last executing test programs: 13m25.014048978s ago: executing program 2 (id=3): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000080)=""/151, 0x97, 0x8) 13m24.527791839s ago: executing program 2 (id=10): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000000a082, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x80000) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x4, 0x800) getpid() socket(0x2, 0x3, 0xff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'none\x00', 0x0, 0x10002, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @empty, 0x4e27, 0x200000001, 'nq\x00', 0x9, 0x821}, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) bind$inet6(0xffffffffffffffff, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) 13m6.627178604s ago: executing program 32 (id=10): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000000a082, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x80000) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x4, 0x800) getpid() socket(0x2, 0x3, 0xff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'none\x00', 0x0, 0x10002, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @empty, 0x4e27, 0x200000001, 'nq\x00', 0x9, 0x821}, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) bind$inet6(0xffffffffffffffff, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) 10m4.320930426s ago: executing program 0 (id=304): sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="330320002e1414", 0x7, 0x40008c1, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./bus\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 10m4.162753417s ago: executing program 0 (id=305): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SET_ENDIAN(0x14, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f00000041c0)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000200000400000000000000000200000000000000000000000200000000000000"], 0x0, 0x4e}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/13, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="010800000100"/28], 0x50) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5}) syz_open_dev$mtd(&(0x7f0000000040), 0xffffffff, 0x40) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) 10m1.859802789s ago: executing program 0 (id=310): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x46, 0x1, 0x9, 0x7fffffff}, {0x6, 0x80, 0x1, 0x5}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) syz_usb_connect(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40f30c749308010102030109024a0001010080fa0904000008ff000000070581020002000705820200020007058302000200070584034000010705010200"], 0x0) 9m58.392486214s ago: executing program 4 (id=317): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000d50400000000000000ff000005"], 0x48) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain={'key_or_keyring:', r1}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000028c0), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000002a40)) io_uring_setup(0x185f, &(0x7f0000000280)={0x0, 0x50da, 0x400, 0x3, 0x46}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9m57.969757278s ago: executing program 0 (id=319): bpf$MAP_CREATE(0x0, 0x0, 0x48) add_key(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000001020108000080460000"], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x20000800) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9m54.676732124s ago: executing program 0 (id=325): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x14c, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x118, 0x2, [@TCA_BPF_ACT={0x114, 0x1, [@m_tunnel_key={0x110, 0xf, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0xa9, 0x6, "49faabd009eada9d7be60c407dafa92f49e8cd3a8f4fa8421129f6125120e80ad1f39b81fe547f4b02f63246313a813a99ecef91e6d9ef24aa123d4ec0ae96adae785c4e501ba800b202cd14d8c0016fc9c4f3ebc53feced9d30abb38c8943dce2293b002415feb1aef9c5838b7441da572c3dbb88fe9a038660b5a726819d6ad3215a715506b990b3cb6a94b4814c025cfb8359678b0dd3a6886ec72652cec96df5e599c2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r5, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r7, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @local, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="24000000000000002900000032000000fc01000000000000000000000000000023"], 0x28}, 0x3400c8d4) recvmmsg(r6, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000003, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/133, &(0x7f00000000c0)=0x85) 9m54.411214257s ago: executing program 4 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) pread64(r0, 0x0, 0x0, 0x8) 9m53.059232005s ago: executing program 4 (id=328): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) syz_open_procfs$namespace(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x1ff) syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[], 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x368, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x0, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 9m51.327725238s ago: executing program 0 (id=331): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000004880)=[{{&(0x7f00000003c0)=@generic, 0x0, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/239}, {&(0x7f0000000640)=""/229}], 0x0, &(0x7f0000000780)=""/4096}, 0xc}, {{&(0x7f0000001780)=@phonet, 0x0, &(0x7f0000001840)=[{&(0x7f0000001800)=""/11}], 0x0, &(0x7f0000001880)=""/127}, 0x1}, {{&(0x7f0000001900)=@l2, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001980)=""/239}, {&(0x7f0000001a80)=""/143}], 0x0, &(0x7f0000001b80)=""/190}, 0x1f5dbf5}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001c40)=""/138}, {&(0x7f0000001d00)=""/178}, {&(0x7f0000001dc0)=""/40}, {&(0x7f0000001e00)=""/38}, {&(0x7f0000001e40)=""/101}], 0x0, &(0x7f0000001f40)=""/142}, 0x5}, {{&(0x7f0000002000)=@ethernet={0x0, @dev}, 0x0, &(0x7f00000044c0)=[{&(0x7f00000023c0)=""/4096}, {&(0x7f00000033c0)=""/22}, {&(0x7f0000003400)=""/4096}, {&(0x7f0000004400)=""/143}], 0x0, &(0x7f0000004500)=""/169}, 0x2eb18baf}, {{&(0x7f00000045c0)=@sco, 0x0, &(0x7f0000004740)=[{&(0x7f0000004640)=""/249}], 0x0, &(0x7f0000004780)=""/213}, 0x1}], 0x1012f, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1fe) pselect6(0x40, &(0x7f00000000c0)={0xf8d, 0x1, 0x7, 0x98c, 0x9, 0xa, 0x3, 0xe99}, &(0x7f00000001c0)={0x0, 0x5, 0x80, 0x7, 0x3, 0x4, 0xc4c, 0x2}, &(0x7f0000000280)={0x800, 0x161f, 0x401, 0xfff, 0xadec, 0xe5b, 0x401, 0x6}, &(0x7f00000002c0), &(0x7f0000002380)={&(0x7f0000002340)={[0x6]}, 0x8}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x368, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x0, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) ioctl$TIOCSETD(r0, 0x5423, 0x0) semop(0x0, &(0x7f0000000140)=[{0x0, 0xfffb}, {0x2, 0x7f, 0x1800}], 0x2) 9m46.862981528s ago: executing program 4 (id=340): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x14c, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x118, 0x2, [@TCA_BPF_ACT={0x114, 0x1, [@m_tunnel_key={0x110, 0xf, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0xa9, 0x6, "49faabd009eada9d7be60c407dafa92f49e8cd3a8f4fa8421129f6125120e80ad1f39b81fe547f4b02f63246313a813a99ecef91e6d9ef24aa123d4ec0ae96adae785c4e501ba800b202cd14d8c0016fc9c4f3ebc53feced9d30abb38c8943dce2293b002415feb1aef9c5838b7441da572c3dbb88fe9a038660b5a726819d6ad3215a715506b990b3cb6a94b4814c025cfb8359678b0dd3a6886ec72652cec96df5e599c2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r5, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r7, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @local, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="24000000000000002900000032000000fc01000000000000000000000000000023"], 0x28}, 0x3400c8d4) recvmmsg(r6, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000003, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/133, &(0x7f00000000c0)=0x85) 9m43.557130903s ago: executing program 4 (id=344): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_SECCOMP(0x15) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r3, 0x0, 0xe, 0x0, &(0x7f0000002280)="00f1aef59e1ec05ab201a5859511", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 9m35.71827216s ago: executing program 33 (id=331): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000004880)=[{{&(0x7f00000003c0)=@generic, 0x0, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/239}, {&(0x7f0000000640)=""/229}], 0x0, &(0x7f0000000780)=""/4096}, 0xc}, {{&(0x7f0000001780)=@phonet, 0x0, &(0x7f0000001840)=[{&(0x7f0000001800)=""/11}], 0x0, &(0x7f0000001880)=""/127}, 0x1}, {{&(0x7f0000001900)=@l2, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001980)=""/239}, {&(0x7f0000001a80)=""/143}], 0x0, &(0x7f0000001b80)=""/190}, 0x1f5dbf5}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001c40)=""/138}, {&(0x7f0000001d00)=""/178}, {&(0x7f0000001dc0)=""/40}, {&(0x7f0000001e00)=""/38}, {&(0x7f0000001e40)=""/101}], 0x0, &(0x7f0000001f40)=""/142}, 0x5}, {{&(0x7f0000002000)=@ethernet={0x0, @dev}, 0x0, &(0x7f00000044c0)=[{&(0x7f00000023c0)=""/4096}, {&(0x7f00000033c0)=""/22}, {&(0x7f0000003400)=""/4096}, {&(0x7f0000004400)=""/143}], 0x0, &(0x7f0000004500)=""/169}, 0x2eb18baf}, {{&(0x7f00000045c0)=@sco, 0x0, &(0x7f0000004740)=[{&(0x7f0000004640)=""/249}], 0x0, &(0x7f0000004780)=""/213}, 0x1}], 0x1012f, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1fe) pselect6(0x40, &(0x7f00000000c0)={0xf8d, 0x1, 0x7, 0x98c, 0x9, 0xa, 0x3, 0xe99}, &(0x7f00000001c0)={0x0, 0x5, 0x80, 0x7, 0x3, 0x4, 0xc4c, 0x2}, &(0x7f0000000280)={0x800, 0x161f, 0x401, 0xfff, 0xadec, 0xe5b, 0x401, 0x6}, &(0x7f00000002c0), &(0x7f0000002380)={&(0x7f0000002340)={[0x6]}, 0x8}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_SECCOMP(0x15) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r3, 0x0, 0xe, 0x0, &(0x7f0000002280)="00f1aef59e1ec05ab201a5859511", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1m54.327281915s ago: executing program 1 (id=1047): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="07000000010000", 0x7) 1m53.673012975s ago: executing program 1 (id=1050): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="07000000010000", 0x7) socket$nl_route(0x10, 0x3, 0x0) 1m53.113845849s ago: executing program 1 (id=1051): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) 1m51.631201611s ago: executing program 1 (id=1054): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/key-users\x00', 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f0000000400)=""/82, &(0x7f0000000480)=0x52) (async) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x5d, 0x6, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = gettid() ptrace$ARCH_SET_CPUID(0x1e, r2, 0x1, 0x1012) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r3, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) r4 = syz_io_uring_setup(0x3, 0xfffffffffffffffc, &(0x7f0000000300), &(0x7f0000000000)=0x0, &(0x7f0000000000)) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40058}, &(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r5, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {}, 0x1}) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) (async) accept(r0, 0x0, 0x0) (async) fchmodat(0xffffffffffffffff, 0x0, 0x8) (async) sendfile(r1, r0, 0x0, 0xc00000000000000) (async) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x3a, 0x0, 0x9, [0x6, 0x7]}, @ssrr={0x89, 0x3, 0x1b}, @end, @generic={0x809248a1a8654823, 0x2}]}}, @timestamp={0xd, 0x0, 0x0, 0x9, 0x9, 0x6, 0x8, 0x1ff}}}}}, 0x0) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') setns(r9, 0x0) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=ANY=[@ANYBLOB="bc01000000020000000000000000000000000000000000000000000000000000400000000000000000000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) (async) setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)={'L+'}, 0x16, 0x1) 1m51.122327002s ago: executing program 1 (id=1055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x2) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x200, 0x0, 0x18}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002a80)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 1m48.870740865s ago: executing program 1 (id=1056): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) socket$inet6_sctp(0xa, 0x5, 0x84) clock_gettime(0xa, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$kcm(0x23, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r6, 0x0, 0x0, 0x80, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 1m33.741515462s ago: executing program 35 (id=1056): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) socket$inet6_sctp(0xa, 0x5, 0x84) clock_gettime(0xa, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$kcm(0x23, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r6, 0x0, 0x0, 0x80, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 22.099470842s ago: executing program 7 (id=366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) close_range(r3, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) recvmsg(0xffffffffffffffff, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{0x0}], 0x1}, 0x40000102) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005d00), 0x4000000000001e3, 0x8044) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) 20.933917414s ago: executing program 7 (id=1209): r0 = socket$kcm(0x29, 0x5, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001020000000904", @ANYRES32], 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000"], 0x310) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{0x5}, {0x6, 0xc9, 0xe}}}}, 0xa) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x4, @raw_data="dd43245b2be3a9d0481a43cfdc242b9fe0e2f77219391677c5e84d467fbde800390726946e58180e9dfd3a58b96f9ccb41acc510bdedf942eb37f1ee85ab5afa92072d050a4e50688df3d15a54c5181b1271ca730a98f2c8c70f9e863356ab145ba460a4ba69219ba3936c66a16b0a099b3f4d2f17b4a0dc526e7f29e32378a88ba74c5966bc0000000000000a31b4d883aeef7b93baca94f4f018fbf5f9c07964f753f98229d2f445db6c3cd86cf2e178380bcbafcea599671a14191c7b247543420aa3959f20a3"}) 16.264402151s ago: executing program 7 (id=1219): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) close_range(r3, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) recvmsg(0xffffffffffffffff, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{0x0}], 0x1}, 0x40000102) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005d00), 0x4000000000001e3, 0x8044) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) 15.743459607s ago: executing program 5 (id=1221): r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x0, @remote}}) r1 = epoll_create1(0x0) fsetxattr(r1, &(0x7f0000000000)=@random={'btrfs.', '\x00'}, &(0x7f0000000040)='()#-\x00', 0x5, 0x3) r2 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000500)={0x0, 0xa355, 0x10000, 0x2, 0x15a}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r8, 0x1, 0x2b, 0x0, &(0x7f00000000c0)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r7, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x6, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed79, 0x80, 0x10000004, 0x142, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf912, 0x2000, 0x1, 0x1b1, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8256, 0x2, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r6, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 15.274025111s ago: executing program 8 (id=1222): pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='cgroup.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a", 0x42}], 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\b\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf25020000000900010073797a320000000014000200766c616e3100"/46], 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) write(0xffffffffffffffff, &(0x7f0000000400)='dummy_udc.0', 0xb) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0000000420001000000000000000000030100000f0000007d00010000112233445566778899aabb86dd2c00001c00ff840001110000010101010253aa58fe6cbdf035bc6eae44132403b1fd606412c3258e6248ffa62e9e156d23cfd72ddb80723d4613dc929cbc86ba94e0cd05c4a639eee919c4b391a38f086b58225d45c1b4106bb4754aebb15e0feff76718ef7ff9be52ec9c00000004000280040003"], 0xa0}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x7fff, @loopback, 0x3}, 0x1c) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newpolicy={0xb8, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x5e}, {0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 14.929225432s ago: executing program 8 (id=1223): symlink(&(0x7f0000000700)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='nsfs\x00', 0x0, &(0x7f0000000100)='!{O\xfe}\x00') 14.780932462s ago: executing program 8 (id=1225): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x729100) fcntl$dupfd(r2, 0x406, r1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x208000}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001009, 0x5, 0x9}}}, 0x90) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, 0x0) syz_emit_ethernet(0x95, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0xd, 0x4, 0x2, 0x2f, 0x87, 0x68, 0x0, 0x2, 0x11, 0x0, @loopback, @remote, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x98, [@empty, @multicast1, @broadcast, @broadcast, @loopback]}, @ra={0x94, 0x4, 0x1}]}}, {0x4e24, 0x4e22, 0x53, 0x0, @opaque="c6c4b6100498a6d5fd1206a0372bfc4f9b5fb81ac466cf928ff16b57e6fee4e67e6b18d62359e7b56430b169c0b7bed3c5717358c2dabdb24a034122c7e97ce35397eb743be1c144186c67"}}}}}, 0x0) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, 0x0) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000440)={0x8, r6}) r8 = creat(&(0x7f0000000540)='./file0\x00', 0xd7) r9 = socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="8f1f"]) 14.543596022s ago: executing program 5 (id=1226): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14.538045556s ago: executing program 8 (id=1227): r0 = socket(0x840000000002, 0x3, 0x100) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESDEC=r1, @ANYRES32=r0, @ANYRES32=r0], 0x11c}}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYRES8=r3, @ANYRES32=r3, @ANYBLOB="039382fed6f50d29e0db06d71e9190121c1b2fe1bd6bb6edf79e4eeb7021c1bdb82e814b35da1982922ea11bb501e2865805000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9b39e8a7ad5400fa, 0x8031, 0xffffffffffffffff, 0x83c48000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102366, 0x18fde) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x11, r8, 0x92da7000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000000000001, r5, 0x1, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x5) 9.399262109s ago: executing program 5 (id=1233): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x144, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x110, 0x2, [@TCA_BPF_ACT={0x10c, 0x1, [@m_tunnel_key={0x108, 0xf, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0xa9, 0x6, "49faabd009eada9d7be60c407dafa92f49e8cd3a8f4fa8421129f6125120e80ad1f39b81fe547f4b02f63246313a813a99ecef91e6d9ef24aa123d4ec0ae96adae785c4e501ba800b202cd14d8c0016fc9c4f3ebc53feced9d30abb38c8943dce2293b002415feb1aef9c5838b7441da572c3dbb88fe9a038660b5a726819d6ad3215a715506b990b3cb6a94b4814c025cfb8359678b0dd3a6886ec72652cec96df5e599c2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r5, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @local, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="24000000000000002900000032000000fc01000000000000000000000000000023"], 0x28}, 0x3400c8d4) recvmmsg(r6, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000003, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/133, &(0x7f00000000c0)=0x85) 9.066290257s ago: executing program 3 (id=1235): symlink(&(0x7f0000000700)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='nsfs\x00', 0x0, &(0x7f0000000100)='!{O\xfe}\x00') 8.643641594s ago: executing program 8 (id=1236): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000880)={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0}) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r4, 0xffff) close(0x3) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x1, 0x0, 0x2000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) 6.705766306s ago: executing program 6 (id=1237): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x729100) fcntl$dupfd(r2, 0x406, r1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x208000}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001009, 0x5, 0x9}}}, 0x90) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, 0x0) syz_emit_ethernet(0x95, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0xd, 0x4, 0x2, 0x2f, 0x87, 0x68, 0x0, 0x2, 0x11, 0x0, @loopback, @remote, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x98, [@empty, @multicast1, @broadcast, @broadcast, @loopback]}, @ra={0x94, 0x4, 0x1}]}}, {0x4e24, 0x4e22, 0x53, 0x0, @opaque="c6c4b6100498a6d5fd1206a0372bfc4f9b5fb81ac466cf928ff16b57e6fee4e67e6b18d62359e7b56430b169c0b7bed3c5717358c2dabdb24a034122c7e97ce35397eb743be1c144186c67"}}}}}, 0x0) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, 0x0) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000440)={0x8, r6}) r8 = creat(&(0x7f0000000540)='./file0\x00', 0xd7) r9 = socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="8f1f"]) 6.684487989s ago: executing program 3 (id=1238): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) syz_open_procfs$namespace(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[], 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x368, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x0, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) ioctl$TIOCSETD(r0, 0x5423, 0x0) semop(0x0, &(0x7f0000000140)=[{0x0, 0xfffb}, {0x2, 0x7f, 0x1800}], 0x2) 6.380510677s ago: executing program 7 (id=1239): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) close(r3) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x121484b, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$UBLK_U_CMD_START_DEV(r2, 0xc0207506, &(0x7f0000000240)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) migrate_pages(r6, 0x401, &(0x7f0000000340)=0xde, &(0x7f00000003c0)=0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, 0x0) 5.663782858s ago: executing program 5 (id=1240): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) 4.451081403s ago: executing program 3 (id=1241): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x4, @raw_data="dd43245b2be3a9d0481a43cfdc242b9fe0e2f77219391677c5e84d467fbde800390726946e58180e9dfd3a58b96f9ccb41acc510bdedf942eb37f1ee85ab5afa92072d050a4e50688df3d15a54c5181b1271ca730a98f2c8c70f9e863356ab145ba460a4ba69219ba3936c66a16b0a099b3f4d2f17b4a0dc526e7f29e32378a88ba74c5966bc0000000000000a31b4d883aeef7b93baca94f4f018fbf5f9c07964f753f98229d2f445db6c3cd86cf2e178380bcbafcea599671a14191c7b247543420aa3959f20a3"}) 3.776936802s ago: executing program 3 (id=1242): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f022}) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xfffe) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="d8000000100081046881f782db44b904021d080b01000000e8fe55a1180015000600140003", 0x25}], 0x1}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x7, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1011, &(0x7f0000001a00)=""/4113, 0x41100, 0xd}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x8, 0x4, 0x0, 0xa, 0x21, 0x10000000000}, &(0x7f0000000040)={0x1f, 0xfffffffffffffffd, 0x80000005, 0x0, 0xffffffffffffffe3, 0x7, 0x6}, 0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) 2.859477915s ago: executing program 5 (id=1246): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) syz_open_procfs$namespace(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[], 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x368, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x0, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x48) ioctl$TIOCSETD(r0, 0x5423, 0x0) semop(0x0, &(0x7f0000000140)=[{0x0, 0xfffb}, {0x2, 0x7f, 0x1800}], 0x2) 1.61722995s ago: executing program 6 (id=1247): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x0) 1.304708218s ago: executing program 6 (id=1248): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="a101e7a26a802e11636e773d694fbdaf7082ec626b85af84f968f52aa436706635276c5890b2d14fa2d611b94cad350fe98a276e7acd4efb46c83fe6ea75a0", @ANYRES64=0xffffffffffffffff], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.274004874s ago: executing program 5 (id=1249): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) close_range(r3, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) recvmsg(0xffffffffffffffff, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{0x0}], 0x1}, 0x40000102) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005d00), 0x4000000000001e3, 0x8044) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) 1.029352809s ago: executing program 7 (id=1250): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x144, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x110, 0x2, [@TCA_BPF_ACT={0x10c, 0x1, [@m_tunnel_key={0x108, 0xf, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0xa9, 0x6, "49faabd009eada9d7be60c407dafa92f49e8cd3a8f4fa8421129f6125120e80ad1f39b81fe547f4b02f63246313a813a99ecef91e6d9ef24aa123d4ec0ae96adae785c4e501ba800b202cd14d8c0016fc9c4f3ebc53feced9d30abb38c8943dce2293b002415feb1aef9c5838b7441da572c3dbb88fe9a038660b5a726819d6ad3215a715506b990b3cb6a94b4814c025cfb8359678b0dd3a6886ec72652cec96df5e599c2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r5, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @local, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="24000000000000002900000032000000fc01000000000000000000000000000023"], 0x28}, 0x3400c8d4) recvmmsg(r6, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000003, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/133, &(0x7f00000000c0)=0x85) 918.173571ms ago: executing program 6 (id=1251): syz_clone(0x104000, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) timer_create(0xa13b968f9206893f, 0x0, &(0x7f0000001140)) r0 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat(r1, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x0) lseek(r2, 0x7fffffff, 0x0) getdents(r2, 0x0, 0x18) ioprio_get$pid(0x2, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000001380)) r4 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r4, 0x0, 0x0, 0x200488b4, &(0x7f00000002c0)={0x23, 0x46, 0x6, 0xc}, 0xffffffce) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)={0x20002002}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'veth1_virt_wifi\x00', 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001180)=@deltfilter={0x7370, 0x2d, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xa, 0xfff1}, {0xffff, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x63e}, @filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1c5de}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x613}, @TCA_FLOW_MASK={0x8}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x3a68, 0x2, [@TCA_ROUTE4_POLICE={0x18, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}]}, @TCA_ROUTE4_ACT={0xac, 0x6, [@m_mpls={0xa8, 0x1f, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1ff, 0x1, 0x0, 0x2, 0x6}, 0x1}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0xffffff01, 0x6, 0x2, 0x6}, 0x1}}]}, {0x34, 0x6, "97dfc141edbb032952a81133069e08119ec748b5b99303b16b37f2fcaa61842a19933294bc2540d11049a0fa97001435"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffff, 0xfff2}}, @TCA_ROUTE4_POLICE={0x840, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x80, 0x7f, 0xa, 0x9, 0x3, 0xff, 0x81, 0x153c, 0x1, 0xd6, 0xc7, 0x6, 0x4, 0x2, 0x2, 0x7, 0xa4f, 0x9, 0x5, 0x3, 0xad0, 0x6, 0x2, 0x4, 0x23, 0x800, 0xfff, 0x4, 0x7, 0x2, 0xd, 0x7, 0xffff, 0xfffffffc, 0x9, 0x2, 0x10, 0x3, 0x3f9b9e42, 0xd6d, 0x1, 0x2, 0xfffff5d9, 0x2, 0x0, 0x871, 0x3, 0xbfb, 0x2, 0x721, 0x3, 0x2, 0x4, 0x9, 0x16, 0x9, 0x8, 0x7ff, 0x1997ddc1, 0xd8, 0x8, 0x440, 0x4, 0x2, 0x566, 0x8, 0xffffff1c, 0xa7c8, 0x2, 0x5, 0x400, 0x10001, 0x5, 0x7, 0x6, 0xa, 0x3, 0x2, 0xfff, 0xc660, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x3, 0x7, 0x7, 0x3, 0x5, 0x8, 0x2, 0x3, 0x2, 0x8, 0xcf8, 0xfffffffa, 0x7f, 0x7, 0x3, 0x80000000, 0x47e, 0x4, 0xb, 0x4, 0x5, 0x0, 0x8, 0x14ca, 0x3, 0x7, 0x7fff, 0xc, 0x5, 0x5, 0x6f7e, 0xc, 0xd90d, 0x5, 0xa8f, 0x2, 0x6, 0x200, 0x5920899a, 0xa000000, 0x8, 0x0, 0xb, 0x4, 0x1b, 0xd, 0x7, 0x6, 0xd, 0xb, 0x6, 0x7, 0xc34a, 0xc, 0x404, 0x2, 0x6, 0xc, 0x6, 0x1, 0x2, 0x401, 0x0, 0xe, 0x9875, 0x2, 0xb6a0, 0x2, 0x5, 0x3, 0x80000000, 0x3, 0x80000001, 0x200, 0x6, 0x3ff, 0x10, 0x9, 0x2, 0x4, 0x4, 0x40, 0x4, 0x1, 0x3, 0x9c, 0x1, 0xff, 0x0, 0x9, 0xb4e, 0xfffffff1, 0x101, 0x5ac, 0x8, 0x2, 0x7, 0x8fe9, 0x0, 0x3, 0xf03, 0x80000000, 0x2, 0x0, 0x9, 0x0, 0x6, 0x9, 0x4, 0xfffffffd, 0x9, 0x0, 0x8, 0x7, 0x9, 0x4, 0x2, 0x0, 0x9, 0x2, 0xe1, 0x8, 0x0, 0x5, 0x2, 0x2, 0x1, 0x3, 0x2, 0x80000000, 0xfffff220, 0x3, 0x4, 0xd5, 0x1ff, 0xc73, 0x9, 0x9, 0x4, 0x4, 0x3, 0x4, 0x7, 0xd7a, 0x1, 0x2, 0x8, 0x7fffffff, 0xd57, 0x1, 0x6, 0x800, 0x3, 0xf, 0x6, 0xc, 0x1, 0x2, 0x6, 0x6, 0xb1, 0xff, 0x7, 0x8, 0x3ff, 0x2, 0x100, 0xb0f0, 0x400, 0x1, 0x3ff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0xe1, 0x1, 0x400, 0x1, 0x9a11, 0x7, 0xce, 0xe, 0x9, 0x400, 0xe, 0x5, 0x2, 0xa1, 0x8, 0x3, 0x29, 0x0, 0x6, 0x3, 0xb, 0x5, 0x8, 0x2, 0xc5db, 0x400, 0x1ff, 0x1, 0x0, 0xfff, 0xd, 0xbc, 0x4, 0x6, 0x8, 0x7bc, 0x7, 0x1, 0x3, 0x0, 0x7, 0x0, 0x8, 0x9, 0x0, 0xe, 0x3, 0x1, 0x200, 0x9, 0x0, 0x0, 0x94, 0x3, 0x9, 0x2, 0x4, 0x9, 0x7, 0x7f, 0x7c, 0x4, 0x6, 0x83, 0x81, 0xfffffffe, 0xffffcedb, 0x80000000, 0x0, 0x223a, 0xeab, 0xff, 0x3ff, 0x8, 0x8, 0x1, 0x4, 0x80000000, 0x2, 0x9, 0x9, 0x9, 0x3, 0x6, 0xa9, 0xfff, 0xe, 0x4, 0xfffffbff, 0x6, 0x8070, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1, 0x10000, 0x7fffffff, 0x44, 0x401, 0x401, 0x2, 0xffffffff, 0x7, 0x1, 0x6, 0x8, 0x7, 0x0, 0x4, 0x31, 0x4, 0xb22, 0x8, 0x6, 0x7, 0x0, 0x5, 0xfffffffc, 0x8000, 0xc0, 0x7, 0x9, 0x81, 0x0, 0x80, 0x2, 0x0, 0x2, 0x0, 0x4, 0x5, 0x1, 0x3, 0x0, 0x80, 0x48f1edc7, 0x1, 0x4, 0x7ff, 0x1, 0x8000, 0x800, 0xe757, 0xff, 0x4, 0x2, 0xc2b, 0x2, 0x24d, 0x0, 0x18, 0x10001, 0x3, 0x8001, 0x8, 0x14a, 0x3, 0x6, 0x9551, 0x6, 0x9, 0x7f, 0xfffffffd, 0x6, 0x2, 0x5, 0xffffffff, 0x961a, 0x5, 0x0, 0x2, 0x3, 0x5, 0x10001, 0x6, 0x4, 0x88, 0x7, 0x5, 0x6, 0x4, 0x9, 0x4, 0xf009, 0xb177, 0x9, 0xfff, 0x605, 0x8, 0x7ff, 0x4000000, 0xc, 0x8, 0x493e, 0x1000, 0x2, 0x2, 0xa, 0x4, 0x5dd, 0x1, 0x9813, 0x2, 0x0, 0xd47, 0x92, 0x2, 0xfffffffd, 0x2, 0xa6, 0x1ff, 0xc6, 0xde, 0x1, 0x9, 0xffffffc0, 0x8, 0x9fe, 0x7, 0x9c, 0x8, 0x3, 0xc268, 0x101, 0xfaee, 0x6, 0x3, 0x0, 0x5, 0x512, 0x0, 0x6d, 0x4, 0x6, 0x5, 0xff, 0x2, 0x3, 0x2, 0x8, 0x6, 0x20dc, 0x8001, 0x3bf, 0x8, 0x1ff, 0x2, 0x80000001, 0xfffffffd, 0x5, 0x5, 0xfffffffd, 0x3000, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_ROUTE4_ACT={0x2dc8, 0x6, [@m_mpls={0xe0, 0x1b, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x200, 0x200, 0x10000000, 0x6, 0x4e}, 0x3}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd299}]}, {0x78, 0x6, "07adcfdd76d8016fe6e28d7f3e0c27eeba0635dc3d90976f4bb6d023a43ae2d09b00fc0bd30d665fcdfcf39f2a03d19c38e1007218daff1dc4d61e298ad8be9acd8883f32dce8288fb732771c91f81c78ac05a13c54dbc8134de5511407c643205fa7de19f9d08604c38b992d966c316b0dce599"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_pedit={0x2ce4, 0xa, 0x0, 0x0, {{0xa}, {0x2c54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x70, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x9, 0x8, 0xffffffffffffffff, 0x6, 0x2}, 0x0, 0x0, [{0x2, 0x81, 0x0, 0x6, 0x8, 0x4}, {0x1, 0x8, 0xffffffff, 0x7ff, 0x5, 0x6}, {0x10, 0x400, 0x7f, 0x100, 0x3, 0x3}]}, [{0x3ff, 0x8, 0xe8a, 0x1000, 0x5, 0x1}, {0x8, 0x0, 0x6, 0x350, 0x3, 0x9ac}, {0x3, 0x9b6d, 0x5, 0x6, 0x401, 0x7}, {0x6, 0x100, 0x1, 0xf146, 0x2, 0xe}, {0x4, 0xbb38, 0x7fff, 0x3b0, 0xd, 0x1b}, {0x800, 0x8001, 0xe8a, 0x4, 0xe93b, 0x9}, {0x9, 0x9, 0xf, 0x3, 0x3}, {0x3, 0x10, 0x9, 0x6, 0xc, 0x3}, {0x18, 0x3, 0x8001, 0x1, 0x9, 0x8}, {0x5, 0xd, 0x4, 0x7, 0xfff, 0x3}, {0x6, 0x4, 0x9, 0xffffffff, 0xfff, 0x6}, {0x2, 0x0, 0xb077, 0x1, 0x100, 0x8}, {0x3, 0x7, 0x4, 0x14f, 0x0, 0x8}, {0x8, 0x5, 0x1, 0x2, 0x10000, 0xf}, {0x8, 0x1, 0x8, 0x4, 0x0, 0x718}, {0x8, 0xb1e, 0x5, 0x1, 0xffff, 0x1000}, {0x80, 0x8, 0x0, 0x6, 0x939b, 0x61299af6}, {0x2, 0x101, 0x6, 0x2d, 0x10001, 0x5}, {0xf, 0x6, 0x4, 0x6, 0x6, 0x1}, {0x4, 0x3, 0x7fff, 0x81, 0x61}, {0x9, 0x8, 0x9, 0x4, 0x5, 0x5}, {0x234609d6, 0x7fffffff, 0xa, 0xfffffffb, 0x400, 0x1}, {0x6, 0x4274, 0x0, 0x3, 0xac, 0x4}, {0x4, 0x3, 0x3, 0x81, 0xfffffffd, 0x7f}, {0x6, 0xa7f, 0x200, 0x4, 0x6, 0xfff}, {0x3, 0xa, 0x6, 0x3, 0x8}, {0x400, 0x1, 0x140000, 0x0, 0x80}, {0xed0, 0x1ff, 0x1, 0x6, 0x2, 0x3}, {0x1ff, 0x1, 0x9, 0xffff, 0x111c, 0x4}, {0x7fffffff, 0x6, 0x1ff, 0x1ff, 0x4, 0xd}, {0xff, 0x9, 0x100, 0x1, 0x81, 0x5}, {0xd, 0x401, 0x6, 0x7, 0x5, 0xe16}, {0x7, 0x3, 0x9, 0x2, 0x10, 0x1}, {0x9, 0x7, 0x1, 0x7fff, 0xfff, 0x2}, {0x10, 0x3, 0x4, 0x80000001, 0x0, 0x1}, {0x0, 0x2, 0x3f2, 0x7, 0x6e14, 0x7}, {0x7, 0xcf78, 0xffffff01, 0x3, 0x3, 0x2}, {0x7, 0x3, 0x2, 0x72, 0xcd, 0x3}, {0x1, 0x5, 0x1, 0xffff5a88, 0x8}, {0x233, 0x9, 0x6, 0x3, 0x4, 0x80000001}, {0x9, 0x9, 0x10, 0x2, 0x80000000, 0x6}, {0xa5, 0x2, 0xfffffffb, 0x4d4373c3, 0x2, 0x1}, {0x95, 0x0, 0x1000, 0x7, 0xffffff59, 0xe}, {0xf8, 0x39093cbf, 0x81, 0x1, 0x80, 0x3}, {0x9, 0x7f, 0x7, 0xffffffff, 0x3, 0x10000}, {0x8, 0x9, 0x8, 0x8, 0x2, 0x1b9}, {0x401, 0x2, 0x7, 0xa, 0x6, 0x4}, {0x8, 0x4, 0x7ff, 0x7fff, 0x7fff, 0x5}, {0x80000000, 0x9, 0x7fffffff, 0x8, 0x9, 0x80000000}, {0x68, 0x2, 0x7, 0xa, 0x40, 0x20}, {0x1, 0x7, 0x11, 0xfffff775, 0x6cf0f246, 0xbb}, {0x0, 0x4, 0xf0b, 0x9, 0x0, 0xb91}, {0x6, 0xc0, 0x3, 0x400, 0xfff, 0x195}, {0x81, 0x3, 0x9, 0x7, 0xfffffffb, 0x80000000}, {0x1, 0x5, 0xff, 0x7fff, 0x7, 0x1}, {0x6d4, 0x0, 0x5, 0xffff8000, 0x9, 0x8001}, {0x8, 0x8, 0xe, 0x1ff, 0x1, 0x4ada}, {0x5, 0x5, 0x3ff, 0x7, 0x3, 0x9}, {0x5, 0xbb11, 0x3, 0x4, 0x3, 0x10001}, {0xffffffff, 0x7ff, 0x2fe2, 0x80000001, 0x7, 0x1}, {0x81, 0x1, 0x6, 0xffffe19d, 0xfff}, {0x5, 0x10, 0x1, 0x9, 0x40, 0x1}, {0x8, 0x5d97, 0x7ff, 0x3, 0x8, 0xffffff80}, {0x3, 0xd, 0x3, 0x5, 0x7, 0x1}, {0x8, 0x0, 0xf2, 0x4, 0xfff, 0x6}, {0x2, 0x9, 0x6, 0x5, 0x5, 0x6}, {0x0, 0x6, 0x2, 0xaf, 0x80, 0x25}, {0x3, 0x1, 0x7, 0x7, 0x9, 0x6}, {0x2, 0x6, 0x2, 0x3, 0x9, 0x6}, {0xe2, 0x1, 0x1, 0x6, 0x10, 0x2}, {0x7, 0x1f5e, 0x7, 0x3, 0x2, 0x8000}, {0x4, 0xf, 0x436164a, 0xffff, 0x8, 0xffffffff}, {0xc4, 0xf37, 0x4, 0x2, 0x9, 0x7}, {0x1, 0xffff0000, 0x6eb, 0xb58, 0x4, 0x65}, {0x5, 0x8, 0x7, 0xed, 0x4, 0x4}, {0x3, 0xe37b, 0x5, 0x10000, 0x8, 0x1}, {0x7fffffff, 0x2, 0x1, 0x2, 0xfff, 0x8}, {0x2, 0x8, 0x0, 0x7f, 0xc, 0xfffff800}, {0x8, 0xff, 0x4, 0x1, 0x0, 0x9}, {0x7fffffff, 0xfffffffc, 0x9, 0x0, 0xffff, 0x94}, {0xc2e, 0x5, 0xd377, 0x10001, 0x800, 0x38}, {0xffffff00, 0xffffffff, 0x4, 0xcda, 0x3e, 0x9}, {0x6, 0x6, 0x1, 0x8ef, 0x6}, {0x8, 0xf7e3, 0x5, 0xa7, 0x81, 0x17}, {0x2, 0x7, 0x9, 0x1, 0x1, 0xfffffff1}, {0x1, 0xc, 0x5, 0x5, 0x8001, 0xd07}, {0x5, 0x7730, 0x70d, 0xa, 0xcdc, 0xffffffff}, {0x0, 0x7ff, 0x5, 0x7, 0x4, 0x5}, {0x200000, 0x2, 0x2, 0x4, 0x8, 0xf0f0}, {0x5a, 0x4ee, 0x62, 0x4b4b, 0x1, 0x10000}, {0x0, 0xfffff001, 0x204e, 0x0, 0x7ff, 0x3a}, {0x7fffffff, 0x2, 0x9, 0x6, 0xf, 0x8}, {0x2, 0x80000001, 0x53e0, 0x7, 0x8, 0x2}, {0x1, 0x8, 0x1, 0x64e, 0x1ff, 0xfffffc00}, {0x3, 0x1800, 0x8, 0x6, 0x3, 0xe0e1}, {0x5, 0x7, 0x3, 0x9, 0x2, 0x9}, {0x10001, 0x3478e1b4, 0x6, 0x3, 0xffff, 0x2}, {0xffff, 0x6, 0x0, 0x0, 0x8, 0x4}, {0xb7, 0x80000000, 0x5, 0x0, 0x9, 0x40000}, {0x5, 0x7, 0x3, 0x0, 0x8, 0x5}, {0x9, 0xffffffff, 0x9, 0x9, 0x3, 0x82b}, {0x6, 0x9, 0x200, 0x5, 0x400, 0x7fffffff}, {0x8, 0x1, 0xb, 0x7, 0x3, 0xfffff215}, {0xffffffff, 0x4f, 0x5, 0x4, 0x3, 0xd}, {0x7fff, 0x8, 0x7f, 0x1, 0x80000000, 0x6}, {0x9, 0xaa0, 0x8, 0x2, 0x200, 0x7}, {0x9, 0x3, 0x9, 0x6, 0x5, 0xa0}, {0xe, 0xb122, 0x7, 0x80000000, 0x0, 0x3}, {0x5, 0xa9, 0x5, 0xcbe4, 0x9aa00000, 0x100}, {0x1, 0x81, 0x3, 0x4, 0x0, 0x9f62}, {0x5, 0x8, 0xfffff1ff, 0x5, 0x6, 0xff}, {0x5, 0x8, 0x4, 0x5, 0x1000, 0x8}, {0x469e788b, 0x6, 0x640, 0x4, 0x7ff, 0x6}, {0x8, 0x8000, 0x2257c00, 0xd515, 0x5, 0x4}, {0x2, 0x1000, 0x2, 0x200, 0x5, 0xfffffff7}, {0xd5c3, 0x3, 0x6, 0xc3, 0x27, 0x8}, {0x3, 0x0, 0x0, 0x5d2, 0x1, 0x4}, {0xfffffffa, 0xff, 0x14, 0xfffffff5, 0x10, 0x3}, {0x6, 0x81, 0x6, 0x9, 0x5e784ec0, 0x80}, {0x81, 0x2, 0x0, 0x8001, 0x4, 0x8}, {0x1, 0x0, 0x594, 0x100, 0x1c, 0x5f3}, {0x9, 0xfffffff7, 0x7fff, 0xe, 0x8, 0x6}, {0x245, 0x7fff, 0x4, 0xfffffff9, 0x3, 0xffffffff}, {0x7, 0x7, 0x7fff, 0xe, 0x92, 0x87f0}, {0xbfe, 0xe0, 0xde3a, 0x7, 0x1, 0x4}, {0x4414, 0xb, 0x9, 0x101, 0x3, 0x9}, {0x6, 0x2729, 0xffffffff, 0x9, 0x4, 0xffff6784}, {0x7, 0xf, 0xfffffffe, 0x3, 0xd58, 0x8}], [{0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x609fa7bb9e57f6a4}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x3}, {0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xef8, 0x4, {{{0x800, 0x0, 0x1, 0xff, 0xfffffff7}, 0x3, 0x7f, [{0xffff, 0x6, 0x6f4, 0xfcbe, 0x3, 0x3}, {0x6, 0x5, 0x8, 0x1, 0x7fff, 0xfffffff8}, {0x8, 0x5, 0x7, 0x3, 0x20000, 0xa7}, {0x8, 0x0, 0x0, 0x4, 0x6, 0x2}, {0x7fffffff, 0x7, 0x2, 0x7, 0x1, 0xffffff87}, {0x6cb5, 0x5, 0x6, 0x3, 0x1, 0x8}, {0x340e, 0x8, 0xfffffff7, 0x337, 0xffd5, 0x5}, {0x0, 0x101, 0x6, 0x4, 0x4, 0x5}, {0x2, 0x6, 0xe, 0x555b, 0x4}]}, [{0x50, 0x1, 0x5, 0x7, 0x64f156b0, 0xa7}, {0x4, 0x0, 0x9f8f, 0x0, 0x8, 0x9}, {0x0, 0x3, 0x8001, 0x6, 0xa, 0x4}, {0x0, 0x80, 0x9, 0x0, 0x3, 0x40}, {0x3, 0x8c4, 0x78b0cecb, 0x2, 0xb723, 0x1000}, {0x1000, 0x4, 0x9, 0x3, 0x4, 0x9}, {0x6, 0x6, 0x7, 0x5, 0x6, 0x3}, {0x2, 0x7, 0x1, 0xfffffff4, 0x8, 0x65a}, {0x7, 0x0, 0x1, 0x400, 0x6, 0x7}, {0x81, 0x7, 0x4, 0x8, 0x3, 0x7fff}, {0x10, 0x7fff, 0x8001, 0x7b4, 0x7, 0x9}, {0x4, 0x7fff, 0x10, 0x8, 0x9, 0x3}, {0x400, 0x6, 0x1, 0x1, 0x101, 0x5}, {0x9, 0x6, 0xfffffffb, 0x100, 0x6, 0x800}, {0x8, 0xea89, 0x2, 0xe, 0x0, 0xff}, {0x5, 0x5, 0x6, 0x3, 0x5, 0x2}, {0x8001, 0x9, 0x5, 0x5, 0x2, 0x2}, {0x2, 0x0, 0x81, 0x2, 0x4, 0x5}, {0x558e, 0x4, 0xbbf0, 0x8, 0x8, 0x6}, {0x2, 0x784, 0x56c, 0x40, 0x81, 0x200}, {0xa298, 0x3, 0x8, 0x7, 0x8, 0x1}, {0x7, 0x6, 0xffffffff, 0xdad3, 0x3, 0x4}, {0x80, 0x327, 0x0, 0x0, 0x1, 0x9}, {0x6, 0x3, 0x6, 0x7, 0x9e, 0x5}, {0x407f, 0x9, 0x8, 0x7f, 0x8001, 0x2}, {0xffff5087, 0x0, 0xf3, 0xaa2d, 0x7, 0x7}, {0x4a45, 0x7ff, 0x7fff, 0x3, 0x5, 0xa}, {0x3ade, 0x2, 0x3, 0x8, 0x1000, 0x5}, {0xffffffff, 0x7, 0x9, 0x2, 0x0, 0x1}, {0x2, 0x1, 0x8001, 0x5, 0x4, 0x6}, {0x9, 0x6, 0x80000001, 0x501, 0x21, 0x80}, {0x0, 0xf, 0x2, 0x4, 0x3, 0xbf}, {0x9, 0xe, 0x1, 0x8, 0x5, 0x5}, {0x7fffffff, 0x9, 0x3, 0x200, 0x8, 0x9}, {0x1, 0x62, 0x75, 0xffffc52a, 0x101, 0x7c8}, {0x25, 0xb2, 0x7, 0x8, 0x2, 0x7}, {0x4, 0x34, 0xa, 0x520, 0x3}, {0x80000001, 0x1, 0xbd8c, 0xfffffff4, 0xee, 0x9}, {0x2, 0xc319, 0x2, 0x6, 0x2, 0x1}, {0x3, 0x4, 0xa, 0x10000, 0x2, 0x6}, {0xd4e, 0x7, 0x2, 0x4, 0x5ae, 0xffffff33}, {0xffff, 0xa55, 0x1, 0x23173b08, 0xe, 0xfd4}, {0x9, 0x1, 0x32, 0x6, 0x9, 0x200}, {0x7, 0x7, 0x1, 0xec, 0x7, 0xf}, {0x2, 0x8, 0x4, 0x9, 0x1, 0x200}, {0x3, 0x6, 0x3, 0x8, 0xffffffff, 0x1}, {0xd0e, 0xfffffff7, 0xfff, 0x2, 0x2, 0x5f4}, {0x1, 0x6, 0x210, 0x3, 0x8, 0xffff7fff}, {0xc, 0x7, 0x10, 0x3, 0x200, 0xa7}, {0x5, 0x2, 0x100, 0x0, 0x2, 0x97e}, {0x2, 0x81, 0x9, 0x3, 0x0, 0x3}, {0x8, 0x2, 0xfffffffd, 0x8, 0xb9e, 0x4}, {0x9b, 0x9, 0x2, 0x7fff, 0x86, 0x2}, {0x2, 0x2e06e229, 0xf, 0x6, 0xfffffffc, 0xf}, {0x2, 0x1, 0xe10c, 0xf633, 0x5, 0x3}, {0x29, 0x9, 0x200, 0xffffffff, 0x81, 0x6}, {0x8, 0x7, 0xfb2d, 0x2, 0xdd, 0x9}, {0x6, 0x1, 0x2, 0x2, 0x7}, {0xfff, 0xb, 0x4, 0x9, 0x4, 0x1}, {0xfff, 0x0, 0x7cf, 0x0, 0x5, 0xffff}, {0x3, 0xffff0001, 0xff, 0x8, 0x7, 0x3}, {0x200, 0xb, 0x32a, 0x8000, 0x5604, 0x4}, {0x3, 0x4, 0x3, 0x8, 0x5, 0x7}, {0x4, 0x8, 0x5, 0x0, 0x809a, 0x2}, {0xff, 0x100, 0x2cd, 0x3, 0x4, 0x4}, {0x4, 0x3, 0x4, 0x1, 0x3, 0xfffff74b}, {0x9, 0x8, 0x7, 0x9, 0xb0, 0x7b}, {0x5, 0x5, 0x1b6c, 0x8, 0x7, 0x7ff}, {0x1c17b981, 0x62fb, 0x9, 0x0, 0x7, 0x3}, {0x1ff, 0x5, 0x7, 0x5a, 0x80, 0x8}, {0xfffffff0, 0x6, 0x4, 0x2000000, 0xc86f, 0xf5a4}, {0x9, 0x7, 0x5, 0x10000, 0x6, 0x3}, {0x3, 0x81, 0x5, 0x0, 0x67d3, 0xc9e}, {0x7ff, 0x6b, 0x4, 0x401, 0x0, 0x10000}, {0x1, 0x9, 0xa000, 0x3, 0x2, 0x3ff}, {0x479, 0xffff, 0x4, 0xfffffffe, 0xf, 0x1ff}, {0x10001, 0x101, 0x3ff, 0x0, 0x7, 0x2}, {0x1, 0x3, 0x7, 0x9, 0x4, 0x3}, {0x6, 0x5, 0x6d87, 0x6, 0x5, 0x4}, {0x5, 0xfffffff9, 0x3, 0xa9, 0x80000000, 0x10001000}, {0x7fffffff, 0x1, 0x0, 0xc4b, 0xfffff66d, 0x7}, {0x1, 0x7, 0x4, 0x5, 0x2, 0x2}, {0x55, 0x200, 0x9, 0x3, 0x7, 0x5}, {0x0, 0x5, 0x80, 0x2, 0x0, 0x80}, {0x7, 0x9, 0x6, 0xcaa, 0x7fff, 0x7}, {0x9e, 0x1, 0x7, 0x1, 0x0, 0x5}, {0x1, 0xffff43d9, 0x7f, 0x9, 0x9, 0x2}, {0x1, 0x200, 0x2, 0x9, 0x2cbf8001, 0x5dca}, {0x9, 0x1, 0x4, 0xb, 0x2, 0x2}, {0x7fff, 0x7fac, 0x3, 0xed, 0x40, 0x3}, {0x7, 0x0, 0x2, 0x558, 0xd, 0x1}, {0x80, 0x3, 0xffffff69, 0x10000, 0x6, 0x1}, {0x5, 0x9, 0x7, 0x8, 0x10, 0x2}, {0x9, 0x1, 0x7fff, 0x6, 0x8, 0x1}, {0x720b, 0x4, 0xfc9, 0x633, 0xf, 0x2}, {0x401, 0x7, 0x3, 0x8000, 0x0, 0x7ff}, {0x6, 0x7, 0x200, 0x1, 0x8, 0x6}, {0xffffff81, 0x8, 0x76905126, 0x8, 0x6, 0x4}, {0x7, 0x6, 0x10001, 0x7, 0x6, 0x5}, {0xd181, 0xf1c, 0x1, 0x1000, 0x1, 0x7fffffff}, {0xffffffff, 0x28, 0x6, 0x7, 0x1, 0x7f}, {0xce, 0xff, 0x1, 0x7abef0a, 0x5, 0x9}, {0xa0000, 0xa65b, 0x1, 0x5, 0xff, 0x2}, {0x80000000, 0xdd5, 0x10001, 0xfffffffc, 0x3, 0x7ff}, {0xffff8000, 0x8, 0x2, 0xc7, 0x1d0a}, {0x1, 0x348, 0x0, 0x9, 0xf6, 0xa}, {0x7, 0x2, 0x6, 0x7, 0xffff, 0x101}, {0x2c04, 0x6, 0x5, 0x4, 0xf11}, {0x81, 0x8, 0x9, 0x4, 0x79, 0x8}, {0x169, 0xfffffffb, 0xfffffff7, 0xfffffffe, 0xa34f, 0x519}, {0x8, 0x9, 0xffffffff, 0x0, 0x0, 0x2}, {0x1, 0x10000, 0x80, 0x4be, 0x2, 0x2}, {0x0, 0x3, 0x8, 0x4, 0x5, 0x80000000}, {0x6, 0x4d, 0x9, 0x7fff, 0x29c2, 0xb}, {0x7fffffff, 0xee, 0x8, 0xfff, 0x0, 0x5}, {0x6f, 0x80, 0x8, 0x4, 0x0, 0xaa}, {0xffffffff, 0x495, 0x63, 0xff, 0x9, 0x2}, {0x400, 0x3, 0x7, 0x5, 0xfe0}, {0x0, 0x4, 0x8, 0x8, 0x5, 0x488a}, {0x100, 0x2, 0x7, 0x2, 0x1000, 0x9b97}, {0x7d7, 0x2, 0x8, 0x4}, {0x0, 0x2, 0x2, 0x3, 0x8, 0xfffff22b}, {0x6, 0x8, 0x5, 0x9, 0x6, 0x10000}, {0x401, 0x10000, 0x5, 0x4, 0xf, 0xfffffcd0}, {0x400, 0xd, 0x9, 0xfffffffa, 0x2}, {0xfffffff8, 0x800, 0xc06, 0xff, 0xf8c, 0x40}, {0x7, 0x7, 0xffffffff, 0x1c5, 0xa, 0xff}, {0x9, 0x3, 0x7, 0xffffff00, 0x7fffffff, 0x7}], [{0xcb66a5775d224685}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x4}, {0x3}, {}, {0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x5}, {0x1}, {0x4}, {0x3}, {0x4}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x1}, {}, {0x4}, {0x7, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x6dcf2c39f2d96281}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3}, {}, {}, {0x5}, {0x4}, {0x2, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}]}}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x800, 0x6, 0x10000000, 0xa7f}, 0x7, 0x5, [{0x64, 0x2, 0x8, 0x0, 0xffffffff, 0x98d}, {0x7, 0x7, 0x7ff, 0x14, 0x4, 0xff}, {0x0, 0xfc6, 0x80000001, 0x0, 0x7, 0xa5f}, {0x2, 0x0, 0x200, 0xa582, 0xffff, 0x10001}]}, [{0x3ff, 0x1, 0x1, 0x3, 0x5, 0x4}, {0xf, 0xb, 0x4, 0x5, 0xb, 0xc}, {0x5b, 0xb9f, 0x7ff, 0x0, 0x800, 0x1}, {0x9, 0x1, 0x101, 0x6, 0x6, 0x3cb3}, {0x4, 0x40, 0x1, 0x2, 0x80000001, 0xc2}, {0x1000000, 0xffffffd1, 0x5, 0x2, 0x2, 0x8}, {0x1, 0xff, 0x8, 0x1, 0x2, 0xf}, {0x5, 0x3, 0x2, 0xfffffffa, 0x2, 0x1}, {0x3, 0xffff, 0x5, 0x1ff, 0xd077, 0x7c1}, {0x5, 0x7, 0x7f, 0xd, 0x3, 0x7}, {0x3, 0x4, 0x783, 0xfffffffa, 0x4, 0x8a1}, {0x101, 0x8, 0x4, 0x7, 0x6, 0x5}, {0x3ff, 0x0, 0x10000, 0xff, 0x5, 0x3}, {0x4, 0x9, 0x0, 0x7f, 0x40, 0x8}, {0x7, 0xffffffff, 0xfffffff7, 0xd, 0x4}, {0xc23b, 0x9, 0x80, 0x2, 0x401, 0x10}, {0x5, 0xce, 0x7, 0x3, 0x2, 0x6}, {0x4, 0x9a2a, 0x9, 0xffffdf35, 0x3, 0x3}, {0xffffff01, 0x7, 0x904, 0x4f, 0xa, 0x7}, {0x65aa, 0x3, 0x480, 0xfffffffc, 0x280, 0x1}, {0x9, 0x3, 0x9, 0x9, 0xd3e, 0xffffffff}, {0x8, 0x5, 0x7a1, 0x47000000, 0x2, 0x4}, {0x1dd, 0x1, 0x9, 0x1, 0x4c68, 0xb}, {0x8, 0x1, 0xbd, 0x3c4, 0xa, 0x9}, {0xffffd23b, 0x8, 0x5, 0xf, 0x6, 0xfffffffb}, {0x6, 0x3, 0x4, 0x7, 0xffff, 0x82e}, {0x2, 0x0, 0x3, 0x5, 0x3, 0xfffffffb}, {0x400, 0x8, 0x6, 0x9, 0x777, 0x10000}, {0x5389, 0x2d36f911, 0x9, 0xd6, 0x7, 0xbe}, {0xa, 0x1, 0xbaa, 0x4, 0x1, 0x3}, {0x401, 0x8, 0x6, 0xd7c, 0x4, 0x2}, {0x2, 0xf, 0x1, 0x38, 0x0, 0x8c}, {0x4, 0xe82d869, 0x4, 0x2, 0x84, 0x6}, {0x2, 0x519, 0x9, 0x9a3, 0x8, 0x3}, {0x4, 0x7, 0x0, 0x0, 0x4, 0x75}, {0x92, 0x3, 0xd, 0x6, 0x400}, {0x8, 0x8, 0x8, 0x101, 0x7, 0x3}, {0x4, 0x10, 0x2, 0x37e8, 0x8, 0x8d5}, {0x81, 0x5, 0x7, 0xfffffffe, 0xba8, 0x2}, {0x7ff, 0x8, 0x3, 0x3ff, 0x1, 0x94e}, {0x4, 0x8, 0x81, 0x8, 0xfffffff7, 0x140c0000}, {0x8000, 0x2, 0x7, 0x9, 0x5, 0x3}, {0xb, 0x8, 0x8002, 0x0, 0xb0, 0x5}, {0x80, 0x6, 0xffffffff, 0x2, 0xb5, 0xe}, {0x143, 0x6, 0x8, 0x9, 0x400000, 0x7}, {0x71a, 0xfffffffe, 0x9, 0x7, 0x8, 0x11fc2fc3}, {0x9, 0x7, 0x0, 0x56, 0x446e, 0x9}, {0x5, 0x9, 0x9, 0x10000, 0x7, 0xac}, {0x10001, 0x80, 0x4, 0x20000000, 0x2, 0x80000000}, {0x3, 0x10, 0x5ac, 0xe, 0x4, 0x3dbf}, {0xff, 0x7, 0x2ea, 0xb, 0x5, 0x462d}, {0x8, 0x9, 0x1, 0x2, 0x0, 0x1000}, {0x1, 0x9, 0x3, 0x5, 0x2, 0xffffff4e}, {0x8, 0x2, 0x7fff, 0x5e, 0x3, 0x2dc}, {0x4, 0x2, 0x8, 0x4f97, 0x7ff, 0xb76d}, {0x6, 0xc9ec, 0xfffffffc, 0x7f, 0x9, 0x5}, {0x8, 0x8, 0x8, 0x9, 0xfff, 0xd}, {0x9, 0x800, 0x5, 0x4, 0x30000, 0xa}, {0x5c692849, 0x8, 0x8, 0xfffffffa, 0x5, 0xc25}, {0x8, 0x262cf82b, 0xb, 0x718, 0x2243, 0x8d}, {0x0, 0x3, 0x8000, 0x400, 0x101, 0x211}, {0x5, 0x65, 0x0, 0x7e82a169, 0x7, 0x7}, {0x9, 0x2, 0x7, 0x2, 0x4, 0xfffffff7}, {0x1, 0x4000000, 0x9, 0x100000, 0xec, 0x100}, {0x2, 0x81, 0x2, 0xa4a2, 0x8, 0x77b}, {0x1ff, 0x9, 0x40, 0x9, 0x5, 0xe}, {0xffffffff, 0x10001, 0x7, 0x8, 0xffff, 0x4}, {0x3, 0x100, 0x5, 0x25, 0x8, 0x80}, {0x0, 0x200, 0xfffffdd1, 0x9, 0x2, 0x9}, {0x3, 0x45, 0x5, 0x7, 0x3, 0x7}, {0xffffffff, 0xa, 0x400, 0x80, 0x1, 0x451c}, {0x8, 0x9, 0x81, 0x4, 0x7fff, 0x6}, {0xe, 0xfffffff9, 0xe7, 0x401, 0x6, 0xffff}, {0x8, 0x2, 0x3a8a079a, 0x5, 0x7fffffff, 0x400}, {0x85, 0x3, 0x9, 0xd7e5, 0x6, 0x7f}, {0x9, 0x7, 0x6, 0x9, 0xfff, 0x5633}, {0x8001, 0x10001, 0x51, 0x56f56e17, 0x400, 0x99e}, {0xa3a, 0x4, 0x2, 0x1, 0x8001, 0xc000000}, {0xfff, 0xbc38, 0x23a5, 0x23b, 0xffffffff, 0xffff}, {0x2, 0x88fb, 0xfffffff7, 0x6, 0x4, 0x6}, {0xb1c, 0x9, 0xffffffff, 0x8, 0x5, 0x2}, {0x1, 0x48a29dfc, 0x9, 0xe63, 0xe, 0x5}, {0x2, 0x9, 0x7, 0x3, 0xfffffffd, 0x4}, {0x1f63, 0x867, 0x2, 0x9, 0x7, 0xc}, {0x7, 0x5, 0x2, 0x2e3, 0x19, 0x9}, {0x80, 0xb, 0x4, 0x6, 0x9, 0x3}, {0x71e3, 0x978, 0x100, 0x7, 0x9, 0x81}, {0x6, 0xb, 0x9, 0x2, 0x9, 0x3ff}, {0x2, 0x8, 0x7, 0x3, 0xfffffff7, 0x8}, {0x5, 0x2c000, 0x8, 0x9, 0x2, 0x3}, {0x80000000, 0xf8, 0x5d4a, 0x5, 0x0, 0x7}, {0x1bf, 0x5, 0x7, 0x7, 0x6, 0x5}, {0x3ff, 0x8, 0x8, 0xba, 0x5, 0x3b324b10}, {0x80, 0x8, 0x2, 0x7d, 0x7}, {0x7, 0x29, 0xa807, 0x8, 0x6, 0x8ee}, {0x2, 0x7fffffff, 0x6, 0x7, 0x6, 0xca}, {0x5, 0x4, 0x10, 0x7, 0x8, 0xa}, {0x3, 0x8, 0x100, 0x98, 0x8, 0xf}, {0xed24, 0x4, 0xffffff81, 0x5, 0x78ac, 0x27a}, {0x1, 0x3, 0xa, 0x2, 0x6, 0x772}, {0x7fff, 0x2, 0xb8e, 0xfffff127, 0x9c, 0xd8}, {0x81, 0x7ff, 0x100, 0x4, 0x5, 0x7}, {0x0, 0x2, 0x10001, 0x80000000, 0x8}, {0x8, 0x1, 0xa, 0x9, 0x4, 0xa43}, {0x1ff, 0x944, 0x8, 0x1f2, 0x53, 0x5a7}, {0x4, 0x6, 0x8c93, 0x6, 0x2, 0x7}, {0xfffffffc, 0x2a, 0x4, 0x4}, {0xbcc, 0x1, 0xe, 0xfffffffb, 0x7f94, 0x3}, {0x10000, 0x7, 0x1, 0xf91d, 0x9, 0xd5c5}, {0x8, 0x44d15753, 0x5, 0x25, 0x1, 0x65f7}, {0x5, 0x57a, 0x9, 0x3, 0x0, 0x3ffc0000}, {0x1, 0x3, 0x7, 0xfffffffb, 0x9, 0x9}, {0x8039, 0x95e, 0x9, 0x7f, 0x9, 0x76}, {0x400, 0x101, 0x17, 0x1, 0x800, 0x7e}, {0x6, 0x7, 0x5, 0x6, 0x3149, 0x10001}, {0x8, 0x120, 0xfffffff9, 0x8956, 0x9, 0x3}, {0x14272f0f, 0x4b800000, 0x101, 0xc000, 0x2}, {0x5, 0x7fffffff, 0x1, 0xeea, 0xbd}, {0x6, 0x3, 0x5, 0x1, 0x8, 0x6}, {0x34a, 0x0, 0x6e62, 0x7, 0x3b, 0x8}, {0x80, 0xfde, 0x6, 0x1ff, 0x5, 0xc}, {0xa75, 0xffff, 0x8, 0x3, 0x40}, {0x1, 0x5, 0x4, 0x0, 0x5, 0xd6}, {0x400, 0x7ff, 0x2d, 0x9dd9, 0x175, 0x92b}, {0x6, 0x2, 0x1, 0x9, 0x8, 0x2}, {0x0, 0x7f, 0x8, 0x40, 0x2, 0x4}, {0x2, 0xfffffbff, 0xfffffff9, 0x6c, 0x6, 0x4}, {0x4, 0x6, 0xf, 0x7, 0x2}], [{0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x3}, {0x4}, {0x1, 0x1b68af967936b2bf}, {0x4}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0xd665c923316deac5, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x4, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x1, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x3, 0x3}, {0x0, 0x3}, {0x4, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x2}, {}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x3}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2}, {0x3}, {0x3}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x4}]}}]}, {0x68, 0x6, "01c4305ba92b993853c2b01efd604a9c2a8ab6c5aeb4856ccda666b522c4db7b73ea734ae9534d1cddeaaf1ffe45a386a79b5496b7150f5a52f57cf7aa90e6c825dd6d8d31238e70bc350a1b4ca3f59bf3cfde748af111043570ffe082c4b018eaff13e6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r7}, @TCA_ROUTE4_ACT={0x380, 0x6, [@m_mirred={0x24c, 0x10, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xfffffff8, 0x1, 0x0, 0x3ff}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x4, 0x6afe0911da6fd53b, 0x0, 0x1}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x3, 0x2, 0x9, 0x3}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10, 0x6, 0x0, 0x2, 0x8}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe00, 0x101, 0x5, 0x8, 0x5}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff9, 0xe, 0x0, 0x1, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2c, 0xfffffffc, 0x3, 0x100, 0x3}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2654f8de, 0x10000000, 0x2, 0x64d4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xe, 0x6, 0x6, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x8, 0xffffffffffffffff, 0x1, 0x3}, 0x3}}]}, {0xdf, 0x6, "44cadd58ae3d3e2d110fe07e1d9c944cc6fa1840c0a6ed971c85b4eb3a3ace6e94eae9c142f33d9617202cb491d87cda149df876c43fa581e1167bf4aeedeec23daa916c34c7ba026efd7445ced38c5448de1d94bc720263a532e59736de5ce82c250b8450b10f7b09df7ad6c93dd7947adc7a9ac9db9d887de0545295a371b2c6412c56f9a3324b12f10d119aa1b36a10227970d82714287196f3927c2d5aee008eb29edd5339cd3f80bd0120fa80907869333f437d73cb32004469acd0d37eb1ec4d87ca344ba325880e6c8cb7f365e02eadf2180e9b7d1ff4f9"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x130, 0x15, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8100}, @TCA_MPLS_PROTO={0x6, 0x4, 0x892e}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x4, 0x10000007, 0xa130, 0x1}, 0x2}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x851c2}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xb5, 0x6, "a464702ef6141ddbba6135ae305dd4563996391a6c8f000b04c04cd48ac6aaae8cc3f1747c945544f9fc8a82b159573291e6b864bff4f445ddc4da81dd5fa9d863b19fec1ec034a081727e02826d0581cde5497d58cca9b36c794c9709dd2e439f02cac35bc400e686805851f9bb6789a384823b652c541d59b69bd49746e242da7a8eb3bf08836e12275a0a31d969bebc23e6562507e28f6c1e881ca17fd687d6ba1c931cdf4f17258c9274993a9f50da"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_ROUTE4_IIF={0x8}]}}, @filter_kind_options=@f_basic={{0xa}, {0x192c, 0x2, [@TCA_BASIC_POLICE={0x64, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x3942, 0x7, 0xfff, {0x6, 0x2, 0x1, 0x31, 0x1, 0x4}, {0x4, 0x0, 0x2, 0x2, 0xfff5, 0x11a}, 0x19e, 0x1de, 0x1}}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xb}}, @TCA_BASIC_POLICE={0x1448, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3ff}, @TCA_POLICE_RATE={0x404, 0x2, [0xabfd, 0xa0, 0x4, 0x7fff, 0xc3dc, 0x9, 0x3, 0x0, 0x10001, 0x5, 0x81, 0x5, 0x7, 0x4, 0x4, 0xb, 0xe0000000, 0x0, 0xfffffffa, 0x9, 0x7f, 0x2, 0x8, 0x5, 0xfaf, 0x1, 0x1d13, 0x4, 0x3e, 0x400, 0x6, 0x0, 0xacb, 0x9, 0xedc, 0x8, 0x7, 0xe31f, 0x1, 0x3, 0x1, 0x4, 0x5, 0x80000000, 0x6, 0xff, 0x200, 0xefd, 0xfffffdff, 0x3ff, 0x4, 0x3, 0x4, 0x0, 0x4, 0x1000, 0x800, 0x0, 0x9, 0x8, 0x6, 0x9, 0xbf5, 0xd, 0x4, 0x9, 0xb, 0x1, 0x5, 0x7fff, 0x3, 0x3, 0x0, 0x1, 0x99, 0x8, 0x95e5, 0x10001, 0xfffffffa, 0x3, 0x8, 0x7109, 0x80, 0x3, 0x6, 0x100, 0x3, 0x3, 0x8000, 0xb, 0x7796, 0x6, 0xfffeffff, 0xffff8000, 0x0, 0x5, 0x0, 0x7, 0x9, 0x8, 0x6, 0x1, 0x5, 0x3, 0x15, 0x3, 0xffffff12, 0xd, 0xff, 0x81, 0xffffffff, 0x4, 0x800, 0xff, 0x8, 0x2, 0x100, 0x2, 0x4, 0x3, 0x6, 0x101, 0xffff, 0x4, 0x20000, 0x1, 0xf1f, 0x5, 0x10, 0x3, 0x8, 0xec6, 0x8001, 0x3, 0x3, 0x4b, 0x0, 0x6, 0x200, 0xa6ad, 0x1, 0x7fffffff, 0x5, 0xa7b4, 0x0, 0x10, 0x1, 0x5, 0x6, 0x6, 0x5, 0xfffffff8, 0xc, 0xfff, 0xff, 0x9, 0x1, 0x0, 0x200, 0x3, 0x4, 0x8, 0x7, 0x2, 0x962, 0x1, 0x2, 0x7, 0x988, 0x4, 0x4, 0x7ff, 0x3, 0x4, 0x30, 0x1, 0x9, 0xa, 0xc4b1, 0x0, 0x9, 0x1, 0x4, 0x400, 0x9, 0x3d28, 0x2e, 0x3ff, 0x1e3, 0x2390, 0xc6ee, 0x0, 0x4, 0x3, 0x69, 0x9, 0x29, 0x5, 0x2000000, 0xa, 0xfffff001, 0x3, 0xd73, 0x101, 0x2, 0x0, 0x8, 0x2, 0x4, 0x9a, 0x4, 0x1, 0xb02, 0x9, 0xc2e6, 0x7, 0x9, 0x2400, 0x1, 0x7, 0xfffffffd, 0x6485, 0xa, 0x80000001, 0xf1, 0x82a9, 0x3, 0x1, 0xfffffff2, 0x0, 0x6, 0x8, 0x9, 0x1, 0x81, 0xfff, 0x9, 0x5, 0x45, 0x8, 0x9, 0x4, 0xb6, 0x80000000, 0x8001, 0x4, 0x100, 0x7637, 0x8, 0x8, 0x5736f901, 0x1, 0x1, 0x0, 0x4, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0x6, 0x8, 0x2, 0x2, 0x0, 0x8, 0x6, 0x101, 0x5, 0x7f, 0x6, 0x7fffffff, 0x7fff, 0x2, 0x4, 0x92, 0x2, 0x7ff, 0x5, 0x6, 0x5, 0x4, 0x7, 0x8, 0x80, 0x6, 0x0, 0x5, 0x7f, 0x4, 0xffffdf28, 0x7, 0x5, 0x10000, 0xfffffbff, 0xe, 0x3, 0x2, 0x0, 0x3, 0x2, 0x7, 0x2, 0x4, 0x400, 0x5, 0x0, 0x4e1, 0x9, 0x8000, 0x8, 0x2, 0x9, 0xa, 0x3, 0x6, 0x5, 0xc5d, 0x1a29, 0x9, 0x8, 0x3a4, 0x1, 0x7a, 0x10001, 0xf, 0x1f, 0xc024, 0x1, 0x14, 0x8, 0x1, 0x0, 0x8, 0x3ff, 0x3, 0x4, 0xe, 0x39f, 0x90, 0xa, 0x7fffffff, 0xffffffff, 0x0, 0xe93, 0x6, 0x5b1, 0x8, 0x6, 0xff, 0x4, 0xf, 0x7fffffff, 0x0, 0x5f, 0x100, 0x3, 0x5, 0x7, 0x105ac8bb, 0xe000000, 0x10000, 0xff, 0x5, 0x6, 0x80000000, 0xffffffff, 0x70, 0x4, 0xa, 0x5, 0x5, 0x1, 0x32a, 0x4, 0x6, 0xb, 0xb49, 0xaf, 0xd8, 0x3, 0x1409b0ce, 0xf31, 0x3, 0xbab7, 0x4, 0x1, 0x3, 0x3, 0x7, 0x2, 0x5, 0x4, 0x3, 0x7, 0xffff, 0x800, 0x7, 0x2, 0x7, 0x8, 0x6, 0x2, 0x0, 0xfff, 0x1, 0x5, 0x8, 0x2, 0x3, 0x400, 0x1, 0x0, 0x2, 0x4a5, 0x100000, 0x2, 0x9, 0x5, 0x9, 0xf962, 0x7, 0x0, 0x4, 0x800, 0x3, 0x3, 0x40400000, 0x6, 0x5, 0x1, 0x41, 0x0, 0x8, 0x4, 0xe7, 0x1, 0x57f99517, 0x8, 0x10000, 0x2, 0x1, 0xba0a, 0xfff00000, 0x2, 0x8001, 0x0, 0x3, 0x80000000, 0x7, 0x2c, 0x0, 0x4, 0x3, 0xe441, 0x7, 0x80000000, 0x0, 0x8, 0xb37, 0x7804, 0x6, 0x9, 0x4, 0x7, 0x400, 0xffffffff, 0x6b64, 0xde, 0x5, 0xe4d7, 0x16, 0x101, 0x7, 0x6a0, 0x76e9, 0x80000000, 0x3ff, 0x3ff, 0x1, 0x3, 0x697, 0x6, 0x101, 0x6, 0xfffffffa, 0x80, 0x40, 0xd5f8, 0x0, 0x9, 0x2, 0xb50, 0x3, 0x100000, 0x17, 0xa660, 0x4, 0x7, 0x7, 0x5, 0x2, 0x2, 0x5, 0x3, 0x81, 0x8, 0x4, 0x0, 0x10000, 0x3ff, 0x4, 0x2d0cf67a, 0xf]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x7, 0x5, 0x5, 0x99, 0x8, 0x1, 0x5, 0x6, 0x6, 0x9, 0x1, 0x4, 0x522f, 0x7fffffff, 0x4, 0x100, 0x80000000, 0x5, 0x2, 0x5, 0xffffffff, 0x6, 0x3811, 0x3, 0x7d, 0x2, 0xfffffffb, 0x90, 0x9, 0x2, 0xfffffffe, 0x1, 0x5, 0xbe70, 0x200, 0x1, 0x0, 0x6, 0x80000001, 0xf, 0x3ff, 0x10, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8000, 0x1, 0x8000, 0x6, 0x8001, 0x80, 0x6da, 0x4, 0x5, 0x28f, 0x1c, 0x800, 0x0, 0xab2, 0x6, 0x9a49, 0x6, 0x2, 0x2, 0x101, 0x9, 0x1, 0x9, 0xbb, 0xd, 0x0, 0xfffffffb, 0xffffffff, 0x5, 0xae4, 0x4, 0xf3a, 0xffff, 0x6, 0xfffffff1, 0xffffff38, 0xfffffbff, 0x4, 0x49, 0x80000001, 0x7, 0x9, 0x400000, 0xf, 0x40, 0xcf0c, 0xfffffff1, 0xfffffffc, 0x17, 0x2, 0x4, 0x8, 0x6, 0xfffff434, 0x7e86, 0x0, 0x2, 0xffff, 0x4, 0x3, 0x44, 0xa45b, 0x1f, 0x8, 0x9, 0x0, 0x100, 0x0, 0x4259, 0x2, 0xfffffff6, 0x0, 0x3, 0x5, 0x2cc, 0x6, 0x8, 0x7f, 0xffffb624, 0x7, 0x1, 0xc, 0x7, 0x2, 0x1, 0x52a5, 0x200, 0x7ff, 0x6, 0x80000001, 0x3, 0x4, 0x2, 0xe, 0x16d, 0x401, 0x81, 0xa72, 0x3ff, 0x5, 0xff, 0x8, 0x6, 0x3, 0x6, 0x0, 0x8, 0xc38, 0x200, 0x79c, 0x6, 0xa3, 0x8, 0x3, 0x0, 0x4, 0x6, 0x7fff, 0x5, 0x6, 0xe, 0x0, 0x80000000, 0x2, 0xa, 0x7, 0x8, 0xffff8000, 0x8000, 0x802, 0x9, 0xd587, 0xd68, 0xb, 0x4, 0x6, 0x8, 0x5, 0x8, 0x2, 0x9, 0x2, 0x800, 0x10, 0x7, 0x8, 0xd5, 0x7fff, 0xc1, 0x2, 0x400, 0x9, 0xffffffff, 0x4, 0x6, 0x80000001, 0x7fff, 0xffff, 0x1d2, 0x7, 0x2, 0x6, 0x8, 0x0, 0x80000001, 0x1, 0xfffff241, 0x5, 0x40, 0x4, 0x2c5, 0x7, 0xfffffff8, 0x3, 0x4, 0x80000000, 0x1ff, 0x80, 0x0, 0xf, 0xfffff001, 0x7, 0x5, 0x0, 0x81, 0x6, 0x7, 0xa3ef, 0x7, 0x4, 0x2342, 0x7fffffff, 0x9, 0x6, 0x6, 0x184, 0x7, 0x40, 0x4643, 0xfffffff8, 0xd, 0x1, 0x4, 0x7bf, 0x5, 0x4, 0x400, 0x6]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf4c, 0xd1, 0xf, 0x4, 0x9, 0x8, 0x2, 0x401, 0xd, 0x2, 0xffff, 0x3, 0x3b92, 0x9d5, 0x6, 0x0, 0xfffffff8, 0x1, 0x7fff, 0x5, 0x3, 0x200, 0x5, 0x80000001, 0x7, 0x6, 0x7, 0x2, 0x3, 0x3, 0x0, 0x0, 0x6, 0x3, 0x3ff, 0x20000000, 0x40, 0xffffffff, 0xb737, 0x5, 0x4, 0xd5c, 0x4, 0x40, 0x800, 0xa2, 0x8, 0x7, 0x7fffffff, 0x5, 0xffffffff, 0x4, 0x1ff, 0xa5c3, 0x8, 0x10000, 0x7883dd40, 0x4, 0x4, 0x4, 0xe84, 0xa, 0x3, 0x9, 0x7, 0x6, 0x9, 0x0, 0xa85, 0x7f, 0x5, 0x1, 0x1, 0x4, 0x8, 0x8, 0x1, 0x6, 0xcf, 0x4, 0x80000000, 0x4, 0x0, 0x2, 0x1800, 0x7, 0x9, 0x5, 0x10001, 0x5, 0x1eb, 0x2, 0x0, 0x5, 0x7, 0x3e, 0xd, 0x8, 0x6, 0x800, 0xa, 0x729c0aba, 0x7, 0x8, 0x1b7, 0x5, 0x7, 0x5f, 0x9, 0x2, 0x2, 0x200, 0x8, 0xc, 0x1, 0x6, 0x6db, 0x8, 0x1000, 0x1, 0x8, 0xe00, 0x7fffffff, 0x400, 0x4, 0x8, 0x1, 0x2, 0x6, 0x9, 0x1, 0x8813, 0x1, 0x6, 0x3, 0x4, 0xbbc9, 0x321c, 0x5, 0x9, 0xfffffffe, 0x4, 0x7fff, 0x5936, 0x8, 0xffff7fff, 0x29f, 0x7, 0xc, 0x0, 0x2, 0x6, 0x26, 0x3, 0x8, 0x9, 0x1, 0x80, 0x3e23800, 0x1, 0x4, 0x9, 0x6, 0xaa, 0x1c1, 0x9, 0x3, 0xd8, 0x10, 0x4, 0xd, 0x0, 0x0, 0x6, 0x7ff, 0x3ff, 0x100, 0x7, 0x0, 0xd3, 0x0, 0x41, 0xaa, 0x0, 0xffffffff, 0x10, 0x3, 0x101, 0x8, 0x8, 0x2, 0x19f0, 0xb0, 0x1, 0x4, 0x8, 0x7, 0xffff, 0x780, 0xa, 0xfffffffa, 0x2, 0x2, 0x3, 0x25, 0x8, 0xb, 0x348, 0x6, 0x40, 0xdb, 0x6, 0xa, 0x3, 0x9, 0x10001, 0x4, 0x39b, 0x7fff, 0x2, 0x7fff, 0x7fff, 0x5, 0x3, 0x4, 0x56, 0x2, 0xa, 0x80000000, 0x386, 0x9, 0x474c, 0x5, 0x9, 0x6, 0x0, 0xc4f, 0x8, 0x1, 0x2, 0x8, 0x2, 0x5, 0x0, 0x0, 0x4, 0x8, 0x2, 0xd2c6, 0xeac1, 0x4, 0xfffffffd, 0xfff, 0x5, 0xc, 0x76]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x20d6, 0xffff9433, 0x7, 0xc, 0x3, 0x9aa, 0x4, 0x6, 0xea, 0x5, 0x80000000, 0x8, 0x60, 0x5, 0x8, 0x5, 0x0, 0x7, 0x6a2, 0x8001, 0xac9b, 0xf86e, 0xe0, 0x10001, 0xb0, 0x1, 0x7, 0x0, 0x400, 0xfff, 0x0, 0x9, 0x3, 0x7, 0x1, 0x8, 0x1ff, 0x7fffffff, 0x1, 0x0, 0x5a, 0xd, 0xfffffff8, 0x5, 0x5, 0xc, 0x1, 0x8, 0x2, 0x3, 0x7, 0x9, 0x7fffffff, 0x1, 0x8, 0x400, 0x10, 0x1, 0xa, 0x0, 0x5, 0x9, 0x10000, 0xffff, 0x6, 0x7, 0x8eaf, 0x1, 0xb2f, 0xc889, 0x1, 0x4, 0x8c, 0xd6c, 0x2, 0x7, 0x5, 0x7, 0x8, 0x8000, 0x4, 0x1, 0x15, 0x4, 0x9d, 0x10000, 0x1, 0x3, 0xfffffffb, 0x6707, 0x0, 0xffffffff, 0x8, 0xaacd, 0x3, 0x1, 0x4dc8, 0x10000, 0x1ff, 0x7, 0x5fa, 0x9ded, 0x2, 0x7, 0x1, 0x2, 0x5, 0x6, 0x9, 0x1, 0x5, 0x2, 0x16, 0x2, 0x3, 0xc900, 0x2, 0x6, 0x6, 0xffffffff, 0x0, 0x1ff, 0xd, 0xb, 0x4, 0xa634, 0xa, 0x8000, 0xff, 0xd, 0x5, 0x8, 0xf71, 0x0, 0xf, 0x5, 0x3, 0xfff, 0x7, 0x5, 0x6, 0x774a, 0x7, 0xffffffff, 0xecf, 0x3, 0x3, 0xc0, 0x3, 0x6, 0x8, 0x5, 0x6, 0x4, 0x2, 0xffff, 0x3, 0x5, 0x1, 0x5, 0x3, 0x9, 0xfffffff7, 0x0, 0x9, 0x40, 0x4, 0x82, 0x200, 0x8, 0x2b04, 0x9, 0x8, 0x6, 0x8, 0x0, 0x8, 0x8001, 0x3, 0x9d, 0x0, 0x3, 0x0, 0x81, 0x9, 0x4000, 0x9, 0x1890, 0x8, 0x7, 0x0, 0x6f39, 0x5, 0xc0000000, 0x80, 0x7, 0x10, 0xfff, 0x8601, 0xdb0, 0x0, 0x0, 0x7, 0x0, 0x6, 0x1, 0xc0e, 0x8001, 0x7, 0x2, 0x0, 0x3, 0x2, 0xfa, 0x25, 0x100000, 0x1, 0x7, 0x4, 0x67, 0xcdd, 0x6, 0x6, 0x4, 0x7, 0x2, 0x7, 0xdb1f, 0x5, 0x0, 0x7cec, 0x7, 0x3, 0x7, 0xc20, 0x2, 0xe, 0x3, 0x6, 0x9, 0x5, 0x9, 0xfffff332, 0x4, 0x40000000, 0x92, 0x100, 0x9, 0x80000001, 0x1, 0x2, 0x9, 0x4, 0x0, 0x0, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]}, @TCA_BASIC_EMATCHES={0x468, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x2ac, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x2, 0x9, 0x2}, [@TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0x7}, {0x3, 0x6d, 0x2, 0x1, 0xb, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xa04, 0x8, 0x4}, {0x2, 0x5, 0x4}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1ff, 0x1, 0x3}, {0x618d, 0xffff, 0x8}}}, @TCF_EM_META={0xd0, 0x3, 0x0, 0x0, {{0x7, 0x4, 0xfffb}, [@TCA_EM_META_LVALUE={0x30, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="19b6384190e711a40639", @TCF_META_TYPE_VAR="502191248628"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8000, 0x9, 0x1}, {0x287, 0x5, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x9, 0x2}, {0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x24, 0x3, [@TCF_META_TYPE_VAR='\x00\x00\x00\x00\x00\x00\x00\x00\x00X', @TCF_META_TYPE_VAR="a65d58", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="1da208", @TCF_META_TYPE_VAR="b49c79bd21694e38"]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR="856f3c08f93649", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x26, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="1adcdc2dbc", @TCF_META_TYPE_VAR="732b7e16e77424", @TCF_META_TYPE_VAR="31c386a8cacec6fb2692", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_VAR="4c2122fe", @TCF_META_TYPE_VAR="7192", @TCF_META_TYPE_VAR="e330d5f0", @TCF_META_TYPE_VAR="9c", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_META={0x2c, 0x2, 0x0, 0x0, {{0x5, 0x4, 0x401}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xd, 0x1}, {0x1, 0x0, 0x1}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe, 0xd, 0x1}, {0x9, 0x75}}}]}}, @TCF_EM_META={0xcc, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="bc34"]}, @TCA_EM_META_RVALUE={0x23, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="8a1baf174d1cf7f369", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="44a0eea04d2386266e99", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x32, 0x2, [@TCF_META_TYPE_VAR="4304f7b3", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="ee72", @TCF_META_TYPE_VAR="cf690caf3187dea523", @TCF_META_TYPE_VAR="8634488f12edb1d955e3", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="9b60d7b77f6bfb17b5", @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x40, 0x2}, {0x7, 0x8, 0x2}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="b3a827ecf5e88932"]}, @TCA_EM_META_LVALUE={0x37, 0x2, [@TCF_META_TYPE_VAR="85825594758508", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="1667d29edbc4be", @TCF_META_TYPE_VAR="0c0d2038afbbe747817b", @TCF_META_TYPE_VAR="f104a58bc9", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="211ced6c503ceb97f31b"]}]}}, @TCF_EM_CONTAINER={0x8c, 0x3, 0x0, 0x0, {{0x1, 0x0, 0x9}, "88821d8efa9c4a53b40d0ff08d2290fc22258c4f4d8076b2c89729e9020d19d66f830e9b221dbf954d643b6b2beb847d859adcf50cb3030f5e132d2260405c4efa783ac970e0da4ced9f8e7e00a54c39637ec7cf409540982f53e26e65dbbe7805121e5b65f8090f8a4fdcc7fe1214057bcc83e7e83acf97462274d0e6"}}]}, @TCA_EMATCH_TREE_LIST={0x124, 0x2, 0x0, 0x1, [@TCF_EM_META={0x50, 0x1, 0x0, 0x0, {{0x4, 0x4, 0xffd}, [@TCA_EM_META_RVALUE={0x2e, 0x3, [@TCF_META_TYPE_VAR="1928cd966ec28adf8c", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="eb0e69543b061629ae", @TCF_META_TYPE_VAR="e52af9", @TCF_META_TYPE_VAR="aa9b727681", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x2, 0x2}, {0x186c, 0x2, 0x4370051e421cefe3}}}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7, 0x1, 0x37}, {0x7f, 0x5, 0x325, 0x5, 0x0, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x3, 0x3, 0x1000}, {0x6, 0x9, 0x8, 0xacf4}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0x1}, {0x3, 0xa, 0x1000, 0x8}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x2}, {0x6, 0x6, 0x5, 0x4, 0x0, 0x1, 0x2}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x400, 0x8, 0xbed}, {0x4, 0x6, 0x3}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0xff80}, {0x4, 0x3, 0x6}}}, @TCF_EM_META={0x48, 0x1, 0x0, 0x0, {{0x33, 0x4, 0x3ff}, [@TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="a2c94b412f9d4cd8289e", @TCF_META_TYPE_VAR="e4"]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="072a564e97d4", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfe3d, 0x7, 0x2}, {0xe, 0x33, 0x1}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x8c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x100, 0x2, 0x6}, {0x36, 0x4, 0x1, "c665dad8"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8, 0x8, 0x9}, {0x2, 0x4, 0x2}}}, @TCF_EM_CONTAINER={0x2c, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x2}, "00e26c498328d82c4480e6f98f9ddf5c7bf4a2d27dc1ec132eb02005b8de18"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x40, 0x7, 0x8001}, {{0x3, 0x0, 0x0, 0x1}, {0x1}}}}, @TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x2, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="87de0f"]}]}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0xc, 0x8}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1f44, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x10000, 0x3ff, 0x5, 0x3, 0x42, 0x40, 0xffff, 0x1, 0xc, 0xe66e, 0x3, 0x3, 0x1, 0x1, 0x3ff, 0x3ff, 0x2, 0xe0c, 0x5, 0x1800000, 0x3ff, 0xa719, 0x401, 0x7, 0x1f, 0x4, 0x8, 0x9, 0x2, 0x2, 0x1a, 0x9, 0x1, 0xa, 0x5, 0x550c, 0x0, 0x0, 0x0, 0x2, 0x5, 0x5, 0x6, 0x9, 0x6, 0x1000, 0xfff, 0xdcd, 0x6, 0x2, 0xe, 0x9, 0x5, 0x62, 0x7eb83f86, 0x6, 0x3, 0x40, 0x2, 0x892, 0x6b9, 0x5, 0x800, 0x0, 0x8, 0x8, 0x8000, 0x4000, 0x200, 0x1, 0x0, 0x2800, 0x0, 0x3, 0x2, 0x9, 0x3, 0xfffffffb, 0xc, 0x0, 0xffffff00, 0x465b, 0x8, 0x800000, 0xc97, 0x3, 0xf, 0x7, 0x6, 0xe8, 0x2, 0x0, 0x3, 0xd, 0x8, 0x6, 0x2, 0x7fffffff, 0x80000, 0x1ff, 0xffffff01, 0x4, 0x8, 0x80, 0x7, 0x80000001, 0xb, 0x8, 0x4, 0x80000000, 0x2, 0x6, 0x5, 0x2, 0xfff, 0x9, 0x71f, 0x6, 0x358, 0x6, 0x1, 0x2, 0xff, 0x5, 0x8, 0x8, 0x4, 0x9b, 0x2, 0x4, 0x738, 0x0, 0x7ff, 0x40, 0xcb, 0x2, 0xa6, 0x66, 0xbb9, 0x80000000, 0xe, 0x2452, 0x7fd, 0x7fff, 0xf, 0x0, 0x9, 0x800, 0x4, 0xfffffffd, 0x7, 0xe, 0x4, 0xfff, 0x8bc2, 0x6, 0x101, 0x10, 0x3fff8, 0x2, 0x1, 0xc63, 0x4, 0xf, 0x9, 0xc18, 0x1eab, 0x101, 0x3, 0x1, 0x2, 0x7ff, 0x6268, 0x7ff, 0x4, 0x3, 0x877, 0x1, 0x9, 0x8, 0x3ff, 0x0, 0x4, 0x3, 0x6, 0x9, 0x6, 0x2, 0x422c, 0x6, 0xfffffffe, 0x10, 0x3, 0x0, 0x74b, 0x9, 0x2, 0x7f, 0x2000000, 0x7, 0x8, 0x0, 0xfffffffb, 0x7ff, 0x1, 0xd4, 0x3, 0x10, 0x3, 0xe, 0x7c, 0x6, 0x8, 0x4, 0x9, 0x1, 0xf81, 0x400000, 0x53d9, 0x80000001, 0x9, 0x0, 0x866, 0x0, 0x4, 0x1, 0x10, 0x0, 0x37, 0x0, 0x7, 0x3, 0x0, 0x6, 0xfff, 0x9, 0x8, 0xf7e1, 0xb, 0xffffffff, 0x5, 0x8000, 0x3, 0x9, 0x80, 0x7, 0xe3f100d, 0x7, 0x8, 0x2, 0x6, 0x6, 0x2, 0x0, 0x10]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x6, 0x1000, 0x6, 0x5, {0x1, 0x0, 0x2, 0x4, 0x8000, 0x4e}, {0x1, 0x0, 0x1dc4, 0x763, 0x986, 0x3}, 0x7fffffff, 0xd, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}, @TCA_CGROUP_POLICE={0x418, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xfa, 0xffff2a18, 0x3, 0xb0cb, 0x5, 0x5, 0x7fff, 0x3ab, 0x9, 0xfffffe00, 0x9, 0x5, 0xffffffff, 0x10000, 0xfff, 0x8000, 0x1, 0x5, 0x5, 0x5da, 0x6, 0x54, 0x4, 0x1fc, 0x8001, 0x101, 0xd, 0x5, 0x4, 0x0, 0x8, 0xfffffe01, 0x4, 0x6, 0x10, 0x2, 0xf, 0x4, 0x5, 0x543, 0x3, 0x1ff, 0x4a4, 0x4, 0x4, 0x8, 0x5, 0xa, 0x6, 0x9, 0x0, 0x4f10, 0x4, 0x835, 0x3, 0xfffffffc, 0x0, 0x0, 0x1, 0x3, 0x6, 0x8, 0x7, 0x0, 0x7, 0xba47, 0x7, 0x0, 0x7, 0x2, 0x2, 0xe5e, 0x3, 0xd2, 0x5, 0x1, 0x1, 0x8, 0x7b, 0x3, 0x1, 0x3, 0x3, 0x0, 0x0, 0x6, 0x3, 0x8, 0x9c4d, 0x9, 0x9, 0x5, 0x5, 0x1, 0x1, 0x7fffffff, 0xc, 0x69, 0x800, 0xc60a, 0x8, 0x5, 0x927c, 0x9, 0x0, 0x33b9, 0x3, 0x7, 0x100000, 0x1ff, 0xe, 0x5, 0x504e, 0x40, 0xc32, 0x2, 0x1, 0x80000001, 0x7ff, 0x3, 0x2, 0x7, 0x68, 0x2, 0x8, 0x1, 0x8001, 0x9, 0x3, 0x9, 0x2, 0x7, 0xe0, 0x2, 0x6, 0x6, 0xe8, 0xffffff2a, 0x7fff, 0x7, 0x8fd3, 0xfffffffa, 0x4, 0x2, 0x2, 0x3, 0x5, 0x2, 0x2, 0x7, 0x1000, 0xed03, 0x0, 0x6, 0x6, 0x81, 0x6, 0x3, 0x1, 0x1, 0x1a, 0x9, 0x5, 0x33bc, 0x4, 0x4, 0x6, 0x1, 0x10001, 0x6, 0x5, 0xfffffffb, 0xffffffff, 0xc, 0xffff8001, 0x0, 0x0, 0x9, 0x3, 0x92d5, 0x10001, 0x0, 0x9, 0x4, 0x400, 0x9, 0xff, 0x10, 0x81, 0x0, 0x4, 0x0, 0x6, 0xffff, 0x25d8, 0x3, 0x264, 0xc, 0x8, 0x4, 0xfffffff7, 0x5547, 0x1, 0x0, 0x1, 0x401, 0x7, 0x9, 0x1, 0x7ff, 0x8, 0x3ff, 0xda97412, 0x8, 0x80000000, 0x7fffffff, 0x6, 0x100, 0x198, 0x401, 0x1, 0x4, 0x6, 0x80000001, 0x5, 0x9, 0x4e, 0x3, 0x3, 0x6ecd, 0x7df, 0x9, 0xb2, 0x101, 0x1, 0x80000001, 0x3, 0x6, 0x8639, 0x18000000, 0x8, 0x1, 0x0, 0x800, 0x80000001, 0x7, 0xb, 0x2, 0x5, 0x4, 0xe1, 0x7, 0x0, 0x8]}]}, @TCA_CGROUP_ACT={0x16cc, 0x1, [@m_connmark={0x194, 0x3, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0xffffffffffffffff, 0x12d, 0xb}, 0x7d0e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x100, 0x8, 0xc, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x2, 0x2, 0x8000}, 0x7c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x7fffffff, 0x10000000, 0x7, 0x100}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x8, 0x3fe00000, 0x9831}, 0x101}}]}, {0xd6, 0x6, "dce3308a39b9d89b1dc1a3b569189197f78f6b34314c3340ac893ce0ae279cf6af5172f969826250627e10ae9d54be0d2a6172213ddac9ec171b8b2d424d29f1e8e9ec0ddaba06311b090000319c056ccc006ccc6549fe4d3fb2342c6adacdacf846b6e8212bdca9f57d46e05cb5e526d27a2a20da24d15e4290526e1d61406f4e323ccbc1747de16371fca0b8c4769858d546e283c7c5e5f1283e1cfa773fd832d9097cc68a30182f698b85bbe033656e6eac0c0c1af165cb49db06620646089fd172af4f8936a4cd1e79735fa481690143"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x10b0, 0xa, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7f}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7fffffff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x100, 0x20000000, 0x2a, 0x67e}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x4, 0x20000000, 0x1, 0x401}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x1, 0xb, 0x5, 0x3}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x1c4, 0xd, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7ff, 0x3, 0x91, 0x10001}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x7, 0x20000003, 0xd70a, 0x6}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ea8, 0xa, 0xffffffffffffffff, 0xc597, 0x3ff}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x3, 0xffffffffffffffff, 0xfffffffd, 0x6d8}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x40000000, 0x8, 0x4, 0xa275}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x64, 0x6, 0x24da, 0xeef}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe52, 0x39, 0x20000000, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0xffffffffeffffff2, 0x80, 0x3}, 0x7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xe, 0x0, 0x1000, 0xcf8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x7, 0xffffff57, 0x1e}, 0x4}}]}, {0x58, 0x6, "646b814689bee8babc98c023d204721f0fb8ecb1f6c0cd39aeeb534c8489e711b3a4c3ce455f84395c1ef76124d5069320ff337e28322d43fb2860bc72c2abcd39840eacd2474cc8933e9cd4b05399e92dca6221"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x12c, 0x9, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xf0, 0x6, "c11838daa87399274523d20ccaa5995673f4cc2ab31ba5ebc9ebf8389ea3c1a462d451e2534ced077ea81bf4c1dfd36ae04678ff6dd967272e2ec9a340a6173d0fbd529ea0502c315d83fd3c3be5926004e9125319a4655b2172e51e574c5c212894dbd2ebe95b71f797ce6b351bf9e790de58ebd0e9b9f090fa7bdbf140fc13ada313555a5e9cc0c998e10a55172e08a5bb3a8559e4ad46965d8434e6f8d20e10b35c2a2a5c357ccd058d265156906ac66d4688abdacaa17376f38909d7b10bf3cdc384565694d07a85aadc06896e5c92c5c98fd95147881496841217cbf929254a1cf9c4240cbfc301344f"}, {0xc}, {0xc, 0x8, {0x5, 0x1}}}}, @m_gact={0x194, 0x1d, 0x0, 0x0, {{0x9}, {0xb8, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x214f, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xa37, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x4, 0x6, 0x8, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x7f, 0x6, 0x4, 0x56456b64}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x401, 0x8, 0x7ff, 0xd}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x2, 0x8, 0x8, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x67b, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xaa, 0x8, 0x8, 0x6, 0x7fffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x89, 0x4, 0x8, 0x80000001, 0xc}}]}, {0xb4, 0x6, "0607b32c756df7f19774a9ca00d711e085947a53c0e662aa2e38310ae641cdf3509d09f6483e152f53263eaeeb51737b2a2f188f76e39bec5fcfc5371fd77fdc2a724b0127cf191db3b9bdc002ca638d4a1ab3fafadfce705899359cc6004fdfedc3e355237ecc68ad0dd076090b839b0857e3ec3272a0474d89e6665794d9c6ffe024077ff5677c3d31107d3f7de4e4eba3cb360cefcb494fceab4f500aef68caef9de791008c733da09ca62966c3a5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7370}}, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000200)=0x5) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x38, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="f800000016000100fcffffff04000000fe80000000000000000000000000001aac1e00010000000000000000000000000000000000000000000080a001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000033000000fc0100000000000000000000000000010000000000000000010000000000000000000000000000100020000200000000fcfffffffffffffeedffffffffffffff03000000000000002bd6000000000000000000000000008000000000000074000000000000000000fefffffffffffbff000000000000000096070000feffffff000000000000aa04be0000000000000000000000ffffffff"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0], 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x6604c011) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, 0x0, 0x0) r12 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r12, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f0000000300)={r12, 0x401, {0x0, 0x0, 0x0, 0x199a21e0, 0x1, 0x0, 0x12, 0x9, 0x0, "49289d73b68304503d7ea578287edbec0d4bf4e350805b6102c11c424a840c69a1b4b31b7472803c5f82bbfbc779eb377a640f15638657c609f8470b53c5c887", "14602a30968c0039f31a9abbbf7c1a074d2ff57fdc847e5d0305ed841e24bab3f8af18553ab71eca9b53e64d596c4ee3deb3bc5f4b4dead278fcd4b83aa77eb2", "8b6851534e5b61e93c0b4e2780840dff824653a8b2a217591957e1e42d7ea872", [0x8, 0x3]}}) 41.451858ms ago: executing program 3 (id=1252): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f022}) chdir(&(0x7f0000000540)='./cgroup\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x0) 0s ago: executing program 6 (id=1253): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x729100) fcntl$dupfd(r2, 0x406, r1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x208000}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001009, 0x5, 0x9}}}, 0x90) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, 0x0) syz_emit_ethernet(0x95, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0xd, 0x4, 0x2, 0x2f, 0x87, 0x68, 0x0, 0x2, 0x11, 0x0, @loopback, @remote, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x98, [@empty, @multicast1, @broadcast, @broadcast, @loopback]}, @ra={0x94, 0x4, 0x1}]}}, {0x4e24, 0x4e22, 0x53, 0x0, @opaque="c6c4b6100498a6d5fd1206a0372bfc4f9b5fb81ac466cf928ff16b57e6fee4e67e6b18d62359e7b56430b169c0b7bed3c5717358c2dabdb24a034122c7e97ce35397eb743be1c144186c67"}}}}}, 0x0) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, 0x0) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000440)={0x8, r6}) r8 = creat(&(0x7f0000000540)='./file0\x00', 0xd7) r9 = socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="8f1f"]) kernel console output (not intermixed with test programs): pstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd60c7ce0d9 code=0x0 [ 745.676442][ T9969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.680031][T10180] syz_tun: entered allmulticast mode [ 745.832386][T10183] dvmrp6: entered allmulticast mode [ 745.836267][ T9969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.875270][ T6210] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 746.028924][ T6210] usb 2-1: Using ep0 maxpacket: 8 [ 746.032602][ T6210] usb 2-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 746.039859][ T6210] usb 2-1: config 5 has an invalid interface number: 52 but max is 1 [ 746.039886][ T6210] usb 2-1: config 5 has an invalid interface number: 4 but max is 1 [ 746.039904][ T6210] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 746.039922][ T6210] usb 2-1: config 5 has no interface number 0 [ 746.039937][ T6210] usb 2-1: config 5 has no interface number 1 [ 746.039992][ T6210] usb 2-1: config 5 interface 52 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 746.040031][ T6210] usb 2-1: config 5 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 746.040055][ T6210] usb 2-1: config 5 interface 52 has no altsetting 0 [ 746.040073][ T6210] usb 2-1: config 5 interface 4 has no altsetting 0 [ 746.044511][ T6210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.044535][ T6210] usb 2-1: Product: syz [ 746.044549][ T6210] usb 2-1: Manufacturer: syz [ 746.044562][ T6210] usb 2-1: SerialNumber: syz [ 746.131771][ T5771] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 746.279954][ T5771] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 746.281921][ T5771] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 746.281942][ T5771] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 746.314480][ T5771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.314510][ T5771] usb 6-1: Product: syz [ 746.314571][ T5771] usb 6-1: Manufacturer: syz [ 746.314581][ T5771] usb 6-1: SerialNumber: syz [ 746.345789][ T5771] usb 6-1: config 0 descriptor?? [ 746.412248][ T5771] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 746.699767][ T9969] team0: Port device team_slave_0 added [ 746.948956][T10195] netlink: 'syz.3.951': attribute type 2 has an invalid length. [ 747.054599][T10196] binder: BINDER_SET_CONTEXT_MGR already set [ 747.054618][T10196] binder: 10194:10196 ioctl 4018620d 200000004a80 returned -16 [ 747.431131][ T9969] team0: Port device team_slave_1 added [ 747.441574][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.441644][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.458643][ T5771] usb 6-1: USB disconnect, device number 20 [ 748.006136][ T6210] cytherm 2-1:5.52: Cypress thermometer device now attached [ 748.242044][ T6210] cytherm 2-1:5.4: Cypress thermometer device now attached [ 748.402155][ T6210] usb 2-1: USB disconnect, device number 22 [ 748.403280][ T6210] cytherm 2-1:5.52: Cypress thermometer now disconnected [ 748.491950][ T6210] cytherm 2-1:5.4: Cypress thermometer now disconnected [ 749.041671][T10183] syz_tun: left allmulticast mode [ 749.086897][ T9969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.086911][ T9969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.086930][ T9969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.095317][ T9969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.095336][ T9969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.095364][ T9969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.127002][ T5771] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 749.253688][ T9927] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 749.275842][ T5771] usb 6-1: Using ep0 maxpacket: 8 [ 749.277356][ T5771] usb 6-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 749.278724][ T5771] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.278749][ T5771] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 749.320299][ T5771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.320327][ T5771] usb 6-1: Product: syz [ 749.320342][ T5771] usb 6-1: Manufacturer: syz [ 749.320355][ T5771] usb 6-1: SerialNumber: syz [ 749.340067][ T9927] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 749.393604][ T9927] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 749.460060][ T9927] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 749.484027][ T9969] hsr_slave_0: entered promiscuous mode [ 749.491754][ T9969] hsr_slave_1: entered promiscuous mode [ 749.494472][ T9969] debugfs: 'hsr0' already exists in 'hsr' [ 749.494499][ T9969] Cannot create hsr debugfs directory [ 749.511978][ T9927] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 749.730665][ T9927] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 749.743766][ T9927] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 749.832551][ T9927] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 751.069053][ T5771] usb 6-1: USB disconnect, device number 21 [ 751.428525][T10240] syz.5.959 (10240): drop_caches: 2 [ 753.137829][T10247] netlink: 'syz.5.962': attribute type 2 has an invalid length. [ 753.215670][T10141] udevd[10141]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 753.253609][T10249] binder: BINDER_SET_CONTEXT_MGR already set [ 753.253623][T10249] binder: 10246:10249 ioctl 4018620d 200000004a80 returned -16 [ 753.765399][ T3310] bridge_slave_1: left allmulticast mode [ 753.765441][ T3310] bridge_slave_1: left promiscuous mode [ 753.765733][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.692718][ T5771] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 754.718976][ T3310] bridge_slave_0: left allmulticast mode [ 754.719017][ T3310] bridge_slave_0: left promiscuous mode [ 754.719342][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.845144][ T5771] usb 6-1: Using ep0 maxpacket: 16 [ 754.849570][ T5771] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 754.851355][ T5771] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.851395][ T5771] usb 6-1: too many endpoints for config 0 interface 0 altsetting 214: 81, using maximum allowed: 30 [ 754.851425][ T5771] usb 6-1: config 0 interface 0 altsetting 214 has 0 endpoint descriptors, different from the interface descriptor's value: 81 [ 754.851442][ T5771] usb 6-1: config 0 interface 0 has no altsetting 0 [ 754.853680][ T5771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.853702][ T5771] usb 6-1: Product: syz [ 754.853716][ T5771] usb 6-1: Manufacturer: syz [ 754.853730][ T5771] usb 6-1: SerialNumber: syz [ 754.936072][ T5771] usb 6-1: config 0 descriptor?? [ 754.951314][ T5771] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 755.221569][ T5714] usb 6-1: USB disconnect, device number 22 [ 755.221817][ T1859] usb 6-1: Failed to submit usb control message: -71 [ 755.221854][ T1859] usb 6-1: unable to send the bmi data to the device: -71 [ 755.221873][ T1859] usb 6-1: unable to get target info from device [ 755.221889][ T1859] usb 6-1: could not get target info (-71) [ 755.221918][ T1859] usb 6-1: could not probe fw (-71) [ 756.419240][ T3310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.474241][T10279] netlink: 'syz.5.973': attribute type 2 has an invalid length. [ 756.522754][T10279] binder: BINDER_SET_CONTEXT_MGR already set [ 756.522772][T10279] binder: 10278:10279 ioctl 4018620d 200000004a80 returned -16 [ 756.582198][ T3310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.641686][ T3310] bond0 (unregistering): Released all slaves [ 757.225612][T10201] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 757.685930][T10288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.688273][T10288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.931588][T10201] usb 2-1: unable to get BOS descriptor or descriptor too short [ 757.949775][T10201] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 757.952764][T10201] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 757.952806][T10201] usb 2-1: can't read configurations, error -71 [ 759.428237][T10308] tmpfs: Bad value for 'mpol' [ 759.648601][T10313] support for cryptoloop has been removed. Use dm-crypt instead. [ 760.088927][T10324] netlink: 'syz.1.985': attribute type 2 has an invalid length. [ 760.191415][T10325] binder: BINDER_SET_CONTEXT_MGR already set [ 760.191434][T10325] binder: 10323:10325 ioctl 4018620d 200000004a80 returned -16 [ 760.209516][ T199] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 760.367116][ T199] usb 4-1: Using ep0 maxpacket: 16 [ 760.369463][ T199] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 760.395409][ T199] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 760.395443][ T199] usb 4-1: config 0 has no interface number 0 [ 760.395496][ T199] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 760.395523][ T199] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 760.401957][ T199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.401987][ T199] usb 4-1: Product: syz [ 760.402003][ T199] usb 4-1: Manufacturer: syz [ 760.402019][ T199] usb 4-1: SerialNumber: syz [ 760.519296][ T199] usb 4-1: config 0 descriptor?? [ 760.520593][T10322] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 760.520908][T10322] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 760.749216][T10322] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 760.749746][T10322] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 760.859647][ T3310] hsr_slave_0: left promiscuous mode [ 760.896782][ T3310] hsr_slave_1: left promiscuous mode [ 760.897963][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.947802][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.973278][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.984'. [ 761.009895][ T199] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 761.010206][ T199] asix 4-1:0.34: probe with driver asix failed with error -32 [ 762.376765][ T3310] team0 (unregistering): Port device team_slave_1 removed [ 762.427132][ T3310] team0 (unregistering): Port device team_slave_0 removed [ 762.624746][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13 [ 762.893098][T10343] FAULT_INJECTION: forcing a failure. [ 762.893098][T10343] name failslab, interval 1, probability 0, space 0, times 0 [ 762.893138][T10343] CPU: 0 UID: 0 PID: 10343 Comm: syz.1.987 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 762.893169][T10343] Tainted: [L]=SOFTLOCKUP [ 762.893176][T10343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 762.893189][T10343] Call Trace: [ 762.893198][T10343] [ 762.893206][T10343] dump_stack_lvl+0xe8/0x150 [ 762.893248][T10343] should_fail_ex+0x467/0x600 [ 762.893288][T10343] should_failslab+0xa8/0x100 [ 762.893315][T10343] __kmalloc_noprof+0xfe/0x780 [ 762.893336][T10343] ? tomoyo_encode+0x2ad/0x570 [ 762.893363][T10343] ? tomoyo_encode+0x2ad/0x570 [ 762.893396][T10343] tomoyo_encode+0x2ad/0x570 [ 762.893433][T10343] tomoyo_realpath_from_path+0x5fa/0x640 [ 762.893471][T10343] ? tomoyo_path_number_perm+0x219/0x5f0 [ 762.893494][T10343] tomoyo_path_number_perm+0x246/0x5f0 [ 762.893520][T10343] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 762.893541][T10343] ? __lock_acquire+0x683/0x2ce0 [ 762.893580][T10343] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 762.893611][T10343] ? hook_file_ioctl+0x1f3/0x600 [ 762.893639][T10343] ? lockdep_hardirqs_on+0x7a/0x110 [ 762.893689][T10343] ? __fget_files+0x2a/0x420 [ 762.893717][T10343] ? __fget_files+0x2a/0x420 [ 762.893739][T10343] ? __fget_files+0x3a8/0x420 [ 762.893761][T10343] ? __fget_files+0x2a/0x420 [ 762.893797][T10343] security_file_ioctl+0xc3/0x2a0 [ 762.893825][T10343] __se_sys_ioctl+0x47/0x170 [ 762.893854][T10343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.893880][T10343] do_syscall_64+0x174/0x580 [ 762.893906][T10343] ? trace_irq_disable+0x3b/0x140 [ 762.893939][T10343] ? clear_bhb_loop+0x70/0xc0 [ 762.893966][T10343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.893988][T10343] RIP: 0033:0x7fd60c7ce0d9 [ 762.894009][T10343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.894028][T10343] RSP: 002b:00007fd60aa26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.894053][T10343] RAX: ffffffffffffffda RBX: 00007fd60ca55fa0 RCX: 00007fd60c7ce0d9 [ 762.894069][T10343] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 762.894084][T10343] RBP: 00007fd60aa26090 R08: 0000000000000000 R09: 0000000000000000 [ 762.894097][T10343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.894109][T10343] R13: 00007fd60ca56038 R14: 00007fd60ca55fa0 R15: 00007ffe4e6564a8 [ 762.894145][T10343] [ 762.906896][T10343] ERROR: Out of memory at tomoyo_realpath_from_path. [ 763.181453][T10343] loop4: detected capacity change from 0 to 7 [ 763.519486][T10350] FAULT_INJECTION: forcing a failure. [ 763.519486][T10350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.519528][T10350] CPU: 1 UID: 0 PID: 10350 Comm: syz.5.989 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 763.519558][T10350] Tainted: [L]=SOFTLOCKUP [ 763.519566][T10350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 763.519578][T10350] Call Trace: [ 763.519587][T10350] [ 763.519596][T10350] dump_stack_lvl+0xe8/0x150 [ 763.519635][T10350] should_fail_ex+0x467/0x600 [ 763.519673][T10350] _copy_to_iter+0x404/0x1810 [ 763.519701][T10350] ? lockdep_hardirqs_on+0x7a/0x110 [ 763.519736][T10350] ? __pfx__copy_to_iter+0x10/0x10 [ 763.519756][T10350] ? reacquire_held_locks+0x104/0x190 [ 763.519787][T10350] ? rt_spin_unlock+0x157/0x200 [ 763.519812][T10350] __skb_datagram_iter+0xf8/0x980 [ 763.519846][T10350] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 763.519884][T10350] skb_copy_datagram_iter+0xb5/0x240 [ 763.519918][T10350] netlink_recvmsg+0x2b9/0xa50 [ 763.519957][T10350] ? is_bpf_text_address+0x292/0x2b0 [ 763.519983][T10350] ? __pfx_netlink_recvmsg+0x10/0x10 [ 763.520017][T10350] ? __lock_acquire+0x683/0x2ce0 [ 763.520043][T10350] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 763.520072][T10350] ? security_socket_recvmsg+0x7e/0x2c0 [ 763.520105][T10350] ? __pfx_netlink_recvmsg+0x10/0x10 [ 763.520135][T10350] sock_recvmsg+0x196/0x1e0 [ 763.520168][T10350] ____sys_recvmsg+0x1f2/0x4b0 [ 763.520208][T10350] ? __pfx_____sys_recvmsg+0x10/0x10 [ 763.520261][T10350] ? import_iovec+0x73/0xa0 [ 763.520290][T10350] ___sys_recvmsg+0x213/0x5a0 [ 763.520326][T10350] ? __pfx____sys_recvmsg+0x10/0x10 [ 763.520360][T10350] ? __fget_files+0x2a/0x420 [ 763.520404][T10350] ? __fget_files+0x3a8/0x420 [ 763.520439][T10350] __x64_sys_recvmsg+0x1b4/0x290 [ 763.520472][T10350] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 763.520522][T10350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.520546][T10350] do_syscall_64+0x174/0x580 [ 763.520573][T10350] ? trace_irq_disable+0x3b/0x140 [ 763.520606][T10350] ? clear_bhb_loop+0x70/0xc0 [ 763.520633][T10350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.520654][T10350] RIP: 0033:0x7fb0b23de0d9 [ 763.520675][T10350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.520693][T10350] RSP: 002b:00007fb0b0636028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 763.520717][T10350] RAX: ffffffffffffffda RBX: 00007fb0b2665fa0 RCX: 00007fb0b23de0d9 [ 763.520733][T10350] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 763.520748][T10350] RBP: 00007fb0b0636090 R08: 0000000000000000 R09: 0000000000000000 [ 763.520762][T10350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.520775][T10350] R13: 00007fb0b2666038 R14: 00007fb0b2665fa0 R15: 00007ffeaa6b38f8 [ 763.520810][T10350] [ 763.809900][T10343] Dev loop4: unable to read RDB block 7 [ 763.809963][T10343] loop4: AHDI p3 [ 763.810004][T10343] loop4: partition table partially beyond EOD, truncated [ 764.044284][ T9588] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 764.093176][ T9588] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 764.118118][ T9588] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 764.123487][ T9588] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 764.127538][ T9588] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 764.208949][ T6210] usb 4-1: USB disconnect, device number 20 [ 765.307944][T10379] kvm: kvm [10377]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffc900000000 [ 765.323660][T10379] kvm: kvm [10377]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xfefd00000000 [ 765.323762][T10379] kvm: kvm [10377]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 766.635474][ T59] Bluetooth: hci2: command tx timeout [ 768.716545][ T59] Bluetooth: hci2: command tx timeout [ 769.250037][T10409] Bluetooth: MGMT ver 1.23 [ 769.268438][T10409] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1002'. [ 769.802319][T10415] binder: BINDER_SET_CONTEXT_MGR already set [ 769.802339][T10415] binder: 10406:10415 ioctl 4018620d 200000004a80 returned -16 [ 770.796069][ T59] Bluetooth: hci2: command tx timeout [ 771.005594][T10427] nvme_fabrics: missing parameter 'transport=%s' [ 772.875202][ T59] Bluetooth: hci2: command tx timeout [ 773.097673][T10452] FAULT_INJECTION: forcing a failure. [ 773.097673][T10452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.097714][T10452] CPU: 0 UID: 0 PID: 10452 Comm: syz.3.1007 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 773.097746][T10452] Tainted: [L]=SOFTLOCKUP [ 773.097753][T10452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 773.097765][T10452] Call Trace: [ 773.097772][T10452] [ 773.097780][T10452] dump_stack_lvl+0xe8/0x150 [ 773.097815][T10452] should_fail_ex+0x467/0x600 [ 773.097861][T10452] _copy_from_user+0x2d/0xb0 [ 773.097889][T10452] memdup_user_nul+0x66/0x110 [ 773.098036][T10452] nvmf_dev_write+0x131/0x2d90 [ 773.098120][T10452] ? is_bpf_text_address+0x292/0x2b0 [ 773.098144][T10452] ? is_bpf_text_address+0x26/0x2b0 [ 773.098170][T10452] ? kernel_text_address+0xa5/0xe0 [ 773.098206][T10452] ? __kernel_text_address+0xd/0x30 [ 773.098237][T10452] ? unwind_get_return_address+0x4d/0x90 [ 773.098261][T10452] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 773.098352][T10452] ? __lock_acquire+0x683/0x2ce0 [ 773.098377][T10452] ? _parse_integer_limit+0x192/0x1e0 [ 773.098411][T10452] ? __pfx_nvmf_dev_write+0x10/0x10 [ 773.098432][T10452] ? kstrtoull+0x12f/0x1d0 [ 773.098461][T10452] ? kstrtouint+0x6e/0xe0 [ 773.098488][T10452] ? get_pid_task+0x20/0x1f0 [ 773.098514][T10452] ? __lock_acquire+0x683/0x2ce0 [ 773.098538][T10452] ? __lock_acquire+0x683/0x2ce0 [ 773.098563][T10452] ? bpf_lsm_file_permission+0x9/0x20 [ 773.098612][T10452] ? security_file_permission+0x75/0x260 [ 773.098632][T10452] ? rw_verify_area+0x209/0x4d0 [ 773.098655][T10452] ? __pfx_nvmf_dev_write+0x10/0x10 [ 773.098672][T10452] vfs_write+0x29f/0xbb0 [ 773.098700][T10452] ? __pfx_vfs_write+0x10/0x10 [ 773.098723][T10452] ? __fget_files+0x2a/0x420 [ 773.098745][T10452] ? __fget_files+0x2a/0x420 [ 773.098762][T10452] ? __fget_files+0x3a8/0x420 [ 773.098779][T10452] ? __fget_files+0x2a/0x420 [ 773.098806][T10452] ksys_write+0x156/0x270 [ 773.098830][T10452] ? __pfx_ksys_write+0x10/0x10 [ 773.098869][T10452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.098889][T10452] do_syscall_64+0x174/0x580 [ 773.098911][T10452] ? trace_irq_disable+0x3b/0x140 [ 773.098938][T10452] ? clear_bhb_loop+0x70/0xc0 [ 773.098960][T10452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.098978][T10452] RIP: 0033:0x7f8f7b91e0d9 [ 773.098995][T10452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.099011][T10452] RSP: 002b:00007f8f79b76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 773.099030][T10452] RAX: ffffffffffffffda RBX: 00007f8f7bba5fa0 RCX: 00007f8f7b91e0d9 [ 773.099044][T10452] RDX: 0000000000000005 RSI: 0000200000000680 RDI: 0000000000000003 [ 773.099054][T10452] RBP: 00007f8f79b76090 R08: 0000000000000000 R09: 0000000000000000 [ 773.099064][T10452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.099074][T10452] R13: 00007f8f7bba6038 R14: 00007f8f7bba5fa0 R15: 00007ffd7514a5e8 [ 773.099103][T10452] [ 773.713470][ T9588] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 773.771537][ T9588] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 773.806366][ T9588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 773.808216][ T9588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 773.813847][ T9588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 774.548404][T10470] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 774.690011][T10473] gadgetfs: bound to dummy_udc driver [ 775.031635][ T199] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 775.032363][ C0] gadgetfs: connected [ 775.033393][ T199] gadgetfs: disconnected [ 775.285709][ C0] gadgetfs: connected [ 775.288811][ T199] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 775.294420][ T199] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 775.294561][ T199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.943423][ T59] Bluetooth: hci1: command tx timeout [ 776.234375][ C0] gadgetfs: configuration #1 [ 776.235307][T10473] gadgetfs: suspended from state 3 [ 776.274421][T10473] gadgetfs: disconnected [ 776.280480][ T199] usb 1-1: USB disconnect, device number 32 [ 776.511262][T10478] kvm: kvm [10477]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffc900000000 [ 776.551587][T10483] kvm: kvm [10482]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x500000000 [ 776.677959][T10483] kvm: kvm [10482]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x500000000 [ 776.704341][T10483] kvm: kvm [10482]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x500000000 [ 776.727423][T10483] kvm: kvm [10482]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x500000000 [ 776.732721][T10483] kvm: kvm [10482]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x500000000 [ 776.764539][T10483] kvm: kvm [10482]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x500000000 [ 776.764644][T10483] kvm: kvm [10482]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 776.798957][T10483] kvm: kvm [10482]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x500000000 [ 776.799059][T10483] kvm: kvm [10482]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 777.995204][ T59] Bluetooth: hci1: command tx timeout [ 779.207910][T10521] FAULT_INJECTION: forcing a failure. [ 779.207910][T10521] name failslab, interval 1, probability 0, space 0, times 0 [ 779.207949][T10521] CPU: 1 UID: 0 PID: 10521 Comm: syz.5.1018 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 779.207980][T10521] Tainted: [L]=SOFTLOCKUP [ 779.207987][T10521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 779.207998][T10521] Call Trace: [ 779.208007][T10521] [ 779.208016][T10521] dump_stack_lvl+0xe8/0x150 [ 779.208054][T10521] should_fail_ex+0x467/0x600 [ 779.208092][T10521] should_failslab+0xa8/0x100 [ 779.208117][T10521] kmem_cache_alloc_node_noprof+0xae/0x670 [ 779.208151][T10521] ? __alloc_skb+0x1d7/0x7a0 [ 779.208173][T10521] ? __alloc_skb+0x1d7/0x7a0 [ 779.208202][T10521] __alloc_skb+0x1d7/0x7a0 [ 779.208239][T10521] netlink_sendmsg+0x5d4/0xb40 [ 779.208277][T10521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.208307][T10521] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 779.208336][T10521] ? __kernel_text_address+0xd/0x30 [ 779.208367][T10521] ? unwind_get_return_address+0x4d/0x90 [ 779.208392][T10521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.208417][T10521] sock_sendmsg_nosec+0x13a/0x180 [ 779.208452][T10521] ____sys_sendmsg+0x565/0x870 [ 779.208478][T10521] ? __might_fault+0xaf/0x130 [ 779.208504][T10521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 779.208540][T10521] ? import_iovec+0x73/0xa0 [ 779.208568][T10521] ___sys_sendmsg+0x2a5/0x360 [ 779.208592][T10521] ? __lock_acquire+0x683/0x2ce0 [ 779.208617][T10521] ? __pfx____sys_sendmsg+0x10/0x10 [ 779.208680][T10521] ? __fget_files+0x2a/0x420 [ 779.208702][T10521] ? __fget_files+0x3a8/0x420 [ 779.208734][T10521] __x64_sys_sendmsg+0x1b7/0x290 [ 779.208760][T10521] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 779.208799][T10521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.208818][T10521] do_syscall_64+0x174/0x580 [ 779.208840][T10521] ? trace_irq_disable+0x3b/0x140 [ 779.208867][T10521] ? clear_bhb_loop+0x70/0xc0 [ 779.208888][T10521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.208905][T10521] RIP: 0033:0x7fb0b23de0d9 [ 779.208922][T10521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.208938][T10521] RSP: 002b:00007fb0b0636028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.208958][T10521] RAX: ffffffffffffffda RBX: 00007fb0b2665fa0 RCX: 00007fb0b23de0d9 [ 779.208972][T10521] RDX: 0000000004008804 RSI: 00002000000001c0 RDI: 0000000000000003 [ 779.208983][T10521] RBP: 00007fb0b0636090 R08: 0000000000000000 R09: 0000000000000000 [ 779.208994][T10521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.209005][T10521] R13: 00007fb0b2666038 R14: 00007fb0b2665fa0 R15: 00007ffeaa6b38f8 [ 779.209034][T10521] [ 779.733004][T10528] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1020'. [ 781.497557][ T59] Bluetooth: hci1: command tx timeout [ 781.737033][T10355] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.738797][T10355] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.739049][T10355] bridge_slave_0: entered allmulticast mode [ 781.776189][T10355] bridge_slave_0: entered promiscuous mode [ 781.819284][T10355] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.819427][T10355] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.819665][T10355] bridge_slave_1: entered allmulticast mode [ 781.847583][T10355] bridge_slave_1: entered promiscuous mode [ 781.994551][T10355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.036487][T10355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.097021][T10355] team0: Port device team_slave_0 added [ 782.100722][T10355] team0: Port device team_slave_1 added [ 783.494382][T10355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.494402][T10355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.494429][T10355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.516507][ T59] Bluetooth: hci1: command tx timeout [ 784.421503][T10355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.421522][T10355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.421553][T10355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.829835][T10564] netlink: 'syz.1.1032': attribute type 11 has an invalid length. [ 784.838731][T10563] netlink: 'syz.5.1031': attribute type 2 has an invalid length. [ 784.988826][T10568] binder: BINDER_SET_CONTEXT_MGR already set [ 784.988843][T10568] binder: 10561:10568 ioctl 4018620d 200000004a80 returned -16 [ 785.449172][T10355] hsr_slave_0: entered promiscuous mode [ 785.450141][T10355] hsr_slave_1: entered promiscuous mode [ 787.275637][ T3310] bridge_slave_1: left allmulticast mode [ 787.275678][ T3310] bridge_slave_1: left promiscuous mode [ 787.277070][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.388233][ T3310] bridge_slave_0: left allmulticast mode [ 787.388275][ T3310] bridge_slave_0: left promiscuous mode [ 787.388563][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.705226][ T998] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 787.845640][ T998] usb 6-1: device descriptor read/64, error -71 [ 788.548913][T10589] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 788.549522][ T3310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.587135][ T998] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 788.761753][T10590] gadgetfs: bound to dummy_udc driver [ 788.889628][ T998] usb 6-1: device descriptor read/64, error -71 [ 789.007309][ T998] usb usb6-port1: attempt power cycle [ 789.045819][T10201] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 789.046371][ C1] gadgetfs: connected [ 789.047054][T10201] gadgetfs: disconnected [ 789.196323][ C1] gadgetfs: connected [ 789.213998][T10201] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 789.227795][T10201] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 789.228103][T10201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.378501][ C1] gadgetfs: configuration #1 [ 789.720307][ T998] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 790.513268][ T3310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.519486][T10587] gadgetfs: suspended from state 3 [ 790.527890][T10587] gadgetfs: disconnected [ 790.571343][T10201] usb 1-1: USB disconnect, device number 33 [ 790.701524][ T3310] bond0 (unregistering): Released all slaves [ 791.396033][ T998] usb 6-1: device descriptor read/8, error -71 [ 792.446679][T10604] syz.3.1040 (10604): drop_caches: 2 [ 793.245599][T10608] FAULT_INJECTION: forcing a failure. [ 793.245599][T10608] name failslab, interval 1, probability 0, space 0, times 0 [ 793.245640][T10608] CPU: 1 UID: 0 PID: 10608 Comm: syz.5.1041 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 793.245670][T10608] Tainted: [L]=SOFTLOCKUP [ 793.245678][T10608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 793.245690][T10608] Call Trace: [ 793.245699][T10608] [ 793.245709][T10608] dump_stack_lvl+0xe8/0x150 [ 793.245747][T10608] should_fail_ex+0x467/0x600 [ 793.245787][T10608] should_failslab+0xa8/0x100 [ 793.245813][T10608] __kmalloc_cache_node_noprof+0xa9/0x6a0 [ 793.245840][T10608] ? __get_vm_area_node+0x136/0x300 [ 793.245957][T10608] ? __get_vm_area_node+0x136/0x300 [ 793.245996][T10608] __get_vm_area_node+0x136/0x300 [ 793.246033][T10608] __vmalloc_node_range_noprof+0x358/0x1730 [ 793.246068][T10608] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 793.246098][T10608] ? is_bpf_text_address+0x26/0x2b0 [ 793.246150][T10608] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 793.246187][T10608] ? is_bpf_text_address+0x26/0x2b0 [ 793.246213][T10608] ? kernel_text_address+0xa5/0xe0 [ 793.246254][T10608] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 793.246274][T10608] __vmalloc_noprof+0xd2/0x120 [ 793.246307][T10608] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 793.246332][T10608] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 793.246353][T10608] ? bpf_prog_alloc+0x2a/0x1a0 [ 793.246376][T10608] bpf_prog_alloc+0x3c/0x1a0 [ 793.246401][T10608] bpf_prog_load+0x7f8/0x1c00 [ 793.246437][T10608] ? __pfx_bpf_prog_load+0x10/0x10 [ 793.246487][T10608] __sys_bpf+0xd0d/0xd90 [ 793.246517][T10608] ? __pfx___sys_bpf+0x10/0x10 [ 793.246541][T10608] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 793.246575][T10608] ? rt_mutex_slowunlock+0x219/0x460 [ 793.246618][T10608] ? ksys_write+0x248/0x270 [ 793.246646][T10608] ? __pfx_ksys_write+0x10/0x10 [ 793.246678][T10608] __x64_sys_bpf+0xba/0xd0 [ 793.246711][T10608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.246734][T10608] do_syscall_64+0x174/0x580 [ 793.246762][T10608] ? trace_irq_disable+0x3b/0x140 [ 793.246795][T10608] ? clear_bhb_loop+0x70/0xc0 [ 793.246829][T10608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.246850][T10608] RIP: 0033:0x7fb0b23de0d9 [ 793.246871][T10608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.246898][T10608] RSP: 002b:00007fb0b0636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 793.246922][T10608] RAX: ffffffffffffffda RBX: 00007fb0b2665fa0 RCX: 00007fb0b23de0d9 [ 793.246938][T10608] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 793.246952][T10608] RBP: 00007fb0b0636090 R08: 0000000000000000 R09: 0000000000000000 [ 793.246966][T10608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.246979][T10608] R13: 00007fb0b2666038 R14: 00007fb0b2665fa0 R15: 00007ffeaa6b38f8 [ 793.247013][T10608] [ 793.310332][T10608] syz.5.1041: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 793.310623][T10608] CPU: 0 UID: 0 PID: 10608 Comm: syz.5.1041 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 793.310663][T10608] Tainted: [L]=SOFTLOCKUP [ 793.310670][T10608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 793.310681][T10608] Call Trace: [ 793.310689][T10608] [ 793.310696][T10608] dump_stack_lvl+0xe8/0x150 [ 793.310731][T10608] warn_alloc+0x24c/0x270 [ 793.310825][T10608] ? __pfx_warn_alloc+0x10/0x10 [ 793.310854][T10608] ? __get_vm_area_node+0x2af/0x300 [ 793.310888][T10608] __vmalloc_node_range_noprof+0x37d/0x1730 [ 793.310924][T10608] ? is_bpf_text_address+0x26/0x2b0 [ 793.310963][T10608] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 793.310991][T10608] ? is_bpf_text_address+0x26/0x2b0 [ 793.311015][T10608] ? kernel_text_address+0xa5/0xe0 [ 793.311050][T10608] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 793.311068][T10608] __vmalloc_noprof+0xd2/0x120 [ 793.311097][T10608] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 793.311119][T10608] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 793.311136][T10608] ? bpf_prog_alloc+0x2a/0x1a0 [ 793.311161][T10608] bpf_prog_alloc+0x3c/0x1a0 [ 793.311183][T10608] bpf_prog_load+0x7f8/0x1c00 [ 793.311214][T10608] ? __pfx_bpf_prog_load+0x10/0x10 [ 793.311258][T10608] __sys_bpf+0xd0d/0xd90 [ 793.311285][T10608] ? __pfx___sys_bpf+0x10/0x10 [ 793.311305][T10608] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 793.311336][T10608] ? rt_mutex_slowunlock+0x219/0x460 [ 793.311374][T10608] ? ksys_write+0x248/0x270 [ 793.311399][T10608] ? __pfx_ksys_write+0x10/0x10 [ 793.311427][T10608] __x64_sys_bpf+0xba/0xd0 [ 793.311454][T10608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.311475][T10608] do_syscall_64+0x174/0x580 [ 793.311499][T10608] ? trace_irq_disable+0x3b/0x140 [ 793.311527][T10608] ? clear_bhb_loop+0x70/0xc0 [ 793.311550][T10608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.311569][T10608] RIP: 0033:0x7fb0b23de0d9 [ 793.311588][T10608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.311604][T10608] RSP: 002b:00007fb0b0636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 793.311624][T10608] RAX: ffffffffffffffda RBX: 00007fb0b2665fa0 RCX: 00007fb0b23de0d9 [ 793.311638][T10608] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 793.311657][T10608] RBP: 00007fb0b0636090 R08: 0000000000000000 R09: 0000000000000000 [ 793.311669][T10608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.311681][T10608] R13: 00007fb0b2666038 R14: 00007fb0b2665fa0 R15: 00007ffeaa6b38f8 [ 793.311711][T10608] [ 793.317306][T10608] Mem-Info: [ 793.317318][T10608] active_anon:203 inactive_anon:6811 isolated_anon:0 [ 793.317318][T10608] active_file:21831 inactive_file:40282 isolated_file:0 [ 793.317318][T10608] unevictable:0 dirty:129 writeback:0 [ 793.317318][T10608] slab_reclaimable:7180 slab_unreclaimable:103460 [ 793.317318][T10608] mapped:30383 shmem:537 pagetables:1659 [ 793.317318][T10608] sec_pagetables:0 bounce:0 [ 793.317318][T10608] kernel_misc_reclaimable:0 [ 793.317318][T10608] free:1219530 free_pcp:2086 free_cma:0 [ 793.317369][T10608] Node 0 active_anon:812kB inactive_anon:27244kB active_file:87120kB inactive_file:161128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121532kB dirty:516kB writeback:0kB shmem:2148kB kernel_stack:13412kB pagetables:6516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 793.317416][T10608] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 793.317459][T10608] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 793.317515][T10608] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 793.317548][T10608] Node 0 DMA32 free:917152kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:812kB inactive_anon:27244kB active_file:87120kB inactive_file:161128kB unevictable:0kB writepending:516kB zspages:0kB present:3129332kB managed:2560432kB mlocked:0kB bounce:0kB free_pcp:8336kB local_pcp:5592kB free_cma:0kB [ 793.317621][T10608] lowmem_reserve[]: 0 0 1 1 1 [ 793.317660][T10608] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1848kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 793.317713][T10608] lowmem_reserve[]: 0 0 0 0 0 [ 793.317743][T10608] Node 1 Normal free:3945608kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 793.317796][T10608] lowmem_reserve[]: 0 0 0 0 0 [ 793.317826][T10608] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 793.317936][T10608] Node 0 DMA32: 2047*4kB (UM) 1224*8kB (UME) 686*16kB (UME) 658*32kB (UME) 393*64kB (UME) 240*128kB (UME) 91*256kB (UME) 53*512kB (ME) 35*1024kB (UME) 16*2048kB (M) 169*4096kB (UM) = 917148kB [ 793.318084][T10608] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 793.318176][T10608] Node 1 Normal: 0*4kB 5*8kB (UM) 6*16kB (UM) 8*32kB (UM) 8*64kB (UM) 8*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3945608kB [ 793.318591][T10608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 793.318607][T10608] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 793.318622][T10608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 793.318637][T10608] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 793.318661][T10608] 62646 total pagecache pages [ 793.318668][T10608] 0 pages in swap cache [ 793.318675][T10608] Free swap = 124996kB [ 793.318682][T10608] Total swap = 124996kB [ 793.318690][T10608] 2097051 pages RAM [ 793.318696][T10608] 0 pages HighMem/MovableOnly [ 793.318703][T10608] 424866 pages reserved [ 793.318709][T10608] 0 pages cma reserved [ 793.595890][T10612] netlink: 'syz.3.1042': attribute type 2 has an invalid length. [ 793.701952][T10614] binder: BINDER_SET_CONTEXT_MGR already set [ 793.701968][T10614] binder: 10611:10614 ioctl 4018620d 200000004a80 returned -16 [ 793.745180][ T5785] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 793.745675][ T3310] hsr_slave_0: left promiscuous mode [ 793.892036][ T3310] hsr_slave_1: left promiscuous mode [ 793.894266][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.895162][ T5785] usb 6-1: Using ep0 maxpacket: 16 [ 793.896211][ T5785] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 793.898303][ T5785] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 793.898341][ T5785] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 793.902272][ T5785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.902295][ T5785] usb 6-1: Product: syz [ 793.902316][ T5785] usb 6-1: Manufacturer: syz [ 793.902331][ T5785] usb 6-1: SerialNumber: syz [ 793.911797][ T5785] usb 6-1: config 0 descriptor?? [ 793.952147][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.981385][ T5785] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 794.168672][ T5785] usb 6-1: USB disconnect, device number 27 [ 794.408275][ T1017] usb 6-1: Failed to submit usb control message: -71 [ 794.408315][ T1017] usb 6-1: unable to send the bmi data to the device: -71 [ 794.408333][ T1017] usb 6-1: unable to get target info from device [ 794.408361][ T1017] usb 6-1: could not get target info (-71) [ 794.408380][ T1017] usb 6-1: could not probe fw (-71) [ 796.441128][T10629] FAULT_INJECTION: forcing a failure. [ 796.441128][T10629] name failslab, interval 1, probability 0, space 0, times 0 [ 796.441169][T10629] CPU: 1 UID: 0 PID: 10629 Comm: syz.5.1046 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 796.441200][T10629] Tainted: [L]=SOFTLOCKUP [ 796.441208][T10629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 796.441221][T10629] Call Trace: [ 796.441230][T10629] [ 796.441240][T10629] dump_stack_lvl+0xe8/0x150 [ 796.441279][T10629] should_fail_ex+0x467/0x600 [ 796.441319][T10629] should_failslab+0xa8/0x100 [ 796.441346][T10629] __kvmalloc_node_noprof+0x17a/0x8a0 [ 796.441375][T10629] ? vmemdup_user+0x2b/0xd0 [ 796.441402][T10629] ? vmemdup_user+0x2b/0xd0 [ 796.441441][T10629] vmemdup_user+0x2b/0xd0 [ 796.441470][T10629] path_setxattrat+0x2d0/0x450 [ 796.441576][T10629] ? __pfx_path_setxattrat+0x10/0x10 [ 796.441634][T10629] ? ksys_write+0x248/0x270 [ 796.441664][T10629] ? __pfx_ksys_write+0x10/0x10 [ 796.441696][T10629] __x64_sys_lsetxattr+0xbf/0xe0 [ 796.441724][T10629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.441749][T10629] do_syscall_64+0x174/0x580 [ 796.441778][T10629] ? trace_irq_disable+0x3b/0x140 [ 796.441812][T10629] ? clear_bhb_loop+0x70/0xc0 [ 796.441840][T10629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.441862][T10629] RIP: 0033:0x7fb0b23de0d9 [ 796.441883][T10629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.441902][T10629] RSP: 002b:00007fb0b0636028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 796.441926][T10629] RAX: ffffffffffffffda RBX: 00007fb0b2665fa0 RCX: 00007fb0b23de0d9 [ 796.441942][T10629] RDX: 00002000000002c0 RSI: 0000200000000340 RDI: 0000200000000000 [ 796.441957][T10629] RBP: 00007fb0b0636090 R08: 0000000000000002 R09: 0000000000000000 [ 796.441970][T10629] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 796.441984][T10629] R13: 00007fb0b2666038 R14: 00007fb0b2665fa0 R15: 00007ffeaa6b38f8 [ 796.442019][T10629] [ 796.760741][ T3310] team0 (unregistering): Port device team_slave_1 removed [ 796.806367][ T3310] team0 (unregistering): Port device team_slave_0 removed [ 798.735896][T10648] syz.5.1052 (10648): drop_caches: 2 [ 799.409354][T10654] netlink: 'syz.5.1053': attribute type 2 has an invalid length. [ 799.526494][T10663] binder: BINDER_SET_CONTEXT_MGR already set [ 799.526510][T10663] binder: 10650:10663 ioctl 4018620d 200000004a80 returned -16 [ 799.531336][T10458] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.531527][T10458] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.531781][T10458] bridge_slave_0: entered allmulticast mode [ 799.580663][T10458] bridge_slave_0: entered promiscuous mode [ 799.631243][T10458] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.631499][T10458] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.631750][T10458] bridge_slave_1: entered allmulticast mode [ 799.657823][T10458] bridge_slave_1: entered promiscuous mode [ 802.279646][T10458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.301634][T10458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.412010][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13 [ 804.428336][T10458] team0: Port device team_slave_0 added [ 804.462539][T10458] team0: Port device team_slave_1 added [ 805.106332][T10693] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 805.163514][T10694] gadgetfs: bound to dummy_udc driver [ 805.712107][ T5828] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 805.712814][ C0] gadgetfs: connected [ 805.732374][ T5828] gadgetfs: disconnected [ 805.935774][ C0] gadgetfs: connected [ 805.950090][ T5828] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 805.956276][ T5828] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 805.956366][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.244897][ C0] gadgetfs: configuration #1 [ 806.258758][T10691] gadgetfs: suspended from state 3 [ 806.260968][T10691] gadgetfs: disconnected [ 806.456016][ T5828] usb 1-1: USB disconnect, device number 34 [ 806.686620][T10458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.686639][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.686669][T10458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.788961][T10458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.788981][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.789011][T10458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.041613][T10458] hsr_slave_0: entered promiscuous mode [ 807.043539][T10458] hsr_slave_1: entered promiscuous mode [ 807.044589][T10458] debugfs: 'hsr0' already exists in 'hsr' [ 807.044615][T10458] Cannot create hsr debugfs directory [ 807.196690][ T5828] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 807.442001][ T5828] usb 4-1: Using ep0 maxpacket: 8 [ 807.444701][ T5828] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 807.475895][ T5828] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 807.475926][ T5828] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 807.478493][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.478520][ T5828] usb 4-1: Product: syz [ 807.478533][ T5828] usb 4-1: Manufacturer: syz [ 807.478548][ T5828] usb 4-1: SerialNumber: syz [ 810.268662][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.268740][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.683342][T10696] tipc: Started in network mode [ 810.683368][T10696] tipc: Node identity 2007ff, cluster identity 4711 [ 810.683382][T10696] tipc: Node number set to 2099199 [ 813.057733][T10729] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 813.368103][T10731] gadgetfs: bound to dummy_udc driver [ 814.095323][ T998] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 814.095915][ C1] gadgetfs: connected [ 814.096549][ T998] gadgetfs: disconnected [ 814.455974][ C1] gadgetfs: connected [ 814.459007][ T998] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 814.460206][ T998] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 814.460387][ T998] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.071214][ C1] gadgetfs: configuration #1 [ 816.730526][T10727] gadgetfs: suspended from state 3 [ 816.730586][T10727] gadgetfs: disconnected [ 816.736652][T10201] usb 1-1: USB disconnect, device number 35 [ 816.757415][ T5828] usb 4-1: USB disconnect, device number 21 [ 816.842310][T10736] netlink: 'syz.1.1056': attribute type 2 has an invalid length. [ 817.297120][T10736] binder: BINDER_SET_CONTEXT_MGR already set [ 817.297138][T10736] binder: 10733:10736 ioctl 4018620d 200000004a80 returned -16 [ 817.481514][T10141] udevd[10141]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 817.710611][T10745] FAULT_INJECTION: forcing a failure. [ 817.710611][T10745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.710648][T10745] CPU: 1 UID: 0 PID: 10745 Comm: syz.3.1069 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 817.710673][T10745] Tainted: [L]=SOFTLOCKUP [ 817.710679][T10745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 817.710690][T10745] Call Trace: [ 817.710697][T10745] [ 817.710705][T10745] dump_stack_lvl+0xe8/0x150 [ 817.710739][T10745] should_fail_ex+0x467/0x600 [ 817.710771][T10745] _copy_from_user+0x2d/0xb0 [ 817.710794][T10745] do_sock_getsockopt+0x200/0x7e0 [ 817.710825][T10745] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 817.710865][T10745] ? __fget_files+0x3a8/0x420 [ 817.710885][T10745] ? __fget_files+0x2a/0x420 [ 817.710909][T10745] __x64_sys_getsockopt+0x1aa/0x250 [ 817.710938][T10745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.710957][T10745] do_syscall_64+0x174/0x580 [ 817.710979][T10745] ? trace_irq_disable+0x3b/0x140 [ 817.711006][T10745] ? clear_bhb_loop+0x70/0xc0 [ 817.711028][T10745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.711045][T10745] RIP: 0033:0x7f8f7b91e0d9 [ 817.711064][T10745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.711080][T10745] RSP: 002b:00007f8f79b55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 817.711100][T10745] RAX: ffffffffffffffda RBX: 00007f8f7bba6090 RCX: 00007f8f7b91e0d9 [ 817.711115][T10745] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003 [ 817.711125][T10745] RBP: 00007f8f79b55090 R08: 0000200000001040 R09: 0000000000000000 [ 817.711137][T10745] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.711147][T10745] R13: 00007f8f7bba6128 R14: 00007f8f7bba6090 R15: 00007ffd7514a5e8 [ 817.711179][T10745] [ 818.120954][ T9588] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 818.145150][T10355] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 818.167227][ T9588] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 818.172424][ T9588] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 818.176802][ T9588] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 818.191030][ T9588] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 818.389460][T10355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 818.429582][T10355] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 818.604827][T10355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 818.611357][T10355] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 818.731395][T10355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 818.739218][T10355] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 818.774119][T10355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 820.186423][T10201] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 820.307204][ T5771] IPVS: starting estimator thread 0... [ 820.340194][T10201] usb 6-1: New USB device found, idVendor=056a, idProduct=da2f, bcdDevice=76.4b [ 820.341781][T10201] usb 6-1: config 0 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 820.341817][T10201] usb 6-1: config 0 interface 0 altsetting 238 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.341841][T10201] usb 6-1: config 0 interface 0 has no altsetting 0 [ 820.343351][T10201] usb 6-1: New USB device strings: Mfr=81, Product=0, SerialNumber=0 [ 820.343377][T10201] usb 6-1: Manufacturer: syz [ 820.396133][ T9588] Bluetooth: hci3: command tx timeout [ 820.406291][T10786] IPVS: using max 8 ests per chain, 19200 per kthread [ 820.431849][T10201] usb 6-1: config 0 descriptor?? [ 820.919859][T10201] wacom 0003:056A:DA2F.0002: unknown main item tag 0x2 [ 820.919904][T10201] wacom 0003:056A:DA2F.0002: unknown main item tag 0x1 [ 820.920167][T10201] wacom 0003:056A:DA2F.0002: ignoring exceeding usage max [ 821.076251][ T43] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 821.081387][ T5785] usb 6-1: USB disconnect, device number 28 [ 821.225142][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 821.228259][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 821.228318][ T43] usb 4-1: New USB device found, idVendor=257a, idProduct=260d, bcdDevice=a3.d2 [ 821.229855][ T43] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 821.229880][ T43] usb 4-1: config 0 has no interface number 0 [ 821.229914][ T43] usb 4-1: config 0 interface 83 has no altsetting 0 [ 821.266672][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.266703][ T43] usb 4-1: Product: syz [ 821.266718][ T43] usb 4-1: Manufacturer: syz [ 821.266733][ T43] usb 4-1: SerialNumber: syz [ 821.403123][ T43] usb 4-1: config 0 descriptor?? [ 821.555326][ T3310] bridge_slave_1: left allmulticast mode [ 821.555366][ T3310] bridge_slave_1: left promiscuous mode [ 821.555657][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.661158][ T43] option 4-1:0.83: GSM modem (1-port) converter detected [ 821.723006][ T3310] bridge_slave_0: left allmulticast mode [ 821.723043][ T3310] bridge_slave_0: left promiscuous mode [ 821.723341][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.769636][ T43] usb 4-1: USB disconnect, device number 22 [ 821.782712][ T43] option 4-1:0.83: device disconnected [ 822.385193][ T43] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 822.403675][ T3310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.485116][ T9588] Bluetooth: hci3: command tx timeout [ 822.595106][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 822.598223][ T43] usb 6-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 822.603996][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.604032][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.604055][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 822.604093][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.669276][ T43] usb 6-1: config 0 descriptor?? [ 822.906816][ T43] usbhid 6-1:0.0: can't add hid device: -71 [ 822.906956][ T43] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 822.930117][ T43] usb 6-1: USB disconnect, device number 29 [ 823.036186][ T3310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.117228][ T3310] bond0 (unregistering): Released all slaves [ 823.181899][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13 [ 823.885673][ T3310] hsr_slave_0: left promiscuous mode [ 823.929589][ T3310] hsr_slave_1: left promiscuous mode [ 823.930732][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.978140][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.555216][ T9588] Bluetooth: hci3: command tx timeout [ 824.900789][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 824.903717][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 824.906295][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 824.915364][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 824.966822][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 825.590580][T10839] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 825.989863][ T3310] team0 (unregistering): Port device team_slave_1 removed [ 826.527680][ T5785] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 826.577857][ T3310] team0 (unregistering): Port device team_slave_0 removed [ 826.635150][ T59] Bluetooth: hci3: command tx timeout [ 826.686964][ T5785] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 826.687930][ T5785] usb 4-1: config 0 has no interfaces? [ 826.687969][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.731270][ T5785] usb 4-1: config 0 descriptor?? [ 827.042024][ T59] Bluetooth: hci0: command tx timeout [ 829.115451][ T59] Bluetooth: hci0: command tx timeout [ 829.531393][ T5785] usb 4-1: string descriptor 0 read error: -71 [ 829.569111][ T5785] usb 4-1: USB disconnect, device number 23 [ 829.691056][T10861] FAULT_INJECTION: forcing a failure. [ 829.691056][T10861] name failslab, interval 1, probability 0, space 0, times 0 [ 829.691104][T10861] CPU: 1 UID: 0 PID: 10861 Comm: syz.5.1093 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 829.691135][T10861] Tainted: [L]=SOFTLOCKUP [ 829.691142][T10861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 829.691155][T10861] Call Trace: [ 829.691164][T10861] [ 829.691173][T10861] dump_stack_lvl+0xe8/0x150 [ 829.691212][T10861] should_fail_ex+0x467/0x600 [ 829.691253][T10861] should_failslab+0xa8/0x100 [ 829.691280][T10861] __kmalloc_noprof+0xfe/0x780 [ 829.691303][T10861] ? tomoyo_encode+0x2ad/0x570 [ 829.691328][T10861] ? tomoyo_encode+0x2ad/0x570 [ 829.691362][T10861] tomoyo_encode+0x2ad/0x570 [ 829.691395][T10861] tomoyo_realpath_from_path+0x5fa/0x640 [ 829.691434][T10861] ? tomoyo_path_number_perm+0x219/0x5f0 [ 829.691458][T10861] tomoyo_path_number_perm+0x246/0x5f0 [ 829.691485][T10861] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 829.691507][T10861] ? __lock_acquire+0x683/0x2ce0 [ 829.691546][T10861] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 829.691574][T10861] ? hook_file_ioctl+0x1f3/0x600 [ 829.691604][T10861] ? lockdep_hardirqs_on+0x7a/0x110 [ 829.691655][T10861] ? __fget_files+0x2a/0x420 [ 829.691683][T10861] ? __fget_files+0x2a/0x420 [ 829.691705][T10861] ? __fget_files+0x3a8/0x420 [ 829.691729][T10861] ? __fget_files+0x2a/0x420 [ 829.691761][T10861] security_file_ioctl+0xc3/0x2a0 [ 829.691789][T10861] __se_sys_ioctl+0x47/0x170 [ 829.691820][T10861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.691844][T10861] do_syscall_64+0x174/0x580 [ 829.691871][T10861] ? trace_irq_disable+0x3b/0x140 [ 829.691905][T10861] ? clear_bhb_loop+0x70/0xc0 [ 829.691933][T10861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.691954][T10861] RIP: 0033:0x7fb0b23de0d9 [ 829.691974][T10861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.691993][T10861] RSP: 002b:00007fb0b0615028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 829.692017][T10861] RAX: ffffffffffffffda RBX: 00007fb0b2666090 RCX: 00007fb0b23de0d9 [ 829.692033][T10861] RDX: 0000000000000000 RSI: 000000008040451a RDI: 0000000000000003 [ 829.692048][T10861] RBP: 00007fb0b0615090 R08: 0000000000000000 R09: 0000000000000000 [ 829.692061][T10861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.692075][T10861] R13: 00007fb0b2666128 R14: 00007fb0b2666090 R15: 00007ffeaa6b38f8 [ 829.692118][T10861] [ 829.692167][T10861] ERROR: Out of memory at tomoyo_realpath_from_path. [ 830.182214][T10870] libceph: resolve ' [ 830.182214][T10870] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 830.182214][T10870] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 831.187776][ T5785] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 831.196597][ T59] Bluetooth: hci0: command tx timeout [ 831.337296][ T5785] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 831.338751][ T5785] usb 4-1: config 0 has no interfaces? [ 831.338787][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.363369][ T5785] usb 4-1: config 0 descriptor?? [ 831.996366][T10906] FAULT_INJECTION: forcing a failure. [ 831.996366][T10906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 831.996408][T10906] CPU: 1 UID: 0 PID: 10906 Comm: syz.5.1099 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 831.996438][T10906] Tainted: [L]=SOFTLOCKUP [ 831.996446][T10906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 831.996458][T10906] Call Trace: [ 831.996467][T10906] [ 831.996476][T10906] dump_stack_lvl+0xe8/0x150 [ 831.996525][T10906] should_fail_ex+0x467/0x600 [ 831.996564][T10906] _copy_from_user+0x2d/0xb0 [ 831.996595][T10906] smc_setsockopt+0x3c0/0xb00 [ 831.996717][T10906] ? __pfx_smc_setsockopt+0x10/0x10 [ 831.996745][T10906] ? __fget_files+0x2a/0x420 [ 831.996767][T10906] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 831.996795][T10906] ? __pfx_smc_setsockopt+0x10/0x10 [ 831.996820][T10906] do_sock_setsockopt+0x17c/0x1b0 [ 831.996853][T10906] __x64_sys_setsockopt+0x143/0x1b0 [ 831.996882][T10906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.996905][T10906] do_syscall_64+0x174/0x580 [ 831.996933][T10906] ? trace_irq_disable+0x3b/0x140 [ 831.996965][T10906] ? clear_bhb_loop+0x70/0xc0 [ 831.996992][T10906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.997012][T10906] RIP: 0033:0x7fb0b23de0d9 [ 831.997033][T10906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.997050][T10906] RSP: 002b:00007fb0b05f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 831.997072][T10906] RAX: ffffffffffffffda RBX: 00007fb0b2666180 RCX: 00007fb0b23de0d9 [ 831.997088][T10906] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000003 [ 831.997099][T10906] RBP: 00007fb0b05f4090 R08: 0000000000000004 R09: 0000000000000000 [ 831.997113][T10906] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 831.997125][T10906] R13: 00007fb0b2666218 R14: 00007fb0b2666180 R15: 00007ffeaa6b38f8 [ 831.997158][T10906] [ 832.243182][ T5785] usb 4-1: string descriptor 0 read error: -71 [ 832.259631][ T5785] usb 4-1: USB disconnect, device number 24 [ 833.137386][T10753] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.137511][T10753] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.137745][T10753] bridge_slave_0: entered allmulticast mode [ 833.140761][T10753] bridge_slave_0: entered promiscuous mode [ 833.275203][ T59] Bluetooth: hci0: command tx timeout [ 833.535357][T10753] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.535581][T10753] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.535783][T10753] bridge_slave_1: entered allmulticast mode [ 833.537825][T10753] bridge_slave_1: entered promiscuous mode [ 833.699738][T10753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.906047][T10753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.162837][T10753] team0: Port device team_slave_0 added [ 834.574725][ T9588] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 834.647331][ T9588] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 834.649065][ T9588] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 834.667114][ T9588] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 834.670423][ T9588] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 835.677868][T10753] team0: Port device team_slave_1 added [ 836.735294][T10201] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 836.878848][ T59] Bluetooth: hci2: command tx timeout [ 836.891861][T10201] usb 4-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 836.893500][T10201] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 836.893535][T10201] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 836.893574][T10201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.956592][ T59] Bluetooth: hci2: command tx timeout [ 839.439062][T10201] pegasus 4-1:1.0: can't reset MAC [ 839.439479][T10201] pegasus 4-1:1.0: probe with driver pegasus failed with error -5 [ 839.745736][ T5714] usb 4-1: USB disconnect, device number 25 [ 839.862095][T10753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.862113][T10753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.862141][T10753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.874078][T10753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.874106][T10753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.874131][T10753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.145085][ T5714] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 840.164795][T10753] hsr_slave_0: entered promiscuous mode [ 840.176131][T10753] hsr_slave_1: entered promiscuous mode [ 840.177692][T10753] debugfs: 'hsr0' already exists in 'hsr' [ 840.177720][T10753] Cannot create hsr debugfs directory [ 840.306006][ T5714] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 840.307493][ T5714] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 840.307520][ T5714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.307538][ T5714] usb 4-1: config 0 has no interface number 0 [ 840.355888][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.355919][ T5714] usb 4-1: Product: syz [ 840.355935][ T5714] usb 4-1: Manufacturer: syz [ 840.355950][ T5714] usb 4-1: SerialNumber: syz [ 840.372222][ T5714] usb 4-1: config 0 descriptor?? [ 840.416589][ T5714] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 840.416666][ T5714] uvcvideo 4-1:0.64: No valid video chain found. [ 840.683543][ T43] usb 4-1: USB disconnect, device number 26 [ 841.035236][ T59] Bluetooth: hci2: command tx timeout [ 841.112554][T10826] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.112765][T10826] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.112975][T10826] bridge_slave_0: entered allmulticast mode [ 841.122188][T10826] bridge_slave_0: entered promiscuous mode [ 841.153797][T10826] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.153914][T10826] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.154124][T10826] bridge_slave_1: entered allmulticast mode [ 841.160843][T10826] bridge_slave_1: entered promiscuous mode [ 841.295228][ T43] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 841.445147][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 841.446213][ T43] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 841.448052][ T43] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 841.448079][ T43] usb 6-1: config 0 has no interface number 0 [ 841.448126][ T43] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 841.448152][ T43] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 841.451747][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.451771][ T43] usb 6-1: Product: syz [ 841.451786][ T43] usb 6-1: Manufacturer: syz [ 841.451800][ T43] usb 6-1: SerialNumber: syz [ 841.529983][ T43] usb 6-1: config 0 descriptor?? [ 841.533290][T10999] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 841.533583][T10999] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 841.747556][T10999] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 841.747693][T10999] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 841.803028][T10826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.832942][T10826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.971729][T10999] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1115'. [ 842.218443][ T43] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 842.218479][ T43] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 842.218739][ T43] asix 6-1:0.34: probe with driver asix failed with error -32 [ 842.400969][T10826] team0: Port device team_slave_0 added [ 842.426501][T10826] team0: Port device team_slave_1 added [ 842.703950][T10826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.703970][T10826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.704008][T10826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.782236][T10826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.782255][T10826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.782286][T10826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.049548][T10753] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 843.090422][T10753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 843.125104][ T59] Bluetooth: hci2: command tx timeout [ 843.211837][T10753] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 843.212436][T11022] FAULT_INJECTION: forcing a failure. [ 843.212436][T11022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.212476][T11022] CPU: 1 UID: 0 PID: 11022 Comm: syz.3.1121 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 843.212506][T11022] Tainted: [L]=SOFTLOCKUP [ 843.212514][T11022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 843.212526][T11022] Call Trace: [ 843.212534][T11022] [ 843.212544][T11022] dump_stack_lvl+0xe8/0x150 [ 843.212581][T11022] should_fail_ex+0x467/0x600 [ 843.212620][T11022] _copy_to_user+0x31/0xb0 [ 843.212650][T11022] copy_siginfo_to_user+0x22/0xc0 [ 843.212728][T11022] x64_setup_rt_frame+0x765/0xc50 [ 843.212819][T11022] ? rt_spin_unlock+0x157/0x200 [ 843.212866][T11022] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 843.212906][T11022] arch_do_signal_or_restart+0x45b/0x860 [ 843.212937][T11022] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 843.212974][T11022] ? ksys_read+0x248/0x270 [ 843.213010][T11022] exit_to_user_mode_loop+0x104/0x750 [ 843.213030][T11022] ? rcu_is_watching+0x15/0xb0 [ 843.213086][T11022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.213110][T11022] do_syscall_64+0x353/0x580 [ 843.213137][T11022] ? trace_irq_disable+0x3b/0x140 [ 843.213170][T11022] ? clear_bhb_loop+0x70/0xc0 [ 843.213197][T11022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.213219][T11022] RIP: 0033:0x7f8f7b91e0d9 [ 843.213240][T11022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.213259][T11022] RSP: 002b:00007f8f79b55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 843.213282][T11022] RAX: fffffffffffffffc RBX: 00007f8f7bba6090 RCX: 00007f8f7b91e0d9 [ 843.213298][T11022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 843.213311][T11022] RBP: 00007f8f79b55090 R08: 0000000000000000 R09: 0000000000000000 [ 843.213324][T11022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.213337][T11022] R13: 00007f8f7bba6128 R14: 00007f8f7bba6090 R15: 00007ffd7514a5e8 [ 843.213371][T11022] [ 843.257600][T10753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 843.452511][T10826] hsr_slave_0: entered promiscuous mode [ 843.454156][T10826] hsr_slave_1: entered promiscuous mode [ 843.465790][T10826] debugfs: 'hsr0' already exists in 'hsr' [ 843.465818][T10826] Cannot create hsr debugfs directory [ 843.801549][T11026] FAULT_INJECTION: forcing a failure. [ 843.801549][T11026] name failslab, interval 1, probability 0, space 0, times 0 [ 843.801585][T11026] CPU: 1 UID: 0 PID: 11026 Comm: syz.3.1123 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 843.801613][T11026] Tainted: [L]=SOFTLOCKUP [ 843.801620][T11026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 843.801633][T11026] Call Trace: [ 843.801640][T11026] [ 843.801649][T11026] dump_stack_lvl+0xe8/0x150 [ 843.801685][T11026] should_fail_ex+0x467/0x600 [ 843.801734][T11026] should_failslab+0xa8/0x100 [ 843.801760][T11026] kmem_cache_alloc_node_noprof+0xae/0x670 [ 843.801794][T11026] ? __alloc_skb+0x1d7/0x7a0 [ 843.801818][T11026] ? __alloc_skb+0x1d7/0x7a0 [ 843.801849][T11026] __alloc_skb+0x1d7/0x7a0 [ 843.801876][T11026] netlink_sendmsg+0x5d4/0xb40 [ 843.801910][T11026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.801940][T11026] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 843.801972][T11026] ? __kernel_text_address+0xd/0x30 [ 843.802013][T11026] ? unwind_get_return_address+0x4d/0x90 [ 843.802039][T11026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.802065][T11026] sock_sendmsg_nosec+0x13a/0x180 [ 843.802100][T11026] ____sys_sendmsg+0x565/0x870 [ 843.802126][T11026] ? __might_fault+0xaf/0x130 [ 843.802160][T11026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 843.802197][T11026] ? import_iovec+0x73/0xa0 [ 843.802226][T11026] ___sys_sendmsg+0x2a5/0x360 [ 843.802253][T11026] ? __lock_acquire+0x683/0x2ce0 [ 843.802278][T11026] ? __pfx____sys_sendmsg+0x10/0x10 [ 843.802343][T11026] ? __fget_files+0x2a/0x420 [ 843.802365][T11026] ? __fget_files+0x3a8/0x420 [ 843.802397][T11026] __x64_sys_sendmsg+0x1b7/0x290 [ 843.802428][T11026] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 843.802473][T11026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.802494][T11026] do_syscall_64+0x174/0x580 [ 843.802521][T11026] ? trace_irq_disable+0x3b/0x140 [ 843.802553][T11026] ? clear_bhb_loop+0x70/0xc0 [ 843.802579][T11026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.802598][T11026] RIP: 0033:0x7f8f7b91e0d9 [ 843.802618][T11026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.802637][T11026] RSP: 002b:00007f8f79b76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 843.802659][T11026] RAX: ffffffffffffffda RBX: 00007f8f7bba5fa0 RCX: 00007f8f7b91e0d9 [ 843.802674][T11026] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 843.802687][T11026] RBP: 00007f8f79b76090 R08: 0000000000000000 R09: 0000000000000000 [ 843.802700][T11026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.802712][T11026] R13: 00007f8f7bba6038 R14: 00007f8f7bba5fa0 R15: 00007ffd7514a5e8 [ 843.802743][T11026] [ 843.944378][T11030] FAULT_INJECTION: forcing a failure. [ 843.944378][T11030] name failslab, interval 1, probability 0, space 0, times 0 [ 843.944414][T11030] CPU: 1 UID: 0 PID: 11030 Comm: syz.3.1125 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 843.944442][T11030] Tainted: [L]=SOFTLOCKUP [ 843.944449][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 843.944460][T11030] Call Trace: [ 843.944467][T11030] [ 843.944475][T11030] dump_stack_lvl+0xe8/0x150 [ 843.944509][T11030] should_fail_ex+0x467/0x600 [ 843.944544][T11030] should_failslab+0xa8/0x100 [ 843.944568][T11030] __kmalloc_noprof+0xfe/0x780 [ 843.944589][T11030] ? tomoyo_encode+0x2ad/0x570 [ 843.944611][T11030] ? tomoyo_encode+0x2ad/0x570 [ 843.944640][T11030] tomoyo_encode+0x2ad/0x570 [ 843.944674][T11030] tomoyo_realpath_from_path+0x5fa/0x640 [ 843.944707][T11030] ? tomoyo_path_number_perm+0x219/0x5f0 [ 843.944728][T11030] tomoyo_path_number_perm+0x246/0x5f0 [ 843.944751][T11030] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 843.944769][T11030] ? __lock_acquire+0x683/0x2ce0 [ 843.944803][T11030] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 843.944827][T11030] ? hook_file_ioctl+0x1f3/0x600 [ 843.944853][T11030] ? lockdep_hardirqs_on+0x7a/0x110 [ 843.944898][T11030] ? __fget_files+0x2a/0x420 [ 843.944925][T11030] ? __fget_files+0x2a/0x420 [ 843.944944][T11030] ? __fget_files+0x3a8/0x420 [ 843.944964][T11030] ? __fget_files+0x2a/0x420 [ 843.944991][T11030] security_file_ioctl+0xc3/0x2a0 [ 843.945016][T11030] __se_sys_ioctl+0x47/0x170 [ 843.945041][T11030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.945072][T11030] do_syscall_64+0x174/0x580 [ 843.945096][T11030] ? trace_irq_disable+0x3b/0x140 [ 843.945125][T11030] ? clear_bhb_loop+0x70/0xc0 [ 843.945148][T11030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.945167][T11030] RIP: 0033:0x7f8f7b91e0d9 [ 843.945186][T11030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.945203][T11030] RSP: 002b:00007f8f79b76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 843.945225][T11030] RAX: ffffffffffffffda RBX: 00007f8f7bba5fa0 RCX: 00007f8f7b91e0d9 [ 843.945239][T11030] RDX: 0000200000000400 RSI: 00000000c0145608 RDI: 0000000000000003 [ 843.945252][T11030] RBP: 00007f8f79b76090 R08: 0000000000000000 R09: 0000000000000000 [ 843.945264][T11030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.945275][T11030] R13: 00007f8f7bba6038 R14: 00007f8f7bba5fa0 R15: 00007ffd7514a5e8 [ 843.945307][T11030] [ 843.947724][T11030] ERROR: Out of memory at tomoyo_realpath_from_path. [ 844.361171][ T3310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.422198][T10753] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 844.438081][ T5714] usb 6-1: USB disconnect, device number 30 [ 844.485535][T10753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 844.613808][T10753] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 844.639918][T10753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 844.925141][ T5714] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 845.082342][ T3310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.088075][ T5714] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 845.090327][ T5714] usb 6-1: config 2 has an invalid interface number: 255 but max is 0 [ 845.090355][ T5714] usb 6-1: config 2 has no interface number 0 [ 845.090389][ T5714] usb 6-1: too many endpoints for config 2 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 845.090441][ T5714] usb 6-1: config 2 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 845.090471][ T5714] usb 6-1: config 2 interface 255 has no altsetting 0 [ 845.090507][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.201049][ T5714] ums-realtek 6-1:2.255: USB Mass Storage device detected [ 845.833207][T11062] binder: BINDER_SET_CONTEXT_MGR already set [ 845.833225][T11062] binder: 11061:11062 ioctl 4018620d 200000000040 returned -16 [ 846.079108][ T5714] usb 6-1: USB disconnect, device number 31 [ 846.351636][ T3310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.861980][ T3310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.930566][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13 [ 846.933382][T10930] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.933520][T10930] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.933649][T10930] bridge_slave_0: entered allmulticast mode [ 846.943378][T10930] bridge_slave_0: entered promiscuous mode [ 846.985811][T10930] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.985908][T10930] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.986088][T10930] bridge_slave_1: entered allmulticast mode [ 846.998745][T10930] bridge_slave_1: entered promiscuous mode [ 847.045395][ T5714] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 847.120413][T10930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.142953][T10930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.225138][ T5714] usb 4-1: Using ep0 maxpacket: 8 [ 847.226016][ T5714] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 847.227585][ T5714] usb 4-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 847.227635][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 847.227676][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.239422][T11086] FAULT_INJECTION: forcing a failure. [ 847.239422][T11086] name failslab, interval 1, probability 0, space 0, times 0 [ 847.239456][T11086] CPU: 1 UID: 0 PID: 11086 Comm: syz.5.1133 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 847.239483][T11086] Tainted: [L]=SOFTLOCKUP [ 847.239490][T11086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 847.239501][T11086] Call Trace: [ 847.239508][T11086] [ 847.239516][T11086] dump_stack_lvl+0xe8/0x150 [ 847.239551][T11086] should_fail_ex+0x467/0x600 [ 847.239586][T11086] should_failslab+0xa8/0x100 [ 847.239610][T11086] __kmalloc_noprof+0xfe/0x780 [ 847.239630][T11086] ? tomoyo_encode+0x2ad/0x570 [ 847.239653][T11086] ? tomoyo_encode+0x2ad/0x570 [ 847.239682][T11086] tomoyo_encode+0x2ad/0x570 [ 847.239711][T11086] tomoyo_realpath_from_path+0x5fa/0x640 [ 847.239745][T11086] ? tomoyo_path_number_perm+0x219/0x5f0 [ 847.239765][T11086] tomoyo_path_number_perm+0x246/0x5f0 [ 847.239788][T11086] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 847.239806][T11086] ? __lock_acquire+0x683/0x2ce0 [ 847.239840][T11086] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 847.239864][T11086] ? hook_file_ioctl+0x1f3/0x600 [ 847.239889][T11086] ? lockdep_hardirqs_on+0x7a/0x110 [ 847.239932][T11086] ? __fget_files+0x2a/0x420 [ 847.239956][T11086] ? __fget_files+0x2a/0x420 [ 847.239975][T11086] ? __fget_files+0x3a8/0x420 [ 847.239994][T11086] ? __fget_files+0x2a/0x420 [ 847.240018][T11086] security_file_ioctl+0xc3/0x2a0 [ 847.240049][T11086] __se_sys_ioctl+0x47/0x170 [ 847.240075][T11086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.240097][T11086] do_syscall_64+0x174/0x580 [ 847.240120][T11086] ? trace_irq_disable+0x3b/0x140 [ 847.240149][T11086] ? clear_bhb_loop+0x70/0xc0 [ 847.240172][T11086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.240191][T11086] RIP: 0033:0x7fb0b23de0d9 [ 847.240213][T11086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.240231][T11086] RSP: 002b:00007fb0b0636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 847.240254][T11086] RAX: ffffffffffffffda RBX: 00007fb0b2665fa0 RCX: 00007fb0b23de0d9 [ 847.240269][T11086] RDX: 0000200000000200 RSI: 000000004020565a RDI: 0000000000000003 [ 847.240281][T11086] RBP: 00007fb0b0636090 R08: 0000000000000000 R09: 0000000000000000 [ 847.240294][T11086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.240305][T11086] R13: 00007fb0b2666038 R14: 00007fb0b2665fa0 R15: 00007ffeaa6b38f8 [ 847.240337][T11086] [ 847.240393][T11086] ERROR: Out of memory at tomoyo_realpath_from_path. [ 847.434659][ T5714] usb 4-1: config 0 descriptor?? [ 847.447508][T10930] team0: Port device team_slave_0 added [ 847.608159][ T998] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 847.758568][T11092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.759272][T11092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.760782][ T998] usb 6-1: Using ep0 maxpacket: 16 [ 847.761792][ T998] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 847.766906][ T998] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 847.766936][ T998] usb 6-1: config 0 has no interface number 0 [ 847.766987][ T998] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 847.767015][ T998] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 847.795722][ T998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.795751][ T998] usb 6-1: Product: syz [ 847.795765][ T998] usb 6-1: Manufacturer: syz [ 847.795778][ T998] usb 6-1: SerialNumber: syz [ 847.817249][ T998] usb 6-1: config 0 descriptor?? [ 847.818426][T11088] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 847.818615][T11088] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 848.023143][T11088] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 848.023438][T11088] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 848.233155][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1134'. [ 848.413527][T10930] team0: Port device team_slave_1 added [ 848.461030][ T998] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 848.461066][ T998] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 848.461360][ T998] asix 6-1:0.34: probe with driver asix failed with error -32 [ 848.533215][ T5714] usb 4-1: string descriptor 0 read error: -71 [ 848.550127][ T5714] usb 4-1: USB disconnect, device number 27 [ 848.988235][T10930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.988248][T10930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.988265][T10930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.991611][ T5254] 8021q: adding VLAN 0 to HW filter on device eth14 [ 849.016371][T10930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.016389][T10930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.016414][T10930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.241293][T10930] hsr_slave_0: entered promiscuous mode [ 849.242287][T10930] hsr_slave_1: entered promiscuous mode [ 849.242951][T10930] debugfs: 'hsr0' already exists in 'hsr' [ 849.242968][T10930] Cannot create hsr debugfs directory [ 849.714232][T10753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.899930][T11108] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 850.116898][ T3310] bridge_slave_1: left allmulticast mode [ 850.116940][ T3310] bridge_slave_1: left promiscuous mode [ 850.117232][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.278525][ T3310] bridge_slave_0: left allmulticast mode [ 850.278568][ T3310] bridge_slave_0: left promiscuous mode [ 850.278872][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.466808][ T43] usb 6-1: USB disconnect, device number 32 [ 850.565698][ T3310] bridge_slave_1: left allmulticast mode [ 850.565735][ T3310] bridge_slave_1: left promiscuous mode [ 850.565999][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.730499][ T3310] bridge_slave_0: left allmulticast mode [ 850.730527][ T3310] bridge_slave_0: left promiscuous mode [ 850.730734][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.902178][ T3310] dvmrp6: left allmulticast mode [ 850.915285][ T43] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 851.086910][ T43] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 851.090066][ T43] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 851.090122][ T43] usb 6-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 851.090153][ T43] usb 6-1: config 2 interface 0 has no altsetting 0 [ 851.093666][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.093692][ T43] usb 6-1: Product: syz [ 851.093707][ T43] usb 6-1: Manufacturer: syz [ 851.093722][ T43] usb 6-1: SerialNumber: syz [ 851.398491][ T43] ims_pcu 6-1:2.0: Zero length descriptor [ 851.398531][ T43] ims_pcu 6-1:2.0: probe with driver ims_pcu failed with error -22 [ 851.403212][ T43] usb 6-1: USB disconnect, device number 33 [ 851.646512][ T3310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 851.725846][ T3310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 851.787031][ T3310] bond0 (unregistering): Released all slaves [ 852.345247][ T199] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 852.475381][ T199] usb 6-1: device descriptor read/64, error -71 [ 852.525790][ T3310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 852.585976][ T3310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 852.629765][ T3310] bond0 (unregistering): Released all slaves [ 852.738405][ T199] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 852.856540][T11119] veth3: entered promiscuous mode [ 852.919036][ T199] usb 6-1: device descriptor read/64, error -71 [ 853.025564][ T199] usb usb6-port1: attempt power cycle [ 853.275546][T10753] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.315192][ T998] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 853.425177][ T199] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 853.465230][ T998] usb 4-1: Using ep0 maxpacket: 16 [ 853.465996][ T199] usb 6-1: device descriptor read/8, error -71 [ 853.466448][ T998] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 853.467586][ T998] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.467646][ T998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 853.467664][ T998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 853.467680][ T998] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 853.467694][ T998] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 853.468800][ T998] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 853.468823][ T998] usb 4-1: Manufacturer: syz [ 853.472993][ T998] usb 4-1: config 0 descriptor?? [ 853.645766][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.645890][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.671148][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.671351][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.725825][ T199] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 853.746354][ T199] usb 6-1: device descriptor read/8, error -71 [ 853.795146][ T998] rc_core: IR keymap rc-hauppauge not found [ 853.795169][ T998] Registered IR keymap rc-empty [ 853.798545][ T998] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 853.826022][ T998] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 853.891718][ T199] usb usb6-port1: unable to enumerate USB device [ 853.910971][ T998] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 853.954354][ T998] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input31 [ 854.057375][ T998] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 854.078135][ T998] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 854.101047][ T998] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 854.115496][ T998] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 854.135458][ T998] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 854.162234][ T998] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 854.175578][ T998] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 854.195832][ T998] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 854.215681][ T998] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 854.238195][ T998] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 854.277451][ T998] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 854.277482][ T998] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 854.319051][ T998] usb 4-1: USB disconnect, device number 28 [ 854.852981][ T5254] 8021q: adding VLAN 0 to HW filter on device eth16 [ 855.061705][T11147] FAULT_INJECTION: forcing a failure. [ 855.061705][T11147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.061749][T11147] CPU: 0 UID: 0 PID: 11147 Comm: syz.3.1144 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 855.061780][T11147] Tainted: [L]=SOFTLOCKUP [ 855.061787][T11147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 855.061800][T11147] Call Trace: [ 855.061808][T11147] [ 855.061818][T11147] dump_stack_lvl+0xe8/0x150 [ 855.061852][T11147] should_fail_ex+0x467/0x600 [ 855.061891][T11147] _copy_from_user+0x2d/0xb0 [ 855.061919][T11147] ___sys_recvmsg+0x173/0x5a0 [ 855.061965][T11147] ? __pfx____sys_recvmsg+0x10/0x10 [ 855.061999][T11147] ? __fget_files+0x2a/0x420 [ 855.062035][T11147] do_recvmmsg+0x320/0x7f0 [ 855.062057][T11147] ? __pfx_do_recvmmsg+0x10/0x10 [ 855.062074][T11147] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 855.062096][T11147] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 855.062117][T11147] __x64_sys_recvmmsg+0x198/0x250 [ 855.062135][T11147] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 855.062158][T11147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.062172][T11147] do_syscall_64+0x174/0x580 [ 855.062187][T11147] ? trace_irq_disable+0x3b/0x140 [ 855.062207][T11147] ? clear_bhb_loop+0x70/0xc0 [ 855.062222][T11147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.062234][T11147] RIP: 0033:0x7f8f7b91e0d9 [ 855.062247][T11147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.062258][T11147] RSP: 002b:00007f8f79b76028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 855.062280][T11147] RAX: ffffffffffffffda RBX: 00007f8f7bba5fa0 RCX: 00007f8f7b91e0d9 [ 855.062290][T11147] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003 [ 855.062303][T11147] RBP: 00007f8f79b76090 R08: 0000000000000000 R09: 0000000000000000 [ 855.062311][T11147] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 855.062318][T11147] R13: 00007f8f7bba6038 R14: 00007f8f7bba5fa0 R15: 00007ffd7514a5e8 [ 855.062337][T11147] [ 855.445148][ T199] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 855.655162][ T199] usb 4-1: Using ep0 maxpacket: 16 [ 855.656029][ T199] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 855.665093][ T199] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 855.665125][ T199] usb 4-1: config 0 has no interface number 0 [ 855.665173][ T199] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 855.665199][ T199] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 855.671756][ T199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.671782][ T199] usb 4-1: Product: syz [ 855.671796][ T199] usb 4-1: Manufacturer: syz [ 855.671810][ T199] usb 4-1: SerialNumber: syz [ 855.695159][ T199] usb 4-1: config 0 descriptor?? [ 855.696305][T11150] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 855.696479][T11150] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 855.901769][T11150] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 855.902003][T11150] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 855.965147][ T3310] hsr_slave_0: left promiscuous mode [ 856.005902][ T3310] hsr_slave_1: left promiscuous mode [ 856.012630][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.067360][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.115868][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1145'. [ 856.277711][ T36] audit: type=1800 audit(1787056935.572:4): pid=11168 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1148" name="idVendor" dev="configfs" ino=37118 res=0 errno=0 [ 856.296630][ T3310] hsr_slave_0: left promiscuous mode [ 856.335175][ T3310] hsr_slave_1: left promiscuous mode [ 856.337301][ T3310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 856.337329][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.381013][ T3310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 856.381043][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.392604][ T199] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 856.392633][ T199] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 856.392907][ T199] asix 4-1:0.34: probe with driver asix failed with error -61 [ 856.522343][ T3310] veth1_macvtap: left promiscuous mode [ 856.522469][ T3310] veth0_macvtap: left promiscuous mode [ 856.522759][ T3310] veth1_vlan: left promiscuous mode [ 856.522966][ T3310] veth0_vlan: left promiscuous mode [ 857.166187][ T3310] team0 (unregistering): Port device team_slave_1 removed [ 857.217046][ T3310] team0 (unregistering): Port device team_slave_0 removed [ 857.866385][ T3310] team0 (unregistering): Port device team_slave_1 removed [ 857.905717][ T3310] team0 (unregistering): Port device team_slave_0 removed [ 858.188281][T10826] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 858.239215][T10826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 858.268148][T10826] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 858.298251][ T998] usb 4-1: USB disconnect, device number 29 [ 858.325677][T10826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 858.615162][T10826] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 858.816194][T10826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 858.845546][T10826] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 858.962856][T10826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 859.624159][T11202] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1152'. [ 860.182804][T10753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.727477][T10826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.967993][T10826] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.004491][ T5771] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 861.019796][ T1482] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.020127][ T1482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.054160][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.054311][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.155228][ T5771] usb 6-1: Using ep0 maxpacket: 16 [ 861.156506][ T5771] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 861.158261][ T5771] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 861.158287][ T5771] usb 6-1: config 0 has no interface number 0 [ 861.158336][ T5771] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 861.158362][ T5771] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 861.161414][ T5771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.161438][ T5771] usb 6-1: Product: syz [ 861.161453][ T5771] usb 6-1: Manufacturer: syz [ 861.161467][ T5771] usb 6-1: SerialNumber: syz [ 861.281511][ T5771] usb 6-1: config 0 descriptor?? [ 861.283509][T11228] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 861.283750][T11228] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 861.492919][T11228] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 861.493152][T11228] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 861.704910][T11228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1157'. [ 862.014723][ T5771] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 862.014759][ T5771] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 862.043200][ T5771] asix 6-1:0.34: probe with driver asix failed with error -61 [ 862.268245][T10753] veth0_vlan: entered promiscuous mode [ 862.421104][T10753] veth1_vlan: entered promiscuous mode [ 863.013432][T10753] veth0_macvtap: entered promiscuous mode [ 863.188768][T10753] veth1_macvtap: entered promiscuous mode [ 863.320272][T10753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.366220][T10753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.512137][T10930] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 863.649084][T10930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 863.690461][T10930] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 863.721463][T10930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 863.732612][T10930] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 863.794360][T10930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 863.814778][T10930] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 863.909610][ T5714] usb 6-1: USB disconnect, device number 38 [ 863.927667][T10930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 864.216668][T11271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1165'. [ 864.222585][ T3310] bridge_slave_1: left allmulticast mode [ 864.222620][ T3310] bridge_slave_1: left promiscuous mode [ 864.222873][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.437631][ T3310] bridge_slave_0: left allmulticast mode [ 864.437659][ T3310] bridge_slave_0: left promiscuous mode [ 864.437892][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.075944][ T3310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.125203][ T5785] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 865.185737][ T3310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.248063][ T3310] bond0 (unregistering): Released all slaves [ 865.275332][ T5785] usb 6-1: Using ep0 maxpacket: 16 [ 865.275997][ T5785] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 865.277132][ T5785] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 865.277157][ T5785] usb 6-1: config 0 has no interface number 0 [ 865.277206][ T5785] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 865.277229][ T5785] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 865.279500][ T5785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.279525][ T5785] usb 6-1: Product: syz [ 865.279540][ T5785] usb 6-1: Manufacturer: syz [ 865.279555][ T5785] usb 6-1: SerialNumber: syz [ 865.284856][ T5785] usb 6-1: config 0 descriptor?? [ 865.298448][T11288] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 865.298646][T11288] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 865.417844][ T5254] 8021q: adding VLAN 0 to HW filter on device eth15 [ 865.503747][T11288] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 865.503874][T11288] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 865.754639][T11288] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1169'. [ 866.024353][ T5785] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 866.024387][ T5785] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 866.024686][ T5785] asix 6-1:0.34: probe with driver asix failed with error -61 [ 866.625397][ T3310] hsr_slave_0: left promiscuous mode [ 866.645210][ T3310] hsr_slave_1: left promiscuous mode [ 866.646399][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.707222][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.297364][T11311] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 868.232716][ T5706] usb 6-1: USB disconnect, device number 39 [ 868.401230][ T3310] team0 (unregistering): Port device team_slave_1 removed [ 868.466091][ T3310] team0 (unregistering): Port device team_slave_0 removed [ 868.884184][T10826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.335157][T10037] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 869.399612][ T1482] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.400131][ T1482] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.408481][ T1512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.408502][ T1512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.516318][T10037] usb 4-1: Using ep0 maxpacket: 8 [ 869.517397][T10037] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 869.518818][T10037] usb 4-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 869.518867][T10037] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 869.518906][T10037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.589198][T10037] usb 4-1: config 0 descriptor?? [ 869.773715][ T1483] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.920511][T10037] usb 4-1: string descriptor 0 read error: -71 [ 870.025775][T10037] usb 4-1: USB disconnect, device number 30 [ 870.317806][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.317887][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.532615][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.532639][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.592613][T10930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.820776][T10930] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.888083][ T36] audit: type=1800 audit(1787056950.182:5): pid=11346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1178" name="idVendor" dev="configfs" ino=37632 res=0 errno=0 [ 870.935505][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.935735][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.983587][ T3394] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.992745][ T3394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.088443][T10826] veth0_vlan: entered promiscuous mode [ 871.134569][ T5254] 8021q: adding VLAN 0 to HW filter on device eth17 [ 871.277014][T10826] veth1_vlan: entered promiscuous mode [ 871.608757][T11365] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 871.747661][T11367] gadgetfs: bound to dummy_udc driver [ 872.785360][ T5707] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 872.785910][ C0] gadgetfs: connected [ 872.786678][ T5707] gadgetfs: disconnected [ 872.945801][ C0] gadgetfs: connected [ 872.948443][ T5707] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 872.949577][ T5707] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 872.949722][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.468053][ C0] gadgetfs: configuration #1 [ 876.438247][T10826] veth0_macvtap: entered promiscuous mode [ 876.479126][T10826] veth1_macvtap: entered promiscuous mode [ 876.532976][T10826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.569721][T10826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.752062][T11359] gadgetfs: suspended from state 3 [ 876.752117][T11359] gadgetfs: disconnected [ 876.761406][ T5828] usb 1-1: USB disconnect, device number 36 [ 877.727051][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.733754][ T166] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.131740][ T1859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.131764][ T1859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.924510][T11412] 9p: Bad value for 'rfdno' [ 879.050269][T11408] libceph: resolve '4' (ret=-3): failed [ 880.786168][T11420] netlink: 'syz.8.1184': attribute type 1 has an invalid length. [ 880.786192][T11420] netlink: 'syz.8.1184': attribute type 2 has an invalid length. [ 880.786206][T11420] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1184'. [ 881.001889][ T1482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.001912][ T1482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.070562][ T1301] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.178214][ T1301] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.181482][ T1301] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.440668][T10930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 881.606990][T10037] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 881.755243][T10037] usb 9-1: Using ep0 maxpacket: 16 [ 881.756073][T10037] usb 9-1: New USB device found, idVendor=bd2b, idProduct=0070, bcdDevice= 0.00 [ 881.756129][T10037] usb 9-1: no configurations [ 881.756143][T10037] usb 9-1: can't read configurations, error -22 [ 881.938117][T10037] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 882.085085][T10037] usb 9-1: Using ep0 maxpacket: 16 [ 882.086083][T10037] usb 9-1: New USB device found, idVendor=bd2b, idProduct=0070, bcdDevice= 0.00 [ 882.086147][T10037] usb 9-1: no configurations [ 882.086160][T10037] usb 9-1: can't read configurations, error -22 [ 882.135182][T10037] usb usb9-port1: attempt power cycle [ 882.495775][T10037] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 882.516058][T10037] usb 9-1: Using ep0 maxpacket: 16 [ 882.518042][T10037] usb 9-1: New USB device found, idVendor=bd2b, idProduct=0070, bcdDevice= 0.00 [ 882.518097][T10037] usb 9-1: no configurations [ 882.518110][T10037] usb 9-1: can't read configurations, error -22 [ 882.577480][T11449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 882.705118][T10037] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 882.725989][T10037] usb 9-1: Using ep0 maxpacket: 16 [ 882.726933][T10037] usb 9-1: New USB device found, idVendor=bd2b, idProduct=0070, bcdDevice= 0.00 [ 882.726993][T10037] usb 9-1: no configurations [ 882.727007][T10037] usb 9-1: can't read configurations, error -22 [ 882.727540][T10037] usb usb9-port1: unable to enumerate USB device [ 882.951769][T10930] veth0_vlan: entered promiscuous mode [ 883.121459][T10930] veth1_vlan: entered promiscuous mode [ 883.339533][T10930] veth0_macvtap: entered promiscuous mode [ 883.445245][T10930] veth1_macvtap: entered promiscuous mode [ 883.557713][T10930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 883.592283][T10930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.441217][ T1301] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.460769][ T7556] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.945761][ T5254] 8021q: adding VLAN 0 to HW filter on device eth14 [ 886.985220][ T998] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 887.145275][ T998] usb 6-1: device descriptor read/64, error -71 [ 887.184495][ T1859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.184518][ T1859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.212565][ T1859] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.365672][ T1512] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.385216][ T998] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 887.395576][T11499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 887.515489][ T998] usb 6-1: device descriptor read/64, error -71 [ 887.625545][ T998] usb usb6-port1: attempt power cycle [ 887.804253][ T1512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.804276][ T1512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.967503][ T998] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 887.989544][ T998] usb 6-1: device descriptor read/8, error -71 [ 888.110175][ T36] audit: type=1800 audit(1787056967.412:6): pid=11516 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1205" name="idVendor" dev="configfs" ino=39205 res=0 errno=0 [ 888.215153][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 888.225101][ T998] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 888.248387][ T998] usb 6-1: device descriptor read/8, error -71 [ 888.355651][ T998] usb usb6-port1: unable to enumerate USB device [ 888.396129][ T9] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 888.397608][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.397661][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.504253][ T9] usb 9-1: config 0 descriptor?? [ 888.726866][T11528] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1207'. [ 888.750984][ T9] usb 9-1: USB disconnect, device number 6 [ 889.705130][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 889.856037][ T9] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 889.973689][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.973757][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.024427][ T9] usb 9-1: config 0 descriptor?? [ 890.050727][ T9] aiptek 9-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 892.335609][ T5771] usb 9-1: USB disconnect, device number 7 [ 892.515158][ T5828] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 892.679277][ T5828] usb 8-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 892.681127][ T5828] usb 8-1: config 2 has an invalid interface number: 255 but max is 0 [ 892.681155][ T5828] usb 8-1: config 2 has no interface number 0 [ 892.681186][ T5828] usb 8-1: too many endpoints for config 2 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 892.681235][ T5828] usb 8-1: config 2 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 892.681266][ T5828] usb 8-1: config 2 interface 255 has no altsetting 0 [ 892.681302][ T5828] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.768434][ T5828] ums-realtek 8-1:2.255: USB Mass Storage device detected [ 892.897152][T11557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 893.165111][ T5771] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 893.325153][ T5771] usb 7-1: Using ep0 maxpacket: 16 [ 893.326171][ T5771] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 893.327826][ T5771] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 893.327853][ T5771] usb 7-1: config 0 has no interface number 0 [ 893.328907][ T5771] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 893.328939][ T5771] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 893.332056][ T5771] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.332082][ T5771] usb 7-1: Product: syz [ 893.332097][ T5771] usb 7-1: Manufacturer: syz [ 893.332112][ T5771] usb 7-1: SerialNumber: syz [ 893.454024][ T5771] usb 7-1: config 0 descriptor?? [ 893.457370][T11555] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 893.457564][T11555] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 893.579711][T11565] FAULT_INJECTION: forcing a failure. [ 893.579711][T11565] name failslab, interval 1, probability 0, space 0, times 0 [ 893.579749][T11565] CPU: 0 UID: 0 PID: 11565 Comm: syz.5.1215 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 893.579779][T11565] Tainted: [L]=SOFTLOCKUP [ 893.579787][T11565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 893.579800][T11565] Call Trace: [ 893.579808][T11565] [ 893.579817][T11565] dump_stack_lvl+0xe8/0x150 [ 893.579862][T11565] should_fail_ex+0x467/0x600 [ 893.579903][T11565] should_failslab+0xa8/0x100 [ 893.579933][T11565] __kmalloc_noprof+0xfe/0x780 [ 893.579953][T11565] ? rcu_is_watching+0x15/0xb0 [ 893.579982][T11565] ? tomoyo_realpath_from_path+0xef/0x640 [ 893.580011][T11565] ? tomoyo_realpath_from_path+0xef/0x640 [ 893.580047][T11565] tomoyo_realpath_from_path+0xef/0x640 [ 893.580084][T11565] ? tomoyo_path_number_perm+0x219/0x5f0 [ 893.580107][T11565] tomoyo_path_number_perm+0x246/0x5f0 [ 893.580132][T11565] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 893.580153][T11565] ? __lock_acquire+0x683/0x2ce0 [ 893.580193][T11565] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 893.580223][T11565] ? hook_file_ioctl+0x1f3/0x600 [ 893.580251][T11565] ? lockdep_hardirqs_on+0x7a/0x110 [ 893.580299][T11565] ? __fget_files+0x2a/0x420 [ 893.580328][T11565] ? __fget_files+0x2a/0x420 [ 893.580349][T11565] ? __fget_files+0x3a8/0x420 [ 893.580370][T11565] ? __fget_files+0x2a/0x420 [ 893.580404][T11565] security_file_ioctl+0xc3/0x2a0 [ 893.580439][T11565] __se_sys_ioctl+0x47/0x170 [ 893.580468][T11565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.580493][T11565] do_syscall_64+0x174/0x580 [ 893.580521][T11565] ? trace_irq_disable+0x3b/0x140 [ 893.580557][T11565] ? clear_bhb_loop+0x70/0xc0 [ 893.580584][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.580604][T11565] RIP: 0033:0x7fb0b23de0d9 [ 893.580624][T11565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.580642][T11565] RSP: 002b:00007fb0b0636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 893.580665][T11565] RAX: ffffffffffffffda RBX: 00007fb0b2665fa0 RCX: 00007fb0b23de0d9 [ 893.580679][T11565] RDX: 0000200000000380 RSI: 000000004048aec9 RDI: 0000000000000004 [ 893.580692][T11565] RBP: 00007fb0b0636090 R08: 0000000000000000 R09: 0000000000000000 [ 893.580704][T11565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.580715][T11565] R13: 00007fb0b2666038 R14: 00007fb0b2665fa0 R15: 00007ffeaa6b38f8 [ 893.580748][T11565] [ 893.605333][T11565] ERROR: Out of memory at tomoyo_realpath_from_path. [ 893.687306][T11555] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 893.689179][T11555] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 893.908851][T11555] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1213'. [ 894.165237][ T5771] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 894.165274][ T5771] asix 7-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 894.165582][ T5771] asix 7-1:0.34: probe with driver asix failed with error -61 [ 894.263737][ T5828] usb 8-1: USB disconnect, device number 2 [ 894.732345][T11574] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 894.746695][T11575] netlink: 'syz.8.1218': attribute type 2 has an invalid length. [ 894.867987][T11582] binder: BINDER_SET_CONTEXT_MGR already set [ 894.868005][T11582] binder: 11573:11582 ioctl 4018620d 200000004a80 returned -16 [ 894.991208][T11584] Bluetooth: MGMT ver 1.23 [ 895.015503][T11584] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1220'. [ 895.657934][T11593] overlay: Bad value for 'verity' [ 895.983046][T10037] usb 7-1: USB disconnect, device number 2 [ 896.190512][T11607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 897.035371][ T9588] Bluetooth: hci0: command 0x0c1a tx timeout [ 897.061283][ T59] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 901.646146][T11642] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1232'. [ 901.846265][T11645] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 901.954013][T11645] gadgetfs: bound to dummy_udc driver [ 902.295573][T10201] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 902.296117][ C1] gadgetfs: connected [ 902.296916][T10201] gadgetfs: disconnected [ 902.461159][ C1] gadgetfs: connected [ 902.470874][T10201] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 902.476807][T10201] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 902.476948][T10201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.741936][ C1] gadgetfs: configuration #1 [ 903.675572][ T59] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 903.675894][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 904.323569][T11643] gadgetfs: suspended from state 3 [ 904.323630][T11643] gadgetfs: disconnected [ 904.445281][ T43] usb 1-1: USB disconnect, device number 37 [ 904.942053][T10037] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 905.344025][T10037] usb 9-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 905.459486][T10037] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 905.459546][T10037] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 905.459701][T10037] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.978292][T11664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 907.004855][T10037] pegasus 9-1:1.0: probe with driver pegasus failed with error -121 [ 907.304746][T10037] usb 9-1: USB disconnect, device number 8 [ 910.977686][T11724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 911.182120][ T59] ================================================================== [ 911.182208][ T59] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 911.182291][ T59] Read of size 8 at addr ffffc9001851e008 by task kworker/u9:0/59 [ 911.182309][ T59] [ 911.182349][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 911.182406][ T59] Tainted: [L]=SOFTLOCKUP [ 911.182413][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 911.182428][ T59] Workqueue: hci1 hci_rx_work [ 911.182526][ T59] Call Trace: [ 911.182535][ T59] [ 911.182544][ T59] dump_stack_lvl+0xe8/0x150 [ 911.182576][ T59] print_address_description+0x55/0x1e0 [ 911.182623][ T59] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 911.182645][ T59] print_report+0x58/0x70 [ 911.182672][ T59] kasan_report+0x117/0x150 [ 911.182721][ T59] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 911.182748][ T59] __list_del_entry_valid_or_report+0xb5/0x190 [ 911.182771][ T59] kcov_remote_start+0x295/0x6f0 [ 911.182852][ T59] hci_rx_work+0x10f/0x1020 [ 911.182879][ T59] ? process_scheduled_works+0xa20/0x14e0 [ 911.182904][ T59] process_scheduled_works+0xa8e/0x14e0 [ 911.182942][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 911.182975][ T59] ? assign_work+0x3cf/0x5d0 [ 911.183000][ T59] worker_thread+0xa47/0xfb0 [ 911.183036][ T59] kthread+0x388/0x470 [ 911.183066][ T59] ? __pfx_worker_thread+0x10/0x10 [ 911.183090][ T59] ? __pfx_kthread+0x10/0x10 [ 911.183120][ T59] ret_from_fork+0x514/0xb70 [ 911.183195][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 911.183226][ T59] ? __switch_to+0xc89/0x1420 [ 911.183254][ T59] ? __pfx_kthread+0x10/0x10 [ 911.183283][ T59] ret_from_fork_asm+0x1a/0x30 [ 911.183322][ T59] [ 911.183330][ T59] [ 911.183335][ T59] The buggy address belongs to a vmalloc virtual mapping [ 911.183381][ T59] Memory state around the buggy address: [ 911.183417][ T59] ffffc9001851df00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 911.183432][ T59] ffffc9001851df80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 911.183446][ T59] >ffffc9001851e000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 911.183457][ T59] ^ [ 911.183494][ T59] ffffc9001851e080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 911.183508][ T59] ffffc9001851e100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 911.183519][ T59] ================================================================== [ 911.183560][ T59] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 911.183580][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 911.183608][ T59] Tainted: [L]=SOFTLOCKUP [ 911.183616][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 911.183629][ T59] Workqueue: hci1 hci_rx_work [ 911.183653][ T59] Call Trace: [ 911.183660][ T59] [ 911.183668][ T59] vpanic+0x56c/0xa60 [ 911.183701][ T59] ? __pfx_vpanic+0x10/0x10 [ 911.183732][ T59] ? __pfx___schedule+0x10/0x10 [ 911.183760][ T59] panic+0xc5/0xd0 [ 911.183789][ T59] ? __pfx_panic+0x10/0x10 [ 911.183820][ T59] ? preempt_schedule_common+0x82/0xd0 [ 911.183849][ T59] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 911.183871][ T59] check_panic_on_warn+0x89/0xb0 [ 911.183932][ T59] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 911.183955][ T59] end_report+0x73/0x170 [ 911.183978][ T59] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 911.183999][ T59] kasan_report+0x128/0x150 [ 911.184024][ T59] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 911.184050][ T59] __list_del_entry_valid_or_report+0xb5/0x190 [ 911.184074][ T59] kcov_remote_start+0x295/0x6f0 [ 911.184106][ T59] hci_rx_work+0x10f/0x1020 [ 911.184135][ T59] ? process_scheduled_works+0xa20/0x14e0 [ 911.184158][ T59] process_scheduled_works+0xa8e/0x14e0 [ 911.184196][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 911.184224][ T59] ? assign_work+0x3cf/0x5d0 [ 911.184249][ T59] worker_thread+0xa47/0xfb0 [ 911.184285][ T59] kthread+0x388/0x470 [ 911.184314][ T59] ? __pfx_worker_thread+0x10/0x10 [ 911.184338][ T59] ? __pfx_kthread+0x10/0x10 [ 911.184376][ T59] ret_from_fork+0x514/0xb70 [ 911.184408][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 911.184439][ T59] ? __switch_to+0xc89/0x1420 [ 911.184466][ T59] ? __pfx_kthread+0x10/0x10 [ 911.184496][ T59] ret_from_fork_asm+0x1a/0x30 [ 911.184535][ T59] [ 911.184816][ T59] Kernel Offset: disabled