressed [ 286.098151][ T5923] logitech 0003:046D:C29C.0021: unknown main item tag 0x0 [ 286.133094][ T5923] logitech 0003:046D:C29C.0021: unknown main item tag 0x0 [ 286.146253][ T5923] logitech 0003:046D:C29C.0021: unknown main item tag 0x0 [ 286.158660][ T5923] logitech 0003:046D:C29C.0021: unknown main item tag 0x0 [ 286.181732][ T5923] logitech 0003:046D:C29C.0021: unknown main item tag 0x0 [ 286.189334][ T5923] logitech 0003:046D:C29C.0021: unknown main item tag 0x0 [ 286.196601][ T5923] logitech 0003:046D:C29C.0021: unknown main item tag 0x0 [ 286.203901][ T5923] logitech 0003:046D:C29C.0021: unknown main item tag 0x0 [ 286.211259][ T5923] logitech 0003:046D:C29C.0021: unknown main item tag 0x0 [ 286.241210][ T5923] logitech 0003:046D:C29C.0021: unknown main item tag 0x0 [ 286.262561][ T5923] logitech 0003:046D:C29C.0021: unbalanced collection at end of report description [ 286.299579][ T5923] logitech 0003:046D:C29C.0021: parse failed [ 286.325966][ T5923] logitech 0003:046D:C29C.0021: probe with driver logitech failed with error -22 [ 286.481765][ T8960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.795'. [ 286.490855][ T8960] netlink: 60 bytes leftover after parsing attributes in process `syz.1.795'. [ 286.516957][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.797'. [ 286.552642][ T8959] netem: incorrect ge model size [ 286.571841][ T8959] netem: change failed [ 286.912837][ T8966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.799'. [ 286.992686][ T5918] usb 3-1: USB disconnect, device number 42 [ 287.284433][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.802'. [ 287.495578][ T5918] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 287.657172][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.668306][ T5918] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 287.678350][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.689672][ T5918] usb 3-1: config 0 descriptor?? [ 287.702870][ T5918] pwc: Askey VC010 type 2 USB webcam detected. [ 287.735481][ T5907] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 287.885750][ T5907] usb 6-1: Using ep0 maxpacket: 8 [ 287.893621][ T5907] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 287.905568][ T5907] usb 6-1: config 179 has no interface number 0 [ 287.912655][ T5907] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 287.927773][ T5907] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 287.939258][ T5907] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 287.951835][ T5907] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 287.963440][ T5907] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 287.977020][ T5907] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 288.015066][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.015990][ T5923] usb 4-1: USB disconnect, device number 43 [ 288.045809][ C1] net_ratelimit: 10 callbacks suppressed [ 288.045827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.060012][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.087994][ T8979] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 288.113988][ T5918] pwc: recv_control_msg error -32 req 02 val 2b00 [ 288.128324][ T5918] pwc: recv_control_msg error -32 req 02 val 2700 [ 288.333257][ T5907] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input43 [ 288.339472][ T5918] pwc: recv_control_msg error -71 req 04 val 1000 [ 288.426469][ T5918] pwc: recv_control_msg error -71 req 04 val 1300 [ 288.434766][ T5886] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 288.455418][ T5918] pwc: recv_control_msg error -71 req 04 val 1400 [ 288.469352][ T5918] pwc: recv_control_msg error -71 req 02 val 2000 [ 288.498917][ T5886] usb 2-1: USB disconnect, device number 43 [ 288.529422][ T5918] pwc: recv_control_msg error -71 req 02 val 2100 [ 288.544163][ T8979] netlink: 'syz.5.804': attribute type 1 has an invalid length. [ 288.551830][ T5886] usblp1: removed [ 288.590843][ T6259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.622329][ T5918] pwc: recv_control_msg error -71 req 04 val 1500 [ 288.726364][ T5918] pwc: recv_control_msg error -71 req 02 val 2500 [ 288.754719][ T6259] usb 6-1: USB disconnect, device number 25 [ 288.755344][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 288.769196][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 288.785871][ T5918] pwc: recv_control_msg error -71 req 02 val 2400 [ 288.822657][ T5918] pwc: recv_control_msg error -71 req 02 val 2600 [ 288.840415][ T5918] pwc: recv_control_msg error -71 req 02 val 2900 [ 288.864930][ T5918] pwc: recv_control_msg error -71 req 02 val 2800 [ 288.877604][ T5918] pwc: recv_control_msg error -71 req 04 val 1100 [ 288.895005][ T5918] pwc: recv_control_msg error -71 req 04 val 1200 [ 288.903552][ T8990] xt_hashlimit: size too large, truncated to 1048576 [ 288.939402][ T5918] pwc: Registered as video103. [ 288.979000][ T8992] x9: renamed from bridge_slave_0 (while UP) [ 288.988333][ T30] audit: type=1326 audit(1769179421.176:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.2.809" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d8899acb9 code=0x0 [ 289.026228][ T5918] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input44 [ 289.085743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.094146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.102741][ T5886] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 289.137345][ T5918] usb 3-1: USB disconnect, device number 43 [ 289.274499][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 289.292321][ T5886] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 289.310584][ T5886] usb 2-1: config 0 has no interface number 0 [ 289.325692][ T5886] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 289.424592][ T5886] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 289.539047][ T9001] syzkaller0: mtu greater than device maximum [ 289.584876][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.593300][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.599818][ T5886] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 289.645594][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.664105][ T5886] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 289.712110][ T5886] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 289.752219][ T5886] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 289.805094][ T9004] netlink: 'syz.0.811': attribute type 16 has an invalid length. [ 289.857028][ T5886] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 289.875552][ T5886] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 289.895423][ T5886] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.937865][ T5886] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 289.956527][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.974897][ T5886] usb 2-1: Product: syz [ 289.979246][ T5886] usb 2-1: Manufacturer: syz [ 289.989390][ T5886] usb 2-1: SerialNumber: syz [ 290.020266][ T5886] usb 2-1: config 0 descriptor?? [ 290.028631][ T8987] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 290.047840][ T5886] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 290.068440][ T9006] vlan0: left promiscuous mode [ 290.105453][ T5886] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 290.125783][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.385934][ T9016] netlink: 84 bytes leftover after parsing attributes in process `syz.3.816'. [ 290.399539][ T9016] netlink: 84 bytes leftover after parsing attributes in process `syz.3.816'. [ 290.434708][ T9016] netlink: 84 bytes leftover after parsing attributes in process `syz.3.816'. [ 290.457500][ T9016] netlink: 84 bytes leftover after parsing attributes in process `syz.3.816'. [ 290.534365][ T9016] netlink: 84 bytes leftover after parsing attributes in process `syz.3.816'. [ 290.575477][ T9023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.625979][ T9023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.708782][ T9023] vlan0: entered promiscuous mode [ 290.995516][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 291.168301][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.180956][ T9033] netlink: 'syz.2.821': attribute type 31 has an invalid length. [ 291.189044][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.378564][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 291.388227][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.406040][ T24] usb 4-1: config 0 descriptor?? [ 291.579375][ T9037] libceph: resolve ' [ 291.579375][ T9037] -&fYǝa2i [ 291.579375][ T9037] .?&*&' (ret=-3): failed [ 291.635878][ T9039] netlink: 'syz.5.823': attribute type 16 has an invalid length. [ 292.088158][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 292.105300][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 292.198049][ T24] usb 4-1: USB disconnect, device number 44 [ 292.285736][ T6016] usb 2-1: USB disconnect, device number 44 [ 292.422229][ T9049] netlink: 'syz.1.827': attribute type 31 has an invalid length. [ 292.436489][ T9049] __nla_validate_parse: 31 callbacks suppressed [ 292.436579][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'. [ 292.491256][ T9052] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.501895][ T9052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.516186][ T9052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.639714][ T9053] libceph: resolve ' [ 292.639714][ T9053] -&fYǝa2i [ 292.639714][ T9053] .?&*&' (ret=-3): failed [ 292.722856][ T30] audit: type=1326 audit(1769179424.906:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.5.830" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f442db9acb9 code=0x0 [ 293.245827][ C1] net_ratelimit: 12 callbacks suppressed [ 293.245848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.260000][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.545547][ T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 293.705600][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 293.713111][ T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 293.735856][ T24] usb 4-1: config 179 has no interface number 0 [ 293.757551][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 293.799438][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 293.825448][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 293.850201][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 293.856294][ T9075] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 293.871810][ T24] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 293.900304][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.912199][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 293.931309][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.957279][ T9067] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 294.242341][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input45 [ 294.285985][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.294667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.365808][ T5886] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 294.467728][ T9067] netlink: 'syz.3.832': attribute type 1 has an invalid length. [ 294.490815][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 294.490822][ T5907] usb 4-1: USB disconnect, device number 45 [ 294.490864][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 294.548221][ T5886] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 294.558329][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.571539][ T5886] usb 3-1: config 0 descriptor?? [ 294.655611][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 294.723467][ T9086] netlink: 'syz.0.839': attribute type 31 has an invalid length. [ 294.733424][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'. [ 294.787482][ T9055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.805665][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 294.805854][ T9055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.813277][ T9069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.834090][ T24] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 294.843691][ T24] usb 6-1: config 0 has no interface number 0 [ 294.855816][ T9069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.864740][ T24] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 294.876535][ T24] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 294.889417][ T24] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 294.902717][ T24] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 294.918319][ T24] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 294.931753][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.951848][ T24] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 294.981468][ T9069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.002445][ T24] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 295.017149][ T9069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.028967][ T24] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 295.122141][ T24] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.155693][ T24] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 295.166176][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.174210][ T24] usb 6-1: Product: syz [ 295.180916][ T24] usb 6-1: Manufacturer: syz [ 295.186568][ T24] usb 6-1: SerialNumber: syz [ 295.208350][ T24] usb 6-1: config 0 descriptor?? [ 295.215347][ T9079] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 295.232399][ T24] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 295.243279][ T24] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 295.325967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.334495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.505612][ T5886] ath6kl: Failed to read usb control message: -71 [ 295.536935][ T5886] ath6kl: Unable to read the bmi data from the device: -71 [ 295.548913][ T5886] ath6kl: Unable to recv target info: -71 [ 295.568883][ T5886] ath6kl: Failed to init ath6kl core: -71 [ 295.575185][ T5886] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 295.624148][ T5886] usb 3-1: USB disconnect, device number 44 [ 295.663611][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.672046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.725720][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 295.828093][ T9100] netlink: 'syz.0.843': attribute type 31 has an invalid length. [ 295.835988][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.843'. [ 295.934744][ T9103] vim2m vim2m.0: vidioc_s_fmt queue busy [ 295.955448][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 295.969945][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 295.979383][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.075911][ T24] usb 4-1: Product: syz [ 296.132214][ T24] usb 4-1: Manufacturer: syz [ 296.191330][ T24] usb 4-1: SerialNumber: syz [ 296.216786][ T24] r8152-cfgselector 4-1: Unknown version 0x0000 [ 296.224097][ T24] r8152-cfgselector 4-1: config 0 descriptor?? [ 296.334601][ T9104] libceph: resolve ' [ 296.334601][ T9104] -&fYǝa2i [ 296.334601][ T9104] .?&*&' (ret=-3): failed [ 296.925185][ T24] r8152-cfgselector 4-1: USB disconnect, device number 46 [ 297.054831][ T9111] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.062086][ T9111] bridge0: port 2(bridge_slave_1) entered listening state [ 297.069520][ T9111] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.076716][ T9111] bridge0: port 1(bridge_slave_0) entered listening state [ 297.163277][ T9114] vim2m vim2m.0: vidioc_s_fmt queue busy [ 297.440403][ T30] audit: type=1326 audit(1769179429.626:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9117 comm="syz.0.847" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8638d9acb9 code=0x0 [ 297.683599][ T6016] usb 6-1: USB disconnect, device number 26 [ 297.713306][ T9124] FAULT_INJECTION: forcing a failure. [ 297.713306][ T9124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.905875][ T9124] CPU: 0 UID: 0 PID: 9124 Comm: syz.3.849 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.905904][ T9124] Tainted: [L]=SOFTLOCKUP [ 297.905910][ T9124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 297.905921][ T9124] Call Trace: [ 297.905929][ T9124] [ 297.905936][ T9124] dump_stack_lvl+0xe8/0x150 [ 297.905963][ T9124] should_fail_ex+0x412/0x560 [ 297.905991][ T9124] _copy_from_user+0x2d/0xb0 [ 297.906011][ T9124] kstrtouint_from_user+0xd6/0x180 [ 297.906037][ T9124] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 297.906074][ T9124] proc_fail_nth_write+0x8e/0x210 [ 297.906094][ T9124] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 297.906116][ T9124] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 297.906135][ T9124] vfs_write+0x29a/0xb90 [ 297.906160][ T9124] ? __pfx_vfs_write+0x10/0x10 [ 297.906178][ T9124] ? __fget_files+0x2a/0x420 [ 297.906202][ T9124] ? __fget_files+0x3a0/0x420 [ 297.906222][ T9124] ? __fget_files+0x2a/0x420 [ 297.906249][ T9124] ksys_write+0x150/0x270 [ 297.906267][ T9124] ? __pfx_ksys_write+0x10/0x10 [ 297.906295][ T9124] do_syscall_64+0xe2/0xf80 [ 297.906319][ T9124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.906333][ T9124] ? trace_irq_disable+0x37/0x100 [ 297.906363][ T9124] ? clear_bhb_loop+0x60/0xb0 [ 297.906385][ T9124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.906403][ T9124] RIP: 0033:0x7ff89af5b58e [ 297.906419][ T9124] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 297.906433][ T9124] RSP: 002b:00007ff89bdfffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 297.906451][ T9124] RAX: ffffffffffffffda RBX: 00007ff89be006c0 RCX: 00007ff89af5b58e [ 297.906462][ T9124] RDX: 0000000000000001 RSI: 00007ff89be000a0 RDI: 0000000000000004 [ 297.906473][ T9124] RBP: 00007ff89be00090 R08: 0000000000000000 R09: 0000000000000000 [ 297.906483][ T9124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.906493][ T9124] R13: 00007ff89b216038 R14: 00007ff89b215fa0 R15: 00007ff89b33fa48 [ 297.906522][ T9124] [ 298.307251][ T5886] net_ratelimit: 8 callbacks suppressed [ 298.307269][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.445725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.454235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.585606][ T5886] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 298.693862][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.702188][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.755514][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 298.765750][ T5886] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 298.773946][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.784731][ T5886] usb 2-1: config 0 has no interface number 0 [ 298.797488][ T5886] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 298.806663][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.815089][ T5886] usb 2-1: Product: syz [ 298.815489][ T6016] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 298.819942][ T5886] usb 2-1: Manufacturer: syz [ 298.835982][ T5886] usb 2-1: SerialNumber: syz [ 298.856858][ T5886] usb 2-1: config 0 descriptor?? [ 298.975584][ T6016] usb 6-1: Using ep0 maxpacket: 16 [ 298.982511][ T6016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.993874][ T6016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.003767][ T6016] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 299.013512][ T6016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.024951][ T6016] usb 6-1: config 0 descriptor?? [ 299.077768][ T5907] usb 2-1: USB disconnect, device number 45 [ 299.330336][ T6259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.437473][ T6016] hid_parser_main: 149 callbacks suppressed [ 299.437518][ T6016] logitech 0003:046D:C29C.0022: unknown main item tag 0x0 [ 299.460288][ T6016] logitech 0003:046D:C29C.0022: unknown main item tag 0x0 [ 299.467698][ T6016] logitech 0003:046D:C29C.0022: unknown main item tag 0x0 [ 299.485711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.485730][ T6016] logitech 0003:046D:C29C.0022: unknown main item tag 0x0 [ 299.494309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.526874][ T6016] logitech 0003:046D:C29C.0022: unknown main item tag 0x0 [ 299.534259][ T6016] logitech 0003:046D:C29C.0022: unknown main item tag 0x0 [ 299.541557][ T852] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 299.549834][ T6016] logitech 0003:046D:C29C.0022: unknown main item tag 0x0 [ 299.561082][ T6016] logitech 0003:046D:C29C.0022: unknown main item tag 0x0 [ 299.571590][ T6016] logitech 0003:046D:C29C.0022: unknown main item tag 0x0 [ 299.580118][ T6016] logitech 0003:046D:C29C.0022: unknown main item tag 0x0 [ 299.589230][ T6016] logitech 0003:046D:C29C.0022: unbalanced collection at end of report description [ 299.609204][ T9148] netlink: 36 bytes leftover after parsing attributes in process `syz.2.858'. [ 299.619259][ T9148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.858'. [ 299.626272][ T6016] logitech 0003:046D:C29C.0022: parse failed [ 299.645558][ T6016] logitech 0003:046D:C29C.0022: probe with driver logitech failed with error -22 [ 299.715451][ T852] usb 4-1: Using ep0 maxpacket: 32 [ 299.737165][ T852] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 299.754669][ T852] usb 4-1: config 0 has no interface number 0 [ 299.792862][ T852] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 299.815773][ T852] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 299.839414][ T852] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 299.895533][ T852] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 299.904940][ T6259] usb 6-1: USB disconnect, device number 27 [ 299.933538][ T852] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 299.977665][ T852] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 300.008486][ T852] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 300.031704][ T852] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 300.056149][ T852] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 300.066517][ T852] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.100607][ T9164] FAULT_INJECTION: forcing a failure. [ 300.100607][ T9164] name failslab, interval 1, probability 0, space 0, times 0 [ 300.102956][ T852] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 300.123178][ T852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.131329][ T852] usb 4-1: Product: syz [ 300.141978][ T9164] CPU: 1 UID: 0 PID: 9164 Comm: syz.1.863 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.142005][ T9164] Tainted: [L]=SOFTLOCKUP [ 300.142011][ T9164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 300.142021][ T9164] Call Trace: [ 300.142029][ T9164] [ 300.142036][ T9164] dump_stack_lvl+0xe8/0x150 [ 300.142062][ T9164] should_fail_ex+0x412/0x560 [ 300.142090][ T9164] should_failslab+0xa8/0x100 [ 300.142112][ T9164] __kmalloc_noprof+0xde/0x7e0 [ 300.142129][ T9164] ? kfree+0x4d/0x650 [ 300.142149][ T9164] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 300.142179][ T9164] tomoyo_realpath_from_path+0xe3/0x5d0 [ 300.142205][ T9164] ? tomoyo_domain+0xd7/0x130 [ 300.142232][ T9164] ? tomoyo_path_number_perm+0x219/0x630 [ 300.142253][ T9164] tomoyo_path_number_perm+0x246/0x630 [ 300.142277][ T9164] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 300.142296][ T9164] ? __lock_acquire+0x6b5/0x2cf0 [ 300.142330][ T9164] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 300.142375][ T9164] ? __fget_files+0x2a/0x420 [ 300.142399][ T9164] ? __fget_files+0x2a/0x420 [ 300.142418][ T9164] ? __fget_files+0x3a0/0x420 [ 300.142438][ T9164] ? __fget_files+0x2a/0x420 [ 300.142462][ T9164] security_file_ioctl+0xc3/0x2a0 [ 300.142485][ T9164] __se_sys_ioctl+0x47/0x170 [ 300.142512][ T9164] do_syscall_64+0xe2/0xf80 [ 300.142535][ T9164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.142553][ T9164] ? trace_irq_disable+0x37/0x100 [ 300.142574][ T9164] ? clear_bhb_loop+0x60/0xb0 [ 300.142595][ T9164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.142612][ T9164] RIP: 0033:0x7f5b25d9acb9 [ 300.142629][ T9164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.142644][ T9164] RSP: 002b:00007f5b26d2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.142663][ T9164] RAX: ffffffffffffffda RBX: 00007f5b26015fa0 RCX: 00007f5b25d9acb9 [ 300.142675][ T9164] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000003 [ 300.142686][ T9164] RBP: 00007f5b26d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 300.142697][ T9164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.142707][ T9164] R13: 00007f5b26016038 R14: 00007f5b26015fa0 R15: 00007f5b2613fa48 [ 300.142735][ T9164] [ 300.142743][ T9164] ERROR: Out of memory at tomoyo_realpath_from_path. [ 300.147753][ T852] usb 4-1: Manufacturer: syz [ 300.382929][ T6259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.504383][ T30] audit: type=1326 audit(1769179432.686:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.1.865" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b25d9acb9 code=0x0 [ 300.504687][ T852] usb 4-1: SerialNumber: syz [ 300.526420][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.682560][ T9174] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.689750][ T9174] bridge0: port 2(bridge_slave_1) entered listening state [ 300.697122][ T9174] bridge0: port 1(1x9) entered blocking state [ 300.703517][ T9174] bridge0: port 1(1x9) entered listening state [ 300.785842][ T852] usb 4-1: config 0 descriptor?? [ 301.193690][ T9144] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 301.206715][ T9144] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 301.226783][ T852] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 301.249320][ T9180] vim2m vim2m.0: vidioc_s_fmt queue busy [ 301.293098][ T852] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 301.439718][ T852] scsi host1: microtekX6 [ 301.539621][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.866'. [ 302.379638][ T852] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 302.535824][ T852] usb 6-1: device descriptor read/64, error -71 [ 302.786148][ T852] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 302.932726][ T852] usb 6-1: device descriptor read/64, error -71 [ 303.046165][ T852] usb usb6-port1: attempt power cycle [ 303.203661][ T9200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.221063][ T9200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.290442][ T9200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.319368][ T9200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.405728][ T852] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 303.472192][ T852] usb 6-1: device descriptor read/8, error -71 [ 303.489536][ T5886] net_ratelimit: 12 callbacks suppressed [ 303.489644][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.645756][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.654348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.744252][ T852] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 303.791279][ T852] usb 6-1: device descriptor read/8, error -71 [ 303.809767][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 303.893261][ T6016] usb 4-1: USB disconnect, device number 47 [ 303.914725][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.877'. [ 303.936422][ T852] usb usb6-port1: unable to enumerate USB device [ 303.962276][ T30] audit: type=1326 audit(1769179436.146:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9215 comm="syz.0.878" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8638d9acb9 code=0x0 [ 304.241756][ T9228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.257299][ T5886] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 304.273250][ T9228] vim2m vim2m.0: vidioc_s_fmt queue busy [ 304.452301][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 304.485803][ T6016] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 304.520276][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.537136][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.566706][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.589622][ T5886] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 304.617691][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.652431][ T5886] usb 3-1: config 0 descriptor?? [ 304.682209][ T6016] usb 4-1: Using ep0 maxpacket: 8 [ 304.695747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.704278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.722776][ T6016] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 304.733962][ T6016] usb 4-1: config 179 has no interface number 0 [ 304.745737][ T6016] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 304.774910][ T6016] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 304.786462][ T852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.794778][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.813879][ T6016] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 304.854561][ T6016] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 304.952963][ T6016] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 304.973254][ T6016] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 304.988880][ T6016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.008139][ T9224] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 305.077552][ T5886] hid_parser_main: 149 callbacks suppressed [ 305.077568][ T5886] logitech 0003:046D:C29C.0023: unknown main item tag 0x0 [ 305.131510][ T5886] logitech 0003:046D:C29C.0023: unknown main item tag 0x0 [ 305.196815][ T5886] logitech 0003:046D:C29C.0023: unknown main item tag 0x0 [ 305.222616][ T5886] logitech 0003:046D:C29C.0023: unknown main item tag 0x0 [ 305.230651][ T5886] logitech 0003:046D:C29C.0023: unknown main item tag 0x0 [ 305.246989][ T5886] logitech 0003:046D:C29C.0023: unknown main item tag 0x0 [ 305.249946][ T6016] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input46 [ 305.258780][ T5886] logitech 0003:046D:C29C.0023: unknown main item tag 0x0 [ 305.408665][ T5886] logitech 0003:046D:C29C.0023: unknown main item tag 0x0 [ 305.443716][ T9224] netlink: 'syz.3.881': attribute type 1 has an invalid length. [ 305.452300][ T24] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 305.471687][ T6259] usb 4-1: USB disconnect, device number 48 [ 305.471687][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 305.471820][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 305.529520][ T5886] logitech 0003:046D:C29C.0023: unknown main item tag 0x0 [ 305.576740][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.615460][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 305.621047][ T5886] logitech 0003:046D:C29C.0023: unknown main item tag 0x0 [ 305.631628][ T24] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 305.641460][ T24] usb 6-1: config 179 has no interface number 0 [ 305.649167][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 305.663943][ T5886] logitech 0003:046D:C29C.0023: unbalanced collection at end of report description [ 305.676297][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 305.689507][ T5886] logitech 0003:046D:C29C.0023: parse failed [ 305.695986][ T5886] logitech 0003:046D:C29C.0023: probe with driver logitech failed with error -22 [ 305.705304][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 305.733028][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 305.745215][ T5886] usb 3-1: USB disconnect, device number 45 [ 305.760039][ T24] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 305.790025][ T24] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 305.816875][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.834245][ T9230] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 306.149886][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input47 [ 306.181776][ T9237] IPVS: length: 201 != 24 [ 306.424458][ T9230] netlink: 'syz.5.882': attribute type 1 has an invalid length. [ 306.463191][ T852] usb 6-1: USB disconnect, device number 32 [ 306.463196][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 306.463337][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 306.487345][ T24] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 306.670012][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 306.817129][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 306.833430][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.852262][ T24] usb 4-1: config 0 descriptor?? [ 306.937391][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'. [ 307.065544][ T6259] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 307.226466][ T6259] usb 3-1: Using ep0 maxpacket: 32 [ 307.234499][ T6259] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 307.243064][ T6259] usb 3-1: config 0 has no interface number 0 [ 307.249544][ T6259] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 307.260890][ T6259] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 307.319011][ T6259] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 307.330702][ T6259] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 307.341898][ T6259] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 307.354368][ T24] logitech 0003:046D:C626.0024: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.3-1/input0 [ 307.383587][ T6259] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 307.425539][ T5886] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 307.443681][ T6259] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 307.475576][ T6259] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 307.491801][ T9237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.517531][ T9237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.532907][ T6259] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 307.552498][ T6259] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.578955][ T6259] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 307.595938][ T6259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.605532][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 307.622548][ T5886] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 307.635450][ T5886] usb 6-1: config 0 has no interface number 0 [ 307.655605][ T5886] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 307.673554][ T6259] usb 3-1: Product: syz [ 307.683544][ T6259] usb 3-1: Manufacturer: syz [ 307.693700][ T30] audit: type=1326 audit(1769179439.866:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.1.894" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b25d9acb9 code=0x0 [ 307.723510][ T6259] usb 3-1: SerialNumber: syz [ 307.735590][ T5886] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 307.744873][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.756004][ T6259] usb 3-1: config 0 descriptor?? [ 307.765969][ T9251] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 307.775672][ T9251] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 307.782897][ T5886] usb 6-1: Product: syz [ 307.789633][ T5886] usb 6-1: Manufacturer: syz [ 307.798939][ T6259] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 307.811647][ T5886] usb 6-1: SerialNumber: syz [ 307.829660][ T5886] usb 6-1: config 0 descriptor?? [ 307.836821][ T6259] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 307.855296][ T5886] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 307.871721][ T5886] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 307.882569][ T6259] scsi host1: microtekX6 [ 308.106252][ T5886] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 308.228455][ T6016] usb 4-1: USB disconnect, device number 49 [ 308.399878][ T9257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.416012][ T9257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.543291][ T5886] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 308.690870][ T5886] net_ratelimit: 10 callbacks suppressed [ 308.690891][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.746753][ T852] usb 6-1: USB disconnect, device number 33 [ 308.796937][ T852] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 308.845831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.854528][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.990786][ T9276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.027522][ T9276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.531119][ T9289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.540718][ T9289] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.615583][ T9289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.823084][ T6259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.870910][ T9294] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 309.879234][ T9294] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 309.885749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.903664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.990359][ T9290] vim2m vim2m.0: vidioc_s_fmt queue busy [ 310.812447][ T9297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.821312][ T9297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.867430][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.875855][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.233229][ T6016] usb 3-1: USB disconnect, device number 46 [ 311.617920][ T9310] IPVS: length: 201 != 24 [ 311.623968][ T9310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.632926][ T9310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.652956][ T9310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.663981][ T9310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.865514][ T6016] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 312.025493][ T6016] usb 3-1: Using ep0 maxpacket: 8 [ 312.032271][ T6016] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.047896][ T6016] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 312.064837][ T6016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.106734][ T6016] usb 3-1: Product: syz [ 312.122140][ T6016] usb 3-1: Manufacturer: syz [ 312.159285][ T6016] usb 3-1: SerialNumber: syz [ 312.199161][ T6016] usb 3-1: config 0 descriptor?? [ 312.222501][ T6016] usb 3-1: bad CDC descriptors [ 312.245144][ T6016] usb 3-1: unsupported MDLM descriptors [ 312.267451][ T6016] cdc_acm 3-1:0.0: Zero length descriptor references [ 312.295569][ T6016] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 312.420183][ T6016] usb 3-1: USB disconnect, device number 47 [ 312.605453][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 312.612794][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 313.027086][ T30] audit: type=1326 audit(1769179445.216:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.3.912" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff89af9acb9 code=0x0 [ 313.303784][ T6259] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 313.467394][ T6259] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 313.500943][ T6259] usb 3-1: config 0 has no interface number 0 [ 313.521499][ T6259] usb 3-1: config 0 interface 11 altsetting 253 has an endpoint descriptor with address 0x13, changing to 0x3 [ 313.557828][ T6259] usb 3-1: config 0 interface 11 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 1024 [ 313.578654][ T6259] usb 3-1: config 0 interface 11 has no altsetting 0 [ 313.596972][ T6259] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 313.618655][ T6259] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 313.642607][ T6259] usb 3-1: SerialNumber: syz [ 313.655843][ T6016] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 313.671060][ T6259] usb 3-1: config 0 descriptor?? [ 313.686640][ T9339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.698588][ T9326] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 313.712503][ T9339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.730480][ T6259] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 313.753227][ T6259] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 87 [ 313.779374][ T6259] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 7 [ 313.799531][ T6259] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 313.820037][ T6016] usb 2-1: Using ep0 maxpacket: 32 [ 313.825639][ T6259] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 313.827719][ T6016] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 313.833834][ T6259] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 313.885792][ T852] net_ratelimit: 11 callbacks suppressed [ 313.885817][ T852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.899946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.906483][ T6259] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 313.915672][ T6016] usb 2-1: config 0 has no interface number 0 [ 313.915724][ T6016] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 313.915767][ T6016] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 313.915792][ T6016] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 313.915822][ T6016] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 313.938666][ T6259] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 313.945753][ T9337] netlink: 'syz.5.915': attribute type 31 has an invalid length. [ 313.982180][ T6016] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 313.984274][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.994146][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.915'. [ 314.013164][ T6016] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 314.023331][ T6016] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 314.045730][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.054230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.075560][ T6259] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 314.116821][ T6259] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 314.139889][ T6259] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 314.158507][ T6259] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 314.158523][ T6016] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 314.175510][ T6259] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 314.192701][ T6259] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 314.203845][ T6259] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 314.235450][ T6016] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 314.242366][ T6259] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 314.285200][ T6016] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.316739][ T6016] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 314.327291][ T6016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.339554][ T6259] usb 3-1: USB disconnect, device number 48 [ 314.376959][ T6016] usb 2-1: Product: syz [ 314.402089][ T6016] usb 2-1: Manufacturer: syz [ 314.406115][ T6259] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 314.415532][ T6016] usb 2-1: SerialNumber: syz [ 314.464513][ T6016] usb 2-1: config 0 descriptor?? [ 314.474901][ T6259] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 314.504647][ T9335] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 314.514675][ T6259] keyspan 3-1:0.11: device disconnected [ 314.526240][ T9335] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 314.536148][ T6016] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 314.554839][ T6016] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 314.623425][ T6016] scsi host1: microtekX6 [ 314.635593][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 314.648437][ T9344] netlink: 'syz.0.918': attribute type 31 has an invalid length. [ 314.656716][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.918'. [ 314.795571][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 314.803782][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 314.815458][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 314.845998][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.857257][ T24] usb 6-1: config 0 descriptor?? [ 314.988274][ T24] usb 6-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 315.028511][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.082594][ T9351] libceph: resolve ' [ 315.082594][ T9351] -&fYǝa2i [ 315.082594][ T9351] .?&*&' (ret=-3): failed [ 315.096058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.112271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.119792][ T9342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.120782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.150751][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 315.156035][ T9342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.218758][ T24] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 315.250060][ T24] usb 6-1: media controller created [ 315.356122][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 315.383905][ T9359] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] SMP KASAN PTI [ 315.396368][ T9359] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 315.404795][ T9359] CPU: 1 UID: 0 PID: 9359 Comm: syz.5.917 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.415587][ T9359] Tainted: [L]=SOFTLOCKUP [ 315.419924][ T9359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 315.430073][ T9359] RIP: 0010:__mutex_lock+0x14b/0x1300 [ 315.435491][ T9359] Code: 20 c4 da 99 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 e4 0f 00 00 83 3d 13 a4 60 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 89 7d af f6 4d 39 64 24 60 0f 85 10 0f 00 [ 315.455109][ T9359] RSP: 0018:ffffc90003267420 EFLAGS: 00010202 [ 315.461209][ T9359] RAX: 0000000000000019 RBX: 1ffff9200064ce9c RCX: ffffffff99dac403 [ 315.469199][ T9359] RDX: 0000000000000000 RSI: ffffffff8dd39273 RDI: 00000000000000c8 [ 315.477174][ T9359] RBP: ffffc900032675d8 R08: ffffc90003267547 R09: 0000000000000000 [ 315.485146][ T9359] R10: ffffc90003267520 R11: fffff5200064cea9 R12: 0000000000000068 [ 315.493127][ T9359] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.501107][ T9359] FS: 00007f442bdd56c0(0000) GS:ffff888125a28000(0000) knlGS:0000000000000000 [ 315.510033][ T9359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 315.516627][ T9359] CR2: 000020000008b000 CR3: 00000000347b2000 CR4: 00000000003526f0 [ 315.524598][ T9359] Call Trace: [ 315.527868][ T9359] [ 315.530802][ T9359] ? __mutex_lock+0x32d/0x1300 [ 315.535576][ T9359] ? dvb_usbv2_generic_write+0x26/0x60 [ 315.541214][ T9359] ? irqentry_exit+0x59c/0x620 [ 315.546089][ T9359] ? lockdep_hardirqs_on+0x7a/0x110 [ 315.551319][ T9359] ? __pfx___mutex_lock+0x10/0x10 [ 315.556367][ T9359] dvb_usbv2_generic_write+0x26/0x60 [ 315.561661][ T9359] mxl111sf_ctrl_msg+0x160/0x2f0 [ 315.566620][ T9359] mxl111sf_write_reg+0xa9/0x1b0 [ 315.571583][ T9359] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 315.577140][ T9359] ? lockdep_hardirqs_on_prepare+0x22a/0x260 [ 315.583141][ T9359] mxl111sf_i2c_xfer+0x496/0x5100 [ 315.588274][ T9359] ? unwind_next_frame+0xa5/0x23c0 [ 315.593382][ T9359] ? unwind_next_frame+0xa5/0x23c0 [ 315.598499][ T9359] ? rcu_is_watching+0x15/0xb0 [ 315.603276][ T9359] ? rcu_is_watching+0x15/0xb0 [ 315.608049][ T9359] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 315.613518][ T9359] ? is_bpf_text_address+0x292/0x2b0 [ 315.618832][ T9359] ? is_bpf_text_address+0x26/0x2b0 [ 315.624326][ T9359] ? kernel_text_address+0xa5/0xe0 [ 315.629556][ T9359] ? __kernel_text_address+0xd/0x30 [ 315.634782][ T9359] ? unwind_get_return_address+0x4d/0x90 [ 315.640416][ T9359] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 315.646580][ T9359] ? arch_stack_walk+0xfb/0x150 [ 315.651452][ T9359] ? stack_trace_save+0xa9/0x100 [ 315.656388][ T9359] ? __pfx_stack_trace_save+0x10/0x10 [ 315.661769][ T9359] ? check_path+0x21/0x40 [ 315.666112][ T9359] ? check_noncircular+0xda/0x150 [ 315.671147][ T9359] ? add_lock_to_list+0xc7/0x100 [ 315.676106][ T9359] ? lockdep_unlock+0x5d/0xd0 [ 315.680785][ T9359] ? __lock_acquire+0x146e/0x2cf0 [ 315.685821][ T9359] __i2c_transfer+0x79a/0x1ee0 [ 315.690612][ T9359] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 315.696433][ T9359] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 315.702256][ T9359] ? i2c_transfer+0xc8/0x2d0 [ 315.706872][ T9359] i2c_transfer+0x1cc/0x2d0 [ 315.711393][ T9359] i2cdev_ioctl_rdwr+0x460/0x740 [ 315.716343][ T9359] i2cdev_ioctl+0x6a5/0x880 [ 315.720863][ T9359] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 315.725890][ T9359] ? __fget_files+0x3a0/0x420 [ 315.730620][ T9359] ? __fget_files+0x2a/0x420 [ 315.735214][ T9359] ? bpf_lsm_file_ioctl+0x9/0x20 [ 315.740157][ T9359] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 315.745187][ T9359] __se_sys_ioctl+0xfc/0x170 [ 315.749798][ T9359] do_syscall_64+0xe2/0xf80 [ 315.754311][ T9359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.760392][ T9359] ? trace_irq_disable+0x37/0x100 [ 315.765427][ T9359] ? clear_bhb_loop+0x60/0xb0 [ 315.770120][ T9359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.776018][ T9359] RIP: 0033:0x7f442db9acb9 [ 315.780458][ T9359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.800167][ T9359] RSP: 002b:00007f442bdd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.808609][ T9359] RAX: ffffffffffffffda RBX: 00007f442de16090 RCX: 00007f442db9acb9 [ 315.816583][ T9359] RDX: 0000200000000300 RSI: 0000000000000707 RDI: 0000000000000005 [ 315.824656][ T9359] RBP: 00007f442dc08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 315.833142][ T9359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.841189][ T9359] R13: 00007f442de16128 R14: 00007f442de16090 R15: 00007f442df3fa48 [ 315.849172][ T9359] [ 315.852187][ T9359] Modules linked in: [ 315.856822][ T9359] ---[ end trace 0000000000000000 ]--- [ 315.885130][ T9359] RIP: 0010:__mutex_lock+0x14b/0x1300 [ 315.895256][ T9359] Code: 20 c4 da 99 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 e4 0f 00 00 83 3d 13 a4 60 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 89 7d af f6 4d 39 64 24 60 0f 85 10 0f 00 [ 315.923529][ T9359] RSP: 0018:ffffc90003267420 EFLAGS: 00010202 [ 315.930366][ T6016] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 315.933630][ T9359] RAX: 0000000000000019 RBX: 1ffff9200064ce9c RCX: ffffffff99dac403 [ 315.974759][ T9359] RDX: 0000000000000000 RSI: ffffffff8dd39273 RDI: 00000000000000c8 [ 316.001379][ T9359] RBP: ffffc900032675d8 R08: ffffc90003267547 R09: 0000000000000000 [ 316.055073][ T9359] R10: ffffc90003267520 R11: fffff5200064cea9 R12: 0000000000000068 [ 316.057052][ T6259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.063428][ T9359] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.127732][ T6016] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 316.140398][ T6016] usb 3-1: config 0 has no interface number 0 [ 316.153494][ T6016] usb 3-1: config 0 interface 11 altsetting 253 has an endpoint descriptor with address 0x13, changing to 0x3 [ 316.170469][ T6016] usb 3-1: config 0 interface 11 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 1024 [ 316.170680][ T9359] FS: 00007f442bdd56c0(0000) GS:ffff888125a28000(0000) knlGS:0000000000000000 [ 316.224685][ T6016] usb 3-1: config 0 interface 11 has no altsetting 0 [ 316.233726][ T9359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 316.241242][ T9359] CR2: 0000200000129030 CR3: 00000000347b2000 CR4: 00000000003526f0 [ 316.252637][ T9359] Kernel panic - not syncing: Fatal exception [ 316.259264][ T9359] Kernel Offset: disabled [ 316.263582][ T9359] Rebooting in 86400 seconds..