last executing test programs: 53.428114414s ago: executing program 0 (id=2138): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 53.282961801s ago: executing program 0 (id=2139): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) fsopen(0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="78000000070a050000000000000000000a0000040900020073797a32000000000c00034000000000000000030c000580080002400000000108000a40000000030c00064000000000000000020900010073797a3100000000f68d8b3f6ff451cfca5c0fe376555ea0413efe838218cc569dd3712e324b5b2cfee547d3cb61b183394c9943370685aacc5a"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x4811) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x27}, 0xfffffffd}) getgid() fsopen(&(0x7f0000000240)='efs\x00', 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x30, 0x0, 0x205, 0x0, 0x2, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xc4001) 51.504876557s ago: executing program 0 (id=2145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 51.402126072s ago: executing program 0 (id=2147): r0 = syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d000009058202000200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000880)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x1, 0x1, 0x4, 0x7, 0x40, 0x6, 0xe, 0x0, 0x1004}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r2 = syz_io_uring_setup(0x1da9, &(0x7f0000005b80)={0x0, 0xe874, 0x40, 0x2000000, 0x2d4}, &(0x7f0000000140), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x22, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) write$UHID_DESTROY(r1, &(0x7f00000000c0), 0x4) 48.910618091s ago: executing program 0 (id=2155): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20008805}, 0x2404814d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040)=[{0xb31}], 0x1, 0x1, 0x0, 0x2, 0x0, 0x2}) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000000200)='0', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) semget(0x1, 0x4, 0x10) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r6, &(0x7f0000000380)=""/144, 0x90) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x3, 0xffff0000, 0x7, 0x6, 0x19, "78abf91327e6506f572a65160ea9620dd531ef"}) 45.570042118s ago: executing program 0 (id=2170): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/freeze_filesystems', 0x13800, 0x8c) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x1, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x1}, {}, {}, @result={0xbac, 0x28}}], 0x70) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="260f8aff420000430f2243410f89449500000f01350500000066b80d000f00d036660fc77000c4c235a8b4ce15a20000660f3881830000010048b8ef580000000000000f23c80f21f835000040000f23f8c4217bf0bb0000c0fe", 0x5a}], 0x1, 0x8, &(0x7f00000001c0), 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0xbba0e750fb86e36c) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r6, 0x3b8a, &(0x7f0000000380)={0x28, 0x402, 0x0, 0x0, 0x0}) ptrace(0x10, 0x0) syz_open_procfs$pagemap(0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x3a, 0x23b) 30.500365015s ago: executing program 32 (id=2170): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/freeze_filesystems', 0x13800, 0x8c) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x1, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x1}, {}, {}, @result={0xbac, 0x28}}], 0x70) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="260f8aff420000430f2243410f89449500000f01350500000066b80d000f00d036660fc77000c4c235a8b4ce15a20000660f3881830000010048b8ef580000000000000f23c80f21f835000040000f23f8c4217bf0bb0000c0fe", 0x5a}], 0x1, 0x8, &(0x7f00000001c0), 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0xbba0e750fb86e36c) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r6, 0x3b8a, &(0x7f0000000380)={0x28, 0x402, 0x0, 0x0, 0x0}) ptrace(0x10, 0x0) syz_open_procfs$pagemap(0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x3a, 0x23b) 18.504573117s ago: executing program 3 (id=2265): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000004600), 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file7\x00', 0x2000, 0x0) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_cmd={0x24, 0x0, 0x3, 0xfffe, 0xff, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x20000000, 0x7883, 0x0, 0x1, 0x1, 0x6162b9dd, [0x0, 0x80000000]}}) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) r5 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 15.330941716s ago: executing program 3 (id=2275): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 14.162117958s ago: executing program 3 (id=2277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) 13.273767613s ago: executing program 3 (id=2281): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0xfffffffd, {0xa}, [@NDA_CACHEINFO={0x14, 0x3, {0x4}}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x44}, 0x1, 0x2000000, 0x0, 0xc0}, 0x0) 13.146992265s ago: executing program 3 (id=2283): socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(0xffffffffffffffff) r3 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x44e880, 0x0) ftruncate(r3, 0x200004) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x6e0, 0xec000000, 0xcd}, {0x28a, 0x0, 0x7fffffff}]}) syz_emit_ethernet(0x46, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="e8001a8048000a8014000700ff"], 0x15c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 10.56275739s ago: executing program 5 (id=2292): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) shmdt(0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x1}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000016c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x1, 0x4000, &(0x7f00000006c0)="02"}) (async) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac1(r2, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x81, 0x1, "9a"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x16, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0003fd000000ec03"]}, 0x0) 7.415319823s ago: executing program 5 (id=2301): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r1, 0x11, 0x66, 0x0, &(0x7f0000000d00)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) syz_emit_ethernet(0x82, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000740000000000019078ac1efc01ac1414aa05009078e00000e046000000000000000011000000000000000000000300443c00030a01010100000000ac1414bb000000000000000000000000ac141400000000007f00000100000000ac14140000000000ac141400"/130], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 6.124819934s ago: executing program 5 (id=2306): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="814f6195b95bf67e38f004280000687ba767dd888b918fad803f3fac38ba4e92d5e792d4b254fdd542904fd6c072a51d8f868451869012862fae534152e17c0e47cea5149b18f23814793f2bda9662b600791f023cd63cdadef92960ef655843a8af74f8e2ba1e4c9067a666c6be4da32ca15e47a97750566c22050d9a293b3906f73b697789c1bb268159e197e9214f22a3bb409c9c0f947c8bf0543e3c68d7285ffe31b8fcf66cdac19f4a6c7a22d875be79367c667473dc00"/197], 0x28, 0x4001}}], 0x1, 0x1) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x40000000000006c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000000a00)={0x20, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x0, 0x2041, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2004, @fd_index=0xfffffffe, 0xf74, &(0x7f0000000200)=""/43, 0x2b, 0x3}) syz_io_uring_setup(0x1df7, &(0x7f0000001480)={0x0, 0xfd09, 0x9020, 0x8000001, 0x224, 0x0, r2}, &(0x7f0000000180), &(0x7f0000000240)) recvmmsg(r1, &(0x7f0000000300), 0x0, 0x2, 0x0) 5.31720976s ago: executing program 1 (id=2309): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0xfe6c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xf00, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) 5.126573661s ago: executing program 5 (id=2310): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000003000128009000100766c616e00000000200002800c0002001b000000020000000600050088a8000006000100", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x2008801}, 0x40000) syz_usb_control_io$hid(r5, 0x0, 0x0) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) futex(&(0x7f0000004000)=0x1400005, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb301fffd) fcntl$notify(r7, 0x402, 0x20) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r8, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 5.126065642s ago: executing program 1 (id=2311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8001}, @wr_drn={0x68, 0x20, {0x3, 0xc4}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x1}}, @code={0xa, 0x56, {"f20f108100680000470f0966b808018ed80f2043410f01d166ba400066ed66baa100b000eec744240051000000c74424020d000000ff1c242ef30fc7b680ffffff410f01f8"}}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x457, 0x10, 0xffff, 0x2}}, @uexit={0x0, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x56, 0x2, 0x4, 0x2}}], 0x1a6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4004ae52, &(0x7f0000000000)=0xffffffffffffffff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r4, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.335237494s ago: executing program 4 (id=2314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b000100627269646765"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 4.209600358s ago: executing program 4 (id=2315): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x800}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) 4.086324079s ago: executing program 4 (id=2316): socket(0x840000000002, 0x3, 0x100) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34000000200025a729a17000fddbdf250a0000cdff0000019f0001000800060000000000080017004e204e23050015000200"], 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x8000, 0x76d, 0x10000001, 0x400, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x6, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0xe, "4372070000001000476fb2940acf"}}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r7, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0xfffffffffffffffe}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r7, 0xc008aec1, &(0x7f0000000980)={0xa, 0x0, [{0x80000001, 0x2, 0x2, 0x5, 0x400, 0x2, 0x3aa}, {0x2, 0x0, 0x0, 0x82e8, 0x200, 0xffffffff, 0x6}, {0x7, 0x9, 0x5, 0x2, 0x0, 0x3, 0x3}, {0xb, 0x6, 0x0, 0x6, 0x1000, 0x2007, 0x9c1c}, {0xb, 0x7fffffff, 0x0, 0x4, 0x101, 0x5, 0x10000}, {0xd, 0x80000002, 0x3, 0x8001, 0x101, 0x39e, 0x2}, {0xa, 0x4, 0x1, 0x5, 0x807, 0x101, 0x2}, {0xb, 0x5877c6ba, 0x5, 0x0, 0xf1, 0x0, 0x4}, {0x7, 0x7ff, 0x4, 0x18000000, 0x82e, 0x7, 0xd}, {0x1, 0xfffffff8, 0x5, 0xa, 0x5, 0xd0b, 0xd5}]}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x50}}, 0x0) 3.491231552s ago: executing program 2 (id=2318): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x1, 0x88) 3.346647141s ago: executing program 2 (id=2319): socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) fsopen(0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="78000000070a050000000000000000000a0000040900020073797a32000000000c00034000000000000000030c000580080002400000000108000a40000000030c00064000000000000000020900010073797a3100000000f68d8b3f6ff451cfca5c0fe376555ea0413efe838218cc569dd3712e324b5b2cfee547d3cb61b183394c9943370685aacc5a"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x4811) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x27}, 0xfffffffd}) getgid() fsopen(&(0x7f0000000240)='efs\x00', 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.773331146s ago: executing program 1 (id=2320): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x9, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x9, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x8000004, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0xfffffffe, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 1.391992551s ago: executing program 3 (id=2321): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x1000, 0x0, 0x7d49ae8f, 0x90, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) socket(0x3, 0x1, 0x8) setitimer(0x2, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=ANY=[@ANYBLOB="00000000200001032cbd7000ffdbdf25020000000020000510000000050016002c000000"], 0x24}}, 0x8800) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1703}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 1.278204568s ago: executing program 4 (id=2322): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000200900f00200000006e168c000000001eb78963a5fa9bb3212c7bc4c776901b460f88c4799a9f360c4476f81d150882bfb9e281e6ad3549aac2d8e47ad4c794eae2aae07d3edbf849cab789f35e08cf94f14fa8567101ef9e1cee3db37895487062f8507eb40fa63381845264a4cd6bb1b4bffe0e76f83a5e9eb650db"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)) unshare(0x2c020400) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x152829b66759750a}, &(0x7f0000000180)=0x60) 1.159156968s ago: executing program 4 (id=2323): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x2000000}) 1.131175733s ago: executing program 4 (id=2324): socket(0x2b, 0x1, 0x1) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x0, 0x3, 0x5f, {0x5f, 0x10, "e23a273b1cc72bf02828c1d42099e2f1765f9bd96305526535350878460de0141553401164142b65bb968e636406c73ba0b2cf1daee8fbb7d35769689fc921e0324cc2d754583ed5888821451a4477a15920f98d6b105a5111b865f9b6"}}, &(0x7f00000000c0)={0x0, 0x3, 0x7e, @string={0x7e, 0x3, "e7be3babff5c804b60123ab95f27b56fdfcae30da73749a8bc52f4100e6a2e7827d7eb3678c1dded537fa9ba3cf7af80023a3b01790861894b34270843fef2150a6f770e25fe86e218cae1f3ae6df12324c45a1c20cd6e08a3b4a4ae44fc6bfdd9387556fadcb5d31b7cbb3903a5b795b93b6b382c9eacb48d6ac5c6"}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x40, 0x7, 0xbb, "dcf5171a1ac862881a739f249610229193e6b3957fbcc0b34dd974a0a73125c360683a3cd79072130f2dce88b5474d551dabc8091230219e94276bfa706585ae9e5b5ad01d13959be24ee48f0641957f1bf5d83f711c3a5f52d52678e2665018867968d06cb5b22bf20fb86dba449edbeaf1aa3844b26a037cc8239bc24b1a76976d37e75a9089b911bc8692e4a598be27fd2b978a15c183ea37ccaa8e1af9891c6923f3236019d586adc7f3cca1bb98da14abc4c9c81db4534fd2"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000400)={0xc0, 0x5, 0x1, '@'}, &(0x7f0000000440)={0x40, 0x5, 0x2, 'W='}}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x440e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000880)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000000640)="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", 0x17f}], 0x3}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000940)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.000575503s ago: executing program 2 (id=2325): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB='G'], 0xfffffffffffffd2b}, 0x1, 0x0, 0x0, 0x80640d0}, 0x200488c9) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 871.212809ms ago: executing program 2 (id=2326): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x800}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) 809.007155ms ago: executing program 1 (id=2327): unshare(0x6020400) r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xb, &(0x7f0000001200)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(0x0) close(0xffffffffffffffff) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000ac0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r2, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000140)={0xb, 0x2, 0x1402, 0x105}) ioctl$TIOCSWINSZ(r2, 0x5414, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) ioctl$VT_RESIZE(r1, 0x5609, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0xb9, 0x8, 0x5, 0x14, @dev={0xfe, 0x80, '\x00', 0x3f}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x700, 0x0, 0x10001}}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/49, 0x31}, {&(0x7f0000000300)=""/29, 0x1d}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000380)=""/126, 0x7e}, {&(0x7f0000000680)=""/250, 0xfa}], 0x7, &(0x7f0000000540)=""/98, 0x62}, 0x3f45}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000800)=""/244, 0xf4}, {&(0x7f0000000900)=""/199, 0xc7}], 0x2}, 0x8}, {{&(0x7f0000000a00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000a80)=""/63, 0x3f}, {&(0x7f0000000ac0)=""/7, 0x7}, {&(0x7f0000000b00)=""/236, 0xec}, {&(0x7f0000000c00)=""/130, 0x82}, {&(0x7f0000000cc0)=""/97, 0x61}, {&(0x7f0000000d40)=""/146, 0x92}, {&(0x7f0000000e00)=""/168, 0xa8}, {&(0x7f0000000ec0)=""/2, 0x2}, {&(0x7f0000000f00)=""/159, 0x9f}], 0x9, &(0x7f0000001280)=""/201, 0xc9}, 0x4}, {{&(0x7f0000001080)=@x25={0x9, @remote}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001100)=""/19, 0x13}, {&(0x7f0000001380)=""/124, 0x7c}, {&(0x7f0000001400)=""/43, 0x2b}, {&(0x7f0000001440)=""/64, 0x40}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)}], 0x6, &(0x7f0000002540)=""/144, 0x90}, 0x9}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002600)=""/113, 0x71}, {&(0x7f0000002680)=""/108, 0x6c}, {&(0x7f0000002700)=""/87, 0x57}, {&(0x7f0000002780)=""/79, 0x4f}, {&(0x7f0000002800)=""/183, 0xb7}, {&(0x7f00000028c0)=""/69, 0x45}], 0x6, &(0x7f00000029c0)}, 0x82bf}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002a00)=""/107, 0x6b}], 0x1, &(0x7f0000002ac0)=""/198, 0xc6}, 0x2}], 0x6, 0x0, &(0x7f0000002d40)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb, 0x0, &(0x7f0000000040)="259a43f288476d2610054c", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x50) getpeername(r0, 0x0, 0x0) r5 = socket(0x2b, 0x80801, 0x1) bind$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}, 0x3}}, 0x10) unshare(0x80) 720.744768ms ago: executing program 2 (id=2328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001600010000000000000000000a0000000000000014000100f90100000000000000000000d800000117000280"], 0x44}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000f, 0x4000010, 0xffffffffffffffff, 0x8000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000180)="66b8c9008ee8f30fc73166ba6100ecf30f1efa0f20c035200000000f22c2440f20c03505000000440f22c0b805000000b98f9800000f01d9c4c1d859c8643e0f01dff30f1efa", 0x46}], 0x1, 0x79, 0x0, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) syz_io_uring_submit(r4, r9, 0xfffffffffffffffc) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0x1, 0x2, 0x101, 0x0, 0x0, {0x7}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0x2c}}, 0x80) 695.617854ms ago: executing program 5 (id=2329): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x1, 0x88) 549.852958ms ago: executing program 1 (id=2330): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x4e5c, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x4e30, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x2c48, 0x4, [@m_police={0x1268, 0x3, 0x0, 0x0, {{0xb}, {0x11a4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x8, 0x5, 0x200, {0xc3, 0x2, 0xe331, 0x81, 0x2b, 0x2}, {0x1, 0x0, 0x401, 0xe9b, 0xd}, 0x2, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xc, 0x1000, 0x8, 0x8, 0x9, 0x1, 0x187, 0xffffffff, 0x31, 0xab4, 0xd3, 0x7, 0xe33, 0x7, 0x7, 0xfff, 0xc63, 0x40, 0x2, 0xd, 0x2, 0x7, 0x6, 0x5, 0x9, 0xe, 0x1, 0x80000001, 0x5, 0xb, 0x7, 0x9, 0x4, 0x80000000, 0x1, 0x7, 0x1, 0x80000001, 0xffffffff, 0x8, 0x5, 0xfffffffb, 0x1, 0x3, 0x9, 0x4, 0x526a, 0x8001, 0x5, 0x6, 0x61f, 0x1, 0xfffffffa, 0xfffffe00, 0x2, 0x66, 0xfff, 0x2f, 0xffff, 0x1000, 0xffff, 0x9, 0x9, 0x9, 0x2, 0x9, 0x4, 0xdcb, 0xd, 0x8, 0xffffffff, 0x8, 0x6, 0x5, 0x2, 0x5, 0x40, 0x3, 0x8, 0x80000001, 0x6, 0x2, 0x36e, 0x5, 0x80000001, 0x8, 0x5, 0xb3, 0xfffffff7, 0x6, 0x34f, 0x0, 0x1, 0x9aa, 0x10, 0x4, 0x3, 0x8, 0x9, 0x81, 0xf, 0x80, 0x6, 0x8, 0x0, 0x5, 0x5, 0x8001, 0x4, 0x0, 0xe, 0x9, 0x5, 0xedb8, 0x10000, 0xf4, 0x1000, 0x4, 0x4, 0x4, 0x8, 0x0, 0x16d, 0xfffffffc, 0x3, 0x9000, 0x6, 0x10001, 0x5, 0x6, 0xa5e, 0xcf, 0x5, 0x6, 0x6eaf, 0x0, 0x0, 0x5, 0xd36, 0xc19, 0x4, 0x3, 0x2, 0x400, 0xb8, 0x1ff, 0x9, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x0, 0x1, 0xc263, 0x7, 0xc, 0x3, 0x8, 0x9, 0x6, 0x81, 0x5, 0x3, 0x2, 0x9, 0xe65c, 0x3, 0x8, 0x3, 0xf, 0x80000001, 0xfff, 0x53a, 0x3, 0x2, 0xc00000, 0x7c85, 0x1, 0x3, 0xfff, 0x8, 0x9, 0x2, 0xbaa4, 0x3ff, 0x7f, 0x7, 0xd91, 0x101, 0x1003a4d9, 0x32e4, 0x6, 0x5, 0x7, 0x3, 0x8000, 0x10, 0x0, 0x8, 0xfffeffff, 0x8, 0x4, 0x0, 0x8, 0xee3, 0x2, 0x10000, 0x5, 0x7, 0xfffffffc, 0x1, 0x1, 0x6, 0x81, 0xe0, 0x3, 0x3, 0x5, 0x6, 0x3, 0xae, 0x9, 0x6, 0x3, 0x5, 0x1, 0x4, 0x6, 0x0, 0x5, 0x3, 0x3ff, 0xba4f, 0x0, 0x4, 0x3, 0x4, 0xbe, 0x7, 0x0, 0x101, 0x4, 0x2c8f, 0x1ff, 0x489f9a93, 0x7, 0x2, 0x9, 0xffffff90, 0x80, 0xd, 0x5, 0x5]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0x9, 0xa4ea, 0x200, 0x2, 0x9, 0x7, 0x1, 0x7, 0x10000, 0xfff, 0x5, 0x8000, 0x4, 0x8, 0x1, 0x4e14194b, 0x9, 0xfffffffa, 0x3, 0x4, 0xfffffffc, 0x6, 0x4, 0x5, 0x8, 0x4, 0x95b, 0x2, 0x0, 0x3, 0x9, 0x8, 0x5, 0x194f, 0xbf6, 0xe6c5, 0x5, 0xf, 0xffffff81, 0x5, 0x2, 0xd, 0x7ff, 0x7, 0xfff, 0x2, 0xfffffffa, 0x81, 0x54c, 0x8, 0x91, 0x8, 0x7, 0x1, 0x101, 0x7, 0xa9, 0x5, 0x7, 0x4, 0x3, 0x10001, 0x16c00000, 0x1, 0x3, 0x8, 0xc, 0xb, 0x81, 0x4, 0x3, 0x0, 0x10001, 0x7, 0x5, 0x80000000, 0x101, 0x5, 0xb, 0x380, 0x6, 0x1, 0xea6, 0x400, 0x4, 0x1, 0xe, 0x7, 0xfff, 0x9, 0x5, 0x2, 0x8, 0x89df, 0x9, 0x7, 0x56, 0x6, 0x65b, 0x8, 0x7ff, 0x9, 0x100, 0x1ff, 0x1ff, 0x7, 0x5, 0x8001, 0x0, 0x7, 0x0, 0x1e, 0x800, 0x2, 0x10, 0x2, 0x8f, 0x8, 0x6, 0x1, 0x9, 0x34, 0x6, 0x3, 0x400, 0xf22, 0xa, 0x7ff, 0x5, 0xfffffff7, 0x22, 0x2, 0x10, 0x8, 0x9, 0x6, 0x4, 0x9, 0xf, 0xfffff800, 0x4, 0x10, 0x9, 0x0, 0x1ff, 0x9, 0x7, 0x8, 0x7, 0x92, 0x200, 0x4, 0xc, 0x6, 0x2, 0x4, 0x2a9, 0x7, 0x8, 0x3, 0x101, 0x10000, 0x3, 0xe, 0x3, 0x6, 0x6, 0x1, 0x0, 0x7, 0x0, 0x3, 0x32a2, 0x4, 0xfb8, 0x1be0, 0xd, 0x916, 0x24, 0xfffffffa, 0x1, 0x200, 0x101, 0x7, 0x6, 0xfffffffb, 0x1, 0x6, 0x6, 0x0, 0x10000, 0x0, 0x7ff, 0x0, 0x3, 0x6, 0x8, 0x1, 0x9, 0x72f, 0x7, 0x1, 0xb, 0x1, 0xcab, 0x800, 0x10, 0x10000, 0x6, 0x8, 0xda0, 0x2, 0x4, 0x7, 0x6, 0x1, 0x8, 0x2, 0x81, 0x81, 0x4, 0x2f9, 0xf46, 0x800, 0x80000000, 0x80f0, 0x4, 0x8, 0x3, 0x10001, 0x371, 0x5, 0xfd, 0xa, 0xe217, 0x6, 0x7fffffff, 0x9, 0x6, 0x3, 0x80, 0x4, 0x7, 0x6, 0xa, 0x7, 0x2, 0x6, 0x3ae8, 0x1, 0xea, 0x3, 0x0, 0x3ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x7, 0x7, 0x38d7, {0x71, 0x2, 0x2, 0x9, 0xc3a0, 0xd32f}, {0xb, 0x1, 0x4, 0x46, 0x1000, 0xfffffffe}, 0xb, 0xa0c5, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0x9, 0xff, 0x0, {0x7, 0x1, 0x8fa, 0xbd, 0x9, 0x3}, {0x8, 0x0, 0x9533, 0x3, 0x64f5, 0x3}, 0x7, 0x5, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x6, 0x6, 0x8, {0x5, 0x2, 0x8, 0x7fff, 0x7, 0x273}, {0x8, 0x0, 0x7, 0x13, 0x7, 0x8}, 0x5fa, 0x5, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffc}, @TCA_POLICE_RATE={0x404, 0x2, [0x5db1, 0x5, 0xe7a9, 0x0, 0x1ff, 0xe, 0x1, 0x9, 0x700000, 0x2, 0xfc1d, 0x400, 0x9, 0x6, 0x1, 0x979, 0x3, 0x7, 0x502, 0x1, 0x9, 0x9, 0x0, 0x8000, 0x3, 0x50d, 0x3, 0x7, 0x1000, 0x3, 0x42, 0x6, 0x7fff, 0xd7, 0x2, 0x0, 0xe137, 0x9, 0x0, 0xffffc5de, 0xff, 0x5, 0x7, 0x9, 0xf, 0x1000, 0x7, 0xfd04, 0x7, 0x7d5, 0x1, 0x4, 0x2, 0x5, 0x9c0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x3ff, 0x4, 0x0, 0xd84a, 0x87, 0xfffffff9, 0x1, 0x4, 0x6, 0x6, 0x9, 0xc, 0xffff13b1, 0x5, 0x10000, 0x4, 0x8, 0x3f, 0x2, 0xfffffc00, 0xfffffbff, 0xf56a, 0x1ff, 0x0, 0x0, 0x5, 0x1, 0x6, 0x8, 0x1, 0x9, 0x5, 0xfffff0fb, 0xe, 0x7, 0x2, 0x8, 0xb16, 0x2, 0x3, 0xc54, 0x4, 0x6, 0x2, 0x9804, 0xfffffffd, 0x9, 0x7fff, 0x5, 0x5, 0xa, 0x5, 0xfffffffd, 0x8000, 0x24000, 0x3, 0x0, 0x8001, 0x7f, 0x5, 0x4, 0x3, 0x9, 0x3, 0xd7, 0x3, 0x0, 0x3, 0x0, 0x8001, 0x2, 0x4, 0x5, 0x1c, 0xffffff00, 0x7, 0x3, 0x2, 0x5, 0x5, 0xfffff762, 0xffffc01f, 0x3, 0x401, 0x6, 0x10001, 0x200, 0x2, 0x8, 0xfffffff8, 0x4, 0xff, 0x5de, 0x5, 0x0, 0x4, 0xefde, 0xc5, 0x9, 0x1ff, 0xb6, 0x3, 0xd8d, 0xaa, 0x7eb530e4, 0x0, 0x3f05d376, 0x8, 0x4, 0x86fe, 0x6, 0xa, 0x2, 0x3, 0x5, 0x7, 0x1, 0xbad7, 0xa9, 0xc9e, 0x6, 0xfd, 0xc, 0x8001, 0x10000, 0x7, 0xfffffffb, 0x4, 0x7, 0x8000, 0xfffffffb, 0x1d19, 0x8, 0xffff, 0xfffff622, 0x8, 0x9042, 0x5, 0x4, 0xd, 0x647c, 0x4, 0x2, 0x17, 0x8, 0x9, 0x101, 0x4, 0x5ba7, 0x0, 0x2, 0x1, 0xffffffff, 0x200, 0x2, 0x8, 0x4, 0x2, 0x2, 0x148b, 0x2, 0x0, 0x2f, 0x5, 0x401, 0xed, 0x9, 0x3, 0x0, 0xc, 0x1, 0x7, 0x800, 0xfffffff9, 0x5, 0x7f, 0x5, 0xffffff28, 0x2, 0x1ff, 0x800, 0x1ff, 0x15, 0x4, 0x5, 0x77, 0x9a3f, 0x7406a8a6, 0x1a44825d, 0xd719, 0x101, 0x10000, 0x5, 0x1, 0x3, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x3, 0x9, 0xb5, 0x45, {0x6, 0x0, 0x9, 0x9, 0x8, 0x6}, {0x6, 0x0, 0xfff8, 0x400, 0x4, 0xc}, 0x7, 0x800, 0x4c}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x12000, 0x6, 0x5b68, 0x4, 0x7f, 0x4, 0x5, 0xd0e, 0x15, 0x4c, 0x0, 0x7ff, 0xffffffff, 0x7fffffff, 0x81, 0x4, 0x1, 0xf, 0x8000, 0x727, 0x80000000, 0x4, 0x5fb, 0x0, 0x6, 0x8, 0x3, 0x2000, 0x101, 0x400, 0x1, 0x7fffffff, 0x1, 0x1052, 0x7ff, 0x3, 0xbfe, 0x4, 0x3, 0x5, 0x159, 0x1, 0x7, 0x3, 0x7, 0x3, 0x7, 0x1, 0x4, 0x4, 0xffff0000, 0x8001, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0xd, 0x6, 0x8001, 0xc7, 0x6, 0x6, 0x8, 0x3, 0x661, 0x7fffffff, 0x40, 0x4, 0xd, 0x7f, 0x4c7, 0xec50, 0x80000000, 0x9, 0x1, 0x7, 0x25, 0x7, 0x3, 0x8000, 0xc, 0x400, 0x1, 0x8, 0x2, 0x4, 0xce0, 0x4, 0x7, 0x64, 0x9, 0x3, 0x1, 0xd9e, 0x2, 0x5, 0x5, 0x7, 0x0, 0x3, 0x4, 0x3, 0x5, 0x1, 0x3, 0x10, 0xfffffffb, 0x8, 0xffffffff, 0x5, 0x8, 0x3, 0x27d1, 0x3, 0xfffffffc, 0x9, 0x3, 0x5, 0x63c, 0xfffffe01, 0xc, 0x4, 0x3, 0xb2c, 0x42d3fd28, 0x0, 0x2, 0xfffffffe, 0x45, 0x200, 0xa, 0x52, 0xffffffff, 0x1ff, 0x7, 0x1, 0x5, 0xc4cd, 0x10000, 0x7fff, 0x0, 0xac4e, 0x7, 0xfffffc01, 0x4, 0x9707, 0x0, 0x1, 0x1, 0x1ff, 0x7, 0x3, 0x4, 0x6, 0x40, 0x9, 0x5, 0xa782, 0x10000000, 0x80, 0x800, 0x1, 0x7, 0x3, 0x3, 0xa, 0x60, 0x5188, 0xc5, 0x7, 0x2, 0x7fff, 0xb, 0x9af2, 0x7, 0x6e3, 0x3, 0x0, 0x5, 0x7, 0x9, 0x1, 0x8, 0x4, 0x6, 0x1ff, 0x9, 0x4e83, 0x2, 0x31d, 0x6, 0x8, 0x9, 0x9, 0x7, 0x6, 0xc7f5, 0x4, 0x7, 0x7, 0x7, 0x5, 0x3ff, 0x5, 0x1, 0x3, 0x6687, 0xc41, 0x4, 0x63d1, 0x96, 0x2, 0x0, 0xa77, 0xd, 0x4, 0x4, 0x9, 0x930, 0x10001, 0x9, 0x8, 0x5, 0x2, 0x3cb6, 0x5, 0x4, 0x1, 0x8, 0x5, 0x7ff, 0x7, 0x4, 0x5, 0xaa3, 0x9, 0x8001, 0xe90, 0x3ff, 0xfffffffa, 0x8, 0x2800000, 0x2, 0x9, 0x9, 0x8, 0x7, 0x2, 0x9cf, 0x719, 0xfffffff4, 0x4, 0x56, 0x8000, 0x2]}]]}, {0x99, 0x6, "fe6d860dd84cbb0f361d847bcdf4f1cca1e189ca63b31409d2acc4a678e75e5969d6bbe5a54ecf29b01ab3b4a3b575873b9ace4b4d426436bc19fe437db796f824b3650f50334b10d4b94e2d7d6c31aea3e06975ef3aaa1770d81ceb777a8a733f87a5fd75c8c7aaaf871120b4486a042df4912b9067f5a70de44db7a118c6fc2718a5996c29d9b0aed950a3b4dd45a3ddb7e37f5a"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x130, 0x9, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xf}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf}}]}, {0xc1, 0x6, "14337e58be45d60f659754ec12e5d9ab30fcb57981051924d37f4f0fd25a3ef87b4e232d3bfdc9c80e6ee7845cbdd8ea6467a6e4d8f14d4a03a927cf8cd13c4b64426d975ee16c7b9e3ea473e415c230d4a08725de6d4cf8fa0a2ee1d29d4426544a0954a83455c69df54a86f88e23bdfc955eff64c7fb93320b3d431c93a09c51b007f50b01eda77a1d9eecd6c666f112264ca0082163908544f2055aff6b63df294e668556bd859c2aeeed83a0033d335fa628e8c8f83687fc15f992"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x8c, 0x0, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="584b3d6d9c36"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x2, 0x30000006, 0x5, 0x4}, 0x5}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf167}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0xa4, 0x17, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xd, 0x20000000, 0x5, 0x95}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x2, 0x821, 0x6}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x47, 0x5, 0x3, 0x4}, 0xc341}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x10000000, 0x2, 0x9}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x60, 0x18, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}]}, {0x21, 0x6, "d6337fc71344d621b3f41a408848462f2be26f838c2124f3ed97095d70"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x171c, 0x12, 0x0, 0x0, {{0xb}, {0x1648, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x19c44db1, 0xdcb, 0x1, 0x1, 0x2, 0x1, 0xcd4, 0x7, 0x5, 0x1000, 0x4, 0xfffffffd, 0x1, 0xbb77, 0x1, 0x3, 0x8, 0x2, 0x4, 0xea, 0x2, 0x8b5c, 0x8, 0x34e, 0x8, 0x1, 0x80000001, 0x3, 0x932, 0x7, 0x9, 0x8001, 0x80, 0x2, 0x4, 0x10000, 0x9, 0x200, 0x3, 0x400, 0x4, 0xf, 0x6, 0x1a, 0x5, 0x5, 0x80000000, 0x1bb6, 0x2, 0x9, 0x4, 0x8, 0x6, 0x5, 0x9800, 0x1, 0x356, 0x3, 0x8, 0x1, 0xffffffff, 0xfffffff4, 0x7, 0x6599, 0x4, 0xe931, 0x0, 0x4, 0x5, 0x2, 0x7, 0x1, 0xda, 0x5, 0x75f3c000, 0xa, 0x8c0b, 0x560, 0x7c, 0x100, 0x0, 0xfffffffd, 0x78d7f19a, 0xc, 0x8, 0x7fffffff, 0x3, 0x9, 0x7f, 0x5, 0xffff5c04, 0x8000, 0xdfbe, 0xf6646b3e, 0xffff, 0x2, 0x2e4, 0x400, 0x780f, 0x9, 0x9, 0x9, 0x2, 0x5, 0x4, 0x6, 0x6, 0xd, 0x4, 0xfc, 0x58a6970a, 0x3, 0x1000, 0x12, 0xc, 0x1, 0xff, 0x9, 0x7, 0xe, 0x6, 0x8, 0x7a05cad8, 0x1, 0x84, 0x400, 0xfffffffb, 0x9, 0xe, 0x8, 0x5, 0x4, 0xfffff800, 0x6, 0x7, 0xffffffff, 0x41, 0x6, 0x100, 0xfb67, 0x7, 0xe698, 0x7, 0x4, 0x7, 0x1000, 0xfffffffd, 0x6, 0x9, 0x80000000, 0x0, 0xf, 0xc392, 0xdaa9, 0x7, 0x4, 0x1, 0x9, 0x7fffffff, 0x5d394290, 0x5, 0xd, 0x6, 0x6, 0x200, 0x8, 0x1, 0xa63, 0x5, 0x10001, 0x582, 0x6, 0x6, 0x2, 0x8001, 0x7, 0x8, 0x84c, 0xffff, 0x7, 0xffff, 0x5699, 0xd8fa, 0x7, 0x3, 0x0, 0xb396, 0x7fff, 0x2d3, 0x4, 0x5e73, 0x0, 0x1, 0x18a, 0x3ff, 0x0, 0xc4, 0x2, 0x3ff, 0x3, 0x1ff, 0x8, 0x5fd7000, 0xf3, 0x4, 0x3, 0xd8, 0x1, 0x8, 0x0, 0x8, 0x1, 0xca4a, 0xfffffffe, 0xb, 0x2, 0x3, 0x81, 0x7, 0x6, 0x200, 0x1, 0x39b2, 0x8, 0x1, 0x9, 0x0, 0x9, 0x9, 0x8, 0x4, 0x3, 0x2, 0x446, 0x839, 0x7, 0xea0b, 0x401, 0x1, 0x2, 0xa956, 0x9, 0x7, 0x8, 0x4, 0x1, 0x7f, 0x4d, 0x5, 0xf, 0x800000, 0x35, 0xaa, 0x0, 0x5, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x75}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x1, 0x1, 0x3, {0x3, 0x0, 0x1, 0xfff7, 0x9, 0x7}, {0x3, 0x0, 0x6, 0xa8, 0x8, 0x3}, 0x4, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x7, 0xd3b, 0x2, {0xf6, 0x1, 0x4, 0x200, 0x4597, 0x7fff}, {0x2, 0x2, 0x2, 0xbe, 0x9, 0x40}, 0x6, 0x10001, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4ee5a755}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x101, 0x81, 0x70a2, {0x0, 0x0, 0x7, 0x5, 0xef, 0x8001}, {0x9, 0x2, 0x8, 0xf6, 0xfffc, 0x8001}, 0xae8, 0x2, 0x9c}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff4, 0x1, 0xcc, 0x6, 0x4e11, 0x7, 0x62d, 0x80000001, 0x3, 0x401, 0x5, 0x6, 0x1, 0x5, 0x7fff, 0x0, 0x97, 0x5, 0x3, 0x301ea6fc, 0x80000000, 0x200, 0x7, 0x10, 0x4, 0x3, 0x8, 0x9, 0x100, 0xc, 0x56, 0x8, 0x8, 0xa, 0x4eee6086, 0x1, 0x5, 0x2, 0x1, 0x4c, 0x2, 0x9, 0x122e, 0x4, 0x1000, 0x2, 0x80000000, 0x9, 0x8001, 0x10001, 0x200, 0x1b, 0x8, 0x7, 0xc000000, 0x1, 0x0, 0x1, 0x0, 0x9, 0x7fffffff, 0x2, 0x7, 0x101, 0x0, 0x10, 0x260, 0x0, 0x7, 0x2, 0x2, 0x3, 0x3, 0x6450, 0x1ff, 0xb2, 0x5, 0x0, 0x0, 0x380000, 0x8000, 0x0, 0x6, 0x80000001, 0x1, 0x5, 0x6, 0x8, 0x9, 0x4, 0x3, 0x7, 0x6, 0x40, 0x813, 0x1, 0x7ff, 0xb, 0x6, 0x9, 0x6, 0x8b, 0x6, 0x0, 0xa06, 0xc33, 0xfffffff9, 0x3, 0xb, 0x3, 0x6, 0x9, 0x0, 0x4, 0x25a, 0x3000000, 0x101, 0xfffffff8, 0x0, 0xfea, 0x20000000, 0x6, 0xd, 0x6, 0x8dd4, 0x7, 0xd, 0xffffffff, 0x163f856e, 0xd6, 0xbb68, 0x9, 0x101, 0x14000, 0x9, 0x7, 0x200, 0x5, 0x1, 0x3, 0x6, 0xdb, 0x71c, 0x7, 0x1000, 0x6, 0xb8, 0x54fa07ca, 0x5, 0x5, 0x4, 0xb, 0x8, 0x6, 0x9, 0x2, 0xa, 0x9f, 0x1000, 0x5, 0xba, 0x3b5, 0x1ff, 0x5, 0x7, 0xfffffffe, 0x5, 0x0, 0x5, 0xb479, 0xfffffffd, 0x8, 0x3, 0x2, 0x3, 0x1, 0x1, 0x3, 0x5, 0x101, 0x800, 0x2, 0x7fffffff, 0xbb5c, 0x4e, 0x6, 0x7, 0x3, 0x1, 0x3, 0x2, 0x5, 0x7f, 0x4, 0x3d6, 0x4, 0x4, 0x2, 0x7, 0x3, 0x60000000, 0x1, 0x40, 0xa6, 0x7, 0x6, 0x6, 0x803, 0x0, 0x8, 0x0, 0x8, 0x90, 0x6, 0x0, 0x4, 0x3, 0x4, 0x0, 0x8, 0x9, 0xa4fb, 0x7f, 0x7f0, 0xffffff80, 0x9, 0xa, 0x40000000, 0x19, 0x6, 0x6428, 0x6, 0x7, 0x1, 0x6, 0x9, 0x5, 0xc2a, 0x80000001, 0x2, 0x0, 0x6, 0x6, 0x7, 0x200, 0x2, 0x400, 0x3, 0xf2, 0x0, 0x0, 0x0, 0x6, 0x373, 0x7f, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x6068, 0x1000, 0x80000000, {0x3, 0x1, 0x6, 0xfffa, 0x81, 0x6}, {0xe, 0x1, 0x7f, 0xfffa, 0xdb, 0xffffffff}, 0x6, 0x80, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x3, 0xf, 0x0, 0x200, {0x45, 0x1, 0xa, 0x4, 0x7, 0x2}, {0x2, 0x0, 0x4, 0x2000, 0x7, 0x1}, 0x8000, 0x7, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0xf3, 0x2, 0x9, 0x8, 0x0, 0x1, 0x9, 0x7, 0xff, 0x3c79, 0x3, 0xffffff80, 0xff, 0x5, 0x8001, 0x3ff, 0x2, 0x51, 0x1, 0x1, 0xa729, 0xc, 0xffffff54, 0x4, 0x6, 0x101c, 0x7, 0xfa8, 0x9, 0x8001, 0xd7, 0x7fff, 0x7, 0x3, 0x4, 0x5, 0x401, 0xf906, 0x8, 0x2, 0x1ff, 0x100, 0x8, 0x8, 0x5, 0x3, 0x742, 0x3, 0x8, 0x3, 0x2, 0x4, 0x2, 0xffffffff, 0x9, 0x8000, 0x200, 0xdcc, 0x1000, 0xc, 0xffffff76, 0xa2e, 0x1000000, 0x4, 0x5, 0xffff, 0x101, 0x13, 0x5, 0x9a, 0x0, 0x4, 0x0, 0x4, 0x7, 0x6, 0x8, 0x10001, 0x1, 0x101, 0x6, 0x4, 0x903, 0x0, 0x2, 0x8e, 0xfffffc01, 0x0, 0x4b, 0x9, 0xfffffffa, 0x7ff, 0x0, 0x4a8, 0x9, 0x4, 0x9, 0x2, 0x4, 0x9, 0x56, 0xfffffffa, 0x6, 0x7, 0x8, 0x3, 0x0, 0x9b4, 0x0, 0x3, 0x101, 0x9, 0x2, 0x100, 0xfff, 0x5, 0x6, 0x1ff, 0x785, 0xc, 0x4, 0x4, 0x200, 0xa, 0xf4, 0xa9, 0xb4, 0x4, 0xfffffffb, 0x32b, 0x80000000, 0x80000001, 0x8, 0x82, 0x3, 0xfffffff8, 0xb865, 0x7, 0x1, 0x7, 0x7, 0x6, 0x4, 0x0, 0x5, 0x70000000, 0x8, 0x8, 0xe, 0x2, 0x5, 0xc6c, 0x9, 0x10001, 0x3e, 0x6, 0xfffffff8, 0x5, 0x1, 0x40, 0x4, 0x2834, 0x59e37698, 0xcd3d, 0x751, 0x0, 0x5, 0x5, 0xfffffffa, 0x3ff, 0x1, 0x4, 0x80000000, 0xfff, 0xffffffff, 0x8, 0x4, 0x9, 0x6, 0xfffffffa, 0x6, 0x66b, 0x5, 0x5, 0x5, 0x8, 0x6, 0xfffffffb, 0x5, 0xc63, 0x80000000, 0xfffffe01, 0xfffffffe, 0x9, 0x4, 0x4, 0x45be, 0x5, 0x2, 0x5, 0x1, 0x5, 0x6, 0x9, 0x2, 0x82, 0x6a, 0x0, 0x67, 0x3, 0x400, 0x4, 0x3, 0x1, 0x800, 0x3ff, 0x1ff, 0x9, 0x1, 0x8, 0xfffffffa, 0x6, 0x7, 0x5, 0x5, 0x9, 0x7, 0x0, 0x2, 0xff, 0x400, 0xfb, 0x8ee, 0x2, 0x2, 0x22f5e1cb, 0xa11, 0x4, 0x80000000, 0x5, 0x1, 0xffff, 0x5, 0x6, 0x3, 0x1, 0x3, 0x0, 0x7e, 0x9, 0x7, 0x0, 0x80000001, 0x0, 0x4]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0xbd, 0xbb11, 0x10000, 0xfffffffc, 0x7, 0x6, 0x8, 0x800000, 0x9, 0x3, 0x342, 0x3, 0x1, 0x80000000, 0xc, 0xfffffffa, 0x1000, 0x5, 0x7, 0xd, 0x7, 0x0, 0x101, 0xad, 0xffffffff, 0xd5, 0x1, 0x3, 0x10000000, 0x1000, 0xff, 0x8, 0x0, 0x3, 0x40000000, 0x1, 0x3ff, 0x9, 0x43c9, 0x2, 0x3f7, 0x9e52, 0x0, 0x40000000, 0xf2, 0x5, 0x7, 0x7, 0x4, 0x8, 0x9, 0x7, 0xbc1, 0x9, 0x3, 0x8, 0xfffffff7, 0x4e, 0x5, 0xfff, 0x5a6, 0x8, 0x0, 0x3b, 0xffff, 0x7f, 0x7ff, 0x1, 0x5b5b, 0x4, 0x100, 0x8, 0x4, 0x8b, 0x4a, 0x8, 0x7f, 0x1, 0x81, 0x6, 0xa43, 0x9f, 0x4, 0x7, 0xfffffffb, 0x4, 0x1c000000, 0x10000, 0x7ff, 0x7, 0x9, 0x6, 0x5, 0x8, 0x1, 0x10001, 0x8, 0x1, 0x10001, 0x8, 0x3, 0x7, 0x100, 0xd93, 0x0, 0x0, 0x5, 0x1, 0x5, 0xe448, 0x400, 0x8, 0x4, 0xe99, 0x5, 0x61, 0x38527528, 0x6, 0x40, 0x8, 0x1, 0x8, 0x1, 0xda9, 0x9, 0xfffffff7, 0x2, 0x5, 0x8, 0x7, 0x8, 0x7, 0xfffffc01, 0xd78e, 0x21, 0x8000, 0x2, 0x6, 0x4fa4, 0x200, 0x4, 0x4, 0x5, 0x81, 0x4, 0x824, 0x9, 0x4, 0x9, 0x0, 0x1, 0xf3f, 0x2, 0x5, 0x2, 0x8, 0x8, 0x9, 0x8, 0x9, 0x3, 0x1, 0x51, 0x6, 0x3, 0x76, 0x4, 0x1ff, 0xfffffffa, 0x8, 0x2, 0x60, 0x6, 0xff, 0x7dd, 0x0, 0x2, 0xe, 0x9, 0x3, 0x2, 0x73c5, 0x400, 0xe4, 0x8, 0xfffffffb, 0x2, 0x4, 0xfffffff9, 0x1, 0x6, 0x5, 0xe, 0x2c10, 0x5, 0xfffffff9, 0x1ff, 0xe03469b6, 0x9, 0x2, 0x9, 0x1, 0x2, 0x101, 0x2, 0x6, 0x60, 0x340, 0xfffffffc, 0x6, 0x2, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb1ba, 0x4f84, 0x7, 0x0, 0x1, 0x3, 0x3, 0x9, 0xc6, 0xe, 0x3, 0x2, 0x1ff, 0x4, 0x5, 0x0, 0x0, 0xad, 0x2, 0x40000, 0x0, 0x4, 0x4, 0x7, 0x3, 0x1, 0x401, 0x8, 0x7, 0xffffffff, 0x4, 0x4, 0x2, 0x8, 0x6, 0x3, 0x1c000, 0xe3f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6963}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0xe4, 0x34, 0x1, {0x5, 0x1, 0x9, 0x3, 0x80, 0x5}, {0x4, 0x2, 0x200, 0x7, 0x3, 0x200}, 0x0, 0x4, 0x87}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffd, 0x71bb, 0x401, 0x9, 0xfffffffb, 0x1000, 0x0, 0x1, 0xbd, 0xbd, 0x5, 0x5, 0x577, 0x5, 0x3, 0x7, 0x7ff, 0x40, 0x8000, 0x879, 0x2, 0x8c89, 0x13c9, 0x1, 0x5eac, 0x8, 0x8, 0x4, 0x6, 0x6, 0x1, 0x0, 0xfffffffe, 0x6, 0x1, 0x5, 0x100, 0x1, 0x1, 0x74, 0xa6a8, 0x100, 0x80000001, 0x40, 0x4, 0x9, 0x6dd, 0x0, 0x0, 0x3, 0x21, 0xd842, 0x0, 0x8, 0x4df, 0x10001, 0x10001, 0x7, 0x9, 0x8e, 0xff, 0x2, 0x6, 0x2, 0x80000001, 0xb6e9, 0x1, 0x10000, 0x41, 0x200, 0x9, 0x3, 0xa0000, 0xa, 0x8, 0xfffffffb, 0x6, 0x8, 0x4, 0x2, 0x10, 0xe, 0x661f, 0x5, 0xf3, 0x3, 0xbf, 0x800, 0x7, 0x1, 0x3ff, 0x3967, 0x4, 0x0, 0xd8b, 0x8, 0x1, 0x9f0, 0xffffff18, 0x100, 0x40, 0x0, 0x7, 0xa, 0x81, 0x200, 0x6, 0x3, 0xffffffff, 0x1000, 0x6, 0x10, 0x9, 0xcd21, 0x81, 0x7ff, 0x8001, 0x6, 0xffff, 0x4, 0x4, 0xfffffffb, 0x4, 0x2, 0x9, 0xa, 0x5, 0x5, 0x3, 0xb, 0x5, 0x8, 0xa21, 0x9, 0x6, 0x10000, 0x5, 0xcce, 0x4, 0x1c00000, 0x1000, 0x10001, 0x4, 0x7, 0x2, 0x80000000, 0x400, 0x400, 0xfffff5c3, 0x8, 0x0, 0x101, 0x4, 0x7, 0x80000001, 0xe, 0x5, 0x9, 0x40, 0x6, 0x9, 0xffffffff, 0x4, 0xfffff800, 0x0, 0xc1e4, 0x9, 0xa0, 0x7, 0xfff, 0x0, 0x10, 0x8, 0x4, 0x800, 0x821, 0x3, 0x40f539ee, 0x7f, 0x4, 0x0, 0x1, 0xb51, 0x2, 0x2, 0x1, 0x7, 0x1, 0x1, 0x434f, 0x4, 0x4, 0xf, 0x6, 0x4, 0xa, 0x1, 0x31ed, 0x4, 0x179, 0x9, 0x5, 0xa, 0x2a, 0x9, 0x6, 0x8, 0x5, 0x4, 0x9, 0x9, 0x2000, 0x5, 0x80000001, 0xa, 0x0, 0x9, 0x3, 0x6, 0x1, 0x0, 0x8, 0x401, 0x6, 0x7fff, 0x9, 0x5, 0x2, 0xfffffff5, 0x8, 0x7, 0x7fff, 0x7, 0xfffff3d2, 0xb2c, 0x1a9, 0x4, 0x0, 0x687, 0x80, 0x80000001, 0xdbe8, 0x8, 0x7188f37f, 0x2, 0x400, 0x90, 0x2, 0x2b6, 0x4b3d, 0xfffffffa, 0x1, 0x3, 0x7ff, 0x5, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf11}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}]]}, {0xa9, 0x6, "e4513679a2a987fd6afd93f9f7809739a798e4986a9d0d819ddafae5dc53af09b1e1886c21b22c6098cde951cf89def0e9d9956829a518b85ec649294a00d2af006ae2ef4036d37b9fb4c6c599d69ef091f1a8c51c68bc1e2dbf38a0e7de6b31836b283597c3511a43cad6c5ba3be7853d41ce908aed40ffe7143f389467f795a653166618ea2aaafd39994a9938f17191b1165e9efe7c261b41036e316280d7059cc7ddbc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FW_ACT={0x21e0, 0x4, [@m_xt={0x170, 0x18, 0x0, 0x0, {{0x7}, {0xbc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x3d, 0x6, {0xd, 'security\x00', 0xff, 0x1b, "3901bae1b2c90dec01349be3ac5bab1aa98106"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xb}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x8d, 0x6, "c62e9a687eed868051eb651c24304d274e8629de1b50d16051064435fc24ec70771d17f6fcdc9e9ee75e25d0f91438203e64eefedecde132008eeb0431ab391ca0bf5a7765d9d88867fb095fac2a9c7739fdc611b922111ed0c5abbfcc78d191c3703f0604da38e930080de9aa271e5f8e9da2c50a80ed7034f68c77939dbe86fb46c18e845a89f584"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xf0, 0x13, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x7f, 0x5, 0x10001, 0x6}}]}, {0xa9, 0x6, "7c0a1851060342436687049aaca83c87334c4d9cf996bff1b72efe3eb55f6b006dbd0e1c0bd78373b86981d3f1c87ebe53beca47c54b14ae9193d84be9fe799163951c5c233b691617e5508ea3f9b14b8a84941b72dac877ea437941f785a1c09929108fa47ec3420933e77185f8c50d8140dd015231cd6cece69214efe0b7030a9679081f8f3c0f55b91dcbb582cdf68d0c84d7b970c7842211384835fe59a974c410e0f3"}, {0xc, 0x7, {0xb07c3f3708729d04}}, {0xc, 0x8, {0x3}}}}, @m_pedit={0x1f7c, 0x4, 0x0, 0x0, {{0xa}, {0x1f50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x180, 0x5, 0x0, 0x1, [{0x4}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x337b561b573d7d9c}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x60e, 0x3, 0x10000000, 0x4, 0xdf7e}, 0x4, 0xa, [{0x40, 0x5, 0x1, 0x1, 0x7, 0xbf6105a}, {0xd, 0xffffffff, 0x2, 0x93, 0x9, 0x9}, {0xfffffffc, 0x1, 0x1, 0x63, 0x3, 0xc}, {0x4, 0x10000, 0x5, 0x1, 0x7, 0x80}, {0xffffff81, 0xb08, 0xf, 0x0, 0xe, 0x3}, {0x4, 0x4, 0x5, 0x6, 0x4, 0x1000}, {0xbb79, 0x8, 0x6, 0xb568bb60, 0x6, 0x7f}]}, [{0x7, 0x4, 0x392, 0x6, 0x1000, 0x5}, {0x7, 0xfffeffff, 0xf, 0x6a5b, 0xfffffffd, 0x1000}, {0x37a0, 0x5, 0xcd0, 0xfffffff7, 0x40, 0x6}, {0x6, 0xd2a3, 0x0, 0xfffffffc, 0xcf, 0x3}, {0xffff0001, 0x2, 0x8000000, 0x4, 0x2, 0x320}, {0x7, 0x695967f0, 0xffff, 0x0, 0x8, 0x33}, {0x7b9c60c0, 0x7, 0x5, 0x0, 0x7, 0x1}, {0x7fff, 0xd, 0xb, 0x0, 0x4, 0x9}, {0x800, 0x6, 0xaa, 0x1, 0xfa609cae, 0x8}, {0x7d, 0x3, 0x3, 0x6, 0x0, 0x20000}, {0xfffffff7, 0x200, 0x6, 0x1ff, 0x87, 0x4}, {0x9, 0x8, 0x5, 0x8, 0x80000000, 0x7ff}, {0x5, 0x6, 0x8, 0x2, 0x80, 0x10001}, {0x0, 0x8, 0x0, 0x7, 0xfffff4d2, 0x1000}, {0x3, 0x6, 0x2, 0x0, 0xc, 0xbb1f}, {0x8, 0x218, 0x10000, 0x3, 0x6, 0x10001}, {0x5, 0x9, 0xa, 0x13, 0x6ab32164, 0x400}, {0x7, 0x8, 0x4c94, 0x2, 0xc5, 0xcd}, {0xd133, 0xf244, 0xfffffff6, 0x9, 0x5}, {0xe9e, 0x0, 0xffffc170, 0x64d, 0xffffffff, 0x4}, {0x1800000, 0x1, 0x80000001, 0x3, 0x280, 0x3}, {0x9, 0xcc7, 0x6, 0xfffffff7, 0xb, 0xb}, {0x800, 0x9, 0x9, 0xfffffffe, 0x0, 0xc}, {0xfd, 0x6, 0x6, 0x3, 0x8, 0x3}, {0x32d2, 0x7, 0x5, 0x6, 0x10000, 0x4696}, {0x7f, 0xb9cf, 0x4, 0x2, 0x64f8, 0xfffffffa}, {0x4, 0x7, 0x0, 0x7, 0x0, 0x4e49}, {0x6, 0x1ff, 0x5, 0xfffffeff, 0x9b63}, {0x1, 0x4, 0x6, 0xffffffff, 0x7fff, 0xf}, {0x2, 0x7, 0x4, 0x8000, 0x0, 0x80000001}, {0x8000, 0xd613, 0x6, 0x7ff, 0x200, 0x6}, {0x6, 0x7f0b, 0x9, 0x1, 0x4, 0x4}, {0x80, 0x2, 0x7fffffff, 0x5fb, 0xffff, 0x2}, {0x10000, 0x8000, 0x101, 0x5, 0x6, 0x2}, {0x7, 0xdbff, 0x2, 0x1, 0x6, 0x4}, {0x1, 0x7dc1, 0xfffffeff, 0xf8, 0xfffffffb, 0x4}, {0x6, 0xa8, 0x9, 0xb, 0x2, 0x81}, {0x3, 0xc2, 0x3, 0x9, 0xf4, 0x10000}, {0x4, 0x6, 0xff, 0x6, 0x6f, 0x100}, {0x7, 0x7, 0x6, 0x66e, 0xffff8001, 0x8000}, {0x72, 0x9845, 0x4, 0x900, 0xffffffff, 0x1}, {0x101, 0x9, 0x3, 0x10001, 0x5}, {0x0, 0x2, 0xafc, 0x3, 0x4, 0x6}, {0x7, 0x8, 0x1, 0x0, 0x1, 0xdb}, {0xfffffffe, 0x40, 0x23a, 0x2}, {0x1, 0x7, 0x7, 0x0, 0xb, 0x7}, {0xfffffff7, 0xa, 0x4d, 0x2, 0x6, 0x9}, {0xee, 0x2, 0x3, 0xefe, 0x2, 0xd12}, {0x200, 0xe, 0x6, 0x9, 0x80000001, 0x4}, {0x400, 0x0, 0x4, 0x4, 0x200}, {0x9, 0x7, 0x5, 0x1, 0x3, 0x32a}, {0xc50d, 0x8, 0x5, 0x4f, 0x0, 0x8}, {0xfffffff0, 0x9, 0x7, 0x1, 0x8, 0x5}, {0x0, 0x7fffffff, 0x4, 0x3, 0x6, 0x6}, {0x18ed, 0x8, 0x7, 0x9, 0x5181441a}, {0x1, 0x6, 0x4, 0x5, 0x5, 0xc}, {0xffffffff, 0x1ff, 0xb, 0x3, 0x7, 0x3}, {0x9, 0x5, 0xfffffffd, 0x2, 0x3fe, 0x8}, {0xd4, 0x7, 0x7, 0x6, 0x7}, {0xd4fc572, 0x8, 0x1, 0xe, 0xc3, 0x10000}, {0x6b7, 0x8, 0x8000, 0x5fc, 0x4, 0xffff}, {0x4, 0x7, 0x2, 0x5, 0x400, 0x7}, {0x7, 0x8, 0x8ce5, 0x6, 0x32}, {0x8, 0x13, 0x8, 0x3ff, 0x3, 0x3}, {0x6, 0x80000000, 0x5, 0x9, 0x80000001, 0x2}, {0x6, 0xff34, 0x3, 0x5, 0x6, 0x4}, {0x7, 0x6, 0xa4e, 0x10, 0x2, 0x8ac}, {0x6, 0xffffff00, 0x5, 0x80000000, 0x8, 0x3}, {0xfffffffa, 0x94, 0x5452, 0x400, 0x401, 0x9}, {0x80000001, 0x4fbd, 0x80000000, 0x7, 0x0, 0x401}, {0x7, 0x1000, 0x1, 0x8, 0x4, 0xfffff0d4}, {0x7, 0x9, 0xe3, 0x2, 0x3, 0x8}, {0x5f7, 0x4, 0x7f, 0xc8cc, 0x6, 0x10000}, {0x1e, 0xffffffff, 0xb84, 0x7066, 0x9, 0xfff}, {0xb, 0x1, 0x0, 0xffff, 0x4, 0x5}, {0x6, 0x241, 0x7, 0xa8, 0xa445, 0x7f}, {0x2, 0x5, 0x8, 0x2, 0x3, 0xffff8000}, {0x10001, 0x2f, 0x5f87, 0x8b, 0x80000000, 0x2}, {0x6, 0xffffff00, 0x4af17099, 0x7, 0xd, 0xfa31}, {0x2, 0x7ff, 0x2, 0x3, 0x0, 0x40}, {0x9, 0x2, 0x4, 0x2, 0x9, 0x4}, {0x3, 0xd4, 0xf0, 0x0, 0x100, 0xff}, {0x100, 0x10001, 0x100, 0xa, 0x831d, 0x7fffffff}, {0x8, 0x238, 0x8, 0x9, 0x8, 0xfb}, {0x16, 0xd8, 0x400, 0x7, 0x100, 0x5}, {0x9, 0x1aa0, 0x2, 0xa8f, 0x3, 0x10000}, {0x44f, 0x7fff, 0xfeb, 0x7, 0x7, 0x80000001}, {0x8, 0x2d065fec, 0x8, 0x3ba, 0x6, 0x5fa3}, {0xfffffffb, 0xb34c, 0x8, 0xa, 0xffff, 0x1}, {0x4, 0x3, 0x0, 0x8, 0x4, 0x6}, {0x1, 0x80, 0x5, 0xfffffff8, 0x9, 0x9}, {0x9, 0x2, 0x80000000, 0xff, 0x81, 0xb}, {0x8, 0x7, 0x2, 0x0, 0x9, 0x4}, {0x1, 0x800, 0x0, 0x3, 0x5, 0x10000}, {0x2e1, 0x9, 0x7, 0x0, 0x9, 0x5b875ee4}, {0xff, 0x0, 0x7ea, 0x7b, 0x8, 0xfffffffc}, {0x2a, 0xffffffff, 0x80, 0x7fff, 0x2, 0x7}, {0x10, 0x6, 0x5, 0x4, 0x4, 0x33}, {0x3, 0xc, 0x6, 0x6, 0x9, 0x6}, {0x4, 0x5, 0x101, 0x4, 0x353e, 0x4}, {0x8, 0xc, 0x7fffffff, 0x2, 0x5, 0x7}, {0xfffffffa, 0x9, 0x7, 0x42baad39, 0x6, 0x6}, {0x7, 0xfffffff1, 0x1, 0xd, 0xb26e, 0x1}, {0x1, 0x94, 0x5, 0x5, 0x7, 0xfffffff9}, {0x9, 0xbfa3, 0x5, 0x7, 0x6, 0x3}, {0x10001, 0x0, 0x1, 0x7, 0x2, 0xb1}, {0x7fffffff, 0xfffff5be, 0x8, 0x3, 0x2c, 0x9}, {0xffd, 0x7f, 0x40, 0x0, 0x6, 0x3}, {0x2a9, 0x0, 0x6, 0x4, 0xb04, 0xd}, {0x957b, 0x0, 0x24a3, 0x7, 0x3, 0x1}, {0x4, 0x3, 0x7, 0x0, 0x91, 0x6}, {0x1, 0x3800000, 0x6, 0x8, 0x2, 0xffffffff}, {0x5, 0x8, 0x2, 0x10001, 0x5}, {0xb34, 0x6, 0x8, 0x7, 0x5, 0x4}, {0x1, 0x1, 0x42, 0x7fff, 0x8, 0x9}, {0x401, 0x9, 0x8, 0x1}, {0x2, 0x8, 0x6a, 0x0, 0x1, 0xffffffff}, {0x7fffffff, 0x7, 0x2, 0x10, 0x4, 0xf}, {0xfffffff2, 0x1, 0x9, 0xd, 0x3, 0x1}, {0x0, 0x1, 0xffffffff, 0xff, 0x2c4, 0x4}, {0x4, 0x86f6, 0x4, 0x3, 0x9, 0x6}, {0x7, 0x9, 0x3, 0x3, 0x7, 0x67cf108b}, {0x0, 0x2, 0x4, 0x7, 0x5, 0xffffffff}, {0x8, 0xd8, 0x3, 0x4, 0x3ff, 0x8}, {0x6, 0x7fff, 0x100, 0x4, 0x2, 0x8}, {0x8, 0xe041, 0x4, 0x8, 0x5, 0x5e1}, {0x6, 0x3, 0x8, 0x1000, 0x5, 0xcb31}, {0x1, 0xd223, 0x8, 0x0, 0x4, 0x5}], [{0x2, 0x1}, {0x5, 0x1}, {0x2}, {0xaa699aae85504618, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x3}, {0x2}, {0x2, 0x1}, {0x0, 0x43e94edb6b16b030}, {}, {0x5, 0x1}, {0x4}, {}, {0x3}, {0x1}, {0xc770d970940cffe5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x1, 0x1489d857e77e70bb}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5}, {0x6, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x5, 0xa11, 0x5, 0x0, 0x800}, 0x8, 0x77, [{0x101, 0x8001, 0x7fffffff, 0x9, 0x0, 0x2}, {0x40, 0x4, 0x2, 0x1, 0x638d, 0x2}, {0x3, 0x2, 0x3, 0x0, 0x6, 0xb}, {0x6, 0x3, 0x10df400, 0x7, 0x2}, {0x7, 0x7, 0x1, 0x8, 0x4, 0x4}]}, [{0x8, 0x8a, 0x1, 0x0, 0x80c6000, 0x1}, {0x8000, 0x2, 0x10000, 0x1, 0x2, 0x8}, {0x2a6, 0x6, 0x850d, 0x888, 0x7f, 0x8}, {0x8, 0x2, 0x2, 0x8, 0x6, 0x1}, {0x100, 0xbb2d, 0x8, 0x2, 0x0, 0x9}, {0xd, 0x1, 0xc, 0xfffffffc, 0x1, 0x401}, {0x2, 0x6, 0x8f, 0x6, 0x47}, {0x8, 0x2, 0xffff, 0x6, 0x2, 0xf}, {0x7, 0x8, 0xb9f, 0xf, 0x3, 0xe}, {0xffff8001, 0x5, 0xf, 0x1ff, 0x5, 0x10000}, {0x86, 0x7, 0xd, 0x1, 0x0, 0x3}, {0x5, 0x1ff, 0x40, 0x5, 0xffffffa0}, {0x5, 0x4, 0xe3, 0xffff7224, 0x3, 0x800}, {0x101, 0xfffffff9, 0xe1f8, 0x4, 0x867, 0xd}, {0x6, 0x7, 0x35f, 0x9, 0x3, 0x39a}, {0x7, 0xb, 0x9, 0x7, 0x9, 0x6}, {0x8e, 0x401, 0x7fffffff, 0xffffffff, 0x2, 0x5}, {0x5, 0x5, 0x4e4e, 0xfffffff7}, {0x0, 0xd, 0xff, 0x1, 0x8, 0x7}, {0x3, 0xc2, 0xd, 0x7f, 0x8a08, 0x2}, {0x2, 0x6, 0x4, 0x0, 0x1, 0x80000001}, {0x2, 0xb, 0x5, 0x3, 0x8, 0x2}, {0x6, 0x2, 0x120, 0x9, 0x16cc7403, 0x3}, {0x1, 0x7, 0x6, 0x6a78, 0x8, 0xfffffbff}, {0x1, 0x0, 0x8, 0x1ff, 0x0, 0x46}, {0x0, 0x3, 0x27d98bac, 0xfff, 0x8, 0xd}, {0xe, 0xeb69, 0x2, 0xffff0375, 0x1000, 0x10000}, {0x101, 0x7f000, 0xa, 0x6, 0xa, 0xbeb}, {0x24000000, 0x0, 0x4, 0x400, 0x5, 0x2}, {0x8000, 0x100, 0x9, 0x0, 0x2, 0xffffffff}, {0x3f, 0x3, 0x4af, 0x7, 0xff, 0x5}, {0xffffff7f, 0xffff7fff, 0xb3f4, 0xb5, 0xe, 0xcbb7}, {0x7, 0xb, 0xfffffff7, 0x2, 0xf27, 0x4}, {0x1, 0x97, 0x480, 0x9a, 0x8000, 0x6}, {0x3, 0x7, 0x2, 0xffff, 0x115, 0x1}, {0x86e5, 0x8, 0x7, 0x4, 0x7e73, 0x8}, {0x9, 0x5bcf, 0x8, 0x80000000, 0xee, 0x2c1}, {0x3, 0x1800000, 0x2, 0x2, 0x2, 0x4}, {0x6, 0x81, 0xf, 0x4, 0x81, 0xffffffff}, {0x0, 0x9, 0x9, 0x1, 0xd9b, 0x1}, {0x8, 0xce, 0x5, 0x1, 0x7}, {0x4edf, 0xfd9f, 0x101, 0xf84, 0x81}, {0x10000, 0x80000000, 0x80, 0x1, 0x1000, 0x9}, {0x7, 0x8, 0xd24, 0x3f5, 0x2, 0x4427}, {0x1, 0x0, 0x20, 0xfffffff9, 0x6, 0x1}, {0xb5f, 0xf2c, 0xe6b, 0x9, 0x4, 0x80}, {0x3, 0x14, 0x6c, 0x80000001, 0x5, 0x4}, {0x1, 0x3, 0x101, 0xfffffffc, 0x8, 0xfffffff8}, {0x3, 0x4, 0x35, 0x8, 0x6, 0xfffffffb}, {0x1, 0x1, 0xfffffffa, 0x180, 0x7fffffff, 0x7}, {0x9, 0x2, 0xffffb29d, 0x0, 0xf, 0x100}, {0x8, 0x647, 0x1115b69e, 0x8, 0x7fffffff, 0xbb}, {0x488d, 0x9, 0x5, 0xff, 0x2, 0x2}, {0x2, 0xfffffff9, 0x8, 0xc5f, 0xb, 0x3}, {0x0, 0xd1, 0x0, 0x1, 0x1, 0x1}, {0x7fffffff, 0xc8b, 0x0, 0x6, 0x9, 0x3}, {0x9, 0xae4, 0x8, 0x7, 0x3, 0x7fff}, {0x5, 0x0, 0x7ff, 0x400, 0x9, 0x5}, {0x2, 0x5, 0x1, 0x0, 0x7fff, 0x9}, {0x2, 0x9, 0x2, 0x1a, 0x3, 0xfffffffe}, {0xfffffffd, 0x4, 0x4, 0x10000, 0x3, 0xe1}, {0x1, 0xb, 0x1, 0x8001, 0x2, 0x81}, {0x5, 0x10001, 0xd, 0x5, 0x8, 0x3}, {0x6, 0xffffff75, 0xc, 0xd, 0x5, 0x1}, {0xd24, 0x2, 0x9, 0x1, 0x3, 0x9}, {0x2, 0x4, 0x10000, 0x40, 0xfff, 0xc}, {0x9, 0x3, 0xbeb, 0x5, 0x2, 0x3}, {0xfffffffc, 0x15, 0xfffffffd, 0x80000001, 0x1, 0x20}, {0x800, 0xff, 0x400, 0xfffffff7, 0x6, 0x6}, {0x9, 0x8, 0x2069, 0x3, 0x6, 0x7}, {0x8, 0x1, 0x10000, 0x5, 0x5, 0x5}, {0x7, 0x8, 0x4, 0x8001, 0x2, 0xf}, {0x81, 0xfcd, 0x3, 0x3, 0x203b, 0x2}, {0x10000, 0x1, 0x6, 0x7, 0x101, 0x8}, {0x0, 0x5, 0xfffffffd, 0x2, 0x9, 0xfbf}, {0x4, 0x2, 0x9, 0x2, 0x80, 0x40}, {0x9, 0x7, 0x8000, 0x5, 0x8, 0x6}, {0x1, 0x80000000, 0xffff, 0x7fff, 0x0, 0x4}, {0xe, 0x7f, 0x6, 0xbed3, 0x63a, 0x1}, {0x4, 0x9, 0x90, 0x100, 0x4, 0xe82}, {0x80000001, 0x5, 0x1, 0x8, 0x78, 0x2}, {0x10, 0xe9, 0x6, 0x10000, 0x9, 0x7}, {0x2, 0x9, 0x1, 0x2f1, 0x6, 0x8}, {0xd63, 0x2, 0x8, 0xcaf, 0x85b5, 0x80000001}, {0x3, 0x401, 0x8, 0x10000, 0xcf}, {0x6, 0x7, 0xb, 0xfff, 0x4, 0x5}, {0xa6f, 0x3ff, 0x5, 0x911, 0x1, 0x1}, {0x1, 0x9, 0x9, 0xf1, 0x0, 0x10000}, {0x4, 0x4, 0x8, 0xff, 0x4}, {0x1, 0x4, 0x7, 0x80000000, 0x7, 0xb}, {0x1, 0x5, 0x4, 0x1ff, 0xa, 0x538a}, {0x7f, 0x7, 0x8, 0xaa, 0x2, 0x7}, {0xfff, 0xdc1, 0x5, 0xc, 0x7, 0x7}, {0x100, 0x3e, 0xd, 0x0, 0x6910c30c, 0x7}, {0x2, 0x2, 0xfffffffb, 0xfeb7, 0x579, 0x8}, {0x9, 0x9, 0x5, 0x6, 0x0, 0x7}, {0x10000, 0x10001, 0xffffffff, 0xd7b, 0x3, 0x5f3}, {0xff, 0x8886, 0x3, 0x5, 0x5, 0x3}, {0x6, 0x7f, 0x80000001, 0x7f0, 0xfff, 0x4bf}, {0x2, 0x5, 0x5, 0x4, 0x5, 0x3403}, {0xe3, 0xf7, 0x4, 0x7, 0x63b, 0xc}, {0x7, 0x6ec7e5d9, 0x3, 0x2, 0x3, 0x6}, {0x7, 0x7, 0x8, 0x4, 0xffffffff, 0x3b6}, {0x1, 0x9, 0xfffffffb, 0x7, 0x7f, 0x79}, {0x0, 0x4, 0x1, 0x9, 0x70, 0x7}, {0xaa, 0x6, 0x6091, 0x7f, 0x3, 0x3}, {0x8, 0x0, 0x3ff, 0x4, 0x0, 0x7e}, {0xc, 0x3, 0x9, 0x10, 0x3ff, 0x5}, {0x2, 0xffff, 0xd, 0x101, 0x9, 0x80000000}, {0x5c, 0x9, 0x40, 0xf, 0x6, 0x81}, {0x3309, 0xc6e9, 0x9, 0xfffffffa, 0x7, 0xbc}, {0xe, 0x81, 0x7, 0x7, 0x3, 0x9}, {0x4, 0x8, 0x80000000, 0x6, 0x7, 0x7ff}, {0x5, 0x7, 0x4, 0xafb1, 0xc20d, 0x40}, {0x5, 0x94, 0x3, 0x400, 0x0, 0x5}, {0x56390, 0x1, 0x5, 0x38, 0x7, 0x7}, {0x8000, 0x6, 0x9, 0x4, 0x7, 0x80000001}, {0x7f, 0x8, 0xf8, 0x4dd6, 0x8, 0x5}, {0x2, 0x0, 0x3, 0x448ea325, 0x37c, 0xee}, {0x4b, 0x9, 0x5, 0x8001, 0x7, 0x80000001}, {0xffffff4e, 0x32, 0x7, 0x4, 0x3, 0x6}, {0x0, 0x75, 0x4, 0x4, 0x1ff, 0x10000000}, {0x3ca91c8a, 0xffffffff, 0x10000, 0x7fffffff, 0x4}, {0x7, 0x57, 0x5, 0x6, 0x7, 0xb33d}, {0x4, 0x101, 0xfff, 0x2, 0x4, 0x13}, {0x0, 0x8000, 0x0, 0x1ff, 0x4, 0x99}, {0x3, 0x9, 0xf61b, 0x7ff, 0x40, 0x4a89}, {0x1, 0x5, 0x9, 0xfff, 0xdb3, 0x93a6}], [{0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1}, {0x4}, {0x3}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x6}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {0x2}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x6f8f8a2ccadbcaf1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x9fa91f92013e47c9}, {0x3, 0x57dcad52c17df449}, {0x4}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x5}, {0x2}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x44aef0e82e38681e}, {0x4}, {0x3}, {0x4}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x4e5c}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 533.870662ms ago: executing program 5 (id=2331): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0x1, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x10}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x15, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x9, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8, '\x00', 0x9}, {0x54, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x1, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x1}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x68, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0xa, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x5, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000a80)={0x84, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x810}, 0x4000) recvmsg$can_raw(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/118, 0x76}, {&(0x7f0000000180)=""/27, 0x1b}], 0x2}, 0x20) syz_usb_connect(0x3, 0x3a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x6c, 0xf0, 0xdc, 0x20, 0x108c, 0x159, 0x7a90, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28, 0x1, 0x1, 0xb2, 0x30, 0xbb, [{{0x9, 0x4, 0x54, 0xf1, 0x2, 0x0, 0xd2, 0x81, 0x4, [], [{{0x9, 0x5, 0xb, 0x0, 0x10, 0x6, 0x5, 0x3}}, {{0x9, 0x5, 0x80, 0x2, 0x40, 0xf2, 0x3, 0x0, [@generic={0x2, 0x22}, @generic={0x2, 0x30}]}}]}}]}}]}}, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x6, 0x1}}], 0x18, 0x4000}, 0x4000000) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000200)={@ipv4={""/10, ""/2, @empty}, 0x0}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipmr_newroute={0x2c, 0x18, 0x400, 0x70bd26, 0x25dfdbfd, {0x80, 0x20, 0x14, 0x5, 0xfc, 0x2, 0xfd, 0x5, 0x2300}, [@RTA_MARK={0x8, 0x10, 0x9}, @RTA_OIF={0x8, 0x4, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0}) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c81, 0x6) 88.164093ms ago: executing program 2 (id=2332): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000006440), r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8000000000000002, 0x0, 0x2}, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000240)=""/83, 0x53}], 0x1, 0xc9, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000140)) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r6, 0x8004500f, &(0x7f0000000040)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0x7, {"a2e3ad21ed0d52f91b23330987f70e06d038e7ff7fc6e5539b0d47078b089b3907346d090890e0878f0e1ac6e7049b334a959b669a240d5d67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07670936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70fe98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf1a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e470dea05918b41243513f000800000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3e3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14d9fdb8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a19000000000000006f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69b15c9f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d44400009a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc01008cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c16c02ed4b5d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaab1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106d26658b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6b14effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c110000a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b51028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6815d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3f3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51090840517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4e004a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6ce1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c817e9177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d543902113c4c859465c3c115c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc248850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafcc009fc074bb6b68a1f0c4649820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948998cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2fd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c0a258a1b000000004f5dc4ff8f0104000000000000df72279fdb0d2b9e936e5a983c12fded79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d3700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa6e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9f07b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e3ebb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3fec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4900003a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4cddd5d0fc5a752f9000", 0x1000}}, 0x1006) pipe2$watch_queue(0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x30, 0x8, 0x6}, &(0x7f0000000200)=0x18) 0s ago: executing program 1 (id=2333): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x1, 0x43, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0xffffffffffffffad, 0xfffffffffffffe58, 0x0, 0x0, 0x0, 0x80003fb9, 0x8, 0xffffffef, 0x0}}, 0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000300)={0x4, 0xe000, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x4000000000033, 0x790, 0x80000001, 0x17d, 0x400000004, 0xffffffffffffffff, 0xf4, 0x8, 0x0, 0x42, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}], 0x1c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x80000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$EVIOCREVOKE(r7, 0x40044591, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)="021b9100"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) r8 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x80000) accept4$vsock_stream(r8, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10, 0x80800) kernel console output (not intermixed with test programs): 294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10234 comm="syz.4.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f04c459aeb9 code=0x7ffc0000 [ 275.943004][T10254] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1527'. [ 276.277372][T10264] fuse: Unknown parameter '0xffffffffffffffff' [ 276.628923][ T5879] usb 3-1: USB disconnect, device number 9 [ 277.167487][T10272] netlink: 'syz.2.1534': attribute type 10 has an invalid length. [ 277.175847][T10272] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1534'. [ 277.226627][T10272] bridge0: port 1(ipvlan1) entered blocking state [ 277.337171][T10272] bridge0: port 1(ipvlan1) entered disabled state [ 277.384758][T10284] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1539'. [ 277.406927][T10272] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 278.426405][ T5879] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 278.599437][ T5879] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 278.610435][ T5879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.643325][ T5879] usb 4-1: config 0 has no interface number 0 [ 278.668383][ T5879] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 278.687259][ T5879] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 278.716432][ T5879] usb 4-1: config 0 interface 106 has no altsetting 0 [ 278.727448][ T5879] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 278.756450][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.796152][ T5879] usb 4-1: config 0 descriptor?? [ 278.828021][ T5879] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 278.999107][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1550'. [ 279.097309][ T5879] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 279.350294][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 279.371236][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 279.492049][ T5879] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 279.501752][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.511198][ T5879] usb 5-1: Product: syz [ 279.672115][ T5879] usb 5-1: Manufacturer: syz [ 279.686433][ T5879] usb 5-1: SerialNumber: syz [ 279.716553][ T5879] usb 5-1: config 0 descriptor?? [ 279.733331][ T5879] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 279.763612][ T5879] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 279.897627][ T3563] usb 4-1: Failed to submit usb control message: -110 [ 279.914937][ T3563] usb 4-1: unable to send the bmi data to the device: -110 [ 279.949500][ T3563] usb 4-1: unable to get target info from device [ 279.977601][ T3563] usb 4-1: could not get target info (-110) [ 280.004913][ T3563] usb 4-1: could not probe fw (-110) [ 280.247961][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1555'. [ 280.392317][ T5879] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 280.805818][ T5879] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 280.823673][ T5879] em28xx 5-1:0.0: board has no eeprom [ 280.924179][T10340] netlink: 'syz.2.1556': attribute type 10 has an invalid length. [ 280.932251][T10340] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1556'. [ 280.941676][T10340] bridge0: port 1(ipvlan1) entered blocking state [ 280.948363][T10340] bridge0: port 1(ipvlan1) entered disabled state [ 280.965728][T10340] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 281.206377][ T5879] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 281.225860][ T5879] em28xx 5-1:0.0: dvb set to bulk mode. [ 281.259125][ T10] em28xx 5-1:0.0: Binding DVB extension [ 281.417599][T10349] fuse: Unknown parameter '0xffffffffffffffff' [ 281.777885][ T5879] usb 4-1: USB disconnect, device number 10 [ 281.848956][T10352] netlink: 'syz.1.1558': attribute type 10 has an invalid length. [ 281.858257][T10352] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1558'. [ 281.867912][T10352] bridge0: port 3(ipvlan1) entered blocking state [ 281.874649][T10352] bridge0: port 3(ipvlan1) entered disabled state [ 281.888254][T10352] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 282.549698][T10313] em28xx 5-1:0.0: writing to i2c device at 0xfe00 failed (error=-5) [ 282.576242][ T5886] usb 5-1: USB disconnect, device number 8 [ 282.583144][ T5886] em28xx 5-1:0.0: Disconnecting em28xx [ 282.639070][ T10] em28xx 5-1:0.0: Registering input extension [ 282.645407][ T5886] em28xx 5-1:0.0: Closing input extension [ 282.690605][ T5886] em28xx 5-1:0.0: Freeing device [ 282.961909][T10369] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1565'. [ 283.190032][T10376] netlink: 'syz.1.1568': attribute type 10 has an invalid length. [ 283.198108][T10376] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1568'. [ 283.207424][T10376] bridge0: port 3(ipvlan1) entered blocking state [ 283.214112][T10376] bridge0: port 3(ipvlan1) entered disabled state [ 283.225976][T10376] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 283.736588][ T5909] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 284.030402][ T5909] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 284.038739][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.049257][ T5909] usb 3-1: config 0 has no interface number 0 [ 284.055447][ T5909] usb 3-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 284.068179][ T5909] usb 3-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 284.116683][ T5909] usb 3-1: config 0 interface 106 has no altsetting 0 [ 284.196404][ T5909] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 284.214688][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.390105][ T5909] usb 3-1: config 0 descriptor?? [ 284.397338][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1578'. [ 284.513477][ T5909] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 284.549221][T10407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1578'. [ 284.634042][T10401] macvlan3: entered promiscuous mode [ 284.652029][T10401] macvlan3: entered allmulticast mode [ 284.673480][T10401] bond3: (slave macvlan3): Opening slave failed [ 285.211172][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'. [ 285.576644][ T12] usb 3-1: Failed to submit usb control message: -110 [ 285.583933][ T12] usb 3-1: unable to send the bmi data to the device: -110 [ 285.645547][ T12] usb 3-1: unable to get target info from device [ 285.724385][ T12] usb 3-1: could not get target info (-110) [ 285.814801][ T12] usb 3-1: could not probe fw (-110) [ 287.245702][ T10] usb 3-1: USB disconnect, device number 10 [ 290.060632][T10495] sctp: [Deprecated]: syz.1.1604 (pid 10495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.060632][T10495] Use struct sctp_sack_info instead [ 291.993714][T10539] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1621'. [ 292.052743][T10542] sctp: [Deprecated]: syz.1.1619 (pid 10542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.052743][T10542] Use struct sctp_sack_info instead [ 293.518139][T10573] sctp: [Deprecated]: syz.4.1632 (pid 10573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 293.518139][T10573] Use struct sctp_sack_info instead [ 295.387413][T10603] netlink: 'syz.2.1639': attribute type 10 has an invalid length. [ 295.395385][T10603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1639'. [ 295.424704][T10603] bridge0: port 1(ipvlan1) entered blocking state [ 295.445696][T10603] bridge0: port 1(ipvlan1) entered disabled state [ 295.455621][T10603] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 296.492045][T10630] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 296.513212][T10630] netdevsim netdevsim3: Direct firmware load for / [ 296.513212][T10630] failed with error -2 [ 296.566606][T10630] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 296.566606][T10630] [ 297.318700][T10642] macvlan3: entered promiscuous mode [ 297.333219][T10642] macvlan3: entered allmulticast mode [ 297.488018][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1652'. [ 297.776406][ T5879] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 297.800615][T10654] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1655'. [ 297.928533][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 297.942553][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.985776][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.001000][ T5879] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 298.019837][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.052095][ T5879] usb 5-1: config 0 descriptor?? [ 298.571387][ T5879] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 298.872771][ T5879] usb 5-1: USB disconnect, device number 9 [ 298.933701][T10680] fido_id[10680]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 299.279685][T10686] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1665'. [ 299.374668][T10686] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 300.012285][T10714] fuse: Unknown parameter '0xffffffffffffffff' [ 300.030601][T10713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1672'. [ 301.482110][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1678'. [ 301.691973][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1682'. [ 301.712288][T10739] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1683'. [ 301.756451][ T5879] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 301.996768][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 302.012355][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.037933][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.081653][ T5879] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 302.120182][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.160309][ T5879] usb 5-1: config 0 descriptor?? [ 302.639148][ T5879] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 302.884417][ T5879] usb 5-1: USB disconnect, device number 10 [ 304.203195][T10783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1693'. [ 304.618076][T10787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1695'. [ 304.881168][T10788] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 304.933319][T10788] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 305.065827][T10784] process 'syz.4.1694' launched '/dev/fd/6' with NULL argv: empty string added [ 305.186883][T10790] macvlan3: entered promiscuous mode [ 305.192411][T10790] macvlan3: entered allmulticast mode [ 305.684190][T10806] netlink: 'syz.0.1700': attribute type 10 has an invalid length. [ 305.693002][T10806] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1700'. [ 305.726198][T10806] bridge0: port 1(ipvlan1) entered blocking state [ 305.752703][T10806] bridge0: port 1(ipvlan1) entered disabled state [ 305.981666][T10806] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 308.478517][T10849] fuse: Unknown parameter '0xffffffffffffffff' [ 309.030017][T10857] sctp: [Deprecated]: syz.1.1714 (pid 10857) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.030017][T10857] Use struct sctp_sack_info instead [ 311.753644][T10893] sctp: [Deprecated]: syz.4.1723 (pid 10893) Use of struct sctp_assoc_value in delayed_ack socket option. [ 311.753644][T10893] Use struct sctp_sack_info instead [ 312.418100][T10903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1727'. [ 313.006879][T10907] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1728'. [ 313.154205][T10911] fuse: Unknown parameter '0xffffffffffffffff' [ 314.031038][T10920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1731'. [ 314.295192][T10925] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1733'. [ 315.007839][T10934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1735'. [ 316.846421][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 316.943059][T10957] netlink: 'syz.4.1743': attribute type 10 has an invalid length. [ 316.951398][T10957] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1743'. [ 316.988317][T10957] bridge0: port 1(ipvlan1) entered blocking state [ 317.038200][T10957] bridge0: port 1(ipvlan1) entered disabled state [ 317.084071][ T10] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 317.093095][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.116091][T10957] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 317.186932][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.193525][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.266939][ T10] usb 1-1: config 0 has no interface number 0 [ 317.279564][ T10] usb 1-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 317.290884][ T10] usb 1-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 317.731889][ T10] usb 1-1: config 0 interface 106 has no altsetting 0 [ 317.775423][ T10] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 317.808319][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.867337][ T10] usb 1-1: config 0 descriptor?? [ 317.907894][ T10] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 318.030384][T10976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1748'. [ 318.045995][T10976] macvlan4: entered promiscuous mode [ 318.055783][T10976] macvlan4: entered allmulticast mode [ 318.212659][T10978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.222438][T10978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.880374][T10986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1750'. [ 318.964433][ T50] usb 1-1: Failed to submit usb control message: -110 [ 318.980447][ T50] usb 1-1: unable to send the bmi data to the device: -110 [ 319.026407][ T50] usb 1-1: unable to get target info from device [ 319.032853][ T50] usb 1-1: could not get target info (-110) [ 319.165909][ T50] usb 1-1: could not probe fw (-110) [ 320.143491][ T5939] usb 1-1: USB disconnect, device number 8 [ 321.439499][ T5909] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 321.727364][ T5909] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 321.735585][ T5909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.746157][ T5909] usb 1-1: config 0 has no interface number 0 [ 321.766606][ T5909] usb 1-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 321.784953][ T5909] usb 1-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 321.798735][ T5909] usb 1-1: config 0 interface 106 has no altsetting 0 [ 321.805775][ T5909] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 322.006538][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.032485][ T5909] usb 1-1: config 0 descriptor?? [ 322.095959][ T5909] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 322.258342][T11038] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1762'. [ 322.472142][T11040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.484890][T11040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.106732][ T62] usb 1-1: Failed to submit usb control message: -110 [ 323.114023][ T62] usb 1-1: unable to send the bmi data to the device: -110 [ 323.136600][ T62] usb 1-1: unable to get target info from device [ 323.157426][ T62] usb 1-1: could not get target info (-110) [ 323.188870][ T62] usb 1-1: could not probe fw (-110) [ 323.493025][T11047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1763'. [ 323.690755][T11053] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 323.720408][T11053] netdevsim netdevsim3: Direct firmware load for / [ 323.720408][T11053] failed with error -2 [ 323.733658][T11053] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 323.733658][T11053] [ 324.755489][T11065] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1767'. [ 324.811715][T11066] macvlan4: entered promiscuous mode [ 324.817241][T11066] macvlan4: entered allmulticast mode [ 325.192700][ T5909] usb 1-1: USB disconnect, device number 9 [ 326.196123][T11094] netlink: 'syz.3.1773': attribute type 10 has an invalid length. [ 326.214382][T11094] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1773'. [ 326.224503][T11094] bridge0: port 1(ipvlan1) entered blocking state [ 326.231752][T11094] bridge0: port 1(ipvlan1) entered disabled state [ 326.251312][T11094] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 327.164648][T11101] syzkaller0: entered promiscuous mode [ 327.172501][T11101] syzkaller0: entered allmulticast mode [ 327.270102][T11105] sctp: [Deprecated]: syz.0.1778 (pid 11105) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.270102][T11105] Use struct sctp_sack_info instead [ 328.060415][T11120] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 328.072773][T11120] netdevsim netdevsim4: Direct firmware load for / [ 328.072773][T11120] failed with error -2 [ 328.084161][T11120] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 328.084161][T11120] [ 330.688385][T11157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1797'. [ 330.836792][T11161] netlink: 'syz.2.1796': attribute type 10 has an invalid length. [ 330.847284][T11161] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1796'. [ 330.867420][T11161] bridge0: port 1(ipvlan1) entered blocking state [ 331.194916][T11161] bridge0: port 1(ipvlan1) entered disabled state [ 331.213433][T11161] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 334.772776][ T30] audit: type=1326 audit(1769903908.370:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11216 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa039aeb9 code=0x7ffc0000 [ 334.962555][ T30] audit: type=1326 audit(1769903908.370:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11216 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa039aeb9 code=0x7ffc0000 [ 335.100475][ T30] audit: type=1326 audit(1769903908.370:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11216 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcaa039aeb9 code=0x7ffc0000 [ 335.166883][ T30] audit: type=1326 audit(1769903908.370:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11216 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa039aeb9 code=0x7ffc0000 [ 335.258939][ T30] audit: type=1326 audit(1769903908.370:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11216 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa039aeb9 code=0x7ffc0000 [ 335.386403][ T30] audit: type=1326 audit(1769903908.370:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11216 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcaa039aeb9 code=0x7ffc0000 [ 335.631321][ T30] audit: type=1326 audit(1769903908.370:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11216 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa039aeb9 code=0x7ffc0000 [ 335.693389][ T30] audit: type=1326 audit(1769903908.370:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11216 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa039aeb9 code=0x7ffc0000 [ 335.938546][ T30] audit: type=1326 audit(1769903908.370:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11216 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcaa039aeb9 code=0x7ffc0000 [ 336.055952][ T30] audit: type=1326 audit(1769903908.370:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11216 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa039aeb9 code=0x7ffc0000 [ 337.856604][T11242] fuse: Unknown parameter '0xffffffffffffffff' [ 337.882757][T11242] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1821'. [ 338.228061][T11249] netlink: 'syz.3.1824': attribute type 10 has an invalid length. [ 338.350409][T11249] syz_tun: entered promiscuous mode [ 338.372018][T11249] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 338.785775][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1830'. [ 339.037278][T11277] fuse: Unknown parameter '0xffffffffffffffff' [ 339.059505][T11277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1832'. [ 339.346511][ T5939] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 340.108300][ T5939] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 340.130295][ T5939] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.296369][ T5939] usb 3-1: config 0 has no interface number 0 [ 340.318187][ T5939] usb 3-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 340.350006][ T5939] usb 3-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 340.386343][ T5939] usb 3-1: config 0 interface 106 has no altsetting 0 [ 340.424774][ T5939] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 340.444916][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.483188][ T5939] usb 3-1: config 0 descriptor?? [ 340.540606][T11293] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 340.579650][T11293] netdevsim netdevsim1: Direct firmware load for / [ 340.579650][T11293] failed with error -2 [ 340.600351][ T5939] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 340.606494][T11293] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 340.606494][T11293] [ 340.992713][T11300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.006818][T11300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.327640][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1845'. [ 341.656780][ T50] usb 3-1: Failed to submit usb control message: -110 [ 341.668494][ T50] usb 3-1: unable to send the bmi data to the device: -110 [ 341.677195][ T50] usb 3-1: unable to get target info from device [ 341.723158][ T50] usb 3-1: could not get target info (-110) [ 341.723198][ T50] usb 3-1: could not probe fw (-110) [ 342.746730][T11336] fuse: Unknown parameter '0xffffffffffffffff' [ 342.764568][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1851'. [ 343.811900][ T5939] usb 3-1: USB disconnect, device number 11 [ 343.945375][T11349] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 343.959502][T11349] netdevsim netdevsim3: Direct firmware load for / [ 343.959502][T11349] failed with error -2 [ 343.987593][T11349] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 343.987593][T11349] [ 344.017564][T11351] sctp: [Deprecated]: syz.1.1854 (pid 11351) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.017564][T11351] Use struct sctp_sack_info instead [ 345.011914][T11362] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 349.172972][T11407] fuse: Unknown parameter '0xffffffffffffffff' [ 349.343892][T11409] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1869'. [ 349.591419][T11420] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 349.603647][T11420] netdevsim netdevsim0: Direct firmware load for / [ 349.603647][T11420] failed with error -2 [ 349.614747][T11420] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 349.614747][T11420] [ 351.350350][T11437] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1879'. [ 351.515517][T11437] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 351.795026][T11445] netlink: 'syz.0.1880': attribute type 10 has an invalid length. [ 351.803233][T11445] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1880'. [ 352.030711][T11445] bridge0: port 1(ipvlan1) entered blocking state [ 352.057166][T11445] bridge0: port 1(ipvlan1) entered disabled state [ 352.075365][T11445] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 352.690783][T11459] netlink: 'syz.2.1882': attribute type 10 has an invalid length. [ 352.698843][T11459] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1882'. [ 352.761937][T11459] bridge0: port 1(ipvlan1) entered blocking state [ 352.777129][T11459] bridge0: port 1(ipvlan1) entered disabled state [ 352.800346][T11459] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 353.757011][T11472] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 353.778412][T11472] netdevsim netdevsim4: Direct firmware load for / [ 353.778412][T11472] failed with error -2 [ 353.810691][T11472] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 353.810691][T11472] [ 354.795816][T11490] fuse: Unknown parameter '0xffffffffffffffff' [ 354.810543][T11490] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1891'. [ 355.348499][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 355.348514][ T30] audit: type=1326 audit(1769903928.940:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb299aeb9 code=0x7ffc0000 [ 355.455533][T11498] netlink: 'syz.3.1893': attribute type 10 has an invalid length. [ 355.546543][T11500] openvswitch: netlink: Multiple metadata blocks provided [ 355.556544][T11498] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1893'. [ 355.596421][ T30] audit: type=1326 audit(1769903928.940:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb299aeb9 code=0x7ffc0000 [ 355.619142][T11498] bridge0: port 1(ipvlan1) entered blocking state [ 355.682696][T11498] bridge0: port 1(ipvlan1) entered disabled state [ 355.699613][ T30] audit: type=1326 audit(1769903928.940:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fefb299aeb9 code=0x7ffc0000 [ 355.728143][T11498] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 355.822112][ T30] audit: type=1326 audit(1769903928.940:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb299aeb9 code=0x7ffc0000 [ 355.969729][ T30] audit: type=1326 audit(1769903928.940:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb299aeb9 code=0x7ffc0000 [ 356.041131][ T30] audit: type=1326 audit(1769903928.940:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fefb299aeb9 code=0x7ffc0000 [ 356.294953][T11507] fuse: Unknown parameter '0xffffffffffffffff' [ 356.320548][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1895'. [ 356.336386][ T30] audit: type=1326 audit(1769903928.940:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb299aeb9 code=0x7ffc0000 [ 356.401815][ T30] audit: type=1326 audit(1769903928.940:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb299aeb9 code=0x7ffc0000 [ 356.456855][ T30] audit: type=1326 audit(1769903928.940:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fefb299aeb9 code=0x7ffc0000 [ 356.532696][ T30] audit: type=1326 audit(1769903928.940:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb299aeb9 code=0x7ffc0000 [ 357.668586][T11532] fuse: Unknown parameter '0xffffffffffffffff' [ 357.687924][T11532] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 358.319953][T11542] netlink: 'syz.4.1907': attribute type 10 has an invalid length. [ 358.328445][T11542] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1907'. [ 358.342819][T11542] bridge0: port 1(ipvlan1) entered blocking state [ 358.349660][T11542] bridge0: port 1(ipvlan1) entered disabled state [ 358.532217][T11542] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 360.196622][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1916'. [ 360.825021][T11591] netlink: 'syz.1.1921': attribute type 10 has an invalid length. [ 360.833151][T11591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1921'. [ 360.842918][T11591] bridge0: port 3(ipvlan1) entered blocking state [ 360.850256][T11591] bridge0: port 3(ipvlan1) entered disabled state [ 360.861661][T11591] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 361.376802][ T5909] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 361.692425][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 361.726584][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 361.834499][ T5909] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 361.845719][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.869619][ T5909] usb 5-1: Product: syz [ 361.873846][ T5909] usb 5-1: Manufacturer: syz [ 361.946350][ T5909] usb 5-1: SerialNumber: syz [ 361.968818][ T5909] usb 5-1: config 0 descriptor?? [ 361.979893][ T5909] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 361.989317][ T5909] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 361.997114][T11601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1923'. [ 362.585009][ T5909] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 362.666419][ T5879] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 362.862267][ T5879] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 362.872835][ T5879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.895885][ T5879] usb 1-1: config 0 has no interface number 0 [ 362.910218][ T5879] usb 1-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 362.930540][ T5879] usb 1-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 362.951557][ T5879] usb 1-1: config 0 interface 106 has no altsetting 0 [ 362.976744][ T5879] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 362.991607][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.024246][ T5909] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 363.054111][ T5879] usb 1-1: config 0 descriptor?? [ 363.096595][ T5909] em28xx 5-1:0.0: board has no eeprom [ 363.135852][ T5879] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 363.406412][ T5909] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 363.456685][ T5909] em28xx 5-1:0.0: dvb set to bulk mode. [ 363.505048][ T5906] em28xx 5-1:0.0: Binding DVB extension [ 363.724095][ T5879] usb 5-1: USB disconnect, device number 11 [ 363.731929][ T5879] em28xx 5-1:0.0: Disconnecting em28xx [ 363.784905][ T5906] em28xx 5-1:0.0: Registering input extension [ 363.814704][ T5879] em28xx 5-1:0.0: Closing input extension [ 363.952396][ T5879] em28xx 5-1:0.0: Freeing device [ 364.151144][ T50] usb 1-1: Failed to submit usb control message: -110 [ 364.173619][ T50] usb 1-1: unable to send the bmi data to the device: -110 [ 364.202228][ T50] usb 1-1: unable to get target info from device [ 364.222072][ T50] usb 1-1: could not get target info (-110) [ 364.236490][ T50] usb 1-1: could not probe fw (-110) [ 364.343954][T11633] fuse: Unknown parameter '0xffffffffffffffff' [ 364.373505][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1932'. [ 364.586687][ T5906] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 364.829997][ T5906] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 364.853957][ T5906] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.893484][ T5906] usb 5-1: config 0 has no interface number 0 [ 364.913713][ T5906] usb 5-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 364.948103][ T5906] usb 5-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 365.095224][ T5906] usb 5-1: config 0 interface 106 has no altsetting 0 [ 365.108113][T11637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1934'. [ 365.144686][ T5906] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 365.162403][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.181986][ T5906] usb 5-1: config 0 descriptor?? [ 365.305422][ T5906] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 366.376594][ T1167] usb 5-1: Failed to submit usb control message: -110 [ 366.383696][ T1167] usb 5-1: unable to send the bmi data to the device: -110 [ 366.400317][ T1167] usb 5-1: unable to get target info from device [ 366.463860][ T1167] usb 5-1: could not get target info (-110) [ 366.513531][ T1167] usb 5-1: could not probe fw (-110) [ 366.672114][ T5879] usb 1-1: USB disconnect, device number 10 [ 366.896918][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1938'. [ 367.256965][ T5879] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 367.476713][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 367.531938][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.595872][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.606096][ T5879] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 367.619104][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.717172][T11663] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 367.727997][T11663] netdevsim netdevsim3: Direct firmware load for / [ 367.727997][T11663] failed with error -2 [ 367.760837][T11663] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 367.760837][T11663] [ 367.784079][ T5879] usb 1-1: config 0 descriptor?? [ 368.126027][ T24] usb 5-1: USB disconnect, device number 12 [ 368.320133][ T5879] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 368.568082][ T5906] usb 1-1: USB disconnect, device number 11 [ 368.606427][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 368.742502][T11674] fido_id[11674]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 369.113523][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 369.130840][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 369.156238][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 369.177867][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.196543][ T24] usb 5-1: Product: syz [ 369.201994][ T24] usb 5-1: Manufacturer: syz [ 369.223350][ T24] usb 5-1: SerialNumber: syz [ 369.243240][ T24] usb 5-1: config 0 descriptor?? [ 369.270776][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 369.287689][ T24] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 369.912317][T11696] netlink: 'syz.3.1949': attribute type 10 has an invalid length. [ 369.939120][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 370.021623][T11696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1949'. [ 370.047798][T11696] bridge0: port 1(ipvlan1) entered blocking state [ 370.090267][T11696] bridge0: port 1(ipvlan1) entered disabled state [ 370.218817][T11696] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 370.395053][ T24] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 370.403399][ T24] em28xx 5-1:0.0: board has no eeprom [ 370.522804][T11700] batadv_slave_1: entered promiscuous mode [ 370.536739][T11699] batadv_slave_1: left promiscuous mode [ 370.766371][ T24] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 370.777243][ T24] em28xx 5-1:0.0: dvb set to bulk mode. [ 370.806485][ T5909] em28xx 5-1:0.0: Binding DVB extension [ 371.099353][ T24] usb 5-1: USB disconnect, device number 13 [ 371.106152][ T24] em28xx 5-1:0.0: Disconnecting em28xx [ 371.200957][ T5909] em28xx 5-1:0.0: Registering input extension [ 371.210663][ T24] em28xx 5-1:0.0: Closing input extension [ 371.247283][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1955'. [ 371.290847][ T24] em28xx 5-1:0.0: Freeing device [ 372.504379][T11743] sctp: [Deprecated]: syz.1.1965 (pid 11743) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.504379][T11743] Use struct sctp_sack_info instead [ 373.506817][T11753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.587635][T11755] fuse: Unknown parameter '0xffffffffffffffff' [ 373.605229][T11755] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 373.699281][T11753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.826514][ T24] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 374.206414][ T5879] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 374.231906][T11765] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1974'. [ 374.283955][T11765] syzkaller1: entered promiscuous mode [ 374.297556][T11765] syzkaller1: entered allmulticast mode [ 374.370786][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 374.383770][ T5879] usb 1-1: unable to get BOS descriptor or descriptor too short [ 374.395940][ T5879] usb 1-1: config 40 has an invalid interface number: 160 but max is 0 [ 374.404514][ T5879] usb 1-1: config 40 has no interface number 0 [ 374.523954][ T5879] usb 1-1: config 40 interface 160 altsetting 47 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 374.535397][ T5879] usb 1-1: config 40 interface 160 altsetting 47 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 374.643478][ T5879] usb 1-1: config 40 interface 160 altsetting 47 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 375.036218][ T5879] usb 1-1: config 40 interface 160 altsetting 47 has a duplicate endpoint with address 0xE, skipping [ 375.067311][ T5879] usb 1-1: config 40 interface 160 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 375.089219][ T5879] usb 1-1: config 40 interface 160 has no altsetting 0 [ 375.111148][ T5879] usb 1-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=74.b7 [ 375.120405][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.130557][ T5879] usb 1-1: Product: syz [ 375.134730][ T5879] usb 1-1: Manufacturer: syz [ 375.155659][ T5879] usb 1-1: SerialNumber: syz [ 375.726454][ T5909] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 375.876419][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 376.002288][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 376.033510][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 376.059132][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 376.084192][ T5909] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=53.c8 [ 376.216488][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.234817][ T5909] usb 4-1: Product: syz [ 376.246358][ T5909] usb 4-1: Manufacturer: syz [ 376.251033][ T5909] usb 4-1: SerialNumber: syz [ 376.287471][ T5909] usb 4-1: config 0 descriptor?? [ 376.318349][ T5909] ati_remote 4-1:0.0: ati_remote_probe: Unexpected endpoint_in [ 376.874316][ T5879] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 376.960569][T11809] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1984'. [ 377.077547][T11809] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 377.300151][ T5879] usb 1-1: USB disconnect, device number 12 [ 377.362972][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:40.160/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.782538][ T5879] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 378.044008][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 378.086733][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 378.102723][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 378.118070][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 378.139328][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 378.150528][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 378.165707][ T5879] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 378.175224][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.185207][ T5879] usb 1-1: Product: syz [ 378.189498][ T5879] usb 1-1: Manufacturer: syz [ 378.194134][ T5879] usb 1-1: SerialNumber: syz [ 378.207226][ T5879] usb 1-1: config 0 descriptor?? [ 378.272178][ T5879] ti_usb_3410_5052 1-1:0.0: TI USB 5052 2 port adapter converter detected [ 378.281641][ T5879] ti_usb_3410_5052 1-1:0.0: missing endpoints [ 378.529811][ T5879] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 378.570996][ T10] usb 4-1: USB disconnect, device number 11 [ 378.690396][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.696949][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.767221][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 378.777448][ T5879] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.818037][ T5879] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 378.901463][ T5879] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 378.969800][ T5879] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 379.029334][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.054217][ T5879] usb 3-1: Product: syz [ 379.208450][ T5879] usb 3-1: Manufacturer: syz [ 379.225974][ T5879] usb 3-1: SerialNumber: syz [ 379.256160][T11823] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 379.268877][ T5879] cdc_ncm 3-1:1.0: skipping garbage [ 379.277396][ T5879] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 379.302148][ T5879] cdc_ncm 3-1:1.0: bind() failure [ 379.333215][ T5879] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 379.354697][ T5879] cdc_ncm 3-1:1.1: bind() failure [ 379.806973][T11850] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1997'. [ 380.021622][T11856] loop4: detected capacity change from 0 to 7 [ 380.039630][ T5828] Dev loop4: unable to read RDB block 7 [ 380.045426][ T5828] loop4: unable to read partition table [ 380.071033][ T797] usb 1-1: USB disconnect, device number 13 [ 380.092876][ T5828] loop4: partition table beyond EOD, truncated [ 380.107379][T11856] Dev loop4: unable to read RDB block 7 [ 380.118790][T11856] loop4: unable to read partition table [ 380.135871][T11856] loop4: partition table beyond EOD, truncated [ 380.150416][T11856] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 380.689716][ T5909] usb 3-1: USB disconnect, device number 13 [ 380.806587][ T797] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 380.948398][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2008'. [ 380.976379][ T797] usb 1-1: Using ep0 maxpacket: 8 [ 380.984303][ T797] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 381.000642][ T797] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 381.011319][ T797] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024 [ 381.024286][ T797] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 381.035736][ T797] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.049954][ T797] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 381.059976][ T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.206389][ T5886] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 381.292693][ T797] usb 1-1: usb_control_msg returned -71 [ 381.300894][ T797] usbtmc 1-1:16.0: can't read capabilities [ 381.328722][ T797] usb 1-1: USB disconnect, device number 14 [ 381.366392][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 381.376621][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.387915][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.401631][ T5886] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 381.414103][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.442259][ T5886] usb 3-1: config 0 descriptor?? [ 381.934714][ T5886] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 382.097272][ T24] IPVS: starting estimator thread 0... [ 382.183621][ T24] usb 3-1: USB disconnect, device number 14 [ 382.190172][T11895] IPVS: using max 36 ests per chain, 86400 per kthread [ 382.278619][T11900] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 382.417356][T11904] netlink: 'syz.0.2016': attribute type 11 has an invalid length. [ 382.454454][T11904] netlink: 'syz.0.2016': attribute type 11 has an invalid length. [ 383.313454][T11935] input: syz1 as /devices/virtual/input/input10 [ 383.546552][ T797] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 383.560004][T11932] loop5: detected capacity change from 0 to 4096 [ 383.716846][ T797] usb 5-1: device descriptor read/64, error -71 [ 384.054189][ T797] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 384.236633][ T797] usb 5-1: device descriptor read/64, error -71 [ 384.358554][ T797] usb usb5-port1: attempt power cycle [ 384.706424][ T797] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 384.737140][ T797] usb 5-1: device descriptor read/8, error -71 [ 384.982086][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 384.982103][ T30] audit: type=1326 audit(1769903958.580:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000c39aeb9 code=0x7ffc0000 [ 385.013909][ T797] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 385.030525][T11955] kvm: pic: non byte write [ 385.078071][ T797] usb 5-1: device descriptor read/8, error -71 [ 385.121572][ T30] audit: type=1326 audit(1769903958.580:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000c39aeb9 code=0x7ffc0000 [ 385.171072][ T30] audit: type=1326 audit(1769903958.590:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f000c39aeb9 code=0x7ffc0000 [ 385.408437][ T797] usb usb5-port1: unable to enumerate USB device [ 385.466099][ T30] audit: type=1326 audit(1769903958.590:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000c39aeb9 code=0x7ffc0000 [ 385.532751][ T30] audit: type=1326 audit(1769903958.590:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000c39aeb9 code=0x7ffc0000 [ 385.651179][ T30] audit: type=1326 audit(1769903958.640:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f000c39aeb9 code=0x7ffc0000 [ 385.878055][ T30] audit: type=1326 audit(1769903958.640:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000c39aeb9 code=0x7ffc0000 [ 385.969072][T11976] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2035'. [ 385.983048][ T30] audit: type=1326 audit(1769903958.640:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f000c39aeb9 code=0x7ffc0000 [ 386.101167][ T30] audit: type=1326 audit(1769903958.640:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000c39aeb9 code=0x7ffc0000 [ 386.156204][T11976] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2035'. [ 386.198235][ T30] audit: type=1326 audit(1769903958.640:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f000c39aeb9 code=0x7ffc0000 [ 386.574113][T11983] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 386.966393][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 387.587882][T12002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2044'. [ 388.449101][T12013] FAULT_INJECTION: forcing a failure. [ 388.449101][T12013] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 388.530417][T12013] CPU: 1 UID: 0 PID: 12013 Comm: syz.2.2047 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.530447][T12013] Tainted: [L]=SOFTLOCKUP [ 388.530453][T12013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 388.530467][T12013] Call Trace: [ 388.530474][T12013] [ 388.530483][T12013] dump_stack_lvl+0xe8/0x150 [ 388.530519][T12013] should_fail_ex+0x412/0x560 [ 388.530546][T12013] _copy_to_user+0x31/0xb0 [ 388.530572][T12013] simple_read_from_buffer+0xe1/0x170 [ 388.530596][T12013] proc_fail_nth_read+0x1bb/0x230 [ 388.530622][T12013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 388.530648][T12013] ? rw_verify_area+0x2a6/0x4d0 [ 388.530670][T12013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 388.530694][T12013] vfs_read+0x20c/0xa70 [ 388.530714][T12013] ? fdget_pos+0x246/0x320 [ 388.530736][T12013] ? __pfx___mutex_lock+0x10/0x10 [ 388.530755][T12013] ? __pfx_vfs_read+0x10/0x10 [ 388.530777][T12013] ? __fget_files+0x2a/0x420 [ 388.530799][T12013] ? __fget_files+0x3a0/0x420 [ 388.530815][T12013] ? __fget_files+0x2a/0x420 [ 388.530842][T12013] ksys_read+0x150/0x270 [ 388.530867][T12013] ? __pfx_ksys_read+0x10/0x10 [ 388.530900][T12013] do_syscall_64+0xe2/0xf80 [ 388.530919][T12013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.530936][T12013] ? trace_irq_disable+0x37/0x100 [ 388.530953][T12013] ? clear_bhb_loop+0x60/0xb0 [ 388.530970][T12013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.530991][T12013] RIP: 0033:0x7fefb295b78e [ 388.531023][T12013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 388.531038][T12013] RSP: 002b:00007fefb3904fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 388.531057][T12013] RAX: ffffffffffffffda RBX: 00007fefb39056c0 RCX: 00007fefb295b78e [ 388.531070][T12013] RDX: 000000000000000f RSI: 00007fefb39050a0 RDI: 0000000000000003 [ 388.531080][T12013] RBP: 00007fefb3905090 R08: 0000000000000000 R09: 0000000000000000 [ 388.531091][T12013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.531101][T12013] R13: 00007fefb2c16038 R14: 00007fefb2c15fa0 R15: 00007fefb2d3fa48 [ 388.531128][T12013] [ 388.827343][T12024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2049'. [ 389.282164][T12033] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2051'. [ 390.232857][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 390.243566][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 390.292209][ T24] usb 1-1: can't read configurations, error -71 [ 390.750743][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2056'. [ 391.054941][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 391.054957][ T30] audit: type=1326 audit(1769903964.650:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.3.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000c39aeb9 code=0x7ffc0000 [ 391.103652][ T30] audit: type=1326 audit(1769903964.690:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.3.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000c39aeb9 code=0x7ffc0000 [ 391.382409][ T30] audit: type=1326 audit(1769903964.690:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.3.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f000c39aeb9 code=0x7ffc0000 [ 391.538001][ T30] audit: type=1326 audit(1769903964.690:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.3.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000c39aeb9 code=0x7ffc0000 [ 391.643666][ T30] audit: type=1326 audit(1769903964.690:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.3.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f000c39aeb9 code=0x7ffc0000 [ 391.700373][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2061'. [ 391.725093][ T30] audit: type=1326 audit(1769903964.690:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.3.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000c39aeb9 code=0x7ffc0000 [ 391.803300][ T30] audit: type=1326 audit(1769903964.690:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.3.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f000c39aeb9 code=0x7ffc0000 [ 391.806556][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2061'. [ 392.019371][ T30] audit: type=1326 audit(1769903964.690:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.3.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000c39aeb9 code=0x7ffc0000 [ 392.103554][ T30] audit: type=1326 audit(1769903964.690:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.3.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f000c39aeb9 code=0x7ffc0000 [ 392.185892][ T30] audit: type=1326 audit(1769903964.690:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.3.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000c39aeb9 code=0x7ffc0000 [ 393.594654][T12097] vlan3: entered allmulticast mode [ 393.623748][T12097] veth0_to_bond: entered allmulticast mode [ 393.778162][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2072'. [ 393.810544][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2072'. [ 394.036487][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 394.247091][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 394.257942][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 394.279936][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 394.290057][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.309239][ T24] usb 3-1: Product: syz [ 394.318691][ T24] usb 3-1: Manufacturer: syz [ 394.323333][ T24] usb 3-1: SerialNumber: syz [ 394.364583][ T24] usb 3-1: config 0 descriptor?? [ 394.372399][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 394.817442][T12122] pimreg: entered allmulticast mode [ 394.876193][ T24] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 395.318437][T12110] pimreg: left allmulticast mode [ 395.474581][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 395.896149][T12139] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 396.085745][ T24] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 396.085780][ T24] em28xx 3-1:0.0: board has no eeprom [ 396.111289][T12139] Cannot find add_set index 0 as target [ 396.177703][T12144] netlink: 'syz.3.2084': attribute type 21 has an invalid length. [ 396.186672][T12144] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2084'. [ 396.219205][T12144] netlink: 'syz.3.2084': attribute type 21 has an invalid length. [ 396.286429][ T5886] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 396.322363][T12144] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2084'. [ 396.436400][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 396.436414][ T24] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 396.436436][ T24] em28xx 3-1:0.0: dvb set to bulk mode. [ 396.443755][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.458314][ T24] em28xx 3-1:0.0: Binding DVB extension [ 396.560320][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.605481][ T5886] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 396.623114][ T5886] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 396.634238][ T5886] usb 1-1: Manufacturer: syz [ 396.650671][ T5886] usb 1-1: config 0 descriptor?? [ 397.041823][ T5886] usb 1-1: USB disconnect, device number 17 [ 397.289589][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2090'. [ 398.067480][T12103] em28xx 3-1:0.0: writing to i2c device at 0xfe00 failed (error=-5) [ 398.088848][ T5909] usb 3-1: USB disconnect, device number 15 [ 398.113408][ T5909] em28xx 3-1:0.0: Disconnecting em28xx [ 398.276740][ T24] em28xx 3-1:0.0: Registering input extension [ 398.294368][ T5909] em28xx 3-1:0.0: Closing input extension [ 398.349353][ T5909] em28xx 3-1:0.0: Freeing device [ 398.653742][T12188] usb usb8: usbfs: process 12188 (syz.3.2098) did not claim interface 0 before use [ 398.724072][T12189] xt_connbytes: Forcing CT accounting to be enabled [ 398.731256][T12189] SET target dimension over the limit! [ 398.969162][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'. [ 399.836412][ T5886] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 400.022032][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 400.065330][ T5886] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 400.371344][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.410677][ T5886] usb 3-1: config 0 descriptor?? [ 400.826688][ T5886] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 400.904158][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 400.939063][ T5886] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 400.972528][ T5886] usb 3-1: media controller created [ 401.115970][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.977692][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 402.116410][ T24] usb 1-1: device descriptor read/64, error -71 [ 402.222769][ T5886] az6027: usb out operation failed. (-71) [ 402.322433][ T5886] az6027: usb out operation failed. (-71) [ 402.366393][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 402.403331][ T5886] stb0899_attach: Driver disabled by Kconfig [ 402.516483][ T24] usb 1-1: device descriptor read/64, error -71 [ 402.591592][ T5886] az6027: no front-end attached [ 402.591592][ T5886] [ 402.636419][ T5886] az6027: usb out operation failed. (-71) [ 402.638215][ T24] usb usb1-port1: attempt power cycle [ 402.676004][ T5886] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 402.712184][ T5886] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 402.782898][ T5886] dvb-usb: schedule remote query interval to 400 msecs. [ 402.834805][ T5886] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 402.874372][ T5886] usb 3-1: USB disconnect, device number 16 [ 403.008044][ T5886] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 403.016561][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 403.078531][ T24] usb 1-1: device descriptor read/8, error -71 [ 403.346595][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 403.378388][ T24] usb 1-1: device descriptor read/8, error -71 [ 403.506547][ T5906] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 403.517740][ T24] usb usb1-port1: unable to enumerate USB device [ 403.679667][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 403.700124][ T5906] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 403.721088][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.779210][T12278] syz.1.2123 uses obsolete (PF_INET,SOCK_PACKET) [ 403.791306][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.807091][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2123'. [ 403.817787][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.830264][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.858466][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.911360][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.932198][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.007410][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.026001][ T5906] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 404.041937][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 404.089498][ T5906] usb 4-1: SerialNumber: syz [ 404.117310][ T5906] usb 4-1: config 0 descriptor?? [ 404.152628][ T5906] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 404.483749][T12288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.512731][T12288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.173950][T12308] capability: warning: `syz.0.2128' uses deprecated v2 capabilities in a way that may be insecure [ 405.322092][T12303] binder: 12302:12303 ioctl c0306201 200000000540 returned -14 [ 405.515007][ T5179] bcm5974 4-1:0.0: could not read from device [ 405.544475][ T5179] bcm5974 4-1:0.0: could not read from device [ 405.559097][ T5179] bcm5974 4-1:0.0: could not read from device [ 405.567453][ T5179] bcm5974 4-1:0.0: could not read from device [ 405.593543][ T5906] usb 4-1: USB disconnect, device number 12 [ 405.623433][ T5179] bcm5974 4-1:0.0: could not read from device [ 405.656622][ T5879] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 405.675763][ T5829] bcm5974 4-1:0.0: could not read from device [ 405.823624][ T5879] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.886393][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 405.915250][ T5879] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 405.935536][ T5879] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 405.965458][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.988902][T12310] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 406.018548][ T5879] hub 5-1:1.0: bad descriptor, ignoring hub [ 406.036446][ T5879] hub 5-1:1.0: probe with driver hub failed with error -5 [ 406.052141][ T5879] cdc_wdm 5-1:1.0: skipping garbage [ 406.061950][ T5879] cdc_wdm 5-1:1.0: skipping garbage [ 406.094343][ T5879] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 406.119126][ T5879] cdc_wdm 5-1:1.0: Unknown control protocol [ 406.217352][T12310] FAULT_INJECTION: forcing a failure. [ 406.217352][T12310] name failslab, interval 1, probability 0, space 0, times 0 [ 406.246425][T12310] CPU: 0 UID: 0 PID: 12310 Comm: syz.4.2130 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.246458][T12310] Tainted: [L]=SOFTLOCKUP [ 406.246465][T12310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 406.246476][T12310] Call Trace: [ 406.246483][T12310] [ 406.246497][T12310] dump_stack_lvl+0xe8/0x150 [ 406.246524][T12310] should_fail_ex+0x412/0x560 [ 406.246550][T12310] should_failslab+0xa8/0x100 [ 406.246571][T12310] kmem_cache_alloc_noprof+0x87/0x6e0 [ 406.246596][T12310] ? alloc_empty_file+0x55/0x1d0 [ 406.246615][T12310] ? kernel_text_address+0xa5/0xe0 [ 406.246639][T12310] alloc_empty_file+0x55/0x1d0 [ 406.246660][T12310] path_openat+0x11e/0x3e20 [ 406.246690][T12310] ? stack_trace_save+0xa9/0x100 [ 406.246709][T12310] ? __pfx_stack_trace_save+0x10/0x10 [ 406.246737][T12310] ? kasan_save_track+0x4f/0x80 [ 406.246752][T12310] ? kasan_save_track+0x3e/0x80 [ 406.246766][T12310] ? __kasan_slab_alloc+0x6c/0x80 [ 406.246782][T12310] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 406.246803][T12310] ? getname_flags+0xb7/0x540 [ 406.246819][T12310] ? do_sys_openat2+0xca/0x220 [ 406.246840][T12310] ? __pfx_path_openat+0x10/0x10 [ 406.246863][T12310] ? __lock_acquire+0x6b5/0x2cf0 [ 406.246898][T12310] do_filp_open+0x22d/0x490 [ 406.246922][T12310] ? __pfx_do_filp_open+0x10/0x10 [ 406.246963][T12310] ? _raw_spin_unlock+0x28/0x50 [ 406.246985][T12310] ? alloc_fd+0x64b/0x6c0 [ 406.247012][T12310] do_sys_openat2+0x12f/0x220 [ 406.247033][T12310] ? __pfx_do_sys_openat2+0x10/0x10 [ 406.247053][T12310] ? ksys_write+0x242/0x270 [ 406.247077][T12310] ? __pfx_ksys_write+0x10/0x10 [ 406.247103][T12310] __x64_sys_openat+0x138/0x170 [ 406.247127][T12310] do_syscall_64+0xe2/0xf80 [ 406.247145][T12310] ? rcu_is_watching+0x15/0xb0 [ 406.247160][T12310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.247177][T12310] ? clear_bhb_loop+0x60/0xb0 [ 406.247197][T12310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.247214][T12310] RIP: 0033:0x7f04c455b78e [ 406.247230][T12310] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 406.247244][T12310] RSP: 002b:00007f04c54afb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 406.247264][T12310] RAX: ffffffffffffffda RBX: 00007f04c54b06c0 RCX: 00007f04c455b78e [ 406.247277][T12310] RDX: 0000000000000002 RSI: 00007f04c54afc00 RDI: ffffffffffffff9c [ 406.247289][T12310] RBP: 00007f04c54b0090 R08: 0000000000000000 R09: 0000000000000000 [ 406.247300][T12310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.247310][T12310] R13: 00007f04c4816038 R14: 00007f04c4815fa0 R15: 00007f04c493fa48 [ 406.247337][T12310] [ 406.798270][ T5906] usb 5-1: USB disconnect, device number 18 [ 407.086441][ T5879] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 407.113427][T12337] netlink: 'syz.2.2134': attribute type 6 has an invalid length. [ 407.146748][ T5909] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 407.308836][ T5879] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 407.319084][T12345] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2139'. [ 407.346553][ T5879] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.364421][ T5909] usb 5-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 407.378183][ T5879] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 407.407828][ T5909] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 407.428288][ T5879] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.472260][ T5879] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 407.488950][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 407.506767][ T5879] usb 2-1: Product: syz [ 407.515827][ T5879] usb 2-1: Manufacturer: syz [ 407.525311][ T5909] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 407.547880][ T5879] cdc_wdm 2-1:1.0: skipping garbage [ 407.564601][ T5879] cdc_wdm 2-1:1.0: skipping garbage [ 407.575410][ T5879] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 407.716250][ T5909] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 407.812868][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.853489][T12318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.015747][T12318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.048883][T12310] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 408.210166][ T5879] usb 2-1: USB disconnect, device number 12 [ 408.270437][ T5909] hub 5-1:1.0: bad descriptor, ignoring hub [ 408.336349][ T5909] hub 5-1:1.0: probe with driver hub failed with error -5 [ 408.366899][ T5909] cdc_wdm 5-1:1.0: skipping garbage [ 408.376651][ T5909] cdc_wdm 5-1:1.0: skipping garbage [ 408.391439][ T5909] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 408.506946][ T5909] usb 5-1: USB disconnect, device number 19 [ 408.701539][T12353] warning: `syz.2.2141' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 408.921095][T12365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2145'. [ 408.996436][ T5909] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 409.107876][T12371] sctp: [Deprecated]: syz.1.2146 (pid 12371) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.107876][T12371] Use struct sctp_sack_info instead [ 409.158604][ T5909] usb 3-1: config 0 has an invalid interface number: 22 but max is 0 [ 409.173783][ T5909] usb 3-1: config 0 has no interface number 0 [ 409.181777][ T5909] usb 3-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.203720][ T5909] usb 3-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.224356][ T5909] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 409.249369][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.266420][ T5879] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 409.293906][ T5909] usb 3-1: config 0 descriptor?? [ 409.426179][T12378] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2148'. [ 409.452327][ T5879] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.499910][ T5879] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 409.509261][ T5879] usb 1-1: config 1 has no interface number 0 [ 409.529440][ T5879] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.575048][ T5879] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 409.611469][ T5879] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.681475][ T5879] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.704517][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.722620][ T5879] usb 1-1: Product: syz [ 409.730567][ T5909] elo 0003:04E7:0030.0009: item fetching failed at offset 6/7 [ 409.757353][ T5879] usb 1-1: Manufacturer: syz [ 409.757364][ T5909] elo 0003:04E7:0030.0009: parse failed [ 409.770782][ T5909] elo 0003:04E7:0030.0009: probe with driver elo failed with error -22 [ 409.788434][ T5879] usb 1-1: SerialNumber: syz [ 409.936236][ T10] usb 3-1: USB disconnect, device number 17 [ 410.622135][T12395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.659743][ T5879] cdc_ncm 1-1:1.1: bind() failure [ 410.787791][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.839289][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.875041][ T5909] usb 1-1: USB disconnect, device number 22 [ 411.543504][T12396] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 412.016685][ T5886] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 412.171190][ T5886] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 412.201081][ T5886] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 412.226371][ T5886] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.251982][ T5886] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 412.277941][ T5886] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 412.307433][ T5886] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 412.330042][ T5886] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 412.353213][ T5886] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.380683][ T5886] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 412.409037][ T5886] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 412.441470][ T5886] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 412.477286][ T5886] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 412.492283][ T5886] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.507049][ T5886] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 412.525180][ T5886] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 412.557614][ T5886] usb 1-1: string descriptor 0 read error: -22 [ 412.568896][ T5886] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 412.621066][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.646732][ T5886] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 412.789362][T12432] fuse: Unknown parameter '0xffffffffffffffff' [ 413.231080][ T5886] usb 1-1: USB disconnect, device number 23 [ 413.481208][T12441] binder: 12440:12441 unknown command 0 [ 413.510250][T12441] binder: 12440:12441 ioctl c0306201 200000000080 returned -22 [ 415.116445][T12178] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 415.328914][T12178] usb 5-1: config 3 has an invalid interface number: 84 but max is 0 [ 415.384900][T12178] usb 5-1: config 3 has no interface number 0 [ 415.461158][T12178] usb 5-1: config 3 interface 84 has no altsetting 0 [ 415.486376][ T5886] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 415.640086][T12178] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=10.6b [ 415.680871][ T5886] usb 4-1: config 0 has no interfaces? [ 415.688475][T12178] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.702986][ T5886] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 415.720811][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.749160][ T5886] usb 4-1: config 0 descriptor?? [ 415.887743][T12178] usb 5-1: Product: syz [ 415.921692][T12178] usb 5-1: Manufacturer: syz [ 415.939672][T12178] usb 5-1: SerialNumber: syz [ 416.086014][T12466] kvm: kvm [12465]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 416.131270][T12466] kvm: kvm [12465]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 416.354380][T12178] as10x_usb: device has been detected [ 416.375934][T12178] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 416.423562][T12178] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 416.741142][T12178] as10x_usb: error during firmware upload part1 [ 416.764850][T12178] Registered device Abilis Systems DVB-Titan [ 416.774784][T12178] usb 5-1: USB disconnect, device number 20 [ 416.812196][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 416.812222][ T30] audit: type=1326 audit(1769903990.410:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.1.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa039aeb9 code=0x7ffc0000 [ 416.881627][ T30] audit: type=1326 audit(1769903990.410:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.1.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa039aeb9 code=0x7ffc0000 [ 416.949385][ T30] audit: type=1326 audit(1769903990.410:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.1.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcaa039aeb9 code=0x7ffc0000 [ 416.984107][T12498] openvswitch: netlink: Flow key attr not present in new flow. [ 416.995679][T12178] Unregistered device Abilis Systems DVB-Titan [ 417.001910][ T30] audit: type=1326 audit(1769903990.410:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.1.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa039aeb9 code=0x7ffc0000 [ 417.038433][T12178] as10x_usb: device has been disconnected [ 417.039461][ T30] audit: type=1326 audit(1769903990.410:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.1.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa039aeb9 code=0x7ffc0000 [ 417.113732][ T30] audit: type=1326 audit(1769903990.410:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.1.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcaa039aeb9 code=0x7ffc0000 [ 417.160783][ T30] audit: type=1326 audit(1769903990.410:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.1.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa039aeb9 code=0x7ffc0000 [ 417.220337][ T30] audit: type=1326 audit(1769903990.410:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.1.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa039aeb9 code=0x7ffc0000 [ 417.252615][ T30] audit: type=1326 audit(1769903990.410:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.1.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcaa039aeb9 code=0x7ffc0000 [ 417.279939][ T30] audit: type=1326 audit(1769903990.410:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.1.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa039aeb9 code=0x7ffc0000 [ 417.871240][T12509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2183'. [ 418.010589][T12178] usb 4-1: USB disconnect, device number 13 [ 419.499651][T12533] sctp: [Deprecated]: syz.4.2191 (pid 12533) Use of struct sctp_assoc_value in delayed_ack socket option. [ 419.499651][T12533] Use struct sctp_sack_info instead [ 419.522733][T12539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.532871][T12539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.776473][ T5879] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 419.939105][ T5879] usb 4-1: unable to get BOS descriptor or descriptor too short [ 419.965844][ T5879] usb 4-1: not running at top speed; connect to a high speed hub [ 419.991774][ T5879] usb 4-1: config 12 has an invalid interface number: 173 but max is 1 [ 420.021814][ T5879] usb 4-1: config 12 has an invalid interface number: 173 but max is 1 [ 420.079880][ T5879] usb 4-1: config 12 has 1 interface, different from the descriptor's value: 2 [ 420.108119][ T5879] usb 4-1: config 12 has no interface number 0 [ 420.122768][ T5879] usb 4-1: config 12 interface 173 has no altsetting 1 [ 420.148001][ T5879] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=33.b7 [ 420.175711][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.194298][ T5879] usb 4-1: Product: syz [ 420.198729][ T5879] usb 4-1: Manufacturer: syz [ 420.204412][ T5879] usb 4-1: SerialNumber: syz [ 420.298985][T12552] fuse: Bad value for 'fd' [ 420.317941][ T5886] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 420.462950][ T5879] usb 4-1: USB disconnect, device number 14 [ 420.486417][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 420.503408][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 420.532373][ T5886] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 420.552167][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.582393][ T5886] usb 2-1: config 0 descriptor?? [ 420.810666][ T5886] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 421.017300][T12178] usb 2-1: USB disconnect, device number 13 [ 421.023288][ C1] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 422.905298][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 422.905314][ T30] audit: type=1326 audit(1769903996.500:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.2.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb299aeb9 code=0x7ffc0000 [ 422.938777][ T30] audit: type=1326 audit(1769903996.500:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.2.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb299aeb9 code=0x7ffc0000 [ 422.972885][ T30] audit: type=1326 audit(1769903996.500:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.2.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fefb299aeb9 code=0x7ffc0000 [ 423.020289][T12588] openvswitch: netlink: Flow key attr not present in new flow. [ 423.028087][ T30] audit: type=1326 audit(1769903996.500:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.2.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb299aeb9 code=0x7ffc0000 [ 423.076349][ T30] audit: type=1326 audit(1769903996.500:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.2.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fefb299aeb9 code=0x7ffc0000 [ 423.111737][ T30] audit: type=1326 audit(1769903996.500:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.2.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb299aeb9 code=0x7ffc0000 [ 423.135104][ T30] audit: type=1326 audit(1769903996.500:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.2.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb299aeb9 code=0x7ffc0000 [ 423.164751][ T30] audit: type=1326 audit(1769903996.500:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.2.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fefb299aeb9 code=0x7ffc0000 [ 423.187563][ T30] audit: type=1326 audit(1769903996.500:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.2.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb299aeb9 code=0x7ffc0000 [ 423.210601][ T30] audit: type=1326 audit(1769903996.500:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.2.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb299aeb9 code=0x7ffc0000 [ 423.491612][T12595] sctp: [Deprecated]: syz.1.2208 (pid 12595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.491612][T12595] Use struct sctp_sack_info instead [ 426.066200][T12620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2215'. [ 426.457175][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2217'. [ 426.486430][ T5906] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 426.578841][T12178] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 426.749115][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 426.761621][T12178] usb 4-1: Using ep0 maxpacket: 32 [ 426.768641][ T5879] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 426.795886][T12178] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 426.808184][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 426.828974][T12178] usb 4-1: config 0 has no interface number 0 [ 426.847313][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 426.860285][T12178] usb 4-1: config 0 interface 230 has no altsetting 0 [ 426.876858][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 426.890774][T12178] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 426.910214][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 426.924263][T12178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.944414][T12178] usb 4-1: Product: syz [ 426.955242][T12178] usb 4-1: Manufacturer: syz [ 426.966410][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 426.972579][ T5906] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 426.973102][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.993424][T12178] usb 4-1: SerialNumber: syz [ 427.013521][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.014202][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.023693][T12178] usb 4-1: config 0 descriptor?? [ 427.049001][ T5879] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 427.058368][ T5906] usb 5-1: Product: syz [ 427.058493][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.062767][ T5906] usb 5-1: Manufacturer: syz [ 427.088219][T12178] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 427.107327][ T5879] usb 2-1: config 0 descriptor?? [ 427.119556][T12178] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 427.132655][ T5906] usb 5-1: SerialNumber: syz [ 427.148671][ T5906] usb 5-1: config 0 descriptor?? [ 427.159371][T12615] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 427.253036][ T5906] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 427.574548][ T5879] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 427.850545][ T5879] IPVS: starting estimator thread 0... [ 427.864903][ T5879] usb 2-1: USB disconnect, device number 14 [ 427.966440][T12643] IPVS: using max 34 ests per chain, 81600 per kthread [ 428.705089][ T5879] usb 5-1: USB disconnect, device number 21 [ 429.516977][ T5879] usb 4-1: USB disconnect, device number 15 [ 430.037400][ T5879] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 430.173322][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 430.213040][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 430.224478][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 430.232786][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 430.245727][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 430.256605][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 430.282615][ T5879] usb 3-1: unable to get BOS descriptor or descriptor too short [ 430.306461][ T5879] usb 3-1: config 4 interface 0 has no altsetting 0 [ 430.316210][ T5879] usb 3-1: string descriptor 0 read error: -22 [ 430.333662][ T5879] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 430.355630][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.399420][ T5879] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 430.435343][ T5879] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 430.467156][ T5879] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 430.487779][ T5879] usb 3-1: media controller created [ 430.519808][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 430.617370][T12675] FAULT_INJECTION: forcing a failure. [ 430.617370][T12675] name failslab, interval 1, probability 0, space 0, times 0 [ 430.675122][T12675] CPU: 1 UID: 0 PID: 12675 Comm: syz.2.2228 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.675153][T12675] Tainted: [L]=SOFTLOCKUP [ 430.675159][T12675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 430.675170][T12675] Call Trace: [ 430.675177][T12675] [ 430.675184][T12675] dump_stack_lvl+0xe8/0x150 [ 430.675203][T12675] should_fail_ex+0x412/0x560 [ 430.675218][T12675] should_failslab+0xa8/0x100 [ 430.675232][T12675] __kmalloc_noprof+0xde/0x7e0 [ 430.675248][T12675] ? kfree+0x4d/0x650 [ 430.675268][T12675] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 430.675294][T12675] tomoyo_realpath_from_path+0xe3/0x5d0 [ 430.675318][T12675] ? tomoyo_domain+0xd7/0x130 [ 430.675337][T12675] ? tomoyo_path_number_perm+0x219/0x630 [ 430.675352][T12675] tomoyo_path_number_perm+0x246/0x630 [ 430.675364][T12675] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 430.675374][T12675] ? __lock_acquire+0x6b5/0x2cf0 [ 430.675404][T12675] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 430.675443][T12675] ? __fget_files+0x2a/0x420 [ 430.675465][T12675] ? __fget_files+0x2a/0x420 [ 430.675480][T12675] ? __fget_files+0x3a0/0x420 [ 430.675491][T12675] ? __fget_files+0x2a/0x420 [ 430.675503][T12675] security_file_ioctl+0xc3/0x2a0 [ 430.675514][T12675] __se_sys_ioctl+0x47/0x170 [ 430.675530][T12675] do_syscall_64+0xe2/0xf80 [ 430.675543][T12675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.675558][T12675] ? trace_irq_disable+0x37/0x100 [ 430.675574][T12675] ? clear_bhb_loop+0x60/0xb0 [ 430.675594][T12675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.675608][T12675] RIP: 0033:0x7fefb299aeb9 [ 430.675623][T12675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.675637][T12675] RSP: 002b:00007fefb3905028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.675657][T12675] RAX: ffffffffffffffda RBX: 00007fefb2c15fa0 RCX: 00007fefb299aeb9 [ 430.675670][T12675] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 430.675682][T12675] RBP: 00007fefb3905090 R08: 0000000000000000 R09: 0000000000000000 [ 430.675692][T12675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.675701][T12675] R13: 00007fefb2c16038 R14: 00007fefb2c15fa0 R15: 00007fefb2d3fa48 [ 430.675728][T12675] [ 430.675744][T12675] ERROR: Out of memory at tomoyo_realpath_from_path. [ 431.591809][T12683] chnl_net:caif_netlink_parms(): no params data found [ 431.657667][ T5879] zl10353_read_register: readreg error (reg=127, ret==0) [ 431.734343][T12700] syzkaller0: entered promiscuous mode [ 431.762625][T12700] syzkaller0: entered allmulticast mode [ 431.829576][ T5879] usb 3-1: USB disconnect, device number 19 [ 432.011622][T12683] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.038227][T12683] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.061379][T12683] bridge_slave_0: entered allmulticast mode [ 432.090645][T12683] bridge_slave_0: entered promiscuous mode [ 432.123211][T12683] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.150467][T12683] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.194871][T12683] bridge_slave_1: entered allmulticast mode [ 432.229342][T12683] bridge_slave_1: entered promiscuous mode [ 432.308898][ T5830] Bluetooth: hci5: command tx timeout [ 433.093488][T12714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2238'. [ 433.126841][T12714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2238'. [ 433.160193][T12715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2238'. [ 433.169615][T12715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2238'. [ 433.860070][T12178] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 434.011204][T12467] syz.0.2170 (12467): drop_caches: 1 [ 434.038254][T12178] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 434.047861][T12178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.065336][T12178] usb 4-1: config 0 descriptor?? [ 434.074424][T12178] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 434.291445][T12178] gp8psk: usb in 128 operation failed. [ 434.382191][ T5830] Bluetooth: hci5: command tx timeout [ 434.524945][T12178] gp8psk: usb in 146 operation failed. [ 434.532868][T12178] gp8psk: failed to get FW version [ 434.548517][T12178] gp8psk: FPGA Version = 165 [ 434.762242][T12178] gp8psk: usb in 138 operation failed. [ 434.770311][T12178] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 434.782303][T12178] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 434.800178][T12178] usb 4-1: USB disconnect, device number 16 [ 435.010692][T12683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.026913][T12711] dvmrp1: entered allmulticast mode [ 435.716395][T12178] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 435.917889][T12178] usb 4-1: Using ep0 maxpacket: 8 [ 435.928545][T12178] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 435.968027][T12178] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 436.055826][T12178] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 436.076164][T12178] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 436.102549][T12178] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.146872][T12178] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 436.155953][T12178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.456733][ T5830] Bluetooth: hci5: command tx timeout [ 436.505165][T12683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.551240][T12733] bond0: entered promiscuous mode [ 436.583313][T12733] batadv0: entered promiscuous mode [ 436.607839][T12733] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 436.644788][T12733] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 436.825254][T12683] team0: Port device team_slave_0 added [ 436.899697][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2247'. [ 436.901165][T12683] team0: Port device team_slave_1 added [ 436.990505][T12683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.006374][T12683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.050245][T12683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.063469][T12683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.070796][T12683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.097590][T12683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.192096][T12683] hsr_slave_0: entered promiscuous mode [ 437.325540][T12738] usbtmc 4-1:16.0: simple control status returned 0 [ 437.366675][T12683] hsr_slave_1: entered promiscuous mode [ 437.402219][T12683] debugfs: 'hsr0' already exists in 'hsr' [ 437.437784][T12683] Cannot create hsr debugfs directory [ 437.644918][T12736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.668989][T12178] usb 4-1: USB disconnect, device number 17 [ 437.677027][T12736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.959712][T12757] capability: warning: `syz.2.2252' uses 32-bit capabilities (legacy support in use) [ 438.207400][T12763] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2252'. [ 438.310835][T12683] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 438.332259][T12683] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 438.536562][ T5830] Bluetooth: hci5: command tx timeout [ 438.898429][T12683] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 438.937660][T12772] tipc: Started in network mode [ 438.959550][T12772] tipc: Node identity ac1414aa, cluster identity 4711 [ 438.978744][T12772] tipc: New replicast peer: 100.1.1.1 [ 438.995827][T12772] tipc: Enabled bearer , priority 10 [ 439.011780][T12683] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 439.205866][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'. [ 439.410375][T12683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.482493][T12683] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.539003][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.546375][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.610346][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.617546][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.796561][ T5886] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 439.814220][T12683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.885367][T12683] veth0_vlan: entered promiscuous mode [ 439.920545][T12683] veth1_vlan: entered promiscuous mode [ 439.950426][T12683] veth0_macvtap: entered promiscuous mode [ 439.961887][T12683] veth1_macvtap: entered promiscuous mode [ 439.976772][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 439.993635][T12178] tipc: Node number set to 2886997162 [ 440.024246][T12683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.045346][T12683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.061266][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.067875][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.085543][ T1167] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.102632][ T1167] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.115102][ T5886] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 440.134361][ T1167] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.149800][T12798] netlink: 'syz.2.2261': attribute type 10 has an invalid length. [ 440.164199][ T1167] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.189146][T12798] team0: Port device dummy0 added [ 440.238675][ T5886] usb 2-1: config 0 has no interface number 0 [ 440.248688][T12798] sctp: [Deprecated]: syz.2.2261 (pid 12798) Use of int in max_burst socket option deprecated. [ 440.248688][T12798] Use struct sctp_assoc_value instead [ 440.341447][ T5886] usb 2-1: config 0 interface 230 has no altsetting 0 [ 440.470678][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.556047][ T5886] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 440.570759][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.675151][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.714181][ T5886] usb 2-1: Product: syz [ 440.740487][ T5886] usb 2-1: Manufacturer: syz [ 440.746462][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.765238][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.774019][ T5886] usb 2-1: SerialNumber: syz [ 440.799032][ T5886] usb 2-1: config 0 descriptor?? [ 440.850747][ T5886] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 440.909435][ T5886] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 442.776556][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 442.937224][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 442.947071][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 442.947090][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 442.947104][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 442.947118][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 442.947131][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 442.947143][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 442.947155][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 442.977070][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 442.977092][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.977103][ T10] usb 6-1: Product: syz [ 442.977111][ T10] usb 6-1: Manufacturer: syz [ 442.977120][ T10] usb 6-1: SerialNumber: syz [ 443.006713][ T10] usb 6-1: config 0 descriptor?? [ 443.007832][T12827] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 443.280654][T12827] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2268'. [ 443.282027][ T10] hdpvr 6-1:0.0: unexpected answer of status request, len -71 [ 443.282087][ T10] hdpvr 6-1:0.0: device init failed [ 443.282158][ T10] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 443.284926][ T10] usb 6-1: USB disconnect, device number 2 [ 443.417163][T12385] usb 2-1: USB disconnect, device number 15 [ 444.236418][T12385] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 444.442068][T12385] usb 6-1: device descriptor read/64, error -71 [ 444.774757][T12385] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 444.916470][T12385] usb 6-1: device descriptor read/64, error -71 [ 445.036920][T12385] usb usb6-port1: attempt power cycle [ 445.346387][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 445.376570][T12385] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 445.431930][T12385] usb 6-1: device descriptor read/8, error -71 [ 445.498518][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 445.518198][ T10] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.567039][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 445.605078][ T10] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 445.634698][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.674917][ T10] usb 3-1: config 0 descriptor?? [ 445.696750][T12385] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 445.727862][T12385] usb 6-1: device descriptor read/8, error -71 [ 445.846915][T12385] usb usb6-port1: unable to enumerate USB device [ 446.111114][ T10] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 446.376737][T12385] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 446.540239][T12385] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.552057][T12385] usb 5-1: config 0 has no interfaces? [ 446.567728][T12385] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 446.582741][ T10] usb 3-1: USB disconnect, device number 20 [ 446.598010][T12385] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 446.608597][T12385] usb 5-1: Product: syz [ 446.622195][T12385] usb 5-1: Manufacturer: syz [ 446.641038][T12385] usb 5-1: SerialNumber: syz [ 446.656006][T12385] usb 5-1: config 0 descriptor?? [ 446.994696][T12871] sg_read: process 1408 (syz.4.2276) changed security contexts after opening file descriptor, this is not allowed. [ 447.062164][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2279'. [ 447.151099][T12876] netlink: 'syz.3.2281': attribute type 3 has an invalid length. [ 447.407265][T12889] sctp: [Deprecated]: syz.5.2280 (pid 12889) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.407265][T12889] Use struct sctp_sack_info instead [ 447.706549][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 447.770264][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2285'. [ 447.868688][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 447.909975][ T10] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 447.924468][ T10] usb 3-1: config 16 has an invalid interface number: 48 but max is 0 [ 447.938401][ T10] usb 3-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 448.004236][T12897] IPv6: NLM_F_CREATE should be specified when creating new route [ 448.017896][ T10] usb 3-1: config 16 has no interface number 0 [ 448.029595][ T10] usb 3-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 448.041510][T12897] IPv6: Can't replace route, no match found [ 448.106513][ T10] usb 3-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 448.225939][ T10] usb 3-1: config 16 interface 48 has no altsetting 0 [ 448.246151][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 448.324714][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.486424][ T5879] usb 5-1: USB disconnect, device number 22 [ 449.791595][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2291'. [ 449.964636][T12920] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2283'. [ 449.995483][T12920] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2283'. [ 450.016456][T12920] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2283'. [ 450.176414][T12178] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 450.328830][T12178] usb 6-1: device descriptor read/64, error -71 [ 450.596453][T12178] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 450.737132][T12178] usb 6-1: device descriptor read/64, error -71 [ 450.879614][T12178] usb usb6-port1: attempt power cycle [ 451.036922][ T10] usb 3-1: string descriptor 0 read error: -71 [ 451.096355][ T10] usb 3-1: USB disconnect, device number 21 [ 451.286504][T12178] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 451.397114][T12178] usb 6-1: device descriptor read/8, error -71 [ 451.456183][T12934] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2295'. [ 451.666400][T12178] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 451.696913][T12178] usb 6-1: device descriptor read/8, error -71 [ 451.808988][T12178] usb usb6-port1: unable to enumerate USB device [ 452.217417][T12178] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 452.378538][T12178] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 452.391159][T12178] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 452.431214][T12178] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 452.461106][T12178] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 452.473593][T12178] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 452.496472][T12178] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 452.509604][T12178] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 452.526721][T12178] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 452.539067][T12178] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 452.550311][T12178] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 452.575323][T12178] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 452.586386][T12178] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 452.616341][T12178] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 452.644082][T12934] syz.4.2295 (12934): drop_caches: 2 [ 452.650515][T12178] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 452.666554][T12178] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 452.750609][T12178] usb 2-1: string descriptor 0 read error: -22 [ 452.779732][T12178] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 452.811388][T12178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.873143][T12178] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 453.065966][T12956] FAULT_INJECTION: forcing a failure. [ 453.065966][T12956] name failslab, interval 1, probability 0, space 0, times 0 [ 453.111198][T12956] CPU: 0 UID: 0 PID: 12956 Comm: syz.4.2302 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.111229][T12956] Tainted: [L]=SOFTLOCKUP [ 453.111235][T12956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 453.111244][T12956] Call Trace: [ 453.111251][T12956] [ 453.111259][T12956] dump_stack_lvl+0xe8/0x150 [ 453.111280][T12956] should_fail_ex+0x412/0x560 [ 453.111296][T12956] should_failslab+0xa8/0x100 [ 453.111309][T12956] __kmalloc_noprof+0xde/0x7e0 [ 453.111319][T12956] ? tomoyo_encode+0x28b/0x550 [ 453.111335][T12956] tomoyo_encode+0x28b/0x550 [ 453.111350][T12956] tomoyo_realpath_from_path+0x58d/0x5d0 [ 453.111368][T12956] ? tomoyo_path_number_perm+0x219/0x630 [ 453.111379][T12956] tomoyo_path_number_perm+0x246/0x630 [ 453.111390][T12956] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 453.111401][T12956] ? __lock_acquire+0x6b5/0x2cf0 [ 453.111422][T12956] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 453.111443][T12956] ? __fget_files+0x2a/0x420 [ 453.111455][T12956] ? __fget_files+0x2a/0x420 [ 453.111465][T12956] ? __fget_files+0x3a0/0x420 [ 453.111475][T12956] ? __fget_files+0x2a/0x420 [ 453.111487][T12956] security_file_ioctl+0xc3/0x2a0 [ 453.111498][T12956] __se_sys_ioctl+0x47/0x170 [ 453.111513][T12956] do_syscall_64+0xe2/0xf80 [ 453.111524][T12956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.111533][T12956] ? trace_irq_disable+0x37/0x100 [ 453.111550][T12956] ? clear_bhb_loop+0x60/0xb0 [ 453.111562][T12956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.111572][T12956] RIP: 0033:0x7f04c459aeb9 [ 453.111583][T12956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.111591][T12956] RSP: 002b:00007f04c54b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.111603][T12956] RAX: ffffffffffffffda RBX: 00007f04c4815fa0 RCX: 00007f04c459aeb9 [ 453.111610][T12956] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 453.111616][T12956] RBP: 00007f04c54b0090 R08: 0000000000000000 R09: 0000000000000000 [ 453.111622][T12956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.111628][T12956] R13: 00007f04c4816038 R14: 00007f04c4815fa0 R15: 00007f04c493fa48 [ 453.111643][T12956] [ 453.111665][T12956] ERROR: Out of memory at tomoyo_realpath_from_path. [ 453.461437][T12956] input: syz1 as /devices/virtual/input/input16 [ 453.470704][T12959] FAULT_INJECTION: forcing a failure. [ 453.470704][T12959] name failslab, interval 1, probability 0, space 0, times 0 [ 453.519962][T12959] CPU: 1 UID: 0 PID: 12959 Comm: syz.2.2303 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.519982][T12959] Tainted: [L]=SOFTLOCKUP [ 453.519986][T12959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 453.519992][T12959] Call Trace: [ 453.519996][T12959] [ 453.520001][T12959] dump_stack_lvl+0xe8/0x150 [ 453.520019][T12959] should_fail_ex+0x412/0x560 [ 453.520035][T12959] should_failslab+0xa8/0x100 [ 453.520047][T12959] __kmalloc_noprof+0xde/0x7e0 [ 453.520056][T12959] ? fib6_info_alloc+0x30/0xf0 [ 453.520069][T12959] fib6_info_alloc+0x30/0xf0 [ 453.520080][T12959] ip6_route_info_create+0x142/0x860 [ 453.520095][T12959] ip6_route_add+0x49/0x1b0 [ 453.520108][T12959] inet6_rtm_newroute+0x268/0x19e0 [ 453.520121][T12959] ? kasan_quarantine_put+0xbb/0x1f0 [ 453.520136][T12959] ? lockdep_hardirqs_on+0x7a/0x110 [ 453.520148][T12959] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 453.520157][T12959] ? kmem_cache_free+0x195/0x610 [ 453.520166][T12959] ? nlmon_xmit+0xb0/0x100 [ 453.520181][T12959] ? __lock_acquire+0x6b5/0x2cf0 [ 453.520200][T12959] ? __local_bh_enable_ip+0xd0/0x130 [ 453.520209][T12959] ? lockdep_hardirqs_on+0x7a/0x110 [ 453.520231][T12959] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 453.520240][T12959] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 453.520253][T12959] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 453.520264][T12959] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 453.520274][T12959] ? ref_tracker_free+0x693/0x840 [ 453.520286][T12959] ? __copy_skb_header+0xa3/0x4a0 [ 453.520301][T12959] ? __pfx_ref_tracker_free+0x10/0x10 [ 453.520312][T12959] ? __skb_clone+0x63/0x7a0 [ 453.520329][T12959] netlink_rcv_skb+0x232/0x4b0 [ 453.520340][T12959] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 453.520351][T12959] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 453.520367][T12959] ? netlink_deliver_tap+0x2e/0x1b0 [ 453.520380][T12959] netlink_unicast+0x80f/0x9b0 [ 453.520398][T12959] ? __pfx_netlink_unicast+0x10/0x10 [ 453.520413][T12959] ? __alloc_skb+0x193/0x390 [ 453.520423][T12959] ? netlink_sendmsg+0x650/0xb40 [ 453.520453][T12959] ? skb_put+0x11b/0x210 [ 453.520467][T12959] netlink_sendmsg+0x813/0xb40 [ 453.520481][T12959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.520493][T12959] ? aa_sock_msg_perm+0xf1/0x1b0 [ 453.520506][T12959] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 453.520517][T12959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.520527][T12959] ____sys_sendmsg+0xa68/0xad0 [ 453.520540][T12959] ? __might_fault+0xaf/0x130 [ 453.520558][T12959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.520574][T12959] ? import_iovec+0x73/0xa0 [ 453.520591][T12959] ___sys_sendmsg+0x2a5/0x360 [ 453.520603][T12959] ? __lock_acquire+0x6b5/0x2cf0 [ 453.520618][T12959] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.520646][T12959] ? __fget_files+0x2a/0x420 [ 453.520656][T12959] ? __fget_files+0x3a0/0x420 [ 453.520671][T12959] __x64_sys_sendmsg+0x1bd/0x2a0 [ 453.520686][T12959] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.520703][T12959] ? __pfx_ksys_write+0x10/0x10 [ 453.520722][T12959] do_syscall_64+0xe2/0xf80 [ 453.520732][T12959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.520741][T12959] ? trace_irq_disable+0x37/0x100 [ 453.520751][T12959] ? clear_bhb_loop+0x60/0xb0 [ 453.520791][T12959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.520800][T12959] RIP: 0033:0x7fefb299aeb9 [ 453.520810][T12959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.520818][T12959] RSP: 002b:00007fefb3905028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.520830][T12959] RAX: ffffffffffffffda RBX: 00007fefb2c15fa0 RCX: 00007fefb299aeb9 [ 453.520837][T12959] RDX: 0000000020008000 RSI: 0000200000000140 RDI: 0000000000000006 [ 453.520843][T12959] RBP: 00007fefb3905090 R08: 0000000000000000 R09: 0000000000000000 [ 453.520849][T12959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.520854][T12959] R13: 00007fefb2c16038 R14: 00007fefb2c15fa0 R15: 00007fefb2d3fa48 [ 453.520869][T12959] [ 455.022512][T12385] usb 2-1: USB disconnect, device number 16 [ 455.496608][ T5879] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 455.503455][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 455.519375][ T5879] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 455.737069][T12178] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 456.102769][T12997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2314'. [ 456.348020][T12178] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 456.379139][T12178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 456.406491][T12178] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 456.620273][T12178] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 456.679429][T12178] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.848121][T12178] usb 6-1: Product: syz [ 456.875043][T12178] usb 6-1: Manufacturer: syz [ 456.893072][T12178] usb 6-1: SerialNumber: syz [ 456.985220][T12178] usb 6-1: config 0 descriptor?? [ 457.024388][T12989] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 457.217085][T13015] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2319'. [ 457.589605][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 457.594830][ T5879] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 457.605112][ T5879] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 457.844685][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2310'. [ 457.917543][T12989] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 459.213164][T13024] syz.3.2321 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 459.231625][T13015] syz.2.2319 (13015): drop_caches: 2 [ 459.526500][ T5886] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 459.615130][T12385] usb 6-1: USB disconnect, device number 11 [ 459.690763][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 459.710806][ T5886] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 459.730257][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.738848][ T5886] usb 5-1: Product: syz [ 459.743246][ T5886] usb 5-1: Manufacturer: syz [ 459.748302][ T5886] usb 5-1: SerialNumber: syz [ 459.770640][ T5886] usb 5-1: config 0 descriptor?? [ 459.966063][T13047] kvm: apic: phys broadcast and lowest prio [ 459.998175][ T5886] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 460.256766][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 460.426698][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 460.459662][T13051] kvm: pic: non byte read [ 460.467874][ T24] usb 6-1: config 1 has an invalid interface number: 84 but max is 0 [ 460.473026][T13051] kvm: pic: non byte read [ 460.496901][T13051] kvm: pic: non byte read [ 460.501412][ T24] usb 6-1: config 1 has no interface number 0 [ 460.516453][ T24] usb 6-1: config 1 interface 84 altsetting 241 has an invalid descriptor for endpoint zero, skipping [ 460.542054][ T24] usb 6-1: config 1 interface 84 has no altsetting 0 [ 460.554413][ T24] usb 6-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=7a.90 [ 460.573167][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.603669][ T24] usb 6-1: Product: syz [ 460.618317][ T24] usb 6-1: Manufacturer: syz [ 460.637302][ T24] usb 6-1: SerialNumber: syz [ 460.643228][T13028] syzkaller0: entered promiscuous mode [ 460.653955][T13028] syzkaller0: entered allmulticast mode [ 460.665528][T13047] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 460.682062][T13057] binder: 13050:13057 ioctl 40044591 0 returned -22 [ 460.750511][T13059] binder: 13050:13059 ioctl c0306201 200000000640 returned -22 [ 460.985217][ T24] etas_es58x 6-1:1.84: Starting syz syz (Serial Number syz) [ 461.016441][ T5879] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 461.016467][ T5879] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 461.016598][ C1] ------------[ cut here ]------------ [ 461.016745][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 461.016776][ C1] WARNING: kernel/workqueue.c:2252 at __queue_work+0xd1f/0xf90, CPU#1: kworker/1:0/24 [ 461.016808][ C1] Modules linked in: [ 461.016849][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.016875][ C1] Tainted: [L]=SOFTLOCKUP [ 461.016883][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 461.016896][ C1] Workqueue: usb_hub_wq hub_event [ 461.016919][ C1] RIP: 0010:__queue_work+0xd4a/0xf90 [ 461.016932][ C1] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 87 84 a0 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8e a1 [ 461.016942][ C1] RSP: 0018:ffffc90000a08c10 EFLAGS: 00010086 [ 461.016951][ C1] RAX: 1ffff1100fc91951 RBX: 0000000000000008 RCX: ffff88801dae8000 [ 461.016959][ C1] RDX: ffff888031925178 RSI: ffffffff8a8b6940 RDI: ffffffff8ff206d0 [ 461.016967][ C1] RBP: 0000000000000100 R08: ffffffff8fef1b77 R09: 1ffffffff1fde36e [ 461.016982][ C1] R10: dffffc0000000000 R11: ffffffff818c47d0 R12: dffffc0000000000 [ 461.016994][ C1] R13: ffff88807e48ca88 R14: ffffffff8ff206d0 R15: ffff888031925178 [ 461.017010][ C1] FS: 0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 461.017026][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.017041][ C1] CR2: 00002000003e6030 CR3: 000000007d43a000 CR4: 00000000003526f0 [ 461.017059][ C1] Call Trace: [ 461.017068][ C1] [ 461.017076][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 461.017099][ C1] call_timer_fn+0x192/0x5a0 [ 461.017123][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 461.017140][ C1] ? call_timer_fn+0xd4/0x5a0 [ 461.017163][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 461.017196][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 461.017218][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 461.017240][ C1] __run_timer_base+0x67e/0x8b0 [ 461.017266][ C1] ? ktime_get+0x45/0x200 [ 461.017287][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 461.017303][ C1] ? sched_clock_cpu+0x74/0x440 [ 461.017321][ C1] run_timer_softirq+0xb7/0x170 [ 461.017342][ C1] handle_softirqs+0x22a/0x7c0 [ 461.017365][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 461.017391][ C1] __irq_exit_rcu+0x5f/0x150 [ 461.017409][ C1] irq_exit_rcu+0x9/0x30 [ 461.017422][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 461.017433][ C1] [ 461.017437][ C1] [ 461.017441][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 461.017452][ C1] RIP: 0010:preempt_schedule_irq+0x48/0xa0 [ 461.017463][ C1] Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 b3 8c fa f5 e8 ae 20 34 f6 fb bf 01 00 00 00 43 a9 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 34 22 34 f6 bf 01 [ 461.017472][ C1] RSP: 0018:ffffc900001e7610 EFLAGS: 00000202 [ 461.017485][ C1] RAX: 00000000000b51fb RBX: 0000000000000000 RCX: 0000000000000001 [ 461.017497][ C1] RDX: 0000000000000006 RSI: ffffffff8dcc9170 RDI: 0000000000000001 [ 461.017510][ C1] RBP: 0000000000000000 R08: ffffffff8fef1b77 R09: 1ffffffff1fde36e [ 461.017525][ C1] R10: dffffc0000000000 R11: fffffbfff1fde36f R12: 0000000000000000 [ 461.017539][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 461.017568][ C1] irqentry_exit+0x597/0x620 [ 461.017580][ C1] ? rcu_is_watching+0x15/0xb0 [ 461.017593][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 461.017603][ C1] RIP: 0010:kcov_remote_stop+0x46d/0x6b0 [ 461.017614][ C1] Code: ff 48 8b 5c 24 28 f7 c3 00 02 00 00 74 05 e8 4a c2 07 00 9c 58 a9 00 02 00 00 75 60 f7 c3 00 02 00 00 74 01 fb b8 ff ff ff ff 41 0f c1 07 83 f8 01 75 27 4c 89 ff e8 81 02 00 00 49 8b 7f 50 [ 461.017622][ C1] RSP: 0018:ffffc900001e7738 EFLAGS: 00000206 [ 461.017636][ C1] RAX: 00000000ffffffff RBX: 0000000000000246 RCX: 0000000000000046 [ 461.017649][ C1] RDX: 0000000000000006 RSI: ffffffff8dcc9170 RDI: ffffffff8c073a00 [ 461.017664][ C1] RBP: 000000000002d717 R08: ffffffff8fef1b77 R09: 1ffffffff1fde36e [ 461.017679][ C1] R10: dffffc0000000000 R11: fffffbfff1fde36f R12: ffffc90019dc3000 [ 461.017693][ C1] R13: ffffc900195c2000 R14: ffff88801dae8000 R15: ffff88807a527300 [ 461.017722][ C1] ? kcov_remote_stop+0x69/0x6b0 [ 461.017741][ C1] hub_event+0x4991/0x4f30 [ 461.017753][ C1] ? __perf_event_task_sched_in+0xf2/0x1800 [ 461.017801][ C1] ? __pfx_hub_event+0x10/0x10 [ 461.017821][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 461.017857][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 461.017883][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 461.017897][ C1] process_scheduled_works+0xaec/0x17a0 [ 461.017923][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 461.017946][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 461.017971][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 461.017992][ C1] ? schedule+0x90/0x360 [ 461.018016][ C1] worker_thread+0xda6/0x1360 [ 461.018042][ C1] kthread+0x726/0x8b0 [ 461.018055][ C1] ? __pfx_worker_thread+0x10/0x10 [ 461.018069][ C1] ? __pfx_kthread+0x10/0x10 [ 461.018088][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 461.018115][ C1] ? __pfx_kthread+0x10/0x10 [ 461.018138][ C1] ret_from_fork+0x51b/0xa40 [ 461.018168][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 461.018182][ C1] ? __switch_to+0xc82/0x1410 [ 461.018198][ C1] ? __pfx_kthread+0x10/0x10 [ 461.018209][ C1] ret_from_fork_asm+0x1a/0x30 [ 461.018238][ C1] [ 461.018248][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 461.018263][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.018289][ C1] Tainted: [L]=SOFTLOCKUP [ 461.018297][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 461.018310][ C1] Workqueue: usb_hub_wq hub_event [ 461.018332][ C1] Call Trace: [ 461.018337][ C1] [ 461.018341][ C1] vpanic+0x1e0/0x670 [ 461.018356][ C1] panic+0xc5/0xd0 [ 461.018367][ C1] ? __pfx_panic+0x10/0x10 [ 461.018383][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 461.018411][ C1] __warn+0x315/0x4a0 [ 461.018433][ C1] ? __queue_work+0xd1f/0xf90 [ 461.018453][ C1] ? __queue_work+0xd1f/0xf90 [ 461.018472][ C1] __report_bug+0x29a/0x540 [ 461.018487][ C1] ? __queue_work+0xd1f/0xf90 [ 461.018496][ C1] ? __pfx___report_bug+0x10/0x10 [ 461.018506][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 461.018521][ C1] ? register_lock_class+0x31/0x2e0 [ 461.018539][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 461.018568][ C1] report_bug_entry+0x19a/0x290 [ 461.018589][ C1] ? __queue_work+0xd4a/0xf90 [ 461.018606][ C1] ? __queue_work+0xd4f/0xf90 [ 461.018622][ C1] handle_bug+0xca/0x200 [ 461.018635][ C1] exc_invalid_op+0x1a/0x50 [ 461.018646][ C1] asm_exc_invalid_op+0x1a/0x20 [ 461.018656][ C1] RIP: 0010:__queue_work+0xd4a/0xf90 [ 461.018665][ C1] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 87 84 a0 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8e a1 [ 461.018674][ C1] RSP: 0018:ffffc90000a08c10 EFLAGS: 00010086 [ 461.018687][ C1] RAX: 1ffff1100fc91951 RBX: 0000000000000008 RCX: ffff88801dae8000 [ 461.018700][ C1] RDX: ffff888031925178 RSI: ffffffff8a8b6940 RDI: ffffffff8ff206d0 [ 461.018715][ C1] RBP: 0000000000000100 R08: ffffffff8fef1b77 R09: 1ffffffff1fde36e [ 461.018736][ C1] R10: dffffc0000000000 R11: ffffffff818c47d0 R12: dffffc0000000000 [ 461.018751][ C1] R13: ffff88807e48ca88 R14: ffffffff8ff206d0 R15: ffff888031925178 [ 461.018770][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 461.018784][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 461.018800][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 461.018815][ C1] call_timer_fn+0x192/0x5a0 [ 461.018829][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 461.018844][ C1] ? call_timer_fn+0xd4/0x5a0 [ 461.018870][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 461.018908][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 461.018926][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 461.018937][ C1] __run_timer_base+0x67e/0x8b0 [ 461.018950][ C1] ? ktime_get+0x45/0x200 [ 461.018966][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 461.018987][ C1] ? sched_clock_cpu+0x74/0x440 [ 461.019020][ C1] run_timer_softirq+0xb7/0x170 [ 461.019047][ C1] handle_softirqs+0x22a/0x7c0 [ 461.019068][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 461.019082][ C1] __irq_exit_rcu+0x5f/0x150 [ 461.019091][ C1] irq_exit_rcu+0x9/0x30 [ 461.019100][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 461.019110][ C1] [ 461.019114][ C1] [ 461.019118][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 461.019128][ C1] RIP: 0010:preempt_schedule_irq+0x48/0xa0 [ 461.019146][ C1] Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 b3 8c fa f5 e8 ae 20 34 f6 fb bf 01 00 00 00 43 a9 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 34 22 34 f6 bf 01 [ 461.019162][ C1] RSP: 0018:ffffc900001e7610 EFLAGS: 00000202 [ 461.019178][ C1] RAX: 00000000000b51fb RBX: 0000000000000000 RCX: 0000000000000001 [ 461.019190][ C1] RDX: 0000000000000006 RSI: ffffffff8dcc9170 RDI: 0000000000000001 [ 461.019203][ C1] RBP: 0000000000000000 R08: ffffffff8fef1b77 R09: 1ffffffff1fde36e [ 461.019217][ C1] R10: dffffc0000000000 R11: fffffbfff1fde36f R12: 0000000000000000 [ 461.019226][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 461.019241][ C1] irqentry_exit+0x597/0x620 [ 461.019252][ C1] ? rcu_is_watching+0x15/0xb0 [ 461.019264][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 461.019274][ C1] RIP: 0010:kcov_remote_stop+0x46d/0x6b0 [ 461.019287][ C1] Code: ff 48 8b 5c 24 28 f7 c3 00 02 00 00 74 05 e8 4a c2 07 00 9c 58 a9 00 02 00 00 75 60 f7 c3 00 02 00 00 74 01 fb b8 ff ff ff ff 41 0f c1 07 83 f8 01 75 27 4c 89 ff e8 81 02 00 00 49 8b 7f 50 [ 461.019302][ C1] RSP: 0018:ffffc900001e7738 EFLAGS: 00000206 [ 461.019318][ C1] RAX: 00000000ffffffff RBX: 0000000000000246 RCX: 0000000000000046 [ 461.019331][ C1] RDX: 0000000000000006 RSI: ffffffff8dcc9170 RDI: ffffffff8c073a00 [ 461.019345][ C1] RBP: 000000000002d717 R08: ffffffff8fef1b77 R09: 1ffffffff1fde36e [ 461.019360][ C1] R10: dffffc0000000000 R11: fffffbfff1fde36f R12: ffffc90019dc3000 [ 461.019372][ C1] R13: ffffc900195c2000 R14: ffff88801dae8000 R15: ffff88807a527300 [ 461.019389][ C1] ? kcov_remote_stop+0x69/0x6b0 [ 461.019401][ C1] hub_event+0x4991/0x4f30 [ 461.019413][ C1] ? __perf_event_task_sched_in+0xf2/0x1800 [ 461.019463][ C1] ? __pfx_hub_event+0x10/0x10 [ 461.019487][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 461.019520][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 461.019533][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 461.019548][ C1] process_scheduled_works+0xaec/0x17a0 [ 461.019573][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 461.019595][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 461.019620][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 461.019640][ C1] ? schedule+0x90/0x360 [ 461.019666][ C1] worker_thread+0xda6/0x1360 [ 461.019707][ C1] kthread+0x726/0x8b0 [ 461.019719][ C1] ? __pfx_worker_thread+0x10/0x10 [ 461.019748][ C1] ? __pfx_kthread+0x10/0x10 [ 461.019773][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 461.019800][ C1] ? __pfx_kthread+0x10/0x10 [ 461.019820][ C1] ret_from_fork+0x51b/0xa40 [ 461.019837][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 461.019850][ C1] ? __switch_to+0xc82/0x1410 [ 461.019865][ C1] ? __pfx_kthread+0x10/0x10 [ 461.019877][ C1] ret_from_fork_asm+0x1a/0x30 [ 461.019915][ C1] [ 461.020360][ C1] Kernel Offset: disabled