last executing test programs: 7.396804777s ago: executing program 2 (id=256): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) gettid() openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="000000d17c"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000340)="0813c269b382e4847542a45d73f12aa80f63d1254b63c8c821168cca220b64ff02d5433bd2d92492f3f0aea96b09a46c3a46764873641785b7f45932928b1cc8959b0877d716342478e9b286bf3da21a4804e892cff4f77ed4d7d790948e23a1d5ae5ee1f520b84eb178f3b716a969120a78d1764a18440c6df08918a8327aa46ffb7032f489c07db0ae50513d784a77de8e71b54325f6eb262a9bb6b4b9b6087cdbbea30547c4391b455c0bf13ddddafb26011538a93d0f9f9703dc6fa5b49c524219a5fe2ba6ed5244b26a8485e17e5cbda6728f6369b815851e985f587ba8b9bdf18d0c48edd0c5a4327bcc998e5900") syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4008000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0xe) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) 7.297709308s ago: executing program 1 (id=257): r0 = socket$nl_audit(0x10, 0x3, 0x9) dup(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) dup(r0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) signalfd4(r2, &(0x7f0000000140), 0x8, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000000)=""/4) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x40) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x7}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000540)="1c0000001a009b8a140069ae5a97b9ba324ec33784e0b17e00003b9b301f0000000054cfbf0a00400000250eeb771f793a0cf2838f05b12e1c3aa958ab5dc4a299a5323e362c8f8ed2884951743f97d58fd66035a2890e35bfe9ad44acc92019d921dda49da0ce9877cc363014017bbf4a3f837f577c937f6fc1509f08d8982e2e334d71afd87a757fd22a1ce9e0a029e3fc649ab84936629d38ddd7cb0554ce", 0xa0) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) setsockopt$inet6_buf(r7, 0x29, 0x39, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000b40)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x81, 0xd, 0xea, 0x51, 0x2, 0x3e, 0x101, 0x294, 0x34, 0x39f, 0x60, 0x401, 0x20, 0x2, 0x8, 0x9, 0x40}, [{0x70000000, 0x7b5, 0x5, 0xd, 0x7, 0xd, 0x3, 0x80}, {0x70000000, 0x0, 0x5, 0x7, 0x8, 0x2, 0xb6f}], "38459bdb331673e31818af165b920c7e5a82b96ec21f06c6bd7e2799a056701a34a29a99dddc7f1a305b3b18cd99e13c1d3d6c50c3261ec0d18de9ae5d769e69284cf521153b841d3fdeaf5aca50a831382f11f6d1e04bc668df0aa44afd71880ed778a4aed43744fea566b4d25746a10e9816a8cc312040cf5826c4c9917b1b7e508783445337879893635cbee25eae235e1e55b45434bfd18a426c47d598", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb13) 6.50553383s ago: executing program 3 (id=259): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [{0x2, 0x5}], {0x4, 0x2}, [{0x8, 0x6}, {0x8, 0x1}], {0x10, 0x4}, {0x20, 0x1}}, 0x3c, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, 0x0, &(0x7f0000000000)) fchmodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x50c, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x408c4}, 0x40805) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4048008) 6.228753894s ago: executing program 3 (id=260): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x401, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000140)="280320ff6900140000007ef506be0000000100000000892f000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000300)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x1) ioctl$TCGETA(r0, 0x89f0, &(0x7f00000029c0)) unshare(0x28020480) shmctl$IPC_INFO(0x0, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000006d4779e97d814dd5170000000000000700000a84000000060a010400000000000000000a0000050900020073797a320000000058000480540001800a0001007265646972e8ffff43000280080001400000001708000140000000140800ed895bb997727371522bbe288d0602130340000000080800034000000000080001400000001108000240000000000800feff0000000408000340000000040900010073797a31002a27b2ee00000011000100000000"], 0xac}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x2d, 0x20040040) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x10a}], 0x1, 0x0, 0x0, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000000)) 6.090519637s ago: executing program 1 (id=261): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x100002, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb2}}, 0x0, 0x83}, 0x88) socket$packet(0x11, 0x3, 0x300) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x180, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x29) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000980)={[0x705, 0x2, 0x9, 0x4, 0x9, 0x8, 0xa05, 0xc, 0x13, 0x8000000000000001, 0x8, 0xfae, 0x81b7, 0x8, 0x607, 0x9], 0x25000, 0x20000}) ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f0000000880)) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000010300)={r7, @in={{0x2, 0x4e24, @loopback}}}, &(0x7f00000103c0)=0x84) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket(0x1d, 0x2, 0x7) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x41, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0xbafb, 0x2000006, 0x0, 0x80000000, 0x5, 0xffff2d37, 0x2, 0x7, 0x3, 0x0, 0x5, 0x1, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x10006, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000004, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x2672, 0x800008f, 0x4006, 0x6, 0x80000000, 0x1, 0x4, 0x8, 0x400, 0x80, 0xfffffffc, 0x0, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x2, 0x7, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x1ff, 0x0, 0x0, 0x5, 0x101, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x5, 0x7fff, 0x5a7c, 0x420, 0xfffffffb, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x1, 0x7, 0x4, 0xb, 0x5, 0x20009, 0x8, 0x6, 0x9, 0x47, 0xffff, 0x1, 0xfe000000, 0xffff, 0xffffeffe, 0x7, 0x9, 0x5, 0x3, 0xc, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x1, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x8, 0x7fff, 0x0, 0x5, 0xfffffffd, 0x4, 0x9, 0x5, 0x0, 0x9, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x9, 0x20000008, 0x4, 0x6d01, 0x3, 0x1, 0xa00003, 0x200, 0x7e, 0x7b5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0xd, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a0ed, 0x2, 0x25], [0x5, 0xbb33, 0x20000007, 0xb, 0x5, 0x938, 0x2, 0x6, 0x0, 0xb9, 0x80000ce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x5, 0xffff, 0x2000a620, 0x2, 0x5, 0x2, 0x2, 0x5, 0x5, 0x6, 0x16, 0xfffffffe, 0x5, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x2, 0xf40, 0x7, 0x1, 0x6c1c, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3440, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2004}, {}], 0x2, 0x0, 0x0, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, &(0x7f0000000000)={0xfffffffffffffff9, 0xcf80f292976255aa}) ioctl$int_in(r8, 0x40000000af01, 0x0) socket(0x10, 0x1, 0x3) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000340)) r9 = syz_open_dev$video4linux(&(0x7f0000000040), 0xffffffff, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r9, 0xc038563b, &(0x7f00000000c0)={0x0, 0x0, {0x6, 0x32, 0x19, 0x7ffffffe}}) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, 0x0) r10 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$CDROMVOLREAD(r10, 0x5313, &(0x7f0000000040)) 5.201662734s ago: executing program 3 (id=262): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000943000/0x2000)=nil, 0x2000, 0xb635773f06ebbee5, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) (rerun: 32) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r4, &(0x7f0000006540)={0x2020}, 0xfffffce2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0xfffffffa, 0x38414262, 0x6, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0xff, 0x4) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x90) (async, rerun: 64) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x1, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x7c, &(0x7f0000000300)="5f4c789ca6944ca6f019ca2aacb91bb4a87ffcbc6e1aba126ffd853ddbaab7624f81198b3c750d8f472fae07261bb2b9f41eedd97f661943649c661039d8bcd14aad70cadced09e32417b3cfecd72a9a72004a6e5483dcfc787751fbe5470e04c9abf3fa2f403fc069e11ea6830f1588818f793bbd282489ff1b75ea"}}}) 4.553335468s ago: executing program 1 (id=263): mount$9p_fd(0x0, 0x0, 0x0, 0x1200880, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xe) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r0, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x0) 4.470240182s ago: executing program 1 (id=264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r0, 0x1, 0x2b, 0x0, &(0x7f0000000380)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000100)=@delchain={0x1970, 0x65, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x4}, {0xffe0, 0x8}, {0x10, 0x3}}, [@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}]}}, @f_rsvp6={{0xa}, {0x60, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x4, 0xfffffff9, 0x1}, {0x8, 0x9, 0xffffff81}, 0x2, 0x6, 0x80}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @mcast2}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x5fb, 0x1, 0x4}, {0x8, 0x6, 0x7fffffff}, 0xff, 0x6, 0x6}}]}}, @f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x7, 0x5, 0xfffffffd, 0x4, 0xe, 0x3, 0x0, 0xffffffff, 0x5, 0x1, 0x1, 0x3, 0x3, 0x7fffffff, 0x6e4, 0xcb, 0x8e9b, 0x1, 0x1000, 0x89f, 0x9, 0x3, 0xd, 0x3, 0x9, 0x4, 0x8, 0x5, 0x4, 0x6, 0x5, 0x7, 0x400, 0x932f, 0x3, 0x3, 0xa, 0x8, 0x3, 0x8, 0x3, 0xa, 0x0, 0x6, 0xfffffc00, 0xfffffffa, 0x3, 0x9642, 0x0, 0x3eb2, 0x5a6, 0x2, 0x4, 0x5, 0x4, 0x8, 0x7f, 0x101, 0xa, 0x5, 0x2, 0x2, 0x8, 0x1, 0x6, 0x6, 0xfcc, 0x7, 0x8000, 0x1000, 0x800, 0x2, 0x6, 0xffffffff, 0x4, 0xb6fc, 0x3, 0x7, 0x7ff, 0x100, 0xe, 0x1, 0x3, 0x8, 0x3, 0x1, 0x3, 0xfffff2bc, 0xa, 0x4, 0x1, 0x401, 0xfff, 0x1, 0xfffffeff, 0x5a4, 0x1, 0x2, 0x6, 0x2, 0x40, 0x6, 0x6, 0x3, 0x4, 0x2, 0x40, 0x1000, 0x78, 0xfffffb3c, 0xfa, 0xfffffffe, 0x7, 0x80000001, 0x54, 0xffffffff, 0x9, 0x394d, 0x7, 0x5, 0x99f, 0x8, 0x127, 0x6, 0x8, 0x9, 0x0, 0x9, 0x2000, 0x1, 0xfdff, 0x2, 0x1, 0x7, 0x7, 0x8, 0xfffffffc, 0x8000, 0x5, 0x5ce, 0xc, 0xfffff9ce, 0x9c, 0x8, 0x0, 0x101, 0x2, 0x6, 0x10000, 0x4, 0xffffffff, 0xf, 0xf19e, 0xfffffff2, 0x1, 0x5, 0x80, 0x0, 0x6, 0xb, 0x5, 0xce4, 0x3, 0x8, 0x0, 0x5, 0x6, 0x2, 0x9, 0x3, 0x4, 0x0, 0x6a, 0xfffffffc, 0x2505, 0x73b6, 0xdc4, 0x5, 0x401, 0x7, 0x10, 0x5, 0x9, 0x39bd, 0x7, 0x8, 0xfffffffd, 0xf088, 0xe1, 0x4, 0x9, 0x3, 0xdd, 0x5e, 0x1, 0x3, 0x9, 0x7, 0x5, 0x4, 0x2, 0x7, 0x5e, 0xba, 0x1, 0x8, 0x6, 0x9, 0x3, 0x8, 0x0, 0x2, 0x1, 0x5, 0x9, 0x1, 0xb, 0xf, 0xfffff724, 0x400b, 0x2, 0x9, 0x9, 0x7, 0x1, 0x4, 0x8001, 0x2, 0x80000001, 0x9, 0x34, 0x0, 0x2, 0x2, 0x2, 0x10, 0xffffffff, 0x7, 0xff, 0x8, 0x1, 0x401, 0x847, 0x6, 0x7, 0x80000001, 0x8000, 0x3, 0x1e1, 0x7, 0x6, 0x3, 0x4, 0xebcc, 0x8a]}]}]}}, @f_rsvp6={{0xa}, {0x47c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xfffffff8, 0x8000, 0xfffffffb}, {0x8, 0x5, 0xb}, 0x33, 0x7, 0x4}}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_RSVP_SRC={0x14, 0x3, @empty}, @TCA_RSVP_DST={0x14, 0x2, @private1}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0x5c5, 0xfffffffb, 0x8, 0x9, 0x9, 0x8, 0xba80, 0x8, 0x7, 0x8, 0xfffb, 0x4, 0xce6, 0x6, 0xbba, 0x1, 0x5, 0x3, 0xad, 0x3ff, 0x8, 0x3, 0x6626, 0x8, 0xff, 0x1, 0x1f0692ab, 0x0, 0x0, 0x4, 0x2, 0x3, 0x8, 0x8000, 0x7, 0x81, 0x5, 0x4, 0x9, 0x9, 0x8001, 0x1ff, 0x1, 0x0, 0x506, 0x5, 0x6, 0x3, 0x0, 0x7, 0x7, 0xffff, 0x8, 0x449, 0xffff, 0xfffff016, 0x5, 0x800, 0xd, 0xffffff27, 0x9, 0x5, 0x7, 0x28, 0x1000, 0x4, 0x3, 0x9, 0x1, 0x3, 0x5, 0x2, 0xadd, 0xffffc894, 0x2, 0x10000, 0x146, 0x3, 0x4, 0x5, 0x71, 0x80000000, 0x4, 0x1a27, 0x9, 0x7fff, 0xee, 0x0, 0x319, 0x29ce, 0x81, 0x7, 0xfffffffb, 0x7, 0x800, 0x4, 0x9, 0x9, 0x8001, 0x2, 0x6, 0x5, 0x7, 0xfff, 0xaa, 0x7ff, 0x4, 0x4, 0x2, 0xa, 0x8, 0x2, 0x20000000, 0x9, 0xb, 0x12cc0, 0x40, 0x2, 0xfffffff7, 0xbe4e42, 0x80000001, 0xfff, 0x3, 0x80000000, 0x2, 0xfffffffc, 0x101, 0xf62e, 0x3, 0xff, 0x7, 0xfd12, 0x3, 0x0, 0x6, 0x5, 0x9, 0x8, 0x4, 0x6, 0x7ff, 0x7c6f, 0x1e, 0x80, 0x0, 0x3, 0x80, 0x81, 0x5, 0x7, 0x400, 0xa, 0x4, 0x1, 0x0, 0x670, 0x7, 0x8, 0x5, 0x0, 0xf, 0x1, 0x3, 0x3, 0x8, 0x2390fbfe, 0x8, 0x7ff, 0x2, 0x0, 0xb2, 0x4, 0x6, 0x7, 0x1, 0x4, 0x7dd, 0x5, 0xff, 0xc574, 0xb, 0x7f, 0x0, 0xd6, 0x3, 0x2, 0x0, 0x100, 0x2, 0x5, 0xfff, 0x6, 0x6f, 0x4, 0x5, 0x1, 0x1000, 0x3, 0x5d, 0x7f, 0xf1, 0x7f, 0x6, 0x7, 0xfffffff8, 0x7ff, 0xfffffffd, 0x4, 0xe8, 0x0, 0x3, 0x90a1, 0x4, 0x80000000, 0x61, 0x7, 0x6, 0x101, 0x0, 0x5, 0xe2, 0x3, 0xf1, 0xfffeffff, 0x5, 0x54, 0xd, 0x6, 0xfffffe00, 0x4d, 0xe, 0x100, 0x1, 0xc, 0x4, 0x3, 0x3ff, 0x7f, 0x1, 0x4, 0x8dac, 0x9, 0x8, 0xb, 0x1, 0x8001, 0xe, 0x4, 0x10, 0x8, 0xc, 0x9, 0x3, 0x2]}]}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}]}}, @f_tcindex={{0xc}, {0xf58, 0x2, [@TCA_TCINDEX_POLICE={0xc, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}, @TCA_TCINDEX_POLICE={0xc7c, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffb}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x4, 0x1, 0x6, 0x8, 0x8, 0x5, 0xaf9, 0x10, 0x9, 0x5a, 0x3, 0x0, 0x7, 0x5, 0x8, 0xff, 0x7, 0x81, 0x9, 0x8, 0x9, 0x0, 0x36, 0x3, 0xf542, 0x550, 0x3, 0x9, 0x6, 0x7fff, 0xd5e, 0x3d, 0x6b5f9eed, 0xc, 0x1, 0x1, 0xfff, 0x800, 0xf, 0x2, 0x2, 0x9, 0x1, 0x4, 0x5, 0x3, 0x9, 0x1000, 0x7fff, 0x8, 0x5fb, 0x8, 0xb2e, 0x3, 0x8, 0x6800, 0x10000, 0x5, 0x0, 0x2, 0xc21, 0x200, 0x5, 0x401, 0x7, 0x8, 0x5, 0x9, 0x7f5, 0x80000001, 0x2, 0x6, 0x3, 0x1, 0x2, 0x9, 0x9, 0x8, 0xffff0001, 0x6, 0x2, 0x8, 0x0, 0xff, 0x7, 0x3, 0x2, 0xfffffff9, 0x9, 0x7, 0xa045, 0x7, 0x15, 0x0, 0x0, 0x1, 0xf6, 0x4, 0x5, 0x6, 0x6, 0x200, 0x1000, 0x8, 0x9, 0x4, 0x7ff, 0x80, 0x3, 0x8, 0x5a2d, 0x7fff, 0x7, 0x7, 0x3, 0x72, 0x69, 0x9, 0x2, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10000, 0x6, 0x9, 0x14ef1258, 0xaaf339e, 0x1, 0x9, 0x2, 0x3, 0x3, 0x10001, 0x9f, 0x40, 0x34, 0x7, 0x4, 0x4f7e, 0x7, 0x56, 0x7, 0x101, 0x800, 0x10000, 0x2, 0x2, 0x5, 0xffffffff, 0x4, 0xee, 0x9, 0x6, 0x4, 0x0, 0x0, 0x5, 0x26, 0x9, 0x2f, 0x8, 0x3, 0x7c, 0x1, 0x8e, 0xfffffffd, 0x9, 0x9, 0x3, 0x4, 0x6, 0x7, 0x6, 0x8, 0x8c1, 0x69, 0x3, 0x9, 0x6, 0xd, 0x2, 0x4, 0x0, 0x2, 0x1, 0x7ff, 0x3, 0x0, 0x7fffffff, 0x6, 0x5, 0x5, 0xb, 0x3, 0x9, 0xb, 0x579, 0xffff86bf, 0x1, 0x9, 0xfffffffb, 0x1, 0x8dd7, 0x3ff, 0x2, 0xe, 0x5, 0x4, 0x0, 0xfff, 0x9, 0x3, 0x9, 0x7, 0x3, 0x7, 0x7fff, 0x7fffffff, 0x6, 0x0, 0x8001, 0x916e, 0x4555, 0x10000, 0x4, 0x4, 0x7, 0x10, 0x5, 0x0, 0x10, 0x40, 0xf9, 0xffff, 0x5, 0x2, 0x0, 0x54a, 0x2, 0xf, 0x4, 0x8, 0x6771, 0xffff, 0x8, 0x1, 0x3, 0x1, 0xf, 0x35bd, 0x711d, 0x6, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f41, 0x1, 0x4, 0x7, 0x8, 0x1, 0x4, 0x5, 0x6, 0x6, 0x80000000, 0x8, 0x9, 0x0, 0xc6f, 0x9, 0x7, 0x8, 0x2, 0x7, 0x6, 0x8f, 0x9, 0x8, 0x9, 0x0, 0xe72, 0x2, 0x200, 0x1, 0x5, 0x5, 0x2, 0x1b27, 0x40, 0x7, 0x7, 0x2, 0x1, 0x6, 0xfffffff7, 0xc1, 0x0, 0x3, 0x80000000, 0xfffffc00, 0x5, 0x2, 0xdf, 0xffff, 0x9, 0x1, 0x0, 0x7fffffff, 0x8, 0x621e, 0x80000000, 0x4, 0x6, 0x3, 0x2, 0x3, 0x4d5, 0x1000, 0xe8, 0x7fffffff, 0x2, 0x5, 0x0, 0x1000, 0x448771f0, 0xc921, 0x94, 0x8, 0x6, 0x10001, 0x9, 0xfffffff7, 0x7, 0x6a, 0x8, 0xe, 0x1000, 0x2, 0x0, 0xfffffffe, 0x7, 0x5e, 0x6adc000, 0x101, 0x7b7e, 0x9, 0x5, 0xbcc, 0x3, 0xe, 0x7, 0x7, 0x10001, 0x7, 0xd, 0xfffffff7, 0x1, 0xf48, 0x9, 0x0, 0x7, 0x6, 0x1ff, 0x9, 0x1, 0xb4, 0x10, 0x42b, 0x3, 0x204ad46a, 0x7, 0x4, 0x4, 0x400, 0x5, 0x6, 0x6, 0x0, 0x8, 0x95, 0x1, 0xc6b, 0x8, 0xd91, 0x7, 0x4, 0x8000, 0x3ff, 0x7ff, 0xb, 0xfffffff7, 0x800, 0x3, 0x0, 0x3, 0xe, 0xffff0000, 0x6, 0x80, 0x10000, 0x7, 0xffffffff, 0x6, 0x0, 0x8, 0x8001, 0x8, 0x800, 0x66, 0x7, 0x1, 0x7, 0x0, 0x6, 0x5, 0x7, 0x3, 0x7ef8, 0x9a26, 0x7, 0x7, 0xc, 0xed6, 0x7, 0x101, 0x6bc4, 0x3, 0x1, 0x7c9, 0x6, 0x0, 0x3, 0x5, 0x0, 0x5, 0x6, 0x8, 0x7, 0x2, 0x101, 0x800, 0x6, 0x6737837e, 0x7, 0x6, 0x2, 0x3, 0x40, 0x5, 0x80000000, 0x6, 0x5, 0x9, 0x1, 0x8, 0x5, 0x8, 0x8, 0xf, 0x1, 0x9, 0x8000, 0xd, 0xadff, 0x4, 0xec3, 0x2, 0x5, 0x7, 0x6, 0xfffffffb, 0x1, 0x9, 0x6e, 0x7, 0x1, 0x2, 0x873, 0xe4e, 0x6, 0x8a29, 0x100, 0x2, 0x1, 0x4, 0x3, 0xfff, 0x2, 0x4f89d080, 0x6, 0x1, 0x6, 0xa28c, 0x0, 0x8, 0xfffffffb, 0x100, 0x80000001, 0x8000, 0x7, 0x0, 0x40, 0x80000000, 0x0, 0x6, 0x4, 0xfffff000, 0x6, 0x569b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0xfffff000, 0xfffffff8, {0x4, 0x0, 0x108, 0x4e18, 0x2, 0x8}, {0x4, 0x2, 0x2, 0x7ff, 0x3, 0xf3a5}, 0x6, 0x6, 0x1}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x3, 0x8, 0x5, 0x6, 0x3, 0x9, 0x8, 0x7, 0xfffffff9, 0x5, 0x1, 0xfffff333, 0x6, 0x8, 0x5, 0xc, 0x9, 0x2, 0x2, 0x6, 0x1, 0xa, 0x106f7297, 0xd6b2, 0xcdaf, 0x0, 0xa844, 0x2, 0x3ff, 0xe6, 0x9, 0x6373, 0x4f, 0x9, 0x2, 0x5, 0x6, 0x6, 0x6, 0x4be7, 0x3, 0x7, 0x5, 0xb9c6, 0x1, 0x2939, 0x1, 0x4a8, 0x4, 0x6, 0x3, 0x6, 0x6, 0x0, 0x9, 0x7, 0x7, 0x0, 0x43, 0xb8, 0x9, 0x1, 0x8, 0x4, 0x6, 0x2, 0x6, 0x1, 0x0, 0x800, 0x10000, 0x0, 0x6, 0xd, 0x5, 0x8, 0xfff, 0x7f, 0x101, 0x0, 0xcf11, 0x8, 0x0, 0x8, 0x3, 0x7, 0x4, 0x1, 0x3, 0xb, 0x0, 0x1ff, 0xd, 0x10, 0x2, 0x1, 0x8, 0x3, 0x4, 0x4e6f, 0x229, 0x3, 0x3, 0x1000, 0xfffffff7, 0x80000001, 0x7, 0x8, 0x2, 0xd, 0x7, 0x8, 0x7ff, 0x7fffffff, 0x4, 0x1, 0x0, 0x38, 0x1, 0x1, 0x6, 0x2, 0xfffffff7, 0x200, 0x0, 0xc5, 0x1000, 0x401, 0x6, 0x0, 0x1, 0x2, 0x8001, 0xffffffff, 0x101, 0x1, 0x2, 0x9d34, 0x2b, 0x3, 0x1, 0x4, 0x80000001, 0x10000, 0x1, 0x8, 0x5, 0x2, 0x7, 0x7fffffff, 0x1, 0x0, 0xa000, 0x7, 0x3, 0x6, 0x5, 0x401, 0xe2, 0x18000, 0x6, 0x4, 0x8000, 0x100, 0x8000, 0x1, 0x144000, 0x0, 0xffffffff, 0x896, 0x400, 0x6, 0xfffffff9, 0x0, 0x10, 0x7, 0x0, 0x2, 0xd15, 0x2, 0x1, 0xd, 0x3ff, 0x5, 0x5, 0x10, 0x1, 0xb98, 0x5, 0xffffffff, 0x4, 0x3, 0x1, 0x7f, 0x5, 0x8, 0x8, 0x101, 0xf10, 0x826, 0x3, 0x55, 0x80000000, 0x2, 0x200, 0x9, 0x6, 0x1ff, 0x0, 0x4, 0x10001, 0x1, 0xa, 0xef8, 0x5aa6, 0x2, 0x6, 0x400, 0x8000, 0x2, 0x18, 0x5, 0xa6, 0x9, 0x0, 0x23, 0x6, 0x8, 0x3ff, 0x3, 0x9, 0x7ff, 0x5, 0x3, 0x0, 0x2, 0x9, 0x6, 0x8, 0x3, 0xfe000000, 0x9, 0x4, 0x80000001, 0x101, 0x8d7a, 0x1, 0x8, 0x3, 0x2, 0x47, 0x5c, 0xd0, 0x2]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}, @TCA_TCINDEX_ACT={0x2c4, 0x7, [@m_xt={0x250, 0x7, 0x0, 0x0, {{0x7}, {0x194, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TARG={0x85, 0x6, {0x180, 'raw\x00', 0x80, 0x0, "1aa86455c03f8b028b91dcca598909b0092088dcd2ebb9801fcda796a1134f7aec695ea12056a0a9f0969b57a7fa39a2ea3e6c46fe1646a1b29cacd824fc630181865dfd50a217996b156cda69bf9929e71df6614a62988fed6c08"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0xa0, 0x6, {0x0, 'raw\x00', 0x7, 0x2, "3609facec4a0f0be214ad2ddf1eeb09aa2238b310091b76005c3b10f728ee547e70c4923805b6a05600eccf011d848b8c5012b2dc25a1e8a208659a0dcc3bffcb25153ea3f2a8ee7a0d4c628c95cd5a365a19603068e068132c39ddadf597727bda255440e54dee06f130d5c037cd1884722134b24cb"}}]}, {0x97, 0x6, "0ffcae33079531ebfff08468a7f96a9dbf1c8ca01d9e1ae9dda18062f300ce4c16f79adf8bf5052dfb9341bc378d56702d54780b723ef0014ae8498bb126cb421ad793c48c30d7ea1124db2166e24973ad595359f88c0bac3bc70fce1c2ea3cc1f8218374a706bbb5950ab6a57eea1448acbdffb965a3ed04937bf732f56ffed2c69a67153cc04b64a53d5b9ac4725fffc83d1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_bpf={0x70, 0x0, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x10000, 0xffffffffffffffff, 0xe6, 0x401}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3, 0x1e, 0x76}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x7a}]}}, @f_rsvp6={{0xa}, {0x68, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xc, 0xa2d54df2efeca273}}, @TCA_RSVP_DST={0x14, 0x2, @private2}, @TCA_RSVP_POLICE={0x48, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x1eb5125f, 0x8000, 0x3d8f2d8f, {0x3, 0x2, 0x1, 0x1cf5, 0x2, 0xa1}, {0xac, 0x0, 0xffa1, 0x6, 0x7, 0x79a}, 0xe, 0xc2, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}]}}, @f_rsvp6={{0xa}, {0x2c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x33}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}]}, 0x1970}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0xc1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) 4.293091065s ago: executing program 2 (id=265): r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0xfffffffe, 0x642800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r3 = syz_open_dev$dvb_demux(&(0x7f0000000500), 0x0, 0x2c00) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, &(0x7f0000000280)=0x4, 0x4) socket$kcm(0x21, 0x2, 0x2) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f00000003c0)=""/151, 0x0, 0x800, 0x9ab9, 0x2}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x1, @vbi={0x0, 0x0, 0x0, 0x34565559}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004a00)=@newtfilter={0x2fd4, 0x2c, 0xd27, 0x470bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {}, {0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2f90, 0x2, [@TCA_CGROUP_ACT={0x12dc, 0x1, [@m_skbmod={0xe0, 0x1f, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="3d16955288b1"}]}, {0xa8, 0x6, "cd0c617a1486c594163154d40b9f223503eee9bd3f0afa285b6a0d34db347709a2f473311ee52e41a287af53844064db2779df4cd1c43c5e2951aeb6ef87c29912295307d53160365d9ad613663e7f1621a7fda9216771ffcf781ab4ca2ddccc863bfbfa7cf5a7a7bfa90a9cb8b38ce256fa3046f50b8daab8bcf74671576727ec1deea25002bba6b7561927887de888bcc5a59d989c8c26c75c66fd758ddd8af43cdf5e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x110, 0x13, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0xf}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_TYPE={0x6}]}, {0xc8, 0x6, "45f9fb600d1b2337b4fed7efe5feebff09c5c0c2b9491a9da336e0ccb022d48f61fdfb39c2ca56f400df3aab361462d627203d77937d1125702aa7d03f8c5953661cb5cfe752a2ecc90f1cf10c95242d19b2119067d8bf37bba59eec83b8555a1bbd2e582de5232f9c06a7df972cd3b083b04f978b62bc61cc3c778521788648fe7b02bfaa77229d29491de95683511c464b9244597a2e9e8ac7cce2e2479a7eb5a23c55f49e4361dbffa74c040d7caf867aa6b9242e0ee33c52fa31ac915ffcb5e85c4a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x68, 0x17, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x890d}, @TCA_MPLS_BOS={0x5}]}, {0x29, 0x6, "ffee8a61a6647bd10c3d112c94893ad049be93592028169e17487441ca2d43e123bd877e2f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x1080, 0x1, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xf}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8000}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x3, 0x4, 0x4, 0x5}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x80}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8167}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_CGROUP_ACT={0x1c60, 0x1, [@m_xt={0x1c4, 0x11, 0x0, 0x0, {{0x7}, {0x190, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x8b, 0x6, {0x2, 'mangle\x00', 0x5, 0x2, "a253ef69a4af210dd2f6e99eda051fde691abdd8c67259cd0fc740245c039bca77dd2d6bd344fd3208d79fb303a4dc2af12457a1d88157af1d4738a00ffb8a291ad78d2389e3f47326a96b55dbb5832051ed5419528af43e13740d5372fee90203"}}, @TCA_IPT_TARG={0xf5, 0x6, {0x2, 'security\x00', 0x8f, 0xf400, "8e884c6c7fb8354b45126cfddf6d6ff3526ab3c2600f724d10bcb135f9efe5dbf0cedce6973faa12e1413bf7234aa2a4d59b9dc1619a451c364bfc1b583d30dafb7f2fe0611579ffccb8d6d4a9d38be50b23f3507bda1d23536198e177711232a344a0568f0968980e44205b4c55d13605b29e738990d2744d52aa14aa23fc7bf31d521afd0e910169681143b5bf13d7b483cd9f8b0fe17c9280c30655ba198fcd6f56732eb9d0b556d421ed98deae5c80db199075b0a7c31219da643db901eaf1504bd496c0a94198c70b"}}]}, {0xe, 0x6, "a4d6f8a029bdf3197bea"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x1058, 0x4, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x94, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}]}, {0x5f, 0x6, "4f3bf2a512ed3b3bf317da44f95ed0c2811a5253bade9951c404071ec8b1a8f9f67ebe5173eb83b8f06d4d906cd0b3d9ec4613409c637c19e6857f5b2e2c46829215c09b67a3443884cee2a40871b89c28793f309bd089d725aefc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x91c, 0x1b, 0x0, 0x0, {{0xb}, {0x8e8, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x30000009, 0x8, 0x80000000, 0x5e2ee1ee, {0xe1, 0x2, 0x1, 0x9, 0x0, 0xfff}, {0x10, 0x1, 0x9, 0xd, 0xc3, 0x1}, 0x4, 0x9, 0x100}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x4, 0x8, 0x3, 0x3, 0xffffffff, 0x7, 0x1, 0x9, 0x5, 0xa, 0x7f, 0x9, 0x20000000, 0x6, 0x12d, 0x5, 0x5, 0x4, 0x4, 0x82, 0x3, 0x3, 0x37, 0x151a, 0xedb7, 0x4f, 0x101, 0x0, 0x5, 0x2, 0x7, 0x9, 0x100, 0x3, 0x91ea, 0x81, 0x8, 0x2, 0x4, 0x7ff, 0x0, 0x8, 0xfa8, 0x6, 0x8, 0x158, 0x1, 0x8cb, 0x9, 0x6, 0x7, 0x80000001, 0x47, 0x4, 0x1, 0x40, 0x9, 0x3, 0x10, 0xd5, 0x9, 0xd, 0x5, 0x9, 0x6, 0x5, 0x10, 0x2, 0x14d, 0x3, 0x3e, 0x7, 0x5, 0x2, 0x4, 0x9, 0xf78, 0x1, 0x0, 0x0, 0x3a, 0x4, 0xffff8000, 0x4, 0xfff, 0x800, 0xfffffffb, 0x9, 0x3, 0x10001, 0x7, 0x1, 0xe, 0x7, 0x2, 0x3, 0x0, 0x6, 0xff, 0x401, 0x1, 0x3, 0x401, 0x80000000, 0x3ff, 0x697, 0x3, 0xb8, 0x5, 0x7, 0x80000001, 0x5, 0x8, 0x2, 0x8, 0x6, 0xe0, 0x5, 0x9, 0x9, 0x6, 0xd, 0x9, 0x6, 0x8, 0xfffffffe, 0x6, 0x93, 0x0, 0x7383, 0x8, 0xf, 0x8000, 0x1, 0xd5f, 0xfbc0, 0x10, 0x1, 0x9, 0x6, 0x80, 0xe, 0xffff, 0x8000, 0xfffffffb, 0xb, 0xff, 0xe97, 0x800, 0x7fffffff, 0xfffffff9, 0x1, 0x80000000, 0x7, 0x9, 0xffffff81, 0xfffffffb, 0x2, 0xd6d2, 0x1, 0x0, 0x0, 0x8, 0x10, 0x8, 0x4, 0x0, 0xfffff001, 0x3, 0x10, 0x4, 0x1, 0x9, 0x0, 0x7, 0x0, 0xd22e, 0x6b, 0x6, 0xffffff21, 0x0, 0x4, 0x7, 0x7fff, 0x2f, 0xe029598, 0x1, 0x2, 0xfffffeff, 0x7, 0x0, 0x5, 0xfffffff7, 0xd952, 0x1, 0x2, 0xf8f, 0x9, 0x3, 0x4, 0x7, 0xa, 0xffffffd8, 0x3, 0x80000000, 0x84c4, 0x17, 0x4b2, 0x800, 0xfffffffa, 0x64, 0x2, 0x0, 0x7, 0x0, 0x4, 0xf9e, 0x8186, 0x1, 0x9, 0x20, 0x1, 0x101, 0x4, 0x9684, 0xffff, 0x2, 0x9, 0x7, 0x3, 0x0, 0x9, 0xfffffff7, 0x8, 0x80000000, 0x191a, 0x0, 0xa, 0xa, 0xe, 0xff, 0x0, 0x8, 0x7, 0x0, 0x3, 0x63, 0x3, 0xc0e3, 0x0, 0x400, 0x4, 0x2641, 0xfffffff9, 0x400]}, @TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0xf66, 0xe, 0x1, 0x8, 0x5, 0xe39, 0xe3, 0x101, 0x1, 0x1, 0x7, 0x0, 0x8001, 0xa8d, 0x9, 0x9, 0x2, 0x3, 0x10001, 0x27f2, 0x7f, 0x6, 0x138, 0x8, 0x2, 0x1518, 0x7, 0xc73, 0x0, 0x1, 0x3, 0x3, 0x4, 0xa7, 0x6, 0x9, 0x5, 0x800, 0x0, 0x401, 0x100, 0x5, 0xa, 0x53c9, 0x2, 0x3, 0x5, 0x8, 0xe, 0x9, 0x8, 0x4, 0x70ce, 0x8, 0x7, 0x80000000, 0x0, 0x8, 0x2, 0x10, 0x2, 0xfff, 0x400, 0x19, 0x2, 0x8, 0xff, 0x2, 0x7, 0x10000, 0xf0, 0x8, 0xffffffff, 0x1ff, 0xa2c7, 0x800, 0xc7f, 0x2, 0x6, 0x4, 0x0, 0x3, 0x0, 0x9, 0x1ff, 0x3, 0xffffffff, 0x8001, 0x3, 0x73, 0x2, 0xc47, 0x80000001, 0x6, 0x5, 0x4, 0x1000, 0xc, 0xf, 0x0, 0xfffffff7, 0x72f8, 0x7, 0xffff, 0x3b, 0x3, 0x3, 0x2, 0x5, 0xfffffff9, 0x6, 0xfffff4dd, 0x98e, 0x2, 0x3, 0xcc, 0x8, 0x3, 0x9, 0xf, 0x3, 0x4, 0xff800000, 0x10, 0xa9, 0x10, 0x3, 0x668, 0xe90, 0x9, 0x9a71, 0x401, 0x1, 0xb, 0xfff, 0x9, 0x4, 0x8000, 0xe4, 0xfffffffc, 0x9, 0xffff, 0x0, 0x5, 0x6, 0x46, 0x2133, 0x1, 0xc5f2, 0x400, 0x10, 0x0, 0x8, 0xa6c7, 0x1, 0x10001, 0xf5, 0x388, 0x4, 0x2, 0x0, 0x9, 0x40, 0x5, 0x8, 0x80000001, 0x2, 0x6af1, 0xffff, 0x7, 0x7fffffff, 0x9, 0x4, 0x81, 0xffffff09, 0x4, 0x3, 0x7, 0x8, 0x8, 0x7ff, 0x6, 0xffffffff, 0xf2f, 0x4639, 0x2, 0xb7, 0x63, 0x7, 0xffffffff, 0x9, 0x8, 0x10, 0x8, 0x7, 0x7fffffff, 0xe66, 0x8, 0x10000, 0x3d47, 0x1, 0x1, 0x80000000, 0xd, 0x4, 0x8000, 0x80000000, 0xf2e2, 0x4, 0x3, 0x5, 0xa, 0x5, 0x4, 0x0, 0x2, 0xe, 0x9, 0x4, 0x3, 0xb, 0x8, 0x8, 0x0, 0x80000000, 0x5, 0xc, 0x6, 0xa, 0x6, 0xb590, 0x7, 0x200, 0x3, 0x7f, 0xffff, 0x0, 0x5, 0x3, 0x68592512, 0x9, 0x5, 0x6, 0x3ffc0, 0x3, 0x7, 0x40, 0x2, 0x7, 0x2, 0x5, 0x3, 0x100, 0xce3, 0x401]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x5ec1, 0x3, 0xb2c5, {0xf, 0x0, 0x7, 0x0, 0x4, 0x7}, {0x74, 0x1, 0x5, 0x3, 0x6, 0x5}, 0x6, 0x7, 0xfffffff8}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x9, 0x5, 0x9, {0x6, 0x1, 0x9, 0x1, 0x3, 0x200}, {0x6, 0x2, 0x6, 0x0, 0x1, 0x9}, 0x5, 0x81, 0xd916}}]]}, {0xa, 0x6, "c099ec351014"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x90, 0x1a, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x45, 0x6, "1b6d07cf7f5ea30b86f245795f54bb362a54dc65fb3252d690f7e7ca7922365c6ec536e4c9bf6e8de5b2592de2fbd11334fcca70f737b05c5a2194cfdfa7726531"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_CGROUP_POLICE={0x50, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x0, 0x8001, 0xffff2b47, 0x0, {0x9, 0x3, 0xdfb, 0xfff8, 0xc1e1, 0x9}, {0x3, 0x1, 0x7, 0x9, 0x6, 0x5}, 0xfffffff4, 0x8}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_POLICE={0x4}]}}]}, 0x2fd4}, 0x1, 0x0, 0x0, 0x10}, 0x20044044) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0xc0844123, &(0x7f00000001c0)) 4.215256526s ago: executing program 0 (id=266): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x2, 0x10, 0x6, 0x8, 0xa, 0x0, 0x70bd2d, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0xe, {0x6, 0x6c, 0x2, 0x5, 0x0, 0x1, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1}}]}, 0x50}}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r1, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @time={0x3, 0x3}, {0xff}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r2, 0x8948, &(0x7f0000000000)) 4.208136272s ago: executing program 1 (id=267): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r3 = fanotify_init(0x200, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000018c0)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x400, @mcast1, 0x8}, 0x1c, &(0x7f0000001840)=[{&(0x7f0000000100)="95fd545a9c4f3600bf67221a1f222fcc65ba30ef4a1768a3972e1533c2d826bcbd97d73713302f350e407c754d88bbe9335532c75a065fa0b0080fd3b1", 0x3d}, {&(0x7f0000000140)="6cd9b0d0052c6af84cbd708002265454282e03f45ed1c89492ad7b49e0f45b66fde933a5223a12a6b86c2989ba68e7ea15f4fcca6201bcc384a3bc7dc4c840b7fef4b838d915402d717a47241dcde1267ef6428afe2f5cfeece728d5c505264e76798439225c7b18026a87ee6701573ce2b08cf290c5e2321b87578d2a850dc1d920ecadece7549e334ab2eb4455b9f993413fe05964f80da6cc956b7089827c988059d201b5b029da83b2425fae255b5b4bef78395127901017b4c8886f920b2c4f58c286eb9bcafef407f9861366e87bbcf931478690", 0xd7}, {&(0x7f0000000240)}, {&(0x7f0000000280)="9539f5f669f8c95f979223e0aadfb4c73dc702ab078116b8de03c90f561a654ccdef1da4b9d477303be35387a43869438208d2cc847f9ed9ffacece68b215e298c19427298d0af819d5644b7d47812dedafc323bc3bdfc452fab48aa57bd8e2246fd74dbd764b7c14064de19398dece48fea03f8f801c5663fd031d128e6776a2b5fa1d909a7070437a57445cba9444f639bf6e68e5bed8c96073664bcf551e08669c4e6d8f6ad60a3cbcfeaad9258de20685f932c159a3daf9b2e04472a2c996b560fc54158a267858649308801712fc33b6335288013bc187babe9ed08ca1271b25ab3090be7e442d193551bf09fbf508aecb7da", 0xf5}, {&(0x7f0000000380)="383a4b731ae5092602e899f4491b41025744f4c9dd0de468df4f77a8004f634e145f5260187648b8ebebf3a03e613e1b43d95a2a5b04e350def9d7f2a6f314e562ef894d46db0798bfc09ed020df1ced0fff6b5308a6408159597efda2881bc7e941ed72cc083aea0496baca13fad12c7464ba89", 0x74}, {&(0x7f0000000780)="16dd2f30c90e9fbfbd20e114e7290d3e67086657dca8c907f2d0371cee41a8e99dbe7f87d0ddfe06d9cdcc3722c1148a38aac999e01a337d279e3dbfa28e45b0b9c8717fb9e3a359af1c664f72a72a56211ed766544b65eeb07ddc0ca94c6b48f97b92d50608cb56d2c4847231585ec7765611b1dcba61a26f37307d1670db6fcc69ad950b40fc9badc775ed1bada91b25cd11640ca387f50fc9d66e9626062a5edffb7bda332975a6fb65eac15e497d6eeb5be7f801d35019ff3e3ad6135bd6f7de47473f90b79b8f43d4ea71df248d53e3ea25274a687a00812ced7e553f611bfea83b5bc95127a27d89f35e19289bd6ba4e4fe8f66be7b25a0c21985180cf78b10741c14b29b3af303d7411a48c19d705fbd4ea9e86d0fba17468b8209250c170db32db5c46a2069ebc1ea80fa0d275b701f120a18d7fa32f11830c9bd3f36435dd045c9e1679add3e7e7175f1c67f6b63c4d571e9a649913fb808800940fe60b22d05f5511cb2e80aeae358fc3d573591d6cdead0fd08e7739ca3edb9cad2a114cf74037a8ed39766e95390bc1bcf6362d946d02ed5c3e7897609aad06883b8d2ca591223ec5a4aaf8dbb5c152a096b5efc1bd33d691fb2c459573c2cf7940aa4f910f7815906994ab2728dedd6e47aa39fa504a789cde61d72a06627fe3dddecfa2003072dcb23bcda008645e656403989c85760b547ee67253d16bfe917b2631f7503759bafc12ad6d3a0f9a39bb63a5a780238945f7898a68d01588dcf8d1dded7adeb36c32ea2bc2ae93272b10810eab52bb7934b1060a0f264e50222bcf36fe94a8bc5568e41c835014d6bdf8fbefa717576f43ed118e700ee46a324525e7065bf7dd58857a28e3a9963ffb174c63ff79285c039b669d9df0dd796194f3e0ed49ddb3e89e5aaf5c8b5266d558f3aa2d1173b5cf8c773611247fbb7a8568b5e677105b9d79a5c80a08c50427a713f480f0f611ef4381b7a12720094c1b298af5c9898aa8567f9f76edd18a46cf515c2b4b711b84c89912c197034ea9d7f53f443a4ce62564544ef2d7b07da4b1ee42dc46882682a689a963c60e8ebd45607f73cfafecb14fe3d133b21ae96d7cd60e29f8238873b93a4d838096e5911802abe53738be1988cc74fc47f4a3dbc0e2f60438e358b4ed5fd8a917eef54229b8bd6975a4e21bb13bfa69294fea27dd7a1e1ef4008f6faf7506b5d4d1e44e6fff3db1f2410b1e742b869f149afd423841fad1a4e2c7d8faf9e3e0033ce6006bf27f3f5cc0cb63a2588445ad91b0ef1895e5018ed65c5717afddbbf75e45cb0a35f807cb28ec62a3735e4d7140e7b131c1b60d041275f4b07525510a9cd4ea33c9e453d602c23f6ff230ec31ebf67da5389569a3d95a18208f49dd518a7eb4571c499c62f45f55fb362f4bcc59c045df0589ad4628a9259dfbb4e8a0dd38b831de93d3ff844dcb2d9e655e2518af257335213da6a641e8de947844f682942a17cb671ea20db3f107656175625d042c3b51fdfb30b0d49d7a5ff67a5ec6d880b98f84f735abc00befbaffe10d76535a46c25443e080f86102238ecbd528e0654e0f726f554eba8b825de241c46f0ba0b215a7bdd57c8603a8fe9356b59c77f513152f75af574efac225bb92742b67f7827a9ed1fad5f47d69ac68ab94feb3dcbe4f9479a94b2bc53c34332ed0cd1c3dc6fadd105f3a6cda7431e36d31db732dd718c71204e16afa6fd958cfe74998eb3796c85d7c33055ea60d8f20caaa4c8a708625de4657c1f872d0ecd530b75fd6a802495a0f18c4ebcc314853cb88d445ae95eb01bea1c522ca6506bcaea405dfcc255f84ca1073914de43f8c7f2f65ca4efd2bebc7304f97677d0b661580c8637b73f7b38fbe927b8b1926f979b007dc217b96384816d538f1c952ce2bdb6b896ffc6cca7f5b2d6695981ec5f09c3399bac63524f2cd314844d35740e6be955d3b5c396a92ddc174c6d0e063d7a90023a35dfadef594950fcf1cfadb4a587837d80a1a6758080b3b599bced380696e91af40e31376dcf0a6b8641691fa7e259156dc6e897a39bbdb3a42ea07ffb51c8c3d03accf516a59e005fad0f8082f1dac6fd2ea6cf4ccba64f352b95b0bcd4a03deb6d5241e4797a8b62b533cb17a9965205587b4b5a3afd9a7508ce33476826a0ba0091483fc7b675e2b7fb994b33a060764a2f01333967697f0b71058828f38a8b07935868c50e3837dd1717875ac0a03e367cfc421486f27b15b5cf094341f7fc40f5aa7ef138eb2ba65f35339f6e7e1ab28dc61f13b7334a5b2f2ab63949d6703cf6b4fcd275a04faf743de9fc1a6cfdc03dccb33b510ddbd174dc37ae8ac29a37adb7846cec9d9274543c1dcd53c75a1592b8fca31106fc59759a223d832c75d014f121813fbf6597cdb49d4c4b4530483c4936f3ef2c94730ebbadbe373a0c94bc3d735c53e381d84ae770a56cfa1e4c0814cd86d01de995186957f2431c19e4799c343c67c8aafe52d8772c4cc7e7c88d0fa13c501551ed6e73a655658b4b5cf3100e068eb0edb7e5cb150b44965e9b1684eefd7ef984298b09508e1121ecf76a6d27e2d054ff0bf9e5af06ec7cf710ef6698cebf6f1129d9b1bc4001d9028c2ad26861abb4013868b14506add22c81f1f726bdadfc0fb0e317b277fa47ccdade67d271406d93a626097b14260c3c6879a7bc35e753e44877772446910a4fbc8cb0c1acb1c8de8242dcd8bde642020570a9a0bc25ae30021bef3c8b8f7b70bd9a142640222d9c193c2340dad482e332881ab407fa994141f6c787d6e7e7b89287691c5b782c6208817a94f381ed0da33dea199a98b0e19805b57772ef92d9cc3b615e2e73c1ed9749cde0eb7fd3bdb069fa2cf7e201858836597f504740c6290feadeab97d656bb0d16560f6ad34223e496abbbca32ef8e27d12ceddf14c11b903d3a8cfddea693ba0dfb3b450e4093b6b738ce32158094bcb6ca4f44d7ea4962c3e0035a121454f4f15b52a217318dd7750d560c20bccf7ba0197ba767e2bdca21beed3390b3fb4a3e4b62d86091ebec119149eabf7904bbbe226e9eb113cfc0e27cba7e2f210b5ffed1f4e6cf40bca8cec558af2cde94515c102ab5d292f7afef9ad99751448f374f8eab09aa3dfe83a937dd737c88bb33f26c9aa144bfe9f774ed29a83a38b57fe0b3a233d5b7f65f3aa46d59440dd6e4b9192fc61c24ab6ac25706283b3535c42382db3a49b86c7528046f25602b63216bfb7407f5a3c2b19b8b5ca75799434cc395baa58789026236debdd83c495576aac48d4977680e6167e30faf5c0b2a65a88689d7fd50d9205db40a9ae763befd12004e476ee2ba3feae39096dd13e37d23e317073c90675903f03018abff82c8ab46c0dded64249dd58b9c16e9d8929a80bb5e01f5f2f942b91f3dd6c7ca3f04aabc5c84c5580c5903f471aed9bb72ea5ac50eeb85c1f32669a12c299f490abd1c3ed3cdf95b6b9f0130610ca05547459652cdfcd26484eed6ad48d5a7023796f9b778f2c6750c66562a784b1712aeb4af068296ddbd2981a3bad47d9c82a03ca42754ac838234a710e7563637d650b3bd670f61c82195550b8e7ca4583d412500af1246bb0742809b68369cc17957967236cff6eb382bdd659375e5e899900ac49a7da25e1a107b7e9256ea3a44dac00b9e567a471aa5f88af28bb080f410efed1b762cb1b99c4a8e7c27dc887ebd7cedfd7021f51f5cb45ce2d5a21c654a3cfc842a57dd55a04227bf98067f66fc992eaab1a4201158cb499145cef677f073b76e8a72d31183267d361d0c8d5b844d0fd5f15ac5590eb381d236973f7e7829a49a19e6c5df34c7166cfb3e3de44dfc187ed0faff8732d0ac673c81c96fc0e75f120a25ef903eb6adb3e0d989925c65e25c9fe984b2611e07900537c41bce6ce71da543aaad8e0c0e6e3903ae97e29f0e991e13fd402af37c79868304cc27acc3e81cd1f4cfd184efe515ddf8e76490b3bbb8bc84a98afbb878eba3257cad59f30ce814a6c52fa0ca9f3bb02eae1970ce76de535a44695b1fdbfbaae8112983e93b64629ef285784f812ac6f5c6c83462b855bfd52e3eb44efda197f7eba0197851f575c5c7d0e84fb98a2d4b6fa21dd2b729a1e0efb7d720d587c45fc4dd976dabf4390c3e82b0be493091da10eda90a414677c3ac31e0da87d0f4603c58964d5e2d504d7f98f997227913ab12fbac1cbba146772d2838c74685a73db0ace932e95cce6f2415186c387e265a6bfa5192bd240028d8d2e7d5eb9aa8a3c8a6f7124ed16541811b6512794eeef337062921f5f92b15add3e7bd2a87c84ca9450edde257177f68df3c33ed7626e84c11ce0f81e4ef3689beb82238caccd0208e6e582cae7f31811fe11620c402c5c4315c5085a3b5d1d056d36baf0cc842cedacda8132361d59efb8a327612237148c4d6eae8ad3c94245780f6cc3582f446ebd8e3750f00b727aeda2c858a63015f8222503858d0adf1a5367bc59f72c6db6a76b8405977cbf16b267987bfc2092a94e935b4264b43b2370db34a09b195eaf0cab4706df8315fe6c05d025469732db93693cd70127faa33e5dc6cc49578f54fe82037138e9c177f4ff85f5cf51e3a59cb93f48d8cefb7ef5ea9a1f7749e5aefa1c02d2ff711ac0f502de2e817f42805a6dd03a9a6ce5044ad4749007e5d6b60aac33bdccf0a4a64ea54b868c5ac9a956d8dbedd569ea2498ba3606f4f96b93360d009b7c47f65306c6c0312545f2c8660bae8163331929f17712b58881e9431286a05c94e535fec554194a2bb50356dd956c62710a200926803b8f916ff98f598cf07baa1fc65a947761caa2e7a68d79f849c2183ba422367531828afefbea9752f485d0fa5cd926fc5b785ce20e05c28ed8693b3cc354c7b026522a7e332be7e249a26b53dd92a869eee00ff885e2f63830a304326601435bdfe9a5c5523372198893335ea4082739f668a1ff52b03129f59e8f47e53fea0258023bcc9ebc1b777882d99cb72789d97ea43c1958bf3e9f316a4f393539ce9d80ee758544cce52f4fa63e7265749dbcfb06cbb8149178d66748253fc32832c20da6f96765973d846da7d3c7aa3baa5b42186c9ab810ad62df419d09d525d064806abb62cf613a8bf9c5d57c44d07b190b00a4bcf14bd531e6330deec3737a98fc96cff54a5343bcbbddda679814cc64589efd1630156f52aa3f6f12bbb1ddb7030d97a4ef8c72fcc331b6304ca233998171aee74110b0a0ac2fe2eeffc90fe1ed28fc88cfbae044c00f87942b7bf7ef11498a3e0a819a956c1d6bae9855a1152c460f546642712d8821af76ac53a30bb3861ababd7459759e169d1378f770e393ed940eb6f91cb62f8c1a4f5d97a7827e5422cd75ed5077b9dc3714bf2702bd7a1abd9bc8646b86a511ed6538a13e9ec3c686a760d735210751cd3815a3d26389445d5a0d13147b489f31e7b6b827b7b8ddf7dc0c02507dcc4676cf45a026447bb9625248b32db035deb2b8c9ca28af9202eafee22acf0bc59331ba808ea4efa912e57b73fcf709efb223b2941119c51e88f0989fa02b1ea99046c48b30ce026b4c9768aa672370ed26876666c1789ee82952896d5698217d2664cf5a3d1a464f0af2972a539751fc411517ecc41d292c18deffdfad4f4ca63219a89d51fc337ea3b884cd640d8a11163d31092ccd02dfce2eb6e1e03abbf0a15c5398e3c8d48d3e8415a555c74dfa6f10faec9ff4cb5befcfa2147987f4206bc8dea32548cdd5a8d256f95dcf9a19253014", 0x1000}, {&(0x7f0000001780)="f19e8912427ebf9d9c2aa94354667bfc1e88688cd8dbd2f1beb53aaf71413cdcc8cb2a43af0b3e3c091ad8e71727a0ba80b9f3aa9699287ac9ffa5e22df6cf79a4e9b8d2ba1287525e1a8418e7f19868a89d08882fcbc75a1eb10405962f1d4a9ff675cbfa0debd35e5114f1e6dbc7d4266b18f05630dd2599c67d57f100358c101bd7e6507957c902b18b2f5c8b3726f8", 0x91}], 0x7, &(0x7f0000001880)=[@sndrcv={0x2c, 0x84, 0x1, {0x4f, 0x0, 0x1, 0x1, 0x5, 0xffffffff, 0x3, 0x4}}], 0x2c, 0x8000}, 0x1) splice(r2, 0x0, r1, 0x0, 0x10000807, 0x0) 4.089768042s ago: executing program 3 (id=268): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000f5ffffffd3776a1aa5b09b60819b32997e57a157ef4532e8dcfd49d6cc69380b8955e0281949228761ff2e4e6ffda7c1167a693a48d2dbcab7798737c54b08a30e330dfbd61167cc35fdd2ea1fd41ca688f39bb68b7fbecd861c3dce49c7cdf97f57ee2cbbc14371da4c9dd97bf7664bcabaa213565d69c6180c994c47e4bb72ceabd48ddcf9c59ebbc7d993f351124b1262836f3fcb0d409950cfa5f3c28912c7d77732f8588bba1e823b8f6ac776fa00", @ANYRES64=0x3], 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)=0x9, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x8, 0xe9e3, 0x5, 0x22, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0x5, 0xe661, 0x4, 0x7, 0x5, 0xa, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x7, 0x1, 0x407, 0x5, 0x3e, 0x8, 0x4006, 0x6, 0x4, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xbffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012e, 0x8004, 0x8, 0x4, 0x129432e2, 0x1, 0xf9, 0xe, 0x10, 0x6c7, 0x9, 0x8, 0x80000003, 0x203, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xa1, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ff, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x10000004, 0x2, 0x4, 0xb, 0xff, 0x101, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x200, 0x5, 0x3, 0x9, 0x250, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x2, 0x5, 0xc, 0x401, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0x7905, 0x4, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x40, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ec, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x7, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x104, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0xfffffff9, 0xc8, 0x9, 0xfffff000, 0x7, 0x3, 0x7e, 0x100, 0x9602, 0x1, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7, 0x8, 0x30b1d693, 0xa21, 0x1000f40, 0x7, 0x1, 0x9, 0x0, 0x4, 0xffff, 0xb1e, 0x5, 0x200, 0xffff3441, 0x40fff]}, 0x45c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x478044, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1000000) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f00000001c0)=0x2001) r7 = fcntl$dupfd(r6, 0x0, r6) readv(r7, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) write$snddsp(r7, &(0x7f0000000380)="88e8c00c05dbb58b776f34f9b779d998d21eec3200174bb169f81d1590532836de01000000000000007b", 0x2a) landlock_restrict_self(r5, 0xa) 3.491863274s ago: executing program 0 (id=269): sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4880}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x8000000000000001, 0x6, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000004, 0x800000000000002}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x4, 0xf0ffff, {{@in6=@loopback, @in6=@mcast2, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.414181346s ago: executing program 0 (id=270): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000080000000001a0000f700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff0000000000000000000000000000000000000000e4f25b1b4a9847392f82eabf6382381d68780f80cb93a28e5dd1f8df95bf33885df78b9536ec8c87f1769fc0a9553a39136ac3e79f83bb462ee2b1f2d597daa6ca1ab22a984e4ef9438718fc57726b11ea930ef86f9dfb833123eb0e7b7a0802e6b4d6f09797adc6decad02e08d9587c5e0527444df7d59575f3d2a84c38cd4d"], 0x50) syz_emit_ethernet(0x2e, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r4 = shmget$private(0x0, 0x2000, 0x88, &(0x7f0000001000/0x2000)=nil) shmat(r4, &(0x7f0000001000/0x3000)=nil, 0x9000) msync(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x2) 3.413471278s ago: executing program 2 (id=271): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x4029044) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x4ff5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000680)=""/150, &(0x7f0000000500), &(0x7f00000005c0), 0x4, r1}, 0x38) socket$kcm(0x23, 0x2, 0x0) chmod(0x0, 0x35e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, r5, 0x3, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x50) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB=' '], 0x20}}, 0x200040c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000440)) ioctl$PPPIOCGIDLE(r3, 0x8010743f, &(0x7f0000000040)) 2.495617112s ago: executing program 0 (id=272): mount$9p_fd(0x0, 0x0, 0x0, 0x1200880, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xe) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r0, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x0) 2.471047006s ago: executing program 0 (id=273): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) gettid() openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e000000040000000400", @ANYRES32=0x1, @ANYBLOB="000000d17c"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000340)="0813c269b382e4847542a45d73f12aa80f63d1254b63c8c821168cca220b64ff02d5433bd2d92492f3f0aea96b09a46c3a46764873641785b7f45932928b1cc8959b0877d716342478e9b286bf3da21a4804e892cff4f77ed4d7d790948e23a1d5ae5ee1f520b84eb178f3b716a969120a78d1764a18440c6df08918a8327aa46ffb7032f489c07db0ae50513d784a77de8e71b54325f6eb262a9bb6b4b9b6087cdbbea30547c4391b455c0bf13ddddafb26011538a93d0f9f9703dc6fa5b49c524219a5fe2ba6ed5244b26a8485e17e5cbda6728f6369b815851e985f587ba8b9bdf18d0c48edd0c5a4327bcc998e5900") syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4008000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0xe) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) 2.453912772s ago: executing program 2 (id=274): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000500), 0x404, r0, 0x0, 0x1ba8847c99}, 0x38) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000340)={0x40, 0x6, 0x8, "9573ca2ee4a1f3e1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x34}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) pread64(r1, &(0x7f00000004c0)=""/248, 0xf8, 0xfff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.707053457s ago: executing program 2 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r0, 0x1, 0x2b, 0x0, &(0x7f0000000380)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000100)=@delchain={0x1970, 0x65, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x4}, {0xffe0, 0x8}, {0x10, 0x3}}, [@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}]}}, @f_rsvp6={{0xa}, {0x60, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x4, 0xfffffff9, 0x1}, {0x8, 0x9, 0xffffff81}, 0x2, 0x6, 0x80}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @mcast2}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x5fb, 0x1, 0x4}, {0x8, 0x6, 0x7fffffff}, 0xff, 0x6, 0x6}}]}}, @f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x7, 0x5, 0xfffffffd, 0x4, 0xe, 0x3, 0x0, 0xffffffff, 0x5, 0x1, 0x1, 0x3, 0x3, 0x7fffffff, 0x6e4, 0xcb, 0x8e9b, 0x1, 0x1000, 0x89f, 0x9, 0x3, 0xd, 0x3, 0x9, 0x4, 0x8, 0x5, 0x4, 0x6, 0x5, 0x7, 0x400, 0x932f, 0x3, 0x3, 0xa, 0x8, 0x3, 0x8, 0x3, 0xa, 0x0, 0x6, 0xfffffc00, 0xfffffffa, 0x3, 0x9642, 0x0, 0x3eb2, 0x5a6, 0x2, 0x4, 0x5, 0x4, 0x8, 0x7f, 0x101, 0xa, 0x5, 0x2, 0x2, 0x8, 0x1, 0x6, 0x6, 0xfcc, 0x7, 0x8000, 0x1000, 0x800, 0x2, 0x6, 0xffffffff, 0x4, 0xb6fc, 0x3, 0x7, 0x7ff, 0x100, 0xe, 0x1, 0x3, 0x8, 0x3, 0x1, 0x3, 0xfffff2bc, 0xa, 0x4, 0x1, 0x401, 0xfff, 0x1, 0xfffffeff, 0x5a4, 0x1, 0x2, 0x6, 0x2, 0x40, 0x6, 0x6, 0x3, 0x4, 0x2, 0x40, 0x1000, 0x78, 0xfffffb3c, 0xfa, 0xfffffffe, 0x7, 0x80000001, 0x54, 0xffffffff, 0x9, 0x394d, 0x7, 0x5, 0x99f, 0x8, 0x127, 0x6, 0x8, 0x9, 0x0, 0x9, 0x2000, 0x1, 0xfdff, 0x2, 0x1, 0x7, 0x7, 0x8, 0xfffffffc, 0x8000, 0x5, 0x5ce, 0xc, 0xfffff9ce, 0x9c, 0x8, 0x0, 0x101, 0x2, 0x6, 0x10000, 0x4, 0xffffffff, 0xf, 0xf19e, 0xfffffff2, 0x1, 0x5, 0x80, 0x0, 0x6, 0xb, 0x5, 0xce4, 0x3, 0x8, 0x0, 0x5, 0x6, 0x2, 0x9, 0x3, 0x4, 0x0, 0x6a, 0xfffffffc, 0x2505, 0x73b6, 0xdc4, 0x5, 0x401, 0x7, 0x10, 0x5, 0x9, 0x39bd, 0x7, 0x8, 0xfffffffd, 0xf088, 0xe1, 0x4, 0x9, 0x3, 0xdd, 0x5e, 0x1, 0x3, 0x9, 0x7, 0x5, 0x4, 0x2, 0x7, 0x5e, 0xba, 0x1, 0x8, 0x6, 0x9, 0x3, 0x8, 0x0, 0x2, 0x1, 0x5, 0x9, 0x1, 0xb, 0xf, 0xfffff724, 0x400b, 0x2, 0x9, 0x9, 0x7, 0x1, 0x4, 0x8001, 0x2, 0x80000001, 0x9, 0x34, 0x0, 0x2, 0x2, 0x2, 0x10, 0xffffffff, 0x7, 0xff, 0x8, 0x1, 0x401, 0x847, 0x6, 0x7, 0x80000001, 0x8000, 0x3, 0x1e1, 0x7, 0x6, 0x3, 0x4, 0xebcc, 0x8a]}]}]}}, @f_rsvp6={{0xa}, {0x47c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xfffffff8, 0x8000, 0xfffffffb}, {0x8, 0x5, 0xb}, 0x33, 0x7, 0x4}}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_RSVP_SRC={0x14, 0x3, @empty}, @TCA_RSVP_DST={0x14, 0x2, @private1}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0x5c5, 0xfffffffb, 0x8, 0x9, 0x9, 0x8, 0xba80, 0x8, 0x7, 0x8, 0xfffb, 0x4, 0xce6, 0x6, 0xbba, 0x1, 0x5, 0x3, 0xad, 0x3ff, 0x8, 0x3, 0x6626, 0x8, 0xff, 0x1, 0x1f0692ab, 0x0, 0x0, 0x4, 0x2, 0x3, 0x8, 0x8000, 0x7, 0x81, 0x5, 0x4, 0x9, 0x9, 0x8001, 0x1ff, 0x1, 0x0, 0x506, 0x5, 0x6, 0x3, 0x0, 0x7, 0x7, 0xffff, 0x8, 0x449, 0xffff, 0xfffff016, 0x5, 0x800, 0xd, 0xffffff27, 0x9, 0x5, 0x7, 0x28, 0x1000, 0x4, 0x3, 0x9, 0x1, 0x3, 0x5, 0x2, 0xadd, 0xffffc894, 0x2, 0x10000, 0x146, 0x3, 0x4, 0x5, 0x71, 0x80000000, 0x4, 0x1a27, 0x9, 0x7fff, 0xee, 0x0, 0x319, 0x29ce, 0x81, 0x7, 0xfffffffb, 0x7, 0x800, 0x4, 0x9, 0x9, 0x8001, 0x2, 0x6, 0x5, 0x7, 0xfff, 0xaa, 0x7ff, 0x4, 0x4, 0x2, 0xa, 0x8, 0x2, 0x20000000, 0x9, 0xb, 0x12cc0, 0x40, 0x2, 0xfffffff7, 0xbe4e42, 0x80000001, 0xfff, 0x3, 0x80000000, 0x2, 0xfffffffc, 0x101, 0xf62e, 0x3, 0xff, 0x7, 0xfd12, 0x3, 0x0, 0x6, 0x5, 0x9, 0x8, 0x4, 0x6, 0x7ff, 0x7c6f, 0x1e, 0x80, 0x0, 0x3, 0x80, 0x81, 0x5, 0x7, 0x400, 0xa, 0x4, 0x1, 0x0, 0x670, 0x7, 0x8, 0x5, 0x0, 0xf, 0x1, 0x3, 0x3, 0x8, 0x2390fbfe, 0x8, 0x7ff, 0x2, 0x0, 0xb2, 0x4, 0x6, 0x7, 0x1, 0x4, 0x7dd, 0x5, 0xff, 0xc574, 0xb, 0x7f, 0x0, 0xd6, 0x3, 0x2, 0x0, 0x100, 0x2, 0x5, 0xfff, 0x6, 0x6f, 0x4, 0x5, 0x1, 0x1000, 0x3, 0x5d, 0x7f, 0xf1, 0x7f, 0x6, 0x7, 0xfffffff8, 0x7ff, 0xfffffffd, 0x4, 0xe8, 0x0, 0x3, 0x90a1, 0x4, 0x80000000, 0x61, 0x7, 0x6, 0x101, 0x0, 0x5, 0xe2, 0x3, 0xf1, 0xfffeffff, 0x5, 0x54, 0xd, 0x6, 0xfffffe00, 0x4d, 0xe, 0x100, 0x1, 0xc, 0x4, 0x3, 0x3ff, 0x7f, 0x1, 0x4, 0x8dac, 0x9, 0x8, 0xb, 0x1, 0x8001, 0xe, 0x4, 0x10, 0x8, 0xc, 0x9, 0x3, 0x2]}]}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}]}}, @f_tcindex={{0xc}, {0xf58, 0x2, [@TCA_TCINDEX_POLICE={0xc, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}, @TCA_TCINDEX_POLICE={0xc7c, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffb}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x4, 0x1, 0x6, 0x8, 0x8, 0x5, 0xaf9, 0x10, 0x9, 0x5a, 0x3, 0x0, 0x7, 0x5, 0x8, 0xff, 0x7, 0x81, 0x9, 0x8, 0x9, 0x0, 0x36, 0x3, 0xf542, 0x550, 0x3, 0x9, 0x6, 0x7fff, 0xd5e, 0x3d, 0x6b5f9eed, 0xc, 0x1, 0x1, 0xfff, 0x800, 0xf, 0x2, 0x2, 0x9, 0x1, 0x4, 0x5, 0x3, 0x9, 0x1000, 0x7fff, 0x8, 0x5fb, 0x8, 0xb2e, 0x3, 0x8, 0x6800, 0x10000, 0x5, 0x0, 0x2, 0xc21, 0x200, 0x5, 0x401, 0x7, 0x8, 0x5, 0x9, 0x7f5, 0x80000001, 0x2, 0x6, 0x3, 0x1, 0x2, 0x9, 0x9, 0x8, 0xffff0001, 0x6, 0x2, 0x8, 0x0, 0xff, 0x7, 0x3, 0x2, 0xfffffff9, 0x9, 0x7, 0xa045, 0x7, 0x15, 0x0, 0x0, 0x1, 0xf6, 0x4, 0x5, 0x6, 0x6, 0x200, 0x1000, 0x8, 0x9, 0x4, 0x7ff, 0x80, 0x3, 0x8, 0x5a2d, 0x7fff, 0x7, 0x7, 0x3, 0x72, 0x69, 0x9, 0x2, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10000, 0x6, 0x9, 0x14ef1258, 0xaaf339e, 0x1, 0x9, 0x2, 0x3, 0x3, 0x10001, 0x9f, 0x40, 0x34, 0x7, 0x4, 0x4f7e, 0x7, 0x56, 0x7, 0x101, 0x800, 0x10000, 0x2, 0x2, 0x5, 0xffffffff, 0x4, 0xee, 0x9, 0x6, 0x4, 0x0, 0x0, 0x5, 0x26, 0x9, 0x2f, 0x8, 0x3, 0x7c, 0x1, 0x8e, 0xfffffffd, 0x9, 0x9, 0x3, 0x4, 0x6, 0x7, 0x6, 0x8, 0x8c1, 0x69, 0x3, 0x9, 0x6, 0xd, 0x2, 0x4, 0x0, 0x2, 0x1, 0x7ff, 0x3, 0x0, 0x7fffffff, 0x6, 0x5, 0x5, 0xb, 0x3, 0x9, 0xb, 0x579, 0xffff86bf, 0x1, 0x9, 0xfffffffb, 0x1, 0x8dd7, 0x3ff, 0x2, 0xe, 0x5, 0x4, 0x0, 0xfff, 0x9, 0x3, 0x9, 0x7, 0x3, 0x7, 0x7fff, 0x7fffffff, 0x6, 0x0, 0x8001, 0x916e, 0x4555, 0x10000, 0x4, 0x4, 0x7, 0x10, 0x5, 0x0, 0x10, 0x40, 0xf9, 0xffff, 0x5, 0x2, 0x0, 0x54a, 0x2, 0xf, 0x4, 0x8, 0x6771, 0xffff, 0x8, 0x1, 0x3, 0x1, 0xf, 0x35bd, 0x711d, 0x6, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f41, 0x1, 0x4, 0x7, 0x8, 0x1, 0x4, 0x5, 0x6, 0x6, 0x80000000, 0x8, 0x9, 0x0, 0xc6f, 0x9, 0x7, 0x8, 0x2, 0x7, 0x6, 0x8f, 0x9, 0x8, 0x9, 0x0, 0xe72, 0x2, 0x200, 0x1, 0x5, 0x5, 0x2, 0x1b27, 0x40, 0x7, 0x7, 0x2, 0x1, 0x6, 0xfffffff7, 0xc1, 0x0, 0x3, 0x80000000, 0xfffffc00, 0x5, 0x2, 0xdf, 0xffff, 0x9, 0x1, 0x0, 0x7fffffff, 0x8, 0x621e, 0x80000000, 0x4, 0x6, 0x3, 0x2, 0x3, 0x4d5, 0x1000, 0xe8, 0x7fffffff, 0x2, 0x5, 0x0, 0x1000, 0x448771f0, 0xc921, 0x94, 0x8, 0x6, 0x10001, 0x9, 0xfffffff7, 0x7, 0x6a, 0x8, 0xe, 0x1000, 0x2, 0x0, 0xfffffffe, 0x7, 0x5e, 0x6adc000, 0x101, 0x7b7e, 0x9, 0x5, 0xbcc, 0x3, 0xe, 0x7, 0x7, 0x10001, 0x7, 0xd, 0xfffffff7, 0x1, 0xf48, 0x9, 0x0, 0x7, 0x6, 0x1ff, 0x9, 0x1, 0xb4, 0x10, 0x42b, 0x3, 0x204ad46a, 0x7, 0x4, 0x4, 0x400, 0x5, 0x6, 0x6, 0x0, 0x8, 0x95, 0x1, 0xc6b, 0x8, 0xd91, 0x7, 0x4, 0x8000, 0x3ff, 0x7ff, 0xb, 0xfffffff7, 0x800, 0x3, 0x0, 0x3, 0xe, 0xffff0000, 0x6, 0x80, 0x10000, 0x7, 0xffffffff, 0x6, 0x0, 0x8, 0x8001, 0x8, 0x800, 0x66, 0x7, 0x1, 0x7, 0x0, 0x6, 0x5, 0x7, 0x3, 0x7ef8, 0x9a26, 0x7, 0x7, 0xc, 0xed6, 0x7, 0x101, 0x6bc4, 0x3, 0x1, 0x7c9, 0x6, 0x0, 0x3, 0x5, 0x0, 0x5, 0x6, 0x8, 0x7, 0x2, 0x101, 0x800, 0x6, 0x6737837e, 0x7, 0x6, 0x2, 0x3, 0x40, 0x5, 0x80000000, 0x6, 0x5, 0x9, 0x1, 0x8, 0x5, 0x8, 0x8, 0xf, 0x1, 0x9, 0x8000, 0xd, 0xadff, 0x4, 0xec3, 0x2, 0x5, 0x7, 0x6, 0xfffffffb, 0x1, 0x9, 0x6e, 0x7, 0x1, 0x2, 0x873, 0xe4e, 0x6, 0x8a29, 0x100, 0x2, 0x1, 0x4, 0x3, 0xfff, 0x2, 0x4f89d080, 0x6, 0x1, 0x6, 0xa28c, 0x0, 0x8, 0xfffffffb, 0x100, 0x80000001, 0x8000, 0x7, 0x0, 0x40, 0x80000000, 0x0, 0x6, 0x4, 0xfffff000, 0x6, 0x569b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0xfffff000, 0xfffffff8, {0x4, 0x0, 0x108, 0x4e18, 0x2, 0x8}, {0x4, 0x2, 0x2, 0x7ff, 0x3, 0xf3a5}, 0x6, 0x6, 0x1}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x3, 0x8, 0x5, 0x6, 0x3, 0x9, 0x8, 0x7, 0xfffffff9, 0x5, 0x1, 0xfffff333, 0x6, 0x8, 0x5, 0xc, 0x9, 0x2, 0x2, 0x6, 0x1, 0xa, 0x106f7297, 0xd6b2, 0xcdaf, 0x0, 0xa844, 0x2, 0x3ff, 0xe6, 0x9, 0x6373, 0x4f, 0x9, 0x2, 0x5, 0x6, 0x6, 0x6, 0x4be7, 0x3, 0x7, 0x5, 0xb9c6, 0x1, 0x2939, 0x1, 0x4a8, 0x4, 0x6, 0x3, 0x6, 0x6, 0x0, 0x9, 0x7, 0x7, 0x0, 0x43, 0xb8, 0x9, 0x1, 0x8, 0x4, 0x6, 0x2, 0x6, 0x1, 0x0, 0x800, 0x10000, 0x0, 0x6, 0xd, 0x5, 0x8, 0xfff, 0x7f, 0x101, 0x0, 0xcf11, 0x8, 0x0, 0x8, 0x3, 0x7, 0x4, 0x1, 0x3, 0xb, 0x0, 0x1ff, 0xd, 0x10, 0x2, 0x1, 0x8, 0x3, 0x4, 0x4e6f, 0x229, 0x3, 0x3, 0x1000, 0xfffffff7, 0x80000001, 0x7, 0x8, 0x2, 0xd, 0x7, 0x8, 0x7ff, 0x7fffffff, 0x4, 0x1, 0x0, 0x38, 0x1, 0x1, 0x6, 0x2, 0xfffffff7, 0x200, 0x0, 0xc5, 0x1000, 0x401, 0x6, 0x0, 0x1, 0x2, 0x8001, 0xffffffff, 0x101, 0x1, 0x2, 0x9d34, 0x2b, 0x3, 0x1, 0x4, 0x80000001, 0x10000, 0x1, 0x8, 0x5, 0x2, 0x7, 0x7fffffff, 0x1, 0x0, 0xa000, 0x7, 0x3, 0x6, 0x5, 0x401, 0xe2, 0x18000, 0x6, 0x4, 0x8000, 0x100, 0x8000, 0x1, 0x144000, 0x0, 0xffffffff, 0x896, 0x400, 0x6, 0xfffffff9, 0x0, 0x10, 0x7, 0x0, 0x2, 0xd15, 0x2, 0x1, 0xd, 0x3ff, 0x5, 0x5, 0x10, 0x1, 0xb98, 0x5, 0xffffffff, 0x4, 0x3, 0x1, 0x7f, 0x5, 0x8, 0x8, 0x101, 0xf10, 0x826, 0x3, 0x55, 0x80000000, 0x2, 0x200, 0x9, 0x6, 0x1ff, 0x0, 0x4, 0x10001, 0x1, 0xa, 0xef8, 0x5aa6, 0x2, 0x6, 0x400, 0x8000, 0x2, 0x18, 0x5, 0xa6, 0x9, 0x0, 0x23, 0x6, 0x8, 0x3ff, 0x3, 0x9, 0x7ff, 0x5, 0x3, 0x0, 0x2, 0x9, 0x6, 0x8, 0x3, 0xfe000000, 0x9, 0x4, 0x80000001, 0x101, 0x8d7a, 0x1, 0x8, 0x3, 0x2, 0x47, 0x5c, 0xd0, 0x2]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}, @TCA_TCINDEX_ACT={0x2c4, 0x7, [@m_xt={0x250, 0x7, 0x0, 0x0, {{0x7}, {0x194, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TARG={0x85, 0x6, {0x180, 'raw\x00', 0x80, 0x0, "1aa86455c03f8b028b91dcca598909b0092088dcd2ebb9801fcda796a1134f7aec695ea12056a0a9f0969b57a7fa39a2ea3e6c46fe1646a1b29cacd824fc630181865dfd50a217996b156cda69bf9929e71df6614a62988fed6c08"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0xa0, 0x6, {0x0, 'raw\x00', 0x7, 0x2, "3609facec4a0f0be214ad2ddf1eeb09aa2238b310091b76005c3b10f728ee547e70c4923805b6a05600eccf011d848b8c5012b2dc25a1e8a208659a0dcc3bffcb25153ea3f2a8ee7a0d4c628c95cd5a365a19603068e068132c39ddadf597727bda255440e54dee06f130d5c037cd1884722134b24cb"}}]}, {0x97, 0x6, "0ffcae33079531ebfff08468a7f96a9dbf1c8ca01d9e1ae9dda18062f300ce4c16f79adf8bf5052dfb9341bc378d56702d54780b723ef0014ae8498bb126cb421ad793c48c30d7ea1124db2166e24973ad595359f88c0bac3bc70fce1c2ea3cc1f8218374a706bbb5950ab6a57eea1448acbdffb965a3ed04937bf732f56ffed2c69a67153cc04b64a53d5b9ac4725fffc83d1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_bpf={0x70, 0x0, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x10000, 0xffffffffffffffff, 0xe6, 0x401}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3, 0x1e, 0x76}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x7a}]}}, @f_rsvp6={{0xa}, {0x68, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xc, 0xa2d54df2efeca273}}, @TCA_RSVP_DST={0x14, 0x2, @private2}, @TCA_RSVP_POLICE={0x48, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x1eb5125f, 0x8000, 0x3d8f2d8f, {0x3, 0x2, 0x1, 0x1cf5, 0x2, 0xa1}, {0xac, 0x0, 0xffa1, 0x6, 0x7, 0x79a}, 0xe, 0xc2, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}]}}, @f_rsvp6={{0xa}, {0x2c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x33}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}]}, 0x1970}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0xc1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) 1.595949751s ago: executing program 2 (id=276): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4024587b, &(0x7f0000000b80)={{0xffffffffffffffff, &(0x7f0000000040)='/dev/rtc0\x00', 0x10b481, &(0x7f00000000c0)={@align=0x401, {0x2, 0x1, 0x8}}, 0x5, &(0x7f0000000140), &(0x7f0000000240)=0x4}, 0x8, &(0x7f0000000ac0)=[{0x3, 0x6, &(0x7f00000002c0)='/dev/rtc0\x00', &(0x7f0000000480)="ff72245d6af6300159d38703541fed4377463f82031ae47347ca36d67225d96dd5ff7778060318f1fcadd9da859cbb42cb71", 0x32, 0xa}, {0x2, 0x2fe5, &(0x7f00000004c0)='/dev/rtc0\x00', &(0x7f0000000500)="bb96dbccfe1529e6de82552e1c8299a3848c080fa87dc6a3f1a1ea0bf3963666a60d28761684b0bf50b80bd9082f5f0c61759953488baf24ab9f0be2e72686980c8195bc5ed2095e82fb0e12dd19b617beee7e05e0a8a95fca513b77f9c3f27bc00bda3a463564ef927ede9bbe1383265c62ea2f2f34adba605c991a16541d732b427a4eda3b5b8249c7f8bd706e92482da437bef64679a49f40a256b9cee55fb3f43b3c", 0xa4, 0x10}, {0x2, 0x1, &(0x7f00000005c0)='^@\\-(!\x00', &(0x7f0000000600)="892f5ef0422c55fc0ecc6b06f6d863284f83b5e44907c24feed7a40a9652ef4c7e3978c6bbb07669a5", 0x29, 0x2}, {0x1, 0x6, &(0x7f0000000640)='nfs_export=on', &(0x7f0000000700)="c4e6d48dbc57fdda65b9db3334c4263ba6cfc468eedd7b6911d49b3225331696c131d52114aad50b96caf54202d1e8d02facd8cf9f3a26af2fee570bcf45fefee8d679272bd4628f8488cc26f670eb0fdb398af0beb6ec7b6e163642ed", 0x5d, 0x10}, {0x2, 0x5, &(0x7f0000000780)='workdir', &(0x7f00000007c0)="c5c95ed375b00467096e700c4519a81482058f8643f057e9afa1d915630d938fa5da69395e6a655b01f412aac30927a31e805b1d8d90e262c10732b65264e3ba2db4c2d34669b39ca3d585824de148", 0x4f}, {0x2, 0x401, &(0x7f0000000840)='--\x00', &(0x7f0000000880)="902fa1a13f6b8484a998f90f8744efa22a950a673383cb0aa99a66b086504c15a8a1ee1c7b1a534f45980be2df5d5760bca288a60b53f5e82e61445b51f952fc537a73472a568a430c3324b4ed8fea4170329cab1d99da22d2cfee845aa8520dc0b31551e359fa58c5bcfdbb08bd375b91602b38b2ede461c1e5d08ff86a5087e24fdd4e6d650a560d89623b78847ebfb4099092150d58101d5aed15674f07ce1098aa9fb89ee16fd6aed12bd46dc9f990162e1a10172801cf9b1a11101bff4e29f20d23d52376eaad45bd9857b7644a0e0560bf64e63b02ea959a4066f7c8d617c6b09ab095ed22f73d531124be7599e8495d35e11b67f7", 0xf8}, {0xbf4ecd3cf68f5c4e, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="fe242efc2535d392c13f0ad441e2e1c23d538ef8ad04c28000419c8b2ea45f0d55be37f7049848617f30a728709ccff06327d1d9252310a0fe9b6136b2303bb2e52a5ab7406a1d6558f32cdd9c97ad0b6e8d14f574a3c534f5d8c321e92a5611a0de8245582a275aab39cdfbc2052cdc57ff0ec631e4367a66c0db0288fc99", 0x7f, 0x12}, {0xc99a4fcca089257f, 0xd8, &(0x7f0000000a40)='/dev/rtc0\x00', &(0x7f0000000a80)}]}) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x61) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) accept4(r1, 0x0, 0x0, 0x80000) fcntl$addseals(r1, 0x409, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x40187013, &(0x7f0000000080)={0x0, 0x0, {0xfffffffc, 0x2, 0x4000000, 0x1, 0x1, 0x0, 0x0, 0x3a}}) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x1e7, 0x0, {0x9, 0xbde, 0xb, 0x10000}}) r4 = socket$pptp(0x18, 0x1, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1e) connect$pptp(r4, &(0x7f0000002340)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f00000021c0)={0x1f, 0xd3, @any, 0x3}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x1) 1.007828995s ago: executing program 3 (id=277): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001e80), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x214, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0x1fc, 0x1, 0x0, 0x1, [@nested={0x1f8, 0x1d, 0x0, 0x1, [@typed={0x14, 0xee, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x17}}, @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x116, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x1c1, 0xd2, 0x0, 0x1, [@generic="87", @nested={0x1bc, 0x39, 0x0, 0x1, [@nested={0xe9, 0x5d, 0x0, 0x1, [@typed={0x8, 0x11b, 0x0, 0x0, @fd}, @generic="9446a6cd0df89dd155353a3960dea81cb6bfd620f07b9dc60a78c6542dd3096e6fd1eeebbff677a842276e3f7607ac42cd89607c00ec59167b74b3a92b2ac24467b0610f654f0ad46e947d7ca00bfbed1fd69abd987ce4abc14c4c0b433338017cbdab7b4edef91a022658cc0d51cbdffa1899d1e32fc8df08c86ebbc2381de68f0fd308e9b74221186ae31fa6304dec40ecd938b3e94e97a13539af24a2294b2bd9acad0cf80df6482e6bc135769e27cc3463a0afe48aac9161323008b715a10db87c66d54302eefbba9b105cee4a620a", @nested={0x4, 0x161}, @generic="250aacff54b7959b"]}, @typed={0x8, 0x67, 0x0, 0x0, @u32}, @nested={0x21, 0x3b, 0x0, 0x1, [@generic="e8a7e7569012543e52eb10977d1c544570cbcc003ade33a1c503aeae6b"]}, @generic="3714d51de4ed3d9204ac55b749e491a59673735de2daafbb6cfb1c8d1bbabc2cebcd961a72c6b325f18552ff543c4c2235d8385a9f28427759222b4a9564995c1839f5b827153e4bd8e8878121263782", @generic="50c1fdff8f6801cd32ab18ce7b73cf5b8652ab940b41df1ffa31982f20ead92d08fd595c867f84c903660435d77aaa99bfb25867095b17a9d43fb50ee2c1bb76218e881c", @typed={0xc, 0xb6, 0x0, 0x0, @u64=0x90}]}]}]}]}]}, 0x214}}, 0xc000) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080005000a0101021800168014000300fc000800000000000000000000000000060015000200"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)={r4}) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800000000003600e1208000f0000000406a80016c008", 0x6}], 0x1}, 0x85) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0xfff2}, {0xfff1}, {0x4, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x200448c5}, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000040)={0x1, 0x0, 0x7, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.007235925s ago: executing program 1 (id=278): socket(0x1e, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = syz_ublk_setup_io_uring(0xd30, &(0x7f0000000100)={0x0, 0x11aa, 0x400, 0x2, 0x313}, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000003c0)={&(0x7f0000002000)={[{&(0x7f0000000340)="f2816b4da9bc64351dbd293ca3bbe9804a894729259fd6f6c97458f103cd9dd1f6123032a690d2add5e3bdb51c34e67d2da6bf30ea63865a034014dfc25b7f80d950e1d8617e8ae15e3e03094b91462997dfc6bd530d94871bcaef40691565e3bdadeab43575208bbeac1a69771233", 0x6f}]}, 0x1}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, 'list:set\x00'}]}, 0x4c}}, 0x400400c) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00fe800000000000000000000000000000fe8000000000000000000000000000aa00"/54], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c010000160001000000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa4e240000000000000000a0003b00", @ANYRESOCT, @ANYRESHEX, @ANYRES16], 0x11c}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket(0x28, 0x3, 0x6) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe48, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2, 0x4}, 0xfffe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8820}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.state\x00', 0x275a, 0x0) ftruncate(r5, 0x101fff) copy_file_range(r5, 0x0, r4, 0x0, 0xe003e45c, 0x700000000000000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 71.454502ms ago: executing program 3 (id=279): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000005000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000009, 0x4c831, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x8, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r4, &(0x7f00000002c0)=""/51, 0x33, 0x100, 0x0, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffff, 0x10000}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "5e44e4b3b5d2c132ce1595c85ab82fbe15703a2653b2b7d783bc965fac88b3a91f3f10317d1c67420063311f04765f02b4e1ccf07323402fc495c817dc2b8aca", 0x2d}, 0x48, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a40)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYRES32=r9, @ANYBLOB="140004006870766c616e300000000000000000000500530001000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4048090) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="200029bd7000fc09df253e00000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x40804) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000001280)={0xc4, r7, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x78}}}}, [@NL80211_ATTR_FRAME={0x39, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x312}, @device_b, @broadcast, @from_mac=@device_b, {0x5, 0x7}, @value=@ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x2}}, @tdls_setup_req={0xc, 0x0, "", 0x4, @val=0x1045, @void, @void, @val={0x65, 0x12, {@random="be74e8210b61", @device_b, @broadcast}}}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @device_a, @initial, {0x6, 0x7}, @value=@ver_80211n={0x0, 0x1, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x7, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x2, 0x5, 0x3ff, 0x8, 0xcbef, 0x9]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x7f}, @device_a, @device_a, @from_mac=@broadcast, {0x6, 0x3}, @value=@ver_80211n={0x0, 0x3, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x20, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6f7}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000894}, 0x20004804) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r1}, 0xc) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x33) setsockopt(r10, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e1d, 0x4, @loopback, 0x4}, 0x1c) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 0s ago: executing program 0 (id=280): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000080000000001a0000f700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff0000000000000000000000000000000000000000e4f25b1b4a9847392f82eabf6382381d68780f80cb93a28e5dd1f8df95bf33885df78b9536ec8c87f1769fc0a9553a39136ac3e79f83bb462ee2b1f2d597daa6ca1ab22a984e4ef9438718fc57726b11ea930ef86f9dfb833123eb0e7b7a0802e6b4d6f09797adc6decad02e08d9587c5e0527444df7d59575f3d2a84c38cd4d"], 0x50) syz_emit_ethernet(0x2e, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:5366' (ED25519) to the list of known hosts. [ 53.498274][ T5682] cgroup: Unknown subsys name 'net' [ 53.624776][ T5682] cgroup: Unknown subsys name 'cpuset' [ 53.630327][ T5682] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.805497][ T5682] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.825650][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.830279][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.832971][ T5751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.836020][ T5752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.840138][ T5751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.841496][ T5752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.847429][ T5752] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.850823][ T5758] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.851266][ T5752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.854771][ T5757] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.855410][ T5758] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.855504][ T5758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.856213][ T5758] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.856822][ T5758] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.857529][ T5752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.859194][ T5752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.860513][ T5752] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.875849][ T5752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.887539][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.893013][ T5752] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.599370][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.603466][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.608240][ T5754] bridge_slave_0: entered allmulticast mode [ 60.612838][ T5754] bridge_slave_0: entered promiscuous mode [ 60.618837][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.622074][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.625229][ T5754] bridge_slave_1: entered allmulticast mode [ 60.628871][ T5754] bridge_slave_1: entered promiscuous mode [ 60.712587][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.744611][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.787430][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.791054][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.794113][ T5749] bridge_slave_0: entered allmulticast mode [ 60.797877][ T5749] bridge_slave_0: entered promiscuous mode [ 60.802710][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.805059][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.807540][ T5746] bridge_slave_0: entered allmulticast mode [ 60.810261][ T5746] bridge_slave_0: entered promiscuous mode [ 60.814907][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.817415][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.819726][ T5746] bridge_slave_1: entered allmulticast mode [ 60.822734][ T5746] bridge_slave_1: entered promiscuous mode [ 60.855591][ T5754] team0: Port device team_slave_0 added [ 60.859550][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.862590][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.865762][ T5749] bridge_slave_1: entered allmulticast mode [ 60.869681][ T5749] bridge_slave_1: entered promiscuous mode [ 60.884474][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.887006][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.889410][ T5759] bridge_slave_0: entered allmulticast mode [ 60.893227][ T5759] bridge_slave_0: entered promiscuous mode [ 60.897061][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.899589][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.902151][ T5759] bridge_slave_1: entered allmulticast mode [ 60.905848][ T5759] bridge_slave_1: entered promiscuous mode [ 60.911291][ T5754] team0: Port device team_slave_1 added [ 60.980820][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.986716][ T5759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.992329][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.996246][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.999059][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.009553][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.017801][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.023789][ T5759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.028915][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.032732][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.035565][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.047061][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.102537][ T5759] team0: Port device team_slave_0 added [ 61.132890][ T5749] team0: Port device team_slave_0 added [ 61.141369][ T5759] team0: Port device team_slave_1 added [ 61.145741][ T5746] team0: Port device team_slave_0 added [ 61.152025][ T5749] team0: Port device team_slave_1 added [ 61.166214][ T5746] team0: Port device team_slave_1 added [ 61.233172][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.236142][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.247158][ T5759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.254262][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.257236][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.267963][ T5759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.287286][ T5754] hsr_slave_0: entered promiscuous mode [ 61.290644][ T5754] hsr_slave_1: entered promiscuous mode [ 61.295820][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.298331][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.307253][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.316975][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.319382][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.328239][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.332738][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.334893][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.343038][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.348233][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.350590][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.358338][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.434620][ T5746] hsr_slave_0: entered promiscuous mode [ 61.437089][ T5746] hsr_slave_1: entered promiscuous mode [ 61.439530][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 61.442337][ T5746] Cannot create hsr debugfs directory [ 61.463529][ T5759] hsr_slave_0: entered promiscuous mode [ 61.466859][ T5759] hsr_slave_1: entered promiscuous mode [ 61.469697][ T5759] debugfs: 'hsr0' already exists in 'hsr' [ 61.472353][ T5759] Cannot create hsr debugfs directory [ 61.492841][ T5749] hsr_slave_0: entered promiscuous mode [ 61.495296][ T5749] hsr_slave_1: entered promiscuous mode [ 61.497463][ T5749] debugfs: 'hsr0' already exists in 'hsr' [ 61.499289][ T5749] Cannot create hsr debugfs directory [ 61.806963][ T5754] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.815655][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.818937][ T5754] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.825287][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.828009][ T5754] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.832231][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.834962][ T5754] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.839879][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.892928][ T5746] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.897407][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.904284][ T5746] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.908748][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.912375][ T5746] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.917358][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.920432][ T5746] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.921755][ T5751] Bluetooth: hci3: command tx timeout [ 61.922765][ T5104] Bluetooth: hci1: command tx timeout [ 61.925167][ T5752] Bluetooth: hci2: command tx timeout [ 61.931135][ T5752] Bluetooth: hci0: command tx timeout [ 61.932026][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.997631][ T5749] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.004174][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.007912][ T5749] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.013884][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.018339][ T5749] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.023820][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.027168][ T5749] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.031378][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.106276][ T5759] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.111349][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.114258][ T5759] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.119206][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.124918][ T5759] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.129745][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.132733][ T5759] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.144881][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.159058][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.200266][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.218562][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.232329][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.235038][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.257764][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.262667][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.266420][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.279093][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.289287][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.291585][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.307957][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.310241][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.315280][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.333481][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.335816][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.340376][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.342862][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.409554][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.450056][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.465874][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.468748][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.482876][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.485943][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.678790][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.718244][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.730115][ T5746] veth0_vlan: entered promiscuous mode [ 62.745638][ T5746] veth1_vlan: entered promiscuous mode [ 62.764311][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.794946][ T5754] veth0_vlan: entered promiscuous mode [ 62.816342][ T5754] veth1_vlan: entered promiscuous mode [ 62.819863][ T5746] veth0_macvtap: entered promiscuous mode [ 62.838106][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.844172][ T5746] veth1_macvtap: entered promiscuous mode [ 62.862901][ T5749] veth0_vlan: entered promiscuous mode [ 62.875720][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.890224][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.907623][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.912764][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.916850][ T5749] veth1_vlan: entered promiscuous mode [ 62.933200][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.938794][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.969765][ T5754] veth0_macvtap: entered promiscuous mode [ 62.993175][ T5759] veth0_vlan: entered promiscuous mode [ 63.011813][ T5754] veth1_macvtap: entered promiscuous mode [ 63.025217][ T5759] veth1_vlan: entered promiscuous mode [ 63.036949][ T5749] veth0_macvtap: entered promiscuous mode [ 63.049460][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.052451][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.056323][ T5749] veth1_macvtap: entered promiscuous mode [ 63.081805][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.098073][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.099799][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.100746][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.113660][ T5759] veth0_macvtap: entered promiscuous mode [ 63.130370][ T5759] veth1_macvtap: entered promiscuous mode [ 63.136170][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.153674][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.159081][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.163263][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.170510][ T5746] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.176666][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.181933][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.186468][ T5746] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 63.192858][ T5746] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 63.199230][ T5746] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 63.213511][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.218096][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.220160][ T5746] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 63.232125][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.252177][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.264238][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.276896][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.305473][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.308975][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.327923][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.331006][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.336469][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.339716][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.375489][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.378712][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.416377][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.421049][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.464643][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.467576][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.485049][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.487600][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.518685][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.522682][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.776505][ T5894] IPVS: starting estimator thread 0... [ 63.880942][ T5907] IPVS: using max 42 ests per chain, 100800 per kthread [ 63.941110][ T64] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 64.002088][ T5831] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.005094][ T5752] Bluetooth: hci1: command tx timeout [ 64.011100][ T5104] Bluetooth: hci0: command tx timeout [ 64.011164][ T67] Bluetooth: hci3: command tx timeout [ 64.015639][ T5751] Bluetooth: hci2: command tx timeout [ 64.109832][ T64] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 64.116909][ T64] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 64.124172][ T64] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 64.129013][ T64] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 64.135910][ T64] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 64.140148][ T64] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 64.148843][ T64] usb 6-1: string descriptor 0 read error: -22 [ 64.151645][ T64] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 64.155363][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.161433][ T5831] usb 5-1: Using ep0 maxpacket: 8 [ 64.174683][ T5831] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 64.179285][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.185850][ T64] adutux 6-1:168.0: interrupt endpoints not found [ 64.197961][ T5831] usb 5-1: Product: syz [ 64.199500][ T5831] usb 5-1: Manufacturer: syz [ 64.203641][ T5831] usb 5-1: SerialNumber: syz [ 64.209207][ T5831] usb 5-1: config 0 descriptor?? [ 64.217441][ T5831] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 64.223347][ T5831] pctv452e: pctv452e_power_ctrl: 1 [ 64.223347][ T5831] [ 64.225857][ T5831] usb 5-1: selecting invalid altsetting 3 [ 64.227757][ T5831] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 64.227757][ T5831] [ 64.239978][ T5831] dvb-usb: bulk message failed: -22 (5/0) [ 64.251552][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 64.255862][ T5831] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 64.259169][ T5831] usb 5-1: media controller created [ 64.262098][ T5831] dvb-usb: bulk message failed: -22 (8/0) [ 64.263961][ T5831] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 64.271207][ T5831] dvb-usb: MAC address reading failed. [ 64.296378][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 64.420657][ T5831] DVB: Unable to find symbol stb0899_attach() [ 64.440252][ T5831] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 64.460306][ T5906] dvb-usb: bulk message failed: -22 (7/0) [ 64.463688][ T5906] pctv452e: I2C error -22; AA 02 12 00 00 -> aa 02 31 03 12 00 00 [ 64.483437][ T5906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.491190][ T5906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.572380][ T5831] rc_core: IR keymap rc-tt-1500 not found [ 64.574286][ T5831] Registered IR keymap rc-empty [ 64.585236][ T5831] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 64.599045][ T5831] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input5 [ 64.620500][ T5831] dvb-usb: schedule remote query interval to 100 msecs. [ 64.624114][ T5831] pctv452e: pctv452e_power_ctrl: 0 [ 64.624114][ T5831] [ 64.629506][ T5831] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 64.641301][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 64.732013][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 64.751039][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 64.833137][ T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 64.836879][ T10] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 64.843681][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 64.852710][ T10] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.862688][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 64.868810][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 64.873333][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 64.875244][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 64.879541][ T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 64.884404][ T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 64.887203][ T10] usb 7-1: Product: syz [ 64.890049][ T10] usb 7-1: Manufacturer: syz [ 64.900609][ T5911] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 64.904542][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 64.907268][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 64.925595][ T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 64.928950][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 64.980881][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 64.983365][ T10] dvb-usb: error -22 while querying for an remote control event. [ 65.090817][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 65.093458][ T10] dvb-usb: error -22 while querying for an remote control event. [ 65.131127][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 65.133728][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 65.136341][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 65.139498][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 65.142320][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 65.145096][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 65.148288][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 65.150816][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 65.152773][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 65.154708][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 65.156786][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 65.159091][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 65.161549][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 65.164295][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 65.166412][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 65.168641][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 65.170788][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 65.172866][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 65.174932][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 65.177418][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 65.200940][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 65.202904][ T10] dvb-usb: error -22 while querying for an remote control event. [ 65.220267][ T10] usb 6-1: USB disconnect, device number 2 [ 65.244514][ T5928] loop6: detected capacity change from 0 to 524287999 [ 65.252359][ T5838] usb 7-1: USB disconnect, device number 2 [ 65.252401][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 65.273192][ T5928] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.296264][ T5928] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.299062][ T5928] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.302942][ T5928] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.306412][ T5928] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.309701][ T5928] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.313128][ T5831] dvb-usb: bulk message failed: -22 (4/0) [ 65.315883][ T5831] dvb-usb: error -22 while querying for an remote control event. [ 65.318405][ T5931] loop9: detected capacity change from 0 to 255852544 [ 65.319250][ T5928] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.327236][ T5928] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.330824][ T5928] ldm_validate_partition_table(): Disk read failed. [ 65.333626][ T5928] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.337048][ T5928] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.340568][ T5928] Dev loop6: unable to read RDB block 0 [ 65.344652][ T5928] loop6: unable to read partition table [ 65.348182][ T5928] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 65.382288][ T5931] loop9: detected capacity change from 255852544 to 524287871 [ 65.421763][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 65.424264][ T10] dvb-usb: error -22 while querying for an remote control event. [ 65.473996][ T5935] netlink: 'syz.1.12': attribute type 1 has an invalid length. [ 65.538481][ T5937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12'. [ 65.544089][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 65.652366][ T5929] Zero length message leads to an empty skb [ 65.815323][ T10] dvb-usb: error -22 while querying for an remote control event. [ 65.840833][ T42] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 66.011062][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 66.034873][ T42] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 66.041588][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.049946][ T42] usb 6-1: Product: syz [ 66.057318][ T42] usb 6-1: Manufacturer: syz [ 66.059361][ T42] usb 6-1: SerialNumber: syz [ 66.074211][ T42] usb 6-1: config 0 descriptor?? [ 66.080878][ T67] Bluetooth: hci1: command tx timeout [ 66.082674][ T67] Bluetooth: hci3: command tx timeout [ 66.085313][ T5751] Bluetooth: hci0: command tx timeout [ 66.085426][ T5752] Bluetooth: hci2: command tx timeout [ 66.095393][ T42] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 66.109091][ T42] pctv452e: pctv452e_power_ctrl: 1 [ 66.109091][ T42] [ 66.120814][ T42] usb 6-1: selecting invalid altsetting 3 [ 66.123398][ T42] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 66.123398][ T42] [ 66.142521][ T42] dvb-usb: bulk message failed: -22 (5/0) [ 66.157252][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 66.171524][ T42] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 66.181239][ T42] usb 6-1: media controller created [ 66.183606][ T42] dvb-usb: bulk message failed: -22 (8/0) [ 66.186054][ T42] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 66.199781][ T42] dvb-usb: MAC address reading failed. [ 66.218934][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 66.303193][ T42] DVB: Unable to find symbol stb0899_attach() [ 66.307880][ T42] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 66.382779][ T5935] dvb-usb: bulk message failed: -22 (7/0) [ 66.385176][ T5935] pctv452e: I2C error -22; AA 0B 12 00 00 -> aa 0b 31 03 12 00 00 [ 66.391378][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 66.402163][ T42] rc_core: IR keymap rc-tt-1500 not found [ 66.404464][ T42] Registered IR keymap rc-empty [ 66.412290][ T42] rc rc1: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc1 [ 66.416581][ T5935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12'. [ 66.432565][ T42] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc1/input6 [ 66.444910][ T42] dvb-usb: schedule remote query interval to 100 msecs. [ 66.447899][ T42] pctv452e: pctv452e_power_ctrl: 0 [ 66.447899][ T42] [ 66.451379][ T42] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 66.458553][ T42] usb 6-1: USB disconnect, device number 3 [ 66.558301][ T42] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 66.600987][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 66.670084][ T5894] usb 5-1: USB disconnect, device number 2 [ 66.760829][ T5945] netlink: 'syz.0.13': attribute type 1 has an invalid length. [ 67.104364][ T10] dvb-usb: error -22 while querying for an remote control event. [ 67.485898][ T5894] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 67.522391][ T5954] netlink: 'syz.2.15': attribute type 1 has an invalid length. [ 67.580919][ T5955] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15'. [ 67.655165][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'. [ 67.658597][ T5958] netlink: 'syz.1.16': attribute type 14 has an invalid length. [ 67.676758][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.682448][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.685592][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.688412][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.757108][ T5960] netlink: 'syz.3.17': attribute type 1 has an invalid length. [ 67.840889][ T5894] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.162463][ T5104] Bluetooth: hci1: command tx timeout [ 68.164265][ T5751] Bluetooth: hci2: command tx timeout [ 68.167261][ T67] Bluetooth: hci0: command tx timeout [ 68.171943][ T5752] Bluetooth: hci3: command tx timeout [ 68.201307][ T5534] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.690852][ T5534] usb 7-1: Using ep0 maxpacket: 8 [ 68.696603][ T5534] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 68.700089][ T5534] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.702782][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 68.704357][ T5534] usb 7-1: Product: syz [ 68.705846][ T5534] usb 7-1: Manufacturer: syz [ 68.707940][ T5534] usb 7-1: SerialNumber: syz [ 68.716802][ T5534] usb 7-1: config 0 descriptor?? [ 68.719058][ T5894] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 68.724236][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.729394][ T5534] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 68.732691][ T5894] usb 5-1: Product: syz [ 68.734317][ T5894] usb 5-1: Manufacturer: syz [ 68.736237][ T5534] pctv452e: pctv452e_power_ctrl: 1 [ 68.736237][ T5534] [ 68.739189][ T5894] usb 5-1: SerialNumber: syz [ 68.741518][ T5534] usb 7-1: selecting invalid altsetting 3 [ 68.746098][ T5894] usb 5-1: config 0 descriptor?? [ 68.748197][ T5534] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 68.748197][ T5534] [ 68.752583][ T5534] dvb-usb: bulk message failed: -22 (5/0) [ 68.757146][ T5894] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 68.761499][ T5534] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 68.764482][ T5894] pctv452e: pctv452e_power_ctrl: 1 [ 68.764482][ T5894] [ 68.767060][ T5894] usb 5-1: selecting invalid altsetting 3 [ 68.773665][ T5894] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 68.773665][ T5894] [ 68.778194][ T5534] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 68.781535][ T5894] dvb-usb: bulk message failed: -22 (5/0) [ 68.785310][ T5534] usb 7-1: media controller created [ 68.786910][ T5534] dvb-usb: bulk message failed: -22 (8/0) [ 68.790163][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 68.793058][ T5534] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 68.795995][ T5894] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 68.799165][ T5534] dvb-usb: MAC address reading failed. [ 68.802580][ T5894] usb 5-1: media controller created [ 68.804733][ T5894] dvb-usb: bulk message failed: -22 (8/0) [ 68.811828][ T5894] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 68.821506][ T5894] dvb-usb: MAC address reading failed. [ 68.828534][ T5534] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 68.853923][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 68.870795][ T10] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 68.874475][ T5534] DVB: Unable to find symbol stb0899_attach() [ 68.877112][ T5534] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 68.888169][ T5894] DVB: Unable to find symbol stb0899_attach() [ 68.890555][ T5894] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 68.930831][ T5534] rc_core: IR keymap rc-tt-1500 not found [ 68.932653][ T5534] Registered IR keymap rc-empty [ 68.936266][ T5534] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 68.941677][ T5894] rc_core: IR keymap rc-tt-1500 not found [ 68.944075][ T5534] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input7 [ 68.947745][ T5894] Registered IR keymap rc-empty [ 68.954586][ T5534] dvb-usb: schedule remote query interval to 100 msecs. [ 68.957485][ T5954] dvb-usb: bulk message failed: -22 (7/0) [ 68.957877][ T5894] rc rc1: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc1 [ 68.960629][ T5954] pctv452e: I2C error -22; AA 02 12 00 00 -> aa 02 31 03 12 00 00 [ 68.963310][ T5534] pctv452e: pctv452e_power_ctrl: 0 [ 68.963310][ T5534] [ 68.971899][ T5894] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc1/input8 [ 68.972599][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'. [ 68.976017][ T5534] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 68.982535][ T5894] dvb-usb: schedule remote query interval to 100 msecs. [ 68.990417][ T5894] pctv452e: pctv452e_power_ctrl: 0 [ 68.990417][ T5894] [ 68.990563][ T5945] dvb-usb: bulk message failed: -22 (7/0) [ 68.994055][ T5954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15'. [ 68.995029][ T5894] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 68.995843][ T5945] pctv452e: I2C error -22; AA 03 12 00 00 -> aa 03 31 03 12 00 00 [ 69.003022][ T63] usb 7-1: USB disconnect, device number 3 [ 69.012588][ T5945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 69.023412][ T5945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13'. [ 69.031491][ T5838] usb 5-1: USB disconnect, device number 3 [ 69.032123][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.037458][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.043398][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 69.047128][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.083022][ T63] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 69.093007][ T5838] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 69.267228][ T10] usb 6-1: usb_control_msg returned -32 [ 69.269540][ T10] usbtmc 6-1:16.0: can't read capabilities [ 69.578826][ T5977] random: crng reseeded on system resumption [ 69.630843][ T5979] warning: `syz.1.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.635542][ T5981] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 69.646266][ T5981] process 'syz.0.20' launched './file1' with NULL argv: empty string added [ 69.824245][ T5984] SQUASHFS error: Failed to read block 0x0: -5 [ 69.827623][ T5984] unable to read squashfs_super_block [ 70.231067][ T5838] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 70.402580][ T5838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.406873][ T5838] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 70.410660][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.420631][ T5838] usb 5-1: config 0 descriptor?? [ 70.679053][ T5981] bond1: Removing last ns target with arp_interval on [ 70.706978][ T5838] ath6kl: Failed to submit usb control message: -71 [ 70.711793][ T5838] ath6kl: unable to send the bmi data to the device: -71 [ 70.714954][ T5838] ath6kl: Unable to send get target info: -71 [ 70.731589][ T5838] ath6kl: Failed to init ath6kl core: -71 [ 70.735435][ T5838] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 70.744085][ T5838] usb 5-1: USB disconnect, device number 4 [ 71.509563][ T64] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 71.652036][ T5838] usb 6-1: USB disconnect, device number 4 [ 71.712413][ T64] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 71.715391][ T64] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 71.718725][ T64] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 71.721633][ T64] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.725229][ T64] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 71.728674][ T64] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 71.734174][ T64] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 71.738072][ T64] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 71.740945][ T64] usb 8-1: Product: syz [ 71.742281][ T64] usb 8-1: Manufacturer: syz [ 71.752263][ T5997] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 71.766810][ T64] cdc_wdm 8-1:1.0: skipping garbage [ 71.772395][ T64] cdc_wdm 8-1:1.0: skipping garbage [ 71.777594][ T64] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 71.780040][ T64] cdc_wdm 8-1:1.0: Unknown control protocol [ 71.880866][ T5831] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 71.972677][ C0] wdm_int_callback: 300 callbacks suppressed [ 71.972692][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 71.977330][ C0] wdm_int_callback: 300 callbacks suppressed [ 71.977341][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 71.981983][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 71.984036][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 71.986124][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 71.988249][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 71.990341][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 71.992724][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 71.995155][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 71.997816][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 72.000173][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 72.002330][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 72.004731][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 72.006792][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 72.010331][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 72.012713][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 72.015224][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 72.017190][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 72.019488][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 72.021633][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 72.040995][ T5831] usb 7-1: Using ep0 maxpacket: 16 [ 72.055625][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.060609][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.067677][ T5831] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 72.085500][ T5831] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 72.087422][ T43] audit: type=1800 audit(1784576318.535:2): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.27" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 72.101913][ T5831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.215704][ T5831] usb 7-1: config 0 descriptor?? [ 72.231235][ T850] usb 8-1: USB disconnect, device number 2 [ 72.231353][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 72.248377][ T6014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.28'. [ 72.251476][ T6014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.28'. [ 72.703027][ T42] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 72.889504][ T6002] netlink: 504 bytes leftover after parsing attributes in process `syz.2.25'. [ 72.912988][ T42] usb 5-1: Invalid ep0 maxpacket: 16 [ 73.025670][ T5831] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 73.040818][ T42] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 73.184179][ T5831] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 73.190887][ T5831] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 73.200875][ T42] usb 5-1: Invalid ep0 maxpacket: 16 [ 73.201042][ T5831] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 73.203824][ T42] usb usb5-port1: attempt power cycle [ 73.204924][ T5831] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 73.301886][ T5831] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 73.328832][ T5831] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 73.331646][ T5831] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 73.399416][ T9] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 73.406131][ T5831] usb 7-1: USB disconnect, device number 4 [ 73.410285][ T9] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 73.420008][ T9] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 73.430131][ T9] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 73.540793][ T42] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 73.571206][ T42] usb 5-1: Invalid ep0 maxpacket: 16 [ 73.653319][ T6027] 9pnet_virtio: no channels available for device syz [ 73.720854][ T42] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 73.751486][ T42] usb 5-1: Invalid ep0 maxpacket: 16 [ 73.755585][ T42] usb usb5-port1: unable to enumerate USB device [ 73.830872][ T5831] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 73.950907][ T5894] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 73.992757][ T5831] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 73.995877][ T5831] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 73.999232][ T5831] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 74.002237][ T5831] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 74.005829][ T5831] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 74.009358][ T5831] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 74.015556][ T5831] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 74.018770][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 74.021453][ T5831] usb 7-1: Product: syz [ 74.022928][ T5831] usb 7-1: Manufacturer: syz [ 74.027300][ T6024] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 74.032316][ T5831] cdc_wdm 7-1:1.0: skipping garbage [ 74.034269][ T5831] cdc_wdm 7-1:1.0: skipping garbage [ 74.038528][ T5831] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 74.040573][ T5831] cdc_wdm 7-1:1.0: Unknown control protocol [ 74.122656][ T5894] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 74.126417][ T5894] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 74.130555][ T5894] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 74.134441][ T5894] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 74.138953][ T5894] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 74.143588][ T5894] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 74.151054][ T5894] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 74.154907][ T5894] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 74.158114][ T5894] usb 8-1: Product: syz [ 74.159842][ T5894] usb 8-1: Manufacturer: syz [ 74.165259][ T6029] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 74.170354][ T5894] cdc_wdm 8-1:1.0: skipping garbage [ 74.172682][ T5894] cdc_wdm 8-1:1.0: skipping garbage [ 74.176488][ T5894] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 74.178998][ T5894] cdc_wdm 8-1:1.0: Unknown control protocol [ 74.353254][ T5894] usb 7-1: USB disconnect, device number 5 [ 74.355812][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 74.359488][ T6024] cdc_wdm 7-1:1.0: Tx URB error: -19 [ 74.364486][ T6034] cdc_wdm 7-1:1.0: Tx URB error: -19 [ 74.377115][ T64] usb 8-1: USB disconnect, device number 3 [ 78.270817][ T5894] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 78.324651][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.327270][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.444150][ T5894] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 78.452841][ T5894] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 78.453979][ T6062] netlink: 'syz.2.39': attribute type 1 has an invalid length. [ 78.461093][ T5894] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 78.468293][ T5894] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 78.479972][ T5894] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 78.490082][ T5894] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 78.501906][ T5894] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 78.510352][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 78.517938][ T6063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.39'. [ 78.518529][ T5894] usb 6-1: Product: syz [ 78.530653][ T5894] usb 6-1: Manufacturer: syz [ 78.542648][ T6058] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 78.550486][ T5894] cdc_wdm 6-1:1.0: skipping garbage [ 78.560782][ T5894] cdc_wdm 6-1:1.0: skipping garbage [ 78.564895][ T5894] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 78.566845][ T5894] cdc_wdm 6-1:1.0: Unknown control protocol [ 78.760847][ T5831] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 78.769906][ C1] wdm_int_callback: 1279 callbacks suppressed [ 78.769922][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 78.774242][ C1] wdm_int_callback: 1279 callbacks suppressed [ 78.774258][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 78.779300][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 78.781753][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 78.784195][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 78.786625][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 78.788820][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 78.790951][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 78.793068][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 78.795174][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 78.797227][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 78.799450][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 78.802431][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 78.804521][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 78.806669][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 78.808797][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 78.811023][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 78.813054][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 78.815289][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 78.817331][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 78.910881][ T850] usb 6-1: USB disconnect, device number 5 [ 78.910902][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 78.915511][ T5831] usb 7-1: Using ep0 maxpacket: 8 [ 78.923254][ T5831] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 78.932635][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.935175][ T5831] usb 7-1: Product: syz [ 78.945024][ T5831] usb 7-1: Manufacturer: syz [ 78.946562][ T5831] usb 7-1: SerialNumber: syz [ 78.955027][ T5831] usb 7-1: config 0 descriptor?? [ 78.963329][ T5831] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 78.965846][ T5831] pctv452e: pctv452e_power_ctrl: 1 [ 78.965846][ T5831] [ 78.969120][ T5831] usb 7-1: selecting invalid altsetting 3 [ 78.971304][ T5831] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 78.971304][ T5831] [ 78.975011][ T5831] dvb-usb: bulk message failed: -22 (5/0) [ 78.984053][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 78.987642][ T5831] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 78.990241][ T5831] usb 7-1: media controller created [ 78.992828][ T5831] dvb-usb: bulk message failed: -22 (8/0) [ 78.994690][ T5831] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 78.997233][ T5831] dvb-usb: MAC address reading failed. [ 79.010890][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 79.044331][ T5831] DVB: Unable to find symbol stb0899_attach() [ 79.046336][ T5831] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 79.111236][ T5831] rc_core: IR keymap rc-tt-1500 not found [ 79.113062][ T5831] Registered IR keymap rc-empty [ 79.135368][ T5831] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 79.487226][ T5831] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input10 [ 79.520668][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.39'. [ 79.550016][ T6063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.39'. [ 80.622011][ T6074] netlink: 'syz.3.40': attribute type 10 has an invalid length. [ 80.648057][ T6074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.674653][ T6074] team0: Port device bond0 added [ 80.703242][ T5831] dvb-usb: schedule remote query interval to 100 msecs. [ 81.031689][ T5831] pctv452e: pctv452e_power_ctrl: 0 [ 81.031689][ T5831] [ 81.034737][ T5831] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 81.043379][ T5831] usb 7-1: USB disconnect, device number 6 [ 81.122451][ T5831] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 81.344489][ T6080] netlink: 'syz.1.42': attribute type 7 has an invalid length. [ 81.468815][ T6088] netlink: 'syz.1.42': attribute type 10 has an invalid length. [ 81.676847][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.682775][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.779591][ T6086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.800257][ T6086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.863552][ T6096] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 81.868324][ T6096] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 82.567812][ T6088] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 82.575597][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.578898][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.592919][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.596174][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.599473][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.602440][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.608807][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.615782][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.957372][ T6106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.358880][ T6080] netlink: 'syz.1.42': attribute type 10 has an invalid length. [ 83.472926][ T6080] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.487266][ T6080] bond0: (slave team0): Enslaving as an active interface with an up link [ 83.515836][ T6115] dummy0: entered allmulticast mode [ 84.877047][ T6128] netlink: 'syz.0.53': attribute type 3 has an invalid length. [ 84.881843][ T6128] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 84.901221][ T6128] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 85.086319][ T6110] dummy0: left allmulticast mode [ 85.100961][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 85.149091][ T6133] netlink: 'syz.2.55': attribute type 3 has an invalid length. [ 85.153379][ T6133] netlink: 'syz.2.55': attribute type 1 has an invalid length. [ 85.164199][ T6133] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 85.253712][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 85.256782][ T9] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 85.260419][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 85.263513][ T9] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.267548][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 85.271798][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 85.276862][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 85.280309][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 85.283588][ T9] usb 6-1: Product: syz [ 85.285327][ T9] usb 6-1: Manufacturer: syz [ 85.292051][ T6126] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.296275][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 85.298476][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 85.303421][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 85.305670][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 85.310883][ T5831] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 85.460829][ T5831] usb 8-1: Using ep0 maxpacket: 8 [ 85.464247][ T5831] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 85.467029][ T5831] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 85.469637][ T5831] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 85.472598][ T5831] usb 8-1: config 250 has no interface number 0 [ 85.474709][ T5831] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 85.478562][ T5831] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 85.481861][ T5831] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 85.485506][ T5831] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 85.488920][ T5831] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 85.493176][ T5831] usb 8-1: config 250 interface 228 has no altsetting 0 [ 85.496753][ T5831] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 85.499712][ T5831] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 85.502362][ T5831] usb 8-1: Product: syz [ 85.503697][ T5831] usb 8-1: SerialNumber: syz [ 85.507402][ C3] wdm_int_callback: 545 callbacks suppressed [ 85.507419][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 85.510547][ T5831] hub 8-1:250.228: bad descriptor, ignoring hub [ 85.512868][ C3] wdm_int_callback: 545 callbacks suppressed [ 85.512883][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 85.513111][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 85.515516][ T5831] hub 8-1:250.228: probe with driver hub failed with error -5 [ 85.517603][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 85.517823][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 85.530750][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 85.533534][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 85.536318][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 85.539225][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 85.542098][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 85.544950][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 85.547777][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 85.550568][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 85.553430][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 85.556212][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 85.559065][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 85.562283][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 85.565116][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 85.568014][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 85.570697][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 85.645118][ T24] usb 6-1: USB disconnect, device number 6 [ 85.645227][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 85.721540][ T5831] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 85.980810][ T837] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 86.004812][ C3] usblp0: nonzero read bulk status received: -71 [ 86.027501][ T5838] usb 8-1: USB disconnect, device number 4 [ 86.132834][ T837] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 86.137362][ T837] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 86.143214][ T837] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 86.146470][ T837] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.151357][ T837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 86.155684][ T837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 86.164642][ T837] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 86.168338][ T837] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 86.171867][ T837] usb 5-1: Product: syz [ 86.173624][ T837] usb 5-1: Manufacturer: syz [ 86.181639][ T6138] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 86.186049][ T837] cdc_wdm 5-1:1.0: skipping garbage [ 86.189786][ T837] cdc_wdm 5-1:1.0: skipping garbage [ 86.193722][ T837] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 86.196546][ T837] cdc_wdm 5-1:1.0: Unknown control protocol [ 86.470959][ T837] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 86.529122][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 86.529167][ T24] usb 5-1: USB disconnect, device number 9 [ 86.632051][ T837] usb 8-1: Using ep0 maxpacket: 8 [ 86.656542][ T837] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 86.659813][ T837] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 86.663694][ T837] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 86.669885][ T837] usb 8-1: config 250 has no interface number 0 [ 86.673792][ T837] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 86.678306][ T837] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 86.682752][ T837] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 86.687009][ T837] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 86.690623][ T837] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 86.697351][ T837] usb 8-1: config 250 interface 228 has no altsetting 0 [ 86.708669][ T837] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 86.713208][ T837] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 86.716820][ T837] usb 8-1: Product: syz [ 86.718283][ T837] usb 8-1: SerialNumber: syz [ 86.777591][ T837] hub 8-1:250.228: bad descriptor, ignoring hub [ 86.780452][ T837] hub 8-1:250.228: probe with driver hub failed with error -5 [ 88.010938][ T5838] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 88.180930][ T5838] usb 7-1: Using ep0 maxpacket: 8 [ 88.188940][ T5838] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.192933][ T5838] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 15 [ 88.196751][ T5838] usb 7-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.202241][ T5838] usb 7-1: config 1 interface 0 has no altsetting 0 [ 88.208591][ T5838] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.212527][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.215856][ T5838] usb 7-1: Product: syz [ 88.217806][ T5838] usb 7-1: Manufacturer: syz [ 88.219769][ T5838] usb 7-1: SerialNumber: syz [ 88.586671][ T56] cfg80211: failed to load regulatory.db [ 88.719545][ T6159] ======================================================= [ 88.719545][ T6159] WARNING: The mand mount option has been deprecated and [ 88.719545][ T6159] and is ignored by this kernel. Remove the mand [ 88.719545][ T6159] option from the mount to silence this warning. [ 88.719545][ T6159] ======================================================= [ 88.989684][ T6162] netlink: 48 bytes leftover after parsing attributes in process `syz.1.62'. [ 89.285450][ T6139] usblp0: removed [ 89.305691][ T837] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 89.345241][ T837] usb 8-1: USB disconnect, device number 5 [ 89.358337][ T837] usblp0: removed [ 89.900851][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 90.052545][ T24] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 90.056002][ T24] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 90.059249][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 90.062200][ T24] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.065739][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 90.069148][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 90.074293][ T24] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.077372][ T24] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.079774][ T24] usb 8-1: Product: syz [ 90.081126][ T24] usb 8-1: Manufacturer: syz [ 90.085479][ T6185] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 90.088934][ T24] cdc_wdm 8-1:1.0: skipping garbage [ 90.090665][ T24] cdc_wdm 8-1:1.0: skipping garbage [ 90.094985][ T24] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 90.097303][ T24] cdc_wdm 8-1:1.0: Unknown control protocol [ 90.464061][ T837] usb 8-1: USB disconnect, device number 6 [ 90.466647][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 90.493670][ T6189] netlink: 'syz.0.69': attribute type 3 has an invalid length. [ 90.497844][ T6189] netlink: 'syz.0.69': attribute type 1 has an invalid length. [ 90.517720][ T6189] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 90.685463][ T6158] [U]  [ 90.688968][ T6193] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 90.694690][ T6193] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 90.700114][ T6193] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 90.706298][ T6193] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 90.763524][ T6193] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 90.770416][ T5838] cdc_ether 7-1:1.0: skipping garbage [ 90.802203][ T5838] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 91.018550][ T6199] trusted_key: encrypted_key: key user:syz not found [ 91.732164][ T5838] usb 7-1: USB disconnect, device number 7 [ 92.832380][ T5838] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 92.980469][ T5838] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 92.983339][ T5838] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 92.986583][ T5838] usb 6-1: config 150 has no interface number 0 [ 92.989159][ T5838] usb 6-1: config 150 interface 204 has no altsetting 0 [ 92.991376][ T5838] usb 6-1: config 150 interface 1 has no altsetting 0 [ 92.995207][ T5838] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 92.998797][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.001791][ T5838] usb 6-1: Product: syz [ 93.003217][ T5838] usb 6-1: Manufacturer: syz [ 93.004732][ T5838] usb 6-1: SerialNumber: syz [ 93.163317][ T24] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 93.217234][ T5838] xr_serial 6-1:150.204: skipping garbage [ 93.220185][ T5838] xr_serial 6-1:150.204: xr_serial converter detected [ 93.311487][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.315851][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 93.319862][ T24] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 93.323664][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.329542][ T24] usb 8-1: config 0 descriptor?? [ 93.335081][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 93.337908][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 93.345058][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 93.350518][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 93.353317][ T24] usb 8-1: media controller created [ 93.357994][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.367177][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 93.370012][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 93.374798][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input11 [ 93.381380][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 93.384255][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 93.518211][ T5752] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 93.524072][ T5752] Bluetooth: hci2: Injecting HCI hardware error event [ 93.527960][ T5752] Bluetooth: hci2: hardware error 0x00 [ 93.530852][ T6207] dvb-usb: bulk message failed: -22 (2/0) [ 93.535578][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 93.545328][ T24] dvb-usb: error while querying for an remote control event. [ 93.563822][ T24] usb 8-1: USB disconnect, device number 7 [ 93.597424][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 94.089022][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 94.236854][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.240615][ T9] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 94.244497][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.248953][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 94.253433][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 94.259952][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.263568][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.266876][ T9] usb 7-1: Product: syz [ 94.268699][ T9] usb 7-1: Manufacturer: syz [ 94.279480][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 94.285651][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 94.293189][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 94.295666][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 95.002747][ T6222] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 95.006020][ T6222] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 95.008693][ T6222] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 95.011618][ T6222] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 95.014216][ T6222] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 95.017128][ T6222] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 95.019921][ T6222] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 95.022537][ T6222] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 95.024725][ T6222] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 95.026938][ T6222] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 95.218530][ T6222] mmap: syz.2.77 (6222) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.412819][ T5838] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 95.415084][ T5838] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 95.429297][ T5838] usb 6-1: USB disconnect, device number 7 [ 95.438758][ T5838] xr_serial 6-1:150.204: device disconnected [ 95.546656][ T5752] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 95.846645][ T5838] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 95.993292][ T5838] usb 6-1: Using ep0 maxpacket: 32 [ 95.996431][ T5838] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 96.001335][ T5838] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 96.004977][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 96.008507][ T5838] usb 6-1: Product: syz [ 96.010431][ T5838] usb 6-1: Manufacturer: syz [ 96.012352][ T5838] usb 6-1: SerialNumber: syz [ 96.015787][ T5838] usb 6-1: config 0 descriptor?? [ 96.018158][ T6226] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.830151][ C0] wdm_int_callback: 1759 callbacks suppressed [ 96.830169][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 96.830381][ T56] usb 7-1: USB disconnect, device number 8 [ 96.832133][ C0] wdm_int_callback: 1759 callbacks suppressed [ 96.832144][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 96.841331][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 96.871084][ T5838] usb 6-1: USB disconnect, device number 8 [ 97.067084][ T6237] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 97.121277][ T6238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.82'. [ 97.363736][ T55] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 97.520588][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 97.527361][ T55] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 97.531635][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.535239][ T55] usb 5-1: Product: syz [ 97.537070][ T55] usb 5-1: Manufacturer: syz [ 97.539082][ T55] usb 5-1: SerialNumber: syz [ 97.546858][ T55] usb 5-1: config 0 descriptor?? [ 97.552151][ T55] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 97.555735][ T55] pctv452e: pctv452e_power_ctrl: 1 [ 97.555735][ T55] [ 97.558947][ T55] usb 5-1: selecting invalid altsetting 3 [ 97.561540][ T55] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 97.561540][ T55] [ 97.565814][ T55] dvb-usb: bulk message failed: -22 (5/0) [ 97.571099][ T55] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 97.575645][ T55] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 97.579015][ T55] usb 5-1: media controller created [ 97.581442][ T55] dvb-usb: bulk message failed: -22 (8/0) [ 97.584766][ T55] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 97.588236][ T55] dvb-usb: MAC address reading failed. [ 97.598642][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.642245][ T55] DVB: Unable to find symbol stb0899_attach() [ 97.644932][ T55] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 97.697162][ T55] rc_core: IR keymap rc-tt-1500 not found [ 97.699800][ T55] Registered IR keymap rc-empty [ 97.703401][ T55] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 97.709469][ T55] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input12 [ 97.716199][ T55] dvb-usb: schedule remote query interval to 100 msecs. [ 97.719524][ T55] pctv452e: pctv452e_power_ctrl: 0 [ 97.719524][ T55] [ 97.722807][ T55] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 97.790766][ T6237] dvb-usb: bulk message failed: -22 (7/0) [ 97.793703][ T6237] pctv452e: I2C error -22; AA 02 12 00 00 -> aa 02 31 03 12 00 00 [ 97.800992][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.82'. [ 97.813612][ T6237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.82'. [ 97.823511][ T55] usb 5-1: USB disconnect, device number 10 [ 97.828547][ T64] dvb-usb: bulk message failed: -22 (4/0) [ 97.830426][ T64] dvb-usb: error -22 while querying for an remote control event. [ 97.850487][ T55] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 98.028621][ T6250] syzkaller0: entered promiscuous mode [ 98.031426][ T6250] syzkaller0: entered allmulticast mode [ 98.257723][ T6253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.87'. [ 99.768469][ T6277] netlink: 68 bytes leftover after parsing attributes in process `syz.0.94'. [ 99.898445][ T6283] netlink: 'syz.1.97': attribute type 1 has an invalid length. [ 99.915403][ T6283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.943599][ T6283] bond1: (slave veth3): Enslaving as an active interface with a down link [ 99.952989][ T6283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.97'. [ 99.958804][ T6283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.97'. [ 99.962815][ T6283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.97'. [ 99.966419][ T6283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.606549][ T6294] netlink: 'syz.3.99': attribute type 3 has an invalid length. [ 100.609830][ T6294] netlink: 'syz.3.99': attribute type 1 has an invalid length. [ 100.623711][ T6294] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 100.929926][ T6309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.102'. [ 101.095794][ T5838] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 101.199233][ T6312] netlink: 'syz.2.105': attribute type 3 has an invalid length. [ 101.202505][ T6312] netlink: 'syz.2.105': attribute type 1 has an invalid length. [ 101.218032][ T6312] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 101.244902][ T5838] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 101.247778][ T5838] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 101.251347][ T5838] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.255310][ T5838] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 101.258901][ T5838] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 101.267752][ T5838] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 101.270666][ T5838] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 101.275595][ T5838] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.279856][ T5838] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 101.283502][ T5838] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 101.288502][ T5838] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 101.291279][ T5838] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 101.295379][ T5838] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.299504][ T5838] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 101.304025][ T5838] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 101.311734][ T5838] usb 8-1: string descriptor 0 read error: -22 [ 101.314441][ T5838] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 101.319906][ T5838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.335414][ T5838] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 101.631309][ T6317] netlink: 'syz.1.106': attribute type 1 has an invalid length. [ 101.651964][ T6317] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.708319][ T6317] bond2: (slave veth5): Enslaving as an active interface with a down link [ 101.724377][ T6317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.106'. [ 101.765136][ T6317] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.076901][ T6329] Illegal XDP return value 4294967294 on prog (id 16) dev syz_tun, expect packet loss! [ 102.205187][ T6332] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 102.207416][ T6332] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 102.213751][ T6332] vhci_hcd vhci_hcd.0: Device attached [ 102.474718][ T5534] usb 42-1: SetAddress Request (2) to port 0 [ 102.477669][ T5534] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 102.969567][ T6333] vhci_hcd: connection reset by peer [ 102.976076][ T26] vhci_hcd vhci_hcd.2: stop threads [ 102.982822][ T26] vhci_hcd vhci_hcd.2: release socket [ 102.986622][ T26] vhci_hcd vhci_hcd.2: disconnect device [ 103.184474][ T56] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 103.353899][ T56] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 103.358034][ T56] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 103.363731][ T56] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 103.367711][ T56] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.372780][ T56] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 103.377387][ T56] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 103.383402][ T56] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 103.387552][ T56] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 103.391003][ T56] usb 5-1: Product: syz [ 103.393444][ T56] usb 5-1: Manufacturer: syz [ 103.400946][ T6341] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 103.410519][ T56] cdc_wdm 5-1:1.0: skipping garbage [ 103.413511][ T56] cdc_wdm 5-1:1.0: skipping garbage [ 103.420825][ T56] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 103.424161][ T56] cdc_wdm 5-1:1.0: Unknown control protocol [ 103.713338][ T56] usb 5-1: USB disconnect, device number 11 [ 103.794692][ T6353] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 103.809586][ T6353] __nla_validate_parse: 3 callbacks suppressed [ 103.809686][ T6353] netlink: 23 bytes leftover after parsing attributes in process `syz.2.116'. [ 104.298322][ T6357] netlink: 'syz.1.117': attribute type 3 has an invalid length. [ 104.301874][ T6357] netlink: 'syz.1.117': attribute type 1 has an invalid length. [ 104.313564][ T6357] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 104.484744][ T6362] netlink: 'syz.1.119': attribute type 3 has an invalid length. [ 104.489482][ T6362] netlink: 'syz.1.119': attribute type 1 has an invalid length. [ 104.501450][ T6362] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 104.635091][ T6365] netlink: 'syz.2.120': attribute type 1 has an invalid length. [ 104.652560][ T6365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.699781][ T6365] bond1: (slave veth3): Enslaving as an active interface with a down link [ 104.712352][ T6365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.120'. [ 104.951053][ T5831] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 105.079481][ T5831] usb 7-1: device descriptor read/64, error -71 [ 105.326451][ T5831] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 105.617653][ T5838] usb 8-1: USB disconnect, device number 8 [ 106.492720][ T5831] usb 7-1: device descriptor read/64, error -71 [ 106.605372][ T5831] usb usb7-port1: attempt power cycle [ 106.739995][ T64] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 106.900773][ T64] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 106.903985][ T64] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 106.909342][ T64] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.916014][ T64] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 106.921093][ T64] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 106.925668][ T64] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.927829][ T24] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 106.933915][ T64] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 106.937832][ T5831] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 106.938952][ T64] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 106.945648][ T64] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.953991][ T64] usb 6-1: string descriptor 0 read error: -22 [ 106.956836][ T64] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 106.958934][ T5831] usb 7-1: device descriptor read/8, error -71 [ 106.960492][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.973508][ T64] adutux 6-1:168.0: interrupt endpoints not found [ 106.976130][ T6379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.125'. [ 106.979448][ T6379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.125'. [ 107.067357][ T6385] netlink: 'syz.3.126': attribute type 3 has an invalid length. [ 107.069945][ T6385] netlink: 'syz.3.126': attribute type 1 has an invalid length. [ 107.077907][ T6385] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 107.083632][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 107.086329][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 107.092184][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.096812][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 107.100894][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 107.104993][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 107.107618][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 107.111042][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.114597][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 107.118215][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 107.123365][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 107.125836][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 107.129300][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.132925][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 107.136482][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 107.142461][ T24] usb 5-1: string descriptor 0 read error: -22 [ 107.144575][ T24] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 107.147608][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.154727][ T24] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 107.202467][ C3] sr 2:0:0:0: [sr0] tag#4 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 107.206831][ C3] sr 2:0:0:0: [sr0] tag#4 CDB: opcode=0xfd (vendor) [ 107.209574][ C3] sr 2:0:0:0: [sr0] tag#4 CDB[00]: fd ac 5d 01 c1 88 91 56 81 08 26 2d 93 d4 26 76 [ 107.213289][ C3] sr 2:0:0:0: [sr0] tag#4 CDB[10]: dd 71 d3 2e [ 107.215337][ T5831] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 107.235371][ T5831] usb 7-1: device descriptor read/8, error -71 [ 107.353839][ T5831] usb usb7-port1: unable to enumerate USB device [ 107.363509][ T24] usb 5-1: USB disconnect, device number 12 [ 107.511632][ T5534] usb 42-1: device descriptor read/8, error -110 [ 107.898652][ T5534] usb usb42-port1: attempt power cycle [ 108.472854][ T5534] usb usb42-port1: unable to enumerate USB device [ 108.700812][ T6432] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.931449][ T6434] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.984336][ T6441] netlink: 'syz.2.136': attribute type 3 has an invalid length. [ 108.988759][ T6441] netlink: 'syz.2.136': attribute type 1 has an invalid length. [ 109.002941][ T6441] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 109.059080][ T6434] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.196692][ T6434] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.385290][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.442940][ T26] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.488346][ T26] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.580885][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.624244][ T9] usb 6-1: USB disconnect, device number 9 [ 109.769026][ T6450] netlink: 'syz.3.139': attribute type 1 has an invalid length. [ 109.797978][ T6450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.876473][ T6455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.139'. [ 109.887018][ T6450] bond1: (slave veth3): Enslaving as an active interface with a down link [ 109.959095][ T6461] IPVS: set_ctl: invalid protocol: 12 10.1.1.2:20002 [ 110.155874][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 110.305168][ T9] usb 8-1: device descriptor read/64, error -71 [ 110.552480][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 110.693093][ T9] usb 8-1: device descriptor read/64, error -71 [ 110.800826][ T9] usb usb8-port1: attempt power cycle [ 111.157373][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 111.167123][ T5838] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 111.178694][ T9] usb 8-1: device descriptor read/8, error -71 [ 111.275983][ T5534] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 111.425017][ T5534] usb 7-1: device descriptor read/64, error -71 [ 111.425015][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 111.445664][ T9] usb 8-1: device descriptor read/8, error -71 [ 111.446606][ T6509] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 111.451787][ T6509] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 111.565557][ T9] usb usb8-port1: unable to enumerate USB device [ 111.588849][ T5838] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 111.591910][ T5838] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 111.595465][ T5838] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.600594][ T5838] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 111.603119][ T5838] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 111.606516][ T5838] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.611159][ T5838] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 111.614211][ T5838] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 111.617942][ T5838] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.625234][ T5838] usb 5-1: string descriptor 0 read error: -22 [ 111.627223][ T5838] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 111.630106][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.639376][ T5838] adutux 5-1:168.0: interrupt endpoints not found [ 111.683056][ T5534] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 111.811912][ T5534] usb 7-1: device descriptor read/64, error -71 [ 111.866165][ C3] sr 2:0:0:0: [sr0] tag#5 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 111.870165][ C3] sr 2:0:0:0: [sr0] tag#5 CDB: opcode=0xfd (vendor) [ 111.872751][ C3] sr 2:0:0:0: [sr0] tag#5 CDB[00]: fd ac 5d 01 c1 88 91 56 81 08 26 2d 93 d4 26 76 [ 111.876473][ C3] sr 2:0:0:0: [sr0] tag#5 CDB[10]: dd 71 d3 2e [ 111.904902][ T56] usb 5-1: USB disconnect, device number 13 [ 111.922772][ T5534] usb usb7-port1: attempt power cycle [ 112.034994][ T6519] syz.1.150 uses obsolete (PF_INET,SOCK_PACKET) [ 112.288342][ T5534] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 112.308674][ T5534] usb 7-1: device descriptor read/8, error -71 [ 112.566169][ T5534] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 112.587028][ T5534] usb 7-1: device descriptor read/8, error -71 [ 112.648595][ T6534] fuse: Bad value for 'user_id' [ 112.650866][ T6534] fuse: Bad value for 'user_id' [ 112.663229][ T6534] Bluetooth: MGMT ver 1.23 [ 112.705460][ T5534] usb usb7-port1: unable to enumerate USB device [ 113.171463][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 113.330394][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 113.334483][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 113.338195][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.342553][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.346806][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.351363][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.355814][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.359468][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.601804][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 113.602510][ T6548] random: crng reseeded on system resumption [ 113.603656][ T9] usbtmc 8-1:16.0: can't read capabilities [ 114.082411][ T6550] AppArmor: change_hat: Invalid input '0x' [ 114.102365][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 114.886015][ T6566] capability: warning: `syz.0.166' uses 32-bit capabilities (legacy support in use) [ 115.705298][ T5534] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 115.913439][ T5534] usb 5-1: device descriptor read/64, error -71 [ 115.914059][ T9] usb 8-1: USB disconnect, device number 13 [ 116.207570][ T6585] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 116.209823][ T6585] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 116.212687][ T6585] vhci_hcd vhci_hcd.0: Device attached [ 116.217330][ T112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.220602][ T112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.244466][ T6585] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 116.489696][ T5892] usb 40-1: SetAddress Request (2) to port 0 [ 116.491683][ T5892] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 116.706253][ T6586] vhci_hcd: connection reset by peer [ 116.710851][ T5823] vhci_hcd vhci_hcd.1: stop threads [ 116.713152][ T5823] vhci_hcd vhci_hcd.1: release socket [ 116.717441][ T5823] vhci_hcd vhci_hcd.1: disconnect device [ 116.768723][ T5534] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 116.907187][ T5534] usb 5-1: device descriptor read/64, error -71 [ 117.018980][ T5534] usb usb5-port1: attempt power cycle [ 117.394670][ T5534] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 117.425349][ T5534] usb 5-1: device descriptor read/8, error -71 [ 117.672896][ T5534] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 117.697648][ T6630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.177'. [ 117.701743][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 117.706086][ T5534] usb 5-1: device descriptor read/8, error -71 [ 117.812554][ T5534] usb usb5-port1: unable to enumerate USB device [ 119.219071][ T5838] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 119.389677][ T6672] netlink: 'syz.1.183': attribute type 1 has an invalid length. [ 119.433506][ T6672] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.497362][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.1.183'. [ 119.504461][ T6677] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 119.802081][ T64] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 119.941483][ T64] usb 6-1: device descriptor read/64, error -71 [ 119.952918][ T6672] bond3: (slave veth7): Enslaving as an active interface with a down link [ 119.974128][ T5838] usb 7-1: Using ep0 maxpacket: 8 [ 120.051461][ T5838] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 120.060847][ T5838] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.064791][ T5838] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.068650][ T5838] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.076519][ T5838] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.081628][ T5838] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.084518][ T5838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.200485][ T64] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 120.304768][ T5838] usb 7-1: GET_CAPABILITIES returned 0 [ 120.306627][ T5838] usbtmc 7-1:16.0: can't read capabilities [ 120.329667][ T64] usb 6-1: device descriptor read/64, error -71 [ 120.387820][ T43] audit: type=1326 audit(1784576366.255:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 120.394852][ T43] audit: type=1326 audit(1784576366.255:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 120.402367][ T43] audit: type=1326 audit(1784576366.255:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.189" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 120.409040][ T43] audit: type=1326 audit(1784576366.255:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 120.416107][ T43] audit: type=1326 audit(1784576366.255:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 120.422870][ T43] audit: type=1326 audit(1784576366.265:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.189" exe="/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 120.448481][ T43] audit: type=1326 audit(1784576366.316:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 120.449966][ T64] usb usb6-port1: attempt power cycle [ 120.456247][ T43] audit: type=1326 audit(1784576366.316:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 120.495162][ T43] audit: type=1326 audit(1784576366.366:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.189" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 120.502972][ T43] audit: type=1326 audit(1784576366.366:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 120.742858][ T6711] netlink: 'syz.3.192': attribute type 3 has an invalid length. [ 120.745577][ T6711] netlink: 'syz.3.192': attribute type 1 has an invalid length. [ 120.754811][ T6711] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 120.820243][ T64] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 120.837977][ T64] usb 6-1: device descriptor read/8, error -71 [ 121.077955][ T64] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 121.097224][ T64] usb 6-1: device descriptor read/8, error -71 [ 121.214211][ T64] usb usb6-port1: unable to enumerate USB device [ 121.495154][ T5892] usb 40-1: device descriptor read/8, error -110 [ 121.854411][ T6731] netlink: 68 bytes leftover after parsing attributes in process `syz.3.197'. [ 121.886906][ T5534] usb 7-1: USB disconnect, device number 17 [ 121.903287][ T5892] usb usb40-port1: attempt power cycle [ 121.978922][ T6738] netlink: 40 bytes leftover after parsing attributes in process `syz.2.200'. [ 122.175876][ T6745] fuse: Unknown parameter 'f' [ 122.256868][ T6750] netlink: 'syz.2.203': attribute type 3 has an invalid length. [ 122.259404][ T6750] netlink: 'syz.2.203': attribute type 1 has an invalid length. [ 122.268610][ T6750] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 122.314725][ T6753] netlink: 'syz.0.205': attribute type 3 has an invalid length. [ 122.318131][ T6753] netlink: 'syz.0.205': attribute type 1 has an invalid length. [ 122.327050][ T6753] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 122.405133][ T6757] netlink: 68 bytes leftover after parsing attributes in process `syz.1.206'. [ 122.459251][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x7 [ 122.465147][ T9] hid-generic 0000:0000:0000.0003: ignoring exceeding usage max [ 122.472782][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.477491][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.480954][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.481378][ T5892] usb usb40-port1: unable to enumerate USB device [ 122.484615][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.489017][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.492208][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.495368][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.498507][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.502554][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.510504][ T9] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 122.554200][ T6760] fido_id[6760]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 122.809200][ T42] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 122.958500][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 122.962145][ T42] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 122.964875][ T42] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.967953][ T42] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.971078][ T42] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.974189][ T42] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.978665][ T42] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 122.982269][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.193247][ T42] usb 6-1: GET_CAPABILITIES returned 0 [ 123.195052][ T42] usbtmc 6-1:16.0: can't read capabilities [ 123.781211][ T6779] netlink: 'syz.2.214': attribute type 1 has an invalid length. [ 123.796272][ T6779] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.838201][ T6779] bond3: (slave veth5): Enslaving as an active interface with a down link [ 123.846378][ T6779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.214'. [ 124.084317][ T56] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 124.213861][ T56] usb 7-1: device descriptor read/64, error -71 [ 124.453358][ T56] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 124.582571][ T56] usb 7-1: device descriptor read/64, error -71 [ 124.692421][ T56] usb usb7-port1: attempt power cycle [ 124.939977][ T6797] netlink: 68 bytes leftover after parsing attributes in process `syz.3.216'. [ 125.000658][ T6799] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 125.031074][ T56] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 125.052103][ T56] usb 7-1: device descriptor read/8, error -71 [ 125.292749][ T56] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 125.310427][ T56] usb 7-1: device descriptor read/8, error -71 [ 125.420497][ T56] usb usb7-port1: unable to enumerate USB device [ 125.575033][ T56] usb 6-1: USB disconnect, device number 14 [ 125.737748][ T6825] netlink: 'syz.1.220': attribute type 3 has an invalid length. [ 125.741903][ T6825] netlink: 'syz.1.220': attribute type 1 has an invalid length. [ 125.757459][ T6825] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 126.156268][ T6832] FAULT_INJECTION: forcing a failure. [ 126.156268][ T6832] name failslab, interval 1, probability 0, space 0, times 1 [ 126.166009][ T6832] CPU: 0 UID: 0 PID: 6832 Comm: syz.0.222 Not tainted syzkaller #0 PREEMPT(full) [ 126.166036][ T6832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.166048][ T6832] Call Trace: [ 126.166085][ T6832] [ 126.166092][ T6832] dump_stack_lvl+0x100/0x190 [ 126.166119][ T6832] should_fail_ex.cold+0x5/0xa [ 126.166140][ T6832] should_failslab+0xc2/0x120 [ 126.166163][ T6832] __kvmalloc_node_noprof+0x116/0x970 [ 126.166183][ T6832] ? __might_fault+0xc5/0x140 [ 126.166201][ T6832] ? vmemdup_user+0x2a/0xe0 [ 126.166224][ T6832] vmemdup_user+0x2a/0xe0 [ 126.166244][ T6832] kvm_vm_ioctl+0x133c/0x4030 [ 126.166270][ T6832] ? tomoyo_path_number_perm+0x46d/0x580 [ 126.166292][ T6832] ? stack_trace_save+0x8e/0xc0 [ 126.166315][ T6832] ? __pfx_stack_trace_save+0x10/0x10 [ 126.166338][ T6832] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 126.166360][ T6832] ? __lock_acquire+0x49f/0x1a40 [ 126.166386][ T6832] ? tomoyo_path_number_perm+0x46d/0x580 [ 126.166406][ T6832] ? kasan_save_stack+0x3f/0x50 [ 126.166424][ T6832] ? kasan_save_stack+0x30/0x50 [ 126.166442][ T6832] ? kasan_save_track+0x14/0x30 [ 126.166460][ T6832] ? kasan_save_free_info+0x3b/0x70 [ 126.166485][ T6832] ? __kasan_slab_free+0x5f/0x80 [ 126.166504][ T6832] ? kfree+0x22b/0x6c0 [ 126.166527][ T6832] ? tomoyo_path_number_perm+0x46d/0x580 [ 126.166546][ T6832] ? security_file_ioctl_compat+0xd3/0x230 [ 126.166565][ T6832] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 126.166587][ T6832] ? __do_fast_syscall_32+0xe7/0x970 [ 126.166607][ T6832] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 126.166635][ T6832] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 126.166686][ T6832] ? kasan_quarantine_put+0x104/0x240 [ 126.166710][ T6832] ? lockdep_hardirqs_on+0x78/0x100 [ 126.166729][ T6832] ? find_held_lock+0x2b/0x80 [ 126.166748][ T6832] ? tomoyo_path_number_perm+0x28f/0x580 [ 126.166768][ T6832] ? tomoyo_path_number_perm+0x28f/0x580 [ 126.166793][ T6832] ? tomoyo_path_number_perm+0x188/0x580 [ 126.166814][ T6832] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 126.166836][ T6832] ? get_pid_task+0x106/0x250 [ 126.166862][ T6832] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 126.166887][ T6832] ? do_vfs_ioctl+0x226/0x13e0 [ 126.166927][ T6832] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 126.166953][ T6832] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 126.166978][ T6832] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 126.167003][ T6832] ? find_held_lock+0x2b/0x80 [ 126.167022][ T6832] ? __fget_files+0x215/0x3d0 [ 126.167046][ T6832] ? hook_file_ioctl_common+0x140/0x440 [ 126.167072][ T6832] ? __fget_files+0x21f/0x3d0 [ 126.167102][ T6832] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 126.167127][ T6832] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 126.167153][ T6832] __do_fast_syscall_32+0xe7/0x970 [ 126.167172][ T6832] ? lockdep_hardirqs_on+0x78/0x100 [ 126.167191][ T6832] do_fast_syscall_32+0x32/0x70 [ 126.167210][ T6832] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.167232][ T6832] RIP: 0023:0xf6fdefec [ 126.167254][ T6832] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 126.167290][ T6832] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 126.167307][ T6832] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004008ae6a [ 126.167318][ T6832] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.167328][ T6832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.167337][ T6832] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 126.167347][ T6832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.167370][ T6832] [ 127.075485][ T6842] syzkaller0: entered promiscuous mode [ 127.077334][ T6842] syzkaller0: entered allmulticast mode [ 127.309352][ T6845] netlink: 68 bytes leftover after parsing attributes in process `syz.3.226'. [ 127.405379][ T6851] FAULT_INJECTION: forcing a failure. [ 127.405379][ T6851] name failslab, interval 1, probability 0, space 0, times 0 [ 127.411282][ T6851] CPU: 0 UID: 0 PID: 6851 Comm: syz.0.229 Not tainted syzkaller #0 PREEMPT(full) [ 127.411306][ T6851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.411315][ T6851] Call Trace: [ 127.411323][ T6851] [ 127.411333][ T6851] dump_stack_lvl+0x100/0x190 [ 127.411359][ T6851] should_fail_ex.cold+0x5/0xa [ 127.411378][ T6851] should_failslab+0xc2/0x120 [ 127.411413][ T6851] __kmalloc_noprof+0xfc/0x820 [ 127.411427][ T6851] ? tomoyo_encode2+0xfb/0x3c0 [ 127.411445][ T6851] tomoyo_encode2+0xfb/0x3c0 [ 127.411462][ T6851] tomoyo_encode+0x29/0x50 [ 127.411477][ T6851] tomoyo_realpath_from_path+0x18c/0x690 [ 127.411496][ T6851] tomoyo_path_number_perm+0x23c/0x580 [ 127.411509][ T6851] ? tomoyo_path_number_perm+0x22e/0x580 [ 127.411523][ T6851] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 127.411536][ T6851] ? get_pid_task+0x106/0x250 [ 127.411562][ T6851] ? find_held_lock+0x2b/0x80 [ 127.411575][ T6851] ? __fget_files+0x215/0x3d0 [ 127.411590][ T6851] ? hook_file_ioctl_common+0x140/0x440 [ 127.411603][ T6851] ? __fget_files+0x215/0x3d0 [ 127.411621][ T6851] ? __fget_files+0x21f/0x3d0 [ 127.411640][ T6851] security_file_ioctl_compat+0xd3/0x230 [ 127.411654][ T6851] __ia32_compat_sys_ioctl+0xc2/0x360 [ 127.411672][ T6851] __do_fast_syscall_32+0xe7/0x970 [ 127.411685][ T6851] ? lockdep_hardirqs_on+0x78/0x100 [ 127.411697][ T6851] do_fast_syscall_32+0x32/0x70 [ 127.411710][ T6851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.411724][ T6851] RIP: 0023:0xf6fdefec [ 127.411739][ T6851] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 127.411744][ T6851] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 127.411758][ T6851] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00000000c03864bc [ 127.411765][ T6851] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.411771][ T6851] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.411777][ T6851] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 127.411783][ T6851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.411797][ T6851] [ 127.411845][ T6851] ERROR: Out of memory at tomoyo_realpath_from_path. [ 127.583134][ T55] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 127.732638][ T55] usb 8-1: Using ep0 maxpacket: 8 [ 127.738995][ T55] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 127.748690][ T55] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.758810][ T55] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.767225][ T55] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.774703][ T55] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.786609][ T55] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.798068][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.862269][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 128.013803][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.018568][ T9] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 128.024151][ T55] usb 8-1: GET_CAPABILITIES returned 0 [ 128.027025][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.028446][ T55] usbtmc 8-1:16.0: can't read capabilities [ 128.030070][ T9] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.033902][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 128.042118][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 128.046403][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 128.056594][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 128.063388][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.071626][ T9] usb 7-1: Product: syz [ 128.073475][ T9] usb 7-1: Manufacturer: syz [ 128.080844][ T6861] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 128.087814][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 128.092744][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 128.097053][ T9] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 128.102086][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 128.309139][ T9] usb 7-1: USB disconnect, device number 22 [ 128.449500][ T6869] netlink: 68 bytes leftover after parsing attributes in process `syz.0.235'. [ 130.354727][ T5534] usb 8-1: USB disconnect, device number 14 [ 130.434714][ T6898] netlink: 68 bytes leftover after parsing attributes in process `syz.3.244'. [ 132.721821][ T6952] netlink: 68 bytes leftover after parsing attributes in process `syz.3.253'. [ 132.999930][ T64] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 133.175108][ T64] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 133.188319][ T64] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 133.200987][ T64] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 133.207458][ T64] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.215649][ T64] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 133.230529][ T64] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 133.246779][ T64] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 133.258933][ T64] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 133.272916][ T64] usb 7-1: Product: syz [ 133.274576][ T64] usb 7-1: Manufacturer: syz [ 133.291562][ T6953] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 133.311106][ T64] cdc_wdm 7-1:1.0: skipping garbage [ 133.322144][ T64] cdc_wdm 7-1:1.0: skipping garbage [ 133.368999][ T64] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 133.378573][ T64] cdc_wdm 7-1:1.0: Unknown control protocol [ 133.516644][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.519530][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.521925][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.524533][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.527346][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.529503][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.532241][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.534835][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.537142][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.540012][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.542997][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.545871][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.549218][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.552994][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.555618][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.557779][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.559938][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.562000][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.564249][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.566334][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.676971][ T5831] usb 7-1: USB disconnect, device number 23 [ 133.678942][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 135.288078][ T6943] syz.2.251 (6943) used greatest stack depth: 17520 bytes left [ 136.209307][ T7008] sg_read: process 206 (syz.3.268) changed security contexts after opening file descriptor, this is not allowed. [ 136.574606][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.269'. [ 137.010608][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 137.010629][ T43] audit: type=1800 audit(1784576382.932:35): pid=7023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.270" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 137.851838][ T837] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 138.034087][ T837] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 138.041253][ T837] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 138.046821][ T837] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 138.056231][ T837] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.060156][ T837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 138.064756][ T837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 138.071456][ T837] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 138.074533][ T837] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 138.077155][ T837] usb 5-1: Product: syz [ 138.078506][ T837] usb 5-1: Manufacturer: syz [ 138.089505][ T7029] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.095407][ T837] cdc_wdm 5-1:1.0: skipping garbage [ 138.097288][ T837] cdc_wdm 5-1:1.0: skipping garbage [ 138.100401][ T837] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 138.103086][ T837] cdc_wdm 5-1:1.0: Unknown control protocol [ 138.407527][ T837] usb 5-1: USB disconnect, device number 18 [ 138.407586][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 138.414150][ T7029] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 139.054140][ T7044] netlink: 'syz.3.277': attribute type 1 has an invalid length. [ 139.130749][ T7047] netlink: 'syz.3.277': attribute type 3 has an invalid length. [ 139.279488][ T7047] netlink: 'syz.3.277': attribute type 3 has an invalid length. [ 139.285405][ T7047] netlink: 'syz.3.277': attribute type 3 has an invalid length. [ 139.292888][ T7047] netlink: 'syz.3.277': attribute type 3 has an invalid length. [ 139.298916][ T7047] netlink: 'syz.3.277': attribute type 3 has an invalid length. [ 139.306878][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.308446][ T7047] netlink: 'syz.3.277': attribute type 3 has an invalid length. [ 139.316273][ T7047] netlink: 'syz.3.277': attribute type 3 has an invalid length. [ 139.317007][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.322108][ T7047] netlink: 'syz.3.277': attribute type 3 has an invalid length. [ 139.329721][ T7047] netlink: 'syz.3.277': attribute type 3 has an invalid length. [ 140.115502][ T5749] 9pnet: Tag 0 still in use [ 140.122666][ C0] ------------[ cut here ]------------ [ 140.125314][ C0] refcount_t: underflow; use-after-free. [ 140.127698][ C0] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xf4/0x130, CPU#0: swapper/0/0 [ 140.131751][ C0] Modules linked in: [ 140.133833][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 140.137461][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.141272][ C0] RIP: 0010:refcount_warn_saturate+0xf4/0x130 [ 140.143715][ C0] Code: 06 e8 f0 1a ee fc 48 8d 3d 89 85 12 0c 67 48 0f b9 3a e8 df 1a ee fc 5b 5d c3 cc cc cc cc e8 d3 1a ee fc 48 8d 3d 7c 85 12 0c <67> 48 0f b9 3a e8 c2 1a ee fc 5b 5d e9 5b 63 9f 06 e8 b6 1a ee fc [ 140.151093][ C0] RSP: 0018:ffffc90000007d98 EFLAGS: 00010046 [ 140.153070][ C0] RAX: 0000000080010002 RBX: ffff88804d6ff548 RCX: ffffffff851b0d5b [ 140.155530][ C0] RDX: ffffffff8e891480 RSI: ffffffff851b0ded RDI: ffffffff912d9370 [ 140.157973][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000004 [ 140.160396][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88804d6ff548 [ 140.162845][ C0] R13: ffff888029148800 R14: 000000000000000b R15: 1ffff1100874480c [ 140.165313][ C0] FS: 0000000000000000(0000) GS:ffff888096bee000(0000) knlGS:0000000000000000 [ 140.168052][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.170215][ C0] CR2: 0000000080000150 CR3: 0000000065fe7000 CR4: 0000000000352ef0 [ 140.172680][ C0] Call Trace: [ 140.173780][ C0] [ 140.174693][ C0] p9_req_put+0x1ec/0x250 [ 140.176085][ C0] req_done+0x1dc/0x2e0 [ 140.177380][ C0] ? __pfx_req_done+0x10/0x10 [ 140.178992][ C0] ? __lock_acquire+0x49f/0x1a40 [ 140.180533][ C0] ? __pfx_req_done+0x10/0x10 [ 140.181983][ C0] vring_interrupt+0x2ef/0x660 [ 140.183554][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 140.185179][ C0] __handle_irq_event_percpu+0x232/0x880 [ 140.186713][ C0] handle_irq_event+0xab/0x1e0 [ 140.188103][ C0] handle_edge_irq+0x34c/0x950 [ 140.189625][ C0] __common_interrupt+0xd8/0x2f0 [ 140.191217][ C0] common_interrupt+0xb9/0xe0 [ 140.192738][ C0] [ 140.193701][ C0] [ 140.194636][ C0] asm_common_interrupt+0x26/0x40 [ 140.196308][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 140.198533][ C0] Code: 96 8f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 58 14 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 140.206840][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000202 [ 140.209041][ C0] RAX: 000000000028b4d9 RBX: ffffffff8e891480 RCX: ffffffff8bb742d5 [ 140.211969][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a6fd9 RDI: ffffffff8c400780 [ 140.214506][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed100564678d [ 140.216994][ C0] R10: ffff88802b233c6b R11: 0000000000000000 R12: 0000000000000000 [ 140.219473][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 140.222027][ C0] ? ct_kernel_exit+0x125/0x180 [ 140.223570][ C0] default_idle+0x9/0x10 [ 140.224926][ C0] default_idle_call+0x6c/0xb0 [ 140.226360][ C0] do_idle+0x3a7/0x5b0 [ 140.227665][ C0] ? __pfx_do_idle+0x10/0x10 [ 140.229252][ C0] cpu_startup_entry+0x4f/0x60 [ 140.230846][ C0] rest_init+0x251/0x260 [ 140.232189][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 140.233925][ C0] start_kernel+0x48e/0x490 [ 140.235297][ C0] x86_64_start_reservations+0x24/0x30 [ 140.237038][ C0] x86_64_start_kernel+0x12b/0x130 [ 140.238601][ C0] common_startup_64+0x13e/0x158 [ 140.240088][ C0] [ 140.241089][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.243340][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 140.246097][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.249197][ C0] Call Trace: [ 140.250410][ C0] [ 140.251329][ C0] dump_stack_lvl+0x100/0x190 [ 140.252851][ C0] vpanic+0x552/0x970 [ 140.254144][ C0] ? __pfx_vpanic+0x10/0x10 [ 140.255615][ C0] panic+0xd1/0xe0 [ 140.256848][ C0] ? __pfx_panic+0x10/0x10 [ 140.258290][ C0] ? check_panic_on_warn+0x1f/0x90 [ 140.259972][ C0] check_panic_on_warn.cold+0x19/0x34 [ 140.261700][ C0] ? refcount_warn_saturate+0xf4/0x130 [ 140.263407][ C0] __warn.cold+0x191/0x318 [ 140.264882][ C0] __report_bug+0x30f/0x440 [ 140.266382][ C0] ? refcount_warn_saturate+0xf4/0x130 [ 140.268176][ C0] ? __pfx___report_bug+0x10/0x10 [ 140.269800][ C0] ? refcount_warn_saturate+0xed/0x130 [ 140.271717][ C0] ? refcount_warn_saturate+0x5b/0x130 [ 140.273458][ C0] ? __lock_acquire+0x49f/0x1a40 [ 140.275017][ C0] report_bug_entry+0xe1/0x290 [ 140.276578][ C0] ? refcount_warn_saturate+0xf4/0x130 [ 140.278325][ C0] handle_bug+0x1cd/0x2a0 [ 140.279707][ C0] exc_invalid_op+0x17/0x50 [ 140.281571][ C0] asm_exc_invalid_op+0x1a/0x20 [ 140.283598][ C0] RIP: 0010:refcount_warn_saturate+0xf4/0x130 [ 140.286053][ C0] Code: 06 e8 f0 1a ee fc 48 8d 3d 89 85 12 0c 67 48 0f b9 3a e8 df 1a ee fc 5b 5d c3 cc cc cc cc e8 d3 1a ee fc 48 8d 3d 7c 85 12 0c <67> 48 0f b9 3a e8 c2 1a ee fc 5b 5d e9 5b 63 9f 06 e8 b6 1a ee fc [ 140.292966][ C0] RSP: 0018:ffffc90000007d98 EFLAGS: 00010046 [ 140.295126][ C0] RAX: 0000000080010002 RBX: ffff88804d6ff548 RCX: ffffffff851b0d5b [ 140.297902][ C0] RDX: ffffffff8e891480 RSI: ffffffff851b0ded RDI: ffffffff912d9370 [ 140.300513][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000004 [ 140.302973][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88804d6ff548 [ 140.305515][ C0] R13: ffff888029148800 R14: 000000000000000b R15: 1ffff1100874480c [ 140.308279][ C0] ? refcount_warn_saturate+0x5b/0x130 [ 140.310391][ C0] ? refcount_warn_saturate+0xed/0x130 [ 140.312670][ C0] ? refcount_warn_saturate+0xed/0x130 [ 140.314671][ C0] p9_req_put+0x1ec/0x250 [ 140.316163][ C0] req_done+0x1dc/0x2e0 [ 140.317528][ C0] ? __pfx_req_done+0x10/0x10 [ 140.319016][ C0] ? __lock_acquire+0x49f/0x1a40 [ 140.321055][ C0] ? __pfx_req_done+0x10/0x10 [ 140.322930][ C0] vring_interrupt+0x2ef/0x660 [ 140.324622][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 140.326511][ C0] __handle_irq_event_percpu+0x232/0x880 [ 140.328759][ C0] handle_irq_event+0xab/0x1e0 [ 140.330691][ C0] handle_edge_irq+0x34c/0x950 [ 140.332716][ C0] __common_interrupt+0xd8/0x2f0 [ 140.334831][ C0] common_interrupt+0xb9/0xe0 [ 140.336836][ C0] [ 140.338116][ C0] [ 140.339369][ C0] asm_common_interrupt+0x26/0x40 [ 140.341453][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 140.343702][ C0] Code: 96 8f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 58 14 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 140.349607][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000202 [ 140.351599][ C0] RAX: 000000000028b4d9 RBX: ffffffff8e891480 RCX: ffffffff8bb742d5 [ 140.353975][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a6fd9 RDI: ffffffff8c400780 [ 140.356375][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed100564678d [ 140.358804][ C0] R10: ffff88802b233c6b R11: 0000000000000000 R12: 0000000000000000 [ 140.361677][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 140.364898][ C0] ? ct_kernel_exit+0x125/0x180 [ 140.366810][ C0] default_idle+0x9/0x10 [ 140.368436][ C0] default_idle_call+0x6c/0xb0 [ 140.370242][ C0] do_idle+0x3a7/0x5b0 [ 140.371957][ C0] ? __pfx_do_idle+0x10/0x10 [ 140.373914][ C0] cpu_startup_entry+0x4f/0x60 [ 140.375917][ C0] rest_init+0x251/0x260 [ 140.377624][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 140.379467][ C0] start_kernel+0x48e/0x490 [ 140.381197][ C0] x86_64_start_reservations+0x24/0x30 [ 140.383280][ C0] x86_64_start_kernel+0x12b/0x130 [ 140.384952][ C0] common_startup_64+0x13e/0x158 [ 140.386544][ C0] [ 140.388834][ C0] Kernel Offset: disabled [ 140.390451][ C0] Rebooting in 86400 seconds..