last executing test programs: 8m27.253872393s ago: executing program 2 (id=65): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080), 0x8) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r1 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r1, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 8m25.499803741s ago: executing program 2 (id=69): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000e280)=@newtfilter={0x8e0c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_route={{0xa}, {0x8ddc, 0x2, [@TCA_ROUTE4_ACT={0x2334, 0x6, [@m_ct={0x104, 0x13, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x6b2d}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea0bc1f8b660c4cf2f6f97fdbb699a23"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x9}]}, {0x9a, 0x6, "074c79d70e451c0367172097eecec81ead780d5fd5fce2f0eba1d4ecdeceb1f03f76a26a22ff196d81ae0ced3e55cf45748edc08474fc66a6c4ed7e51f2007e2c30c4f9291303aaf5f39acaa298e95de4e77460db2d5b903146e6a759e7da5c4a4d2d694ca7db57ec8f1b39a9bdd7b4f0359ce9eecc650be457d2ee88aba38abf0520ca3557fda4f997cdcbb0467cd474af5788d3dfc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_ctinfo={0x1050, 0xb, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x64d6582482b0db6b}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x7c, 0x13, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x9}, @TCA_CT_LABELS={0x14, 0x7, "446b29369af43520111ac4c384675234"}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_ACTION={0x6, 0x3, 0xe}]}, {0x27, 0x6, "9614818c5f699d15bbb7918f2e0dfd498ec378421c7e2f5714dcd65ce08d421a8df7bf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_nat={0x1018, 0x14, 0x0, 0x0, {{0x8}, {0x4}, {0xfef, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x148, 0x3, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xa, 0x1, 0x8, 0xfffffff8, 0x1}}, @TCA_DEF_DATA={0xe, 0x3, '-{,\'\'%^]%\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'sfq\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'sfq\x00'}, @TCA_DEF_DATA={0x7, 0x3, '}{\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x401, 0xa7c, 0xffffffffdffffff8, 0x8000, 0x8}}]}, {0xc1, 0x6, "d3c583a800111ee4eafbaa0a1c6a9a37c26e5913317e34441e171af2f4eceee526d939e336cd060392bdd1ba8a529247cedda49a30fc4e0f57beb82161d1ef21786a23c69efa56021d57b3a0d5eeca2572d5811f57b06f5850182461001f2dc616a39c8609373d95241b3dac848312e423d2ad5e789f2e4cad2513592a7b7d9b7a5fbe82faebed893d4bfe6eb95e394424a66d89a8e4c321ddd6a18a8109d2f9de108641670579e2af8f10f1db6ce32f7be4cfb055eb4f054de8332c0f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x9, 0x1}}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x2, 0xf}}, @TCA_ROUTE4_ACT={0x5e60, 0x6, [@m_ctinfo={0xb8, 0x0, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x18000000}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x80}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x76}]}, {0x4c, 0x6, "fdeba2a948b6336d5aefac3d3aee8c0cc4939142bb1b0327f11403f6978b1e61701c14a87d799293c6f3a646522ca91927b6b975e98593424de6787cbe84054ed94c3b7ef3fa1211"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x34, 0x3, 0x0, 0x0, {{0xc}, {0x4}, {0x5, 0x6, "15"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0xc8, 0x1b, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff9, 0x4, 0x10000000, 0x5, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x748b3aa4, 0x9, 0x1, 0xfffffffd, 0x5}}]}, {0x6c, 0x6, "8abc94cf0b1f73117cfdacfcce71c29cdea392e44c2630aaa381f4a78f93c57aedf41e404703a220416e738065abbd36a71113519c6409e0d238c3b1d7c0dfd6e8b0a29c3ae8ca4c8577933a795ec6958f8771affe3508c066688b230c01f745adfbed870fcfedac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0xe8, 0x3, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}]}, {0xb3, 0x6, "c290ea05c138eb1216b0d25a6b28bf048add321da4ee8cc0ccffbc9338e64555c30355719b897f7de7d0fc2304104733044b02787962beb9379b88db35552d215faee7731744ae991880c5f104e18f957298d3dbc995c687c1a02a7fd273f01cfa98e4deb2ef594ff648b626992b1266a39cae4b459a326ba267760c052c924eb85a33245577d0e925718a0d4ebe17401eddd00595df854383a37865dabf51ce960644e3dcdb31368fbd539f631a1a"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}, @m_ctinfo={0x30, 0x1b, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x8c, 0x1b, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x1ff, 'security\x00', 0x0, 0xa32}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8001}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x49e0, 0x13, 0x0, 0x0, {{0xa}, {0x48ec, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x8, 0x1, 0x2, 0xc, 0x7}, 0x7, 0xa, [{0x5, 0xff, 0x6, 0x9, 0xbec, 0x1}]}, [{0x6, 0x7, 0x3, 0x7, 0x7c49, 0x800}, {0x7b1, 0x10, 0x2, 0x4, 0x2b3d, 0xdd3}, {0x2, 0xfffffff8, 0x5, 0x1, 0x9, 0x4}, {0x1, 0x9, 0x9, 0x6, 0x5, 0x2}, {0x5, 0x8, 0xbdf, 0x6f, 0x5, 0x10}, {0x0, 0x28000, 0x7, 0x9, 0x169, 0x4}, {0x7ec8, 0x2, 0x5e29e00c, 0x1000, 0x9, 0x80000000}, {0x8001, 0x101, 0x5812, 0x4, 0x1, 0x53e64eb6}, {0x7, 0x5, 0xfffff800, 0x6, 0x800, 0x80}, {0x2, 0x1ff, 0x5, 0xc, 0x1, 0xa5ee}, {0xfffffff7, 0x8, 0x2, 0x5c0, 0x0, 0x7}, {0x4, 0x7, 0x7, 0xb07, 0x3, 0x5}, {0x3fe, 0x10000, 0x5, 0x9c, 0x71aa50aa, 0x3}, {0x3, 0xa1, 0x80, 0x67171158, 0x8000, 0xdc}, {0xfb0c0000, 0x6d0, 0x1356, 0x401, 0xf, 0x9}, {0x1, 0x5, 0xffff7fff, 0x133, 0x3815, 0x4}, {0x80000000, 0xfffffff7, 0x6, 0x709f10d2, 0x40, 0x6}, {0x9, 0x9, 0x4456, 0x7e, 0x6, 0x9}, {0x0, 0x7, 0xffffffff, 0x6, 0x7, 0x5}, {0x0, 0x7, 0xf, 0x0, 0x7, 0x3}, {0x7, 0x5, 0x2, 0x610d, 0x8, 0x4}, {0x5ae, 0xffff, 0xf6a2, 0x6, 0x1ff, 0x7}, {0x0, 0x29c, 0x2, 0x0, 0xd, 0x6}, {0x5, 0x28, 0x1, 0x6, 0x4, 0x6}, {0x3, 0x3573, 0x5, 0x1ff, 0x40, 0x8000}, {0x8, 0x47, 0x7, 0x2, 0x9, 0xe6}, {0xfffffff7, 0x9, 0x2, 0x3db5aede, 0xe5, 0x3}, {0x10001, 0xfffffff7, 0x0, 0x4, 0xf79, 0x1ff}, {0x9f40, 0xfffffe41, 0x9, 0x1, 0x2, 0x3}, {0x5, 0xda41, 0x4, 0x5, 0x4, 0x4}, {0xff, 0x5, 0x5, 0x5, 0x6, 0x5}, {0xffffffdc, 0x9, 0x4, 0xce7d, 0x10, 0x8}, {0x7, 0x80000001, 0x1, 0x2, 0x9, 0x6df}, {0x8, 0x3, 0x7f8, 0x3, 0x3, 0xcc2}, {0x7, 0x300, 0x9, 0x9, 0x8, 0x2}, {0x3ff, 0x8, 0x401, 0x69, 0x7, 0xe784}, {0x9d, 0xeb, 0xc00000, 0xefe, 0x10001, 0x4}, {0x40, 0x7fff, 0x400, 0x3, 0x6, 0xe}, {0x2, 0x0, 0x3, 0x8, 0x802, 0x6}, {0x0, 0x81, 0x5330, 0x6, 0x6, 0x3}, {0x36, 0x7, 0x400, 0x13793691, 0xff8000, 0x2}, {0x8, 0x9, 0x6, 0xd, 0xec2, 0xfffffffc}, {0x6, 0x8, 0x40, 0x80, 0x5, 0x7}, {0x18, 0x400, 0x6, 0x100, 0xfffffffa, 0x8}, {0x0, 0x4, 0x2, 0x4, 0x8, 0xffff0000}, {0x7fffffff, 0x7fff, 0x3, 0x8d6, 0x3, 0x6}, {0x641, 0x9, 0x81, 0x8564, 0x16, 0x3}, {0x3, 0x6, 0x2, 0x233036ce, 0xa0b9, 0x5}, {0x2400000, 0x1000, 0x0, 0x8, 0x80, 0x5}, {0x3, 0x891, 0x8, 0x2, 0xffffffec, 0x7}, {0x6, 0x2a, 0x5, 0x8, 0x1, 0x2}, {0x9, 0xb, 0x7, 0x9, 0x7, 0x6}, {0x2, 0x4, 0x5, 0x8, 0x80, 0x80000000}, {0x1c, 0x512, 0x8, 0xdcbc, 0x1, 0x7c6}, {0x1, 0x0, 0x0, 0x4, 0x7, 0x5}, {0x536d4754, 0x8, 0x80, 0xe1, 0x7, 0x4}, {0x80000000, 0x4, 0xc34a, 0x7, 0x49e, 0x2}, {0x9, 0x1, 0xc, 0x1, 0x6}, {0x9, 0x4, 0x6, 0x8, 0x0, 0x4}, {0x9, 0x5261bacc, 0xff, 0x22}, {0xffffffff, 0xf01, 0x2, 0x3ff, 0x2, 0x5}, {0x7fff, 0x1b, 0xaeb6, 0x4521, 0xffff7fff, 0xffffff64}, {0x3c0, 0x4, 0x3, 0xfffffffd, 0x3, 0x5}, {0x8, 0x80, 0x11f, 0x200, 0x0, 0xad}, {0x9, 0xc0, 0x10, 0xf, 0x40, 0x4}, {0x5, 0x0, 0x1, 0xfffffffc, 0x8, 0x83}, {0x60000000, 0x91, 0x6, 0x2, 0x600, 0x8}, {0x8, 0x4, 0x6, 0x2, 0xadac, 0x4}, {0xfffffffb, 0x401, 0xfffffffa, 0x2, 0x453d3e1e, 0x9b11}, {0x5, 0x2, 0x6, 0x7, 0x5, 0x200}, {0x36ef, 0x4, 0x5, 0x5, 0x2, 0x10}, {0x87, 0x2, 0x4, 0x6b95, 0xfffffae6, 0x3b4}, {0x5, 0x9, 0x3, 0x372, 0x8000, 0x8}, {0x5, 0x5, 0x3, 0x0, 0x7, 0x1}, {0x2c2, 0x0, 0x7, 0x800, 0xe}, {0x81, 0x9, 0x1, 0x6, 0x3ff, 0x10}, {0xfffffffe, 0x1, 0x4, 0x1, 0x4, 0x5}, {0x427, 0x2, 0x2, 0x8, 0x0, 0x2}, {0x5, 0x83e4, 0xd, 0x3, 0xe8, 0xff}, {0x2, 0x2, 0x10000, 0xffff0000, 0x9, 0x2}, {0x8, 0x101, 0x7, 0x7, 0x7f, 0xf1}, {0x1, 0xfffffff9, 0x0, 0x80, 0x6, 0xffffff00}, {0xd3, 0x2, 0x4, 0x9, 0x10, 0x7}, {0x3, 0xa2b, 0xffffffff, 0xed, 0x1, 0xa}, {0x6, 0x200, 0x7ff, 0x9, 0x1ff, 0xebf2}, {0x2, 0xfff, 0x9, 0x0, 0x0, 0x5}, {0x4, 0x1, 0x10001, 0x0, 0x400, 0x3ff}, {0x2, 0x1000, 0x6, 0xceb, 0x81, 0x15b}, {0x2, 0x1, 0x1, 0x8001, 0x6, 0xfe}, {0x3, 0x4, 0x8, 0x0, 0xc, 0xf}, {0x0, 0x8, 0x6, 0x6, 0x9, 0x3}, {0x101, 0x3, 0x8, 0x1, 0x0, 0x3}, {0xfff, 0x4, 0x4, 0x4, 0xd, 0x2}, {0x6, 0x0, 0x1, 0xeeb, 0xb, 0xd02f}, {0xfffffffb, 0x5, 0x6, 0x4, 0x50000000, 0x7}, {0x9, 0xc, 0x4, 0x3, 0xdc1, 0x80000000}, {0x99, 0x0, 0x9, 0x30, 0x5, 0x58}, {0x5, 0xfffffffc, 0x8000, 0xcd15, 0x8, 0x7}, {0x6, 0x6, 0x6, 0x4, 0xffffffff, 0x2}, {0x3, 0x1, 0xcb, 0x7, 0x40, 0x415}, {0x48d7, 0xd7, 0x5, 0xd2c, 0x4, 0x2}, {0x7, 0x5, 0x4, 0x1, 0x6, 0x6498}, {0x9, 0x3, 0x2, 0x6, 0x16, 0x800000}, {0x6, 0x10, 0x4, 0x2, 0xca6, 0x4}, {0xf, 0x3, 0x2, 0x7, 0x7, 0x9}, {0x8, 0x1, 0x40, 0x3, 0x0, 0x401}, {0x4, 0x9, 0x6, 0xd, 0xc000, 0x6}, {0x7, 0x800, 0xfffffff2, 0x7, 0x9, 0xe4e4}, {0x400, 0x7, 0xfffffffe, 0x10000, 0x5, 0x80000000}, {0x0, 0xa, 0xffffffff, 0x6, 0x1, 0x9}, {0x1ca8, 0xfffffff9, 0x2, 0xb0, 0x4, 0x4}, {0x0, 0x2, 0x3, 0x100, 0x6, 0x26}, {0x0, 0x81, 0x8, 0xf5a3, 0xb6, 0xfffffff0}, {0x5, 0x2, 0x2, 0x9, 0x6, 0x2}, {0x0, 0x9b21, 0x4, 0x6, 0x1ff, 0x2}, {0x2, 0x6, 0x5, 0xfffffff8, 0xf, 0x4}, {0xae, 0x9, 0x6, 0x70, 0x5, 0x7}, {0x229, 0x2, 0xf, 0x80000000, 0x5, 0x76c}, {0x7, 0x9, 0x40, 0x5, 0x5, 0x6}, {0xfd, 0x401, 0x1, 0xf, 0x8001, 0x6}, {0x2, 0x90c6, 0x5, 0x7, 0x2, 0x7fff}, {0x7f, 0x4, 0x8, 0x91, 0xc12, 0x400}, {0x0, 0x9, 0xffffffff, 0x8, 0xffffffff, 0x25c}, {0x7, 0x40, 0x7fffffff, 0xca8, 0x3, 0x3}, {0x81, 0x0, 0x9, 0x6d3a, 0xffff, 0x8}, {0x2, 0x1000, 0x6, 0x1, 0xfffffff7, 0x4}, {0x8, 0xffff, 0x8, 0x5, 0x9, 0x9}, {0xffff, 0xf, 0x0, 0x5ebb, 0x3, 0x9}], [{0x4}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x5}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x7}, {0x1, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x4}, {}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x5}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x7}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x3, 0x9e9, 0x0, 0x8, 0x3e1}, 0xb, 0x0, [{0x12bc, 0x1, 0x10, 0x2, 0xe, 0x7}, {0x6, 0x101, 0x9, 0x2, 0x8fd3, 0xffff8001}]}, [{0x0, 0x5, 0x0, 0x101, 0x0, 0x6}, {0xfffffff3, 0x810, 0x5, 0xec1b, 0x39, 0x5}, {0x9, 0x80000000, 0x2, 0x10, 0x0, 0x5}, {0x4, 0x1000, 0x6, 0x2, 0x7fffffff, 0x5}, {0xfff, 0x10001, 0x2, 0x1, 0xfffffffa, 0xffff}, {0x200, 0x54, 0x5, 0x4, 0x9, 0x5}, {0x12d0, 0x3, 0x1000, 0x7, 0x9, 0xffff7fff}, {0x28, 0x7, 0x8, 0x1, 0x40, 0x4}, {0x9, 0xff, 0x800, 0x6f75efe9, 0x80000000}, {0x4, 0x0, 0xff, 0x2, 0x2, 0xffffffff}, {0x2ccd5340, 0x1, 0xb, 0x42fa, 0x2, 0x3}, {0x5, 0x8, 0x0, 0xffffffc0, 0xc957, 0x10000}, {0x55a, 0x1, 0x100, 0x2, 0x1, 0x1000}, {0x0, 0x0, 0x7, 0xffffffff, 0x80000001, 0x400}, {0x4, 0xd3, 0x7, 0x3, 0x1}, {0x4d6, 0xfffffffa, 0x710, 0x5, 0x6f, 0x3}, {0x5, 0xffffffff, 0xc13c, 0x8522, 0x0, 0x80000000}, {0x8, 0x6, 0x82d, 0x6, 0x5, 0x8000}, {0x4, 0xabc0, 0x10001, 0x8, 0x0, 0x1}, {0x5, 0x29, 0x39b, 0xb, 0x7fff, 0x4}, {0x400, 0xfff, 0x5, 0x7, 0x1000, 0x2}, {0x374, 0xffffe0c2, 0x4118acc3, 0x81, 0x8, 0x3}, {0x10, 0x505e, 0x1, 0x7f, 0x8, 0x9}, {0xa, 0x64, 0xfffffffa, 0x1e8, 0x2, 0x3fe0}, {0x5, 0x5, 0x3, 0x2, 0xe, 0x6}, {0x1ff, 0x5, 0x100, 0x9b8, 0x10001}, {0x5, 0x2, 0x4, 0x8, 0xfffff2d6, 0x60}, {0xf, 0x1ed, 0x7, 0x10000, 0x5, 0x6}, {0xe, 0x9, 0x0, 0xc5a, 0x1ec, 0x91}, {0x3ff, 0xb1e1, 0x44, 0x7f, 0x8001, 0x5}, {0x200, 0x1, 0x1, 0x2, 0x200, 0x3}, {0x0, 0x2, 0xc9, 0x4, 0x6, 0x81}, {0x1, 0xffffff01, 0xf16f, 0x2, 0x7, 0x3cf6}, {0xfffffff8, 0x0, 0xff, 0x81, 0x576, 0x4f}, {0x2, 0x100, 0x8, 0x1, 0x7, 0x9}, {0x9, 0x22, 0x800, 0x6, 0x9, 0x3}, {0x2, 0x3, 0x9, 0x3, 0x331b, 0x3}, {0x40, 0x4, 0x1, 0x0, 0x8, 0x3ef}, {0xe9, 0x1, 0xc71, 0xe9, 0x8, 0xae}, {0x81, 0x2, 0x1, 0x6, 0x7, 0x3}, {0x7f, 0x3, 0x80, 0x9, 0xd9, 0x6}, {0xfffffff7, 0x80, 0x2, 0x3, 0x3, 0x9}, {0xf5, 0x0, 0x2, 0x80000000, 0x5, 0x6}, {0x6, 0x0, 0xbc3c, 0x2, 0x2, 0x6}, {0x3, 0x3, 0x2, 0x7, 0x4, 0x4b0}, {0x9, 0x8, 0x7, 0x2, 0x7, 0xb3c9}, {0x4e6, 0x0, 0x4, 0x6, 0xa, 0x45ad}, {0x3, 0x8001, 0x2, 0xffff, 0xf38}, {0x4, 0xffff, 0x315, 0x80, 0x8000, 0xfffffffa}, {0x9, 0x6, 0x5, 0x0, 0x6, 0x6}, {0x7, 0x1, 0x81, 0xfffffc00, 0x4, 0x8}, {0xdd60, 0x30d, 0x5, 0x9, 0x577000, 0x9}, {0x3, 0x9fb, 0x3, 0x2, 0xd, 0x4b5}, {0x4, 0x1, 0xae90, 0x1, 0x401}, {0x6, 0x8, 0x0, 0x0, 0x40000000, 0xc}, {0x3, 0x6, 0x2, 0x1, 0x9, 0x9}, {0x7, 0x4, 0x3, 0xd1, 0xa, 0x80000000}, {0x2, 0xb, 0x1000, 0x8, 0x7, 0xef2d}, {0x7c0, 0x9, 0x3, 0x5, 0x1, 0x401}, {0x1, 0x0, 0x9, 0x0, 0x0, 0x8001}, {0x1, 0x7, 0x5, 0x1, 0x0, 0x7}, {0x1, 0x1, 0x7fffffff, 0x7, 0xffffff80}, {0xfff, 0xffff, 0x2, 0x0, 0x9, 0x65be}, {0x101, 0x299, 0x6de, 0x0, 0x9, 0x7}, {0x80, 0x8, 0x7fff, 0x4, 0x8, 0x7}, {0x0, 0x8, 0x3, 0x5, 0x5, 0x7f}, {0x8, 0x8, 0x0, 0x8, 0x6e069578, 0x80}, {0x2, 0x48800, 0x1000, 0x3, 0x5db4, 0x42a}, {0x7, 0x6, 0x400, 0x6, 0x5, 0x1}, {0x0, 0x6377, 0x0, 0xc, 0x9, 0x401}, {0xb4f, 0x5, 0x100, 0xe4a8, 0x27ce, 0x3}, {0x2, 0x5, 0x2, 0x7, 0xa, 0x5}, {0xe, 0x40, 0x2, 0xe7a, 0x6, 0x81}, {0x10000, 0x7ae7, 0x9, 0x4, 0x8001, 0x9}, {0x3, 0x8, 0xf0000000, 0xff, 0x80000001, 0xc7}, {0x6, 0x5, 0x4, 0xff, 0x7d34, 0x4}, {0x6b4, 0x4, 0x0, 0x908f, 0x10001, 0xc44}, {0x7, 0x0, 0x80, 0x12000000, 0xffffffff, 0x9}, {0x8, 0x1, 0x4c, 0x2, 0xffffffff, 0x2}, {0x7, 0x8a, 0x9, 0x3, 0x3, 0x6}, {0x7fffffff, 0x8, 0x5e65b80c, 0x3, 0x80000, 0xc96}, {0x6, 0x3ff, 0x2, 0x6, 0x7, 0x9}, {0x7, 0x9, 0x2, 0x424b, 0x1ff, 0x9}, {0x10001, 0xfffeffff, 0x9f, 0x4, 0x2, 0x2}, {0x4, 0x4, 0x3, 0xb1, 0x3, 0x1000}, {0x5036, 0x4, 0x889, 0x1, 0x3ff, 0x40}, {0x88, 0x10, 0x7, 0x1000, 0xfffffffe, 0x5}, {0x101, 0x5, 0x80000000, 0x3733, 0xd8, 0x5}, {0xb52, 0x401, 0x1, 0x0, 0x3, 0x80200000}, {0x8, 0x6, 0x5, 0x7, 0x6e, 0x8}, {0x0, 0xffc00000, 0x5, 0x6, 0x0, 0x4}, {0xfffffffe, 0xe779, 0x1, 0xdf, 0xb389, 0xad1b}, {0x9, 0x80000001, 0x10000, 0x4, 0x9, 0x2}, {0x4, 0x7ff, 0x9, 0x9fc, 0xfffffffb, 0x1}, {0x8, 0x5, 0x3, 0x8, 0x10001, 0x8}, {0xffff, 0x5, 0x1d, 0x6823, 0x80000000, 0x8}, {0x2, 0x1000, 0x10, 0x76a, 0x1, 0x4}, {0x3, 0x1, 0x4, 0xf64, 0x8, 0x3}, {0x482d, 0x81, 0x635, 0x636b, 0x9, 0x3}, {0x10000, 0x1000, 0x400, 0xd77, 0xffff8614, 0x86d9}, {0x7fffffff, 0x3, 0xfff, 0x1, 0xe82, 0x4}, {0x0, 0x8, 0x6, 0xb47, 0xa, 0x5}, {0x0, 0x4, 0xe, 0x2, 0x4c4d, 0xffffffff}, {0x3, 0x1ff, 0x800, 0x4, 0x7, 0x3}, {0xc4, 0x7, 0xf, 0x9, 0x8, 0xc}, {0x7, 0x9, 0x6, 0x200, 0x6, 0x2f72}, {0x1, 0xf, 0xc, 0x4a, 0xffff0b83, 0x80}, {0x3ff, 0x1000, 0x5, 0x8, 0x8, 0x80000000}, {0x7fff, 0xa, 0xffffff71, 0x8, 0xffff85a9, 0x10001}, {0x4d0, 0x8, 0x7, 0xa, 0x9, 0x4}, {0x1ff, 0x7, 0x3, 0x0, 0x52a, 0x8}, {0xb0c, 0x5, 0x9, 0x9, 0x7fffffff, 0x80}, {0x0, 0x400, 0x5, 0xc41, 0x7, 0x2}, {0xfffffff8, 0x10, 0x8, 0x1, 0x5, 0x4}, {0x7fff, 0x6, 0x4, 0x80000001, 0x22, 0x800}, {0x4, 0xaa, 0xa58, 0x9, 0x1, 0x10}, {0xadb, 0x0, 0x8, 0x5, 0xfffffffa, 0xc8c}, {0x275e, 0x9, 0x2, 0x7, 0xfc5, 0x9}, {0x85e, 0x245, 0x6, 0x2, 0x101, 0xf}, {0x0, 0xfffff963, 0x80000000, 0x8, 0x1, 0xffffe433}, {0x20000, 0x6, 0x9, 0x1, 0x56e, 0x66}, {0x81, 0x0, 0x9, 0x81, 0x2, 0x9}, {0x4, 0xc, 0x5, 0x1, 0x293, 0x1413}, {0x8, 0x3, 0x40, 0x9, 0x9, 0x9}, {0xd, 0x68, 0xffff, 0x4000, 0x660b, 0x7f}, {0x48f2, 0x2, 0x8001, 0x7, 0x7ff, 0x1}, {0x9, 0xfedd, 0x0, 0x7fff}, {0x8, 0x8, 0x2, 0x9, 0x67e, 0x10000}], [{0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {}, {0x1}, {0x1, 0x1}, {}, {0x5}, {0x2}, {0x2}, {0x1}, {0x4}, {0x1}, {0x2}, {0x2}, {0x3}, {0x2}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x39d26bc083ac3a13}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x4}, {}, {0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x3}, {}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x7}, {0x3}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x6}, {0x2}, {0x7}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {}, {0x3}, {0x5}, {}, {0x5}, {0x6}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x3}]}}, @TCA_PEDIT_KEYS_EX={0x38, 0x5, 0x0, 0x1, [{0x4}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x4}]}, @TCA_PEDIT_KEYS_EX={0x38, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}]}]}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0xb1, 0x4, 0x5, 0x10, 0x6}, 0x1, 0x3, [{0x3, 0x10, 0x8, 0x1, 0xdec, 0x2a}, {0x6, 0x8, 0x401, 0xfffff800, 0x5, 0x7}, {0x4, 0xfffffffd, 0x4, 0x7, 0xfffffff1, 0xee05}, {0x8, 0x7fff, 0x8, 0x3, 0x965, 0x6}, {0x7, 0x40, 0x4, 0x8, 0x6, 0x189}]}, [{0x2, 0xf1b, 0xf, 0x5, 0xfffffff2}, {0x8, 0x2, 0x0, 0x15a, 0x3, 0x8001}, {0x5, 0x3b, 0x800, 0x6, 0xd, 0x8}, {0x2, 0x0, 0x5, 0xf, 0x3, 0x3}, {0x8, 0xdc, 0x2, 0xbd, 0x3ff, 0x7}, {0xd404, 0x5, 0x0, 0x9fbb, 0x10, 0x3}, {0xc, 0xa3, 0x2, 0xffffffff, 0x7d4f, 0x4}, {0x400, 0x2, 0x6, 0x0, 0x6, 0x8}, {0x7ff, 0x5, 0x7, 0x2, 0x5, 0x1}, {0x0, 0x8000, 0x6, 0x1000, 0x100, 0xf}, {0x660, 0xc9e, 0xffe00000, 0xff, 0x3}, {0x7, 0x9e10, 0x2, 0x5, 0x4463, 0x3}, {0x40, 0xa, 0x5, 0x2b8, 0x7c, 0x81}, {0x11f7c2c4, 0x1, 0x9, 0x5f9, 0x4, 0xf86d}, {0x6, 0x3, 0x8, 0xfffffffe, 0x4, 0x4a1}, {0x3, 0x9, 0x3, 0x96, 0x5, 0x2}, {0x9, 0x5, 0xa5, 0x2, 0x2a71, 0x9}, {0x80000001, 0x5, 0x8c, 0x2, 0xffff7fff, 0x7}, {0x3, 0x40, 0x7, 0x8001, 0x80000001, 0x7}, {0xe3a, 0x1, 0x1, 0x6, 0x3, 0x80}, {0x2be, 0xe, 0x3, 0x3, 0xda2, 0xffff}, {0xf, 0x6, 0x1, 0x10001, 0xb7c3}, {0x41, 0x4, 0xffffffff, 0xc7, 0x6, 0x9}, {0x9, 0x3, 0x7, 0x1, 0x9, 0x9}, {0xfffffbff, 0x8, 0x0, 0x81, 0xe, 0x8}, {0x1, 0x7, 0x5c85, 0x26a26bf4, 0x6, 0x1}, {0x6cb986f, 0x6, 0x10001, 0x1, 0x10000, 0x2408}, {0x7, 0xffff, 0x1000, 0x7f, 0x9}, {0x2, 0x1, 0x7fff, 0x101, 0x3, 0x1}, {0x5, 0x95, 0x7, 0x3, 0x800, 0x4}, {0x6, 0x2, 0x4, 0x9, 0x2, 0x8}, {0x1000, 0x3, 0x1, 0x1, 0x1d6e, 0x5}, {0x9, 0xfffffff8, 0x81, 0x7f, 0x3, 0x8000}, {0xfffffffc, 0x6b, 0x9, 0x401, 0x1, 0x4}, {0x7, 0xd, 0x80, 0x3, 0x1000}, {0x0, 0x1000, 0x0, 0x7fff, 0x10}, {0x5, 0x8, 0x10001, 0x5c, 0x2edc311d, 0x7}, {0xd89c, 0x1200000, 0x7, 0x100, 0x401, 0x9}, {0x7, 0x8, 0x745c, 0x28, 0x5, 0x5000000}, {0x9, 0xfb5d, 0x2, 0x1, 0x825, 0x4}, {0x77, 0x9, 0xffffff8e, 0x7, 0x6}, {0x4, 0x8, 0x9, 0xffff0000, 0x0, 0x9}, {0x8, 0x1, 0x2bf2, 0x1004, 0xabf5, 0x2c04}, {0x81, 0x3, 0x3, 0x2, 0xb75, 0xe}, {0x81, 0xc5d5, 0x5, 0xa, 0x80, 0x1}, {0xffffffff, 0x5770, 0x7, 0x81, 0x1, 0x7}, {0x10001, 0x1, 0x2, 0x78000000, 0x0, 0x400}, {0x7f, 0x1, 0x7ff, 0x1, 0x167d, 0x15a1}, {0x8001, 0xef82, 0xa6, 0x5, 0xfffffff9, 0x401}, {0x27e, 0xfc2e, 0x400, 0xfc, 0xae, 0x8}, {0x1, 0x0, 0xb, 0xa, 0xfffffc01, 0x4}, {0x4, 0x1000, 0x5b1a, 0x2, 0x6, 0x3}, {0x90000, 0x8, 0x7, 0x9, 0x0, 0x81}, {0xb, 0x9, 0x3d10, 0x10000, 0xffff587b}, {0x800, 0x49, 0x5, 0x1, 0x29, 0x6}, {0x870, 0x90000000, 0x9826, 0xd, 0x7, 0x4}, {0x800, 0x3, 0x2, 0xff, 0x7, 0xaa16}, {0x1, 0x4, 0xd, 0x585f, 0x0, 0x2}, {0x3, 0x2, 0x9d, 0xffffff1d, 0x9, 0x5}, {0x49b6, 0x6, 0x1, 0xfffffff8, 0x2, 0x8}, {0x5, 0x40, 0x7, 0x2, 0x20, 0xfffffff9}, {0x9, 0x12c4, 0x2, 0x8, 0x8, 0x8}, {0x2, 0xffffffff, 0x4, 0x9, 0x9, 0x9}, {0x80, 0x3, 0x0, 0x48, 0x3, 0x8}, {0x0, 0x6, 0x2, 0xa5aa, 0x7, 0x6a0}, {0x8, 0xff, 0xfffffff9, 0x7, 0x3, 0x80}, {0x8, 0x0, 0x5, 0x6, 0x7f, 0x7}, {0x4, 0x5, 0x1ff, 0x7, 0x101, 0xd39}, {0xfffffff7, 0x6, 0x0, 0x9, 0x1, 0x4}, {0x6, 0xca, 0xffffffff, 0x6, 0x9, 0x80000000}, {0x7fff, 0x8e4a, 0x400, 0xff, 0x1, 0x9}, {0x8, 0x3, 0x5, 0x0, 0x86, 0x4}, {0x192adb11, 0x7f, 0x187, 0xff000000, 0x0, 0xffffffff}, {0x1, 0x2, 0x14, 0xb1, 0x2, 0x5}, {0x0, 0x8, 0x4, 0xc8b, 0x3, 0xff}, {0x8, 0x80, 0x4, 0xb2f17ba6, 0x3, 0x7fff}, {0x3, 0x7fffffff, 0x6, 0xc, 0x800, 0x2}, {0x1bb, 0xffff6696, 0x1, 0xe6a, 0x8, 0x1}, {0x2, 0x4, 0x7, 0x0, 0x1, 0x64fe63e}, {0x2, 0x9, 0xdd, 0x8, 0x721, 0x2}, {0xa247, 0x1, 0x4, 0x8, 0x8, 0x8}, {0x2, 0x790a, 0x5, 0x8, 0x7, 0x8}, {0x8, 0x6, 0x1, 0x800, 0x9, 0x2}, {0x900000, 0x0, 0xe2, 0x5ea9, 0xbf}, {0x3ff, 0x3, 0x1095, 0x6, 0x400, 0xf7}, {0x6, 0xa, 0xffff7fff, 0x8, 0x7, 0x6}, {0x3, 0xbd50, 0x3, 0x5, 0x400, 0x8}, {0x9, 0x1, 0x8, 0x3, 0x85}, {0xe35c, 0x40, 0x3c, 0x3ff, 0xb7a, 0x4}, {0x800, 0x6, 0x4, 0x9, 0x23e, 0xfffffff8}, {0x8, 0x7, 0x8000, 0x8, 0x5a8d9db5, 0x7ea9}, {0x5, 0x800, 0xc24d, 0x0, 0x1, 0x8}, {0x3, 0x28b, 0xf, 0x8, 0x6, 0xff}, {0x0, 0x2, 0xd, 0x2, 0xa58, 0x7}, {0x6, 0x2, 0x7f, 0x8, 0xc838, 0x8}, {0x3, 0x2, 0x81, 0x7, 0x0, 0xd74}, {0x80000001, 0x2, 0x4, 0x7, 0xffffffff, 0x4b63986d}, {0x4, 0x9, 0xfffffffc, 0x74c, 0x1, 0xf0}, {0xf69, 0x7, 0xf2d, 0xde9, 0x401, 0x1}, {0x1, 0x0, 0x5, 0x8000, 0x4, 0x9}, {0x40000, 0xb, 0x2, 0x9, 0x2, 0x3}, {0x6, 0x3, 0x5, 0x0, 0x8, 0x9}, {0x2, 0xffffffff, 0x9, 0xfffffffb, 0x81, 0xd4}, {0x6b68d70b, 0xda8d, 0x0, 0x7, 0x2, 0x6}, {0x4, 0x8, 0x200fd169, 0x0, 0xff, 0x7}, {0xb170, 0x3, 0x100, 0x400, 0x9, 0x3}, {0x7fff, 0xffff, 0x1, 0x1, 0xd4a36b6, 0x4}, {0x9, 0x0, 0x1e2916bb, 0x8001, 0x9, 0x7}, {0x3d, 0x2, 0x4, 0xffff, 0xffffff68, 0x1}, {0xca53, 0x1, 0xb, 0x3, 0x800, 0x1}, {0x52, 0xddbd, 0x7ff, 0x8, 0x1000, 0x3fc4fe7}, {0x1, 0x800, 0x73, 0x4, 0xbc, 0x2}, {0x1d0, 0x6, 0x6, 0x1, 0x6, 0x1400}, {0xd, 0x0, 0x6, 0x5b10b09d, 0xfffffff7}, {0x0, 0x2, 0x7, 0x1ff, 0xb, 0xfffffbff}, {0x5, 0x5, 0x6, 0x9, 0x3, 0x80000001}, {0xfffffffd, 0x6, 0xc9c, 0x8, 0x8, 0x36}, {0x6, 0x8, 0x144, 0x4, 0xfffffff7, 0x7fffffff}, {0x9, 0x3, 0x0, 0xfffffffb, 0x3, 0xd9a}, {0x6, 0x9, 0xfffffffb, 0x50000, 0xe3, 0x7fff}, {0x5, 0x2, 0x6, 0x1b, 0x1, 0x8}, {0x8, 0x800, 0x5, 0x1, 0xfffffffa, 0x5}, {0x400, 0x52, 0xa, 0x19d, 0x2, 0x240}, {0x4, 0x8, 0x8, 0x9, 0x5, 0x7}, {0xcff2, 0x3, 0x2, 0x5b9, 0x1, 0xfffffffd}, {0x9, 0x4, 0x4, 0x800, 0x3, 0x240000}, {0x6, 0xfffffff9, 0x401, 0x6fb4, 0x2, 0x80}, {0x10, 0x9c, 0x401, 0xfffffff1, 0x7fff, 0x7}], [{0x4}, {0x7}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0xda595d071604354c}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x4}, {0x1}, {0x4}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x7}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x3}, {0x3}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x1}, {}, {}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x7, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0xcaf5fe23247b485d}, {0x2}, {0x2}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x7}, {0x5}, {0x3}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x4, 0x12a645bc334ded40}, {}, {}, {0x6}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0x50, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xae, 0x1, 0x20000000, 0x23, 0x7}, 0x8, 0x8, [{0x4, 0xfffffffb, 0x9, 0x3, 0xfffffffc, 0x6}]}, [{0xa62c, 0x1, 0x10, 0x48, 0x7fffffff, 0x391}, {0x0, 0x7, 0xc, 0xffffffff, 0x0, 0x1}, {0xfffffd74, 0x1, 0x100, 0x2b, 0x9, 0x4a57e95f}, {0x5, 0x10, 0x6, 0x7, 0x3, 0x1}, {0x8, 0x2, 0x1, 0x400, 0x2fe1, 0x7}, {0xacc, 0x7, 0x10, 0x9, 0x1, 0x4}, {0x4, 0x400, 0x4, 0x2, 0xfffffff8}, {0x9, 0x80000001, 0x0, 0xd9, 0x1, 0x2}, {0x6, 0x2, 0x6, 0x8, 0x5, 0x6f}, {0x4, 0x6, 0xecc, 0x3, 0x0, 0xbfe}, {0x4, 0x5, 0x8, 0x7, 0x9, 0x80000000}, {0x9, 0xffffff7f, 0x10001, 0x40, 0x5}, {0xd19b, 0x9, 0x2ba, 0x8, 0x9, 0xba35}, {0xfffffff8, 0x9, 0x3, 0x5, 0x1, 0x26}, {0x0, 0x71, 0x6, 0x6, 0x9, 0x7fff}, {0xffffffff, 0x0, 0xfffff229, 0x9, 0x6e48, 0x5}, {0x1, 0x7fffffff, 0xf, 0xffffffff, 0x5, 0x7}, {0x6, 0x5, 0x0, 0xa0, 0x4, 0x2}, {0x7, 0x2, 0x5, 0x7f, 0x0, 0x5}, {0xfffffff8, 0x81, 0x9, 0x5, 0xa, 0x60}, {0x7fffffff, 0xb5, 0x0, 0x5, 0x3, 0x9}, {0xcc, 0x80000001, 0x0, 0x48da, 0x3, 0x608}, {0x937, 0xd13, 0x2, 0x0, 0xc, 0x8}, {0xfffffefb, 0x401, 0x7f, 0x4, 0x60, 0xf}, {0xf, 0x7, 0x80000001, 0x8, 0x6, 0x69d1}, {0xdb, 0x2, 0x4, 0xfffffff7, 0x19e, 0x6}, {0x6333, 0xe, 0x5, 0x1, 0x0, 0x400}, {0xffffffff, 0x6, 0x9, 0x4a, 0x2, 0x120}, {0x8, 0xd1, 0xd, 0x76, 0x4, 0x5}, {0x2118, 0x10, 0x8, 0x104b, 0x8, 0x2a5}, {0xb, 0x0, 0x8001, 0xb5, 0x2, 0x3c}, {0x5, 0xe1ac, 0x7f, 0xfeb, 0xc2}, {0x7a, 0x4, 0x41, 0x4, 0xbc, 0x9}, {0x7fffffff, 0x5986, 0x1, 0xb, 0x9, 0xa3e7}, {0x8, 0x5, 0xfffffffe, 0x0, 0x86, 0x61}, {0xfffffffd, 0x10, 0x4, 0x3, 0x9, 0x14000}, {0x100, 0x1121, 0xa, 0x2, 0x6, 0xfffffff8}, {0xfffffff2, 0x4, 0x2, 0x5, 0x1, 0x7}, {0x1, 0xfffff000, 0x8000, 0xffffffff, 0x1, 0x3}, {0x3, 0x2, 0x3, 0x80, 0x33}, {0x5, 0xfffffc01, 0x3, 0x7, 0x3, 0x5d}, {0x4, 0x49, 0x5, 0x7, 0xfffffffb, 0x6}, {0x31, 0x80000000, 0x800, 0x9, 0x5, 0xff9c}, {0xf4, 0x2c2e, 0x10, 0x5, 0x7, 0x3ff}, {0xfffffffa, 0x10000, 0x5, 0x6, 0x8, 0x3}, {0x3, 0x350, 0x5, 0x6, 0x81}, {0x80000001, 0x101, 0x4, 0x7, 0x8000, 0x9}, {0x2, 0x7, 0x10000, 0x7, 0x5, 0xb}, {0x5b25, 0x1, 0x7ff, 0x39445991, 0xfff, 0x8001}, {0x2, 0x0, 0x2, 0xdf4, 0x9, 0x3}, {0x5, 0x3ff, 0xff800000, 0xff, 0xad4e, 0x4}, {0x51c3, 0x8, 0x0, 0xfffffff7, 0x249, 0x4}, {0x1, 0x9, 0x1000, 0x9, 0x9, 0x3}, {0x100, 0x5, 0xfffffffb, 0x8, 0x1, 0xffffffff}, {0x6, 0x6, 0x83e, 0x5fc, 0x24af815, 0x6}, {0x3, 0x5, 0x1, 0xd, 0x6, 0x8}, {0x1, 0x3, 0x401, 0xf, 0x74d4, 0x80000000}, {0x8, 0x2, 0xc, 0x4, 0x8, 0x2}, {0xfffffffe, 0x5, 0x9, 0x8, 0x1, 0x3}, {0x9, 0x6, 0x708f55e, 0x9, 0x3ff, 0x2}, {0x8, 0x8, 0x3, 0xfb0f, 0x0, 0x66b540b6}, {0x10, 0xe26, 0xe0e, 0x9, 0x7, 0x5}, {0x7, 0x5, 0x4, 0x6, 0x10000, 0x8}, {0x6, 0x9, 0x8, 0x4, 0x7, 0xffffffff}, {0x0, 0x3ff, 0xd3, 0x2, 0x8, 0x5}, {0x1, 0x200, 0x9, 0x5, 0xa54, 0x8}, {0x7, 0x1000, 0x0, 0x3ff, 0x5, 0x2}, {0x26d, 0x52, 0x0, 0x8, 0xa1cd}, {0x5, 0x6, 0xb, 0x3, 0x6}, {0x5f94, 0x4, 0x0, 0x97, 0x7, 0xa1b7}, {0x80, 0x0, 0x7f, 0xfa, 0x7d492ca6, 0x8}, {0x9, 0x6, 0x5, 0x4, 0xfffffffa, 0x9}, {0x6, 0x0, 0x2a26, 0x203a, 0x5cf}, {0x9, 0x1, 0x5, 0xfffffffc, 0x8c36, 0x800}, {0x8, 0x8, 0x1, 0x1000}, {0x1, 0x6, 0x2, 0xffffffff, 0x4, 0x7}, {0x244, 0xf, 0x6, 0x3, 0x9, 0x5}, {0x6, 0xfffffffa, 0x2, 0x1ff, 0x8}, {0x9, 0xeec7, 0x3, 0x6, 0xe8, 0x2}, {0x1ff, 0x56c, 0x7, 0x4, 0xb, 0x8c05}, {0x2, 0xfffff8d7, 0xb392, 0x9, 0x7, 0x77ce1f25}, {0x8, 0x41, 0xb, 0x800, 0x7, 0x5}, {0x80000000, 0xd7, 0xe, 0x5, 0x60a, 0x5}, {0x5, 0x9, 0xac5, 0x4d3, 0x0, 0x5}, {0xfffffffa, 0x4, 0xffffffff, 0x2, 0x6, 0x401}, {0x1, 0x80000001, 0x1, 0x4, 0x7, 0xb}, {0x3, 0x7, 0xd4, 0xfffffff8, 0x7, 0x6b}, {0x0, 0xa, 0x6, 0x40f5, 0x7fff}, {0x0, 0x6, 0x3, 0x184, 0x5, 0x5}, {0x7fff, 0x43982460, 0x8, 0x0, 0x5, 0x10}, {0x0, 0x4, 0x2253, 0x8, 0x5, 0xffffffff}, {0x6, 0xd, 0x1, 0xcfdc, 0x7, 0x758a7c23}, {0x4f4, 0x9, 0xffffffff, 0xf, 0x101, 0xaa}, {0x34a, 0xc6, 0x400, 0xd18, 0x9}, {0x3, 0x6, 0x94, 0x3ff, 0x0, 0x10001}, {0x72, 0x7, 0xfffffff8, 0x101, 0x200, 0xc9}, {0xfffffff8, 0x80, 0x101, 0xa320, 0x461c, 0x81}, {0x8, 0xbc5, 0xefa, 0x3ff, 0x0, 0x200}, {0x1ca, 0x8, 0x3a, 0x819f, 0x2, 0x26bd}, {0x0, 0x45d2, 0xfffffff3, 0xa, 0x0, 0x3}, {0x0, 0xffffff6e, 0x7, 0x7, 0x101, 0x3}, {0x7fffffff, 0x10000, 0x0, 0xb3d, 0x6, 0x9}, {0xe, 0x8, 0x4, 0x400, 0xfff, 0x400}, {0x7fffffff, 0x8, 0x4, 0x4, 0x3, 0x6}, {0xfa5, 0xfffffff8, 0x8, 0x3, 0x2}, {0x800, 0x7, 0xb, 0x3, 0xbc8, 0x8000}, {0x101, 0xf, 0x800, 0x8, 0x7cb, 0x92}, {0x9, 0x7, 0x4, 0xd1, 0x6, 0x89}, {0x7, 0x1ff, 0x80, 0x7, 0x7, 0x1}, {0x1, 0xa76, 0x9f, 0x10000}, {0x1, 0x8, 0x7fff, 0x5f23, 0xffffffff, 0x7}, {0xff, 0x40, 0xd, 0x80000000, 0x5, 0x8001}, {0x4, 0x7, 0x100, 0x7f, 0x7, 0x1}, {0x1, 0x4, 0xffffffff, 0xb000, 0xe5a, 0x1}, {0x10000, 0x6, 0xa00, 0xe, 0x5}, {0xfffffff7, 0x4f, 0x5, 0x5, 0x240, 0x2}, {0x3, 0x4, 0x2, 0x10000, 0x2, 0x3}, {0x8001, 0x7, 0xa84d, 0x3000, 0x3ff, 0x1}, {0x6, 0x6, 0x69755d71, 0xdb, 0x40, 0x2}, {0x8398, 0x101, 0x42b5, 0x3ff, 0x5, 0x7}, {0x7, 0x0, 0x2, 0xfffffff8, 0x6, 0x2}, {0x7, 0x800, 0x7, 0x6, 0x3, 0xc9}, {0x316, 0x0, 0x9, 0xeec, 0x7f, 0x5}, {0x8000, 0x3, 0x59d9, 0x5}, {0x5, 0x9, 0x3, 0x6, 0x6, 0x5}, {0x9, 0x7, 0x4, 0xff, 0x2, 0x6}, {0x6, 0x1, 0xa8c4, 0x2000000, 0x2, 0x9}, {0xc7c, 0x7, 0x5, 0x4, 0x10001, 0xfffffffb}], [{0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x2}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x2}, {}, {0x3}, {0x7, 0x1}, {0x4}, {0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {}, {0x2}, {0x4}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x84c40a2d538290d3, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x400000, 0x6, 0x8, 0x6, 0x8d}, 0x44, 0x0, [{0x1, 0x53, 0x6a04, 0xbb48, 0x2}, {0xb, 0x0, 0x3, 0x3, 0x4, 0x902}, {0x9e23, 0xaa98, 0xb, 0x9, 0x2, 0x200}, {0x5, 0x7, 0x9, 0xb, 0xf7, 0x6}, {0x2, 0x6395, 0x2e, 0x7b8, 0xe0000000, 0x40}, {0x3, 0x2682da22, 0xa18, 0x2f3, 0x6, 0x800}, {0x2, 0x6, 0x3, 0x3, 0xe, 0x7}]}, [{0xffffeea9, 0x10, 0x0, 0x3, 0x800, 0x4}, {0x8, 0x6, 0x6, 0x3, 0x1, 0x8}, {0x3, 0x4, 0x40, 0xfffffff9, 0x7, 0x7}, {0xffffff80, 0xfffffffb, 0x8, 0x3, 0x10000, 0x3}, {0x5, 0x1, 0x5, 0x0, 0x798, 0x7fff}, {0x7, 0x9, 0x7, 0x5, 0x0, 0x4a1}, {0x80000000, 0x5, 0xffff, 0xffff1960, 0x0, 0x8}, {0x2, 0x0, 0x9, 0x40, 0xffff0001, 0x7fffffff}, {0xfffffff7, 0x9, 0x0, 0x5, 0xffff8000, 0x7}, {0x0, 0x7, 0x80000000, 0x7, 0x1ff, 0xffffc42a}, {0x38, 0xd, 0xa, 0x2, 0x6, 0x3}, {0x7, 0xb, 0x2, 0xffffff7f, 0x5}, {0x4, 0x0, 0x940, 0x10000, 0xf8f, 0x58f0}, {0x6f, 0x3, 0x341f, 0xfffffffe, 0x5a5c119e, 0x80}, {0x9, 0x4, 0xe40, 0x10001, 0x3ff, 0x27}, {0x3714, 0x200, 0x7f, 0x7, 0x0, 0x8000}, {0x1, 0x7, 0x5, 0x6, 0x4, 0x9}, {0x4, 0x6, 0x6, 0x5b2d4ad5, 0xf, 0x4}, {0x1ff, 0x2a7, 0x8, 0x5, 0xfffffe01, 0x80000000}, {0x5, 0xaf, 0x10000, 0x80000000, 0x8, 0x2}, {0x0, 0x6, 0x8, 0x7, 0x7, 0x8800}, {0x1e86, 0x2, 0x3f4, 0x0, 0x5, 0x1}, {0x401, 0x3, 0x3, 0x8, 0xffffffff, 0x208}, {0x80, 0x1000, 0x2, 0x7, 0x9, 0x8001}, {0x4, 0x9, 0x3, 0x9, 0x9, 0x1f}, {0x7fffffff, 0x7a1c, 0xfffffff8, 0x24, 0x1, 0x400000}, {0x1, 0x0, 0x4, 0x401, 0x6, 0x8}, {0x5, 0xe5d, 0x7f, 0x6, 0x7, 0xfffffff8}, {0x8, 0x3, 0x3, 0xd7, 0x9, 0x3}, {0x8, 0x6, 0x2, 0x0, 0x4, 0x7}, {0x1, 0x8001, 0x101, 0x2, 0x2, 0x8000}, {0xfffffffe, 0xe, 0x3, 0x3ff, 0x200, 0x3}, {0x1, 0x100, 0x1, 0x6, 0x5, 0x80000001}, {0x6, 0xfffffffd, 0x20000, 0xfffffffe, 0xc8, 0x7fd}, {0x29, 0x4, 0x4, 0x8, 0xc582, 0xfffffffa}, {0x6, 0xbaca, 0x90000000, 0x5, 0x8, 0x7}, {0x6, 0x9, 0x3, 0x7, 0x7b19, 0x7fffffff}, {0x80000000, 0x2, 0x7, 0x3, 0xfa8d, 0x401}, {0x3c, 0x5, 0x1b6ab201, 0xffffffff, 0x3ff, 0x9}, {0x6, 0x101, 0x7f, 0x12b2, 0x1bb, 0xf69}, {0xb, 0x8, 0x5, 0x7ff, 0x4, 0x8}, {0x10000, 0xfffffff7, 0x3, 0xee, 0x3ff, 0x7}, {0x4, 0xffffffff, 0xa50e, 0x23f9, 0x1, 0x9}, {0x1, 0x81, 0xfffffff6, 0x4, 0x5, 0x4}, {0xa6f1, 0x1, 0x7, 0x5, 0x6, 0x1}, {0x4, 0x4e79, 0x200, 0x1, 0x7a, 0x6}, {0x4, 0x7, 0x65, 0x1, 0x6, 0x9}, {0x3, 0x1, 0x5, 0x10001, 0x4, 0x5}, {0x81, 0x9, 0x7, 0x561e, 0xffff, 0x5}, {0xffffffff, 0x1, 0x4, 0x6, 0xc, 0x267}, {0x40, 0x10000, 0x6540afee, 0x1, 0x1000, 0xd}, {0x6, 0x8eda, 0x4, 0x3, 0xd9, 0x7670}, {0x80, 0x8, 0x7, 0x8, 0x1, 0x8}, {0x3, 0xf01, 0x3ff, 0x5, 0x1067, 0x9}, {0x9, 0x4e, 0x2, 0x5, 0x1, 0x7}, {0x0, 0x3, 0x40, 0x7, 0x43, 0x121811d6}, {0x0, 0x4, 0x5, 0x4, 0x6, 0x7}, {0x8, 0x83a, 0x0, 0x4, 0x6, 0x1000}, {0xe, 0xffffffff, 0xff, 0x9, 0xff000000, 0x7}, {0x1, 0x800, 0x40, 0x0, 0x6, 0x4}, {0x5, 0x8000, 0x6, 0x1, 0x0, 0x2}, {0x1, 0x5a, 0xfffffffa, 0x9, 0x5, 0x3}, {0x5851, 0x7, 0x7, 0x1, 0x1994, 0xb3}, {0x5, 0x6, 0x2, 0x5090, 0x9, 0x7}, {0x2, 0x3, 0x5, 0x1, 0x4, 0x8}, {0x4, 0x2, 0x9, 0x0, 0x101, 0x6}, {0x0, 0x48, 0xfffffffc, 0xa, 0x9, 0x6}, {0x4, 0x3, 0xc4, 0x314d, 0x4, 0x2084}, {0x3, 0xffff, 0x8000, 0x7, 0x3, 0x3ff}, {0x8001, 0x99, 0x6, 0x3, 0xe0000000, 0x401}, {0x3, 0x6, 0x8001, 0x0, 0x7, 0x8}, {0xd45, 0x9d, 0x0, 0x1, 0x0, 0x7ff}, {0x7, 0x5, 0x4, 0x8, 0x5, 0x2}, {0xffffffff, 0x6, 0x6, 0x6, 0x3, 0xb19}, {0x20000000, 0x4, 0x0, 0x92, 0x101, 0x3a16}, {0x6469d93f, 0x7, 0x3, 0xfffffff7, 0x6e, 0x6}, {0xfd, 0x25, 0x80000001, 0xf7, 0x1ff, 0x5}, {0x2, 0x1, 0x100, 0x2, 0xf, 0x1}, {0x4, 0x800, 0x3, 0x30000002, 0xfffffffe, 0x7}, {0xa44c, 0x4, 0x5, 0x6840, 0x4, 0xc}, {0x10000000, 0x0, 0x2, 0x3221, 0xffff, 0x5e36fdf4}, {0xffff8001, 0x7, 0x2, 0x8, 0x6766, 0x2}, {0x2, 0x80000001, 0x10001, 0x5, 0x7, 0x2}, {0x7, 0xe55, 0x3b, 0xffff0000, 0x5, 0x6}, {0xa, 0x8000, 0x1, 0x7, 0x53d, 0x6}, {0xbb, 0x7f, 0x0, 0x7, 0x5, 0x3}, {0x9, 0xfffffff7, 0x401, 0xfff, 0x3, 0x6}, {0x4, 0x5, 0x78eac928, 0x4, 0x2, 0x8}, {0x10, 0x84, 0x8, 0x3, 0x8, 0x1}, {0x7, 0x36, 0x1, 0xe6b, 0x5}, {0x275, 0x0, 0xffffffff, 0x10001, 0xd9, 0x6}, {0x8, 0xf7f, 0x2, 0x8677, 0xfffffffc, 0x45}, {0x6, 0xa43, 0x8, 0x7ff, 0x4, 0x5}, {0xfffff801, 0x4, 0x0, 0x3, 0x2, 0xc0}, {0x0, 0x4, 0x0, 0x8, 0xac7, 0x5}, {0x8, 0xaa, 0x10, 0xa, 0xf, 0xffffffff}, {0x8001, 0x1, 0xe, 0x40, 0x8000, 0x88}, {0xb, 0xa, 0x10, 0x9, 0x0, 0x5}, {0x0, 0xffffffff, 0x0, 0x4, 0xffffffff, 0x89a2}, {0x200, 0x0, 0xb, 0x7, 0xf, 0x8}, {0x1, 0x3ff, 0x1, 0x43, 0x1, 0x101}, {0x1, 0x7, 0xc, 0x0, 0x0, 0x401}, {0xd8, 0x2, 0x1ff, 0x7, 0x5, 0x209b5b31}, {0xf, 0x1, 0x5, 0x2c, 0x1, 0x4}, {0x2, 0x9, 0x200, 0xe, 0x2, 0x8000}, {0x4, 0x7, 0x2, 0x7, 0x7, 0x1}, {0x2, 0xb, 0x7, 0x86, 0x8001, 0x1ff}, {0x8, 0x6, 0x8000, 0x0, 0x400, 0xfffffffd}, {0x7ff, 0x3, 0x6, 0x6, 0x5, 0x2}, {0x8001, 0x0, 0x3d25, 0xcfe9, 0x0, 0x7}, {0x0, 0x8, 0x6, 0x8, 0x7fff, 0x2}, {0x7, 0x4, 0x6c9, 0x0, 0x0, 0xffff7fff}, {0x2, 0x8, 0x74, 0x79, 0x6, 0x8a}, {0x2, 0x100, 0x5, 0x4, 0x100, 0x9}, {0x7ff, 0x26b10f06, 0x81, 0x1, 0x8, 0x6a4}, {0x2, 0x7, 0x3, 0x3, 0x5a, 0x2}, {0xffff, 0x7, 0x1, 0x5, 0x9, 0x200}, {0x6, 0x10001, 0x7f, 0x4, 0x5, 0x9}, {0x4a, 0x103b, 0x0, 0x5, 0x7, 0xffffff01}, {0x1, 0x10, 0x9, 0x5, 0x7, 0xffff284b}, {0xffff04fc, 0x3fd, 0x3, 0x4, 0xe3e, 0x6}, {0x1, 0x5, 0x425, 0x6, 0x80000001, 0x2445}, {0x7, 0x1, 0x10000, 0x1d83, 0xcc, 0x1000}, {0xa4b, 0x9, 0x4, 0x4, 0x0, 0x6}, {0x6, 0x6, 0x6, 0x10000, 0x2, 0x2}, {0x1ad8, 0x7ff, 0x0, 0x2, 0x1c7847d6, 0xfffffffe}, {0xfc, 0x7, 0x74be, 0x82, 0x2d50, 0xfffffffc}, {0x4, 0x0, 0x600, 0x3, 0x6, 0x1}], [{0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x77c727e02c3e90cc}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {}, {}, {}, {0x2, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x6}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {}, {0x0, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}]}}]}, {0xcc, 0x6, "d1cdb4e93c5eda9c26ca537014c9cf2373df0b2afb898f92be48ed80fd9ea7b235b8dfe5c6b2823c8f20deee0a97f480bcfdd5635580d893b40dc25ba4b193eba53931a700a02a066b563d6f5d7aa8c6a8f23fbcfa2c1da4b178d270a09d31296e6f0b0b988af910370a1af051d6eabcbd529413ea1117e5273691f94b5512975cce22e7fb0b41e91b78dcf92f0fb7b0e5dfdaa9f740ddbcaf3f339a7e318b658a0365d755e602354923797534232b21cbe4527823d79d3d1813a8cde7a2357abfb5e42aab1720d8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x1124, 0x5, 0x0, 0x0, {{0xb}, {0x1080, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x2, 0x0, 0x7, 0x9b, 0x7, 0x80000000, 0x7, 0x7, 0x9, 0x6, 0x8, 0x1, 0x7, 0x7, 0xd, 0x2, 0x9, 0xc69, 0x400, 0x7, 0x7, 0x2, 0x8, 0x3, 0x9, 0x39, 0x0, 0x9, 0x7, 0x0, 0x5, 0xa, 0x5, 0x10001, 0x5, 0x8, 0x9, 0xf9, 0x0, 0x1, 0x80000000, 0x4d, 0x6, 0x80000000, 0xfffffc56, 0xffff, 0x3, 0x4, 0x1, 0x7, 0x7, 0xfffffffb, 0x80000001, 0x9, 0x6eb8, 0x5, 0x80000001, 0xfffffff0, 0x4, 0x2, 0xfffffffa, 0x677, 0x5, 0x9, 0xfffffe00, 0x3, 0xfffffff7, 0x0, 0xfbb, 0x37e7, 0x6, 0x401, 0x16, 0x288000, 0x5, 0x0, 0x10001, 0x5, 0x0, 0x1, 0x5, 0x6, 0x3, 0x9, 0x80000000, 0x4, 0x0, 0x7, 0x7f, 0x10000000, 0x7, 0x101, 0x4, 0x8, 0x8, 0x8, 0xf, 0x800, 0x0, 0x0, 0x7, 0x23c, 0x255, 0x8, 0xfffffffa, 0xc00000, 0x9, 0x0, 0x0, 0xd1e8, 0x81, 0x9, 0x7, 0x1, 0x80000000, 0xfffffff9, 0x0, 0x8, 0xfffff595, 0x3, 0x9, 0x1, 0x81, 0x6, 0x200, 0x606, 0x80, 0x4019, 0x6, 0x6, 0x8, 0xfffffff9, 0x7, 0x5, 0x4, 0x401, 0xd, 0xffff, 0x7, 0x0, 0x7, 0x6, 0xdd, 0xfa8, 0x3c2, 0x2, 0xc, 0xb117, 0x1000, 0x1d, 0x8, 0xffff53d0, 0x101, 0x2, 0x3, 0x401, 0x0, 0x5, 0x1, 0x9, 0x99, 0x5, 0xd6, 0x3e6, 0x4, 0x6, 0x1, 0xd6, 0x8, 0x3, 0x2, 0x8, 0x99b, 0x7, 0x3, 0xd384, 0xffffffc0, 0xffff, 0x10000, 0x69b, 0x4, 0xfffff000, 0x400, 0x5, 0xfffffffd, 0x40, 0x4, 0x7, 0xffff, 0x6, 0x1000, 0x200, 0xff, 0x6, 0x7, 0x1, 0x5, 0x7, 0x1, 0xc5ff, 0xb59, 0x0, 0x8, 0x9, 0x1, 0x1, 0x7c0, 0x8001, 0x8, 0x8, 0x5, 0x4, 0x3, 0x6, 0x7, 0x2a0, 0x401, 0xffff, 0x800, 0x6, 0x4, 0x10, 0x5, 0x2, 0x9, 0x4, 0x6, 0x10001, 0x5, 0x8, 0x9, 0xffff, 0x400, 0x1, 0xfffff79a, 0x28aa, 0x5, 0x2, 0x6, 0x6, 0x7, 0x5, 0x3, 0x0, 0xa, 0x800, 0x9, 0x13, 0x9, 0x1, 0x8, 0x1, 0x7, 0xf, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9c, 0xffffff3e, 0x3c52, 0x7f, 0xff, 0x8, 0xffffffd6, 0x763, 0x7fffffff, 0x0, 0x5, 0x3, 0x1ff, 0x6, 0x8, 0xff, 0x101, 0x3, 0x237b1611, 0x8, 0x9, 0x5, 0x7, 0x0, 0x4, 0xe7, 0xfffffffa, 0x7, 0x7f, 0xf3e, 0x9, 0x81, 0x1, 0x5a, 0xffffffb0, 0x3, 0x2, 0x4, 0xffffffc0, 0x9, 0x6, 0x6, 0x8, 0xffffffab, 0x6, 0xff, 0x80000000, 0x8, 0x3, 0xf, 0x3, 0x8, 0x1, 0xb800, 0x3, 0x8, 0x26, 0x8, 0x3ff, 0x9, 0x3, 0x1be, 0x7fffffff, 0x1, 0x1800000, 0x9, 0x3, 0x1, 0x9, 0x0, 0x4, 0xb6ab, 0x5, 0x7, 0x8001, 0x6, 0x1, 0x0, 0x8001, 0x7, 0xa, 0x2, 0xffff2de2, 0xd2, 0xa, 0x2, 0x6, 0x200, 0x5, 0x1, 0x7, 0x0, 0x6, 0x7, 0x80000000, 0x8c8, 0x3, 0xfffffff7, 0xfd5, 0x9, 0x69fc2489, 0x4, 0x0, 0x7, 0x9, 0x81, 0x2dd, 0xc7, 0x0, 0x3, 0x80000001, 0xffffffff, 0x3bcf, 0xea2, 0x6e9, 0x81, 0x4, 0xa5800000, 0x3, 0x0, 0x3, 0xffff, 0x0, 0xc92, 0x8, 0x3, 0xfb9, 0xc10, 0x8, 0x9, 0x6, 0x2, 0xffff0000, 0x3, 0x3ff, 0x80, 0x8, 0x1ed, 0x3, 0x80000001, 0x2, 0x7, 0x8001, 0x40, 0x8, 0xc800000, 0xdc35, 0x7, 0x3, 0x4, 0x7, 0x3, 0x7ff, 0x7, 0x53, 0x6, 0x8, 0x0, 0x8, 0x1, 0x0, 0x8, 0x5, 0x3, 0x2, 0xe, 0x9, 0x0, 0x80, 0x2, 0x0, 0x5, 0x3, 0x8, 0xd778, 0xea, 0x1, 0x8, 0x0, 0x4, 0x9, 0x300000, 0x7, 0x6, 0x2, 0x7fffffff, 0x5, 0x46, 0x9, 0x8, 0xc8f6, 0x0, 0x4, 0x4, 0xd56, 0x35, 0xfffffffe, 0x4, 0x101, 0x962, 0x0, 0x1a0a, 0x35, 0x7, 0x3, 0x0, 0x0, 0x7, 0x4, 0x9, 0x9aa, 0xf56, 0xffff7406, 0xfffffff9, 0x8, 0x400, 0xffffffff, 0x3186, 0x1, 0xffff, 0x1, 0x2, 0x9, 0xd, 0x9, 0x5, 0x0, 0x3, 0x2, 0x40, 0x4, 0x8c, 0x661, 0x200, 0xdb, 0x100, 0x0, 0xf, 0x4, 0xffff, 0x7fffffff, 0x8, 0x1, 0xaf, 0x80000000, 0x9, 0x8, 0x9, 0x9, 0x9, 0x712, 0x108, 0x10, 0x4c9c, 0x9, 0x7f]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0x0, 0x8, 0x6, 0x5, 0x7, 0x5, 0xffffffff, 0xfffffff9, 0x5, 0xf, 0x60, 0xa7, 0x5, 0x1, 0x58, 0x8001, 0xdbef, 0x5, 0x2, 0x7, 0x400, 0x7, 0xfffffffb, 0x6, 0x5f7a, 0x9, 0x2, 0x1, 0x7, 0x5, 0x8001, 0x1, 0xfff, 0x362, 0x0, 0x4, 0x80000000, 0x872b, 0x8, 0x8, 0x8, 0x4, 0x100, 0x5, 0x4, 0x3ff, 0x5, 0x8, 0x7, 0x9f11, 0x1, 0x6, 0x1, 0x7, 0x10001, 0x1, 0x5, 0x6, 0x40, 0x80000001, 0x2, 0x80, 0x7, 0xc, 0x1, 0x2, 0xfff, 0x7831, 0x4, 0x0, 0x3, 0x1, 0xfffffffe, 0x6, 0x4, 0x8, 0x4, 0x0, 0x2, 0x2, 0x3, 0x6, 0x5, 0x3ff, 0x0, 0x1, 0x2, 0xd, 0x7, 0x3, 0x6, 0x9, 0x7, 0x59, 0x401, 0x7, 0x6, 0x6, 0x8, 0x4, 0x8, 0x4, 0x400, 0x40, 0x886, 0x2, 0x10001, 0x0, 0x8, 0x5, 0xade, 0x7, 0x4, 0x8b, 0x9b, 0x8, 0xe9, 0x400, 0x6, 0x3, 0x2, 0x7fffffff, 0xfa, 0x3, 0x2, 0x9, 0x0, 0x7, 0x1, 0x6a2a, 0x401, 0x1ff0000, 0x10001, 0x2, 0x100, 0x5, 0x6, 0x5, 0x7, 0x100, 0x1000, 0x8, 0x8, 0x3ff, 0x0, 0x6, 0x20000000, 0xc, 0x87a7, 0x0, 0x3, 0x5, 0xfff, 0x6, 0x1000, 0x200, 0xffffff81, 0xda20f0a9, 0x4, 0xf, 0x8, 0x2, 0x0, 0x8, 0x7, 0x81, 0x2, 0x100, 0xa, 0xc, 0x7, 0x0, 0x3, 0xffffffff, 0x4, 0x269c, 0x5, 0xa6cb, 0x4, 0x7b28, 0x101, 0x58e0, 0x2, 0x5, 0x0, 0x5, 0xab, 0x9860, 0x84e, 0x80, 0x4, 0x4, 0x0, 0x1, 0x7fffffff, 0x8, 0x80000001, 0x10000, 0x121, 0x1, 0xe, 0x9, 0xfffffffe, 0xfffffffa, 0x408c, 0x7fffffff, 0x7, 0xa0, 0xfffffffb, 0x100, 0x5, 0x0, 0x4, 0x7, 0x5, 0x3, 0x400, 0x10, 0x3, 0x63, 0x24, 0x4, 0xfc, 0x81, 0x5, 0x8, 0x5, 0x6, 0x2, 0x100000, 0xe1b3, 0x7, 0x5, 0x80000000, 0x9, 0xa, 0x0, 0x7, 0x2, 0x9, 0x3ff, 0x3, 0x0, 0x4, 0x6, 0xe, 0x4, 0xfffffff9, 0x7, 0x7, 0xfc, 0x3a0f, 0x5, 0x80000001, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x2, 0x4, 0x9, 0x2b, 0x4, 0x280000, 0x7, 0x0, 0x3, 0x10001, 0x7f, 0xc, 0xf488, 0x26, 0x0, 0x0, 0x9, 0xa, 0x1, 0x6, 0x4, 0x2, 0x3, 0x401, 0x6, 0x1, 0xbd3, 0x10000, 0x800, 0xf2d, 0x8, 0x3, 0x8, 0xfffffff6, 0x0, 0x0, 0xdc8, 0x7, 0x4, 0xffff, 0x1, 0x3, 0x3, 0x7, 0x7, 0xb9, 0x7, 0x400, 0x1, 0x0, 0x80, 0x4, 0x7fff, 0x2, 0x0, 0x3, 0x80000001, 0x6, 0xffff0000, 0x9, 0x4, 0xeb59, 0x561f, 0x401, 0x8, 0xffffffff, 0x101, 0x4, 0x6, 0x3, 0x3ff, 0x1, 0x4, 0xb, 0x73f9, 0x5, 0xf, 0x1, 0x5, 0x7, 0x3, 0x5585, 0x6, 0x7fffffff, 0x401, 0x1, 0xcacb, 0xfff, 0x8, 0x8000, 0x5, 0x3, 0x0, 0xfffffffa, 0x10000, 0x6, 0xffffffff, 0x2, 0x1e0, 0x7, 0xf2, 0x1, 0x0, 0x11d, 0x2, 0x3, 0x8001, 0x6, 0x7ff, 0x7ff, 0x237b, 0x497b, 0x9, 0x3, 0x1, 0x2, 0x200, 0x4, 0x3, 0x7, 0xe, 0xfde, 0x1, 0x5, 0x8, 0xee, 0x10001, 0x5, 0x9, 0x7, 0x3, 0x0, 0x624a393a, 0x4c39, 0x0, 0x4, 0x2a752546, 0x2, 0x8, 0x100, 0x8, 0x3, 0x6, 0xce, 0x81, 0x4, 0x4, 0x7, 0x8, 0x7, 0x6, 0xdc, 0xf, 0x1, 0x8, 0x1, 0xffffff64, 0x1000, 0xb, 0x9, 0x80000001, 0x3ff, 0x7, 0xd3, 0x800, 0x124ed470, 0x9, 0x80000000, 0x1, 0x2, 0x81, 0x3, 0x10, 0x3, 0x1, 0x21576ff0, 0x9, 0x0, 0x7, 0x2, 0x7ff, 0x80000000, 0x5, 0x7ff, 0x3, 0x10001, 0x1, 0x3, 0x7, 0x0, 0xf2b, 0x744, 0x35, 0x7, 0x80, 0x7, 0x0, 0x3, 0x6, 0xfff, 0x1, 0x90, 0x0, 0x3, 0x5, 0xfffffff7, 0x4, 0x3, 0x80, 0x0, 0x6, 0x80, 0x101, 0x8001, 0x7ff, 0x800, 0x4b24, 0x8, 0x6, 0x800, 0x1, 0xfffffffb, 0x9, 0x52, 0x5, 0x2, 0x7, 0x2, 0x3ff, 0x3, 0xfdb6, 0x6, 0x3, 0x4, 0x9, 0x7, 0x1, 0xf, 0x864, 0xd, 0xdf24, 0x0, 0xfffffff8, 0x26e5, 0x7, 0x10, 0x7, 0x5, 0x938, 0x2, 0x7, 0xffffffff, 0x200, 0x1, 0xdf]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x10001}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0x3, 0x4, 0x7, {0x8, 0x1, 0x7, 0x81, 0x2, 0x2}, {0x1, 0x0, 0x571, 0x4, 0x7, 0x7}, 0x101, 0x5, 0x1750}}]]}, {0x7a, 0x6, "cdc0f44e4bf7bb8413403e005941951b7c8e0bef4b5cd2144764fd078754447c97c4433e68ce7b4062e5b821ac3f1c334ff7b1a82e04b8bd30a5fb0c3131b54e1149ddabc1c18d3204f869e762ffdd6ae4fa24840f0be990fc7ff74d4bd732aee17d6b008d846c0dea877c96ee86a32a41d740a39a44"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_ROUTE4_POLICE={0x81c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x3, 0xeced, 0x1, 0x4, 0xe, 0x10, 0x7, 0xf35f, 0xadd3, 0xffffffff, 0x1, 0x3ff, 0x4, 0x6, 0xcc3e, 0x5, 0x5, 0x9, 0xe, 0x50cb, 0x6, 0xfffffab5, 0x4, 0x5, 0xe, 0x8, 0x1, 0xedb, 0x6, 0x9dac, 0x9, 0x8, 0x7, 0x6, 0x1, 0x8000, 0x8, 0x43, 0x5, 0x1893, 0x95a8, 0x7, 0x800, 0xc, 0x1, 0x9, 0x6, 0x6, 0x3, 0x3, 0x9, 0x1, 0x7, 0x9, 0xfffeffff, 0x6, 0xe, 0x1, 0x7, 0x4, 0x7fff, 0xcd, 0x3, 0x8308, 0x8, 0x5, 0x7, 0x10, 0x2, 0x6, 0x656, 0x401, 0x9, 0x4, 0x8, 0x7, 0xc718, 0x3, 0x7, 0x20000, 0x8, 0x7, 0x40, 0x8, 0xfffffffc, 0x400, 0x2, 0xffffffff, 0x6, 0xe650, 0x5, 0x498daf46, 0x7ff, 0x5, 0x1, 0x8, 0xf3, 0x4, 0x2, 0x0, 0x2, 0x9, 0x3, 0x3, 0x9, 0x1, 0x5, 0x8, 0x6, 0x200, 0x9, 0x9, 0x6, 0x6, 0x7, 0x2, 0x4, 0x4fc, 0x4, 0x24, 0x4, 0x3ff, 0xfffffff9, 0x0, 0x8, 0x4, 0x6, 0x6, 0x8, 0x3, 0x6, 0x3, 0x9, 0x10000004, 0x3, 0x81, 0x0, 0x6, 0x5, 0x7fff, 0x81, 0x80, 0x5, 0x7, 0x9, 0x7f, 0x5, 0x7, 0x1, 0x80000000, 0x5, 0x1, 0xf8ee, 0x8, 0x8, 0x3d, 0x8, 0xc0000000, 0x401, 0xffff8001, 0x4, 0x6, 0x6, 0xa, 0xa6c, 0x3, 0x509, 0x80000000, 0x1, 0x10000, 0x1, 0x7f, 0x6, 0xfa6, 0x8, 0x2, 0x8, 0x1, 0x6507921b, 0x8, 0x7f, 0x2, 0x1, 0x0, 0x4, 0x5, 0xffff, 0x9, 0x70, 0x7, 0x10001, 0x9dbd, 0x5, 0x4000000, 0x9, 0x10001, 0x8, 0x7ff, 0xffffffff, 0x400, 0x5, 0x4, 0x4, 0x7, 0x1, 0x200000, 0x889, 0x8fc6, 0x0, 0x7, 0xff, 0x5, 0x2, 0x0, 0x6, 0x3, 0x4b, 0x70, 0x2, 0x3, 0x6, 0x7f, 0x9, 0xfff, 0xfffffff7, 0xe, 0x7, 0x100, 0x3, 0x8, 0x0, 0x3, 0x5, 0x7, 0x0, 0xfffffff9, 0x3, 0x5, 0x0, 0x400, 0x2, 0xf, 0x7fff, 0x2, 0x2995, 0xffffffff, 0x9, 0x4, 0x5, 0xa, 0xfffffffd, 0x8, 0x9, 0x0, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff8, 0x6, 0x4, 0x9, 0x8, 0x4, 0x2, 0x81, 0xfffffff1, 0x7ff, 0x9, 0x21a0, 0x8, 0xdfc, 0x6, 0x1000, 0x7fffffff, 0x9, 0xfffffffa, 0x1, 0x8, 0x8, 0x3, 0xfffffffe, 0xb, 0x3, 0x6, 0xfffffffd, 0xa, 0x0, 0x577, 0x0, 0x8, 0x2, 0x3, 0x400, 0x59a, 0x7, 0x401, 0x7fffffff, 0x101, 0x5, 0x73, 0x0, 0x7, 0x3ff, 0x80000001, 0x2, 0x5, 0x9, 0x7, 0x0, 0xffffffff, 0x2, 0x5, 0xf, 0x4, 0x1, 0x7, 0x800, 0x1, 0x47, 0xfff, 0x3, 0xff, 0xccc, 0x9, 0xbbb, 0x1, 0x0, 0x3, 0x7, 0xa5, 0xfff00000, 0xa5, 0x4, 0x1, 0x5, 0xe2, 0x2, 0x3, 0x3ff, 0xf2a, 0x7, 0x6ffd, 0x393, 0x344a, 0x200, 0x6, 0x99, 0x2, 0x2, 0x8, 0x9, 0x8, 0x2d1, 0x7, 0x400, 0x1, 0x4, 0x8, 0x9, 0x100, 0x2, 0xf2, 0x2, 0x80, 0xffff, 0x7, 0x2, 0x12, 0x0, 0x11167, 0x80000001, 0x9, 0x3, 0x31, 0x4, 0xbe0, 0x7, 0x9, 0x40, 0x0, 0x0, 0x6, 0x3, 0x9, 0x200, 0xe, 0x81, 0x7, 0xff, 0x8, 0x8, 0xa, 0x5, 0x0, 0x4, 0xfffffffc, 0xfffeffff, 0x2, 0xf, 0x0, 0x8, 0x7fffffff, 0x10000, 0x7c, 0x2, 0x10001, 0x1, 0x7, 0x7, 0x2, 0x40, 0x6, 0x5, 0x99f, 0x8, 0x3, 0x200, 0x2, 0xc, 0x1, 0x4328480e, 0x4dbdb2ff, 0x1, 0x7, 0x68, 0x6, 0x8, 0xfee8, 0x2, 0x7, 0xd, 0x8, 0xea01, 0x6, 0x2, 0x100, 0x6, 0x1ff, 0x80000001, 0x8, 0x7, 0x1, 0xe, 0x0, 0x80, 0x1, 0xdc5, 0xccc0, 0x0, 0x7, 0x5, 0xffffffff, 0x0, 0x8, 0xf4e, 0x6, 0x5, 0x3, 0x7fff, 0x2, 0xffffffff, 0xf4, 0x6, 0x0, 0x3, 0x4, 0x7f, 0x0, 0x1, 0x5, 0x80, 0x9, 0x7, 0x6, 0x8, 0x9, 0x40, 0x6, 0x1, 0xb47, 0x6, 0x6da, 0xd, 0x1, 0x800, 0x4, 0x9, 0x6, 0x0, 0x7, 0x2, 0x3, 0x8, 0x3ff, 0xc, 0x6, 0x8, 0xd, 0x10000, 0xb80d, 0xc3, 0x4, 0x10000, 0x2, 0x5, 0xf1, 0x7, 0x8, 0x6, 0x7, 0xe, 0x3ff, 0xe2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8000, 0x3, 0x2, 0x5, 0x6, 0xba, 0x6, 0x3, 0x9, 0x3, 0x7, 0x2, 0x1ff, 0x80, 0x3, 0x4, 0x3, 0x3, 0x80000000, 0x8000, 0x7, 0x2, 0x8, 0x6, 0x7, 0x79, 0x5, 0x6, 0x9, 0x0, 0x5, 0x4c7, 0x7, 0xe, 0x18, 0x87b6, 0x3, 0xd, 0x1, 0x101, 0x8, 0x5, 0x1, 0x6db, 0x40000000, 0x9, 0x6d4, 0x8, 0x2b60, 0x7, 0x3ff, 0x0, 0x7f, 0xc, 0x1000, 0xfff, 0x81, 0xfffffae5, 0xc423, 0x4, 0x100, 0x9, 0x7, 0x0, 0xc, 0xe, 0x6, 0x0, 0xfffffffc, 0x71ad17d3, 0x5, 0x4, 0x1, 0x94, 0x0, 0x1, 0x101, 0x0, 0xb, 0x9, 0x256210fc, 0xffffffff, 0x5, 0x141ab234, 0x8, 0xfc5d, 0x5, 0x3, 0x82, 0x3d23, 0x100, 0x101, 0x3, 0x1, 0x68c0, 0x800, 0xc, 0xdf, 0xfffffffe, 0x7, 0x5, 0x7c0, 0x7ff, 0x4, 0x38d5, 0x2, 0x80000001, 0x7, 0x9, 0x4, 0x4, 0xa07d, 0x1, 0x9, 0x0, 0x9, 0xfffffffb, 0x536, 0xfffffffc, 0x40, 0x9, 0x200, 0x1, 0x5be, 0x5, 0x3, 0x9, 0xb9, 0x400, 0x9, 0x3482, 0xc5ee, 0x200, 0xfffffffb, 0x1000, 0x24000000, 0xfffffffc, 0x5, 0x7, 0xffff, 0x4, 0x6, 0x2, 0x9, 0x0, 0x1, 0x1800000, 0x5, 0xa34f, 0x0, 0x5, 0x4, 0x342a996c, 0x10000, 0xfffffff9, 0x100, 0x80000001, 0xffff7f76, 0xfffffff1, 0xa4a, 0x9a4a, 0x400, 0x0, 0x5, 0xffffffc0, 0x3, 0x6, 0xef, 0x5, 0xd30b, 0x4, 0x2, 0x3, 0x4, 0x8, 0x265, 0x8, 0x6, 0x3, 0x2b, 0x2, 0x6, 0xd, 0x4, 0x7, 0x6, 0x7fffffff, 0x5, 0x8000, 0x2, 0x256, 0x3, 0x92, 0x7, 0xcf8e, 0x8, 0x4, 0x200, 0x9, 0x8, 0x2, 0x9, 0xb, 0x5, 0x9, 0x44a2, 0xfa, 0x250, 0x5, 0x417c0886, 0xfffffff9, 0x400, 0x7fffffff, 0x7, 0x5, 0x400, 0x9, 0x0, 0x36, 0x7fffffff, 0x1, 0x0, 0x9, 0x9, 0x3, 0xffffff01, 0x4, 0x4, 0x1ff, 0x40, 0x10, 0x7, 0xfffffff6, 0xfffffffa, 0x7, 0x400, 0xa, 0x6, 0x401, 0x89e5, 0xffffffba, 0x1ff, 0xc, 0x7, 0x7, 0x80000001, 0x4, 0xf, 0x0, 0xc, 0x7, 0x9c0c, 0x6, 0x401, 0x100, 0xfffffff7]}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xd, 0x8008}}]}}]}, 0x8e0c}}, 0x0) 8m23.906376313s ago: executing program 2 (id=74): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xc, {[@global=@item_4={0x3, 0x1, 0x3, "fe040090"}, @main=@item_012={0x1, 0x0, 0xb, "a1"}, @global=@item_4={0x3, 0x1, 0x0, "3349bd8d"}]}}, 0x0}, 0x0) 8m18.601429348s ago: executing program 2 (id=87): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='contention_end\x00', r0, 0x0, 0x3}, 0x18) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)={0x840, 0x25, 0xa}, 0x18) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) r5 = openat$bsg(0xffffff9c, &(0x7f0000004380), 0x8c00, 0x0) r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3, 0x20, 0x3, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000080)) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x8, 0x5, 0x380, 0x188, 0xd0, 0xffffffff, 0x230, 0x188, 0x2e8, 0x2e8, 0xffffffff, 0x2e8, 0x2e8, 0x5, 0x0, {[{{@uncond, 0xae01, 0x98, 0xd0, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x15, @multicast2, @loopback, @port, @icmp_id}}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'vlan1\x00', 'geneve1\x00'}, 0x3f5, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast1, @icmp_id}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'syzkaller0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@loopback, @gre_key, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x7, &(0x7f00000006c0)={0x1, 0x1, 0x7000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x114, &(0x7f00000000c0)=0x7df1, 0x0, 0x4) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f0000000100)) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) 8m11.933412659s ago: executing program 2 (id=97): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x5, &(0x7f0000000440)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0xfe, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) 8m10.8894041s ago: executing program 2 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000195c0)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000040)=0x1, 0x4) readv(r2, &(0x7f00000013c0)=[{&(0x7f0000000200)=""/96, 0x60}, {&(0x7f00000010c0)=""/215, 0xd7}, {&(0x7f00000011c0)=""/208, 0xd0}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f00000012c0)=""/199, 0xc7}, {&(0x7f0000000280)=""/8, 0x8}], 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="18020000002000000000000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0xfffff332, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe0}}], 0x1, 0x20008000) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'erspan0\x00'}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}], 0x2f}) r7 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r7, &(0x7f0000003100)=@id, 0x10) 8m9.69250413s ago: executing program 32 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000195c0)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000040)=0x1, 0x4) readv(r2, &(0x7f00000013c0)=[{&(0x7f0000000200)=""/96, 0x60}, {&(0x7f00000010c0)=""/215, 0xd7}, {&(0x7f00000011c0)=""/208, 0xd0}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f00000012c0)=""/199, 0xc7}, {&(0x7f0000000280)=""/8, 0x8}], 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="18020000002000000000000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0xfffff332, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe0}}], 0x1, 0x20008000) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'erspan0\x00'}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}], 0x2f}) r7 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r7, &(0x7f0000003100)=@id, 0x10) 1m16.993516543s ago: executing program 4 (id=1397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000800000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163000000"], 0x5c}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) 1m16.573458595s ago: executing program 4 (id=1400): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0xfffffffc, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xe4ffffff, 0xffffffffffffffff}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) fcntl$setpipe(r0, 0x407, 0x7000000) setreuid(0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) capget(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x7fff, 0x2, 0x6, 0x2, 0x64, 0x7ce}) 1m16.483085444s ago: executing program 4 (id=1402): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r0, &(0x7f0000001640)=[{&(0x7f0000000240)="2b008c34a69d16", 0x7}], 0x1) syz_open_dev$radio(&(0x7f0000000580), 0x0, 0x2) socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000004240)=0x40000004, 0x4) recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}, 0x3bd}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x7e, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pipe(&(0x7f0000000140)) epoll_create1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x51, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES8=r2, @ANYBLOB="adffa888010200001c9bb20dcbb622a75bbaf3f74a6a351c0012801a86125df0b574ea5632b41b4c5335c50a00010000006373656300000c00028005000600040000009570078c7d32dc4ba4f7eb27cf4fc403f9d3acb64317b9315752ed6fc2b71d7451100f4600934e478c"], 0x3c}}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0xffffffff, 0x0, 0xf0, 0x0, 0x0, 0x45}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010026bd7000000000002500000066b7dfa54aeabfe95d41b58ee5a9d575a759faca811a7ad7e35e5923336fba309954c00b3a3cc7fb0c23790bfc0dd90cff7001f5f5a2d6e849196ebb6d8cdd956f80672cf7bb463bf0581d558a5e94f995fbb7"], 0x14}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r8, @ANYBLOB='\b'], 0x70}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newroute={0x0, 0x18, 0x100, 0x70bd2c, 0x25dfdbff, {0xa, 0x14, 0x20, 0x81, 0xfc, 0x3, 0x0, 0x1, 0x500}, [@RTA_ENCAP_TYPE={0x0, 0x15, 0x3}, @RTA_GATEWAY={0x0, 0x5, @mcast1}]}, 0x17}}, 0x4090) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x137480, 0x0) splice(r4, &(0x7f00000000c0)=0x2, r2, &(0x7f0000000100)=0xa6a, 0x0, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x27, 0x3, 0x0) 1m16.105543702s ago: executing program 4 (id=1407): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002640)="ef", 0x1}, {0x0}], 0x2, 0x0, 0x0, 0xfeffff}}], 0x1, 0x20000010) 1m15.994254568s ago: executing program 4 (id=1409): syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = add_key$keyring(&(0x7f00000085c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000008540), &(0x7f0000008580)={'syz', 0x3}, 0x0, 0x0, r2) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x46) keyctl$unlink(0x9, r3, r2) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) socket$can_raw(0x1d, 0x3, 0x1) r7 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r7, 0xa, 0x21) fcntl$setlease(r7, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1m14.504837833s ago: executing program 4 (id=1414): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0xffffffc1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000000), 0x1c) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) gettid() (async) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) (async) syz_emit_ethernet(0x33, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000100000080045f0002500000000fc11907800000000ffffffff00004e200011907801030001d889e52303a5b12018fbce2b777c96eb31e5c48a3077ee0e2e8213d0d46b99156316f5fb0cb0b954107ead8db2bd79fd08e8fabc82dc31be43a98519fe2c74b8a5633ac45c4a85e839b5e223928284a499123b6e0ee0c8eebe80c9efb64f7a98fb20d299090c7a5925e1d9221b16b32a869e6d4184d1e13f417eb152"], 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) read(r2, &(0x7f00000019c0)=""/4097, 0x1001) (async) syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x40a04) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0xbb81, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="000825bd7000fc01002527000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040041) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) (async) pipe2$watch_queue(&(0x7f00000003c0), 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b700000000000000c60000000000000195000000008bf800605fef0ff2d18fbd3aa1ee9047ebd3de88d2a82ad654e0b51e1b3c1aab081825d06442821d1a061f6b8ee4459019d9005952c8f18aeff082f885b9caac92c5874fa69928771c86611009701c9898ae136618"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 58.059455305s ago: executing program 33 (id=1414): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0xffffffc1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000000), 0x1c) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) gettid() (async) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) (async) syz_emit_ethernet(0x33, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000100000080045f0002500000000fc11907800000000ffffffff00004e200011907801030001d889e52303a5b12018fbce2b777c96eb31e5c48a3077ee0e2e8213d0d46b99156316f5fb0cb0b954107ead8db2bd79fd08e8fabc82dc31be43a98519fe2c74b8a5633ac45c4a85e839b5e223928284a499123b6e0ee0c8eebe80c9efb64f7a98fb20d299090c7a5925e1d9221b16b32a869e6d4184d1e13f417eb152"], 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) read(r2, &(0x7f00000019c0)=""/4097, 0x1001) (async) syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x40a04) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0xbb81, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="000825bd7000fc01002527000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040041) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) (async) pipe2$watch_queue(&(0x7f00000003c0), 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b700000000000000c60000000000000195000000008bf800605fef0ff2d18fbd3aa1ee9047ebd3de88d2a82ad654e0b51e1b3c1aab081825d06442821d1a061f6b8ee4459019d9005952c8f18aeff082f885b9caac92c5874fa69928771c86611009701c9898ae136618"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 10.614935331s ago: executing program 5 (id=1577): r0 = syz_open_dev$vim2m(0x0, 0xffffffff00000000, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r6, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000280)="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", 0x211, 0xfffffffffffffffe) r8 = socket(0x1, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000600), &(0x7f0000001380)=@udp=r8}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) sendmmsg$unix(r8, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r10 = socket(0x27, 0xa, 0x0) recvmmsg(r10, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$NFT_BATCH(r8, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x7}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_DELRULE={0x74, 0x8, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0x31, 0x7, 0x1, 0x0, "92c36b12f28e2e0f5a2027d7346bfa4a4d2865211546ca810238e79f54e8c334913539e62879630d62eacb9670"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xc, 0x7, 0x1, 0x0, "6c0fe5d963c61639"}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWTABLE={0xa0, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "8a8fc02cc7f95a6a05622cfa21d3b5cd77a1befdd953fc0cad9a35884bc1452801ef1fe1b2a43a045d970de5460e9fa79c2a4a71ebb35cd31e604494dceee6a5589188caa18128f9b145d78a76abfad46f308e92bb91df58e28dc23781d00b85ffb7055825"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_DELRULE={0x170, 0x8, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_USERDATA={0xf4, 0x7, 0x1, 0x0, "441e2b3e27982db97c6b37b07fe13a827fed45c4cc0a47f1a205f4a3ad58064ac9fd04da0ec1b54544238abb2de6f043e9aa85d70a82311a906521a5bb114065a2fcdbd1186daeaeb4cabaeb7432abc197119f62cad25e3ae7acd62080a27c81f4caf3cc2b91a340ecaf41211b6024ba38701f041aa754924f2b910f6f723de6948c65848f92ef06486ff766fad963120e43fbf73c6fd6b3ca8b4ea08f259238819fa3612994c885ecad641e13cba905ed4619c0a517a87dfe2390b7aef68170c3390f206276b76ac5ad0585fe84ac60344736002277bec9e6d6c047955d3cc1379638cc41cf8f16963569150e19c81b"}, @NFTA_RULE_USERDATA={0x68, 0x7, 0x1, 0x0, "552fb598b3ea3363a5b365f9b87d688e099b53649f5a751314f68ae8ac415f7fcc0e642f6c42b41a20aaf8505226b6d6de6166c54718d827c048a845c55ee1f9e195a468695ba84988f224dccafb83ee40ff6ac8e7bcf41bf40d5eec26017a66e2e5cdce"}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x104, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x401}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffff8e}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3b8}, 0x1, 0x0, 0x0, 0x8}, 0x40) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x1, @raw_data="8a6528fa2eba577bfa6b99723c0c1b5d143ec74480807edf8b5f010c46c1a6e9ec85449d34fbb88d5483106c6380e37c5e269951bebf29ed14e535fedd9e39d56748d2087da94ef0ee4b44d2815963aa6366ac844175dbe2a195662da79450b8c9a03c50e58f5cd5e570a4777c532b9e2fad1d7ea8572d23d9ce5e60f2eb0b2c4a009998961146866788869040839ff19b3bff10e091a365966500b03513d980d80f1c81f353e0ea0db47f040ae3750900c992d15d2d0c83847a9fb064598446f84f6157fef4e44b"}) 9.35733569s ago: executing program 5 (id=1583): socket$kcm(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x5, &(0x7f00000004c0)={0x2, 0x3}) fcntl$lock(r4, 0x26, &(0x7f0000000080)) fcntl$lock(r4, 0x6, &(0x7f0000000000)) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000280)="66baa000ecc74424001100000066bad004b0aeeeff2c2443f48f68788f8ad8320000c0b8f2c967894266bafc0c66ed0f0740c067089548b820450000000000000f23d00f01c535000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30420f01c5", 0x69}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='%\x00\x00\x00\t\x00\x00\x00', @ANYRES32, @ANYBLOB="a90ceeb5e77f981738ef9fb076fa8296e15bf588bfc7912ea3e2552eb52f505d9fdc9de2080000005ef2442af2de6f7e880e0fc24e3d25433d3c0eb19716eb73a781c09367714a76811f0293f8d1fafdb65252c055956d297da10bf966673585be993d4a707fc41c1f6b7fcb719164c33dea5e341622735db1c00add14f5dbc79db6e4fae0bebb6b603f1b2e5ace6fb74eb4ad70cb49f6ca610300000017bc88f9227a3dcef2fbae008ce4d459bb0b585c1b64f6", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r7) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x30, r8, 0x10, 0x8070bd2a, 0x25df5bfd, {{}, {}, {0x14, 0x19, {0xfff, 0x5, 0xcbaa, 0x7}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x20000080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x30, 0x2c, 0x400, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0x3, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40011}, 0x20000800) r9 = socket(0x10, 0x80002, 0x4) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0x70, 0x13, 0x53b, 0x1, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x12, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x989}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xff}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 8.092513207s ago: executing program 0 (id=1584): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000ec0)={0x58, r3, 0x1, 0x70bd2c, 0x0, {{0x3b, 0x0, 0x2e00}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6}, @device_a, @device_a, @from_mac=@broadcast, {0x9, 0xc4d}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0x10, 0x9, @device_a, {0x0, 0x6, @default_ap_ssid}, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x58}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) 7.877332975s ago: executing program 0 (id=1585): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000004000400008008000c"], 0x1c}], 0x1}, 0x0) 7.699030958s ago: executing program 3 (id=1587): getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) bind$llc(0xffffffffffffffff, &(0x7f0000000300)={0x1a, 0x10e, 0xa2, 0x2, 0x9, 0x6, @remote}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0xfffd, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x2000000, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x2, 0xb, 0x0, 0xffffffff}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r2, &(0x7f00000000c0), 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB="54010000100013070000000020000000ac1e0022000000000000000000000000ac1414aa0000000000000000000000000000000000000000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/268], 0x154}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 7.546772263s ago: executing program 5 (id=1588): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) mount$nfs(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x0, &(0x7f0000001cc0)={[{'lock'}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000540)={0x3, 0x12c, @ioapic={0x4, 0x1, 0x8, 0x2, 0x0, [{0x3, 0x5, 0x1d, '\x00', 0xa7}, {0xa, 0x9, 0x69, '\x00', 0x3}, {0x1, 0x3, 0x5, '\x00', 0x3}, {0x0, 0x80, 0x3, '\x00', 0xa}, {0x2e, 0x4, 0x80, '\x00', 0x7}, {0x40, 0x5, 0x19, '\x00', 0x1}, {0x8, 0xdc, 0x0, '\x00', 0x61}, {0x1, 0x7, 0x1, '\x00', 0x1}, {0x6, 0x0, 0x40, '\x00', 0x5}, {0x0, 0x8, 0xb3, '\x00', 0x8}, {0x9, 0x4f, 0x1, '\x00', 0x6}, {0x5, 0xff, 0x4}, {0x6, 0x80, 0x5}, {0x6, 0xc, 0x4}, {0xc, 0x5, 0x8e, '\x00', 0x96}, {0x1, 0x6, 0x0, '\x00', 0x67}, {0x2, 0x2, 0xff, '\x00', 0x5}, {0x0, 0xff, 0x5, '\x00', 0x2}, {0xe0, 0x3, 0xe4, '\x00', 0x7}, {0x8, 0x7, 0xb}, {0x7f, 0x7, 0x9, '\x00', 0x9}, {0x12, 0x4, 0x80, '\x00', 0x7}, {0x2, 0x7, 0x43, '\x00', 0x8}, {0xbf, 0x6, 0x2e, '\x00', 0xf8}]}}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000540)={0x3, 0x12c, @ioapic={0x4, 0x1, 0x8, 0x2, 0x0, [{0x3, 0x5, 0x1d, '\x00', 0xa7}, {0xa, 0x9, 0x69, '\x00', 0x3}, {0x1, 0x3, 0x5, '\x00', 0x3}, {0x0, 0x80, 0x3, '\x00', 0xa}, {0x2e, 0x4, 0x80, '\x00', 0x7}, {0x40, 0x5, 0x19, '\x00', 0x1}, {0x8, 0xdc, 0x0, '\x00', 0x61}, {0x1, 0x7, 0x1, '\x00', 0x1}, {0x6, 0x0, 0x40, '\x00', 0x5}, {0x0, 0x8, 0xb3, '\x00', 0x8}, {0x9, 0x4f, 0x1, '\x00', 0x6}, {0x5, 0xff, 0x4}, {0x6, 0x80, 0x5}, {0x6, 0xc, 0x4}, {0xc, 0x5, 0x8e, '\x00', 0x96}, {0x1, 0x6, 0x0, '\x00', 0x67}, {0x2, 0x2, 0xff, '\x00', 0x5}, {0x0, 0xff, 0x5, '\x00', 0x2}, {0xe0, 0x3, 0xe4, '\x00', 0x7}, {0x8, 0x7, 0xb}, {0x7f, 0x7, 0x9, '\x00', 0x9}, {0x12, 0x4, 0x80, '\x00', 0x7}, {0x2, 0x7, 0x43, '\x00', 0x8}, {0xbf, 0x6, 0x2e, '\x00', 0xf8}]}}) syz_usb_connect(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="120110031fcd1b08cf1003010803ff01020701090585032000ff0a40000000140000000000f0ffff000000"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="120110031fcd1b08cf1003010803ff01020701090585032000ff0a40000000140000000000f0ffff000000"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 7.357411192s ago: executing program 3 (id=1589): openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc091}, 0xc010) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x1ff, 0x8, 0x34424752, 0x9, 0xb, [{0x0, 0x103}, {0x0, 0x7fff}, {}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x500}, {0xffff61b9}], 0x0, 0x0, 0x0, 0x0, 0x6}}) 6.740182247s ago: executing program 0 (id=1590): dup(0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="b90d0400000f3226f20f1153450f01d1f30fa6d00f7830c7442400e82e0000c7442402b71d0000c7442406000000000f011424b92d0b00000f32b9c70b00000f320f828b3d0000c4c2790ec0", 0x4c}], 0x1, 0x11, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.501225847s ago: executing program 3 (id=1592): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3800}}, 0x1c}}, 0x0) close(r0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 5.848094071s ago: executing program 0 (id=1595): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) r1 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x2, 0x1000, 0x1000000, 0x22}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256, 0x8, '\x00', @d}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3c}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x401}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x66}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x1, 0x9, 0x8, 0xc, 0xa43]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000046d000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="44010000", @ANYRES16=r6, @ANYBLOB="050000000f00000900002100ef0008000300", @ANYRES32=r7, @ANYBLOB='T\x00-'], 0x144}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000a40)="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", &(0x7f00000001c0)=""/42, &(0x7f0000000380)="2f1a9eab37614be133497e0a013d26a363c5888ffad8f476cf4e3a539d22acc0253e1f8d7be4e4e396bd09d568b22b912efabc8033d56f02837ccfb8c5c5a62341467a96208c780d6226a04660955bb2117311daf7a7709335d0d29af821d4c36c2577cb2e05cef5fd7977befcd35368e83a90633f0e2d0500303c3ff42d4231faf03cc0411c9d4c28f2ac93291cbbce", &(0x7f0000000480)="ca6afd754df9dfc8b46e95d40c36c25ba4eefa9d22364a0e8801b80df4bb998fc0a16e7dfcba43ea322b04cafc0ca8dd299fbb9359856faf067df40c7c5141aa1acb14296ade24fbb84961244df699f4552d815c9ab7879882495b685be0842f7e7dce6c66bcfcb5df7a", 0x5, r4}, 0x38) 5.401449423s ago: executing program 3 (id=1596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x40, 0x37, 0x28, "56579902999843f13bba6bffba779cba80b4dd95ee9b32d355b1157e866423888e6b63c42f6b8401"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@\aH\x00\x00'], 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @loopback}, 0x1, 0x1, 0x4}}, 0x2e) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x4, 0x0, 0x0, 0x80}, 0xc) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4040004) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x3, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x2, 0x28, 0x68, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x40, 0x141a, 0x0, 0x15f1, {[@mptcp=@syn={0x1e, 0xc, 0x2, 0x1, 0x9, 0x4}]}}, {"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"}}}}, 0xfce) 5.135868617s ago: executing program 0 (id=1599): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x2, 0x0, 0x3ff) syz_open_dev$usbfs(&(0x7f0000000980), 0x858, 0x264280) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x317, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x5, 0x74, 0x1, {0x22, 0xc06}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x2, 0x27}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x4, 0x7, 0x3f, 0x0, 0x8}, 0xc, &(0x7f0000000240)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x3, 0x2, 0xe74f}]}, 0x4, [{0x21, &(0x7f0000000800)=@string={0x21, 0x3, "0fe1bb7fd0b12107048fb6fad66b74b89f3ce8e68de64213b897dc59ff8fa4"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x1007}}]}) syz_open_dev$sndmidi(0x0, 0x2, 0x141121) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$smackfs_change_rule(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) read(r2, &(0x7f0000002240)=""/4107, 0x100b) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4851) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_dev$video(0x0, 0x75, 0x0) 4.437486894s ago: executing program 6 (id=1600): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000000000000007001100441409010a010101000000060a010102000007a8000000001c00"/52, @ANYRES16=r0], 0x48}, 0x0) 4.23090237s ago: executing program 6 (id=1601): r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840100001900010000000000000000001d010900500012804c00c3070900bb1688d0fac08000000039002c00b9b933ec33fdf7db291cd960af91baee9260af6e6e20788c2f11cebe7f3478c404af147c7e7cfdf137bf00bc3db2726a76e2b04d3b0000001e010680f8552e"], 0x184}, 0x1, 0x0, 0x0, 0x4040491}, 0x4000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000002c0)="6bb28309fc58774f6eaa59b4ddeda052", 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x1000, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000001010000ff6f0091d7000000000000286b55be0c1aebecc5ec15", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket(0x2, 0x3, 0x100000001) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000001080)={@local, @random="00e300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x4, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010102, @multicast2}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r5 = open(&(0x7f0000000140)='./file1\x00', 0x14d840, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) fstatfs(r5, &(0x7f0000000000)=""/116) 4.20689301s ago: executing program 5 (id=1602): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x20c0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22d81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae09, &(0x7f0000000080)=""/1) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x130, 0xa, 0xd0e0000, 0x0, 0x100, 0x268, 0x1d8, 0x1d8, 0x268, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x3202, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x10, [], 0x0, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 3.889336285s ago: executing program 1 (id=1604): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271a, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x11000000, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 3.846822711s ago: executing program 1 (id=1605): dup(0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="b90d0400000f3226f20f1153450f01d1f30fa6d00f7830c7442400e82e0000c7442402b71d0000c7442406000000000f011424b92d0b00000f32b9c70b00000f320f828b3d0000c4c2790ec0", 0x4c}], 0x1, 0x11, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.781583716s ago: executing program 1 (id=1606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) (async) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r4 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) (async) r5 = dup(r3) write$FUSE_NOTIFY_STORE(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="280000000400000000000000008d99bb1f9f044a1b52de07000000000000000076cb34f329297200000003b56b530ca499f3602b80762aced2c700b7d2c4584cf330e3a9c028be5e87491b305a14577670bd85c0bd2341aaeea197c72595d07602470ee4fa57499b86f40bb2644a0d4df113ef4d132d6b45c600"/137], 0x28) (async) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r6, r4, 0x0, 0x4000000053d2) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010001fff26bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000001418b755f5646dc101006970366772657461700000009b0002800400120008000a00", @ANYRES32=r11, @ANYBLOB="08001f000b0000002c003480140035006d6163766c616e3100000000000000001400350076657468305f746f5f7465616d000000"], 0x78}}, 0x20004880) r12 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r12, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'wlan0\x00', 0x1}, 0x18) 3.327394925s ago: executing program 1 (id=1607): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r0 = userfaultfd(0x80001) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x3935, &(0x7f0000000040)={0x0, 0x83e2, 0x40, 0x3, 0x351}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x20004004}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x40000000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x328}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000380)={{&(0x7f0000271000/0x5000)=nil, 0x5000}, 0x1}) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) exit(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000240)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000080)={0x1, r5, 0x5, {0x5, 0x4}, 0x2}, 0x1) write$binfmt_script(r5, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, &(0x7f00000000c0)) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) r6 = open(0x0, 0x6aacc3, 0x40) sendfile(0xffffffffffffffff, r6, 0x0, 0x8000fffffffe) connect$vsock_stream(r6, &(0x7f0000000040), 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) 3.197492653s ago: executing program 6 (id=1608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000195c0)=""/102392, 0x18ff8) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}, 0xfffffffe}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r2, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0xfffff332, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe0}}], 0x1, 0x20008000) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) (fail_nth: 1) 2.553969424s ago: executing program 5 (id=1609): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}], 0x1, 0x3405) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) shutdown(r0, 0x1) 2.332985623s ago: executing program 1 (id=1610): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x4c831, 0xffffffffffffffff, 0x9fbfb000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x7, 0x7, 0x6b1cae2a, 0x20000ff, {{0x1b, 0x4, 0x2, 0x2, 0x6c, 0x66, 0x0, 0x7, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x42}, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x84, [@loopback]}, @timestamp={0x44, 0x24, 0xb2, 0x0, 0x6, [0x401, 0x7, 0x8, 0x32, 0x1, 0x9, 0x6, 0xda50]}, @generic={0x86, 0x7, "c2e33e8379"}, @timestamp={0x44, 0x20, 0x4d, 0x0, 0x3, [0x101, 0x9c2, 0x1ff, 0xf, 0xfffffffd, 0x4, 0x1]}]}}}}}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0xc0201, 0x0) futimesat(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) memfd_create(0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x3d3) syz_open_procfs$userns(0x0, &(0x7f0000000000)) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0003) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_io_uring_setup(0x48e6, 0x0, &(0x7f0000000240), &(0x7f0000000200)) syz_open_dev$vim2m(&(0x7f0000000040), 0x8000000000000000, 0x2) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, 0x0, 0x3, 0x2) 2.229125902s ago: executing program 6 (id=1611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000195c0)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}], 0x2f}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r4, &(0x7f0000003100)=@id, 0x10) sendmmsg$inet(r4, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) 1.639416796s ago: executing program 5 (id=1612): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = open_tree(0xffffffffffffffff, &(0x7f0000002400)='./file0\x00', 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000002440)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000024c0)={0x7, 0x8, 0xfa00, {r1, 0x4}}, 0x10) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0x5}, {0x9}}}, 0x24}}, 0x44004) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) (async) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x3, 0x6}, &(0x7f00000002c0)=0x90) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') (async) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r8, 0x80045515, &(0x7f0000000040)={0x6, 0x1}) (async) write$9p(r9, &(0x7f0000002340)="8020224351788557bf1d02a9227e7921c5694b64520bcc1ac6cfc90ea192024a4072b1a9017152c1e07692c36a4742a2f507e2c69a3adc8774653d96e008685af44ab6261f5a19cb1f9949511a2627dd2f1ef13e5bd7a7a0bc80f5", 0x5b) read$FUSE(r9, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r7, 0x8040942d, &(0x7f00000000c0)) (async) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f00000023c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) (async) pread64(r8, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 1.608581014s ago: executing program 0 (id=1613): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000003500)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xca, 0x1a, 0x60, 0x40, 0x2304, 0x20f, 0x3bde, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xac, 0x0, 0x0, 0xe1, 0x3, 0xb3}}]}}]}}, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) 1.24562101s ago: executing program 1 (id=1614): mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x14) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x22, 0x1, 0xfffffffc, 0xfffffffc, {0x2}}, 0x14}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x5}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000400)="191803c9fafce6b5fb7da46395454daebf8b03a48036c03cb38d1eaa77a440987b9aa85b3e85e317376338e2f4a6775a3da5203e5e18c9e42a35d53b29ba6ecb5ed57f93bfbc936c63a6ebb9be192b6db3a15e7a8cf4a87ffbba996e2ba8df525dfcb6187f5de0cbf2b2948267ebd21eaafcb211cf8adaafa259c970ea88471a038a88997a6f2365d427a5b0b15bc10a9a0f8f6901c9a5bdd758fae72ae7dfa8b6b55d035d9a666c806c", &(0x7f0000000100)=@tcp6=r4, 0x1}, 0x20) write$smackfs_cipso(0xffffffffffffffff, &(0x7f0000000080)={'@', 0x20, 0xb5}, 0x2d) 389.480191ms ago: executing program 3 (id=1615): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002640)="ef", 0x1}, {0x0}], 0x2, 0x0, 0x0, 0xf5ffffff}}], 0x1, 0x20000010) 377.240337ms ago: executing program 6 (id=1616): dup(0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="b90d0400000f3226f20f1153450f01d1f30fa6d00f7830c7442400e82e0000c7442402b71d0000c7442406000000000f011424b92d0b00000f32b9c70b00000f320f828b3d0000c4c2790ec0", 0x4c}], 0x1, 0x11, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 157.487478ms ago: executing program 3 (id=1617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}, {&(0x7f0000000440)="4641a8", 0x3}], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x5, 0x0, 0x6, 0x2, 0x0, 0x2, 0x6, 0x0, 0x8], 0x2000, 0x98302}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 0s ago: executing program 6 (id=1618): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3800}}, 0x1c}}, 0x0) close(r0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) kernel console output (not intermixed with test programs): 604129][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 291.660452][ T8116] tipc: Enabling of bearer rejected, already enabled [ 291.784358][ T8107] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.947736][ T8107] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.324431][ T977] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 292.843130][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.857228][ T977] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 292.887941][ T977] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 292.905770][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.959137][ T977] usb 6-1: config 0 descriptor?? [ 293.038809][ T8107] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.078246][ T8107] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.124394][ T8107] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.150094][ T5875] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 293.159585][ T8107] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.272389][ T8139] overlayfs: failed to clone lowerpath [ 293.330625][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 293.339503][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.355738][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.374327][ T5875] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 293.397222][ T977] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 293.418490][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.433874][ T977] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 293.438074][ T5875] usb 5-1: config 0 descriptor?? [ 293.463806][ T8143] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.559'. [ 293.494552][ T977] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 293.850322][ T8154] xt_CT: You must specify a L4 protocol and not use inversions on it [ 293.910095][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 294.564121][ T5875] kye 0003:0458:5016.0002: control desc unexpectedly large [ 294.641157][ T5875] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0002/input/input7 [ 294.645227][ T8133] bond0: entered promiscuous mode [ 294.657831][ T8133] bond_slave_0: entered promiscuous mode [ 294.667559][ T8133] bond_slave_1: entered promiscuous mode [ 294.677596][ T8133] bond0: left promiscuous mode [ 294.696920][ T8133] bond_slave_0: left promiscuous mode [ 294.770381][ T8133] bond_slave_1: left promiscuous mode [ 294.797107][ T5875] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0002/input/input8 [ 294.934655][ T5875] kye 0003:0458:5016.0002: input,hiddev1,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 295.671760][ T5947] usb 5-1: USB disconnect, device number 9 [ 295.856584][ T5875] usb 6-1: USB disconnect, device number 3 [ 295.920943][ T8172] FAULT_INJECTION: forcing a failure. [ 295.920943][ T8172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.935716][ T8172] CPU: 0 UID: 0 PID: 8172 Comm: syz.5.567 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 295.935745][ T8172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 295.935758][ T8172] Call Trace: [ 295.935767][ T8172] [ 295.935775][ T8172] dump_stack_lvl+0x241/0x360 [ 295.935821][ T8172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.935850][ T8172] ? __pfx__printk+0x10/0x10 [ 295.935890][ T8172] should_fail_ex+0x424/0x570 [ 295.935928][ T8172] _copy_to_user+0x31/0xb0 [ 295.935958][ T8172] simple_read_from_buffer+0xc4/0x170 [ 295.935987][ T8172] proc_fail_nth_read+0x1ef/0x260 [ 295.936015][ T8172] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.936044][ T8172] ? rw_verify_area+0x246/0x630 [ 295.936063][ T8172] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.936090][ T8172] vfs_read+0x21f/0xb90 [ 295.936116][ T8172] ? __pfx___mutex_lock+0x10/0x10 [ 295.936139][ T8172] ? __pfx_vfs_read+0x10/0x10 [ 295.936163][ T8172] ? __fget_files+0x2a/0x420 [ 295.936189][ T8172] ? __fget_files+0x39d/0x420 [ 295.936212][ T8172] ? __fget_files+0x2a/0x420 [ 295.936247][ T8172] ksys_read+0x19d/0x2d0 [ 295.936270][ T8172] ? __pfx_ksys_read+0x10/0x10 [ 295.936297][ T8172] ? do_syscall_64+0xb6/0x210 [ 295.936322][ T8172] do_syscall_64+0xf3/0x210 [ 295.936344][ T8172] ? clear_bhb_loop+0x45/0xa0 [ 295.936368][ T8172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.936388][ T8172] RIP: 0033:0x7fcab598cb7c [ 295.936406][ T8172] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 295.936423][ T8172] RSP: 002b:00007fcab6809030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 295.936445][ T8172] RAX: ffffffffffffffda RBX: 00007fcab5bb5fa0 RCX: 00007fcab598cb7c [ 295.936459][ T8172] RDX: 000000000000000f RSI: 00007fcab68090a0 RDI: 0000000000000003 [ 295.936472][ T8172] RBP: 00007fcab6809090 R08: 0000000000000000 R09: 0000000000000000 [ 295.936485][ T8172] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 295.936497][ T8172] R13: 0000000000000000 R14: 00007fcab5bb5fa0 R15: 00007ffc5d1bc848 [ 295.936530][ T8172] [ 296.149701][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.281204][ T8176] overlayfs: failed to clone lowerpath [ 296.330696][ T5968] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 296.492585][ T5968] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 38, using maximum allowed: 30 [ 296.521589][ T5968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 296.593191][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.574'. [ 297.128009][ T8191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.411687][ T5968] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 38 [ 297.493106][ T5968] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 297.567819][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.586639][ T5968] usb 4-1: config 0 descriptor?? [ 297.946695][ T8204] misc userio: The device must be registered before sending interrupts [ 298.453312][ T5968] pyra 0003:1E7D:2C24.0003: unknown main item tag 0x0 [ 298.665320][ T5968] pyra 0003:1E7D:2C24.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.3-1/input0 [ 298.843549][ T8208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.951316][ T8213] kvm: user requested TSC rate below hardware speed [ 299.000327][ T8208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.189992][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 301.230463][ T9] usb 4-1: USB disconnect, device number 12 [ 301.674647][ T8246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.126302][ T30] audit: type=1326 audit(1745294611.725:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8242 comm="syz.5.590" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcab598e169 code=0x0 [ 303.150142][ T30] audit: type=1326 audit(1745294611.785:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8242 comm="syz.5.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab598e169 code=0x7ffc0000 [ 303.172579][ T30] audit: type=1326 audit(1745294611.785:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8242 comm="syz.5.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab598e169 code=0x7ffc0000 [ 303.195192][ T30] audit: type=1326 audit(1745294611.785:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8242 comm="syz.5.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcab598e169 code=0x7ffc0000 [ 303.311733][ T30] audit: type=1326 audit(1745294611.785:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8242 comm="syz.5.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab598e169 code=0x7ffc0000 [ 303.893730][ T30] audit: type=1326 audit(1745294611.785:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8242 comm="syz.5.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab598e169 code=0x7ffc0000 [ 305.000005][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 306.104924][ T9] usb 5-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 306.117662][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.137232][ T9] usb 5-1: config 0 descriptor?? [ 306.353566][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.381982][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.394029][ T8297] 9pnet_fd: Insufficient options for proto=fd [ 306.498052][ T8303] ocfs2: Bad value for 'barrier' [ 306.580695][ T8303] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 306.616862][ T9] ntrig 0003:1B96:0003.0004: hidraw0: USB HID v1.01 Device [HID 1b96:0003] on usb-dummy_hcd.4-1/input0 [ 306.808446][ T8285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.817756][ T8285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.838977][ T9] usb 5-1: USB disconnect, device number 10 [ 308.195074][ T8328] x_tables: duplicate underflow at hook 1 [ 308.776191][ T8330] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.283742][ T8330] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.467022][ T8330] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.514867][ T8348] 9pnet_fd: Insufficient options for proto=fd [ 310.590893][ T8330] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.727403][ T8330] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.764793][ T8330] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.824435][ T8330] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.868486][ T8330] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.040179][ T8364] input: syz1 as /devices/virtual/input/input9 [ 311.491603][ T8373] ubi: mtd0 is already attached to ubi31 [ 314.501092][ T8393] netlink: 124 bytes leftover after parsing attributes in process `syz.1.633'. [ 315.322436][ T8402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.636'. [ 316.816611][ T8421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.173565][ T8424] ubi: mtd0 is already attached to ubi31 [ 318.150197][ T977] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 319.053592][ T977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.072626][ T977] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 319.094302][ T977] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 319.133290][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.198064][ T977] usb 6-1: config 0 descriptor?? [ 319.625034][ T8427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.643278][ T8427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.331550][ T8447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.340535][ T8447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.671251][ T8458] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.405033][ T977] Bluetooth: Can't get state to change to load configuration err [ 322.406835][ T8459] ptrace attach of "./syz-executor exec"[5833] was attempted by "./syz-executor exec"[8459] [ 322.876316][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.887547][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.925114][ T977] Bluetooth: Loading sysconfig file failed [ 322.950091][ T977] ath3k 6-1:0.0: probe with driver ath3k failed with error -16 [ 323.021488][ T977] usb 6-1: USB disconnect, device number 4 [ 323.847019][ T8472] loop6: detected capacity change from 0 to 524287999 [ 323.877453][ T8473] netlink: 20 bytes leftover after parsing attributes in process `syz.4.658'. [ 324.395675][ T8483] misc userio: The device must be registered before sending interrupts [ 324.436849][ T8482] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.787626][ T8482] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.035063][ T8482] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.252064][ T8482] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.206037][ T8515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.670'. [ 327.244907][ T8482] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.280163][ T8515] netlink: 40 bytes leftover after parsing attributes in process `syz.1.670'. [ 327.366466][ T8482] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.422908][ T8482] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.516518][ T8482] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.249051][ T8531] program syz.3.676 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.479057][ T8546] 9pnet_fd: Insufficient options for proto=fd [ 330.038315][ T8553] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 330.635644][ T5968] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 330.800075][ T5968] usb 5-1: Using ep0 maxpacket: 32 [ 330.813245][ T5968] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.859312][ T5968] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.884467][ T5968] usb 5-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 330.895795][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.907247][ T5968] usb 5-1: Product: syz [ 330.915053][ T5968] usb 5-1: Manufacturer: syz [ 330.922371][ T5968] usb 5-1: SerialNumber: syz [ 330.937014][ T5968] usb 5-1: config 0 descriptor?? [ 330.967855][ T5968] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 330.978062][ T8561] netlink: 'syz.3.686': attribute type 1 has an invalid length. [ 331.277150][ T8563] bond1: (slave gretap1): making interface the new active one [ 331.492955][ T8563] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 333.889200][ T8585] netlink: 64 bytes leftover after parsing attributes in process `syz.3.691'. [ 334.834193][ T9] usb 5-1: USB disconnect, device number 11 [ 334.942561][ T55] Bluetooth: hci3: unexpected event for opcode 0x080d [ 334.986459][ T8590] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.349879][ T8590] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.901512][ T8612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.677992][ T8590] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.896363][ T8590] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.229133][ T8623] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.951564][ T55] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 338.969971][ T55] Bluetooth: hci3: Injecting HCI hardware error event [ 338.978610][ T5843] Bluetooth: hci3: hardware error 0x00 [ 339.081203][ T8625] loop6: detected capacity change from 0 to 63 [ 339.145002][ T8590] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.216224][ T8590] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.519753][ T8590] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.551141][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'. [ 339.567715][ T8590] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.656573][ T8637] 8021q: adding VLAN 0 to HW filter on device team1 [ 341.190426][ T5843] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 343.811580][ T8686] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 344.680226][ T8691] input: syz1 as /devices/virtual/input/input10 [ 344.693429][ T8691] FAULT_INJECTION: forcing a failure. [ 344.693429][ T8691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.706917][ T8691] CPU: 0 UID: 0 PID: 8691 Comm: syz.4.723 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 344.706945][ T8691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 344.706958][ T8691] Call Trace: [ 344.706967][ T8691] [ 344.706976][ T8691] dump_stack_lvl+0x241/0x360 [ 344.707012][ T8691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.707042][ T8691] ? __pfx__printk+0x10/0x10 [ 344.707086][ T8691] should_fail_ex+0x424/0x570 [ 344.707124][ T8691] _copy_from_user+0x2d/0xb0 [ 344.707154][ T8691] input_event_from_user+0xbc/0x410 [ 344.707181][ T8691] ? __pfx_input_event_from_user+0x10/0x10 [ 344.707210][ T8691] ? input_event+0xad/0xe0 [ 344.707237][ T8691] uinput_write+0x2a9/0x10b0 [ 344.707274][ T8691] ? __pfx_uinput_write+0x10/0x10 [ 344.707300][ T8691] ? bpf_lsm_file_permission+0x9/0x10 [ 344.707337][ T8691] ? rw_verify_area+0x246/0x630 [ 344.707357][ T8691] ? __pfx_uinput_write+0x10/0x10 [ 344.707381][ T8691] vfs_write+0x2bc/0xd10 [ 344.707415][ T8691] ? __pfx_vfs_write+0x10/0x10 [ 344.707437][ T8691] ? __fget_files+0x2a/0x420 [ 344.707461][ T8691] ? __fget_files+0x2a/0x420 [ 344.707487][ T8691] ? __fget_files+0x39d/0x420 [ 344.707510][ T8691] ? __fget_files+0x2a/0x420 [ 344.707545][ T8691] ksys_write+0x19d/0x2d0 [ 344.707568][ T8691] ? __pfx_ksys_write+0x10/0x10 [ 344.707597][ T8691] ? do_syscall_64+0xb6/0x210 [ 344.707623][ T8691] do_syscall_64+0xf3/0x210 [ 344.707645][ T8691] ? clear_bhb_loop+0x45/0xa0 [ 344.707670][ T8691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.707690][ T8691] RIP: 0033:0x7faba078e169 [ 344.707708][ T8691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.707724][ T8691] RSP: 002b:00007faba160f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 344.707746][ T8691] RAX: ffffffffffffffda RBX: 00007faba09b5fa0 RCX: 00007faba078e169 [ 344.707761][ T8691] RDX: 000000000000045c RSI: 0000200000000900 RDI: 0000000000000003 [ 344.707774][ T8691] RBP: 00007faba160f090 R08: 0000000000000000 R09: 0000000000000000 [ 344.707787][ T8691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.707800][ T8691] R13: 0000000000000000 R14: 00007faba09b5fa0 R15: 00007fffcc01a288 [ 344.707834][ T8691] [ 345.134370][ T8693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.781067][ T8698] warning: `syz.5.724' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 346.850197][ T5968] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 347.411348][ T8701] ======================================================= [ 347.411348][ T8701] WARNING: The mand mount option has been deprecated and [ 347.411348][ T8701] and is ignored by this kernel. Remove the mand [ 347.411348][ T8701] option from the mount to silence this warning. [ 347.411348][ T8701] ======================================================= [ 347.530763][ T5968] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 347.538897][ T5968] usb 4-1: can't read configurations, error -71 [ 347.555661][ T8701] syz.0.727: attempt to access beyond end of device [ 347.555661][ T8701] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 347.570804][ T8701] efs: cannot read volume header [ 348.470539][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'. [ 348.576989][ T8724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.377944][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 352.730555][ T8777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.982937][ T8784] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073072017407) [ 356.023067][ T8784] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 356.248509][ T8793] misc userio: The device must be registered before sending interrupts [ 360.091618][ T8816] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.439007][ T8824] netlink: 'syz.4.760': attribute type 4 has an invalid length. [ 360.464770][ T8824] netlink: 'syz.4.760': attribute type 4 has an invalid length. [ 360.918755][ T8836] overlayfs: overlapping lowerdir path [ 361.014642][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.764'. [ 361.023762][ T8841] netlink: 40 bytes leftover after parsing attributes in process `syz.1.764'. [ 361.032713][ T8841] tipc: Enabling of bearer rejected, already enabled [ 361.163696][ T8844] netlink: 'syz.1.765': attribute type 10 has an invalid length. [ 361.228691][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.766'. [ 362.790212][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 363.324010][ T5947] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 363.496087][ T5947] usb 6-1: Using ep0 maxpacket: 32 [ 363.507725][ T5947] usb 6-1: config 0 has an invalid interface number: 37 but max is 1 [ 363.658773][ T5947] usb 6-1: config 0 has no interface number 1 [ 363.668428][ T5947] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 363.689933][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.698005][ T5947] usb 6-1: Product: syz [ 363.703817][ T5947] usb 6-1: Manufacturer: syz [ 363.709991][ T8883] overlayfs: failed to clone lowerpath [ 363.715694][ T5947] usb 6-1: SerialNumber: syz [ 363.734555][ T5947] usb 6-1: config 0 descriptor?? [ 363.831875][ T8837] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 363.953002][ T5947] qcserial 6-1:0.37: Qualcomm USB modem converter detected [ 364.182744][ T8894] xt_CT: You must specify a L4 protocol and not use inversions on it [ 364.672670][ T8899] netlink: 'syz.5.774': attribute type 3 has an invalid length. [ 364.766974][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.774'. [ 364.912994][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.785'. [ 365.167165][ T977] usb 6-1: USB disconnect, device number 5 [ 365.195934][ T977] qcserial 6-1:0.37: device disconnected [ 365.202494][ T5878] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 365.363728][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 365.377965][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.410297][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.421226][ T5878] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 365.448574][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.480982][ T5878] usb 4-1: config 0 descriptor?? [ 365.560171][ T8922] overlayfs: overlapping lowerdir path [ 365.953874][ T8934] netlink: 432 bytes leftover after parsing attributes in process `syz.5.792'. [ 366.041109][ T5878] savu 0003:1E7D:2D5A.0005: item fetching failed at offset 7/8 [ 366.063857][ T5878] savu 0003:1E7D:2D5A.0005: parse failed [ 366.079227][ T5878] savu 0003:1E7D:2D5A.0005: probe with driver savu failed with error -22 [ 366.101032][ T8936] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.108430][ T8936] IPv6: NLM_F_CREATE should be set when creating new route [ 366.180083][ T8936] lo: entered allmulticast mode [ 366.207810][ T8936] tunl0: entered allmulticast mode [ 366.230939][ T8936] gre0: entered allmulticast mode [ 366.293009][ T5947] usb 4-1: USB disconnect, device number 15 [ 366.300044][ T8936] gretap0: entered allmulticast mode [ 366.333344][ T8936] erspan0: entered allmulticast mode [ 366.389754][ T8936] ip_vti0: entered allmulticast mode [ 366.407669][ T8936] ip6_vti0: entered allmulticast mode [ 366.421880][ T8936] sit0: entered allmulticast mode [ 366.442578][ T8936] ip6tnl0: entered allmulticast mode [ 366.493866][ T8936] ip6gre0: entered allmulticast mode [ 366.544823][ T8936] syz_tun: entered allmulticast mode [ 366.571948][ T8936] ip6gretap0: entered allmulticast mode [ 366.598261][ T8936] bridge0: entered allmulticast mode [ 366.614950][ T8936] vcan0: entered allmulticast mode [ 366.644921][ T8936] bond0: entered allmulticast mode [ 366.662126][ T8936] bond_slave_0: entered allmulticast mode [ 366.667922][ T8936] bond_slave_1: entered allmulticast mode [ 366.674917][ T8936] batadv0: entered allmulticast mode [ 366.689562][ T8936] team0: entered allmulticast mode [ 366.695012][ T8936] team_slave_0: entered allmulticast mode [ 366.700909][ T8936] team_slave_1: entered allmulticast mode [ 366.748167][ T8936] dummy0: entered allmulticast mode [ 367.111458][ T8936] nlmon0: entered allmulticast mode [ 367.160370][ T8936] caif0: entered allmulticast mode [ 367.306552][ T8936] veth0: entered allmulticast mode [ 367.429218][ T8936] veth1: entered allmulticast mode [ 367.483530][ T8936] wg0: entered allmulticast mode [ 367.508210][ T8936] wg1: entered allmulticast mode [ 367.537350][ T8936] wg2: entered allmulticast mode [ 367.549192][ T8936] veth0_to_bridge: entered allmulticast mode [ 367.676008][ T8936] veth1_to_bridge: entered allmulticast mode [ 367.698944][ T8936] veth0_to_bond: entered allmulticast mode [ 367.727470][ T8936] veth1_to_bond: entered allmulticast mode [ 367.745398][ T8936] veth0_to_team: entered allmulticast mode [ 367.770106][ T8936] veth1_to_team: entered allmulticast mode [ 367.785117][ T8936] veth0_to_batadv: entered allmulticast mode [ 367.794233][ T8936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.806135][ T8936] batadv_slave_0: entered allmulticast mode [ 367.816157][ T8936] veth1_to_batadv: entered allmulticast mode [ 367.862441][ T8936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.900442][ T8936] batadv_slave_1: entered allmulticast mode [ 367.920958][ T8936] xfrm0: entered allmulticast mode [ 367.941990][ T8936] veth0_to_hsr: entered allmulticast mode [ 368.033648][ T8936] hsr_slave_0: entered allmulticast mode [ 368.088810][ T8936] veth1_to_hsr: entered allmulticast mode [ 368.153735][ T8936] hsr_slave_1: entered allmulticast mode [ 368.214075][ T8936] hsr0: entered allmulticast mode [ 368.280699][ T8936] veth1_virt_wifi: entered allmulticast mode [ 368.416440][ T8936] veth0_virt_wifi: entered allmulticast mode [ 368.438022][ T8936] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 368.490889][ T8936] veth1_vlan: entered allmulticast mode [ 368.500607][ T8936] veth0_vlan: entered allmulticast mode [ 368.538880][ T8936] vlan0: entered allmulticast mode [ 368.544449][ T8936] vlan1: entered allmulticast mode [ 368.584815][ T8936] macvlan0: entered allmulticast mode [ 368.616870][ T8936] macvlan1: entered allmulticast mode [ 368.645103][ T8936] ipvlan0: entered allmulticast mode [ 368.661910][ T8936] ipvlan1: entered allmulticast mode [ 368.678657][ T8936] veth1_macvtap: entered allmulticast mode [ 368.698993][ T8936] veth0_macvtap: entered allmulticast mode [ 368.719784][ T8936] macvtap0: entered allmulticast mode [ 368.731609][ T8936] macsec0: entered allmulticast mode [ 368.756427][ T8936] geneve0: entered allmulticast mode [ 368.778903][ T8936] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.798034][ T8936] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.808798][ T8936] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.828921][ T8936] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.850353][ T8936] geneve1: entered allmulticast mode [ 368.892236][ T8936] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 368.975106][ T8936] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 368.992084][ T8936] batadv0.5: entered allmulticast mode [ 369.001760][ T8936] vlan2: entered allmulticast mode [ 369.008496][ T8936] sit1: entered allmulticast mode [ 369.052952][ T8936] netdevsim netdevsim1 eth0: entered allmulticast mode [ 369.064595][ T8936] netdevsim netdevsim1 eth1: entered allmulticast mode [ 369.071827][ T8936] netdevsim netdevsim1 eth2: entered allmulticast mode [ 369.079010][ T8936] netdevsim netdevsim1 eth3: entered allmulticast mode [ 370.746569][ T8967] syz.3.803 (8967) used greatest stack depth: 17848 bytes left [ 372.096925][ T8993] sctp: [Deprecated]: syz.4.812 (pid 8993) Use of int in max_burst socket option deprecated. [ 372.096925][ T8993] Use struct sctp_assoc_value instead [ 374.536153][ T9017] capability: warning: `syz.5.819' uses 32-bit capabilities (legacy support in use) [ 374.815626][ T9022] netlink: 'syz.4.816': attribute type 13 has an invalid length. [ 375.123777][ T9022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.396850][ T9028] ptrace attach of "./syz-executor exec"[6299] was attempted by "./syz-executor exec"[9028] [ 376.414495][ T9039] netlink: 388 bytes leftover after parsing attributes in process `syz.3.826'. [ 376.694228][ T5968] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 376.837442][ T9035] x_tables: duplicate entry at hook 2 [ 376.865998][ T9034] x_tables: duplicate entry at hook 2 [ 376.865998][ T5968] usb 4-1: device descriptor read/64, error -71 [ 377.117391][ T5968] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 377.280701][ T5968] usb 4-1: device descriptor read/64, error -71 [ 377.365712][ T9048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.830'. [ 377.524564][ T5968] usb usb4-port1: attempt power cycle [ 378.360426][ T5968] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 378.558591][ T5968] usb 4-1: device descriptor read/8, error -71 [ 378.839946][ T5968] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 378.886931][ T5968] usb 4-1: device descriptor read/8, error -71 [ 378.988583][ T5947] kernel read not supported for file /sequencer (pid: 5947 comm: kworker/0:6) [ 379.020295][ T5968] usb usb4-port1: unable to enumerate USB device [ 380.370472][ T9087] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 381.654003][ T9097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 383.790856][ T9109] vlan2: entered allmulticast mode [ 383.983377][ T9109] bond0: entered allmulticast mode [ 383.996173][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.003167][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.025417][ T9109] bond_slave_0: entered allmulticast mode [ 384.031876][ T9115] netlink: 36 bytes leftover after parsing attributes in process `syz.3.848'. [ 384.572906][ T6235] IPVS: starting estimator thread 0... [ 384.575884][ T9109] bond_slave_1: entered allmulticast mode [ 384.681110][ T9117] IPVS: using max 29 ests per chain, 69600 per kthread [ 386.232162][ T5968] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 386.560000][ T5968] usb 5-1: Using ep0 maxpacket: 16 [ 388.631812][ T5968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.644214][ T5968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.654055][ T5968] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 389.643276][ T5968] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 389.928304][ T5968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.951032][ T5968] usb 5-1: config 0 descriptor?? [ 390.014970][ T9155] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.856'. [ 390.178892][ T5968] usbhid 5-1:0.0: can't add hid device: -71 [ 390.202922][ T5968] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 390.650130][ T9167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.791020][ T9167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.382216][ T5968] usb 5-1: USB disconnect, device number 12 [ 391.559177][ T9170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.859'. [ 391.597304][ T9174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'. [ 391.627758][ T9170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.859'. [ 394.272228][ T9212] ocfs2: Bad value for 'barrier' [ 394.631235][ T9212] input: syz1 as /devices/virtual/input/input12 [ 394.711489][ T6302] udevd[6302]: setting mode of /dev/input/js0 to 020664 failed: No such file or directory [ 394.753965][ T6302] udevd[6302]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 396.373762][ T9239] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 396.830169][ T9247] netlink: 'syz.3.873': attribute type 11 has an invalid length. [ 398.907114][ T9270] overlayfs: missing 'lowerdir' [ 398.979984][ T5968] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 399.229937][ T5968] usb 4-1: Using ep0 maxpacket: 8 [ 399.990996][ T9283] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 399.999659][ T9284] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 400.639902][ T5968] usb 4-1: unable to get BOS descriptor or descriptor too short [ 400.718394][ T5968] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 400.752772][ T5968] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 400.843341][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.876811][ T5968] usb 4-1: Product: syz [ 400.893964][ T5968] usb 4-1: Manufacturer: syz [ 400.911742][ T5968] usb 4-1: SerialNumber: syz [ 401.157625][ T5968] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 401.214264][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 401.289583][ T5968] snd-usb-audio 4-1:8.0: probe with driver snd-usb-audio failed with error -2 [ 401.343628][ T5968] usb 4-1: USB disconnect, device number 20 [ 401.389866][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 401.403938][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 401.425208][ T9] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 401.449881][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.480892][ T9] usb 6-1: config 0 descriptor?? [ 401.539947][ T5906] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 401.562078][ T6302] udevd[6302]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.714004][ T5906] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 401.731849][ T5906] usb 5-1: config 0 has no interfaces? [ 401.760555][ T5906] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 401.800102][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.824493][ T5906] usb 5-1: Product: syz [ 401.828730][ T5906] usb 5-1: Manufacturer: syz [ 401.847785][ T5906] usb 5-1: SerialNumber: syz [ 401.863131][ T5906] usb 5-1: config 0 descriptor?? [ 402.295016][ T30] audit: type=1326 audit(1745294711.265:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9305 comm="syz.4.885" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faba078e169 code=0x0 [ 404.341582][ T5906] usb 5-1: USB disconnect, device number 13 [ 404.559009][ T9346] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.628197][ T9349] overlayfs: missing 'lowerdir' [ 404.961715][ T9346] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.950214][ T9346] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.171510][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 406.177527][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 406.348011][ T9] usb 6-1: USB disconnect, device number 6 [ 406.464322][ T9346] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.512637][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 406.521732][ T9370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.775024][ T9346] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.873785][ T9346] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.926603][ T9346] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.980429][ T9346] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.992371][ T3013] Bluetooth: Error in BCSP hdr checksum [ 407.402923][ T3013] Bluetooth: Error in BCSP hdr checksum [ 407.663832][ T13] Bluetooth: Error in BCSP hdr checksum [ 407.941524][ T3013] Bluetooth: Error in BCSP hdr checksum [ 408.381085][ T3013] Bluetooth: Error in BCSP hdr checksum [ 408.888953][ T9398] xt_nat: multiple ranges no longer supported [ 408.932740][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 409.085331][ T9401] netlink: 'syz.1.905': attribute type 23 has an invalid length. [ 409.182340][ T55] Bluetooth: hci5: command 0x1003 tx timeout [ 409.647664][ T6052] Bluetooth: Error in BCSP hdr checksum [ 409.942918][ T13] Bluetooth: Error in BCSP hdr checksum [ 409.997956][ T6052] Bluetooth: Error in BCSP hdr checksum [ 411.091436][ T5947] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 411.311494][ T9422] trusted_key: syz.3.912 sent an empty control message without MSG_MORE. [ 411.394979][ T9429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.010615][ T9422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.020785][ T5947] usb 5-1: Using ep0 maxpacket: 8 [ 412.050775][ T5947] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.092287][ T9422] bond0: (slave rose0): Enslaving as an active interface with an up link [ 412.102896][ T5947] usb 5-1: config 0 has no interfaces? [ 412.121355][ T5947] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.139868][ T5947] usb 5-1: config 0 has no interfaces? [ 412.158277][ T5947] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.179156][ T5947] usb 5-1: config 0 has no interfaces? [ 412.193115][ T5947] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 412.222803][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.241271][ T5947] usb 5-1: Product: syz [ 412.335872][ T5947] usb 5-1: Manufacturer: syz [ 412.381230][ T5947] usb 5-1: SerialNumber: syz [ 413.070803][ T5947] usb 5-1: config 0 descriptor?? [ 413.077774][ T9441] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 413.103171][ T9441] tipc: Enabled bearer , priority 10 [ 413.347837][ T5947] usb 5-1: USB disconnect, device number 14 [ 413.447635][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'. [ 413.587486][ T9467] kAFS: unable to lookup cell '.,' [ 414.335592][ T9487] SET target dimension over the limit! [ 414.403431][ T9491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.930'. [ 414.640357][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.5.932'. [ 414.670665][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.5.932'. [ 414.724549][ T9498] bond0: entered promiscuous mode [ 414.737202][ T9498] bond_slave_0: entered promiscuous mode [ 414.749674][ T9498] bond_slave_1: entered promiscuous mode [ 414.766530][ T9498] bridge0: entered promiscuous mode [ 415.196135][ T9512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.935'. [ 416.378192][ T9526] netlink: 32 bytes leftover after parsing attributes in process `syz.5.939'. [ 417.020208][ T6235] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 417.230748][ T9533] xt_CT: No such helper "pptp" [ 417.564425][ T6235] usb 4-1: Using ep0 maxpacket: 8 [ 417.578927][ T6235] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 417.594993][ T6235] usb 4-1: config 179 has no interface number 0 [ 417.602354][ T6235] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 417.613909][ T6235] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 417.627436][ T6235] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 417.640030][ T6235] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 418.610454][ T6235] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 418.630627][ T6235] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 418.640198][ T6235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.067259][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.944'. [ 419.181694][ T9532] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 419.602386][ T6235] usb 4-1: USB disconnect, device number 21 [ 419.602463][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 419.602515][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 419.716070][ T9568] netlink: 260 bytes leftover after parsing attributes in process `syz.3.950'. [ 420.108365][ T9576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.951'. [ 420.186026][ T9576] vlan3: entered promiscuous mode [ 420.191669][ T9576] bridge0: entered promiscuous mode [ 420.466325][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.954'. [ 420.681216][ T9588] netlink: 20 bytes leftover after parsing attributes in process `syz.5.956'. [ 420.735477][ T9588] vlan2: entered promiscuous mode [ 420.741446][ T9588] ip6gretap0: entered promiscuous mode [ 420.860728][ T5968] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 421.034440][ T5968] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 421.067341][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.092157][ T5968] usb 5-1: Product: syz [ 421.105411][ T5968] usb 5-1: Manufacturer: syz [ 421.126389][ T5968] usb 5-1: SerialNumber: syz [ 421.165523][ T5968] usb 5-1: config 0 descriptor?? [ 421.196516][ T5968] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 421.270141][ T5878] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 421.452959][ T5878] usb 4-1: config 0 interface 0 altsetting 248 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.477033][ T5878] usb 4-1: config 0 interface 0 altsetting 248 endpoint 0x81 has invalid maxpacket 1032, setting to 1024 [ 421.493059][ T5878] usb 4-1: config 0 interface 0 has no altsetting 0 [ 421.502019][ T5878] usb 4-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 421.517172][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.578558][ T5878] usb 4-1: config 0 descriptor?? [ 421.582895][ T9606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.962'. [ 421.598184][ T9591] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 421.881728][ T5968] gspca_sunplus: reg_r err -71 [ 421.895328][ T5968] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 421.925501][ T5968] usb 5-1: USB disconnect, device number 15 [ 422.065829][ T5878] semitek 0003:1EA7:0907.0006: item fetching failed at offset 6/7 [ 422.093470][ T5878] semitek 0003:1EA7:0907.0006: probe with driver semitek failed with error -22 [ 422.352523][ T9591] netlink: 'syz.3.957': attribute type 11 has an invalid length. [ 422.421428][ T9624] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[9624] [ 422.732966][ T9637] misc userio: The device must be registered before sending interrupts [ 424.387807][ T5878] usb 4-1: USB disconnect, device number 22 [ 424.483825][ T9655] netlink: 'syz.1.976': attribute type 11 has an invalid length. [ 426.191572][ T9677] fuse: Bad value for 'rootmode' [ 426.864547][ T9694] block nbd4: NBD_DISCONNECT [ 427.301768][ T9702] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 427.459471][ T9704] netlink: 'syz.4.990': attribute type 1 has an invalid length. [ 427.467459][ T9704] netlink: 244 bytes leftover after parsing attributes in process `syz.4.990'. [ 427.811836][ T9711] netlink: 28 bytes leftover after parsing attributes in process `syz.5.992'. [ 427.853225][ T5947] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 427.994078][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 428.021933][ T5947] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 428.038813][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.076955][ T5947] usb 4-1: config 0 descriptor?? [ 428.101593][ T5947] cp210x 4-1:0.0: cp210x converter detected [ 428.160875][ T9] usb 5-1: config 0 has an invalid interface number: 95 but max is 0 [ 428.186394][ T9] usb 5-1: config 0 has no interface number 0 [ 428.201154][ T9] usb 5-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 428.218070][ T9] usb 5-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 428.243139][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.256843][ T9] usb 5-1: Product: syz [ 428.262297][ T9] usb 5-1: Manufacturer: syz [ 428.268581][ T9] usb 5-1: SerialNumber: syz [ 428.284892][ T9] usb 5-1: config 0 descriptor?? [ 428.714907][ T9709] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 429.237957][ T9719] netlink: 'syz.3.991': attribute type 1 has an invalid length. [ 429.246473][ T9719] netlink: 224 bytes leftover after parsing attributes in process `syz.3.991'. [ 430.009378][ T5947] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 430.231261][ T9727] netlink: 16 bytes leftover after parsing attributes in process `syz.1.996'. [ 431.165392][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 432.976779][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 432.984041][ T9] usb 5-1: MIDIStreaming interface descriptor not found [ 433.083665][ T5947] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 433.135915][ T5947] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 433.146847][ T9] usb 5-1: USB disconnect, device number 16 [ 433.183162][ T5947] usb 4-1: cp210x converter now attached to ttyUSB0 [ 433.346989][ T5947] usb 4-1: USB disconnect, device number 23 [ 433.439235][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.998'. [ 434.036063][ T9747] misc userio: The device must be registered before sending interrupts [ 434.107814][ T5947] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 434.212512][ T5947] cp210x 4-1:0.0: device disconnected [ 434.633086][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.131578][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 436.180033][ T5947] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 436.352204][ T9789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.363152][ T5947] usb 5-1: unable to get BOS descriptor or descriptor too short [ 436.390402][ T5947] usb 5-1: not running at top speed; connect to a high speed hub [ 436.420159][ T5947] usb 5-1: config 5 has an invalid interface number: 246 but max is 0 [ 436.428391][ T5947] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 436.456658][ T5947] usb 5-1: config 5 has no interface number 0 [ 436.463974][ T5947] usb 5-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 436.529574][ T5947] usb 5-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.573436][ T5947] usb 5-1: config 5 interface 246 has no altsetting 0 [ 436.604681][ T5947] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 436.634794][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.662000][ T5947] usb 5-1: Manufacturer: 콱羕샊ⲡᑯꞠ淈匍⮡臫鉉ޖ [ 436.701479][ T5947] usb 5-1: SerialNumber: Я [ 436.970219][ T9783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.970581][ T9783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.009684][ T6052] Bluetooth: hci5: Frame reassembly failed (-90) [ 437.010686][ T9783] Bluetooth: hci5: Frame reassembly failed (-84) [ 437.106479][ T9798] erspan0: left allmulticast mode [ 437.120497][ T9798] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1012'. [ 437.143652][ T9798] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 437.179908][ T5878] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 437.350533][ T5878] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 437.379902][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.399319][ T5878] usb 4-1: Product: syz [ 437.408193][ T5878] usb 4-1: Manufacturer: syz [ 437.421131][ T5878] usb 4-1: SerialNumber: syz [ 437.442909][ T5878] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 437.521357][ T6235] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 437.638797][ T9808] misc userio: The device must be registered before sending interrupts [ 438.564426][ T6235] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 438.617619][ T10] usb 4-1: USB disconnect, device number 24 [ 438.682860][ T6235] ath9k_htc: Failed to initialize the device [ 439.007828][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 439.030348][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 439.274803][ T6052] usb 5-1: Failed to submit usb control message: -71 [ 439.282531][ T5947] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 439.292310][ T6052] usb 5-1: unable to send the bmi data to the device: -71 [ 439.310326][ T5947] usb 5-1: USB disconnect, device number 17 [ 439.316511][ T6052] usb 5-1: unable to get target info from device [ 439.329891][ T6052] usb 5-1: could not get target info (-71) [ 439.336061][ T6052] usb 5-1: could not probe fw (-71) [ 440.187555][ T9827] Invalid ELF header type: 2 != 1 [ 440.450856][ T9838] netlink: 'syz.1.1024': attribute type 5 has an invalid length. [ 440.532037][ T9839] set match dimension is over the limit! [ 440.576092][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1024'. [ 441.320618][ T9842] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1025'. [ 443.983496][ T9863] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 444.405356][ T9870] netlink: 'syz.4.1030': attribute type 11 has an invalid length. [ 445.475471][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.234016][ T9889] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 451.177101][ T9942] ubi: mtd0 is already attached to ubi31 [ 451.968024][ T9949] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1052'. [ 451.984554][ T9949] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1052'. [ 452.651776][ T9958] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 453.100802][ T9959] Unknown options in mask 5 [ 453.588754][ T9973] Cannot find set identified by id 0 to match [ 454.623652][ T5947] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 454.750322][ T9970] 9pnet_fd: p9_fd_create_unix (9970): problem connecting socket: ./file0/file0: -2 [ 454.899908][ T5947] usb 4-1: device descriptor read/64, error -71 [ 455.860824][ T9981] overlayfs: failed to clone lowerpath [ 455.870057][ T5947] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 456.188643][ T9990] netlink: 'syz.0.1067': attribute type 4 has an invalid length. [ 456.239904][ T5947] usb 4-1: device descriptor read/64, error -71 [ 456.353900][ T5947] usb usb4-port1: attempt power cycle [ 456.699983][ T5947] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 456.750988][ T5947] usb 4-1: Using ep0 maxpacket: 16 [ 456.788318][ T5947] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 456.801548][ T5947] usb 4-1: can't read configurations, error -61 [ 457.009948][ T5947] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 457.030558][ T5947] usb 4-1: Using ep0 maxpacket: 16 [ 457.037800][ T5947] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 457.052395][ T5947] usb 4-1: can't read configurations, error -61 [ 457.058970][ T5947] usb usb4-port1: unable to enumerate USB device [ 457.324020][T10013] set match dimension is over the limit! [ 458.648266][T10020] 9pnet_fd: Insufficient options for proto=fd [ 459.384365][ T5947] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 460.627182][ T5947] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 460.640977][ T5947] usb 6-1: config 0 interface 0 has no altsetting 0 [ 460.650422][ T5947] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 460.659675][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 461.517112][ T5947] usb 6-1: Product: syz [ 461.521555][ T5947] usb 6-1: Manufacturer: syz [ 461.526199][ T5947] usb 6-1: SerialNumber: syz [ 461.546220][ T5947] usb 6-1: config 0 descriptor?? [ 461.559876][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 461.584221][ T5947] usb 6-1: selecting invalid altsetting 0 [ 461.769945][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 461.778613][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.852018][ T5878] usb 6-1: USB disconnect, device number 7 [ 461.876190][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 461.887931][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.903734][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.920008][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 461.929470][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 461.948212][ T10] usb 4-1: Product: syz [ 461.954702][ T10] usb 4-1: Manufacturer: syz [ 462.018898][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 462.045201][T10048] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 462.053225][T10048] team0: Device macvtap1 is already an upper device of the team interface [ 462.083405][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 462.142825][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 462.253083][T10054] set match dimension is over the limit! [ 462.647317][ T6303] udevd[6303]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.930632][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 463.035939][T10057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.251247][T10056] netlink: 'syz.3.1078': attribute type 4 has an invalid length. [ 463.336414][ T5906] usb 4-1: USB disconnect, device number 29 [ 465.392584][T10079] xt_CT: You must specify a L4 protocol and not use inversions on it [ 468.456402][T10099] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1097'. [ 470.145687][ T30] audit: type=1326 audit(1745294779.115:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10113 comm="syz.3.1101" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e2758e169 code=0x0 [ 470.316485][T10095] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 470.434353][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'. [ 470.459403][T10117] . (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 471.471313][T10127] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1103'. [ 471.493210][T10127] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1103'. [ 471.790496][T10134] SET target dimension over the limit! [ 472.030589][T10136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1107'. [ 472.435250][T10149] sctp: [Deprecated]: syz.1.1112 (pid 10149) Use of int in maxseg socket option. [ 472.435250][T10149] Use struct sctp_assoc_value instead [ 472.470707][ T5876] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 473.413168][ T5906] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 473.440597][ T5876] usb 6-1: Using ep0 maxpacket: 32 [ 474.350380][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 474.392114][ T5906] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 474.412630][ T5906] usb 4-1: config 0 has no interface number 0 [ 474.430033][ T5906] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 474.452716][ T5906] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 474.470083][ T5906] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 474.748478][ T5906] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 474.797394][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.833271][ T5906] usb 4-1: Product: syz [ 474.855077][ T5906] usb 4-1: Manufacturer: syz [ 474.883487][ T5906] usb 4-1: SerialNumber: syz [ 474.935786][ T5906] usb 4-1: config 0 descriptor?? [ 475.016140][ T5906] usb 4-1: can't set config #0, error -71 [ 475.083817][ T5906] usb 4-1: USB disconnect, device number 30 [ 475.610487][ T5876] usb 6-1: unable to get BOS descriptor or descriptor too short [ 475.642575][ T5876] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 475.680708][ T5876] usb 6-1: can't read configurations, error -71 [ 475.697907][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1122'. [ 477.489492][T10198] Cannot find set identified by id 0 to match [ 479.094558][T10224] syz_tun: entered promiscuous mode [ 479.104039][T10224] syz_tun: left promiscuous mode [ 479.160197][ T5947] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 479.192966][T10222] x_tables: duplicate underflow at hook 1 [ 479.452146][ T5947] usb 5-1: Using ep0 maxpacket: 16 [ 479.700841][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.717787][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.733943][ T5947] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 479.776889][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.795166][ T5947] usb 5-1: config 0 descriptor?? [ 479.809388][T10232] batman_adv: batadv0: Adding interface: ip6gretap1 [ 479.816605][T10232] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.842701][T10232] batman_adv: batadv0: Interface activated: ip6gretap1 [ 479.878089][T10231] syz_tun: entered allmulticast mode [ 479.889159][T10229] syz_tun: left allmulticast mode [ 480.360745][T10245] Cannot find set identified by id 0 to match [ 481.105346][ T5947] usbhid 5-1:0.0: can't add hid device: -71 [ 481.111522][ T5947] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 481.138057][ T5947] usb 5-1: USB disconnect, device number 18 [ 481.411621][T10258] fuse: Bad value for 'rootmode' [ 483.510061][ T5947] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 483.734801][T10280] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 483.783106][T10283] Cannot find set identified by id 0 to match [ 484.151075][T10284] netlink: 'syz.3.1152': attribute type 11 has an invalid length. [ 484.922989][ T5947] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 484.944301][ T5947] usb 5-1: config 0 has no interface number 0 [ 484.959939][ T5947] usb 5-1: config 0 interface 214 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 484.975529][ T5947] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 485.010609][ T5947] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 485.023446][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 485.039591][T10294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1157'. [ 485.048873][ T5947] usb 5-1: Manufacturer: syz [ 485.048911][ T5947] usb 5-1: SerialNumber: syz [ 485.067774][ T5947] usb 5-1: config 0 descriptor?? [ 485.084554][T10274] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 485.100997][T10294] geneve0: left allmulticast mode [ 485.114244][T10295] fuse: Bad value for 'user_id' [ 485.126480][T10295] fuse: Bad value for 'user_id' [ 485.231876][ T30] audit: type=1326 audit(1745294794.195:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10296 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab598e169 code=0x7ffc0000 [ 485.289991][ T30] audit: type=1326 audit(1745294794.195:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10296 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab598e169 code=0x7ffc0000 [ 485.500156][ T5947] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 485.507245][ T5947] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 486.160173][ T30] audit: type=1326 audit(1745294794.195:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10296 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcab598e169 code=0x7ffc0000 [ 486.256383][ T30] audit: type=1326 audit(1745294794.195:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10296 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab598e169 code=0x7ffc0000 [ 486.283865][ T5947] usb 5-1: USB disconnect, device number 19 [ 486.310007][ T30] audit: type=1326 audit(1745294794.215:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10296 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcab598e169 code=0x7ffc0000 [ 486.334081][ T30] audit: type=1326 audit(1745294794.225:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10296 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab598e169 code=0x7ffc0000 [ 486.369659][ T30] audit: type=1326 audit(1745294794.225:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10296 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab598e169 code=0x7ffc0000 [ 486.910986][T10317] syz.0.1163 uses old SIOCAX25GETINFO [ 487.666125][T10319] fuse: Bad value for 'rootmode' [ 489.513672][T10341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 490.642460][T10353] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1175'. [ 491.546415][T10355] xt_CT: No such helper "pptp" [ 492.213090][ T6235] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 492.398346][T10367] netlink: 'syz.1.1179': attribute type 10 has an invalid length. [ 492.407995][T10367] dummy0: left allmulticast mode [ 492.427149][T10367] dummy0: entered allmulticast mode [ 492.433685][T10367] team0: Port device dummy0 added [ 492.629906][ T6235] usb 5-1: Using ep0 maxpacket: 8 [ 492.658740][ T6235] usb 5-1: config 1 has an invalid interface number: 6 but max is 2 [ 493.325360][ T6235] usb 5-1: config 1 has no interface number 1 [ 493.368411][ T6235] usb 5-1: config 1 interface 6 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 493.414181][ T6235] usb 5-1: config 1 interface 6 has no altsetting 0 [ 493.517156][ T6235] usb 5-1: string descriptor 0 read error: -71 [ 493.535557][ T6235] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 493.547740][ T6235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.767217][ T6235] usb 5-1: can't set config #1, error -71 [ 493.811614][ T6235] usb 5-1: USB disconnect, device number 20 [ 495.282374][T10387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 498.006750][T10434] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1199'. [ 501.069327][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 501.076380][T10445] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 501.145334][T10482] netlink: 600 bytes leftover after parsing attributes in process `syz.1.1214'. [ 501.156994][T10482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1214'. [ 501.168617][T10482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1214'. [ 501.179625][T10482] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1214'. [ 501.249695][T10445] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 501.318005][T10445] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 501.348457][T10445] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 501.614280][T10445] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 503.176520][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 503.190714][T10445] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 503.380312][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 503.605861][T10499] bridge1: entered allmulticast mode [ 503.670137][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 504.325896][T10516] SET target dimension over the limit! [ 504.963815][T10500] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1219'. [ 505.298033][T10519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 505.376266][T10525] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.403724][T10525] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.430045][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 505.527008][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1227'. [ 505.554502][T10529] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 505.561892][T10529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.849977][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 506.269789][T10540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 506.358318][T10537] ip6tnl1: entered promiscuous mode [ 506.363866][T10537] ip6tnl1: entered allmulticast mode [ 506.601785][T10535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.657442][T10544] Unknown options in mask 5 [ 506.759177][T10546] can: request_module (can-proto-0) failed. [ 507.130557][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.704725][ T6235] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 508.693773][ T5876] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 508.706101][T10568] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 508.719972][ T6235] usb 6-1: Using ep0 maxpacket: 8 [ 508.728547][ T6235] usb 6-1: config 32 has an invalid interface number: 1 but max is 0 [ 508.741191][ T6235] usb 6-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 508.751972][ T6235] usb 6-1: config 32 has no interface number 0 [ 508.758292][T10568] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 508.760759][ T6235] usb 6-1: New USB device found, idVendor=20a6, idProduct=1105, bcdDevice=c2.eb [ 508.773522][ T6235] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.782301][ T6235] usb 6-1: Product: syz [ 508.782338][T10568] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 508.790074][ T6235] usb 6-1: Manufacturer: syz [ 508.797308][ T6235] usb 6-1: SerialNumber: syz [ 508.838644][ T6235] usb 6-1: bad CDC descriptors [ 508.849285][ T6235] option 6-1:32.1: GSM modem (1-port) converter detected [ 508.865646][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 508.896570][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short [ 508.921735][ T5876] usb 4-1: config 4 interface 0 has no altsetting 0 [ 508.931799][ T5876] usb 4-1: string descriptor 0 read error: -22 [ 508.938268][ T5876] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 508.943239][T10580] misc userio: The device must be registered before sending interrupts [ 508.953233][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.982526][ T5876] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 509.046763][ T5947] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 509.148505][ T5876] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 509.528157][T10558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.547849][ T5876] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 509.556383][T10558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.566906][ T5876] usb 4-1: media controller created [ 509.570793][ T5947] usb 5-1: too many configurations: 253, using maximum allowed: 8 [ 509.580942][ T6235] usb 6-1: USB disconnect, device number 10 [ 509.594092][ T6235] option 6-1:32.1: device disconnected [ 509.627994][ T5947] usb 5-1: string descriptor 0 read error: -71 [ 509.641967][ T5947] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 509.680799][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 509.691945][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.740012][ T5947] usb 5-1: can't set config #1, error -71 [ 509.771822][ T5947] usb 5-1: USB disconnect, device number 21 [ 509.851941][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 510.979506][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 510.985716][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 511.020510][T10595] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1238'. [ 511.311950][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'. [ 512.424645][T10614] netlink: 'syz.1.1249': attribute type 11 has an invalid length. [ 512.437214][T10612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 512.461836][T10618] SET target dimension over the limit! [ 512.944037][ T6235] usb 4-1: USB disconnect, device number 31 [ 512.977300][T10624] PKCS8: Unsupported PKCS#8 version [ 513.006818][T10623] netlink: 'syz.0.1252': attribute type 10 has an invalid length. [ 513.422526][ T6235] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 513.670607][ T6235] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 513.700636][ T6235] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 513.739228][ T6235] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 513.784663][ T6235] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 513.826549][ T6235] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 513.927208][ T6235] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 513.941210][ T6235] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 513.953066][ T6235] usb 4-1: Product: syz [ 513.957274][ T6235] usb 4-1: Manufacturer: syz [ 513.982713][ T6235] cdc_wdm 4-1:1.0: skipping garbage [ 513.989620][ T6235] cdc_wdm 4-1:1.0: skipping garbage [ 514.006217][ T6235] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 514.018088][ T6235] cdc_wdm 4-1:1.0: Unknown control protocol [ 514.690876][T10658] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 515.016500][T10663] netlink: 'syz.5.1264': attribute type 11 has an invalid length. [ 516.047907][ T5878] usb 4-1: USB disconnect, device number 32 [ 516.230820][T10626] netlink: 'syz.3.1255': attribute type 4 has an invalid length. [ 517.130100][T10677] xt_CT: You must specify a L4 protocol and not use inversions on it [ 517.660455][T10679] ntfs3(nullb0): Primary boot signature is not NTFS. [ 517.676287][T10679] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 518.487786][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1271'. [ 518.511769][T10687] netlink: 432 bytes leftover after parsing attributes in process `syz.5.1272'. [ 518.519081][T10691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1273'. [ 518.558425][T10691] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.567199][T10691] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.575506][T10691] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.583800][T10691] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.636102][T10691] vxlan0: entered promiscuous mode [ 518.771327][T10700] misc userio: The device must be registered before sending interrupts [ 518.782859][T10701] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 519.063349][T10705] netlink: 'syz.3.1278': attribute type 11 has an invalid length. [ 520.925503][T10731] netlink: 'syz.3.1288': attribute type 11 has an invalid length. [ 521.096128][T10735] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 521.869340][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 522.031962][T10743] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1291'. [ 522.053192][T10743] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1291'. [ 522.452662][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'. [ 523.088879][T10754] misc userio: The device must be registered before sending interrupts [ 523.184284][T10760] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 523.243441][T10760] CIFS mount error: No usable UNC path provided in device string! [ 523.243441][T10760] [ 523.268381][T10760] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 524.147685][ T6235] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 524.551753][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1301'. [ 524.551900][ T6235] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 524.569245][ T6235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 524.628829][ T6235] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 524.906628][ T6235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 525.231310][ T6235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 525.257660][T10783] siw: device registration error -23 [ 525.268886][T10783] fuse: Unknown parameter '000000000000000000030xffffffffffffffff' [ 525.364834][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 525.373778][ T6235] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 525.389569][ T6235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 525.401252][ T6235] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 525.429501][ T6235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 525.463855][ T6235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 525.482063][ T6235] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 525.490136][ T6235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 525.502152][ T6235] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 525.514358][ T6235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 525.526149][ T6235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 525.552039][ T6235] usb 4-1: string descriptor 0 read error: -22 [ 525.567480][ T6235] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 525.579866][ T6235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.709834][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 525.732285][ T10] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 526.655242][ T10] usb 5-1: config 0 has no interface number 0 [ 526.667929][ T10] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 526.728070][ T10] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 526.750163][ T10] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 526.754821][ T6235] usb 4-1: can't set config #168, error -71 [ 526.762752][ T10] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x9 has invalid maxpacket 19604, setting to 1024 [ 526.802280][ T10] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 526.815326][ T10] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 25135, setting to 1024 [ 526.827777][ T10] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 526.841963][ T10] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 526.851298][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.859315][ T10] usb 5-1: Product: syz [ 526.919352][ T6235] usb 4-1: USB disconnect, device number 33 [ 526.933752][ T10] usb 5-1: Manufacturer: syz [ 526.955032][ T10] usb 5-1: SerialNumber: syz [ 527.087213][ T10] usb 5-1: config 0 descriptor?? [ 528.375069][ T10] usb 5-1: can't set config #0, error -71 [ 528.382691][ T10] usb 5-1: USB disconnect, device number 22 [ 528.489106][T10804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1307'. [ 529.010795][T10804] vlan3: entered promiscuous mode [ 529.015859][T10804] bridge0: entered promiscuous mode [ 529.074517][T10812] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 529.195586][T10815] program syz.5.1314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.101449][ T30] audit: type=1326 audit(1745294839.075:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10811 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1158e169 code=0x7ffc0000 [ 530.140765][ T5947] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 530.178892][ T30] audit: type=1326 audit(1745294839.075:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10811 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4f1158e169 code=0x7ffc0000 [ 530.421931][ T30] audit: type=1326 audit(1745294839.075:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10811 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1158e169 code=0x7ffc0000 [ 530.445355][ T30] audit: type=1326 audit(1745294839.075:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10811 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f1158e169 code=0x7ffc0000 [ 531.392325][ T30] audit: type=1326 audit(1745294839.075:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10811 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1158e169 code=0x7ffc0000 [ 531.414307][ T30] audit: type=1326 audit(1745294839.075:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10811 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4f1158e169 code=0x7ffc0000 [ 531.479859][ T30] audit: type=1326 audit(1745294839.075:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10811 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1158e169 code=0x7ffc0000 [ 531.660490][ T30] audit: type=1326 audit(1745294839.075:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10811 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4f1158e169 code=0x7ffc0000 [ 531.662520][ T5947] usb 5-1: Using ep0 maxpacket: 32 [ 531.684062][ T30] audit: type=1326 audit(1745294839.075:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10811 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1158e169 code=0x7ffc0000 [ 531.717876][ T30] audit: type=1326 audit(1745294839.075:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10811 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1158e169 code=0x7ffc0000 [ 532.129265][T10842] Cannot find set identified by id 0 to match [ 532.745805][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1320'. [ 533.299475][ T5947] usb 5-1: unable to get BOS descriptor or descriptor too short [ 533.318040][ T5947] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 533.345004][ T5947] usb 5-1: can't read configurations, error -71 [ 533.488457][T10851] random: crng reseeded on system resumption [ 536.320071][T10872] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1330'. [ 536.735153][T10872] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1330'. [ 536.925426][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'. [ 537.157853][T10885] set match dimension is over the limit! [ 538.329952][ T5947] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 538.500036][ T6235] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 538.680037][ T6235] usb 4-1: Using ep0 maxpacket: 32 [ 538.692663][ T6235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.693870][ T5947] usb 5-1: Using ep0 maxpacket: 32 [ 538.727470][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.730418][ T6235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.770023][ T6235] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 538.778343][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.789517][ T6235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.814771][ T5947] usb 5-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 538.831255][ T6235] usb 4-1: config 0 descriptor?? [ 538.846637][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.881926][ T5947] usb 5-1: config 0 descriptor?? [ 539.285920][ T6235] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 539.369291][T10913] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1341'. [ 539.378643][T10913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.389854][T10900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.399302][T10900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.451768][T10900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.494852][T10900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.664261][ T5947] usbhid 5-1:0.0: can't add hid device: -71 [ 539.665557][ T6235] usb 4-1: USB disconnect, device number 34 [ 539.670727][ T5947] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 539.695355][ T5947] usb 5-1: USB disconnect, device number 25 [ 540.364039][T10918] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1344'. [ 541.470710][T10932] set match dimension is over the limit! [ 542.870469][T10936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 545.019987][T10947] netlink: 'syz.3.1354': attribute type 10 has an invalid length. [ 545.030750][T10947] team0: Device ipvlan1 failed to register rx_handler [ 545.132142][ T977] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 545.175136][ T977] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 545.645159][T10966] 9pnet_fd: Insufficient options for proto=fd [ 546.977899][T10979] set match dimension is over the limit! [ 547.640413][T10992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 548.265092][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1366'. [ 548.912395][T11002] netlink: 'syz.1.1368': attribute type 1 has an invalid length. [ 550.597428][T11030] macsec0: left allmulticast mode [ 550.659862][ T5878] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 550.811727][ T5878] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.833111][ T5878] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 550.857089][ T5878] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 550.879916][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 550.923569][ T5878] usb 6-1: SerialNumber: syz [ 551.019438][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1378'. [ 551.038987][T11039] bridge_slave_1: left allmulticast mode [ 551.047051][T11039] bridge_slave_1: left promiscuous mode [ 551.057090][T11039] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.068979][T11039] bridge_slave_0: left allmulticast mode [ 551.106594][T11039] bridge_slave_0: left promiscuous mode [ 551.115129][T11039] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.155617][ T5878] usb 6-1: 0:2 : does not exist [ 551.161667][T11039] bond0: (slave bridge0): Releasing backup interface [ 551.205089][ T5878] usb 6-1: USB disconnect, device number 12 [ 551.541421][ T6302] udevd[6302]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.794591][T11044] cgroup: none used incorrectly [ 552.585490][T11051] tmpfs: Bad value for 'mpol' [ 553.273736][T11056] FAULT_INJECTION: forcing a failure. [ 553.273736][T11056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.353263][T11056] CPU: 1 UID: 0 PID: 11056 Comm: syz.5.1383 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 553.353295][T11056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 553.353316][T11056] Call Trace: [ 553.353324][T11056] [ 553.353333][T11056] dump_stack_lvl+0x241/0x360 [ 553.353370][T11056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.353404][T11056] ? __pfx__printk+0x10/0x10 [ 553.353442][T11056] should_fail_ex+0x424/0x570 [ 553.353479][T11056] _copy_to_user+0x31/0xb0 [ 553.353508][T11056] simple_read_from_buffer+0xc4/0x170 [ 553.353535][T11056] proc_fail_nth_read+0x1ef/0x260 [ 553.353564][T11056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 553.353592][T11056] ? rw_verify_area+0x246/0x630 [ 553.353610][T11056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 553.353637][T11056] vfs_read+0x21f/0xb90 [ 553.353661][T11056] ? __pfx___mutex_lock+0x10/0x10 [ 553.353684][T11056] ? __pfx_vfs_read+0x10/0x10 [ 553.353707][T11056] ? __fget_files+0x2a/0x420 [ 553.353733][T11056] ? __fget_files+0x39d/0x420 [ 553.353754][T11056] ? __fget_files+0x2a/0x420 [ 553.353788][T11056] ksys_read+0x19d/0x2d0 [ 553.353814][T11056] ? __pfx_ksys_read+0x10/0x10 [ 553.353840][T11056] ? do_syscall_64+0xb6/0x210 [ 553.353864][T11056] do_syscall_64+0xf3/0x210 [ 553.353885][T11056] ? clear_bhb_loop+0x45/0xa0 [ 553.353908][T11056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.353928][T11056] RIP: 0033:0x7fcab598cb7c [ 553.353946][T11056] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 553.353963][T11056] RSP: 002b:00007fcab6809030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 553.353996][T11056] RAX: ffffffffffffffda RBX: 00007fcab5bb5fa0 RCX: 00007fcab598cb7c [ 553.354009][T11056] RDX: 000000000000000f RSI: 00007fcab68090a0 RDI: 0000000000000004 [ 553.354021][T11056] RBP: 00007fcab6809090 R08: 0000000000000000 R09: 0000000000000000 [ 553.354032][T11056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.354043][T11056] R13: 0000000000000000 R14: 00007fcab5bb5fa0 R15: 00007ffc5d1bc848 [ 553.354073][T11056] [ 554.162845][T11071] syz.3.1389 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 555.782475][T11097] netlink: 'syz.4.1400': attribute type 4 has an invalid length. [ 555.845669][ T5968] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 555.998632][T11105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1402'. [ 556.009827][ T5968] usb 4-1: Using ep0 maxpacket: 32 [ 556.028557][ T5968] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 556.038518][T11105] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1402'. [ 556.060112][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.088518][ T5968] usb 4-1: Product: syz [ 556.100814][ T5968] usb 4-1: Manufacturer: syz [ 556.105651][ T5968] usb 4-1: SerialNumber: syz [ 556.128268][ T5968] usb 4-1: config 0 descriptor?? [ 556.161411][ T5968] as10x_usb: device has been detected [ 556.185219][ T5968] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 556.283599][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1408'. [ 556.298119][ T5968] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 556.426978][ T5968] as10x_usb: error during firmware upload part1 [ 556.474682][ T5968] Registered device Abilis Systems DVB-Titan [ 556.514792][ T5968] usb 4-1: USB disconnect, device number 35 [ 557.680440][ T5968] Unregistered device Abilis Systems DVB-Titan [ 557.716239][ T5968] as10x_usb: device has been disconnected [ 557.749368][T11132] netlink: 'syz.5.1411': attribute type 11 has an invalid length. [ 557.873430][T11134] netlink: 'syz.1.1412': attribute type 11 has an invalid length. [ 559.336531][T11150] syz.0.1417: attempt to access beyond end of device [ 559.336531][T11150] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 559.361932][ T5876] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 559.373049][T11150] efs: cannot read volume header [ 559.595946][ T5876] usb 6-1: config index 0 descriptor too short (expected 36, got 21) [ 559.655380][ T5876] usb 6-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 559.759637][ T5876] usb 6-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 559.861986][ T5876] usb 6-1: config 0 interface 0 has no altsetting 0 [ 559.901383][ T5876] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 559.950088][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.034418][ T5876] usb 6-1: config 0 descriptor?? [ 560.118146][ T5876] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 560.547434][T11146] loop8: detected capacity change from 0 to 7 [ 560.661750][T11146] Dev loop8: unable to read RDB block 7 [ 560.720618][T11146] loop8: unable to read partition table [ 561.690860][T11146] loop8: partition table beyond EOD, truncated [ 561.698097][T11146] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 561.698097][T11146] ) failed (rc=-5) [ 561.720447][T11153] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1418'. [ 561.989149][T11157] xt_CT: You must specify a L4 protocol and not use inversions on it [ 563.446224][T11159] input: syz1 as /devices/virtual/input/input16 [ 563.825710][ T5876] usb 6-1: USB disconnect, device number 13 [ 567.964979][T11172] netlink: 'syz.5.1424': attribute type 10 has an invalid length. [ 568.381419][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.233200][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1424'. [ 572.210094][T11174] bridge_slave_1: left allmulticast mode [ 572.215798][T11174] bridge_slave_1: left promiscuous mode [ 574.105802][T11174] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.257516][T11174] bridge_slave_0: left allmulticast mode [ 574.284277][T11174] bridge_slave_0: left promiscuous mode [ 574.301500][T11181] loop6: detected capacity change from 0 to 63 [ 574.324656][T11181] Buffer I/O error on dev loop6, logical block 0, async page read [ 574.325482][T11174] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.369208][T11181] Buffer I/O error on dev loop6, logical block 1, async page read [ 574.411279][T11181] Buffer I/O error on dev loop6, logical block 2, async page read [ 574.529294][T11174] bridge0 (unregistering): left promiscuous mode [ 574.550444][T11181] Buffer I/O error on dev loop6, logical block 3, async page read [ 574.623237][T11183] Buffer I/O error on dev loop6, logical block 0, async page read [ 574.649578][T11183] Buffer I/O error on dev loop6, logical block 1, async page read [ 574.680891][T11183] Buffer I/O error on dev loop6, logical block 2, async page read [ 574.688925][T11183] Buffer I/O error on dev loop6, logical block 3, async page read [ 574.752278][T11194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 575.114922][T11183] Buffer I/O error on dev loop6, logical block 0, async page read [ 575.123032][T11183] Buffer I/O error on dev loop6, logical block 1, async page read [ 575.234777][T11196] set match dimension is over the limit! [ 575.790799][T11199] netlink: 'syz.0.1430': attribute type 10 has an invalid length. [ 575.852177][T11199] bridge0: port 3(macsec0) entered blocking state [ 575.880265][T11199] bridge0: port 3(macsec0) entered disabled state [ 575.892851][T11199] macsec0: entered promiscuous mode [ 576.217316][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 576.226988][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 576.291755][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 576.326824][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 576.337010][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 576.455362][T11217] hsr0: entered promiscuous mode [ 576.472276][T11217] vlan3: entered promiscuous mode [ 577.231747][T11230] loop5: detected capacity change from 0 to 22359 [ 577.350433][T11231] loop5: detected capacity change from 22359 to 28007 [ 577.459169][T11229] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 578.008858][T11233] set match dimension is over the limit! [ 578.284923][ T13] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.363103][ T13] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.385095][T11236] tmpfs: Unknown parameter 'grquota_inode_hardlimit' [ 578.402051][ T55] Bluetooth: hci4: command tx timeout [ 578.457581][T11240] Invalid source name [ 578.598799][T11240] UBIFS error (pid: 11240): cannot open "./file0", error -22 [ 579.424884][T11256] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1446'. [ 579.460184][ T13] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.483860][ T13] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.517789][T11256] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1446'. [ 579.544080][T11256] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1446'. [ 579.564766][T11256] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 579.605112][ T13] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.618351][ T13] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.836248][T11262] netlink: 'syz.0.1447': attribute type 30 has an invalid length. [ 580.849380][ T13] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.874923][ T13] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.690112][ T55] Bluetooth: hci4: command tx timeout [ 582.971796][T11282] set match dimension is over the limit! [ 583.243835][ T13] macsec0: left allmulticast mode [ 583.275863][ T13] macsec0: left promiscuous mode [ 583.683751][ T13] bridge0: port 2(macsec0) entered disabled state [ 583.693468][T11292] netlink: 'syz.0.1455': attribute type 11 has an invalid length. [ 583.750375][ T55] Bluetooth: hci4: command tx timeout [ 583.885212][T11298] netlink: 'syz.5.1457': attribute type 10 has an invalid length. [ 583.966946][ T13] bridge_slave_0: left allmulticast mode [ 584.004636][ T13] bridge_slave_0: left promiscuous mode [ 584.020190][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.142488][T11305] set match dimension is over the limit! [ 584.699813][ T30] audit: type=1326 audit(1745294893.665:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11309 comm="syz.0.1460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f1158e169 code=0x0 [ 584.798369][T11311] Bluetooth: MGMT ver 1.23 [ 585.136475][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.145758][ T13] bond_slave_0: left allmulticast mode [ 585.159572][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.169328][ T13] bond_slave_1: left allmulticast mode [ 585.180562][ T13] bond0 (unregistering): Released all slaves [ 585.203965][T11287] ip6tnl1: entered promiscuous mode [ 585.209221][T11287] ip6tnl1: entered allmulticast mode [ 585.255308][T11209] chnl_net:caif_netlink_parms(): no params data found [ 585.516589][ T13] tipc: Left network mode [ 585.830056][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 585.869990][ T55] Bluetooth: hci4: command tx timeout [ 586.006280][ T9] usb 4-1: device descriptor read/64, error -71 [ 586.694423][T11209] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.721974][T11209] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.729242][T11209] bridge_slave_0: entered allmulticast mode [ 586.761753][T11209] bridge_slave_0: entered promiscuous mode [ 586.772590][T11209] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.779758][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 586.789999][T11209] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.797227][T11209] bridge_slave_1: entered allmulticast mode [ 586.815302][T11209] bridge_slave_1: entered promiscuous mode [ 586.845340][T11334] ip6tnl1: entered promiscuous mode [ 586.850671][T11334] ip6tnl1: entered allmulticast mode [ 586.940093][ T9] usb 4-1: device descriptor read/64, error -71 [ 587.070401][ T9] usb usb4-port1: attempt power cycle [ 587.147492][T11341] SET target dimension over the limit! [ 587.999839][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 588.038437][ T9] usb 4-1: device descriptor read/8, error -71 [ 588.117970][T11209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.130712][T11209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.168958][T11351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 588.327896][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 588.342241][T11209] team0: Port device team_slave_0 added [ 588.362298][ T9] usb 4-1: device descriptor read/8, error -71 [ 588.367214][T11209] team0: Port device team_slave_1 added [ 588.409384][ T13] hsr_slave_0: left promiscuous mode [ 588.424393][ T13] hsr_slave_1: left promiscuous mode [ 588.437728][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.464976][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.484112][ T9] usb usb4-port1: unable to enumerate USB device [ 588.494585][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.513876][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.604625][ T13] veth0_macvtap: left promiscuous mode [ 588.630674][ T13] veth1_vlan: left promiscuous mode [ 588.656370][ T13] veth0_vlan: left promiscuous mode [ 589.531194][T11381] set match dimension is over the limit! [ 590.964301][ T13] team0 (unregistering): Port device team_slave_1 removed [ 591.024087][ T13] team0 (unregistering): Port device team_slave_0 removed [ 592.099280][ T6235] infiniband syz1: ib_query_port failed (-19) [ 592.311275][T11209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.318286][T11209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.344409][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.391677][T11209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.406549][T11407] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1479'. [ 592.440579][T11209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.447662][T11209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.473626][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.537305][T11209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.933414][T11209] hsr_slave_0: entered promiscuous mode [ 592.953085][T11209] hsr_slave_1: entered promiscuous mode [ 592.960619][T11209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 592.968409][T11209] Cannot create hsr debugfs directory [ 593.178925][ T13] IPVS: stop unused estimator thread 0... [ 594.715052][T11452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 594.996197][T11438] set match dimension is over the limit! [ 595.235714][T11209] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 595.275177][T11458] netlink: 'syz.5.1490': attribute type 11 has an invalid length. [ 595.315330][T11209] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 595.553479][T11468] cifs: Unknown parameter 'h}# [ 595.553479][T11468] [bIT&:"1:ӭ'4,Zz-#F<]%gC [ 595.553479][T11468] SȘȞZ6' [ 595.558002][T11209] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 596.165701][T11209] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 596.488482][T11475] sctp: [Deprecated]: syz.3.1495 (pid 11475) Use of int in maxseg socket option. [ 596.488482][T11475] Use struct sctp_assoc_value instead [ 596.667739][T11486] misc userio: The device must be registered before sending interrupts [ 597.676839][T11209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.713051][T11209] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.782158][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.789395][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.876661][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.883863][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.030926][T11498] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.720417][T11507] netlink: 'syz.5.1504': attribute type 11 has an invalid length. [ 598.782313][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 598.792272][T11508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.219197][T11511] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1505'. [ 599.395095][T11498] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.063664][T11498] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.763111][T11498] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.900009][T11537] netlink: 'syz.1.1513': attribute type 1 has an invalid length. [ 601.951284][T11498] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.984914][T11537] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 602.028629][T11541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1512'. [ 602.059337][T11498] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.080853][T11498] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.100762][T11541] vlan3: entered promiscuous mode [ 602.106024][T11541] ip6gretap0: entered promiscuous mode [ 602.127946][T11498] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.159570][T11209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.259855][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 602.293934][T11552] netlink: 'syz.0.1516': attribute type 11 has an invalid length. [ 602.420286][ T9] usb 6-1: device descriptor read/64, error -71 [ 602.680120][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 602.896063][ T9] usb 6-1: device descriptor read/64, error -71 [ 603.107463][ T9] usb usb6-port1: attempt power cycle [ 603.484377][ T30] audit: type=1326 audit(1745294912.455:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11572 comm="syz.1.1521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52cb18e169 code=0x0 [ 603.577310][T11209] veth0_vlan: entered promiscuous mode [ 603.585044][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 603.625655][T11209] veth1_vlan: entered promiscuous mode [ 603.634104][ T9] usb 6-1: device descriptor read/8, error -71 [ 603.709408][T11209] veth0_macvtap: entered promiscuous mode [ 603.912719][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 604.152786][T11209] veth1_macvtap: entered promiscuous mode [ 604.177108][ T9] usb 6-1: device descriptor read/8, error -71 [ 604.189604][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.229902][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.247950][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.258863][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.281942][T11209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.300204][ T9] usb usb6-port1: unable to enumerate USB device [ 604.317914][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.366958][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.381284][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.392754][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.410518][T11209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.448537][T11209] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.482283][T11209] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.507849][T11599] mmap: syz.3.1525 (11599) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 604.525784][T11209] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.535281][T11209] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.794494][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.817987][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.893430][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.911052][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.081344][ T977] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 605.219614][T11624] program syz.5.1531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 605.342873][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.660006][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.694990][ T977] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 605.735667][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.773528][ T977] usb 4-1: config 0 descriptor?? [ 606.311519][ T977] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 606.318383][ T977] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 606.340447][ T977] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 606.350089][ T977] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 606.372706][ T977] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 606.379548][ T977] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 607.144844][ T977] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 607.165124][ T977] arvo 0003:1E7D:30D4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 607.421668][ T977] usb 4-1: USB disconnect, device number 40 [ 609.169894][T11670] misc userio: The device must be registered before sending interrupts [ 610.284865][T11683] lo: entered allmulticast mode [ 610.301250][T11683] tunl0: entered allmulticast mode [ 610.332977][T11683] gre0: entered allmulticast mode [ 610.396282][T11683] gretap0: entered allmulticast mode [ 610.460370][T11683] erspan0: entered allmulticast mode [ 610.578575][T11683] ip_vti0: entered allmulticast mode [ 610.612640][T11683] ip6_vti0: entered allmulticast mode [ 610.635882][T11683] sit0: entered allmulticast mode [ 610.655860][T11683] ip6tnl0: entered allmulticast mode [ 610.672855][T11683] ip6gre0: entered allmulticast mode [ 610.693391][T11683] syz_tun: entered allmulticast mode [ 610.724020][T11683] ip6gretap0: entered allmulticast mode [ 610.734208][T11683] vcan0: entered allmulticast mode [ 610.853853][T11683] bond0: entered allmulticast mode [ 610.876802][T11683] bond_slave_0: entered allmulticast mode [ 610.889208][T11683] bond_slave_1: entered allmulticast mode [ 610.990369][T11683] team0: entered allmulticast mode [ 610.995549][T11683] team_slave_0: entered allmulticast mode [ 611.060196][T11683] team_slave_1: entered allmulticast mode [ 611.087585][T11697] ufs: You didn't specify the type of your ufs filesystem [ 611.087585][T11697] [ 611.087585][T11697] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 611.087585][T11697] [ 611.087585][T11697] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 611.121340][T11697] ufs: ufstype=old is supported read-only [ 611.131543][T11697] ufs: ufs_fill_super(): bad magic number [ 611.298135][T11683] dummy0: entered allmulticast mode [ 611.616053][T11683] nlmon0: entered allmulticast mode [ 611.640627][T11683] caif0: entered allmulticast mode [ 611.646454][T11683] batadv0: entered allmulticast mode [ 611.673988][T11683] vxcan0: entered allmulticast mode [ 611.691548][T11683] vxcan1: entered allmulticast mode [ 611.698386][T11683] veth0: entered allmulticast mode [ 611.712356][T11683] veth1: entered allmulticast mode [ 611.761698][T11683] wg0: entered allmulticast mode [ 611.780964][T11683] wg1: entered allmulticast mode [ 611.825546][T11683] wg2: entered allmulticast mode [ 611.842519][T11683] veth0_to_bridge: entered allmulticast mode [ 611.857852][T11683] bridge_slave_0: entered allmulticast mode [ 611.871987][T11683] veth1_to_bridge: entered allmulticast mode [ 611.893097][T11683] bridge_slave_1: entered allmulticast mode [ 611.914841][T11683] veth0_to_bond: entered allmulticast mode [ 611.943590][T11683] veth1_to_bond: entered allmulticast mode [ 611.974110][T11683] veth0_to_team: entered allmulticast mode [ 611.998571][T11683] veth1_to_team: entered allmulticast mode [ 612.017981][T11683] veth0_to_batadv: entered allmulticast mode [ 612.043519][T11683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.060669][T11683] batadv_slave_0: entered allmulticast mode [ 612.085617][T11683] veth1_to_batadv: entered allmulticast mode [ 612.095828][T11683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.107489][T11683] batadv_slave_1: entered allmulticast mode [ 612.121595][T11683] xfrm0: entered allmulticast mode [ 612.142334][T11683] veth0_to_hsr: entered allmulticast mode [ 612.167523][T11683] hsr_slave_0: entered allmulticast mode [ 612.190867][T11683] veth1_to_hsr: entered allmulticast mode [ 612.198422][T11683] hsr_slave_1: entered allmulticast mode [ 612.212149][T11683] hsr0: entered allmulticast mode [ 612.222552][T11683] veth1_virt_wifi: entered allmulticast mode [ 612.235308][T11683] veth0_virt_wifi: entered allmulticast mode [ 612.244818][T11683] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 612.253452][T11683] veth1_vlan: entered allmulticast mode [ 612.263930][T11683] veth0_vlan: entered allmulticast mode [ 612.278675][T11683] vlan0: entered allmulticast mode [ 612.292070][T11683] vlan1: entered allmulticast mode [ 612.302603][T11683] macvlan0: entered allmulticast mode [ 612.315472][T11683] macvlan1: entered allmulticast mode [ 612.332065][T11683] ipvlan0: entered allmulticast mode [ 612.337577][T11683] ipvlan1: entered allmulticast mode [ 612.350901][T11683] veth1_macvtap: entered allmulticast mode [ 612.360330][T11683] veth0_macvtap: entered allmulticast mode [ 612.400083][T11683] macvtap0: entered allmulticast mode [ 612.407950][T11683] macsec0: entered allmulticast mode [ 612.428248][T11683] geneve0: entered allmulticast mode [ 612.443058][T11683] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.451645][T11683] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.460636][T11683] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.475811][T11683] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.492816][T11683] geneve1: entered allmulticast mode [ 612.514555][T11683] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 612.536425][T11683] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 612.546890][T11683] bond1: entered allmulticast mode [ 612.575105][T11683] gretap1: entered allmulticast mode [ 612.594207][T11683] vlan2: entered allmulticast mode [ 612.608540][T11683] ip6tnl1: left promiscuous mode [ 612.642762][T11683] netdevsim netdevsim3 eth0: entered allmulticast mode [ 612.660358][T11683] netdevsim netdevsim3 eth1: entered allmulticast mode [ 612.667677][T11683] netdevsim netdevsim3 eth2: entered allmulticast mode [ 612.688134][T11683] netdevsim netdevsim3 eth3: entered allmulticast mode [ 613.280273][T11732] SET target dimension over the limit! [ 614.464426][T11749] misc userio: The device must be registered before sending interrupts [ 615.700357][ T5906] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 616.041968][ T5906] usb 6-1: config 128 has an invalid interface number: 239 but max is 0 [ 616.065863][ T5906] usb 6-1: config 128 has no interface number 0 [ 616.076671][ T5906] usb 6-1: config 128 interface 239 has no altsetting 0 [ 616.085783][ T5906] usb 6-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=ac.44 [ 616.115918][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.201149][T11809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.541279][ T5906] usb 6-1: string descriptor 0 read error: -71 [ 618.566526][ T5906] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e [ 618.622737][ T5906] gspca_sn9c20x: Write register 1000 failed -71 [ 618.629127][ T5906] gspca_sn9c20x: Device initialization failed [ 618.735996][ T5906] gspca_sn9c20x 6-1:128.239: probe with driver gspca_sn9c20x failed with error -71 [ 618.824151][T11815] set match dimension is over the limit! [ 619.105187][ T5906] usb 6-1: USB disconnect, device number 18 [ 619.342714][T11821] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1569'. [ 620.407435][T11842] x_tables: ip_tables: osf match: only valid for protocol 6 [ 621.357833][T11848] netlink: 'syz.6.1575': attribute type 10 has an invalid length. [ 621.377133][T11848] batman_adv: batadv0: Adding interface: team0 [ 621.393618][T11848] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.686207][T11848] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 622.168960][T11871] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 622.178183][T11871] PKCS7: Only support pkcs7_signedData type [ 623.293343][T11878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1582'. [ 624.057198][T11879] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 625.004100][T11906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.140365][T11908] netlink: 'syz.3.1589': attribute type 1 has an invalid length. [ 625.434822][T11906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.650279][ T919] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 625.789606][T11913] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1591'. [ 625.853632][ T919] usb 6-1: unable to get BOS descriptor or descriptor too short [ 625.864544][ T919] usb 6-1: not running at top speed; connect to a high speed hub [ 625.900003][ T919] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 625.917310][ T919] usb 6-1: can't read configurations, error -61 [ 626.080029][ T919] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 626.259455][ T919] usb 6-1: unable to get BOS descriptor or descriptor too short [ 626.373002][ T919] usb 6-1: not running at top speed; connect to a high speed hub [ 626.648301][ T919] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 626.799911][ T919] usb 6-1: can't read configurations, error -61 [ 626.820166][ T919] usb usb6-port1: attempt power cycle [ 626.856602][T11922] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 626.875257][T11922] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 626.898944][T11922] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 626.980056][T11922] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 627.017876][T11939] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1595'. [ 627.048601][T11922] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 627.200111][ T919] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 627.234964][ T919] usb 6-1: unable to get BOS descriptor or descriptor too short [ 627.251775][ T919] usb 6-1: not running at top speed; connect to a high speed hub [ 627.278649][ T919] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 627.295365][ T919] usb 6-1: can't read configurations, error -61 [ 627.330164][ T977] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 627.490766][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 627.579816][ T919] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 627.589365][ T977] usb 4-1: config 0 interface 0 has no altsetting 0 [ 627.764322][ T977] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 627.774961][ T919] usb 6-1: unable to get BOS descriptor or descriptor too short [ 627.775632][ T919] usb 6-1: not running at top speed; connect to a high speed hub [ 627.869926][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.885411][ T977] usb 4-1: Product: syz [ 627.891265][ T977] usb 4-1: Manufacturer: syz [ 627.898863][ T977] usb 4-1: SerialNumber: syz [ 627.938707][ T919] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 627.941466][ T977] usb 4-1: config 0 descriptor?? [ 627.973211][ T919] usb 6-1: can't read configurations, error -61 [ 628.009833][ T919] usb usb6-port1: unable to enumerate USB device [ 628.312171][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 628.370314][ T977] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 628.457139][T11972] No such timeout policy "syz0" [ 628.799974][ T977] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 628.821937][ T977] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 628.950400][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 628.956508][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 629.239105][T11997] syzkaller1: entered promiscuous mode [ 629.297920][T11997] syzkaller1: entered allmulticast mode [ 629.407105][T12002] FAULT_INJECTION: forcing a failure. [ 629.407105][T12002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.420708][T12002] CPU: 0 UID: 0 PID: 12002 Comm: syz.6.1608 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 629.420738][T12002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 629.420751][T12002] Call Trace: [ 629.420760][T12002] [ 629.420768][T12002] dump_stack_lvl+0x241/0x360 [ 629.420804][T12002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.420832][T12002] ? __pfx__printk+0x10/0x10 [ 629.420873][T12002] should_fail_ex+0x424/0x570 [ 629.420909][T12002] _copy_from_user+0x2d/0xb0 [ 629.420936][T12002] do_sock_getsockopt+0x1d5/0x740 [ 629.420983][T12002] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 629.421009][T12002] ? __fget_files+0x2a/0x420 [ 629.421052][T12002] ? __fget_files+0x39d/0x420 [ 629.421074][T12002] ? __fget_files+0x2a/0x420 [ 629.421106][T12002] __x64_sys_getsockopt+0x233/0x310 [ 629.421135][T12002] ? irqentry_exit+0x63/0x90 [ 629.421152][T12002] ? lockdep_hardirqs_on+0x9d/0x150 [ 629.421176][T12002] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 629.421212][T12002] ? trace_irq_enable+0x2c/0x120 [ 629.421239][T12002] do_syscall_64+0xf3/0x210 [ 629.421260][T12002] ? clear_bhb_loop+0x45/0xa0 [ 629.421284][T12002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.421303][T12002] RIP: 0033:0x7f42de58e169 [ 629.421321][T12002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.421338][T12002] RSP: 002b:00007f42df35e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 629.421360][T12002] RAX: ffffffffffffffda RBX: 00007f42de7b6160 RCX: 00007f42de58e169 [ 629.421375][T12002] RDX: 0000000000000003 RSI: 000000000000011c RDI: 0000000000000006 [ 629.421394][T12002] RBP: 00007f42df35e090 R08: 0000200000000000 R09: 0000000000000000 [ 629.421407][T12002] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 629.421420][T12002] R13: 0000000000000001 R14: 00007f42de7b6160 R15: 00007ffc4d88e5f8 [ 629.421451][T12002] [ 629.622118][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.803789][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.749964][ T919] usb 4-1: USB disconnect, device number 41 [ 631.036804][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 631.931065][T12030] lo: left allmulticast mode [ 631.957752][T12030] tunl0: left allmulticast mode [ 631.977126][T12030] gre0: left allmulticast mode [ 631.992545][T12030] gretap0: left allmulticast mode [ 631.997985][T12030] erspan0: left allmulticast mode [ 632.048702][T12030] ip_vti0: left allmulticast mode [ 632.071462][T12030] ip6_vti0: left allmulticast mode [ 632.107394][T12030] sit0: left allmulticast mode [ 632.136586][T12030] ip6tnl0: left allmulticast mode [ 632.167757][T12030] ip6gre0: left allmulticast mode [ 632.193346][T12030] syz_tun: left allmulticast mode [ 632.217244][T12030] ip6gretap0: left allmulticast mode [ 632.239426][T12030] vcan0: left allmulticast mode [ 632.263225][T12030] bond0: left allmulticast mode [ 632.278642][T12030] team0: left allmulticast mode [ 632.298737][T12030] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578 [ 632.330769][T12030] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 12030, name: syz.1.1614 [ 632.357300][T12030] preempt_count: 0, expected: 0 [ 632.372989][T12030] RCU nest depth: 1, expected: 0 [ 632.378868][T12030] 2 locks held by syz.1.1614/12030: [ 632.386984][T12030] #0: ffffffff900eb308 (rtnl_mutex [ 632.398290][T12043] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 632.414414][T12030] ){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 632.428429][T12030] #1: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 632.451603][T12030] CPU: 0 UID: 0 PID: 12030 Comm: syz.1.1614 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 632.451631][T12030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 632.451644][T12030] Call Trace: [ 632.451652][T12030] [ 632.451660][T12030] dump_stack_lvl+0x241/0x360 [ 632.451695][T12030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.451758][T12030] __might_resched+0x558/0x6c0 [ 632.451793][T12030] ? __wake_up_klogd+0x1c/0x110 [ 632.451817][T12030] ? __pfx___might_resched+0x10/0x10 [ 632.451847][T12030] ? __pfx_vprintk_emit+0x10/0x10 [ 632.451882][T12030] __mutex_lock+0x12c/0x10c0 [ 632.451909][T12030] ? _printk+0xd5/0x120 [ 632.451940][T12030] ? dev_set_allmulti+0x11c/0x270 [ 632.451971][T12030] ? __pfx___mutex_lock+0x10/0x10 [ 632.451994][T12030] ? __lock_acquire+0xad5/0xd80 [ 632.452027][T12030] ? mutex_is_locked+0x17/0x50 [ 632.452055][T12030] ? rtnl_is_locked+0x15/0x20 [ 632.452111][T12030] dev_set_allmulti+0x11c/0x270 [ 632.452147][T12030] team_change_rx_flags+0x1a8/0x330 [ 632.452178][T12030] ? team_change_rx_flags+0x29/0x330 [ 632.452211][T12030] ? __pfx_team_change_rx_flags+0x10/0x10 [ 632.452241][T12030] netif_set_allmulti+0x20e/0x380 [ 632.452280][T12030] __dev_change_flags+0x57b/0x700 [ 632.452316][T12030] ? __pfx___dev_change_flags+0x10/0x10 [ 632.452343][T12030] ? validate_linkmsg+0x82a/0xa40 [ 632.452365][T12030] ? netif_state_change+0xb1/0x1b0 [ 632.452389][T12030] ? __pfx_netif_state_change+0x10/0x10 [ 632.452415][T12030] ? __pfx_validate_linkmsg+0x10/0x10 [ 632.452440][T12030] netif_change_flags+0x8b/0x1a0 [ 632.452480][T12030] do_setlink+0xee3/0x4390 [ 632.452521][T12030] ? stack_trace_save+0x11a/0x1d0 [ 632.452546][T12030] ? __pfx_stack_trace_save+0x10/0x10 [ 632.452576][T12030] ? __pfx_do_setlink+0x10/0x10 [ 632.452609][T12030] ? __lock_acquire+0xad5/0xd80 [ 632.452649][T12030] ? __pfx___mutex_trylock_common+0x10/0x10 [ 632.452675][T12030] ? rcu_is_watching+0x15/0xb0 [ 632.452695][T12030] ? trace_contention_end+0x3c/0x120 [ 632.452715][T12030] ? __mutex_lock+0x380/0x10c0 [ 632.452749][T12030] ? rcu_is_watching+0x15/0xb0 [ 632.452766][T12030] ? rtnl_newlink+0xd68/0x1fe0 [ 632.452792][T12030] ? __pfx___mutex_lock+0x10/0x10 [ 632.452814][T12030] ? safesetid_security_capable+0xb2/0x1d0 [ 632.452850][T12030] ? ns_capable+0x8a/0xf0 [ 632.452882][T12030] ? rtnl_link_get_net_capable+0x168/0x340 [ 632.452915][T12030] rtnl_newlink+0x1619/0x1fe0 [ 632.452960][T12030] ? __pfx_rtnl_newlink+0x10/0x10 [ 632.452995][T12030] ? __lock_acquire+0xad5/0xd80 [ 632.453029][T12030] ? __lock_acquire+0xad5/0xd80 [ 632.453061][T12030] ? __lock_acquire+0xad5/0xd80 [ 632.453115][T12030] ? is_bpf_text_address+0x26/0x2a0 [ 632.453145][T12030] ? 0xffffffffa0000958 [ 632.453165][T12030] ? is_bpf_text_address+0x288/0x2a0 [ 632.453191][T12030] ? is_bpf_text_address+0x26/0x2a0 [ 632.453220][T12030] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 632.453244][T12030] ? kernel_text_address+0xa7/0xe0 [ 632.453270][T12030] ? __kernel_text_address+0xd/0x40 [ 632.453295][T12030] ? unwind_get_return_address+0x4d/0x90 [ 632.453320][T12030] ? arch_stack_walk+0xff/0x150 [ 632.453355][T12030] ? __lock_acquire+0xad5/0xd80 [ 632.453406][T12030] ? __pfx_rtnl_newlink+0x10/0x10 [ 632.453433][T12030] rtnetlink_rcv_msg+0x80f/0xd70 [ 632.453457][T12030] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 632.453488][T12030] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 632.453511][T12030] ? __lock_acquire+0xad5/0xd80 [ 632.453556][T12030] netlink_rcv_skb+0x208/0x480 [ 632.453583][T12030] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 632.453611][T12030] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 632.453656][T12030] ? netlink_deliver_tap+0x2e/0x1b0 [ 632.453684][T12030] ? netlink_deliver_tap+0x2e/0x1b0 [ 632.453712][T12030] netlink_unicast+0x7f8/0x9a0 [ 632.453744][T12030] ? __pfx_netlink_unicast+0x10/0x10 [ 632.453770][T12030] ? skb_put+0x114/0x1f0 [ 632.453805][T12030] netlink_sendmsg+0x8c3/0xcd0 [ 632.453845][T12030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.453887][T12030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.453910][T12030] __sock_sendmsg+0x221/0x270 [ 632.453939][T12030] ____sys_sendmsg+0x523/0x860 [ 632.453981][T12030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 632.454016][T12030] ? __fget_files+0x2a/0x420 [ 632.454046][T12030] ? __fget_files+0x2a/0x420 [ 632.454082][T12030] __sys_sendmsg+0x271/0x360 [ 632.454129][T12030] ? __pfx___sys_sendmsg+0x10/0x10 [ 632.454227][T12030] ? do_syscall_64+0xb6/0x210 [ 632.454253][T12030] do_syscall_64+0xf3/0x210 [ 632.454275][T12030] ? clear_bhb_loop+0x45/0xa0 [ 632.454300][T12030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.454321][T12030] RIP: 0033:0x7f52cb18e169 [ 632.454338][T12030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.454356][T12030] RSP: 002b:00007f52cc0e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.454377][T12030] RAX: ffffffffffffffda RBX: 00007f52cb3b5fa0 RCX: 00007f52cb18e169 [ 632.454393][T12030] RDX: 0000000000000014 RSI: 0000200000000140 RDI: 0000000000000003 [ 632.454406][T12030] RBP: 00007f52cb210a68 R08: 0000000000000000 R09: 0000000000000000 [ 632.454419][T12030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.454431][T12030] R13: 0000000000000000 R14: 00007f52cb3b5fa0 R15: 00007fff1d7e6408 [ 632.454465][T12030] [ 632.454904][T12030] [ 632.970600][T12030] ============================= [ 632.975454][T12030] [ BUG: Invalid wait context ] [ 632.980295][T12030] 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 Tainted: G W [ 632.988954][T12030] ----------------------------- [ 632.993789][T12030] syz.1.1614/12030 is trying to lock: [ 632.999152][T12030] ffff888078494d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_allmulti+0x11c/0x270 [ 633.009270][T12030] other info that might help us debug this: [ 633.015144][T12030] context-{5:5} [ 633.018588][T12030] 2 locks held by syz.1.1614/12030: [ 633.023773][T12030] #0: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 633.032837][T12030] #1: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 633.042702][T12030] stack backtrace: [ 633.046433][T12030] CPU: 0 UID: 0 PID: 12030 Comm: syz.1.1614 Tainted: G W 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 633.046460][T12030] Tainted: [W]=WARN [ 633.046466][T12030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 633.046490][T12030] Call Trace: [ 633.046496][T12030] [ 633.046503][T12030] dump_stack_lvl+0x241/0x360 [ 633.046530][T12030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.046552][T12030] ? __pfx__printk+0x10/0x10 [ 633.046576][T12030] __lock_acquire+0xc30/0xd80 [ 633.046602][T12030] lock_acquire+0x116/0x2f0 [ 633.046622][T12030] ? dev_set_allmulti+0x11c/0x270 [ 633.046651][T12030] __mutex_lock+0x1a5/0x10c0 [ 633.046667][T12030] ? dev_set_allmulti+0x11c/0x270 [ 633.046691][T12030] ? _printk+0xd5/0x120 [ 633.046731][T12030] ? dev_set_allmulti+0x11c/0x270 [ 633.046754][T12030] ? __pfx___mutex_lock+0x10/0x10 [ 633.046771][T12030] ? __lock_acquire+0xad5/0xd80 [ 633.046794][T12030] ? mutex_is_locked+0x17/0x50 [ 633.046821][T12030] ? rtnl_is_locked+0x15/0x20 [ 633.046862][T12030] dev_set_allmulti+0x11c/0x270 [ 633.046886][T12030] team_change_rx_flags+0x1a8/0x330 [ 633.046911][T12030] ? team_change_rx_flags+0x29/0x330 [ 633.046935][T12030] ? __pfx_team_change_rx_flags+0x10/0x10 [ 633.046958][T12030] netif_set_allmulti+0x20e/0x380 [ 633.046985][T12030] __dev_change_flags+0x57b/0x700 [ 633.047021][T12030] ? __pfx___dev_change_flags+0x10/0x10 [ 633.047041][T12030] ? validate_linkmsg+0x82a/0xa40 [ 633.047070][T12030] ? netif_state_change+0xb1/0x1b0 [ 633.047087][T12030] ? __pfx_netif_state_change+0x10/0x10 [ 633.047105][T12030] ? __pfx_validate_linkmsg+0x10/0x10 [ 633.047122][T12030] netif_change_flags+0x8b/0x1a0 [ 633.047145][T12030] do_setlink+0xee3/0x4390 [ 633.047180][T12030] ? stack_trace_save+0x11a/0x1d0 [ 633.047196][T12030] ? __pfx_stack_trace_save+0x10/0x10 [ 633.047213][T12030] ? __pfx_do_setlink+0x10/0x10 [ 633.047234][T12030] ? __lock_acquire+0xad5/0xd80 [ 633.047256][T12030] ? __pfx___mutex_trylock_common+0x10/0x10 [ 633.047271][T12030] ? rcu_is_watching+0x15/0xb0 [ 633.047284][T12030] ? trace_contention_end+0x3c/0x120 [ 633.047297][T12030] ? __mutex_lock+0x380/0x10c0 [ 633.047315][T12030] ? rcu_is_watching+0x15/0xb0 [ 633.047327][T12030] ? rtnl_newlink+0xd68/0x1fe0 [ 633.047344][T12030] ? __pfx___mutex_lock+0x10/0x10 [ 633.047358][T12030] ? safesetid_security_capable+0xb2/0x1d0 [ 633.047380][T12030] ? ns_capable+0x8a/0xf0 [ 633.047401][T12030] ? rtnl_link_get_net_capable+0x168/0x340 [ 633.047423][T12030] rtnl_newlink+0x1619/0x1fe0 [ 633.047446][T12030] ? __pfx_rtnl_newlink+0x10/0x10 [ 633.047467][T12030] ? __lock_acquire+0xad5/0xd80 [ 633.047487][T12030] ? __lock_acquire+0xad5/0xd80 [ 633.047506][T12030] ? __lock_acquire+0xad5/0xd80 [ 633.047547][T12030] ? is_bpf_text_address+0x26/0x2a0 [ 633.047569][T12030] ? 0xffffffffa0000958 [ 633.047581][T12030] ? is_bpf_text_address+0x288/0x2a0 [ 633.047601][T12030] ? is_bpf_text_address+0x26/0x2a0 [ 633.047621][T12030] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 633.047638][T12030] ? kernel_text_address+0xa7/0xe0 [ 633.047658][T12030] ? __kernel_text_address+0xd/0x40 [ 633.047675][T12030] ? unwind_get_return_address+0x4d/0x90 [ 633.047693][T12030] ? arch_stack_walk+0xff/0x150 [ 633.047714][T12030] ? __lock_acquire+0xad5/0xd80 [ 633.047741][T12030] ? __pfx_rtnl_newlink+0x10/0x10 [ 633.047760][T12030] rtnetlink_rcv_msg+0x80f/0xd70 [ 633.047778][T12030] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 633.047798][T12030] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 633.047818][T12030] ? __lock_acquire+0xad5/0xd80 [ 633.047843][T12030] netlink_rcv_skb+0x208/0x480 [ 633.047862][T12030] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 633.047882][T12030] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 633.047906][T12030] ? netlink_deliver_tap+0x2e/0x1b0 [ 633.047925][T12030] ? netlink_deliver_tap+0x2e/0x1b0 [ 633.047945][T12030] netlink_unicast+0x7f8/0x9a0 [ 633.047965][T12030] ? __pfx_netlink_unicast+0x10/0x10 [ 633.047982][T12030] ? skb_put+0x114/0x1f0 [ 633.048005][T12030] netlink_sendmsg+0x8c3/0xcd0 [ 633.048028][T12030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.048057][T12030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.048075][T12030] __sock_sendmsg+0x221/0x270 [ 633.048094][T12030] ____sys_sendmsg+0x523/0x860 [ 633.048120][T12030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 633.048142][T12030] ? __fget_files+0x2a/0x420 [ 633.048162][T12030] ? __fget_files+0x2a/0x420 [ 633.048183][T12030] __sys_sendmsg+0x271/0x360 [ 633.048208][T12030] ? __pfx___sys_sendmsg+0x10/0x10 [ 633.048251][T12030] ? do_syscall_64+0xb6/0x210 [ 633.048286][T12030] do_syscall_64+0xf3/0x210 [ 633.048303][T12030] ? clear_bhb_loop+0x45/0xa0 [ 633.048321][T12030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.048338][T12030] RIP: 0033:0x7f52cb18e169 [ 633.048353][T12030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.048367][T12030] RSP: 002b:00007f52cc0e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.048385][T12030] RAX: ffffffffffffffda RBX: 00007f52cb3b5fa0 RCX: 00007f52cb18e169 [ 633.048397][T12030] RDX: 0000000000000014 RSI: 0000200000000140 RDI: 0000000000000003 [ 633.048408][T12030] RBP: 00007f52cb210a68 R08: 0000000000000000 R09: 0000000000000000 [ 633.048419][T12030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.048429][T12030] R13: 0000000000000000 R14: 00007f52cb3b5fa0 R15: 00007fff1d7e6408 [ 633.048448][T12030] [ 633.714746][T12030] dummy0: left allmulticast mode [ 633.724231][T12030] nlmon0: left allmulticast mode [ 633.729249][T12030] caif0: left allmulticast mode [ 633.734202][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 633.743625][T12030] veth0: left allmulticast mode [ 633.749490][T12030] veth1: left allmulticast mode [ 633.761258][T12030] wg0: left allmulticast mode [ 634.120902][T12030] wg1: left allmulticast mode [ 634.125733][T12030] wg2: left allmulticast mode [ 634.130602][T12030] veth0_to_bridge: left allmulticast mode [ 634.142655][T12030] veth1_to_bridge: left allmulticast mode [ 634.149014][T12030] veth0_to_bond: left allmulticast mode [ 634.156778][T12030] bond_slave_0: left allmulticast mode [ 634.163187][T12030] veth1_to_bond: left allmulticast mode [ 634.169882][T12030] bond_slave_1: left allmulticast mode [ 634.175522][T12030] veth0_to_team: left allmulticast mode [ 634.182545][T12030] team_slave_0: left allmulticast mode [ 634.188112][T12030] veth1_to_team: left allmulticast mode [ 634.193992][T12030] team_slave_1: left allmulticast mode [ 634.202225][T12030] veth0_to_batadv: left allmulticast mode [ 634.208062][T12030] batadv_slave_0: left allmulticast mode [ 634.214098][T12030] veth1_to_batadv: left allmulticast mode [ 634.221264][T12030] batadv_slave_1: left allmulticast mode [ 634.227084][T12030] xfrm0: left allmulticast mode [ 634.233040][T12030] veth0_to_hsr: left allmulticast mode [ 634.238718][T12030] veth1_to_hsr: left allmulticast mode [ 634.244648][T12030] hsr0: left allmulticast mode [ 634.249428][T12030] hsr_slave_0: left allmulticast mode [ 634.255545][T12030] hsr_slave_1: left allmulticast mode [ 634.261144][T12030] veth1_virt_wifi: left allmulticast mode [ 634.267038][T12030] veth0_virt_wifi: left allmulticast mode [ 634.273200][T12030] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 634.280519][T12030] veth1_vlan: left allmulticast mode [ 634.285988][T12030] vlan0: left allmulticast mode [ 634.291071][T12030] vlan1: left allmulticast mode [ 634.296120][T12030] macvlan0: left allmulticast mode [ 634.301562][T12030] macvlan1: left allmulticast mode [ 634.306852][T12030] ipvlan0: left allmulticast mode [ 634.312857][T12030] ipvlan1: left allmulticast mode [ 634.317903][T12030] veth0_vlan: left allmulticast mode [ 634.323385][T12030] veth1_macvtap: left allmulticast mode [ 634.329046][T12030] veth0_macvtap: left allmulticast mode [ 634.334935][T12030] macvtap0: left allmulticast mode [ 634.340368][T12030] geneve1: left allmulticast mode [ 634.345572][T12030] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 634.353895][T12030] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 634.361104][T12030] batadv0.5: left allmulticast mode [ 634.366314][T12030] batadv0: left allmulticast mode [ 634.371700][T12030] vlan2: left allmulticast mode [ 634.376556][T12030] bridge0: left allmulticast mode [ 634.381815][T12030] sit1: left allmulticast mode [ 634.386873][T12030] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 634.395751][T12030] ip6tnl1: left promiscuous mode [ 634.400921][T12030] ip6tnl1: left allmulticast mode [ 634.410468][T12055] ip6tnl1: entered promiscuous mode [ 634.415694][T12055] ip6tnl1: entered allmulticast mode [ 635.749986][ T55] Bluetooth: hci4: command 0x0c1a tx timeout